@nosslabs/iap 5.0.0 → 7.0.0

package/CHANGELOG.md

@@ -5,22 +5,117 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); version
 
 ## [Unreleased]
 
-## [5.0.0] — 2026-05-14
+## [7.0.0] — 2026-05-14
+
+**GA of the Capacitor 7+ line.** `@latest` on npm moves from `5.0.0`
+(Cap-5 maintenance) to `7.0.0` (Cap-7+). Cap-5 consumers stay on
+`5.x` — `^5` ranges don't auto-resolve to `7.x`. The `5.x` maintenance
+branch continues to receive patches.
+
+### Changed (BREAKING, vs `5.0.0` — bundled with the Cap-5→Cap-7 swap)
+
+- **EventMap pruning.** Removed two events from the public
+  `EventMap` that were declared but never emitted in any prior
+  release: `'price-stale'` and `'error'`. Subscriptions to either
+  never fired, so no runtime behavior changes — only consumers who
+  had `iap.on('price-stale', …)` or `iap.on('error', …)` in their
+  TypeScript code need to remove those calls. The
+  `'recovery-dropped-permanent'` event (introduced in 0.4 / `5.0.0`)
+  remains.
+- `IAPErrorOptions` is now file-local (was wrongly exported from
+  `src/lib/errors.ts` but never re-exported through `src/index.ts`,
+  so no consumer had access to it). No package-root-exported symbol
+  changes.
+
+### Added
+
+- **`AppUserIdFetcherContext`** is now re-exported from the package
+  root, so a separately-defined async fetcher can be typed
+  explicitly:
+
+  ```ts
+  import type { AppUserIdFetcherContext } from '@nosslabs/iap';
+
+  const fetchUuid = async ({ authHeaders }: AppUserIdFetcherContext) => {
+    const r = await fetch('/api/iap/uuid', { method: 'POST', headers: authHeaders });
+    return (await r.json()).uuid;
+  };
+  ```
+
+### Fixed (since `7.0.0-next.0`)
+
+- **iOS `Cannot find product for id <id>` now maps to
+  `PRODUCT_NOT_FOUND`** (previously fell through to `STORE_ERROR`).
+  The capgo plugin uses two different messages for the same
+  semantic on iOS vs Android; the adapter now handles both.
+- **`refresh()` is safe to detach from the IAP instance.** Internal
+  callbacks no longer reference `this.refresh()`, so
+  `const { refresh } = iap;` works without a strict-mode `this`
+  binding error. Regression test added.
+
+### Notes
+
+- Adapter JSDoc for `getOwnedTransactions()` now documents an iOS
+  quirk worth knowing: `@capgo/native-purchases`'s `getPurchases()`
+  bundles `Transaction.currentEntitlements` *plus* `Transaction.all`
+  (historical + revoked subscriptions). Android-side PENDING
+  purchases are filtered out (`purchaseState !== '1'`); iOS-side
+  historical transactions are not filtered and pass through to the
+  backend's `/restore` endpoint. Attesto evaluates each receipt and
+  returns per-transaction validity, so this is the documented
+  contract.
+- Android user-cancellation reminder (carried from `7.0.0-next.0`):
+  Google Play Billing collapses user-cancel and other billing
+  errors into the same plugin rejection, so an Android cancel
+  surfaces as `status: 'failed'` rather than `'cancelled'`. iOS
+  still distinguishes reliably.
+
+## [7.0.0-next.0] — 2026-05-14
+
+First release of the **Capacitor 7+** line, published on the `@next`
+npm dist-tag. The Capacitor 5 line continues as `5.x` on `@latest`
+(from the `5.x` branch) — see [Migration](https://iap.nossdev.com/migration/).
+
+Numbering: the library's major version tracks the Capacitor major it
+targets (the convention `@capgo/native-purchases` and Ionic plugins
+use). What was framed as `1.0.0-next.0` during development is published
+as `7.0.0-next.0` for the same reason `5.0.0` superseded `0.4.0` on
+the maintenance line — same code, version aligned with the platform.
 
 ### Changed
 
-- **Renumbered the Capacitor 5 line from `0.x` to `5.x`** so the
-  library's major version tracks the Capacitor major it targets
-  (matching the convention `@capgo/native-purchases`, Ionic plugins,
-  and most platform-aligned ecosystems use). **No code changes vs
-  `0.4.0`** — the published tarball is functionally identical.
-  Consumers: bump your dependency `^0.4.0` → `^5.0.0`. Nothing else
-  needs to change.
-
-The Capacitor 7+ line is published on the `@next` dist-tag as `7.x`
-(currently `7.0.0-next.0` prerelease). See [Migration](https://iap.nossdev.com/migration/)
-when you're ready to move to Capacitor 7. The `5.x` line on this
-branch (`5.x`) continues to receive Capacitor-5 patches.
+- **BREAKING: dropped Capacitor 5 support.** The `7.x` line targets
+  **Capacitor 7+** (also runs on Capacitor 8) via
+  [`@capgo/native-purchases`](https://github.com/Cap-go/native-purchases),
+  replacing `cordova-plugin-purchase`. The native adapter now lives at
+  `src/adapters/native/capgo/native-adapter.ts` (`CapgoNativeAdapter`),
+  selected behind the same `NativeAdapter` interface as before.
+- **Peer dependencies** are now `@capacitor/core`, `@capacitor/preferences`,
+  and (optional) `@capacitor/app` at `^7.0.0 || ^8.0.0`, plus
+  `@capgo/native-purchases` at `7.16.x || ^8.0.0`. `cordova-plugin-purchase`
+  is no longer a peer dependency. Migration is a peer-dep swap + `npx cap sync`
+  — no changes to your `createIAP({ ... })` config or any consumer code.
+- **Acknowledgement defers on both platforms.** `@capgo/native-purchases`
+  supports `autoAcknowledgePurchases: false` on iOS and Android, so the
+  "never grant entitlement before the backend confirms" guarantee holds
+  with no iOS-specific finish-before-verify race.
+- **Android user-cancellation surfaces as `status: 'failed'`** (not
+  `'cancelled'`). Google Play Billing — at the level `@capgo/native-purchases`
+  exposes — doesn't distinguish a user-cancelled flow from other purchase
+  failures; iOS still reports `'cancelled'` reliably. Treat `failed` on
+  Android the same as `cancelled` for UX. (The Capacitor 5 line via
+  `cordova-plugin-purchase` could distinguish this.)
+
+### Unchanged
+
+- Public API surface: `createIAP`, the `IAP` interface, all events, all
+  `IAPErrorCode` values, and every public type are identical to `5.0.0`
+  (= `0.4.0` code).
+- The full `0.2`–`0.4` feature set carries forward: the options-object
+  `purchase()` signature, optional `appUserId` pre-attachment, the
+  `INVALID_APP_USER_ID` / `APP_USER_ID_FETCH_FAILED` error codes, the
+  `permanentErrorCodes` config, the `recovery-dropped-permanent` event,
+  and `RecoveryResult.droppedPermanent`.
 
 ## [0.4.0] — 2026-05-08
 

package/README.md

@@ -2,10 +2,10 @@
 
 > Thin Capacitor IAP orchestrator. Server-side validation via [Attesto](https://attesto.nossdev.com).
 
-**Status: `5.x` — the Capacitor 5 maintenance line on the `@latest` dist-tag.** Renumbered from `0.4.x` to track the Capacitor major (same code, new number). The Capacitor 7+ line is `7.x` on the `@next` dist-tag (still prerelease — see [Migration](https://iap.nossdev.com/migration/)). Pin the minor (`^5.0.0`) and watch the [CHANGELOG](./CHANGELOG.md).
+**Status: `7.0.0` — GA on `@latest`** (the Capacitor 7+ line, built on `@capgo/native-purchases`). The Capacitor 5 line (`cordova-plugin-purchase`) continues as `5.x` from the `5.x` branch — `^5` ranges still resolve to `5.x`. See the [CHANGELOG](./CHANGELOG.md) for the GA delta and [Migration](https://iap.nossdev.com/migration/) for upgrading from `5.x`.
 
 ```bash
-npm install @nosslabs/iap cordova-plugin-purchase
+npm install @nosslabs/iap @capgo/native-purchases
 npx cap sync
 ```
 
@@ -65,9 +65,9 @@ await iap.purchase({
 
 `@nosslabs/iap` does **one thing**: orchestrate the purchase flow on the client. It
 
-- wraps `cordova-plugin-purchase` for native purchase + restore,
+- wraps [`@capgo/native-purchases`](https://github.com/Cap-go/native-purchases) for native purchase + restore,
 - POSTs to **your** backend (which calls Attesto) for receipt validation,
-- acknowledges native transactions only **after** the backend confirms (no phantom grants),
+- acknowledges native transactions only **after** the backend confirms — `autoAcknowledgePurchases: false` defers finishing on **both** iOS and Android, so there's no phantom grant and no iOS finish-before-verify race,
 - caches entitlements locally for instant, reactive UI reads,
 - recovers unfinished transactions across app launches.
 
@@ -77,8 +77,8 @@ It does **not**: talk to Attesto directly, define entitlement business logic, ma
 
 | `@nosslabs/iap` | Capacitor | Native plugin | dist-tag | Status |
 |---|---|---|---|---|
-| 5.x | 5.x | `cordova-plugin-purchase ^13.x` | `@latest` | **Current (this branch)** |
-| 7.x | 7.x (also runs on 8.x) | `@capgo/native-purchases` | `@next` | Prerelease |
+| 7.x | 7.x (also runs on 8.x) | `@capgo/native-purchases 7.16.x` (or `^8` on Cap 8) | `@latest` | **Current** |
+| 5.x | 5.x | `cordova-plugin-purchase ^13.x` | (pinned via `^5`) | Maintenance |
 
 ## Optional peer dependency
 
@@ -94,7 +94,7 @@ Or disable the listener with `options.refreshOnResume: false`. See [installation
 ## Development
 
 ```bash
-mise install        # Node 22 + npm 10
+mise install        # Node 22 + npm 11 (pinned in mise.toml)
 npm install
 npm run typecheck   # tsc --noEmit
 npm run lint        # biome check