@nosslabs/iap 7.1.0 → 8.0.0

package/CHANGELOG.md

@@ -5,6 +5,125 @@ Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); version
 
 ## [Unreleased]
 
+## [8.0.0] — 2026-09-04
+
+**The Capacitor 8 line graduates to `@latest`.** `8.0.0-next.0` soaked on the
+`@next` dist-tag from 2026-08-17, was exercised against the iOS and Android
+store sandboxes, and reported no regressions; this promotes that same code to
+general availability. `@latest` moves from `7.1.0` to `8.0.0`.
+
+There are **no functional changes since `8.0.0-next.0`**; see that entry below
+for the full delta against `7.1.0`. In short, moving from `7.1.0` is a
+peer-dependency bump plus `npx cap sync`, with no consumer code changes: the
+`createIAP({ ... })` config, the `IAP` surface, the event map, the error codes
+and the backend contract are unchanged.
+
+**Staying on Capacitor 7?**
+A bare `npm install @nosslabs/iap` now resolves to the Capacitor 8 line. Pin
+`@nosslabs/iap@^7` (or the `@latest-7` dist-tag) with
+`@capgo/native-purchases@lts-v7` to stay on Capacitor 7. The `7.x` line
+continues from the `7.x` branch, and its documentation is archived at
+<https://iap.nossdev.com/v7/>.
+
+### Changed
+
+- **Dist-tags rearranged for the rollover.** `@latest` → `8.0.0` (applied by the
+  release workflow). The auxiliary pointers are applied by hand immediately
+  after publish: the new `@latest-8` pins the Capacitor 8 line, and `@next` is
+  re-pointed at `8.0.0` so it does not sit on a superseded prerelease.
+  `@latest-7` continues to track `7.1.0` and `@latest-5` tracks `5.0.0`.
+- **Corrected a stale doc comment on `VERSION`.** The published `8.0.0-next.0`
+  type declarations described `VERSION` as being "read at runtime by the logger
+  so error reports include the version". That was never true — `src/lib/logger.ts`
+  uses a fixed `[@nosslabs/iap]` prefix. `VERSION` is exported purely for
+  consumers to read. Consumer-visible only on IDE hover; no behaviour change.
+
+### Added
+
+- **Versioned documentation for the `7.x` line** at `/v7/`, a frozen snapshot
+  taken at `7.1.0` and reachable from the site's version switcher, mirroring the
+  existing `/v5/` archive. Install commands there pin `@^7` throughout, since
+  `@latest` no longer resolves to Capacitor 7.
+
+### Internal
+
+Not part of the published package; recorded for contributors.
+
+- **A release gate that loads the built bundle.** CI and the release workflow now
+  import `dist/index.cjs` and `dist/index.js` and assert that `VERSION` matches
+  `package.json`. The build-time `__PKG_VERSION__` define is otherwise
+  unguarded: removing it leaves typecheck, lint, tests and the build all green
+  while shipping a bundle that throws `ReferenceError` on import. CI also runs
+  `test:coverage` now, so the 80% thresholds are actually enforced.
+- **The docs version switcher is built from one shared table**
+  (`docs/.vitepress/versions.ts`). `theme/Layout.vue` overwrites `themeConfig.nav`
+  per route, so the copy in `config.ts` had been dead code — the `/v5/` archive
+  was reachable only because that override happened to hardcode it.
+
+## [8.0.0-next.0] — 2026-08-17
+
+**First release of the Capacitor 8 line, on the `@next` npm dist-tag.** The
+Capacitor 7 line continues as `7.x` on `@latest` (and on the new `@latest-7`
+dist-tag); `@latest` stays at `7.1.0` until the 8.x line graduates. Install the
+candidate with `npm install @nosslabs/iap@next`.
+
+Note that `@next` previously pointed at `7.0.0-next.0`, a Capacitor 7
+prerelease; it now moves to the Capacitor 8 line. `7.0.0-next.0` remains
+installable by exact version.
+
+**Opens the Capacitor 8 line.** Same library, next platform major: the peer
+range moves from Capacitor 7 to Capacitor 8, and nothing else changes. Cap-7
+consumers stay on `7.x` — `^7` ranges don't auto-resolve to `8.x`.
+
+### Changed (BREAKING, vs `7.1.0` — peer range only)
+
+- **Anchored the `8.x` line to Capacitor 8.** Peer dependencies moved to
+  `@capacitor/core`, `@capacitor/preferences` and (optional) `@capacitor/app`
+  at `>=8.0.0` — the forward-open range that upstream `@capacitor/*` plugins
+  and `@capgo/native-purchases` themselves declare — and
+  `@capgo/native-purchases` at `^8.0.0`, which stays a caret because the
+  adapter binds to its method signatures. The Cap-7 ranges
+  (`@capacitor/*: ^7.0.0`, `@capgo/native-purchases: ^7.16.2`) are dropped —
+  they were the only thing blocking a clean `npm install` in a Capacitor 8 app.
+  Upgrading is a peer-dep bump plus `npx cap sync`.
+- **`VERSION` is now typed `string` rather than the literal `"0.1.0"`.** It is
+  injected from `package.json` at build time instead of being hard-coded, so
+  it finally reports the version that is actually installed.
+
+### Fixed
+
+- **CommonJS consumers can type-check again.** The `exports` map declared a
+  single top-level `types` entry, so `require()` resolved the CommonJS bundle
+  against ESM declarations and `tsc` failed with TS1479 under
+  `moduleResolution: node16`/`nodenext`. `types` is now nested per condition,
+  with `require` pointing at the `dist/index.d.cts` the build already emitted.
+  Affects `7.1.0` and earlier too.
+- **`VERSION` no longer reports `0.1.0`.** It was hard-coded and never updated
+  by any publish step, so the value every released build exported was wrong.
+  (The `8.0.0-next.0` entry claimed this also corrupted logger error reports —
+  it did not. `src/lib/logger.ts` uses a fixed `[@nosslabs/iap]` prefix and has
+  never read `VERSION`. The export is for consumers only.)
+
+### Notes
+
+- **No runtime API changes.** `createIAP({ ... })` config, the `IAP` instance
+  surface, the event map, the error codes and the backend contract are all
+  byte-for-byte what `7.1.0` shipped. Nothing in `src/` needed a call-site fix:
+  every `@capgo/native-purchases` method this library calls
+  (`isBillingSupported`, `getProducts`, `purchaseProduct`, `getPurchases`,
+  `acknowledgePurchase`, `manageSubscriptions`, `getStorefront`) keeps its
+  `7.16.2` signature in `8.6.5`. The plugin's v8 additions — `consumePurchase()`,
+  `presentOfferCodeRedeemSheet()`, the `billingPlanType` purchase option, the
+  `onlyCurrentEntitlements` filter on `getPurchases()`, and the StoreKit
+  commitment/renewal metadata on `Product` and `Transaction` — are all optional
+  and none are consumed.
+- **`getStorefront()` keeps its capability probe.** The plugin declares
+  `getStorefront()` on its TypeScript interface as of `8.5.0`, but the peer
+  range also admits `8.0.0`–`8.4.x`, which don't register the native method. The
+  adapter therefore still gates on the Capacitor plugin header rather than the
+  declared type, and still resolves `null` when the method is absent — including
+  for the plugin's own "storefront unavailable" signal, an empty `countryCode`.
+
 ## [7.1.0] — 2026-07-04
 
 ### Added

package/README.md

@@ -2,10 +2,15 @@
 
 > Thin Capacitor IAP orchestrator. Server-side validation via [Attesto](https://attesto.nossdev.com).
 
-**Status: `7.0.0` — GA on `@latest`** (the Capacitor 7+ line, built on `@capgo/native-purchases`). The Capacitor 5 line (`cordova-plugin-purchase`) continues as `5.x` from the `5.x` branch — `^5` ranges still resolve to `5.x`. See the [CHANGELOG](./CHANGELOG.md) for the GA delta and [Migration](https://iap.nossdev.com/migration/) for upgrading from `5.x`.
+**Status: `8.0.0` — the Capacitor 8 line, on `@latest`** (built on `@capgo/native-purchases@^8`). The Capacitor 7 line continues in maintenance as `7.x` (pin `^7`, or the `@latest-7` dist-tag — [v7 docs](https://iap.nossdev.com/v7/)) and the Capacitor 5 line (`cordova-plugin-purchase`) as `5.x` (pin `^5` — [v5 docs](https://iap.nossdev.com/v5/)). `^7` and `^5` ranges resolve to their own lines and never cross-resolve. See the [CHANGELOG](./CHANGELOG.md) for the `8.0.0` delta and [Migration](https://iap.nossdev.com/migration/).
 
 ```bash
+# Capacitor 8 — the current @latest line
 npm install @nosslabs/iap @capgo/native-purchases
+
+# Capacitor 7 — maintenance; both pins are required
+npm install @nosslabs/iap@^7 @capgo/native-purchases@lts-v7
+
 npx cap sync
 ```
 
@@ -77,8 +82,9 @@ It does **not**: talk to Attesto directly, define entitlement business logic, ma
 
 | `@nosslabs/iap` | Capacitor | Native plugin | dist-tag | Status |
 |---|---|---|---|---|
-| 7.x | 7.x (also runs on 8.x) | `@capgo/native-purchases 7.16.x` (or `^8` on Cap 8) | `@latest` | **Current** |
-| 5.x | 5.x | `cordova-plugin-purchase ^13.x` | (pinned via `^5`) | Maintenance |
+| 8.x | 8.x | `@capgo/native-purchases ^8` | `@latest`, `@latest-8` | **Current** — `8.0.0` |
+| 7.x | 7.x | `@capgo/native-purchases@lts-v7` | `@latest-7` (pin via `^7`) | Maintenance |
+| 5.x | 5.x | `cordova-plugin-purchase ^13.x` | `@latest-5` (pin via `^5`) | Maintenance |
 
 ## Optional peer dependency
 

package/dist/index.cjs

@@ -2304,7 +2304,7 @@ function requireInitialized(state) {
 init_errors();
 
 // src/version.ts
-var VERSION = "0.1.0";
+var VERSION = "8.0.0";
 
 exports.DEFAULT_PERMANENT_ERROR_CODES = DEFAULT_PERMANENT_ERROR_CODES;
 exports.HttpBackendAdapter = HttpBackendAdapter;