@onesub/server 0.11.4 → 0.12.1

package/dist/__tests__/apple-status-api.test.js

@@ -1,345 +0,0 @@
-/**
- * Tests for fetchAppleSubscriptionStatus + the Apple webhook unknown-tx fallback.
- *
- * Covers:
- *   - status code 1..5 → SubscriptionStatus mapping
- *   - sandbox vs production host routing
- *   - missing API credentials → returns null (no throw)
- *   - HTTP error / empty data → returns null
- *   - webhook receives notification for unknown originalTransactionId →
- *     calls Status API + saves the returned record
- *   - webhook unknown tx without API creds → no fetch, just logs
- */
-import { describe, it, expect, beforeAll, beforeEach, vi } from 'vitest';
-import express from 'express';
-import { generateKeyPairSync } from 'crypto';
-import { SUBSCRIPTION_STATUS } from '@onesub/shared';
-import { fetchAppleSubscriptionStatus } from '../providers/apple.js';
-import { createWebhookRouter } from '../routes/webhook.js';
-import { InMemorySubscriptionStore, InMemoryPurchaseStore } from '../store.js';
-import { isLocalhostUrl } from './test-utils.js';
-// ── helpers ─────────────────────────────────────────────────────────────────
-function makeJws(payload) {
-    const header = Buffer.from(JSON.stringify({ alg: 'ES256' })).toString('base64url');
-    const body = Buffer.from(JSON.stringify(payload)).toString('base64url');
-    return `${header}.${body}.fakesig`;
-}
-let testEcKey;
-beforeAll(() => {
-    const { privateKey } = generateKeyPairSync('ec', { namedCurve: 'P-256' });
-    testEcKey = privateKey.export({ type: 'pkcs8', format: 'pem' });
-});
-beforeEach(() => {
-    vi.restoreAllMocks();
-});
-function appleConfigWithApi(overrides) {
-    return {
-        bundleId: 'com.example.app',
-        skipJwsVerification: true,
-        keyId: 'TESTKEY1',
-        issuerId: '12345678-1234-1234-1234-123456789012',
-        privateKey: testEcKey,
-        ...overrides,
-    };
-}
-/**
- * Mock global fetch with localhost pass-through. Apple Status API requests
- * resolve to the provided body; localhost (our test http server) is forwarded
- * to the real fetch implementation.
- */
-function mockAppleStatusFetch(responseBody, opts) {
-    const originalFetch = global.fetch;
-    const calls = [];
-    vi.spyOn(global, 'fetch').mockImplementation(async (url, init) => {
-        if (isLocalhostUrl(url)) {
-            return originalFetch(url, init);
-        }
-        const urlStr = String(url);
-        calls.push({
-            url: urlStr,
-            method: init?.method,
-            headers: init?.headers,
-        });
-        return {
-            ok: (opts?.status ?? 200) < 400,
-            status: opts?.status ?? 200,
-            json: async () => responseBody,
-            text: async () => JSON.stringify(responseBody),
-        };
-    });
-    return calls;
-}
-function makeStatusResponse(opts) {
-    const tx = makeJws({
-        bundleId: 'com.example.app',
-        type: 'Auto-Renewable Subscription',
-        productId: opts.productId ?? 'pro_monthly',
-        transactionId: 'tx_inner',
-        originalTransactionId: opts.originalTransactionId,
-        purchaseDate: Date.now() - 30 * 86400000,
-        originalPurchaseDate: Date.now() - 30 * 86400000,
-        expiresDate: opts.expiresDate ?? Date.now() + 86400000,
-    });
-    const renewal = makeJws({ autoRenewStatus: opts.autoRenewStatus ?? 1 });
-    return {
-        bundleId: 'com.example.app',
-        environment: 'Production',
-        data: [{
-                subscriptionGroupIdentifier: 'group_a',
-                lastTransactions: [{
-                        originalTransactionId: opts.originalTransactionId,
-                        status: opts.status,
-                        signedTransactionInfo: tx,
-                        signedRenewalInfo: renewal,
-                    }],
-            }],
-    };
-}
-// ── fetchAppleSubscriptionStatus unit tests ─────────────────────────────────
-describe('fetchAppleSubscriptionStatus', () => {
-    it('returns null when API credentials are missing', async () => {
-        const fetchSpy = vi.spyOn(global, 'fetch');
-        const result = await fetchAppleSubscriptionStatus('orig_xyz', {
-            bundleId: 'com.example.app',
-            skipJwsVerification: true,
-        });
-        expect(result).toBeNull();
-        expect(fetchSpy).not.toHaveBeenCalled();
-    });
-    it('returns null when mockMode is enabled', async () => {
-        const fetchSpy = vi.spyOn(global, 'fetch');
-        const result = await fetchAppleSubscriptionStatus('orig_xyz', appleConfigWithApi({ mockMode: true }));
-        expect(result).toBeNull();
-        expect(fetchSpy).not.toHaveBeenCalled();
-    });
-    it('GET .../inApps/v1/subscriptions/<id> with Bearer JWT', async () => {
-        const calls = mockAppleStatusFetch(makeStatusResponse({
-            originalTransactionId: 'orig_active',
-            status: 1,
-        }));
-        await fetchAppleSubscriptionStatus('orig_active', appleConfigWithApi());
-        expect(calls).toHaveLength(1);
-        expect(calls[0].url).toContain('api.storekit.itunes.apple.com');
-        expect(calls[0].url).toContain('/inApps/v1/subscriptions/orig_active');
-        expect(calls[0].headers?.Authorization).toMatch(/^Bearer /);
-    });
-    it('routes to sandbox host when options.sandbox is true', async () => {
-        const calls = mockAppleStatusFetch(makeStatusResponse({
-            originalTransactionId: 'orig_sb',
-            status: 1,
-        }));
-        await fetchAppleSubscriptionStatus('orig_sb', appleConfigWithApi(), { sandbox: true });
-        expect(calls[0].url).toContain('api.storekit-sandbox.itunes.apple.com');
-    });
-    it('maps status code 1 → active', async () => {
-        mockAppleStatusFetch(makeStatusResponse({ originalTransactionId: 'o1', status: 1 }));
-        const result = await fetchAppleSubscriptionStatus('o1', appleConfigWithApi());
-        expect(result?.status).toBe(SUBSCRIPTION_STATUS.ACTIVE);
-    });
-    it('maps status code 2 → expired', async () => {
-        mockAppleStatusFetch(makeStatusResponse({ originalTransactionId: 'o2', status: 2 }));
-        const result = await fetchAppleSubscriptionStatus('o2', appleConfigWithApi());
-        expect(result?.status).toBe(SUBSCRIPTION_STATUS.EXPIRED);
-    });
-    it('maps status code 3 → on_hold (billing retry)', async () => {
-        mockAppleStatusFetch(makeStatusResponse({ originalTransactionId: 'o3', status: 3 }));
-        const result = await fetchAppleSubscriptionStatus('o3', appleConfigWithApi());
-        expect(result?.status).toBe(SUBSCRIPTION_STATUS.ON_HOLD);
-    });
-    it('maps status code 4 → grace_period', async () => {
-        mockAppleStatusFetch(makeStatusResponse({ originalTransactionId: 'o4', status: 4 }));
-        const result = await fetchAppleSubscriptionStatus('o4', appleConfigWithApi());
-        expect(result?.status).toBe(SUBSCRIPTION_STATUS.GRACE_PERIOD);
-    });
-    it('maps status code 5 → canceled (revoked)', async () => {
-        mockAppleStatusFetch(makeStatusResponse({ originalTransactionId: 'o5', status: 5 }));
-        const result = await fetchAppleSubscriptionStatus('o5', appleConfigWithApi());
-        expect(result?.status).toBe(SUBSCRIPTION_STATUS.CANCELED);
-    });
-    it('reads autoRenewStatus from signedRenewalInfo for willRenew', async () => {
-        mockAppleStatusFetch(makeStatusResponse({
-            originalTransactionId: 'o_renew',
-            status: 1,
-            autoRenewStatus: 0,
-        }));
-        const result = await fetchAppleSubscriptionStatus('o_renew', appleConfigWithApi());
-        expect(result?.willRenew).toBe(false);
-    });
-    it('returns null on HTTP 404', async () => {
-        mockAppleStatusFetch({ errorCode: 4040010 }, { status: 404 });
-        const result = await fetchAppleSubscriptionStatus('not_found', appleConfigWithApi());
-        expect(result).toBeNull();
-    });
-    it('returns null when data array is empty', async () => {
-        mockAppleStatusFetch({ bundleId: 'com.example.app', environment: 'Production', data: [] });
-        const result = await fetchAppleSubscriptionStatus('orig_empty', appleConfigWithApi());
-        expect(result).toBeNull();
-    });
-    it('returns null when matching originalTransactionId not in lastTransactions', async () => {
-        mockAppleStatusFetch({
-            bundleId: 'com.example.app',
-            environment: 'Production',
-            data: [{
-                    subscriptionGroupIdentifier: 'g',
-                    lastTransactions: [{
-                            originalTransactionId: 'different_id',
-                            status: 1,
-                            signedTransactionInfo: makeJws({ productId: 'p', expiresDate: Date.now() }),
-                        }],
-                }],
-        });
-        const result = await fetchAppleSubscriptionStatus('expected_id', appleConfigWithApi());
-        expect(result).toBeNull();
-    });
-    it('preserves originalTransactionId from caller (not from inner JWS)', async () => {
-        mockAppleStatusFetch(makeStatusResponse({
-            originalTransactionId: 'orig_caller',
-            status: 1,
-        }));
-        const result = await fetchAppleSubscriptionStatus('orig_caller', appleConfigWithApi());
-        expect(result?.originalTransactionId).toBe('orig_caller');
-    });
-});
-function buildAppleWebhookServer(config) {
-    const store = new InMemorySubscriptionStore();
-    const purchaseStore = new InMemoryPurchaseStore();
-    const app = express();
-    app.use(express.json());
-    app.use(createWebhookRouter(config, store, purchaseStore));
-    return {
-        store,
-        server: {
-            async request(path, body) {
-                const httpServer = app.listen(0);
-                const address = httpServer.address();
-                const port = typeof address === 'object' && address ? address.port : 0;
-                try {
-                    const resp = await fetch(`http://127.0.0.1:${port}${path}`, {
-                        method: 'POST',
-                        headers: { 'Content-Type': 'application/json' },
-                        body: JSON.stringify(body),
-                    });
-                    const text = await resp.text();
-                    let parsed = text;
-                    try {
-                        parsed = JSON.parse(text);
-                    }
-                    catch { /* keep as text */ }
-                    return { status: resp.status, body: parsed };
-                }
-                finally {
-                    await new Promise((resolve) => httpServer.close(() => resolve()));
-                }
-            },
-        },
-    };
-}
-function buildUnknownTxNotification(originalTransactionId, opts) {
-    const signedTransactionInfo = makeJws({
-        bundleId: 'com.example.app',
-        type: 'Auto-Renewable Subscription',
-        productId: 'pro_monthly',
-        transactionId: 'tx_notify',
-        originalTransactionId,
-        purchaseDate: Date.now(),
-        expiresDate: Date.now() + 86400000,
-        environment: opts?.sandbox ? 'Sandbox' : 'Production',
-    });
-    return {
-        signedPayload: makeJws({
-            notificationType: 'DID_RENEW',
-            data: {
-                signedTransactionInfo,
-                signedRenewalInfo: makeJws({ autoRenewStatus: 1 }),
-            },
-        }),
-    };
-}
-describe('Apple webhook — unknown originalTransactionId fallback', () => {
-    it('fetches from Status API and saves a placeholder record when API creds present', async () => {
-        mockAppleStatusFetch(makeStatusResponse({
-            originalTransactionId: 'orig_unknown',
-            status: 1,
-        }));
-        const config = {
-            apple: appleConfigWithApi(),
-            database: { url: '' },
-        };
-        const { store, server } = buildAppleWebhookServer(config);
-        const resp = await server.request('/onesub/webhook/apple', buildUnknownTxNotification('orig_unknown'));
-        expect(resp.status).toBe(200);
-        const saved = await store.getByTransactionId('orig_unknown');
-        expect(saved).not.toBeNull();
-        expect(saved?.status).toBe(SUBSCRIPTION_STATUS.ACTIVE);
-        // userId is unknown at webhook time — placeholder is the originalTransactionId
-        expect(saved?.userId).toBe('orig_unknown');
-    });
-    it('routes to sandbox host when notification environment is Sandbox', async () => {
-        const calls = mockAppleStatusFetch(makeStatusResponse({
-            originalTransactionId: 'orig_sb_unknown',
-            status: 1,
-        }));
-        const config = {
-            apple: appleConfigWithApi(),
-            database: { url: '' },
-        };
-        const { server } = buildAppleWebhookServer(config);
-        await server.request('/onesub/webhook/apple', buildUnknownTxNotification('orig_sb_unknown', { sandbox: true }));
-        const apiCall = calls.find((c) => c.url.includes('/inApps/v1/subscriptions/'));
-        expect(apiCall?.url).toContain('api.storekit-sandbox.itunes.apple.com');
-    });
-    it('does not call Status API when issuerId/keyId/privateKey are missing', async () => {
-        const originalFetch = global.fetch;
-        const outboundCalls = [];
-        vi.spyOn(global, 'fetch').mockImplementation(async (url, init) => {
-            if (isLocalhostUrl(url)) {
-                return originalFetch(url, init);
-            }
-            outboundCalls.push({ url: String(url) });
-            return { ok: true, status: 200, json: async () => ({}), text: async () => '' };
-        });
-        const config = {
-            apple: { bundleId: 'com.example.app', skipJwsVerification: true }, // no API creds
-            database: { url: '' },
-        };
-        const { store, server } = buildAppleWebhookServer(config);
-        const resp = await server.request('/onesub/webhook/apple', buildUnknownTxNotification('orig_no_creds'));
-        expect(resp.status).toBe(200);
-        expect(await store.getByTransactionId('orig_no_creds')).toBeNull();
-        expect(outboundCalls).toHaveLength(0);
-    });
-    it('does not overwrite an existing record (still the normal update path)', async () => {
-        const originalFetch = global.fetch;
-        const outboundCalls = [];
-        vi.spyOn(global, 'fetch').mockImplementation(async (url, init) => {
-            if (isLocalhostUrl(url)) {
-                return originalFetch(url, init);
-            }
-            outboundCalls.push({ url: String(url) });
-            return { ok: true, status: 200, json: async () => ({}), text: async () => '' };
-        });
-        const config = {
-            apple: appleConfigWithApi(),
-            database: { url: '' },
-        };
-        const { store, server } = buildAppleWebhookServer(config);
-        const existing = {
-            userId: 'real_user',
-            productId: 'pro_monthly',
-            platform: 'apple',
-            status: SUBSCRIPTION_STATUS.ACTIVE,
-            expiresAt: '2027-01-01T00:00:00.000Z',
-            originalTransactionId: 'orig_known',
-            purchasedAt: '2026-01-01T00:00:00.000Z',
-            willRenew: true,
-        };
-        await store.save(existing);
-        const resp = await server.request('/onesub/webhook/apple', buildUnknownTxNotification('orig_known'));
-        expect(resp.status).toBe(200);
-        // Existing record's userId preserved (not replaced with placeholder)
-        expect((await store.getByTransactionId('orig_known'))?.userId).toBe('real_user');
-        // No outbound Status API call since we already had the record
-        expect(outboundCalls.find((c) => c.url.includes('/inApps/v1/subscriptions/'))).toBeUndefined();
-    });
-});
-//# sourceMappingURL=apple-status-api.test.js.map

package/dist/__tests__/apple-status-api.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"apple-status-api.test.js","sourceRoot":"","sources":["../../src/__tests__/apple-status-api.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,QAAQ,CAAC;AAE7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,+EAA+E;AAE/E,SAAS,OAAO,CAAC,OAAgC;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxE,OAAO,GAAG,MAAM,IAAI,IAAI,UAAU,CAAC;AACrC,CAAC;AAED,IAAI,SAAiB,CAAC;AAEtB,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1E,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW,CAAC;AAC5E,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,GAAG,EAAE;IACd,EAAE,CAAC,eAAe,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,SAAS,kBAAkB,CAAC,SAAgD;IAC1E,OAAO;QACL,QAAQ,EAAE,iBAAiB;QAC3B,mBAAmB,EAAE,IAAI;QACzB,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,sCAAsC;QAChD,UAAU,EAAE,SAAS;QACrB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,YAAqB,EAAE,IAA0B;IAC7E,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;IACnC,MAAM,KAAK,GAAyE,EAAE,CAAC;IACvF,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/D,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC;YACT,GAAG,EAAE,MAAM;YACX,MAAM,EAAE,IAAI,EAAE,MAAM;YACpB,OAAO,EAAE,IAAI,EAAE,OAAiC;SACjD,CAAC,CAAC;QACH,OAAO;YACL,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,IAAI,GAAG,CAAC,GAAG,GAAG;YAC/B,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,GAAG;YAC3B,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,YAAY;YAC9B,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;SACnC,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,IAM3B;IACC,MAAM,EAAE,GAAG,OAAO,CAAC;QACjB,QAAQ,EAAE,iBAAiB;QAC3B,IAAI,EAAE,6BAA6B;QACnC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,aAAa;QAC1C,aAAa,EAAE,UAAU;QACzB,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,QAAQ;QACxC,oBAAoB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,QAAQ;QAChD,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;KACvD,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,CAAC,EAAE,CAAC,CAAC;IACxE,OAAO;QACL,QAAQ,EAAE,iBAAiB;QAC3B,WAAW,EAAE,YAAY;QACzB,IAAI,EAAE,CAAC;gBACL,2BAA2B,EAAE,SAAS;gBACtC,gBAAgB,EAAE,CAAC;wBACjB,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;wBACjD,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,qBAAqB,EAAE,EAAE;wBACzB,iBAAiB,EAAE,OAAO;qBAC3B,CAAC;aACH,CAAC;KACH,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,UAAU,EAAE;YAC5D,QAAQ,EAAE,iBAAiB;YAC3B,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,UAAU,EAAE,kBAAkB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,KAAK,GAAG,oBAAoB,CAAC,kBAAkB,CAAC;YACpD,qBAAqB,EAAE,aAAa;YACpC,MAAM,EAAE,CAAC;SACV,CAAC,CAAC,CAAC;QAEJ,MAAM,4BAA4B,CAAC,aAAa,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAExE,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,KAAK,GAAG,oBAAoB,CAAC,kBAAkB,CAAC;YACpD,qBAAqB,EAAE,SAAS;YAChC,MAAM,EAAE,CAAC;SACV,CAAC,CAAC,CAAC;QAEJ,MAAM,4BAA4B,CAAC,SAAS,EAAE,kBAAkB,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,oBAAoB,CAAC,kBAAkB,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,oBAAoB,CAAC,kBAAkB,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,oBAAoB,CAAC,kBAAkB,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,oBAAoB,CAAC,kBAAkB,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,oBAAoB,CAAC,kBAAkB,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,oBAAoB,CAAC,kBAAkB,CAAC;YACtC,qBAAqB,EAAE,SAAS;YAChC,MAAM,EAAE,CAAC;YACT,eAAe,EAAE,CAAC;SACnB,CAAC,CAAC,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACnF,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,oBAAoB,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACrF,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,oBAAoB,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,YAAY,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACtF,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,oBAAoB,CAAC;YACnB,QAAQ,EAAE,iBAAiB;YAC3B,WAAW,EAAE,YAAY;YACzB,IAAI,EAAE,CAAC;oBACL,2BAA2B,EAAE,GAAG;oBAChC,gBAAgB,EAAE,CAAC;4BACjB,qBAAqB,EAAE,cAAc;4BACrC,MAAM,EAAE,CAAC;4BACT,qBAAqB,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;yBAC5E,CAAC;iBACH,CAAC;SACH,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,aAAa,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,oBAAoB,CAAC,kBAAkB,CAAC;YACtC,qBAAqB,EAAE,aAAa;YACpC,MAAM,EAAE,CAAC;SACV,CAAC,CAAC,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,aAAa,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAQH,SAAS,uBAAuB,CAAC,MAA0B;IAIzD,MAAM,KAAK,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAC9C,MAAM,aAAa,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;IAC3D,OAAO;QACL,KAAK;QACL,MAAM,EAAE;YACN,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI;gBACtB,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACjC,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvE,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,GAAG,IAAI,EAAE,EAAE;wBAC1D,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;wBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;qBAC3B,CAAC,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC/B,IAAI,MAAM,GAAY,IAAI,CAAC;oBAC3B,IAAI,CAAC;wBAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;oBAC/D,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC/C,CAAC;wBAAS,CAAC;oBACT,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC1E,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,qBAA6B,EAAE,IAA4B;IAC7F,MAAM,qBAAqB,GAAG,OAAO,CAAC;QACpC,QAAQ,EAAE,iBAAiB;QAC3B,IAAI,EAAE,6BAA6B;QACnC,SAAS,EAAE,aAAa;QACxB,aAAa,EAAE,WAAW;QAC1B,qBAAqB;QACrB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;QACxB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;QAClC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;KACtD,CAAC,CAAC;IACH,OAAO;QACL,aAAa,EAAE,OAAO,CAAC;YACrB,gBAAgB,EAAE,WAAW;YAC7B,IAAI,EAAE;gBACJ,qBAAqB;gBACrB,iBAAiB,EAAE,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;aACnD;SACF,CAAC;KACH,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,wDAAwD,EAAE,GAAG,EAAE;IACtE,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,oBAAoB,CAAC,kBAAkB,CAAC;YACtC,qBAAqB,EAAE,cAAc;YACrC,MAAM,EAAE,CAAC;SACV,CAAC,CAAC,CAAC;QAEJ,MAAM,MAAM,GAAuB;YACjC,KAAK,EAAE,kBAAkB,EAAE;YAC3B,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;SACtB,CAAC;QACF,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAE1D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,uBAAuB,EAAE,0BAA0B,CAAC,cAAc,CAAC,CAAC,CAAC;QACvG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE9B,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACvD,+EAA+E;QAC/E,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,KAAK,GAAG,oBAAoB,CAAC,kBAAkB,CAAC;YACpD,qBAAqB,EAAE,iBAAiB;YACxC,MAAM,EAAE,CAAC;SACV,CAAC,CAAC,CAAC;QAEJ,MAAM,MAAM,GAAuB;YACjC,KAAK,EAAE,kBAAkB,EAAE;YAC3B,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;SACtB,CAAC;QACF,MAAM,EAAE,MAAM,EAAE,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAEnD,MAAM,MAAM,CAAC,OAAO,CAClB,uBAAuB,EACvB,0BAA0B,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CACjE,CAAC;QAEF,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;QACnC,MAAM,aAAa,GAAsB,EAAE,CAAC;QAC5C,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC/D,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAc,CAAC;QAC7F,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAuB;YACjC,KAAK,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,eAAe;YAClF,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;SACtB,CAAC;QACF,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAE1D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,uBAAuB,EAAE,0BAA0B,CAAC,eAAe,CAAC,CAAC,CAAC;QACxG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnE,MAAM,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;QACnC,MAAM,aAAa,GAAsB,EAAE,CAAC;QAC5C,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC/D,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAc,CAAC;QAC7F,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAuB;YACjC,KAAK,EAAE,kBAAkB,EAAE;YAC3B,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;SACtB,CAAC;QACF,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAE1D,MAAM,QAAQ,GAAqB;YACjC,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,aAAa;YACxB,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,mBAAmB,CAAC,MAAM;YAClC,SAAS,EAAE,0BAA0B;YACrC,qBAAqB,EAAE,YAAY;YACnC,WAAW,EAAE,0BAA0B;YACvC,SAAS,EAAE,IAAI;SAChB,CAAC;QACF,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE3B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,uBAAuB,EAAE,0BAA0B,CAAC,YAAY,CAAC,CAAC,CAAC;QACrG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE9B,qEAAqE;QACrE,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjF,8DAA8D;QAC9D,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACjG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/entitlements.test.js

@@ -1,268 +0,0 @@
-/**
- * Entitlements abstraction tests.
- *
- * Covers:
- *   - evaluateEntitlement helper (subscription / purchase / mixed / none /
- *     expired sub / wrong status / consumable excluded)
- *   - GET /onesub/entitlement single-check route (404 unknown id, 400 bad input)
- *   - GET /onesub/entitlements bulk route
- *   - Router not mounted when config.entitlements is absent (404)
- *   - getAllByUserId returns multi-product subscriptions (regression for the
- *     InMemoryStore change that backs entitlements)
- */
-import { describe, it, expect, beforeEach } from 'vitest';
-import express from 'express';
-import { SUBSCRIPTION_STATUS, PURCHASE_TYPE } from '@onesub/shared';
-import { createOneSubMiddleware } from '../index.js';
-import { evaluateEntitlement } from '../routes/entitlements.js';
-import { InMemorySubscriptionStore, InMemoryPurchaseStore } from '../store.js';
-// ── helpers ─────────────────────────────────────────────────────────────────
-const futureExpiry = '2099-01-01T00:00:00.000Z';
-const pastExpiry = '2024-01-01T00:00:00.000Z';
-function sub(overrides) {
-    return {
-        userId: 'u',
-        productId: 'pro_monthly',
-        platform: 'apple',
-        status: 'active',
-        expiresAt: futureExpiry,
-        originalTransactionId: `orig_${Math.random()}`,
-        purchasedAt: '2026-01-01T00:00:00.000Z',
-        willRenew: true,
-        ...overrides,
-    };
-}
-function purchase(overrides) {
-    return {
-        userId: 'u',
-        productId: 'lifetime_pass',
-        platform: 'apple',
-        type: 'non_consumable',
-        transactionId: `tx_${Math.random()}`,
-        purchasedAt: '2026-01-01T00:00:00.000Z',
-        quantity: 1,
-        ...overrides,
-    };
-}
-function spinUp(handler) {
-    return {
-        async get(path) {
-            const httpServer = handler.listen(0);
-            const port = httpServer.address().port;
-            try {
-                const resp = await fetch(`http://127.0.0.1:${port}${path}`);
-                const text = await resp.text();
-                let parsed = text;
-                try {
-                    parsed = JSON.parse(text);
-                }
-                catch { /* keep as text */ }
-                return { status: resp.status, body: parsed };
-            }
-            finally {
-                await new Promise((r) => httpServer.close(() => r()));
-            }
-        },
-    };
-}
-function buildServer(opts) {
-    const store = new InMemorySubscriptionStore();
-    const purchaseStore = new InMemoryPurchaseStore();
-    const config = {
-        apple: { bundleId: 'com.example.app', skipJwsVerification: true },
-        database: { url: '' },
-        entitlements: opts.entitlements,
-    };
-    const app = express();
-    // createOneSubMiddleware mounts express.json itself, but the entitlement
-    // routes are GET-only so it's fine either way.
-    const middleware = createOneSubMiddleware({ ...config, store, purchaseStore });
-    app.use(middleware);
-    return { store, purchaseStore, server: spinUp(app) };
-}
-const PREMIUM = {
-    premium: { productIds: ['pro_monthly', 'pro_yearly', 'lifetime_pass'] },
-};
-// ─────────────────────────────────────────────────────────────────────────────
-// evaluateEntitlement (unit, no HTTP)
-// ─────────────────────────────────────────────────────────────────────────────
-describe('evaluateEntitlement', () => {
-    let store;
-    let purchaseStore;
-    beforeEach(() => {
-        store = new InMemorySubscriptionStore();
-        purchaseStore = new InMemoryPurchaseStore();
-    });
-    it('active subscription matching one of the productIds → entitled', async () => {
-        await store.save(sub({ userId: 'u1', productId: 'pro_yearly' }));
-        const result = await evaluateEntitlement('u1', PREMIUM.premium, store, purchaseStore);
-        expect(result.active).toBe(true);
-        expect(result.source).toBe('subscription');
-        expect(result.productId).toBe('pro_yearly');
-        expect(result.expiresAt).toBe(futureExpiry);
-    });
-    it('non-consumable purchase matching one of the productIds → entitled', async () => {
-        await purchaseStore.savePurchase(purchase({ userId: 'u2', productId: 'lifetime_pass' }));
-        const result = await evaluateEntitlement('u2', PREMIUM.premium, store, purchaseStore);
-        expect(result.active).toBe(true);
-        expect(result.source).toBe('purchase');
-        expect(result.productId).toBe('lifetime_pass');
-        expect(result.expiresAt).toBeUndefined();
-    });
-    it('no matching record → not entitled', async () => {
-        const result = await evaluateEntitlement('u_none', PREMIUM.premium, store, purchaseStore);
-        expect(result).toEqual({ active: false, source: null });
-    });
-    it('subscription preferred over purchase when both match', async () => {
-        await store.save(sub({ userId: 'u3', productId: 'pro_monthly' }));
-        await purchaseStore.savePurchase(purchase({ userId: 'u3', productId: 'lifetime_pass' }));
-        const result = await evaluateEntitlement('u3', PREMIUM.premium, store, purchaseStore);
-        expect(result.source).toBe('subscription');
-        expect(result.productId).toBe('pro_monthly');
-    });
-    it('expired subscription (expiresAt < now) → not entitled even if status=active', async () => {
-        await store.save(sub({ userId: 'u4', productId: 'pro_monthly', expiresAt: pastExpiry }));
-        const result = await evaluateEntitlement('u4', PREMIUM.premium, store, purchaseStore);
-        expect(result.active).toBe(false);
-    });
-    it('grace_period subscription → entitled (still has valid expiresAt)', async () => {
-        await store.save(sub({ userId: 'u5', productId: 'pro_monthly', status: 'grace_period' }));
-        const result = await evaluateEntitlement('u5', PREMIUM.premium, store, purchaseStore);
-        expect(result.active).toBe(true);
-        expect(result.source).toBe('subscription');
-    });
-    it('on_hold / paused / canceled / expired status → not entitled', async () => {
-        for (const status of ['on_hold', 'paused', 'canceled', 'expired']) {
-            const localStore = new InMemorySubscriptionStore();
-            await localStore.save(sub({ userId: 'u', productId: 'pro_monthly', status }));
-            const result = await evaluateEntitlement('u', PREMIUM.premium, localStore, purchaseStore);
-            expect(result.active).toBe(false);
-        }
-    });
-    it('consumable purchase is NOT considered for entitlement', async () => {
-        await purchaseStore.savePurchase(purchase({
-            userId: 'u6',
-            productId: 'pro_monthly', // even matching productId
-            type: 'consumable',
-        }));
-        const result = await evaluateEntitlement('u6', PREMIUM.premium, store, purchaseStore);
-        expect(result.active).toBe(false);
-    });
-    it('multi-product subscriptions: returns the first matching active sub', async () => {
-        // User has two subs — one for pro_yearly (matches), one for off-premium product (no match)
-        await store.save(sub({ userId: 'u7', productId: 'unrelated_product' }));
-        await store.save(sub({ userId: 'u7', productId: 'pro_yearly' }));
-        const result = await evaluateEntitlement('u7', PREMIUM.premium, store, purchaseStore);
-        expect(result.active).toBe(true);
-        expect(result.productId).toBe('pro_yearly');
-    });
-});
-// ─────────────────────────────────────────────────────────────────────────────
-// HTTP routes
-// ─────────────────────────────────────────────────────────────────────────────
-describe('GET /onesub/entitlement', () => {
-    it('returns active=true when user has matching active sub', async () => {
-        const { store, server } = buildServer({ entitlements: PREMIUM });
-        await store.save(sub({ userId: 'u_yes', productId: 'pro_monthly' }));
-        const resp = await server.get('/onesub/entitlement?userId=u_yes&id=premium');
-        expect(resp.status).toBe(200);
-        expect(resp.body.id).toBe('premium');
-        expect(resp.body.active).toBe(true);
-        expect(resp.body.source).toBe('subscription');
-    });
-    it('returns active=false when no matching record', async () => {
-        const { server } = buildServer({ entitlements: PREMIUM });
-        const resp = await server.get('/onesub/entitlement?userId=u_none&id=premium');
-        expect(resp.status).toBe(200);
-        expect(resp.body.active).toBe(false);
-        expect(resp.body.source).toBeNull();
-    });
-    it('404 + ENTITLEMENT_NOT_FOUND for unknown id', async () => {
-        const { server } = buildServer({ entitlements: PREMIUM });
-        const resp = await server.get('/onesub/entitlement?userId=u&id=enterprise');
-        expect(resp.status).toBe(404);
-        expect(resp.body.errorCode).toBe('ENTITLEMENT_NOT_FOUND');
-    });
-    it('400 INVALID_INPUT when userId or id is missing', async () => {
-        const { server } = buildServer({ entitlements: PREMIUM });
-        const resp = await server.get('/onesub/entitlement?userId=u');
-        expect(resp.status).toBe(400);
-        expect(resp.body.errorCode).toBe('INVALID_INPUT');
-    });
-});
-describe('GET /onesub/entitlements (bulk)', () => {
-    it('evaluates every configured entitlement in one round-trip', async () => {
-        const config = {
-            premium: { productIds: ['pro_monthly', 'pro_yearly'] },
-            promode: { productIds: ['dev_tools_addon'] },
-        };
-        const { store, server } = buildServer({ entitlements: config });
-        await store.save(sub({ userId: 'u_bulk', productId: 'pro_yearly' }));
-        const resp = await server.get('/onesub/entitlements?userId=u_bulk');
-        expect(resp.status).toBe(200);
-        expect(resp.body.entitlements.premium.active).toBe(true);
-        expect(resp.body.entitlements.premium.productId).toBe('pro_yearly');
-        expect(resp.body.entitlements.promode.active).toBe(false);
-    });
-    it('returns empty entitlement statuses for a user with nothing', async () => {
-        const config = {
-            premium: { productIds: ['pro_monthly'] },
-            addon: { productIds: ['some_addon'] },
-        };
-        const { server } = buildServer({ entitlements: config });
-        const resp = await server.get('/onesub/entitlements?userId=u_empty');
-        expect(resp.body.entitlements.premium.active).toBe(false);
-        expect(resp.body.entitlements.addon.active).toBe(false);
-    });
-});
-describe('Entitlement routes are NOT mounted without config', () => {
-    it('returns 404 when config.entitlements is absent', async () => {
-        const { server } = buildServer({}); // no entitlements
-        const resp = await server.get('/onesub/entitlement?userId=u&id=premium');
-        expect(resp.status).toBe(404);
-        const respBulk = await server.get('/onesub/entitlements?userId=u');
-        expect(respBulk.status).toBe(404);
-    });
-    it('returns 404 when config.entitlements is empty {}', async () => {
-        const { server } = buildServer({ entitlements: {} });
-        const resp = await server.get('/onesub/entitlement?userId=u&id=premium');
-        expect(resp.status).toBe(404);
-    });
-});
-// ─────────────────────────────────────────────────────────────────────────────
-// Store regression: getAllByUserId returns multi-product subs
-// ─────────────────────────────────────────────────────────────────────────────
-describe('InMemorySubscriptionStore — multi-sub per user (entitlement support)', () => {
-    it('getAllByUserId returns all subs across productIds, latest first', async () => {
-        const store = new InMemorySubscriptionStore();
-        await store.save(sub({ userId: 'u', productId: 'pro_monthly', originalTransactionId: 'orig_a' }));
-        await store.save(sub({ userId: 'u', productId: 'pro_yearly', originalTransactionId: 'orig_b' }));
-        await store.save(sub({ userId: 'u', productId: 'addon', originalTransactionId: 'orig_c' }));
-        const all = await store.getAllByUserId('u');
-        expect(all.map((s) => s.productId)).toEqual(['addon', 'pro_yearly', 'pro_monthly']);
-    });
-    it('getByUserId still returns the most recent (legacy contract preserved)', async () => {
-        const store = new InMemorySubscriptionStore();
-        await store.save(sub({ userId: 'u', productId: 'pro_monthly', originalTransactionId: 'orig_a' }));
-        await store.save(sub({ userId: 'u', productId: 'pro_yearly', originalTransactionId: 'orig_b' }));
-        const latest = await store.getByUserId('u');
-        expect(latest?.productId).toBe('pro_yearly');
-    });
-    it('save() with same originalTransactionId replaces prior record (no duplicates)', async () => {
-        const store = new InMemorySubscriptionStore();
-        await store.save(sub({
-            userId: 'u', productId: 'pro_monthly', originalTransactionId: 'orig_x',
-            status: 'active',
-        }));
-        await store.save(sub({
-            userId: 'u', productId: 'pro_monthly', originalTransactionId: 'orig_x',
-            status: 'canceled',
-        }));
-        const all = await store.getAllByUserId('u');
-        expect(all).toHaveLength(1);
-        expect(all[0].status).toBe(SUBSCRIPTION_STATUS.CANCELED);
-    });
-});
-// keep the import honest
-PURCHASE_TYPE;
-//# sourceMappingURL=entitlements.test.js.map