@onesub/server 0.12.1 → 0.13.1

package/dist/index.d.ts

@@ -81,7 +81,7 @@ export { InProcessWebhookQueue, BullMQWebhookQueue } from './webhook-queue.js';
 export { ONESUB_OPENAPI, openapiHandler } from './openapi.js';
 export type { OpenAPIDoc } from './openapi.js';
 export { withSpan } from './tracing.js';
-export { validateAppleReceipt, fetchAppleSubscriptionStatus } from './providers/apple.js';
+export { validateAppleReceipt, fetchAppleSubscriptionStatus, fetchAppleTransactionHistory, signApplePromotionalOffer, } from './providers/apple.js';
 export { validateGoogleReceipt } from './providers/google.js';
 export { evaluateEntitlement } from './routes/entitlements.js';
 export { setLogger, log } from './logger.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AASnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD;;GAEG;AACH,MAAM,WAAW,sBAAuB,SAAQ,kBAAkB;IAChE;;;OAGG;IACH,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;OAIG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,GAAG,MAAM,CA6C7E;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,sBAAsB,GAAG,UAAU,CAAC,OAAO,OAAO,CAAC,CAW7F;AAGD,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAC9E,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AACxF,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAG3B,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGpF,YAAY,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AACxF,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACrG,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAI/E,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9D,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAI/C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAGxC,OAAO,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AAC1F,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAI9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAI/D,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAUnE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD;;GAEG;AACH,MAAM,WAAW,sBAAuB,SAAQ,kBAAkB;IAChE;;;OAGG;IACH,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B;;;;OAIG;IACH,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;OAIG;IACH,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB;;;;;;OAMG;IACH,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC;;;;;OAKG;IACH,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,sBAAsB,GAAG,MAAM,CAiD7E;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,sBAAsB,GAAG,UAAU,CAAC,OAAO,OAAO,CAAC,CAW7F;AAGD,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAC9E,YAAY,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AACnE,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AACxF,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,EACjB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAG3B,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAGpF,YAAY,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AACxF,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACrG,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAI/E,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9D,YAAY,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAI/C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAGxC,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAI9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAI/D,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -2,7 +2,7 @@ import express, { Router } from 'express';
 import { PURCHASE_TYPE, ROUTES, DEFAULT_PORT, ONESUB_ERROR_CODE, SUBSCRIPTION_STATUS, MOCK_RECEIPT_PREFIX } from '@onesub/shared';
 import { z } from 'zod';
 import { decodeJwt, decodeProtectedHeader, importX509, jwtVerify, importPKCS8, SignJWT, createRemoteJWKSet } from 'jose';
-import { X509Certificate, createHash } from 'crypto';
+import { X509Certificate, randomUUID, createSign, createHash } from 'crypto';
 
 // src/index.ts
 
@@ -470,7 +470,9 @@ async function decodeAppleNotification(payload, skipJwsVerification = false) {
     environment,
     status,
     willRenew,
-    expiresAt: tx.expiresDate ? new Date(tx.expiresDate).toISOString() : null
+    expiresAt: tx.expiresDate ? new Date(tx.expiresDate).toISOString() : null,
+    appAccountToken: tx.appAccountToken ?? null,
+    inAppOwnershipType: tx.inAppOwnershipType ?? null
   };
 }
 var appleJwtMintPromises = /* @__PURE__ */ new Map();
@@ -616,6 +618,91 @@ async function fetchAppleSubscriptionStatus(originalTransactionId, config, optio
     willRenew: renewal?.autoRenewStatus === 1
   };
 }
+async function fetchAppleTransactionHistory(originalTransactionId, config, options) {
+  if (config.mockMode) return null;
+  let jwt;
+  try {
+    jwt = await makeAppleApiJwt(config);
+  } catch (err) {
+    log.warn("[onesub/apple] Cannot fetch transaction history \u2014 JWT mint failed:", err);
+    return null;
+  }
+  const host = options?.sandbox ? "api.storekit-sandbox.itunes.apple.com" : "api.storekit.itunes.apple.com";
+  const results = [];
+  let revision;
+  for (; ; ) {
+    const url = new URL(`https://${host}/inApps/v2/history/${encodeURIComponent(originalTransactionId)}`);
+    if (revision) url.searchParams.set("revision", revision);
+    let page;
+    try {
+      const resp = await fetchWithTimeout(url.toString(), {
+        headers: { Authorization: `Bearer ${jwt}` }
+      });
+      if (!resp.ok) {
+        const text = await resp.text();
+        log.warn(`[onesub/apple] Transaction History API error ${resp.status}: ${text}`);
+        return null;
+      }
+      page = await resp.json();
+    } catch (err) {
+      log.warn("[onesub/apple] Transaction History API network error:", err);
+      return null;
+    }
+    for (const signed of page.signedTransactions ?? []) {
+      try {
+        const tx = await decodeJws(signed, config.skipJwsVerification);
+        if (!tx.originalTransactionId || !tx.transactionId || !tx.productId) continue;
+        results.push({
+          originalTransactionId: tx.originalTransactionId,
+          transactionId: tx.transactionId,
+          productId: tx.productId,
+          type: tx.type ?? "Unknown",
+          purchasedAt: tx.purchaseDate ? new Date(tx.purchaseDate).toISOString() : (/* @__PURE__ */ new Date()).toISOString(),
+          expiresAt: tx.expiresDate ? new Date(tx.expiresDate).toISOString() : null,
+          appAccountToken: tx.appAccountToken ?? null,
+          inAppOwnershipType: tx.inAppOwnershipType ?? null,
+          revocationDate: tx.revocationDate ? new Date(tx.revocationDate).toISOString() : null
+        });
+      } catch {
+      }
+    }
+    if (!page.hasMore) break;
+    revision = page.revision;
+  }
+  return results;
+}
+async function signApplePromotionalOffer(input, config) {
+  const { offerKeyId, offerPrivateKey } = config;
+  if (!offerKeyId || !offerPrivateKey) {
+    throw new Error("[onesub/apple] Promotional Offer signing requires config.apple.offerKeyId and config.apple.offerPrivateKey");
+  }
+  const nonce = randomUUID().toLowerCase();
+  const timestamp = Date.now();
+  const separator = "\u2063";
+  const message = [
+    input.bundleId,
+    offerKeyId,
+    input.productId,
+    input.offerId,
+    input.applicationUsername,
+    nonce,
+    String(timestamp)
+  ].join(separator);
+  if (!offerPrivateKey.includes("BEGIN") || !offerPrivateKey.includes("END")) {
+    throw new Error("[onesub/apple] offerPrivateKey does not appear to be PEM-encoded");
+  }
+  let signatureBuffer;
+  try {
+    const sign = createSign("SHA256");
+    sign.update(message);
+    sign.end();
+    signatureBuffer = sign.sign(offerPrivateKey);
+  } catch (err) {
+    throw new Error(`[onesub/apple] Failed to sign promotional offer \u2014 check that offerPrivateKey is a valid ES256 PEM key: ${err.message}`);
+  }
+  const signature = signatureBuffer.toString("base64");
+  return { keyId: offerKeyId, nonce, timestamp, signature };
+}
 var GOOGLE_NOTIFICATION_TYPE = {
   SUBSCRIPTION_RECOVERED: 1,
   SUBSCRIPTION_RENEWED: 2,
@@ -678,8 +765,8 @@ async function getAccessToken(serviceAccountKey) {
     })
   ).toString("base64url");
   const signingInput = `${header}.${payload}`;
-  const { createSign } = await import('crypto');
-  const sign = createSign("RSA-SHA256");
+  const { createSign: createSign2 } = await import('crypto');
+  const sign = createSign2("RSA-SHA256");
   sign.update(signingInput);
   const signature = sign.sign(key.private_key, "base64url");
   const assertion = `${signingInput}.${signature}`;
@@ -951,6 +1038,22 @@ function decodeGoogleVoidedNotification(payload) {
     packageName: notification.packageName
   };
 }
+function decodeGoogleOneTimeProductNotification(payload) {
+  let notification;
+  try {
+    const json = Buffer.from(payload.message.data, "base64").toString("utf-8");
+    notification = JSON.parse(json);
+  } catch {
+    return null;
+  }
+  if (!notification.oneTimeProductNotification) return null;
+  const { notificationType, purchaseToken, sku } = notification.oneTimeProductNotification;
+  if (notificationType !== 1 && notificationType !== 2) {
+    log.warn("[onesub/google] Unknown oneTimeProductNotification type:", notificationType);
+    return null;
+  }
+  return { notificationType, purchaseToken, sku, packageName: notification.packageName };
+}
 function isGoogleActiveNotification(notificationType) {
   return notificationType === GOOGLE_NOTIFICATION_TYPE.SUBSCRIPTION_PURCHASED || notificationType === GOOGLE_NOTIFICATION_TYPE.SUBSCRIPTION_RENEWED || notificationType === GOOGLE_NOTIFICATION_TYPE.SUBSCRIPTION_RECOVERED || notificationType === GOOGLE_NOTIFICATION_TYPE.SUBSCRIPTION_RESTARTED;
 }
@@ -1126,7 +1229,9 @@ async function handleAppleWebhook(req, res, config, store, purchaseStore, webhoo
     environment,
     status,
     willRenew,
-    expiresAt
+    expiresAt,
+    appAccountToken,
+    inAppOwnershipType
   } = decoded;
   const notificationType = payload.notificationType;
   const subtype = payload.subtype;
@@ -1170,8 +1275,13 @@ async function handleAppleWebhook(req, res, config, store, purchaseStore, webhoo
     if (existing) {
       const isSubscriptionRefund = isRefundOrRevoke && !isOneTimePurchase && notificationType !== "CONSUMPTION_REQUEST";
       const keepEntitlement = isSubscriptionRefund && config.refundPolicy === "until_expiry";
-      const updated = keepEntitlement ? { ...existing, willRenew: false } : {
+      const correctedUserId = appAccountToken && existing.userId === originalTransactionId ? appAccountToken : existing.userId;
+      if (correctedUserId !== existing.userId) {
+        log.info("[onesub/webhook/apple] correcting userId from originalTransactionId to appAccountToken:", correctedUserId);
+      }
+      const updated = keepEntitlement ? { ...existing, userId: correctedUserId, willRenew: false } : {
         ...existing,
+        userId: correctedUserId,
         status: finalStatus,
         willRenew,
         expiresAt: expiresAt ?? existing.expiresAt
@@ -1182,7 +1292,11 @@ async function handleAppleWebhook(req, res, config, store, purchaseStore, webhoo
         sandbox: environment === "Sandbox"
       });
       if (fresh) {
-        fresh.userId = originalTransactionId;
+        fresh.userId = appAccountToken ?? originalTransactionId;
+        if (inAppOwnershipType === "FAMILY_SHARED") {
+          const source = appAccountToken ? "appAccountToken" : "originalTransactionId (fallback)";
+          log.info(`[onesub/webhook/apple] FAMILY_SHARED \u2014 userId: ${fresh.userId} (source: ${source})`);
+        }
         await store.save(fresh);
       } else {
         log.warn(
@@ -1270,6 +1384,32 @@ async function handleGoogleWebhook(req, res, config, store, purchaseStore, webho
     }
     return;
   }
+  const oneTimeProduct = decodeGoogleOneTimeProductNotification(body);
+  if (oneTimeProduct) {
+    if (config.google?.packageName && oneTimeProduct.packageName !== config.google.packageName) {
+      log.warn("[onesub/webhook/google] oneTimeProduct package name mismatch:", oneTimeProduct.packageName, "!==", config.google.packageName);
+      sendError(res, 400, ONESUB_ERROR_CODE.PACKAGE_NAME_MISMATCH, "Package name mismatch");
+      return;
+    }
+    try {
+      const { notificationType: notificationType2, purchaseToken: purchaseToken2, sku } = oneTimeProduct;
+      if (notificationType2 === 1) {
+        log.info("[onesub/webhook/google] oneTimeProduct PURCHASED:", sku);
+        if (config.google?.serviceAccountKey && config.google.packageName) {
+          void acknowledgeGoogleProduct(purchaseToken2, sku, config.google).catch(
+            (err) => log.warn(`[onesub/webhook/google] oneTimeProduct ack failed for SKU ${sku} \u2014 3-day auto-refund risk:`, err)
+          );
+        }
+      } else {
+        log.info("[onesub/webhook/google] oneTimeProduct CANCELED (pre-completion):", sku);
+      }
+      res.status(200).json({ received: true });
+    } catch (err) {
+      log.error("[onesub/webhook/google] oneTimeProduct error:", err);
+      sendError(res, 500, ONESUB_ERROR_CODE.WEBHOOK_PROCESSING_FAILED, "Failed to process oneTimeProduct notification");
+    }
+    return;
+  }
   const notification = decodeGoogleNotification(body);
   if (!notification) {
     res.status(200).json({ received: true });
@@ -1389,9 +1529,16 @@ function createPurchaseRouter(config, purchaseStore) {
     const { platform, receipt, userId, productId, type } = body;
     try {
       if (type === PURCHASE_TYPE.NON_CONSUMABLE) {
-        const alreadyOwned = await purchaseStore.hasPurchased(userId, productId);
-        if (alreadyOwned) {
-          sendError(res, 409, ONESUB_ERROR_CODE.NON_CONSUMABLE_ALREADY_OWNED, "NON_CONSUMABLE_ALREADY_OWNED", NO_PURCHASE);
+        const owned = (await purchaseStore.getPurchasesByUserId(userId)).find(
+          (p) => p.productId === productId
+        );
+        if (owned) {
+          const response2 = {
+            valid: true,
+            purchase: { ...owned, userId },
+            action: "restored"
+          };
+          res.status(200).json(response2);
           return;
         }
       }
@@ -1781,6 +1928,38 @@ function createAdminRouter(config, purchaseStore, store, webhookQueue) {
       sendError(res, 500, ONESUB_ERROR_CODE.STORE_ERROR, err.message ?? "customer error");
     }
   });
+  const syncAppleParamsSchema = z.object({
+    originalTransactionId: z.string().min(1).max(256)
+  });
+  router.post(ROUTES.ADMIN_SYNC_APPLE, async (req, res) => {
+    let params;
+    try {
+      params = syncAppleParamsSchema.parse(req.params);
+    } catch {
+      sendError(res, 400, ONESUB_ERROR_CODE.INVALID_INPUT, "originalTransactionId required");
+      return;
+    }
+    if (!config.apple?.issuerId || !config.apple?.keyId || !config.apple?.privateKey) {
+      sendError(res, 400, ONESUB_ERROR_CODE.APPLE_CONFIG_MISSING, "Apple API credentials not configured");
+      return;
+    }
+    try {
+      const { originalTransactionId } = params;
+      const existingForEnv = await store.getByTransactionId(originalTransactionId);
+      const isSandbox = req.query["sandbox"] === "true" || existingForEnv?.environment === "Sandbox";
+      const fresh = await fetchAppleSubscriptionStatus(originalTransactionId, config.apple, { sandbox: isSandbox });
+      if (!fresh) {
+        sendError(res, 404, ONESUB_ERROR_CODE.TRANSACTION_NOT_FOUND, "Apple Status API returned no record");
+        return;
+      }
+      const existing = existingForEnv;
+      fresh.userId = existing?.userId ?? originalTransactionId;
+      await store.save(fresh);
+      res.status(200).json({ ok: true, subscription: fresh });
+    } catch (err) {
+      sendError(res, 500, ONESUB_ERROR_CODE.INTERNAL_ERROR, err.message ?? "sync error");
+    }
+  });
   if (webhookQueue?.listDeadLetters) {
     router.get("/onesub/admin/webhook-deadletters", async (_req, res) => {
       try {
@@ -2026,6 +2205,55 @@ function createMetricsRouter(config, store, purchaseStore) {
   });
   return router;
 }
+var OFFER_SECRET_HEADER = "x-onesub-offer-secret";
+var offerBodySchema = z.object({
+  productId: z.string().min(1).max(256),
+  offerId: z.string().min(1).max(256),
+  applicationUsername: z.string().min(1).max(256)
+});
+function createAppleOfferRouter(config) {
+  const apple = config.apple;
+  if (!apple?.offerKeyId || !apple?.offerPrivateKey) return null;
+  const router = Router();
+  router.post("/onesub/apple/offer-signature", async (req, res) => {
+    if (config.adminSecret) {
+      const provided = req.headers[OFFER_SECRET_HEADER];
+      if (typeof provided !== "string" || provided !== config.adminSecret) {
+        sendError(res, 401, ONESUB_ERROR_CODE.UNAUTHORIZED, "Unauthorized");
+        return;
+      }
+    }
+    let body;
+    try {
+      body = offerBodySchema.parse(req.body);
+    } catch (err) {
+      if (err instanceof z.ZodError) {
+        sendZodError(res, err);
+        return;
+      }
+      throw err;
+    }
+    if (!apple.bundleId) {
+      sendError(res, 400, ONESUB_ERROR_CODE.APPLE_CONFIG_MISSING, "config.apple.bundleId is required for offer signing");
+      return;
+    }
+    try {
+      const result = await signApplePromotionalOffer(
+        {
+          bundleId: apple.bundleId,
+          productId: body.productId,
+          offerId: body.offerId,
+          applicationUsername: body.applicationUsername
+        },
+        apple
+      );
+      res.status(200).json(result);
+    } catch (err) {
+      sendError(res, 500, ONESUB_ERROR_CODE.INTERNAL_ERROR, err.message ?? "Offer signing failed");
+    }
+  });
+  return router;
+}
 
 // src/stores/schema.ts
 var SUBSCRIPTIONS_SCHEMA_SQL = `
@@ -3012,6 +3240,8 @@ function createOneSubMiddleware(config) {
   if (entitlementRouter) router.use(entitlementRouter);
   const metricsRouter = createMetricsRouter(config, store, purchaseStore);
   if (metricsRouter) router.use(metricsRouter);
+  const appleOfferRouter = createAppleOfferRouter(config);
+  if (appleOfferRouter) router.use(appleOfferRouter);
   return router;
 }
 function createOneSubServer(config) {
@@ -3047,6 +3277,6 @@ if (isMain) {
   });
 }
 
-export { BullMQWebhookQueue, CacheWebhookEventStore, InMemoryCacheAdapter, InMemoryPurchaseStore, InMemorySubscriptionStore, InMemoryWebhookEventStore, InProcessWebhookQueue, ONESUB_OPENAPI, PostgresPurchaseStore, PostgresSubscriptionStore, RedisCacheAdapter, RedisPurchaseStore, RedisSubscriptionStore, RedisWebhookEventStore, createOneSubMiddleware, createOneSubServer, evaluateEntitlement, fetchAppleSubscriptionStatus, getDefaultCache, log, openapiHandler, setDefaultCache, setLogger, validateAppleReceipt, validateGoogleReceipt, withSpan };
+export { BullMQWebhookQueue, CacheWebhookEventStore, InMemoryCacheAdapter, InMemoryPurchaseStore, InMemorySubscriptionStore, InMemoryWebhookEventStore, InProcessWebhookQueue, ONESUB_OPENAPI, PostgresPurchaseStore, PostgresSubscriptionStore, RedisCacheAdapter, RedisPurchaseStore, RedisSubscriptionStore, RedisWebhookEventStore, createOneSubMiddleware, createOneSubServer, evaluateEntitlement, fetchAppleSubscriptionStatus, fetchAppleTransactionHistory, getDefaultCache, log, openapiHandler, setDefaultCache, setLogger, signApplePromotionalOffer, validateAppleReceipt, validateGoogleReceipt, withSpan };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map