@onesub/server 0.12.1 → 0.13.1

package/dist/__tests__/entitlements.test.js

@@ -0,0 +1,268 @@
+/**
+ * Entitlements abstraction tests.
+ *
+ * Covers:
+ *   - evaluateEntitlement helper (subscription / purchase / mixed / none /
+ *     expired sub / wrong status / consumable excluded)
+ *   - GET /onesub/entitlement single-check route (404 unknown id, 400 bad input)
+ *   - GET /onesub/entitlements bulk route
+ *   - Router not mounted when config.entitlements is absent (404)
+ *   - getAllByUserId returns multi-product subscriptions (regression for the
+ *     InMemoryStore change that backs entitlements)
+ */
+import { describe, it, expect, beforeEach } from 'vitest';
+import express from 'express';
+import { SUBSCRIPTION_STATUS, PURCHASE_TYPE } from '@onesub/shared';
+import { createOneSubMiddleware } from '../index.js';
+import { evaluateEntitlement } from '../routes/entitlements.js';
+import { InMemorySubscriptionStore, InMemoryPurchaseStore } from '../store.js';
+// ── helpers ─────────────────────────────────────────────────────────────────
+const futureExpiry = '2099-01-01T00:00:00.000Z';
+const pastExpiry = '2024-01-01T00:00:00.000Z';
+function sub(overrides) {
+    return {
+        userId: 'u',
+        productId: 'pro_monthly',
+        platform: 'apple',
+        status: 'active',
+        expiresAt: futureExpiry,
+        originalTransactionId: `orig_${Math.random()}`,
+        purchasedAt: '2026-01-01T00:00:00.000Z',
+        willRenew: true,
+        ...overrides,
+    };
+}
+function purchase(overrides) {
+    return {
+        userId: 'u',
+        productId: 'lifetime_pass',
+        platform: 'apple',
+        type: 'non_consumable',
+        transactionId: `tx_${Math.random()}`,
+        purchasedAt: '2026-01-01T00:00:00.000Z',
+        quantity: 1,
+        ...overrides,
+    };
+}
+function spinUp(handler) {
+    return {
+        async get(path) {
+            const httpServer = handler.listen(0);
+            const port = httpServer.address().port;
+            try {
+                const resp = await fetch(`http://127.0.0.1:${port}${path}`);
+                const text = await resp.text();
+                let parsed = text;
+                try {
+                    parsed = JSON.parse(text);
+                }
+                catch { /* keep as text */ }
+                return { status: resp.status, body: parsed };
+            }
+            finally {
+                await new Promise((r) => httpServer.close(() => r()));
+            }
+        },
+    };
+}
+function buildServer(opts) {
+    const store = new InMemorySubscriptionStore();
+    const purchaseStore = new InMemoryPurchaseStore();
+    const config = {
+        apple: { bundleId: 'com.example.app', skipJwsVerification: true },
+        database: { url: '' },
+        entitlements: opts.entitlements,
+    };
+    const app = express();
+    // createOneSubMiddleware mounts express.json itself, but the entitlement
+    // routes are GET-only so it's fine either way.
+    const middleware = createOneSubMiddleware({ ...config, store, purchaseStore });
+    app.use(middleware);
+    return { store, purchaseStore, server: spinUp(app) };
+}
+const PREMIUM = {
+    premium: { productIds: ['pro_monthly', 'pro_yearly', 'lifetime_pass'] },
+};
+// ─────────────────────────────────────────────────────────────────────────────
+// evaluateEntitlement (unit, no HTTP)
+// ─────────────────────────────────────────────────────────────────────────────
+describe('evaluateEntitlement', () => {
+    let store;
+    let purchaseStore;
+    beforeEach(() => {
+        store = new InMemorySubscriptionStore();
+        purchaseStore = new InMemoryPurchaseStore();
+    });
+    it('active subscription matching one of the productIds → entitled', async () => {
+        await store.save(sub({ userId: 'u1', productId: 'pro_yearly' }));
+        const result = await evaluateEntitlement('u1', PREMIUM.premium, store, purchaseStore);
+        expect(result.active).toBe(true);
+        expect(result.source).toBe('subscription');
+        expect(result.productId).toBe('pro_yearly');
+        expect(result.expiresAt).toBe(futureExpiry);
+    });
+    it('non-consumable purchase matching one of the productIds → entitled', async () => {
+        await purchaseStore.savePurchase(purchase({ userId: 'u2', productId: 'lifetime_pass' }));
+        const result = await evaluateEntitlement('u2', PREMIUM.premium, store, purchaseStore);
+        expect(result.active).toBe(true);
+        expect(result.source).toBe('purchase');
+        expect(result.productId).toBe('lifetime_pass');
+        expect(result.expiresAt).toBeUndefined();
+    });
+    it('no matching record → not entitled', async () => {
+        const result = await evaluateEntitlement('u_none', PREMIUM.premium, store, purchaseStore);
+        expect(result).toEqual({ active: false, source: null });
+    });
+    it('subscription preferred over purchase when both match', async () => {
+        await store.save(sub({ userId: 'u3', productId: 'pro_monthly' }));
+        await purchaseStore.savePurchase(purchase({ userId: 'u3', productId: 'lifetime_pass' }));
+        const result = await evaluateEntitlement('u3', PREMIUM.premium, store, purchaseStore);
+        expect(result.source).toBe('subscription');
+        expect(result.productId).toBe('pro_monthly');
+    });
+    it('expired subscription (expiresAt < now) → not entitled even if status=active', async () => {
+        await store.save(sub({ userId: 'u4', productId: 'pro_monthly', expiresAt: pastExpiry }));
+        const result = await evaluateEntitlement('u4', PREMIUM.premium, store, purchaseStore);
+        expect(result.active).toBe(false);
+    });
+    it('grace_period subscription → entitled (still has valid expiresAt)', async () => {
+        await store.save(sub({ userId: 'u5', productId: 'pro_monthly', status: 'grace_period' }));
+        const result = await evaluateEntitlement('u5', PREMIUM.premium, store, purchaseStore);
+        expect(result.active).toBe(true);
+        expect(result.source).toBe('subscription');
+    });
+    it('on_hold / paused / canceled / expired status → not entitled', async () => {
+        for (const status of ['on_hold', 'paused', 'canceled', 'expired']) {
+            const localStore = new InMemorySubscriptionStore();
+            await localStore.save(sub({ userId: 'u', productId: 'pro_monthly', status }));
+            const result = await evaluateEntitlement('u', PREMIUM.premium, localStore, purchaseStore);
+            expect(result.active).toBe(false);
+        }
+    });
+    it('consumable purchase is NOT considered for entitlement', async () => {
+        await purchaseStore.savePurchase(purchase({
+            userId: 'u6',
+            productId: 'pro_monthly', // even matching productId
+            type: 'consumable',
+        }));
+        const result = await evaluateEntitlement('u6', PREMIUM.premium, store, purchaseStore);
+        expect(result.active).toBe(false);
+    });
+    it('multi-product subscriptions: returns the first matching active sub', async () => {
+        // User has two subs — one for pro_yearly (matches), one for off-premium product (no match)
+        await store.save(sub({ userId: 'u7', productId: 'unrelated_product' }));
+        await store.save(sub({ userId: 'u7', productId: 'pro_yearly' }));
+        const result = await evaluateEntitlement('u7', PREMIUM.premium, store, purchaseStore);
+        expect(result.active).toBe(true);
+        expect(result.productId).toBe('pro_yearly');
+    });
+});
+// ─────────────────────────────────────────────────────────────────────────────
+// HTTP routes
+// ─────────────────────────────────────────────────────────────────────────────
+describe('GET /onesub/entitlement', () => {
+    it('returns active=true when user has matching active sub', async () => {
+        const { store, server } = buildServer({ entitlements: PREMIUM });
+        await store.save(sub({ userId: 'u_yes', productId: 'pro_monthly' }));
+        const resp = await server.get('/onesub/entitlement?userId=u_yes&id=premium');
+        expect(resp.status).toBe(200);
+        expect(resp.body.id).toBe('premium');
+        expect(resp.body.active).toBe(true);
+        expect(resp.body.source).toBe('subscription');
+    });
+    it('returns active=false when no matching record', async () => {
+        const { server } = buildServer({ entitlements: PREMIUM });
+        const resp = await server.get('/onesub/entitlement?userId=u_none&id=premium');
+        expect(resp.status).toBe(200);
+        expect(resp.body.active).toBe(false);
+        expect(resp.body.source).toBeNull();
+    });
+    it('404 + ENTITLEMENT_NOT_FOUND for unknown id', async () => {
+        const { server } = buildServer({ entitlements: PREMIUM });
+        const resp = await server.get('/onesub/entitlement?userId=u&id=enterprise');
+        expect(resp.status).toBe(404);
+        expect(resp.body.errorCode).toBe('ENTITLEMENT_NOT_FOUND');
+    });
+    it('400 INVALID_INPUT when userId or id is missing', async () => {
+        const { server } = buildServer({ entitlements: PREMIUM });
+        const resp = await server.get('/onesub/entitlement?userId=u');
+        expect(resp.status).toBe(400);
+        expect(resp.body.errorCode).toBe('INVALID_INPUT');
+    });
+});
+describe('GET /onesub/entitlements (bulk)', () => {
+    it('evaluates every configured entitlement in one round-trip', async () => {
+        const config = {
+            premium: { productIds: ['pro_monthly', 'pro_yearly'] },
+            promode: { productIds: ['dev_tools_addon'] },
+        };
+        const { store, server } = buildServer({ entitlements: config });
+        await store.save(sub({ userId: 'u_bulk', productId: 'pro_yearly' }));
+        const resp = await server.get('/onesub/entitlements?userId=u_bulk');
+        expect(resp.status).toBe(200);
+        expect(resp.body.entitlements.premium.active).toBe(true);
+        expect(resp.body.entitlements.premium.productId).toBe('pro_yearly');
+        expect(resp.body.entitlements.promode.active).toBe(false);
+    });
+    it('returns empty entitlement statuses for a user with nothing', async () => {
+        const config = {
+            premium: { productIds: ['pro_monthly'] },
+            addon: { productIds: ['some_addon'] },
+        };
+        const { server } = buildServer({ entitlements: config });
+        const resp = await server.get('/onesub/entitlements?userId=u_empty');
+        expect(resp.body.entitlements.premium.active).toBe(false);
+        expect(resp.body.entitlements.addon.active).toBe(false);
+    });
+});
+describe('Entitlement routes are NOT mounted without config', () => {
+    it('returns 404 when config.entitlements is absent', async () => {
+        const { server } = buildServer({}); // no entitlements
+        const resp = await server.get('/onesub/entitlement?userId=u&id=premium');
+        expect(resp.status).toBe(404);
+        const respBulk = await server.get('/onesub/entitlements?userId=u');
+        expect(respBulk.status).toBe(404);
+    });
+    it('returns 404 when config.entitlements is empty {}', async () => {
+        const { server } = buildServer({ entitlements: {} });
+        const resp = await server.get('/onesub/entitlement?userId=u&id=premium');
+        expect(resp.status).toBe(404);
+    });
+});
+// ─────────────────────────────────────────────────────────────────────────────
+// Store regression: getAllByUserId returns multi-product subs
+// ─────────────────────────────────────────────────────────────────────────────
+describe('InMemorySubscriptionStore — multi-sub per user (entitlement support)', () => {
+    it('getAllByUserId returns all subs across productIds, latest first', async () => {
+        const store = new InMemorySubscriptionStore();
+        await store.save(sub({ userId: 'u', productId: 'pro_monthly', originalTransactionId: 'orig_a' }));
+        await store.save(sub({ userId: 'u', productId: 'pro_yearly', originalTransactionId: 'orig_b' }));
+        await store.save(sub({ userId: 'u', productId: 'addon', originalTransactionId: 'orig_c' }));
+        const all = await store.getAllByUserId('u');
+        expect(all.map((s) => s.productId)).toEqual(['addon', 'pro_yearly', 'pro_monthly']);
+    });
+    it('getByUserId still returns the most recent (legacy contract preserved)', async () => {
+        const store = new InMemorySubscriptionStore();
+        await store.save(sub({ userId: 'u', productId: 'pro_monthly', originalTransactionId: 'orig_a' }));
+        await store.save(sub({ userId: 'u', productId: 'pro_yearly', originalTransactionId: 'orig_b' }));
+        const latest = await store.getByUserId('u');
+        expect(latest?.productId).toBe('pro_yearly');
+    });
+    it('save() with same originalTransactionId replaces prior record (no duplicates)', async () => {
+        const store = new InMemorySubscriptionStore();
+        await store.save(sub({
+            userId: 'u', productId: 'pro_monthly', originalTransactionId: 'orig_x',
+            status: 'active',
+        }));
+        await store.save(sub({
+            userId: 'u', productId: 'pro_monthly', originalTransactionId: 'orig_x',
+            status: 'canceled',
+        }));
+        const all = await store.getAllByUserId('u');
+        expect(all).toHaveLength(1);
+        expect(all[0].status).toBe(SUBSCRIPTION_STATUS.CANCELED);
+    });
+});
+// keep the import honest
+PURCHASE_TYPE;
+//# sourceMappingURL=entitlements.test.js.map

package/dist/__tests__/entitlements.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlements.test.js","sourceRoot":"","sources":["../../src/__tests__/entitlements.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,OAAO,MAAM,SAAS,CAAC;AAS9B,OAAO,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAE/E,+EAA+E;AAE/E,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAChD,MAAM,UAAU,GAAG,0BAA0B,CAAC;AAE9C,SAAS,GAAG,CAAC,SAAqC;IAChD,OAAO;QACL,MAAM,EAAE,GAAG;QACX,SAAS,EAAE,aAAa;QACxB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,QAAQ;QAChB,SAAS,EAAE,YAAY;QACvB,qBAAqB,EAAE,QAAQ,IAAI,CAAC,MAAM,EAAE,EAAE;QAC9C,WAAW,EAAE,0BAA0B;QACvC,SAAS,EAAE,IAAI;QACf,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,SAAiC;IACjD,OAAO;QACL,MAAM,EAAE,GAAG;QACX,SAAS,EAAE,eAAe;QAC1B,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,gBAAgB;QACtB,aAAa,EAAE,MAAM,IAAI,CAAC,MAAM,EAAE,EAAE;QACpC,WAAW,EAAE,0BAA0B;QACvC,QAAQ,EAAE,CAAC;QACX,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAMD,SAAS,MAAM,CAAC,OAAwB;IACtC,OAAO;QACL,KAAK,CAAC,GAAG,CAAI,IAAY;YACvB,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,IAAI,GAAI,UAAU,CAAC,OAAO,EAAuB,CAAC,IAAI,CAAC;YAC7D,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;gBAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC/B,IAAI,MAAM,GAAY,IAAI,CAAC;gBAC3B,IAAI,CAAC;oBAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;gBAC/D,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,MAAW,EAAE,CAAC;YACpD,CAAC;oBAAS,CAAC;gBACT,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAIpB;IAKC,MAAM,KAAK,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAC9C,MAAM,aAAa,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAClD,MAAM,MAAM,GAAuB;QACjC,KAAK,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,IAAI,EAAE;QACjE,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;KAChC,CAAC;IAEF,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,yEAAyE;IACzE,+CAA+C;IAC/C,MAAM,UAAU,GAAG,sBAAsB,CAAC,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;IAC/E,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAEpB,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,OAAO,GAAuB;IAClC,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,aAAa,EAAE,YAAY,EAAE,eAAe,CAAC,EAAE;CACxE,CAAC;AAEF,gFAAgF;AAChF,sCAAsC;AACtC,gFAAgF;AAEhF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,IAAI,KAAgC,CAAC;IACrC,IAAI,aAAoC,CAAC;IAEzC,UAAU,CAAC,GAAG,EAAE;QACd,KAAK,GAAG,IAAI,yBAAyB,EAAE,CAAC;QACxC,aAAa,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QACtF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,aAAa,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QACtF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QAC1F,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;QAClE,MAAM,aAAa,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QACtF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QACtF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QACtF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,KAAK,MAAM,MAAM,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAU,EAAE,CAAC;YAC3E,MAAM,UAAU,GAAG,IAAI,yBAAyB,EAAE,CAAC;YACnD,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YAC9E,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC;YAC1F,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,aAAa,CAAC,YAAY,CAAC,QAAQ,CAAC;YACxC,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,aAAa,EAAG,0BAA0B;YACrD,IAAI,EAAE,YAAY;SACnB,CAAC,CAAC,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QACtF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,2FAA2F;QAC3F,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;QACxE,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QACtF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAChF,cAAc;AACd,gFAAgF;AAEhF,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;QACjE,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;QAErE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAsB,6CAA6C,CAAC,CAAC;QAElG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAsB,8CAA8C,CAAC,CAAC;QACnG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAwB,4CAA4C,CAAC,CAAC;QACnG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAwB,8BAA8B,CAAC,CAAC;QACrF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,MAAM,GAAuB;YACjC,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,aAAa,EAAE,YAAY,CAAC,EAAE;YACtD,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,iBAAiB,CAAC,EAAE;SAC7C,CAAC;QACF,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;QAChE,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QAErE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAuB,oCAAoC,CAAC,CAAC;QAE1F,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACpE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,MAAM,GAAuB;YACjC,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,aAAa,CAAC,EAAE;YACxC,KAAK,EAAE,EAAE,UAAU,EAAE,CAAC,YAAY,CAAC,EAAE;SACtC,CAAC;QACF,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;QAEzD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAuB,qCAAqC,CAAC,CAAC;QAE3F,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IACjE,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAE,kBAAkB;QAEvD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAU,yCAAyC,CAAC,CAAC;QAClF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,CAAU,+BAA+B,CAAC,CAAC;QAC5E,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAU,yCAAyC,CAAC,CAAC;QAClF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAChF,8DAA8D;AAC9D,gFAAgF;AAEhF,QAAQ,CAAC,sEAAsE,EAAE,GAAG,EAAE;IACpF,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,KAAK,GAAG,IAAI,yBAAyB,EAAE,CAAC;QAC9C,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAClG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QACjG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAE5F,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC;IACtF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,KAAK,GAAG,IAAI,yBAAyB,EAAE,CAAC;QAC9C,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAClG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,qBAAqB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAEjG,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,KAAK,GAAG,IAAI,yBAAyB,EAAE,CAAC;QAC9C,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,qBAAqB,EAAE,QAAQ;YACtE,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC,CAAC;QACJ,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,qBAAqB,EAAE,QAAQ;YACtE,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC,CAAC;QAEJ,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,yBAAyB;AACzB,aAAa,CAAC"}

package/dist/__tests__/error-codes.test.js

@@ -0,0 +1,173 @@
+import { describe, it, expect, beforeEach } from 'vitest';
+import request from 'supertest';
+import express from 'express';
+import { ONESUB_ERROR_CODE } from '@onesub/shared';
+import { createOneSubMiddleware } from '../index.js';
+import { InMemorySubscriptionStore, InMemoryPurchaseStore } from '../store.js';
+/**
+ * HTTP-level tests: the errorCode field is present on every 4xx/5xx response,
+ * and the value matches the canonical `ONESUB_ERROR_CODE` enum. Clients can
+ * rely on `errorCode` to drive programmatic branching regardless of the
+ * human-readable `error` string.
+ */
+describe('server error codes', () => {
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    let app;
+    beforeEach(() => {
+        const config = {
+            database: { url: '' },
+            adminSecret: 'test-admin-secret',
+        };
+        app = express();
+        app.use(createOneSubMiddleware({
+            ...config,
+            store: new InMemorySubscriptionStore(),
+            purchaseStore: new InMemoryPurchaseStore(),
+        }));
+    });
+    // ── /onesub/validate ──────────────────────────────────────────
+    describe('POST /onesub/validate', () => {
+        it('invalid body → errorCode: INVALID_INPUT', async () => {
+            const res = await request(app).post('/onesub/validate').send({ platform: 'not-valid' });
+            expect(res.status).toBe(400);
+            expect(res.body.errorCode).toBe(ONESUB_ERROR_CODE.INVALID_INPUT);
+        });
+        it('apple config missing → errorCode: APPLE_CONFIG_MISSING', async () => {
+            const res = await request(app).post('/onesub/validate').send({
+                platform: 'apple',
+                receipt: 'dummy',
+                userId: 'u1',
+                productId: 'p1',
+            });
+            expect(res.status).toBe(500);
+            expect(res.body.errorCode).toBe(ONESUB_ERROR_CODE.APPLE_CONFIG_MISSING);
+        });
+        it('google config missing → errorCode: GOOGLE_CONFIG_MISSING', async () => {
+            const res = await request(app).post('/onesub/validate').send({
+                platform: 'google',
+                receipt: 'dummy',
+                userId: 'u1',
+                productId: 'p1',
+            });
+            expect(res.status).toBe(500);
+            expect(res.body.errorCode).toBe(ONESUB_ERROR_CODE.GOOGLE_CONFIG_MISSING);
+        });
+    });
+    // ── /onesub/status ────────────────────────────────────────────
+    describe('GET /onesub/status', () => {
+        it('missing userId → errorCode: INVALID_INPUT', async () => {
+            const res = await request(app).get('/onesub/status');
+            expect(res.status).toBe(400);
+            expect(res.body.errorCode).toBe(ONESUB_ERROR_CODE.INVALID_INPUT);
+        });
+        it('oversize userId → errorCode: USER_ID_TOO_LONG', async () => {
+            const res = await request(app).get('/onesub/status').query({ userId: 'x'.repeat(300) });
+            expect(res.status).toBe(400);
+            expect(res.body.errorCode).toBe(ONESUB_ERROR_CODE.USER_ID_TOO_LONG);
+        });
+    });
+    // ── /onesub/purchase/validate ────────────────────────────────
+    describe('POST /onesub/purchase/validate', () => {
+        it('invalid body → errorCode: INVALID_INPUT', async () => {
+            const res = await request(app).post('/onesub/purchase/validate').send({});
+            expect(res.status).toBe(400);
+            expect(res.body.errorCode).toBe(ONESUB_ERROR_CODE.INVALID_INPUT);
+        });
+        it('non-consumable already owned → 200 idempotent restore with recorded transactionId', async () => {
+            // Pre-seed the store with a purchase
+            const purchaseStore = new InMemoryPurchaseStore();
+            await purchaseStore.savePurchase({
+                transactionId: 'tx_1',
+                userId: 'u1',
+                productId: 'premium',
+                platform: 'apple',
+                type: 'non_consumable',
+                quantity: 1,
+                purchasedAt: new Date().toISOString(),
+            });
+            const app2 = express();
+            app2.use(createOneSubMiddleware({
+                database: { url: '' },
+                apple: { bundleId: 'com.test' },
+                store: new InMemorySubscriptionStore(),
+                purchaseStore,
+            }));
+            const res = await request(app2).post('/onesub/purchase/validate').send({
+                platform: 'apple',
+                receipt: 'dummy',
+                userId: 'u1',
+                productId: 'premium',
+                type: 'non_consumable',
+            });
+            // Owning a non-consumable IS success. The server returns the recorded
+            // purchase as a `restored` result — crucially WITH its transactionId — so
+            // downstream consumers can re-entitle instead of receiving a 409 + null.
+            expect(res.status).toBe(200);
+            expect(res.body.valid).toBe(true);
+            expect(res.body.action).toBe('restored');
+            expect(res.body.purchase.transactionId).toBe('tx_1');
+        });
+    });
+    // ── /onesub/webhook/apple ────────────────────────────────────
+    describe('POST /onesub/webhook/apple', () => {
+        it('missing signedPayload → errorCode: MISSING_SIGNED_PAYLOAD', async () => {
+            const res = await request(app).post('/onesub/webhook/apple').send({});
+            expect(res.status).toBe(400);
+            expect(res.body.errorCode).toBe(ONESUB_ERROR_CODE.MISSING_SIGNED_PAYLOAD);
+        });
+        it('invalid signedPayload → errorCode: INVALID_SIGNED_PAYLOAD', async () => {
+            const res = await request(app).post('/onesub/webhook/apple').send({ signedPayload: 'not-a-jws' });
+            expect(res.status).toBe(400);
+            expect(res.body.errorCode).toBe(ONESUB_ERROR_CODE.INVALID_SIGNED_PAYLOAD);
+        });
+    });
+    // ── /onesub/webhook/google ───────────────────────────────────
+    describe('POST /onesub/webhook/google', () => {
+        it('missing message.data → errorCode: MISSING_MESSAGE_DATA', async () => {
+            const res = await request(app).post('/onesub/webhook/google').send({});
+            expect(res.status).toBe(400);
+            expect(res.body.errorCode).toBe(ONESUB_ERROR_CODE.MISSING_MESSAGE_DATA);
+        });
+    });
+    // ── /onesub/purchase/admin/* ─────────────────────────────────
+    describe('admin routes', () => {
+        it('missing admin secret → errorCode: INVALID_ADMIN_SECRET', async () => {
+            const res = await request(app).delete('/onesub/purchase/admin/u1/premium');
+            expect(res.status).toBe(401);
+            expect(res.body.errorCode).toBe(ONESUB_ERROR_CODE.INVALID_ADMIN_SECRET);
+        });
+        it('admin auth middleware does NOT intercept non-admin routes on the host app', async () => {
+            // Regression: before the fix, `router.use(authMiddleware)` without a path
+            // prefix caught every request routed through createOneSubMiddleware,
+            // so host-app routes like /health returned 401.
+            const appWithHealth = express();
+            appWithHealth.use(createOneSubMiddleware({
+                database: { url: '' },
+                adminSecret: 'test-admin-secret',
+                store: new InMemorySubscriptionStore(),
+                purchaseStore: new InMemoryPurchaseStore(),
+            }));
+            appWithHealth.get('/health', (_req, res) => res.json({ ok: true }));
+            const res = await request(appWithHealth).get('/health');
+            expect(res.status).toBe(200);
+            expect(res.body.ok).toBe(true);
+        });
+        it('transfer with unknown tx → errorCode: TRANSACTION_NOT_FOUND', async () => {
+            const res = await request(app)
+                .post('/onesub/purchase/admin/transfer')
+                .set('x-admin-secret', 'test-admin-secret')
+                .send({ transactionId: 'ghost', newUserId: 'new_user' });
+            expect(res.status).toBe(404);
+            expect(res.body.errorCode).toBe(ONESUB_ERROR_CODE.TRANSACTION_NOT_FOUND);
+        });
+        it('grant with bad body → errorCode: INVALID_INPUT', async () => {
+            const res = await request(app)
+                .post('/onesub/purchase/admin/grant')
+                .set('x-admin-secret', 'test-admin-secret')
+                .send({});
+            expect(res.status).toBe(400);
+            expect(res.body.errorCode).toBe(ONESUB_ERROR_CODE.INVALID_INPUT);
+        });
+    });
+});
+//# sourceMappingURL=error-codes.test.js.map

package/dist/__tests__/error-codes.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-codes.test.js","sourceRoot":"","sources":["../../src/__tests__/error-codes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,OAAO,MAAM,WAAW,CAAC;AAChC,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAE/E;;;;;GAKG;AACH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,8DAA8D;IAC9D,IAAI,GAAQ,CAAC;IAEb,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,MAAM,GAAuB;YACjC,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACrB,WAAW,EAAE,mBAAmB;SACjC,CAAC;QACF,GAAG,GAAG,OAAO,EAAE,CAAC;QAChB,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC;YAC7B,GAAG,MAAM;YACT,KAAK,EAAE,IAAI,yBAAyB,EAAE;YACtC,aAAa,EAAE,IAAI,qBAAqB,EAAE;SAC3C,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,iEAAiE;IACjE,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;QACrC,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;YACxF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC;gBAC3D,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC;gBAC3D,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,iEAAiE;IACjE,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YACrD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACxF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,gEAAgE;IAChE,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAC9C,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC1E,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;YACjG,qCAAqC;YACrC,MAAM,aAAa,GAAG,IAAI,qBAAqB,EAAE,CAAC;YAClD,MAAM,aAAa,CAAC,YAAY,CAAC;gBAC/B,aAAa,EAAE,MAAM;gBACrB,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,SAAS;gBACpB,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,CAAC;gBACX,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACtC,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC;gBAC9B,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBACrB,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;gBAC/B,KAAK,EAAE,IAAI,yBAAyB,EAAE;gBACtC,aAAa;aACd,CAAC,CAAC,CAAC;YAEJ,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC;gBACrE,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,OAAO;gBAChB,MAAM,EAAE,IAAI;gBACZ,SAAS,EAAE,SAAS;gBACpB,IAAI,EAAE,gBAAgB;aACvB,CAAC,CAAC;YACH,sEAAsE;YACtE,0EAA0E;YAC1E,yEAAyE;YACzE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,gEAAgE;IAChE,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAC1C,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACtE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;YACzE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;YAClG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,gEAAgE;IAChE,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC3C,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,gEAAgE;IAChE,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5B,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACtE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,mCAAmC,CAAC,CAAC;YAC3E,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;YACzF,0EAA0E;YAC1E,qEAAqE;YACrE,gDAAgD;YAChD,MAAM,aAAa,GAAG,OAAO,EAAE,CAAC;YAChC,aAAa,CAAC,GAAG,CAAC,sBAAsB,CAAC;gBACvC,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;gBACrB,WAAW,EAAE,mBAAmB;gBAChC,KAAK,EAAE,IAAI,yBAAyB,EAAE;gBACtC,aAAa,EAAE,IAAI,qBAAqB,EAAE;aAC3C,CAAC,CAAC,CAAC;YACJ,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAEpE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACxD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;YAC3E,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;iBAC3B,IAAI,CAAC,iCAAiC,CAAC;iBACvC,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;iBAC1C,IAAI,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;YAC3D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;YAC9D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;iBAC3B,IAAI,CAAC,8BAA8B,CAAC;iBACpC,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,CAAC;iBAC1C,IAAI,CAAC,EAAE,CAAC,CAAC;YACZ,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}