@onesub/server 0.14.0 → 0.15.0

package/dist/__tests__/fetch-hardening.test.js

@@ -1,192 +0,0 @@
-/**
- * Tests for outbound fetch hardening:
- *   - Apple Server API JWT cache (re-use within TTL, mint dedup under concurrent calls)
- *   - fetchWithTimeout: AbortController fires when upstream hangs longer than the budget
- */
-import { describe, it, expect, beforeAll, beforeEach, vi } from 'vitest';
-import { generateKeyPairSync } from 'crypto';
-import { fetchAppleSubscriptionStatus, __testing as appleTesting } from '../providers/apple.js';
-import { fetchWithTimeout } from '../http.js';
-import { isLocalhostUrl } from './test-utils.js';
-let testEcKey;
-beforeAll(() => {
-    const { privateKey } = generateKeyPairSync('ec', { namedCurve: 'P-256' });
-    testEcKey = privateKey.export({ type: 'pkcs8', format: 'pem' });
-});
-beforeEach(() => {
-    vi.restoreAllMocks();
-    appleTesting.clearAppleJwtCacheForTests();
-});
-function appleConfig() {
-    return {
-        bundleId: 'com.example.app',
-        skipJwsVerification: true,
-        keyId: 'KEY1',
-        issuerId: 'iss-uuid',
-        privateKey: testEcKey,
-    };
-}
-function makeJws(payload) {
-    const header = Buffer.from(JSON.stringify({ alg: 'ES256' })).toString('base64url');
-    const body = Buffer.from(JSON.stringify(payload)).toString('base64url');
-    return `${header}.${body}.fakesig`;
-}
-function statusResponse(orig) {
-    return {
-        bundleId: 'com.example.app',
-        environment: 'Production',
-        data: [{
-                lastTransactions: [{
-                        originalTransactionId: orig,
-                        status: 1,
-                        signedTransactionInfo: makeJws({
-                            bundleId: 'com.example.app',
-                            productId: 'pro_monthly',
-                            transactionId: 'tx',
-                            originalTransactionId: orig,
-                            purchaseDate: Date.now(),
-                            originalPurchaseDate: Date.now(),
-                            expiresDate: Date.now() + 86400000,
-                        }),
-                        signedRenewalInfo: makeJws({ autoRenewStatus: 1 }),
-                    }],
-            }],
-    };
-}
-// ── Apple JWT cache ─────────────────────────────────────────────────────────
-describe('makeAppleApiJwt cache', () => {
-    it('mints a JWT once per cache window when called sequentially', async () => {
-        const originalFetch = global.fetch;
-        const calls = [];
-        vi.spyOn(global, 'fetch').mockImplementation(async (url, init) => {
-            if (isLocalhostUrl(url))
-                return originalFetch(url, init);
-            const headers = init?.headers;
-            calls.push({ url: String(url), auth: headers?.Authorization });
-            return {
-                ok: true,
-                status: 200,
-                json: async () => statusResponse('orig_a'),
-                text: async () => '',
-            };
-        });
-        await fetchAppleSubscriptionStatus('orig_a', appleConfig());
-        await fetchAppleSubscriptionStatus('orig_a', appleConfig());
-        await fetchAppleSubscriptionStatus('orig_a', appleConfig());
-        // 3 outbound API calls, but the Authorization header (Bearer <jwt>) should
-        // be the same JWT in all of them — cache hit on calls 2 and 3.
-        expect(calls).toHaveLength(3);
-        expect(calls[0].auth).toBeDefined();
-        expect(calls[1].auth).toBe(calls[0].auth);
-        expect(calls[2].auth).toBe(calls[0].auth);
-    });
-    it('dedups concurrent JWT mints (single in-flight Promise under burst)', async () => {
-        // Use a real key pair sign spy through jose? Indirect — just count fetch
-        // Authorization headers across many concurrent calls. With dedup, all
-        // share the same JWT.
-        const originalFetch = global.fetch;
-        const auths = [];
-        vi.spyOn(global, 'fetch').mockImplementation(async (url, init) => {
-            if (isLocalhostUrl(url))
-                return originalFetch(url, init);
-            const headers = init?.headers;
-            auths.push(headers?.Authorization ?? '');
-            return {
-                ok: true,
-                status: 200,
-                json: async () => statusResponse('orig_burst'),
-                text: async () => '',
-            };
-        });
-        await Promise.all(Array.from({ length: 10 }, () => fetchAppleSubscriptionStatus('orig_burst', appleConfig())));
-        expect(auths).toHaveLength(10);
-        const unique = new Set(auths);
-        expect(unique.size).toBe(1); // all 10 used the same JWT
-    });
-    it('mints a fresh JWT after the cache is cleared (e.g. credential rotation)', async () => {
-        const originalFetch = global.fetch;
-        const auths = [];
-        vi.spyOn(global, 'fetch').mockImplementation(async (url, init) => {
-            if (isLocalhostUrl(url))
-                return originalFetch(url, init);
-            const headers = init?.headers;
-            auths.push(headers?.Authorization ?? '');
-            return {
-                ok: true,
-                status: 200,
-                json: async () => statusResponse('orig_clear'),
-                text: async () => '',
-            };
-        });
-        await fetchAppleSubscriptionStatus('orig_clear', appleConfig());
-        appleTesting.clearAppleJwtCacheForTests();
-        await fetchAppleSubscriptionStatus('orig_clear', appleConfig());
-        expect(auths).toHaveLength(2);
-        expect(auths[0]).not.toBe(auths[1]); // cache miss → fresh JWT
-    });
-});
-// ── fetchWithTimeout ────────────────────────────────────────────────────────
-describe('fetchWithTimeout', () => {
-    it('returns the response when upstream replies before the timeout', async () => {
-        vi.spyOn(global, 'fetch').mockImplementation(async () => {
-            return { ok: true, status: 200, text: async () => 'hi' };
-        });
-        const resp = await fetchWithTimeout('https://example.com', undefined, 1000);
-        expect(resp.ok).toBe(true);
-    });
-    it('aborts when upstream hangs longer than the timeout', async () => {
-        vi.spyOn(global, 'fetch').mockImplementation((_input, init) => {
-            // Simulate a hung server — never resolves until the AbortController fires
-            return new Promise((_resolve, reject) => {
-                const signal = init?.signal;
-                if (signal) {
-                    signal.addEventListener('abort', () => {
-                        const reason = signal.reason;
-                        reject(reason instanceof Error ? reason : new Error('aborted'));
-                    });
-                }
-            });
-        });
-        const start = Date.now();
-        await expect(fetchWithTimeout('https://hung.example', undefined, 100)).rejects.toThrow(/timed out|aborted/i);
-        const elapsed = Date.now() - start;
-        expect(elapsed).toBeGreaterThanOrEqual(90);
-        expect(elapsed).toBeLessThan(500);
-    });
-    it('respects a caller-provided AbortSignal (composes with timeout)', async () => {
-        vi.spyOn(global, 'fetch').mockImplementation((_input, init) => {
-            return new Promise((_resolve, reject) => {
-                init?.signal?.addEventListener('abort', () => reject(new Error('aborted')));
-            });
-        });
-        const ac = new AbortController();
-        setTimeout(() => ac.abort(new Error('caller cancelled')), 30);
-        await expect(fetchWithTimeout('https://hung.example', { signal: ac.signal }, 5000)).rejects.toThrow();
-    });
-    it('clears its timer on success (no leaked handles)', async () => {
-        vi.spyOn(global, 'fetch').mockImplementation(async () => {
-            return { ok: true, status: 200, text: async () => 'ok' };
-        });
-        // 100s timeout, but resolves immediately. If the timer leaked, vitest
-        // would hold the process open after the test — vitest's `--detectLeaks`
-        // would catch that. Smoke test here is just that the call returns and the
-        // process doesn't hang the test runner.
-        await fetchWithTimeout('https://example.com', undefined, 100_000);
-        // Reaching this line means the timer either fired (it shouldn't) or was
-        // cleared. We can't easily inspect `setTimeout` internals, but the suite
-        // completing in normal time is the implicit assertion.
-        expect(true).toBe(true);
-    });
-    it('uses the default 10s budget when no timeoutMs is passed', async () => {
-        let observedTimeout;
-        vi.spyOn(global, 'fetch').mockImplementation((_input, init) => {
-            // Snapshot any abort behaviour: we can't read the timeout directly,
-            // but we can verify a signal is attached.
-            observedTimeout = init?.signal ? 1 : 0;
-            return Promise.resolve({ ok: true, status: 200, text: async () => '' });
-        });
-        await fetchWithTimeout('https://example.com');
-        expect(observedTimeout).toBe(1); // signal attached → timeout active
-    });
-});
-//# sourceMappingURL=fetch-hardening.test.js.map

package/dist/__tests__/fetch-hardening.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fetch-hardening.test.js","sourceRoot":"","sources":["../../src/__tests__/fetch-hardening.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,QAAQ,CAAC;AAE7C,OAAO,EAAE,4BAA4B,EAAE,SAAS,IAAI,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAChG,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAW,MAAM,iBAAiB,CAAC;AAE1D,IAAI,SAAiB,CAAC;AAEtB,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1E,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW,CAAC;AAC5E,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,GAAG,EAAE;IACd,EAAE,CAAC,eAAe,EAAE,CAAC;IACrB,YAAY,CAAC,0BAA0B,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,SAAS,WAAW;IAClB,OAAO;QACL,QAAQ,EAAE,iBAAiB;QAC3B,mBAAmB,EAAE,IAAI;QACzB,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,SAAS;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,OAAgC;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxE,OAAO,GAAG,MAAM,IAAI,IAAI,UAAU,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO;QACL,QAAQ,EAAE,iBAAiB;QAC3B,WAAW,EAAE,YAAY;QACzB,IAAI,EAAE,CAAC;gBACL,gBAAgB,EAAE,CAAC;wBACjB,qBAAqB,EAAE,IAAI;wBAC3B,MAAM,EAAE,CAAC;wBACT,qBAAqB,EAAE,OAAO,CAAC;4BAC7B,QAAQ,EAAE,iBAAiB;4BAC3B,SAAS,EAAE,aAAa;4BACxB,aAAa,EAAE,IAAI;4BACnB,qBAAqB,EAAE,IAAI;4BAC3B,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;4BACxB,oBAAoB,EAAE,IAAI,CAAC,GAAG,EAAE;4BAChC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;yBACnC,CAAC;wBACF,iBAAiB,EAAE,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;qBACnD,CAAC;aACH,CAAC;KACH,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;QACnC,MAAM,KAAK,GAAqC,EAAE,CAAC;QACnD,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC/D,IAAI,cAAc,CAAC,GAAG,CAAC;gBAAE,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,IAAI,EAAE,OAA6C,CAAC;YACpE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;YAC/D,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;gBAC1C,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;aACT,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,MAAM,4BAA4B,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAC5D,MAAM,4BAA4B,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAC5D,MAAM,4BAA4B,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAE5D,2EAA2E;QAC3E,+DAA+D;QAC/D,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,yEAAyE;QACzE,sEAAsE;QACtE,sBAAsB;QACtB,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;QACnC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC/D,IAAI,cAAc,CAAC,GAAG,CAAC;gBAAE,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,IAAI,EAAE,OAA6C,CAAC;YACpE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC;YACzC,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,cAAc,CAAC,YAAY,CAAC;gBAC9C,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;aACT,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,4BAA4B,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAC5F,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,2BAA2B;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;QACnC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC/D,IAAI,cAAc,CAAC,GAAG,CAAC;gBAAE,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,IAAI,EAAE,OAA6C,CAAC;YACpE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC;YACzC,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,cAAc,CAAC,YAAY,CAAC;gBAC9C,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;aACT,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,MAAM,4BAA4B,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;QAChE,YAAY,CAAC,0BAA0B,EAAE,CAAC;QAC1C,MAAM,4BAA4B,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;QAEhE,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,yBAAyB;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAE/E,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE;YACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAc,CAAC;QACvE,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,qBAAqB,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;YAC5D,0EAA0E;YAC1E,OAAO,IAAI,OAAO,CAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBAChD,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC;gBAC5B,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;wBACpC,MAAM,MAAM,GAAI,MAA6C,CAAC,MAAM,CAAC;wBACrE,MAAM,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;oBAClE,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,MAAM,CAAC,gBAAgB,CAAC,sBAAsB,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC7G,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACnC,MAAM,CAAC,OAAO,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;YAC5D,OAAO,IAAI,OAAO,CAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBAChD,IAAI,EAAE,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC9E,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAE9D,MAAM,MAAM,CACV,gBAAgB,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CACtE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE;YACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAc,CAAC;QACvE,CAAC,CAAC,CAAC;QACH,sEAAsE;QACtE,wEAAwE;QACxE,0EAA0E;QAC1E,wCAAwC;QACxC,MAAM,gBAAgB,CAAC,qBAAqB,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAClE,wEAAwE;QACxE,yEAAyE;QACzE,uDAAuD;QACvD,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,IAAI,eAAmC,CAAC;QACxC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;YAC5D,oEAAoE;YACpE,0CAA0C;YAC1C,eAAe,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAc,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;QACH,MAAM,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;QAC9C,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,mCAAmC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/google-paused.test.js

@@ -1,126 +0,0 @@
-/**
- * Tests for the new 'paused' SubscriptionStatus + Google webhook
- * SUBSCRIPTION_PAUSED notification handling.
- *
- * Background: Google supports user-voluntary pause (different from on_hold,
- * which is involuntary payment failure). Surfaced as a distinct status so
- * the host app can render the right UX ("재개 예정" vs "결제 정보 업데이트").
- */
-import { describe, it, expect, beforeEach } from 'vitest';
-import express from 'express';
-import { SUBSCRIPTION_STATUS } from '@onesub/shared';
-import { createWebhookRouter } from '../routes/webhook.js';
-import { createStatusRouter } from '../routes/status.js';
-import { InMemorySubscriptionStore, InMemoryPurchaseStore } from '../store.js';
-function spinUp(handler) {
-    return {
-        async request(method, path, body) {
-            const server = handler.listen(0);
-            const address = server.address();
-            const port = typeof address === 'object' && address ? address.port : 0;
-            try {
-                const init = { method };
-                if (body !== undefined) {
-                    init.headers = { 'Content-Type': 'application/json' };
-                    init.body = JSON.stringify(body);
-                }
-                const resp = await fetch(`http://127.0.0.1:${port}${path}`, init);
-                const text = await resp.text();
-                let parsed = text;
-                try {
-                    parsed = JSON.parse(text);
-                }
-                catch { /* keep as text */ }
-                return { status: resp.status, body: parsed };
-            }
-            finally {
-                await new Promise((resolve) => server.close(() => resolve()));
-            }
-        },
-    };
-}
-const sampleSub = (overrides) => ({
-    userId: 'user_pause',
-    productId: 'pro_monthly',
-    platform: 'google',
-    status: 'active',
-    expiresAt: '2099-01-01T00:00:00.000Z',
-    originalTransactionId: 'tok_pause',
-    purchasedAt: '2026-01-01T00:00:00.000Z',
-    willRenew: true,
-    ...overrides,
-});
-function googlePushBody(notificationType, purchaseToken = 'tok_pause') {
-    const json = JSON.stringify({
-        version: '1.0',
-        packageName: 'com.example.app',
-        eventTimeMillis: String(Date.now()),
-        subscriptionNotification: {
-            version: '1.0',
-            notificationType,
-            purchaseToken,
-            subscriptionId: 'pro_monthly',
-        },
-    });
-    return {
-        message: { data: Buffer.from(json).toString('base64'), messageId: '1' },
-        subscription: 's',
-    };
-}
-// ── webhook PAUSED → status=paused ──────────────────────────────────────────
-describe('Google webhook — SUBSCRIPTION_PAUSED (10)', () => {
-    let store;
-    let server;
-    beforeEach(() => {
-        const config = {
-            google: { packageName: 'com.example.app' }, // no serviceAccountKey → no Play API re-fetch
-            database: { url: '' },
-        };
-        store = new InMemorySubscriptionStore();
-        const purchaseStore = new InMemoryPurchaseStore();
-        const app = express();
-        app.use(express.json());
-        app.use(createWebhookRouter(config, store, purchaseStore));
-        server = spinUp(app);
-    });
-    it('maps PAUSED notification to status=paused', async () => {
-        await store.save(sampleSub({ originalTransactionId: 'tok_pause' }));
-        const resp = await server.request('POST', '/onesub/webhook/google', googlePushBody(10));
-        expect(resp.status).toBe(200);
-        expect((await store.getByTransactionId('tok_pause'))?.status).toBe(SUBSCRIPTION_STATUS.PAUSED);
-    });
-    it('paused is distinct from on_hold (different lifecycle signal)', async () => {
-        await store.save(sampleSub({ originalTransactionId: 'tok_a' }));
-        await store.save(sampleSub({ userId: 'user_hold', originalTransactionId: 'tok_b' }));
-        await server.request('POST', '/onesub/webhook/google', googlePushBody(10, 'tok_a')); // PAUSED
-        await server.request('POST', '/onesub/webhook/google', googlePushBody(5, 'tok_b')); // ON_HOLD
-        expect((await store.getByTransactionId('tok_a'))?.status).toBe(SUBSCRIPTION_STATUS.PAUSED);
-        expect((await store.getByTransactionId('tok_b'))?.status).toBe(SUBSCRIPTION_STATUS.ON_HOLD);
-    });
-    it('SUBSCRIPTION_RESTARTED (7) recovers entitlement after PAUSED', async () => {
-        await store.save(sampleSub({ originalTransactionId: 'tok_resume', status: 'paused' }));
-        await server.request('POST', '/onesub/webhook/google', googlePushBody(7, 'tok_resume'));
-        expect((await store.getByTransactionId('tok_resume'))?.status).toBe(SUBSCRIPTION_STATUS.ACTIVE);
-    });
-});
-// ── status route entitlement ────────────────────────────────────────────────
-describe('status route — paused', () => {
-    let store;
-    let server;
-    beforeEach(() => {
-        store = new InMemorySubscriptionStore();
-        const app = express();
-        app.use(express.json());
-        app.use(createStatusRouter(store));
-        server = spinUp(app);
-    });
-    it('paused → active=false (entitlement revoked while paused)', async () => {
-        await store.save(sampleSub({ userId: 'u_paused', status: 'paused' }));
-        const resp = await server.request('GET', '/onesub/status?userId=u_paused');
-        expect(resp.status).toBe(200);
-        expect(resp.body.active).toBe(false);
-        // subscription record still returned so the host can show "재개 예정" UX
-        expect(resp.body.subscription?.status).toBe('paused');
-    });
-});
-//# sourceMappingURL=google-paused.test.js.map

package/dist/__tests__/google-paused.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"google-paused.test.js","sourceRoot":"","sources":["../../src/__tests__/google-paused.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAC1D,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAM/E,SAAS,MAAM,CAAC,OAAwB;IACtC,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI;YAC9B,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAgB,EAAE,MAAM,EAAE,CAAC;gBACrC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvB,IAAI,CAAC,OAAO,GAAG,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;oBACtD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACnC,CAAC;gBACD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;gBAClE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC/B,IAAI,MAAM,GAAY,IAAI,CAAC;gBAC3B,IAAI,CAAC;oBAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;gBAC/D,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC/C,CAAC;oBAAS,CAAC;gBACT,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,SAAqC,EAAoB,EAAE,CAAC,CAAC;IAC9E,MAAM,EAAE,YAAY;IACpB,SAAS,EAAE,aAAa;IACxB,QAAQ,EAAE,QAAQ;IAClB,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,0BAA0B;IACrC,qBAAqB,EAAE,WAAW;IAClC,WAAW,EAAE,0BAA0B;IACvC,SAAS,EAAE,IAAI;IACf,GAAG,SAAS;CACb,CAAC,CAAC;AAEH,SAAS,cAAc,CAAC,gBAAwB,EAAE,aAAa,GAAG,WAAW;IAC3E,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,iBAAiB;QAC9B,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,wBAAwB,EAAE;YACxB,OAAO,EAAE,KAAK;YACd,gBAAgB;YAChB,aAAa;YACb,cAAc,EAAE,aAAa;SAC9B;KACF,CAAC,CAAC;IACH,OAAO;QACL,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;QACvE,YAAY,EAAE,GAAG;KAClB,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,QAAQ,CAAC,2CAA2C,EAAE,GAAG,EAAE;IACzD,IAAI,KAAgC,CAAC;IACrC,IAAI,MAAkB,CAAC;IAEvB,UAAU,CAAC,GAAG,EAAE;QACd,MAAM,MAAM,GAAuB;YACjC,MAAM,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE,EAAG,8CAA8C;YAC3F,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;SACtB,CAAC;QACF,KAAK,GAAG,IAAI,yBAAyB,EAAE,CAAC;QACxC,MAAM,aAAa,GAAG,IAAI,qBAAqB,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;QAC3D,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,qBAAqB,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAEpE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,wBAAwB,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;QAExF,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACjG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAChE,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAErF,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,wBAAwB,EAAE,cAAc,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAE,SAAS;QAC/F,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,wBAAwB,EAAE,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAG,UAAU;QAEhG,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC3F,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAEvF,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,wBAAwB,EAAE,cAAc,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;QAExF,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAE/E,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,IAAI,KAAgC,CAAC;IACrC,IAAI,MAAkB,CAAC;IAEvB,UAAU,CAAC,GAAG,EAAE;QACd,KAAK,GAAG,IAAI,yBAAyB,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACxB,GAAG,CAAC,GAAG,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;QACnC,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAEtE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,gCAAgC,CAAC,CAAC;QAE3E,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAE,IAAI,CAAC,IAA4B,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9D,qEAAqE;QACrE,MAAM,CAAE,IAAI,CAAC,IAAkD,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/google-price-change.test.js

@@ -1,186 +0,0 @@
-/**
- * Tests for Google webhook SUBSCRIPTION_PRICE_CHANGE_CONFIRMED (8) handling
- * + the onPriceChangeConfirmed hook.
- */
-import { describe, it, expect, vi } from 'vitest';
-import express from 'express';
-import { SUBSCRIPTION_STATUS } from '@onesub/shared';
-import { createWebhookRouter } from '../routes/webhook.js';
-import { InMemorySubscriptionStore, InMemoryPurchaseStore } from '../store.js';
-function spinUp(handler) {
-    return {
-        async request(path, body) {
-            const server = handler.listen(0);
-            const address = server.address();
-            const port = typeof address === 'object' && address ? address.port : 0;
-            try {
-                const resp = await fetch(`http://127.0.0.1:${port}${path}`, {
-                    method: 'POST',
-                    headers: { 'Content-Type': 'application/json' },
-                    body: JSON.stringify(body),
-                });
-                const text = await resp.text();
-                let parsed = text;
-                try {
-                    parsed = JSON.parse(text);
-                }
-                catch { /* keep as text */ }
-                return { status: resp.status, body: parsed };
-            }
-            finally {
-                await new Promise((resolve) => server.close(() => resolve()));
-            }
-        },
-    };
-}
-const sampleSub = (overrides) => ({
-    userId: 'user_pc',
-    productId: 'pro_monthly',
-    platform: 'google',
-    status: 'active',
-    expiresAt: '2099-01-01T00:00:00.000Z',
-    originalTransactionId: 'tok_pc',
-    purchasedAt: '2026-01-01T00:00:00.000Z',
-    willRenew: true,
-    ...overrides,
-});
-function priceChangePushBody(purchaseToken = 'tok_pc') {
-    const json = JSON.stringify({
-        version: '1.0',
-        packageName: 'com.example.app',
-        eventTimeMillis: String(Date.now()),
-        subscriptionNotification: {
-            version: '1.0',
-            notificationType: 8, // SUBSCRIPTION_PRICE_CHANGE_CONFIRMED
-            purchaseToken,
-            subscriptionId: 'pro_monthly',
-        },
-    });
-    return {
-        message: { data: Buffer.from(json).toString('base64'), messageId: '1' },
-        subscription: 's',
-    };
-}
-function buildServer(config) {
-    const store = new InMemorySubscriptionStore();
-    const purchaseStore = new InMemoryPurchaseStore();
-    const app = express();
-    app.use(express.json());
-    app.use(createWebhookRouter(config, store, purchaseStore));
-    return { store, server: spinUp(app) };
-}
-describe('Google webhook — SUBSCRIPTION_PRICE_CHANGE_CONFIRMED (8)', () => {
-    it('keeps status=active for the existing record', async () => {
-        const { store, server } = buildServer({
-            google: { packageName: 'com.example.app' },
-            database: { url: '' },
-        });
-        await store.save(sampleSub({ originalTransactionId: 'tok_keep' }));
-        const resp = await server.request('/onesub/webhook/google', priceChangePushBody('tok_keep'));
-        expect(resp.status).toBe(200);
-        expect((await store.getByTransactionId('tok_keep'))?.status).toBe(SUBSCRIPTION_STATUS.ACTIVE);
-    });
-    it('invokes onPriceChangeConfirmed hook with correct context', async () => {
-        const captured = [];
-        const { store, server } = buildServer({
-            google: {
-                packageName: 'com.example.app',
-                onPriceChangeConfirmed: (ctx) => {
-                    captured.push(ctx);
-                },
-            },
-            database: { url: '' },
-        });
-        await store.save(sampleSub({ originalTransactionId: 'tok_hook' }));
-        await server.request('/onesub/webhook/google', priceChangePushBody('tok_hook'));
-        // Hook is fire-and-forget — give microtask queue a tick
-        await new Promise((r) => setTimeout(r, 30));
-        expect(captured).toHaveLength(1);
-        expect(captured[0]).toEqual({
-            purchaseToken: 'tok_hook',
-            subscriptionId: 'pro_monthly',
-            packageName: 'com.example.app',
-        });
-    });
-    it('async hook is awaited internally without blocking the webhook response', async () => {
-        let hookResolved = false;
-        const { store, server } = buildServer({
-            google: {
-                packageName: 'com.example.app',
-                onPriceChangeConfirmed: async () => {
-                    await new Promise((r) => setTimeout(r, 50));
-                    hookResolved = true;
-                },
-            },
-            database: { url: '' },
-        });
-        await store.save(sampleSub({ originalTransactionId: 'tok_async' }));
-        const start = Date.now();
-        const resp = await server.request('/onesub/webhook/google', priceChangePushBody('tok_async'));
-        const responseLatency = Date.now() - start;
-        // Webhook returned 200 fast — host's slow hook didn't block
-        expect(resp.status).toBe(200);
-        expect(responseLatency).toBeLessThan(50);
-        expect(hookResolved).toBe(false);
-        // Hook still completes eventually
-        await new Promise((r) => setTimeout(r, 80));
-        expect(hookResolved).toBe(true);
-    });
-    it('hook errors are swallowed (webhook still returns 200)', async () => {
-        const { store, server } = buildServer({
-            google: {
-                packageName: 'com.example.app',
-                onPriceChangeConfirmed: () => {
-                    throw new Error('boom');
-                },
-            },
-            database: { url: '' },
-        });
-        await store.save(sampleSub({ originalTransactionId: 'tok_throw' }));
-        const resp = await server.request('/onesub/webhook/google', priceChangePushBody('tok_throw'));
-        expect(resp.status).toBe(200);
-    });
-    it('does nothing extra when hook is not configured', async () => {
-        const { store, server } = buildServer({
-            google: { packageName: 'com.example.app' },
-            database: { url: '' },
-        });
-        await store.save(sampleSub({ originalTransactionId: 'tok_nohook' }));
-        const resp = await server.request('/onesub/webhook/google', priceChangePushBody('tok_nohook'));
-        expect(resp.status).toBe(200);
-        // Subscription still active — webhook didn't fail just because no hook
-        expect((await store.getByTransactionId('tok_nohook'))?.status).toBe(SUBSCRIPTION_STATUS.ACTIVE);
-    });
-    it('hook is NOT invoked for other notification types (e.g. DID_RENEW)', async () => {
-        const hookSpy = vi.fn();
-        const { store, server } = buildServer({
-            google: {
-                packageName: 'com.example.app',
-                onPriceChangeConfirmed: hookSpy,
-            },
-            database: { url: '' },
-        });
-        await store.save(sampleSub({ originalTransactionId: 'tok_other' }));
-        const renewBody = {
-            message: {
-                data: Buffer.from(JSON.stringify({
-                    version: '1.0',
-                    packageName: 'com.example.app',
-                    eventTimeMillis: String(Date.now()),
-                    subscriptionNotification: {
-                        version: '1.0',
-                        notificationType: 2, // SUBSCRIPTION_RENEWED
-                        purchaseToken: 'tok_other',
-                        subscriptionId: 'pro_monthly',
-                    },
-                })).toString('base64'),
-                messageId: '1',
-            },
-            subscription: 's',
-        };
-        await server.request('/onesub/webhook/google', renewBody);
-        await new Promise((r) => setTimeout(r, 30));
-        expect(hookSpy).not.toHaveBeenCalled();
-    });
-});
-//# sourceMappingURL=google-price-change.test.js.map

package/dist/__tests__/google-price-change.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"google-price-change.test.js","sourceRoot":"","sources":["../../src/__tests__/google-price-change.test.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAc,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9D,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAM/E,SAAS,MAAM,CAAC,OAAwB;IACtC,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI;YACtB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,GAAG,IAAI,EAAE,EAAE;oBAC1D,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;iBAC3B,CAAC,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC/B,IAAI,MAAM,GAAY,IAAI,CAAC;gBAC3B,IAAI,CAAC;oBAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;gBAC/D,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YAC/C,CAAC;oBAAS,CAAC;gBACT,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,SAAqC,EAAoB,EAAE,CAAC,CAAC;IAC9E,MAAM,EAAE,SAAS;IACjB,SAAS,EAAE,aAAa;IACxB,QAAQ,EAAE,QAAQ;IAClB,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,0BAA0B;IACrC,qBAAqB,EAAE,QAAQ;IAC/B,WAAW,EAAE,0BAA0B;IACvC,SAAS,EAAE,IAAI;IACf,GAAG,SAAS;CACb,CAAC,CAAC;AAEH,SAAS,mBAAmB,CAAC,aAAa,GAAG,QAAQ;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,iBAAiB;QAC9B,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,wBAAwB,EAAE;YACxB,OAAO,EAAE,KAAK;YACd,gBAAgB,EAAE,CAAC,EAAE,sCAAsC;YAC3D,aAAa;YACb,cAAc,EAAE,aAAa;SAC9B;KACF,CAAC,CAAC;IACH,OAAO;QACL,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;QACvE,YAAY,EAAE,GAAG;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAA0B;IAI7C,MAAM,KAAK,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAC9C,MAAM,aAAa,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;IAC3D,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,QAAQ,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACxE,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC;YACpC,MAAM,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE;YAC1C,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;SACtB,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,qBAAqB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAEnE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC;QAE7F,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAChG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,QAAQ,GAA+B,EAAE,CAAC;QAChD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC;YACpC,MAAM,EAAE;gBACN,WAAW,EAAE,iBAAiB;gBAC9B,sBAAsB,EAAE,CAAC,GAAG,EAAE,EAAE;oBAC9B,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACrB,CAAC;aACF;YACD,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;SACtB,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,qBAAqB,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QAEnE,MAAM,MAAM,CAAC,OAAO,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC;QAEhF,wDAAwD;QACxD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAE5C,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YAC1B,aAAa,EAAE,UAAU;YACzB,cAAc,EAAE,aAAa;YAC7B,WAAW,EAAE,iBAAiB;SAC/B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC;YACpC,MAAM,EAAE;gBACN,WAAW,EAAE,iBAAiB;gBAC9B,sBAAsB,EAAE,KAAK,IAAI,EAAE;oBACjC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;oBAC5C,YAAY,GAAG,IAAI,CAAC;gBACtB,CAAC;aACF;YACD,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;SACtB,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,qBAAqB,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAEpE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC;QAC9F,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAE3C,4DAA4D;QAC5D,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,eAAe,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACzC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEjC,kCAAkC;QAClC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC;YACpC,MAAM,EAAE;gBACN,WAAW,EAAE,iBAAiB;gBAC9B,sBAAsB,EAAE,GAAG,EAAE;oBAC3B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;gBAC1B,CAAC;aACF;YACD,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;SACtB,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,qBAAqB,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAEpE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC;QAC9F,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC;YACpC,MAAM,EAAE,EAAE,WAAW,EAAE,iBAAiB,EAAE;YAC1C,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;SACtB,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,qBAAqB,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QAErE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,wBAAwB,EAAE,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC;QAE/F,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,uEAAuE;QACvE,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,WAAW,CAAC;YACpC,MAAM,EAAE;gBACN,WAAW,EAAE,iBAAiB;gBAC9B,sBAAsB,EAAE,OAAO;aAChC;YACD,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;SACtB,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,qBAAqB,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;QAEpE,MAAM,SAAS,GAAG;YAChB,OAAO,EAAE;gBACP,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;oBAC/B,OAAO,EAAE,KAAK;oBACd,WAAW,EAAE,iBAAiB;oBAC9B,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;oBACnC,wBAAwB,EAAE;wBACxB,OAAO,EAAE,KAAK;wBACd,gBAAgB,EAAE,CAAC,EAAE,uBAAuB;wBAC5C,aAAa,EAAE,WAAW;wBAC1B,cAAc,EAAE,aAAa;qBAC9B;iBACF,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACtB,SAAS,EAAE,GAAG;aACf;YACD,YAAY,EAAE,GAAG;SAClB,CAAC;QAEF,MAAM,MAAM,CAAC,OAAO,CAAC,wBAAwB,EAAE,SAAS,CAAC,CAAC;QAC1D,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAE5C,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}