@onesub/server 0.7.3 → 0.9.0

package/dist/__tests__/apple-status-api.test.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Tests for fetchAppleSubscriptionStatus + the Apple webhook unknown-tx fallback.
+ *
+ * Covers:
+ *   - status code 1..5 → SubscriptionStatus mapping
+ *   - sandbox vs production host routing
+ *   - missing API credentials → returns null (no throw)
+ *   - HTTP error / empty data → returns null
+ *   - webhook receives notification for unknown originalTransactionId →
+ *     calls Status API + saves the returned record
+ *   - webhook unknown tx without API creds → no fetch, just logs
+ */
+export {};
+//# sourceMappingURL=apple-status-api.test.d.ts.map

package/dist/__tests__/apple-status-api.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apple-status-api.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/apple-status-api.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/dist/__tests__/apple-status-api.test.js

@@ -0,0 +1,345 @@
+/**
+ * Tests for fetchAppleSubscriptionStatus + the Apple webhook unknown-tx fallback.
+ *
+ * Covers:
+ *   - status code 1..5 → SubscriptionStatus mapping
+ *   - sandbox vs production host routing
+ *   - missing API credentials → returns null (no throw)
+ *   - HTTP error / empty data → returns null
+ *   - webhook receives notification for unknown originalTransactionId →
+ *     calls Status API + saves the returned record
+ *   - webhook unknown tx without API creds → no fetch, just logs
+ */
+import { describe, it, expect, beforeAll, beforeEach, vi } from 'vitest';
+import express from 'express';
+import { generateKeyPairSync } from 'crypto';
+import { SUBSCRIPTION_STATUS } from '@onesub/shared';
+import { fetchAppleSubscriptionStatus } from '../providers/apple.js';
+import { createWebhookRouter } from '../routes/webhook.js';
+import { InMemorySubscriptionStore, InMemoryPurchaseStore } from '../store.js';
+import { isLocalhostUrl } from './test-utils.js';
+// ── helpers ─────────────────────────────────────────────────────────────────
+function makeJws(payload) {
+    const header = Buffer.from(JSON.stringify({ alg: 'ES256' })).toString('base64url');
+    const body = Buffer.from(JSON.stringify(payload)).toString('base64url');
+    return `${header}.${body}.fakesig`;
+}
+let testEcKey;
+beforeAll(() => {
+    const { privateKey } = generateKeyPairSync('ec', { namedCurve: 'P-256' });
+    testEcKey = privateKey.export({ type: 'pkcs8', format: 'pem' });
+});
+beforeEach(() => {
+    vi.restoreAllMocks();
+});
+function appleConfigWithApi(overrides) {
+    return {
+        bundleId: 'com.example.app',
+        skipJwsVerification: true,
+        keyId: 'TESTKEY1',
+        issuerId: '12345678-1234-1234-1234-123456789012',
+        privateKey: testEcKey,
+        ...overrides,
+    };
+}
+/**
+ * Mock global fetch with localhost pass-through. Apple Status API requests
+ * resolve to the provided body; localhost (our test http server) is forwarded
+ * to the real fetch implementation.
+ */
+function mockAppleStatusFetch(responseBody, opts) {
+    const originalFetch = global.fetch;
+    const calls = [];
+    vi.spyOn(global, 'fetch').mockImplementation(async (url, init) => {
+        if (isLocalhostUrl(url)) {
+            return originalFetch(url, init);
+        }
+        const urlStr = String(url);
+        calls.push({
+            url: urlStr,
+            method: init?.method,
+            headers: init?.headers,
+        });
+        return {
+            ok: (opts?.status ?? 200) < 400,
+            status: opts?.status ?? 200,
+            json: async () => responseBody,
+            text: async () => JSON.stringify(responseBody),
+        };
+    });
+    return calls;
+}
+function makeStatusResponse(opts) {
+    const tx = makeJws({
+        bundleId: 'com.example.app',
+        type: 'Auto-Renewable Subscription',
+        productId: opts.productId ?? 'pro_monthly',
+        transactionId: 'tx_inner',
+        originalTransactionId: opts.originalTransactionId,
+        purchaseDate: Date.now() - 30 * 86400000,
+        originalPurchaseDate: Date.now() - 30 * 86400000,
+        expiresDate: opts.expiresDate ?? Date.now() + 86400000,
+    });
+    const renewal = makeJws({ autoRenewStatus: opts.autoRenewStatus ?? 1 });
+    return {
+        bundleId: 'com.example.app',
+        environment: 'Production',
+        data: [{
+                subscriptionGroupIdentifier: 'group_a',
+                lastTransactions: [{
+                        originalTransactionId: opts.originalTransactionId,
+                        status: opts.status,
+                        signedTransactionInfo: tx,
+                        signedRenewalInfo: renewal,
+                    }],
+            }],
+    };
+}
+// ── fetchAppleSubscriptionStatus unit tests ─────────────────────────────────
+describe('fetchAppleSubscriptionStatus', () => {
+    it('returns null when API credentials are missing', async () => {
+        const fetchSpy = vi.spyOn(global, 'fetch');
+        const result = await fetchAppleSubscriptionStatus('orig_xyz', {
+            bundleId: 'com.example.app',
+            skipJwsVerification: true,
+        });
+        expect(result).toBeNull();
+        expect(fetchSpy).not.toHaveBeenCalled();
+    });
+    it('returns null when mockMode is enabled', async () => {
+        const fetchSpy = vi.spyOn(global, 'fetch');
+        const result = await fetchAppleSubscriptionStatus('orig_xyz', appleConfigWithApi({ mockMode: true }));
+        expect(result).toBeNull();
+        expect(fetchSpy).not.toHaveBeenCalled();
+    });
+    it('GET .../inApps/v1/subscriptions/<id> with Bearer JWT', async () => {
+        const calls = mockAppleStatusFetch(makeStatusResponse({
+            originalTransactionId: 'orig_active',
+            status: 1,
+        }));
+        await fetchAppleSubscriptionStatus('orig_active', appleConfigWithApi());
+        expect(calls).toHaveLength(1);
+        expect(calls[0].url).toContain('api.storekit.itunes.apple.com');
+        expect(calls[0].url).toContain('/inApps/v1/subscriptions/orig_active');
+        expect(calls[0].headers?.Authorization).toMatch(/^Bearer /);
+    });
+    it('routes to sandbox host when options.sandbox is true', async () => {
+        const calls = mockAppleStatusFetch(makeStatusResponse({
+            originalTransactionId: 'orig_sb',
+            status: 1,
+        }));
+        await fetchAppleSubscriptionStatus('orig_sb', appleConfigWithApi(), { sandbox: true });
+        expect(calls[0].url).toContain('api.storekit-sandbox.itunes.apple.com');
+    });
+    it('maps status code 1 → active', async () => {
+        mockAppleStatusFetch(makeStatusResponse({ originalTransactionId: 'o1', status: 1 }));
+        const result = await fetchAppleSubscriptionStatus('o1', appleConfigWithApi());
+        expect(result?.status).toBe(SUBSCRIPTION_STATUS.ACTIVE);
+    });
+    it('maps status code 2 → expired', async () => {
+        mockAppleStatusFetch(makeStatusResponse({ originalTransactionId: 'o2', status: 2 }));
+        const result = await fetchAppleSubscriptionStatus('o2', appleConfigWithApi());
+        expect(result?.status).toBe(SUBSCRIPTION_STATUS.EXPIRED);
+    });
+    it('maps status code 3 → on_hold (billing retry)', async () => {
+        mockAppleStatusFetch(makeStatusResponse({ originalTransactionId: 'o3', status: 3 }));
+        const result = await fetchAppleSubscriptionStatus('o3', appleConfigWithApi());
+        expect(result?.status).toBe(SUBSCRIPTION_STATUS.ON_HOLD);
+    });
+    it('maps status code 4 → grace_period', async () => {
+        mockAppleStatusFetch(makeStatusResponse({ originalTransactionId: 'o4', status: 4 }));
+        const result = await fetchAppleSubscriptionStatus('o4', appleConfigWithApi());
+        expect(result?.status).toBe(SUBSCRIPTION_STATUS.GRACE_PERIOD);
+    });
+    it('maps status code 5 → canceled (revoked)', async () => {
+        mockAppleStatusFetch(makeStatusResponse({ originalTransactionId: 'o5', status: 5 }));
+        const result = await fetchAppleSubscriptionStatus('o5', appleConfigWithApi());
+        expect(result?.status).toBe(SUBSCRIPTION_STATUS.CANCELED);
+    });
+    it('reads autoRenewStatus from signedRenewalInfo for willRenew', async () => {
+        mockAppleStatusFetch(makeStatusResponse({
+            originalTransactionId: 'o_renew',
+            status: 1,
+            autoRenewStatus: 0,
+        }));
+        const result = await fetchAppleSubscriptionStatus('o_renew', appleConfigWithApi());
+        expect(result?.willRenew).toBe(false);
+    });
+    it('returns null on HTTP 404', async () => {
+        mockAppleStatusFetch({ errorCode: 4040010 }, { status: 404 });
+        const result = await fetchAppleSubscriptionStatus('not_found', appleConfigWithApi());
+        expect(result).toBeNull();
+    });
+    it('returns null when data array is empty', async () => {
+        mockAppleStatusFetch({ bundleId: 'com.example.app', environment: 'Production', data: [] });
+        const result = await fetchAppleSubscriptionStatus('orig_empty', appleConfigWithApi());
+        expect(result).toBeNull();
+    });
+    it('returns null when matching originalTransactionId not in lastTransactions', async () => {
+        mockAppleStatusFetch({
+            bundleId: 'com.example.app',
+            environment: 'Production',
+            data: [{
+                    subscriptionGroupIdentifier: 'g',
+                    lastTransactions: [{
+                            originalTransactionId: 'different_id',
+                            status: 1,
+                            signedTransactionInfo: makeJws({ productId: 'p', expiresDate: Date.now() }),
+                        }],
+                }],
+        });
+        const result = await fetchAppleSubscriptionStatus('expected_id', appleConfigWithApi());
+        expect(result).toBeNull();
+    });
+    it('preserves originalTransactionId from caller (not from inner JWS)', async () => {
+        mockAppleStatusFetch(makeStatusResponse({
+            originalTransactionId: 'orig_caller',
+            status: 1,
+        }));
+        const result = await fetchAppleSubscriptionStatus('orig_caller', appleConfigWithApi());
+        expect(result?.originalTransactionId).toBe('orig_caller');
+    });
+});
+function buildAppleWebhookServer(config) {
+    const store = new InMemorySubscriptionStore();
+    const purchaseStore = new InMemoryPurchaseStore();
+    const app = express();
+    app.use(express.json());
+    app.use(createWebhookRouter(config, store, purchaseStore));
+    return {
+        store,
+        server: {
+            async request(path, body) {
+                const httpServer = app.listen(0);
+                const address = httpServer.address();
+                const port = typeof address === 'object' && address ? address.port : 0;
+                try {
+                    const resp = await fetch(`http://127.0.0.1:${port}${path}`, {
+                        method: 'POST',
+                        headers: { 'Content-Type': 'application/json' },
+                        body: JSON.stringify(body),
+                    });
+                    const text = await resp.text();
+                    let parsed = text;
+                    try {
+                        parsed = JSON.parse(text);
+                    }
+                    catch { /* keep as text */ }
+                    return { status: resp.status, body: parsed };
+                }
+                finally {
+                    await new Promise((resolve) => httpServer.close(() => resolve()));
+                }
+            },
+        },
+    };
+}
+function buildUnknownTxNotification(originalTransactionId, opts) {
+    const signedTransactionInfo = makeJws({
+        bundleId: 'com.example.app',
+        type: 'Auto-Renewable Subscription',
+        productId: 'pro_monthly',
+        transactionId: 'tx_notify',
+        originalTransactionId,
+        purchaseDate: Date.now(),
+        expiresDate: Date.now() + 86400000,
+        environment: opts?.sandbox ? 'Sandbox' : 'Production',
+    });
+    return {
+        signedPayload: makeJws({
+            notificationType: 'DID_RENEW',
+            data: {
+                signedTransactionInfo,
+                signedRenewalInfo: makeJws({ autoRenewStatus: 1 }),
+            },
+        }),
+    };
+}
+describe('Apple webhook — unknown originalTransactionId fallback', () => {
+    it('fetches from Status API and saves a placeholder record when API creds present', async () => {
+        mockAppleStatusFetch(makeStatusResponse({
+            originalTransactionId: 'orig_unknown',
+            status: 1,
+        }));
+        const config = {
+            apple: appleConfigWithApi(),
+            database: { url: '' },
+        };
+        const { store, server } = buildAppleWebhookServer(config);
+        const resp = await server.request('/onesub/webhook/apple', buildUnknownTxNotification('orig_unknown'));
+        expect(resp.status).toBe(200);
+        const saved = await store.getByTransactionId('orig_unknown');
+        expect(saved).not.toBeNull();
+        expect(saved?.status).toBe(SUBSCRIPTION_STATUS.ACTIVE);
+        // userId is unknown at webhook time — placeholder is the originalTransactionId
+        expect(saved?.userId).toBe('orig_unknown');
+    });
+    it('routes to sandbox host when notification environment is Sandbox', async () => {
+        const calls = mockAppleStatusFetch(makeStatusResponse({
+            originalTransactionId: 'orig_sb_unknown',
+            status: 1,
+        }));
+        const config = {
+            apple: appleConfigWithApi(),
+            database: { url: '' },
+        };
+        const { server } = buildAppleWebhookServer(config);
+        await server.request('/onesub/webhook/apple', buildUnknownTxNotification('orig_sb_unknown', { sandbox: true }));
+        const apiCall = calls.find((c) => c.url.includes('/inApps/v1/subscriptions/'));
+        expect(apiCall?.url).toContain('api.storekit-sandbox.itunes.apple.com');
+    });
+    it('does not call Status API when issuerId/keyId/privateKey are missing', async () => {
+        const originalFetch = global.fetch;
+        const outboundCalls = [];
+        vi.spyOn(global, 'fetch').mockImplementation(async (url, init) => {
+            if (isLocalhostUrl(url)) {
+                return originalFetch(url, init);
+            }
+            outboundCalls.push({ url: String(url) });
+            return { ok: true, status: 200, json: async () => ({}), text: async () => '' };
+        });
+        const config = {
+            apple: { bundleId: 'com.example.app', skipJwsVerification: true }, // no API creds
+            database: { url: '' },
+        };
+        const { store, server } = buildAppleWebhookServer(config);
+        const resp = await server.request('/onesub/webhook/apple', buildUnknownTxNotification('orig_no_creds'));
+        expect(resp.status).toBe(200);
+        expect(await store.getByTransactionId('orig_no_creds')).toBeNull();
+        expect(outboundCalls).toHaveLength(0);
+    });
+    it('does not overwrite an existing record (still the normal update path)', async () => {
+        const originalFetch = global.fetch;
+        const outboundCalls = [];
+        vi.spyOn(global, 'fetch').mockImplementation(async (url, init) => {
+            if (isLocalhostUrl(url)) {
+                return originalFetch(url, init);
+            }
+            outboundCalls.push({ url: String(url) });
+            return { ok: true, status: 200, json: async () => ({}), text: async () => '' };
+        });
+        const config = {
+            apple: appleConfigWithApi(),
+            database: { url: '' },
+        };
+        const { store, server } = buildAppleWebhookServer(config);
+        const existing = {
+            userId: 'real_user',
+            productId: 'pro_monthly',
+            platform: 'apple',
+            status: SUBSCRIPTION_STATUS.ACTIVE,
+            expiresAt: '2027-01-01T00:00:00.000Z',
+            originalTransactionId: 'orig_known',
+            purchasedAt: '2026-01-01T00:00:00.000Z',
+            willRenew: true,
+        };
+        await store.save(existing);
+        const resp = await server.request('/onesub/webhook/apple', buildUnknownTxNotification('orig_known'));
+        expect(resp.status).toBe(200);
+        // Existing record's userId preserved (not replaced with placeholder)
+        expect((await store.getByTransactionId('orig_known'))?.userId).toBe('real_user');
+        // No outbound Status API call since we already had the record
+        expect(outboundCalls.find((c) => c.url.includes('/inApps/v1/subscriptions/'))).toBeUndefined();
+    });
+});
+//# sourceMappingURL=apple-status-api.test.js.map

package/dist/__tests__/apple-status-api.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apple-status-api.test.js","sourceRoot":"","sources":["../../src/__tests__/apple-status-api.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,OAAO,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,QAAQ,CAAC;AAE7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,+EAA+E;AAE/E,SAAS,OAAO,CAAC,OAAgC;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxE,OAAO,GAAG,MAAM,IAAI,IAAI,UAAU,CAAC;AACrC,CAAC;AAED,IAAI,SAAiB,CAAC;AAEtB,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1E,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW,CAAC;AAC5E,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,GAAG,EAAE;IACd,EAAE,CAAC,eAAe,EAAE,CAAC;AACvB,CAAC,CAAC,CAAC;AAEH,SAAS,kBAAkB,CAAC,SAAgD;IAC1E,OAAO;QACL,QAAQ,EAAE,iBAAiB;QAC3B,mBAAmB,EAAE,IAAI;QACzB,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,sCAAsC;QAChD,UAAU,EAAE,SAAS;QACrB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,YAAqB,EAAE,IAA0B;IAC7E,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;IACnC,MAAM,KAAK,GAAyE,EAAE,CAAC;IACvF,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC/D,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC;YACT,GAAG,EAAE,MAAM;YACX,MAAM,EAAE,IAAI,EAAE,MAAM;YACpB,OAAO,EAAE,IAAI,EAAE,OAAiC;SACjD,CAAC,CAAC;QACH,OAAO;YACL,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,IAAI,GAAG,CAAC,GAAG,GAAG;YAC/B,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,GAAG;YAC3B,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,YAAY;YAC9B,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;SACnC,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,IAM3B;IACC,MAAM,EAAE,GAAG,OAAO,CAAC;QACjB,QAAQ,EAAE,iBAAiB;QAC3B,IAAI,EAAE,6BAA6B;QACnC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,aAAa;QAC1C,aAAa,EAAE,UAAU;QACzB,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;QACjD,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,QAAQ;QACxC,oBAAoB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,QAAQ;QAChD,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;KACvD,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,OAAO,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,CAAC,EAAE,CAAC,CAAC;IACxE,OAAO;QACL,QAAQ,EAAE,iBAAiB;QAC3B,WAAW,EAAE,YAAY;QACzB,IAAI,EAAE,CAAC;gBACL,2BAA2B,EAAE,SAAS;gBACtC,gBAAgB,EAAE,CAAC;wBACjB,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;wBACjD,MAAM,EAAE,IAAI,CAAC,MAAM;wBACnB,qBAAqB,EAAE,EAAE;wBACzB,iBAAiB,EAAE,OAAO;qBAC3B,CAAC;aACH,CAAC;KACH,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,UAAU,EAAE;YAC5D,QAAQ,EAAE,iBAAiB;YAC3B,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,UAAU,EAAE,kBAAkB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACtG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,KAAK,GAAG,oBAAoB,CAAC,kBAAkB,CAAC;YACpD,qBAAqB,EAAE,aAAa;YACpC,MAAM,EAAE,CAAC;SACV,CAAC,CAAC,CAAC;QAEJ,MAAM,4BAA4B,CAAC,aAAa,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAExE,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAC;QAChE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,sCAAsC,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,KAAK,GAAG,oBAAoB,CAAC,kBAAkB,CAAC;YACpD,qBAAqB,EAAE,SAAS;YAChC,MAAM,EAAE,CAAC;SACV,CAAC,CAAC,CAAC;QAEJ,MAAM,4BAA4B,CAAC,SAAS,EAAE,kBAAkB,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvF,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,oBAAoB,CAAC,kBAAkB,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,oBAAoB,CAAC,kBAAkB,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,oBAAoB,CAAC,kBAAkB,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,oBAAoB,CAAC,kBAAkB,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,oBAAoB,CAAC,kBAAkB,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACrF,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,oBAAoB,CAAC,kBAAkB,CAAC;YACtC,qBAAqB,EAAE,SAAS;YAChC,MAAM,EAAE,CAAC;YACT,eAAe,EAAE,CAAC;SACnB,CAAC,CAAC,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACnF,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,oBAAoB,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACrF,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,oBAAoB,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,WAAW,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3F,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,YAAY,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACtF,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,oBAAoB,CAAC;YACnB,QAAQ,EAAE,iBAAiB;YAC3B,WAAW,EAAE,YAAY;YACzB,IAAI,EAAE,CAAC;oBACL,2BAA2B,EAAE,GAAG;oBAChC,gBAAgB,EAAE,CAAC;4BACjB,qBAAqB,EAAE,cAAc;4BACrC,MAAM,EAAE,CAAC;4BACT,qBAAqB,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;yBAC5E,CAAC;iBACH,CAAC;SACH,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,aAAa,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,KAAK,IAAI,EAAE;QAChF,oBAAoB,CAAC,kBAAkB,CAAC;YACtC,qBAAqB,EAAE,aAAa;YACpC,MAAM,EAAE,CAAC;SACV,CAAC,CAAC,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,4BAA4B,CAAC,aAAa,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAQH,SAAS,uBAAuB,CAAC,MAA0B;IAIzD,MAAM,KAAK,GAAG,IAAI,yBAAyB,EAAE,CAAC;IAC9C,MAAM,aAAa,GAAG,IAAI,qBAAqB,EAAE,CAAC;IAClD,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACxB,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;IAC3D,OAAO;QACL,KAAK;QACL,MAAM,EAAE;YACN,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI;gBACtB,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACjC,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,CAAC;gBACrC,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvE,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,oBAAoB,IAAI,GAAG,IAAI,EAAE,EAAE;wBAC1D,MAAM,EAAE,MAAM;wBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;wBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;qBAC3B,CAAC,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;oBAC/B,IAAI,MAAM,GAAY,IAAI,CAAC;oBAC3B,IAAI,CAAC;wBAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAAC,CAAC;oBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;oBAC/D,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC/C,CAAC;wBAAS,CAAC;oBACT,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC1E,CAAC;YACH,CAAC;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,qBAA6B,EAAE,IAA4B;IAC7F,MAAM,qBAAqB,GAAG,OAAO,CAAC;QACpC,QAAQ,EAAE,iBAAiB;QAC3B,IAAI,EAAE,6BAA6B;QACnC,SAAS,EAAE,aAAa;QACxB,aAAa,EAAE,WAAW;QAC1B,qBAAqB;QACrB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;QACxB,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;QAClC,WAAW,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;KACtD,CAAC,CAAC;IACH,OAAO;QACL,aAAa,EAAE,OAAO,CAAC;YACrB,gBAAgB,EAAE,WAAW;YAC7B,IAAI,EAAE;gBACJ,qBAAqB;gBACrB,iBAAiB,EAAE,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;aACnD;SACF,CAAC;KACH,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,wDAAwD,EAAE,GAAG,EAAE;IACtE,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,oBAAoB,CAAC,kBAAkB,CAAC;YACtC,qBAAqB,EAAE,cAAc;YACrC,MAAM,EAAE,CAAC;SACV,CAAC,CAAC,CAAC;QAEJ,MAAM,MAAM,GAAuB;YACjC,KAAK,EAAE,kBAAkB,EAAE;YAC3B,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;SACtB,CAAC;QACF,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAE1D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,uBAAuB,EAAE,0BAA0B,CAAC,cAAc,CAAC,CAAC,CAAC;QACvG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE9B,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACvD,+EAA+E;QAC/E,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,KAAK,GAAG,oBAAoB,CAAC,kBAAkB,CAAC;YACpD,qBAAqB,EAAE,iBAAiB;YACxC,MAAM,EAAE,CAAC;SACV,CAAC,CAAC,CAAC;QAEJ,MAAM,MAAM,GAAuB;YACjC,KAAK,EAAE,kBAAkB,EAAE;YAC3B,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;SACtB,CAAC;QACF,MAAM,EAAE,MAAM,EAAE,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAEnD,MAAM,MAAM,CAAC,OAAO,CAClB,uBAAuB,EACvB,0BAA0B,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CACjE,CAAC;QAEF,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,uCAAuC,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;QACnC,MAAM,aAAa,GAAsB,EAAE,CAAC;QAC5C,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC/D,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAc,CAAC;QAC7F,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAuB;YACjC,KAAK,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,eAAe;YAClF,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;SACtB,CAAC;QACF,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAE1D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,uBAAuB,EAAE,0BAA0B,CAAC,eAAe,CAAC,CAAC,CAAC;QACxG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnE,MAAM,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;QACnC,MAAM,aAAa,GAAsB,EAAE,CAAC;QAC5C,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC/D,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;gBACxB,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACzC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAc,CAAC;QAC7F,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAuB;YACjC,KAAK,EAAE,kBAAkB,EAAE;YAC3B,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;SACtB,CAAC;QACF,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAE1D,MAAM,QAAQ,GAAqB;YACjC,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,aAAa;YACxB,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,mBAAmB,CAAC,MAAM;YAClC,SAAS,EAAE,0BAA0B;YACrC,qBAAqB,EAAE,YAAY;YACnC,WAAW,EAAE,0BAA0B;YACvC,SAAS,EAAE,IAAI;SAChB,CAAC;QACF,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE3B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,uBAAuB,EAAE,0BAA0B,CAAC,YAAY,CAAC,CAAC,CAAC;QACrG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE9B,qEAAqE;QACrE,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjF,8DAA8D;QAC9D,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACjG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/fetch-hardening.test.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Tests for outbound fetch hardening:
+ *   - Apple Server API JWT cache (re-use within TTL, mint dedup under concurrent calls)
+ *   - fetchWithTimeout: AbortController fires when upstream hangs longer than the budget
+ */
+export {};
+//# sourceMappingURL=fetch-hardening.test.d.ts.map

package/dist/__tests__/fetch-hardening.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-hardening.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/fetch-hardening.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/__tests__/fetch-hardening.test.js

@@ -0,0 +1,192 @@
+/**
+ * Tests for outbound fetch hardening:
+ *   - Apple Server API JWT cache (re-use within TTL, mint dedup under concurrent calls)
+ *   - fetchWithTimeout: AbortController fires when upstream hangs longer than the budget
+ */
+import { describe, it, expect, beforeAll, beforeEach, vi } from 'vitest';
+import { generateKeyPairSync } from 'crypto';
+import { fetchAppleSubscriptionStatus, __testing as appleTesting } from '../providers/apple.js';
+import { fetchWithTimeout } from '../http.js';
+import { isLocalhostUrl } from './test-utils.js';
+let testEcKey;
+beforeAll(() => {
+    const { privateKey } = generateKeyPairSync('ec', { namedCurve: 'P-256' });
+    testEcKey = privateKey.export({ type: 'pkcs8', format: 'pem' });
+});
+beforeEach(() => {
+    vi.restoreAllMocks();
+    appleTesting.clearAppleJwtCacheForTests();
+});
+function appleConfig() {
+    return {
+        bundleId: 'com.example.app',
+        skipJwsVerification: true,
+        keyId: 'KEY1',
+        issuerId: 'iss-uuid',
+        privateKey: testEcKey,
+    };
+}
+function makeJws(payload) {
+    const header = Buffer.from(JSON.stringify({ alg: 'ES256' })).toString('base64url');
+    const body = Buffer.from(JSON.stringify(payload)).toString('base64url');
+    return `${header}.${body}.fakesig`;
+}
+function statusResponse(orig) {
+    return {
+        bundleId: 'com.example.app',
+        environment: 'Production',
+        data: [{
+                lastTransactions: [{
+                        originalTransactionId: orig,
+                        status: 1,
+                        signedTransactionInfo: makeJws({
+                            bundleId: 'com.example.app',
+                            productId: 'pro_monthly',
+                            transactionId: 'tx',
+                            originalTransactionId: orig,
+                            purchaseDate: Date.now(),
+                            originalPurchaseDate: Date.now(),
+                            expiresDate: Date.now() + 86400000,
+                        }),
+                        signedRenewalInfo: makeJws({ autoRenewStatus: 1 }),
+                    }],
+            }],
+    };
+}
+// ── Apple JWT cache ─────────────────────────────────────────────────────────
+describe('makeAppleApiJwt cache', () => {
+    it('mints a JWT once per cache window when called sequentially', async () => {
+        const originalFetch = global.fetch;
+        const calls = [];
+        vi.spyOn(global, 'fetch').mockImplementation(async (url, init) => {
+            if (isLocalhostUrl(url))
+                return originalFetch(url, init);
+            const headers = init?.headers;
+            calls.push({ url: String(url), auth: headers?.Authorization });
+            return {
+                ok: true,
+                status: 200,
+                json: async () => statusResponse('orig_a'),
+                text: async () => '',
+            };
+        });
+        await fetchAppleSubscriptionStatus('orig_a', appleConfig());
+        await fetchAppleSubscriptionStatus('orig_a', appleConfig());
+        await fetchAppleSubscriptionStatus('orig_a', appleConfig());
+        // 3 outbound API calls, but the Authorization header (Bearer <jwt>) should
+        // be the same JWT in all of them — cache hit on calls 2 and 3.
+        expect(calls).toHaveLength(3);
+        expect(calls[0].auth).toBeDefined();
+        expect(calls[1].auth).toBe(calls[0].auth);
+        expect(calls[2].auth).toBe(calls[0].auth);
+    });
+    it('dedups concurrent JWT mints (single in-flight Promise under burst)', async () => {
+        // Use a real key pair sign spy through jose? Indirect — just count fetch
+        // Authorization headers across many concurrent calls. With dedup, all
+        // share the same JWT.
+        const originalFetch = global.fetch;
+        const auths = [];
+        vi.spyOn(global, 'fetch').mockImplementation(async (url, init) => {
+            if (isLocalhostUrl(url))
+                return originalFetch(url, init);
+            const headers = init?.headers;
+            auths.push(headers?.Authorization ?? '');
+            return {
+                ok: true,
+                status: 200,
+                json: async () => statusResponse('orig_burst'),
+                text: async () => '',
+            };
+        });
+        await Promise.all(Array.from({ length: 10 }, () => fetchAppleSubscriptionStatus('orig_burst', appleConfig())));
+        expect(auths).toHaveLength(10);
+        const unique = new Set(auths);
+        expect(unique.size).toBe(1); // all 10 used the same JWT
+    });
+    it('mints a fresh JWT after the cache is cleared (e.g. credential rotation)', async () => {
+        const originalFetch = global.fetch;
+        const auths = [];
+        vi.spyOn(global, 'fetch').mockImplementation(async (url, init) => {
+            if (isLocalhostUrl(url))
+                return originalFetch(url, init);
+            const headers = init?.headers;
+            auths.push(headers?.Authorization ?? '');
+            return {
+                ok: true,
+                status: 200,
+                json: async () => statusResponse('orig_clear'),
+                text: async () => '',
+            };
+        });
+        await fetchAppleSubscriptionStatus('orig_clear', appleConfig());
+        appleTesting.clearAppleJwtCacheForTests();
+        await fetchAppleSubscriptionStatus('orig_clear', appleConfig());
+        expect(auths).toHaveLength(2);
+        expect(auths[0]).not.toBe(auths[1]); // cache miss → fresh JWT
+    });
+});
+// ── fetchWithTimeout ────────────────────────────────────────────────────────
+describe('fetchWithTimeout', () => {
+    it('returns the response when upstream replies before the timeout', async () => {
+        vi.spyOn(global, 'fetch').mockImplementation(async () => {
+            return { ok: true, status: 200, text: async () => 'hi' };
+        });
+        const resp = await fetchWithTimeout('https://example.com', undefined, 1000);
+        expect(resp.ok).toBe(true);
+    });
+    it('aborts when upstream hangs longer than the timeout', async () => {
+        vi.spyOn(global, 'fetch').mockImplementation((_input, init) => {
+            // Simulate a hung server — never resolves until the AbortController fires
+            return new Promise((_resolve, reject) => {
+                const signal = init?.signal;
+                if (signal) {
+                    signal.addEventListener('abort', () => {
+                        const reason = signal.reason;
+                        reject(reason instanceof Error ? reason : new Error('aborted'));
+                    });
+                }
+            });
+        });
+        const start = Date.now();
+        await expect(fetchWithTimeout('https://hung.example', undefined, 100)).rejects.toThrow(/timed out|aborted/i);
+        const elapsed = Date.now() - start;
+        expect(elapsed).toBeGreaterThanOrEqual(90);
+        expect(elapsed).toBeLessThan(500);
+    });
+    it('respects a caller-provided AbortSignal (composes with timeout)', async () => {
+        vi.spyOn(global, 'fetch').mockImplementation((_input, init) => {
+            return new Promise((_resolve, reject) => {
+                init?.signal?.addEventListener('abort', () => reject(new Error('aborted')));
+            });
+        });
+        const ac = new AbortController();
+        setTimeout(() => ac.abort(new Error('caller cancelled')), 30);
+        await expect(fetchWithTimeout('https://hung.example', { signal: ac.signal }, 5000)).rejects.toThrow();
+    });
+    it('clears its timer on success (no leaked handles)', async () => {
+        vi.spyOn(global, 'fetch').mockImplementation(async () => {
+            return { ok: true, status: 200, text: async () => 'ok' };
+        });
+        // 100s timeout, but resolves immediately. If the timer leaked, vitest
+        // would hold the process open after the test — vitest's `--detectLeaks`
+        // would catch that. Smoke test here is just that the call returns and the
+        // process doesn't hang the test runner.
+        await fetchWithTimeout('https://example.com', undefined, 100_000);
+        // Reaching this line means the timer either fired (it shouldn't) or was
+        // cleared. We can't easily inspect `setTimeout` internals, but the suite
+        // completing in normal time is the implicit assertion.
+        expect(true).toBe(true);
+    });
+    it('uses the default 10s budget when no timeoutMs is passed', async () => {
+        let observedTimeout;
+        vi.spyOn(global, 'fetch').mockImplementation((_input, init) => {
+            // Snapshot any abort behaviour: we can't read the timeout directly,
+            // but we can verify a signal is attached.
+            observedTimeout = init?.signal ? 1 : 0;
+            return Promise.resolve({ ok: true, status: 200, text: async () => '' });
+        });
+        await fetchWithTimeout('https://example.com');
+        expect(observedTimeout).toBe(1); // signal attached → timeout active
+    });
+});
+//# sourceMappingURL=fetch-hardening.test.js.map

package/dist/__tests__/fetch-hardening.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-hardening.test.js","sourceRoot":"","sources":["../../src/__tests__/fetch-hardening.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,QAAQ,CAAC;AAE7C,OAAO,EAAE,4BAA4B,EAAE,SAAS,IAAI,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAChG,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAW,MAAM,iBAAiB,CAAC;AAE1D,IAAI,SAAiB,CAAC;AAEtB,SAAS,CAAC,GAAG,EAAE;IACb,MAAM,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1E,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW,CAAC;AAC5E,CAAC,CAAC,CAAC;AAEH,UAAU,CAAC,GAAG,EAAE;IACd,EAAE,CAAC,eAAe,EAAE,CAAC;IACrB,YAAY,CAAC,0BAA0B,EAAE,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,SAAS,WAAW;IAClB,OAAO;QACL,QAAQ,EAAE,iBAAiB;QAC3B,mBAAmB,EAAE,IAAI;QACzB,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,SAAS;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,OAAgC;IAC/C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxE,OAAO,GAAG,MAAM,IAAI,IAAI,UAAU,CAAC;AACrC,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO;QACL,QAAQ,EAAE,iBAAiB;QAC3B,WAAW,EAAE,YAAY;QACzB,IAAI,EAAE,CAAC;gBACL,gBAAgB,EAAE,CAAC;wBACjB,qBAAqB,EAAE,IAAI;wBAC3B,MAAM,EAAE,CAAC;wBACT,qBAAqB,EAAE,OAAO,CAAC;4BAC7B,QAAQ,EAAE,iBAAiB;4BAC3B,SAAS,EAAE,aAAa;4BACxB,aAAa,EAAE,IAAI;4BACnB,qBAAqB,EAAE,IAAI;4BAC3B,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;4BACxB,oBAAoB,EAAE,IAAI,CAAC,GAAG,EAAE;4BAChC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ;yBACnC,CAAC;wBACF,iBAAiB,EAAE,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;qBACnD,CAAC;aACH,CAAC;KACH,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;QACnC,MAAM,KAAK,GAAqC,EAAE,CAAC;QACnD,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC/D,IAAI,cAAc,CAAC,GAAG,CAAC;gBAAE,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,IAAI,EAAE,OAA6C,CAAC;YACpE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC;YAC/D,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;gBAC1C,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;aACT,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,MAAM,4BAA4B,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAC5D,MAAM,4BAA4B,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAC5D,MAAM,4BAA4B,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;QAE5D,2EAA2E;QAC3E,+DAA+D;QAC/D,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,yEAAyE;QACzE,sEAAsE;QACtE,sBAAsB;QACtB,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;QACnC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC/D,IAAI,cAAc,CAAC,GAAG,CAAC;gBAAE,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,IAAI,EAAE,OAA6C,CAAC;YACpE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC;YACzC,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,cAAc,CAAC,YAAY,CAAC;gBAC9C,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;aACT,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,GAAG,CACf,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,4BAA4B,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,CAC5F,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,2BAA2B;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;QACnC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;YAC/D,IAAI,cAAc,CAAC,GAAG,CAAC;gBAAE,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,IAAI,EAAE,OAA6C,CAAC;YACpE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC;YACzC,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,cAAc,CAAC,YAAY,CAAC;gBAC9C,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;aACT,CAAC;QAChB,CAAC,CAAC,CAAC;QAEH,MAAM,4BAA4B,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;QAChE,YAAY,CAAC,0BAA0B,EAAE,CAAC;QAC1C,MAAM,4BAA4B,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;QAEhE,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,yBAAyB;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,+EAA+E;AAE/E,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE;YACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAc,CAAC;QACvE,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,qBAAqB,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;YAC5D,0EAA0E;YAC1E,OAAO,IAAI,OAAO,CAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBAChD,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC;gBAC5B,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;wBACpC,MAAM,MAAM,GAAI,MAA6C,CAAC,MAAM,CAAC;wBACrE,MAAM,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;oBAClE,CAAC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,MAAM,CAAC,gBAAgB,CAAC,sBAAsB,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QAC7G,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACnC,MAAM,CAAC,OAAO,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;QAC9E,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;YAC5D,OAAO,IAAI,OAAO,CAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBAChD,IAAI,EAAE,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAC9E,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;QACjC,UAAU,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAE9D,MAAM,MAAM,CACV,gBAAgB,CAAC,sBAAsB,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CACtE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE;YACtD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI,EAAc,CAAC;QACvE,CAAC,CAAC,CAAC;QACH,sEAAsE;QACtE,wEAAwE;QACxE,0EAA0E;QAC1E,wCAAwC;QACxC,MAAM,gBAAgB,CAAC,qBAAqB,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAClE,wEAAwE;QACxE,yEAAyE;QACzE,uDAAuD;QACvD,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,IAAI,eAAmC,CAAC;QACxC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE;YAC5D,oEAAoE;YACpE,0CAA0C;YAC1C,eAAe,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE,EAAc,CAAC,CAAC;QACtF,CAAC,CAAC,CAAC;QACH,MAAM,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;QAC9C,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,mCAAmC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/google-paused.test.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Tests for the new 'paused' SubscriptionStatus + Google webhook
+ * SUBSCRIPTION_PAUSED notification handling.
+ *
+ * Background: Google supports user-voluntary pause (different from on_hold,
+ * which is involuntary payment failure). Surfaced as a distinct status so
+ * the host app can render the right UX ("재개 예정" vs "결제 정보 업데이트").
+ */
+export {};
+//# sourceMappingURL=google-paused.test.d.ts.map

package/dist/__tests__/google-paused.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-paused.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/google-paused.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}