@tearleads/client-sdk 0.0.0-stage → 0.1.11

package/client/billing/directCheckout.js

@@ -0,0 +1,35 @@
+/**
+ * Direct card-checkout capability for org **sync** billing (issue #1654).
+ *
+ * Distinct from {@link PurchasesCapability}: that one drives a provider-hosted
+ * flow (RevenueCat Web Billing / native store sheets) where the provider owns
+ * the payment UI. This one mounts the PAYMENT PROVIDER's element into an
+ * element we supply, so the surrounding form is ours to style — the trade is
+ * that the app must run the confirm step itself.
+ *
+ * The capability stays provider-agnostic here (no Stripe types): the web shell
+ * injects a Stripe-backed implementation, and platforms without one get
+ * {@link createUnavailableDirectCheckout} so callers can gate on `isAvailable`
+ * rather than branching per platform.
+ */
+/** Thrown when a checkout is attempted on a platform without a provider. */
+export class DirectCheckoutUnavailableError extends Error {
+    constructor(message = "Direct checkout is not available on this platform") {
+        super(message);
+        this.name = "DirectCheckoutUnavailableError";
+    }
+}
+/**
+ * The no-op capability for platforms with no direct-checkout provider (native
+ * shells, or web without a publishable key). Reads degrade quietly so billing
+ * UI can gate on `isAvailable`; only an actual mount attempt rejects.
+ */
+export function createUnavailableDirectCheckout() {
+    return {
+        isAvailable: false,
+        mount() {
+            return Promise.reject(new DirectCheckoutUnavailableError());
+        },
+    };
+}
+//# sourceMappingURL=directCheckout.js.map

package/client/billing/directCheckout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"directCheckout.js","sourceRoot":"","sources":["directCheckout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AA6DH,4EAA4E;AAC5E,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IACvD,YAAY,OAAO,GAAG,mDAAmD;QACvE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,+BAA+B;IAC7C,OAAO;QACL,WAAW,EAAE,KAAK;QAClB,KAAK;YACH,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,8BAA8B,EAAE,CAAC,CAAC;QAC9D,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Direct card-checkout capability for org **sync** billing (issue #1654).\n *\n * Distinct from {@link PurchasesCapability}: that one drives a provider-hosted\n * flow (RevenueCat Web Billing / native store sheets) where the provider owns\n * the payment UI. This one mounts the PAYMENT PROVIDER's element into an\n * element we supply, so the surrounding form is ours to style — the trade is\n * that the app must run the confirm step itself.\n *\n * The capability stays provider-agnostic here (no Stripe types): the web shell\n * injects a Stripe-backed implementation, and platforms without one get\n * {@link createUnavailableDirectCheckout} so callers can gate on `isAvailable`\n * rather than branching per platform.\n */\n\n/** Visual tokens the host app passes down so the element matches its theme. */\nexport interface DirectCheckoutAppearance {\n  /** Resolved CSS colors (not var() references — the element is cross-origin). */\n  readonly colorBackground: string;\n  readonly colorText: string;\n  readonly colorTextSecondary: string;\n  readonly colorDanger: string;\n  readonly colorPrimary: string;\n  readonly colorBorder: string;\n  readonly fontFamily: string;\n  /** Base font size with unit, e.g. \"16px\". */\n  readonly fontSizeBase: string;\n  /** Border radius with unit, e.g. \"0\" for a square-cornered app. */\n  readonly borderRadius: string;\n  /** Vertical padding inside inputs with unit — drives the row height. */\n  readonly inputPaddingBlock: string;\n}\n\n/** Outcome of confirming a payment. */\nexport type DirectCheckoutConfirmation =\n  /** The payment succeeded (or is processing and will settle server-side). */\n  | { readonly kind: \"succeeded\" }\n  /**\n   * The buyer's input was rejected (declined card, failed validation). The\n   * element stays mounted so they can correct it; `message` is provider text\n   * already localized for display.\n   */\n  | { readonly kind: \"declined\"; readonly message: string }\n  /** The flow was cancelled locally; nothing was charged. */\n  | { readonly kind: \"cancelled\" };\n\n/** A mounted checkout element; always `unmount()` when done. */\nexport interface DirectCheckoutSession {\n  /**\n   * Confirms the payment. Resolves rather than throwing for buyer-facing\n   * outcomes so callers need not distinguish exceptions from declines.\n   */\n  confirm(): Promise<DirectCheckoutConfirmation>;\n  /** Tears the element down and releases provider resources. */\n  unmount(): void;\n}\n\nexport interface DirectCheckoutCapability {\n  /** False when this platform has no direct-checkout provider (the stub). */\n  readonly isAvailable: boolean;\n  /**\n   * Mounts the payment element into `host` for the given client secret.\n   * Rejects with {@link DirectCheckoutUnavailableError} on the stub, and with\n   * an ordinary error when the provider script cannot load.\n   */\n  mount(input: {\n    readonly host: HTMLElement;\n    readonly clientSecret: string;\n    readonly appearance: DirectCheckoutAppearance;\n    /** Customer recovery address used by the payment provider's portal. */\n    readonly billingEmail?: string;\n  }): Promise<DirectCheckoutSession>;\n}\n\n/** Thrown when a checkout is attempted on a platform without a provider. */\nexport class DirectCheckoutUnavailableError extends Error {\n  constructor(message = \"Direct checkout is not available on this platform\") {\n    super(message);\n    this.name = \"DirectCheckoutUnavailableError\";\n  }\n}\n\n/**\n * The no-op capability for platforms with no direct-checkout provider (native\n * shells, or web without a publishable key). Reads degrade quietly so billing\n * UI can gate on `isAvailable`; only an actual mount attempt rejects.\n */\nexport function createUnavailableDirectCheckout(): DirectCheckoutCapability {\n  return {\n    isAvailable: false,\n    mount() {\n      return Promise.reject(new DirectCheckoutUnavailableError());\n    },\n  };\n}\n"]}

package/client/billing/purchaseErrors.d.ts

@@ -0,0 +1,24 @@
+/** Thrown when a purchase is attempted without a purchases provider. */
+export declare class PurchasesUnavailableError extends Error {
+    constructor(message?: string, options?: ErrorOptions);
+}
+/** Buyer dismissed provider checkout without completing the purchase. */
+export declare class PurchaseCancelledError extends Error {
+    constructor(message?: string);
+}
+/** The store account already owns this subscription; offer restore/move. */
+export declare class PurchaseAlreadyOwnedError extends Error {
+    constructor(message?: string);
+}
+/** Checkout was abandoned before any provider UI mounted. */
+export declare class PurchaseAbortedError extends PurchaseCancelledError {
+    constructor(message?: string);
+}
+/** Checkout could not start because the provider identity is still changing. */
+export declare class PurchaseIdentityPendingError extends Error {
+    constructor(cause?: unknown);
+}
+/** Provider bridge stopped responding; restart the app before retrying. */
+export declare class PurchaseProviderStalledError extends Error {
+    constructor(cause?: unknown);
+}

package/client/billing/purchaseErrors.js

@@ -0,0 +1,43 @@
+/** Thrown when a purchase is attempted without a purchases provider. */
+export class PurchasesUnavailableError extends Error {
+    constructor(message = "Purchases are not available on this platform", options) {
+        super(message, options);
+        this.name = "PurchasesUnavailableError";
+    }
+}
+/** Buyer dismissed provider checkout without completing the purchase. */
+export class PurchaseCancelledError extends Error {
+    constructor(message = "The purchase was cancelled") {
+        super(message);
+        this.name = "PurchaseCancelledError";
+    }
+}
+/** The store account already owns this subscription; offer restore/move. */
+export class PurchaseAlreadyOwnedError extends Error {
+    constructor(message = "This store account already owns the subscription") {
+        super(message);
+        this.name = "PurchaseAlreadyOwnedError";
+    }
+}
+/** Checkout was abandoned before any provider UI mounted. */
+export class PurchaseAbortedError extends PurchaseCancelledError {
+    constructor(message = "The purchase was abandoned before checkout") {
+        super(message);
+        this.name = "PurchaseAbortedError";
+    }
+}
+/** Checkout could not start because the provider identity is still changing. */
+export class PurchaseIdentityPendingError extends Error {
+    constructor(cause) {
+        super("RevenueCat identity or provider queue has not settled", { cause });
+        this.name = "PurchaseIdentityPendingError";
+    }
+}
+/** Provider bridge stopped responding; restart the app before retrying. */
+export class PurchaseProviderStalledError extends Error {
+    constructor(cause) {
+        super("RevenueCat provider bridge stopped responding", { cause });
+        this.name = "PurchaseProviderStalledError";
+    }
+}
+//# sourceMappingURL=purchaseErrors.js.map

package/client/billing/purchaseErrors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"purchaseErrors.js","sourceRoot":"","sources":["purchaseErrors.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,YACE,OAAO,GAAG,8CAA8C,EACxD,OAAsB;QAEtB,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,yEAAyE;AACzE,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,OAAO,GAAG,4BAA4B;QAChD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,4EAA4E;AAC5E,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,YAAY,OAAO,GAAG,kDAAkD;QACtE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,6DAA6D;AAC7D,MAAM,OAAO,oBAAqB,SAAQ,sBAAsB;IAC9D,YAAY,OAAO,GAAG,4CAA4C;QAChE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,YAAY,KAAe;QACzB,KAAK,CAAC,uDAAuD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED,2EAA2E;AAC3E,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,YAAY,KAAe;QACzB,KAAK,CAAC,+CAA+C,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF","sourcesContent":["/** Thrown when a purchase is attempted without a purchases provider. */\nexport class PurchasesUnavailableError extends Error {\n  constructor(\n    message = \"Purchases are not available on this platform\",\n    options?: ErrorOptions,\n  ) {\n    super(message, options);\n    this.name = \"PurchasesUnavailableError\";\n  }\n}\n\n/** Buyer dismissed provider checkout without completing the purchase. */\nexport class PurchaseCancelledError extends Error {\n  constructor(message = \"The purchase was cancelled\") {\n    super(message);\n    this.name = \"PurchaseCancelledError\";\n  }\n}\n\n/** The store account already owns this subscription; offer restore/move. */\nexport class PurchaseAlreadyOwnedError extends Error {\n  constructor(message = \"This store account already owns the subscription\") {\n    super(message);\n    this.name = \"PurchaseAlreadyOwnedError\";\n  }\n}\n\n/** Checkout was abandoned before any provider UI mounted. */\nexport class PurchaseAbortedError extends PurchaseCancelledError {\n  constructor(message = \"The purchase was abandoned before checkout\") {\n    super(message);\n    this.name = \"PurchaseAbortedError\";\n  }\n}\n\n/** Checkout could not start because the provider identity is still changing. */\nexport class PurchaseIdentityPendingError extends Error {\n  constructor(cause?: unknown) {\n    super(\"RevenueCat identity or provider queue has not settled\", { cause });\n    this.name = \"PurchaseIdentityPendingError\";\n  }\n}\n\n/** Provider bridge stopped responding; restart the app before retrying. */\nexport class PurchaseProviderStalledError extends Error {\n  constructor(cause?: unknown) {\n    super(\"RevenueCat provider bridge stopped responding\", { cause });\n    this.name = \"PurchaseProviderStalledError\";\n  }\n}\n"]}

package/client/billing/purchases.d.ts

@@ -0,0 +1,177 @@
+/**
+ * Client purchases capability for org **sync** billing through a native store.
+ *
+ * Sync is the single paid feature; a purchase is made on behalf of an
+ * organization and ultimately drives the server RevenueCat webhook, which grants
+ * the org's sync entitlement. This module keeps the capability provider-agnostic:
+ * the {@link PurchasesCapability} interface is what the app consumes, the
+ * injectable {@link RevenueCatBackend} is the minimal native surface a platform
+ * shell wires up (`@revenuecat/purchases-capacitor`), and
+ * {@link createUnavailablePurchases} is the stub for platforms without a store.
+ * Web sells through the direct Stripe checkout instead and never loads a
+ * RevenueCat SDK; RevenueCat's web role is server-side receipt mirroring.
+ */
+import { type NativeSubscriptionStore, type SyncBillingTierId } from "../../internal/validators/billing.js";
+export { PurchaseAbortedError, PurchaseAlreadyOwnedError, PurchaseCancelledError, PurchaseIdentityPendingError, PurchaseProviderStalledError, PurchasesUnavailableError, } from "./purchaseErrors.js";
+/** A purchasable sync subscription option, shaped for display in billing UI. */
+export interface SyncSubscriptionOption {
+    /** Provider package identifier, passed back to {@link PurchasesCapability.purchaseSync}. */
+    readonly packageId: string;
+    /** Underlying store product identifier. */
+    readonly productId: string;
+    readonly title: string;
+    readonly description: string;
+    readonly tierId: SyncBillingTierId;
+    readonly seatLimit: number;
+    /** Localized, display-ready price (e.g. "$4.99"). */
+    readonly priceLabel: string;
+}
+/** Outcome of a completed sync purchase. */
+export interface SyncPurchaseResult {
+    /** Whether the buyer now holds the sync entitlement. */
+    readonly syncEntitlementActive: boolean;
+}
+/**
+ * The purchases surface the app consumes. A platform either provides a real
+ * implementation (Capacitor) or the {@link createUnavailablePurchases} stub;
+ * callers gate purchase UI on {@link isAvailable}.
+ */
+export interface PurchasesCapability {
+    /** False when purchasing is not supported on this platform (the stub). */
+    readonly isAvailable: boolean;
+    /** Native receipt store this capability can restore, or null off-device. */
+    readonly nativeStore: NativeSubscriptionStore | null;
+    /** Identify the buyer to the provider; the App User ID is the buyer's user id. */
+    identify(input: {
+        userId: string;
+    }): Promise<void>;
+    /** Forget the identified buyer (e.g. on sign-out). */
+    reset(): Promise<void>;
+    /** Sync subscription options available to purchase. */
+    listSyncOptions(): Promise<SyncSubscriptionOption[]>;
+    /**
+     * Purchase sync for one organization, binding the purchase to that org.
+     * `abortSignal` lets the caller withdraw a purchase that has not reached the
+     * store sheet yet — a presented sheet cannot be dismissed programmatically,
+     * so the backend honors the abort only before it presents.
+     */
+    purchaseSync(input: {
+        organizationId: string;
+        packageId: string;
+        abortSignal?: AbortSignal;
+        /** Providers must call this synchronously when their UI becomes impossible to dismiss. */
+        onProviderPresented?: () => void;
+    }): Promise<SyncPurchaseResult>;
+    /** Publish a server-accepted organization binding for later lifecycle events. */
+    bindOrganization(input: {
+        organizationId: string;
+    }): Promise<void>;
+    /**
+     * Restore, prepare a destination, server-claim, and bind a native receipt for
+     * one buyer. Destination preparation starts only after receipt verification
+     * and is outside the bounded server-claim phase.
+     */
+    moveNativeSubscription(input: {
+        userId: string;
+        prepareClaim: () => Promise<string | null>;
+        claim: (organizationId: string, store: NativeSubscriptionStore) => Promise<boolean>;
+    }): Promise<{
+        readonly organizationId: string;
+    }>;
+    /** Whether the identified buyer currently holds the sync entitlement. */
+    hasActiveSyncEntitlement(): Promise<boolean>;
+}
+/** A normalized purchasable package as returned by {@link RevenueCatBackend.getOfferings}. */
+export interface RevenueCatPackage {
+    readonly identifier: string;
+    readonly productIdentifier: string;
+    readonly title: string;
+    readonly description: string;
+    readonly priceString: string;
+}
+/** Normalized RevenueCat customer state — only the active entitlement ids are consumed. */
+export interface RevenueCatCustomerInfo {
+    readonly activeEntitlementIds: readonly string[];
+}
+/**
+ * The minimal RevenueCat surface a platform shell adapts from its native SDK.
+ * Keeping it normalized (plain ids/strings, no native types) lets the mapping in
+ * {@link createRevenueCatPurchases} be unit-tested with a fake backend and keeps
+ * `@tearleads/client-sdk` free of any provider dependency.
+ */
+export interface RevenueCatBackend {
+    configure(input: {
+        apiKey: string;
+        appUserId?: string;
+    }): Promise<void>;
+    logIn(input: {
+        appUserId: string;
+    }): Promise<void>;
+    logOut(): Promise<void>;
+    setAttributes(attributes: Record<string, string | null>): Promise<void>;
+    getCurrentPackages(): Promise<RevenueCatPackage[]>;
+    /** Resolve any provider data needed before buyer-controlled checkout begins. */
+    preparePurchasePackage?(input: {
+        packageId: string;
+        abortSignal?: AbortSignal;
+    }): Promise<unknown>;
+    /**
+     * `abortSignal` asks the backend to stop before presenting a store sheet the
+     * caller has already abandoned; a presented sheet cannot be dismissed
+     * programmatically once it is up.
+     */
+    purchasePackage(input: {
+        packageId: string;
+        abortSignal?: AbortSignal;
+        preparedPurchase?: unknown;
+        onProviderPresented?: () => void;
+    }): Promise<RevenueCatCustomerInfo>;
+    getCustomerInfo(): Promise<RevenueCatCustomerInfo>;
+    restorePurchases(): Promise<RevenueCatCustomerInfo>;
+}
+export interface RevenueCatPurchasesConfig {
+    /** Provider SDK API key for this platform. */
+    readonly apiKey: string;
+    /** Entitlement id that grants sync (e.g. "sync"). */
+    readonly syncEntitlementId: string;
+    /** Store represented by this SDK key. */
+    readonly nativeStore: NativeSubscriptionStore | null;
+    /**
+     * Whether restore uses the longer checkout-settlement deadline. Native
+     * restores may wait for store authentication or billing-service reconnects.
+     */
+    readonly restorePurchasesUsesCheckoutTimeout: boolean;
+    /**
+     * Recovery deadline after native checkout or a long-running restore begins.
+     * Defaults to ten minutes so normal buyer interaction remains unhurried while
+     * a lost native callback eventually surfaces restart guidance.
+     */
+    readonly checkoutSettlementTimeoutMs?: number;
+    /**
+     * Subscriber attribute key that binds a purchase to an organization. The
+     * server webhook reads this to resolve the org being paid for. Defaults to
+     * "orgId".
+     */
+    readonly organizationAttributeKey?: string;
+    /**
+     * Maximum wait for provider setup, identity, and non-checkout operations.
+     * Defaults to 30 seconds. Purchase checkout itself is not timed because the
+     * native store sheet remains under the buyer's control. Native calls cannot
+     * be cancelled, so timed-out work stays serialized. Later calls fail fast
+     * until the bridge settles or the app restarts.
+     */
+    readonly operationTimeoutMs?: number;
+}
+/**
+ * Adapts a {@link RevenueCatBackend} into a {@link PurchasesCapability}. The
+ * provider is configured lazily and exactly once (the first call that needs it),
+ * so constructing the capability never touches the native SDK on its own.
+ */
+export declare function createRevenueCatPurchases(backend: RevenueCatBackend, config: RevenueCatPurchasesConfig): PurchasesCapability;
+/**
+ * The no-op purchases capability for platforms without a store (web and
+ * desktop, or a Capacitor web preview). Read methods degrade quietly (no
+ * options, no entitlement) so callers can query safely; only an actual
+ * purchase attempt throws.
+ */
+export declare function createUnavailablePurchases(): PurchasesCapability;

package/client/billing/purchases.js

@@ -0,0 +1,165 @@
+/**
+ * Client purchases capability for org **sync** billing through a native store.
+ *
+ * Sync is the single paid feature; a purchase is made on behalf of an
+ * organization and ultimately drives the server RevenueCat webhook, which grants
+ * the org's sync entitlement. This module keeps the capability provider-agnostic:
+ * the {@link PurchasesCapability} interface is what the app consumes, the
+ * injectable {@link RevenueCatBackend} is the minimal native surface a platform
+ * shell wires up (`@revenuecat/purchases-capacitor`), and
+ * {@link createUnavailablePurchases} is the stub for platforms without a store.
+ * Web sells through the direct Stripe checkout instead and never loads a
+ * RevenueCat SDK; RevenueCat's web role is server-side receipt mirroring.
+ */
+import { getSyncBillingTierForNativeProduct, } from "../../internal/validators/billing.js";
+import { PurchasesUnavailableError } from "./purchaseErrors.js";
+import { revenueCatCheckoutSettlementTimeoutMs, revenueCatOperationTimeoutMs, } from "./revenueCatErrors.js";
+import { createRevenueCatIdentityCoordinator } from "./revenueCatIdentity.js";
+import { nativeMove } from "./revenueCatNativeSubscriptionMove.js";
+import { normalizeRevenueCatCheckoutError, normalizeRevenueCatIdentityError, } from "./revenueCatPurchaseErrorNormalization.js";
+import { prepareRevenueCatPurchase } from "./revenueCatPurchasePreparation.js";
+export { PurchaseAbortedError, PurchaseAlreadyOwnedError, PurchaseCancelledError, PurchaseIdentityPendingError, PurchaseProviderStalledError, PurchasesUnavailableError, } from "./purchaseErrors.js";
+function providerPresentedInput(callback) {
+    return callback ? { onProviderPresented: callback } : {};
+}
+const DEFAULT_ORGANIZATION_ATTRIBUTE_KEY = "orgId";
+function holdsSyncEntitlement(info, entitlementId) {
+    return (Array.isArray(info?.activeEntitlementIds) &&
+        info.activeEntitlementIds.includes(entitlementId));
+}
+function toSyncSubscriptionOptions(entry) {
+    const tier = getSyncBillingTierForNativeProduct(entry.productIdentifier);
+    return tier
+        ? [
+            {
+                packageId: entry.identifier,
+                productId: entry.productIdentifier,
+                title: tier.title,
+                description: entry.description,
+                priceLabel: entry.priceString,
+                tierId: tier.id,
+                seatLimit: tier.seatLimit,
+            },
+        ]
+        : [];
+}
+/**
+ * Adapts a {@link RevenueCatBackend} into a {@link PurchasesCapability}. The
+ * provider is configured lazily and exactly once (the first call that needs it),
+ * so constructing the capability never touches the native SDK on its own.
+ */
+export function createRevenueCatPurchases(backend, config) {
+    const attributeKey = config.organizationAttributeKey ?? DEFAULT_ORGANIZATION_ATTRIBUTE_KEY;
+    const identity = createRevenueCatIdentityCoordinator({
+        apiKey: config.apiKey,
+        backend,
+        checkoutSettlementTimeoutMs: revenueCatCheckoutSettlementTimeoutMs(config.checkoutSettlementTimeoutMs),
+        timeoutMs: revenueCatOperationTimeoutMs(config.operationTimeoutMs),
+    });
+    return {
+        isAvailable: true,
+        nativeStore: config.nativeStore,
+        identify(input) {
+            return identity
+                .identify(input.userId)
+                .catch(normalizeRevenueCatIdentityError);
+        },
+        reset: () => identity.reset().catch(normalizeRevenueCatIdentityError),
+        async listSyncOptions() {
+            const packages = await identity
+                .runProviderOperation({
+                operation: () => backend.getCurrentPackages(),
+                operationName: "offerings",
+                requiresKnownIdentity: false,
+            })
+                .catch(normalizeRevenueCatIdentityError);
+            return packages.flatMap(toSyncSubscriptionOptions);
+        },
+        async purchaseSync(input) {
+            // Identity changes wait until the store sheet settles: a presented
+            // sheet cannot be dismissed, so its gate stays held until the result.
+            let preparedPurchase;
+            const info = await identity
+                .runCheckout({
+                ...(input.abortSignal ? { abortSignal: input.abortSignal } : {}),
+                operation: () => backend.purchasePackage({
+                    packageId: input.packageId,
+                    ...(preparedPurchase === undefined ? {} : { preparedPurchase }),
+                    ...(input.abortSignal ? { abortSignal: input.abortSignal } : {}),
+                    ...providerPresentedInput(input.onProviderPresented),
+                }),
+                // Bind inside the checkout gate so native events carry the org the
+                // webhook resolves. A store purchase carries no transaction
+                // metadata, so this mutable customer attribute is the binding.
+                prepare: async () => {
+                    preparedPurchase = await prepareRevenueCatPurchase({
+                        abortSignal: input.abortSignal,
+                        attributes: {
+                            [attributeKey]: input.organizationId,
+                        },
+                        backend,
+                        packageId: input.packageId,
+                    });
+                },
+            })
+                .catch(normalizeRevenueCatCheckoutError);
+            return {
+                syncEntitlementActive: holdsSyncEntitlement(info, config.syncEntitlementId),
+            };
+        },
+        async bindOrganization(input) {
+            await identity
+                .runCustomerMutation({
+                operation: () => backend.setAttributes({
+                    [attributeKey]: input.organizationId,
+                }),
+                operationName: "organization binding",
+            })
+                .catch(normalizeRevenueCatIdentityError);
+        },
+        moveNativeSubscription: nativeMove(backend, config, identity, attributeKey),
+        async hasActiveSyncEntitlement() {
+            const info = await identity
+                .runProviderOperation({
+                operation: () => backend.getCustomerInfo(),
+                operationName: "customer information",
+            })
+                .catch(normalizeRevenueCatIdentityError);
+            return holdsSyncEntitlement(info, config.syncEntitlementId);
+        },
+    };
+}
+/**
+ * The no-op purchases capability for platforms without a store (web and
+ * desktop, or a Capacitor web preview). Read methods degrade quietly (no
+ * options, no entitlement) so callers can query safely; only an actual
+ * purchase attempt throws.
+ */
+export function createUnavailablePurchases() {
+    return {
+        isAvailable: false,
+        nativeStore: null,
+        identify() {
+            return Promise.resolve();
+        },
+        reset() {
+            return Promise.resolve();
+        },
+        listSyncOptions() {
+            return Promise.resolve([]);
+        },
+        purchaseSync() {
+            return Promise.reject(new PurchasesUnavailableError());
+        },
+        bindOrganization() {
+            return Promise.reject(new PurchasesUnavailableError());
+        },
+        moveNativeSubscription() {
+            return Promise.reject(new PurchasesUnavailableError());
+        },
+        hasActiveSyncEntitlement() {
+            return Promise.resolve(false);
+        },
+    };
+}
+//# sourceMappingURL=purchases.js.map

package/client/billing/purchases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"purchases.js","sourceRoot":"","sources":["purchases.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EACL,kCAAkC,GAGnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,EACL,qCAAqC,EACrC,4BAA4B,GAC7B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,mCAAmC,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAChE,OAAO,EACL,gCAAgC,EAChC,gCAAgC,GACjC,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAE5E,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,sBAAsB,EACtB,4BAA4B,EAC5B,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,kBAAkB,CAAC;AAsJ1B,SAAS,sBAAsB,CAAC,QAAkC;IAChE,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED,MAAM,kCAAkC,GAAG,OAAO,CAAC;AAEnD,SAAS,oBAAoB,CAC3B,IAA4B,EAC5B,aAAqB;IAErB,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,oBAAoB,CAAC;QACzC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,aAAa,CAAC,CAClD,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAChC,KAAwB;IAExB,MAAM,IAAI,GAAG,kCAAkC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACzE,OAAO,IAAI;QACT,CAAC,CAAC;YACE;gBACE,SAAS,EAAE,KAAK,CAAC,UAAU;gBAC3B,SAAS,EAAE,KAAK,CAAC,iBAAiB;gBAClC,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,UAAU,EAAE,KAAK,CAAC,WAAW;gBAC7B,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B;SACF;QACH,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAA0B,EAC1B,MAAiC;IAEjC,MAAM,YAAY,GAChB,MAAM,CAAC,wBAAwB,IAAI,kCAAkC,CAAC;IACxE,MAAM,QAAQ,GAAG,mCAAmC,CAAC;QACnD,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO;QACP,2BAA2B,EAAE,qCAAqC,CAChE,MAAM,CAAC,2BAA2B,CACnC;QACD,SAAS,EAAE,4BAA4B,CAAC,MAAM,CAAC,kBAAkB,CAAC;KACnE,CAAC,CAAC;IACH,OAAO;QACL,WAAW,EAAE,IAAI;QACjB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,QAAQ,CAAC,KAAK;YACZ,OAAO,QAAQ;iBACZ,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;iBACtB,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC7C,CAAC;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,gCAAgC,CAAC;QACrE,KAAK,CAAC,eAAe;YACnB,MAAM,QAAQ,GAAG,MAAM,QAAQ;iBAC5B,oBAAoB,CAAC;gBACpB,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE;gBAC7C,aAAa,EAAE,WAAW;gBAC1B,qBAAqB,EAAE,KAAK;aAC7B,CAAC;iBACD,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAC3C,OAAO,QAAQ,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;QACrD,CAAC;QACD,KAAK,CAAC,YAAY,CAAC,KAAK;YACtB,mEAAmE;YACnE,sEAAsE;YACtE,IAAI,gBAAyB,CAAC;YAC9B,MAAM,IAAI,GAAG,MAAM,QAAQ;iBACxB,WAAW,CAAC;gBACX,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChE,SAAS,EAAE,GAAG,EAAE,CACd,OAAO,CAAC,eAAe,CAAC;oBACtB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC;oBAC/D,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAChE,GAAG,sBAAsB,CAAC,KAAK,CAAC,mBAAmB,CAAC;iBACrD,CAAC;gBACJ,mEAAmE;gBACnE,4DAA4D;gBAC5D,+DAA+D;gBAC/D,OAAO,EAAE,KAAK,IAAI,EAAE;oBAClB,gBAAgB,GAAG,MAAM,yBAAyB,CAAC;wBACjD,WAAW,EAAE,KAAK,CAAC,WAAW;wBAC9B,UAAU,EAAE;4BACV,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,cAAc;yBACrC;wBACD,OAAO;wBACP,SAAS,EAAE,KAAK,CAAC,SAAS;qBAC3B,CAAC,CAAC;gBACL,CAAC;aACF,CAAC;iBACD,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAC3C,OAAO;gBACL,qBAAqB,EAAE,oBAAoB,CACzC,IAAI,EACJ,MAAM,CAAC,iBAAiB,CACzB;aACF,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,gBAAgB,CAAC,KAAK;YAC1B,MAAM,QAAQ;iBACX,mBAAmB,CAAC;gBACnB,SAAS,EAAE,GAAG,EAAE,CACd,OAAO,CAAC,aAAa,CAAC;oBACpB,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,cAAc;iBACrC,CAAC;gBACJ,aAAa,EAAE,sBAAsB;aACtC,CAAC;iBACD,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC7C,CAAC;QACD,sBAAsB,EAAE,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,CAAC;QAC3E,KAAK,CAAC,wBAAwB;YAC5B,MAAM,IAAI,GAAG,MAAM,QAAQ;iBACxB,oBAAoB,CAAC;gBACpB,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE;gBAC1C,aAAa,EAAE,sBAAsB;aACtC,CAAC;iBACD,KAAK,CAAC,gCAAgC,CAAC,CAAC;YAC3C,OAAO,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC9D,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B;IACxC,OAAO;QACL,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,IAAI;QACjB,QAAQ;YACN,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,KAAK;YACH,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;QACD,eAAe;YACb,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7B,CAAC;QACD,YAAY;YACV,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,yBAAyB,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,gBAAgB;YACd,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,yBAAyB,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,sBAAsB;YACpB,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,yBAAyB,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,wBAAwB;YACtB,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Client purchases capability for org **sync** billing through a native store.\n *\n * Sync is the single paid feature; a purchase is made on behalf of an\n * organization and ultimately drives the server RevenueCat webhook, which grants\n * the org's sync entitlement. This module keeps the capability provider-agnostic:\n * the {@link PurchasesCapability} interface is what the app consumes, the\n * injectable {@link RevenueCatBackend} is the minimal native surface a platform\n * shell wires up (`@revenuecat/purchases-capacitor`), and\n * {@link createUnavailablePurchases} is the stub for platforms without a store.\n * Web sells through the direct Stripe checkout instead and never loads a\n * RevenueCat SDK; RevenueCat's web role is server-side receipt mirroring.\n */\n\nimport {\n  getSyncBillingTierForNativeProduct,\n  type NativeSubscriptionStore,\n  type SyncBillingTierId,\n} from \"@tearleads/validators/billing\";\nimport { PurchasesUnavailableError } from \"./purchaseErrors\";\nimport {\n  revenueCatCheckoutSettlementTimeoutMs,\n  revenueCatOperationTimeoutMs,\n} from \"./revenueCatErrors\";\nimport { createRevenueCatIdentityCoordinator } from \"./revenueCatIdentity\";\nimport { nativeMove } from \"./revenueCatNativeSubscriptionMove\";\nimport {\n  normalizeRevenueCatCheckoutError,\n  normalizeRevenueCatIdentityError,\n} from \"./revenueCatPurchaseErrorNormalization\";\nimport { prepareRevenueCatPurchase } from \"./revenueCatPurchasePreparation\";\n\nexport {\n  PurchaseAbortedError,\n  PurchaseAlreadyOwnedError,\n  PurchaseCancelledError,\n  PurchaseIdentityPendingError,\n  PurchaseProviderStalledError,\n  PurchasesUnavailableError,\n} from \"./purchaseErrors\";\n\n/** A purchasable sync subscription option, shaped for display in billing UI. */\nexport interface SyncSubscriptionOption {\n  /** Provider package identifier, passed back to {@link PurchasesCapability.purchaseSync}. */\n  readonly packageId: string;\n  /** Underlying store product identifier. */\n  readonly productId: string;\n  readonly title: string;\n  readonly description: string;\n  readonly tierId: SyncBillingTierId;\n  readonly seatLimit: number;\n  /** Localized, display-ready price (e.g. \"$4.99\"). */\n  readonly priceLabel: string;\n}\n\n/** Outcome of a completed sync purchase. */\nexport interface SyncPurchaseResult {\n  /** Whether the buyer now holds the sync entitlement. */\n  readonly syncEntitlementActive: boolean;\n}\n\n/**\n * The purchases surface the app consumes. A platform either provides a real\n * implementation (Capacitor) or the {@link createUnavailablePurchases} stub;\n * callers gate purchase UI on {@link isAvailable}.\n */\nexport interface PurchasesCapability {\n  /** False when purchasing is not supported on this platform (the stub). */\n  readonly isAvailable: boolean;\n  /** Native receipt store this capability can restore, or null off-device. */\n  readonly nativeStore: NativeSubscriptionStore | null;\n  /** Identify the buyer to the provider; the App User ID is the buyer's user id. */\n  identify(input: { userId: string }): Promise<void>;\n  /** Forget the identified buyer (e.g. on sign-out). */\n  reset(): Promise<void>;\n  /** Sync subscription options available to purchase. */\n  listSyncOptions(): Promise<SyncSubscriptionOption[]>;\n  /**\n   * Purchase sync for one organization, binding the purchase to that org.\n   * `abortSignal` lets the caller withdraw a purchase that has not reached the\n   * store sheet yet — a presented sheet cannot be dismissed programmatically,\n   * so the backend honors the abort only before it presents.\n   */\n  purchaseSync(input: {\n    organizationId: string;\n    packageId: string;\n    abortSignal?: AbortSignal;\n    /** Providers must call this synchronously when their UI becomes impossible to dismiss. */\n    onProviderPresented?: () => void;\n  }): Promise<SyncPurchaseResult>;\n  /** Publish a server-accepted organization binding for later lifecycle events. */\n  bindOrganization(input: { organizationId: string }): Promise<void>;\n  /**\n   * Restore, prepare a destination, server-claim, and bind a native receipt for\n   * one buyer. Destination preparation starts only after receipt verification\n   * and is outside the bounded server-claim phase.\n   */\n  moveNativeSubscription(input: {\n    userId: string;\n    prepareClaim: () => Promise<string | null>;\n    claim: (\n      organizationId: string,\n      store: NativeSubscriptionStore,\n    ) => Promise<boolean>;\n  }): Promise<{ readonly organizationId: string }>;\n  /** Whether the identified buyer currently holds the sync entitlement. */\n  hasActiveSyncEntitlement(): Promise<boolean>;\n}\n\n/** A normalized purchasable package as returned by {@link RevenueCatBackend.getOfferings}. */\nexport interface RevenueCatPackage {\n  readonly identifier: string;\n  readonly productIdentifier: string;\n  readonly title: string;\n  readonly description: string;\n  readonly priceString: string;\n}\n\n/** Normalized RevenueCat customer state — only the active entitlement ids are consumed. */\nexport interface RevenueCatCustomerInfo {\n  readonly activeEntitlementIds: readonly string[];\n}\n\n/**\n * The minimal RevenueCat surface a platform shell adapts from its native SDK.\n * Keeping it normalized (plain ids/strings, no native types) lets the mapping in\n * {@link createRevenueCatPurchases} be unit-tested with a fake backend and keeps\n * `@tearleads/client-sdk` free of any provider dependency.\n */\nexport interface RevenueCatBackend {\n  configure(input: { apiKey: string; appUserId?: string }): Promise<void>;\n  logIn(input: { appUserId: string }): Promise<void>;\n  logOut(): Promise<void>;\n  setAttributes(attributes: Record<string, string | null>): Promise<void>;\n  getCurrentPackages(): Promise<RevenueCatPackage[]>;\n  /** Resolve any provider data needed before buyer-controlled checkout begins. */\n  preparePurchasePackage?(input: {\n    packageId: string;\n    abortSignal?: AbortSignal;\n  }): Promise<unknown>;\n  /**\n   * `abortSignal` asks the backend to stop before presenting a store sheet the\n   * caller has already abandoned; a presented sheet cannot be dismissed\n   * programmatically once it is up.\n   */\n  purchasePackage(input: {\n    packageId: string;\n    abortSignal?: AbortSignal;\n    preparedPurchase?: unknown;\n    onProviderPresented?: () => void;\n  }): Promise<RevenueCatCustomerInfo>;\n  getCustomerInfo(): Promise<RevenueCatCustomerInfo>;\n  restorePurchases(): Promise<RevenueCatCustomerInfo>;\n}\n\nexport interface RevenueCatPurchasesConfig {\n  /** Provider SDK API key for this platform. */\n  readonly apiKey: string;\n  /** Entitlement id that grants sync (e.g. \"sync\"). */\n  readonly syncEntitlementId: string;\n  /** Store represented by this SDK key. */\n  readonly nativeStore: NativeSubscriptionStore | null;\n  /**\n   * Whether restore uses the longer checkout-settlement deadline. Native\n   * restores may wait for store authentication or billing-service reconnects.\n   */\n  readonly restorePurchasesUsesCheckoutTimeout: boolean;\n  /**\n   * Recovery deadline after native checkout or a long-running restore begins.\n   * Defaults to ten minutes so normal buyer interaction remains unhurried while\n   * a lost native callback eventually surfaces restart guidance.\n   */\n  readonly checkoutSettlementTimeoutMs?: number;\n  /**\n   * Subscriber attribute key that binds a purchase to an organization. The\n   * server webhook reads this to resolve the org being paid for. Defaults to\n   * \"orgId\".\n   */\n  readonly organizationAttributeKey?: string;\n  /**\n   * Maximum wait for provider setup, identity, and non-checkout operations.\n   * Defaults to 30 seconds. Purchase checkout itself is not timed because the\n   * native store sheet remains under the buyer's control. Native calls cannot\n   * be cancelled, so timed-out work stays serialized. Later calls fail fast\n   * until the bridge settles or the app restarts.\n   */\n  readonly operationTimeoutMs?: number;\n}\n\nfunction providerPresentedInput(callback: (() => void) | undefined) {\n  return callback ? { onProviderPresented: callback } : {};\n}\n\nconst DEFAULT_ORGANIZATION_ATTRIBUTE_KEY = \"orgId\";\n\nfunction holdsSyncEntitlement(\n  info: RevenueCatCustomerInfo,\n  entitlementId: string,\n): boolean {\n  return (\n    Array.isArray(info?.activeEntitlementIds) &&\n    info.activeEntitlementIds.includes(entitlementId)\n  );\n}\n\nfunction toSyncSubscriptionOptions(\n  entry: RevenueCatPackage,\n): SyncSubscriptionOption[] {\n  const tier = getSyncBillingTierForNativeProduct(entry.productIdentifier);\n  return tier\n    ? [\n        {\n          packageId: entry.identifier,\n          productId: entry.productIdentifier,\n          title: tier.title,\n          description: entry.description,\n          priceLabel: entry.priceString,\n          tierId: tier.id,\n          seatLimit: tier.seatLimit,\n        },\n      ]\n    : [];\n}\n\n/**\n * Adapts a {@link RevenueCatBackend} into a {@link PurchasesCapability}. The\n * provider is configured lazily and exactly once (the first call that needs it),\n * so constructing the capability never touches the native SDK on its own.\n */\nexport function createRevenueCatPurchases(\n  backend: RevenueCatBackend,\n  config: RevenueCatPurchasesConfig,\n): PurchasesCapability {\n  const attributeKey =\n    config.organizationAttributeKey ?? DEFAULT_ORGANIZATION_ATTRIBUTE_KEY;\n  const identity = createRevenueCatIdentityCoordinator({\n    apiKey: config.apiKey,\n    backend,\n    checkoutSettlementTimeoutMs: revenueCatCheckoutSettlementTimeoutMs(\n      config.checkoutSettlementTimeoutMs,\n    ),\n    timeoutMs: revenueCatOperationTimeoutMs(config.operationTimeoutMs),\n  });\n  return {\n    isAvailable: true,\n    nativeStore: config.nativeStore,\n    identify(input) {\n      return identity\n        .identify(input.userId)\n        .catch(normalizeRevenueCatIdentityError);\n    },\n    reset: () => identity.reset().catch(normalizeRevenueCatIdentityError),\n    async listSyncOptions() {\n      const packages = await identity\n        .runProviderOperation({\n          operation: () => backend.getCurrentPackages(),\n          operationName: \"offerings\",\n          requiresKnownIdentity: false,\n        })\n        .catch(normalizeRevenueCatIdentityError);\n      return packages.flatMap(toSyncSubscriptionOptions);\n    },\n    async purchaseSync(input) {\n      // Identity changes wait until the store sheet settles: a presented\n      // sheet cannot be dismissed, so its gate stays held until the result.\n      let preparedPurchase: unknown;\n      const info = await identity\n        .runCheckout({\n          ...(input.abortSignal ? { abortSignal: input.abortSignal } : {}),\n          operation: () =>\n            backend.purchasePackage({\n              packageId: input.packageId,\n              ...(preparedPurchase === undefined ? {} : { preparedPurchase }),\n              ...(input.abortSignal ? { abortSignal: input.abortSignal } : {}),\n              ...providerPresentedInput(input.onProviderPresented),\n            }),\n          // Bind inside the checkout gate so native events carry the org the\n          // webhook resolves. A store purchase carries no transaction\n          // metadata, so this mutable customer attribute is the binding.\n          prepare: async () => {\n            preparedPurchase = await prepareRevenueCatPurchase({\n              abortSignal: input.abortSignal,\n              attributes: {\n                [attributeKey]: input.organizationId,\n              },\n              backend,\n              packageId: input.packageId,\n            });\n          },\n        })\n        .catch(normalizeRevenueCatCheckoutError);\n      return {\n        syncEntitlementActive: holdsSyncEntitlement(\n          info,\n          config.syncEntitlementId,\n        ),\n      };\n    },\n    async bindOrganization(input) {\n      await identity\n        .runCustomerMutation({\n          operation: () =>\n            backend.setAttributes({\n              [attributeKey]: input.organizationId,\n            }),\n          operationName: \"organization binding\",\n        })\n        .catch(normalizeRevenueCatIdentityError);\n    },\n    moveNativeSubscription: nativeMove(backend, config, identity, attributeKey),\n    async hasActiveSyncEntitlement() {\n      const info = await identity\n        .runProviderOperation({\n          operation: () => backend.getCustomerInfo(),\n          operationName: \"customer information\",\n        })\n        .catch(normalizeRevenueCatIdentityError);\n      return holdsSyncEntitlement(info, config.syncEntitlementId);\n    },\n  };\n}\n\n/**\n * The no-op purchases capability for platforms without a store (web and\n * desktop, or a Capacitor web preview). Read methods degrade quietly (no\n * options, no entitlement) so callers can query safely; only an actual\n * purchase attempt throws.\n */\nexport function createUnavailablePurchases(): PurchasesCapability {\n  return {\n    isAvailable: false,\n    nativeStore: null,\n    identify() {\n      return Promise.resolve();\n    },\n    reset() {\n      return Promise.resolve();\n    },\n    listSyncOptions() {\n      return Promise.resolve([]);\n    },\n    purchaseSync() {\n      return Promise.reject(new PurchasesUnavailableError());\n    },\n    bindOrganization() {\n      return Promise.reject(new PurchasesUnavailableError());\n    },\n    moveNativeSubscription() {\n      return Promise.reject(new PurchasesUnavailableError());\n    },\n    hasActiveSyncEntitlement() {\n      return Promise.resolve(false);\n    },\n  };\n}\n"]}

package/client/billing/revenueCatCheckoutGate.js

@@ -0,0 +1,71 @@
+import { withRevenueCatOperationTimeout, } from "./revenueCatErrors.js";
+/** Owns the lifetime gates that keep identity changes behind live checkouts. */
+export class RevenueCatCheckoutGateCoordinator {
+    active = new Set();
+    get hasActive() {
+        return this.active.size > 0;
+    }
+    afterActive(operation) {
+        if (!this.hasActive)
+            return operation();
+        const current = Array.from(this.active);
+        return Promise.all(current).then(operation);
+    }
+    reserve() {
+        const current = Array.from(this.active);
+        const gate = this.create(undefined, () => { });
+        return { gate, ready: Promise.all(current).then(() => undefined) };
+    }
+    create(abortSignal, markAbandoned) {
+        let resolveGate = () => { };
+        let released = false;
+        const promise = new Promise((resolve) => {
+            resolveGate = resolve;
+        });
+        // A store sheet is not cancellable once presented, so an abort only marks
+        // the checkout abandoned; its identity gate stays held until the result.
+        const onAbort = () => {
+            markAbandoned();
+        };
+        const release = () => {
+            if (released)
+                return;
+            released = true;
+            abortSignal?.removeEventListener("abort", onAbort);
+            this.active.delete(promise);
+            resolveGate();
+        };
+        this.active.add(promise);
+        if (abortSignal?.aborted) {
+            onAbort();
+        }
+        else {
+            abortSignal?.addEventListener("abort", onAbort, { once: true });
+        }
+        return { promise, release };
+    }
+    start(operation, gate, settlement) {
+        let timeoutError;
+        const providerResult = Promise.resolve().then(operation);
+        const finishProviderResult = () => {
+            gate.release();
+            if (timeoutError !== undefined) {
+                settlement.onLateSettlement(timeoutError);
+            }
+        };
+        void providerResult.then(finishProviderResult, finishProviderResult);
+        const result = withRevenueCatOperationTimeout({
+            operation: () => providerResult,
+            operationName: "checkout settlement",
+            onTimeout: (error) => {
+                timeoutError = error;
+                error.markRestartRequired();
+                gate.release();
+                settlement.onTimeout(error);
+            },
+            timeoutMs: settlement.timeoutMs,
+        });
+        return { result };
+    }
+}
+//# sourceMappingURL=revenueCatCheckoutGate.js.map

package/client/billing/revenueCatCheckoutGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revenueCatCheckoutGate.js","sourceRoot":"","sources":["revenueCatCheckoutGate.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,8BAA8B,GAC/B,MAAM,oBAAoB,CAAC;AAO5B,gFAAgF;AAChF,MAAM,OAAO,iCAAiC;IAC3B,MAAM,GAAG,IAAI,GAAG,EAAiB,CAAC;IAEnD,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,WAAW,CAAI,SAA2B;QACxC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxC,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO;QACL,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC9C,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;IACrE,CAAC;IAED,MAAM,CACJ,WAAoC,EACpC,aAAyB;QAEzB,IAAI,WAAW,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;QAC3B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;YAC5C,WAAW,GAAG,OAAO,CAAC;QACxB,CAAC,CAAC,CAAC;QACH,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,aAAa,EAAE,CAAC;QAClB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,QAAQ;gBAAE,OAAO;YACrB,QAAQ,GAAG,IAAI,CAAC;YAChB,WAAW,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC5B,WAAW,EAAE,CAAC;QAChB,CAAC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzB,IAAI,WAAW,EAAE,OAAO,EAAE,CAAC;YACzB,OAAO,EAAE,CAAC;QACZ,CAAC;aAAM,CAAC;YACN,WAAW,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC9B,CAAC;IAED,KAAK,CACH,SAA2B,EAC3B,IAA4B,EAC5B,UAMC;QAED,IAAI,YAAyD,CAAC;QAC9D,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzD,MAAM,oBAAoB,GAAG,GAAG,EAAE;YAChC,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,UAAU,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC,CAAC;QACF,KAAK,cAAc,CAAC,IAAI,CAAC,oBAAoB,EAAE,oBAAoB,CAAC,CAAC;QACrE,MAAM,MAAM,GAAG,8BAA8B,CAAC;YAC5C,SAAS,EAAE,GAAG,EAAE,CAAC,cAAc;YAC/B,aAAa,EAAE,qBAAqB;YACpC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;gBACnB,YAAY,GAAG,KAAK,CAAC;gBACrB,KAAK,CAAC,mBAAmB,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;gBACf,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;YACD,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,CAAC;IACpB,CAAC;CACF","sourcesContent":["import {\n  type RevenueCatOperationTimeoutError,\n  withRevenueCatOperationTimeout,\n} from \"./revenueCatErrors\";\n\ninterface RevenueCatCheckoutGate {\n  readonly promise: Promise<void>;\n  readonly release: () => void;\n}\n\n/** Owns the lifetime gates that keep identity changes behind live checkouts. */\nexport class RevenueCatCheckoutGateCoordinator {\n  private readonly active = new Set<Promise<void>>();\n\n  get hasActive(): boolean {\n    return this.active.size > 0;\n  }\n\n  afterActive<T>(operation: () => Promise<T>): Promise<T> {\n    if (!this.hasActive) return operation();\n    const current = Array.from(this.active);\n    return Promise.all(current).then(operation);\n  }\n\n  reserve(): { gate: RevenueCatCheckoutGate; ready: Promise<void> } {\n    const current = Array.from(this.active);\n    const gate = this.create(undefined, () => {});\n    return { gate, ready: Promise.all(current).then(() => undefined) };\n  }\n\n  create(\n    abortSignal: AbortSignal | undefined,\n    markAbandoned: () => void,\n  ): RevenueCatCheckoutGate {\n    let resolveGate = () => {};\n    let released = false;\n    const promise = new Promise<void>((resolve) => {\n      resolveGate = resolve;\n    });\n    // A store sheet is not cancellable once presented, so an abort only marks\n    // the checkout abandoned; its identity gate stays held until the result.\n    const onAbort = () => {\n      markAbandoned();\n    };\n    const release = () => {\n      if (released) return;\n      released = true;\n      abortSignal?.removeEventListener(\"abort\", onAbort);\n      this.active.delete(promise);\n      resolveGate();\n    };\n    this.active.add(promise);\n    if (abortSignal?.aborted) {\n      onAbort();\n    } else {\n      abortSignal?.addEventListener(\"abort\", onAbort, { once: true });\n    }\n    return { promise, release };\n  }\n\n  start<T>(\n    operation: () => Promise<T>,\n    gate: RevenueCatCheckoutGate,\n    settlement: {\n      readonly onLateSettlement: (\n        error: RevenueCatOperationTimeoutError,\n      ) => void;\n      readonly onTimeout: (error: RevenueCatOperationTimeoutError) => void;\n      readonly timeoutMs: number;\n    },\n  ): { result: Promise<T> } {\n    let timeoutError: RevenueCatOperationTimeoutError | undefined;\n    const providerResult = Promise.resolve().then(operation);\n    const finishProviderResult = () => {\n      gate.release();\n      if (timeoutError !== undefined) {\n        settlement.onLateSettlement(timeoutError);\n      }\n    };\n    void providerResult.then(finishProviderResult, finishProviderResult);\n    const result = withRevenueCatOperationTimeout({\n      operation: () => providerResult,\n      operationName: \"checkout settlement\",\n      onTimeout: (error) => {\n        timeoutError = error;\n        error.markRestartRequired();\n        gate.release();\n        settlement.onTimeout(error);\n      },\n      timeoutMs: settlement.timeoutMs,\n    });\n    return { result };\n  }\n}\n"]}