b2c-app-builder 0.221.39

package/examples/extensions/store-screenshot-compose/templates/device-well.svg.tmpl

@@ -0,0 +1,8 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="{{WIDTH}}" height="{{HEIGHT}}" viewBox="0 0 {{WIDTH}} {{HEIGHT}}" lang="{{LOCALE}}" data-capture-id="{{CAPTURE_ID}}" data-composed-by="{{TOOL}}" data-composed-at="{{COMPOSED_AT}}" data-not-capture-evidence="true">
+  <title>{{HEADLINE}}</title>
+  <desc>Composed marketing asset. Not capture evidence. Source capture: {{CAPTURE_HREF}}</desc>
+  <rect width="{{WIDTH}}" height="{{HEIGHT}}" fill="#f4f1ea"/>
+  <text x="{{HEADLINE_X}}" y="{{HEADLINE_Y}}" text-anchor="middle" font-family="{{FONT_FAMILY}}" font-size="{{HEADLINE_SIZE}}" font-weight="600" fill="#1d1b17">{{HEADLINE}}</text>
+  <rect x="{{FRAME_X}}" y="{{FRAME_Y}}" width="{{FRAME_WIDTH}}" height="{{FRAME_HEIGHT}}" rx="{{FRAME_RADIUS}}" fill="#1d1b17"/>
+  <image x="{{CAPTURE_X}}" y="{{CAPTURE_Y}}" width="{{CAPTURE_WIDTH}}" height="{{CAPTURE_HEIGHT}}" href="{{CAPTURE_HREF}}" preserveAspectRatio="xMidYMid meet"/>
+</svg>

package/examples/extensions/store-screenshot-compose/wells.json

@@ -0,0 +1,38 @@
+{
+  "schemaVersion": 1,
+  "kind": "device-wells",
+  "partial": true,
+  "note": "No exact store well size is citable from repository knowledge. knowledge/store/apple-signing-release.md records minimum native widths only. knowledge/store/store-console-workflow.md defers exact sizes to Apple or to asc screenshots sizes. The wells below are the recorded dimensions of the tuck showcase captures in examples/tuck/showcase/manifest.json. They are accepted for that fixture only. They are not store wells.",
+  "citedMinimumNativeWidths": [
+    { "well": "iPhone 6.9 in / 6.7 in / 6.5 in", "minimumWidth": 1242, "source": "knowledge/store/apple-signing-release.md" },
+    { "well": "iPhone 5.5 in", "minimumWidth": 1242, "source": "knowledge/store/apple-signing-release.md" },
+    { "well": "iPad Pro 13 in", "minimumWidth": 2048, "source": "knowledge/store/apple-signing-release.md" },
+    { "well": "iPad Pro 11 in", "minimumWidth": 1668, "source": "knowledge/store/apple-signing-release.md" }
+  ],
+  "wells": [
+    {
+      "id": "tuck-ios-simulator-portrait",
+      "device": "iOS simulator capture, tuck showcase",
+      "width": 1206,
+      "height": 2622,
+      "storeWell": null,
+      "source": "examples/tuck/showcase/manifest.json"
+    },
+    {
+      "id": "tuck-browser-desktop",
+      "device": "Browser capture, desktop viewport, tuck showcase",
+      "width": 1440,
+      "height": 1000,
+      "storeWell": null,
+      "source": "examples/tuck/showcase/manifest.json"
+    },
+    {
+      "id": "tuck-browser-mobile",
+      "device": "Browser capture, mobile viewport, tuck showcase",
+      "width": 390,
+      "height": 844,
+      "storeWell": null,
+      "source": "examples/tuck/showcase/manifest.json"
+    }
+  ]
+}

package/examples/extensions/superwall-ios/README.md

@@ -0,0 +1,47 @@
+# Superwall and RevenueCat on iOS
+
+This extension supplies three explicit native operations: paywall presentation,
+purchase delegation and entitlement readback. Superwall owns presentation and
+assignment. RevenueCat owns purchase, restore and access. The package uses the
+existing extension snapshot, recipe resolver and catalog pack loader. It does not
+register an execution route or grant authority to make a purchase.
+
+The native package pins Superwall 4.16.3, RevenueCat 5.88.0 and transitive
+Superscript 1.0.15. `native/Package.resolved` records exact source revisions;
+`dependency-checksums.json` records the vendor's binary artifact checksum.
+The snapshot includes the declarations, sources, tests and locks.
+
+`native/Sources/MonetizationNative/RevenueCatController.swift` implements the
+actual Superwall `PurchaseController` protocol. The host explicitly configures
+SDKs using public keys supplied at runtime. No credentials, provider configuration
+or automatic execution are included. The anonymous identity passed to the
+controller must be a newly generated opaque app identity, never personal data.
+
+Run portable state tests with:
+
+```sh
+swift test --package-path native --scratch-path /tmp/b2c-superwall-native
+```
+
+Those tests exercise anonymous exposure, sign-in, delayed entitlement,
+cancellation, pending payment, error, restore/readback, duplicate callback and
+logout. They compile the platform-neutral state owner; they do not compile the
+iOS-only controller or contact either SDK's service. Read `local-proof.json` for
+the separately recorded current SDK build result.
+
+Provider observation normalization uses
+`adapters/providers/superwall/measurement.ts`. It delegates identity joining and
+amount deduplication to U16, preserving the anonymous exposure reference instead
+of rewriting history. The native SDK does not manufacture a treatment assignment
+or a price observation: an observed Superwall assignment must be supplied
+explicitly. Real sandbox purchase and restore receipts, native device behavior,
+and live readiness remain unobserved.
+
+The standalone example declares namespaced operation contracts because the
+first-party operation vocabulary is not an importable extension package yet.
+It does not silently replace the default recipe or imply first-party bindings.
+
+API sources checked against pinned release source:
+[Superwall purchase-controller integration](https://superwall.com/docs/ios/guides/using-revenuecat),
+[Superwall 4.16.3 PurchaseController](https://github.com/superwall/Superwall-iOS/blob/4.16.3/Sources/SuperwallKit/StoreKit/Purchase%20Controller/PurchaseController.swift),
+and [RevenueCat integration identity requirements](https://www.revenuecat.com/docs/integrations/third-party-integrations/superwall).

package/examples/extensions/superwall-ios/dependency-checksums.json

@@ -0,0 +1,6 @@
+{
+  "superscriptVersion": "1.0.15",
+  "binaryURL": "https://github.com/superwall/superscript-ios-next/releases/download/1.0.15/libcel.xcframework.zip",
+  "sha256": "71a4ac06d61c69a973bd3f5df0c771dd97a8e92e4135ee534e091a40f0c0de0a",
+  "sourceRevision": "c3d1ee8d23ae6bf27e2d261c41a61001281166ec"
+}

package/examples/extensions/superwall-ios/evidence.json

@@ -0,0 +1,19 @@
+{
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["layer", "superwallVersion", "revenueCatVersion", "providerProof"],
+  "properties": {
+    "layer": {
+      "enum": ["deterministic-state-machine", "native-build"]
+    },
+    "superwallVersion": {
+      "const": "4.16.3"
+    },
+    "revenueCatVersion": {
+      "const": "5.88.0"
+    },
+    "providerProof": {
+      "const": "not_observed"
+    }
+  }
+}

package/examples/extensions/superwall-ios/extension.yaml

@@ -0,0 +1,174 @@
+{
+  "apiVersion": "b2c.extension/v1",
+  "id": "superwall-ios/package",
+  "version": "1.0.0",
+  "hostApiVersion": "b2c/v1",
+  "title": "Superwall RevenueCat iOS example",
+  "dependencies": [],
+  "imports": [],
+  "resources":
+    [
+      { "id": "superwall-ios/input", "path": "input.json", "kind": "schema", "mediaType": "application/json" },
+      { "id": "superwall-ios/output", "path": "output.json", "kind": "schema", "mediaType": "application/json" },
+      { "id": "superwall-ios/evidence", "path": "evidence.json", "kind": "schema", "mediaType": "application/json" },
+      { "id": "superwall-ios/knowledge", "path": "integration.md", "kind": "knowledge", "mediaType": "text/markdown" },
+      { "id": "superwall-ios/pack", "path": "pack.yaml", "kind": "catalog-pack", "mediaType": "application/yaml" },
+      { "id": "superwall-ios/package", "path": "native/Package.swift", "kind": "adapter", "mediaType": "text/plain" },
+      { "id": "superwall-ios/state", "path": "native/Sources/MonetizationCore/EntitlementState.swift", "kind": "adapter", "mediaType": "text/plain" },
+      {
+        "id": "superwall-ios/controller",
+        "path": "native/Sources/MonetizationNative/RevenueCatController.swift",
+        "kind": "adapter",
+        "mediaType": "text/plain",
+      },
+      { "id": "superwall-ios/tests", "path": "native/Tests/MonetizationCoreTests/EntitlementStateTests.swift", "kind": "adapter", "mediaType": "text/plain" },
+      { "id": "superwall-ios/dependency-lock", "path": "native/Package.resolved", "kind": "lockfile", "mediaType": "application/json" },
+      { "id": "superwall-ios/dependency-checksums", "path": "dependency-checksums.json", "kind": "lockfile", "mediaType": "application/json" },
+    ],
+  "capabilities":
+    [
+      {
+        "id": "superwall-ios/monetization",
+        "version": "1.0.0",
+        "title": "Native monetization composition",
+        "knowledge": ["superwall-ios/knowledge"],
+        "operations":
+          [
+            {
+              "id": "superwall-ios/monetization.present-paywall",
+              "title": "present-paywall",
+              "inputSchema": "superwall-ios/input",
+              "outputSchema": "superwall-ios/output",
+              "evidenceSchema": "superwall-ios/evidence",
+              "effect": "mutate",
+              "acceptance": ["Correct selected provider ownership and current identity.", "Local conformance never substitutes for sandbox receipts."],
+            },
+            {
+              "id": "superwall-ios/monetization.purchase",
+              "title": "purchase",
+              "inputSchema": "superwall-ios/input",
+              "outputSchema": "superwall-ios/output",
+              "evidenceSchema": "superwall-ios/evidence",
+              "effect": "spend",
+              "acceptance": ["Correct selected provider ownership and current identity.", "Local conformance never substitutes for sandbox receipts."],
+            },
+            {
+              "id": "superwall-ios/monetization.read-entitlement",
+              "title": "read-entitlement",
+              "inputSchema": "superwall-ios/input",
+              "outputSchema": "superwall-ios/output",
+              "evidenceSchema": "superwall-ios/evidence",
+              "effect": "observe",
+              "acceptance": ["Correct selected provider ownership and current identity.", "Local conformance never substitutes for sandbox receipts."],
+            },
+          ],
+      },
+    ],
+  "implementations":
+    [
+      {
+        "id": "superwall-ios/present-paywall",
+        "version": "1.0.0",
+        "operation": "superwall-ios/monetization.present-paywall",
+        "targets": [{ "platform": "ios", "runtime": "swiftui" }],
+        "mode": "manual",
+        "sdkRange": "*",
+        "limitations": ["Explicit native integration; no registered host execution route or sandbox receipts."],
+        "knowledge": [],
+        "connectionRequired": true,
+        "maturity": "experimental",
+      },
+      {
+        "id": "superwall-ios/purchase",
+        "version": "1.0.0",
+        "operation": "superwall-ios/monetization.purchase",
+        "targets": [{ "platform": "ios", "runtime": "swiftui" }],
+        "mode": "manual",
+        "sdkRange": "*",
+        "limitations": ["Explicit native integration; no registered host execution route or sandbox receipts."],
+        "knowledge": [],
+        "connectionRequired": true,
+        "maturity": "experimental",
+      },
+      {
+        "id": "superwall-ios/read-entitlement",
+        "version": "1.0.0",
+        "operation": "superwall-ios/monetization.read-entitlement",
+        "targets": [{ "platform": "ios", "runtime": "swiftui" }],
+        "mode": "manual",
+        "sdkRange": "*",
+        "limitations": ["Explicit native integration; no registered host execution route or sandbox receipts."],
+        "knowledge": [],
+        "connectionRequired": true,
+        "maturity": "experimental",
+      },
+    ],
+  "recipes":
+    [
+      {
+        "id": "superwall-ios/composition",
+        "version": "1.0.0",
+        "title": "Superwall presentation with RevenueCat authority",
+        "workflows": ["workflow.superwall-ios-present-paywall", "workflow.superwall-ios-purchase", "workflow.superwall-ios-read-entitlement"],
+        "operations":
+          [
+            {
+              "operation": "superwall-ios/monetization.present-paywall",
+              "implementation": "superwall-ios/present-paywall",
+              "required": true,
+              "workflowIds": ["workflow.superwall-ios-present-paywall"],
+              "workflowContexts":
+                [
+                  {
+                    "workflowId": "workflow.superwall-ios-present-paywall",
+                    "instructions": "neutral",
+                    "roleInstructions": "neutral",
+                    "neutralReferenceIds": [],
+                    "providerReferenceIds": [],
+                    "neutralContextPackIds": [],
+                    "providerContextPackIds": [],
+                  },
+                ],
+            },
+            {
+              "operation": "superwall-ios/monetization.purchase",
+              "implementation": "superwall-ios/purchase",
+              "required": true,
+              "workflowIds": ["workflow.superwall-ios-purchase"],
+              "workflowContexts":
+                [
+                  {
+                    "workflowId": "workflow.superwall-ios-purchase",
+                    "instructions": "neutral",
+                    "roleInstructions": "neutral",
+                    "neutralReferenceIds": [],
+                    "providerReferenceIds": [],
+                    "neutralContextPackIds": [],
+                    "providerContextPackIds": [],
+                  },
+                ],
+            },
+            {
+              "operation": "superwall-ios/monetization.read-entitlement",
+              "implementation": "superwall-ios/read-entitlement",
+              "required": true,
+              "workflowIds": ["workflow.superwall-ios-read-entitlement"],
+              "workflowContexts":
+                [
+                  {
+                    "workflowId": "workflow.superwall-ios-read-entitlement",
+                    "instructions": "neutral",
+                    "roleInstructions": "neutral",
+                    "neutralReferenceIds": [],
+                    "providerReferenceIds": [],
+                    "neutralContextPackIds": [],
+                    "providerContextPackIds": [],
+                  },
+                ],
+            },
+          ],
+        "policy": { "maxRepairAttempts": 2, "independentReview": true },
+      },
+    ],
+  "catalogPacks": ["superwall-ios/pack"],
+}

package/examples/extensions/superwall-ios/input.json

@@ -0,0 +1,15 @@
+{
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["subjectId", "entitlementId"],
+  "properties": {
+    "subjectId": {
+      "type": "string",
+      "minLength": 1
+    },
+    "entitlementId": {
+      "type": "string",
+      "minLength": 1
+    }
+  }
+}

package/examples/extensions/superwall-ios/integration.md

@@ -0,0 +1,9 @@
+# Superwall presentation and RevenueCat entitlement authority
+
+Superwall owns placement presentation and treatment assignment. RevenueCat exclusively owns purchase, restore and active entitlements. The controller does not merge Superwall web entitlements or run a competing RevenueCat assignment engine. A purchase callback never grants access. Current RevenueCat entitlement readback does.
+
+The host supplies public SDK keys and explicitly calls configure. This package performs no automatic provider operation. The native code is iOS only. Android and web selection must refuse. Local state tests do not establish SDK transport or provider behavior.
+
+Preserve the anonymous exposure identity across sign-in as an explicit identity join. Keep original exposure and identified account separate; do not silently relabel past events. Logout removes exposure and invalidates callbacks from earlier identity generations. A restore result means the request completed, not that entitlement exists.
+
+Pin Package.swift, Package.resolved, sources and test inputs in the extension snapshot. Record toolchain and output identity separately for every build. Sandbox and live proof remain missing until explicitly authorized current provider interaction supplies receipts.

package/examples/extensions/superwall-ios/local-proof.json

@@ -0,0 +1,44 @@
+{
+  "schemaVersion": "b2c.native-local-proof/v1",
+  "recordedAt": "2026-09-05T15:32:11.211822+00:00",
+  "toolchain": {
+    "xcode": "26.6",
+    "xcodeBuild": "17F113",
+    "swift": "6.3.3",
+    "simulatorSdk": "26.5",
+    "target": "arm64-apple-ios16.0-simulator"
+  },
+  "inputs": {
+    "native/Package.swift": "566173b1fb43494f589d885380f1e97b17d20a6f8a4a4b8a06f4a53efa2639d6",
+    "native/Package.resolved": "460d2b97b1c09fb49c3e0ac22940b7239e8eb1b392cca228349446c7a532169e",
+    "native/Sources/MonetizationCore/EntitlementState.swift": "dee10d8a1b56967d1004a603404bef1fe47c6291c572ba1a3079c9bdd347c60c",
+    "native/Sources/MonetizationNative/RevenueCatController.swift": "fc6fd35df2571ba46437eb445e3b84f19438dc37be8cf1fcf0651761b97f19ae",
+    "native/Tests/MonetizationCoreTests/EntitlementStateTests.swift": "0f9d71beee0033238bef6dce9ef007d0a154665ddd50545bcfa1e7ae9ebeff37"
+  },
+  "checks": {
+    "portableStateTests": {
+      "status": "passed",
+      "count": 3,
+      "runtime": "macOS; iOS adapter excluded"
+    },
+    "iosSdkCompilation": {
+      "status": "passed",
+      "kind": "Swift module and object compilation",
+      "target": "arm64 iOS simulator",
+      "artifacts": {
+        "Modules/MonetizationNative.swiftmodule": "d82552cf32272b3031c61ede6e743f7eced80d896a93896945c6d2f5388d923e",
+        "MonetizationNative.build/RevenueCatController.swift.o": "99e63ae763c230118ee64a6912abd81cd5f2261655a858dd8ed83c640e82289d"
+      }
+    }
+  },
+  "limits": {
+    "linkedApp": "not_built",
+    "deviceBehavior": "not_observed",
+    "sandboxProviderRoundTrip": "not_observed",
+    "liveReadiness": "not_observed"
+  },
+  "commands": [
+    "swift test --package-path native --scratch-path <scratch>",
+    "swift build --package-path native --scratch-path <scratch> --triple arm64-apple-ios16.0-simulator --sdk <iPhoneSimulator.sdk> --product MonetizationNative"
+  ]
+}

package/examples/extensions/superwall-ios/native/Package.resolved

@@ -0,0 +1,32 @@
+{
+  "pins" : [
+    {
+      "identity" : "purchases-ios",
+      "kind" : "remoteSourceControl",
+      "location" : "https://github.com/RevenueCat/purchases-ios",
+      "state" : {
+        "revision" : "b5c4652249754d6d8ec415a6bc79a611ea38c839",
+        "version" : "5.88.0"
+      }
+    },
+    {
+      "identity" : "superscript-ios-next",
+      "kind" : "remoteSourceControl",
+      "location" : "https://github.com/superwall/superscript-ios-next",
+      "state" : {
+        "revision" : "c3d1ee8d23ae6bf27e2d261c41a61001281166ec",
+        "version" : "1.0.15"
+      }
+    },
+    {
+      "identity" : "superwall-ios",
+      "kind" : "remoteSourceControl",
+      "location" : "https://github.com/superwall/Superwall-iOS",
+      "state" : {
+        "revision" : "a9990308209c27de2f3c74e666774f121149678e",
+        "version" : "4.16.3"
+      }
+    }
+  ],
+  "version" : 2
+}

package/examples/extensions/superwall-ios/native/Package.swift

@@ -0,0 +1,20 @@
+// swift-tools-version: 5.9
+import PackageDescription
+let package = Package(
+  name: "SuperwallRevenueCatExample",
+  platforms: [.iOS(.v16), .macOS(.v13)],
+  products: [.library(name: "MonetizationNative", targets: ["MonetizationNative"])],
+  dependencies: [
+    .package(url: "https://github.com/superwall/Superwall-iOS", exact: "4.16.3"),
+    .package(url: "https://github.com/RevenueCat/purchases-ios", exact: "5.88.0")
+  ],
+  targets: [
+    .target(name: "MonetizationCore"),
+    .target(name: "MonetizationNative", dependencies: [
+      "MonetizationCore",
+      .product(name: "SuperwallKit", package: "Superwall-iOS", condition: .when(platforms: [.iOS])),
+      .product(name: "RevenueCat", package: "purchases-ios", condition: .when(platforms: [.iOS]))
+    ]),
+    .testTarget(name: "MonetizationCoreTests", dependencies: ["MonetizationCore"])
+  ]
+)

package/examples/extensions/superwall-ios/native/Sources/MonetizationCore/EntitlementState.swift

@@ -0,0 +1,54 @@
+import Foundation
+
+/// Local integration state, not a provider receipt or business acceptance claim.
+public struct EntitlementState {
+  public enum PurchaseOutcome: Equatable { case purchased, cancelled, pending, failed }
+  public struct Exposure: Equatable {
+    public let assignmentID: String
+    public let subjectID: String
+    public let presentedAt: Date
+  }
+  public private(set) var subjectID: String
+  public private(set) var generation = 0
+  public private(set) var access = false
+  public private(set) var exposure: Exposure?
+  public private(set) var outcome: PurchaseOutcome?
+  public private(set) var seenCallbacks = Set<String>()
+  public private(set) var lastObservation: Date?
+  public init(anonymousID: String) { self.subjectID = anonymousID }
+  public mutating func present(assignmentID: String, owner: String, now: Date) throws {
+    guard owner == "superwall", !assignmentID.isEmpty else { throw Refusal.assignmentOwner }
+    exposure = Exposure(assignmentID: assignmentID, subjectID: subjectID, presentedAt: now)
+  }
+  /// Preserve anonymous exposure for an explicit identity join; invalidate prior access immediately.
+  public mutating func identify(_ id: String) throws {
+    guard !id.isEmpty else { throw Refusal.identity }
+    subjectID = id; generation += 1; access = false; lastObservation = nil; outcome = nil
+  }
+  public mutating func logout(anonymousID: String) throws {
+    try identify(anonymousID); exposure = nil; seenCallbacks.removeAll()
+  }
+  public mutating func purchaseCallback(id: String, result: PurchaseOutcome, generation expected: Int) {
+    guard expected == generation, seenCallbacks.insert(id).inserted else { return }
+    outcome = result
+    // A completed purchase or restore never grants access; only RevenueCat entitlement readback does.
+  }
+  public mutating func observeEntitlement(subject: String, generation expected: Int, active: Bool,
+                                         observedAt: Date, now: Date, authority: String) throws {
+    guard authority == "revenuecat" else { throw Refusal.entitlementOwner }
+    guard subject == subjectID, expected == generation else { throw Refusal.identity }
+    guard observedAt <= now, now.timeIntervalSince(observedAt) <= 60,
+          lastObservation.map({ observedAt >= $0 }) ?? true else { access = false; throw Refusal.stale }
+    lastObservation = observedAt; access = active
+  }
+  public enum SubscriptionProjection: Equatable { case unknown, inactive, active }
+  public func subscriptionProjection(now: Date) -> SubscriptionProjection {
+    guard let observed = lastObservation, observed <= now,
+          now.timeIntervalSince(observed) < 60 else { return .unknown }
+    return access ? .active : .inactive
+  }
+  public func hasCurrentAccess(now: Date) -> Bool {
+    subscriptionProjection(now: now) == .active
+  }
+  public enum Refusal: Error { case assignmentOwner, entitlementOwner, identity, stale }
+}

package/examples/extensions/superwall-ios/native/Sources/MonetizationNative/RevenueCatController.swift

@@ -0,0 +1,129 @@
+#if os(iOS)
+import Foundation
+import StoreKit
+import SuperwallKit
+import RevenueCat
+import MonetizationCore
+
+/// iOS only. Call configure explicitly with host-supplied public keys; no keys or startup execution are included.
+@MainActor
+public final class RevenueCatController: PurchaseController {
+  public private(set) var state: EntitlementState
+  private let entitlementID: String
+  private var observations: Task<Void, Never>?
+  private var expiry: Task<Void, Never>?
+  private var identityChange = false
+  private var purchaseInFlight = false
+  public var hasAccess: Bool { !identityChange && state.hasCurrentAccess(now: Date()) }
+  public init(anonymousID: String, entitlementID: String) {
+    self.state = EntitlementState(anonymousID: anonymousID)
+    self.entitlementID = entitlementID
+  }
+  public func configure(revenueCatPublicKey: String, superwallPublicKey: String) {
+    Purchases.configure(withAPIKey: revenueCatPublicKey, appUserID: state.subjectID)
+    Superwall.configure(apiKey: superwallPublicKey, purchaseController: self)
+    Superwall.shared.identify(userId: state.subjectID)
+    Superwall.shared.subscriptionStatus = .unknown
+    startObservations()
+  }
+  private func startObservations() {
+    observations?.cancel()
+    let generation = state.generation
+    observations = Task { [weak self] in
+      for await info in Purchases.shared.customerInfoStream {
+        guard !Task.isCancelled, let self, self.state.generation == generation, !self.identityChange else { return }
+        self.apply(info, generation: generation)
+      }
+    }
+  }
+  private func apply(_ info: RevenueCat.CustomerInfo, generation: Int) {
+    let now = Date()
+    let entitlements = info.entitlements.activeInCurrentEnvironment
+    do {
+      try state.observeEntitlement(subject: Purchases.shared.appUserID, generation: generation,
+        active: entitlements[entitlementID] != nil, observedAt: info.requestDate, now: now, authority: "revenuecat")
+      refreshSubscriptionProjection()
+      expiry?.cancel()
+      let delay = max(0, 60 - now.timeIntervalSince(info.requestDate))
+      expiry = Task { [weak self] in
+        try? await Task.sleep(nanoseconds: UInt64(delay * 1_000_000_000))
+        guard !Task.isCancelled, let self, self.state.generation == generation else { return }
+        self.refreshSubscriptionProjection()
+      }
+    } catch {
+      Superwall.shared.subscriptionStatus = .unknown
+    }
+  }
+  private func refreshSubscriptionProjection() {
+    switch state.subscriptionProjection(now: Date()) {
+    case .active: Superwall.shared.subscriptionStatus = .active([SuperwallKit.Entitlement(id: entitlementID)])
+    case .inactive: Superwall.shared.subscriptionStatus = .inactive
+    case .unknown: Superwall.shared.subscriptionStatus = .unknown
+    }
+  }
+  public func signIn(accountID: String) async throws {
+    guard !identityChange, !purchaseInFlight else { throw IntegrationError.identityTransition }
+    identityChange = true; observations?.cancel()
+    defer { identityChange = false; startObservations() }
+    try state.identify(accountID)
+    Superwall.shared.subscriptionStatus = .unknown
+    let result = try await Purchases.shared.logIn(accountID)
+    Superwall.shared.identify(userId: accountID)
+    apply(result.customerInfo, generation: state.generation)
+  }
+  public func logout() async throws {
+    guard !identityChange, !purchaseInFlight else { throw IntegrationError.identityTransition }
+    identityChange = true; observations?.cancel()
+    defer { identityChange = false; startObservations() }
+    // Access is revoked before the asynchronous provider call; a failed logout cannot retain it.
+    try state.logout(anonymousID: "pending-logout-" + UUID().uuidString)
+    Superwall.shared.subscriptionStatus = .unknown
+    let info = try await Purchases.shared.logOut()
+    try state.logout(anonymousID: Purchases.shared.appUserID)
+    Superwall.shared.reset()
+    Superwall.shared.identify(userId: state.subjectID)
+    apply(info, generation: state.generation)
+  }
+  /// Assignment is supplied by a separately observed Superwall placement result, never manufactured here.
+  public func recordPresentation(assignmentID: String) throws {
+    try state.present(assignmentID: assignmentID, owner: "superwall", now: Date())
+  }
+  public func present(placement: String) throws {
+    guard !identityChange, Purchases.shared.appUserID == state.subjectID else { throw IntegrationError.identityTransition }
+    refreshSubscriptionProjection()
+    Superwall.shared.register(placement: placement)
+  }
+  public func purchase(product: SuperwallKit.StoreProduct) async -> PurchaseResult {
+    guard !identityChange, !purchaseInFlight, Purchases.shared.appUserID == state.subjectID else { return .failed(IntegrationError.identityTransition) }
+    purchaseInFlight = true
+    defer { purchaseInFlight = false }
+    let generation = state.generation
+    let callbackID = UUID().uuidString
+    do {
+      guard let product = product.sk2Product else { throw IntegrationError.storeKit2Required }
+      let result = try await Purchases.shared.purchase(product: RevenueCat.StoreProduct(sk2Product: product))
+      guard generation == state.generation else { return .failed(IntegrationError.identityTransition) }
+      state.purchaseCallback(id: callbackID, result: result.userCancelled ? .cancelled : .purchased, generation: generation)
+      apply(result.customerInfo, generation: generation)
+      return result.userCancelled ? .cancelled : .purchased
+    } catch {
+      let pending = (error as NSError).code == ErrorCode.paymentPendingError.rawValue
+      state.purchaseCallback(id: callbackID, result: pending ? .pending : .failed, generation: generation)
+      return pending ? .pending : .failed(error)
+    }
+  }
+  public func restorePurchases() async -> RestorationResult {
+    guard !identityChange, !purchaseInFlight, Purchases.shared.appUserID == state.subjectID else { return .failed(IntegrationError.identityTransition) }
+    purchaseInFlight = true
+    defer { purchaseInFlight = false }
+    let generation = state.generation
+    do {
+      let info = try await Purchases.shared.restorePurchases()
+      guard generation == state.generation else { throw IntegrationError.identityTransition }
+      apply(info, generation: generation)
+      return .restored
+    } catch { return .failed(error) }
+  }
+  public enum IntegrationError: Error { case identityTransition, storeKit2Required }
+}
+#endif