react-native-iap 15.5.4 → 15.6.1

package/lib/typescript/src/webhook-client.d.ts

@@ -1,82 +0,0 @@
-export type WebhookEventType = "SubscriptionStarted" | "SubscriptionRenewed" | "SubscriptionExpired" | "SubscriptionInGracePeriod" | "SubscriptionInBillingRetry" | "SubscriptionRecovered" | "SubscriptionCanceled" | "SubscriptionUncanceled" | "SubscriptionRevoked" | "SubscriptionPriceChange" | "SubscriptionProductChanged" | "SubscriptionPaused" | "SubscriptionResumed" | "PurchaseRefunded" | "PurchaseConsumptionRequest" | "TestNotification";
-export declare const WEBHOOK_EVENT_TYPES: readonly ["SubscriptionStarted", "SubscriptionRenewed", "SubscriptionExpired", "SubscriptionInGracePeriod", "SubscriptionInBillingRetry", "SubscriptionRecovered", "SubscriptionCanceled", "SubscriptionUncanceled", "SubscriptionRevoked", "SubscriptionPriceChange", "SubscriptionProductChanged", "SubscriptionPaused", "SubscriptionResumed", "PurchaseRefunded", "PurchaseConsumptionRequest", "TestNotification"];
-export type WebhookEventPayload = {
-    id: string;
-    type: WebhookEventType;
-    source: string;
-    platform: "IOS" | "Android";
-    environment: "Production" | "Sandbox" | "Xcode";
-    projectId: string;
-    occurredAt: number;
-    receivedAt: number;
-    purchaseToken?: string;
-    productId?: string;
-    subscriptionState?: string;
-    expiresAt?: number;
-    renewsAt?: number;
-    cancellationReason?: string;
-    currency?: string;
-    priceAmountMicros?: number;
-    rawSignedPayload?: string;
-};
-export type WebhookListenerOptions = {
-    /**
-     * Project API key. Embedded in the URL path because Apple ASN
-     * registration cannot send custom headers; the same path is reused
-     * here for symmetry.
-     */
-    apiKey: string;
-    /**
-     * Override the kit base URL. Defaults to https://kit.openiap.dev.
-     * In tests, point this at a local server.
-     */
-    baseUrl?: string;
-    /** Called on every successfully-parsed webhook event. */
-    onEvent: (event: WebhookEventPayload) => void;
-    /**
-     * Called on transport errors. The connection auto-reconnects
-     * unconditionally; this callback exists for telemetry / surfacing
-     * to the host UI.
-     */
-    onError?: (error: WebhookListenerError) => void;
-    /**
-     * Optional injection of an EventSource constructor. Lets RN /
-     * Expo plug in `react-native-event-source` when running on a JS
-     * runtime that lacks the global, or vitest plug in a stub.
-     */
-    eventSourceFactory?: (url: string, headers: Record<string, string>) => WebhookEventStream;
-};
-export interface WebhookEventStream {
-    close(): void;
-    onmessage: ((event: {
-        data: string;
-        lastEventId?: string;
-    }) => void) | null;
-    onerror: ((error: unknown) => void) | null;
-    addEventListener?: (type: string, listener: (event: {
-        data: string;
-        lastEventId?: string;
-    }) => void) => void;
-}
-export type WebhookListener = {
-    /** Tear down the connection and stop receiving events. */
-    close(): void;
-};
-export type WebhookListenerError = {
-    code: "TRANSPORT_ERROR" | "PARSE_ERROR" | "MALFORMED_EVENT" | "NO_EVENTSOURCE";
-    message: string;
-    cause?: unknown;
-};
-export declare function connectWebhookStream(options: WebhookListenerOptions): WebhookListener;
-export type ParsedEventResult = {
-    kind: "ok";
-    event: WebhookEventPayload;
-} | {
-    kind: "skip";
-    reason: "heartbeat" | "stream-control";
-} | {
-    kind: "error";
-    message: string;
-};
-export declare function parseWebhookEventData(raw: string): ParsedEventResult;
-//# sourceMappingURL=webhook-client.d.ts.map

package/lib/typescript/src/webhook-client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"webhook-client.d.ts","sourceRoot":"","sources":["../../../src/webhook-client.ts"],"names":[],"mappings":"AAYA,MAAM,MAAM,gBAAgB,GACxB,qBAAqB,GACrB,qBAAqB,GACrB,qBAAqB,GACrB,2BAA2B,GAC3B,4BAA4B,GAC5B,uBAAuB,GACvB,sBAAsB,GACtB,wBAAwB,GACxB,qBAAqB,GACrB,yBAAyB,GACzB,4BAA4B,GAC5B,oBAAoB,GACpB,qBAAqB,GACrB,kBAAkB,GAClB,4BAA4B,GAC5B,kBAAkB,CAAC;AAEvB,eAAO,MAAM,mBAAmB,yZAiBgB,CAAC;AAEjD,MAAM,MAAM,mBAAmB,GAAG;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,KAAK,GAAG,SAAS,CAAC;IAC5B,WAAW,EAAE,YAAY,GAAG,SAAS,GAAG,OAAO,CAAC;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IAGnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC;;;;OAIG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,OAAO,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAC9C;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,CAAC;IAChD;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,CACnB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC5B,kBAAkB,CAAC;CACzB,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,KAAK,IAAI,IAAI,CAAC;IACd,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IAC5E,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3C,gBAAgB,CAAC,EAAE,CACjB,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,KAC9D,IAAI,CAAC;CACX;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,0DAA0D;IAC1D,KAAK,IAAI,IAAI,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EACA,iBAAiB,GACjB,aAAa,GACb,iBAAiB,GACjB,gBAAgB,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAIF,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,sBAAsB,GAC9B,eAAe,CAuFjB;AAMD,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,mBAAmB,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,GAAG,gBAAgB,CAAA;CAAE,GACxD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvC,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAyDpE"}

package/src/hooks/useWebhookEvents.ts

@@ -1,180 +0,0 @@
-import {useEffect, useRef, useState} from 'react';
-
-import {
-  connectWebhookStream,
-  type WebhookEventPayload,
-  type WebhookEventStream,
-  type WebhookListener,
-  type WebhookListenerError,
-} from '../webhook-client';
-
-export type UseWebhookEventsOptions = {
-  /**
-   * kit project API key — same value used for receipt verification.
-   * Must be non-empty to start the stream; pass `null`/`undefined` to
-   * disable the listener (e.g. before the user is logged in).
-   */
-  apiKey: string | null | undefined;
-  /**
-   * Override the kit base URL. Defaults to https://kit.openiap.dev.
-   */
-  baseUrl?: string;
-  /**
-   * Optional EventSource factory. Required on React Native because RN
-   * does not ship a global EventSource — pass an instance from
-   * `react-native-sse` (or any compatible polyfill).
-   */
-  eventSourceFactory?: (
-    url: string,
-    headers: Record<string, string>,
-  ) => WebhookEventStream;
-  /**
-   * Maximum number of events to retain in the in-memory ring buffer
-   * surfaced as `events`. Older entries are discarded. Defaults to 50.
-   * Set 0 to opt out of the buffer entirely (consume only via
-   * `onEvent`).
-   */
-  bufferSize?: number;
-  /**
-   * Called for every received event in addition to being appended to
-   * the buffer. Useful for side effects (toast, analytics, granting
-   * entitlement). Called with the latest stable callback identity.
-   */
-  onEvent?: (event: WebhookEventPayload) => void;
-  /**
-   * Called when the stream surfaces a transport / parse error.
-   * EventSource auto-reconnects regardless of this hook — this is
-   * primarily for telemetry + UI surfacing.
-   */
-  onError?: (error: WebhookListenerError) => void;
-};
-
-export type UseWebhookEventsResult = {
-  /** Most recent N events (most-recent-first). Capped at bufferSize. */
-  events: WebhookEventPayload[];
-  /** Last error reported by the underlying stream. Null when healthy. */
-  lastError: WebhookListenerError | null;
-  /**
-   * True once the first webhook event has been received from the
-   * stream. Remains false if the connection is open but idle (the
-   * underlying SSE bridge doesn't surface a "stream opened"
-   * lifecycle event we can hook into; isConnected is therefore an
-   * activity indicator, not a raw socket-state flag). Reset to
-   * false on cleanup / apiKey change.
-   */
-  isConnected: boolean;
-};
-
-// React hook wrapping the SSE webhook stream. Lifecycle:
-//   - opens on mount (once `apiKey` is non-empty),
-//   - closes on unmount,
-//   - reconnects automatically when EventSource raises a transport
-//     error (the underlying client auto-reconnects via the EventSource
-//     spec; this hook just surfaces the error and re-renders).
-//
-// Why a hook: openiap's UX guidance is that consumers consume webhook
-// events from React state (granting entitlement, refreshing the
-// subscription view) rather than via an imperative listener. The
-// hook's `events` buffer + `onEvent` callback cover both styles.
-export function useWebhookEvents({
-  apiKey,
-  baseUrl,
-  eventSourceFactory,
-  bufferSize = 50,
-  onEvent,
-  onError,
-}: UseWebhookEventsOptions): UseWebhookEventsResult {
-  const [events, setEvents] = useState<WebhookEventPayload[]>([]);
-  const [lastError, setLastError] = useState<WebhookListenerError | null>(null);
-  const [isConnected, setIsConnected] = useState(false);
-
-  // Stash callbacks in refs so reconnects don't fire on every render.
-  // The underlying SSE connection should only restart when `apiKey` /
-  // `baseUrl` change. `eventSourceFactory` is held in a ref too so
-  // anonymous-function callers don't tear down the connection every
-  // render (a common React pitfall — was previously documented as a
-  // caller-side constraint, now enforced by the hook). `bufferSize`
-  // is also a ref so adjusting the buffer cap from the host component
-  // doesn't tear down the stream and lose in-flight events.
-  const onEventRef = useRef(onEvent);
-  const onErrorRef = useRef(onError);
-  const eventSourceFactoryRef = useRef(eventSourceFactory);
-  const bufferSizeRef = useRef(bufferSize);
-  onEventRef.current = onEvent;
-  onErrorRef.current = onError;
-  eventSourceFactoryRef.current = eventSourceFactory;
-  bufferSizeRef.current = bufferSize;
-
-  // Trim the visible buffer immediately when bufferSize is lowered
-  // mid-stream. The ref-based update would otherwise only take
-  // effect on the next event.
-  useEffect(() => {
-    setEvents((prev) => (bufferSize > 0 ? prev.slice(0, bufferSize) : []));
-  }, [bufferSize]);
-
-  useEffect(() => {
-    // Fresh stream → fresh state. Resetting events + lastError on
-    // (re)connect prevents a stale payload from the previous
-    // apiKey/baseUrl from briefly leaking into the new context.
-    setEvents([]);
-    setLastError(null);
-
-    if (!apiKey) {
-      return;
-    }
-
-    let listener: WebhookListener | null = null;
-    let mounted = true;
-
-    try {
-      listener = connectWebhookStream({
-        apiKey,
-        baseUrl,
-        eventSourceFactory: eventSourceFactoryRef.current,
-        onEvent: (event) => {
-          if (!mounted) {
-            return;
-          }
-          setIsConnected(true);
-          const cap = bufferSizeRef.current;
-          if (cap > 0) {
-            setEvents((prev) => [event, ...prev].slice(0, cap));
-          }
-          onEventRef.current?.(event);
-        },
-        onError: (error) => {
-          if (!mounted) {
-            return;
-          }
-          setLastError(error);
-          onErrorRef.current?.(error);
-        },
-      });
-    } catch (error) {
-      const wrapped: WebhookListenerError = {
-        code: 'TRANSPORT_ERROR',
-        message:
-          error instanceof Error
-            ? error.message
-            : 'Failed to open webhook stream',
-        cause: error,
-      };
-      setLastError(wrapped);
-      onErrorRef.current?.(wrapped);
-    }
-
-    return () => {
-      mounted = false;
-      listener?.close();
-      setIsConnected(false);
-    };
-    // `eventSourceFactory` deliberately omitted from deps — held in a
-    // ref above so anonymous-function callers don't trigger reconnects
-    // on every render. The connection is only re-opened when apiKey or
-    // baseUrl changes; a runtime factory swap is picked up on that
-    // next reconnect via the ref.
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [apiKey, baseUrl]);
-
-  return {events, lastError, isConnected};
-}

package/src/webhook-client.ts

@@ -1,312 +0,0 @@
-// Transport-agnostic webhook client for the openiap kit SSE stream
-// (`GET /v1/webhooks/stream/{apiKey}`). Used by the JavaScript / TS
-// wrappers (react-native-iap, expo-iap) but written without React or
-// React-Native imports so it can also run in plain Node, browser, or
-// any other JS runtime.
-//
-// The wire format is documented in `packages/kit/server/api/v1/webhooks.ts`
-// and matches the GraphQL `WebhookEvent` shape from `webhook.graphql`.
-//
-// Parser logic is split out from the connection so it can be unit-
-// tested without a live server. See `webhook-client.test.ts`.
-
-export type WebhookEventType =
-  | "SubscriptionStarted"
-  | "SubscriptionRenewed"
-  | "SubscriptionExpired"
-  | "SubscriptionInGracePeriod"
-  | "SubscriptionInBillingRetry"
-  | "SubscriptionRecovered"
-  | "SubscriptionCanceled"
-  | "SubscriptionUncanceled"
-  | "SubscriptionRevoked"
-  | "SubscriptionPriceChange"
-  | "SubscriptionProductChanged"
-  | "SubscriptionPaused"
-  | "SubscriptionResumed"
-  | "PurchaseRefunded"
-  | "PurchaseConsumptionRequest"
-  | "TestNotification";
-
-export const WEBHOOK_EVENT_TYPES = [
-  "SubscriptionStarted",
-  "SubscriptionRenewed",
-  "SubscriptionExpired",
-  "SubscriptionInGracePeriod",
-  "SubscriptionInBillingRetry",
-  "SubscriptionRecovered",
-  "SubscriptionCanceled",
-  "SubscriptionUncanceled",
-  "SubscriptionRevoked",
-  "SubscriptionPriceChange",
-  "SubscriptionProductChanged",
-  "SubscriptionPaused",
-  "SubscriptionResumed",
-  "PurchaseRefunded",
-  "PurchaseConsumptionRequest",
-  "TestNotification",
-] as const satisfies readonly WebhookEventType[];
-
-export type WebhookEventPayload = {
-  id: string;
-  type: WebhookEventType;
-  source: string;
-  platform: "IOS" | "Android";
-  environment: "Production" | "Sandbox" | "Xcode";
-  projectId: string;
-  occurredAt: number;
-  receivedAt: number;
-  // Optional because TestNotification frames carry no transaction;
-  // every other event type populates this.
-  purchaseToken?: string;
-  productId?: string;
-  subscriptionState?: string;
-  expiresAt?: number;
-  renewsAt?: number;
-  cancellationReason?: string;
-  currency?: string;
-  priceAmountMicros?: number;
-  rawSignedPayload?: string;
-};
-
-export type WebhookListenerOptions = {
-  /**
-   * Project API key. Embedded in the URL path because Apple ASN
-   * registration cannot send custom headers; the same path is reused
-   * here for symmetry.
-   */
-  apiKey: string;
-  /**
-   * Override the kit base URL. Defaults to https://kit.openiap.dev.
-   * In tests, point this at a local server.
-   */
-  baseUrl?: string;
-  /** Called on every successfully-parsed webhook event. */
-  onEvent: (event: WebhookEventPayload) => void;
-  /**
-   * Called on transport errors. The connection auto-reconnects
-   * unconditionally; this callback exists for telemetry / surfacing
-   * to the host UI.
-   */
-  onError?: (error: WebhookListenerError) => void;
-  /**
-   * Optional injection of an EventSource constructor. Lets RN /
-   * Expo plug in `react-native-event-source` when running on a JS
-   * runtime that lacks the global, or vitest plug in a stub.
-   */
-  eventSourceFactory?: (
-    url: string,
-    headers: Record<string, string>,
-  ) => WebhookEventStream;
-};
-
-export interface WebhookEventStream {
-  close(): void;
-  onmessage: ((event: { data: string; lastEventId?: string }) => void) | null;
-  onerror: ((error: unknown) => void) | null;
-  addEventListener?: (
-    type: string,
-    listener: (event: { data: string; lastEventId?: string }) => void,
-  ) => void;
-}
-
-export type WebhookListener = {
-  /** Tear down the connection and stop receiving events. */
-  close(): void;
-};
-
-export type WebhookListenerError = {
-  code:
-    | "TRANSPORT_ERROR"
-    | "PARSE_ERROR"
-    | "MALFORMED_EVENT"
-    | "NO_EVENTSOURCE";
-  message: string;
-  cause?: unknown;
-};
-
-const DEFAULT_BASE_URL = "https://kit.openiap.dev";
-
-export function connectWebhookStream(
-  options: WebhookListenerOptions,
-): WebhookListener {
-  const baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;
-  const url = `${trimTrailingSlash(baseUrl)}/v1/webhooks/stream/${encodeURIComponent(options.apiKey)}`;
-
-  const factory = options.eventSourceFactory ?? defaultEventSourceFactory;
-  let stream: WebhookEventStream;
-  try {
-    stream = factory(url, {});
-  } catch (error) {
-    options.onError?.({
-      code: "NO_EVENTSOURCE",
-      message:
-        error instanceof Error
-          ? error.message
-          : "EventSource constructor unavailable in this runtime",
-      cause: error,
-    });
-    return { close: () => {} };
-  }
-
-  const seenIds = new Set<string>();
-  const seenOrder: string[] = [];
-  const markSeen = (id: string): boolean => {
-    if (seenIds.has(id)) {
-      return true;
-    }
-    seenIds.add(id);
-    seenOrder.push(id);
-    if (seenOrder.length > 1024) {
-      const evicted = seenOrder.shift();
-      if (evicted !== undefined) {
-        seenIds.delete(evicted);
-      }
-    }
-    return false;
-  };
-
-  const handleData = (raw: string) => {
-    const parsed = parseWebhookEventData(raw);
-    if (parsed.kind === "error") {
-      options.onError?.({
-        code: "PARSE_ERROR",
-        message: parsed.message,
-      });
-      return;
-    }
-    if (parsed.kind === "skip") {
-      return;
-    }
-    if (markSeen(parsed.event.id)) {
-      return;
-    }
-    options.onEvent(parsed.event);
-  };
-
-  if (typeof stream.addEventListener === "function") {
-    stream.addEventListener("message", (event) => handleData(event.data));
-    // WHATWG EventSource dispatches frames with `event: Foo` only to
-    // listeners registered for `Foo`, not to `message` / `onmessage`.
-    // Kit emits webhook frames as typed SSE events, so subscribe to
-    // every known webhook type and keep `message` for older servers or
-    // polyfills that collapse typed frames into the generic channel.
-    for (const eventType of WEBHOOK_EVENT_TYPES) {
-      stream.addEventListener(eventType, (event) => handleData(event.data));
-    }
-  } else {
-    stream.onmessage = (event) => handleData(event.data);
-  }
-
-  stream.onerror = (error) => {
-    options.onError?.({
-      code: "TRANSPORT_ERROR",
-      message: "SSE transport error (auto-reconnecting)",
-      cause: error,
-    });
-  };
-
-  return {
-    close: () => {
-      try {
-        stream.close();
-      } catch {
-        // Closing an already-closed EventSource is a no-op in browsers
-        // but throws in some polyfills.
-      }
-    },
-  };
-}
-
-// ---------------------------------------------------------------------------
-// Pure helpers (exported for testing).
-// ---------------------------------------------------------------------------
-
-export type ParsedEventResult =
-  | { kind: "ok"; event: WebhookEventPayload }
-  | { kind: "skip"; reason: "heartbeat" | "stream-control" }
-  | { kind: "error"; message: string };
-
-export function parseWebhookEventData(raw: string): ParsedEventResult {
-  if (!raw) {
-    return { kind: "skip", reason: "heartbeat" };
-  }
-
-  let parsed: unknown;
-  try {
-    parsed = JSON.parse(raw);
-  } catch (error) {
-    return {
-      kind: "error",
-      message:
-        error instanceof Error
-          ? `Failed to parse SSE payload: ${error.message}`
-          : "Failed to parse SSE payload",
-    };
-  }
-
-  if (
-    typeof parsed !== "object" ||
-    parsed === null ||
-    !("type" in parsed) ||
-    typeof (parsed as Record<string, unknown>).type !== "string"
-  ) {
-    // Stream-control messages (the `ready`/`stream-error` envelopes
-    // emitted by the kit server) have no `type` and are surfaced as
-    // skips so consumers don't see them as events.
-    return { kind: "skip", reason: "stream-control" };
-  }
-
-  const event = parsed as WebhookEventPayload;
-
-  if (
-    typeof event.id !== "string" ||
-    typeof event.occurredAt !== "number" ||
-    typeof event.receivedAt !== "number"
-  ) {
-    return {
-      kind: "error",
-      message: `WebhookEvent missing required fields (id/occurredAt/receivedAt)`,
-    };
-  }
-  // purchaseToken is required for every event type *except*
-  // TestNotification — Apple ASN v2 / Google RTDN test payloads
-  // carry no transaction. Hard-rejecting here would surface valid
-  // test webhooks as MALFORMED_EVENT and never reach listeners.
-  if (
-    event.type !== "TestNotification" &&
-    typeof event.purchaseToken !== "string"
-  ) {
-    return {
-      kind: "error",
-      message: `WebhookEvent missing required field purchaseToken`,
-    };
-  }
-
-  return { kind: "ok", event };
-}
-
-function trimTrailingSlash(url: string): string {
-  return url.endsWith("/") ? url.slice(0, -1) : url;
-}
-
-function defaultEventSourceFactory(
-  url: string,
-  _headers: Record<string, string>,
-): WebhookEventStream {
-  // EventSource is part of the WHATWG spec and available in all
-  // browser environments and most JS runtimes (Bun, Node 22+, Deno).
-  // RN does not ship it natively — consumers must pass
-  // `eventSourceFactory` from `react-native-sse` or similar.
-  const ctor = (
-    globalThis as {
-      EventSource?: new (url: string) => WebhookEventStream;
-    }
-  ).EventSource;
-  if (!ctor) {
-    throw new Error(
-      "EventSource is not defined. Pass `eventSourceFactory` for runtimes without a built-in EventSource.",
-    );
-  }
-  return new ctor(url);
-}