react-native-iap 15.6.0 → 15.6.2

package/src/utils/deprecation.ts

@@ -0,0 +1,16 @@
+import {RnIapConsole} from './debug';
+
+const emittedLegacyWarnings = new Set<string>();
+
+export const warnLegacyOnce = (key: string, message: string): void => {
+  if (emittedLegacyWarnings.has(key)) {
+    return;
+  }
+
+  emittedLegacyWarnings.add(key);
+  RnIapConsole.warn(message);
+};
+
+export const resetLegacyWarningsForTesting = (): void => {
+  emittedLegacyWarnings.clear();
+};

package/src/utils/platform-request.ts

@@ -0,0 +1,37 @@
+export interface PlatformRequestSelection<T> {
+  usesLegacyKey: boolean;
+  value: T | null | undefined;
+}
+
+/**
+ * Selects a canonical platform request by key presence, not value.
+ *
+ * An explicitly supplied canonical `null` or `undefined` is authoritative and
+ * must not fall back to the deprecated alias.
+ */
+export const selectCanonicalPlatformRequest = <T>(
+  request: object,
+  canonicalKey: PropertyKey,
+  legacyKey: PropertyKey,
+): PlatformRequestSelection<T> => {
+  const record = request as Record<PropertyKey, T | null | undefined>;
+
+  if (Object.prototype.hasOwnProperty.call(record, canonicalKey)) {
+    return {
+      usesLegacyKey: false,
+      value: record[canonicalKey],
+    };
+  }
+
+  if (Object.prototype.hasOwnProperty.call(record, legacyKey)) {
+    return {
+      usesLegacyKey: true,
+      value: record[legacyKey],
+    };
+  }
+
+  return {
+    usesLegacyKey: false,
+    value: undefined,
+  };
+};

package/src/utils/type-bridge.ts

@@ -470,8 +470,9 @@ export function convertNitroPurchaseToPurchase(
       isAutoRenewing: Boolean(nitroPurchase.isAutoRenewing),
       currentPlanId: toNullableString(nitroPurchase.currentPlanId),
       ids: nitroPurchase.ids ?? null,
-      // PurchaseIOS requires both id and transactionId (they are the same value)
-      transactionId: nitroPurchase.id,
+      // PurchaseIOS requires a transaction ID; legacy native payloads used id.
+      transactionId:
+        toNullableString(nitroPurchase.transactionId) ?? nitroPurchase.id,
       advancedCommerceInfoIOS: nitroPurchase.advancedCommerceInfoIOS ?? null,
       billingPlanTypeIOS: nitroPurchase.billingPlanTypeIOS ?? null,
       commitmentInfoIOS: nitroPurchase.commitmentInfoIOS ?? null,
@@ -525,6 +526,20 @@ export function convertNitroPurchaseToPurchase(
     return iosPurchase;
   }
 
+  const explicitAndroidTransactionId = toNullableString(
+    nitroPurchase.transactionId,
+  );
+  const legacyAndroidId = toNullableString(nitroPurchase.id);
+  const androidPurchaseToken = toNullableString(
+    nitroPurchase.purchaseToken ?? nitroPurchase.purchaseTokenAndroid,
+  );
+  const androidTransactionId =
+    explicitAndroidTransactionId ??
+    (legacyAndroidId != null &&
+    (store !== STORE_GOOGLE || legacyAndroidId !== androidPurchaseToken)
+      ? legacyAndroidId
+      : null);
+
   const androidPurchase: PurchaseAndroid = {
     id: nitroPurchase.id,
     productId: nitroPurchase.productId,
@@ -538,8 +553,9 @@ export function convertNitroPurchaseToPurchase(
     isAutoRenewing: Boolean(nitroPurchase.isAutoRenewing),
     currentPlanId: toNullableString(nitroPurchase.currentPlanId),
     ids: nitroPurchase.ids ?? null,
-    // PurchaseAndroid has optional transactionId (may differ from id/orderId)
-    transactionId: toNullableString(nitroPurchase.id),
+    // Android id falls back to purchaseToken when Play has no orderId, so do
+    // not synthesize a transactionId from it.
+    transactionId: androidTransactionId,
     autoRenewingAndroid: toNullableBoolean(
       nitroPurchase.autoRenewingAndroid ?? nitroPurchase.isAutoRenewing,
     ),

package/src/vega-adapter.ts

@@ -11,6 +11,7 @@ import type {
 } from './specs/RnIap.nitro';
 import {ErrorCode} from './types';
 import type {SubResponseCodeAndroid} from './types';
+import {selectCanonicalPlatformRequest} from './utils/platform-request';
 
 type ResponseOperation =
   | 'product-data'
@@ -53,6 +54,7 @@ interface VegaProduct {
 interface VegaReceipt {
   cancelDate?: Date | number | string | null;
   deferredDate?: Date | number | string | null;
+  deferredSku?: string | null;
   isCancelled?: boolean | null;
   isDeferred?: boolean | null;
   productType?: unknown;
@@ -126,7 +128,6 @@ const FULFILLMENT_RESULT_FULFILLED = 1;
 const RESPONSE_SUCCESS = 1;
 const PURCHASE_RESPONSE_SUCCESS = 0;
 const PURCHASE_STATE_PURCHASED = 1;
-const PURCHASE_STATE_PENDING = 2;
 const IAPKIT_DEFAULT_BASE_URL = 'https://kit.openiap.dev';
 const IAPKIT_VERIFY_PATH = '/v1/purchase/verify';
 const VEGA_PARSER_ERROR_MESSAGES = [
@@ -574,8 +575,13 @@ function getSubscriptionPeriod(product: VegaProduct): string {
   return '';
 }
 
+function nonBlankString(value: unknown): string | null {
+  if (typeof value !== 'string') return null;
+  return value.trim().length > 0 ? value : null;
+}
+
 function getReceiptSku(receipt: VegaReceipt): string {
-  return receipt.sku ?? receipt.termSku ?? '';
+  return nonBlankString(receipt.sku) ?? nonBlankString(receipt.termSku) ?? '';
 }
 
 function getCachedProductType(
@@ -711,38 +717,58 @@ function mapReceipt(
   const receiptId = receipt.receiptId ?? '';
   const productId = productIdOverride ?? getReceiptSku(receipt);
   const type = productTypeToOpenIap(receipt.productType ?? fallbackProductType);
-  const isPending = Boolean(receipt.isDeferred);
   const isCanceled = Boolean(receipt.isCancelled || receipt.cancelDate);
-  const isActive = !isCanceled && !isPending;
+  const isActive = !isCanceled;
+  const deferredSku = nonBlankString(receipt.deferredSku);
 
   return {
     id: receiptId,
+    transactionId: receiptId,
     productId,
     transactionDate: toTimestamp(receipt.purchaseDate),
     purchaseToken: receiptId,
-    currentPlanId: type === 'subs' ? productId : null,
+    currentPlanId:
+      type === 'subs' ? (nonBlankString(receipt.termSku) ?? productId) : null,
     ids: productId ? [productId] : [],
     platform: 'android',
     store: 'amazon',
     quantity: 1,
-    purchaseState: isPending ? 'pending' : isActive ? 'purchased' : 'unknown',
+    purchaseState: isActive ? 'purchased' : 'unknown',
     isAutoRenewing: type === 'subs' && isActive,
     purchaseTokenAndroid: receiptId,
     dataAndroid: stringifyJson(receipt),
     signatureAndroid: null,
     autoRenewingAndroid: type === 'subs' && isActive,
-    purchaseStateAndroid: isPending
-      ? PURCHASE_STATE_PENDING
-      : isActive
-        ? PURCHASE_STATE_PURCHASED
-        : 0,
+    purchaseStateAndroid: isActive ? PURCHASE_STATE_PURCHASED : 0,
     isAcknowledgedAndroid: false,
-    isSuspendedAndroid: Boolean(receipt.isDeferred),
+    packageNameAndroid: null,
+    obfuscatedAccountIdAndroid: null,
+    obfuscatedProfileIdAndroid: null,
+    developerPayloadAndroid: null,
+    isSuspendedAndroid: false,
+    pendingPurchaseUpdateAndroid:
+      receipt.isDeferred && deferredSku
+        ? {products: [deferredSku], purchaseToken: receiptId}
+        : null,
   };
 }
 
-function getSkuFromRequest(request: Parameters<RnIap['requestPurchase']>[0]) {
-  const androidRequest = request.google ?? request.android;
+type VegaPurchaseRequest = Parameters<RnIap['requestPurchase']>[0];
+type VegaAndroidPurchaseRequest = NonNullable<VegaPurchaseRequest['google']>;
+
+function selectGooglePurchaseRequest(
+  request: VegaPurchaseRequest,
+): VegaAndroidPurchaseRequest | null | undefined {
+  return selectCanonicalPlatformRequest<VegaAndroidPurchaseRequest>(
+    request,
+    'google',
+    'android',
+  ).value;
+}
+
+function getSkuFromRequest(
+  androidRequest: VegaAndroidPurchaseRequest | null | undefined,
+) {
   const skus = androidRequest?.skus ?? [];
   if (skus.length !== 1) {
     throw createVegaError(
@@ -1026,13 +1052,11 @@ export function createVegaIapModule(service: VegaPurchasingService): RnIap {
     options?: Parameters<RnIap['getAvailablePurchases']>[0],
   ): Promise<NitroPurchase[]> => {
     const requestedType = options?.android?.type;
-    const includeSuspended = Boolean(options?.android?.includeSuspended);
     const receipts = await getPurchaseUpdateReceipts();
     await hydrateProductTypesForReceipts(receipts);
     return receipts
       .filter((receipt) => {
         if (receipt.isCancelled || receipt.cancelDate) return false;
-        if (!includeSuspended && receipt.isDeferred) return false;
         const openIapType = productTypeToOpenIap(
           receipt.productType ??
             getCachedProductType(receipt, productTypesBySku),
@@ -1114,7 +1138,7 @@ export function createVegaIapModule(service: VegaPurchasingService): RnIap {
     const requestedPurchases: NitroPurchase[] = [];
 
     for (const receipt of receipts) {
-      if (receipt.isCancelled || receipt.cancelDate || receipt.isDeferred) {
+      if (receipt.isCancelled || receipt.cancelDate) {
         continue;
       }
 
@@ -1422,8 +1446,8 @@ export function createVegaIapModule(service: VegaPurchasingService): RnIap {
     ): Promise<Awaited<ReturnType<RnIap['requestPurchase']>>> {
       let sku: string | undefined;
       try {
-        sku = getSkuFromRequest(request);
-        const androidRequest = request.google ?? request.android;
+        const androidRequest = selectGooglePurchaseRequest(request);
+        sku = getSkuFromRequest(androidRequest);
         const fallbackProductType = hasSubscriptionRequestContext(
           androidRequest?.subscriptionOffers,
         )
@@ -1515,8 +1539,8 @@ export function createVegaIapModule(service: VegaPurchasingService): RnIap {
           purchaseToken: purchase.purchaseToken ?? null,
           transactionDate: purchase.transactionDate,
           autoRenewingAndroid: purchase.autoRenewingAndroid ?? true,
-          basePlanIdAndroid: purchase.productId,
-          currentPlanId: purchase.productId,
+          basePlanIdAndroid: purchase.currentPlanId ?? purchase.productId,
+          currentPlanId: purchase.currentPlanId ?? purchase.productId,
           purchaseTokenAndroid: purchase.purchaseTokenAndroid ?? null,
         }));
     },
@@ -1540,9 +1564,7 @@ export function createVegaIapModule(service: VegaPurchasingService): RnIap {
       return true;
     },
     async restorePurchases(): Promise<void> {
-      const purchases = await getAvailablePurchases({
-        android: {includeSuspended: false},
-      });
+      const purchases = await getAvailablePurchases();
       purchases.forEach(emitPurchaseUpdated);
     },
     addPurchaseUpdatedListener(listener): number {

package/lib/module/hooks/useWebhookEvents.js

@@ -1,113 +0,0 @@
-"use strict";
-
-import { useEffect, useRef, useState } from 'react';
-import { connectWebhookStream } from "../webhook-client.js";
-// React hook wrapping the SSE webhook stream. Lifecycle:
-//   - opens on mount (once `apiKey` is non-empty),
-//   - closes on unmount,
-//   - reconnects automatically when EventSource raises a transport
-//     error (the underlying client auto-reconnects via the EventSource
-//     spec; this hook just surfaces the error and re-renders).
-//
-// Why a hook: openiap's UX guidance is that consumers consume webhook
-// events from React state (granting entitlement, refreshing the
-// subscription view) rather than via an imperative listener. The
-// hook's `events` buffer + `onEvent` callback cover both styles.
-export function useWebhookEvents({
-  apiKey,
-  baseUrl,
-  eventSourceFactory,
-  bufferSize = 50,
-  onEvent,
-  onError
-}) {
-  const [events, setEvents] = useState([]);
-  const [lastError, setLastError] = useState(null);
-  const [isConnected, setIsConnected] = useState(false);
-
-  // Stash callbacks in refs so reconnects don't fire on every render.
-  // The underlying SSE connection should only restart when `apiKey` /
-  // `baseUrl` change. `eventSourceFactory` is held in a ref too so
-  // anonymous-function callers don't tear down the connection every
-  // render (a common React pitfall — was previously documented as a
-  // caller-side constraint, now enforced by the hook). `bufferSize`
-  // is also a ref so adjusting the buffer cap from the host component
-  // doesn't tear down the stream and lose in-flight events.
-  const onEventRef = useRef(onEvent);
-  const onErrorRef = useRef(onError);
-  const eventSourceFactoryRef = useRef(eventSourceFactory);
-  const bufferSizeRef = useRef(bufferSize);
-  onEventRef.current = onEvent;
-  onErrorRef.current = onError;
-  eventSourceFactoryRef.current = eventSourceFactory;
-  bufferSizeRef.current = bufferSize;
-
-  // Trim the visible buffer immediately when bufferSize is lowered
-  // mid-stream. The ref-based update would otherwise only take
-  // effect on the next event.
-  useEffect(() => {
-    setEvents(prev => bufferSize > 0 ? prev.slice(0, bufferSize) : []);
-  }, [bufferSize]);
-  useEffect(() => {
-    // Fresh stream → fresh state. Resetting events + lastError on
-    // (re)connect prevents a stale payload from the previous
-    // apiKey/baseUrl from briefly leaking into the new context.
-    setEvents([]);
-    setLastError(null);
-    if (!apiKey) {
-      return;
-    }
-    let listener = null;
-    let mounted = true;
-    try {
-      listener = connectWebhookStream({
-        apiKey,
-        baseUrl,
-        eventSourceFactory: eventSourceFactoryRef.current,
-        onEvent: event => {
-          if (!mounted) {
-            return;
-          }
-          setIsConnected(true);
-          const cap = bufferSizeRef.current;
-          if (cap > 0) {
-            setEvents(prev => [event, ...prev].slice(0, cap));
-          }
-          onEventRef.current?.(event);
-        },
-        onError: error => {
-          if (!mounted) {
-            return;
-          }
-          setLastError(error);
-          onErrorRef.current?.(error);
-        }
-      });
-    } catch (error) {
-      const wrapped = {
-        code: 'TRANSPORT_ERROR',
-        message: error instanceof Error ? error.message : 'Failed to open webhook stream',
-        cause: error
-      };
-      setLastError(wrapped);
-      onErrorRef.current?.(wrapped);
-    }
-    return () => {
-      mounted = false;
-      listener?.close();
-      setIsConnected(false);
-    };
-    // `eventSourceFactory` deliberately omitted from deps — held in a
-    // ref above so anonymous-function callers don't trigger reconnects
-    // on every render. The connection is only re-opened when apiKey or
-    // baseUrl changes; a runtime factory swap is picked up on that
-    // next reconnect via the ref.
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [apiKey, baseUrl]);
-  return {
-    events,
-    lastError,
-    isConnected
-  };
-}
-//# sourceMappingURL=useWebhookEvents.js.map

package/lib/module/hooks/useWebhookEvents.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["useEffect","useRef","useState","connectWebhookStream","useWebhookEvents","apiKey","baseUrl","eventSourceFactory","bufferSize","onEvent","onError","events","setEvents","lastError","setLastError","isConnected","setIsConnected","onEventRef","onErrorRef","eventSourceFactoryRef","bufferSizeRef","current","prev","slice","listener","mounted","event","cap","error","wrapped","code","message","Error","cause","close"],"sourceRoot":"../../../src","sources":["hooks/useWebhookEvents.ts"],"mappings":";;AAAA,SAAQA,SAAS,EAAEC,MAAM,EAAEC,QAAQ,QAAO,OAAO;AAEjD,SACEC,oBAAoB,QAKf,sBAAmB;AA2D1B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,gBAAgBA,CAAC;EAC/BC,MAAM;EACNC,OAAO;EACPC,kBAAkB;EAClBC,UAAU,GAAG,EAAE;EACfC,OAAO;EACPC;AACuB,CAAC,EAA0B;EAClD,MAAM,CAACC,MAAM,EAAEC,SAAS,CAAC,GAAGV,QAAQ,CAAwB,EAAE,CAAC;EAC/D,MAAM,CAACW,SAAS,EAAEC,YAAY,CAAC,GAAGZ,QAAQ,CAA8B,IAAI,CAAC;EAC7E,MAAM,CAACa,WAAW,EAAEC,cAAc,CAAC,GAAGd,QAAQ,CAAC,KAAK,CAAC;;EAErD;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,MAAMe,UAAU,GAAGhB,MAAM,CAACQ,OAAO,CAAC;EAClC,MAAMS,UAAU,GAAGjB,MAAM,CAACS,OAAO,CAAC;EAClC,MAAMS,qBAAqB,GAAGlB,MAAM,CAACM,kBAAkB,CAAC;EACxD,MAAMa,aAAa,GAAGnB,MAAM,CAACO,UAAU,CAAC;EACxCS,UAAU,CAACI,OAAO,GAAGZ,OAAO;EAC5BS,UAAU,CAACG,OAAO,GAAGX,OAAO;EAC5BS,qBAAqB,CAACE,OAAO,GAAGd,kBAAkB;EAClDa,aAAa,CAACC,OAAO,GAAGb,UAAU;;EAElC;EACA;EACA;EACAR,SAAS,CAAC,MAAM;IACdY,SAAS,CAAEU,IAAI,IAAMd,UAAU,GAAG,CAAC,GAAGc,IAAI,CAACC,KAAK,CAAC,CAAC,EAAEf,UAAU,CAAC,GAAG,EAAG,CAAC;EACxE,CAAC,EAAE,CAACA,UAAU,CAAC,CAAC;EAEhBR,SAAS,CAAC,MAAM;IACd;IACA;IACA;IACAY,SAAS,CAAC,EAAE,CAAC;IACbE,YAAY,CAAC,IAAI,CAAC;IAElB,IAAI,CAACT,MAAM,EAAE;MACX;IACF;IAEA,IAAImB,QAAgC,GAAG,IAAI;IAC3C,IAAIC,OAAO,GAAG,IAAI;IAElB,IAAI;MACFD,QAAQ,GAAGrB,oBAAoB,CAAC;QAC9BE,MAAM;QACNC,OAAO;QACPC,kBAAkB,EAAEY,qBAAqB,CAACE,OAAO;QACjDZ,OAAO,EAAGiB,KAAK,IAAK;UAClB,IAAI,CAACD,OAAO,EAAE;YACZ;UACF;UACAT,cAAc,CAAC,IAAI,CAAC;UACpB,MAAMW,GAAG,GAAGP,aAAa,CAACC,OAAO;UACjC,IAAIM,GAAG,GAAG,CAAC,EAAE;YACXf,SAAS,CAAEU,IAAI,IAAK,CAACI,KAAK,EAAE,GAAGJ,IAAI,CAAC,CAACC,KAAK,CAAC,CAAC,EAAEI,GAAG,CAAC,CAAC;UACrD;UACAV,UAAU,CAACI,OAAO,GAAGK,KAAK,CAAC;QAC7B,CAAC;QACDhB,OAAO,EAAGkB,KAAK,IAAK;UAClB,IAAI,CAACH,OAAO,EAAE;YACZ;UACF;UACAX,YAAY,CAACc,KAAK,CAAC;UACnBV,UAAU,CAACG,OAAO,GAAGO,KAAK,CAAC;QAC7B;MACF,CAAC,CAAC;IACJ,CAAC,CAAC,OAAOA,KAAK,EAAE;MACd,MAAMC,OAA6B,GAAG;QACpCC,IAAI,EAAE,iBAAiB;QACvBC,OAAO,EACLH,KAAK,YAAYI,KAAK,GAClBJ,KAAK,CAACG,OAAO,GACb,+BAA+B;QACrCE,KAAK,EAAEL;MACT,CAAC;MACDd,YAAY,CAACe,OAAO,CAAC;MACrBX,UAAU,CAACG,OAAO,GAAGQ,OAAO,CAAC;IAC/B;IAEA,OAAO,MAAM;MACXJ,OAAO,GAAG,KAAK;MACfD,QAAQ,EAAEU,KAAK,CAAC,CAAC;MACjBlB,cAAc,CAAC,KAAK,CAAC;IACvB,CAAC;IACD;IACA;IACA;IACA;IACA;IACA;EACF,CAAC,EAAE,CAACX,MAAM,EAAEC,OAAO,CAAC,CAAC;EAErB,OAAO;IAACK,MAAM;IAAEE,SAAS;IAAEE;EAAW,CAAC;AACzC","ignoreList":[]}

package/lib/module/webhook-client.js

@@ -1,164 +0,0 @@
-"use strict";
-
-// Transport-agnostic webhook client for the openiap kit SSE stream
-// (`GET /v1/webhooks/stream/{apiKey}`). Used by the JavaScript / TS
-// wrappers (react-native-iap, expo-iap) but written without React or
-// React-Native imports so it can also run in plain Node, browser, or
-// any other JS runtime.
-//
-// The wire format is documented in `packages/kit/server/api/v1/webhooks.ts`
-// and matches the GraphQL `WebhookEvent` shape from `webhook.graphql`.
-//
-// Parser logic is split out from the connection so it can be unit-
-// tested without a live server. See `webhook-client.test.ts`.
-
-export const WEBHOOK_EVENT_TYPES = ["SubscriptionStarted", "SubscriptionRenewed", "SubscriptionExpired", "SubscriptionInGracePeriod", "SubscriptionInBillingRetry", "SubscriptionRecovered", "SubscriptionCanceled", "SubscriptionUncanceled", "SubscriptionRevoked", "SubscriptionPriceChange", "SubscriptionProductChanged", "SubscriptionPaused", "SubscriptionResumed", "PurchaseRefunded", "PurchaseConsumptionRequest", "TestNotification"];
-const DEFAULT_BASE_URL = "https://kit.openiap.dev";
-export function connectWebhookStream(options) {
-  const baseUrl = options.baseUrl ?? DEFAULT_BASE_URL;
-  const url = `${trimTrailingSlash(baseUrl)}/v1/webhooks/stream/${encodeURIComponent(options.apiKey)}`;
-  const factory = options.eventSourceFactory ?? defaultEventSourceFactory;
-  let stream;
-  try {
-    stream = factory(url, {});
-  } catch (error) {
-    options.onError?.({
-      code: "NO_EVENTSOURCE",
-      message: error instanceof Error ? error.message : "EventSource constructor unavailable in this runtime",
-      cause: error
-    });
-    return {
-      close: () => {}
-    };
-  }
-  const seenIds = new Set();
-  const seenOrder = [];
-  const markSeen = id => {
-    if (seenIds.has(id)) {
-      return true;
-    }
-    seenIds.add(id);
-    seenOrder.push(id);
-    if (seenOrder.length > 1024) {
-      const evicted = seenOrder.shift();
-      if (evicted !== undefined) {
-        seenIds.delete(evicted);
-      }
-    }
-    return false;
-  };
-  const handleData = raw => {
-    const parsed = parseWebhookEventData(raw);
-    if (parsed.kind === "error") {
-      options.onError?.({
-        code: "PARSE_ERROR",
-        message: parsed.message
-      });
-      return;
-    }
-    if (parsed.kind === "skip") {
-      return;
-    }
-    if (markSeen(parsed.event.id)) {
-      return;
-    }
-    options.onEvent(parsed.event);
-  };
-  if (typeof stream.addEventListener === "function") {
-    stream.addEventListener("message", event => handleData(event.data));
-    // WHATWG EventSource dispatches frames with `event: Foo` only to
-    // listeners registered for `Foo`, not to `message` / `onmessage`.
-    // Kit emits webhook frames as typed SSE events, so subscribe to
-    // every known webhook type and keep `message` for older servers or
-    // polyfills that collapse typed frames into the generic channel.
-    for (const eventType of WEBHOOK_EVENT_TYPES) {
-      stream.addEventListener(eventType, event => handleData(event.data));
-    }
-  } else {
-    stream.onmessage = event => handleData(event.data);
-  }
-  stream.onerror = error => {
-    options.onError?.({
-      code: "TRANSPORT_ERROR",
-      message: "SSE transport error (auto-reconnecting)",
-      cause: error
-    });
-  };
-  return {
-    close: () => {
-      try {
-        stream.close();
-      } catch {
-        // Closing an already-closed EventSource is a no-op in browsers
-        // but throws in some polyfills.
-      }
-    }
-  };
-}
-
-// ---------------------------------------------------------------------------
-// Pure helpers (exported for testing).
-// ---------------------------------------------------------------------------
-
-export function parseWebhookEventData(raw) {
-  if (!raw) {
-    return {
-      kind: "skip",
-      reason: "heartbeat"
-    };
-  }
-  let parsed;
-  try {
-    parsed = JSON.parse(raw);
-  } catch (error) {
-    return {
-      kind: "error",
-      message: error instanceof Error ? `Failed to parse SSE payload: ${error.message}` : "Failed to parse SSE payload"
-    };
-  }
-  if (typeof parsed !== "object" || parsed === null || !("type" in parsed) || typeof parsed.type !== "string") {
-    // Stream-control messages (the `ready`/`stream-error` envelopes
-    // emitted by the kit server) have no `type` and are surfaced as
-    // skips so consumers don't see them as events.
-    return {
-      kind: "skip",
-      reason: "stream-control"
-    };
-  }
-  const event = parsed;
-  if (typeof event.id !== "string" || typeof event.occurredAt !== "number" || typeof event.receivedAt !== "number") {
-    return {
-      kind: "error",
-      message: `WebhookEvent missing required fields (id/occurredAt/receivedAt)`
-    };
-  }
-  // purchaseToken is required for every event type *except*
-  // TestNotification — Apple ASN v2 / Google RTDN test payloads
-  // carry no transaction. Hard-rejecting here would surface valid
-  // test webhooks as MALFORMED_EVENT and never reach listeners.
-  if (event.type !== "TestNotification" && typeof event.purchaseToken !== "string") {
-    return {
-      kind: "error",
-      message: `WebhookEvent missing required field purchaseToken`
-    };
-  }
-  return {
-    kind: "ok",
-    event
-  };
-}
-function trimTrailingSlash(url) {
-  return url.endsWith("/") ? url.slice(0, -1) : url;
-}
-function defaultEventSourceFactory(url, _headers) {
-  // EventSource is part of the WHATWG spec and available in all
-  // browser environments and most JS runtimes (Bun, Node 22+, Deno).
-  // RN does not ship it natively — consumers must pass
-  // `eventSourceFactory` from `react-native-sse` or similar.
-  const ctor = globalThis.EventSource;
-  if (!ctor) {
-    throw new Error("EventSource is not defined. Pass `eventSourceFactory` for runtimes without a built-in EventSource.");
-  }
-  return new ctor(url);
-}
-//# sourceMappingURL=webhook-client.js.map

package/lib/module/webhook-client.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["WEBHOOK_EVENT_TYPES","DEFAULT_BASE_URL","connectWebhookStream","options","baseUrl","url","trimTrailingSlash","encodeURIComponent","apiKey","factory","eventSourceFactory","defaultEventSourceFactory","stream","error","onError","code","message","Error","cause","close","seenIds","Set","seenOrder","markSeen","id","has","add","push","length","evicted","shift","undefined","delete","handleData","raw","parsed","parseWebhookEventData","kind","event","onEvent","addEventListener","data","eventType","onmessage","onerror","reason","JSON","parse","type","occurredAt","receivedAt","purchaseToken","endsWith","slice","_headers","ctor","globalThis","EventSource"],"sourceRoot":"../../src","sources":["webhook-client.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAoBA,OAAO,MAAMA,mBAAmB,GAAG,CACjC,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,EAC3B,4BAA4B,EAC5B,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,qBAAqB,EACrB,yBAAyB,EACzB,4BAA4B,EAC5B,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,4BAA4B,EAC5B,kBAAkB,CAC4B;AAgFhD,MAAMC,gBAAgB,GAAG,yBAAyB;AAElD,OAAO,SAASC,oBAAoBA,CAClCC,OAA+B,EACd;EACjB,MAAMC,OAAO,GAAGD,OAAO,CAACC,OAAO,IAAIH,gBAAgB;EACnD,MAAMI,GAAG,GAAG,GAAGC,iBAAiB,CAACF,OAAO,CAAC,uBAAuBG,kBAAkB,CAACJ,OAAO,CAACK,MAAM,CAAC,EAAE;EAEpG,MAAMC,OAAO,GAAGN,OAAO,CAACO,kBAAkB,IAAIC,yBAAyB;EACvE,IAAIC,MAA0B;EAC9B,IAAI;IACFA,MAAM,GAAGH,OAAO,CAACJ,GAAG,EAAE,CAAC,CAAC,CAAC;EAC3B,CAAC,CAAC,OAAOQ,KAAK,EAAE;IACdV,OAAO,CAACW,OAAO,GAAG;MAChBC,IAAI,EAAE,gBAAgB;MACtBC,OAAO,EACLH,KAAK,YAAYI,KAAK,GAClBJ,KAAK,CAACG,OAAO,GACb,qDAAqD;MAC3DE,KAAK,EAAEL;IACT,CAAC,CAAC;IACF,OAAO;MAAEM,KAAK,EAAEA,CAAA,KAAM,CAAC;IAAE,CAAC;EAC5B;EAEA,MAAMC,OAAO,GAAG,IAAIC,GAAG,CAAS,CAAC;EACjC,MAAMC,SAAmB,GAAG,EAAE;EAC9B,MAAMC,QAAQ,GAAIC,EAAU,IAAc;IACxC,IAAIJ,OAAO,CAACK,GAAG,CAACD,EAAE,CAAC,EAAE;MACnB,OAAO,IAAI;IACb;IACAJ,OAAO,CAACM,GAAG,CAACF,EAAE,CAAC;IACfF,SAAS,CAACK,IAAI,CAACH,EAAE,CAAC;IAClB,IAAIF,SAAS,CAACM,MAAM,GAAG,IAAI,EAAE;MAC3B,MAAMC,OAAO,GAAGP,SAAS,CAACQ,KAAK,CAAC,CAAC;MACjC,IAAID,OAAO,KAAKE,SAAS,EAAE;QACzBX,OAAO,CAACY,MAAM,CAACH,OAAO,CAAC;MACzB;IACF;IACA,OAAO,KAAK;EACd,CAAC;EAED,MAAMI,UAAU,GAAIC,GAAW,IAAK;IAClC,MAAMC,MAAM,GAAGC,qBAAqB,CAACF,GAAG,CAAC;IACzC,IAAIC,MAAM,CAACE,IAAI,KAAK,OAAO,EAAE;MAC3BlC,OAAO,CAACW,OAAO,GAAG;QAChBC,IAAI,EAAE,aAAa;QACnBC,OAAO,EAAEmB,MAAM,CAACnB;MAClB,CAAC,CAAC;MACF;IACF;IACA,IAAImB,MAAM,CAACE,IAAI,KAAK,MAAM,EAAE;MAC1B;IACF;IACA,IAAId,QAAQ,CAACY,MAAM,CAACG,KAAK,CAACd,EAAE,CAAC,EAAE;MAC7B;IACF;IACArB,OAAO,CAACoC,OAAO,CAACJ,MAAM,CAACG,KAAK,CAAC;EAC/B,CAAC;EAED,IAAI,OAAO1B,MAAM,CAAC4B,gBAAgB,KAAK,UAAU,EAAE;IACjD5B,MAAM,CAAC4B,gBAAgB,CAAC,SAAS,EAAGF,KAAK,IAAKL,UAAU,CAACK,KAAK,CAACG,IAAI,CAAC,CAAC;IACrE;IACA;IACA;IACA;IACA;IACA,KAAK,MAAMC,SAAS,IAAI1C,mBAAmB,EAAE;MAC3CY,MAAM,CAAC4B,gBAAgB,CAACE,SAAS,EAAGJ,KAAK,IAAKL,UAAU,CAACK,KAAK,CAACG,IAAI,CAAC,CAAC;IACvE;EACF,CAAC,MAAM;IACL7B,MAAM,CAAC+B,SAAS,GAAIL,KAAK,IAAKL,UAAU,CAACK,KAAK,CAACG,IAAI,CAAC;EACtD;EAEA7B,MAAM,CAACgC,OAAO,GAAI/B,KAAK,IAAK;IAC1BV,OAAO,CAACW,OAAO,GAAG;MAChBC,IAAI,EAAE,iBAAiB;MACvBC,OAAO,EAAE,yCAAyC;MAClDE,KAAK,EAAEL;IACT,CAAC,CAAC;EACJ,CAAC;EAED,OAAO;IACLM,KAAK,EAAEA,CAAA,KAAM;MACX,IAAI;QACFP,MAAM,CAACO,KAAK,CAAC,CAAC;MAChB,CAAC,CAAC,MAAM;QACN;QACA;MAAA;IAEJ;EACF,CAAC;AACH;;AAEA;AACA;AACA;;AAOA,OAAO,SAASiB,qBAAqBA,CAACF,GAAW,EAAqB;EACpE,IAAI,CAACA,GAAG,EAAE;IACR,OAAO;MAAEG,IAAI,EAAE,MAAM;MAAEQ,MAAM,EAAE;IAAY,CAAC;EAC9C;EAEA,IAAIV,MAAe;EACnB,IAAI;IACFA,MAAM,GAAGW,IAAI,CAACC,KAAK,CAACb,GAAG,CAAC;EAC1B,CAAC,CAAC,OAAOrB,KAAK,EAAE;IACd,OAAO;MACLwB,IAAI,EAAE,OAAO;MACbrB,OAAO,EACLH,KAAK,YAAYI,KAAK,GAClB,gCAAgCJ,KAAK,CAACG,OAAO,EAAE,GAC/C;IACR,CAAC;EACH;EAEA,IACE,OAAOmB,MAAM,KAAK,QAAQ,IAC1BA,MAAM,KAAK,IAAI,IACf,EAAE,MAAM,IAAIA,MAAM,CAAC,IACnB,OAAQA,MAAM,CAA6Ba,IAAI,KAAK,QAAQ,EAC5D;IACA;IACA;IACA;IACA,OAAO;MAAEX,IAAI,EAAE,MAAM;MAAEQ,MAAM,EAAE;IAAiB,CAAC;EACnD;EAEA,MAAMP,KAAK,GAAGH,MAA6B;EAE3C,IACE,OAAOG,KAAK,CAACd,EAAE,KAAK,QAAQ,IAC5B,OAAOc,KAAK,CAACW,UAAU,KAAK,QAAQ,IACpC,OAAOX,KAAK,CAACY,UAAU,KAAK,QAAQ,EACpC;IACA,OAAO;MACLb,IAAI,EAAE,OAAO;MACbrB,OAAO,EAAE;IACX,CAAC;EACH;EACA;EACA;EACA;EACA;EACA,IACEsB,KAAK,CAACU,IAAI,KAAK,kBAAkB,IACjC,OAAOV,KAAK,CAACa,aAAa,KAAK,QAAQ,EACvC;IACA,OAAO;MACLd,IAAI,EAAE,OAAO;MACbrB,OAAO,EAAE;IACX,CAAC;EACH;EAEA,OAAO;IAAEqB,IAAI,EAAE,IAAI;IAAEC;EAAM,CAAC;AAC9B;AAEA,SAAShC,iBAAiBA,CAACD,GAAW,EAAU;EAC9C,OAAOA,GAAG,CAAC+C,QAAQ,CAAC,GAAG,CAAC,GAAG/C,GAAG,CAACgD,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAGhD,GAAG;AACnD;AAEA,SAASM,yBAAyBA,CAChCN,GAAW,EACXiD,QAAgC,EACZ;EACpB;EACA;EACA;EACA;EACA,MAAMC,IAAI,GACRC,UAAU,CAGVC,WAAW;EACb,IAAI,CAACF,IAAI,EAAE;IACT,MAAM,IAAItC,KAAK,CACb,oGACF,CAAC;EACH;EACA,OAAO,IAAIsC,IAAI,CAAClD,GAAG,CAAC;AACtB","ignoreList":[]}

package/lib/typescript/src/hooks/useWebhookEvents.d.ts

@@ -1,55 +0,0 @@
-import { type WebhookEventPayload, type WebhookEventStream, type WebhookListenerError } from '../webhook-client';
-export type UseWebhookEventsOptions = {
-    /**
-     * kit project API key — same value used for receipt verification.
-     * Must be non-empty to start the stream; pass `null`/`undefined` to
-     * disable the listener (e.g. before the user is logged in).
-     */
-    apiKey: string | null | undefined;
-    /**
-     * Override the kit base URL. Defaults to https://kit.openiap.dev.
-     */
-    baseUrl?: string;
-    /**
-     * Optional EventSource factory. Required on React Native because RN
-     * does not ship a global EventSource — pass an instance from
-     * `react-native-sse` (or any compatible polyfill).
-     */
-    eventSourceFactory?: (url: string, headers: Record<string, string>) => WebhookEventStream;
-    /**
-     * Maximum number of events to retain in the in-memory ring buffer
-     * surfaced as `events`. Older entries are discarded. Defaults to 50.
-     * Set 0 to opt out of the buffer entirely (consume only via
-     * `onEvent`).
-     */
-    bufferSize?: number;
-    /**
-     * Called for every received event in addition to being appended to
-     * the buffer. Useful for side effects (toast, analytics, granting
-     * entitlement). Called with the latest stable callback identity.
-     */
-    onEvent?: (event: WebhookEventPayload) => void;
-    /**
-     * Called when the stream surfaces a transport / parse error.
-     * EventSource auto-reconnects regardless of this hook — this is
-     * primarily for telemetry + UI surfacing.
-     */
-    onError?: (error: WebhookListenerError) => void;
-};
-export type UseWebhookEventsResult = {
-    /** Most recent N events (most-recent-first). Capped at bufferSize. */
-    events: WebhookEventPayload[];
-    /** Last error reported by the underlying stream. Null when healthy. */
-    lastError: WebhookListenerError | null;
-    /**
-     * True once the first webhook event has been received from the
-     * stream. Remains false if the connection is open but idle (the
-     * underlying SSE bridge doesn't surface a "stream opened"
-     * lifecycle event we can hook into; isConnected is therefore an
-     * activity indicator, not a raw socket-state flag). Reset to
-     * false on cleanup / apiKey change.
-     */
-    isConnected: boolean;
-};
-export declare function useWebhookEvents({ apiKey, baseUrl, eventSourceFactory, bufferSize, onEvent, onError, }: UseWebhookEventsOptions): UseWebhookEventsResult;
-//# sourceMappingURL=useWebhookEvents.d.ts.map

package/lib/typescript/src/hooks/useWebhookEvents.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useWebhookEvents.d.ts","sourceRoot":"","sources":["../../../../src/hooks/useWebhookEvents.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EAEvB,KAAK,oBAAoB,EAC1B,MAAM,mBAAmB,CAAC;AAE3B,MAAM,MAAM,uBAAuB,GAAG;IACpC;;;;OAIG;IACH,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IAClC;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,CACnB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC5B,kBAAkB,CAAC;IACxB;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,IAAI,CAAC;IAC/C;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,sEAAsE;IACtE,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,uEAAuE;IACvE,SAAS,EAAE,oBAAoB,GAAG,IAAI,CAAC;IACvC;;;;;;;OAOG;IACH,WAAW,EAAE,OAAO,CAAC;CACtB,CAAC;AAaF,wBAAgB,gBAAgB,CAAC,EAC/B,MAAM,EACN,OAAO,EACP,kBAAkB,EAClB,UAAe,EACf,OAAO,EACP,OAAO,GACR,EAAE,uBAAuB,GAAG,sBAAsB,CA8FlD"}