react-native-revnix 1.8.0 → 1.9.0

package/README.md

@@ -104,6 +104,7 @@ Your API key and deployment URL are in the dashboard under Settings. See [API ke
 **Revnix handles the hard parts of subscriptions in a small, developer-friendly SDK.**
 
 - `purchase(productId)` runs the whole flow: store sheet, server-side receipt validation, entitlement, transaction finish. `restore()` brings purchases back on a new device.
+- Consumables on Google Play: list their ids in `consumableProductIds` so they are consumed after Revnix records the purchase and can be bought again.
 - Renewals, purchases on other devices and Ask to Buy approvals arrive on their own and are registered automatically.
 - Entitlements and placements are cached on device, so paid users stay unlocked offline.
 - Failed registrations are retried automatically when the app comes back online.

package/android/src/main/kotlin/com/revnix/reactnative/RevnixStoreModule.kt

@@ -9,6 +9,7 @@ import com.android.billingclient.api.BillingClient.ProductType
 import com.android.billingclient.api.BillingClientStateListener
 import com.android.billingclient.api.BillingFlowParams
 import com.android.billingclient.api.BillingResult
+import com.android.billingclient.api.ConsumeParams
 import com.android.billingclient.api.PendingPurchasesParams
 import com.android.billingclient.api.ProductDetails
 import com.android.billingclient.api.Purchase
@@ -96,10 +97,9 @@ class RevnixStoreModule(context: ReactApplicationContext) :
     }
   }
 
-  // ponytail: acknowledges every purchase; consumable INAPP products need consumeAsync to be bought again
   @ReactMethod
-  fun finish(purchaseToken: String, promise: Promise) {
-    if (purchaseToken in acknowledged) {
+  fun finish(purchaseToken: String, consume: Boolean, promise: Promise) {
+    if (!consume && purchaseToken in acknowledged) {
       promise.resolve(null)
       return
     }
@@ -108,13 +108,32 @@ class RevnixStoreModule(context: ReactApplicationContext) :
         promise.reject("store_error", "${setup.responseCode} ${setup.debugMessage}")
         return@withBilling
       }
-      val params = AcknowledgePurchaseParams.newBuilder().setPurchaseToken(purchaseToken).build()
-      billing.acknowledgePurchase(params) { result ->
-        if (result.responseCode == BillingResponseCode.OK) {
+      val acknowledge = { onResult: (BillingResult) -> Unit ->
+        val params = AcknowledgePurchaseParams.newBuilder().setPurchaseToken(purchaseToken).build()
+        billing.acknowledgePurchase(params) { result ->
+          if (result.responseCode == BillingResponseCode.OK) acknowledged.add(purchaseToken)
+          onResult(result)
+        }
+      }
+      if (!consume) {
+        acknowledge { result ->
+          if (result.responseCode == BillingResponseCode.OK) promise.resolve(null)
+          else promise.reject("store_error", "acknowledgePurchase failed: ${result.responseCode} ${result.debugMessage}")
+        }
+        return@withBilling
+      }
+      val params = ConsumeParams.newBuilder().setPurchaseToken(purchaseToken).build()
+      billing.consumeAsync(params) { consumed, _ ->
+        if (consumed.responseCode == BillingResponseCode.OK) {
           acknowledged.add(purchaseToken)
           promise.resolve(null)
         } else {
-          promise.reject("store_error", "acknowledgePurchase failed: ${result.responseCode} ${result.debugMessage}")
+          acknowledge { acked ->
+            promise.reject(
+              "store_error",
+              "consumeAsync failed: ${consumed.responseCode} ${consumed.debugMessage}; acknowledgePurchase fallback: ${acked.responseCode} ${acked.debugMessage}",
+            )
+          }
         }
       }
     }
@@ -193,7 +212,7 @@ class RevnixStoreModule(context: ReactApplicationContext) :
         if (result.responseCode == BillingResponseCode.OK) {
           queryPurchases(ProductType.SUBS) { subs ->
             queryPurchases(ProductType.INAPP) { inapp ->
-              (subs + inapp).filterNot { it.isAcknowledged }.forEach { emit(toMap(it)) }
+              (subs.filterNot { it.isAcknowledged } + inapp).forEach { emit(toMap(it)) }
             }
           }
         }
@@ -210,7 +229,7 @@ class RevnixStoreModule(context: ReactApplicationContext) :
       BillingResponseCode.ITEM_ALREADY_OWNED -> queryPurchases(ProductType.SUBS) { subs ->
         queryPurchases(ProductType.INAPP) { inapp ->
           val owned = (subs + inapp).firstOrNull { waiting.productId in it.products }
-          if (owned != null) waiting.promise.resolve(toMap(owned))
+          if (owned != null) waiting.promise.resolve(toMap(owned).apply { putBoolean("alreadyOwned", true) })
           else waiting.promise.reject("store_error", "${result.responseCode} ${result.debugMessage}")
         }
       }
@@ -274,6 +293,7 @@ class RevnixStoreModule(context: ReactApplicationContext) :
       putString("transactionId", purchase.purchaseToken)
       putString("token", purchase.purchaseToken)
       putDouble("occurredAt", purchase.purchaseTime.toDouble())
+      putBoolean("acknowledged", purchase.isAcknowledged)
     }
   }
 

package/dist/client.d.ts

@@ -27,6 +27,7 @@ export declare class RevnixClient {
     private readonly onDeferredDeepLink?;
     private readonly onAttribution?;
     private readonly deviceIntegrity?;
+    private readonly consumableProductIds;
     private integrityRequest;
     private deferredDeepLinkClaimed;
     private landingUrl;
@@ -106,6 +107,7 @@ export declare class RevnixClient {
     /** Re-registers every purchase the store still holds for this device and
      *  resolves how many registered. Per-purchase failures go to onDiagnostic. */
     restore(): Promise<number>;
+    private isConsumable;
     private requireStore;
     private registerStoreTransaction;
     private postPurchase;

package/dist/client.js

@@ -97,6 +97,32 @@ const pendingKey = (p) => `${p.source}:${p.token}:${p.transactionId}`;
 // revoked key, blocked transfer) would be retried every launch forever;
 // unknown non-Revnix errors count as transient to err on the keeping side.
 const worthQueueing = (err) => !(err instanceof errors_js_1.RevnixError) || err.isRetryable;
+const ATTRIBUTION_QUERY_PARAMS = new Set([
+    "utm_source", "utm_medium", "utm_campaign", "utm_term", "utm_content", "utm_id", "campaign_id",
+    "pid", "source", "af_channel", "medium", "c", "campaign", "term", "af_ad",
+    "content", "gclid", "gbraid", "wbraid", "ttclid", "sccid", "twclid",
+    "revnix_link", "web_id",
+]);
+function queryParamName(pair) {
+    const raw = pair.split("=")[0] ?? "";
+    try {
+        return decodeURIComponent(raw.replace(/\+/g, " ")).toLowerCase();
+    }
+    catch {
+        return raw.toLowerCase();
+    }
+}
+function attributionOnlyUrl(rawUrl) {
+    const url = rawUrl.trim();
+    const parts = /^([a-z][a-z0-9+.-]*:)(\/\/[^/?#]*)?([^?#]*)(?:\?([^#]*))?/i.exec(url);
+    if (!parts)
+        return url.split(/[?#]/)[0] ?? "";
+    const [, scheme, authority = "", path, query = ""] = parts;
+    const kept = query
+        .split("&")
+        .filter((pair) => ATTRIBUTION_QUERY_PARAMS.has(queryParamName(pair)));
+    return `${scheme}${authority.replace(/^\/\/.*@/, "//")}${path}${kept.length > 0 ? `?${kept.join("&")}` : ""}`;
+}
 const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 // REV-199 (CTO-R2 M24): ±20% on every scheduled delay.
 const jittered = (ms) => ms * (0.8 + Math.random() * 0.4);
@@ -207,6 +233,7 @@ class RevnixClient {
         this.onDeferredDeepLink = config.onDeferredDeepLink;
         this.onAttribution = config.onAttribution;
         this.deviceIntegrity = config.deviceIntegrity;
+        this.consumableProductIds = config.consumableProductIds ?? [];
         this.readYourWritesDelaysMs =
             config.readYourWritesDelaysMs ?? [250, 500, 1000, 2000];
         this.customerIdPromise = this.loadCustomerId(config.customerId);
@@ -217,7 +244,11 @@ class RevnixClient {
             this.reportAdvertisingId(config.advertisingId);
         const store = (0, store_js_1.getStoreAdapter)();
         if (store) {
-            this.stopStoreObserver = store.observe((tx) => void this.registerStoreTransaction(store, tx).catch((err) => this.diag("storeObserver", err)));
+            this.stopStoreObserver = store.observe((tx) => {
+                if (tx.acknowledged && !this.isConsumable(tx))
+                    return;
+                void this.registerStoreTransaction(store, tx).catch((err) => this.diag("storeObserver", err));
+            });
         }
         // REV-157: warm the placement cache at launch, so the first paywall of the
         // session can render offline. Fire-and-forget; a failed key just stays on
@@ -378,6 +409,10 @@ class RevnixClient {
         const tx = await store.purchase(productId, { customerId });
         if (!tx)
             return null;
+        if (tx.alreadyOwned && this.isConsumable(tx)) {
+            await this.registerStoreTransaction(store, tx, opts);
+            throw new errors_js_1.PurchaseAlreadyOwnedError(`Revnix: an earlier purchase of ${productId} was still owned and has been registered; buy again`);
+        }
         return this.registerStoreTransaction(store, tx, opts);
     }
     /** Re-registers every purchase the store still holds for this device and
@@ -396,6 +431,9 @@ class RevnixClient {
         }
         return restored;
     }
+    isConsumable(tx) {
+        return tx.store === "google" && this.consumableProductIds.includes(tx.productId);
+    }
     requireStore() {
         const store = (0, store_js_1.getStoreAdapter)();
         if (!store) {
@@ -404,8 +442,8 @@ class RevnixClient {
         return store;
     }
     async registerStoreTransaction(store, tx, opts, finish = true) {
-        const finishTx = () => finish
-            ? store.finish(tx.transactionId).catch((err) => this.diag("storeFinish", err))
+        const finishTx = (consume = false) => finish
+            ? store.finish(tx.transactionId, consume).catch((err) => this.diag("storeFinish", err))
             : undefined;
         try {
             const result = await this.registerPurchase({
@@ -418,7 +456,7 @@ class RevnixClient {
                 signedTransactionInfo: tx.signedTransactionInfo,
                 ...opts,
             });
-            await finishTx();
+            await finishTx(this.isConsumable(tx));
             return result;
         }
         catch (err) {
@@ -1099,7 +1137,7 @@ class RevnixClient {
             return;
         }
         void this.rememberDeepLink(url);
-        const extra = { url: url.slice(0, 1024) };
+        const extra = { url: attributionOnlyUrl(url).slice(0, 1024) };
         const batch = this.launchBatch;
         if (batch === null) {
             this.fireImplicit("deeplink_open", extra);

package/dist/errors.d.ts

@@ -11,6 +11,12 @@ export declare class RevnixError extends Error {
 export declare class PurchaseBlockedError extends RevnixError {
     constructor(message: string);
 }
+/** purchase() found an earlier Google Play consumable of this product still
+ *  owned. It was registered and consumed instead of charging again; ask the
+ *  customer to buy again. */
+export declare class PurchaseAlreadyOwnedError extends Error {
+    constructor(message: string);
+}
 /** C7: the request didn't complete within the configured timeout (default
  *  10s). `fetch` has no default timeout on React Native / browsers, so without
  *  this a slow or dead backend would hang the app until the OS TCP timeout. */

package/dist/errors.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RevnixRateLimitError = exports.RevnixAuthError = exports.RevnixNetworkError = exports.RevnixTimeoutError = exports.PurchaseBlockedError = exports.RevnixError = void 0;
+exports.RevnixRateLimitError = exports.RevnixAuthError = exports.RevnixNetworkError = exports.RevnixTimeoutError = exports.PurchaseAlreadyOwnedError = exports.PurchaseBlockedError = exports.RevnixError = void 0;
 class RevnixError extends Error {
     constructor(status, message) {
         super(message);
@@ -24,6 +24,16 @@ class PurchaseBlockedError extends RevnixError {
     }
 }
 exports.PurchaseBlockedError = PurchaseBlockedError;
+/** purchase() found an earlier Google Play consumable of this product still
+ *  owned. It was registered and consumed instead of charging again; ask the
+ *  customer to buy again. */
+class PurchaseAlreadyOwnedError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "PurchaseAlreadyOwnedError";
+    }
+}
+exports.PurchaseAlreadyOwnedError = PurchaseAlreadyOwnedError;
 /** C7: the request didn't complete within the configured timeout (default
  *  10s). `fetch` has no default timeout on React Native / browsers, so without
  *  this a slow or dead backend would hang the app until the OS TCP timeout. */

package/dist/esm/client.js

@@ -1,4 +1,4 @@
-import { PurchaseBlockedError, RevnixAuthError, RevnixError, RevnixNetworkError, RevnixRateLimitError, RevnixTimeoutError, } from "./errors.js";
+import { PurchaseAlreadyOwnedError, PurchaseBlockedError, RevnixAuthError, RevnixError, RevnixNetworkError, RevnixRateLimitError, RevnixTimeoutError, } from "./errors.js";
 import { generateAnonymousId, generateEventId, generateViewId, resolveStorage, } from "./storage.js";
 import { DEVICE_HEADER, INSTALLED_AT_KEY, compactPayload, detectDeviceFacts, encodeDeviceHeader, } from "./device.js";
 import { SDK_VERSION } from "./version.js";
@@ -93,6 +93,32 @@ const pendingKey = (p) => `${p.source}:${p.token}:${p.transactionId}`;
 // revoked key, blocked transfer) would be retried every launch forever;
 // unknown non-Revnix errors count as transient to err on the keeping side.
 const worthQueueing = (err) => !(err instanceof RevnixError) || err.isRetryable;
+const ATTRIBUTION_QUERY_PARAMS = new Set([
+    "utm_source", "utm_medium", "utm_campaign", "utm_term", "utm_content", "utm_id", "campaign_id",
+    "pid", "source", "af_channel", "medium", "c", "campaign", "term", "af_ad",
+    "content", "gclid", "gbraid", "wbraid", "ttclid", "sccid", "twclid",
+    "revnix_link", "web_id",
+]);
+function queryParamName(pair) {
+    const raw = pair.split("=")[0] ?? "";
+    try {
+        return decodeURIComponent(raw.replace(/\+/g, " ")).toLowerCase();
+    }
+    catch {
+        return raw.toLowerCase();
+    }
+}
+function attributionOnlyUrl(rawUrl) {
+    const url = rawUrl.trim();
+    const parts = /^([a-z][a-z0-9+.-]*:)(\/\/[^/?#]*)?([^?#]*)(?:\?([^#]*))?/i.exec(url);
+    if (!parts)
+        return url.split(/[?#]/)[0] ?? "";
+    const [, scheme, authority = "", path, query = ""] = parts;
+    const kept = query
+        .split("&")
+        .filter((pair) => ATTRIBUTION_QUERY_PARAMS.has(queryParamName(pair)));
+    return `${scheme}${authority.replace(/^\/\/.*@/, "//")}${path}${kept.length > 0 ? `?${kept.join("&")}` : ""}`;
+}
 const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 // REV-199 (CTO-R2 M24): ±20% on every scheduled delay.
 const jittered = (ms) => ms * (0.8 + Math.random() * 0.4);
@@ -203,6 +229,7 @@ export class RevnixClient {
         this.onDeferredDeepLink = config.onDeferredDeepLink;
         this.onAttribution = config.onAttribution;
         this.deviceIntegrity = config.deviceIntegrity;
+        this.consumableProductIds = config.consumableProductIds ?? [];
         this.readYourWritesDelaysMs =
             config.readYourWritesDelaysMs ?? [250, 500, 1000, 2000];
         this.customerIdPromise = this.loadCustomerId(config.customerId);
@@ -213,7 +240,11 @@ export class RevnixClient {
             this.reportAdvertisingId(config.advertisingId);
         const store = getStoreAdapter();
         if (store) {
-            this.stopStoreObserver = store.observe((tx) => void this.registerStoreTransaction(store, tx).catch((err) => this.diag("storeObserver", err)));
+            this.stopStoreObserver = store.observe((tx) => {
+                if (tx.acknowledged && !this.isConsumable(tx))
+                    return;
+                void this.registerStoreTransaction(store, tx).catch((err) => this.diag("storeObserver", err));
+            });
         }
         // REV-157: warm the placement cache at launch, so the first paywall of the
         // session can render offline. Fire-and-forget; a failed key just stays on
@@ -374,6 +405,10 @@ export class RevnixClient {
         const tx = await store.purchase(productId, { customerId });
         if (!tx)
             return null;
+        if (tx.alreadyOwned && this.isConsumable(tx)) {
+            await this.registerStoreTransaction(store, tx, opts);
+            throw new PurchaseAlreadyOwnedError(`Revnix: an earlier purchase of ${productId} was still owned and has been registered; buy again`);
+        }
         return this.registerStoreTransaction(store, tx, opts);
     }
     /** Re-registers every purchase the store still holds for this device and
@@ -392,6 +427,9 @@ export class RevnixClient {
         }
         return restored;
     }
+    isConsumable(tx) {
+        return tx.store === "google" && this.consumableProductIds.includes(tx.productId);
+    }
     requireStore() {
         const store = getStoreAdapter();
         if (!store) {
@@ -400,8 +438,8 @@ export class RevnixClient {
         return store;
     }
     async registerStoreTransaction(store, tx, opts, finish = true) {
-        const finishTx = () => finish
-            ? store.finish(tx.transactionId).catch((err) => this.diag("storeFinish", err))
+        const finishTx = (consume = false) => finish
+            ? store.finish(tx.transactionId, consume).catch((err) => this.diag("storeFinish", err))
             : undefined;
         try {
             const result = await this.registerPurchase({
@@ -414,7 +452,7 @@ export class RevnixClient {
                 signedTransactionInfo: tx.signedTransactionInfo,
                 ...opts,
             });
-            await finishTx();
+            await finishTx(this.isConsumable(tx));
             return result;
         }
         catch (err) {
@@ -1095,7 +1133,7 @@ export class RevnixClient {
             return;
         }
         void this.rememberDeepLink(url);
-        const extra = { url: url.slice(0, 1024) };
+        const extra = { url: attributionOnlyUrl(url).slice(0, 1024) };
         const batch = this.launchBatch;
         if (batch === null) {
             this.fireImplicit("deeplink_open", extra);

package/dist/esm/errors.js

@@ -19,6 +19,15 @@ export class PurchaseBlockedError extends RevnixError {
         this.name = "PurchaseBlockedError";
     }
 }
+/** purchase() found an earlier Google Play consumable of this product still
+ *  owned. It was registered and consumed instead of charging again; ask the
+ *  customer to buy again. */
+export class PurchaseAlreadyOwnedError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "PurchaseAlreadyOwnedError";
+    }
+}
 /** C7: the request didn't complete within the configured timeout (default
  *  10s). `fetch` has no default timeout on React Native / browsers, so without
  *  this a slow or dead backend would hang the app until the OS TCP timeout. */

package/dist/esm/index.js

@@ -1,7 +1,7 @@
 import { RevnixClient } from "./client.js";
 import { setLocale } from "./blocks/locale.js";
 export { RevnixClient } from "./client.js";
-export { PurchaseBlockedError, RevnixAuthError, RevnixError, RevnixNetworkError, RevnixRateLimitError, RevnixTimeoutError, } from "./errors.js";
+export { PurchaseAlreadyOwnedError, PurchaseBlockedError, RevnixAuthError, RevnixError, RevnixNetworkError, RevnixRateLimitError, RevnixTimeoutError, } from "./errors.js";
 export { purchaseInputFromIap } from "./iap.js";
 export { setStoreAdapter, } from "./store.js";
 export { memoryStorage, generateAnonymousId } from "./storage.js";

package/dist/esm/store/index.js

@@ -6,7 +6,7 @@ export const RevnixStore = native
     ? {
         purchase: (productId, { customerId }) => native.purchase(productId, customerId),
         restore: () => native.restore(),
-        finish: (transactionId) => native.finish(transactionId),
+        finish: (transactionId, consume) => native.finish(transactionId, consume === true),
         observe(onTransaction) {
             const sub = new NativeEventEmitter(NativeModules.RevnixStore).addListener("revnixStoreTransaction", (tx) => onTransaction(tx));
             return () => sub.remove();

package/dist/esm/version.js

@@ -1,4 +1,4 @@
 // L3: the single source of the SDK version inside src/. Must match
 // package.json "version" — version.test.ts fails the build when they drift
 // (they had: client.ts said 0.7.0 while the package shipped 0.9.0).
-export const SDK_VERSION = "1.8.0";
+export const SDK_VERSION = "1.9.0";

package/dist/index.d.ts

@@ -2,7 +2,7 @@ import { RevnixClient } from "./client.js";
 import { setLocale } from "./blocks/locale.js";
 import type { RevnixConfig } from "./types.js";
 export { RevnixClient } from "./client.js";
-export { PurchaseBlockedError, RevnixAuthError, RevnixError, RevnixNetworkError, RevnixRateLimitError, RevnixTimeoutError, } from "./errors.js";
+export { PurchaseAlreadyOwnedError, PurchaseBlockedError, RevnixAuthError, RevnixError, RevnixNetworkError, RevnixRateLimitError, RevnixTimeoutError, } from "./errors.js";
 export { purchaseInputFromIap, type IapPurchase } from "./iap.js";
 export { setStoreAdapter, type StoreAdapter, type StoreTransaction, } from "./store.js";
 export { memoryStorage, generateAnonymousId } from "./storage.js";

package/dist/index.js

@@ -1,11 +1,12 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Revnix = exports.PREVIEW_PLACEMENT_KEY = exports.IMPLICIT_PLACEMENTS = exports.HOST_CALL_PLACEMENT = exports.DEFAULT_SESSION_TIMEOUT_MS = exports.browserLifecycle = exports.encodeDeviceHeader = exports.DEVICE_HEADER = exports.SDK_VERSION = exports.generateAnonymousId = exports.memoryStorage = exports.setStoreAdapter = exports.purchaseInputFromIap = exports.RevnixTimeoutError = exports.RevnixRateLimitError = exports.RevnixNetworkError = exports.RevnixError = exports.RevnixAuthError = exports.PurchaseBlockedError = exports.RevnixClient = void 0;
+exports.Revnix = exports.PREVIEW_PLACEMENT_KEY = exports.IMPLICIT_PLACEMENTS = exports.HOST_CALL_PLACEMENT = exports.DEFAULT_SESSION_TIMEOUT_MS = exports.browserLifecycle = exports.encodeDeviceHeader = exports.DEVICE_HEADER = exports.SDK_VERSION = exports.generateAnonymousId = exports.memoryStorage = exports.setStoreAdapter = exports.purchaseInputFromIap = exports.RevnixTimeoutError = exports.RevnixRateLimitError = exports.RevnixNetworkError = exports.RevnixError = exports.RevnixAuthError = exports.PurchaseBlockedError = exports.PurchaseAlreadyOwnedError = exports.RevnixClient = void 0;
 const client_js_1 = require("./client.js");
 const locale_js_1 = require("./blocks/locale.js");
 var client_js_2 = require("./client.js");
 Object.defineProperty(exports, "RevnixClient", { enumerable: true, get: function () { return client_js_2.RevnixClient; } });
 var errors_js_1 = require("./errors.js");
+Object.defineProperty(exports, "PurchaseAlreadyOwnedError", { enumerable: true, get: function () { return errors_js_1.PurchaseAlreadyOwnedError; } });
 Object.defineProperty(exports, "PurchaseBlockedError", { enumerable: true, get: function () { return errors_js_1.PurchaseBlockedError; } });
 Object.defineProperty(exports, "RevnixAuthError", { enumerable: true, get: function () { return errors_js_1.RevnixAuthError; } });
 Object.defineProperty(exports, "RevnixError", { enumerable: true, get: function () { return errors_js_1.RevnixError; } });

package/dist/store/index.js

@@ -9,7 +9,7 @@ exports.RevnixStore = native
     ? {
         purchase: (productId, { customerId }) => native.purchase(productId, customerId),
         restore: () => native.restore(),
-        finish: (transactionId) => native.finish(transactionId),
+        finish: (transactionId, consume) => native.finish(transactionId, consume === true),
         observe(onTransaction) {
             const sub = new react_native_1.NativeEventEmitter(react_native_1.NativeModules.RevnixStore).addListener("revnixStoreTransaction", (tx) => onTransaction(tx));
             return () => sub.remove();

package/dist/store.d.ts

@@ -12,6 +12,11 @@ export interface StoreTransaction {
     expiresAt?: number;
     /** Apple only: the StoreKit 2 JWS. */
     signedTransactionInfo?: string;
+    /** Google only: already acknowledged in Play. */
+    acknowledged?: boolean;
+    /** Google only: purchase() answered with an earlier purchase Play reported
+     *  as already owned, not a new charge. */
+    alreadyOwned?: boolean;
 }
 export interface StoreAdapter {
     /** Resolves null when the customer cancelled or the purchase is pending. */
@@ -19,7 +24,8 @@ export interface StoreAdapter {
         customerId: string;
     }): Promise<StoreTransaction | null>;
     restore(): Promise<StoreTransaction[]>;
-    finish(transactionId: string): Promise<void>;
+    /** `consume`: Google only, consume instead of acknowledge. */
+    finish(transactionId: string, consume?: boolean): Promise<void>;
     /** Transactions arriving outside purchase(): renewals, other devices, Ask
      *  to Buy, refunds. Returns an unsubscribe. */
     observe(onTransaction: (tx: StoreTransaction) => void): () => void;

package/dist/types.d.ts

@@ -149,6 +149,9 @@ export interface RevnixConfig {
      *  read. A null answer deletes a previously stored `gps_adid`; a
      *  rejection changes nothing and reports `op: "advertisingId"`. */
     advertisingId?: () => Promise<string | null | undefined>;
+    /** Google Play product ids sold as consumables. A registered purchase of
+     *  one is consumed instead of acknowledged so it can be bought again. */
+    consumableProductIds?: string[];
 }
 /** Device integrity evidence for `POST /v1/installs` and `/v1/attribution`.
  *  iOS: an App Attest key id and its attestation (standard base64) over

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const SDK_VERSION = "1.8.0";
+export declare const SDK_VERSION = "1.9.0";

package/dist/version.js

@@ -4,4 +4,4 @@ exports.SDK_VERSION = void 0;
 // L3: the single source of the SDK version inside src/. Must match
 // package.json "version" — version.test.ts fails the build when they drift
 // (they had: client.ts said 0.7.0 while the package shipped 0.9.0).
-exports.SDK_VERSION = "1.8.0";
+exports.SDK_VERSION = "1.9.0";

package/ios/RevnixStore.m

@@ -12,6 +12,7 @@ RCT_EXTERN_METHOD(restore:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 
 RCT_EXTERN_METHOD(finish:(NSString *)transactionId
+                  consume:(BOOL)consume
                   resolver:(RCTPromiseResolveBlock)resolve
                   rejecter:(RCTPromiseRejectBlock)reject)
 

package/ios/RevnixStore.swift

@@ -20,7 +20,7 @@ class RevnixStore: RCTEventEmitter {
   override func startObserving() {
     updates?.cancel()
     updates = Task { [weak self] in
-      for await update in Transaction.updates where update.unsafePayloadValue.revocationDate == nil {
+      for await update in Transaction.updates {
         self?.sendEvent(withName: "revnixStoreTransaction", body: RevnixStore.payload(update))
       }
     }
@@ -72,9 +72,10 @@ class RevnixStore: RCTEventEmitter {
     }
   }
 
-  @objc(finish:resolver:rejecter:)
+  @objc(finish:consume:resolver:rejecter:)
   func finish(
     _ transactionId: String,
+    consume _: Bool,
     resolver resolve: @escaping RCTPromiseResolveBlock,
     rejecter reject: @escaping RCTPromiseRejectBlock
   ) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-revnix",
-  "version": "1.8.0",
+  "version": "1.9.0",
   "description": "Revnix SDK for React, React Native & Next.js: purchase registration, entitlements, identity, and placements over the Revnix /v1 API.",
   "license": "MIT",
   "repository": {

package/src/client.ts

@@ -1,4 +1,5 @@
 import {
+  PurchaseAlreadyOwnedError,
   PurchaseBlockedError,
   RevnixAuthError,
   RevnixError,
@@ -193,6 +194,33 @@ const pendingKey = (p: RegisterPurchaseInput) =>
 const worthQueueing = (err: unknown): boolean =>
   !(err instanceof RevnixError) || err.isRetryable;
 
+const ATTRIBUTION_QUERY_PARAMS = new Set([
+  "utm_source", "utm_medium", "utm_campaign", "utm_term", "utm_content", "utm_id", "campaign_id",
+  "pid", "source", "af_channel", "medium", "c", "campaign", "term", "af_ad",
+  "content", "gclid", "gbraid", "wbraid", "ttclid", "sccid", "twclid",
+  "revnix_link", "web_id",
+]);
+
+function queryParamName(pair: string): string {
+  const raw = pair.split("=")[0] ?? "";
+  try {
+    return decodeURIComponent(raw.replace(/\+/g, " ")).toLowerCase();
+  } catch {
+    return raw.toLowerCase();
+  }
+}
+
+function attributionOnlyUrl(rawUrl: string): string {
+  const url = rawUrl.trim();
+  const parts = /^([a-z][a-z0-9+.-]*:)(\/\/[^/?#]*)?([^?#]*)(?:\?([^#]*))?/i.exec(url);
+  if (!parts) return url.split(/[?#]/)[0] ?? "";
+  const [, scheme, authority = "", path, query = ""] = parts;
+  const kept = query
+    .split("&")
+    .filter((pair) => ATTRIBUTION_QUERY_PARAMS.has(queryParamName(pair)));
+  return `${scheme}${authority.replace(/^\/\/.*@/, "//")}${path}${kept.length > 0 ? `?${kept.join("&")}` : ""}`;
+}
+
 const sleep = (ms: number) => new Promise((r) => setTimeout(r, ms));
 
 // REV-199 (CTO-R2 M24): ±20% on every scheduled delay.
@@ -263,6 +291,7 @@ export class RevnixClient {
   private readonly onDeferredDeepLink?: RevnixConfig["onDeferredDeepLink"];
   private readonly onAttribution?: RevnixConfig["onAttribution"];
   private readonly deviceIntegrity?: RevnixConfig["deviceIntegrity"];
+  private readonly consumableProductIds: string[];
   private integrityRequest: {
     customerId: string;
     body: Promise<{ integrity?: IntegrityEvidence }>;
@@ -340,6 +369,7 @@ export class RevnixClient {
     this.onDeferredDeepLink = config.onDeferredDeepLink;
     this.onAttribution = config.onAttribution;
     this.deviceIntegrity = config.deviceIntegrity;
+    this.consumableProductIds = config.consumableProductIds ?? [];
     this.readYourWritesDelaysMs =
       config.readYourWritesDelaysMs ?? [250, 500, 1000, 2000];
     this.customerIdPromise = this.loadCustomerId(config.customerId);
@@ -351,11 +381,12 @@ export class RevnixClient {
     if (config.advertisingId) this.reportAdvertisingId(config.advertisingId);
     const store = getStoreAdapter();
     if (store) {
-      this.stopStoreObserver = store.observe((tx) =>
+      this.stopStoreObserver = store.observe((tx) => {
+        if (tx.acknowledged && !this.isConsumable(tx)) return;
         void this.registerStoreTransaction(store, tx).catch((err) =>
           this.diag("storeObserver", err)
-        )
-      );
+        );
+      });
     }
     // REV-157: warm the placement cache at launch, so the first paywall of the
     // session can render offline. Fire-and-forget; a failed key just stays on
@@ -547,6 +578,12 @@ export class RevnixClient {
     const customerId = await this.customerIdPromise;
     const tx = await store.purchase(productId, { customerId });
     if (!tx) return null;
+    if (tx.alreadyOwned && this.isConsumable(tx)) {
+      await this.registerStoreTransaction(store, tx, opts);
+      throw new PurchaseAlreadyOwnedError(
+        `Revnix: an earlier purchase of ${productId} was still owned and has been registered; buy again`
+      );
+    }
     return this.registerStoreTransaction(store, tx, opts);
   }
 
@@ -566,6 +603,10 @@ export class RevnixClient {
     return restored;
   }
 
+  private isConsumable(tx: StoreTransaction): boolean {
+    return tx.store === "google" && this.consumableProductIds.includes(tx.productId);
+  }
+
   private requireStore(): StoreAdapter {
     const store = getStoreAdapter();
     if (!store) {
@@ -582,9 +623,9 @@ export class RevnixClient {
     opts?: Pick<RegisterPurchaseInput, "viewId" | "paywallId" | "placementKey">,
     finish = true
   ): Promise<RegisterPurchaseResult> {
-    const finishTx = () =>
+    const finishTx = (consume = false) =>
       finish
-        ? store.finish(tx.transactionId).catch((err) => this.diag("storeFinish", err))
+        ? store.finish(tx.transactionId, consume).catch((err) => this.diag("storeFinish", err))
         : undefined;
     try {
       const result = await this.registerPurchase({
@@ -597,7 +638,7 @@ export class RevnixClient {
         signedTransactionInfo: tx.signedTransactionInfo,
         ...opts,
       });
-      await finishTx();
+      await finishTx(this.isConsumable(tx));
       return result;
     } catch (err) {
       if (!(err instanceof PurchaseBlockedError)) await finishTx();
@@ -1400,7 +1441,7 @@ export class RevnixClient {
       return;
     }
     void this.rememberDeepLink(url);
-    const extra = { url: url.slice(0, 1024) };
+    const extra = { url: attributionOnlyUrl(url).slice(0, 1024) };
     const batch = this.launchBatch;
     if (batch === null) {
       this.fireImplicit("deeplink_open", extra);

package/src/errors.ts

@@ -24,6 +24,16 @@ export class PurchaseBlockedError extends RevnixError {
   }
 }
 
+/** purchase() found an earlier Google Play consumable of this product still
+ *  owned. It was registered and consumed instead of charging again; ask the
+ *  customer to buy again. */
+export class PurchaseAlreadyOwnedError extends Error {
+  constructor(message: string) {
+    super(message);
+    this.name = "PurchaseAlreadyOwnedError";
+  }
+}
+
 /** C7: the request didn't complete within the configured timeout (default
  *  10s). `fetch` has no default timeout on React Native / browsers, so without
  *  this a slow or dead backend would hang the app until the OS TCP timeout. */

package/src/index.ts

@@ -4,6 +4,7 @@ import type { RevnixConfig } from "./types.js";
 
 export { RevnixClient } from "./client.js";
 export {
+  PurchaseAlreadyOwnedError,
   PurchaseBlockedError,
   RevnixAuthError,
   RevnixError,

package/src/store/index.ts

@@ -10,7 +10,7 @@ import type { IntegrityEvidence, RevnixConfig } from "../types.js";
 interface NativeRevnixStore {
   purchase(productId: string, customerId: string): Promise<StoreTransaction | null>;
   restore(): Promise<StoreTransaction[]>;
-  finish(transactionId: string): Promise<void>;
+  finish(transactionId: string, consume: boolean): Promise<void>;
   deviceIntegrity?(customerId: string): Promise<IntegrityEvidence | null>;
   advertisingId?(): Promise<string | null>;
 }
@@ -28,7 +28,7 @@ export const RevnixStore: StoreAdapter = native
   ? {
       purchase: (productId, { customerId }) => native.purchase(productId, customerId),
       restore: () => native.restore(),
-      finish: (transactionId) => native.finish(transactionId),
+      finish: (transactionId, consume) => native.finish(transactionId, consume === true),
       observe(onTransaction) {
         const sub = new NativeEventEmitter(NativeModules.RevnixStore).addListener(
           "revnixStoreTransaction",

package/src/store.ts

@@ -13,6 +13,11 @@ export interface StoreTransaction {
   expiresAt?: number;
   /** Apple only: the StoreKit 2 JWS. */
   signedTransactionInfo?: string;
+  /** Google only: already acknowledged in Play. */
+  acknowledged?: boolean;
+  /** Google only: purchase() answered with an earlier purchase Play reported
+   *  as already owned, not a new charge. */
+  alreadyOwned?: boolean;
 }
 
 export interface StoreAdapter {
@@ -22,7 +27,8 @@ export interface StoreAdapter {
     opts: { customerId: string }
   ): Promise<StoreTransaction | null>;
   restore(): Promise<StoreTransaction[]>;
-  finish(transactionId: string): Promise<void>;
+  /** `consume`: Google only, consume instead of acknowledge. */
+  finish(transactionId: string, consume?: boolean): Promise<void>;
   /** Transactions arriving outside purchase(): renewals, other devices, Ask
    *  to Buy, refunds. Returns an unsubscribe. */
   observe(onTransaction: (tx: StoreTransaction) => void): () => void;

package/src/types.ts

@@ -161,6 +161,9 @@ export interface RevnixConfig {
    *  read. A null answer deletes a previously stored `gps_adid`; a
    *  rejection changes nothing and reports `op: "advertisingId"`. */
   advertisingId?: () => Promise<string | null | undefined>;
+  /** Google Play product ids sold as consumables. A registered purchase of
+   *  one is consumed instead of acknowledged so it can be bought again. */
+  consumableProductIds?: string[];
 }
 
 /** Device integrity evidence for `POST /v1/installs` and `/v1/attribution`.

package/src/version.ts

@@ -1,4 +1,4 @@
 // L3: the single source of the SDK version inside src/. Must match
 // package.json "version" — version.test.ts fails the build when they drift
 // (they had: client.ts said 0.7.0 while the package shipped 0.9.0).
-export const SDK_VERSION = "1.8.0";
+export const SDK_VERSION = "1.9.0";