tf-checkout-react-native 2.0.0-beta.19 → 2.0.0-beta.22

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tf-checkout-react-native",
-  "version": "2.0.0-beta.19",
+  "version": "2.0.0-beta.22",
   "description": "TheTicketFairy ReactNative Checkout library",
   "homepage": "https://github.com/theticketfairy/tf-shared-libraries#readme",
   "author": "The Ticket Fairy",
@@ -102,7 +102,6 @@
     "react": "19.1.0",
     "react-dom": "19.1.0",
     "react-native": "0.81.4",
-    "react-native-mmkv": "^3.3.1",
     "react-native-render-html": "6.3.4",
     "react-native-webview": "13.15.0",
     "react-test-renderer": "19.1.0",
@@ -169,18 +168,17 @@
     "entities": "^7.0.1",
     "htmlparser2": "10.1.0"
   },
-  "//peerDependencies": "Anything that MUST exist exactly once in the app: React contexts (react-query) and native modules (Stripe, MMKV, Clipboard). Shipping these as regular dependencies gives the consumer a second copy, which means a second React context (their <QueryClientProvider> becomes invisible to our hooks) or a duplicate native pod. As peers there is one copy, the consumer can use react-query in their own app alongside our hooks, and no Metro/bundler aliasing is ever needed. npm 7+/pnpm install peers automatically.",
+  "//peerDependencies": "React contexts and native modules are peers so the host has exactly one copy. A second React Query context hides its provider, and a second native module duplicates its pod. Credential storage is supplied by the host through an explicit synchronous adapter; the SDK installs no storage module.",
   "peerDependencies": {
     "@react-native-clipboard/clipboard": ">=1.14.0",
     "@stripe/stripe-react-native": ">=0.45.0",
     "@tanstack/react-query": ">=5",
     "react": ">=19.1",
     "react-native": ">=0.81",
-    "react-native-mmkv": "^3.0.0",
     "react-native-render-html": ">=6.3.4 <7",
     "react-native-webview": ">=13.15.0"
   },
-  "//dependencies": "tf-checkout-shared is INLINED into this bundle (tsup noExternal), so its own runtime deps are ours too \u2014 axios, entities and htmlparser2 must stay declared here or tsup bundles them (axios drags Node's stream into a browser build) / the consumer never installs them.",
+  "//dependencies": "The private shared core is inlined into this bundle. Its axios, entities and htmlparser2 runtime dependencies must stay declared here; bundling axios would bring Node's stream into a browser build. Hosts never install the private shared package.",
   "engines": {
     "node": ">=20.19.4"
   }

package/src/configure.ts

@@ -1,8 +1,8 @@
 /**
- * One-time React Native SDK setup. Defaults SDK-owned storage to persisted
- * MMKV. Call before any checkout, API or hook:
+ * React Native SDK setup. Hydrate the host's secure synchronous storage adapter
+ * before configuring checkout, calling an API or mounting a hook:
  *
- *   configureCheckout({ env: 'PROD', clientId: 'PUBLIC_SDK_CLIENT_ID', clientSecret: '' })
+ *   configureCheckout({ env: 'PROD', clientId: 'PUBLIC_SDK_CLIENT_ID', clientSecret: '', storage })
  *
  * Public checkout sign-in preserves the event-bound guest carrier and keeps
  * its buyer credential server-side; it does not return a full-account ticket
@@ -13,16 +13,38 @@
  * handling. Owned credentials use the SDK's header-backed storage; the backend
  * still validates a restored session.
  */
-import { configure, type TtfConfig } from 'tf-checkout-shared'
+import { configure, type StorageAdapter, type TtfConfig } from 'tf-checkout-shared'
 
-import { createMmkvStorage } from './storage'
+export type NativeCheckoutConfig = Omit<TtfConfig, 'storage'> & {
+  /** Host-owned OS-protected credential adapter. Async persistence also requires
+   * the host to await flush() after credential changes before reporting success. */
+  storage: StorageAdapter
+}
 
-/** Persisted MMKV-backed token store, shared by every configure call. */
-export const mmkvStorageAdapter = createMmkvStorage()
+const requireStorage = (storage: StorageAdapter | undefined): void => {
+  if (
+    !storage ||
+    typeof storage !== 'object' ||
+    Array.isArray(storage) ||
+    (['getItem', 'setItem', 'removeItem'] as const).some(
+      (method) =>
+        typeof storage[method] !== 'function' ||
+        Object.prototype.toString.call(storage[method]) === '[object AsyncFunction]'
+    ) ||
+    (storage.flush !== undefined && typeof storage.flush !== 'function')
+  ) {
+    throw new Error(
+      'Ticket Fairy native checkout requires a synchronous storage adapter. ' +
+        'Pass storage backed by iOS Keychain or Android Keystore; hydrate an async-backed mirror before configuration and await flush() after credential changes.'
+    )
+  }
+}
 
-export const configureCheckout = (config: TtfConfig): void =>
+export const configureCheckout = (config: NativeCheckoutConfig): void => {
+  // Invalid setup must leave an existing buyer/configuration untouched. Shape
+  // checks do not read credentials or certify the host's persistence security.
+  requireStorage(config?.storage)
   configure({
-    storage: mmkvStorageAdapter,
     cookieAuth: true,
     ...config,
     // NSURLSession/RCTNetworking would otherwise accept Set-Cookie outside
@@ -31,7 +53,15 @@ export const configureCheckout = (config: TtfConfig): void =>
     // Native owns no browser cookie jar. Ask the canonical session owner to
     // return its guest carrier and resume that exact carrier on later requests.
     auth: () => ({
-      ...config.auth?.(),
+      ...Object.fromEntries(
+        Object.entries(config.auth?.() ?? {}).filter(
+          ([name]) => name.toLowerCase() !== 'cache-control'
+        )
+      ),
       'X-TF-Session-Mode': 'header-only',
+      // Account/ticket responses must not be saved by the native HTTP cache.
+      // Revalidate any older cached response as well as forbidding a new store.
+      'Cache-Control': 'no-store, no-cache',
     }),
   })
+}

package/src/index.tsx

@@ -18,8 +18,11 @@ export {
   type UseCheckoutOptions,
   type NativeUseCheckout,
 } from './useCheckout'
-export { configureCheckout, mmkvStorageAdapter } from './configure'
-export { createMmkvStorage } from './storage'
+export {
+  configureCheckout,
+  configureCheckout as configure,
+  type NativeCheckoutConfig,
+} from './configure'
 export { CardInput, claimCardField, type CardInputProps } from './CardInput'
 
 // Component library: themeable provider + primitives + sections + auth.

package/src/sections/Tickets.tsx

@@ -23,6 +23,7 @@ import { Pressable, StyleSheet, Text, View } from 'react-native'
 import {
   ConfirmerBusyError,
   changeTicketQuantity,
+  ticketPriceContext,
   errorMessage,
   hooks,
   ticketQuantityRange,
@@ -232,8 +233,9 @@ export const Tickets: FC<TicketsProps> = ({
   const originals = useRef<Record<string, number>>({})
   useEffect(() => {
     for (const t of tickets)
-      if (originals.current[t.id] == null) originals.current[t.id] = t.price
-  }, [tickets])
+      if (originals.current[ticketPriceContext(catalog.scope, t)] == null)
+        originals.current[ticketPriceContext(catalog.scope, t)] = t.price
+  }, [tickets, catalog.scope])
 
   const selected = tickets.filter((t) => (qty[t.id] ?? 0) > 0)
   // The current selection's kind — drives the CTA label and the mutual-exclusion
@@ -329,7 +331,7 @@ export const Tickets: FC<TicketsProps> = ({
   const renderRow = (t: TicketType) => {
     const notStarted = !t.salesStarted
     const unavailable = t.soldOut || t.salesEnded || notStarted
-    const original = originals.current[t.id]
+    const original = originals.current[ticketPriceContext(catalog.scope, t)]
     const discounted = original != null && original > t.price
     const isFree = Number(t.price) === 0
     const sym = t.priceSymbol || t.currency

package/src/useCheckout.ts

@@ -5,7 +5,7 @@
  * the flat snapshot) lives in the SDK's hook, so web and native share it — this
  * file only supplies what's platform-specific.
  *
- *   configureCheckout({ env: 'PROD', clientId, clientSecret })  // once, at app start
+ *   configureCheckout({ env: 'PROD', clientId, clientSecret, storage })  // after storage hydration
  *   const checkout = useCheckout()
  *   await checkout.setTickets(eventId, selections)
  *   checkout.setBilling(b)

package/src/storage.ts

@@ -1,26 +0,0 @@
-/**
- * React Native storage adapter for the SDK's persisted session credentials.
- *
- * The shared transport uses a SYNCHRONOUS `StorageAdapter` (see shared
- * `client/storage.ts`). MMKV 3 provides persisted get/set/delete operations,
- * keeping the SDK's session credentials available across app restarts.
- *
- * Default native cookie auth stores its ecommerce ticket here and sends it in
- * request headers; the ambient OS cookie jar stays disabled. Other configured
- * SDK token credentials use this same adapter. Hosts may inject another
- * synchronous adapter when configuring checkout.
- */
-import { MMKV } from 'react-native-mmkv'
-
-import type { StorageAdapter } from 'tf-checkout-shared'
-
-/** Build a `StorageAdapter` backed by an MMKV instance (its own `id` namespace
- *  so it never collides with the host app's MMKV data). */
-export const createMmkvStorage = (id = 'tf-checkout'): StorageAdapter => {
-  const mmkv = new MMKV({ id })
-  return {
-    getItem: (key) => mmkv.getString(key) ?? null,
-    setItem: (key, value) => mmkv.set(key, value),
-    removeItem: (key) => mmkv.delete(key),
-  }
-}