iap

type AppleConfig struct {
	BundleID     string
	AllowSandbox bool
	// RootCertsPEM is Apple's root certificate(s) in PEM. Required: without a
	// pinned root there is nothing to anchor the chain to. AppleRootCAG3PEM is
	// the one Apple uses.
	RootCertsPEM []byte
}

type AppleServerAPI struct {
	// contains filtered or unexported fields
}

type AppleServerAPIConfig struct {
	IssuerID string
	KeyID    string
	// PrivateKeyPEM is the .p8 file's contents.
	PrivateKeyPEM []byte
	// Verifier checks the signed payloads the API returns (and supplies the
	// bundle id).
	Verifier *AppleVerifier
	// HTTPClient overrides the client; BaseURL and SandboxBaseURL override
	// Apple's hosts (tests).
	HTTPClient     *http.Client
	BaseURL        string
	SandboxBaseURL string
}

type AppleVerifier struct {
	// contains filtered or unexported fields
}

type CloudMeter struct {
	// contains filtered or unexported fields
}

type CloudMeterConfig struct {
	// APIKey authenticates the developer's Nimbus Cloud account. Required —
	// without it there is no account to meter, so the gate fails closed.
	APIKey string
	// Endpoint overrides the metering URL. Defaults to Nimbus Cloud.
	Endpoint string
	// HTTPClient overrides the client (tests point it at a mock server).
	HTTPClient *http.Client
	// FailClosed makes a Cloud outage deny access instead of granting it. Off
	// by default; see the failure policy above before turning it on.
	FailClosed bool
}

type Decision struct {
	// Allowed is whether the entitlement may be returned to the app.
	Allowed bool
	// Reason explains a denial, for logs and errors.
	Reason string
	// TrackedVolumeMicros is the account's cumulative tracked volume after this
	// transaction, as the meter understands it.
	TrackedVolumeMicros int64
	// FeeMicros is what this transaction cost (0 within the free tier).
	FeeMicros int64
	// OverFreeTier is whether the account has exhausted the free allowance.
	OverFreeTier bool
	// Reconcile is set when the decision was made locally after a Cloud outage
	// and must be re-reported later. The entitlement was still granted.
	Reconcile bool
}

type GoogleConfig struct {
	// PackageName is the app's package; a purchase is looked up under it.
	PackageName string
	// ServiceAccountJSON is the Google Cloud service-account key with access to
	// the Play Developer API, as downloaded from the console.
	ServiceAccountJSON []byte
}

type GoogleVerifier struct {
	// contains filtered or unexported fields
}

type LocalMeter struct {
	// contains filtered or unexported fields
}

type Meter interface {
	// Authorize records a transaction and rules on whether its entitlement may
	// be granted. It must fail open on transient errors (see the package note).
	Authorize(ctx context.Context, t MeteredTransaction) (Decision, error)
}

type MeteredTransaction struct {
	Platform      contracts.IAPPlatform
	TransactionID string
	ProductID     string
	Subject       string
	PriceMicros   int64
	Currency      string
	Environment   string // "sandbox" transactions are never metered
}