First public release of @nossdev/iap — a thin Capacitor 5 IAP orchestrator that defers acknowledgement to a backend you control.
Install
```bash
npm install @nossdev/iap cordova-plugin-purchase
npx cap sync
```
Highlights
- Capacitor 5 native adapter via
cordova-plugin-purchase^13.x with deferred-finish safety ("never grant before backend confirms") - Backend HTTP client with timeout, stepped retry on 5xx, error mapping to
IAPError - Backend abstraction — bring your own adapter (Firebase, Supabase, GraphQL) or use the built-in HTTP adapter
- Backend-driven product manifest — `createIAP({ products })` is optional; backend can curate the SKU list via `endpoints.products` or `listProducts()`
- Purchase, restore, refresh + recovery flows with concurrency lock and event emitter
- Entitlement cache via Capacitor Preferences (survives app restarts)
- Documentation site at https://iap.nossdev.com
- CI on Node 20 + 22 with full typecheck/lint/test/build matrix
Known caveats
- API may have breaking changes through the 0.x line as production usage exposes rough edges. Pin the minor (`^0.1.0`) and watch the CHANGELOG.
- This release was published manually from a developer laptop (no provenance attestation). `v0.1.1` and onward will publish via npm OIDC trusted publishing and carry signed provenance.
See the full CHANGELOG entry for the complete feature list.