Add StoreKit history and modernize admin console

Expose ledger-backed cross-device purchase history while shipping the tested React admin redesign in the same reproducible deployment revision.
2026-08-19 22:13:13 +08:00
parent 11ec34dacb
commit 231c5040a5
51 changed files with 6484 additions and 4236 deletions
@@ -47,3 +47,14 @@ mix and require ongoing margin monitoring.
  transaction. A client retry returns the original grant.
 - The app finishes the StoreKit transaction only after server acknowledgement.
 - Signed transaction bodies and Apple certificate contents are never logged.
+
+## Purchase history
+
+- `GET /v1/storekit/transactions` requires the existing Bearer access token.
+- The account comes only from the authenticated session; clients never submit it.
+- History is read from the existing purchase audit and immutable credit ledger,
+  so purchases credited before the endpoint was deployed are included.
+- Results are ordered by `purchasedAt` and then `transactionId`, both descending,
+  with opaque cursor pagination (`limit` defaults to 50 and is bounded to 1–100).
+- Responses omit JWS data, Apple identifiers, account IDs, and internal record IDs.
+- History queries never call the App Store.