Determining service entitlement on the server

At a glance

Project structure

Source bundle/
├── routes/
│   └── index.js
├── app.js
├── services/
│   └── receiptProcessor.js
├── promo-offer-gen/
│   └── index.js
└── models/
    └── Subscription.js

Structure observations

• Architecturally prominent files are ranked from entry points and role-named declarations; resource-only paths are omitted.
• Primary languages: JavaScript.
• The verified tree contains 0 project/configuration file(s) and 0 source declaration(s).

Overall architecture

flowchart LR
    N1["app"]
    N2["Routes"]
    N3["receiptProcessor"]
    N4["Subscription"]
    N5["StoreKit topic boundary"]
    N1 --> N2
    N2 --> N3
    N3 --> N4
    N4 --> N5

Reference code

app.js:14 — architecture anchor

const app = express();

Interpretation

The arrows summarize the source-visible entry, role-named types or folders, and framework direction; when nodes come from structural folders, the sequence is a high-level interpretation rather than proof that every adjacent node calls the next. Ownership is claimed only where the next section cites a stored property or assignment. The diagram is intentionally limited to the dominant path into StoreKit.

Ownership and state

classDiagram
    RoutesModule *-- Router : router
    app *-- express : app
    receiptProcessor *-- Subscription : newSub
    receiptProcessor *-- OriginalTransaction : original

Ownership evidence

routes/index.js:10 — stored dependency or nearest verified ownership anchor

const router = express.Router();

Composition arrows indicate a source-visible construction expression or locally owned value state; aggregation means the owner stores or receives a dependency without proving exclusive lifetime ownership.

Concurrency, scheduling, and thread safety

Evidence limit: actor isolation, async/await, or Task creation does not by itself prove background-thread execution; Sendable conformance alone does not prove thread-safe mutation.

No source-visible execution, scheduling, or synchronization boundary was found in the indexed source.

@MainActor/MainActor.run, DispatchQueue.main, and RunLoop.main are reported as distinct isolation, queue, and event-loop mechanisms. A plain Task is kept separate from Task.detached; neither is labeled as a background thread.

State propagation, frameworks, and dependencies

Evidence limit: an import proves a source-level compilation dependency at the cited line; it does not prove runtime use, architectural adoption, or whether a Swift package is a direct application dependency.

No source-visible state propagation, framework import, or package dependency was found in the indexed source.

receive(on:) describes downstream delivery scheduling, while subscribe(on:) describes upstream subscription/request/cancel scheduling. An import Combine alone establishes neither behavior nor a Store, reducer, Redux, or other application architecture.

Class and protocol design

services/receiptProcessor.js:8 — representative type boundary

require('dotenv').config();

No local protocol conformance is claimed as protocol-oriented design; external framework conformances are listed only as dependencies.

Access control

Reference code

promo-offer-gen/index.js:10 — representative boundary

const ECKey = require('ec-key');

Swift declarations without a modifier are internal; explicit private, fileprivate, private(set), public, or open entries above are interpreted by language semantics. Objective-C/C samples instead rely on header and implementation boundaries, which are not equivalent to Swift lexical privacy.

Logic ownership and placement

Design patterns

Naming conventions

• Types: feature-specific names rather than reusable layer suffixes.
• Protocols: no local protocol declaration in the scanned source.
• Methods: OriginalTransaction, subProductIndex, originalProductIndex, applyExpirationIntent, calcSubMovments, processLatestReceiptInfo, processPendingRenewalArray, genSubObjects.
• Files: feature/project roles rather than a strict one-type-per-file rule.

Architecture takeaways

• app is the main source-visible entry or composition anchor for this sample.
• Framework work reaches StoreKit through a deliberately small high-level chain; the detailed API graph remains inside the cited implementation files.
• Stored-property evidence identifies lifecycle collaboration; it does not by itself prove exclusive object ownership.
• Access-control conclusions separate verified language visibility from the likely design rationale.
• The source does not justify labeling the design protocol-oriented.

Source map

• Official Apple documentation