4.17.0 - #525

Merged

yusuftor merged 185 commits into

Sep 22, 2026

Commits on Aug 16, 2026

Fix build on Xcode 26.0.1: disambiguate fontScale arithmetic

jakemor
and
Kanna
committed
81e6377
Keep subscribers active through empty StoreKit reads and empty web polls

jakemor
and
Kanna
committed
7a81787
Scope the anti-downgrade guard by device-read authority

jakemor
and
Kanna
committed
606f7a7
Protect nil-store entitlements and stamp .appStore on SK1 entitlements

jakemor
and
Kanna
committed
0ae3358

Commits on Aug 19, 2026

Merge remote-tracking branch 'origin/develop' into fix/subscription-status-anti-downgrade
yusuftor
committed
d53fef6
Hold the guard through entitlement-mapping failures

yusuftor
and
claude
committed
81f3ea6
Stamp .appStore only on SK1 entitlements a transaction unlocks

yusuftor
and
claude
committed
6e70dcf
Reword changelog entries to match the scoped guard

yusuftor
and
claude
committed
699a8d2
Document the uncorrected isActive signal and the web revocation tradeoff

yusuftor
and
claude
committed
9d1ef98
Correct the revocation wording: empty responses are artifacts

yusuftor
and
claude
committed
287a399
Restore the test scheme to develop's parallel default

yusuftor
and
claude
committed
d1ca3fa
Bump to 4.16.4 and ban Unreleased changelog headings

yusuftor
and
claude
committed
c1fe74e
Update CHANGELOG.md
yusuftor
committed
47a5ba1
Update CHANGELOG.md
yusuftor
committed
3204994
Restore the App Store changelog entry with its precondition

yusuftor
and
claude
committed
82ff1ee
Merge pull request #506 from superwall/fix/subscription-status-anti-downgrade
yusuftor
authored
0f2cae7

Commits on Aug 24, 2026

chore(github): require an affected-user link and setup details in bug reports

yusuftor
and
claude
committed
93ede39
chore(github): warn against posting identifying user IDs in the affected-user link

yusuftor
and
claude
committed
ebc7611
chore(github): apply review suggestions to the bug report form

yusuftor
and
claude
committed
e1eeafe
feat: add dev mode for previewing local paywalls
chroxify
committed
6519c3c
Merge pull request #510 from superwall/chore/bug-report-issue-form
yusuftor
authored
411239d

Commits on Aug 25, 2026

fix(configure): stop the container escaping to the redeemer mid-init

yusuftor
and
claude
committed
b042bb7
review: kick off the cold-launch poll from Superwall's configure init

yusuftor
and
claude
committed
ead8520
Merge pull request #512 from superwall/fix/dependency-container-init-race
yusuftor
authored
15647e1
Merge remote-tracking branch 'origin/develop' into christo/sw-framework-support
yusuftor
committed
4f1779f
chore: fold dev mode changelog entry into staged 4.16.4 section

yusuftor
and
claude
committed
48b6b35
chore: restage 4.16.4 release as 4.17.0

yusuftor
and
claude
committed
5d8c076
review: gate dev links out of production and unfreeze the dev-mode cache

yusuftor
and
claude
committed
154f0a2
review: pin dev-server mount URLs to the manifest's origin

yusuftor
and
claude
committed
75da4e8
review: log when a dev server surface is rejected as off-origin

yusuftor
and
claude
committed
4a032b8

Commits on Aug 26, 2026

chore(examples): scope Advanced app ATS to web content and local networking

yusuftor
and
claude
committed
d1f5e0d
chore: split DevServerManifest.swift into one file per type

yusuftor
and
claude
committed
254d6de
style: invert the paywall picker's open guard into a positive early return

yusuftor
and
claude
committed
3482bf2
style: split the paywall picker gate into a three-branch predicate

yusuftor
and
claude
committed
0d7ce5e
style: state the picker gate positively with guard

yusuftor
and
claude
committed
362950d
style: group the ATS warning flag with the locator's other state

yusuftor
and
claude
committed
11cd922
style: split the ATS warning gate into single-condition checks

yusuftor
and
claude
committed
6fed06c
style: split the dev link parse into single-condition guards

yusuftor
and
claude
committed
c22e098
docs: drop the superwall.lock binding detail from the dev mode changelog entry

yusuftor
and
claude
committed
cf2020c
review: drop the debugger's product-variables timeout

yusuftor
and
claude
committed
e751849
style: positive-if and multiline-guard formatting in dev mode gates
yusuftor
committed
6240aa2
feat!: replace devMode and devServerURL with SuperwallOptions.devServer

yusuftor
and
claude
committed
b61b66e
chore: retrigger CI after a stuck Pullfrog run
yusuftor
committed
ae9e819
fix(debugger): make Preview work for unpushed dev-server surfaces

yusuftor
and
claude
committed
d6f8f63
feat(dev): serve matching local surfaces wholesale instead of patching published paywalls

yusuftor
and
claude
committed
ee963aa

Commits on Aug 27, 2026

feat(dev): mark locally served paywalls and honour their presentation config

yusuftor
and
claude
committed
75c29ba

Commits on Sep 1, 2026

fix(events): dedupe subscription status changes by logical state

yusuftor
and
claude
committed
7e87a07
review: gate the cache save, document logical-change semantics, add behavioral tests

yusuftor
and
claude
committed
a0a81c0
review: mirror logical-change docs onto the ObjC delegate

yusuftor
and
claude
committed
29146b4
Merge pull request #515 from superwall/fix/subscription-status-logical-dedupe
yusuftor
authored
5f22a4e
feat(entitlements): add grantedEntitlements merged into subscription status

yusuftor
and
claude
committed
5210fac
review: harden granted merge, resolution locking, and cached-status reads

yusuftor
and
claude
committed
84e9453
review: lock the status store itself, not just resolution

yusuftor
and
claude
committed
800b5c3
review: snapshot granted once per resolution, add base-race regression test

yusuftor
and
claude
committed
9235459
review: strengthen the base-race test's assertions

yusuftor
and
claude
committed
de887fa

Commits on Sep 2, 2026

refactor: make granted a first-class source in every customer info merge

yusuftor
and
claude
committed
430e284
review: keep LogScope raw values stable, cover the external-controller grant collision

yusuftor
and
claude
committed
913ff2c
refactor: move status publishing into its own file, rename resolved/unresolved to assigned/published

yusuftor
and
claude
committed
730c9ba
review: have publishSubscriptionStatus take its own lock, pass the granted snapshot in

yusuftor
and
claude
committed
9621c63
review: snapshot granted entitlements inside the publish lock

yusuftor
and
claude
committed
9697d8a
review: fix the 15 findings from the max-effort review

yusuftor
and
claude
committed
6b95ed5
review: rebuild external customer info from a consistent snapshot, strip colliding grants

yusuftor
and
claude
committed
8fcb871

Commits on Sep 3, 2026

review: bound the customer info retry, cover the external-controller recompute

yusuftor
and
claude
committed
7e6c817
docs: plainer wording in the granted entitlement ids comment

yusuftor
and
claude
committed
78eca5d
refactor: name what prompted a status publish instead of nil + a flag

yusuftor
and
claude
committed
782ed3e
chore: stop swiftlint crawling nested git worktrees

yusuftor
and
claude
committed
f7b54b4
refactor: drop a stale customer info build instead of rebuilding it

yusuftor
and
claude
committed
a78034c
fix: granted entitlements no longer decide an unknown subscription status

yusuftor
and
claude
committed
1949e21
docs: say which thread subscribers run on instead of 'don't block'

yusuftor
and
claude
committed
d620a7b
docs: trim the changelog to what changed since the last release

yusuftor
and
claude
committed
6b53761

Commits on Sep 4, 2026

Merge pull request #516 from superwall/feat/sw-5794-granted-entitlements
yusuftor
authored
ad1da70
Merge remote-tracking branch 'origin/develop' into christo/sw-framework-support

yusuftor
and
claude
committed
79e8ed2
refactor(debugger): hold published paywalls as PaywallSummary

yusuftor
and
claude
committed
7689d10
review: keep gating real, contain manifest decode failures, share the debugger's dev server

yusuftor
and
claude
committed
eedda06
review: inherit dashboard-owned behaviour, keep the manifest identifiable

yusuftor
and
claude
committed
5181d83
fix(dev): let the local paywall keep owning its notifications

yusuftor
and
claude
committed
8dee668
fix(dev): inherit what the manifest can't carry, honour multi-paywall bindings

yusuftor
and
claude
committed
0027657
refactor(dev): read paywall settings from the published paywall only

yusuftor
and
claude
committed
bff8c79
fix(dev): take identity from the paywall a surface stands in for

yusuftor
and
claude
committed
694331b
docs(dev): stop promising config.ts presentation reaches dev mode

yusuftor
and
claude
committed
a280567
docs(dev): name local notifications as the exception to inheritance

yusuftor
and
claude
committed
e518f87
docs(dev): make the on-device cache exception explicit

yusuftor
and
claude
committed
1af8f0a

Commits on Sep 7, 2026

fix: send unknown entitlement details as null, not as missing

yusuftor
and
claude
committed
8a29ef0
test: cover the string-valued fields and tidy the filter helper

yusuftor
and
claude
committed
1647e0e
refactor: null the unknown fields only for audience filters

yusuftor
and
claude
committed
9539a22
test: pin the one call site that turns the null encoding on

yusuftor
and
claude
committed
f60d255
Update CHANGELOG.md
yusuftor
committed
193dc25
Merge pull request #517 from superwall/fix/entitlement-unknown-fields
yusuftor
authored
1b24185

Commits on Sep 9, 2026

feat(dev): present a local paywall the way its config.ts says
chroxify
committed
1e97fc2

Commits on Sep 10, 2026

feat(dev): let config.ts pick intro offer eligibility

yusuftor
and
claude
committed
7ba938d
fix(dev): rebuild the paywall when config.ts settings change

yusuftor
and
claude
committed
a7e0db7
docs(dev): name intro offer eligibility as config.ts's

yusuftor
and
claude
committed
bfa0d23

Commits on Sep 11, 2026

Fix crash when register is called from more than one thread

yusuftor
and
claude
committed
cb48599
Serialize the task swap on a queue instead of a lock

yusuftor
and
claude
committed
3dd3685
Hand operations to one task through a stream

yusuftor
and
claude
committed
519c7cd
Address review: comment wording, last racy swap, test-only surface

yusuftor
and
claude
committed
9ad7439
Run operations at the enqueuer's priority, and restore Sendable

yusuftor
and
claude
committed
af2d496
Guard the priority test, and correct a comment

yusuftor
and
claude
committed
4ffdb41

Commits on Sep 13, 2026

fix: refresh and sync integration device attributes
Makisuo
committed
a414575

Commits on Sep 14, 2026

Skip the purchased-product fetch on StoreKit 2 at cold launch

yusuftor
and
claude
committed
29239d5
Log failed purchased-product fetches and fix a stale doc comment

yusuftor
and
claude
committed
eb96e0d
Drop the load timing logs

yusuftor
and
claude
committed
86ebffd
Merge pull request #522 from superwall/fix/skip-purchased-product-fetch-sk2
yusuftor
authored
b1b7b53
Publish config from the saved entitlements before the StoreKit read

yusuftor
and
claude
committed
e7941b2
Restore each saved item on its own expiry, and take the fast path with a purchase controller

yusuftor
and
claude
committed
18875a3
Seed device purchases only, admit lifetime purchases, and pin the expiry checks

yusuftor
and
claude
committed
3953a56
Test the fast path for a web-only subscriber

yusuftor
and
claude
committed
4176c14
Take the fast path for developer-granted entitlements

yusuftor
and
claude
committed
0ac31c4
Seed consumables inactive and scope the fast path to StoreKit 2

yusuftor
and
claude
committed
a5dac2f
Say the early publish applies to StoreKit 2 in the changelog

yusuftor
and
claude
committed
9ece061

Commits on Sep 15, 2026

Update CHANGELOG.md
yusuftor
committed
6ff9697
Wait for the purchases load only where the answer depends on it

yusuftor
and
claude
committed
1fab1de
Carry grants into the restore, and don't restore an undated subscription

yusuftor
and
claude
committed
7a92811
Merge grants in the caller, and match the read's merge rules

yusuftor
and
claude
committed
5b16335
Address the review on the device-attribute refresh

yusuftor
and
claude
committed
991eebc
Restore the whole integration state after a reset

yusuftor
and
claude
committed
bfb8793
Merge pull request #520 from superwall/fix/register-task-race
yusuftor
authored
965e848
Deactivate lapsed saved rows before merging grants in

yusuftor
and
claude
committed
03d47bd
Keep only the install-scoped attributes across a reset

yusuftor
and
claude
committed
922b1d7
Keep the eligible-override intro check on post-read data

yusuftor
and
claude
committed
82e160c
Close the two ways a person-scoped id could still survive a reset

yusuftor
and
claude
committed
b6cab4c
Derive the integration attribute cases from CaseIterable

yusuftor
and
claude
committed
26dc72f
Drop the scope assertion the exhaustive switch already guarantees

yusuftor
and
claude
committed
7b1741e
Wait for the read in the entitlement-history check too

yusuftor
and
claude
committed
2124140

Commits on Sep 16, 2026

Wait for the read in the custom-product trial check too

yusuftor
and
claude
committed
6eb2c24
Skip the purchases wait when no App Store product is involved

yusuftor
and
claude
committed
3bb6ef4
Say what actually decides whether the load can move an entitlement

yusuftor
and
claude
committed
f9c3590
Only treat a grant as in reach for apps with a purchase controller

yusuftor
and
claude
committed
153dba7
Drop the granted short-circuit, which named the wrong refresh

yusuftor
and
claude
committed
8f067a7
Update CHANGELOG.md
yusuftor
committed
bfbfde2
Merge pull request #523 from superwall/fix/publish-config-from-saved-entitlements
yusuftor
authored
7ad336f
Merge develop into codex/appsflyer-device-context

yusuftor
and
claude
committed
703e3ce
Call them device identifiers, and repair them when an app overwrites them

yusuftor
and
claude
committed
bf25d0d
Lock status reads, emit in store order, and publish corrected state during the early-publish window

yusuftor
and
claude
committed
95e2eaf
Judge an overwrite by the value, not just the key

yusuftor
and
claude
committed
1f44b3d
Match the ATT status on what it says, not how it's boxed

yusuftor
and
claude
committed
c9b7f32
Don't let a boolean pass for an ATT status

yusuftor
and
claude
committed
7deda32
Leave the saved customer info alone under an external purchase controller

yusuftor
and
claude
committed
c6fd4f3
Merge pull request #521 from superwall/codex/appsflyer-device-context
yusuftor
authored
84bd145
Pin the external-controller guard on the restore with a test

yusuftor
and
claude
committed
5209ccb
Merge remote-tracking branch 'origin/develop' into fix/subscription-status-review-fixes
yusuftor
committed
c30012a
Correct lapsed rows under a purchase controller without touching its entitlements

yusuftor
and
claude
committed
fb5be35
Leave the customer info alone under a purchase controller after all

yusuftor
and
claude
committed
4a0e8ee

Commits on Sep 17, 2026

Merge pull request #526 from superwall/fix/subscription-status-review-fixes
yusuftor
authored
7738da3
Stop identify() hanging after an install match, and answer paywall overwrites of device keys

yusuftor
and
claude
committed
c29fdce
Assert only what other suites can't disturb in the user-switch test

yusuftor
and
claude
committed
d568e98
Drop the overwrite check on the paywall attribute path

yusuftor
and
claude
committed
387c6a1
Say on reset(duringIdentify:) which queue it runs on, and check the reapply landed

yusuftor
and
claude
committed
b56231b
Merge pull request #527 from superwall/fix/identify-switch-hang
yusuftor
authored
5647609
Keep a paywall's experiment with the request that presented it

yusuftor
and
claude
committed
0919782
Drop the redundant claim log and fix the present operator's doc comment

yusuftor
and
claude
committed
d714e83
Keep a getPaywall claim made while the paywall is on screen, and don't replay used claim state

yusuftor
and
claude
committed
208e046
Only restore a handed-out claim on an appearance that starts a presentation

yusuftor
and
claude
committed
da4041f
Tie the stored publisher check to this test's own presentation

yusuftor
and
claude
committed
b1c7a81
Merge pull request #528 from superwall/fix/shared-paywall-attribution
yusuftor
authored
5632083
Update CHANGELOG.md
yusuftor
committed
94fb59d
Show the paywall version a claim resolved, not just its products

yusuftor
and
claude
committed
059a2aa
Install a claim's delegate before reloading, and load once on restore

yusuftor
and
claude
committed
f88573e

Commits on Sep 18, 2026

Update CHANGELOG.md
yusuftor
committed
2e841b5
Merge pull request #529 from superwall/fix/claim-brings-paywall-version
yusuftor
authored
7424c1f
Surface the web funnel's user attributes on a redeemed code

yusuftor
and
claude
committed
8d3fe5c
Keep the old Objective-C initialiser and document blank answers

yusuftor
and
claude
committed
5946a33
Pin the blank answer in the round trip test

yusuftor
and
claude
committed
5d0d919
Only send freeTrial_start to the paywall when a trial started

ianrumac
and
claude
committed
630dd61
Merge pull request #530 from superwall/feat/redemption-user-attributes
yusuftor
authored
6d04a83
Keep the mock alive for the whole of the new message handler tests

yusuftor
and
claude
committed
a6b5c06
Merge pull request #531 from superwall/ir/fix/gate-free-trial-start-message
yusuftor
authored
62f7f4f
Merge remote-tracking branch 'origin/develop' into christo/sw-framework-support

yusuftor
and
claude
committed
e96b181
Update CHANGELOG.md
yusuftor
committed
aecdd16
Merge pull request #511 from superwall/christo/sw-framework-support
yusuftor
authored
aa55087
Update CHANGELOG.md
yusuftor
committed
8ffa7e2
Scope the dev server lookup to the address it was asked for

yusuftor
and
claude
committed
2941322
Address review feedback on the dev server and shared paywall controller

yusuftor
and
claude
committed
c1ae976
Hold the dev server lookup to the server it set out to find

yusuftor
and
claude
committed
e7f2760
Let the early publish test wait for the purchases load to start

yusuftor
and
claude
committed
1a4c22e

Commits on Sep 21, 2026

Hold only the entitlements a device read has no authority over

yusuftor
and
claude
committed
6e75fa7
Refresh the dev server manifest before previewing or presenting a local surface

yusuftor
and
claude
committed
4f2139a
Send configState from processConfig instead of from its callers

yusuftor
and
claude
committed
dcc2e9e
Keep entitlements a device read has no authority over, whether or not they hold

yusuftor
and
claude
committed
d63ddd5
Drop a selected dev surface the refreshed manifest no longer lists

yusuftor
and
claude
committed
d873648
Pin the intro offer eligibility key in the manifest fixture

yusuftor
and
claude
committed
62e294a
Update changelog, remove redundant code
yusuftor
committed
dbaebd5
Drop an entitlement past its own expiry even when the device read said nothing

yusuftor
and
claude
committed
0014fae
Resolve the debugger's selected surface the way Present does

yusuftor
and
claude
committed
d4055e6
Say which stores the expiry prune actually settles

yusuftor
and
claude
committed
9835f8b