feat(kilo-pass): add Google Play purchase verifier

[iscekic]

Summary

No new behavior — the level adds an internal purchase verification step that no customer-facing path uses yet.

---

Reviewer Notes

verifyGooglePlayKiloPassPurchase is a new entry point that fetches a Google Play subscriptions v2 payload for a purchase token and maps it onto ValidatedStoreKiloPassPurchase under the Google Play payment provider. The mapper now rejects a decoded purchase whose startTimeMs or expiryTimeMs is non-finite, so a pending subscription that omits its start time throws a domain error instead of failing later on an invalid Date. The mapping also rejects missing identifiers, expired purchases, and products outside the enabled mobile store catalog, so completion fails before the purchase ledger runs; expired purchases are rejected on this path only because renewals and refunds arrive through the notifications handler.

Files

• apps/web/src/lib/kilo-pass/google-play-verifier.ts — adds verifyGooglePlayKiloPassPurchase, decodeGooglePlaySubscriptionPurchase, and mapGooglePlayKiloPassPurchase plus the GooglePlayEnvironment and GooglePlayDecodedPurchase types; the mapper rejects non-finite timestamps before the expiry check, and decodeGooglePlaySubscriptionPurchase falls back to the top-level latestOrderId and keeps the raw payload.

Test: 1 test file added — apps/web/src/lib/kilo-pass/google-play-verifier.test.ts, 197 lines.

Generated: none.

---

Verification

E2E report: none — a lower PR names its own change alone; the tip PR carries the E2E report. No manual test paths were run for this level.

Visual Changes

Visual Changes: N/A

Human steps: none known.

Stacked PRs — merge bottom to top. Each level shows only its own diff.

Runtime verification (E2E, user advocacy, simplify) runs on the tip PR over every level.
Every level keeps its own checks, its own bot review, and its own threads; each one is answered on its own PR.
Each level is its own deliverable: it builds and passes its own checks alone.
A finding on a level is repaired on that level, then carried upward with stack.sh forward.

1. android-iap-e895 — feat(commerce): add Play Kilo Pass presentation flag #5581
2. android-iap-e895-s2 — feat(kilo-pass): add Google Play publisher SDK #5582
3. android-iap-e895-s3 — feat(kilo-pass): add Google Play purchase verifier #5586 ← this PR
4. android-iap-e895-s4 — feat(kilo-pass): handle Play real-time notifications #5598
5. android-iap-e895-s5 — feat(kilo-pass): add completePlayPurchase mutation #5608
6. android-iap-e895-s6 — feat(mobile): offer Google Play Kilo Pass purchase #5618 (tip)

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (2 files)

• apps/web/src/lib/kilo-pass/google-play-verifier.ts
• apps/web/src/lib/kilo-pass/google-play-verifier.test.ts

Previous Review Summaries (2 snapshots, latest commit 4d253e8)

Current summary above is authoritative. Previous snapshots are kept for context only.

Previous review (commit 4d253e8)

Status: 1 Issue Found | Recommendation: Address before merge

Overview

Severity	Count
CRITICAL	0
WARNING	1
SUGGESTION	0

Issue Details (click to expand)

WARNING

File	Line	Issue
apps/web/src/lib/kilo-pass/google-play-verifier.ts	78	Invalid timestamps parse to NaN and throw RangeError

Files Reviewed (2 files)

• apps/web/src/lib/kilo-pass/google-play-verifier.ts - 1 issue
• apps/web/src/lib/kilo-pass/google-play-verifier.test.ts - 0 issues

Fix these issues in Kilo Cloud

Previous review (commit 21e05a1)

Status: 1 Issue Found | Recommendation: Address before merge

Overview

Severity	Count
CRITICAL	0
WARNING	1
SUGGESTION	0

Issue Details (click to expand)

WARNING

File	Line	Issue
apps/web/src/lib/kilo-pass/google-play-verifier.ts	78	Invalid timestamps parse to NaN and throw RangeError

Files Reviewed (2 files)

• apps/web/src/lib/kilo-pass/google-play-verifier.ts - 1 issue
• apps/web/src/lib/kilo-pass/google-play-verifier.test.ts - 0 issues

Fix these issues in Kilo Cloud

---

_{Reviewed by grok-4.6 · Input: 60K · Output: 4.9K · Cached: 149.9K}

_{Review guidance: REVIEW.md from base branch android-iap-e895-s2}