Interface EntitlementStore

Upserts (userId, sku): re-granting overwrites the attributes and clears an earlier revoke, so re-buying after a refund restores ownership. Called inside the charge's transaction, so a rolled-back purchase grants nothing.

Streams every non-revoked grant for the user, expired ones included, sorted by sku. Each row carries the expiry owns applies at read time (null never lapses), so a caller can reproduce the ownership decision.

True while a non-revoked grant exists whose expiresAt is null or at/after the current clock (the expiry check is inclusive).

Marks the grant revoked: owns turns false and list stops streaming it. An unknown or already-revoked (userId, sku) changes nothing, and a later grant of the same sku restores ownership.