[1amKhush]

Addresses #114. Depends on #110; tested together with #112.

Summary

Expired, unclaimed paid grants currently block their invocation for the store's lifetime. Add a trusted, generation-fenced resolve_expired_grant transition after the application/operator resolves the payment outside the SDK.

• Require an explicit retentionMs after grant expiry, with no SDK default.
• Keep unresolved grants pinned regardless of age or capacity pressure.
• Collect resolved grants only after retention, invoice-expiry, and replay deadlines, on the next admission.
• Refuse live grants, consumed/dispatched rights, unpaid/uncertain attempts, stale generations, and repeated resolutions.
• Preserve untimed transports' indefinite replay retention. No refund, authorization renewal, handler execution, or automatic wallet action is performed.
• Add a release changeset; document operator usage in a separate docs-repository branch.

The existing #109 core implementation is preserved and revalidated. No storage dependencies or PostgreSQL implementation are added.

Validation

• Harden server payment authorization with atomic, pluggable storage #109 baseline: 786 passed, 5 skipped, 0 failures.
• 19 new retention/operator regressions; 13 failed before implementation.
• Final full suite: 805 passed, 5 live-wallet skips, 0 failures.
• Composed with Fix/payment settlement delivery #112: 855 passed, 5 live-wallet skips, 0 failures; combined typecheck/lint also passed.
• Typecheck, lint, build, exports, browser bundles, Node 18.20.8 runtime smoke, and package audit passed.
• The change merges cleanly with Fix/payment settlement delivery #112. Its settlement and unpublished-result collection guards remain intact.
• No live-wallet settlement runs were performed.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has insufficient remaining quota. Try requesting a review at a lower effort level.

An organization owner can choose the repository organization as the billing source for reviews requested by members with a paid Copilot license. Learn about Copilot code review billing.