@feelflow/ffid-sdk 10.0.0 → 11.0.0

package/dist/{chunk-2LU2F3F2.cjs → chunk-VR3QR64A.cjs}

@@ -310,6 +310,9 @@ var OAUTH_INTROSPECT_ENDPOINT = "/api/v1/oauth/introspect";
 var CACHE_KEY_PREFIX = "ffid:introspect:";
 var HEX_BASE = 16;
 var HEX_BYTE_WIDTH = 2;
+var HTTP_TOO_MANY_REQUESTS = 429;
+var HTTP_SERVER_ERROR_MIN = 500;
+var HTTP_SERVER_ERROR_LIMIT = 600;
 function createVerifyAccessToken(deps) {
   const { authMode, baseUrl, serviceCode, serviceApiKey, verifyStrategy, logger, createError, errorCodes, cache, timeout } = deps;
   let jwtVerify2 = null;
@@ -364,6 +367,16 @@ function createVerifyAccessToken(deps) {
     }
     return verifyViaIntrospect(accessToken);
   }
+  function introspectionUnavailable(status) {
+    logger.error("Token introspection unavailable", { status });
+    return {
+      error: {
+        code: errorCodes.NETWORK_ERROR,
+        message: `\u30C8\u30FC\u30AF\u30F3\u691C\u8A3C\u30B5\u30FC\u30D3\u30B9\u304C\u4E00\u6642\u7684\u306B\u5229\u7528\u3067\u304D\u307E\u305B\u3093 (status: ${status})`,
+        details: { status }
+      }
+    };
+  }
   async function verifyViaIntrospect(accessToken, cacheKeySuffix) {
     if (!serviceApiKey) {
       return {
@@ -421,10 +434,12 @@ function createVerifyAccessToken(deps) {
         }
       };
     }
+    const upstreamUnavailable = response.status === HTTP_TOO_MANY_REQUESTS || response.status >= HTTP_SERVER_ERROR_MIN && response.status < HTTP_SERVER_ERROR_LIMIT;
     let introspectResponse;
     try {
       introspectResponse = await response.json();
     } catch (parseError) {
+      if (upstreamUnavailable) return introspectionUnavailable(response.status);
       logger.error("Parse error during token verification:", parseError);
       return {
         error: {
@@ -433,6 +448,7 @@ function createVerifyAccessToken(deps) {
         }
       };
     }
+    if (upstreamUnavailable) return introspectionUnavailable(response.status);
     if (!response.ok) {
       const errorBody = introspectResponse;
       return {
@@ -1376,7 +1392,7 @@ var FFID_ORGANIZATION_PROFILE_ERROR_CODES = {
 };
 
 // src/client/version-check.ts
-var SDK_VERSION = "10.0.0";
+var SDK_VERSION = "11.0.0";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {
@@ -1944,7 +1960,7 @@ function createInviteMethods(deps) {
     }).toString();
     return fetchWithAuth(`${EXT_INVITE_ENDPOINT}?${query}`, {
       method: "POST",
-      body: JSON.stringify({ email: params.email, role: params.role })
+      body: JSON.stringify({ email: params.email, role: params.role, inviterUserId: params.inviterUserId })
     });
   }
   return { inviteMember };
@@ -2247,6 +2263,25 @@ function createOAuthTokenMethods(deps) {
   return { exchangeCodeForTokens, refreshAccessToken, signOutToken };
 }
 
+// src/client/request-timeout.ts
+function withRequestTimeout(options, timeout) {
+  if (timeout === void 0 || options.signal?.aborted) return options;
+  const deadline = AbortSignal.timeout(timeout);
+  if (!options.signal) return { ...options, signal: deadline };
+  const callerSignal = options.signal;
+  const controller = new AbortController();
+  const abortFromCaller = () => abort(callerSignal.reason);
+  const abortFromDeadline = () => abort(deadline.reason);
+  function abort(reason) {
+    callerSignal.removeEventListener("abort", abortFromCaller);
+    deadline.removeEventListener("abort", abortFromDeadline);
+    controller.abort(reason);
+  }
+  callerSignal.addEventListener("abort", abortFromCaller, { once: true });
+  deadline.addEventListener("abort", abortFromDeadline, { once: true });
+  return { ...options, signal: controller.signal };
+}
+
 // src/client/session.ts
 var SESSION_ENDPOINT = "/api/v1/auth/session";
 var LOGOUT_ENDPOINT = "/api/v1/auth/signout";
@@ -3981,6 +4016,7 @@ function toServiceAccessDecision(response, allowGrace) {
   const isBlocked = response.isBlocked ?? (effectiveStatus === null || effectiveStatus !== null && BLOCKING_EFFECTIVE_STATUSES.includes(effectiveStatus));
   return {
     hasAccess,
+    ...response.seatAssigned !== void 0 ? { seatAssigned: response.seatAssigned } : {},
     effectiveStatus,
     isGrace,
     isBlocked: isBlocked || !hasAccess,
@@ -4048,6 +4084,7 @@ var FFID_SUBSCRIPTION_ERROR_CODES = {
 var FFID_CREDITS_ERROR_CODES = {
   CREDITS_INSUFFICIENT: "CREDITS_INSUFFICIENT",
   CREDITS_IDEMPOTENCY_CONFLICT: "CREDITS_IDEMPOTENCY_CONFLICT",
+  CREDITS_TURN_CANCELLED: "CREDITS_TURN_CANCELLED",
   CREDITS_NOT_APPLICABLE: "CREDITS_NOT_APPLICABLE",
   CREDITS_BALANCE_CAP_EXCEEDED: "CREDITS_BALANCE_CAP_EXCEEDED",
   SEAT_BILLING_NOT_APPLICABLE: "SEAT_BILLING_NOT_APPLICABLE",
@@ -4212,9 +4249,10 @@ function createFFIDClient(config) {
   async function fetchWithAuth(endpoint, options = {}, authOverride) {
     const url = `${baseUrl}${endpoint}`;
     logger.debug("Fetching:", url);
-    const fetchOptions = buildFetchOptions(options, authOverride);
+    let fetchOptions = buildFetchOptions(options, authOverride);
     let response;
     try {
+      fetchOptions = withRequestTimeout(fetchOptions, timeout);
       response = await fetch(url, fetchOptions);
     } catch (error) {
       logger.error("Network error:", error);
@@ -4229,9 +4267,9 @@ function createFFIDClient(config) {
       const refreshResult = await refreshAccessToken();
       if (!refreshResult.error) {
         logger.debug("Token refreshed, retrying request");
-        const retryOptions = buildFetchOptions(options);
         try {
-          response = await fetch(url, retryOptions);
+          fetchOptions = withRequestTimeout(buildFetchOptions(options), timeout);
+          response = await fetch(url, fetchOptions);
         } catch (retryError) {
           logger.error("Network error on retry:", retryError);
           return {
@@ -4250,6 +4288,15 @@ function createFFIDClient(config) {
     try {
       raw = await response.json();
     } catch (parseError) {
+      if (fetchOptions.signal?.aborted) {
+        logger.error("Response body aborted:", parseError);
+        return {
+          error: {
+            code: FFID_ERROR_CODES.NETWORK_ERROR,
+            message: "\u30EC\u30B9\u30DD\u30F3\u30B9\u306E\u53D7\u4FE1\u304C\u4E2D\u65AD\u3055\u308C\u307E\u3057\u305F"
+          }
+        };
+      }
       logger.error("Parse error:", parseError, "Status:", response.status);
       return {
         error: {
@@ -4611,6 +4658,50 @@ function createFFIDClient(config) {
   };
 }
 
+// src/client/authorization-error.ts
+var FFID_OAUTH_DENIAL_REASONS = [
+  /** The user is not a member of the organization */
+  "no_membership",
+  /** The organization has no usable subscription for the service */
+  "no_active_subscription",
+  /** The organization has a subscription, but the user has no seat in it */
+  "no_seat_assignment",
+  /** The subscription has expired (canceled / past due beyond grace) */
+  "subscription_expired",
+  /** The flat plan's member limit is full, so no seat could be given */
+  "member_limit_reached"
+];
+function isFFIDOAuthDenialReason(value) {
+  return typeof value === "string" && FFID_OAUTH_DENIAL_REASONS.includes(value);
+}
+var DEFAULT_AUTHORIZATION_ERROR_MESSAGE = "\u8A8D\u53EF\u30B5\u30FC\u30D0\u30FC\u304C\u30A8\u30E9\u30FC\u3092\u8FD4\u3057\u307E\u3057\u305F";
+function buildAuthorizationError(params) {
+  const oauthError = params.get("error");
+  if (!oauthError) return null;
+  const rawReason = params.get("denial_reason");
+  const errorDescription = params.get("error_description");
+  const details = {
+    source: "authorization",
+    denialReason: isFFIDOAuthDenialReason(rawReason) ? rawReason : null,
+    errorDescription
+  };
+  return {
+    code: oauthError,
+    message: errorDescription ?? DEFAULT_AUTHORIZATION_ERROR_MESSAGE,
+    details: { ...details }
+  };
+}
+function getFFIDAuthorizationError(error) {
+  const details = error?.details;
+  if (!error || !details || details.source !== "authorization") return null;
+  const description = details.errorDescription;
+  return {
+    oauthError: error.code,
+    denialReason: isFFIDOAuthDenialReason(details.denialReason) ? details.denialReason : null,
+    errorDescription: typeof description === "string" ? description : null
+  };
+}
+
 // src/client/callback.ts
 var CALLBACK_ERROR_CODES = {
   /** Stored state missing or did not match the callback `state` (CSRF guard) */
@@ -4635,16 +4726,43 @@ function extractSearchParams(source) {
     return new URLSearchParams(query);
   }
 }
-function cleanCallbackUrlParams(logger) {
+var CODE_CALLBACK_PARAMS = ["code", "state"];
+var ERROR_CALLBACK_CONSUMED_PARAMS = ["state"];
+function cleanCallbackUrlParams(logger, names) {
   try {
     const cleanUrl = new URL(window.location.href);
-    cleanUrl.searchParams.delete("code");
-    cleanUrl.searchParams.delete("state");
+    for (const name of names) cleanUrl.searchParams.delete(name);
     window.history.replaceState({}, "", cleanUrl.toString());
   } catch (error) {
     logger.warn("handleRedirectCallback: URL \u306E\u30AF\u30EA\u30FC\u30F3\u30A2\u30C3\u30D7\u306B\u5931\u6557\u3057\u307E\u3057\u305F:", error);
   }
 }
+function validateCallbackState(client, urlState) {
+  const { logger } = client;
+  const storedState = retrieveState(logger);
+  if (storedState === null && urlState === null) return null;
+  if (storedState !== null && storedState === urlState) return null;
+  if (storedState === null && !isStateStorageAvailable()) {
+    logger.error(
+      "handleRedirectCallback: OAuth state \u3092\u4FDD\u5B58\u3067\u304D\u308B storage \u304C\u5229\u7528\u3067\u304D\u306A\u3044\u305F\u3081 CSRF \u691C\u8A3C\u304C\u3067\u304D\u307E\u305B\u3093\uFF08iOS private mode \u7B49\uFF09"
+    );
+    return {
+      error: client.createError(
+        CALLBACK_ERROR_CODES.STATE_UNAVAILABLE,
+        "OAuth state \u3092\u4FDD\u5B58\u3067\u304D\u308B storage \u304C\u5229\u7528\u3067\u304D\u306A\u3044\u305F\u3081\u8A8D\u8A3C\u3092\u5B8C\u4E86\u3067\u304D\u307E\u305B\u3093\u3002\u30D6\u30E9\u30A6\u30B6\u306E\u30D7\u30E9\u30A4\u30D9\u30FC\u30C8\u30E2\u30FC\u30C9\u3084\u30B9\u30C8\u30EC\u30FC\u30B8\u8A2D\u5B9A\u3092\u3054\u78BA\u8A8D\u304F\u3060\u3055\u3044"
+      )
+    };
+  }
+  logger.error(
+    "handleRedirectCallback: OAuth state mismatch or omitted (possible CSRF) \u2014 \u8A8D\u8A3C\u3092\u4E2D\u6B62\u3057\u307E\u3057\u305F\u3002\u6D88\u8CBB\u6E08\u307F callback \u30D1\u30E9\u30E1\u30FC\u30BF\u306E\u518D\u51E6\u7406\uFF08`cleanUrl: false` \u5229\u7528\u6642\u306E cleanup \u6F0F\u308C\u3084 reload \u7B49\uFF09\u3067\u3082\u767A\u751F\u3057\u307E\u3059"
+  );
+  return {
+    error: client.createError(
+      CALLBACK_ERROR_CODES.STATE_MISMATCH,
+      "OAuth state \u304C\u4E00\u81F4\u3057\u307E\u305B\u3093\u3002CSRF \u306E\u53EF\u80FD\u6027\u304C\u3042\u308B\u305F\u3081\u8A8D\u8A3C\u3092\u4E2D\u6B62\u3057\u307E\u3057\u305F"
+    )
+  };
+}
 async function handleRedirectCallback(client, options) {
   const { logger } = client;
   const hasWindow = typeof window !== "undefined";
@@ -4661,6 +4779,24 @@ async function handleRedirectCallback(client, options) {
   const params = extractSearchParams(source);
   const code = params.get("code");
   const urlState = params.get("state");
+  const authorizationError = buildAuthorizationError(params);
+  if (authorizationError && urlState !== null) {
+    const stateError2 = validateCallbackState(client, urlState);
+    if (stateError2) return stateError2;
+    retrieveCodeVerifier(logger);
+    logger.warn("handleRedirectCallback: \u8A8D\u53EF\u30B5\u30FC\u30D0\u30FC\u304C\u30A8\u30E9\u30FC\u3092\u8FD4\u3057\u307E\u3057\u305F:", {
+      error: authorizationError.code,
+      denialReason: params.get("denial_reason")
+    });
+    if (hasWindow) {
+      if (options?.cleanUrl !== false) {
+        cleanCallbackUrlParams(logger, ERROR_CALLBACK_CONSUMED_PARAMS);
+      } else {
+        logger.debug("handleRedirectCallback: cleanUrl=false \u306E\u305F\u3081 URL cleanup \u3092 consumer \u306B\u59D4\u8B72\u3057\u307E\u3057\u305F");
+      }
+    }
+    return { error: authorizationError };
+  }
   if (!code) {
     logger.warn("handleRedirectCallback: \u8A8D\u53EF\u30B3\u30FC\u30C9\u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093");
     return {
@@ -4670,37 +4806,13 @@ async function handleRedirectCallback(client, options) {
       )
     };
   }
-  const storedState = retrieveState(logger);
-  if (storedState !== null || urlState !== null) {
-    const stateMatches = storedState !== null && storedState === urlState;
-    if (!stateMatches) {
-      if (storedState === null && !isStateStorageAvailable()) {
-        logger.error(
-          "handleRedirectCallback: OAuth state \u3092\u4FDD\u5B58\u3067\u304D\u308B storage \u304C\u5229\u7528\u3067\u304D\u306A\u3044\u305F\u3081 CSRF \u691C\u8A3C\u304C\u3067\u304D\u307E\u305B\u3093\uFF08iOS private mode \u7B49\uFF09"
-        );
-        return {
-          error: client.createError(
-            CALLBACK_ERROR_CODES.STATE_UNAVAILABLE,
-            "OAuth state \u3092\u4FDD\u5B58\u3067\u304D\u308B storage \u304C\u5229\u7528\u3067\u304D\u306A\u3044\u305F\u3081\u8A8D\u8A3C\u3092\u5B8C\u4E86\u3067\u304D\u307E\u305B\u3093\u3002\u30D6\u30E9\u30A6\u30B6\u306E\u30D7\u30E9\u30A4\u30D9\u30FC\u30C8\u30E2\u30FC\u30C9\u3084\u30B9\u30C8\u30EC\u30FC\u30B8\u8A2D\u5B9A\u3092\u3054\u78BA\u8A8D\u304F\u3060\u3055\u3044"
-          )
-        };
-      }
-      logger.error(
-        "handleRedirectCallback: OAuth state mismatch or omitted (possible CSRF) \u2014 \u8A8D\u8A3C\u3092\u4E2D\u6B62\u3057\u307E\u3057\u305F\u3002\u6D88\u8CBB\u6E08\u307F callback \u30D1\u30E9\u30E1\u30FC\u30BF\u306E\u518D\u51E6\u7406\uFF08`cleanUrl: false` \u5229\u7528\u6642\u306E cleanup \u6F0F\u308C\u3084 reload \u7B49\uFF09\u3067\u3082\u767A\u751F\u3057\u307E\u3059"
-      );
-      return {
-        error: client.createError(
-          CALLBACK_ERROR_CODES.STATE_MISMATCH,
-          "OAuth state \u304C\u4E00\u81F4\u3057\u307E\u305B\u3093\u3002CSRF \u306E\u53EF\u80FD\u6027\u304C\u3042\u308B\u305F\u3081\u8A8D\u8A3C\u3092\u4E2D\u6B62\u3057\u307E\u3057\u305F"
-        )
-      };
-    }
-  }
+  const stateError = validateCallbackState(client, urlState);
+  if (stateError) return stateError;
   const verifier = retrieveCodeVerifier(logger);
   const result = await client.exchangeCodeForTokens(code, verifier ?? void 0);
   if (!result.error && hasWindow) {
     if (options?.cleanUrl !== false) {
-      cleanCallbackUrlParams(logger);
+      cleanCallbackUrlParams(logger, CODE_CALLBACK_PARAMS);
     } else {
       logger.debug("handleRedirectCallback: cleanUrl=false \u306E\u305F\u3081 URL cleanup \u3092 consumer \u306B\u59D4\u8B72\u3057\u307E\u3057\u305F");
     }
@@ -4709,6 +4821,13 @@ async function handleRedirectCallback(client, options) {
 }
 var DEFAULT_REFRESH_INTERVAL_MS = 5 * 60 * 1e3;
 var TOKEN_REFRESH_RATIO = 0.8;
+function resolveCallbackKey(params) {
+  const code = params.get("code");
+  if (code) return code;
+  const error = params.get("error");
+  const state = params.get("state");
+  return error && state ? `error:${error}:${state}` : null;
+}
 var FFIDContext = react.createContext(null);
 var FFIDClientContext = react.createContext(null);
 function FFIDProvider({
@@ -4888,19 +5007,26 @@ function FFIDProvider({
     },
     [organizations, client]
   );
-  const handledCodeRef = react.useRef(null);
+  const handledCallbackRef = react.useRef(null);
+  const callbackPendingRef = react.useRef(false);
+  const authorizationDeniedRef = react.useRef(false);
   react.useEffect(() => {
     if (client.authMode !== "token") return;
     if (typeof window === "undefined") return;
-    const urlParams = new URLSearchParams(window.location.search);
-    const code = urlParams.get("code");
-    if (!code) return;
-    if (handledCodeRef.current === code) return;
-    handledCodeRef.current = code;
-    client.logger.debug("Authorization code detected, exchanging for tokens");
+    const callbackKey = resolveCallbackKey(new URLSearchParams(window.location.search));
+    if (!callbackKey) return;
+    if (handledCallbackRef.current === callbackKey) return;
+    handledCallbackRef.current = callbackKey;
+    callbackPendingRef.current = true;
+    client.logger.debug("OAuth callback detected, handling it");
     handleRedirectCallback(client, { cleanUrl: cleanCallbackUrl }).then((result) => {
       if (result.error) {
-        client.logger.error("Token exchange failed:", result.error);
+        if (getFFIDAuthorizationError(result.error)) {
+          client.logger.warn("FFID \u304C\u30ED\u30B0\u30A4\u30F3\u3092\u62D2\u5426\u3057\u307E\u3057\u305F:", result.error);
+          authorizationDeniedRef.current = true;
+        } else {
+          client.logger.error("Token exchange failed:", result.error);
+        }
         if (result.error.code === FFID_ERROR_CODES.STATE_MISMATCH_ERROR && client.tokenStore.getTokens()) {
           client.logger.debug(
             "Stale callback rejected but stored tokens present, restoring session via refresh"
@@ -4918,13 +5044,15 @@ function FFIDProvider({
     }).catch((err) => {
       client.logger.error("Token exchange error:", err);
       setIsLoading(false);
+    }).finally(() => {
+      callbackPendingRef.current = false;
     });
   }, [client]);
   react.useEffect(() => {
     if (client.authMode === "token") {
+      if (callbackPendingRef.current || authorizationDeniedRef.current) return;
       if (typeof window !== "undefined") {
-        const urlParams = new URLSearchParams(window.location.search);
-        if (urlParams.has("code")) {
+        if (resolveCallbackKey(new URLSearchParams(window.location.search))) {
           return;
         }
       }
@@ -6785,6 +6913,7 @@ exports.FFID_INQUIRY_CATEGORIES = FFID_INQUIRY_CATEGORIES;
 exports.FFID_INQUIRY_CATEGORIES_SITE_2026 = FFID_INQUIRY_CATEGORIES_SITE_2026;
 exports.FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_BYTES = FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_BYTES;
 exports.FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_MB = FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_MB;
+exports.FFID_OAUTH_DENIAL_REASONS = FFID_OAUTH_DENIAL_REASONS;
 exports.FFID_ORGANIZATION_PROFILE_ERROR_CODES = FFID_ORGANIZATION_PROFILE_ERROR_CODES;
 exports.FFID_SUBSCRIPTION_ERROR_CODES = FFID_SUBSCRIPTION_ERROR_CODES;
 exports.canonicalizeCatalogValue = canonicalizeCatalogValue;
@@ -6803,12 +6932,14 @@ exports.createFFIDClient = createFFIDClient;
 exports.createTokenStore = createTokenStore;
 exports.generateCodeChallenge = generateCodeChallenge;
 exports.generateCodeVerifier = generateCodeVerifier;
+exports.getFFIDAuthorizationError = getFFIDAuthorizationError;
 exports.handleRedirectCallback = handleRedirectCallback;
 exports.hasAccessFromUserinfo = hasAccessFromUserinfo;
 exports.hashCanonicalJson = hashCanonicalJson;
 exports.isBlockedFromUserinfo = isBlockedFromUserinfo;
 exports.isFFIDInquiryAcquisitionSource = isFFIDInquiryAcquisitionSource;
 exports.isFFIDInquiryCategorySite2026 = isFFIDInquiryCategorySite2026;
+exports.isFFIDOAuthDenialReason = isFFIDOAuthDenialReason;
 exports.normalizeRedirectUri = normalizeRedirectUri;
 exports.readAgencyInviteCookie = readAgencyInviteCookie;
 exports.readAgencyInviteToken = readAgencyInviteToken;

package/dist/components/index.cjs

@@ -1,34 +1,34 @@
 'use strict';
 
-var chunk2LU2F3F2_cjs = require('../chunk-2LU2F3F2.cjs');
+var chunkVR3QR64A_cjs = require('../chunk-VR3QR64A.cjs');
 
 
 
 Object.defineProperty(exports, "FFIDAnnouncementBadge", {
   enumerable: true,
-  get: function () { return chunk2LU2F3F2_cjs.FFIDAnnouncementBadge; }
+  get: function () { return chunkVR3QR64A_cjs.FFIDAnnouncementBadge; }
 });
 Object.defineProperty(exports, "FFIDAnnouncementList", {
   enumerable: true,
-  get: function () { return chunk2LU2F3F2_cjs.FFIDAnnouncementList; }
+  get: function () { return chunkVR3QR64A_cjs.FFIDAnnouncementList; }
 });
 Object.defineProperty(exports, "FFIDInquiryForm", {
   enumerable: true,
-  get: function () { return chunk2LU2F3F2_cjs.FFIDInquiryForm; }
+  get: function () { return chunkVR3QR64A_cjs.FFIDInquiryForm; }
 });
 Object.defineProperty(exports, "FFIDLoginButton", {
   enumerable: true,
-  get: function () { return chunk2LU2F3F2_cjs.FFIDLoginButton; }
+  get: function () { return chunkVR3QR64A_cjs.FFIDLoginButton; }
 });
 Object.defineProperty(exports, "FFIDOrganizationSwitcher", {
   enumerable: true,
-  get: function () { return chunk2LU2F3F2_cjs.FFIDOrganizationSwitcher; }
+  get: function () { return chunkVR3QR64A_cjs.FFIDOrganizationSwitcher; }
 });
 Object.defineProperty(exports, "FFIDSubscriptionBadge", {
   enumerable: true,
-  get: function () { return chunk2LU2F3F2_cjs.FFIDSubscriptionBadge; }
+  get: function () { return chunkVR3QR64A_cjs.FFIDSubscriptionBadge; }
 });
 Object.defineProperty(exports, "FFIDUserMenu", {
   enumerable: true,
-  get: function () { return chunk2LU2F3F2_cjs.FFIDUserMenu; }
+  get: function () { return chunkVR3QR64A_cjs.FFIDUserMenu; }
 });

package/dist/components/index.d.cts

@@ -1,3 +1,3 @@
-export { a8 as FFIDAnnouncementBadge, bk as FFIDAnnouncementBadgeClassNames, bl as FFIDAnnouncementBadgeProps, a9 as FFIDAnnouncementList, bm as FFIDAnnouncementListClassNames, bn as FFIDAnnouncementListProps, ar as FFIDInquiryForm, as as FFIDInquiryFormCategoryItem, at as FFIDInquiryFormClassNames, au as FFIDInquiryFormLegalLayout, av as FFIDInquiryFormOrganization, aw as FFIDInquiryFormPlaceholderContext, ax as FFIDInquiryFormPrefill, ay as FFIDInquiryFormProps, az as FFIDInquiryFormSubmitData, aA as FFIDInquiryFormSubmitResult, aC as FFIDLoginButton, bo as FFIDLoginButtonProps, aE as FFIDOrganizationSwitcher, bp as FFIDOrganizationSwitcherClassNames, bq as FFIDOrganizationSwitcherProps, aS as FFIDSubscriptionBadge, br as FFIDSubscriptionBadgeClassNames, bs as FFIDSubscriptionBadgeProps, aW as FFIDUserMenu, bt as FFIDUserMenuClassNames, bu as FFIDUserMenuProps } from '../index-KjewcNn1.cjs';
+export { a8 as FFIDAnnouncementBadge, bk as FFIDAnnouncementBadgeClassNames, bl as FFIDAnnouncementBadgeProps, a9 as FFIDAnnouncementList, bm as FFIDAnnouncementListClassNames, bn as FFIDAnnouncementListProps, ar as FFIDInquiryForm, as as FFIDInquiryFormCategoryItem, at as FFIDInquiryFormClassNames, au as FFIDInquiryFormLegalLayout, av as FFIDInquiryFormOrganization, aw as FFIDInquiryFormPlaceholderContext, ax as FFIDInquiryFormPrefill, ay as FFIDInquiryFormProps, az as FFIDInquiryFormSubmitData, aA as FFIDInquiryFormSubmitResult, aC as FFIDLoginButton, bo as FFIDLoginButtonProps, aE as FFIDOrganizationSwitcher, bp as FFIDOrganizationSwitcherClassNames, bq as FFIDOrganizationSwitcherProps, aS as FFIDSubscriptionBadge, br as FFIDSubscriptionBadgeClassNames, bs as FFIDSubscriptionBadgeProps, aW as FFIDUserMenu, bt as FFIDUserMenuClassNames, bu as FFIDUserMenuProps } from '../index-BknVfXhZ.cjs';
 import 'react/jsx-runtime';
 import 'react';

package/dist/components/index.d.ts

@@ -1,3 +1,3 @@
-export { a8 as FFIDAnnouncementBadge, bk as FFIDAnnouncementBadgeClassNames, bl as FFIDAnnouncementBadgeProps, a9 as FFIDAnnouncementList, bm as FFIDAnnouncementListClassNames, bn as FFIDAnnouncementListProps, ar as FFIDInquiryForm, as as FFIDInquiryFormCategoryItem, at as FFIDInquiryFormClassNames, au as FFIDInquiryFormLegalLayout, av as FFIDInquiryFormOrganization, aw as FFIDInquiryFormPlaceholderContext, ax as FFIDInquiryFormPrefill, ay as FFIDInquiryFormProps, az as FFIDInquiryFormSubmitData, aA as FFIDInquiryFormSubmitResult, aC as FFIDLoginButton, bo as FFIDLoginButtonProps, aE as FFIDOrganizationSwitcher, bp as FFIDOrganizationSwitcherClassNames, bq as FFIDOrganizationSwitcherProps, aS as FFIDSubscriptionBadge, br as FFIDSubscriptionBadgeClassNames, bs as FFIDSubscriptionBadgeProps, aW as FFIDUserMenu, bt as FFIDUserMenuClassNames, bu as FFIDUserMenuProps } from '../index-KjewcNn1.js';
+export { a8 as FFIDAnnouncementBadge, bk as FFIDAnnouncementBadgeClassNames, bl as FFIDAnnouncementBadgeProps, a9 as FFIDAnnouncementList, bm as FFIDAnnouncementListClassNames, bn as FFIDAnnouncementListProps, ar as FFIDInquiryForm, as as FFIDInquiryFormCategoryItem, at as FFIDInquiryFormClassNames, au as FFIDInquiryFormLegalLayout, av as FFIDInquiryFormOrganization, aw as FFIDInquiryFormPlaceholderContext, ax as FFIDInquiryFormPrefill, ay as FFIDInquiryFormProps, az as FFIDInquiryFormSubmitData, aA as FFIDInquiryFormSubmitResult, aC as FFIDLoginButton, bo as FFIDLoginButtonProps, aE as FFIDOrganizationSwitcher, bp as FFIDOrganizationSwitcherClassNames, bq as FFIDOrganizationSwitcherProps, aS as FFIDSubscriptionBadge, br as FFIDSubscriptionBadgeClassNames, bs as FFIDSubscriptionBadgeProps, aW as FFIDUserMenu, bt as FFIDUserMenuClassNames, bu as FFIDUserMenuProps } from '../index-BknVfXhZ.js';
 import 'react/jsx-runtime';
 import 'react';

package/dist/components/index.js

@@ -1 +1 @@
-export { FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDSubscriptionBadge, FFIDUserMenu } from '../chunk-OXW6QSTO.js';
+export { FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDSubscriptionBadge, FFIDUserMenu } from '../chunk-QORWLPWG.js';

package/dist/{ffid-client-5uxXRgIO.d.ts → ffid-client-By_vcKYu.d.ts}

@@ -961,12 +961,19 @@ interface FFIDBuyCreditsUrlParams {
 type FFIDSubscriptionStatus = 'trialing' | 'active' | 'past_due' | 'canceled' | 'pending_invoice' | 'paused' | 'incomplete' | 'incomplete_expired' | 'unpaid';
 interface FFIDSubscriptionCheckResponse {
     hasActiveSubscription: boolean;
+    /**
+     * Active seat for the requested user; null for organization-only checks.
+     * Older servers omit this field. User access requires hasAccess AND
+     * seatAssigned === true; an omitted/null value is not proof of a seat.
+     */
+    seatAssigned?: boolean | null;
     /**
      * Canonical access decision returned by FFID's `/subscriptions/ext/check`.
      *
      * This is the server-side source of truth for service gates. Consumers
      * should not recompute access from `currentPeriodEnd`, `past_due_since`, or
      * local payment timestamps.
+     * This is contract access; user access also requires seatAssigned === true.
      */
     hasAccess?: boolean;
     /** True when `effectiveStatus === 'past_due_grace'`. */
@@ -996,9 +1003,11 @@ interface FFIDSubscriptionCheckResponse {
      */
     pricingModel?: FFIDPricingModel | null;
     /**
-     * Credit balance summary — flat plans only (10.0.0). `null` for per_seat, for no
-     * subscription, **and** when FFID could not read the ledger, so `null` does not
-     * mean "not flat" (use `pricingModel`). Never affects `hasAccess`.
+     * Credit balance summary — paid flat plans only (10.0.0). `null` for per_seat, for a
+     * `free` plan (flat on the unified ladder since #6547, but outside credits — consume /
+     * balance return 409 `CREDITS_NOT_APPLICABLE`), for no subscription, **and** when FFID
+     * could not read the ledger, so `null` does not mean "not flat" (use `pricingModel`).
+     * Never affects `hasAccess`.
      */
     credits?: FFIDSubscriptionCheckCredits | null;
     /**
@@ -1014,7 +1023,8 @@ type FFIDServiceAccessFailPolicy = 'failClosed';
  *
  * `member_limit_reached` (10.0.0) is FFID's denial reason when a flat plan's member
  * limit is full and the user has no seat. It reaches you through OAuth
- * (`denial_reason` on authorize / userinfo / introspect); `checkServiceAccess()`
+ * (`denial_reason` on the authorize redirect / userinfo 403; see
+ * `FFIDOAuthDenialReason` for that vocabulary); `checkServiceAccess()`
  * derives its decision from `effectiveStatus` and never returns it, because a full
  * member limit does not change `hasAccess` (CREDITS_API §1-5). It is in this union so
  * one exhaustive `switch` over denial reasons covers both paths.
@@ -1044,7 +1054,10 @@ interface FFIDServiceAccessError {
     details?: unknown;
 }
 interface FFIDServiceAccessDecision {
+    /** Contract access; user access also requires seatAssigned === true. */
     hasAccess: boolean;
+    /** User's active seat, passed through when returned. Gate user access with === true. */
+    seatAssigned?: boolean | null;
     effectiveStatus: EffectiveSubscriptionStatus | null;
     isGrace: boolean;
     isBlocked: boolean;
@@ -1209,9 +1222,18 @@ interface FFIDAddMemberRequest {
 interface FFIDAddMemberParams extends FFIDAddMemberRequest {
     organizationId: string;
 }
+/** Seat assignment outcome after membership creation; membership exists in every case. */
+type FFIDMemberSeatAssignmentResult = 'assigned' | 'not_applicable' | 'member_limit_reached' | 'failed';
 /** Response from addMember (ext) */
 interface FFIDAddMemberResponse {
     member: FFIDOrganizationMember;
+    /**
+     * Membership creation can succeed even when seat assignment fails.
+     * Omitted by older servers. `not_applicable`/undefined do not prove an active seat.
+     * Check the authenticated user's hasAccess and seatAssigned before granting access;
+     * do not automatically restore a removed seat on a duplicate-member retry.
+     */
+    seatAssignment?: FFIDMemberSeatAssignmentResult;
 }
 /** Response from updateMemberRole (ext) */
 interface FFIDUpdateMemberRoleResponse {
@@ -2430,11 +2452,10 @@ interface FFIDConfig {
      */
     cache?: FFIDCacheConfig | undefined;
     /**
-     * Request timeout in milliseconds for FFID API calls. Applies to server-side
-     * token verification / introspection and, in `token` mode, to the client-side
-     * OAuth operations (code exchange / refresh / revoke) — including via the
-     * `FFIDProvider` `timeout` prop (#4260). On timeout the fetch is aborted and
-     * surfaced through the normal error path (e.g. `NETWORK_ERROR`).
+     * Per-HTTP timeout (ms): shared JSON APIs (e.g. checkSubscription/getProfile),
+     * token verification/introspection, token OAuth exchange/refresh/revoke; also FFIDProvider.timeout.
+     * Shared JSON includes body and preserves signals; refresh/retry have separate deadlines.
+     * Excludes token getSession, cookie signOut, public/newsletter/inquiry; not a method deadline.
      * @default undefined (no timeout, uses fetch default)
      */
     timeout?: number | undefined;
@@ -2800,6 +2821,7 @@ declare function createFFIDClient(config: FFIDConfig): {
         organizationId: string;
         email: string;
         role?: FFIDAssignableMemberRole;
+        inviterUserId?: string;
     }) => Promise<FFIDApiResponse<FFIDInviteMemberResponse>>;
     leaveOrganization: (params: FFIDLeaveOrganizationParams) => Promise<FFIDApiResponse<FFIDLeaveOrganizationResponse>>;
     getAnalyticsConfig: (serviceCode: string, options?: FFIDProfileCallOptions) => Promise<FFIDApiResponse<FFIDAnalyticsConfig>>;
@@ -2886,4 +2908,4 @@ declare function createFFIDClient(config: FFIDConfig): {
 /** Type of the FFID client */
 type FFIDClient = ReturnType<typeof createFFIDClient>;
 
-export { type FFIDProvisionedOrganization as $, type FFIDOrganization as A, type FFIDOrganizationLogoUploadResponse as B, type FFIDOrganizationMember as C, type FFIDOrganizationProfile as D, type FFIDOrganizationProfileErrorCode as E, type FFIDLogger as F, type FFIDOrganizationProfileResponse as G, type FFIDOtpSendResponse as H, type FFIDOtpVerifyResponse as I, type FFIDPasswordResetConfirmResponse as J, type FFIDPasswordResetResponse as K, type FFIDPasswordResetVerifyResponse as L, type FFIDProfileCallOptions as M, type FFIDProvisionMemberPlan as N, type FFIDProvisionMemberPlanStatus as O, type FFIDProvisionMemberResult as P, type FFIDProvisionMemberStatus as Q, type FFIDProvisionOrganizationDryRun as R, type FFIDProvisionOrganizationMemberInput as S, type FFIDProvisionOrganizationOutcome as T, type FFIDProvisionOrganizationParams as U, type FFIDProvisionOrganizationResponse as V, type FFIDProvisionUserDryRun as W, type FFIDProvisionUserOutcome as X, type FFIDProvisionUserParams as Y, type FFIDProvisionUserProfileInput as Z, type FFIDProvisionUserResponse as _, type FFIDError as a, type FFIDProvisionedUser as a0, type FFIDPublishedPlan as a1, type FFIDRemoveMemberResponse as a2, type FFIDResetSessionResponse as a3, type FFIDSubscription as a4, type FFIDUpdateMemberRoleResponse as a5, type FFIDUpdateUserProfileRequest as a6, type FFIDUploadOrganizationLogoParams as a7, type FFIDUpsertOrganizationProfileParams as a8, type FFIDUpsertOrganizationProfileRequest as a9, type FFIDUser as aa, type FFIDUserProfile as ab, FFID_ALLOWED_ORGANIZATION_LOGO_MIME_TYPES as ac, FFID_CATALOG_ENVIRONMENTS as ad, FFID_CATALOG_PUBLICATION_STATUSES as ae, FFID_COMPANY_SIZE_CODES as af, FFID_INDUSTRY_CODES as ag, FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_BYTES as ah, FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_MB as ai, FFID_ORGANIZATION_PROFILE_ERROR_CODES as aj, type TokenData as ak, type TokenStore as al, createFFIDClient as am, createTokenStore as an, type FFIDCacheAdapter as b, type FFIDVerifyAccessTokenOptions as c, type FFIDApiResponse as d, type FFIDOAuthUserInfo as e, type FFIDCatalogEnvironment as f, type FFIDBillingInterval as g, type FFIDTaxBehavior as h, type FFIDPublishedCatalog as i, type FFIDAddMemberParams as j, type FFIDAddMemberRequest as k, type FFIDAddMemberResponse as l, type FFIDAllowedLogoMimeType as m, type FFIDAssignableMemberRole as n, type FFIDCacheConfig as o, type FFIDCatalogPublication as p, type FFIDCatalogPublicationStatus as q, type FFIDClient as r, type FFIDCompanySizeCode as s, type FFIDConfig as t, type FFIDIndustryCode as u, type FFIDListMembersResponse as v, type FFIDListingConsentInput as w, type FFIDLogoWallEntry as x, type FFIDLogoWallResponse as y, type FFIDMemberRole as z };
+export { type FFIDProvisionUserResponse as $, type FFIDMemberSeatAssignmentResult as A, type FFIDOrganization as B, type FFIDOrganizationLogoUploadResponse as C, type FFIDOrganizationMember as D, type FFIDOrganizationProfile as E, type FFIDError as F, type FFIDOrganizationProfileErrorCode as G, type FFIDOrganizationProfileResponse as H, type FFIDOtpSendResponse as I, type FFIDOtpVerifyResponse as J, type FFIDPasswordResetConfirmResponse as K, type FFIDPasswordResetResponse as L, type FFIDPasswordResetVerifyResponse as M, type FFIDProfileCallOptions as N, type FFIDProvisionMemberPlan as O, type FFIDProvisionMemberPlanStatus as P, type FFIDProvisionMemberResult as Q, type FFIDProvisionMemberStatus as R, type FFIDProvisionOrganizationDryRun as S, type FFIDProvisionOrganizationMemberInput as T, type FFIDProvisionOrganizationOutcome as U, type FFIDProvisionOrganizationParams as V, type FFIDProvisionOrganizationResponse as W, type FFIDProvisionUserDryRun as X, type FFIDProvisionUserOutcome as Y, type FFIDProvisionUserParams as Z, type FFIDProvisionUserProfileInput as _, type FFIDLogger as a, type FFIDProvisionedOrganization as a0, type FFIDProvisionedUser as a1, type FFIDPublishedPlan as a2, type FFIDRemoveMemberResponse as a3, type FFIDResetSessionResponse as a4, type FFIDSubscription as a5, type FFIDUpdateMemberRoleResponse as a6, type FFIDUpdateUserProfileRequest as a7, type FFIDUploadOrganizationLogoParams as a8, type FFIDUpsertOrganizationProfileParams as a9, type FFIDUpsertOrganizationProfileRequest as aa, type FFIDUser as ab, type FFIDUserProfile as ac, FFID_ALLOWED_ORGANIZATION_LOGO_MIME_TYPES as ad, FFID_CATALOG_ENVIRONMENTS as ae, FFID_CATALOG_PUBLICATION_STATUSES as af, FFID_COMPANY_SIZE_CODES as ag, FFID_INDUSTRY_CODES as ah, FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_BYTES as ai, FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_MB as aj, FFID_ORGANIZATION_PROFILE_ERROR_CODES as ak, type TokenData as al, type TokenStore as am, createFFIDClient as an, createTokenStore as ao, type FFIDCacheAdapter as b, type FFIDVerifyAccessTokenOptions as c, type FFIDApiResponse as d, type FFIDOAuthUserInfo as e, type FFIDCatalogEnvironment as f, type FFIDBillingInterval as g, type FFIDTaxBehavior as h, type FFIDPublishedCatalog as i, type FFIDAddMemberParams as j, type FFIDAddMemberRequest as k, type FFIDAddMemberResponse as l, type FFIDAllowedLogoMimeType as m, type FFIDAssignableMemberRole as n, type FFIDCacheConfig as o, type FFIDCatalogPublication as p, type FFIDCatalogPublicationStatus as q, type FFIDClient as r, type FFIDCompanySizeCode as s, type FFIDConfig as t, type FFIDIndustryCode as u, type FFIDListMembersResponse as v, type FFIDListingConsentInput as w, type FFIDLogoWallEntry as x, type FFIDLogoWallResponse as y, type FFIDMemberRole as z };