@feelflow/ffid-sdk 10.0.0 → 11.0.0

package/dist/{ffid-client-CumygXXz.d.cts → ffid-client-C3A8L9uW.d.cts}

@@ -961,12 +961,19 @@ interface FFIDBuyCreditsUrlParams {
 type FFIDSubscriptionStatus = 'trialing' | 'active' | 'past_due' | 'canceled' | 'pending_invoice' | 'paused' | 'incomplete' | 'incomplete_expired' | 'unpaid';
 interface FFIDSubscriptionCheckResponse {
     hasActiveSubscription: boolean;
+    /**
+     * Active seat for the requested user; null for organization-only checks.
+     * Older servers omit this field. User access requires hasAccess AND
+     * seatAssigned === true; an omitted/null value is not proof of a seat.
+     */
+    seatAssigned?: boolean | null;
     /**
      * Canonical access decision returned by FFID's `/subscriptions/ext/check`.
      *
      * This is the server-side source of truth for service gates. Consumers
      * should not recompute access from `currentPeriodEnd`, `past_due_since`, or
      * local payment timestamps.
+     * This is contract access; user access also requires seatAssigned === true.
      */
     hasAccess?: boolean;
     /** True when `effectiveStatus === 'past_due_grace'`. */
@@ -996,9 +1003,11 @@ interface FFIDSubscriptionCheckResponse {
      */
     pricingModel?: FFIDPricingModel | null;
     /**
-     * Credit balance summary — flat plans only (10.0.0). `null` for per_seat, for no
-     * subscription, **and** when FFID could not read the ledger, so `null` does not
-     * mean "not flat" (use `pricingModel`). Never affects `hasAccess`.
+     * Credit balance summary — paid flat plans only (10.0.0). `null` for per_seat, for a
+     * `free` plan (flat on the unified ladder since #6547, but outside credits — consume /
+     * balance return 409 `CREDITS_NOT_APPLICABLE`), for no subscription, **and** when FFID
+     * could not read the ledger, so `null` does not mean "not flat" (use `pricingModel`).
+     * Never affects `hasAccess`.
      */
     credits?: FFIDSubscriptionCheckCredits | null;
     /**
@@ -1014,7 +1023,8 @@ type FFIDServiceAccessFailPolicy = 'failClosed';
  *
  * `member_limit_reached` (10.0.0) is FFID's denial reason when a flat plan's member
  * limit is full and the user has no seat. It reaches you through OAuth
- * (`denial_reason` on authorize / userinfo / introspect); `checkServiceAccess()`
+ * (`denial_reason` on the authorize redirect / userinfo 403; see
+ * `FFIDOAuthDenialReason` for that vocabulary); `checkServiceAccess()`
  * derives its decision from `effectiveStatus` and never returns it, because a full
  * member limit does not change `hasAccess` (CREDITS_API §1-5). It is in this union so
  * one exhaustive `switch` over denial reasons covers both paths.
@@ -1044,7 +1054,10 @@ interface FFIDServiceAccessError {
     details?: unknown;
 }
 interface FFIDServiceAccessDecision {
+    /** Contract access; user access also requires seatAssigned === true. */
     hasAccess: boolean;
+    /** User's active seat, passed through when returned. Gate user access with === true. */
+    seatAssigned?: boolean | null;
     effectiveStatus: EffectiveSubscriptionStatus | null;
     isGrace: boolean;
     isBlocked: boolean;
@@ -1209,9 +1222,18 @@ interface FFIDAddMemberRequest {
 interface FFIDAddMemberParams extends FFIDAddMemberRequest {
     organizationId: string;
 }
+/** Seat assignment outcome after membership creation; membership exists in every case. */
+type FFIDMemberSeatAssignmentResult = 'assigned' | 'not_applicable' | 'member_limit_reached' | 'failed';
 /** Response from addMember (ext) */
 interface FFIDAddMemberResponse {
     member: FFIDOrganizationMember;
+    /**
+     * Membership creation can succeed even when seat assignment fails.
+     * Omitted by older servers. `not_applicable`/undefined do not prove an active seat.
+     * Check the authenticated user's hasAccess and seatAssigned before granting access;
+     * do not automatically restore a removed seat on a duplicate-member retry.
+     */
+    seatAssignment?: FFIDMemberSeatAssignmentResult;
 }
 /** Response from updateMemberRole (ext) */
 interface FFIDUpdateMemberRoleResponse {
@@ -2430,11 +2452,10 @@ interface FFIDConfig {
      */
     cache?: FFIDCacheConfig | undefined;
     /**
-     * Request timeout in milliseconds for FFID API calls. Applies to server-side
-     * token verification / introspection and, in `token` mode, to the client-side
-     * OAuth operations (code exchange / refresh / revoke) — including via the
-     * `FFIDProvider` `timeout` prop (#4260). On timeout the fetch is aborted and
-     * surfaced through the normal error path (e.g. `NETWORK_ERROR`).
+     * Per-HTTP timeout (ms): shared JSON APIs (e.g. checkSubscription/getProfile),
+     * token verification/introspection, token OAuth exchange/refresh/revoke; also FFIDProvider.timeout.
+     * Shared JSON includes body and preserves signals; refresh/retry have separate deadlines.
+     * Excludes token getSession, cookie signOut, public/newsletter/inquiry; not a method deadline.
      * @default undefined (no timeout, uses fetch default)
      */
     timeout?: number | undefined;
@@ -2800,6 +2821,7 @@ declare function createFFIDClient(config: FFIDConfig): {
         organizationId: string;
         email: string;
         role?: FFIDAssignableMemberRole;
+        inviterUserId?: string;
     }) => Promise<FFIDApiResponse<FFIDInviteMemberResponse>>;
     leaveOrganization: (params: FFIDLeaveOrganizationParams) => Promise<FFIDApiResponse<FFIDLeaveOrganizationResponse>>;
     getAnalyticsConfig: (serviceCode: string, options?: FFIDProfileCallOptions) => Promise<FFIDApiResponse<FFIDAnalyticsConfig>>;
@@ -2886,4 +2908,4 @@ declare function createFFIDClient(config: FFIDConfig): {
 /** Type of the FFID client */
 type FFIDClient = ReturnType<typeof createFFIDClient>;
 
-export { type FFIDProvisionedOrganization as $, type FFIDOrganization as A, type FFIDOrganizationLogoUploadResponse as B, type FFIDOrganizationMember as C, type FFIDOrganizationProfile as D, type FFIDOrganizationProfileErrorCode as E, type FFIDLogger as F, type FFIDOrganizationProfileResponse as G, type FFIDOtpSendResponse as H, type FFIDOtpVerifyResponse as I, type FFIDPasswordResetConfirmResponse as J, type FFIDPasswordResetResponse as K, type FFIDPasswordResetVerifyResponse as L, type FFIDProfileCallOptions as M, type FFIDProvisionMemberPlan as N, type FFIDProvisionMemberPlanStatus as O, type FFIDProvisionMemberResult as P, type FFIDProvisionMemberStatus as Q, type FFIDProvisionOrganizationDryRun as R, type FFIDProvisionOrganizationMemberInput as S, type FFIDProvisionOrganizationOutcome as T, type FFIDProvisionOrganizationParams as U, type FFIDProvisionOrganizationResponse as V, type FFIDProvisionUserDryRun as W, type FFIDProvisionUserOutcome as X, type FFIDProvisionUserParams as Y, type FFIDProvisionUserProfileInput as Z, type FFIDProvisionUserResponse as _, type FFIDError as a, type FFIDProvisionedUser as a0, type FFIDPublishedPlan as a1, type FFIDRemoveMemberResponse as a2, type FFIDResetSessionResponse as a3, type FFIDSubscription as a4, type FFIDUpdateMemberRoleResponse as a5, type FFIDUpdateUserProfileRequest as a6, type FFIDUploadOrganizationLogoParams as a7, type FFIDUpsertOrganizationProfileParams as a8, type FFIDUpsertOrganizationProfileRequest as a9, type FFIDUser as aa, type FFIDUserProfile as ab, FFID_ALLOWED_ORGANIZATION_LOGO_MIME_TYPES as ac, FFID_CATALOG_ENVIRONMENTS as ad, FFID_CATALOG_PUBLICATION_STATUSES as ae, FFID_COMPANY_SIZE_CODES as af, FFID_INDUSTRY_CODES as ag, FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_BYTES as ah, FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_MB as ai, FFID_ORGANIZATION_PROFILE_ERROR_CODES as aj, type TokenData as ak, type TokenStore as al, createFFIDClient as am, createTokenStore as an, type FFIDCacheAdapter as b, type FFIDVerifyAccessTokenOptions as c, type FFIDApiResponse as d, type FFIDOAuthUserInfo as e, type FFIDCatalogEnvironment as f, type FFIDBillingInterval as g, type FFIDTaxBehavior as h, type FFIDPublishedCatalog as i, type FFIDAddMemberParams as j, type FFIDAddMemberRequest as k, type FFIDAddMemberResponse as l, type FFIDAllowedLogoMimeType as m, type FFIDAssignableMemberRole as n, type FFIDCacheConfig as o, type FFIDCatalogPublication as p, type FFIDCatalogPublicationStatus as q, type FFIDClient as r, type FFIDCompanySizeCode as s, type FFIDConfig as t, type FFIDIndustryCode as u, type FFIDListMembersResponse as v, type FFIDListingConsentInput as w, type FFIDLogoWallEntry as x, type FFIDLogoWallResponse as y, type FFIDMemberRole as z };
+export { type FFIDProvisionUserResponse as $, type FFIDMemberSeatAssignmentResult as A, type FFIDOrganization as B, type FFIDOrganizationLogoUploadResponse as C, type FFIDOrganizationMember as D, type FFIDOrganizationProfile as E, type FFIDError as F, type FFIDOrganizationProfileErrorCode as G, type FFIDOrganizationProfileResponse as H, type FFIDOtpSendResponse as I, type FFIDOtpVerifyResponse as J, type FFIDPasswordResetConfirmResponse as K, type FFIDPasswordResetResponse as L, type FFIDPasswordResetVerifyResponse as M, type FFIDProfileCallOptions as N, type FFIDProvisionMemberPlan as O, type FFIDProvisionMemberPlanStatus as P, type FFIDProvisionMemberResult as Q, type FFIDProvisionMemberStatus as R, type FFIDProvisionOrganizationDryRun as S, type FFIDProvisionOrganizationMemberInput as T, type FFIDProvisionOrganizationOutcome as U, type FFIDProvisionOrganizationParams as V, type FFIDProvisionOrganizationResponse as W, type FFIDProvisionUserDryRun as X, type FFIDProvisionUserOutcome as Y, type FFIDProvisionUserParams as Z, type FFIDProvisionUserProfileInput as _, type FFIDLogger as a, type FFIDProvisionedOrganization as a0, type FFIDProvisionedUser as a1, type FFIDPublishedPlan as a2, type FFIDRemoveMemberResponse as a3, type FFIDResetSessionResponse as a4, type FFIDSubscription as a5, type FFIDUpdateMemberRoleResponse as a6, type FFIDUpdateUserProfileRequest as a7, type FFIDUploadOrganizationLogoParams as a8, type FFIDUpsertOrganizationProfileParams as a9, type FFIDUpsertOrganizationProfileRequest as aa, type FFIDUser as ab, type FFIDUserProfile as ac, FFID_ALLOWED_ORGANIZATION_LOGO_MIME_TYPES as ad, FFID_CATALOG_ENVIRONMENTS as ae, FFID_CATALOG_PUBLICATION_STATUSES as af, FFID_COMPANY_SIZE_CODES as ag, FFID_INDUSTRY_CODES as ah, FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_BYTES as ai, FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_MB as aj, FFID_ORGANIZATION_PROFILE_ERROR_CODES as ak, type TokenData as al, type TokenStore as am, createFFIDClient as an, createTokenStore as ao, type FFIDCacheAdapter as b, type FFIDVerifyAccessTokenOptions as c, type FFIDApiResponse as d, type FFIDOAuthUserInfo as e, type FFIDCatalogEnvironment as f, type FFIDBillingInterval as g, type FFIDTaxBehavior as h, type FFIDPublishedCatalog as i, type FFIDAddMemberParams as j, type FFIDAddMemberRequest as k, type FFIDAddMemberResponse as l, type FFIDAllowedLogoMimeType as m, type FFIDAssignableMemberRole as n, type FFIDCacheConfig as o, type FFIDCatalogPublication as p, type FFIDCatalogPublicationStatus as q, type FFIDClient as r, type FFIDCompanySizeCode as s, type FFIDConfig as t, type FFIDIndustryCode as u, type FFIDListMembersResponse as v, type FFIDListingConsentInput as w, type FFIDLogoWallEntry as x, type FFIDLogoWallResponse as y, type FFIDMemberRole as z };

package/dist/{index-KjewcNn1.d.cts → index-BknVfXhZ.d.cts}

@@ -909,12 +909,19 @@ interface FFIDBuyCreditsUrlParams {
 type FFIDSubscriptionStatus = 'trialing' | 'active' | 'past_due' | 'canceled' | 'pending_invoice' | 'paused' | 'incomplete' | 'incomplete_expired' | 'unpaid';
 interface FFIDSubscriptionCheckResponse {
     hasActiveSubscription: boolean;
+    /**
+     * Active seat for the requested user; null for organization-only checks.
+     * Older servers omit this field. User access requires hasAccess AND
+     * seatAssigned === true; an omitted/null value is not proof of a seat.
+     */
+    seatAssigned?: boolean | null;
     /**
      * Canonical access decision returned by FFID's `/subscriptions/ext/check`.
      *
      * This is the server-side source of truth for service gates. Consumers
      * should not recompute access from `currentPeriodEnd`, `past_due_since`, or
      * local payment timestamps.
+     * This is contract access; user access also requires seatAssigned === true.
      */
     hasAccess?: boolean;
     /** True when `effectiveStatus === 'past_due_grace'`. */
@@ -944,9 +951,11 @@ interface FFIDSubscriptionCheckResponse {
      */
     pricingModel?: FFIDPricingModel | null;
     /**
-     * Credit balance summary — flat plans only (10.0.0). `null` for per_seat, for no
-     * subscription, **and** when FFID could not read the ledger, so `null` does not
-     * mean "not flat" (use `pricingModel`). Never affects `hasAccess`.
+     * Credit balance summary — paid flat plans only (10.0.0). `null` for per_seat, for a
+     * `free` plan (flat on the unified ladder since #6547, but outside credits — consume /
+     * balance return 409 `CREDITS_NOT_APPLICABLE`), for no subscription, **and** when FFID
+     * could not read the ledger, so `null` does not mean "not flat" (use `pricingModel`).
+     * Never affects `hasAccess`.
      */
     credits?: FFIDSubscriptionCheckCredits | null;
     /**
@@ -962,7 +971,8 @@ type FFIDServiceAccessFailPolicy = 'failClosed';
  *
  * `member_limit_reached` (10.0.0) is FFID's denial reason when a flat plan's member
  * limit is full and the user has no seat. It reaches you through OAuth
- * (`denial_reason` on authorize / userinfo / introspect); `checkServiceAccess()`
+ * (`denial_reason` on the authorize redirect / userinfo 403; see
+ * `FFIDOAuthDenialReason` for that vocabulary); `checkServiceAccess()`
  * derives its decision from `effectiveStatus` and never returns it, because a full
  * member limit does not change `hasAccess` (CREDITS_API §1-5). It is in this union so
  * one exhaustive `switch` over denial reasons covers both paths.
@@ -992,7 +1002,10 @@ interface FFIDServiceAccessError {
     details?: unknown;
 }
 interface FFIDServiceAccessDecision {
+    /** Contract access; user access also requires seatAssigned === true. */
     hasAccess: boolean;
+    /** User's active seat, passed through when returned. Gate user access with === true. */
+    seatAssigned?: boolean | null;
     effectiveStatus: EffectiveSubscriptionStatus | null;
     isGrace: boolean;
     isBlocked: boolean;
@@ -1350,11 +1363,10 @@ interface FFIDConfig {
      */
     cache?: FFIDCacheConfig | undefined;
     /**
-     * Request timeout in milliseconds for FFID API calls. Applies to server-side
-     * token verification / introspection and, in `token` mode, to the client-side
-     * OAuth operations (code exchange / refresh / revoke) — including via the
-     * `FFIDProvider` `timeout` prop (#4260). On timeout the fetch is aborted and
-     * surfaced through the normal error path (e.g. `NETWORK_ERROR`).
+     * Per-HTTP timeout (ms): shared JSON APIs (e.g. checkSubscription/getProfile),
+     * token verification/introspection, token OAuth exchange/refresh/revoke; also FFIDProvider.timeout.
+     * Shared JSON includes body and preserves signals; refresh/retry have separate deadlines.
+     * Excludes token getSession, cookie signOut, public/newsletter/inquiry; not a method deadline.
      * @default undefined (no timeout, uses fetch default)
      */
     timeout?: number | undefined;

package/dist/{index-KjewcNn1.d.ts → index-BknVfXhZ.d.ts}

@@ -909,12 +909,19 @@ interface FFIDBuyCreditsUrlParams {
 type FFIDSubscriptionStatus = 'trialing' | 'active' | 'past_due' | 'canceled' | 'pending_invoice' | 'paused' | 'incomplete' | 'incomplete_expired' | 'unpaid';
 interface FFIDSubscriptionCheckResponse {
     hasActiveSubscription: boolean;
+    /**
+     * Active seat for the requested user; null for organization-only checks.
+     * Older servers omit this field. User access requires hasAccess AND
+     * seatAssigned === true; an omitted/null value is not proof of a seat.
+     */
+    seatAssigned?: boolean | null;
     /**
      * Canonical access decision returned by FFID's `/subscriptions/ext/check`.
      *
      * This is the server-side source of truth for service gates. Consumers
      * should not recompute access from `currentPeriodEnd`, `past_due_since`, or
      * local payment timestamps.
+     * This is contract access; user access also requires seatAssigned === true.
      */
     hasAccess?: boolean;
     /** True when `effectiveStatus === 'past_due_grace'`. */
@@ -944,9 +951,11 @@ interface FFIDSubscriptionCheckResponse {
      */
     pricingModel?: FFIDPricingModel | null;
     /**
-     * Credit balance summary — flat plans only (10.0.0). `null` for per_seat, for no
-     * subscription, **and** when FFID could not read the ledger, so `null` does not
-     * mean "not flat" (use `pricingModel`). Never affects `hasAccess`.
+     * Credit balance summary — paid flat plans only (10.0.0). `null` for per_seat, for a
+     * `free` plan (flat on the unified ladder since #6547, but outside credits — consume /
+     * balance return 409 `CREDITS_NOT_APPLICABLE`), for no subscription, **and** when FFID
+     * could not read the ledger, so `null` does not mean "not flat" (use `pricingModel`).
+     * Never affects `hasAccess`.
      */
     credits?: FFIDSubscriptionCheckCredits | null;
     /**
@@ -962,7 +971,8 @@ type FFIDServiceAccessFailPolicy = 'failClosed';
  *
  * `member_limit_reached` (10.0.0) is FFID's denial reason when a flat plan's member
  * limit is full and the user has no seat. It reaches you through OAuth
- * (`denial_reason` on authorize / userinfo / introspect); `checkServiceAccess()`
+ * (`denial_reason` on the authorize redirect / userinfo 403; see
+ * `FFIDOAuthDenialReason` for that vocabulary); `checkServiceAccess()`
  * derives its decision from `effectiveStatus` and never returns it, because a full
  * member limit does not change `hasAccess` (CREDITS_API §1-5). It is in this union so
  * one exhaustive `switch` over denial reasons covers both paths.
@@ -992,7 +1002,10 @@ interface FFIDServiceAccessError {
     details?: unknown;
 }
 interface FFIDServiceAccessDecision {
+    /** Contract access; user access also requires seatAssigned === true. */
     hasAccess: boolean;
+    /** User's active seat, passed through when returned. Gate user access with === true. */
+    seatAssigned?: boolean | null;
     effectiveStatus: EffectiveSubscriptionStatus | null;
     isGrace: boolean;
     isBlocked: boolean;
@@ -1350,11 +1363,10 @@ interface FFIDConfig {
      */
     cache?: FFIDCacheConfig | undefined;
     /**
-     * Request timeout in milliseconds for FFID API calls. Applies to server-side
-     * token verification / introspection and, in `token` mode, to the client-side
-     * OAuth operations (code exchange / refresh / revoke) — including via the
-     * `FFIDProvider` `timeout` prop (#4260). On timeout the fetch is aborted and
-     * surfaced through the normal error path (e.g. `NETWORK_ERROR`).
+     * Per-HTTP timeout (ms): shared JSON APIs (e.g. checkSubscription/getProfile),
+     * token verification/introspection, token OAuth exchange/refresh/revoke; also FFIDProvider.timeout.
+     * Shared JSON includes body and preserves signals; refresh/retry have separate deadlines.
+     * Excludes token getSession, cookie signOut, public/newsletter/inquiry; not a method deadline.
      * @default undefined (no timeout, uses fetch default)
      */
     timeout?: number | undefined;