@feelflow/ffid-sdk 10.1.0 → 11.0.0

package/README.md

@@ -481,6 +481,10 @@ await ffid.updateMemberRole({
 - `addMember` は既存 FFID ユーザーを active member として追加します。招待メール送信や token 発行は行いません。
 - `role` は `admin` / `member` / `viewer` のみ指定可能です。`owner` は追加・昇格 API では扱いません。
 - agency client と同じ呼び味が必要な場合は `ffid.addMember(organizationId, { email, role })` も使えます。
+- 未登録の人を招待する（招待メールと受諾リンクを FFID が送る）ときは `inviteMember({ organizationId, email, role, inviterUserId })` を使います。`inviterUserId` は、サービスで招待を操作した人の FFID ユーザー ID です。FFID の「保留中の招待」と招待メールに、その人が招待者として出ます。
+  - service-key モードでは `inviterUserId` を渡してください。その人が対象の組織の owner / admin でなければ 403 `FORBIDDEN`（`details.reason: 'inviter_not_organization_admin'`）で、招待は作られません。省略すると従来どおり組織の owner が招待者になり、メールの招待者名は `service:<serviceCode>` です。
+  - token モードでは省略します（ログイン中の利用者が招待者になります）。別の人の ID を渡すと 400 `VALIDATION_ERROR` です。
+  - `inviterUserId` は「誰を招待者として記録するか」の指定で、招待できる範囲は増えません。FFID が確かめるのは「招待できる立場か」までなので、実際に操作した本人の ID だけを渡してください。
 
 ### Organization profile / public logo wall
 
@@ -950,6 +954,18 @@ SDK の `package.json` で `react` / `react-dom` は `optional: true` に設定
 }
 ```
 
+## サーバー側のアクセストークン検証の照会障害（SDK 11）
+
+`verifyAccessToken()` の introspect 照会（JWT検証後の `includeProfile: true` を含む）が
+HTTP429 / 5xx を返す場合は、本文のエラーコードやJSONの可否によらず
+`NETWORK_ERROR` と `details.status` を返します。SDKの診断ログにはHTTPステータスだけを
+記録し、上流本文・アクセストークンをコピーしません。自動再試行は行いません。
+
+連携先は、この照会障害を本人の認証不正と区別し、利用は拒否したうえで一時的な利用不可
+（例: HTTP503）として案内してください。HTTP200の `active: false` は引き続き
+`TOKEN_VERIFICATION_ERROR`、HTTP400 / 401 / 403の明示エラーコードは従来どおり保持します。
+このメソッドによる本人確認とは別に、契約の利用可否と本人のactiveな席を確認する必要があります。
+
 ## E2E テストモード（`@feelflow/ffid-sdk/server/test`）
 
 > **⚠️ SECURITY NOTICE** — テストモードは Bearer トークン検証を **意図的にバイパス** する仕組みです。本番環境で誤って有効化すると、登録されたバイパストークンを持つ任意のリクエストが認証通過します。

package/dist/agency/index.d.cts

@@ -124,6 +124,20 @@ interface FFIDProvisionOrganizationRequest {
     slug?: string;
     /** 請求先メールアドレス */
     billingEmail?: string;
+    /**
+     * 冪等キー（1〜255 文字の表示可能な ASCII。空白不可）。
+     *
+     * 指定すると、同じ代理店・同じキーの再送（24 時間以内）は**組織を作らずに**
+     * 初回の結果を返す。タイムアウトや `PARSE_ERROR` で応答を受け取れなかったときは、
+     * **同じキーのまま**再送すれば二重作成にならない。申込番号など、作りたい組織 1 つに
+     * 1 つ対応する値を使う。
+     *
+     * - 同じキーで内容（`name` / `ownerEmail` / `slug` / `billingEmail`）が違うと 422
+     *   `IDEMPOTENCY_KEY_REUSED`（別の組織を作るなら別のキーを使う）
+     * - 省略すると従来どおり毎回作成する
+     * - HTTP では `Idempotency-Key` ヘッダーでも渡せる（本文と両方に入れる場合は同じ値）
+     */
+    idempotencyKey?: string;
 }
 /** 案内メールの送信結果。組織作成の成否とは独立している。 */
 type FFIDWelcomeEmailOutcome = 'sent' | 'failed';
@@ -453,9 +467,17 @@ interface FFIDAgencyServerClient {
      *   そのほか:
      *   - スコープ不足 / 代理店が停止中 → `FORBIDDEN`（403）
      *   - slug が既存組織と衝突 → `ORGANIZATION_SLUG_CONFLICT`（409、組織は作成されない）
+     *   - slug が予約語（`admin` / `api` / `login` など）→ `ORGANIZATION_SLUG_RESERVED`
+     *     （400、組織は作成されない。別の値を指定する）
+     *   - `ownerEmail` の既存アカウントが停止・削除済み → `OWNER_ACCOUNT_UNAVAILABLE`
+     *     （422、**組織は作成されない**。別のメールアドレスを指定する）
      *   - 認証段階の一時障害 → `SERVICE_UNAVAILABLE`（503、**安全に再試行できる**）
      *   - `PARSE_ERROR` / `NETWORK_ERROR` — **組織が作成された可能性がある**。
-     *     再試行の前に組織一覧を確認すること（#5165 で冪等キーを導入予定）
+     *     `idempotencyKey` を付けていれば**同じキーで**再送してよい（作成済みなら
+     *     初回の結果が返り、組織は増えない。#5165）。付けていない場合は再試行の前に
+     *     組織一覧を確認すること
+     *   - 同じ `idempotencyKey` で内容が違う → `IDEMPOTENCY_KEY_REUSED`（422）
+     *   - `idempotencyKey` の形式不正 → `INVALID_IDEMPOTENCY_KEY`（400）
      */
     provisionCustomerOrganization(data: FFIDProvisionOrganizationRequest): Promise<FFIDAgencyServerClientResponse<FFIDProvisionedOrganization>>;
 }

package/dist/agency/index.d.ts

@@ -124,6 +124,20 @@ interface FFIDProvisionOrganizationRequest {
     slug?: string;
     /** 請求先メールアドレス */
     billingEmail?: string;
+    /**
+     * 冪等キー（1〜255 文字の表示可能な ASCII。空白不可）。
+     *
+     * 指定すると、同じ代理店・同じキーの再送（24 時間以内）は**組織を作らずに**
+     * 初回の結果を返す。タイムアウトや `PARSE_ERROR` で応答を受け取れなかったときは、
+     * **同じキーのまま**再送すれば二重作成にならない。申込番号など、作りたい組織 1 つに
+     * 1 つ対応する値を使う。
+     *
+     * - 同じキーで内容（`name` / `ownerEmail` / `slug` / `billingEmail`）が違うと 422
+     *   `IDEMPOTENCY_KEY_REUSED`（別の組織を作るなら別のキーを使う）
+     * - 省略すると従来どおり毎回作成する
+     * - HTTP では `Idempotency-Key` ヘッダーでも渡せる（本文と両方に入れる場合は同じ値）
+     */
+    idempotencyKey?: string;
 }
 /** 案内メールの送信結果。組織作成の成否とは独立している。 */
 type FFIDWelcomeEmailOutcome = 'sent' | 'failed';
@@ -453,9 +467,17 @@ interface FFIDAgencyServerClient {
      *   そのほか:
      *   - スコープ不足 / 代理店が停止中 → `FORBIDDEN`（403）
      *   - slug が既存組織と衝突 → `ORGANIZATION_SLUG_CONFLICT`（409、組織は作成されない）
+     *   - slug が予約語（`admin` / `api` / `login` など）→ `ORGANIZATION_SLUG_RESERVED`
+     *     （400、組織は作成されない。別の値を指定する）
+     *   - `ownerEmail` の既存アカウントが停止・削除済み → `OWNER_ACCOUNT_UNAVAILABLE`
+     *     （422、**組織は作成されない**。別のメールアドレスを指定する）
      *   - 認証段階の一時障害 → `SERVICE_UNAVAILABLE`（503、**安全に再試行できる**）
      *   - `PARSE_ERROR` / `NETWORK_ERROR` — **組織が作成された可能性がある**。
-     *     再試行の前に組織一覧を確認すること（#5165 で冪等キーを導入予定）
+     *     `idempotencyKey` を付けていれば**同じキーで**再送してよい（作成済みなら
+     *     初回の結果が返り、組織は増えない。#5165）。付けていない場合は再試行の前に
+     *     組織一覧を確認すること
+     *   - 同じ `idempotencyKey` で内容が違う → `IDEMPOTENCY_KEY_REUSED`（422）
+     *   - `idempotencyKey` の形式不正 → `INVALID_IDEMPOTENCY_KEY`（400）
      */
     provisionCustomerOrganization(data: FFIDProvisionOrganizationRequest): Promise<FFIDAgencyServerClientResponse<FFIDProvisionedOrganization>>;
 }

package/dist/{chunk-ITSQIAO5.js → chunk-QORWLPWG.js}

@@ -308,6 +308,9 @@ var OAUTH_INTROSPECT_ENDPOINT = "/api/v1/oauth/introspect";
 var CACHE_KEY_PREFIX = "ffid:introspect:";
 var HEX_BASE = 16;
 var HEX_BYTE_WIDTH = 2;
+var HTTP_TOO_MANY_REQUESTS = 429;
+var HTTP_SERVER_ERROR_MIN = 500;
+var HTTP_SERVER_ERROR_LIMIT = 600;
 function createVerifyAccessToken(deps) {
   const { authMode, baseUrl, serviceCode, serviceApiKey, verifyStrategy, logger, createError, errorCodes, cache, timeout } = deps;
   let jwtVerify2 = null;
@@ -362,6 +365,16 @@ function createVerifyAccessToken(deps) {
     }
     return verifyViaIntrospect(accessToken);
   }
+  function introspectionUnavailable(status) {
+    logger.error("Token introspection unavailable", { status });
+    return {
+      error: {
+        code: errorCodes.NETWORK_ERROR,
+        message: `\u30C8\u30FC\u30AF\u30F3\u691C\u8A3C\u30B5\u30FC\u30D3\u30B9\u304C\u4E00\u6642\u7684\u306B\u5229\u7528\u3067\u304D\u307E\u305B\u3093 (status: ${status})`,
+        details: { status }
+      }
+    };
+  }
   async function verifyViaIntrospect(accessToken, cacheKeySuffix) {
     if (!serviceApiKey) {
       return {
@@ -419,10 +432,12 @@ function createVerifyAccessToken(deps) {
         }
       };
     }
+    const upstreamUnavailable = response.status === HTTP_TOO_MANY_REQUESTS || response.status >= HTTP_SERVER_ERROR_MIN && response.status < HTTP_SERVER_ERROR_LIMIT;
     let introspectResponse;
     try {
       introspectResponse = await response.json();
     } catch (parseError) {
+      if (upstreamUnavailable) return introspectionUnavailable(response.status);
       logger.error("Parse error during token verification:", parseError);
       return {
         error: {
@@ -431,6 +446,7 @@ function createVerifyAccessToken(deps) {
         }
       };
     }
+    if (upstreamUnavailable) return introspectionUnavailable(response.status);
     if (!response.ok) {
       const errorBody = introspectResponse;
       return {
@@ -1374,7 +1390,7 @@ var FFID_ORGANIZATION_PROFILE_ERROR_CODES = {
 };
 
 // src/client/version-check.ts
-var SDK_VERSION = "10.1.0";
+var SDK_VERSION = "11.0.0";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {
@@ -1942,7 +1958,7 @@ function createInviteMethods(deps) {
     }).toString();
     return fetchWithAuth(`${EXT_INVITE_ENDPOINT}?${query}`, {
       method: "POST",
-      body: JSON.stringify({ email: params.email, role: params.role })
+      body: JSON.stringify({ email: params.email, role: params.role, inviterUserId: params.inviterUserId })
     });
   }
   return { inviteMember };
@@ -2245,6 +2261,25 @@ function createOAuthTokenMethods(deps) {
   return { exchangeCodeForTokens, refreshAccessToken, signOutToken };
 }
 
+// src/client/request-timeout.ts
+function withRequestTimeout(options, timeout) {
+  if (timeout === void 0 || options.signal?.aborted) return options;
+  const deadline = AbortSignal.timeout(timeout);
+  if (!options.signal) return { ...options, signal: deadline };
+  const callerSignal = options.signal;
+  const controller = new AbortController();
+  const abortFromCaller = () => abort(callerSignal.reason);
+  const abortFromDeadline = () => abort(deadline.reason);
+  function abort(reason) {
+    callerSignal.removeEventListener("abort", abortFromCaller);
+    deadline.removeEventListener("abort", abortFromDeadline);
+    controller.abort(reason);
+  }
+  callerSignal.addEventListener("abort", abortFromCaller, { once: true });
+  deadline.addEventListener("abort", abortFromDeadline, { once: true });
+  return { ...options, signal: controller.signal };
+}
+
 // src/client/session.ts
 var SESSION_ENDPOINT = "/api/v1/auth/session";
 var LOGOUT_ENDPOINT = "/api/v1/auth/signout";
@@ -3979,6 +4014,7 @@ function toServiceAccessDecision(response, allowGrace) {
   const isBlocked = response.isBlocked ?? (effectiveStatus === null || effectiveStatus !== null && BLOCKING_EFFECTIVE_STATUSES.includes(effectiveStatus));
   return {
     hasAccess,
+    ...response.seatAssigned !== void 0 ? { seatAssigned: response.seatAssigned } : {},
     effectiveStatus,
     isGrace,
     isBlocked: isBlocked || !hasAccess,
@@ -4046,6 +4082,7 @@ var FFID_SUBSCRIPTION_ERROR_CODES = {
 var FFID_CREDITS_ERROR_CODES = {
   CREDITS_INSUFFICIENT: "CREDITS_INSUFFICIENT",
   CREDITS_IDEMPOTENCY_CONFLICT: "CREDITS_IDEMPOTENCY_CONFLICT",
+  CREDITS_TURN_CANCELLED: "CREDITS_TURN_CANCELLED",
   CREDITS_NOT_APPLICABLE: "CREDITS_NOT_APPLICABLE",
   CREDITS_BALANCE_CAP_EXCEEDED: "CREDITS_BALANCE_CAP_EXCEEDED",
   SEAT_BILLING_NOT_APPLICABLE: "SEAT_BILLING_NOT_APPLICABLE",
@@ -4210,9 +4247,10 @@ function createFFIDClient(config) {
   async function fetchWithAuth(endpoint, options = {}, authOverride) {
     const url = `${baseUrl}${endpoint}`;
     logger.debug("Fetching:", url);
-    const fetchOptions = buildFetchOptions(options, authOverride);
+    let fetchOptions = buildFetchOptions(options, authOverride);
     let response;
     try {
+      fetchOptions = withRequestTimeout(fetchOptions, timeout);
       response = await fetch(url, fetchOptions);
     } catch (error) {
       logger.error("Network error:", error);
@@ -4227,9 +4265,9 @@ function createFFIDClient(config) {
       const refreshResult = await refreshAccessToken();
       if (!refreshResult.error) {
         logger.debug("Token refreshed, retrying request");
-        const retryOptions = buildFetchOptions(options);
         try {
-          response = await fetch(url, retryOptions);
+          fetchOptions = withRequestTimeout(buildFetchOptions(options), timeout);
+          response = await fetch(url, fetchOptions);
         } catch (retryError) {
           logger.error("Network error on retry:", retryError);
           return {
@@ -4248,6 +4286,15 @@ function createFFIDClient(config) {
     try {
       raw = await response.json();
     } catch (parseError) {
+      if (fetchOptions.signal?.aborted) {
+        logger.error("Response body aborted:", parseError);
+        return {
+          error: {
+            code: FFID_ERROR_CODES.NETWORK_ERROR,
+            message: "\u30EC\u30B9\u30DD\u30F3\u30B9\u306E\u53D7\u4FE1\u304C\u4E2D\u65AD\u3055\u308C\u307E\u3057\u305F"
+          }
+        };
+      }
       logger.error("Parse error:", parseError, "Status:", response.status);
       return {
         error: {

package/dist/{chunk-VHOIA25Y.cjs → chunk-VR3QR64A.cjs}

@@ -310,6 +310,9 @@ var OAUTH_INTROSPECT_ENDPOINT = "/api/v1/oauth/introspect";
 var CACHE_KEY_PREFIX = "ffid:introspect:";
 var HEX_BASE = 16;
 var HEX_BYTE_WIDTH = 2;
+var HTTP_TOO_MANY_REQUESTS = 429;
+var HTTP_SERVER_ERROR_MIN = 500;
+var HTTP_SERVER_ERROR_LIMIT = 600;
 function createVerifyAccessToken(deps) {
   const { authMode, baseUrl, serviceCode, serviceApiKey, verifyStrategy, logger, createError, errorCodes, cache, timeout } = deps;
   let jwtVerify2 = null;
@@ -364,6 +367,16 @@ function createVerifyAccessToken(deps) {
     }
     return verifyViaIntrospect(accessToken);
   }
+  function introspectionUnavailable(status) {
+    logger.error("Token introspection unavailable", { status });
+    return {
+      error: {
+        code: errorCodes.NETWORK_ERROR,
+        message: `\u30C8\u30FC\u30AF\u30F3\u691C\u8A3C\u30B5\u30FC\u30D3\u30B9\u304C\u4E00\u6642\u7684\u306B\u5229\u7528\u3067\u304D\u307E\u305B\u3093 (status: ${status})`,
+        details: { status }
+      }
+    };
+  }
   async function verifyViaIntrospect(accessToken, cacheKeySuffix) {
     if (!serviceApiKey) {
       return {
@@ -421,10 +434,12 @@ function createVerifyAccessToken(deps) {
         }
       };
     }
+    const upstreamUnavailable = response.status === HTTP_TOO_MANY_REQUESTS || response.status >= HTTP_SERVER_ERROR_MIN && response.status < HTTP_SERVER_ERROR_LIMIT;
     let introspectResponse;
     try {
       introspectResponse = await response.json();
     } catch (parseError) {
+      if (upstreamUnavailable) return introspectionUnavailable(response.status);
       logger.error("Parse error during token verification:", parseError);
       return {
         error: {
@@ -433,6 +448,7 @@ function createVerifyAccessToken(deps) {
         }
       };
     }
+    if (upstreamUnavailable) return introspectionUnavailable(response.status);
     if (!response.ok) {
       const errorBody = introspectResponse;
       return {
@@ -1376,7 +1392,7 @@ var FFID_ORGANIZATION_PROFILE_ERROR_CODES = {
 };
 
 // src/client/version-check.ts
-var SDK_VERSION = "10.1.0";
+var SDK_VERSION = "11.0.0";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {
@@ -1944,7 +1960,7 @@ function createInviteMethods(deps) {
     }).toString();
     return fetchWithAuth(`${EXT_INVITE_ENDPOINT}?${query}`, {
       method: "POST",
-      body: JSON.stringify({ email: params.email, role: params.role })
+      body: JSON.stringify({ email: params.email, role: params.role, inviterUserId: params.inviterUserId })
     });
   }
   return { inviteMember };
@@ -2247,6 +2263,25 @@ function createOAuthTokenMethods(deps) {
   return { exchangeCodeForTokens, refreshAccessToken, signOutToken };
 }
 
+// src/client/request-timeout.ts
+function withRequestTimeout(options, timeout) {
+  if (timeout === void 0 || options.signal?.aborted) return options;
+  const deadline = AbortSignal.timeout(timeout);
+  if (!options.signal) return { ...options, signal: deadline };
+  const callerSignal = options.signal;
+  const controller = new AbortController();
+  const abortFromCaller = () => abort(callerSignal.reason);
+  const abortFromDeadline = () => abort(deadline.reason);
+  function abort(reason) {
+    callerSignal.removeEventListener("abort", abortFromCaller);
+    deadline.removeEventListener("abort", abortFromDeadline);
+    controller.abort(reason);
+  }
+  callerSignal.addEventListener("abort", abortFromCaller, { once: true });
+  deadline.addEventListener("abort", abortFromDeadline, { once: true });
+  return { ...options, signal: controller.signal };
+}
+
 // src/client/session.ts
 var SESSION_ENDPOINT = "/api/v1/auth/session";
 var LOGOUT_ENDPOINT = "/api/v1/auth/signout";
@@ -3981,6 +4016,7 @@ function toServiceAccessDecision(response, allowGrace) {
   const isBlocked = response.isBlocked ?? (effectiveStatus === null || effectiveStatus !== null && BLOCKING_EFFECTIVE_STATUSES.includes(effectiveStatus));
   return {
     hasAccess,
+    ...response.seatAssigned !== void 0 ? { seatAssigned: response.seatAssigned } : {},
     effectiveStatus,
     isGrace,
     isBlocked: isBlocked || !hasAccess,
@@ -4048,6 +4084,7 @@ var FFID_SUBSCRIPTION_ERROR_CODES = {
 var FFID_CREDITS_ERROR_CODES = {
   CREDITS_INSUFFICIENT: "CREDITS_INSUFFICIENT",
   CREDITS_IDEMPOTENCY_CONFLICT: "CREDITS_IDEMPOTENCY_CONFLICT",
+  CREDITS_TURN_CANCELLED: "CREDITS_TURN_CANCELLED",
   CREDITS_NOT_APPLICABLE: "CREDITS_NOT_APPLICABLE",
   CREDITS_BALANCE_CAP_EXCEEDED: "CREDITS_BALANCE_CAP_EXCEEDED",
   SEAT_BILLING_NOT_APPLICABLE: "SEAT_BILLING_NOT_APPLICABLE",
@@ -4212,9 +4249,10 @@ function createFFIDClient(config) {
   async function fetchWithAuth(endpoint, options = {}, authOverride) {
     const url = `${baseUrl}${endpoint}`;
     logger.debug("Fetching:", url);
-    const fetchOptions = buildFetchOptions(options, authOverride);
+    let fetchOptions = buildFetchOptions(options, authOverride);
     let response;
     try {
+      fetchOptions = withRequestTimeout(fetchOptions, timeout);
       response = await fetch(url, fetchOptions);
     } catch (error) {
       logger.error("Network error:", error);
@@ -4229,9 +4267,9 @@ function createFFIDClient(config) {
       const refreshResult = await refreshAccessToken();
       if (!refreshResult.error) {
         logger.debug("Token refreshed, retrying request");
-        const retryOptions = buildFetchOptions(options);
         try {
-          response = await fetch(url, retryOptions);
+          fetchOptions = withRequestTimeout(buildFetchOptions(options), timeout);
+          response = await fetch(url, fetchOptions);
         } catch (retryError) {
           logger.error("Network error on retry:", retryError);
           return {
@@ -4250,6 +4288,15 @@ function createFFIDClient(config) {
     try {
       raw = await response.json();
     } catch (parseError) {
+      if (fetchOptions.signal?.aborted) {
+        logger.error("Response body aborted:", parseError);
+        return {
+          error: {
+            code: FFID_ERROR_CODES.NETWORK_ERROR,
+            message: "\u30EC\u30B9\u30DD\u30F3\u30B9\u306E\u53D7\u4FE1\u304C\u4E2D\u65AD\u3055\u308C\u307E\u3057\u305F"
+          }
+        };
+      }
       logger.error("Parse error:", parseError, "Status:", response.status);
       return {
         error: {

package/dist/components/index.cjs

@@ -1,34 +1,34 @@
 'use strict';
 
-var chunkVHOIA25Y_cjs = require('../chunk-VHOIA25Y.cjs');
+var chunkVR3QR64A_cjs = require('../chunk-VR3QR64A.cjs');
 
 
 
 Object.defineProperty(exports, "FFIDAnnouncementBadge", {
   enumerable: true,
-  get: function () { return chunkVHOIA25Y_cjs.FFIDAnnouncementBadge; }
+  get: function () { return chunkVR3QR64A_cjs.FFIDAnnouncementBadge; }
 });
 Object.defineProperty(exports, "FFIDAnnouncementList", {
   enumerable: true,
-  get: function () { return chunkVHOIA25Y_cjs.FFIDAnnouncementList; }
+  get: function () { return chunkVR3QR64A_cjs.FFIDAnnouncementList; }
 });
 Object.defineProperty(exports, "FFIDInquiryForm", {
   enumerable: true,
-  get: function () { return chunkVHOIA25Y_cjs.FFIDInquiryForm; }
+  get: function () { return chunkVR3QR64A_cjs.FFIDInquiryForm; }
 });
 Object.defineProperty(exports, "FFIDLoginButton", {
   enumerable: true,
-  get: function () { return chunkVHOIA25Y_cjs.FFIDLoginButton; }
+  get: function () { return chunkVR3QR64A_cjs.FFIDLoginButton; }
 });
 Object.defineProperty(exports, "FFIDOrganizationSwitcher", {
   enumerable: true,
-  get: function () { return chunkVHOIA25Y_cjs.FFIDOrganizationSwitcher; }
+  get: function () { return chunkVR3QR64A_cjs.FFIDOrganizationSwitcher; }
 });
 Object.defineProperty(exports, "FFIDSubscriptionBadge", {
   enumerable: true,
-  get: function () { return chunkVHOIA25Y_cjs.FFIDSubscriptionBadge; }
+  get: function () { return chunkVR3QR64A_cjs.FFIDSubscriptionBadge; }
 });
 Object.defineProperty(exports, "FFIDUserMenu", {
   enumerable: true,
-  get: function () { return chunkVHOIA25Y_cjs.FFIDUserMenu; }
+  get: function () { return chunkVR3QR64A_cjs.FFIDUserMenu; }
 });

package/dist/components/index.d.cts

@@ -1,3 +1,3 @@
-export { a8 as FFIDAnnouncementBadge, bk as FFIDAnnouncementBadgeClassNames, bl as FFIDAnnouncementBadgeProps, a9 as FFIDAnnouncementList, bm as FFIDAnnouncementListClassNames, bn as FFIDAnnouncementListProps, ar as FFIDInquiryForm, as as FFIDInquiryFormCategoryItem, at as FFIDInquiryFormClassNames, au as FFIDInquiryFormLegalLayout, av as FFIDInquiryFormOrganization, aw as FFIDInquiryFormPlaceholderContext, ax as FFIDInquiryFormPrefill, ay as FFIDInquiryFormProps, az as FFIDInquiryFormSubmitData, aA as FFIDInquiryFormSubmitResult, aC as FFIDLoginButton, bo as FFIDLoginButtonProps, aE as FFIDOrganizationSwitcher, bp as FFIDOrganizationSwitcherClassNames, bq as FFIDOrganizationSwitcherProps, aS as FFIDSubscriptionBadge, br as FFIDSubscriptionBadgeClassNames, bs as FFIDSubscriptionBadgeProps, aW as FFIDUserMenu, bt as FFIDUserMenuClassNames, bu as FFIDUserMenuProps } from '../index-CWGoIgYL.cjs';
+export { a8 as FFIDAnnouncementBadge, bk as FFIDAnnouncementBadgeClassNames, bl as FFIDAnnouncementBadgeProps, a9 as FFIDAnnouncementList, bm as FFIDAnnouncementListClassNames, bn as FFIDAnnouncementListProps, ar as FFIDInquiryForm, as as FFIDInquiryFormCategoryItem, at as FFIDInquiryFormClassNames, au as FFIDInquiryFormLegalLayout, av as FFIDInquiryFormOrganization, aw as FFIDInquiryFormPlaceholderContext, ax as FFIDInquiryFormPrefill, ay as FFIDInquiryFormProps, az as FFIDInquiryFormSubmitData, aA as FFIDInquiryFormSubmitResult, aC as FFIDLoginButton, bo as FFIDLoginButtonProps, aE as FFIDOrganizationSwitcher, bp as FFIDOrganizationSwitcherClassNames, bq as FFIDOrganizationSwitcherProps, aS as FFIDSubscriptionBadge, br as FFIDSubscriptionBadgeClassNames, bs as FFIDSubscriptionBadgeProps, aW as FFIDUserMenu, bt as FFIDUserMenuClassNames, bu as FFIDUserMenuProps } from '../index-BknVfXhZ.cjs';
 import 'react/jsx-runtime';
 import 'react';

package/dist/components/index.d.ts

@@ -1,3 +1,3 @@
-export { a8 as FFIDAnnouncementBadge, bk as FFIDAnnouncementBadgeClassNames, bl as FFIDAnnouncementBadgeProps, a9 as FFIDAnnouncementList, bm as FFIDAnnouncementListClassNames, bn as FFIDAnnouncementListProps, ar as FFIDInquiryForm, as as FFIDInquiryFormCategoryItem, at as FFIDInquiryFormClassNames, au as FFIDInquiryFormLegalLayout, av as FFIDInquiryFormOrganization, aw as FFIDInquiryFormPlaceholderContext, ax as FFIDInquiryFormPrefill, ay as FFIDInquiryFormProps, az as FFIDInquiryFormSubmitData, aA as FFIDInquiryFormSubmitResult, aC as FFIDLoginButton, bo as FFIDLoginButtonProps, aE as FFIDOrganizationSwitcher, bp as FFIDOrganizationSwitcherClassNames, bq as FFIDOrganizationSwitcherProps, aS as FFIDSubscriptionBadge, br as FFIDSubscriptionBadgeClassNames, bs as FFIDSubscriptionBadgeProps, aW as FFIDUserMenu, bt as FFIDUserMenuClassNames, bu as FFIDUserMenuProps } from '../index-CWGoIgYL.js';
+export { a8 as FFIDAnnouncementBadge, bk as FFIDAnnouncementBadgeClassNames, bl as FFIDAnnouncementBadgeProps, a9 as FFIDAnnouncementList, bm as FFIDAnnouncementListClassNames, bn as FFIDAnnouncementListProps, ar as FFIDInquiryForm, as as FFIDInquiryFormCategoryItem, at as FFIDInquiryFormClassNames, au as FFIDInquiryFormLegalLayout, av as FFIDInquiryFormOrganization, aw as FFIDInquiryFormPlaceholderContext, ax as FFIDInquiryFormPrefill, ay as FFIDInquiryFormProps, az as FFIDInquiryFormSubmitData, aA as FFIDInquiryFormSubmitResult, aC as FFIDLoginButton, bo as FFIDLoginButtonProps, aE as FFIDOrganizationSwitcher, bp as FFIDOrganizationSwitcherClassNames, bq as FFIDOrganizationSwitcherProps, aS as FFIDSubscriptionBadge, br as FFIDSubscriptionBadgeClassNames, bs as FFIDSubscriptionBadgeProps, aW as FFIDUserMenu, bt as FFIDUserMenuClassNames, bu as FFIDUserMenuProps } from '../index-BknVfXhZ.js';
 import 'react/jsx-runtime';
 import 'react';

package/dist/components/index.js

@@ -1 +1 @@
-export { FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDSubscriptionBadge, FFIDUserMenu } from '../chunk-ITSQIAO5.js';
+export { FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDSubscriptionBadge, FFIDUserMenu } from '../chunk-QORWLPWG.js';

package/dist/{ffid-client-DUbQLYTN.d.ts → ffid-client-By_vcKYu.d.ts}

@@ -961,12 +961,19 @@ interface FFIDBuyCreditsUrlParams {
 type FFIDSubscriptionStatus = 'trialing' | 'active' | 'past_due' | 'canceled' | 'pending_invoice' | 'paused' | 'incomplete' | 'incomplete_expired' | 'unpaid';
 interface FFIDSubscriptionCheckResponse {
     hasActiveSubscription: boolean;
+    /**
+     * Active seat for the requested user; null for organization-only checks.
+     * Older servers omit this field. User access requires hasAccess AND
+     * seatAssigned === true; an omitted/null value is not proof of a seat.
+     */
+    seatAssigned?: boolean | null;
     /**
      * Canonical access decision returned by FFID's `/subscriptions/ext/check`.
      *
      * This is the server-side source of truth for service gates. Consumers
      * should not recompute access from `currentPeriodEnd`, `past_due_since`, or
      * local payment timestamps.
+     * This is contract access; user access also requires seatAssigned === true.
      */
     hasAccess?: boolean;
     /** True when `effectiveStatus === 'past_due_grace'`. */
@@ -996,9 +1003,11 @@ interface FFIDSubscriptionCheckResponse {
      */
     pricingModel?: FFIDPricingModel | null;
     /**
-     * Credit balance summary — flat plans only (10.0.0). `null` for per_seat, for no
-     * subscription, **and** when FFID could not read the ledger, so `null` does not
-     * mean "not flat" (use `pricingModel`). Never affects `hasAccess`.
+     * Credit balance summary — paid flat plans only (10.0.0). `null` for per_seat, for a
+     * `free` plan (flat on the unified ladder since #6547, but outside credits — consume /
+     * balance return 409 `CREDITS_NOT_APPLICABLE`), for no subscription, **and** when FFID
+     * could not read the ledger, so `null` does not mean "not flat" (use `pricingModel`).
+     * Never affects `hasAccess`.
      */
     credits?: FFIDSubscriptionCheckCredits | null;
     /**
@@ -1045,7 +1054,10 @@ interface FFIDServiceAccessError {
     details?: unknown;
 }
 interface FFIDServiceAccessDecision {
+    /** Contract access; user access also requires seatAssigned === true. */
     hasAccess: boolean;
+    /** User's active seat, passed through when returned. Gate user access with === true. */
+    seatAssigned?: boolean | null;
     effectiveStatus: EffectiveSubscriptionStatus | null;
     isGrace: boolean;
     isBlocked: boolean;
@@ -1210,9 +1222,18 @@ interface FFIDAddMemberRequest {
 interface FFIDAddMemberParams extends FFIDAddMemberRequest {
     organizationId: string;
 }
+/** Seat assignment outcome after membership creation; membership exists in every case. */
+type FFIDMemberSeatAssignmentResult = 'assigned' | 'not_applicable' | 'member_limit_reached' | 'failed';
 /** Response from addMember (ext) */
 interface FFIDAddMemberResponse {
     member: FFIDOrganizationMember;
+    /**
+     * Membership creation can succeed even when seat assignment fails.
+     * Omitted by older servers. `not_applicable`/undefined do not prove an active seat.
+     * Check the authenticated user's hasAccess and seatAssigned before granting access;
+     * do not automatically restore a removed seat on a duplicate-member retry.
+     */
+    seatAssignment?: FFIDMemberSeatAssignmentResult;
 }
 /** Response from updateMemberRole (ext) */
 interface FFIDUpdateMemberRoleResponse {
@@ -2431,11 +2452,10 @@ interface FFIDConfig {
      */
     cache?: FFIDCacheConfig | undefined;
     /**
-     * Request timeout in milliseconds for FFID API calls. Applies to server-side
-     * token verification / introspection and, in `token` mode, to the client-side
-     * OAuth operations (code exchange / refresh / revoke) — including via the
-     * `FFIDProvider` `timeout` prop (#4260). On timeout the fetch is aborted and
-     * surfaced through the normal error path (e.g. `NETWORK_ERROR`).
+     * Per-HTTP timeout (ms): shared JSON APIs (e.g. checkSubscription/getProfile),
+     * token verification/introspection, token OAuth exchange/refresh/revoke; also FFIDProvider.timeout.
+     * Shared JSON includes body and preserves signals; refresh/retry have separate deadlines.
+     * Excludes token getSession, cookie signOut, public/newsletter/inquiry; not a method deadline.
      * @default undefined (no timeout, uses fetch default)
      */
     timeout?: number | undefined;
@@ -2801,6 +2821,7 @@ declare function createFFIDClient(config: FFIDConfig): {
         organizationId: string;
         email: string;
         role?: FFIDAssignableMemberRole;
+        inviterUserId?: string;
     }) => Promise<FFIDApiResponse<FFIDInviteMemberResponse>>;
     leaveOrganization: (params: FFIDLeaveOrganizationParams) => Promise<FFIDApiResponse<FFIDLeaveOrganizationResponse>>;
     getAnalyticsConfig: (serviceCode: string, options?: FFIDProfileCallOptions) => Promise<FFIDApiResponse<FFIDAnalyticsConfig>>;
@@ -2887,4 +2908,4 @@ declare function createFFIDClient(config: FFIDConfig): {
 /** Type of the FFID client */
 type FFIDClient = ReturnType<typeof createFFIDClient>;
 
-export { type FFIDProvisionedOrganization as $, type FFIDOrganization as A, type FFIDOrganizationLogoUploadResponse as B, type FFIDOrganizationMember as C, type FFIDOrganizationProfile as D, type FFIDOrganizationProfileErrorCode as E, type FFIDError as F, type FFIDOrganizationProfileResponse as G, type FFIDOtpSendResponse as H, type FFIDOtpVerifyResponse as I, type FFIDPasswordResetConfirmResponse as J, type FFIDPasswordResetResponse as K, type FFIDPasswordResetVerifyResponse as L, type FFIDProfileCallOptions as M, type FFIDProvisionMemberPlan as N, type FFIDProvisionMemberPlanStatus as O, type FFIDProvisionMemberResult as P, type FFIDProvisionMemberStatus as Q, type FFIDProvisionOrganizationDryRun as R, type FFIDProvisionOrganizationMemberInput as S, type FFIDProvisionOrganizationOutcome as T, type FFIDProvisionOrganizationParams as U, type FFIDProvisionOrganizationResponse as V, type FFIDProvisionUserDryRun as W, type FFIDProvisionUserOutcome as X, type FFIDProvisionUserParams as Y, type FFIDProvisionUserProfileInput as Z, type FFIDProvisionUserResponse as _, type FFIDLogger as a, type FFIDProvisionedUser as a0, type FFIDPublishedPlan as a1, type FFIDRemoveMemberResponse as a2, type FFIDResetSessionResponse as a3, type FFIDSubscription as a4, type FFIDUpdateMemberRoleResponse as a5, type FFIDUpdateUserProfileRequest as a6, type FFIDUploadOrganizationLogoParams as a7, type FFIDUpsertOrganizationProfileParams as a8, type FFIDUpsertOrganizationProfileRequest as a9, type FFIDUser as aa, type FFIDUserProfile as ab, FFID_ALLOWED_ORGANIZATION_LOGO_MIME_TYPES as ac, FFID_CATALOG_ENVIRONMENTS as ad, FFID_CATALOG_PUBLICATION_STATUSES as ae, FFID_COMPANY_SIZE_CODES as af, FFID_INDUSTRY_CODES as ag, FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_BYTES as ah, FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_MB as ai, FFID_ORGANIZATION_PROFILE_ERROR_CODES as aj, type TokenData as ak, type TokenStore as al, createFFIDClient as am, createTokenStore as an, type FFIDCacheAdapter as b, type FFIDVerifyAccessTokenOptions as c, type FFIDApiResponse as d, type FFIDOAuthUserInfo as e, type FFIDCatalogEnvironment as f, type FFIDBillingInterval as g, type FFIDTaxBehavior as h, type FFIDPublishedCatalog as i, type FFIDAddMemberParams as j, type FFIDAddMemberRequest as k, type FFIDAddMemberResponse as l, type FFIDAllowedLogoMimeType as m, type FFIDAssignableMemberRole as n, type FFIDCacheConfig as o, type FFIDCatalogPublication as p, type FFIDCatalogPublicationStatus as q, type FFIDClient as r, type FFIDCompanySizeCode as s, type FFIDConfig as t, type FFIDIndustryCode as u, type FFIDListMembersResponse as v, type FFIDListingConsentInput as w, type FFIDLogoWallEntry as x, type FFIDLogoWallResponse as y, type FFIDMemberRole as z };
+export { type FFIDProvisionUserResponse as $, type FFIDMemberSeatAssignmentResult as A, type FFIDOrganization as B, type FFIDOrganizationLogoUploadResponse as C, type FFIDOrganizationMember as D, type FFIDOrganizationProfile as E, type FFIDError as F, type FFIDOrganizationProfileErrorCode as G, type FFIDOrganizationProfileResponse as H, type FFIDOtpSendResponse as I, type FFIDOtpVerifyResponse as J, type FFIDPasswordResetConfirmResponse as K, type FFIDPasswordResetResponse as L, type FFIDPasswordResetVerifyResponse as M, type FFIDProfileCallOptions as N, type FFIDProvisionMemberPlan as O, type FFIDProvisionMemberPlanStatus as P, type FFIDProvisionMemberResult as Q, type FFIDProvisionMemberStatus as R, type FFIDProvisionOrganizationDryRun as S, type FFIDProvisionOrganizationMemberInput as T, type FFIDProvisionOrganizationOutcome as U, type FFIDProvisionOrganizationParams as V, type FFIDProvisionOrganizationResponse as W, type FFIDProvisionUserDryRun as X, type FFIDProvisionUserOutcome as Y, type FFIDProvisionUserParams as Z, type FFIDProvisionUserProfileInput as _, type FFIDLogger as a, type FFIDProvisionedOrganization as a0, type FFIDProvisionedUser as a1, type FFIDPublishedPlan as a2, type FFIDRemoveMemberResponse as a3, type FFIDResetSessionResponse as a4, type FFIDSubscription as a5, type FFIDUpdateMemberRoleResponse as a6, type FFIDUpdateUserProfileRequest as a7, type FFIDUploadOrganizationLogoParams as a8, type FFIDUpsertOrganizationProfileParams as a9, type FFIDUpsertOrganizationProfileRequest as aa, type FFIDUser as ab, type FFIDUserProfile as ac, FFID_ALLOWED_ORGANIZATION_LOGO_MIME_TYPES as ad, FFID_CATALOG_ENVIRONMENTS as ae, FFID_CATALOG_PUBLICATION_STATUSES as af, FFID_COMPANY_SIZE_CODES as ag, FFID_INDUSTRY_CODES as ah, FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_BYTES as ai, FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_MB as aj, FFID_ORGANIZATION_PROFILE_ERROR_CODES as ak, type TokenData as al, type TokenStore as am, createFFIDClient as an, createTokenStore as ao, type FFIDCacheAdapter as b, type FFIDVerifyAccessTokenOptions as c, type FFIDApiResponse as d, type FFIDOAuthUserInfo as e, type FFIDCatalogEnvironment as f, type FFIDBillingInterval as g, type FFIDTaxBehavior as h, type FFIDPublishedCatalog as i, type FFIDAddMemberParams as j, type FFIDAddMemberRequest as k, type FFIDAddMemberResponse as l, type FFIDAllowedLogoMimeType as m, type FFIDAssignableMemberRole as n, type FFIDCacheConfig as o, type FFIDCatalogPublication as p, type FFIDCatalogPublicationStatus as q, type FFIDClient as r, type FFIDCompanySizeCode as s, type FFIDConfig as t, type FFIDIndustryCode as u, type FFIDListMembersResponse as v, type FFIDListingConsentInput as w, type FFIDLogoWallEntry as x, type FFIDLogoWallResponse as y, type FFIDMemberRole as z };