@feelflow/ffid-sdk 10.1.0 → 12.0.0

package/dist/server/index.js

@@ -304,6 +304,9 @@ var OAUTH_INTROSPECT_ENDPOINT = "/api/v1/oauth/introspect";
 var CACHE_KEY_PREFIX = "ffid:introspect:";
 var HEX_BASE = 16;
 var HEX_BYTE_WIDTH = 2;
+var HTTP_TOO_MANY_REQUESTS = 429;
+var HTTP_SERVER_ERROR_MIN = 500;
+var HTTP_SERVER_ERROR_LIMIT = 600;
 function createVerifyAccessToken(deps) {
   const { authMode, baseUrl, serviceCode, serviceApiKey, verifyStrategy, logger, createError, errorCodes, cache, timeout } = deps;
   let jwtVerify2 = null;
@@ -358,6 +361,16 @@ function createVerifyAccessToken(deps) {
     }
     return verifyViaIntrospect(accessToken);
   }
+  function introspectionUnavailable(status) {
+    logger.error("Token introspection unavailable", { status });
+    return {
+      error: {
+        code: errorCodes.NETWORK_ERROR,
+        message: `\u30C8\u30FC\u30AF\u30F3\u691C\u8A3C\u30B5\u30FC\u30D3\u30B9\u304C\u4E00\u6642\u7684\u306B\u5229\u7528\u3067\u304D\u307E\u305B\u3093 (status: ${status})`,
+        details: { status }
+      }
+    };
+  }
   async function verifyViaIntrospect(accessToken, cacheKeySuffix) {
     if (!serviceApiKey) {
       return {
@@ -415,10 +428,12 @@ function createVerifyAccessToken(deps) {
         }
       };
     }
+    const upstreamUnavailable = response.status === HTTP_TOO_MANY_REQUESTS || response.status >= HTTP_SERVER_ERROR_MIN && response.status < HTTP_SERVER_ERROR_LIMIT;
     let introspectResponse;
     try {
       introspectResponse = await response.json();
     } catch (parseError) {
+      if (upstreamUnavailable) return introspectionUnavailable(response.status);
       logger.error("Parse error during token verification:", parseError);
       return {
         error: {
@@ -427,6 +442,7 @@ function createVerifyAccessToken(deps) {
         }
       };
     }
+    if (upstreamUnavailable) return introspectionUnavailable(response.status);
     if (!response.ok) {
       const errorBody = introspectResponse;
       return {
@@ -1370,7 +1386,7 @@ var FFID_ORGANIZATION_PROFILE_ERROR_CODES = {
 };
 
 // src/client/version-check.ts
-var SDK_VERSION = "10.1.0";
+var SDK_VERSION = "12.0.0";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {
@@ -1938,7 +1954,7 @@ function createInviteMethods(deps) {
     }).toString();
     return fetchWithAuth(`${EXT_INVITE_ENDPOINT}?${query}`, {
       method: "POST",
-      body: JSON.stringify({ email: params.email, role: params.role })
+      body: JSON.stringify({ email: params.email, role: params.role, inviterUserId: params.inviterUserId })
     });
   }
   return { inviteMember };
@@ -2241,6 +2257,25 @@ function createOAuthTokenMethods(deps) {
   return { exchangeCodeForTokens, refreshAccessToken, signOutToken };
 }
 
+// src/client/request-timeout.ts
+function withRequestTimeout(options, timeout) {
+  if (timeout === void 0 || options.signal?.aborted) return options;
+  const deadline = AbortSignal.timeout(timeout);
+  if (!options.signal) return { ...options, signal: deadline };
+  const callerSignal = options.signal;
+  const controller = new AbortController();
+  const abortFromCaller = () => abort(callerSignal.reason);
+  const abortFromDeadline = () => abort(deadline.reason);
+  function abort(reason) {
+    callerSignal.removeEventListener("abort", abortFromCaller);
+    deadline.removeEventListener("abort", abortFromDeadline);
+    controller.abort(reason);
+  }
+  callerSignal.addEventListener("abort", abortFromCaller, { once: true });
+  deadline.addEventListener("abort", abortFromDeadline, { once: true });
+  return { ...options, signal: controller.signal };
+}
+
 // src/client/session.ts
 var SESSION_ENDPOINT = "/api/v1/auth/session";
 var LOGOUT_ENDPOINT = "/api/v1/auth/signout";
@@ -3759,6 +3794,7 @@ function toServiceAccessDecision(response, allowGrace) {
   const isBlocked = response.isBlocked ?? (effectiveStatus === null || effectiveStatus !== null && BLOCKING_EFFECTIVE_STATUSES.includes(effectiveStatus));
   return {
     hasAccess,
+    ...response.seatAssigned !== void 0 ? { seatAssigned: response.seatAssigned } : {},
     effectiveStatus,
     isGrace,
     isBlocked: isBlocked || !hasAccess,
@@ -3965,9 +4001,10 @@ function createFFIDClient(config) {
   async function fetchWithAuth(endpoint, options = {}, authOverride) {
     const url = `${baseUrl}${endpoint}`;
     logger.debug("Fetching:", url);
-    const fetchOptions = buildFetchOptions(options, authOverride);
+    let fetchOptions = buildFetchOptions(options, authOverride);
     let response;
     try {
+      fetchOptions = withRequestTimeout(fetchOptions, timeout);
       response = await fetch(url, fetchOptions);
     } catch (error) {
       logger.error("Network error:", error);
@@ -3982,9 +4019,9 @@ function createFFIDClient(config) {
       const refreshResult = await refreshAccessToken();
       if (!refreshResult.error) {
         logger.debug("Token refreshed, retrying request");
-        const retryOptions = buildFetchOptions(options);
         try {
-          response = await fetch(url, retryOptions);
+          fetchOptions = withRequestTimeout(buildFetchOptions(options), timeout);
+          response = await fetch(url, fetchOptions);
         } catch (retryError) {
           logger.error("Network error on retry:", retryError);
           return {
@@ -4003,6 +4040,15 @@ function createFFIDClient(config) {
     try {
       raw = await response.json();
     } catch (parseError) {
+      if (fetchOptions.signal?.aborted) {
+        logger.error("Response body aborted:", parseError);
+        return {
+          error: {
+            code: FFID_ERROR_CODES.NETWORK_ERROR,
+            message: "\u30EC\u30B9\u30DD\u30F3\u30B9\u306E\u53D7\u4FE1\u304C\u4E2D\u65AD\u3055\u308C\u307E\u3057\u305F"
+          }
+        };
+      }
       logger.error("Parse error:", parseError, "Status:", response.status);
       return {
         error: {
@@ -4548,6 +4594,19 @@ function generateServerState() {
   globalThis.crypto.getRandomValues(bytes);
   return Array.from(bytes, (b) => b.toString(HEX_RADIX2).padStart(2, "0")).join("");
 }
+var STORED_STATE_SEPARATOR = ".";
+function packStoredLoginHandle(handle) {
+  return `${handle.state}${STORED_STATE_SEPARATOR}${handle.codeVerifier}`;
+}
+function unpackStoredLoginHandle(stored) {
+  if (!stored) return null;
+  const sep = stored.indexOf(STORED_STATE_SEPARATOR);
+  if (sep <= 0) return null;
+  const state = stored.slice(0, sep);
+  const codeVerifier = stored.slice(sep + STORED_STATE_SEPARATOR.length);
+  if (!codeVerifier) return null;
+  return { state, codeVerifier };
+}
 
 // src/server/auth/server-oauth-token.ts
 var OAUTH_TOKEN_ENDPOINT2 = "/api/v1/oauth/token";
@@ -4609,7 +4668,7 @@ async function postToken(deps, body, fallbackErrorCode) {
   }
   return { tokens: toTokens(validation.tokens) };
 }
-function exchangeAuthorizationCodeServer(deps, code) {
+function exchangeAuthorizationCodeServer(deps, code, codeVerifier) {
   return postToken(
     deps,
     {
@@ -4617,7 +4676,8 @@ function exchangeAuthorizationCodeServer(deps, code) {
       code,
       client_id: deps.clientId,
       client_secret: deps.clientSecret,
-      redirect_uri: deps.redirectUri
+      redirect_uri: deps.redirectUri,
+      code_verifier: codeVerifier
     },
     FFID_ERROR_CODES.TOKEN_EXCHANGE_ERROR
   );
@@ -4638,6 +4698,7 @@ function refreshTokensServer(deps, refreshToken) {
 // src/server/auth/server-auth-client.ts
 var OAUTH_AUTHORIZE_ENDPOINT2 = "/api/v1/oauth/authorize";
 var SCREEN_HINT_SIGNUP2 = "signup";
+var CODE_CHALLENGE_METHOD_S256 = "S256";
 function createServerAuthClient(config) {
   if (!config.serviceCode?.trim()) {
     throw new Error("FFID Server Auth: serviceCode \u304C\u672A\u8A2D\u5B9A\u3067\u3059");
@@ -4662,20 +4723,29 @@ function createServerAuthClient(config) {
     redirectUri: config.redirectUri,
     timeout: config.timeout
   };
-  function buildAuthorizeUrl(opts) {
+  async function buildAuthorizeUrl(opts) {
     const state = generateServerState();
+    const codeVerifier = generateCodeVerifier();
+    const codeChallenge = await generateCodeChallenge(codeVerifier);
     const params = new URLSearchParams({
       response_type: "code",
       client_id: clientId,
       scope: config.scope,
       redirect_uri: config.redirectUri,
-      state
+      state,
+      code_challenge: codeChallenge,
+      code_challenge_method: CODE_CHALLENGE_METHOD_S256
     });
     const organizationId = opts?.organizationId?.trim();
     if (organizationId) params.set("organization_id", organizationId);
     if (opts?.screenHint === SCREEN_HINT_SIGNUP2) params.set("screen_hint", SCREEN_HINT_SIGNUP2);
     if (opts?.prompt) params.set("prompt", opts.prompt);
-    return { url: `${apiBaseUrl}${OAUTH_AUTHORIZE_ENDPOINT2}?${params.toString()}`, state };
+    return {
+      url: `${apiBaseUrl}${OAUTH_AUTHORIZE_ENDPOINT2}?${params.toString()}`,
+      // Opaque cookie value: state + verifier. Only `state` and the challenge
+      // reach the URL; the verifier stays in the caller's httpOnly cookie.
+      state: packStoredLoginHandle({ state, codeVerifier })
+    };
   }
   async function handleCallback(input) {
     let url;
@@ -4689,12 +4759,15 @@ function createServerAuthClient(config) {
         }
       };
     }
+    const stored = unpackStoredLoginHandle(input.storedState);
     const returnedState = url.searchParams.get("state") ?? void 0;
-    if (!input.storedState || !returnedState || input.storedState !== returnedState) {
+    if (!stored || !returnedState || stored.state !== returnedState) {
       return {
         error: {
           code: FFID_ERROR_CODES.STATE_MISMATCH_ERROR,
-          message: "OAuth state \u304C\u4E00\u81F4\u3057\u307E\u305B\u3093\u3002CSRF \u306E\u53EF\u80FD\u6027\u304C\u3042\u308B\u305F\u3081\u8A8D\u8A3C\u3092\u4E2D\u6B62\u3057\u307E\u3057\u305F"
+          // Not "CSRF suspected": a state-only cookie written before 12.0.0 also
+          // lands here, once per in-flight login across the upgrade (#6611).
+          message: "OAuth state \u304C\u4E00\u81F4\u3057\u306A\u3044\u304B\u3001\u30ED\u30B0\u30A4\u30F3\u306E\u958B\u59CB\u304B\u3089\u6642\u9593\u304C\u7D4C\u3063\u3066\u3044\u307E\u3059\u3002\u3082\u3046\u4E00\u5EA6\u30ED\u30B0\u30A4\u30F3\u3057\u3066\u304F\u3060\u3055\u3044"
         }
       };
     }
@@ -4711,7 +4784,7 @@ function createServerAuthClient(config) {
         }
       };
     }
-    return exchangeAuthorizationCodeServer(deps, code);
+    return exchangeAuthorizationCodeServer(deps, code, stored.codeVerifier);
   }
   function refresh(refreshToken) {
     return refreshTokensServer(deps, refreshToken);

package/dist/server/test/index.d.cts

@@ -1,4 +1,4 @@
-import { r as FFIDClient, e as FFIDOAuthUserInfo } from '../../ffid-client-qcfCWLfs.cjs';
+import { r as FFIDClient, e as FFIDOAuthUserInfo } from '../../ffid-client-DW8_m1_M.cjs';
 import '../../types-Cjb9J0rL.cjs';
 
 /**

package/dist/server/test/index.d.ts

@@ -1,4 +1,4 @@
-import { r as FFIDClient, e as FFIDOAuthUserInfo } from '../../ffid-client-DUbQLYTN.js';
+import { r as FFIDClient, e as FFIDOAuthUserInfo } from '../../ffid-client-ByfZA9sJ.js';
 import '../../types-Cjb9J0rL.js';
 
 /**

package/dist/webhooks/index.d.cts

@@ -115,7 +115,17 @@ interface FFIDCreditsPackPurchasedPayload extends FFIDCreditsEventBase {
  */
 
 /** All supported webhook event types */
-type FFIDWebhookEventType = 'subscription.created' | 'subscription.reactivated' | 'subscription.updated' | 'subscription.canceled' | 'subscription.downgrade_scheduled' | 'subscription.downgrade_applied' | 'subscription.downgrade_canceled' | 'subscription.trial_ending' | 'subscription.payment_failed' | 'user.created' | 'user.updated' | 'user.deleted' | 'user.deletion_requested' | 'organization.created' | 'organization.updated' | 'organization.member.added' | 'organization.member.removed' | 'organization.member.role_changed' | 'legal.document.updated' | 'legal.agreement.required' | 'system.maintenance.scheduled' | 'system.maintenance.started' | 'system.maintenance.completed' | 'announcement.published' | 'credits.granted' | 'credits.low' | 'credits.exhausted' | 'credits.pack_purchased' | 'test.ping';
+type FFIDWebhookEventType = 'subscription.created' | 'subscription.reactivated' | 'subscription.updated' | 'subscription.seats.changed' | 'subscription.canceled' | 'subscription.downgrade_scheduled' | 'subscription.downgrade_applied' | 'subscription.downgrade_canceled' | 'subscription.trial_ending' | 'subscription.payment_failed' | 'user.created' | 'user.updated' | 'user.deleted' | 'user.deletion_requested' | 'organization.created' | 'organization.updated' | 'organization.member.added' | 'organization.member.removed' | 'organization.member.role_changed' | 'legal.document.updated' | 'legal.agreement.required' | 'system.maintenance.scheduled' | 'system.maintenance.started' | 'system.maintenance.completed' | 'announcement.published' | 'credits.granted' | 'credits.low' | 'credits.exhausted' | 'credits.pack_purchased' | 'test.ping';
+/**
+ * Seat-roster reconciliation hint. Fetch the current roster from FFID; delivery
+ * can be delayed, duplicated or reordered. This event grants no access by itself.
+ */
+interface FFIDSubscriptionSeatsChangedPayload {
+    subscriptionId: string;
+    organizationId: string;
+    /** Compare with the receiver's own service before reading/reconciling its roster. */
+    serviceCode?: string;
+}
 interface FFIDSubscriptionCreatedPayload {
     subscriptionId: string;
     organizationId?: string;
@@ -500,6 +510,7 @@ interface FFIDWebhookEventMap {
     'subscription.created': FFIDSubscriptionCreatedPayload;
     'subscription.reactivated': FFIDSubscriptionReactivatedPayload;
     'subscription.updated': FFIDSubscriptionUpdatedPayload;
+    'subscription.seats.changed': FFIDSubscriptionSeatsChangedPayload;
     'subscription.canceled': FFIDSubscriptionCanceledPayload;
     'subscription.downgrade_scheduled': FFIDSubscriptionDowngradeScheduledPayload;
     'subscription.downgrade_applied': FFIDSubscriptionDowngradeAppliedPayload;
@@ -650,4 +661,4 @@ declare function createFFIDWebhookHandler(config: FFIDWebhookHandlerConfig): {
 /** Type of the FFID Webhook handler */
 type FFIDWebhookHandler = ReturnType<typeof createFFIDWebhookHandler>;
 
-export { DEFAULT_TOLERANCE_SECONDS, type FFIDAnnouncementPublishedPayload, type FFIDCreditsExhaustedPayload, type FFIDCreditsGrantedPayload, type FFIDCreditsLowPayload, type FFIDCreditsPackPurchasedPayload, type FFIDLegalAgreementRequiredPayload, type FFIDLegalDocumentUpdatedPayload, type FFIDOrganizationCreatedPayload, type FFIDOrganizationMemberAddedPayload, type FFIDOrganizationMemberRemovedPayload, type FFIDOrganizationMemberRoleChangedPayload, type FFIDOrganizationUpdatedPayload, type FFIDSubscriptionCanceledPayload, type FFIDSubscriptionCreatedPayload, type FFIDSubscriptionDowngradeAppliedPayload, type FFIDSubscriptionDowngradeCanceledPayload, type FFIDSubscriptionDowngradeScheduledPayload, type FFIDSubscriptionPaymentFailedPayload, type FFIDSubscriptionReactivatedPayload, type FFIDSubscriptionTrialEndingPayload, type FFIDSubscriptionUpdatedPayload, type FFIDSystemMaintenancePayload, type FFIDTestPingPayload, type FFIDUserCreatedPayload, type FFIDUserDeletedPayload, type FFIDUserDeletionRequestedPayload, type FFIDUserUpdatedPayload, FFIDWebhookError, type FFIDWebhookEvent, type FFIDWebhookEventHandler, type FFIDWebhookEventMap, type FFIDWebhookEventType, type FFIDWebhookHandler, type FFIDWebhookHandlerConfig, type FFIDWebhookLogger, FFIDWebhookPayloadError, FFIDWebhookSignatureError, FFIDWebhookTimestampError, FFID_WEBHOOK_EVENT_ID_HEADER, FFID_WEBHOOK_SIGNATURE_HEADER, FFID_WEBHOOK_SIGNATURE_VERSION, FFID_WEBHOOK_TIMESTAMP_HEADER, computeSignature, createFFIDWebhookHandler, parseSignatureHeader, verifyWebhookSignature };
+export { DEFAULT_TOLERANCE_SECONDS, type FFIDAnnouncementPublishedPayload, type FFIDCreditsExhaustedPayload, type FFIDCreditsGrantedPayload, type FFIDCreditsLowPayload, type FFIDCreditsPackPurchasedPayload, type FFIDLegalAgreementRequiredPayload, type FFIDLegalDocumentUpdatedPayload, type FFIDOrganizationCreatedPayload, type FFIDOrganizationMemberAddedPayload, type FFIDOrganizationMemberRemovedPayload, type FFIDOrganizationMemberRoleChangedPayload, type FFIDOrganizationUpdatedPayload, type FFIDSubscriptionCanceledPayload, type FFIDSubscriptionCreatedPayload, type FFIDSubscriptionDowngradeAppliedPayload, type FFIDSubscriptionDowngradeCanceledPayload, type FFIDSubscriptionDowngradeScheduledPayload, type FFIDSubscriptionPaymentFailedPayload, type FFIDSubscriptionReactivatedPayload, type FFIDSubscriptionSeatsChangedPayload, type FFIDSubscriptionTrialEndingPayload, type FFIDSubscriptionUpdatedPayload, type FFIDSystemMaintenancePayload, type FFIDTestPingPayload, type FFIDUserCreatedPayload, type FFIDUserDeletedPayload, type FFIDUserDeletionRequestedPayload, type FFIDUserUpdatedPayload, FFIDWebhookError, type FFIDWebhookEvent, type FFIDWebhookEventHandler, type FFIDWebhookEventMap, type FFIDWebhookEventType, type FFIDWebhookHandler, type FFIDWebhookHandlerConfig, type FFIDWebhookLogger, FFIDWebhookPayloadError, FFIDWebhookSignatureError, FFIDWebhookTimestampError, FFID_WEBHOOK_EVENT_ID_HEADER, FFID_WEBHOOK_SIGNATURE_HEADER, FFID_WEBHOOK_SIGNATURE_VERSION, FFID_WEBHOOK_TIMESTAMP_HEADER, computeSignature, createFFIDWebhookHandler, parseSignatureHeader, verifyWebhookSignature };

package/dist/webhooks/index.d.ts

@@ -115,7 +115,17 @@ interface FFIDCreditsPackPurchasedPayload extends FFIDCreditsEventBase {
  */
 
 /** All supported webhook event types */
-type FFIDWebhookEventType = 'subscription.created' | 'subscription.reactivated' | 'subscription.updated' | 'subscription.canceled' | 'subscription.downgrade_scheduled' | 'subscription.downgrade_applied' | 'subscription.downgrade_canceled' | 'subscription.trial_ending' | 'subscription.payment_failed' | 'user.created' | 'user.updated' | 'user.deleted' | 'user.deletion_requested' | 'organization.created' | 'organization.updated' | 'organization.member.added' | 'organization.member.removed' | 'organization.member.role_changed' | 'legal.document.updated' | 'legal.agreement.required' | 'system.maintenance.scheduled' | 'system.maintenance.started' | 'system.maintenance.completed' | 'announcement.published' | 'credits.granted' | 'credits.low' | 'credits.exhausted' | 'credits.pack_purchased' | 'test.ping';
+type FFIDWebhookEventType = 'subscription.created' | 'subscription.reactivated' | 'subscription.updated' | 'subscription.seats.changed' | 'subscription.canceled' | 'subscription.downgrade_scheduled' | 'subscription.downgrade_applied' | 'subscription.downgrade_canceled' | 'subscription.trial_ending' | 'subscription.payment_failed' | 'user.created' | 'user.updated' | 'user.deleted' | 'user.deletion_requested' | 'organization.created' | 'organization.updated' | 'organization.member.added' | 'organization.member.removed' | 'organization.member.role_changed' | 'legal.document.updated' | 'legal.agreement.required' | 'system.maintenance.scheduled' | 'system.maintenance.started' | 'system.maintenance.completed' | 'announcement.published' | 'credits.granted' | 'credits.low' | 'credits.exhausted' | 'credits.pack_purchased' | 'test.ping';
+/**
+ * Seat-roster reconciliation hint. Fetch the current roster from FFID; delivery
+ * can be delayed, duplicated or reordered. This event grants no access by itself.
+ */
+interface FFIDSubscriptionSeatsChangedPayload {
+    subscriptionId: string;
+    organizationId: string;
+    /** Compare with the receiver's own service before reading/reconciling its roster. */
+    serviceCode?: string;
+}
 interface FFIDSubscriptionCreatedPayload {
     subscriptionId: string;
     organizationId?: string;
@@ -500,6 +510,7 @@ interface FFIDWebhookEventMap {
     'subscription.created': FFIDSubscriptionCreatedPayload;
     'subscription.reactivated': FFIDSubscriptionReactivatedPayload;
     'subscription.updated': FFIDSubscriptionUpdatedPayload;
+    'subscription.seats.changed': FFIDSubscriptionSeatsChangedPayload;
     'subscription.canceled': FFIDSubscriptionCanceledPayload;
     'subscription.downgrade_scheduled': FFIDSubscriptionDowngradeScheduledPayload;
     'subscription.downgrade_applied': FFIDSubscriptionDowngradeAppliedPayload;
@@ -650,4 +661,4 @@ declare function createFFIDWebhookHandler(config: FFIDWebhookHandlerConfig): {
 /** Type of the FFID Webhook handler */
 type FFIDWebhookHandler = ReturnType<typeof createFFIDWebhookHandler>;
 
-export { DEFAULT_TOLERANCE_SECONDS, type FFIDAnnouncementPublishedPayload, type FFIDCreditsExhaustedPayload, type FFIDCreditsGrantedPayload, type FFIDCreditsLowPayload, type FFIDCreditsPackPurchasedPayload, type FFIDLegalAgreementRequiredPayload, type FFIDLegalDocumentUpdatedPayload, type FFIDOrganizationCreatedPayload, type FFIDOrganizationMemberAddedPayload, type FFIDOrganizationMemberRemovedPayload, type FFIDOrganizationMemberRoleChangedPayload, type FFIDOrganizationUpdatedPayload, type FFIDSubscriptionCanceledPayload, type FFIDSubscriptionCreatedPayload, type FFIDSubscriptionDowngradeAppliedPayload, type FFIDSubscriptionDowngradeCanceledPayload, type FFIDSubscriptionDowngradeScheduledPayload, type FFIDSubscriptionPaymentFailedPayload, type FFIDSubscriptionReactivatedPayload, type FFIDSubscriptionTrialEndingPayload, type FFIDSubscriptionUpdatedPayload, type FFIDSystemMaintenancePayload, type FFIDTestPingPayload, type FFIDUserCreatedPayload, type FFIDUserDeletedPayload, type FFIDUserDeletionRequestedPayload, type FFIDUserUpdatedPayload, FFIDWebhookError, type FFIDWebhookEvent, type FFIDWebhookEventHandler, type FFIDWebhookEventMap, type FFIDWebhookEventType, type FFIDWebhookHandler, type FFIDWebhookHandlerConfig, type FFIDWebhookLogger, FFIDWebhookPayloadError, FFIDWebhookSignatureError, FFIDWebhookTimestampError, FFID_WEBHOOK_EVENT_ID_HEADER, FFID_WEBHOOK_SIGNATURE_HEADER, FFID_WEBHOOK_SIGNATURE_VERSION, FFID_WEBHOOK_TIMESTAMP_HEADER, computeSignature, createFFIDWebhookHandler, parseSignatureHeader, verifyWebhookSignature };
+export { DEFAULT_TOLERANCE_SECONDS, type FFIDAnnouncementPublishedPayload, type FFIDCreditsExhaustedPayload, type FFIDCreditsGrantedPayload, type FFIDCreditsLowPayload, type FFIDCreditsPackPurchasedPayload, type FFIDLegalAgreementRequiredPayload, type FFIDLegalDocumentUpdatedPayload, type FFIDOrganizationCreatedPayload, type FFIDOrganizationMemberAddedPayload, type FFIDOrganizationMemberRemovedPayload, type FFIDOrganizationMemberRoleChangedPayload, type FFIDOrganizationUpdatedPayload, type FFIDSubscriptionCanceledPayload, type FFIDSubscriptionCreatedPayload, type FFIDSubscriptionDowngradeAppliedPayload, type FFIDSubscriptionDowngradeCanceledPayload, type FFIDSubscriptionDowngradeScheduledPayload, type FFIDSubscriptionPaymentFailedPayload, type FFIDSubscriptionReactivatedPayload, type FFIDSubscriptionSeatsChangedPayload, type FFIDSubscriptionTrialEndingPayload, type FFIDSubscriptionUpdatedPayload, type FFIDSystemMaintenancePayload, type FFIDTestPingPayload, type FFIDUserCreatedPayload, type FFIDUserDeletedPayload, type FFIDUserDeletionRequestedPayload, type FFIDUserUpdatedPayload, FFIDWebhookError, type FFIDWebhookEvent, type FFIDWebhookEventHandler, type FFIDWebhookEventMap, type FFIDWebhookEventType, type FFIDWebhookHandler, type FFIDWebhookHandlerConfig, type FFIDWebhookLogger, FFIDWebhookPayloadError, FFIDWebhookSignatureError, FFIDWebhookTimestampError, FFID_WEBHOOK_EVENT_ID_HEADER, FFID_WEBHOOK_SIGNATURE_HEADER, FFID_WEBHOOK_SIGNATURE_VERSION, FFID_WEBHOOK_TIMESTAMP_HEADER, computeSignature, createFFIDWebhookHandler, parseSignatureHeader, verifyWebhookSignature };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@feelflow/ffid-sdk",
-  "version": "10.1.0",
+  "version": "12.0.0",
   "description": "FeelFlow ID Platform SDK for React/Next.js applications",
   "keywords": [
     "feelflow",