@feelflow/ffid-sdk 2.14.0 → 2.15.0

package/dist/{chunk-KMGY6PQY.cjs → chunk-6XEWLARZ.cjs}

@@ -762,12 +762,29 @@ function createMembersMethods(deps) {
 
 // src/client/profile-methods.ts
 var EXT_PROFILE_ENDPOINT = "/api/v1/users/ext/me";
+function resolveAuthOverride(options, createError) {
+  if (!options || options.accessToken === void 0) {
+    return {};
+  }
+  const token = options.accessToken;
+  if (typeof token !== "string" || token.trim() === "") {
+    return {
+      error: createError(
+        "VALIDATION_ERROR",
+        "accessToken \u3092\u6307\u5B9A\u3059\u308B\u5834\u5408\u3001\u7A7A\u6587\u5B57\u5217\u3084\u7A7A\u767D\u306E\u307F\u306E\u5024\u306F\u4F7F\u7528\u3067\u304D\u307E\u305B\u3093"
+      )
+    };
+  }
+  return { override: { accessToken: token } };
+}
 function createProfileMethods(deps) {
   const { fetchWithAuth, createError } = deps;
-  async function getProfile() {
-    return fetchWithAuth(EXT_PROFILE_ENDPOINT);
+  async function getProfile(options) {
+    const { override, error } = resolveAuthOverride(options, createError);
+    if (error) return { error };
+    return fetchWithAuth(EXT_PROFILE_ENDPOINT, void 0, override);
   }
-  async function updateProfile(data) {
+  async function updateProfile(data, options) {
     if (data === null || typeof data !== "object" || Array.isArray(data)) {
       return {
         error: createError("VALIDATION_ERROR", "data \u306F\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059")
@@ -778,16 +795,22 @@ function createProfileMethods(deps) {
         error: createError("VALIDATION_ERROR", "\u66F4\u65B0\u3059\u308B\u30D5\u30A3\u30FC\u30EB\u30C9\u30921\u3064\u4EE5\u4E0A\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044")
       };
     }
-    return fetchWithAuth(EXT_PROFILE_ENDPOINT, {
-      method: "PUT",
-      body: JSON.stringify(data)
-    });
+    const { override, error } = resolveAuthOverride(options, createError);
+    if (error) return { error };
+    return fetchWithAuth(
+      EXT_PROFILE_ENDPOINT,
+      {
+        method: "PUT",
+        body: JSON.stringify(data)
+      },
+      override
+    );
   }
   return { getProfile, updateProfile };
 }
 
 // src/client/version-check.ts
-var SDK_VERSION = "2.14.0";
+var SDK_VERSION = "2.15.0";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {
@@ -1982,7 +2005,19 @@ function createFFIDClient(config) {
   function createError(code, message) {
     return { code, message };
   }
-  function buildFetchOptions(options) {
+  function buildFetchOptions(options, authOverride) {
+    if (authOverride) {
+      return {
+        ...options,
+        credentials: "omit",
+        headers: {
+          "Content-Type": "application/json",
+          ...sdkHeaders(),
+          ...options.headers,
+          Authorization: `Bearer ${authOverride.accessToken}`
+        }
+      };
+    }
     if (authMode === "service-key") {
       return {
         ...options,
@@ -2029,10 +2064,10 @@ function createFFIDClient(config) {
     logger,
     errorCodes: FFID_ERROR_CODES
   });
-  async function fetchWithAuth(endpoint, options = {}) {
+  async function fetchWithAuth(endpoint, options = {}, authOverride) {
     const url = `${baseUrl}${endpoint}`;
     logger.debug("Fetching:", url);
-    const fetchOptions = buildFetchOptions(options);
+    const fetchOptions = buildFetchOptions(options, authOverride);
     let response;
     try {
       response = await fetch(url, fetchOptions);
@@ -2045,7 +2080,7 @@ function createFFIDClient(config) {
         }
       };
     }
-    if (authMode === "token" && response.status === UNAUTHORIZED_STATUS2) {
+    if (!authOverride && authMode === "token" && response.status === UNAUTHORIZED_STATUS2) {
       const refreshResult = await refreshAccessToken();
       if (!refreshResult.error) {
         logger.debug("Token refreshed, retrying request");

package/dist/{chunk-424GEJSP.js → chunk-OOGFUCRJ.js}

@@ -760,12 +760,29 @@ function createMembersMethods(deps) {
 
 // src/client/profile-methods.ts
 var EXT_PROFILE_ENDPOINT = "/api/v1/users/ext/me";
+function resolveAuthOverride(options, createError) {
+  if (!options || options.accessToken === void 0) {
+    return {};
+  }
+  const token = options.accessToken;
+  if (typeof token !== "string" || token.trim() === "") {
+    return {
+      error: createError(
+        "VALIDATION_ERROR",
+        "accessToken \u3092\u6307\u5B9A\u3059\u308B\u5834\u5408\u3001\u7A7A\u6587\u5B57\u5217\u3084\u7A7A\u767D\u306E\u307F\u306E\u5024\u306F\u4F7F\u7528\u3067\u304D\u307E\u305B\u3093"
+      )
+    };
+  }
+  return { override: { accessToken: token } };
+}
 function createProfileMethods(deps) {
   const { fetchWithAuth, createError } = deps;
-  async function getProfile() {
-    return fetchWithAuth(EXT_PROFILE_ENDPOINT);
+  async function getProfile(options) {
+    const { override, error } = resolveAuthOverride(options, createError);
+    if (error) return { error };
+    return fetchWithAuth(EXT_PROFILE_ENDPOINT, void 0, override);
   }
-  async function updateProfile(data) {
+  async function updateProfile(data, options) {
     if (data === null || typeof data !== "object" || Array.isArray(data)) {
       return {
         error: createError("VALIDATION_ERROR", "data \u306F\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059")
@@ -776,16 +793,22 @@ function createProfileMethods(deps) {
         error: createError("VALIDATION_ERROR", "\u66F4\u65B0\u3059\u308B\u30D5\u30A3\u30FC\u30EB\u30C9\u30921\u3064\u4EE5\u4E0A\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044")
       };
     }
-    return fetchWithAuth(EXT_PROFILE_ENDPOINT, {
-      method: "PUT",
-      body: JSON.stringify(data)
-    });
+    const { override, error } = resolveAuthOverride(options, createError);
+    if (error) return { error };
+    return fetchWithAuth(
+      EXT_PROFILE_ENDPOINT,
+      {
+        method: "PUT",
+        body: JSON.stringify(data)
+      },
+      override
+    );
   }
   return { getProfile, updateProfile };
 }
 
 // src/client/version-check.ts
-var SDK_VERSION = "2.14.0";
+var SDK_VERSION = "2.15.0";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {
@@ -1980,7 +2003,19 @@ function createFFIDClient(config) {
   function createError(code, message) {
     return { code, message };
   }
-  function buildFetchOptions(options) {
+  function buildFetchOptions(options, authOverride) {
+    if (authOverride) {
+      return {
+        ...options,
+        credentials: "omit",
+        headers: {
+          "Content-Type": "application/json",
+          ...sdkHeaders(),
+          ...options.headers,
+          Authorization: `Bearer ${authOverride.accessToken}`
+        }
+      };
+    }
     if (authMode === "service-key") {
       return {
         ...options,
@@ -2027,10 +2062,10 @@ function createFFIDClient(config) {
     logger,
     errorCodes: FFID_ERROR_CODES
   });
-  async function fetchWithAuth(endpoint, options = {}) {
+  async function fetchWithAuth(endpoint, options = {}, authOverride) {
     const url = `${baseUrl}${endpoint}`;
     logger.debug("Fetching:", url);
-    const fetchOptions = buildFetchOptions(options);
+    const fetchOptions = buildFetchOptions(options, authOverride);
     let response;
     try {
       response = await fetch(url, fetchOptions);
@@ -2043,7 +2078,7 @@ function createFFIDClient(config) {
         }
       };
     }
-    if (authMode === "token" && response.status === UNAUTHORIZED_STATUS2) {
+    if (!authOverride && authMode === "token" && response.status === UNAUTHORIZED_STATUS2) {
       const refreshResult = await refreshAccessToken();
       if (!refreshResult.error) {
         logger.debug("Token refreshed, retrying request");

package/dist/components/index.cjs

@@ -1,34 +1,34 @@
 'use strict';
 
-var chunkKMGY6PQY_cjs = require('../chunk-KMGY6PQY.cjs');
+var chunk6XEWLARZ_cjs = require('../chunk-6XEWLARZ.cjs');
 
 
 
 Object.defineProperty(exports, "FFIDAnnouncementBadge", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.FFIDAnnouncementBadge; }
+  get: function () { return chunk6XEWLARZ_cjs.FFIDAnnouncementBadge; }
 });
 Object.defineProperty(exports, "FFIDAnnouncementList", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.FFIDAnnouncementList; }
+  get: function () { return chunk6XEWLARZ_cjs.FFIDAnnouncementList; }
 });
 Object.defineProperty(exports, "FFIDInquiryForm", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.FFIDInquiryForm; }
+  get: function () { return chunk6XEWLARZ_cjs.FFIDInquiryForm; }
 });
 Object.defineProperty(exports, "FFIDLoginButton", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.FFIDLoginButton; }
+  get: function () { return chunk6XEWLARZ_cjs.FFIDLoginButton; }
 });
 Object.defineProperty(exports, "FFIDOrganizationSwitcher", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.FFIDOrganizationSwitcher; }
+  get: function () { return chunk6XEWLARZ_cjs.FFIDOrganizationSwitcher; }
 });
 Object.defineProperty(exports, "FFIDSubscriptionBadge", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.FFIDSubscriptionBadge; }
+  get: function () { return chunk6XEWLARZ_cjs.FFIDSubscriptionBadge; }
 });
 Object.defineProperty(exports, "FFIDUserMenu", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.FFIDUserMenu; }
+  get: function () { return chunk6XEWLARZ_cjs.FFIDUserMenu; }
 });

package/dist/components/index.d.cts

@@ -1,3 +1,3 @@
-export { J as FFIDAnnouncementBadge, ai as FFIDAnnouncementBadgeClassNames, aj as FFIDAnnouncementBadgeProps, K as FFIDAnnouncementList, ak as FFIDAnnouncementListClassNames, al as FFIDAnnouncementListProps, T as FFIDInquiryForm, U as FFIDInquiryFormCategoryItem, V as FFIDInquiryFormClassNames, W as FFIDInquiryFormOrganization, X as FFIDInquiryFormPlaceholderContext, Y as FFIDInquiryFormPrefill, Z as FFIDInquiryFormProps, _ as FFIDInquiryFormSubmitData, $ as FFIDInquiryFormSubmitResult, a1 as FFIDLoginButton, am as FFIDLoginButtonProps, a7 as FFIDOrganizationSwitcher, an as FFIDOrganizationSwitcherClassNames, ao as FFIDOrganizationSwitcherProps, a9 as FFIDSubscriptionBadge, ap as FFIDSubscriptionBadgeClassNames, aq as FFIDSubscriptionBadgeProps, ab as FFIDUserMenu, ar as FFIDUserMenuClassNames, as as FFIDUserMenuProps } from '../index-DT3wF1vZ.cjs';
+export { K as FFIDAnnouncementBadge, aj as FFIDAnnouncementBadgeClassNames, ak as FFIDAnnouncementBadgeProps, M as FFIDAnnouncementList, al as FFIDAnnouncementListClassNames, am as FFIDAnnouncementListProps, U as FFIDInquiryForm, V as FFIDInquiryFormCategoryItem, W as FFIDInquiryFormClassNames, X as FFIDInquiryFormOrganization, Y as FFIDInquiryFormPlaceholderContext, Z as FFIDInquiryFormPrefill, _ as FFIDInquiryFormProps, $ as FFIDInquiryFormSubmitData, a0 as FFIDInquiryFormSubmitResult, a2 as FFIDLoginButton, an as FFIDLoginButtonProps, a8 as FFIDOrganizationSwitcher, ao as FFIDOrganizationSwitcherClassNames, ap as FFIDOrganizationSwitcherProps, aa as FFIDSubscriptionBadge, aq as FFIDSubscriptionBadgeClassNames, ar as FFIDSubscriptionBadgeProps, ac as FFIDUserMenu, as as FFIDUserMenuClassNames, at as FFIDUserMenuProps } from '../index-LPTvxtgt.cjs';
 import 'react/jsx-runtime';
 import 'react';

package/dist/components/index.d.ts

@@ -1,3 +1,3 @@
-export { J as FFIDAnnouncementBadge, ai as FFIDAnnouncementBadgeClassNames, aj as FFIDAnnouncementBadgeProps, K as FFIDAnnouncementList, ak as FFIDAnnouncementListClassNames, al as FFIDAnnouncementListProps, T as FFIDInquiryForm, U as FFIDInquiryFormCategoryItem, V as FFIDInquiryFormClassNames, W as FFIDInquiryFormOrganization, X as FFIDInquiryFormPlaceholderContext, Y as FFIDInquiryFormPrefill, Z as FFIDInquiryFormProps, _ as FFIDInquiryFormSubmitData, $ as FFIDInquiryFormSubmitResult, a1 as FFIDLoginButton, am as FFIDLoginButtonProps, a7 as FFIDOrganizationSwitcher, an as FFIDOrganizationSwitcherClassNames, ao as FFIDOrganizationSwitcherProps, a9 as FFIDSubscriptionBadge, ap as FFIDSubscriptionBadgeClassNames, aq as FFIDSubscriptionBadgeProps, ab as FFIDUserMenu, ar as FFIDUserMenuClassNames, as as FFIDUserMenuProps } from '../index-DT3wF1vZ.js';
+export { K as FFIDAnnouncementBadge, aj as FFIDAnnouncementBadgeClassNames, ak as FFIDAnnouncementBadgeProps, M as FFIDAnnouncementList, al as FFIDAnnouncementListClassNames, am as FFIDAnnouncementListProps, U as FFIDInquiryForm, V as FFIDInquiryFormCategoryItem, W as FFIDInquiryFormClassNames, X as FFIDInquiryFormOrganization, Y as FFIDInquiryFormPlaceholderContext, Z as FFIDInquiryFormPrefill, _ as FFIDInquiryFormProps, $ as FFIDInquiryFormSubmitData, a0 as FFIDInquiryFormSubmitResult, a2 as FFIDLoginButton, an as FFIDLoginButtonProps, a8 as FFIDOrganizationSwitcher, ao as FFIDOrganizationSwitcherClassNames, ap as FFIDOrganizationSwitcherProps, aa as FFIDSubscriptionBadge, aq as FFIDSubscriptionBadgeClassNames, ar as FFIDSubscriptionBadgeProps, ac as FFIDUserMenu, as as FFIDUserMenuClassNames, at as FFIDUserMenuProps } from '../index-LPTvxtgt.js';
 import 'react/jsx-runtime';
 import 'react';

package/dist/components/index.js

@@ -1 +1 @@
-export { FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDSubscriptionBadge, FFIDUserMenu } from '../chunk-424GEJSP.js';
+export { FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDSubscriptionBadge, FFIDUserMenu } from '../chunk-OOGFUCRJ.js';

package/dist/{index-DT3wF1vZ.d.cts → index-LPTvxtgt.d.cts}

@@ -460,6 +460,38 @@ interface FFIDUserProfile {
     /** Profile last-updated timestamp (ISO 8601) */
     updatedAt: string;
 }
+/**
+ * Per-call options for profile methods (`getProfile` / `updateProfile`).
+ *
+ * Supply `accessToken` to forward an end-user Bearer token for the single call
+ * without mutating client-level auth state. Designed for server runtimes (Cloudflare
+ * Workers, Edge, Node) that receive a user-scoped Bearer per request and want to
+ * act as that user against `/api/v1/users/ext/me`.
+ *
+ * When `accessToken` is supplied with a non-empty value, it overrides the client's
+ * configured auth mode: authentication for that request uses only
+ * `Authorization: Bearer <accessToken>` (no service key, no cookie, no token-store
+ * lookup, no auto-refresh on 401). Non-auth headers such as `Content-Type` and
+ * SDK metadata headers (User-Agent / X-FFID-SDK-Version) are still attached.
+ *
+ * Runtime semantics:
+ * - `accessToken` omitted (or `undefined`) → no override, configured `authMode` is used
+ * - `accessToken` is empty string / whitespace-only → rejected as `VALIDATION_ERROR`
+ *   before any network call (prevents silent impersonation fallback when a caller
+ *   extracts a missing/blank `Authorization` header into this field)
+ * - `accessToken` is a non-empty string → override activated
+ */
+interface FFIDProfileCallOptions {
+    /**
+     * End-user Bearer token forwarded for this single request.
+     *
+     * Must be a non-empty string when supplied. Passing `''` or a whitespace-only
+     * string is treated as a caller error and surfaces as `VALIDATION_ERROR` —
+     * this guards against the common footgun where a server runtime extracts the
+     * Bearer from an incoming request without checking the header is present.
+     */
+    accessToken?: string;
+}
 /**
  * Request payload for `updateProfile`.
  *
@@ -1229,4 +1261,4 @@ interface FFIDInquiryFormPlaceholderContext {
 }
 declare function FFIDInquiryForm({ mode, prefill, organizations, preselectedOrganizationId, categories, termsVersion, privacyVersion, termsHref, privacyHref, turnstileToken, turnstileSlot, onSubmit, onChange, separateLegalCheckboxes, messagePlaceholder, requireCategorySelection, unstyled, classNames, locale, className, }: FFIDInquiryFormProps): react_jsx_runtime.JSX.Element;
 
-export { type FFIDInquiryFormSubmitResult as $, type FFIDSubscriptionContextValue as A, type FFIDAnnouncementsClientConfig as B, type FFIDAnnouncementsApiResponse as C, type AnnouncementListResponse as D, type FFIDAnnouncementsLogger as E, type FFIDSubscriptionStatus as F, type Announcement as G, type AnnouncementStatus as H, type AnnouncementType as I, FFIDAnnouncementBadge as J, FFIDAnnouncementList as K, type ListAnnouncementsOptions as L, type FFIDAnnouncementsError as M, type FFIDAnnouncementsErrorCode as N, type FFIDAnnouncementsServerResponse as O, type FFIDCacheConfig as P, type FFIDContextValue as Q, type FFIDInquiryCategory as R, type FFIDInquiryCategorySite2026 as S, FFIDInquiryForm as T, type FFIDInquiryFormCategoryItem as U, type FFIDInquiryFormClassNames as V, type FFIDInquiryFormOrganization as W, type FFIDInquiryFormPlaceholderContext as X, type FFIDInquiryFormPrefill as Y, type FFIDInquiryFormProps as Z, type FFIDInquiryFormSubmitData as _, type FFIDConfig as a, type FFIDJwtClaims as a0, FFIDLoginButton as a1, type FFIDMemberStatus as a2, type FFIDOAuthTokenResponse as a3, type FFIDOAuthUserInfoMemberRole as a4, type FFIDOAuthUserInfoSubscription as a5, type FFIDOrganizationMember as a6, FFIDOrganizationSwitcher as a7, type FFIDSeatModel as a8, FFIDSubscriptionBadge as a9, type FFIDTokenIntrospectionResponse as aa, FFIDUserMenu as ab, FFID_INQUIRY_CATEGORIES as ac, FFID_INQUIRY_CATEGORIES_SITE_2026 as ad, type UseFFIDAnnouncementsOptions as ae, type UseFFIDAnnouncementsReturn as af, isFFIDInquiryCategorySite2026 as ag, useFFIDAnnouncements as ah, type FFIDAnnouncementBadgeClassNames as ai, type FFIDAnnouncementBadgeProps as aj, type FFIDAnnouncementListClassNames as ak, type FFIDAnnouncementListProps as al, type FFIDLoginButtonProps as am, type FFIDOrganizationSwitcherClassNames as an, type FFIDOrganizationSwitcherProps as ao, type FFIDSubscriptionBadgeClassNames as ap, type FFIDSubscriptionBadgeProps as aq, type FFIDUserMenuClassNames as ar, type FFIDUserMenuProps as as, type FFIDApiResponse as b, type FFIDSessionResponse as c, type FFIDRedirectResult as d, type FFIDError as e, type FFIDSubscriptionCheckResponse as f, type FFIDListMembersResponse as g, type FFIDMemberRole as h, type FFIDUpdateMemberRoleResponse as i, type FFIDRemoveMemberResponse as j, type FFIDUserProfile as k, type FFIDUpdateUserProfileRequest as l, type FFIDCreateCheckoutParams as m, type FFIDCheckoutSessionResponse as n, type FFIDCreatePortalParams as o, type FFIDPortalSessionResponse as p, type FFIDVerifyAccessTokenOptions as q, type FFIDOAuthUserInfo as r, type FFIDInquiryCreateParams as s, type FFIDInquiryCreateResponse as t, type FFIDAuthMode as u, type FFIDLogger as v, type FFIDCacheAdapter as w, type FFIDUser as x, type FFIDOrganization as y, type FFIDSubscription as z };
+export { type FFIDInquiryFormSubmitData as $, type FFIDSubscription as A, type FFIDSubscriptionContextValue as B, type FFIDAnnouncementsClientConfig as C, type FFIDAnnouncementsApiResponse as D, type AnnouncementListResponse as E, type FFIDSubscriptionStatus as F, type FFIDAnnouncementsLogger as G, type Announcement as H, type AnnouncementStatus as I, type AnnouncementType as J, FFIDAnnouncementBadge as K, type ListAnnouncementsOptions as L, FFIDAnnouncementList as M, type FFIDAnnouncementsError as N, type FFIDAnnouncementsErrorCode as O, type FFIDAnnouncementsServerResponse as P, type FFIDCacheConfig as Q, type FFIDContextValue as R, type FFIDInquiryCategory as S, type FFIDInquiryCategorySite2026 as T, FFIDInquiryForm as U, type FFIDInquiryFormCategoryItem as V, type FFIDInquiryFormClassNames as W, type FFIDInquiryFormOrganization as X, type FFIDInquiryFormPlaceholderContext as Y, type FFIDInquiryFormPrefill as Z, type FFIDInquiryFormProps as _, type FFIDConfig as a, type FFIDInquiryFormSubmitResult as a0, type FFIDJwtClaims as a1, FFIDLoginButton as a2, type FFIDMemberStatus as a3, type FFIDOAuthTokenResponse as a4, type FFIDOAuthUserInfoMemberRole as a5, type FFIDOAuthUserInfoSubscription as a6, type FFIDOrganizationMember as a7, FFIDOrganizationSwitcher as a8, type FFIDSeatModel as a9, FFIDSubscriptionBadge as aa, type FFIDTokenIntrospectionResponse as ab, FFIDUserMenu as ac, FFID_INQUIRY_CATEGORIES as ad, FFID_INQUIRY_CATEGORIES_SITE_2026 as ae, type UseFFIDAnnouncementsOptions as af, type UseFFIDAnnouncementsReturn as ag, isFFIDInquiryCategorySite2026 as ah, useFFIDAnnouncements as ai, type FFIDAnnouncementBadgeClassNames as aj, type FFIDAnnouncementBadgeProps as ak, type FFIDAnnouncementListClassNames as al, type FFIDAnnouncementListProps as am, type FFIDLoginButtonProps as an, type FFIDOrganizationSwitcherClassNames as ao, type FFIDOrganizationSwitcherProps as ap, type FFIDSubscriptionBadgeClassNames as aq, type FFIDSubscriptionBadgeProps as ar, type FFIDUserMenuClassNames as as, type FFIDUserMenuProps as at, type FFIDApiResponse as b, type FFIDSessionResponse as c, type FFIDRedirectResult as d, type FFIDError as e, type FFIDSubscriptionCheckResponse as f, type FFIDListMembersResponse as g, type FFIDMemberRole as h, type FFIDUpdateMemberRoleResponse as i, type FFIDRemoveMemberResponse as j, type FFIDProfileCallOptions as k, type FFIDUserProfile as l, type FFIDUpdateUserProfileRequest as m, type FFIDCreateCheckoutParams as n, type FFIDCheckoutSessionResponse as o, type FFIDCreatePortalParams as p, type FFIDPortalSessionResponse as q, type FFIDVerifyAccessTokenOptions as r, type FFIDOAuthUserInfo as s, type FFIDInquiryCreateParams as t, type FFIDInquiryCreateResponse as u, type FFIDAuthMode as v, type FFIDLogger as w, type FFIDCacheAdapter as x, type FFIDUser as y, type FFIDOrganization as z };

package/dist/{index-DT3wF1vZ.d.ts → index-LPTvxtgt.d.ts}

@@ -460,6 +460,38 @@ interface FFIDUserProfile {
     /** Profile last-updated timestamp (ISO 8601) */
     updatedAt: string;
 }
+/**
+ * Per-call options for profile methods (`getProfile` / `updateProfile`).
+ *
+ * Supply `accessToken` to forward an end-user Bearer token for the single call
+ * without mutating client-level auth state. Designed for server runtimes (Cloudflare
+ * Workers, Edge, Node) that receive a user-scoped Bearer per request and want to
+ * act as that user against `/api/v1/users/ext/me`.
+ *
+ * When `accessToken` is supplied with a non-empty value, it overrides the client's
+ * configured auth mode: authentication for that request uses only
+ * `Authorization: Bearer <accessToken>` (no service key, no cookie, no token-store
+ * lookup, no auto-refresh on 401). Non-auth headers such as `Content-Type` and
+ * SDK metadata headers (User-Agent / X-FFID-SDK-Version) are still attached.
+ *
+ * Runtime semantics:
+ * - `accessToken` omitted (or `undefined`) → no override, configured `authMode` is used
+ * - `accessToken` is empty string / whitespace-only → rejected as `VALIDATION_ERROR`
+ *   before any network call (prevents silent impersonation fallback when a caller
+ *   extracts a missing/blank `Authorization` header into this field)
+ * - `accessToken` is a non-empty string → override activated
+ */
+interface FFIDProfileCallOptions {
+    /**
+     * End-user Bearer token forwarded for this single request.
+     *
+     * Must be a non-empty string when supplied. Passing `''` or a whitespace-only
+     * string is treated as a caller error and surfaces as `VALIDATION_ERROR` —
+     * this guards against the common footgun where a server runtime extracts the
+     * Bearer from an incoming request without checking the header is present.
+     */
+    accessToken?: string;
+}
 /**
  * Request payload for `updateProfile`.
  *
@@ -1229,4 +1261,4 @@ interface FFIDInquiryFormPlaceholderContext {
 }
 declare function FFIDInquiryForm({ mode, prefill, organizations, preselectedOrganizationId, categories, termsVersion, privacyVersion, termsHref, privacyHref, turnstileToken, turnstileSlot, onSubmit, onChange, separateLegalCheckboxes, messagePlaceholder, requireCategorySelection, unstyled, classNames, locale, className, }: FFIDInquiryFormProps): react_jsx_runtime.JSX.Element;
 
-export { type FFIDInquiryFormSubmitResult as $, type FFIDSubscriptionContextValue as A, type FFIDAnnouncementsClientConfig as B, type FFIDAnnouncementsApiResponse as C, type AnnouncementListResponse as D, type FFIDAnnouncementsLogger as E, type FFIDSubscriptionStatus as F, type Announcement as G, type AnnouncementStatus as H, type AnnouncementType as I, FFIDAnnouncementBadge as J, FFIDAnnouncementList as K, type ListAnnouncementsOptions as L, type FFIDAnnouncementsError as M, type FFIDAnnouncementsErrorCode as N, type FFIDAnnouncementsServerResponse as O, type FFIDCacheConfig as P, type FFIDContextValue as Q, type FFIDInquiryCategory as R, type FFIDInquiryCategorySite2026 as S, FFIDInquiryForm as T, type FFIDInquiryFormCategoryItem as U, type FFIDInquiryFormClassNames as V, type FFIDInquiryFormOrganization as W, type FFIDInquiryFormPlaceholderContext as X, type FFIDInquiryFormPrefill as Y, type FFIDInquiryFormProps as Z, type FFIDInquiryFormSubmitData as _, type FFIDConfig as a, type FFIDJwtClaims as a0, FFIDLoginButton as a1, type FFIDMemberStatus as a2, type FFIDOAuthTokenResponse as a3, type FFIDOAuthUserInfoMemberRole as a4, type FFIDOAuthUserInfoSubscription as a5, type FFIDOrganizationMember as a6, FFIDOrganizationSwitcher as a7, type FFIDSeatModel as a8, FFIDSubscriptionBadge as a9, type FFIDTokenIntrospectionResponse as aa, FFIDUserMenu as ab, FFID_INQUIRY_CATEGORIES as ac, FFID_INQUIRY_CATEGORIES_SITE_2026 as ad, type UseFFIDAnnouncementsOptions as ae, type UseFFIDAnnouncementsReturn as af, isFFIDInquiryCategorySite2026 as ag, useFFIDAnnouncements as ah, type FFIDAnnouncementBadgeClassNames as ai, type FFIDAnnouncementBadgeProps as aj, type FFIDAnnouncementListClassNames as ak, type FFIDAnnouncementListProps as al, type FFIDLoginButtonProps as am, type FFIDOrganizationSwitcherClassNames as an, type FFIDOrganizationSwitcherProps as ao, type FFIDSubscriptionBadgeClassNames as ap, type FFIDSubscriptionBadgeProps as aq, type FFIDUserMenuClassNames as ar, type FFIDUserMenuProps as as, type FFIDApiResponse as b, type FFIDSessionResponse as c, type FFIDRedirectResult as d, type FFIDError as e, type FFIDSubscriptionCheckResponse as f, type FFIDListMembersResponse as g, type FFIDMemberRole as h, type FFIDUpdateMemberRoleResponse as i, type FFIDRemoveMemberResponse as j, type FFIDUserProfile as k, type FFIDUpdateUserProfileRequest as l, type FFIDCreateCheckoutParams as m, type FFIDCheckoutSessionResponse as n, type FFIDCreatePortalParams as o, type FFIDPortalSessionResponse as p, type FFIDVerifyAccessTokenOptions as q, type FFIDOAuthUserInfo as r, type FFIDInquiryCreateParams as s, type FFIDInquiryCreateResponse as t, type FFIDAuthMode as u, type FFIDLogger as v, type FFIDCacheAdapter as w, type FFIDUser as x, type FFIDOrganization as y, type FFIDSubscription as z };
+export { type FFIDInquiryFormSubmitData as $, type FFIDSubscription as A, type FFIDSubscriptionContextValue as B, type FFIDAnnouncementsClientConfig as C, type FFIDAnnouncementsApiResponse as D, type AnnouncementListResponse as E, type FFIDSubscriptionStatus as F, type FFIDAnnouncementsLogger as G, type Announcement as H, type AnnouncementStatus as I, type AnnouncementType as J, FFIDAnnouncementBadge as K, type ListAnnouncementsOptions as L, FFIDAnnouncementList as M, type FFIDAnnouncementsError as N, type FFIDAnnouncementsErrorCode as O, type FFIDAnnouncementsServerResponse as P, type FFIDCacheConfig as Q, type FFIDContextValue as R, type FFIDInquiryCategory as S, type FFIDInquiryCategorySite2026 as T, FFIDInquiryForm as U, type FFIDInquiryFormCategoryItem as V, type FFIDInquiryFormClassNames as W, type FFIDInquiryFormOrganization as X, type FFIDInquiryFormPlaceholderContext as Y, type FFIDInquiryFormPrefill as Z, type FFIDInquiryFormProps as _, type FFIDConfig as a, type FFIDInquiryFormSubmitResult as a0, type FFIDJwtClaims as a1, FFIDLoginButton as a2, type FFIDMemberStatus as a3, type FFIDOAuthTokenResponse as a4, type FFIDOAuthUserInfoMemberRole as a5, type FFIDOAuthUserInfoSubscription as a6, type FFIDOrganizationMember as a7, FFIDOrganizationSwitcher as a8, type FFIDSeatModel as a9, FFIDSubscriptionBadge as aa, type FFIDTokenIntrospectionResponse as ab, FFIDUserMenu as ac, FFID_INQUIRY_CATEGORIES as ad, FFID_INQUIRY_CATEGORIES_SITE_2026 as ae, type UseFFIDAnnouncementsOptions as af, type UseFFIDAnnouncementsReturn as ag, isFFIDInquiryCategorySite2026 as ah, useFFIDAnnouncements as ai, type FFIDAnnouncementBadgeClassNames as aj, type FFIDAnnouncementBadgeProps as ak, type FFIDAnnouncementListClassNames as al, type FFIDAnnouncementListProps as am, type FFIDLoginButtonProps as an, type FFIDOrganizationSwitcherClassNames as ao, type FFIDOrganizationSwitcherProps as ap, type FFIDSubscriptionBadgeClassNames as aq, type FFIDSubscriptionBadgeProps as ar, type FFIDUserMenuClassNames as as, type FFIDUserMenuProps as at, type FFIDApiResponse as b, type FFIDSessionResponse as c, type FFIDRedirectResult as d, type FFIDError as e, type FFIDSubscriptionCheckResponse as f, type FFIDListMembersResponse as g, type FFIDMemberRole as h, type FFIDUpdateMemberRoleResponse as i, type FFIDRemoveMemberResponse as j, type FFIDProfileCallOptions as k, type FFIDUserProfile as l, type FFIDUpdateUserProfileRequest as m, type FFIDCreateCheckoutParams as n, type FFIDCheckoutSessionResponse as o, type FFIDCreatePortalParams as p, type FFIDPortalSessionResponse as q, type FFIDVerifyAccessTokenOptions as r, type FFIDOAuthUserInfo as s, type FFIDInquiryCreateParams as t, type FFIDInquiryCreateResponse as u, type FFIDAuthMode as v, type FFIDLogger as w, type FFIDCacheAdapter as x, type FFIDUser as y, type FFIDOrganization as z };

package/dist/index.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkKMGY6PQY_cjs = require('./chunk-KMGY6PQY.cjs');
+var chunk6XEWLARZ_cjs = require('./chunk-6XEWLARZ.cjs');
 var react = require('react');
 var jsxRuntime = require('react/jsx-runtime');
 
@@ -46,7 +46,7 @@ function createKVCacheAdapter(kv) {
 }
 function withFFIDAuth(Component, options = {}) {
   const WrappedComponent = (props) => {
-    const { isLoading, isAuthenticated, login } = chunkKMGY6PQY_cjs.useFFIDContext();
+    const { isLoading, isAuthenticated, login } = chunk6XEWLARZ_cjs.useFFIDContext();
     const hasRedirected = react.useRef(false);
     react.useEffect(() => {
       if (!isLoading && !isAuthenticated && options.redirectToLogin && !hasRedirected.current) {
@@ -74,107 +74,107 @@ var FFID_NEWSLETTER_TYPES = ["inquiry_followup", "general"];
 
 Object.defineProperty(exports, "DEFAULT_API_BASE_URL", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.DEFAULT_API_BASE_URL; }
+  get: function () { return chunk6XEWLARZ_cjs.DEFAULT_API_BASE_URL; }
 });
 Object.defineProperty(exports, "FFIDAnnouncementBadge", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.FFIDAnnouncementBadge; }
+  get: function () { return chunk6XEWLARZ_cjs.FFIDAnnouncementBadge; }
 });
 Object.defineProperty(exports, "FFIDAnnouncementList", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.FFIDAnnouncementList; }
+  get: function () { return chunk6XEWLARZ_cjs.FFIDAnnouncementList; }
 });
 Object.defineProperty(exports, "FFIDInquiryForm", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.FFIDInquiryForm; }
+  get: function () { return chunk6XEWLARZ_cjs.FFIDInquiryForm; }
 });
 Object.defineProperty(exports, "FFIDLoginButton", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.FFIDLoginButton; }
+  get: function () { return chunk6XEWLARZ_cjs.FFIDLoginButton; }
 });
 Object.defineProperty(exports, "FFIDOrganizationSwitcher", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.FFIDOrganizationSwitcher; }
+  get: function () { return chunk6XEWLARZ_cjs.FFIDOrganizationSwitcher; }
 });
 Object.defineProperty(exports, "FFIDProvider", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.FFIDProvider; }
+  get: function () { return chunk6XEWLARZ_cjs.FFIDProvider; }
 });
 Object.defineProperty(exports, "FFIDSDKError", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.FFIDSDKError; }
+  get: function () { return chunk6XEWLARZ_cjs.FFIDSDKError; }
 });
 Object.defineProperty(exports, "FFIDSubscriptionBadge", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.FFIDSubscriptionBadge; }
+  get: function () { return chunk6XEWLARZ_cjs.FFIDSubscriptionBadge; }
 });
 Object.defineProperty(exports, "FFIDUserMenu", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.FFIDUserMenu; }
+  get: function () { return chunk6XEWLARZ_cjs.FFIDUserMenu; }
 });
 Object.defineProperty(exports, "FFID_ANNOUNCEMENTS_ERROR_CODES", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.FFID_ANNOUNCEMENTS_ERROR_CODES; }
+  get: function () { return chunk6XEWLARZ_cjs.FFID_ANNOUNCEMENTS_ERROR_CODES; }
 });
 Object.defineProperty(exports, "FFID_INQUIRY_CATEGORIES", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.FFID_INQUIRY_CATEGORIES; }
+  get: function () { return chunk6XEWLARZ_cjs.FFID_INQUIRY_CATEGORIES; }
 });
 Object.defineProperty(exports, "FFID_INQUIRY_CATEGORIES_SITE_2026", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.FFID_INQUIRY_CATEGORIES_SITE_2026; }
+  get: function () { return chunk6XEWLARZ_cjs.FFID_INQUIRY_CATEGORIES_SITE_2026; }
 });
 Object.defineProperty(exports, "createFFIDAnnouncementsClient", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.createFFIDAnnouncementsClient; }
+  get: function () { return chunk6XEWLARZ_cjs.createFFIDAnnouncementsClient; }
 });
 Object.defineProperty(exports, "createFFIDClient", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.createFFIDClient; }
+  get: function () { return chunk6XEWLARZ_cjs.createFFIDClient; }
 });
 Object.defineProperty(exports, "createTokenStore", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.createTokenStore; }
+  get: function () { return chunk6XEWLARZ_cjs.createTokenStore; }
 });
 Object.defineProperty(exports, "generateCodeChallenge", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.generateCodeChallenge; }
+  get: function () { return chunk6XEWLARZ_cjs.generateCodeChallenge; }
 });
 Object.defineProperty(exports, "generateCodeVerifier", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.generateCodeVerifier; }
+  get: function () { return chunk6XEWLARZ_cjs.generateCodeVerifier; }
 });
 Object.defineProperty(exports, "isFFIDInquiryCategorySite2026", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.isFFIDInquiryCategorySite2026; }
+  get: function () { return chunk6XEWLARZ_cjs.isFFIDInquiryCategorySite2026; }
 });
 Object.defineProperty(exports, "normalizeRedirectUri", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.normalizeRedirectUri; }
+  get: function () { return chunk6XEWLARZ_cjs.normalizeRedirectUri; }
 });
 Object.defineProperty(exports, "retrieveCodeVerifier", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.retrieveCodeVerifier; }
+  get: function () { return chunk6XEWLARZ_cjs.retrieveCodeVerifier; }
 });
 Object.defineProperty(exports, "storeCodeVerifier", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.storeCodeVerifier; }
+  get: function () { return chunk6XEWLARZ_cjs.storeCodeVerifier; }
 });
 Object.defineProperty(exports, "useFFID", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.useFFID; }
+  get: function () { return chunk6XEWLARZ_cjs.useFFID; }
 });
 Object.defineProperty(exports, "useFFIDAnnouncements", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.useFFIDAnnouncements; }
+  get: function () { return chunk6XEWLARZ_cjs.useFFIDAnnouncements; }
 });
 Object.defineProperty(exports, "useSubscription", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.useSubscription; }
+  get: function () { return chunk6XEWLARZ_cjs.useSubscription; }
 });
 Object.defineProperty(exports, "withSubscription", {
   enumerable: true,
-  get: function () { return chunkKMGY6PQY_cjs.withSubscription; }
+  get: function () { return chunk6XEWLARZ_cjs.withSubscription; }
 });
 exports.FFID_NEWSLETTER_TYPES = FFID_NEWSLETTER_TYPES;
 exports.createKVCacheAdapter = createKVCacheAdapter;

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { F as FFIDSubscriptionStatus, a as FFIDConfig, b as FFIDApiResponse, c as FFIDSessionResponse, d as FFIDRedirectResult, e as FFIDError, f as FFIDSubscriptionCheckResponse, g as FFIDListMembersResponse, h as FFIDMemberRole, i as FFIDUpdateMemberRoleResponse, j as FFIDRemoveMemberResponse, k as FFIDUserProfile, l as FFIDUpdateUserProfileRequest, m as FFIDCreateCheckoutParams, n as FFIDCheckoutSessionResponse, o as FFIDCreatePortalParams, p as FFIDPortalSessionResponse, q as FFIDVerifyAccessTokenOptions, r as FFIDOAuthUserInfo, s as FFIDInquiryCreateParams, t as FFIDInquiryCreateResponse, u as FFIDAuthMode, v as FFIDLogger, w as FFIDCacheAdapter, x as FFIDUser, y as FFIDOrganization, z as FFIDSubscription, A as FFIDSubscriptionContextValue, B as FFIDAnnouncementsClientConfig, L as ListAnnouncementsOptions, C as FFIDAnnouncementsApiResponse, D as AnnouncementListResponse, E as FFIDAnnouncementsLogger } from './index-DT3wF1vZ.cjs';
-export { G as Announcement, H as AnnouncementStatus, I as AnnouncementType, J as FFIDAnnouncementBadge, K as FFIDAnnouncementList, M as FFIDAnnouncementsError, N as FFIDAnnouncementsErrorCode, O as FFIDAnnouncementsServerResponse, P as FFIDCacheConfig, Q as FFIDContextValue, R as FFIDInquiryCategory, S as FFIDInquiryCategorySite2026, T as FFIDInquiryForm, U as FFIDInquiryFormCategoryItem, V as FFIDInquiryFormClassNames, W as FFIDInquiryFormOrganization, X as FFIDInquiryFormPlaceholderContext, Y as FFIDInquiryFormPrefill, Z as FFIDInquiryFormProps, _ as FFIDInquiryFormSubmitData, $ as FFIDInquiryFormSubmitResult, a0 as FFIDJwtClaims, a1 as FFIDLoginButton, a2 as FFIDMemberStatus, a3 as FFIDOAuthTokenResponse, a4 as FFIDOAuthUserInfoMemberRole, a5 as FFIDOAuthUserInfoSubscription, a6 as FFIDOrganizationMember, a7 as FFIDOrganizationSwitcher, a8 as FFIDSeatModel, a9 as FFIDSubscriptionBadge, aa as FFIDTokenIntrospectionResponse, ab as FFIDUserMenu, ac as FFID_INQUIRY_CATEGORIES, ad as FFID_INQUIRY_CATEGORIES_SITE_2026, ae as UseFFIDAnnouncementsOptions, af as UseFFIDAnnouncementsReturn, ag as isFFIDInquiryCategorySite2026, ah as useFFIDAnnouncements } from './index-DT3wF1vZ.cjs';
+import { F as FFIDSubscriptionStatus, a as FFIDConfig, b as FFIDApiResponse, c as FFIDSessionResponse, d as FFIDRedirectResult, e as FFIDError, f as FFIDSubscriptionCheckResponse, g as FFIDListMembersResponse, h as FFIDMemberRole, i as FFIDUpdateMemberRoleResponse, j as FFIDRemoveMemberResponse, k as FFIDProfileCallOptions, l as FFIDUserProfile, m as FFIDUpdateUserProfileRequest, n as FFIDCreateCheckoutParams, o as FFIDCheckoutSessionResponse, p as FFIDCreatePortalParams, q as FFIDPortalSessionResponse, r as FFIDVerifyAccessTokenOptions, s as FFIDOAuthUserInfo, t as FFIDInquiryCreateParams, u as FFIDInquiryCreateResponse, v as FFIDAuthMode, w as FFIDLogger, x as FFIDCacheAdapter, y as FFIDUser, z as FFIDOrganization, A as FFIDSubscription, B as FFIDSubscriptionContextValue, C as FFIDAnnouncementsClientConfig, L as ListAnnouncementsOptions, D as FFIDAnnouncementsApiResponse, E as AnnouncementListResponse, G as FFIDAnnouncementsLogger } from './index-LPTvxtgt.cjs';
+export { H as Announcement, I as AnnouncementStatus, J as AnnouncementType, K as FFIDAnnouncementBadge, M as FFIDAnnouncementList, N as FFIDAnnouncementsError, O as FFIDAnnouncementsErrorCode, P as FFIDAnnouncementsServerResponse, Q as FFIDCacheConfig, R as FFIDContextValue, S as FFIDInquiryCategory, T as FFIDInquiryCategorySite2026, U as FFIDInquiryForm, V as FFIDInquiryFormCategoryItem, W as FFIDInquiryFormClassNames, X as FFIDInquiryFormOrganization, Y as FFIDInquiryFormPlaceholderContext, Z as FFIDInquiryFormPrefill, _ as FFIDInquiryFormProps, $ as FFIDInquiryFormSubmitData, a0 as FFIDInquiryFormSubmitResult, a1 as FFIDJwtClaims, a2 as FFIDLoginButton, a3 as FFIDMemberStatus, a4 as FFIDOAuthTokenResponse, a5 as FFIDOAuthUserInfoMemberRole, a6 as FFIDOAuthUserInfoSubscription, a7 as FFIDOrganizationMember, a8 as FFIDOrganizationSwitcher, a9 as FFIDSeatModel, aa as FFIDSubscriptionBadge, ab as FFIDTokenIntrospectionResponse, ac as FFIDUserMenu, ad as FFID_INQUIRY_CATEGORIES, ae as FFID_INQUIRY_CATEGORIES_SITE_2026, af as UseFFIDAnnouncementsOptions, ag as UseFFIDAnnouncementsReturn, ah as isFFIDInquiryCategorySite2026, ai as useFFIDAnnouncements } from './index-LPTvxtgt.cjs';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode, ComponentType, FC } from 'react';
 
@@ -500,8 +500,8 @@ declare function createFFIDClient(config: FFIDConfig): {
         organizationId: string;
         userId: string;
     }) => Promise<FFIDApiResponse<FFIDRemoveMemberResponse>>;
-    getProfile: () => Promise<FFIDApiResponse<FFIDUserProfile>>;
-    updateProfile: (data: FFIDUpdateUserProfileRequest) => Promise<FFIDApiResponse<FFIDUserProfile>>;
+    getProfile: (options?: FFIDProfileCallOptions) => Promise<FFIDApiResponse<FFIDUserProfile>>;
+    updateProfile: (data: FFIDUpdateUserProfileRequest, options?: FFIDProfileCallOptions) => Promise<FFIDApiResponse<FFIDUserProfile>>;
     createCheckoutSession: (params: FFIDCreateCheckoutParams) => Promise<FFIDApiResponse<FFIDCheckoutSessionResponse>>;
     createPortalSession: (params: FFIDCreatePortalParams) => Promise<FFIDApiResponse<FFIDPortalSessionResponse>>;
     listPlans: () => Promise<FFIDApiResponse<FFIDListPlansResponse>>;
@@ -934,4 +934,4 @@ declare function createInquiryMethods(deps: InquiryMethodsDeps): {
 };
 type FFIDInquiryClient = ReturnType<typeof createInquiryMethods>;
 
-export { AnnouncementListResponse, type ContractWizardFlowType, type ContractWizardResubscribeOptions, type ContractWizardSubscribeOptions, type ContractWizardSubscriptionOptions, DEFAULT_API_BASE_URL, FFIDAnnouncementsApiResponse, type FFIDAnnouncementsClient, FFIDAnnouncementsClientConfig, FFIDAnnouncementsLogger, FFIDApiResponse, type FFIDBillingInterval, FFIDCacheAdapter, type FFIDCancelPendingDowngradeResponse, type FFIDCancelSubscriptionParams, type FFIDCancelSubscriptionResponse, type FFIDChangePlanParams, type FFIDChangePlanResponse, FFIDCheckoutSessionResponse, type FFIDClient, FFIDConfig, FFIDCreateCheckoutParams, FFIDCreatePortalParams, FFIDError, type FFIDInquiryClient, FFIDInquiryCreateParams, FFIDInquiryCreateResponse, FFIDListMembersResponse, type FFIDListPlansResponse, FFIDLogger, FFIDMemberRole, type FFIDNewsletterClient, type FFIDNewsletterConfirmParams, type FFIDNewsletterConfirmResponse, type FFIDNewsletterSubscribeParams, type FFIDNewsletterSubscribeResponse, type FFIDNewsletterType, type FFIDNewsletterUnsubscribeParams, type FFIDNewsletterUnsubscribeResponse, FFIDOAuthUserInfo, FFIDOrganization, type FFIDOtpSendResponse, type FFIDOtpVerifyResponse, type FFIDPasswordResetConfirmResponse, type FFIDPasswordResetResponse, type FFIDPasswordResetVerifyResponse, type FFIDPlanChangeLineItem, type FFIDPlanChangePreview, type FFIDPlanChangePreviewResponse, type FFIDPlanInfo, FFIDPortalSessionResponse, type FFIDPreviewPlanChangeParams, type FFIDPreviewSeatChangeParams, FFIDProvider, type FFIDProviderProps, FFIDRedirectResult, FFIDRemoveMemberResponse, type FFIDResetSessionResponse, FFIDSDKError, type FFIDSeatChangeLineItem, type FFIDSeatChangePreview, type FFIDSeatChangePreviewResponse, type FFIDServiceInfo, FFIDSessionResponse, type FFIDSubscribeParams, type FFIDSubscribeResponse, FFIDSubscription, FFIDSubscriptionCheckResponse, FFIDSubscriptionContextValue, type FFIDSubscriptionDetail, FFIDSubscriptionStatus, type FFIDSubscriptionSummary, type FFIDSupportedCurrency, FFIDUpdateMemberRoleResponse, FFIDUser, FFIDVerifyAccessTokenOptions, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_NEWSLETTER_TYPES, type KVNamespaceLike, ListAnnouncementsOptions, type NormalizeRedirectUriResult, type RedirectToAuthorizeOptions, type TokenData, type TokenStore, type UseFFIDReturn, type WithFFIDAuthOptions, type WithSubscriptionOptions, createFFIDAnnouncementsClient, createFFIDClient, createKVCacheAdapter, createMemoryCacheAdapter, createTokenStore, generateCodeChallenge, generateCodeVerifier, normalizeRedirectUri, retrieveCodeVerifier, storeCodeVerifier, useFFID, useSubscription, withFFIDAuth, withSubscription };
+export { AnnouncementListResponse, type ContractWizardFlowType, type ContractWizardResubscribeOptions, type ContractWizardSubscribeOptions, type ContractWizardSubscriptionOptions, DEFAULT_API_BASE_URL, FFIDAnnouncementsApiResponse, type FFIDAnnouncementsClient, FFIDAnnouncementsClientConfig, FFIDAnnouncementsLogger, FFIDApiResponse, type FFIDBillingInterval, FFIDCacheAdapter, type FFIDCancelPendingDowngradeResponse, type FFIDCancelSubscriptionParams, type FFIDCancelSubscriptionResponse, type FFIDChangePlanParams, type FFIDChangePlanResponse, FFIDCheckoutSessionResponse, type FFIDClient, FFIDConfig, FFIDCreateCheckoutParams, FFIDCreatePortalParams, FFIDError, type FFIDInquiryClient, FFIDInquiryCreateParams, FFIDInquiryCreateResponse, FFIDListMembersResponse, type FFIDListPlansResponse, FFIDLogger, FFIDMemberRole, type FFIDNewsletterClient, type FFIDNewsletterConfirmParams, type FFIDNewsletterConfirmResponse, type FFIDNewsletterSubscribeParams, type FFIDNewsletterSubscribeResponse, type FFIDNewsletterType, type FFIDNewsletterUnsubscribeParams, type FFIDNewsletterUnsubscribeResponse, FFIDOAuthUserInfo, FFIDOrganization, type FFIDOtpSendResponse, type FFIDOtpVerifyResponse, type FFIDPasswordResetConfirmResponse, type FFIDPasswordResetResponse, type FFIDPasswordResetVerifyResponse, type FFIDPlanChangeLineItem, type FFIDPlanChangePreview, type FFIDPlanChangePreviewResponse, type FFIDPlanInfo, FFIDPortalSessionResponse, type FFIDPreviewPlanChangeParams, type FFIDPreviewSeatChangeParams, FFIDProfileCallOptions, FFIDProvider, type FFIDProviderProps, FFIDRedirectResult, FFIDRemoveMemberResponse, type FFIDResetSessionResponse, FFIDSDKError, type FFIDSeatChangeLineItem, type FFIDSeatChangePreview, type FFIDSeatChangePreviewResponse, type FFIDServiceInfo, FFIDSessionResponse, type FFIDSubscribeParams, type FFIDSubscribeResponse, FFIDSubscription, FFIDSubscriptionCheckResponse, FFIDSubscriptionContextValue, type FFIDSubscriptionDetail, FFIDSubscriptionStatus, type FFIDSubscriptionSummary, type FFIDSupportedCurrency, FFIDUpdateMemberRoleResponse, FFIDUpdateUserProfileRequest, FFIDUser, FFIDUserProfile, FFIDVerifyAccessTokenOptions, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_NEWSLETTER_TYPES, type KVNamespaceLike, ListAnnouncementsOptions, type NormalizeRedirectUriResult, type RedirectToAuthorizeOptions, type TokenData, type TokenStore, type UseFFIDReturn, type WithFFIDAuthOptions, type WithSubscriptionOptions, createFFIDAnnouncementsClient, createFFIDClient, createKVCacheAdapter, createMemoryCacheAdapter, createTokenStore, generateCodeChallenge, generateCodeVerifier, normalizeRedirectUri, retrieveCodeVerifier, storeCodeVerifier, useFFID, useSubscription, withFFIDAuth, withSubscription };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { F as FFIDSubscriptionStatus, a as FFIDConfig, b as FFIDApiResponse, c as FFIDSessionResponse, d as FFIDRedirectResult, e as FFIDError, f as FFIDSubscriptionCheckResponse, g as FFIDListMembersResponse, h as FFIDMemberRole, i as FFIDUpdateMemberRoleResponse, j as FFIDRemoveMemberResponse, k as FFIDUserProfile, l as FFIDUpdateUserProfileRequest, m as FFIDCreateCheckoutParams, n as FFIDCheckoutSessionResponse, o as FFIDCreatePortalParams, p as FFIDPortalSessionResponse, q as FFIDVerifyAccessTokenOptions, r as FFIDOAuthUserInfo, s as FFIDInquiryCreateParams, t as FFIDInquiryCreateResponse, u as FFIDAuthMode, v as FFIDLogger, w as FFIDCacheAdapter, x as FFIDUser, y as FFIDOrganization, z as FFIDSubscription, A as FFIDSubscriptionContextValue, B as FFIDAnnouncementsClientConfig, L as ListAnnouncementsOptions, C as FFIDAnnouncementsApiResponse, D as AnnouncementListResponse, E as FFIDAnnouncementsLogger } from './index-DT3wF1vZ.js';
-export { G as Announcement, H as AnnouncementStatus, I as AnnouncementType, J as FFIDAnnouncementBadge, K as FFIDAnnouncementList, M as FFIDAnnouncementsError, N as FFIDAnnouncementsErrorCode, O as FFIDAnnouncementsServerResponse, P as FFIDCacheConfig, Q as FFIDContextValue, R as FFIDInquiryCategory, S as FFIDInquiryCategorySite2026, T as FFIDInquiryForm, U as FFIDInquiryFormCategoryItem, V as FFIDInquiryFormClassNames, W as FFIDInquiryFormOrganization, X as FFIDInquiryFormPlaceholderContext, Y as FFIDInquiryFormPrefill, Z as FFIDInquiryFormProps, _ as FFIDInquiryFormSubmitData, $ as FFIDInquiryFormSubmitResult, a0 as FFIDJwtClaims, a1 as FFIDLoginButton, a2 as FFIDMemberStatus, a3 as FFIDOAuthTokenResponse, a4 as FFIDOAuthUserInfoMemberRole, a5 as FFIDOAuthUserInfoSubscription, a6 as FFIDOrganizationMember, a7 as FFIDOrganizationSwitcher, a8 as FFIDSeatModel, a9 as FFIDSubscriptionBadge, aa as FFIDTokenIntrospectionResponse, ab as FFIDUserMenu, ac as FFID_INQUIRY_CATEGORIES, ad as FFID_INQUIRY_CATEGORIES_SITE_2026, ae as UseFFIDAnnouncementsOptions, af as UseFFIDAnnouncementsReturn, ag as isFFIDInquiryCategorySite2026, ah as useFFIDAnnouncements } from './index-DT3wF1vZ.js';
+import { F as FFIDSubscriptionStatus, a as FFIDConfig, b as FFIDApiResponse, c as FFIDSessionResponse, d as FFIDRedirectResult, e as FFIDError, f as FFIDSubscriptionCheckResponse, g as FFIDListMembersResponse, h as FFIDMemberRole, i as FFIDUpdateMemberRoleResponse, j as FFIDRemoveMemberResponse, k as FFIDProfileCallOptions, l as FFIDUserProfile, m as FFIDUpdateUserProfileRequest, n as FFIDCreateCheckoutParams, o as FFIDCheckoutSessionResponse, p as FFIDCreatePortalParams, q as FFIDPortalSessionResponse, r as FFIDVerifyAccessTokenOptions, s as FFIDOAuthUserInfo, t as FFIDInquiryCreateParams, u as FFIDInquiryCreateResponse, v as FFIDAuthMode, w as FFIDLogger, x as FFIDCacheAdapter, y as FFIDUser, z as FFIDOrganization, A as FFIDSubscription, B as FFIDSubscriptionContextValue, C as FFIDAnnouncementsClientConfig, L as ListAnnouncementsOptions, D as FFIDAnnouncementsApiResponse, E as AnnouncementListResponse, G as FFIDAnnouncementsLogger } from './index-LPTvxtgt.js';
+export { H as Announcement, I as AnnouncementStatus, J as AnnouncementType, K as FFIDAnnouncementBadge, M as FFIDAnnouncementList, N as FFIDAnnouncementsError, O as FFIDAnnouncementsErrorCode, P as FFIDAnnouncementsServerResponse, Q as FFIDCacheConfig, R as FFIDContextValue, S as FFIDInquiryCategory, T as FFIDInquiryCategorySite2026, U as FFIDInquiryForm, V as FFIDInquiryFormCategoryItem, W as FFIDInquiryFormClassNames, X as FFIDInquiryFormOrganization, Y as FFIDInquiryFormPlaceholderContext, Z as FFIDInquiryFormPrefill, _ as FFIDInquiryFormProps, $ as FFIDInquiryFormSubmitData, a0 as FFIDInquiryFormSubmitResult, a1 as FFIDJwtClaims, a2 as FFIDLoginButton, a3 as FFIDMemberStatus, a4 as FFIDOAuthTokenResponse, a5 as FFIDOAuthUserInfoMemberRole, a6 as FFIDOAuthUserInfoSubscription, a7 as FFIDOrganizationMember, a8 as FFIDOrganizationSwitcher, a9 as FFIDSeatModel, aa as FFIDSubscriptionBadge, ab as FFIDTokenIntrospectionResponse, ac as FFIDUserMenu, ad as FFID_INQUIRY_CATEGORIES, ae as FFID_INQUIRY_CATEGORIES_SITE_2026, af as UseFFIDAnnouncementsOptions, ag as UseFFIDAnnouncementsReturn, ah as isFFIDInquiryCategorySite2026, ai as useFFIDAnnouncements } from './index-LPTvxtgt.js';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode, ComponentType, FC } from 'react';
 
@@ -500,8 +500,8 @@ declare function createFFIDClient(config: FFIDConfig): {
         organizationId: string;
         userId: string;
     }) => Promise<FFIDApiResponse<FFIDRemoveMemberResponse>>;
-    getProfile: () => Promise<FFIDApiResponse<FFIDUserProfile>>;
-    updateProfile: (data: FFIDUpdateUserProfileRequest) => Promise<FFIDApiResponse<FFIDUserProfile>>;
+    getProfile: (options?: FFIDProfileCallOptions) => Promise<FFIDApiResponse<FFIDUserProfile>>;
+    updateProfile: (data: FFIDUpdateUserProfileRequest, options?: FFIDProfileCallOptions) => Promise<FFIDApiResponse<FFIDUserProfile>>;
     createCheckoutSession: (params: FFIDCreateCheckoutParams) => Promise<FFIDApiResponse<FFIDCheckoutSessionResponse>>;
     createPortalSession: (params: FFIDCreatePortalParams) => Promise<FFIDApiResponse<FFIDPortalSessionResponse>>;
     listPlans: () => Promise<FFIDApiResponse<FFIDListPlansResponse>>;
@@ -934,4 +934,4 @@ declare function createInquiryMethods(deps: InquiryMethodsDeps): {
 };
 type FFIDInquiryClient = ReturnType<typeof createInquiryMethods>;
 
-export { AnnouncementListResponse, type ContractWizardFlowType, type ContractWizardResubscribeOptions, type ContractWizardSubscribeOptions, type ContractWizardSubscriptionOptions, DEFAULT_API_BASE_URL, FFIDAnnouncementsApiResponse, type FFIDAnnouncementsClient, FFIDAnnouncementsClientConfig, FFIDAnnouncementsLogger, FFIDApiResponse, type FFIDBillingInterval, FFIDCacheAdapter, type FFIDCancelPendingDowngradeResponse, type FFIDCancelSubscriptionParams, type FFIDCancelSubscriptionResponse, type FFIDChangePlanParams, type FFIDChangePlanResponse, FFIDCheckoutSessionResponse, type FFIDClient, FFIDConfig, FFIDCreateCheckoutParams, FFIDCreatePortalParams, FFIDError, type FFIDInquiryClient, FFIDInquiryCreateParams, FFIDInquiryCreateResponse, FFIDListMembersResponse, type FFIDListPlansResponse, FFIDLogger, FFIDMemberRole, type FFIDNewsletterClient, type FFIDNewsletterConfirmParams, type FFIDNewsletterConfirmResponse, type FFIDNewsletterSubscribeParams, type FFIDNewsletterSubscribeResponse, type FFIDNewsletterType, type FFIDNewsletterUnsubscribeParams, type FFIDNewsletterUnsubscribeResponse, FFIDOAuthUserInfo, FFIDOrganization, type FFIDOtpSendResponse, type FFIDOtpVerifyResponse, type FFIDPasswordResetConfirmResponse, type FFIDPasswordResetResponse, type FFIDPasswordResetVerifyResponse, type FFIDPlanChangeLineItem, type FFIDPlanChangePreview, type FFIDPlanChangePreviewResponse, type FFIDPlanInfo, FFIDPortalSessionResponse, type FFIDPreviewPlanChangeParams, type FFIDPreviewSeatChangeParams, FFIDProvider, type FFIDProviderProps, FFIDRedirectResult, FFIDRemoveMemberResponse, type FFIDResetSessionResponse, FFIDSDKError, type FFIDSeatChangeLineItem, type FFIDSeatChangePreview, type FFIDSeatChangePreviewResponse, type FFIDServiceInfo, FFIDSessionResponse, type FFIDSubscribeParams, type FFIDSubscribeResponse, FFIDSubscription, FFIDSubscriptionCheckResponse, FFIDSubscriptionContextValue, type FFIDSubscriptionDetail, FFIDSubscriptionStatus, type FFIDSubscriptionSummary, type FFIDSupportedCurrency, FFIDUpdateMemberRoleResponse, FFIDUser, FFIDVerifyAccessTokenOptions, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_NEWSLETTER_TYPES, type KVNamespaceLike, ListAnnouncementsOptions, type NormalizeRedirectUriResult, type RedirectToAuthorizeOptions, type TokenData, type TokenStore, type UseFFIDReturn, type WithFFIDAuthOptions, type WithSubscriptionOptions, createFFIDAnnouncementsClient, createFFIDClient, createKVCacheAdapter, createMemoryCacheAdapter, createTokenStore, generateCodeChallenge, generateCodeVerifier, normalizeRedirectUri, retrieveCodeVerifier, storeCodeVerifier, useFFID, useSubscription, withFFIDAuth, withSubscription };
+export { AnnouncementListResponse, type ContractWizardFlowType, type ContractWizardResubscribeOptions, type ContractWizardSubscribeOptions, type ContractWizardSubscriptionOptions, DEFAULT_API_BASE_URL, FFIDAnnouncementsApiResponse, type FFIDAnnouncementsClient, FFIDAnnouncementsClientConfig, FFIDAnnouncementsLogger, FFIDApiResponse, type FFIDBillingInterval, FFIDCacheAdapter, type FFIDCancelPendingDowngradeResponse, type FFIDCancelSubscriptionParams, type FFIDCancelSubscriptionResponse, type FFIDChangePlanParams, type FFIDChangePlanResponse, FFIDCheckoutSessionResponse, type FFIDClient, FFIDConfig, FFIDCreateCheckoutParams, FFIDCreatePortalParams, FFIDError, type FFIDInquiryClient, FFIDInquiryCreateParams, FFIDInquiryCreateResponse, FFIDListMembersResponse, type FFIDListPlansResponse, FFIDLogger, FFIDMemberRole, type FFIDNewsletterClient, type FFIDNewsletterConfirmParams, type FFIDNewsletterConfirmResponse, type FFIDNewsletterSubscribeParams, type FFIDNewsletterSubscribeResponse, type FFIDNewsletterType, type FFIDNewsletterUnsubscribeParams, type FFIDNewsletterUnsubscribeResponse, FFIDOAuthUserInfo, FFIDOrganization, type FFIDOtpSendResponse, type FFIDOtpVerifyResponse, type FFIDPasswordResetConfirmResponse, type FFIDPasswordResetResponse, type FFIDPasswordResetVerifyResponse, type FFIDPlanChangeLineItem, type FFIDPlanChangePreview, type FFIDPlanChangePreviewResponse, type FFIDPlanInfo, FFIDPortalSessionResponse, type FFIDPreviewPlanChangeParams, type FFIDPreviewSeatChangeParams, FFIDProfileCallOptions, FFIDProvider, type FFIDProviderProps, FFIDRedirectResult, FFIDRemoveMemberResponse, type FFIDResetSessionResponse, FFIDSDKError, type FFIDSeatChangeLineItem, type FFIDSeatChangePreview, type FFIDSeatChangePreviewResponse, type FFIDServiceInfo, FFIDSessionResponse, type FFIDSubscribeParams, type FFIDSubscribeResponse, FFIDSubscription, FFIDSubscriptionCheckResponse, FFIDSubscriptionContextValue, type FFIDSubscriptionDetail, FFIDSubscriptionStatus, type FFIDSubscriptionSummary, type FFIDSupportedCurrency, FFIDUpdateMemberRoleResponse, FFIDUpdateUserProfileRequest, FFIDUser, FFIDUserProfile, FFIDVerifyAccessTokenOptions, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_NEWSLETTER_TYPES, type KVNamespaceLike, ListAnnouncementsOptions, type NormalizeRedirectUriResult, type RedirectToAuthorizeOptions, type TokenData, type TokenStore, type UseFFIDReturn, type WithFFIDAuthOptions, type WithSubscriptionOptions, createFFIDAnnouncementsClient, createFFIDClient, createKVCacheAdapter, createMemoryCacheAdapter, createTokenStore, generateCodeChallenge, generateCodeVerifier, normalizeRedirectUri, retrieveCodeVerifier, storeCodeVerifier, useFFID, useSubscription, withFFIDAuth, withSubscription };

package/dist/index.js

@@ -1,5 +1,5 @@
-import { useFFIDContext } from './chunk-424GEJSP.js';
-export { DEFAULT_API_BASE_URL, FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDProvider, FFIDSDKError, FFIDSubscriptionBadge, FFIDUserMenu, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_INQUIRY_CATEGORIES, FFID_INQUIRY_CATEGORIES_SITE_2026, createFFIDAnnouncementsClient, createFFIDClient, createTokenStore, generateCodeChallenge, generateCodeVerifier, isFFIDInquiryCategorySite2026, normalizeRedirectUri, retrieveCodeVerifier, storeCodeVerifier, useFFID, useFFIDAnnouncements, useSubscription, withSubscription } from './chunk-424GEJSP.js';
+import { useFFIDContext } from './chunk-OOGFUCRJ.js';
+export { DEFAULT_API_BASE_URL, FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDProvider, FFIDSDKError, FFIDSubscriptionBadge, FFIDUserMenu, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_INQUIRY_CATEGORIES, FFID_INQUIRY_CATEGORIES_SITE_2026, createFFIDAnnouncementsClient, createFFIDClient, createTokenStore, generateCodeChallenge, generateCodeVerifier, isFFIDInquiryCategorySite2026, normalizeRedirectUri, retrieveCodeVerifier, storeCodeVerifier, useFFID, useFFIDAnnouncements, useSubscription, withSubscription } from './chunk-OOGFUCRJ.js';
 import { useRef, useEffect } from 'react';
 import { jsx, Fragment } from 'react/jsx-runtime';
 

package/dist/server/index.cjs

@@ -758,12 +758,29 @@ function createMembersMethods(deps) {
 
 // src/client/profile-methods.ts
 var EXT_PROFILE_ENDPOINT = "/api/v1/users/ext/me";
+function resolveAuthOverride(options, createError) {
+  if (!options || options.accessToken === void 0) {
+    return {};
+  }
+  const token = options.accessToken;
+  if (typeof token !== "string" || token.trim() === "") {
+    return {
+      error: createError(
+        "VALIDATION_ERROR",
+        "accessToken \u3092\u6307\u5B9A\u3059\u308B\u5834\u5408\u3001\u7A7A\u6587\u5B57\u5217\u3084\u7A7A\u767D\u306E\u307F\u306E\u5024\u306F\u4F7F\u7528\u3067\u304D\u307E\u305B\u3093"
+      )
+    };
+  }
+  return { override: { accessToken: token } };
+}
 function createProfileMethods(deps) {
   const { fetchWithAuth, createError } = deps;
-  async function getProfile() {
-    return fetchWithAuth(EXT_PROFILE_ENDPOINT);
+  async function getProfile(options) {
+    const { override, error } = resolveAuthOverride(options, createError);
+    if (error) return { error };
+    return fetchWithAuth(EXT_PROFILE_ENDPOINT, void 0, override);
   }
-  async function updateProfile(data) {
+  async function updateProfile(data, options) {
     if (data === null || typeof data !== "object" || Array.isArray(data)) {
       return {
         error: createError("VALIDATION_ERROR", "data \u306F\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059")
@@ -774,16 +791,22 @@ function createProfileMethods(deps) {
         error: createError("VALIDATION_ERROR", "\u66F4\u65B0\u3059\u308B\u30D5\u30A3\u30FC\u30EB\u30C9\u30921\u3064\u4EE5\u4E0A\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044")
       };
     }
-    return fetchWithAuth(EXT_PROFILE_ENDPOINT, {
-      method: "PUT",
-      body: JSON.stringify(data)
-    });
+    const { override, error } = resolveAuthOverride(options, createError);
+    if (error) return { error };
+    return fetchWithAuth(
+      EXT_PROFILE_ENDPOINT,
+      {
+        method: "PUT",
+        body: JSON.stringify(data)
+      },
+      override
+    );
   }
   return { getProfile, updateProfile };
 }
 
 // src/client/version-check.ts
-var SDK_VERSION = "2.14.0";
+var SDK_VERSION = "2.15.0";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {
@@ -1965,7 +1988,19 @@ function createFFIDClient(config) {
   function createError(code, message) {
     return { code, message };
   }
-  function buildFetchOptions(options) {
+  function buildFetchOptions(options, authOverride) {
+    if (authOverride) {
+      return {
+        ...options,
+        credentials: "omit",
+        headers: {
+          "Content-Type": "application/json",
+          ...sdkHeaders(),
+          ...options.headers,
+          Authorization: `Bearer ${authOverride.accessToken}`
+        }
+      };
+    }
     if (authMode === "service-key") {
       return {
         ...options,
@@ -2012,10 +2047,10 @@ function createFFIDClient(config) {
     logger,
     errorCodes: FFID_ERROR_CODES
   });
-  async function fetchWithAuth(endpoint, options = {}) {
+  async function fetchWithAuth(endpoint, options = {}, authOverride) {
     const url = `${baseUrl}${endpoint}`;
     logger.debug("Fetching:", url);
-    const fetchOptions = buildFetchOptions(options);
+    const fetchOptions = buildFetchOptions(options, authOverride);
     let response;
     try {
       response = await fetch(url, fetchOptions);
@@ -2028,7 +2063,7 @@ function createFFIDClient(config) {
         }
       };
     }
-    if (authMode === "token" && response.status === UNAUTHORIZED_STATUS2) {
+    if (!authOverride && authMode === "token" && response.status === UNAUTHORIZED_STATUS2) {
       const refreshResult = await refreshAccessToken();
       if (!refreshResult.error) {
         logger.debug("Token refreshed, retrying request");

package/dist/server/index.d.cts

@@ -814,6 +814,38 @@ interface FFIDUserProfile {
     /** Profile last-updated timestamp (ISO 8601) */
     updatedAt: string;
 }
+/**
+ * Per-call options for profile methods (`getProfile` / `updateProfile`).
+ *
+ * Supply `accessToken` to forward an end-user Bearer token for the single call
+ * without mutating client-level auth state. Designed for server runtimes (Cloudflare
+ * Workers, Edge, Node) that receive a user-scoped Bearer per request and want to
+ * act as that user against `/api/v1/users/ext/me`.
+ *
+ * When `accessToken` is supplied with a non-empty value, it overrides the client's
+ * configured auth mode: authentication for that request uses only
+ * `Authorization: Bearer <accessToken>` (no service key, no cookie, no token-store
+ * lookup, no auto-refresh on 401). Non-auth headers such as `Content-Type` and
+ * SDK metadata headers (User-Agent / X-FFID-SDK-Version) are still attached.
+ *
+ * Runtime semantics:
+ * - `accessToken` omitted (or `undefined`) → no override, configured `authMode` is used
+ * - `accessToken` is empty string / whitespace-only → rejected as `VALIDATION_ERROR`
+ *   before any network call (prevents silent impersonation fallback when a caller
+ *   extracts a missing/blank `Authorization` header into this field)
+ * - `accessToken` is a non-empty string → override activated
+ */
+interface FFIDProfileCallOptions {
+    /**
+     * End-user Bearer token forwarded for this single request.
+     *
+     * Must be a non-empty string when supplied. Passing `''` or a whitespace-only
+     * string is treated as a caller error and surfaces as `VALIDATION_ERROR` —
+     * this guards against the common footgun where a server runtime extracts the
+     * Bearer from an incoming request without checking the header is present.
+     */
+    accessToken?: string;
+}
 /**
  * Request payload for `updateProfile`.
  *
@@ -992,8 +1024,8 @@ declare function createFFIDClient(config: FFIDConfig): {
         organizationId: string;
         userId: string;
     }) => Promise<FFIDApiResponse<FFIDRemoveMemberResponse>>;
-    getProfile: () => Promise<FFIDApiResponse<FFIDUserProfile>>;
-    updateProfile: (data: FFIDUpdateUserProfileRequest) => Promise<FFIDApiResponse<FFIDUserProfile>>;
+    getProfile: (options?: FFIDProfileCallOptions) => Promise<FFIDApiResponse<FFIDUserProfile>>;
+    updateProfile: (data: FFIDUpdateUserProfileRequest, options?: FFIDProfileCallOptions) => Promise<FFIDApiResponse<FFIDUserProfile>>;
     createCheckoutSession: (params: FFIDCreateCheckoutParams) => Promise<FFIDApiResponse<FFIDCheckoutSessionResponse>>;
     createPortalSession: (params: FFIDCreatePortalParams) => Promise<FFIDApiResponse<FFIDPortalSessionResponse>>;
     listPlans: () => Promise<FFIDApiResponse<FFIDListPlansResponse>>;
@@ -1104,4 +1136,4 @@ interface KVNamespaceLike {
  */
 declare function createKVCacheAdapter(kv: KVNamespaceLike): FFIDCacheAdapter;
 
-export { type FFIDCacheAdapter, type FFIDCacheConfig, type FFIDClient, type FFIDConfig, type FFIDOAuthUserInfo, type FFIDOrganization, type FFIDOtpSendResponse, type FFIDOtpVerifyResponse, type FFIDPasswordResetConfirmResponse, type FFIDPasswordResetResponse, type FFIDPasswordResetVerifyResponse, type FFIDResetSessionResponse, type FFIDSubscription, type FFIDUser, type FFIDVerifyAccessTokenOptions, type KVNamespaceLike, type TokenData, type TokenStore, createFFIDClient, createKVCacheAdapter, createMemoryCacheAdapter, createTokenStore, createVerifyAccessToken };
+export { type FFIDCacheAdapter, type FFIDCacheConfig, type FFIDClient, type FFIDConfig, type FFIDOAuthUserInfo, type FFIDOrganization, type FFIDOtpSendResponse, type FFIDOtpVerifyResponse, type FFIDPasswordResetConfirmResponse, type FFIDPasswordResetResponse, type FFIDPasswordResetVerifyResponse, type FFIDProfileCallOptions, type FFIDResetSessionResponse, type FFIDSubscription, type FFIDUpdateUserProfileRequest, type FFIDUser, type FFIDUserProfile, type FFIDVerifyAccessTokenOptions, type KVNamespaceLike, type TokenData, type TokenStore, createFFIDClient, createKVCacheAdapter, createMemoryCacheAdapter, createTokenStore, createVerifyAccessToken };

package/dist/server/index.d.ts

@@ -814,6 +814,38 @@ interface FFIDUserProfile {
     /** Profile last-updated timestamp (ISO 8601) */
     updatedAt: string;
 }
+/**
+ * Per-call options for profile methods (`getProfile` / `updateProfile`).
+ *
+ * Supply `accessToken` to forward an end-user Bearer token for the single call
+ * without mutating client-level auth state. Designed for server runtimes (Cloudflare
+ * Workers, Edge, Node) that receive a user-scoped Bearer per request and want to
+ * act as that user against `/api/v1/users/ext/me`.
+ *
+ * When `accessToken` is supplied with a non-empty value, it overrides the client's
+ * configured auth mode: authentication for that request uses only
+ * `Authorization: Bearer <accessToken>` (no service key, no cookie, no token-store
+ * lookup, no auto-refresh on 401). Non-auth headers such as `Content-Type` and
+ * SDK metadata headers (User-Agent / X-FFID-SDK-Version) are still attached.
+ *
+ * Runtime semantics:
+ * - `accessToken` omitted (or `undefined`) → no override, configured `authMode` is used
+ * - `accessToken` is empty string / whitespace-only → rejected as `VALIDATION_ERROR`
+ *   before any network call (prevents silent impersonation fallback when a caller
+ *   extracts a missing/blank `Authorization` header into this field)
+ * - `accessToken` is a non-empty string → override activated
+ */
+interface FFIDProfileCallOptions {
+    /**
+     * End-user Bearer token forwarded for this single request.
+     *
+     * Must be a non-empty string when supplied. Passing `''` or a whitespace-only
+     * string is treated as a caller error and surfaces as `VALIDATION_ERROR` —
+     * this guards against the common footgun where a server runtime extracts the
+     * Bearer from an incoming request without checking the header is present.
+     */
+    accessToken?: string;
+}
 /**
  * Request payload for `updateProfile`.
  *
@@ -992,8 +1024,8 @@ declare function createFFIDClient(config: FFIDConfig): {
         organizationId: string;
         userId: string;
     }) => Promise<FFIDApiResponse<FFIDRemoveMemberResponse>>;
-    getProfile: () => Promise<FFIDApiResponse<FFIDUserProfile>>;
-    updateProfile: (data: FFIDUpdateUserProfileRequest) => Promise<FFIDApiResponse<FFIDUserProfile>>;
+    getProfile: (options?: FFIDProfileCallOptions) => Promise<FFIDApiResponse<FFIDUserProfile>>;
+    updateProfile: (data: FFIDUpdateUserProfileRequest, options?: FFIDProfileCallOptions) => Promise<FFIDApiResponse<FFIDUserProfile>>;
     createCheckoutSession: (params: FFIDCreateCheckoutParams) => Promise<FFIDApiResponse<FFIDCheckoutSessionResponse>>;
     createPortalSession: (params: FFIDCreatePortalParams) => Promise<FFIDApiResponse<FFIDPortalSessionResponse>>;
     listPlans: () => Promise<FFIDApiResponse<FFIDListPlansResponse>>;
@@ -1104,4 +1136,4 @@ interface KVNamespaceLike {
  */
 declare function createKVCacheAdapter(kv: KVNamespaceLike): FFIDCacheAdapter;
 
-export { type FFIDCacheAdapter, type FFIDCacheConfig, type FFIDClient, type FFIDConfig, type FFIDOAuthUserInfo, type FFIDOrganization, type FFIDOtpSendResponse, type FFIDOtpVerifyResponse, type FFIDPasswordResetConfirmResponse, type FFIDPasswordResetResponse, type FFIDPasswordResetVerifyResponse, type FFIDResetSessionResponse, type FFIDSubscription, type FFIDUser, type FFIDVerifyAccessTokenOptions, type KVNamespaceLike, type TokenData, type TokenStore, createFFIDClient, createKVCacheAdapter, createMemoryCacheAdapter, createTokenStore, createVerifyAccessToken };
+export { type FFIDCacheAdapter, type FFIDCacheConfig, type FFIDClient, type FFIDConfig, type FFIDOAuthUserInfo, type FFIDOrganization, type FFIDOtpSendResponse, type FFIDOtpVerifyResponse, type FFIDPasswordResetConfirmResponse, type FFIDPasswordResetResponse, type FFIDPasswordResetVerifyResponse, type FFIDProfileCallOptions, type FFIDResetSessionResponse, type FFIDSubscription, type FFIDUpdateUserProfileRequest, type FFIDUser, type FFIDUserProfile, type FFIDVerifyAccessTokenOptions, type KVNamespaceLike, type TokenData, type TokenStore, createFFIDClient, createKVCacheAdapter, createMemoryCacheAdapter, createTokenStore, createVerifyAccessToken };

package/dist/server/index.js

@@ -757,12 +757,29 @@ function createMembersMethods(deps) {
 
 // src/client/profile-methods.ts
 var EXT_PROFILE_ENDPOINT = "/api/v1/users/ext/me";
+function resolveAuthOverride(options, createError) {
+  if (!options || options.accessToken === void 0) {
+    return {};
+  }
+  const token = options.accessToken;
+  if (typeof token !== "string" || token.trim() === "") {
+    return {
+      error: createError(
+        "VALIDATION_ERROR",
+        "accessToken \u3092\u6307\u5B9A\u3059\u308B\u5834\u5408\u3001\u7A7A\u6587\u5B57\u5217\u3084\u7A7A\u767D\u306E\u307F\u306E\u5024\u306F\u4F7F\u7528\u3067\u304D\u307E\u305B\u3093"
+      )
+    };
+  }
+  return { override: { accessToken: token } };
+}
 function createProfileMethods(deps) {
   const { fetchWithAuth, createError } = deps;
-  async function getProfile() {
-    return fetchWithAuth(EXT_PROFILE_ENDPOINT);
+  async function getProfile(options) {
+    const { override, error } = resolveAuthOverride(options, createError);
+    if (error) return { error };
+    return fetchWithAuth(EXT_PROFILE_ENDPOINT, void 0, override);
   }
-  async function updateProfile(data) {
+  async function updateProfile(data, options) {
     if (data === null || typeof data !== "object" || Array.isArray(data)) {
       return {
         error: createError("VALIDATION_ERROR", "data \u306F\u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059")
@@ -773,16 +790,22 @@ function createProfileMethods(deps) {
         error: createError("VALIDATION_ERROR", "\u66F4\u65B0\u3059\u308B\u30D5\u30A3\u30FC\u30EB\u30C9\u30921\u3064\u4EE5\u4E0A\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044")
       };
     }
-    return fetchWithAuth(EXT_PROFILE_ENDPOINT, {
-      method: "PUT",
-      body: JSON.stringify(data)
-    });
+    const { override, error } = resolveAuthOverride(options, createError);
+    if (error) return { error };
+    return fetchWithAuth(
+      EXT_PROFILE_ENDPOINT,
+      {
+        method: "PUT",
+        body: JSON.stringify(data)
+      },
+      override
+    );
   }
   return { getProfile, updateProfile };
 }
 
 // src/client/version-check.ts
-var SDK_VERSION = "2.14.0";
+var SDK_VERSION = "2.15.0";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {
@@ -1964,7 +1987,19 @@ function createFFIDClient(config) {
   function createError(code, message) {
     return { code, message };
   }
-  function buildFetchOptions(options) {
+  function buildFetchOptions(options, authOverride) {
+    if (authOverride) {
+      return {
+        ...options,
+        credentials: "omit",
+        headers: {
+          "Content-Type": "application/json",
+          ...sdkHeaders(),
+          ...options.headers,
+          Authorization: `Bearer ${authOverride.accessToken}`
+        }
+      };
+    }
     if (authMode === "service-key") {
       return {
         ...options,
@@ -2011,10 +2046,10 @@ function createFFIDClient(config) {
     logger,
     errorCodes: FFID_ERROR_CODES
   });
-  async function fetchWithAuth(endpoint, options = {}) {
+  async function fetchWithAuth(endpoint, options = {}, authOverride) {
     const url = `${baseUrl}${endpoint}`;
     logger.debug("Fetching:", url);
-    const fetchOptions = buildFetchOptions(options);
+    const fetchOptions = buildFetchOptions(options, authOverride);
     let response;
     try {
       response = await fetch(url, fetchOptions);
@@ -2027,7 +2062,7 @@ function createFFIDClient(config) {
         }
       };
     }
-    if (authMode === "token" && response.status === UNAUTHORIZED_STATUS2) {
+    if (!authOverride && authMode === "token" && response.status === UNAUTHORIZED_STATUS2) {
       const refreshResult = await refreshAccessToken();
       if (!refreshResult.error) {
         logger.debug("Token refreshed, retrying request");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@feelflow/ffid-sdk",
-  "version": "2.14.0",
+  "version": "2.15.0",
   "description": "FeelFlow ID Platform SDK for React/Next.js applications",
   "keywords": [
     "feelflow",