@feelflow/ffid-sdk 2.20.0 → 3.0.0

package/dist/components/index.d.ts

@@ -1,3 +1,3 @@
-export { M as FFIDAnnouncementBadge, al as FFIDAnnouncementBadgeClassNames, am as FFIDAnnouncementBadgeProps, N as FFIDAnnouncementList, an as FFIDAnnouncementListClassNames, ao as FFIDAnnouncementListProps, V as FFIDInquiryForm, W as FFIDInquiryFormCategoryItem, X as FFIDInquiryFormClassNames, Y as FFIDInquiryFormOrganization, Z as FFIDInquiryFormPlaceholderContext, _ as FFIDInquiryFormPrefill, $ as FFIDInquiryFormProps, a0 as FFIDInquiryFormSubmitData, a1 as FFIDInquiryFormSubmitResult, a3 as FFIDLoginButton, ap as FFIDLoginButtonProps, a9 as FFIDOrganizationSwitcher, aq as FFIDOrganizationSwitcherClassNames, ar as FFIDOrganizationSwitcherProps, ac as FFIDSubscriptionBadge, as as FFIDSubscriptionBadgeClassNames, at as FFIDSubscriptionBadgeProps, ae as FFIDUserMenu, au as FFIDUserMenuClassNames, av as FFIDUserMenuProps } from '../index-0D2vYSLq.js';
+export { N as FFIDAnnouncementBadge, am as FFIDAnnouncementBadgeClassNames, an as FFIDAnnouncementBadgeProps, O as FFIDAnnouncementList, ao as FFIDAnnouncementListClassNames, ap as FFIDAnnouncementListProps, W as FFIDInquiryForm, X as FFIDInquiryFormCategoryItem, Y as FFIDInquiryFormClassNames, Z as FFIDInquiryFormOrganization, _ as FFIDInquiryFormPlaceholderContext, $ as FFIDInquiryFormPrefill, a0 as FFIDInquiryFormProps, a1 as FFIDInquiryFormSubmitData, a2 as FFIDInquiryFormSubmitResult, a4 as FFIDLoginButton, aq as FFIDLoginButtonProps, aa as FFIDOrganizationSwitcher, ar as FFIDOrganizationSwitcherClassNames, as as FFIDOrganizationSwitcherProps, ad as FFIDSubscriptionBadge, at as FFIDSubscriptionBadgeClassNames, au as FFIDSubscriptionBadgeProps, af as FFIDUserMenu, av as FFIDUserMenuClassNames, aw as FFIDUserMenuProps } from '../index-C3zyNa4j.js';
 import 'react/jsx-runtime';
 import 'react';

package/dist/components/index.js

@@ -1 +1 @@
-export { FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDSubscriptionBadge, FFIDUserMenu } from '../chunk-GCUVFSB2.js';
+export { FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDSubscriptionBadge, FFIDUserMenu } from '../chunk-XWI4BFKW.js';

package/dist/constants-D61jqRIO.d.cts

@@ -0,0 +1,35 @@
+/**
+ * FFID SDK Shared Constants
+ *
+ * Constants shared across all SDK entry points.
+ * Centralizing these prevents drift during domain/URL changes.
+ */
+/** Default FFID API base URL (production) */
+declare const DEFAULT_API_BASE_URL = "https://id.feelflow.net";
+/**
+ * Recommended default OAuth scope set for FFID-connected services (v3.0.0+).
+ *
+ * Coverage:
+ * - `openid email profile` — OIDC standard claims (always required)
+ * - `subscription:read` — `/api/v1/subscriptions/ext/*` 系（プラン / 課金 gate）
+ * - `legal:read` — `/api/v1/legal/ext` 系（利用規約・同意状態）
+ *
+ * Add feature-specific scopes on top of this when needed (browser SDK):
+ * - `analytics:read` for `/api/v1/ext/analytics/config`
+ * - `organization:read` / `organization:write` for `/api/v1/organizations/ext/members`
+ * - `subscription:write` for self-serve plan changes
+ * - `legal:write` for recording user consent
+ * - `profile:read` / `profile:write` for profile UI
+ * - `organization:api-key` for org-level API key issuance
+ *
+ * **Note**: kept as a widened `string` (not `as const`) so consumers can
+ * concatenate additional scopes (e.g. `\`${DEFAULT_OAUTH_SCOPES} analytics:read\``)
+ * and so it remains assignable to `FFIDConfig.scope: string`. `widget:verify`
+ * is intentionally excluded — it is a service-key-only scope (`/api/v1/widget/*`),
+ * not used by the browser OAuth flow.
+ *
+ * Survey: feel-flow/feelflow-id-platform#2656 issuecomment-4324082742
+ */
+declare const DEFAULT_OAUTH_SCOPES = "openid email profile subscription:read legal:read";
+
+export { DEFAULT_API_BASE_URL as D, DEFAULT_OAUTH_SCOPES as a };

package/dist/constants-D61jqRIO.d.ts

@@ -0,0 +1,35 @@
+/**
+ * FFID SDK Shared Constants
+ *
+ * Constants shared across all SDK entry points.
+ * Centralizing these prevents drift during domain/URL changes.
+ */
+/** Default FFID API base URL (production) */
+declare const DEFAULT_API_BASE_URL = "https://id.feelflow.net";
+/**
+ * Recommended default OAuth scope set for FFID-connected services (v3.0.0+).
+ *
+ * Coverage:
+ * - `openid email profile` — OIDC standard claims (always required)
+ * - `subscription:read` — `/api/v1/subscriptions/ext/*` 系（プラン / 課金 gate）
+ * - `legal:read` — `/api/v1/legal/ext` 系（利用規約・同意状態）
+ *
+ * Add feature-specific scopes on top of this when needed (browser SDK):
+ * - `analytics:read` for `/api/v1/ext/analytics/config`
+ * - `organization:read` / `organization:write` for `/api/v1/organizations/ext/members`
+ * - `subscription:write` for self-serve plan changes
+ * - `legal:write` for recording user consent
+ * - `profile:read` / `profile:write` for profile UI
+ * - `organization:api-key` for org-level API key issuance
+ *
+ * **Note**: kept as a widened `string` (not `as const`) so consumers can
+ * concatenate additional scopes (e.g. `\`${DEFAULT_OAUTH_SCOPES} analytics:read\``)
+ * and so it remains assignable to `FFIDConfig.scope: string`. `widget:verify`
+ * is intentionally excluded — it is a service-key-only scope (`/api/v1/widget/*`),
+ * not used by the browser OAuth flow.
+ *
+ * Survey: feel-flow/feelflow-id-platform#2656 issuecomment-4324082742
+ */
+declare const DEFAULT_OAUTH_SCOPES = "openid email profile subscription:read legal:read";
+
+export { DEFAULT_API_BASE_URL as D, DEFAULT_OAUTH_SCOPES as a };

package/dist/{ffid-client-Cjm_TKUc.d.cts → ffid-client-B26jbUp5.d.cts}

@@ -127,6 +127,40 @@ interface FFIDNewsletterUnsubscribeParams {
 interface FFIDNewsletterUnsubscribeResponse {
     ok: true;
 }
+type FFIDNewsletterCampaignStatus = 'draft' | 'queued' | 'sending' | 'sent' | 'failed' | 'cancelled';
+type FFIDNewsletterSegment = {
+    type: 'all';
+} | {
+    type: 'filter';
+    conditions: Record<string, unknown>;
+};
+/**
+ * Body source XOR — exactly one of `htmlBody` / `templateId` must be set.
+ * V1 only ships `htmlBody`; `templateId` is reserved for SendGrid dynamic
+ * templates and is rejected server-side until that work lands.
+ */
+type FFIDNewsletterBodySource = {
+    htmlBody: string;
+    templateId?: never;
+} | {
+    templateId: string;
+    htmlBody?: never;
+};
+interface FFIDNewsletterDispatchParams {
+    subject: string;
+    /** Optional landing-page URL persisted on `newsletter_campaigns.article_url`. */
+    articleUrl?: string;
+    body: FFIDNewsletterBodySource;
+    /** Defaults to `{ type: 'all' }` server-side when omitted. */
+    segment?: FFIDNewsletterSegment;
+}
+interface FFIDNewsletterDispatchResponse {
+    campaignId: string;
+    totalRecipients: number;
+    status: FFIDNewsletterCampaignStatus;
+    sentCount: number;
+    failedCount: number;
+}
 
 /** Cache adapter interface for FFID SDK token verification */
 /**
@@ -589,6 +623,19 @@ interface FFIDVerifyAccessTokenOptions {
 interface FFIDConfig {
     /** Service code to identify your application */
     serviceCode: string;
+    /**
+     * OAuth 2.0 scope (space-separated). Required since v3.0.0 (#2674).
+     *
+     * Use `DEFAULT_OAUTH_SCOPES` from `@feelflow/ffid-sdk` for the recommended
+     * baseline, or specify a least-privilege subset for your use case. Phase 3
+     * of `feelflow-id-platform#2656` will reject `/oauth/authorize` requests
+     * without this parameter, so passing an empty string here is also rejected
+     * — **except** in `service-key` mode (server-to-server, never calls
+     * `/oauth/authorize`), where `''` is permitted at runtime.
+     *
+     * @example 'openid email profile subscription:read legal:read'
+     */
+    scope: string;
     /** FFID API base URL (defaults to production) */
     apiBaseUrl?: string | undefined;
     /**
@@ -847,6 +894,29 @@ interface FFIDProfileCallOptions {
      */
     accessToken?: string;
 }
+/**
+ * Response shape from `GET /api/v1/ext/analytics/config?service=<code>`.
+ *
+ * Returned by `FFIDClient.getAnalyticsConfig()`. Narrower than the admin-side
+ * `AnalyticsService` shape to avoid leaking internal columns
+ * (`ga4StreamId`, `lastSyncedAt`, `description`).
+ *
+ * @see Issue #2347
+ */
+interface FFIDAnalyticsConfig {
+    /** Service slug (kebab-case) — echoed back so callers can sanity-check */
+    code: string;
+    /** GA4 Measurement ID (`G-XXXXXXX`) */
+    measurementId: string;
+    /** GA4 displayName at the time of the last sync */
+    displayName: string;
+    /**
+     * `false` when the GA4 data stream has been archived. The measurement id is
+     * still returned so in-flight events do not 5xx during a cutover window —
+     * the caller should disable tracking on the next deploy.
+     */
+    isActive: boolean;
+}
 /**
  * Request payload for `updateProfile`.
  *
@@ -1064,6 +1134,7 @@ declare function createFFIDClient(config: FFIDConfig): {
     }) => Promise<FFIDApiResponse<FFIDRemoveMemberResponse>>;
     getProfile: (options?: FFIDProfileCallOptions) => Promise<FFIDApiResponse<FFIDUserProfile>>;
     updateProfile: (data: FFIDUpdateUserProfileRequest, options?: FFIDProfileCallOptions) => Promise<FFIDApiResponse<FFIDUserProfile>>;
+    getAnalyticsConfig: (serviceCode: string, options?: FFIDProfileCallOptions) => Promise<FFIDApiResponse<FFIDAnalyticsConfig>>;
     createCheckoutSession: (params: FFIDCreateCheckoutParams) => Promise<FFIDApiResponse<FFIDCheckoutSessionResponse>>;
     createPortalSession: (params: FFIDCreatePortalParams) => Promise<FFIDApiResponse<FFIDPortalSessionResponse>>;
     listPlans: () => Promise<FFIDApiResponse<FFIDListPlansResponse>>;
@@ -1101,6 +1172,7 @@ declare function createFFIDClient(config: FFIDConfig): {
         subscribe: (params: FFIDNewsletterSubscribeParams) => Promise<FFIDApiResponse<FFIDNewsletterSubscribeResponse>>;
         confirm: (params: FFIDNewsletterConfirmParams) => Promise<FFIDApiResponse<FFIDNewsletterConfirmResponse>>;
         unsubscribe: (params: FFIDNewsletterUnsubscribeParams) => Promise<FFIDApiResponse<FFIDNewsletterUnsubscribeResponse>>;
+        dispatch: (params: FFIDNewsletterDispatchParams) => Promise<FFIDApiResponse<FFIDNewsletterDispatchResponse>>;
     };
     /** Inquiry methods (create) */
     inquiry: {

package/dist/{ffid-client-Cjm_TKUc.d.ts → ffid-client-B26jbUp5.d.ts}

@@ -127,6 +127,40 @@ interface FFIDNewsletterUnsubscribeParams {
 interface FFIDNewsletterUnsubscribeResponse {
     ok: true;
 }
+type FFIDNewsletterCampaignStatus = 'draft' | 'queued' | 'sending' | 'sent' | 'failed' | 'cancelled';
+type FFIDNewsletterSegment = {
+    type: 'all';
+} | {
+    type: 'filter';
+    conditions: Record<string, unknown>;
+};
+/**
+ * Body source XOR — exactly one of `htmlBody` / `templateId` must be set.
+ * V1 only ships `htmlBody`; `templateId` is reserved for SendGrid dynamic
+ * templates and is rejected server-side until that work lands.
+ */
+type FFIDNewsletterBodySource = {
+    htmlBody: string;
+    templateId?: never;
+} | {
+    templateId: string;
+    htmlBody?: never;
+};
+interface FFIDNewsletterDispatchParams {
+    subject: string;
+    /** Optional landing-page URL persisted on `newsletter_campaigns.article_url`. */
+    articleUrl?: string;
+    body: FFIDNewsletterBodySource;
+    /** Defaults to `{ type: 'all' }` server-side when omitted. */
+    segment?: FFIDNewsletterSegment;
+}
+interface FFIDNewsletterDispatchResponse {
+    campaignId: string;
+    totalRecipients: number;
+    status: FFIDNewsletterCampaignStatus;
+    sentCount: number;
+    failedCount: number;
+}
 
 /** Cache adapter interface for FFID SDK token verification */
 /**
@@ -589,6 +623,19 @@ interface FFIDVerifyAccessTokenOptions {
 interface FFIDConfig {
     /** Service code to identify your application */
     serviceCode: string;
+    /**
+     * OAuth 2.0 scope (space-separated). Required since v3.0.0 (#2674).
+     *
+     * Use `DEFAULT_OAUTH_SCOPES` from `@feelflow/ffid-sdk` for the recommended
+     * baseline, or specify a least-privilege subset for your use case. Phase 3
+     * of `feelflow-id-platform#2656` will reject `/oauth/authorize` requests
+     * without this parameter, so passing an empty string here is also rejected
+     * — **except** in `service-key` mode (server-to-server, never calls
+     * `/oauth/authorize`), where `''` is permitted at runtime.
+     *
+     * @example 'openid email profile subscription:read legal:read'
+     */
+    scope: string;
     /** FFID API base URL (defaults to production) */
     apiBaseUrl?: string | undefined;
     /**
@@ -847,6 +894,29 @@ interface FFIDProfileCallOptions {
      */
     accessToken?: string;
 }
+/**
+ * Response shape from `GET /api/v1/ext/analytics/config?service=<code>`.
+ *
+ * Returned by `FFIDClient.getAnalyticsConfig()`. Narrower than the admin-side
+ * `AnalyticsService` shape to avoid leaking internal columns
+ * (`ga4StreamId`, `lastSyncedAt`, `description`).
+ *
+ * @see Issue #2347
+ */
+interface FFIDAnalyticsConfig {
+    /** Service slug (kebab-case) — echoed back so callers can sanity-check */
+    code: string;
+    /** GA4 Measurement ID (`G-XXXXXXX`) */
+    measurementId: string;
+    /** GA4 displayName at the time of the last sync */
+    displayName: string;
+    /**
+     * `false` when the GA4 data stream has been archived. The measurement id is
+     * still returned so in-flight events do not 5xx during a cutover window —
+     * the caller should disable tracking on the next deploy.
+     */
+    isActive: boolean;
+}
 /**
  * Request payload for `updateProfile`.
  *
@@ -1064,6 +1134,7 @@ declare function createFFIDClient(config: FFIDConfig): {
     }) => Promise<FFIDApiResponse<FFIDRemoveMemberResponse>>;
     getProfile: (options?: FFIDProfileCallOptions) => Promise<FFIDApiResponse<FFIDUserProfile>>;
     updateProfile: (data: FFIDUpdateUserProfileRequest, options?: FFIDProfileCallOptions) => Promise<FFIDApiResponse<FFIDUserProfile>>;
+    getAnalyticsConfig: (serviceCode: string, options?: FFIDProfileCallOptions) => Promise<FFIDApiResponse<FFIDAnalyticsConfig>>;
     createCheckoutSession: (params: FFIDCreateCheckoutParams) => Promise<FFIDApiResponse<FFIDCheckoutSessionResponse>>;
     createPortalSession: (params: FFIDCreatePortalParams) => Promise<FFIDApiResponse<FFIDPortalSessionResponse>>;
     listPlans: () => Promise<FFIDApiResponse<FFIDListPlansResponse>>;
@@ -1101,6 +1172,7 @@ declare function createFFIDClient(config: FFIDConfig): {
         subscribe: (params: FFIDNewsletterSubscribeParams) => Promise<FFIDApiResponse<FFIDNewsletterSubscribeResponse>>;
         confirm: (params: FFIDNewsletterConfirmParams) => Promise<FFIDApiResponse<FFIDNewsletterConfirmResponse>>;
         unsubscribe: (params: FFIDNewsletterUnsubscribeParams) => Promise<FFIDApiResponse<FFIDNewsletterUnsubscribeResponse>>;
+        dispatch: (params: FFIDNewsletterDispatchParams) => Promise<FFIDApiResponse<FFIDNewsletterDispatchResponse>>;
     };
     /** Inquiry methods (create) */
     inquiry: {

package/dist/{index-0D2vYSLq.d.cts → index-C3zyNa4j.d.cts}

@@ -192,6 +192,19 @@ interface FFIDVerifyAccessTokenOptions {
 interface FFIDConfig {
     /** Service code to identify your application */
     serviceCode: string;
+    /**
+     * OAuth 2.0 scope (space-separated). Required since v3.0.0 (#2674).
+     *
+     * Use `DEFAULT_OAUTH_SCOPES` from `@feelflow/ffid-sdk` for the recommended
+     * baseline, or specify a least-privilege subset for your use case. Phase 3
+     * of `feelflow-id-platform#2656` will reject `/oauth/authorize` requests
+     * without this parameter, so passing an empty string here is also rejected
+     * — **except** in `service-key` mode (server-to-server, never calls
+     * `/oauth/authorize`), where `''` is permitted at runtime.
+     *
+     * @example 'openid email profile subscription:read legal:read'
+     */
+    scope: string;
     /** FFID API base URL (defaults to production) */
     apiBaseUrl?: string | undefined;
     /**
@@ -580,6 +593,29 @@ interface FFIDProfileCallOptions {
      */
     accessToken?: string;
 }
+/**
+ * Response shape from `GET /api/v1/ext/analytics/config?service=<code>`.
+ *
+ * Returned by `FFIDClient.getAnalyticsConfig()`. Narrower than the admin-side
+ * `AnalyticsService` shape to avoid leaking internal columns
+ * (`ga4StreamId`, `lastSyncedAt`, `description`).
+ *
+ * @see Issue #2347
+ */
+interface FFIDAnalyticsConfig {
+    /** Service slug (kebab-case) — echoed back so callers can sanity-check */
+    code: string;
+    /** GA4 Measurement ID (`G-XXXXXXX`) */
+    measurementId: string;
+    /** GA4 displayName at the time of the last sync */
+    displayName: string;
+    /**
+     * `false` when the GA4 data stream has been archived. The measurement id is
+     * still returned so in-flight events do not 5xx during a cutover window —
+     * the caller should disable tracking on the next deploy.
+     */
+    isActive: boolean;
+}
 /**
  * Request payload for `updateProfile`.
  *
@@ -1386,4 +1422,4 @@ interface FFIDInquiryFormPlaceholderContext {
 }
 declare function FFIDInquiryForm({ mode, prefill, organizations, preselectedOrganizationId, categories, termsVersion, privacyVersion, termsHref, privacyHref, turnstileToken, turnstileSlot, onSubmit, onChange, separateLegalCheckboxes, messagePlaceholder, requireCategorySelection, unstyled, classNames, locale, className, }: FFIDInquiryFormProps): react_jsx_runtime.JSX.Element;
 
-export { type FFIDInquiryFormProps as $, type FFIDSubscription as A, type FFIDSubscriptionContextValue as B, type FFIDAnnouncementsClientConfig as C, type FFIDAnnouncementsApiResponse as D, type EffectiveSubscriptionStatus as E, type FFIDSubscriptionStatus as F, type AnnouncementListResponse as G, type FFIDAnnouncementsLogger as H, type Announcement as I, type AnnouncementStatus as J, type AnnouncementType as K, type ListAnnouncementsOptions as L, FFIDAnnouncementBadge as M, FFIDAnnouncementList as N, type FFIDAnnouncementsError as O, type FFIDAnnouncementsErrorCode as P, type FFIDAnnouncementsServerResponse as Q, type FFIDCacheConfig as R, type FFIDContextValue as S, type FFIDInquiryCategory as T, type FFIDInquiryCategorySite2026 as U, FFIDInquiryForm as V, type FFIDInquiryFormCategoryItem as W, type FFIDInquiryFormClassNames as X, type FFIDInquiryFormOrganization as Y, type FFIDInquiryFormPlaceholderContext as Z, type FFIDInquiryFormPrefill as _, type FFIDConfig as a, type FFIDInquiryFormSubmitData as a0, type FFIDInquiryFormSubmitResult as a1, type FFIDJwtClaims as a2, FFIDLoginButton as a3, type FFIDMemberStatus as a4, type FFIDOAuthTokenResponse as a5, type FFIDOAuthUserInfoMemberRole as a6, type FFIDOAuthUserInfoSubscription as a7, type FFIDOrganizationMember as a8, FFIDOrganizationSwitcher as a9, type FFIDRedirectErrorCode as aa, type FFIDSeatModel as ab, FFIDSubscriptionBadge as ac, type FFIDTokenIntrospectionResponse as ad, FFIDUserMenu as ae, FFID_INQUIRY_CATEGORIES as af, FFID_INQUIRY_CATEGORIES_SITE_2026 as ag, type UseFFIDAnnouncementsOptions as ah, type UseFFIDAnnouncementsReturn as ai, isFFIDInquiryCategorySite2026 as aj, useFFIDAnnouncements as ak, type FFIDAnnouncementBadgeClassNames as al, type FFIDAnnouncementBadgeProps as am, type FFIDAnnouncementListClassNames as an, type FFIDAnnouncementListProps as ao, type FFIDLoginButtonProps as ap, type FFIDOrganizationSwitcherClassNames as aq, type FFIDOrganizationSwitcherProps as ar, type FFIDSubscriptionBadgeClassNames as as, type FFIDSubscriptionBadgeProps as at, type FFIDUserMenuClassNames as au, type FFIDUserMenuProps as av, type FFIDApiResponse as b, type FFIDSessionResponse as c, type FFIDRedirectResult as d, type FFIDError as e, type FFIDSubscriptionCheckResponse as f, type FFIDListMembersResponse as g, type FFIDMemberRole as h, type FFIDUpdateMemberRoleResponse as i, type FFIDRemoveMemberResponse as j, type FFIDProfileCallOptions as k, type FFIDUserProfile as l, type FFIDUpdateUserProfileRequest as m, type FFIDCreateCheckoutParams as n, type FFIDCheckoutSessionResponse as o, type FFIDCreatePortalParams as p, type FFIDPortalSessionResponse as q, type FFIDVerifyAccessTokenOptions as r, type FFIDOAuthUserInfo as s, type FFIDInquiryCreateParams as t, type FFIDInquiryCreateResponse as u, type FFIDAuthMode as v, type FFIDLogger as w, type FFIDCacheAdapter as x, type FFIDUser as y, type FFIDOrganization as z };
+export { type FFIDInquiryFormPrefill as $, type FFIDOrganization as A, type FFIDSubscription as B, type FFIDSubscriptionContextValue as C, type FFIDAnnouncementsClientConfig as D, type EffectiveSubscriptionStatus as E, type FFIDSubscriptionStatus as F, type FFIDAnnouncementsApiResponse as G, type AnnouncementListResponse as H, type FFIDAnnouncementsLogger as I, type Announcement as J, type AnnouncementStatus as K, type ListAnnouncementsOptions as L, type AnnouncementType as M, FFIDAnnouncementBadge as N, FFIDAnnouncementList as O, type FFIDAnnouncementsError as P, type FFIDAnnouncementsErrorCode as Q, type FFIDAnnouncementsServerResponse as R, type FFIDCacheConfig as S, type FFIDContextValue as T, type FFIDInquiryCategory as U, type FFIDInquiryCategorySite2026 as V, FFIDInquiryForm as W, type FFIDInquiryFormCategoryItem as X, type FFIDInquiryFormClassNames as Y, type FFIDInquiryFormOrganization as Z, type FFIDInquiryFormPlaceholderContext as _, type FFIDConfig as a, type FFIDInquiryFormProps as a0, type FFIDInquiryFormSubmitData as a1, type FFIDInquiryFormSubmitResult as a2, type FFIDJwtClaims as a3, FFIDLoginButton as a4, type FFIDMemberStatus as a5, type FFIDOAuthTokenResponse as a6, type FFIDOAuthUserInfoMemberRole as a7, type FFIDOAuthUserInfoSubscription as a8, type FFIDOrganizationMember as a9, FFIDOrganizationSwitcher as aa, type FFIDRedirectErrorCode as ab, type FFIDSeatModel as ac, FFIDSubscriptionBadge as ad, type FFIDTokenIntrospectionResponse as ae, FFIDUserMenu as af, FFID_INQUIRY_CATEGORIES as ag, FFID_INQUIRY_CATEGORIES_SITE_2026 as ah, type UseFFIDAnnouncementsOptions as ai, type UseFFIDAnnouncementsReturn as aj, isFFIDInquiryCategorySite2026 as ak, useFFIDAnnouncements as al, type FFIDAnnouncementBadgeClassNames as am, type FFIDAnnouncementBadgeProps as an, type FFIDAnnouncementListClassNames as ao, type FFIDAnnouncementListProps as ap, type FFIDLoginButtonProps as aq, type FFIDOrganizationSwitcherClassNames as ar, type FFIDOrganizationSwitcherProps as as, type FFIDSubscriptionBadgeClassNames as at, type FFIDSubscriptionBadgeProps as au, type FFIDUserMenuClassNames as av, type FFIDUserMenuProps as aw, type FFIDApiResponse as b, type FFIDSessionResponse as c, type FFIDRedirectResult as d, type FFIDError as e, type FFIDSubscriptionCheckResponse as f, type FFIDListMembersResponse as g, type FFIDMemberRole as h, type FFIDUpdateMemberRoleResponse as i, type FFIDRemoveMemberResponse as j, type FFIDProfileCallOptions as k, type FFIDUserProfile as l, type FFIDUpdateUserProfileRequest as m, type FFIDAnalyticsConfig as n, type FFIDCreateCheckoutParams as o, type FFIDCheckoutSessionResponse as p, type FFIDCreatePortalParams as q, type FFIDPortalSessionResponse as r, type FFIDVerifyAccessTokenOptions as s, type FFIDOAuthUserInfo as t, type FFIDInquiryCreateParams as u, type FFIDInquiryCreateResponse as v, type FFIDAuthMode as w, type FFIDLogger as x, type FFIDCacheAdapter as y, type FFIDUser as z };

package/dist/{index-0D2vYSLq.d.ts → index-C3zyNa4j.d.ts}

@@ -192,6 +192,19 @@ interface FFIDVerifyAccessTokenOptions {
 interface FFIDConfig {
     /** Service code to identify your application */
     serviceCode: string;
+    /**
+     * OAuth 2.0 scope (space-separated). Required since v3.0.0 (#2674).
+     *
+     * Use `DEFAULT_OAUTH_SCOPES` from `@feelflow/ffid-sdk` for the recommended
+     * baseline, or specify a least-privilege subset for your use case. Phase 3
+     * of `feelflow-id-platform#2656` will reject `/oauth/authorize` requests
+     * without this parameter, so passing an empty string here is also rejected
+     * — **except** in `service-key` mode (server-to-server, never calls
+     * `/oauth/authorize`), where `''` is permitted at runtime.
+     *
+     * @example 'openid email profile subscription:read legal:read'
+     */
+    scope: string;
     /** FFID API base URL (defaults to production) */
     apiBaseUrl?: string | undefined;
     /**
@@ -580,6 +593,29 @@ interface FFIDProfileCallOptions {
      */
     accessToken?: string;
 }
+/**
+ * Response shape from `GET /api/v1/ext/analytics/config?service=<code>`.
+ *
+ * Returned by `FFIDClient.getAnalyticsConfig()`. Narrower than the admin-side
+ * `AnalyticsService` shape to avoid leaking internal columns
+ * (`ga4StreamId`, `lastSyncedAt`, `description`).
+ *
+ * @see Issue #2347
+ */
+interface FFIDAnalyticsConfig {
+    /** Service slug (kebab-case) — echoed back so callers can sanity-check */
+    code: string;
+    /** GA4 Measurement ID (`G-XXXXXXX`) */
+    measurementId: string;
+    /** GA4 displayName at the time of the last sync */
+    displayName: string;
+    /**
+     * `false` when the GA4 data stream has been archived. The measurement id is
+     * still returned so in-flight events do not 5xx during a cutover window —
+     * the caller should disable tracking on the next deploy.
+     */
+    isActive: boolean;
+}
 /**
  * Request payload for `updateProfile`.
  *
@@ -1386,4 +1422,4 @@ interface FFIDInquiryFormPlaceholderContext {
 }
 declare function FFIDInquiryForm({ mode, prefill, organizations, preselectedOrganizationId, categories, termsVersion, privacyVersion, termsHref, privacyHref, turnstileToken, turnstileSlot, onSubmit, onChange, separateLegalCheckboxes, messagePlaceholder, requireCategorySelection, unstyled, classNames, locale, className, }: FFIDInquiryFormProps): react_jsx_runtime.JSX.Element;
 
-export { type FFIDInquiryFormProps as $, type FFIDSubscription as A, type FFIDSubscriptionContextValue as B, type FFIDAnnouncementsClientConfig as C, type FFIDAnnouncementsApiResponse as D, type EffectiveSubscriptionStatus as E, type FFIDSubscriptionStatus as F, type AnnouncementListResponse as G, type FFIDAnnouncementsLogger as H, type Announcement as I, type AnnouncementStatus as J, type AnnouncementType as K, type ListAnnouncementsOptions as L, FFIDAnnouncementBadge as M, FFIDAnnouncementList as N, type FFIDAnnouncementsError as O, type FFIDAnnouncementsErrorCode as P, type FFIDAnnouncementsServerResponse as Q, type FFIDCacheConfig as R, type FFIDContextValue as S, type FFIDInquiryCategory as T, type FFIDInquiryCategorySite2026 as U, FFIDInquiryForm as V, type FFIDInquiryFormCategoryItem as W, type FFIDInquiryFormClassNames as X, type FFIDInquiryFormOrganization as Y, type FFIDInquiryFormPlaceholderContext as Z, type FFIDInquiryFormPrefill as _, type FFIDConfig as a, type FFIDInquiryFormSubmitData as a0, type FFIDInquiryFormSubmitResult as a1, type FFIDJwtClaims as a2, FFIDLoginButton as a3, type FFIDMemberStatus as a4, type FFIDOAuthTokenResponse as a5, type FFIDOAuthUserInfoMemberRole as a6, type FFIDOAuthUserInfoSubscription as a7, type FFIDOrganizationMember as a8, FFIDOrganizationSwitcher as a9, type FFIDRedirectErrorCode as aa, type FFIDSeatModel as ab, FFIDSubscriptionBadge as ac, type FFIDTokenIntrospectionResponse as ad, FFIDUserMenu as ae, FFID_INQUIRY_CATEGORIES as af, FFID_INQUIRY_CATEGORIES_SITE_2026 as ag, type UseFFIDAnnouncementsOptions as ah, type UseFFIDAnnouncementsReturn as ai, isFFIDInquiryCategorySite2026 as aj, useFFIDAnnouncements as ak, type FFIDAnnouncementBadgeClassNames as al, type FFIDAnnouncementBadgeProps as am, type FFIDAnnouncementListClassNames as an, type FFIDAnnouncementListProps as ao, type FFIDLoginButtonProps as ap, type FFIDOrganizationSwitcherClassNames as aq, type FFIDOrganizationSwitcherProps as ar, type FFIDSubscriptionBadgeClassNames as as, type FFIDSubscriptionBadgeProps as at, type FFIDUserMenuClassNames as au, type FFIDUserMenuProps as av, type FFIDApiResponse as b, type FFIDSessionResponse as c, type FFIDRedirectResult as d, type FFIDError as e, type FFIDSubscriptionCheckResponse as f, type FFIDListMembersResponse as g, type FFIDMemberRole as h, type FFIDUpdateMemberRoleResponse as i, type FFIDRemoveMemberResponse as j, type FFIDProfileCallOptions as k, type FFIDUserProfile as l, type FFIDUpdateUserProfileRequest as m, type FFIDCreateCheckoutParams as n, type FFIDCheckoutSessionResponse as o, type FFIDCreatePortalParams as p, type FFIDPortalSessionResponse as q, type FFIDVerifyAccessTokenOptions as r, type FFIDOAuthUserInfo as s, type FFIDInquiryCreateParams as t, type FFIDInquiryCreateResponse as u, type FFIDAuthMode as v, type FFIDLogger as w, type FFIDCacheAdapter as x, type FFIDUser as y, type FFIDOrganization as z };
+export { type FFIDInquiryFormPrefill as $, type FFIDOrganization as A, type FFIDSubscription as B, type FFIDSubscriptionContextValue as C, type FFIDAnnouncementsClientConfig as D, type EffectiveSubscriptionStatus as E, type FFIDSubscriptionStatus as F, type FFIDAnnouncementsApiResponse as G, type AnnouncementListResponse as H, type FFIDAnnouncementsLogger as I, type Announcement as J, type AnnouncementStatus as K, type ListAnnouncementsOptions as L, type AnnouncementType as M, FFIDAnnouncementBadge as N, FFIDAnnouncementList as O, type FFIDAnnouncementsError as P, type FFIDAnnouncementsErrorCode as Q, type FFIDAnnouncementsServerResponse as R, type FFIDCacheConfig as S, type FFIDContextValue as T, type FFIDInquiryCategory as U, type FFIDInquiryCategorySite2026 as V, FFIDInquiryForm as W, type FFIDInquiryFormCategoryItem as X, type FFIDInquiryFormClassNames as Y, type FFIDInquiryFormOrganization as Z, type FFIDInquiryFormPlaceholderContext as _, type FFIDConfig as a, type FFIDInquiryFormProps as a0, type FFIDInquiryFormSubmitData as a1, type FFIDInquiryFormSubmitResult as a2, type FFIDJwtClaims as a3, FFIDLoginButton as a4, type FFIDMemberStatus as a5, type FFIDOAuthTokenResponse as a6, type FFIDOAuthUserInfoMemberRole as a7, type FFIDOAuthUserInfoSubscription as a8, type FFIDOrganizationMember as a9, FFIDOrganizationSwitcher as aa, type FFIDRedirectErrorCode as ab, type FFIDSeatModel as ac, FFIDSubscriptionBadge as ad, type FFIDTokenIntrospectionResponse as ae, FFIDUserMenu as af, FFID_INQUIRY_CATEGORIES as ag, FFID_INQUIRY_CATEGORIES_SITE_2026 as ah, type UseFFIDAnnouncementsOptions as ai, type UseFFIDAnnouncementsReturn as aj, isFFIDInquiryCategorySite2026 as ak, useFFIDAnnouncements as al, type FFIDAnnouncementBadgeClassNames as am, type FFIDAnnouncementBadgeProps as an, type FFIDAnnouncementListClassNames as ao, type FFIDAnnouncementListProps as ap, type FFIDLoginButtonProps as aq, type FFIDOrganizationSwitcherClassNames as ar, type FFIDOrganizationSwitcherProps as as, type FFIDSubscriptionBadgeClassNames as at, type FFIDSubscriptionBadgeProps as au, type FFIDUserMenuClassNames as av, type FFIDUserMenuProps as aw, type FFIDApiResponse as b, type FFIDSessionResponse as c, type FFIDRedirectResult as d, type FFIDError as e, type FFIDSubscriptionCheckResponse as f, type FFIDListMembersResponse as g, type FFIDMemberRole as h, type FFIDUpdateMemberRoleResponse as i, type FFIDRemoveMemberResponse as j, type FFIDProfileCallOptions as k, type FFIDUserProfile as l, type FFIDUpdateUserProfileRequest as m, type FFIDAnalyticsConfig as n, type FFIDCreateCheckoutParams as o, type FFIDCheckoutSessionResponse as p, type FFIDCreatePortalParams as q, type FFIDPortalSessionResponse as r, type FFIDVerifyAccessTokenOptions as s, type FFIDOAuthUserInfo as t, type FFIDInquiryCreateParams as u, type FFIDInquiryCreateResponse as v, type FFIDAuthMode as w, type FFIDLogger as x, type FFIDCacheAdapter as y, type FFIDUser as z };

package/dist/index.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkKNEZ5OUQ_cjs = require('./chunk-KNEZ5OUQ.cjs');
+var chunkJNR4AKL5_cjs = require('./chunk-JNR4AKL5.cjs');
 var react = require('react');
 var jsxRuntime = require('react/jsx-runtime');
 
@@ -53,8 +53,8 @@ function defaultRedirect(url) {
 }
 function useRequireActiveSubscription(options) {
   const { redirectTo, allowGrace = true, onRedirect } = options;
-  const { isLoading, error } = chunkKNEZ5OUQ_cjs.useFFIDContext();
-  const { effectiveStatus, isBlocked, isGrace } = chunkKNEZ5OUQ_cjs.useSubscription();
+  const { isLoading, error } = chunkJNR4AKL5_cjs.useFFIDContext();
+  const { effectiveStatus, isBlocked, isGrace } = chunkJNR4AKL5_cjs.useSubscription();
   const hasFetchError = error !== null && effectiveStatus === null;
   const shouldRedirect = !isLoading && !hasFetchError && (isBlocked || !allowGrace && isGrace || effectiveStatus === null);
   react.useEffect(() => {
@@ -75,7 +75,7 @@ function useRequireActiveSubscription(options) {
 }
 function withFFIDAuth(Component, options = {}) {
   const WrappedComponent = (props) => {
-    const { isLoading, isAuthenticated, login } = chunkKNEZ5OUQ_cjs.useFFIDContext();
+    const { isLoading, isAuthenticated, login } = chunkJNR4AKL5_cjs.useFFIDContext();
     const hasRedirected = react.useRef(false);
     react.useEffect(() => {
       if (!isLoading && !isAuthenticated && options.redirectToLogin && !hasRedirected.current) {
@@ -100,115 +100,121 @@ function withFFIDAuth(Component, options = {}) {
 
 // src/newsletter/types.ts
 var FFID_NEWSLETTER_TYPES = ["inquiry_followup", "general"];
+var FFID_NEWSLETTER_DISPATCH_MAX_RECIPIENTS = 1e3;
 
 Object.defineProperty(exports, "DEFAULT_API_BASE_URL", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.DEFAULT_API_BASE_URL; }
+  get: function () { return chunkJNR4AKL5_cjs.DEFAULT_API_BASE_URL; }
+});
+Object.defineProperty(exports, "DEFAULT_OAUTH_SCOPES", {
+  enumerable: true,
+  get: function () { return chunkJNR4AKL5_cjs.DEFAULT_OAUTH_SCOPES; }
 });
 Object.defineProperty(exports, "FFIDAnnouncementBadge", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.FFIDAnnouncementBadge; }
+  get: function () { return chunkJNR4AKL5_cjs.FFIDAnnouncementBadge; }
 });
 Object.defineProperty(exports, "FFIDAnnouncementList", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.FFIDAnnouncementList; }
+  get: function () { return chunkJNR4AKL5_cjs.FFIDAnnouncementList; }
 });
 Object.defineProperty(exports, "FFIDInquiryForm", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.FFIDInquiryForm; }
+  get: function () { return chunkJNR4AKL5_cjs.FFIDInquiryForm; }
 });
 Object.defineProperty(exports, "FFIDLoginButton", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.FFIDLoginButton; }
+  get: function () { return chunkJNR4AKL5_cjs.FFIDLoginButton; }
 });
 Object.defineProperty(exports, "FFIDOrganizationSwitcher", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.FFIDOrganizationSwitcher; }
+  get: function () { return chunkJNR4AKL5_cjs.FFIDOrganizationSwitcher; }
 });
 Object.defineProperty(exports, "FFIDProvider", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.FFIDProvider; }
+  get: function () { return chunkJNR4AKL5_cjs.FFIDProvider; }
 });
 Object.defineProperty(exports, "FFIDSDKError", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.FFIDSDKError; }
+  get: function () { return chunkJNR4AKL5_cjs.FFIDSDKError; }
 });
 Object.defineProperty(exports, "FFIDSubscriptionBadge", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.FFIDSubscriptionBadge; }
+  get: function () { return chunkJNR4AKL5_cjs.FFIDSubscriptionBadge; }
 });
 Object.defineProperty(exports, "FFIDUserMenu", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.FFIDUserMenu; }
+  get: function () { return chunkJNR4AKL5_cjs.FFIDUserMenu; }
 });
 Object.defineProperty(exports, "FFID_ANNOUNCEMENTS_ERROR_CODES", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.FFID_ANNOUNCEMENTS_ERROR_CODES; }
+  get: function () { return chunkJNR4AKL5_cjs.FFID_ANNOUNCEMENTS_ERROR_CODES; }
 });
 Object.defineProperty(exports, "FFID_INQUIRY_CATEGORIES", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.FFID_INQUIRY_CATEGORIES; }
+  get: function () { return chunkJNR4AKL5_cjs.FFID_INQUIRY_CATEGORIES; }
 });
 Object.defineProperty(exports, "FFID_INQUIRY_CATEGORIES_SITE_2026", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.FFID_INQUIRY_CATEGORIES_SITE_2026; }
+  get: function () { return chunkJNR4AKL5_cjs.FFID_INQUIRY_CATEGORIES_SITE_2026; }
 });
 Object.defineProperty(exports, "computeEffectiveStatusFromSession", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.computeEffectiveStatusFromSession; }
+  get: function () { return chunkJNR4AKL5_cjs.computeEffectiveStatusFromSession; }
 });
 Object.defineProperty(exports, "createFFIDAnnouncementsClient", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.createFFIDAnnouncementsClient; }
+  get: function () { return chunkJNR4AKL5_cjs.createFFIDAnnouncementsClient; }
 });
 Object.defineProperty(exports, "createFFIDClient", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.createFFIDClient; }
+  get: function () { return chunkJNR4AKL5_cjs.createFFIDClient; }
 });
 Object.defineProperty(exports, "createTokenStore", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.createTokenStore; }
+  get: function () { return chunkJNR4AKL5_cjs.createTokenStore; }
 });
 Object.defineProperty(exports, "generateCodeChallenge", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.generateCodeChallenge; }
+  get: function () { return chunkJNR4AKL5_cjs.generateCodeChallenge; }
 });
 Object.defineProperty(exports, "generateCodeVerifier", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.generateCodeVerifier; }
+  get: function () { return chunkJNR4AKL5_cjs.generateCodeVerifier; }
 });
 Object.defineProperty(exports, "isFFIDInquiryCategorySite2026", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.isFFIDInquiryCategorySite2026; }
+  get: function () { return chunkJNR4AKL5_cjs.isFFIDInquiryCategorySite2026; }
 });
 Object.defineProperty(exports, "normalizeRedirectUri", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.normalizeRedirectUri; }
+  get: function () { return chunkJNR4AKL5_cjs.normalizeRedirectUri; }
 });
 Object.defineProperty(exports, "retrieveCodeVerifier", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.retrieveCodeVerifier; }
+  get: function () { return chunkJNR4AKL5_cjs.retrieveCodeVerifier; }
 });
 Object.defineProperty(exports, "storeCodeVerifier", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.storeCodeVerifier; }
+  get: function () { return chunkJNR4AKL5_cjs.storeCodeVerifier; }
 });
 Object.defineProperty(exports, "useFFID", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.useFFID; }
+  get: function () { return chunkJNR4AKL5_cjs.useFFID; }
 });
 Object.defineProperty(exports, "useFFIDAnnouncements", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.useFFIDAnnouncements; }
+  get: function () { return chunkJNR4AKL5_cjs.useFFIDAnnouncements; }
 });
 Object.defineProperty(exports, "useSubscription", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.useSubscription; }
+  get: function () { return chunkJNR4AKL5_cjs.useSubscription; }
 });
 Object.defineProperty(exports, "withSubscription", {
   enumerable: true,
-  get: function () { return chunkKNEZ5OUQ_cjs.withSubscription; }
+  get: function () { return chunkJNR4AKL5_cjs.withSubscription; }
 });
+exports.FFID_NEWSLETTER_DISPATCH_MAX_RECIPIENTS = FFID_NEWSLETTER_DISPATCH_MAX_RECIPIENTS;
 exports.FFID_NEWSLETTER_TYPES = FFID_NEWSLETTER_TYPES;
 exports.createKVCacheAdapter = createKVCacheAdapter;
 exports.createMemoryCacheAdapter = createMemoryCacheAdapter;