@feelflow/ffid-sdk 5.10.0 → 5.13.0

package/dist/{ffid-client-gboJROw0.d.ts → ffid-client-C3K3sAqq.d.cts}

@@ -1,4 +1,4 @@
-import { E as EffectiveSubscriptionStatus } from './types-BYdtyO_2.js';
+import { E as EffectiveSubscriptionStatus } from './types-BeVl-z12.cjs';
 
 /**
  * Inquiry types exposed by the FFID SDK.
@@ -270,6 +270,52 @@ interface FFIDServiceAccessDecision {
     error?: FFIDServiceAccessError;
 }
 
+/**
+ * Billing checkout / portal session types.
+ *
+ * types/index.ts のサイズ上限対応で切り出し（中身は逐語移設、#3787 Phase A）。
+ */
+/**
+ * Checkout session response from billing checkout endpoint
+ */
+interface FFIDCheckoutSessionResponse {
+    /** Stripe Checkout session ID */
+    sessionId: string;
+    /** Stripe Checkout session URL (null if session creation had issues) */
+    url: string | null;
+}
+/**
+ * Portal session response from billing portal endpoint
+ */
+interface FFIDPortalSessionResponse {
+    /** Stripe Billing Portal URL */
+    url: string;
+}
+/**
+ * Parameters for creating a checkout session
+ */
+interface FFIDCreateCheckoutParams {
+    /** Organization ID (UUID) */
+    organizationId: string;
+    /** Subscription ID (UUID) */
+    subscriptionId: string;
+    /** URL to redirect after successful checkout */
+    successUrl: string;
+    /** URL to redirect after cancelled checkout */
+    cancelUrl: string;
+    /** Optional plan ID for upgrade or resubscription */
+    planId?: string;
+}
+/**
+ * Parameters for creating a billing portal session
+ */
+interface FFIDCreatePortalParams {
+    /** Organization ID (UUID) */
+    organizationId: string;
+    /** URL to redirect when user exits the portal */
+    returnUrl: string;
+}
+
 /** Billing interval for subscriptions */
 type FFIDBillingInterval = 'monthly' | 'yearly';
 /**
@@ -637,6 +683,122 @@ interface FFIDRemoveMemberResponse {
     message: string;
 }
 
+/**
+ * Contract resource types (#3787 Phase A)
+ *
+ * シート割り当て・請求書・支払い再試行の ext API 型。
+ * サーバー側の sanitize 済みレスポンス（Stripe 内部 ID を含まない）と対になる。
+ */
+/** シート割り当て 1 件（ユーザー情報付き、一覧用） */
+interface FFIDSeatAssignmentWithUser {
+    userId: string;
+    email: string;
+    name: string | null;
+    role: string;
+    assignedAt: string;
+    assignedBy: string | null;
+}
+/** シート割り当てレコード（割り当て直後のレスポンス用） */
+interface FFIDSeatAssignmentRecord {
+    id: string;
+    subscriptionId: string;
+    userId: string;
+    assignedBy: string | null;
+    assignedAt: string;
+    createdAt: string;
+    updatedAt: string;
+}
+/** GET /api/v1/subscriptions/ext/{id}/seats/assignments のレスポンス */
+interface FFIDListSeatAssignmentsResponse {
+    assignments: FFIDSeatAssignmentWithUser[];
+    totalSeats: number;
+    assignedSeats: number;
+    availableSeats: number;
+}
+/** listSeatAssignments のパラメータ */
+interface FFIDListSeatAssignmentsParams {
+    subscriptionId: string;
+}
+/** assignSeats のパラメータ */
+interface FFIDAssignSeatsParams {
+    subscriptionId: string;
+    userIds: string[];
+}
+/** POST /api/v1/subscriptions/ext/{id}/seats/assignments のレスポンス */
+interface FFIDAssignSeatsResponse {
+    message: string;
+    assignments: FFIDSeatAssignmentRecord[];
+}
+/** unassignSeat のパラメータ */
+interface FFIDUnassignSeatParams {
+    subscriptionId: string;
+    userId: string;
+}
+/** DELETE /api/v1/subscriptions/ext/{id}/seats/assignments/{userId} のレスポンス */
+interface FFIDUnassignSeatResponse {
+    message: string;
+}
+/** 請求書サマリー（一覧用） */
+interface FFIDInvoiceSummary {
+    id: string;
+    organizationId: string;
+    subscriptionId: string | null;
+    invoiceNumber: string;
+    description: string | null;
+    subtotal: number;
+    taxRate: number;
+    taxAmount: number;
+    totalAmount: number;
+    currency: string;
+    status: string;
+    issuedAt: string | null;
+    dueDate: string | null;
+    paidAt: string | null;
+    pdfUrl: string | null;
+    createdAt: string;
+}
+/** 請求書詳細（請求先情報・備考を含む） */
+interface FFIDInvoiceDetail extends FFIDInvoiceSummary {
+    billingName: string | null;
+    billingEmail: string | null;
+    notes: string | null;
+}
+/** listInvoices のパラメータ */
+interface FFIDListInvoicesParams {
+    organizationId: string;
+}
+/** GET /api/v1/billing/ext/invoices のレスポンス */
+interface FFIDListInvoicesResponse {
+    invoices: FFIDInvoiceSummary[];
+    count: number;
+}
+/** getInvoice のパラメータ */
+interface FFIDGetInvoiceParams {
+    invoiceId: string;
+}
+/** GET /api/v1/billing/ext/invoices/{id} のレスポンス */
+interface FFIDGetInvoiceResponse {
+    invoice: FFIDInvoiceDetail;
+}
+/** retryPayment のパラメータ */
+interface FFIDRetryPaymentParams {
+    organizationId: string;
+}
+/** 再試行に失敗した契約の詳細 */
+interface FFIDRetryPaymentFailure {
+    subscriptionId: string;
+    reason: string;
+    stripeCode?: string;
+}
+/** POST /api/v1/billing/ext/retry-payment のレスポンス */
+interface FFIDRetryPaymentSummary {
+    totalAttempted: number;
+    succeeded: number;
+    failed: number;
+    noOpenInvoice: number;
+    failures: FFIDRetryPaymentFailure[];
+}
+
 /**
  * FFID SDK Type Definitions
  *
@@ -793,6 +955,17 @@ interface FFIDOAuthUserInfoSubscription {
 interface FFIDOAuthUserInfo {
     sub: string;
     email: string | null;
+    /**
+     * Whether the user's email is verified on the FFID side (#3791). Use this to
+     * safely gate email-based auto account-linking (account-takeover prevention):
+     * never auto-link on an unverified email.
+     *
+     * `undefined` means the FFID server predates the field (older deployment) or
+     * the verification path could not populate it — NOT "unverified". Treat
+     * `undefined` as "unknown" and fall back to a stricter linking policy rather
+     * than coercing it to `false`/`true`.
+     */
+    emailVerified?: boolean | undefined;
     name: string | null;
     picture: string | null;
     companyName?: string | null | undefined;
@@ -962,47 +1135,6 @@ type FFIDApiResponse<T> = {
     error: FFIDError;
 };
 
-/**
- * Checkout session response from billing checkout endpoint
- */
-interface FFIDCheckoutSessionResponse {
-    /** Stripe Checkout session ID */
-    sessionId: string;
-    /** Stripe Checkout session URL (null if session creation had issues) */
-    url: string | null;
-}
-/**
- * Portal session response from billing portal endpoint
- */
-interface FFIDPortalSessionResponse {
-    /** Stripe Billing Portal URL */
-    url: string;
-}
-/**
- * Parameters for creating a checkout session
- */
-interface FFIDCreateCheckoutParams {
-    /** Organization ID (UUID) */
-    organizationId: string;
-    /** Subscription ID (UUID) */
-    subscriptionId: string;
-    /** URL to redirect after successful checkout */
-    successUrl: string;
-    /** URL to redirect after cancelled checkout */
-    cancelUrl: string;
-    /** Optional plan ID for upgrade or resubscription */
-    planId?: string;
-}
-/**
- * Parameters for creating a billing portal session
- */
-interface FFIDCreatePortalParams {
-    /** Organization ID (UUID) */
-    organizationId: string;
-    /** URL to redirect when user exits the portal */
-    returnUrl: string;
-}
-
 /**
  * User profile for the authenticated user (returned by `getProfile` / `updateProfile`).
  *
@@ -1232,34 +1364,6 @@ interface ContractWizardSubscriptionOptions {
     organizationId?: string;
 }
 
-/** Redirect and URL generation - redirectToLogin / redirectToAuthorize / redirectToLogout / getLoginUrl / getSignupUrl / getLogoutUrl */
-
-/**
- * `screen_hint=signup` query value for `/oauth/authorize` (#2908 / #2911).
- * Forwards to Supabase Auth signup screen; only the `'signup'` value is
- * propagated (no-op when `'login'` or omitted).
- */
-declare const SCREEN_HINT_SIGNUP: "signup";
-/** Options for redirectToAuthorize */
-interface RedirectToAuthorizeOptions {
-    /** Target organization ID — triggers org-scoped OAuth re-authorization */
-    organizationId?: string;
-    /**
-     * Initial Supabase Auth screen hint (#2908 / #2911).
-     *
-     * - `'signup'`: forwards `?screen_hint=signup` so the FFID OAuth flow lands
-     *   on the signup screen (used by external services that want to deep-link
-     *   new users into the signup CTA).
-     * - `'login'` / `undefined`: no `screen_hint` param is added — the default
-     *   login screen is shown.
-     *
-     * In cookie mode, `'signup'` redirects to the FFID `/signup` page instead
-     * of `/login` so the SDK contract (signup-screen intent) stays consistent
-     * regardless of `authMode`.
-     */
-    screenHint?: typeof SCREEN_HINT_SIGNUP | 'login';
-}
-
 /**
  * Token Store
  *
@@ -1301,6 +1405,53 @@ interface TokenStore {
  */
 declare function createTokenStore(storageType?: 'localStorage' | 'memory'): TokenStore;
 
+/** OAuth token operations - exchangeCodeForTokens / refreshAccessToken / signOutToken */
+
+/**
+ * Optional OAuth `state` validation for {@link exchangeCodeForTokens}.
+ *
+ * If a `state` is supplied on EITHER side — `expectedState` (the value persisted
+ * at `redirectToAuthorize`) or `actualState` (the value returned on the callback
+ * URL) — both must be present and equal before any token exchange. A mismatch
+ * OR an omitted counterpart fails closed (no exchange) to defend against CSRF
+ * (RFC 6749 §10.12 / #3841). Validation is skipped only when BOTH are omitted
+ * (backward compatible — callers that don't opt in are unaffected).
+ */
+interface ExchangeCodeForTokensOptions {
+    /** Stored state from `redirectToAuthorize` (e.g. `retrieveState()`) */
+    expectedState?: string;
+    /** State returned on the OAuth callback URL */
+    actualState?: string;
+}
+
+/** Redirect and URL generation - redirectToLogin / redirectToAuthorize / redirectToLogout / getLoginUrl / getSignupUrl / getLogoutUrl */
+
+/**
+ * `screen_hint=signup` query value for `/oauth/authorize` (#2908 / #2911).
+ * Forwards to Supabase Auth signup screen; only the `'signup'` value is
+ * propagated (no-op when `'login'` or omitted).
+ */
+declare const SCREEN_HINT_SIGNUP: "signup";
+/** Options for redirectToAuthorize */
+interface RedirectToAuthorizeOptions {
+    /** Target organization ID — triggers org-scoped OAuth re-authorization */
+    organizationId?: string;
+    /**
+     * Initial Supabase Auth screen hint (#2908 / #2911).
+     *
+     * - `'signup'`: forwards `?screen_hint=signup` so the FFID OAuth flow lands
+     *   on the signup screen (used by external services that want to deep-link
+     *   new users into the signup CTA).
+     * - `'login'` / `undefined`: no `screen_hint` param is added — the default
+     *   login screen is shown.
+     *
+     * In cookie mode, `'signup'` redirects to the FFID `/signup` page instead
+     * of `/login` so the SDK contract (signup-screen intent) stays consistent
+     * regardless of `authMode`.
+     */
+    screenHint?: typeof SCREEN_HINT_SIGNUP | 'login';
+}
+
 /** Creates an FFID API client instance */
 declare function createFFIDClient(config: FFIDConfig): {
     getSession: () => Promise<FFIDApiResponse<FFIDSessionResponse>>;
@@ -1312,7 +1463,7 @@ declare function createFFIDClient(config: FFIDConfig): {
     getLogoutUrl: (postLogoutRedirectUri?: string) => string;
     getSignupUrl: (redirectUrl?: string) => string;
     createError: (code: string, message: string) => FFIDError;
-    exchangeCodeForTokens: (code: string, codeVerifier?: string) => Promise<FFIDApiResponse<void>>;
+    exchangeCodeForTokens: (code: string, codeVerifier?: string, opts?: ExchangeCodeForTokensOptions) => Promise<FFIDApiResponse<void>>;
     refreshAccessToken: () => Promise<FFIDApiResponse<void>>;
     checkSubscription: (params: {
         userId?: string;
@@ -1341,6 +1492,12 @@ declare function createFFIDClient(config: FFIDConfig): {
     getAnalyticsConfig: (serviceCode: string, options?: FFIDProfileCallOptions) => Promise<FFIDApiResponse<FFIDAnalyticsConfig>>;
     createCheckoutSession: (params: FFIDCreateCheckoutParams) => Promise<FFIDApiResponse<FFIDCheckoutSessionResponse>>;
     createPortalSession: (params: FFIDCreatePortalParams) => Promise<FFIDApiResponse<FFIDPortalSessionResponse>>;
+    listInvoices: (params: FFIDListInvoicesParams) => Promise<FFIDApiResponse<FFIDListInvoicesResponse>>;
+    getInvoice: (params: FFIDGetInvoiceParams) => Promise<FFIDApiResponse<FFIDGetInvoiceResponse>>;
+    retryPayment: (params: FFIDRetryPaymentParams) => Promise<FFIDApiResponse<FFIDRetryPaymentSummary>>;
+    listSeatAssignments: (params: FFIDListSeatAssignmentsParams) => Promise<FFIDApiResponse<FFIDListSeatAssignmentsResponse>>;
+    assignSeats: (params: FFIDAssignSeatsParams) => Promise<FFIDApiResponse<FFIDAssignSeatsResponse>>;
+    unassignSeat: (params: FFIDUnassignSeatParams) => Promise<FFIDApiResponse<FFIDUnassignSeatResponse>>;
     listPlans: () => Promise<FFIDApiResponse<FFIDListPlansResponse>>;
     getSubscription: (subscriptionId: string) => Promise<FFIDApiResponse<FFIDSubscriptionDetail>>;
     subscribe: (params: FFIDSubscribeParams) => Promise<FFIDApiResponse<FFIDSubscribeResponse>>;

package/dist/{index-DSvX4q8E.d.cts → index-C6dnexXf.d.cts}

@@ -73,7 +73,16 @@ interface FFIDCacheConfig {
  * @see /api/v1/subscriptions/ext/check
  * @see docs/03-implementation/EXPIRED_CONTRACT_HANDLING.md
  */
-type EffectiveSubscriptionStatus = 'active' | 'active_canceling' | 'past_due_grace' | 'blocked' | 'canceled' | 'trial_expired' | 'expired';
+declare const EFFECTIVE_SUBSCRIPTION_STATUSES: readonly ["active", "active_canceling", "past_due_grace", "blocked", "canceled", "trial_expired", "expired"];
+/**
+ * Derived from {@link EFFECTIVE_SUBSCRIPTION_STATUSES} so the literal set has
+ * a runtime representation. The server mirrors the same const in
+ * `src/lib/common/subscription-helpers.ts`, and a server-side unit test pins
+ * element-equality between the two arrays (#3474) — convention-only sync
+ * could drift silently in the server-extending direction (a new server
+ * literal would fall through SDK consumers' `switch` defaults).
+ */
+type EffectiveSubscriptionStatus = (typeof EFFECTIVE_SUBSCRIPTION_STATUSES)[number];
 
 /**
  * Canonical service-access types for subscription lifecycle decisions.
@@ -316,6 +325,17 @@ interface FFIDOAuthUserInfoSubscription {
 interface FFIDOAuthUserInfo {
     sub: string;
     email: string | null;
+    /**
+     * Whether the user's email is verified on the FFID side (#3791). Use this to
+     * safely gate email-based auto account-linking (account-takeover prevention):
+     * never auto-link on an unverified email.
+     *
+     * `undefined` means the FFID server predates the field (older deployment) or
+     * the verification path could not populate it — NOT "unverified". Treat
+     * `undefined` as "unknown" and fall back to a stricter linking policy rather
+     * than coercing it to `false`/`true`.
+     */
+    emailVerified?: boolean | undefined;
     name: string | null;
     picture: string | null;
     companyName?: string | null | undefined;
@@ -624,47 +644,6 @@ type FFIDApiResponse<T> = {
     error: FFIDError;
 };
 
-/**
- * Checkout session response from billing checkout endpoint
- */
-interface FFIDCheckoutSessionResponse {
-    /** Stripe Checkout session ID */
-    sessionId: string;
-    /** Stripe Checkout session URL (null if session creation had issues) */
-    url: string | null;
-}
-/**
- * Portal session response from billing portal endpoint
- */
-interface FFIDPortalSessionResponse {
-    /** Stripe Billing Portal URL */
-    url: string;
-}
-/**
- * Parameters for creating a checkout session
- */
-interface FFIDCreateCheckoutParams {
-    /** Organization ID (UUID) */
-    organizationId: string;
-    /** Subscription ID (UUID) */
-    subscriptionId: string;
-    /** URL to redirect after successful checkout */
-    successUrl: string;
-    /** URL to redirect after cancelled checkout */
-    cancelUrl: string;
-    /** Optional plan ID for upgrade or resubscription */
-    planId?: string;
-}
-/**
- * Parameters for creating a billing portal session
- */
-interface FFIDCreatePortalParams {
-    /** Organization ID (UUID) */
-    organizationId: string;
-    /** URL to redirect when user exits the portal */
-    returnUrl: string;
-}
-
 /**
  * User profile for the authenticated user (returned by `getProfile` / `updateProfile`).
  *
@@ -851,6 +830,8 @@ interface FFIDTokenIntrospectionResponse {
     active: boolean;
     sub?: string;
     email?: string;
+    /** Whether the user's email is verified (#3791). Optional for backward compat with older FFID. */
+    email_verified?: boolean;
     name?: string;
     picture?: string | null;
     company_name?: string | null;
@@ -1578,4 +1559,4 @@ interface FFIDInquiryFormPlaceholderContext {
 }
 declare function FFIDInquiryForm({ mode, prefill, organizations, preselectedOrganizationId, categories, termsVersion, privacyVersion, termsHref, privacyHref, turnstileToken, turnstileSlot, onSubmit, onChange, legalLayout, messagePlaceholder, requireCategorySelection, unstyled, classNames, locale, className, }: FFIDInquiryFormProps): react_jsx_runtime.JSX.Element;
 
-export { type FFIDInquiryFormPrefill as $, type FFIDSubscriptionContextValue as A, type FFIDOAuthUserInfoSubscription as B, type FFIDAnnouncementsClientConfig as C, type FFIDAnnouncementsApiResponse as D, type EffectiveSubscriptionStatus as E, type FFIDSubscriptionStatus as F, type AnnouncementListResponse as G, type FFIDAnnouncementsLogger as H, type Announcement as I, type AnnouncementStatus as J, type AnnouncementType as K, type ListAnnouncementsOptions as L, FFIDAnnouncementBadge as M, FFIDAnnouncementList as N, type FFIDAnnouncementsError as O, type FFIDAnnouncementsErrorCode as P, type FFIDAnnouncementsServerResponse as Q, type FFIDCacheConfig as R, type FFIDContextValue as S, type FFIDInquiryCategory as T, type FFIDInquiryCategorySite2026 as U, FFIDInquiryForm as V, type FFIDInquiryFormCategoryItem as W, type FFIDInquiryFormClassNames as X, type FFIDInquiryFormLegalLayout as Y, type FFIDInquiryFormOrganization as Z, type FFIDInquiryFormPlaceholderContext as _, type FFIDConfig as a, type FFIDInquiryFormProps as a0, type FFIDInquiryFormSubmitData as a1, type FFIDInquiryFormSubmitResult as a2, type FFIDJwtClaims as a3, FFIDLoginButton as a4, type FFIDOAuthTokenResponse as a5, type FFIDOAuthUserInfoMemberRole as a6, FFIDOrganizationSwitcher as a7, type FFIDRedirectErrorCode as a8, type FFIDSeatModel as a9, type FFIDServiceAccessDenialReason as aa, type FFIDServiceAccessFailPolicy as ab, FFIDSubscriptionBadge as ac, type FFIDTokenIntrospectionResponse as ad, FFIDUserMenu as ae, FFID_INQUIRY_CATEGORIES as af, FFID_INQUIRY_CATEGORIES_SITE_2026 as ag, type UseFFIDAnnouncementsOptions as ah, type UseFFIDAnnouncementsReturn as ai, isFFIDInquiryCategorySite2026 as aj, useFFIDAnnouncements as ak, type FFIDAnnouncementBadgeClassNames as al, type FFIDAnnouncementBadgeProps as am, type FFIDAnnouncementListClassNames as an, type FFIDAnnouncementListProps as ao, type FFIDLoginButtonProps as ap, type FFIDOrganizationSwitcherClassNames as aq, type FFIDOrganizationSwitcherProps as ar, type FFIDSubscriptionBadgeClassNames as as, type FFIDSubscriptionBadgeProps as at, type FFIDUserMenuClassNames as au, type FFIDUserMenuProps as av, type FFIDApiResponse as b, type FFIDSessionResponse as c, type FFIDRedirectResult as d, type FFIDError as e, type FFIDSubscriptionCheckResponse as f, type FFIDCheckServiceAccessParams as g, type FFIDServiceAccessDecision as h, type FFIDProfileCallOptions as i, type FFIDUserProfile as j, type FFIDUpdateUserProfileRequest as k, type FFIDAnalyticsConfig as l, type FFIDCreateCheckoutParams as m, type FFIDCheckoutSessionResponse as n, type FFIDCreatePortalParams as o, type FFIDPortalSessionResponse as p, type FFIDVerifyAccessTokenOptions as q, type FFIDOAuthUserInfo as r, type FFIDInquiryCreateParams as s, type FFIDInquiryCreateResponse as t, type FFIDAuthMode as u, type FFIDLogger as v, type FFIDCacheAdapter as w, type FFIDUser as x, type FFIDOrganization as y, type FFIDSubscription as z };
+export { type FFIDInquiryFormSubmitResult as $, type AnnouncementListResponse as A, type FFIDAnnouncementsLogger as B, type Announcement as C, type AnnouncementStatus as D, type EffectiveSubscriptionStatus as E, type FFIDSubscriptionStatus as F, type AnnouncementType as G, EFFECTIVE_SUBSCRIPTION_STATUSES as H, FFIDAnnouncementBadge as I, FFIDAnnouncementList as J, type FFIDAnnouncementsError as K, type ListAnnouncementsOptions as L, type FFIDAnnouncementsErrorCode as M, type FFIDAnnouncementsServerResponse as N, type FFIDCacheConfig as O, type FFIDContextValue as P, type FFIDInquiryCategory as Q, type FFIDInquiryCategorySite2026 as R, FFIDInquiryForm as S, type FFIDInquiryFormCategoryItem as T, type FFIDInquiryFormClassNames as U, type FFIDInquiryFormLegalLayout as V, type FFIDInquiryFormOrganization as W, type FFIDInquiryFormPlaceholderContext as X, type FFIDInquiryFormPrefill as Y, type FFIDInquiryFormProps as Z, type FFIDInquiryFormSubmitData as _, type FFIDConfig as a, type FFIDJwtClaims as a0, FFIDLoginButton as a1, type FFIDOAuthTokenResponse as a2, type FFIDOAuthUserInfoMemberRole as a3, FFIDOrganizationSwitcher as a4, type FFIDRedirectErrorCode as a5, type FFIDSeatModel as a6, type FFIDServiceAccessDenialReason as a7, type FFIDServiceAccessFailPolicy as a8, FFIDSubscriptionBadge as a9, type FFIDTokenIntrospectionResponse as aa, FFIDUserMenu as ab, FFID_INQUIRY_CATEGORIES as ac, FFID_INQUIRY_CATEGORIES_SITE_2026 as ad, type UseFFIDAnnouncementsOptions as ae, type UseFFIDAnnouncementsReturn as af, isFFIDInquiryCategorySite2026 as ag, useFFIDAnnouncements as ah, type FFIDAnnouncementBadgeClassNames as ai, type FFIDAnnouncementBadgeProps as aj, type FFIDAnnouncementListClassNames as ak, type FFIDAnnouncementListProps as al, type FFIDLoginButtonProps as am, type FFIDOrganizationSwitcherClassNames as an, type FFIDOrganizationSwitcherProps as ao, type FFIDSubscriptionBadgeClassNames as ap, type FFIDSubscriptionBadgeProps as aq, type FFIDUserMenuClassNames as ar, type FFIDUserMenuProps as as, type FFIDApiResponse as b, type FFIDSessionResponse as c, type FFIDRedirectResult as d, type FFIDError as e, type FFIDSubscriptionCheckResponse as f, type FFIDCheckServiceAccessParams as g, type FFIDServiceAccessDecision as h, type FFIDProfileCallOptions as i, type FFIDUserProfile as j, type FFIDUpdateUserProfileRequest as k, type FFIDAnalyticsConfig as l, type FFIDVerifyAccessTokenOptions as m, type FFIDOAuthUserInfo as n, type FFIDInquiryCreateParams as o, type FFIDInquiryCreateResponse as p, type FFIDAuthMode as q, type FFIDLogger as r, type FFIDCacheAdapter as s, type FFIDUser as t, type FFIDOrganization as u, type FFIDSubscription as v, type FFIDSubscriptionContextValue as w, type FFIDOAuthUserInfoSubscription as x, type FFIDAnnouncementsClientConfig as y, type FFIDAnnouncementsApiResponse as z };

package/dist/{index-DSvX4q8E.d.ts → index-C6dnexXf.d.ts}

@@ -73,7 +73,16 @@ interface FFIDCacheConfig {
  * @see /api/v1/subscriptions/ext/check
  * @see docs/03-implementation/EXPIRED_CONTRACT_HANDLING.md
  */
-type EffectiveSubscriptionStatus = 'active' | 'active_canceling' | 'past_due_grace' | 'blocked' | 'canceled' | 'trial_expired' | 'expired';
+declare const EFFECTIVE_SUBSCRIPTION_STATUSES: readonly ["active", "active_canceling", "past_due_grace", "blocked", "canceled", "trial_expired", "expired"];
+/**
+ * Derived from {@link EFFECTIVE_SUBSCRIPTION_STATUSES} so the literal set has
+ * a runtime representation. The server mirrors the same const in
+ * `src/lib/common/subscription-helpers.ts`, and a server-side unit test pins
+ * element-equality between the two arrays (#3474) — convention-only sync
+ * could drift silently in the server-extending direction (a new server
+ * literal would fall through SDK consumers' `switch` defaults).
+ */
+type EffectiveSubscriptionStatus = (typeof EFFECTIVE_SUBSCRIPTION_STATUSES)[number];
 
 /**
  * Canonical service-access types for subscription lifecycle decisions.
@@ -316,6 +325,17 @@ interface FFIDOAuthUserInfoSubscription {
 interface FFIDOAuthUserInfo {
     sub: string;
     email: string | null;
+    /**
+     * Whether the user's email is verified on the FFID side (#3791). Use this to
+     * safely gate email-based auto account-linking (account-takeover prevention):
+     * never auto-link on an unverified email.
+     *
+     * `undefined` means the FFID server predates the field (older deployment) or
+     * the verification path could not populate it — NOT "unverified". Treat
+     * `undefined` as "unknown" and fall back to a stricter linking policy rather
+     * than coercing it to `false`/`true`.
+     */
+    emailVerified?: boolean | undefined;
     name: string | null;
     picture: string | null;
     companyName?: string | null | undefined;
@@ -624,47 +644,6 @@ type FFIDApiResponse<T> = {
     error: FFIDError;
 };
 
-/**
- * Checkout session response from billing checkout endpoint
- */
-interface FFIDCheckoutSessionResponse {
-    /** Stripe Checkout session ID */
-    sessionId: string;
-    /** Stripe Checkout session URL (null if session creation had issues) */
-    url: string | null;
-}
-/**
- * Portal session response from billing portal endpoint
- */
-interface FFIDPortalSessionResponse {
-    /** Stripe Billing Portal URL */
-    url: string;
-}
-/**
- * Parameters for creating a checkout session
- */
-interface FFIDCreateCheckoutParams {
-    /** Organization ID (UUID) */
-    organizationId: string;
-    /** Subscription ID (UUID) */
-    subscriptionId: string;
-    /** URL to redirect after successful checkout */
-    successUrl: string;
-    /** URL to redirect after cancelled checkout */
-    cancelUrl: string;
-    /** Optional plan ID for upgrade or resubscription */
-    planId?: string;
-}
-/**
- * Parameters for creating a billing portal session
- */
-interface FFIDCreatePortalParams {
-    /** Organization ID (UUID) */
-    organizationId: string;
-    /** URL to redirect when user exits the portal */
-    returnUrl: string;
-}
-
 /**
  * User profile for the authenticated user (returned by `getProfile` / `updateProfile`).
  *
@@ -851,6 +830,8 @@ interface FFIDTokenIntrospectionResponse {
     active: boolean;
     sub?: string;
     email?: string;
+    /** Whether the user's email is verified (#3791). Optional for backward compat with older FFID. */
+    email_verified?: boolean;
     name?: string;
     picture?: string | null;
     company_name?: string | null;
@@ -1578,4 +1559,4 @@ interface FFIDInquiryFormPlaceholderContext {
 }
 declare function FFIDInquiryForm({ mode, prefill, organizations, preselectedOrganizationId, categories, termsVersion, privacyVersion, termsHref, privacyHref, turnstileToken, turnstileSlot, onSubmit, onChange, legalLayout, messagePlaceholder, requireCategorySelection, unstyled, classNames, locale, className, }: FFIDInquiryFormProps): react_jsx_runtime.JSX.Element;
 
-export { type FFIDInquiryFormPrefill as $, type FFIDSubscriptionContextValue as A, type FFIDOAuthUserInfoSubscription as B, type FFIDAnnouncementsClientConfig as C, type FFIDAnnouncementsApiResponse as D, type EffectiveSubscriptionStatus as E, type FFIDSubscriptionStatus as F, type AnnouncementListResponse as G, type FFIDAnnouncementsLogger as H, type Announcement as I, type AnnouncementStatus as J, type AnnouncementType as K, type ListAnnouncementsOptions as L, FFIDAnnouncementBadge as M, FFIDAnnouncementList as N, type FFIDAnnouncementsError as O, type FFIDAnnouncementsErrorCode as P, type FFIDAnnouncementsServerResponse as Q, type FFIDCacheConfig as R, type FFIDContextValue as S, type FFIDInquiryCategory as T, type FFIDInquiryCategorySite2026 as U, FFIDInquiryForm as V, type FFIDInquiryFormCategoryItem as W, type FFIDInquiryFormClassNames as X, type FFIDInquiryFormLegalLayout as Y, type FFIDInquiryFormOrganization as Z, type FFIDInquiryFormPlaceholderContext as _, type FFIDConfig as a, type FFIDInquiryFormProps as a0, type FFIDInquiryFormSubmitData as a1, type FFIDInquiryFormSubmitResult as a2, type FFIDJwtClaims as a3, FFIDLoginButton as a4, type FFIDOAuthTokenResponse as a5, type FFIDOAuthUserInfoMemberRole as a6, FFIDOrganizationSwitcher as a7, type FFIDRedirectErrorCode as a8, type FFIDSeatModel as a9, type FFIDServiceAccessDenialReason as aa, type FFIDServiceAccessFailPolicy as ab, FFIDSubscriptionBadge as ac, type FFIDTokenIntrospectionResponse as ad, FFIDUserMenu as ae, FFID_INQUIRY_CATEGORIES as af, FFID_INQUIRY_CATEGORIES_SITE_2026 as ag, type UseFFIDAnnouncementsOptions as ah, type UseFFIDAnnouncementsReturn as ai, isFFIDInquiryCategorySite2026 as aj, useFFIDAnnouncements as ak, type FFIDAnnouncementBadgeClassNames as al, type FFIDAnnouncementBadgeProps as am, type FFIDAnnouncementListClassNames as an, type FFIDAnnouncementListProps as ao, type FFIDLoginButtonProps as ap, type FFIDOrganizationSwitcherClassNames as aq, type FFIDOrganizationSwitcherProps as ar, type FFIDSubscriptionBadgeClassNames as as, type FFIDSubscriptionBadgeProps as at, type FFIDUserMenuClassNames as au, type FFIDUserMenuProps as av, type FFIDApiResponse as b, type FFIDSessionResponse as c, type FFIDRedirectResult as d, type FFIDError as e, type FFIDSubscriptionCheckResponse as f, type FFIDCheckServiceAccessParams as g, type FFIDServiceAccessDecision as h, type FFIDProfileCallOptions as i, type FFIDUserProfile as j, type FFIDUpdateUserProfileRequest as k, type FFIDAnalyticsConfig as l, type FFIDCreateCheckoutParams as m, type FFIDCheckoutSessionResponse as n, type FFIDCreatePortalParams as o, type FFIDPortalSessionResponse as p, type FFIDVerifyAccessTokenOptions as q, type FFIDOAuthUserInfo as r, type FFIDInquiryCreateParams as s, type FFIDInquiryCreateResponse as t, type FFIDAuthMode as u, type FFIDLogger as v, type FFIDCacheAdapter as w, type FFIDUser as x, type FFIDOrganization as y, type FFIDSubscription as z };
+export { type FFIDInquiryFormSubmitResult as $, type AnnouncementListResponse as A, type FFIDAnnouncementsLogger as B, type Announcement as C, type AnnouncementStatus as D, type EffectiveSubscriptionStatus as E, type FFIDSubscriptionStatus as F, type AnnouncementType as G, EFFECTIVE_SUBSCRIPTION_STATUSES as H, FFIDAnnouncementBadge as I, FFIDAnnouncementList as J, type FFIDAnnouncementsError as K, type ListAnnouncementsOptions as L, type FFIDAnnouncementsErrorCode as M, type FFIDAnnouncementsServerResponse as N, type FFIDCacheConfig as O, type FFIDContextValue as P, type FFIDInquiryCategory as Q, type FFIDInquiryCategorySite2026 as R, FFIDInquiryForm as S, type FFIDInquiryFormCategoryItem as T, type FFIDInquiryFormClassNames as U, type FFIDInquiryFormLegalLayout as V, type FFIDInquiryFormOrganization as W, type FFIDInquiryFormPlaceholderContext as X, type FFIDInquiryFormPrefill as Y, type FFIDInquiryFormProps as Z, type FFIDInquiryFormSubmitData as _, type FFIDConfig as a, type FFIDJwtClaims as a0, FFIDLoginButton as a1, type FFIDOAuthTokenResponse as a2, type FFIDOAuthUserInfoMemberRole as a3, FFIDOrganizationSwitcher as a4, type FFIDRedirectErrorCode as a5, type FFIDSeatModel as a6, type FFIDServiceAccessDenialReason as a7, type FFIDServiceAccessFailPolicy as a8, FFIDSubscriptionBadge as a9, type FFIDTokenIntrospectionResponse as aa, FFIDUserMenu as ab, FFID_INQUIRY_CATEGORIES as ac, FFID_INQUIRY_CATEGORIES_SITE_2026 as ad, type UseFFIDAnnouncementsOptions as ae, type UseFFIDAnnouncementsReturn as af, isFFIDInquiryCategorySite2026 as ag, useFFIDAnnouncements as ah, type FFIDAnnouncementBadgeClassNames as ai, type FFIDAnnouncementBadgeProps as aj, type FFIDAnnouncementListClassNames as ak, type FFIDAnnouncementListProps as al, type FFIDLoginButtonProps as am, type FFIDOrganizationSwitcherClassNames as an, type FFIDOrganizationSwitcherProps as ao, type FFIDSubscriptionBadgeClassNames as ap, type FFIDSubscriptionBadgeProps as aq, type FFIDUserMenuClassNames as ar, type FFIDUserMenuProps as as, type FFIDApiResponse as b, type FFIDSessionResponse as c, type FFIDRedirectResult as d, type FFIDError as e, type FFIDSubscriptionCheckResponse as f, type FFIDCheckServiceAccessParams as g, type FFIDServiceAccessDecision as h, type FFIDProfileCallOptions as i, type FFIDUserProfile as j, type FFIDUpdateUserProfileRequest as k, type FFIDAnalyticsConfig as l, type FFIDVerifyAccessTokenOptions as m, type FFIDOAuthUserInfo as n, type FFIDInquiryCreateParams as o, type FFIDInquiryCreateResponse as p, type FFIDAuthMode as q, type FFIDLogger as r, type FFIDCacheAdapter as s, type FFIDUser as t, type FFIDOrganization as u, type FFIDSubscription as v, type FFIDSubscriptionContextValue as w, type FFIDOAuthUserInfoSubscription as x, type FFIDAnnouncementsClientConfig as y, type FFIDAnnouncementsApiResponse as z };