@feelflow/ffid-sdk 5.12.0 → 5.13.0

package/dist/components/index.d.cts

@@ -1,3 +1,3 @@
-export { I as FFIDAnnouncementBadge, ai as FFIDAnnouncementBadgeClassNames, aj as FFIDAnnouncementBadgeProps, J as FFIDAnnouncementList, ak as FFIDAnnouncementListClassNames, al as FFIDAnnouncementListProps, S as FFIDInquiryForm, T as FFIDInquiryFormCategoryItem, U as FFIDInquiryFormClassNames, V as FFIDInquiryFormLegalLayout, W as FFIDInquiryFormOrganization, X as FFIDInquiryFormPlaceholderContext, Y as FFIDInquiryFormPrefill, Z as FFIDInquiryFormProps, _ as FFIDInquiryFormSubmitData, $ as FFIDInquiryFormSubmitResult, a1 as FFIDLoginButton, am as FFIDLoginButtonProps, a4 as FFIDOrganizationSwitcher, an as FFIDOrganizationSwitcherClassNames, ao as FFIDOrganizationSwitcherProps, a9 as FFIDSubscriptionBadge, ap as FFIDSubscriptionBadgeClassNames, aq as FFIDSubscriptionBadgeProps, ab as FFIDUserMenu, ar as FFIDUserMenuClassNames, as as FFIDUserMenuProps } from '../index-DqsWKU16.cjs';
+export { I as FFIDAnnouncementBadge, ai as FFIDAnnouncementBadgeClassNames, aj as FFIDAnnouncementBadgeProps, J as FFIDAnnouncementList, ak as FFIDAnnouncementListClassNames, al as FFIDAnnouncementListProps, S as FFIDInquiryForm, T as FFIDInquiryFormCategoryItem, U as FFIDInquiryFormClassNames, V as FFIDInquiryFormLegalLayout, W as FFIDInquiryFormOrganization, X as FFIDInquiryFormPlaceholderContext, Y as FFIDInquiryFormPrefill, Z as FFIDInquiryFormProps, _ as FFIDInquiryFormSubmitData, $ as FFIDInquiryFormSubmitResult, a1 as FFIDLoginButton, am as FFIDLoginButtonProps, a4 as FFIDOrganizationSwitcher, an as FFIDOrganizationSwitcherClassNames, ao as FFIDOrganizationSwitcherProps, a9 as FFIDSubscriptionBadge, ap as FFIDSubscriptionBadgeClassNames, aq as FFIDSubscriptionBadgeProps, ab as FFIDUserMenu, ar as FFIDUserMenuClassNames, as as FFIDUserMenuProps } from '../index-C6dnexXf.cjs';
 import 'react/jsx-runtime';
 import 'react';

package/dist/components/index.d.ts

@@ -1,3 +1,3 @@
-export { I as FFIDAnnouncementBadge, ai as FFIDAnnouncementBadgeClassNames, aj as FFIDAnnouncementBadgeProps, J as FFIDAnnouncementList, ak as FFIDAnnouncementListClassNames, al as FFIDAnnouncementListProps, S as FFIDInquiryForm, T as FFIDInquiryFormCategoryItem, U as FFIDInquiryFormClassNames, V as FFIDInquiryFormLegalLayout, W as FFIDInquiryFormOrganization, X as FFIDInquiryFormPlaceholderContext, Y as FFIDInquiryFormPrefill, Z as FFIDInquiryFormProps, _ as FFIDInquiryFormSubmitData, $ as FFIDInquiryFormSubmitResult, a1 as FFIDLoginButton, am as FFIDLoginButtonProps, a4 as FFIDOrganizationSwitcher, an as FFIDOrganizationSwitcherClassNames, ao as FFIDOrganizationSwitcherProps, a9 as FFIDSubscriptionBadge, ap as FFIDSubscriptionBadgeClassNames, aq as FFIDSubscriptionBadgeProps, ab as FFIDUserMenu, ar as FFIDUserMenuClassNames, as as FFIDUserMenuProps } from '../index-DqsWKU16.js';
+export { I as FFIDAnnouncementBadge, ai as FFIDAnnouncementBadgeClassNames, aj as FFIDAnnouncementBadgeProps, J as FFIDAnnouncementList, ak as FFIDAnnouncementListClassNames, al as FFIDAnnouncementListProps, S as FFIDInquiryForm, T as FFIDInquiryFormCategoryItem, U as FFIDInquiryFormClassNames, V as FFIDInquiryFormLegalLayout, W as FFIDInquiryFormOrganization, X as FFIDInquiryFormPlaceholderContext, Y as FFIDInquiryFormPrefill, Z as FFIDInquiryFormProps, _ as FFIDInquiryFormSubmitData, $ as FFIDInquiryFormSubmitResult, a1 as FFIDLoginButton, am as FFIDLoginButtonProps, a4 as FFIDOrganizationSwitcher, an as FFIDOrganizationSwitcherClassNames, ao as FFIDOrganizationSwitcherProps, a9 as FFIDSubscriptionBadge, ap as FFIDSubscriptionBadgeClassNames, aq as FFIDSubscriptionBadgeProps, ab as FFIDUserMenu, ar as FFIDUserMenuClassNames, as as FFIDUserMenuProps } from '../index-C6dnexXf.js';
 import 'react/jsx-runtime';
 import 'react';

package/dist/components/index.js

@@ -1 +1 @@
-export { FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDSubscriptionBadge, FFIDUserMenu } from '../chunk-KB2JG64Z.js';
+export { FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDSubscriptionBadge, FFIDUserMenu } from '../chunk-RATTQIKM.js';

package/dist/{ffid-client-5IprSUVR.d.ts → ffid-client-BG0Qr86U.d.ts}

@@ -955,6 +955,17 @@ interface FFIDOAuthUserInfoSubscription {
 interface FFIDOAuthUserInfo {
     sub: string;
     email: string | null;
+    /**
+     * Whether the user's email is verified on the FFID side (#3791). Use this to
+     * safely gate email-based auto account-linking (account-takeover prevention):
+     * never auto-link on an unverified email.
+     *
+     * `undefined` means the FFID server predates the field (older deployment) or
+     * the verification path could not populate it — NOT "unverified". Treat
+     * `undefined` as "unknown" and fall back to a stricter linking policy rather
+     * than coercing it to `false`/`true`.
+     */
+    emailVerified?: boolean | undefined;
     name: string | null;
     picture: string | null;
     companyName?: string | null | undefined;
@@ -1353,34 +1364,6 @@ interface ContractWizardSubscriptionOptions {
     organizationId?: string;
 }
 
-/** Redirect and URL generation - redirectToLogin / redirectToAuthorize / redirectToLogout / getLoginUrl / getSignupUrl / getLogoutUrl */
-
-/**
- * `screen_hint=signup` query value for `/oauth/authorize` (#2908 / #2911).
- * Forwards to Supabase Auth signup screen; only the `'signup'` value is
- * propagated (no-op when `'login'` or omitted).
- */
-declare const SCREEN_HINT_SIGNUP: "signup";
-/** Options for redirectToAuthorize */
-interface RedirectToAuthorizeOptions {
-    /** Target organization ID — triggers org-scoped OAuth re-authorization */
-    organizationId?: string;
-    /**
-     * Initial Supabase Auth screen hint (#2908 / #2911).
-     *
-     * - `'signup'`: forwards `?screen_hint=signup` so the FFID OAuth flow lands
-     *   on the signup screen (used by external services that want to deep-link
-     *   new users into the signup CTA).
-     * - `'login'` / `undefined`: no `screen_hint` param is added — the default
-     *   login screen is shown.
-     *
-     * In cookie mode, `'signup'` redirects to the FFID `/signup` page instead
-     * of `/login` so the SDK contract (signup-screen intent) stays consistent
-     * regardless of `authMode`.
-     */
-    screenHint?: typeof SCREEN_HINT_SIGNUP | 'login';
-}
-
 /**
  * Token Store
  *
@@ -1422,6 +1405,53 @@ interface TokenStore {
  */
 declare function createTokenStore(storageType?: 'localStorage' | 'memory'): TokenStore;
 
+/** OAuth token operations - exchangeCodeForTokens / refreshAccessToken / signOutToken */
+
+/**
+ * Optional OAuth `state` validation for {@link exchangeCodeForTokens}.
+ *
+ * If a `state` is supplied on EITHER side — `expectedState` (the value persisted
+ * at `redirectToAuthorize`) or `actualState` (the value returned on the callback
+ * URL) — both must be present and equal before any token exchange. A mismatch
+ * OR an omitted counterpart fails closed (no exchange) to defend against CSRF
+ * (RFC 6749 §10.12 / #3841). Validation is skipped only when BOTH are omitted
+ * (backward compatible — callers that don't opt in are unaffected).
+ */
+interface ExchangeCodeForTokensOptions {
+    /** Stored state from `redirectToAuthorize` (e.g. `retrieveState()`) */
+    expectedState?: string;
+    /** State returned on the OAuth callback URL */
+    actualState?: string;
+}
+
+/** Redirect and URL generation - redirectToLogin / redirectToAuthorize / redirectToLogout / getLoginUrl / getSignupUrl / getLogoutUrl */
+
+/**
+ * `screen_hint=signup` query value for `/oauth/authorize` (#2908 / #2911).
+ * Forwards to Supabase Auth signup screen; only the `'signup'` value is
+ * propagated (no-op when `'login'` or omitted).
+ */
+declare const SCREEN_HINT_SIGNUP: "signup";
+/** Options for redirectToAuthorize */
+interface RedirectToAuthorizeOptions {
+    /** Target organization ID — triggers org-scoped OAuth re-authorization */
+    organizationId?: string;
+    /**
+     * Initial Supabase Auth screen hint (#2908 / #2911).
+     *
+     * - `'signup'`: forwards `?screen_hint=signup` so the FFID OAuth flow lands
+     *   on the signup screen (used by external services that want to deep-link
+     *   new users into the signup CTA).
+     * - `'login'` / `undefined`: no `screen_hint` param is added — the default
+     *   login screen is shown.
+     *
+     * In cookie mode, `'signup'` redirects to the FFID `/signup` page instead
+     * of `/login` so the SDK contract (signup-screen intent) stays consistent
+     * regardless of `authMode`.
+     */
+    screenHint?: typeof SCREEN_HINT_SIGNUP | 'login';
+}
+
 /** Creates an FFID API client instance */
 declare function createFFIDClient(config: FFIDConfig): {
     getSession: () => Promise<FFIDApiResponse<FFIDSessionResponse>>;
@@ -1433,7 +1463,7 @@ declare function createFFIDClient(config: FFIDConfig): {
     getLogoutUrl: (postLogoutRedirectUri?: string) => string;
     getSignupUrl: (redirectUrl?: string) => string;
     createError: (code: string, message: string) => FFIDError;
-    exchangeCodeForTokens: (code: string, codeVerifier?: string) => Promise<FFIDApiResponse<void>>;
+    exchangeCodeForTokens: (code: string, codeVerifier?: string, opts?: ExchangeCodeForTokensOptions) => Promise<FFIDApiResponse<void>>;
     refreshAccessToken: () => Promise<FFIDApiResponse<void>>;
     checkSubscription: (params: {
         userId?: string;

package/dist/{ffid-client-Dx4oc4Cw.d.cts → ffid-client-C3K3sAqq.d.cts}

@@ -955,6 +955,17 @@ interface FFIDOAuthUserInfoSubscription {
 interface FFIDOAuthUserInfo {
     sub: string;
     email: string | null;
+    /**
+     * Whether the user's email is verified on the FFID side (#3791). Use this to
+     * safely gate email-based auto account-linking (account-takeover prevention):
+     * never auto-link on an unverified email.
+     *
+     * `undefined` means the FFID server predates the field (older deployment) or
+     * the verification path could not populate it — NOT "unverified". Treat
+     * `undefined` as "unknown" and fall back to a stricter linking policy rather
+     * than coercing it to `false`/`true`.
+     */
+    emailVerified?: boolean | undefined;
     name: string | null;
     picture: string | null;
     companyName?: string | null | undefined;
@@ -1353,34 +1364,6 @@ interface ContractWizardSubscriptionOptions {
     organizationId?: string;
 }
 
-/** Redirect and URL generation - redirectToLogin / redirectToAuthorize / redirectToLogout / getLoginUrl / getSignupUrl / getLogoutUrl */
-
-/**
- * `screen_hint=signup` query value for `/oauth/authorize` (#2908 / #2911).
- * Forwards to Supabase Auth signup screen; only the `'signup'` value is
- * propagated (no-op when `'login'` or omitted).
- */
-declare const SCREEN_HINT_SIGNUP: "signup";
-/** Options for redirectToAuthorize */
-interface RedirectToAuthorizeOptions {
-    /** Target organization ID — triggers org-scoped OAuth re-authorization */
-    organizationId?: string;
-    /**
-     * Initial Supabase Auth screen hint (#2908 / #2911).
-     *
-     * - `'signup'`: forwards `?screen_hint=signup` so the FFID OAuth flow lands
-     *   on the signup screen (used by external services that want to deep-link
-     *   new users into the signup CTA).
-     * - `'login'` / `undefined`: no `screen_hint` param is added — the default
-     *   login screen is shown.
-     *
-     * In cookie mode, `'signup'` redirects to the FFID `/signup` page instead
-     * of `/login` so the SDK contract (signup-screen intent) stays consistent
-     * regardless of `authMode`.
-     */
-    screenHint?: typeof SCREEN_HINT_SIGNUP | 'login';
-}
-
 /**
  * Token Store
  *
@@ -1422,6 +1405,53 @@ interface TokenStore {
  */
 declare function createTokenStore(storageType?: 'localStorage' | 'memory'): TokenStore;
 
+/** OAuth token operations - exchangeCodeForTokens / refreshAccessToken / signOutToken */
+
+/**
+ * Optional OAuth `state` validation for {@link exchangeCodeForTokens}.
+ *
+ * If a `state` is supplied on EITHER side — `expectedState` (the value persisted
+ * at `redirectToAuthorize`) or `actualState` (the value returned on the callback
+ * URL) — both must be present and equal before any token exchange. A mismatch
+ * OR an omitted counterpart fails closed (no exchange) to defend against CSRF
+ * (RFC 6749 §10.12 / #3841). Validation is skipped only when BOTH are omitted
+ * (backward compatible — callers that don't opt in are unaffected).
+ */
+interface ExchangeCodeForTokensOptions {
+    /** Stored state from `redirectToAuthorize` (e.g. `retrieveState()`) */
+    expectedState?: string;
+    /** State returned on the OAuth callback URL */
+    actualState?: string;
+}
+
+/** Redirect and URL generation - redirectToLogin / redirectToAuthorize / redirectToLogout / getLoginUrl / getSignupUrl / getLogoutUrl */
+
+/**
+ * `screen_hint=signup` query value for `/oauth/authorize` (#2908 / #2911).
+ * Forwards to Supabase Auth signup screen; only the `'signup'` value is
+ * propagated (no-op when `'login'` or omitted).
+ */
+declare const SCREEN_HINT_SIGNUP: "signup";
+/** Options for redirectToAuthorize */
+interface RedirectToAuthorizeOptions {
+    /** Target organization ID — triggers org-scoped OAuth re-authorization */
+    organizationId?: string;
+    /**
+     * Initial Supabase Auth screen hint (#2908 / #2911).
+     *
+     * - `'signup'`: forwards `?screen_hint=signup` so the FFID OAuth flow lands
+     *   on the signup screen (used by external services that want to deep-link
+     *   new users into the signup CTA).
+     * - `'login'` / `undefined`: no `screen_hint` param is added — the default
+     *   login screen is shown.
+     *
+     * In cookie mode, `'signup'` redirects to the FFID `/signup` page instead
+     * of `/login` so the SDK contract (signup-screen intent) stays consistent
+     * regardless of `authMode`.
+     */
+    screenHint?: typeof SCREEN_HINT_SIGNUP | 'login';
+}
+
 /** Creates an FFID API client instance */
 declare function createFFIDClient(config: FFIDConfig): {
     getSession: () => Promise<FFIDApiResponse<FFIDSessionResponse>>;
@@ -1433,7 +1463,7 @@ declare function createFFIDClient(config: FFIDConfig): {
     getLogoutUrl: (postLogoutRedirectUri?: string) => string;
     getSignupUrl: (redirectUrl?: string) => string;
     createError: (code: string, message: string) => FFIDError;
-    exchangeCodeForTokens: (code: string, codeVerifier?: string) => Promise<FFIDApiResponse<void>>;
+    exchangeCodeForTokens: (code: string, codeVerifier?: string, opts?: ExchangeCodeForTokensOptions) => Promise<FFIDApiResponse<void>>;
     refreshAccessToken: () => Promise<FFIDApiResponse<void>>;
     checkSubscription: (params: {
         userId?: string;

package/dist/{index-DqsWKU16.d.cts → index-C6dnexXf.d.cts}

@@ -325,6 +325,17 @@ interface FFIDOAuthUserInfoSubscription {
 interface FFIDOAuthUserInfo {
     sub: string;
     email: string | null;
+    /**
+     * Whether the user's email is verified on the FFID side (#3791). Use this to
+     * safely gate email-based auto account-linking (account-takeover prevention):
+     * never auto-link on an unverified email.
+     *
+     * `undefined` means the FFID server predates the field (older deployment) or
+     * the verification path could not populate it — NOT "unverified". Treat
+     * `undefined` as "unknown" and fall back to a stricter linking policy rather
+     * than coercing it to `false`/`true`.
+     */
+    emailVerified?: boolean | undefined;
     name: string | null;
     picture: string | null;
     companyName?: string | null | undefined;
@@ -819,6 +830,8 @@ interface FFIDTokenIntrospectionResponse {
     active: boolean;
     sub?: string;
     email?: string;
+    /** Whether the user's email is verified (#3791). Optional for backward compat with older FFID. */
+    email_verified?: boolean;
     name?: string;
     picture?: string | null;
     company_name?: string | null;

package/dist/{index-DqsWKU16.d.ts → index-C6dnexXf.d.ts}

@@ -325,6 +325,17 @@ interface FFIDOAuthUserInfoSubscription {
 interface FFIDOAuthUserInfo {
     sub: string;
     email: string | null;
+    /**
+     * Whether the user's email is verified on the FFID side (#3791). Use this to
+     * safely gate email-based auto account-linking (account-takeover prevention):
+     * never auto-link on an unverified email.
+     *
+     * `undefined` means the FFID server predates the field (older deployment) or
+     * the verification path could not populate it — NOT "unverified". Treat
+     * `undefined` as "unknown" and fall back to a stricter linking policy rather
+     * than coercing it to `false`/`true`.
+     */
+    emailVerified?: boolean | undefined;
     name: string | null;
     picture: string | null;
     companyName?: string | null | undefined;
@@ -819,6 +830,8 @@ interface FFIDTokenIntrospectionResponse {
     active: boolean;
     sub?: string;
     email?: string;
+    /** Whether the user's email is verified (#3791). Optional for backward compat with older FFID. */
+    email_verified?: boolean;
     name?: string;
     picture?: string | null;
     company_name?: string | null;

package/dist/index.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkAOJDV3UO_cjs = require('./chunk-AOJDV3UO.cjs');
+var chunkJFFRO2Q5_cjs = require('./chunk-JFFRO2Q5.cjs');
 var chunkR5WSZMUL_cjs = require('./chunk-R5WSZMUL.cjs');
 var react = require('react');
 var jsxRuntime = require('react/jsx-runtime');
@@ -54,8 +54,8 @@ function defaultRedirect(url) {
 }
 function useRequireActiveSubscription(options) {
   const { redirectTo, allowGrace = true, onRedirect } = options;
-  const { isLoading, error } = chunkAOJDV3UO_cjs.useFFIDContext();
-  const { effectiveStatus, isBlocked, isGrace } = chunkAOJDV3UO_cjs.useSubscription();
+  const { isLoading, error } = chunkJFFRO2Q5_cjs.useFFIDContext();
+  const { effectiveStatus, isBlocked, isGrace } = chunkJFFRO2Q5_cjs.useSubscription();
   const hasFetchError = error !== null && effectiveStatus === null;
   const shouldRedirect = !isLoading && !hasFetchError && (isBlocked || !allowGrace && isGrace || effectiveStatus === null);
   react.useEffect(() => {
@@ -76,7 +76,7 @@ function useRequireActiveSubscription(options) {
 }
 function withFFIDAuth(Component, options = {}) {
   const WrappedComponent = (props) => {
-    const { isLoading, isAuthenticated, login } = chunkAOJDV3UO_cjs.useFFIDContext();
+    const { isLoading, isAuthenticated, login } = chunkJFFRO2Q5_cjs.useFFIDContext();
     const hasRedirected = react.useRef(false);
     react.useEffect(() => {
       if (!isLoading && !isAuthenticated && options.redirectToLogin && !hasRedirected.current) {
@@ -105,135 +105,151 @@ var FFID_NEWSLETTER_DISPATCH_MAX_RECIPIENTS = 1e3;
 
 Object.defineProperty(exports, "ACCESS_GRANTING_EFFECTIVE_STATUSES", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.ACCESS_GRANTING_EFFECTIVE_STATUSES; }
+  get: function () { return chunkJFFRO2Q5_cjs.ACCESS_GRANTING_EFFECTIVE_STATUSES; }
 });
 Object.defineProperty(exports, "BLOCKING_EFFECTIVE_STATUSES", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.BLOCKING_EFFECTIVE_STATUSES; }
+  get: function () { return chunkJFFRO2Q5_cjs.BLOCKING_EFFECTIVE_STATUSES; }
 });
 Object.defineProperty(exports, "DEFAULT_API_BASE_URL", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.DEFAULT_API_BASE_URL; }
+  get: function () { return chunkJFFRO2Q5_cjs.DEFAULT_API_BASE_URL; }
 });
 Object.defineProperty(exports, "DEFAULT_OAUTH_SCOPES", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.DEFAULT_OAUTH_SCOPES; }
+  get: function () { return chunkJFFRO2Q5_cjs.DEFAULT_OAUTH_SCOPES; }
 });
 Object.defineProperty(exports, "EFFECTIVE_SUBSCRIPTION_STATUSES", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.EFFECTIVE_SUBSCRIPTION_STATUSES; }
+  get: function () { return chunkJFFRO2Q5_cjs.EFFECTIVE_SUBSCRIPTION_STATUSES; }
 });
 Object.defineProperty(exports, "FFIDAnnouncementBadge", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.FFIDAnnouncementBadge; }
+  get: function () { return chunkJFFRO2Q5_cjs.FFIDAnnouncementBadge; }
 });
 Object.defineProperty(exports, "FFIDAnnouncementList", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.FFIDAnnouncementList; }
+  get: function () { return chunkJFFRO2Q5_cjs.FFIDAnnouncementList; }
 });
 Object.defineProperty(exports, "FFIDInquiryForm", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.FFIDInquiryForm; }
+  get: function () { return chunkJFFRO2Q5_cjs.FFIDInquiryForm; }
 });
 Object.defineProperty(exports, "FFIDLoginButton", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.FFIDLoginButton; }
+  get: function () { return chunkJFFRO2Q5_cjs.FFIDLoginButton; }
 });
 Object.defineProperty(exports, "FFIDOrganizationSwitcher", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.FFIDOrganizationSwitcher; }
+  get: function () { return chunkJFFRO2Q5_cjs.FFIDOrganizationSwitcher; }
 });
 Object.defineProperty(exports, "FFIDProvider", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.FFIDProvider; }
+  get: function () { return chunkJFFRO2Q5_cjs.FFIDProvider; }
 });
 Object.defineProperty(exports, "FFIDSDKError", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.FFIDSDKError; }
+  get: function () { return chunkJFFRO2Q5_cjs.FFIDSDKError; }
 });
 Object.defineProperty(exports, "FFIDSubscriptionBadge", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.FFIDSubscriptionBadge; }
+  get: function () { return chunkJFFRO2Q5_cjs.FFIDSubscriptionBadge; }
 });
 Object.defineProperty(exports, "FFIDUserMenu", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.FFIDUserMenu; }
+  get: function () { return chunkJFFRO2Q5_cjs.FFIDUserMenu; }
 });
 Object.defineProperty(exports, "FFID_ANNOUNCEMENTS_ERROR_CODES", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.FFID_ANNOUNCEMENTS_ERROR_CODES; }
+  get: function () { return chunkJFFRO2Q5_cjs.FFID_ANNOUNCEMENTS_ERROR_CODES; }
 });
 Object.defineProperty(exports, "FFID_INQUIRY_CATEGORIES", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.FFID_INQUIRY_CATEGORIES; }
+  get: function () { return chunkJFFRO2Q5_cjs.FFID_INQUIRY_CATEGORIES; }
 });
 Object.defineProperty(exports, "FFID_INQUIRY_CATEGORIES_SITE_2026", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.FFID_INQUIRY_CATEGORIES_SITE_2026; }
+  get: function () { return chunkJFFRO2Q5_cjs.FFID_INQUIRY_CATEGORIES_SITE_2026; }
+});
+Object.defineProperty(exports, "clearState", {
+  enumerable: true,
+  get: function () { return chunkJFFRO2Q5_cjs.cleanupStateStorage; }
 });
 Object.defineProperty(exports, "computeEffectiveStatusFromSession", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.computeEffectiveStatusFromSession; }
+  get: function () { return chunkJFFRO2Q5_cjs.computeEffectiveStatusFromSession; }
 });
 Object.defineProperty(exports, "createFFIDAnnouncementsClient", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.createFFIDAnnouncementsClient; }
+  get: function () { return chunkJFFRO2Q5_cjs.createFFIDAnnouncementsClient; }
 });
 Object.defineProperty(exports, "createFFIDClient", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.createFFIDClient; }
+  get: function () { return chunkJFFRO2Q5_cjs.createFFIDClient; }
 });
 Object.defineProperty(exports, "createTokenStore", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.createTokenStore; }
+  get: function () { return chunkJFFRO2Q5_cjs.createTokenStore; }
 });
 Object.defineProperty(exports, "generateCodeChallenge", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.generateCodeChallenge; }
+  get: function () { return chunkJFFRO2Q5_cjs.generateCodeChallenge; }
 });
 Object.defineProperty(exports, "generateCodeVerifier", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.generateCodeVerifier; }
+  get: function () { return chunkJFFRO2Q5_cjs.generateCodeVerifier; }
+});
+Object.defineProperty(exports, "handleRedirectCallback", {
+  enumerable: true,
+  get: function () { return chunkJFFRO2Q5_cjs.handleRedirectCallback; }
 });
 Object.defineProperty(exports, "hasAccessFromUserinfo", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.hasAccessFromUserinfo; }
+  get: function () { return chunkJFFRO2Q5_cjs.hasAccessFromUserinfo; }
 });
 Object.defineProperty(exports, "isBlockedFromUserinfo", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.isBlockedFromUserinfo; }
+  get: function () { return chunkJFFRO2Q5_cjs.isBlockedFromUserinfo; }
 });
 Object.defineProperty(exports, "isFFIDInquiryCategorySite2026", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.isFFIDInquiryCategorySite2026; }
+  get: function () { return chunkJFFRO2Q5_cjs.isFFIDInquiryCategorySite2026; }
 });
 Object.defineProperty(exports, "normalizeRedirectUri", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.normalizeRedirectUri; }
+  get: function () { return chunkJFFRO2Q5_cjs.normalizeRedirectUri; }
 });
 Object.defineProperty(exports, "retrieveCodeVerifier", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.retrieveCodeVerifier; }
+  get: function () { return chunkJFFRO2Q5_cjs.retrieveCodeVerifier; }
+});
+Object.defineProperty(exports, "retrieveState", {
+  enumerable: true,
+  get: function () { return chunkJFFRO2Q5_cjs.retrieveState; }
 });
 Object.defineProperty(exports, "storeCodeVerifier", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.storeCodeVerifier; }
+  get: function () { return chunkJFFRO2Q5_cjs.storeCodeVerifier; }
+});
+Object.defineProperty(exports, "storeState", {
+  enumerable: true,
+  get: function () { return chunkJFFRO2Q5_cjs.storeState; }
 });
 Object.defineProperty(exports, "useFFID", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.useFFID; }
+  get: function () { return chunkJFFRO2Q5_cjs.useFFID; }
 });
 Object.defineProperty(exports, "useFFIDAnnouncements", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.useFFIDAnnouncements; }
+  get: function () { return chunkJFFRO2Q5_cjs.useFFIDAnnouncements; }
 });
 Object.defineProperty(exports, "useSubscription", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.useSubscription; }
+  get: function () { return chunkJFFRO2Q5_cjs.useSubscription; }
 });
 Object.defineProperty(exports, "withSubscription", {
   enumerable: true,
-  get: function () { return chunkAOJDV3UO_cjs.withSubscription; }
+  get: function () { return chunkJFFRO2Q5_cjs.withSubscription; }
 });
 Object.defineProperty(exports, "ALL_DENIED_EXCEPT_NECESSARY", {
   enumerable: true,