@feelflow/ffid-sdk 5.19.0 → 5.21.0

package/dist/{ffid-client-BuDM5tmq.d.cts → ffid-client-BQPhm-XL.d.cts}

@@ -1649,6 +1649,19 @@ interface FFIDSessionResponse {
     organizations: FFIDOrganization[];
     subscriptions: FFIDSubscription[];
 }
+/**
+ * Optional metadata on successful {@link FFIDApiResponse} values (#4136).
+ *
+ * Present only on the success branch — error responses never carry `meta`.
+ */
+interface FFIDApiResponseMeta {
+    /**
+     * Set when introspect-strategy verification could not use the configured
+     * cache (adapter read/write failure or `crypto.subtle` unavailable).
+     * Visible without a custom logger; absent when cache operated normally.
+     */
+    verificationCacheDegraded?: true;
+}
 /**
  * API response wrapper (discriminated union for type safety)
  *
@@ -1658,10 +1671,33 @@ interface FFIDSessionResponse {
 type FFIDApiResponse<T> = {
     data: T;
     error?: undefined;
+    meta?: FFIDApiResponseMeta;
 } | {
     data?: undefined;
     error: FFIDError;
 };
+/**
+ * Result of `signOut()` (#4119, extended #4136).
+ *
+ * Local credentials (tokens / local state) are always cleared when `signOut()`
+ * resolves without `error`. `revoked` additionally indicates whether the
+ * server-side revocation/sign-out actually succeeded:
+ *
+ * - `revoked: true` — no server-side session/token remains active.
+ * - `revoked: false` — server-side revocation failed (network error or non-2xx
+ *   response). The access token may remain valid server-side until natural
+ *   expiry. Non-fatal: the local sign-out still completed, but callers that
+ *   need guaranteed revocation (e.g. shared-device flows) should surface this.
+ *
+ * Token mode (#4136): `accessTokenRevoked` / `refreshTokenRevoked` report each
+ * RFC 7009 revoke call. `revoked` is `true` only when every applicable token
+ * was revoked successfully. Cookie mode omits the per-token fields.
+ */
+interface FFIDSignOutResult {
+    revoked: boolean;
+    accessTokenRevoked?: boolean;
+    refreshTokenRevoked?: boolean;
+}
 
 /**
  * Response shape from `GET /api/v1/ext/analytics/config?service=<code>`.
@@ -1695,23 +1731,33 @@ interface FFIDAnalyticsConfig {
  *   has been fired **3 times within 60 seconds**. Caller should surface a
  *   manual "再度ログインする" UI rather than retry automatically (#2406 / #2411).
  *
- * SDK 2.18.0 only ships `'redirect_loop_detected'`. Other failure paths
- * (SSR environment, PKCE generation failure, empty organizationId) currently
- * return `error` without a `code`. New codes will be added in future minor
- * versions — treat this union as forward-extensible and do NOT exhaustively
- * `switch` over it without a `default` branch for consumer code that must
- * stay compatible across SDK upgrades.
+ * - `'state_persistence_failed'`: `redirectToAuthorize()` could not persist
+ *   the OAuth CSRF `state` (storage unavailable / quota). Redirect is aborted
+ *   fail-closed (#4136) — callers should surface a manual retry UI.
+ *
+ * Other failure paths (SSR environment, PKCE generation failure, empty
+ * organizationId) currently return `error` without a `code`. Treat this union
+ * as forward-extensible and do NOT exhaustively `switch` over it without a
+ * `default` branch for consumer code that must stay compatible across SDK
+ * upgrades.
  */
-type FFIDRedirectErrorCode = 'redirect_loop_detected';
+type FFIDRedirectErrorCode = 'redirect_loop_detected' | 'state_persistence_failed';
 /**
  * Result of a redirect operation (redirectToLogin / redirectToAuthorize / redirectToLogout)
  *
  * Structured return type so callers can inspect failure reasons
  * instead of receiving a bare `false`. When `code` is set, branch on it
  * for programmatic handling; otherwise log `error` for humans.
+ *
+ * `loopDetectionDisabled` (#4119): set to `true` when sessionStorage is
+ * unavailable (iOS WebKit private mode / eviction) so redirect-loop detection
+ * ran **fail-open** — the redirect fired, but repeated-redirect protection is
+ * disabled for this browser session. Callers that need loop protection on
+ * such browsers should add their own max-retry guard.
  */
 type FFIDRedirectResult = {
     success: true;
+    loopDetectionDisabled?: boolean;
 } | {
     success: false;
     error: string;
@@ -1906,7 +1952,7 @@ interface RedirectToAuthorizeOptions {
 /** Creates an FFID API client instance */
 declare function createFFIDClient(config: FFIDConfig): {
     getSession: () => Promise<FFIDApiResponse<FFIDSessionResponse>>;
-    signOut: () => Promise<FFIDApiResponse<void>>;
+    signOut: () => Promise<FFIDApiResponse<FFIDSignOutResult>>;
     redirectToLogin: (options?: RedirectToAuthorizeOptions) => Promise<FFIDRedirectResult>;
     redirectToAuthorize: (options?: RedirectToAuthorizeOptions) => Promise<FFIDRedirectResult>;
     redirectToLogout: (postLogoutRedirectUri?: string) => FFIDRedirectResult;

package/dist/{ffid-client-D0x8TBS5.d.ts → ffid-client-Bx8y4SwC.d.ts}

@@ -1649,6 +1649,19 @@ interface FFIDSessionResponse {
     organizations: FFIDOrganization[];
     subscriptions: FFIDSubscription[];
 }
+/**
+ * Optional metadata on successful {@link FFIDApiResponse} values (#4136).
+ *
+ * Present only on the success branch — error responses never carry `meta`.
+ */
+interface FFIDApiResponseMeta {
+    /**
+     * Set when introspect-strategy verification could not use the configured
+     * cache (adapter read/write failure or `crypto.subtle` unavailable).
+     * Visible without a custom logger; absent when cache operated normally.
+     */
+    verificationCacheDegraded?: true;
+}
 /**
  * API response wrapper (discriminated union for type safety)
  *
@@ -1658,10 +1671,33 @@ interface FFIDSessionResponse {
 type FFIDApiResponse<T> = {
     data: T;
     error?: undefined;
+    meta?: FFIDApiResponseMeta;
 } | {
     data?: undefined;
     error: FFIDError;
 };
+/**
+ * Result of `signOut()` (#4119, extended #4136).
+ *
+ * Local credentials (tokens / local state) are always cleared when `signOut()`
+ * resolves without `error`. `revoked` additionally indicates whether the
+ * server-side revocation/sign-out actually succeeded:
+ *
+ * - `revoked: true` — no server-side session/token remains active.
+ * - `revoked: false` — server-side revocation failed (network error or non-2xx
+ *   response). The access token may remain valid server-side until natural
+ *   expiry. Non-fatal: the local sign-out still completed, but callers that
+ *   need guaranteed revocation (e.g. shared-device flows) should surface this.
+ *
+ * Token mode (#4136): `accessTokenRevoked` / `refreshTokenRevoked` report each
+ * RFC 7009 revoke call. `revoked` is `true` only when every applicable token
+ * was revoked successfully. Cookie mode omits the per-token fields.
+ */
+interface FFIDSignOutResult {
+    revoked: boolean;
+    accessTokenRevoked?: boolean;
+    refreshTokenRevoked?: boolean;
+}
 
 /**
  * Response shape from `GET /api/v1/ext/analytics/config?service=<code>`.
@@ -1695,23 +1731,33 @@ interface FFIDAnalyticsConfig {
  *   has been fired **3 times within 60 seconds**. Caller should surface a
  *   manual "再度ログインする" UI rather than retry automatically (#2406 / #2411).
  *
- * SDK 2.18.0 only ships `'redirect_loop_detected'`. Other failure paths
- * (SSR environment, PKCE generation failure, empty organizationId) currently
- * return `error` without a `code`. New codes will be added in future minor
- * versions — treat this union as forward-extensible and do NOT exhaustively
- * `switch` over it without a `default` branch for consumer code that must
- * stay compatible across SDK upgrades.
+ * - `'state_persistence_failed'`: `redirectToAuthorize()` could not persist
+ *   the OAuth CSRF `state` (storage unavailable / quota). Redirect is aborted
+ *   fail-closed (#4136) — callers should surface a manual retry UI.
+ *
+ * Other failure paths (SSR environment, PKCE generation failure, empty
+ * organizationId) currently return `error` without a `code`. Treat this union
+ * as forward-extensible and do NOT exhaustively `switch` over it without a
+ * `default` branch for consumer code that must stay compatible across SDK
+ * upgrades.
  */
-type FFIDRedirectErrorCode = 'redirect_loop_detected';
+type FFIDRedirectErrorCode = 'redirect_loop_detected' | 'state_persistence_failed';
 /**
  * Result of a redirect operation (redirectToLogin / redirectToAuthorize / redirectToLogout)
  *
  * Structured return type so callers can inspect failure reasons
  * instead of receiving a bare `false`. When `code` is set, branch on it
  * for programmatic handling; otherwise log `error` for humans.
+ *
+ * `loopDetectionDisabled` (#4119): set to `true` when sessionStorage is
+ * unavailable (iOS WebKit private mode / eviction) so redirect-loop detection
+ * ran **fail-open** — the redirect fired, but repeated-redirect protection is
+ * disabled for this browser session. Callers that need loop protection on
+ * such browsers should add their own max-retry guard.
  */
 type FFIDRedirectResult = {
     success: true;
+    loopDetectionDisabled?: boolean;
 } | {
     success: false;
     error: string;
@@ -1906,7 +1952,7 @@ interface RedirectToAuthorizeOptions {
 /** Creates an FFID API client instance */
 declare function createFFIDClient(config: FFIDConfig): {
     getSession: () => Promise<FFIDApiResponse<FFIDSessionResponse>>;
-    signOut: () => Promise<FFIDApiResponse<void>>;
+    signOut: () => Promise<FFIDApiResponse<FFIDSignOutResult>>;
     redirectToLogin: (options?: RedirectToAuthorizeOptions) => Promise<FFIDRedirectResult>;
     redirectToAuthorize: (options?: RedirectToAuthorizeOptions) => Promise<FFIDRedirectResult>;
     redirectToLogout: (postLogoutRedirectUri?: string) => FFIDRedirectResult;

package/dist/{index-Bkul-fRw.d.cts → index--wRiPlpi.d.cts}

@@ -658,6 +658,19 @@ interface FFIDSessionResponse {
     organizations: FFIDOrganization[];
     subscriptions: FFIDSubscription[];
 }
+/**
+ * Optional metadata on successful {@link FFIDApiResponse} values (#4136).
+ *
+ * Present only on the success branch — error responses never carry `meta`.
+ */
+interface FFIDApiResponseMeta {
+    /**
+     * Set when introspect-strategy verification could not use the configured
+     * cache (adapter read/write failure or `crypto.subtle` unavailable).
+     * Visible without a custom logger; absent when cache operated normally.
+     */
+    verificationCacheDegraded?: true;
+}
 /**
  * API response wrapper (discriminated union for type safety)
  *
@@ -667,10 +680,33 @@ interface FFIDSessionResponse {
 type FFIDApiResponse<T> = {
     data: T;
     error?: undefined;
+    meta?: FFIDApiResponseMeta;
 } | {
     data?: undefined;
     error: FFIDError;
 };
+/**
+ * Result of `signOut()` (#4119, extended #4136).
+ *
+ * Local credentials (tokens / local state) are always cleared when `signOut()`
+ * resolves without `error`. `revoked` additionally indicates whether the
+ * server-side revocation/sign-out actually succeeded:
+ *
+ * - `revoked: true` — no server-side session/token remains active.
+ * - `revoked: false` — server-side revocation failed (network error or non-2xx
+ *   response). The access token may remain valid server-side until natural
+ *   expiry. Non-fatal: the local sign-out still completed, but callers that
+ *   need guaranteed revocation (e.g. shared-device flows) should surface this.
+ *
+ * Token mode (#4136): `accessTokenRevoked` / `refreshTokenRevoked` report each
+ * RFC 7009 revoke call. `revoked` is `true` only when every applicable token
+ * was revoked successfully. Cookie mode omits the per-token fields.
+ */
+interface FFIDSignOutResult {
+    revoked: boolean;
+    accessTokenRevoked?: boolean;
+    refreshTokenRevoked?: boolean;
+}
 
 /**
  * Response shape from `GET /api/v1/ext/analytics/config?service=<code>`.
@@ -704,23 +740,33 @@ interface FFIDAnalyticsConfig {
  *   has been fired **3 times within 60 seconds**. Caller should surface a
  *   manual "再度ログインする" UI rather than retry automatically (#2406 / #2411).
  *
- * SDK 2.18.0 only ships `'redirect_loop_detected'`. Other failure paths
- * (SSR environment, PKCE generation failure, empty organizationId) currently
- * return `error` without a `code`. New codes will be added in future minor
- * versions — treat this union as forward-extensible and do NOT exhaustively
- * `switch` over it without a `default` branch for consumer code that must
- * stay compatible across SDK upgrades.
+ * - `'state_persistence_failed'`: `redirectToAuthorize()` could not persist
+ *   the OAuth CSRF `state` (storage unavailable / quota). Redirect is aborted
+ *   fail-closed (#4136) — callers should surface a manual retry UI.
+ *
+ * Other failure paths (SSR environment, PKCE generation failure, empty
+ * organizationId) currently return `error` without a `code`. Treat this union
+ * as forward-extensible and do NOT exhaustively `switch` over it without a
+ * `default` branch for consumer code that must stay compatible across SDK
+ * upgrades.
  */
-type FFIDRedirectErrorCode = 'redirect_loop_detected';
+type FFIDRedirectErrorCode = 'redirect_loop_detected' | 'state_persistence_failed';
 /**
  * Result of a redirect operation (redirectToLogin / redirectToAuthorize / redirectToLogout)
  *
  * Structured return type so callers can inspect failure reasons
  * instead of receiving a bare `false`. When `code` is set, branch on it
  * for programmatic handling; otherwise log `error` for humans.
+ *
+ * `loopDetectionDisabled` (#4119): set to `true` when sessionStorage is
+ * unavailable (iOS WebKit private mode / eviction) so redirect-loop detection
+ * ran **fail-open** — the redirect fired, but repeated-redirect protection is
+ * disabled for this browser session. Callers that need loop protection on
+ * such browsers should add their own max-retry guard.
  */
 type FFIDRedirectResult = {
     success: true;
+    loopDetectionDisabled?: boolean;
 } | {
     success: false;
     error: string;
@@ -1476,4 +1522,4 @@ interface FFIDInquiryFormPlaceholderContext {
 }
 declare function FFIDInquiryForm({ mode, prefill, organizations, preselectedOrganizationId, categories, termsVersion, privacyVersion, termsHref, privacyHref, turnstileToken, turnstileSlot, onSubmit, onChange, legalLayout, messagePlaceholder, requireCategorySelection, unstyled, classNames, locale, className, }: FFIDInquiryFormProps): react_jsx_runtime.JSX.Element;
 
-export { FFIDLoginButton as $, type AnnouncementListResponse as A, type AnnouncementStatus as B, type AnnouncementType as C, EFFECTIVE_SUBSCRIPTION_STATUSES as D, type EffectiveSubscriptionStatus as E, type FFIDSubscriptionStatus as F, FFIDAnnouncementBadge as G, FFIDAnnouncementList as H, type FFIDAnnouncementsError as I, type FFIDAnnouncementsErrorCode as J, type FFIDAnnouncementsServerResponse as K, type ListAnnouncementsOptions as L, type FFIDCacheConfig as M, type FFIDContextValue as N, type FFIDInquiryCategory as O, type FFIDInquiryCategorySite2026 as P, FFIDInquiryForm as Q, type FFIDInquiryFormCategoryItem as R, type FFIDInquiryFormClassNames as S, type FFIDInquiryFormLegalLayout as T, type FFIDInquiryFormOrganization as U, type FFIDInquiryFormPlaceholderContext as V, type FFIDInquiryFormPrefill as W, type FFIDInquiryFormProps as X, type FFIDInquiryFormSubmitData as Y, type FFIDInquiryFormSubmitResult as Z, type FFIDJwtClaims as _, type FFIDPrompt as a, type FFIDOAuthTokenResponse as a0, type FFIDOAuthUserInfoMemberRole as a1, FFIDOrganizationSwitcher as a2, type FFIDRedirectErrorCode as a3, type FFIDSeatModel as a4, type FFIDServiceAccessDenialReason as a5, type FFIDServiceAccessFailPolicy as a6, FFIDSubscriptionBadge as a7, type FFIDTokenIntrospectionResponse as a8, FFIDUserMenu as a9, FFID_INQUIRY_CATEGORIES as aa, FFID_INQUIRY_CATEGORIES_SITE_2026 as ab, type UseFFIDAnnouncementsOptions as ac, type UseFFIDAnnouncementsReturn as ad, isFFIDInquiryCategorySite2026 as ae, useFFIDAnnouncements as af, type FFIDAnnouncementBadgeClassNames as ag, type FFIDAnnouncementBadgeProps as ah, type FFIDAnnouncementListClassNames as ai, type FFIDAnnouncementListProps as aj, type FFIDLoginButtonProps as ak, type FFIDOrganizationSwitcherClassNames as al, type FFIDOrganizationSwitcherProps as am, type FFIDSubscriptionBadgeClassNames as an, type FFIDSubscriptionBadgeProps as ao, type FFIDUserMenuClassNames as ap, type FFIDUserMenuProps as aq, type FFIDConfig as b, type FFIDApiResponse as c, type FFIDSessionResponse as d, type FFIDRedirectResult as e, type FFIDError as f, type FFIDSubscriptionCheckResponse as g, type FFIDCheckServiceAccessParams as h, type FFIDServiceAccessDecision as i, type FFIDAnalyticsConfig as j, type FFIDVerifyAccessTokenOptions as k, type FFIDOAuthUserInfo as l, type FFIDInquiryCreateParams as m, type FFIDInquiryCreateResponse as n, type FFIDAuthMode as o, type FFIDLogger as p, type FFIDCacheAdapter as q, type FFIDUser as r, type FFIDOrganization as s, type FFIDSubscription as t, type FFIDSubscriptionContextValue as u, type FFIDOAuthUserInfoSubscription as v, type FFIDAnnouncementsClientConfig as w, type FFIDAnnouncementsApiResponse as x, type FFIDAnnouncementsLogger as y, type Announcement as z };
+export { type FFIDInquiryFormSubmitResult as $, type AnnouncementListResponse as A, type Announcement as B, type AnnouncementStatus as C, type AnnouncementType as D, type EffectiveSubscriptionStatus as E, type FFIDSubscriptionStatus as F, EFFECTIVE_SUBSCRIPTION_STATUSES as G, FFIDAnnouncementBadge as H, FFIDAnnouncementList as I, type FFIDAnnouncementsError as J, type FFIDAnnouncementsErrorCode as K, type ListAnnouncementsOptions as L, type FFIDAnnouncementsServerResponse as M, type FFIDApiResponseMeta as N, type FFIDCacheConfig as O, type FFIDContextValue as P, type FFIDInquiryCategory as Q, type FFIDInquiryCategorySite2026 as R, FFIDInquiryForm as S, type FFIDInquiryFormCategoryItem as T, type FFIDInquiryFormClassNames as U, type FFIDInquiryFormLegalLayout as V, type FFIDInquiryFormOrganization as W, type FFIDInquiryFormPlaceholderContext as X, type FFIDInquiryFormPrefill as Y, type FFIDInquiryFormProps as Z, type FFIDInquiryFormSubmitData as _, type FFIDPrompt as a, type FFIDJwtClaims as a0, FFIDLoginButton as a1, type FFIDOAuthTokenResponse as a2, type FFIDOAuthUserInfoMemberRole as a3, FFIDOrganizationSwitcher as a4, type FFIDRedirectErrorCode as a5, type FFIDSeatModel as a6, type FFIDServiceAccessDenialReason as a7, type FFIDServiceAccessFailPolicy as a8, FFIDSubscriptionBadge as a9, type FFIDTokenIntrospectionResponse as aa, FFIDUserMenu as ab, FFID_INQUIRY_CATEGORIES as ac, FFID_INQUIRY_CATEGORIES_SITE_2026 as ad, type UseFFIDAnnouncementsOptions as ae, type UseFFIDAnnouncementsReturn as af, isFFIDInquiryCategorySite2026 as ag, useFFIDAnnouncements as ah, type FFIDAnnouncementBadgeClassNames as ai, type FFIDAnnouncementBadgeProps as aj, type FFIDAnnouncementListClassNames as ak, type FFIDAnnouncementListProps as al, type FFIDLoginButtonProps as am, type FFIDOrganizationSwitcherClassNames as an, type FFIDOrganizationSwitcherProps as ao, type FFIDSubscriptionBadgeClassNames as ap, type FFIDSubscriptionBadgeProps as aq, type FFIDUserMenuClassNames as ar, type FFIDUserMenuProps as as, type FFIDConfig as b, type FFIDApiResponse as c, type FFIDSessionResponse as d, type FFIDSignOutResult as e, type FFIDRedirectResult as f, type FFIDError as g, type FFIDSubscriptionCheckResponse as h, type FFIDCheckServiceAccessParams as i, type FFIDServiceAccessDecision as j, type FFIDAnalyticsConfig as k, type FFIDVerifyAccessTokenOptions as l, type FFIDOAuthUserInfo as m, type FFIDInquiryCreateParams as n, type FFIDInquiryCreateResponse as o, type FFIDAuthMode as p, type FFIDLogger as q, type FFIDCacheAdapter as r, type FFIDUser as s, type FFIDOrganization as t, type FFIDSubscription as u, type FFIDSubscriptionContextValue as v, type FFIDOAuthUserInfoSubscription as w, type FFIDAnnouncementsClientConfig as x, type FFIDAnnouncementsApiResponse as y, type FFIDAnnouncementsLogger as z };

package/dist/{index-Bkul-fRw.d.ts → index--wRiPlpi.d.ts}

@@ -658,6 +658,19 @@ interface FFIDSessionResponse {
     organizations: FFIDOrganization[];
     subscriptions: FFIDSubscription[];
 }
+/**
+ * Optional metadata on successful {@link FFIDApiResponse} values (#4136).
+ *
+ * Present only on the success branch — error responses never carry `meta`.
+ */
+interface FFIDApiResponseMeta {
+    /**
+     * Set when introspect-strategy verification could not use the configured
+     * cache (adapter read/write failure or `crypto.subtle` unavailable).
+     * Visible without a custom logger; absent when cache operated normally.
+     */
+    verificationCacheDegraded?: true;
+}
 /**
  * API response wrapper (discriminated union for type safety)
  *
@@ -667,10 +680,33 @@ interface FFIDSessionResponse {
 type FFIDApiResponse<T> = {
     data: T;
     error?: undefined;
+    meta?: FFIDApiResponseMeta;
 } | {
     data?: undefined;
     error: FFIDError;
 };
+/**
+ * Result of `signOut()` (#4119, extended #4136).
+ *
+ * Local credentials (tokens / local state) are always cleared when `signOut()`
+ * resolves without `error`. `revoked` additionally indicates whether the
+ * server-side revocation/sign-out actually succeeded:
+ *
+ * - `revoked: true` — no server-side session/token remains active.
+ * - `revoked: false` — server-side revocation failed (network error or non-2xx
+ *   response). The access token may remain valid server-side until natural
+ *   expiry. Non-fatal: the local sign-out still completed, but callers that
+ *   need guaranteed revocation (e.g. shared-device flows) should surface this.
+ *
+ * Token mode (#4136): `accessTokenRevoked` / `refreshTokenRevoked` report each
+ * RFC 7009 revoke call. `revoked` is `true` only when every applicable token
+ * was revoked successfully. Cookie mode omits the per-token fields.
+ */
+interface FFIDSignOutResult {
+    revoked: boolean;
+    accessTokenRevoked?: boolean;
+    refreshTokenRevoked?: boolean;
+}
 
 /**
  * Response shape from `GET /api/v1/ext/analytics/config?service=<code>`.
@@ -704,23 +740,33 @@ interface FFIDAnalyticsConfig {
  *   has been fired **3 times within 60 seconds**. Caller should surface a
  *   manual "再度ログインする" UI rather than retry automatically (#2406 / #2411).
  *
- * SDK 2.18.0 only ships `'redirect_loop_detected'`. Other failure paths
- * (SSR environment, PKCE generation failure, empty organizationId) currently
- * return `error` without a `code`. New codes will be added in future minor
- * versions — treat this union as forward-extensible and do NOT exhaustively
- * `switch` over it without a `default` branch for consumer code that must
- * stay compatible across SDK upgrades.
+ * - `'state_persistence_failed'`: `redirectToAuthorize()` could not persist
+ *   the OAuth CSRF `state` (storage unavailable / quota). Redirect is aborted
+ *   fail-closed (#4136) — callers should surface a manual retry UI.
+ *
+ * Other failure paths (SSR environment, PKCE generation failure, empty
+ * organizationId) currently return `error` without a `code`. Treat this union
+ * as forward-extensible and do NOT exhaustively `switch` over it without a
+ * `default` branch for consumer code that must stay compatible across SDK
+ * upgrades.
  */
-type FFIDRedirectErrorCode = 'redirect_loop_detected';
+type FFIDRedirectErrorCode = 'redirect_loop_detected' | 'state_persistence_failed';
 /**
  * Result of a redirect operation (redirectToLogin / redirectToAuthorize / redirectToLogout)
  *
  * Structured return type so callers can inspect failure reasons
  * instead of receiving a bare `false`. When `code` is set, branch on it
  * for programmatic handling; otherwise log `error` for humans.
+ *
+ * `loopDetectionDisabled` (#4119): set to `true` when sessionStorage is
+ * unavailable (iOS WebKit private mode / eviction) so redirect-loop detection
+ * ran **fail-open** — the redirect fired, but repeated-redirect protection is
+ * disabled for this browser session. Callers that need loop protection on
+ * such browsers should add their own max-retry guard.
  */
 type FFIDRedirectResult = {
     success: true;
+    loopDetectionDisabled?: boolean;
 } | {
     success: false;
     error: string;
@@ -1476,4 +1522,4 @@ interface FFIDInquiryFormPlaceholderContext {
 }
 declare function FFIDInquiryForm({ mode, prefill, organizations, preselectedOrganizationId, categories, termsVersion, privacyVersion, termsHref, privacyHref, turnstileToken, turnstileSlot, onSubmit, onChange, legalLayout, messagePlaceholder, requireCategorySelection, unstyled, classNames, locale, className, }: FFIDInquiryFormProps): react_jsx_runtime.JSX.Element;
 
-export { FFIDLoginButton as $, type AnnouncementListResponse as A, type AnnouncementStatus as B, type AnnouncementType as C, EFFECTIVE_SUBSCRIPTION_STATUSES as D, type EffectiveSubscriptionStatus as E, type FFIDSubscriptionStatus as F, FFIDAnnouncementBadge as G, FFIDAnnouncementList as H, type FFIDAnnouncementsError as I, type FFIDAnnouncementsErrorCode as J, type FFIDAnnouncementsServerResponse as K, type ListAnnouncementsOptions as L, type FFIDCacheConfig as M, type FFIDContextValue as N, type FFIDInquiryCategory as O, type FFIDInquiryCategorySite2026 as P, FFIDInquiryForm as Q, type FFIDInquiryFormCategoryItem as R, type FFIDInquiryFormClassNames as S, type FFIDInquiryFormLegalLayout as T, type FFIDInquiryFormOrganization as U, type FFIDInquiryFormPlaceholderContext as V, type FFIDInquiryFormPrefill as W, type FFIDInquiryFormProps as X, type FFIDInquiryFormSubmitData as Y, type FFIDInquiryFormSubmitResult as Z, type FFIDJwtClaims as _, type FFIDPrompt as a, type FFIDOAuthTokenResponse as a0, type FFIDOAuthUserInfoMemberRole as a1, FFIDOrganizationSwitcher as a2, type FFIDRedirectErrorCode as a3, type FFIDSeatModel as a4, type FFIDServiceAccessDenialReason as a5, type FFIDServiceAccessFailPolicy as a6, FFIDSubscriptionBadge as a7, type FFIDTokenIntrospectionResponse as a8, FFIDUserMenu as a9, FFID_INQUIRY_CATEGORIES as aa, FFID_INQUIRY_CATEGORIES_SITE_2026 as ab, type UseFFIDAnnouncementsOptions as ac, type UseFFIDAnnouncementsReturn as ad, isFFIDInquiryCategorySite2026 as ae, useFFIDAnnouncements as af, type FFIDAnnouncementBadgeClassNames as ag, type FFIDAnnouncementBadgeProps as ah, type FFIDAnnouncementListClassNames as ai, type FFIDAnnouncementListProps as aj, type FFIDLoginButtonProps as ak, type FFIDOrganizationSwitcherClassNames as al, type FFIDOrganizationSwitcherProps as am, type FFIDSubscriptionBadgeClassNames as an, type FFIDSubscriptionBadgeProps as ao, type FFIDUserMenuClassNames as ap, type FFIDUserMenuProps as aq, type FFIDConfig as b, type FFIDApiResponse as c, type FFIDSessionResponse as d, type FFIDRedirectResult as e, type FFIDError as f, type FFIDSubscriptionCheckResponse as g, type FFIDCheckServiceAccessParams as h, type FFIDServiceAccessDecision as i, type FFIDAnalyticsConfig as j, type FFIDVerifyAccessTokenOptions as k, type FFIDOAuthUserInfo as l, type FFIDInquiryCreateParams as m, type FFIDInquiryCreateResponse as n, type FFIDAuthMode as o, type FFIDLogger as p, type FFIDCacheAdapter as q, type FFIDUser as r, type FFIDOrganization as s, type FFIDSubscription as t, type FFIDSubscriptionContextValue as u, type FFIDOAuthUserInfoSubscription as v, type FFIDAnnouncementsClientConfig as w, type FFIDAnnouncementsApiResponse as x, type FFIDAnnouncementsLogger as y, type Announcement as z };
+export { type FFIDInquiryFormSubmitResult as $, type AnnouncementListResponse as A, type Announcement as B, type AnnouncementStatus as C, type AnnouncementType as D, type EffectiveSubscriptionStatus as E, type FFIDSubscriptionStatus as F, EFFECTIVE_SUBSCRIPTION_STATUSES as G, FFIDAnnouncementBadge as H, FFIDAnnouncementList as I, type FFIDAnnouncementsError as J, type FFIDAnnouncementsErrorCode as K, type ListAnnouncementsOptions as L, type FFIDAnnouncementsServerResponse as M, type FFIDApiResponseMeta as N, type FFIDCacheConfig as O, type FFIDContextValue as P, type FFIDInquiryCategory as Q, type FFIDInquiryCategorySite2026 as R, FFIDInquiryForm as S, type FFIDInquiryFormCategoryItem as T, type FFIDInquiryFormClassNames as U, type FFIDInquiryFormLegalLayout as V, type FFIDInquiryFormOrganization as W, type FFIDInquiryFormPlaceholderContext as X, type FFIDInquiryFormPrefill as Y, type FFIDInquiryFormProps as Z, type FFIDInquiryFormSubmitData as _, type FFIDPrompt as a, type FFIDJwtClaims as a0, FFIDLoginButton as a1, type FFIDOAuthTokenResponse as a2, type FFIDOAuthUserInfoMemberRole as a3, FFIDOrganizationSwitcher as a4, type FFIDRedirectErrorCode as a5, type FFIDSeatModel as a6, type FFIDServiceAccessDenialReason as a7, type FFIDServiceAccessFailPolicy as a8, FFIDSubscriptionBadge as a9, type FFIDTokenIntrospectionResponse as aa, FFIDUserMenu as ab, FFID_INQUIRY_CATEGORIES as ac, FFID_INQUIRY_CATEGORIES_SITE_2026 as ad, type UseFFIDAnnouncementsOptions as ae, type UseFFIDAnnouncementsReturn as af, isFFIDInquiryCategorySite2026 as ag, useFFIDAnnouncements as ah, type FFIDAnnouncementBadgeClassNames as ai, type FFIDAnnouncementBadgeProps as aj, type FFIDAnnouncementListClassNames as ak, type FFIDAnnouncementListProps as al, type FFIDLoginButtonProps as am, type FFIDOrganizationSwitcherClassNames as an, type FFIDOrganizationSwitcherProps as ao, type FFIDSubscriptionBadgeClassNames as ap, type FFIDSubscriptionBadgeProps as aq, type FFIDUserMenuClassNames as ar, type FFIDUserMenuProps as as, type FFIDConfig as b, type FFIDApiResponse as c, type FFIDSessionResponse as d, type FFIDSignOutResult as e, type FFIDRedirectResult as f, type FFIDError as g, type FFIDSubscriptionCheckResponse as h, type FFIDCheckServiceAccessParams as i, type FFIDServiceAccessDecision as j, type FFIDAnalyticsConfig as k, type FFIDVerifyAccessTokenOptions as l, type FFIDOAuthUserInfo as m, type FFIDInquiryCreateParams as n, type FFIDInquiryCreateResponse as o, type FFIDAuthMode as p, type FFIDLogger as q, type FFIDCacheAdapter as r, type FFIDUser as s, type FFIDOrganization as t, type FFIDSubscription as u, type FFIDSubscriptionContextValue as v, type FFIDOAuthUserInfoSubscription as w, type FFIDAnnouncementsClientConfig as x, type FFIDAnnouncementsApiResponse as y, type FFIDAnnouncementsLogger as z };