@feelflow/ffid-sdk 5.24.3 → 5.27.0

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { F as FFIDSubscriptionStatus, a as FFIDPrompt, b as FFIDConfig, c as FFIDApiResponse, d as FFIDSessionResponse, e as FFIDSignOutResult, f as FFIDRedirectResult, g as FFIDError, h as FFIDSubscriptionCheckResponse, i as FFIDCheckServiceAccessParams, j as FFIDServiceAccessDecision, k as FFIDAnalyticsConfig, l as FFIDVerifyAccessTokenOptions, m as FFIDOAuthUserInfo, n as FFIDInquiryCreateParams, o as FFIDInquiryCreateResponse, T as TokenStore, p as FFIDAuthMode, q as FFIDLogger, r as FFIDCacheAdapter, s as FFIDUser, t as FFIDOrganization, u as FFIDSubscription, v as FFIDSubscriptionContextValue, E as EffectiveSubscriptionStatus, w as FFIDOAuthUserInfoSubscription, x as FFIDAnnouncementsClientConfig, L as ListAnnouncementsOptions, y as FFIDAnnouncementsApiResponse, A as AnnouncementListResponse, z as FFIDAnnouncementsLogger } from './index-BRMn6xT0.js';
-export { B as Announcement, C as AnnouncementStatus, D as AnnouncementType, G as EFFECTIVE_SUBSCRIPTION_STATUSES, H as FFIDAnnouncementBadge, I as FFIDAnnouncementList, J as FFIDAnnouncementsError, K as FFIDAnnouncementsErrorCode, M as FFIDAnnouncementsServerResponse, N as FFIDApiResponseMeta, O as FFIDCacheConfig, P as FFIDContextValue, Q as FFIDInquiryCategory, R as FFIDInquiryCategorySite2026, S as FFIDInquiryForm, U as FFIDInquiryFormCategoryItem, V as FFIDInquiryFormClassNames, W as FFIDInquiryFormLegalLayout, X as FFIDInquiryFormOrganization, Y as FFIDInquiryFormPlaceholderContext, Z as FFIDInquiryFormPrefill, _ as FFIDInquiryFormProps, $ as FFIDInquiryFormSubmitData, a0 as FFIDInquiryFormSubmitResult, a1 as FFIDJwtClaims, a2 as FFIDLoginButton, a3 as FFIDOAuthTokenResponse, a4 as FFIDOAuthUserInfoMemberRole, a5 as FFIDOrganizationSwitcher, a6 as FFIDRedirectErrorCode, a7 as FFIDSeatModel, a8 as FFIDServiceAccessDenialReason, a9 as FFIDServiceAccessFailPolicy, aa as FFIDSubscriptionBadge, ab as FFIDTokenIntrospectionResponse, ac as FFIDUserMenu, ad as FFID_INQUIRY_CATEGORIES, ae as FFID_INQUIRY_CATEGORIES_SITE_2026, af as TokenData, ag as UseFFIDAnnouncementsOptions, ah as UseFFIDAnnouncementsReturn, ai as createTokenStore, aj as isFFIDInquiryCategorySite2026, ak as useFFIDAnnouncements } from './index-BRMn6xT0.js';
+import { F as FFIDSubscriptionStatus, a as FFIDOAuthUserInfoSubscription, b as FFIDPrompt, c as FFIDConfig, d as FFIDApiResponse, e as FFIDSessionResponse, f as FFIDSignOutResult, g as FFIDError, h as FFIDSubscriptionCheckResponse, i as FFIDCheckServiceAccessParams, j as FFIDServiceAccessDecision, k as FFIDAnalyticsConfig, l as FFIDVerifyAccessTokenOptions, m as FFIDOAuthUserInfo, n as FFIDInquiryCreateParams, o as FFIDInquiryCreateResponse, T as TokenStore, p as FFIDAuthMode, q as FFIDLogger, r as FFIDCacheAdapter, s as FFIDUser, t as FFIDOrganization, u as FFIDSubscription, v as FFIDSubscriptionContextValue, E as EffectiveSubscriptionStatus, w as FFIDAnnouncementsClientConfig, L as ListAnnouncementsOptions, x as FFIDAnnouncementsApiResponse, A as AnnouncementListResponse, y as FFIDAnnouncementsLogger } from './index-D3S_Pkkv.js';
+export { z as Announcement, B as AnnouncementStatus, C as AnnouncementType, D as EFFECTIVE_SUBSCRIPTION_STATUSES, G as FFIDAnnouncementBadge, H as FFIDAnnouncementList, I as FFIDAnnouncementsError, J as FFIDAnnouncementsErrorCode, K as FFIDAnnouncementsServerResponse, M as FFIDApiResponseMeta, N as FFIDCacheConfig, O as FFIDContextValue, P as FFIDInquiryCategory, Q as FFIDInquiryCategorySite2026, R as FFIDInquiryForm, S as FFIDInquiryFormCategoryItem, U as FFIDInquiryFormClassNames, V as FFIDInquiryFormLegalLayout, W as FFIDInquiryFormOrganization, X as FFIDInquiryFormPlaceholderContext, Y as FFIDInquiryFormPrefill, Z as FFIDInquiryFormProps, _ as FFIDInquiryFormSubmitData, $ as FFIDInquiryFormSubmitResult, a0 as FFIDJwtClaims, a1 as FFIDLoginButton, a2 as FFIDOAuthUserInfoMemberRole, a3 as FFIDOrganizationSwitcher, a4 as FFIDSeatAssignmentClaim, a5 as FFIDSeatAssignmentStatus, a6 as FFIDSeatModel, a7 as FFIDServiceAccessDenialReason, a8 as FFIDServiceAccessFailPolicy, a9 as FFIDSubscriptionBadge, aa as FFIDUserMenu, ab as FFID_INQUIRY_CATEGORIES, ac as FFID_INQUIRY_CATEGORIES_SITE_2026, ad as TokenData, ae as UseFFIDAnnouncementsOptions, af as UseFFIDAnnouncementsReturn, ag as createTokenStore, ah as isFFIDInquiryCategorySite2026, ai as useFFIDAnnouncements } from './index-D3S_Pkkv.js';
 export { A as ALL_DENIED_EXCEPT_NECESSARY, i as CONSENT_COOKIE_NAME, j as CONSENT_DISMISSAL_TIMESTAMP_KEY, l as COOKIE_VERSION, D as DEFAULT_CONSENT_ERROR_MESSAGES, o as FFIDAnalyticsProvider, p as FFIDAnalyticsProviderProps, c as FFIDConsentCategories, r as FFIDConsentCategoryCode, e as FFIDConsentCategoryMetadata, w as FFIDConsentError, x as FFIDConsentErrorCode, y as FFIDConsentMergeStrategy, B as FFIDConsentMergeWarning, E as FFIDConsentMergeWarningEvent, F as FFIDConsentResult, I as FFIDConsentSource, a as FFIDConsentState, d as FFIDConsentSyncResult, M as FFIDCookieBanner, N as FFIDCookieBannerClassNames, O as FFIDCookieBannerProps, Q as FFIDCookieLink, R as FFIDCookieLinkProps, f as FFIDCookiePolicy, T as FFIDCookieSettings, U as FFIDCookieSettingsClassNames, V as FFIDCookieSettingsProps, _ as FFID_CONSENT_ERROR_CODES, ae as UseFFIDConsentPreferencesReturn, af as UseFFIDConsentReturn, ag as clearConsentDismissalTimestamp, aj as decodeConsentCookie, al as encodeConsentCookie, an as readConsentCookie, ao as readConsentDismissalTimestamp, aq as useFFIDConsent, ar as useFFIDConsentPreferences, as as writeConsentCookie, at as writeConsentDismissalTimestamp } from './FFIDCookieLink-BJgVcJyw.js';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode, ComponentType, FC } from 'react';
@@ -1151,6 +1151,218 @@ interface FFIDUpdateUserProfileRequest {
     preferences?: Record<string, unknown> | null;
 }
 
+/**
+ * OAuth flow types: client-side redirect results and OAuth token / RFC 7662
+ * introspection payloads.
+ *
+ * Extracted from `types/index.ts` to keep that barrel under the 800-line hard
+ * limit (`scripts/check-file-size.sh`). Re-exported from `types/index.ts`, so
+ * the public API is unchanged — import from `@feelflow/ffid-sdk` as before.
+ */
+
+/**
+ * Discriminant for redirect failures that callers need to handle
+ * programmatically (vs. logging the human-readable `error` string).
+ *
+ * - `'redirect_loop_detected'`: `redirectToAuthorize()` detected that the
+ *   same authorize URL (keyed by `baseUrl + client_id + organization_id`)
+ *   has been fired **3 times within 60 seconds**. Caller should surface a
+ *   manual "再度ログインする" UI rather than retry automatically (#2406 / #2411).
+ *
+ * - `'state_persistence_failed'`: `redirectToAuthorize()` could not persist
+ *   the OAuth CSRF `state` (storage unavailable / quota). Redirect is aborted
+ *   fail-closed (#4136) — callers should surface a manual retry UI.
+ *
+ * Other failure paths (SSR environment, PKCE generation failure, empty
+ * organizationId) currently return `error` without a `code`. Treat this union
+ * as forward-extensible and do NOT exhaustively `switch` over it without a
+ * `default` branch for consumer code that must stay compatible across SDK
+ * upgrades.
+ */
+type FFIDRedirectErrorCode = 'redirect_loop_detected' | 'state_persistence_failed';
+/**
+ * Result of a redirect operation (redirectToLogin / redirectToAuthorize / redirectToLogout)
+ *
+ * Structured return type so callers can inspect failure reasons
+ * instead of receiving a bare `false`. When `code` is set, branch on it
+ * for programmatic handling; otherwise log `error` for humans.
+ *
+ * `loopDetectionDisabled` (#4119): set to `true` when sessionStorage is
+ * unavailable (iOS WebKit private mode / eviction) so redirect-loop detection
+ * ran **fail-open** — the redirect fired, but repeated-redirect protection is
+ * disabled for this browser session. Callers that need loop protection on
+ * such browsers should add their own max-retry guard.
+ */
+type FFIDRedirectResult = {
+    success: true;
+    loopDetectionDisabled?: boolean;
+} | {
+    success: false;
+    error: string;
+    code?: FFIDRedirectErrorCode;
+};
+/**
+ * OAuth 2.0 token response from FFID token endpoint
+ */
+interface FFIDOAuthTokenResponse {
+    access_token: string;
+    token_type: 'Bearer';
+    expires_in: number;
+    refresh_token: string;
+}
+/**
+ * RFC 7662 Token Introspection response (raw format from server)
+ *
+ * Used internally by verifyAccessToken(). Consumers receive the normalized
+ * FFIDOAuthUserInfo type instead.
+ *
+ * @see https://tools.ietf.org/html/rfc7662
+ */
+interface FFIDTokenIntrospectionResponse {
+    active: boolean;
+    sub?: string;
+    email?: string;
+    /** Whether the user's email is verified (#3791). Optional for backward compat with older FFID. */
+    email_verified?: boolean;
+    name?: string;
+    picture?: string | null;
+    company_name?: string | null;
+    department?: string | null;
+    position?: string | null;
+    phone_number?: string | null;
+    scope?: string | null;
+    exp?: number;
+    iat?: number;
+    iss?: string;
+    token_type?: 'Bearer';
+    client_id?: string;
+    organization_id?: string | null;
+    organization_name?: string | null;
+    subscription?: {
+        subscription_id: string | null;
+        status: FFIDOAuthUserInfoSubscription['status'];
+        /** Optional for backward compat with older FFID (< 5.3.0 / #3353). */
+        effective_status?: FFIDOAuthUserInfoSubscription['effectiveStatus'];
+        plan_code: string | null;
+        seat_model: FFIDOAuthUserInfoSubscription['seatModel'];
+        member_role: FFIDOAuthUserInfoSubscription['memberRole'];
+        organization_id: string | null;
+        organization_name?: string | null;
+        has_seat_assignment?: boolean;
+        seat_assignment?: {
+            organization_id?: unknown;
+            subscription_id?: unknown;
+            status?: unknown;
+        };
+        /**
+         * Optional for backward compat with older FFID (< #4333), and omitted when
+         * the service API key has `token:introspect` without `subscription:read`.
+         */
+        entitlements?: readonly string[];
+    };
+}
+
+/** Deployment environments a catalog publication can apply to (single source) */
+declare const FFID_CATALOG_ENVIRONMENTS: readonly ["staging", "production"];
+/** Deployment environment a catalog publication applies to */
+type FFIDCatalogEnvironment = (typeof FFID_CATALOG_ENVIRONMENTS)[number];
+/**
+ * Tax behavior of a published price.
+ * `inclusive`: displayed price contains Stripe-calculated tax (Personal/Pro).
+ * `exclusive`: tax is added on top of the base price (Team).
+ */
+type FFIDTaxBehavior = 'inclusive' | 'exclusive';
+/**
+ * Publication lifecycle statuses (single source — the type, the SDK runtime
+ * validator, and consumer sets all derive from this tuple so a new literal
+ * cannot be added to one side only).
+ */
+declare const FFID_CATALOG_PUBLICATION_STATUSES: readonly ["approved", "superseded", "revoking", "revoked"];
+/**
+ * Publication lifecycle status.
+ * - `approved`: sellable — the only status that permits new paid checkout
+ * - `superseded`: replaced by a newer revision (old sessions may sell through
+ *   until `sellThroughUntil`)
+ * - `revoking`: emergency stop in progress — never sellable
+ * - `revoked`: emergency stop completed — never sellable
+ */
+type FFIDCatalogPublicationStatus = (typeof FFID_CATALOG_PUBLICATION_STATUSES)[number];
+/**
+ * Human-approved publication record binding a catalog revision to the
+ * content/config hashes reviewed at approval time.
+ *
+ * All `*Hash` fields are lowercase SHA-256 hex computed with the shared
+ * canonicalization helpers in `shared/catalog-hash` — consumers re-hash the
+ * content they actually render and must refuse new sales on any mismatch.
+ */
+interface FFIDCatalogPublication {
+    serviceCode: string;
+    environment: FFIDCatalogEnvironment;
+    catalogVersion: string;
+    praxisCopyHash: string;
+    ffidCheckoutCopyHash: string;
+    legalDisclosureHash: string;
+    taxConfigurationHash: string;
+    paymentConfigurationHash: string;
+    scopeHash: string;
+    /** Monotonically increasing per (service, environment) publication counter */
+    salesEpoch: number;
+    /** FFID-generated immutable human-review approval ID */
+    approvalId: string;
+    /** ISO 8601 timestamp of the recorded human review */
+    reviewedAt: string;
+    /** ISO 8601 timestamp the publication became effective */
+    effectiveAt: string;
+    /** ISO 8601 timestamp the publication was superseded (null while current) */
+    supersededAt: string | null;
+    /** ISO 8601 upper bound for old-session sell-through (null unless superseded) */
+    sellThroughUntil: string | null;
+    /** ISO 8601 timestamp an emergency revoke took effect (null unless revoking/revoked) */
+    revocationEffectiveAt: string | null;
+    status: FFIDCatalogPublicationStatus;
+}
+/**
+ * A plan inside a published catalog revision (public-safe snapshot).
+ * Never contains Stripe Product/Price identifiers or other secrets.
+ */
+interface FFIDPublishedPlan {
+    /**
+     * Plan code — always a lowercase slug (`^[a-z0-9][a-z0-9_-]*$`).
+     * Per-service open set; see the FFID repo's
+     * `docs/04-api/PLAN_CODE_CONTRACT.md` for the full guarantees.
+     */
+    code: string;
+    name: string;
+    description: string | null;
+    /** Monthly price in the catalog currency; null when monthly is not offered */
+    priceMonthly: number | null;
+    /** Yearly price in the catalog currency; null when yearly is not offered */
+    priceYearly: number | null;
+    currency: string;
+    /** Billing intervals actually purchasable for this plan */
+    billingIntervals: FFIDBillingInterval[];
+    taxBehavior: FFIDTaxBehavior;
+    minSeats: number;
+    maxSeats: number | null;
+    displayOrder: number;
+}
+/**
+ * Response of GET /api/v1/subscriptions/ext/catalog/{serviceCode}.
+ *
+ * `catalogVersion` always equals `publication.catalogVersion`; it is hoisted
+ * to the top level so consumers can pin the version (e.g. as
+ * `expectedCatalogVersion` for checkout) without digging into the publication.
+ */
+interface FFIDPublishedCatalog {
+    service: {
+        code: string;
+        name: string;
+    };
+    catalogVersion: string;
+    publication: FFIDCatalogPublication;
+    plans: FFIDPublishedPlan[];
+}
+
 /** OTP / magic link methods - sendOtp / verifyOtp */
 
 /** Response from sendOtp */
@@ -1395,6 +1607,7 @@ declare function createFFIDClient(config: FFIDConfig): {
     assignSeats: (params: FFIDAssignSeatsParams) => Promise<FFIDApiResponse<FFIDAssignSeatsResponse>>;
     unassignSeat: (params: FFIDUnassignSeatParams) => Promise<FFIDApiResponse<FFIDUnassignSeatResponse>>;
     listPlans: () => Promise<FFIDApiResponse<FFIDListPlansResponse>>;
+    getPublishedCatalog: (serviceCode: string) => Promise<FFIDApiResponse<FFIDPublishedCatalog>>;
     getSubscription: (subscriptionId: string) => Promise<FFIDApiResponse<FFIDSubscriptionDetail>>;
     subscribe: (params: FFIDSubscribeParams) => Promise<FFIDApiResponse<FFIDSubscribeResponse>>;
     changePlan: (params: FFIDChangePlanParams) => Promise<FFIDApiResponse<FFIDChangePlanResponse>>;
@@ -2125,6 +2338,183 @@ declare function hasAccessFromUserinfo(sub: FFIDOAuthUserInfoSubscription | null
  */
 declare function isBlockedFromUserinfo(sub: FFIDOAuthUserInfoSubscription | null | undefined): boolean;
 
+/**
+ * Catalog approval hash helpers (#4342 / ASDD-PRICING-002 SP4A)
+ *
+ * Shared canonicalization + SHA-256 helpers that FIX the cross-repo hash
+ * contract between FFID (publisher) and consumers (Praxis). Both sides compute
+ * hashes with these helpers and refuse new sales on any mismatch, so the
+ * canonical form below is a compatibility contract:
+ *
+ *   1. Objects serialize with keys sorted by UTF-16 code unit order,
+ *      recursively. Arrays keep their element order.
+ *   2. Serialization is `JSON.stringify`-compatible per token (string
+ *      escaping, number formatting) with NO whitespace.
+ *   3. `undefined`, non-finite numbers (NaN/±Infinity), functions, symbols,
+ *      bigints and non-plain objects (Date, Map, class instances) are
+ *      REJECTED with FFIDCatalogHashError — never silently dropped, because a
+ *      dropped key would let two semantically different payloads collide.
+ *      Only own enumerable string-keyed properties participate; symbol-keyed
+ *      properties are ignored (same as `JSON.stringify`).
+ *   4. The hash is lowercase SHA-256 hex over the UTF-8 bytes of the
+ *      canonical string (no domain-separation prefix).
+ *
+ * Changing ANY of these rules is a breaking change to published catalog
+ * verification and requires re-publishing catalogs — the fixed test vectors
+ * in `__tests__/catalog-hash.test.ts` exist to make such a change loud.
+ */
+
+/** Lowercase SHA-256 hex format shared by all catalog approval hashes */
+declare const CATALOG_HASH_PATTERN: RegExp;
+/**
+ * Thrown when a value cannot be canonicalized (or an embedded hash is
+ * malformed). Always indicates a programming error on the hashing side —
+ * never caused by end-user input.
+ */
+declare class FFIDCatalogHashError extends Error {
+    constructor(message: string);
+}
+/** JSON value accepted by the canonicalizer */
+type FFIDCanonicalJsonValue = string | number | boolean | null | FFIDCanonicalJsonValue[] | {
+    [key: string]: FFIDCanonicalJsonValue;
+};
+/**
+ * Serializes a JSON-plain value into its canonical string form (see module
+ * doc for the exact rules). Exposed so both sides can debug hash mismatches
+ * by diffing canonical strings instead of opaque digests.
+ */
+declare function canonicalizeCatalogValue(value: FFIDCanonicalJsonValue): string;
+/**
+ * Lowercase SHA-256 hex of the UTF-8 bytes of `text`.
+ *
+ * Requires Web Crypto (`globalThis.crypto.subtle`) — available by default in
+ * Node.js >= 19 (Node 18 needs `--experimental-global-webcrypto`), browsers,
+ * and edge runtimes. Throws instead of falling back to a weaker digest so a
+ * missing crypto implementation can never silently change the contract.
+ */
+declare function sha256Hex(text: string): Promise<string>;
+/** Canonicalizes `value` and returns its lowercase SHA-256 hex digest. */
+declare function hashCanonicalJson(value: FFIDCanonicalJsonValue): Promise<string>;
+/**
+ * Human-approved tax configuration snapshot hashed into
+ * `publication.taxConfigurationHash`. FFID re-computes this from its live
+ * Stripe Tax settings at paid-checkout start and refuses the session on
+ * mismatch.
+ */
+interface FFIDTaxConfiguration {
+    /** ISO 3166-1 alpha-2 country/region codes where paid sales are allowed */
+    allowedCountries: string[];
+    /** Country/region codes with completed Stripe Tax registrations */
+    stripeTaxRegistrations: string[];
+    /** Whether full billing address collection is required before paid checkout */
+    billingAddressRequired: boolean;
+    /** Stripe Product tax code per plan code (e.g. `txcd_10000000`) */
+    planTaxCodes: Record<string, string>;
+    /** Tax behavior per plan code */
+    planTaxBehaviors: Record<string, FFIDTaxBehavior>;
+}
+/**
+ * Human-approved payment configuration snapshot hashed into
+ * `publication.paymentConfigurationHash`.
+ */
+interface FFIDPaymentConfiguration {
+    environment: FFIDCatalogEnvironment;
+    /** Lowercase ISO 4217 currency (e.g. `jpy`) */
+    currency: string;
+    /** Explicit Stripe payment method allow-list (initial sales: `['card']`) */
+    paymentMethodTypes: string[];
+    /** Stripe Dashboard dynamic payment methods must stay disabled for sales */
+    dynamicPaymentMethodsEnabled: boolean;
+    manualInvoiceAllowed: boolean;
+    customerBalanceAllowed: boolean;
+    delayedPaymentMethodsAllowed: boolean;
+    /** Required Stripe Customer invoice credit balance before checkout (spec: 0) */
+    customerInvoiceBalanceRequired: number;
+}
+/** Sales-scope-relevant snapshot of one published plan (subset of the catalog) */
+interface FFIDScopeHashPlan {
+    code: string;
+    priceMonthly: number | null;
+    priceYearly: number | null;
+    currency: string;
+    billingIntervals: FFIDBillingInterval[];
+    taxBehavior: FFIDTaxBehavior;
+    minSeats: number;
+}
+/**
+ * Input of `computeScopeHash` — the published plans' sales conditions plus
+ * the five content/config hashes. Changing any of them changes `scopeHash`,
+ * which invalidates the previous publication approval (fail-closed).
+ */
+interface FFIDScopeHashInput {
+    plans: FFIDScopeHashPlan[];
+    praxisCopyHash: string;
+    ffidCheckoutCopyHash: string;
+    legalDisclosureHash: string;
+    taxConfigurationHash: string;
+    paymentConfigurationHash: string;
+}
+/**
+ * `praxisCopyHash`: hash of the consumer's entire structured sales
+ * presentation (`PRAXIS_SALES_PRESENTATION` — locales, plan display names,
+ * prices, feature matrix, CTAs, eligibility). The consumer re-hashes what it
+ * actually renders and must refuse new sales on mismatch.
+ */
+declare function computePraxisCopyHash(presentation: Record<string, FFIDCanonicalJsonValue>): Promise<string>;
+/** `ffidCheckoutCopyHash`: hash of FFID's structured final-confirmation copy */
+declare function computeFFIDCheckoutCopyHash(checkoutCopy: Record<string, FFIDCanonicalJsonValue>): Promise<string>;
+/**
+ * `legalDisclosureHash`: hash of the canonical body text of the reviewed
+ * legal disclosure document version. Line endings are normalized to LF before
+ * hashing so the digest is independent of platform line-ending conventions;
+ * the text is otherwise hashed byte-exact (no trimming, no Unicode
+ * normalization).
+ */
+declare function computeLegalDisclosureHash(canonicalText: string): Promise<string>;
+/**
+ * `taxConfigurationHash`: hash of the human-approved tax configuration.
+ * Country lists are treated as sets (sorted + deduplicated) so representation
+ * order cannot flip the digest.
+ */
+declare function computeTaxConfigurationHash(config: FFIDTaxConfiguration): Promise<string>;
+/**
+ * `paymentConfigurationHash`: hash of the human-approved payment
+ * configuration. `paymentMethodTypes` is treated as a set.
+ */
+declare function computePaymentConfigurationHash(config: FFIDPaymentConfiguration): Promise<string>;
+/**
+ * `scopeHash`: hash of the published sales scope — plan codes, amounts,
+ * currency, intervals, tax behavior, minimum seats, plus the five embedded
+ * content/config hashes. Plans are sorted by `code`; duplicate codes are
+ * rejected. Embedded hashes are validated for format so a malformed digest
+ * can never be baked into an approval.
+ */
+declare function computeScopeHash(input: FFIDScopeHashInput): Promise<string>;
+
+/** Published catalog methods (#4342 / ASDD-PRICING-002 SP4A) */
+
+/**
+ * Validates the full published-catalog shape the SDK's compile-time types
+ * promise to consumers:
+ * - `service.code` / `service.name` are non-empty strings
+ * - top-level `catalogVersion` equals `publication.catalogVersion`
+ * - `publication.status` is one of the four known literals (unknown statuses
+ *   must fail loud here, NOT be treated as sellable downstream) and
+ *   `publication.environment` is a known environment
+ * - the six approval hashes are lowercase SHA-256 hex; `salesEpoch` is a
+ *   positive integer; timestamps are present (or explicitly null where the
+ *   type allows null)
+ * - every plan carries the full `FFIDPublishedPlan` field set with
+ *   cross-field invariants (an offered interval has its price;
+ *   `minSeats <= maxSeats`), and no plan field NAME mentions Stripe
+ *   (defense-in-depth heuristic — the authoritative no-Stripe-ID guard is
+ *   the FFID server's `.strict()` snapshot schema)
+ *
+ * Throws FFIDSDKError on violation so a server regression surfaces at the
+ * SDK boundary instead of silently reaching a consumer's sales gate.
+ */
+declare function validatePublishedCatalog(catalog: unknown): asserts catalog is FFIDPublishedCatalog;
+
 /**
  * FFID Announcements API Client
  *
@@ -2288,4 +2678,4 @@ declare function createInquiryMethods(deps: InquiryMethodsDeps): {
 };
 type FFIDInquiryClient = ReturnType<typeof createInquiryMethods>;
 
-export { ACCESS_GRANTING_EFFECTIVE_STATUSES, AnnouncementListResponse, BLOCKING_EFFECTIVE_STATUSES, type ComputeEffectiveStatusInput, type ContractWizardFlowType, type ContractWizardResubscribeOptions, type ContractWizardSubscribeOptions, type ContractWizardSubscriptionOptions, DEFAULT_API_BASE_URL, DEFAULT_OAUTH_SCOPES, EffectiveSubscriptionStatus, type ExchangeCodeForTokensOptions, type FFIDAddMemberParams, type FFIDAddMemberRequest, type FFIDAddMemberResponse, FFIDAnnouncementsApiResponse, type FFIDAnnouncementsClient, FFIDAnnouncementsClientConfig, FFIDAnnouncementsLogger, FFIDApiResponse, type FFIDAssignableMemberRole, type FFIDBillingInterval, FFIDCacheAdapter, type FFIDCancelPendingDowngradeResponse, type FFIDCancelSubscriptionParams, type FFIDCancelSubscriptionResponse, type FFIDChangePlanParams, type FFIDChangePlanResponse, FFIDCheckServiceAccessParams, type FFIDCheckoutSessionResponse, type FFIDClient, FFIDConfig, type FFIDCreateCheckoutParams, type FFIDCreatePortalParams, FFIDError, type FFIDErrorCode, type FFIDInquiryClient, FFIDInquiryCreateParams, FFIDInquiryCreateResponse, type FFIDInvitationStatus, type FFIDInviteMemberRequest, type FFIDInviteMemberResponse, type FFIDLeaveOrganizationParams, type FFIDLeaveOrganizationResponse, type FFIDListMembersResponse, type FFIDListPlansResponse, FFIDLogger, type FFIDLoginHistoryEntry, type FFIDLoginHistoryResponse, type FFIDMemberRole, type FFIDMemberStatus, type FFIDNewsletterBodySource, type FFIDNewsletterCampaignStatus, type FFIDNewsletterClient, type FFIDNewsletterConfirmParams, type FFIDNewsletterConfirmResponse, type FFIDNewsletterDispatchParams, type FFIDNewsletterDispatchResponse, type FFIDNewsletterSegment, type FFIDNewsletterSubscribeParams, type FFIDNewsletterSubscribeResponse, type FFIDNewsletterType, type FFIDNewsletterUnsubscribeParams, type FFIDNewsletterUnsubscribeResponse, FFIDOAuthUserInfo, FFIDOAuthUserInfoSubscription, FFIDOrganization, type FFIDOrganizationDomain, type FFIDOrganizationDomainsResponse, type FFIDOrganizationMember, type FFIDOrganizationNotificationPreferences, type FFIDOrganizationNotificationPreferencesResponse, type FFIDOtpSendResponse, type FFIDOtpVerifyResponse, type FFIDPasswordResetConfirmResponse, type FFIDPasswordResetResponse, type FFIDPasswordResetVerifyResponse, type FFIDPlanChangeLineItem, type FFIDPlanChangePreview, type FFIDPlanChangePreviewResponse, type FFIDPlanInfo, type FFIDPortalSessionResponse, type FFIDPreviewPlanChangeParams, type FFIDPreviewSeatChangeParams, type FFIDProfileCallOptions, FFIDProvider, type FFIDProviderProps, type FFIDProvisionMemberPlan, type FFIDProvisionMemberPlanStatus, type FFIDProvisionMemberResult, type FFIDProvisionMemberStatus, type FFIDProvisionOrganizationDryRun, type FFIDProvisionOrganizationMemberInput, type FFIDProvisionOrganizationOutcome, type FFIDProvisionOrganizationParams, type FFIDProvisionOrganizationResponse, type FFIDProvisionUserDryRun, type FFIDProvisionUserOutcome, type FFIDProvisionUserParams, type FFIDProvisionUserProfileInput, type FFIDProvisionUserResponse, type FFIDProvisionedOrganization, type FFIDProvisionedUser, FFIDRedirectResult, type FFIDRemoveMemberResponse, type FFIDResetSessionResponse, FFIDSDKError, type FFIDSeatChangeLineItem, type FFIDSeatChangePreview, type FFIDSeatChangePreviewResponse, FFIDServiceAccessDecision, type FFIDServiceInfo, FFIDSessionResponse, FFIDSignOutResult, type FFIDSubscribeParams, type FFIDSubscribeResponse, FFIDSubscription, FFIDSubscriptionCheckResponse, FFIDSubscriptionContextValue, type FFIDSubscriptionDetail, FFIDSubscriptionStatus, type FFIDSubscriptionSummary, type FFIDSupportedCurrency, type FFIDUpdateMemberRoleResponse, type FFIDUpdateNotificationPreferencesRequest, type FFIDUpdateUserProfileRequest, FFIDUser, type FFIDUserProfile, FFIDVerifyAccessTokenOptions, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_ERROR_CODES, FFID_NEWSLETTER_DISPATCH_MAX_RECIPIENTS, FFID_NEWSLETTER_TYPES, type HandleRedirectCallbackClient, type HandleRedirectCallbackOptions, type KVNamespaceLike, ListAnnouncementsOptions, type NormalizeRedirectUriResult, type RedirectToAuthorizeOptions, TokenStore, type UseFFIDReturn, type UseRequireActiveSubscriptionOptions, type UseRequireActiveSubscriptionReturn, type WithFFIDAuthOptions, type WithSubscriptionOptions, cleanupStateStorage as clearState, computeEffectiveStatusFromSession, createFFIDAnnouncementsClient, createFFIDClient, createKVCacheAdapter, createMemoryCacheAdapter, generateCodeChallenge, generateCodeVerifier, handleRedirectCallback, hasAccessFromUserinfo, isBlockedFromUserinfo, normalizeRedirectUri, retrieveCodeVerifier, retrieveState, storeCodeVerifier, storeState, useFFID, useRequireActiveSubscription, useSubscription, withFFIDAuth, withSubscription };
+export { ACCESS_GRANTING_EFFECTIVE_STATUSES, AnnouncementListResponse, BLOCKING_EFFECTIVE_STATUSES, CATALOG_HASH_PATTERN, type ComputeEffectiveStatusInput, type ContractWizardFlowType, type ContractWizardResubscribeOptions, type ContractWizardSubscribeOptions, type ContractWizardSubscriptionOptions, DEFAULT_API_BASE_URL, DEFAULT_OAUTH_SCOPES, EffectiveSubscriptionStatus, type ExchangeCodeForTokensOptions, type FFIDAddMemberParams, type FFIDAddMemberRequest, type FFIDAddMemberResponse, FFIDAnnouncementsApiResponse, type FFIDAnnouncementsClient, FFIDAnnouncementsClientConfig, FFIDAnnouncementsLogger, FFIDApiResponse, type FFIDAssignableMemberRole, type FFIDBillingInterval, FFIDCacheAdapter, type FFIDCancelPendingDowngradeResponse, type FFIDCancelSubscriptionParams, type FFIDCancelSubscriptionResponse, type FFIDCanonicalJsonValue, type FFIDCatalogEnvironment, FFIDCatalogHashError, type FFIDCatalogPublication, type FFIDCatalogPublicationStatus, type FFIDChangePlanParams, type FFIDChangePlanResponse, FFIDCheckServiceAccessParams, type FFIDCheckoutSessionResponse, type FFIDClient, FFIDConfig, type FFIDCreateCheckoutParams, type FFIDCreatePortalParams, FFIDError, type FFIDErrorCode, type FFIDInquiryClient, FFIDInquiryCreateParams, FFIDInquiryCreateResponse, type FFIDInvitationStatus, type FFIDInviteMemberRequest, type FFIDInviteMemberResponse, type FFIDLeaveOrganizationParams, type FFIDLeaveOrganizationResponse, type FFIDListMembersResponse, type FFIDListPlansResponse, FFIDLogger, type FFIDLoginHistoryEntry, type FFIDLoginHistoryResponse, type FFIDMemberRole, type FFIDMemberStatus, type FFIDNewsletterBodySource, type FFIDNewsletterCampaignStatus, type FFIDNewsletterClient, type FFIDNewsletterConfirmParams, type FFIDNewsletterConfirmResponse, type FFIDNewsletterDispatchParams, type FFIDNewsletterDispatchResponse, type FFIDNewsletterSegment, type FFIDNewsletterSubscribeParams, type FFIDNewsletterSubscribeResponse, type FFIDNewsletterType, type FFIDNewsletterUnsubscribeParams, type FFIDNewsletterUnsubscribeResponse, type FFIDOAuthTokenResponse, FFIDOAuthUserInfo, FFIDOAuthUserInfoSubscription, FFIDOrganization, type FFIDOrganizationDomain, type FFIDOrganizationDomainsResponse, type FFIDOrganizationMember, type FFIDOrganizationNotificationPreferences, type FFIDOrganizationNotificationPreferencesResponse, type FFIDOtpSendResponse, type FFIDOtpVerifyResponse, type FFIDPasswordResetConfirmResponse, type FFIDPasswordResetResponse, type FFIDPasswordResetVerifyResponse, type FFIDPaymentConfiguration, type FFIDPlanChangeLineItem, type FFIDPlanChangePreview, type FFIDPlanChangePreviewResponse, type FFIDPlanInfo, type FFIDPortalSessionResponse, type FFIDPreviewPlanChangeParams, type FFIDPreviewSeatChangeParams, type FFIDProfileCallOptions, FFIDProvider, type FFIDProviderProps, type FFIDProvisionMemberPlan, type FFIDProvisionMemberPlanStatus, type FFIDProvisionMemberResult, type FFIDProvisionMemberStatus, type FFIDProvisionOrganizationDryRun, type FFIDProvisionOrganizationMemberInput, type FFIDProvisionOrganizationOutcome, type FFIDProvisionOrganizationParams, type FFIDProvisionOrganizationResponse, type FFIDProvisionUserDryRun, type FFIDProvisionUserOutcome, type FFIDProvisionUserParams, type FFIDProvisionUserProfileInput, type FFIDProvisionUserResponse, type FFIDProvisionedOrganization, type FFIDProvisionedUser, type FFIDPublishedCatalog, type FFIDPublishedPlan, type FFIDRedirectErrorCode, type FFIDRedirectResult, type FFIDRemoveMemberResponse, type FFIDResetSessionResponse, FFIDSDKError, type FFIDScopeHashInput, type FFIDScopeHashPlan, type FFIDSeatChangeLineItem, type FFIDSeatChangePreview, type FFIDSeatChangePreviewResponse, FFIDServiceAccessDecision, type FFIDServiceInfo, FFIDSessionResponse, FFIDSignOutResult, type FFIDSubscribeParams, type FFIDSubscribeResponse, FFIDSubscription, FFIDSubscriptionCheckResponse, FFIDSubscriptionContextValue, type FFIDSubscriptionDetail, FFIDSubscriptionStatus, type FFIDSubscriptionSummary, type FFIDSupportedCurrency, type FFIDTaxBehavior, type FFIDTaxConfiguration, type FFIDTokenIntrospectionResponse, type FFIDUpdateMemberRoleResponse, type FFIDUpdateNotificationPreferencesRequest, type FFIDUpdateUserProfileRequest, FFIDUser, type FFIDUserProfile, FFIDVerifyAccessTokenOptions, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_CATALOG_ENVIRONMENTS, FFID_CATALOG_PUBLICATION_STATUSES, FFID_ERROR_CODES, FFID_NEWSLETTER_DISPATCH_MAX_RECIPIENTS, FFID_NEWSLETTER_TYPES, type HandleRedirectCallbackClient, type HandleRedirectCallbackOptions, type KVNamespaceLike, ListAnnouncementsOptions, type NormalizeRedirectUriResult, type RedirectToAuthorizeOptions, TokenStore, type UseFFIDReturn, type UseRequireActiveSubscriptionOptions, type UseRequireActiveSubscriptionReturn, type WithFFIDAuthOptions, type WithSubscriptionOptions, canonicalizeCatalogValue, cleanupStateStorage as clearState, computeEffectiveStatusFromSession, computeFFIDCheckoutCopyHash, computeLegalDisclosureHash, computePaymentConfigurationHash, computePraxisCopyHash, computeScopeHash, computeTaxConfigurationHash, createFFIDAnnouncementsClient, createFFIDClient, createKVCacheAdapter, createMemoryCacheAdapter, generateCodeChallenge, generateCodeVerifier, handleRedirectCallback, hasAccessFromUserinfo, hashCanonicalJson, isBlockedFromUserinfo, normalizeRedirectUri, retrieveCodeVerifier, retrieveState, sha256Hex, storeCodeVerifier, storeState, useFFID, useRequireActiveSubscription, useSubscription, validatePublishedCatalog, withFFIDAuth, withSubscription };

package/dist/index.js

@@ -1,5 +1,5 @@
-import { useFFIDContext, useSubscription } from './chunk-O3HGRALD.js';
-export { ACCESS_GRANTING_EFFECTIVE_STATUSES, BLOCKING_EFFECTIVE_STATUSES, DEFAULT_API_BASE_URL, DEFAULT_OAUTH_SCOPES, EFFECTIVE_SUBSCRIPTION_STATUSES, FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDProvider, FFIDSDKError, FFIDSubscriptionBadge, FFIDUserMenu, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_ERROR_CODES, FFID_INQUIRY_CATEGORIES, FFID_INQUIRY_CATEGORIES_SITE_2026, cleanupStateStorage as clearState, computeEffectiveStatusFromSession, createFFIDAnnouncementsClient, createFFIDClient, createTokenStore, generateCodeChallenge, generateCodeVerifier, handleRedirectCallback, hasAccessFromUserinfo, isBlockedFromUserinfo, isFFIDInquiryCategorySite2026, normalizeRedirectUri, retrieveCodeVerifier, retrieveState, storeCodeVerifier, storeState, useFFID, useFFIDAnnouncements, useSubscription, withSubscription } from './chunk-O3HGRALD.js';
+import { useFFIDContext, useSubscription } from './chunk-JZB2IM7Y.js';
+export { ACCESS_GRANTING_EFFECTIVE_STATUSES, BLOCKING_EFFECTIVE_STATUSES, CATALOG_HASH_PATTERN, DEFAULT_API_BASE_URL, DEFAULT_OAUTH_SCOPES, EFFECTIVE_SUBSCRIPTION_STATUSES, FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDCatalogHashError, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDProvider, FFIDSDKError, FFIDSubscriptionBadge, FFIDUserMenu, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_CATALOG_ENVIRONMENTS, FFID_CATALOG_PUBLICATION_STATUSES, FFID_ERROR_CODES, FFID_INQUIRY_CATEGORIES, FFID_INQUIRY_CATEGORIES_SITE_2026, canonicalizeCatalogValue, cleanupStateStorage as clearState, computeEffectiveStatusFromSession, computeFFIDCheckoutCopyHash, computeLegalDisclosureHash, computePaymentConfigurationHash, computePraxisCopyHash, computeScopeHash, computeTaxConfigurationHash, createFFIDAnnouncementsClient, createFFIDClient, createTokenStore, generateCodeChallenge, generateCodeVerifier, handleRedirectCallback, hasAccessFromUserinfo, hashCanonicalJson, isBlockedFromUserinfo, isFFIDInquiryCategorySite2026, normalizeRedirectUri, retrieveCodeVerifier, retrieveState, sha256Hex, storeCodeVerifier, storeState, useFFID, useFFIDAnnouncements, useSubscription, validatePublishedCatalog, withSubscription } from './chunk-JZB2IM7Y.js';
 export { ALL_DENIED_EXCEPT_NECESSARY, CONSENT_COOKIE_NAME, CONSENT_DISMISSAL_TIMESTAMP_KEY, COOKIE_VERSION, DEFAULT_CONSENT_ERROR_MESSAGES, FFIDAnalyticsProvider, FFIDConsentError, FFIDCookieBanner, FFIDCookieLink, FFIDCookieSettings, FFID_CONSENT_ERROR_CODES, clearConsentDismissalTimestamp, decodeConsentCookie, encodeConsentCookie, readConsentCookie, readConsentDismissalTimestamp, useFFIDConsent, useFFIDConsentPreferences, writeConsentCookie, writeConsentDismissalTimestamp } from './chunk-G7VOX64X.js';
 import { useEffect, useRef } from 'react';
 import { jsx, Fragment } from 'react/jsx-runtime';