@feelflow/ffid-sdk 5.25.0 → 5.28.0

package/dist/server/index.d.cts

@@ -1,5 +1,5 @@
-import { F as FFIDLogger, a as FFIDError, b as FFIDCacheAdapter, c as FFIDVerifyAccessTokenOptions, d as FFIDApiResponse, e as FFIDOAuthUserInfo } from '../ffid-client-BZERrMAF.cjs';
-export { f as FFIDAddMemberParams, g as FFIDAddMemberRequest, h as FFIDAddMemberResponse, i as FFIDAssignableMemberRole, j as FFIDCacheConfig, k as FFIDClient, l as FFIDConfig, m as FFIDListMembersResponse, n as FFIDMemberRole, o as FFIDOrganization, p as FFIDOrganizationMember, q as FFIDOtpSendResponse, r as FFIDOtpVerifyResponse, s as FFIDPasswordResetConfirmResponse, t as FFIDPasswordResetResponse, u as FFIDPasswordResetVerifyResponse, v as FFIDProfileCallOptions, w as FFIDProvisionMemberPlan, x as FFIDProvisionMemberPlanStatus, y as FFIDProvisionMemberResult, z as FFIDProvisionMemberStatus, A as FFIDProvisionOrganizationDryRun, B as FFIDProvisionOrganizationMemberInput, C as FFIDProvisionOrganizationOutcome, D as FFIDProvisionOrganizationParams, E as FFIDProvisionOrganizationResponse, G as FFIDProvisionUserDryRun, H as FFIDProvisionUserOutcome, I as FFIDProvisionUserParams, J as FFIDProvisionUserProfileInput, K as FFIDProvisionUserResponse, L as FFIDProvisionedOrganization, M as FFIDProvisionedUser, N as FFIDRemoveMemberResponse, O as FFIDResetSessionResponse, P as FFIDSubscription, Q as FFIDUpdateMemberRoleResponse, R as FFIDUpdateUserProfileRequest, S as FFIDUser, T as FFIDUserProfile, U as TokenData, V as TokenStore, W as createFFIDClient, X as createTokenStore } from '../ffid-client-BZERrMAF.cjs';
+import { F as FFIDLogger, a as FFIDError, b as FFIDCacheAdapter, c as FFIDVerifyAccessTokenOptions, d as FFIDApiResponse, e as FFIDOAuthUserInfo, f as FFIDCatalogEnvironment, g as FFIDBillingInterval, h as FFIDTaxBehavior, i as FFIDPublishedCatalog } from '../ffid-client-B_VBvIt4.cjs';
+export { j as FFIDAddMemberParams, k as FFIDAddMemberRequest, l as FFIDAddMemberResponse, m as FFIDAssignableMemberRole, n as FFIDCacheConfig, o as FFIDCatalogPublication, p as FFIDCatalogPublicationStatus, q as FFIDClient, r as FFIDConfig, s as FFIDListMembersResponse, t as FFIDMemberRole, u as FFIDOrganization, v as FFIDOrganizationMember, w as FFIDOtpSendResponse, x as FFIDOtpVerifyResponse, y as FFIDPasswordResetConfirmResponse, z as FFIDPasswordResetResponse, A as FFIDPasswordResetVerifyResponse, B as FFIDProfileCallOptions, C as FFIDProvisionMemberPlan, D as FFIDProvisionMemberPlanStatus, E as FFIDProvisionMemberResult, G as FFIDProvisionMemberStatus, H as FFIDProvisionOrganizationDryRun, I as FFIDProvisionOrganizationMemberInput, J as FFIDProvisionOrganizationOutcome, K as FFIDProvisionOrganizationParams, L as FFIDProvisionOrganizationResponse, M as FFIDProvisionUserDryRun, N as FFIDProvisionUserOutcome, O as FFIDProvisionUserParams, P as FFIDProvisionUserProfileInput, Q as FFIDProvisionUserResponse, R as FFIDProvisionedOrganization, S as FFIDProvisionedUser, T as FFIDPublishedPlan, U as FFIDRemoveMemberResponse, V as FFIDResetSessionResponse, W as FFIDSubscription, X as FFIDUpdateMemberRoleResponse, Y as FFIDUpdateUserProfileRequest, Z as FFIDUser, _ as FFIDUserProfile, $ as FFID_CATALOG_ENVIRONMENTS, a0 as FFID_CATALOG_PUBLICATION_STATUSES, a1 as TokenData, a2 as TokenStore, a3 as createFFIDClient, a4 as createTokenStore } from '../ffid-client-B_VBvIt4.cjs';
 export { D as DEFAULT_API_BASE_URL, a as DEFAULT_OAUTH_SCOPES } from '../constants-D61jqRIO.cjs';
 import { z } from 'zod';
 import '../types-Cjb9J0rL.cjs';
@@ -389,4 +389,181 @@ declare const sessionCookies: {
  */
 declare function generateServerState(): string;
 
-export { ALL_DENIED_EXCEPT_NECESSARY, type BuildAuthorizeUrlOptions, type BuildAuthorizeUrlResult, CONSENT_COOKIE_NAME, COOKIE_VERSION, type CookieOptions, FFIDCacheAdapter, type FFIDConsentCategories, type FFIDConsentCategoryCode, type FFIDCookieStoreLike, type FFIDErrorCode, FFIDOAuthUserInfo, FFIDVerifyAccessTokenOptions, FFID_ERROR_CODES, FFID_SESSION_COOKIE_NAME, type HandleCallbackInput, type KVNamespaceLike, type ServerAuthClient, type ServerAuthConfig, type ServerSessionTokens, type ServerTokenResult, createKVCacheAdapter, createMemoryCacheAdapter, createServerAuthClient, createVerifyAccessToken, decodeConsentCookie, encodeConsentCookie, generateServerState, getFFIDConsentFromCookieHeader, getFFIDConsentFromCookies, sessionCookies };
+/**
+ * Catalog approval hash helpers (#4342 / ASDD-PRICING-002 SP4A)
+ *
+ * Shared canonicalization + SHA-256 helpers that FIX the cross-repo hash
+ * contract between FFID (publisher) and consumers (Praxis). Both sides compute
+ * hashes with these helpers and refuse new sales on any mismatch, so the
+ * canonical form below is a compatibility contract:
+ *
+ *   1. Objects serialize with keys sorted by UTF-16 code unit order,
+ *      recursively. Arrays keep their element order.
+ *   2. Serialization is `JSON.stringify`-compatible per token (string
+ *      escaping, number formatting) with NO whitespace.
+ *   3. `undefined`, non-finite numbers (NaN/±Infinity), functions, symbols,
+ *      bigints and non-plain objects (Date, Map, class instances) are
+ *      REJECTED with FFIDCatalogHashError — never silently dropped, because a
+ *      dropped key would let two semantically different payloads collide.
+ *      Only own enumerable string-keyed properties participate; symbol-keyed
+ *      properties are ignored (same as `JSON.stringify`).
+ *   4. The hash is lowercase SHA-256 hex over the UTF-8 bytes of the
+ *      canonical string (no domain-separation prefix).
+ *
+ * Changing ANY of these rules is a breaking change to published catalog
+ * verification and requires re-publishing catalogs — the fixed test vectors
+ * in `__tests__/catalog-hash.test.ts` exist to make such a change loud.
+ */
+
+/** Lowercase SHA-256 hex format shared by all catalog approval hashes */
+declare const CATALOG_HASH_PATTERN: RegExp;
+/**
+ * Thrown when a value cannot be canonicalized (or an embedded hash is
+ * malformed). Always indicates a programming error on the hashing side —
+ * never caused by end-user input.
+ */
+declare class FFIDCatalogHashError extends Error {
+    constructor(message: string);
+}
+/** JSON value accepted by the canonicalizer */
+type FFIDCanonicalJsonValue = string | number | boolean | null | FFIDCanonicalJsonValue[] | {
+    [key: string]: FFIDCanonicalJsonValue;
+};
+/**
+ * Serializes a JSON-plain value into its canonical string form (see module
+ * doc for the exact rules). Exposed so both sides can debug hash mismatches
+ * by diffing canonical strings instead of opaque digests.
+ */
+declare function canonicalizeCatalogValue(value: FFIDCanonicalJsonValue): string;
+/**
+ * Lowercase SHA-256 hex of the UTF-8 bytes of `text`.
+ *
+ * Requires Web Crypto (`globalThis.crypto.subtle`) — available by default in
+ * Node.js >= 19 (Node 18 needs `--experimental-global-webcrypto`), browsers,
+ * and edge runtimes. Throws instead of falling back to a weaker digest so a
+ * missing crypto implementation can never silently change the contract.
+ */
+declare function sha256Hex(text: string): Promise<string>;
+/** Canonicalizes `value` and returns its lowercase SHA-256 hex digest. */
+declare function hashCanonicalJson(value: FFIDCanonicalJsonValue): Promise<string>;
+/**
+ * Human-approved tax configuration snapshot hashed into
+ * `publication.taxConfigurationHash`. FFID re-computes this from its live
+ * Stripe Tax settings at paid-checkout start and refuses the session on
+ * mismatch.
+ */
+interface FFIDTaxConfiguration {
+    /** ISO 3166-1 alpha-2 country/region codes where paid sales are allowed */
+    allowedCountries: string[];
+    /** Country/region codes with completed Stripe Tax registrations */
+    stripeTaxRegistrations: string[];
+    /** Whether full billing address collection is required before paid checkout */
+    billingAddressRequired: boolean;
+    /** Stripe Product tax code per plan code (e.g. `txcd_10000000`) */
+    planTaxCodes: Record<string, string>;
+    /** Tax behavior per plan code */
+    planTaxBehaviors: Record<string, FFIDTaxBehavior>;
+}
+/**
+ * Human-approved payment configuration snapshot hashed into
+ * `publication.paymentConfigurationHash`.
+ */
+interface FFIDPaymentConfiguration {
+    environment: FFIDCatalogEnvironment;
+    /** Lowercase ISO 4217 currency (e.g. `jpy`) */
+    currency: string;
+    /** Explicit Stripe payment method allow-list (initial sales: `['card']`) */
+    paymentMethodTypes: string[];
+    /** Stripe Dashboard dynamic payment methods must stay disabled for sales */
+    dynamicPaymentMethodsEnabled: boolean;
+    manualInvoiceAllowed: boolean;
+    customerBalanceAllowed: boolean;
+    delayedPaymentMethodsAllowed: boolean;
+    /** Required Stripe Customer invoice credit balance before checkout (spec: 0) */
+    customerInvoiceBalanceRequired: number;
+}
+/** Sales-scope-relevant snapshot of one published plan (subset of the catalog) */
+interface FFIDScopeHashPlan {
+    code: string;
+    priceMonthly: number | null;
+    priceYearly: number | null;
+    currency: string;
+    billingIntervals: FFIDBillingInterval[];
+    taxBehavior: FFIDTaxBehavior;
+    minSeats: number;
+}
+/**
+ * Input of `computeScopeHash` — the published plans' sales conditions plus
+ * the five content/config hashes. Changing any of them changes `scopeHash`,
+ * which invalidates the previous publication approval (fail-closed).
+ */
+interface FFIDScopeHashInput {
+    plans: FFIDScopeHashPlan[];
+    praxisCopyHash: string;
+    ffidCheckoutCopyHash: string;
+    legalDisclosureHash: string;
+    taxConfigurationHash: string;
+    paymentConfigurationHash: string;
+}
+/**
+ * `praxisCopyHash`: hash of the consumer's entire structured sales
+ * presentation (`PRAXIS_SALES_PRESENTATION` — locales, plan display names,
+ * prices, feature matrix, CTAs, eligibility). The consumer re-hashes what it
+ * actually renders and must refuse new sales on mismatch.
+ */
+declare function computePraxisCopyHash(presentation: Record<string, FFIDCanonicalJsonValue>): Promise<string>;
+/** `ffidCheckoutCopyHash`: hash of FFID's structured final-confirmation copy */
+declare function computeFFIDCheckoutCopyHash(checkoutCopy: Record<string, FFIDCanonicalJsonValue>): Promise<string>;
+/**
+ * `legalDisclosureHash`: hash of the canonical body text of the reviewed
+ * legal disclosure document version. Line endings are normalized to LF before
+ * hashing so the digest is independent of platform line-ending conventions;
+ * the text is otherwise hashed byte-exact (no trimming, no Unicode
+ * normalization).
+ */
+declare function computeLegalDisclosureHash(canonicalText: string): Promise<string>;
+/**
+ * `taxConfigurationHash`: hash of the human-approved tax configuration.
+ * Country lists are treated as sets (sorted + deduplicated) so representation
+ * order cannot flip the digest.
+ */
+declare function computeTaxConfigurationHash(config: FFIDTaxConfiguration): Promise<string>;
+/**
+ * `paymentConfigurationHash`: hash of the human-approved payment
+ * configuration. `paymentMethodTypes` is treated as a set.
+ */
+declare function computePaymentConfigurationHash(config: FFIDPaymentConfiguration): Promise<string>;
+/**
+ * `scopeHash`: hash of the published sales scope — plan codes, amounts,
+ * currency, intervals, tax behavior, minimum seats, plus the five embedded
+ * content/config hashes. Plans are sorted by `code`; duplicate codes are
+ * rejected. Embedded hashes are validated for format so a malformed digest
+ * can never be baked into an approval.
+ */
+declare function computeScopeHash(input: FFIDScopeHashInput): Promise<string>;
+
+/** Published catalog methods (#4342 / ASDD-PRICING-002 SP4A) */
+
+/**
+ * Validates the full published-catalog shape the SDK's compile-time types
+ * promise to consumers:
+ * - `service.code` / `service.name` are non-empty strings
+ * - top-level `catalogVersion` equals `publication.catalogVersion`
+ * - `publication.status` is one of the four known literals (unknown statuses
+ *   must fail loud here, NOT be treated as sellable downstream) and
+ *   `publication.environment` is a known environment
+ * - the six approval hashes are lowercase SHA-256 hex; `salesEpoch` is a
+ *   positive integer; timestamps are present (or explicitly null where the
+ *   type allows null)
+ * - every plan carries the full `FFIDPublishedPlan` field set with
+ *   cross-field invariants (an offered interval has its price;
+ *   `minSeats <= maxSeats`), and no plan field NAME mentions Stripe
+ *   (defense-in-depth heuristic — the authoritative no-Stripe-ID guard is
+ *   the FFID server's `.strict()` snapshot schema)
+ *
+ * Throws FFIDSDKError on violation so a server regression surfaces at the
+ * SDK boundary instead of silently reaching a consumer's sales gate.
+ */
+declare function validatePublishedCatalog(catalog: unknown): asserts catalog is FFIDPublishedCatalog;
+
+export { ALL_DENIED_EXCEPT_NECESSARY, type BuildAuthorizeUrlOptions, type BuildAuthorizeUrlResult, CATALOG_HASH_PATTERN, CONSENT_COOKIE_NAME, COOKIE_VERSION, type CookieOptions, FFIDCacheAdapter, type FFIDCanonicalJsonValue, FFIDCatalogEnvironment, FFIDCatalogHashError, type FFIDConsentCategories, type FFIDConsentCategoryCode, type FFIDCookieStoreLike, type FFIDErrorCode, FFIDOAuthUserInfo, type FFIDPaymentConfiguration, FFIDPublishedCatalog, type FFIDScopeHashInput, type FFIDScopeHashPlan, FFIDTaxBehavior, type FFIDTaxConfiguration, FFIDVerifyAccessTokenOptions, FFID_ERROR_CODES, FFID_SESSION_COOKIE_NAME, type HandleCallbackInput, type KVNamespaceLike, type ServerAuthClient, type ServerAuthConfig, type ServerSessionTokens, type ServerTokenResult, canonicalizeCatalogValue, computeFFIDCheckoutCopyHash, computeLegalDisclosureHash, computePaymentConfigurationHash, computePraxisCopyHash, computeScopeHash, computeTaxConfigurationHash, createKVCacheAdapter, createMemoryCacheAdapter, createServerAuthClient, createVerifyAccessToken, decodeConsentCookie, encodeConsentCookie, generateServerState, getFFIDConsentFromCookieHeader, getFFIDConsentFromCookies, hashCanonicalJson, sessionCookies, sha256Hex, validatePublishedCatalog };

package/dist/server/index.d.ts

@@ -1,5 +1,5 @@
-import { F as FFIDLogger, a as FFIDError, b as FFIDCacheAdapter, c as FFIDVerifyAccessTokenOptions, d as FFIDApiResponse, e as FFIDOAuthUserInfo } from '../ffid-client-CFZPX5ej.js';
-export { f as FFIDAddMemberParams, g as FFIDAddMemberRequest, h as FFIDAddMemberResponse, i as FFIDAssignableMemberRole, j as FFIDCacheConfig, k as FFIDClient, l as FFIDConfig, m as FFIDListMembersResponse, n as FFIDMemberRole, o as FFIDOrganization, p as FFIDOrganizationMember, q as FFIDOtpSendResponse, r as FFIDOtpVerifyResponse, s as FFIDPasswordResetConfirmResponse, t as FFIDPasswordResetResponse, u as FFIDPasswordResetVerifyResponse, v as FFIDProfileCallOptions, w as FFIDProvisionMemberPlan, x as FFIDProvisionMemberPlanStatus, y as FFIDProvisionMemberResult, z as FFIDProvisionMemberStatus, A as FFIDProvisionOrganizationDryRun, B as FFIDProvisionOrganizationMemberInput, C as FFIDProvisionOrganizationOutcome, D as FFIDProvisionOrganizationParams, E as FFIDProvisionOrganizationResponse, G as FFIDProvisionUserDryRun, H as FFIDProvisionUserOutcome, I as FFIDProvisionUserParams, J as FFIDProvisionUserProfileInput, K as FFIDProvisionUserResponse, L as FFIDProvisionedOrganization, M as FFIDProvisionedUser, N as FFIDRemoveMemberResponse, O as FFIDResetSessionResponse, P as FFIDSubscription, Q as FFIDUpdateMemberRoleResponse, R as FFIDUpdateUserProfileRequest, S as FFIDUser, T as FFIDUserProfile, U as TokenData, V as TokenStore, W as createFFIDClient, X as createTokenStore } from '../ffid-client-CFZPX5ej.js';
+import { F as FFIDLogger, a as FFIDError, b as FFIDCacheAdapter, c as FFIDVerifyAccessTokenOptions, d as FFIDApiResponse, e as FFIDOAuthUserInfo, f as FFIDCatalogEnvironment, g as FFIDBillingInterval, h as FFIDTaxBehavior, i as FFIDPublishedCatalog } from '../ffid-client-DEM1nYqe.js';
+export { j as FFIDAddMemberParams, k as FFIDAddMemberRequest, l as FFIDAddMemberResponse, m as FFIDAssignableMemberRole, n as FFIDCacheConfig, o as FFIDCatalogPublication, p as FFIDCatalogPublicationStatus, q as FFIDClient, r as FFIDConfig, s as FFIDListMembersResponse, t as FFIDMemberRole, u as FFIDOrganization, v as FFIDOrganizationMember, w as FFIDOtpSendResponse, x as FFIDOtpVerifyResponse, y as FFIDPasswordResetConfirmResponse, z as FFIDPasswordResetResponse, A as FFIDPasswordResetVerifyResponse, B as FFIDProfileCallOptions, C as FFIDProvisionMemberPlan, D as FFIDProvisionMemberPlanStatus, E as FFIDProvisionMemberResult, G as FFIDProvisionMemberStatus, H as FFIDProvisionOrganizationDryRun, I as FFIDProvisionOrganizationMemberInput, J as FFIDProvisionOrganizationOutcome, K as FFIDProvisionOrganizationParams, L as FFIDProvisionOrganizationResponse, M as FFIDProvisionUserDryRun, N as FFIDProvisionUserOutcome, O as FFIDProvisionUserParams, P as FFIDProvisionUserProfileInput, Q as FFIDProvisionUserResponse, R as FFIDProvisionedOrganization, S as FFIDProvisionedUser, T as FFIDPublishedPlan, U as FFIDRemoveMemberResponse, V as FFIDResetSessionResponse, W as FFIDSubscription, X as FFIDUpdateMemberRoleResponse, Y as FFIDUpdateUserProfileRequest, Z as FFIDUser, _ as FFIDUserProfile, $ as FFID_CATALOG_ENVIRONMENTS, a0 as FFID_CATALOG_PUBLICATION_STATUSES, a1 as TokenData, a2 as TokenStore, a3 as createFFIDClient, a4 as createTokenStore } from '../ffid-client-DEM1nYqe.js';
 export { D as DEFAULT_API_BASE_URL, a as DEFAULT_OAUTH_SCOPES } from '../constants-D61jqRIO.js';
 import { z } from 'zod';
 import '../types-Cjb9J0rL.js';
@@ -389,4 +389,181 @@ declare const sessionCookies: {
  */
 declare function generateServerState(): string;
 
-export { ALL_DENIED_EXCEPT_NECESSARY, type BuildAuthorizeUrlOptions, type BuildAuthorizeUrlResult, CONSENT_COOKIE_NAME, COOKIE_VERSION, type CookieOptions, FFIDCacheAdapter, type FFIDConsentCategories, type FFIDConsentCategoryCode, type FFIDCookieStoreLike, type FFIDErrorCode, FFIDOAuthUserInfo, FFIDVerifyAccessTokenOptions, FFID_ERROR_CODES, FFID_SESSION_COOKIE_NAME, type HandleCallbackInput, type KVNamespaceLike, type ServerAuthClient, type ServerAuthConfig, type ServerSessionTokens, type ServerTokenResult, createKVCacheAdapter, createMemoryCacheAdapter, createServerAuthClient, createVerifyAccessToken, decodeConsentCookie, encodeConsentCookie, generateServerState, getFFIDConsentFromCookieHeader, getFFIDConsentFromCookies, sessionCookies };
+/**
+ * Catalog approval hash helpers (#4342 / ASDD-PRICING-002 SP4A)
+ *
+ * Shared canonicalization + SHA-256 helpers that FIX the cross-repo hash
+ * contract between FFID (publisher) and consumers (Praxis). Both sides compute
+ * hashes with these helpers and refuse new sales on any mismatch, so the
+ * canonical form below is a compatibility contract:
+ *
+ *   1. Objects serialize with keys sorted by UTF-16 code unit order,
+ *      recursively. Arrays keep their element order.
+ *   2. Serialization is `JSON.stringify`-compatible per token (string
+ *      escaping, number formatting) with NO whitespace.
+ *   3. `undefined`, non-finite numbers (NaN/±Infinity), functions, symbols,
+ *      bigints and non-plain objects (Date, Map, class instances) are
+ *      REJECTED with FFIDCatalogHashError — never silently dropped, because a
+ *      dropped key would let two semantically different payloads collide.
+ *      Only own enumerable string-keyed properties participate; symbol-keyed
+ *      properties are ignored (same as `JSON.stringify`).
+ *   4. The hash is lowercase SHA-256 hex over the UTF-8 bytes of the
+ *      canonical string (no domain-separation prefix).
+ *
+ * Changing ANY of these rules is a breaking change to published catalog
+ * verification and requires re-publishing catalogs — the fixed test vectors
+ * in `__tests__/catalog-hash.test.ts` exist to make such a change loud.
+ */
+
+/** Lowercase SHA-256 hex format shared by all catalog approval hashes */
+declare const CATALOG_HASH_PATTERN: RegExp;
+/**
+ * Thrown when a value cannot be canonicalized (or an embedded hash is
+ * malformed). Always indicates a programming error on the hashing side —
+ * never caused by end-user input.
+ */
+declare class FFIDCatalogHashError extends Error {
+    constructor(message: string);
+}
+/** JSON value accepted by the canonicalizer */
+type FFIDCanonicalJsonValue = string | number | boolean | null | FFIDCanonicalJsonValue[] | {
+    [key: string]: FFIDCanonicalJsonValue;
+};
+/**
+ * Serializes a JSON-plain value into its canonical string form (see module
+ * doc for the exact rules). Exposed so both sides can debug hash mismatches
+ * by diffing canonical strings instead of opaque digests.
+ */
+declare function canonicalizeCatalogValue(value: FFIDCanonicalJsonValue): string;
+/**
+ * Lowercase SHA-256 hex of the UTF-8 bytes of `text`.
+ *
+ * Requires Web Crypto (`globalThis.crypto.subtle`) — available by default in
+ * Node.js >= 19 (Node 18 needs `--experimental-global-webcrypto`), browsers,
+ * and edge runtimes. Throws instead of falling back to a weaker digest so a
+ * missing crypto implementation can never silently change the contract.
+ */
+declare function sha256Hex(text: string): Promise<string>;
+/** Canonicalizes `value` and returns its lowercase SHA-256 hex digest. */
+declare function hashCanonicalJson(value: FFIDCanonicalJsonValue): Promise<string>;
+/**
+ * Human-approved tax configuration snapshot hashed into
+ * `publication.taxConfigurationHash`. FFID re-computes this from its live
+ * Stripe Tax settings at paid-checkout start and refuses the session on
+ * mismatch.
+ */
+interface FFIDTaxConfiguration {
+    /** ISO 3166-1 alpha-2 country/region codes where paid sales are allowed */
+    allowedCountries: string[];
+    /** Country/region codes with completed Stripe Tax registrations */
+    stripeTaxRegistrations: string[];
+    /** Whether full billing address collection is required before paid checkout */
+    billingAddressRequired: boolean;
+    /** Stripe Product tax code per plan code (e.g. `txcd_10000000`) */
+    planTaxCodes: Record<string, string>;
+    /** Tax behavior per plan code */
+    planTaxBehaviors: Record<string, FFIDTaxBehavior>;
+}
+/**
+ * Human-approved payment configuration snapshot hashed into
+ * `publication.paymentConfigurationHash`.
+ */
+interface FFIDPaymentConfiguration {
+    environment: FFIDCatalogEnvironment;
+    /** Lowercase ISO 4217 currency (e.g. `jpy`) */
+    currency: string;
+    /** Explicit Stripe payment method allow-list (initial sales: `['card']`) */
+    paymentMethodTypes: string[];
+    /** Stripe Dashboard dynamic payment methods must stay disabled for sales */
+    dynamicPaymentMethodsEnabled: boolean;
+    manualInvoiceAllowed: boolean;
+    customerBalanceAllowed: boolean;
+    delayedPaymentMethodsAllowed: boolean;
+    /** Required Stripe Customer invoice credit balance before checkout (spec: 0) */
+    customerInvoiceBalanceRequired: number;
+}
+/** Sales-scope-relevant snapshot of one published plan (subset of the catalog) */
+interface FFIDScopeHashPlan {
+    code: string;
+    priceMonthly: number | null;
+    priceYearly: number | null;
+    currency: string;
+    billingIntervals: FFIDBillingInterval[];
+    taxBehavior: FFIDTaxBehavior;
+    minSeats: number;
+}
+/**
+ * Input of `computeScopeHash` — the published plans' sales conditions plus
+ * the five content/config hashes. Changing any of them changes `scopeHash`,
+ * which invalidates the previous publication approval (fail-closed).
+ */
+interface FFIDScopeHashInput {
+    plans: FFIDScopeHashPlan[];
+    praxisCopyHash: string;
+    ffidCheckoutCopyHash: string;
+    legalDisclosureHash: string;
+    taxConfigurationHash: string;
+    paymentConfigurationHash: string;
+}
+/**
+ * `praxisCopyHash`: hash of the consumer's entire structured sales
+ * presentation (`PRAXIS_SALES_PRESENTATION` — locales, plan display names,
+ * prices, feature matrix, CTAs, eligibility). The consumer re-hashes what it
+ * actually renders and must refuse new sales on mismatch.
+ */
+declare function computePraxisCopyHash(presentation: Record<string, FFIDCanonicalJsonValue>): Promise<string>;
+/** `ffidCheckoutCopyHash`: hash of FFID's structured final-confirmation copy */
+declare function computeFFIDCheckoutCopyHash(checkoutCopy: Record<string, FFIDCanonicalJsonValue>): Promise<string>;
+/**
+ * `legalDisclosureHash`: hash of the canonical body text of the reviewed
+ * legal disclosure document version. Line endings are normalized to LF before
+ * hashing so the digest is independent of platform line-ending conventions;
+ * the text is otherwise hashed byte-exact (no trimming, no Unicode
+ * normalization).
+ */
+declare function computeLegalDisclosureHash(canonicalText: string): Promise<string>;
+/**
+ * `taxConfigurationHash`: hash of the human-approved tax configuration.
+ * Country lists are treated as sets (sorted + deduplicated) so representation
+ * order cannot flip the digest.
+ */
+declare function computeTaxConfigurationHash(config: FFIDTaxConfiguration): Promise<string>;
+/**
+ * `paymentConfigurationHash`: hash of the human-approved payment
+ * configuration. `paymentMethodTypes` is treated as a set.
+ */
+declare function computePaymentConfigurationHash(config: FFIDPaymentConfiguration): Promise<string>;
+/**
+ * `scopeHash`: hash of the published sales scope — plan codes, amounts,
+ * currency, intervals, tax behavior, minimum seats, plus the five embedded
+ * content/config hashes. Plans are sorted by `code`; duplicate codes are
+ * rejected. Embedded hashes are validated for format so a malformed digest
+ * can never be baked into an approval.
+ */
+declare function computeScopeHash(input: FFIDScopeHashInput): Promise<string>;
+
+/** Published catalog methods (#4342 / ASDD-PRICING-002 SP4A) */
+
+/**
+ * Validates the full published-catalog shape the SDK's compile-time types
+ * promise to consumers:
+ * - `service.code` / `service.name` are non-empty strings
+ * - top-level `catalogVersion` equals `publication.catalogVersion`
+ * - `publication.status` is one of the four known literals (unknown statuses
+ *   must fail loud here, NOT be treated as sellable downstream) and
+ *   `publication.environment` is a known environment
+ * - the six approval hashes are lowercase SHA-256 hex; `salesEpoch` is a
+ *   positive integer; timestamps are present (or explicitly null where the
+ *   type allows null)
+ * - every plan carries the full `FFIDPublishedPlan` field set with
+ *   cross-field invariants (an offered interval has its price;
+ *   `minSeats <= maxSeats`), and no plan field NAME mentions Stripe
+ *   (defense-in-depth heuristic — the authoritative no-Stripe-ID guard is
+ *   the FFID server's `.strict()` snapshot schema)
+ *
+ * Throws FFIDSDKError on violation so a server regression surfaces at the
+ * SDK boundary instead of silently reaching a consumer's sales gate.
+ */
+declare function validatePublishedCatalog(catalog: unknown): asserts catalog is FFIDPublishedCatalog;
+
+export { ALL_DENIED_EXCEPT_NECESSARY, type BuildAuthorizeUrlOptions, type BuildAuthorizeUrlResult, CATALOG_HASH_PATTERN, CONSENT_COOKIE_NAME, COOKIE_VERSION, type CookieOptions, FFIDCacheAdapter, type FFIDCanonicalJsonValue, FFIDCatalogEnvironment, FFIDCatalogHashError, type FFIDConsentCategories, type FFIDConsentCategoryCode, type FFIDCookieStoreLike, type FFIDErrorCode, FFIDOAuthUserInfo, type FFIDPaymentConfiguration, FFIDPublishedCatalog, type FFIDScopeHashInput, type FFIDScopeHashPlan, FFIDTaxBehavior, type FFIDTaxConfiguration, FFIDVerifyAccessTokenOptions, FFID_ERROR_CODES, FFID_SESSION_COOKIE_NAME, type HandleCallbackInput, type KVNamespaceLike, type ServerAuthClient, type ServerAuthConfig, type ServerSessionTokens, type ServerTokenResult, canonicalizeCatalogValue, computeFFIDCheckoutCopyHash, computeLegalDisclosureHash, computePaymentConfigurationHash, computePraxisCopyHash, computeScopeHash, computeTaxConfigurationHash, createKVCacheAdapter, createMemoryCacheAdapter, createServerAuthClient, createVerifyAccessToken, decodeConsentCookie, encodeConsentCookie, generateServerState, getFFIDConsentFromCookieHeader, getFFIDConsentFromCookies, hashCanonicalJson, sessionCookies, sha256Hex, validatePublishedCatalog };