@feelflow/ffid-sdk 5.3.1 → 5.5.0

package/dist/index.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunkAAMNUM62_cjs = require('./chunk-AAMNUM62.cjs');
-var chunkQZN4WZCV_cjs = require('./chunk-QZN4WZCV.cjs');
+var chunkJKP3MBTT_cjs = require('./chunk-JKP3MBTT.cjs');
+var chunkQ5SZVLNB_cjs = require('./chunk-Q5SZVLNB.cjs');
 var react = require('react');
 var jsxRuntime = require('react/jsx-runtime');
 
@@ -54,8 +54,8 @@ function defaultRedirect(url) {
 }
 function useRequireActiveSubscription(options) {
   const { redirectTo, allowGrace = true, onRedirect } = options;
-  const { isLoading, error } = chunkAAMNUM62_cjs.useFFIDContext();
-  const { effectiveStatus, isBlocked, isGrace } = chunkAAMNUM62_cjs.useSubscription();
+  const { isLoading, error } = chunkJKP3MBTT_cjs.useFFIDContext();
+  const { effectiveStatus, isBlocked, isGrace } = chunkJKP3MBTT_cjs.useSubscription();
   const hasFetchError = error !== null && effectiveStatus === null;
   const shouldRedirect = !isLoading && !hasFetchError && (isBlocked || !allowGrace && isGrace || effectiveStatus === null);
   react.useEffect(() => {
@@ -76,7 +76,7 @@ function useRequireActiveSubscription(options) {
 }
 function withFFIDAuth(Component, options = {}) {
   const WrappedComponent = (props) => {
-    const { isLoading, isAuthenticated, login } = chunkAAMNUM62_cjs.useFFIDContext();
+    const { isLoading, isAuthenticated, login } = chunkJKP3MBTT_cjs.useFFIDContext();
     const hasRedirected = react.useRef(false);
     react.useEffect(() => {
       if (!isLoading && !isAuthenticated && options.redirectToLogin && !hasRedirected.current) {
@@ -103,197 +103,213 @@ function withFFIDAuth(Component, options = {}) {
 var FFID_NEWSLETTER_TYPES = ["inquiry_followup", "general"];
 var FFID_NEWSLETTER_DISPATCH_MAX_RECIPIENTS = 1e3;
 
+Object.defineProperty(exports, "ACCESS_GRANTING_EFFECTIVE_STATUSES", {
+  enumerable: true,
+  get: function () { return chunkJKP3MBTT_cjs.ACCESS_GRANTING_EFFECTIVE_STATUSES; }
+});
+Object.defineProperty(exports, "BLOCKING_EFFECTIVE_STATUSES", {
+  enumerable: true,
+  get: function () { return chunkJKP3MBTT_cjs.BLOCKING_EFFECTIVE_STATUSES; }
+});
 Object.defineProperty(exports, "DEFAULT_API_BASE_URL", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.DEFAULT_API_BASE_URL; }
+  get: function () { return chunkJKP3MBTT_cjs.DEFAULT_API_BASE_URL; }
 });
 Object.defineProperty(exports, "DEFAULT_OAUTH_SCOPES", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.DEFAULT_OAUTH_SCOPES; }
+  get: function () { return chunkJKP3MBTT_cjs.DEFAULT_OAUTH_SCOPES; }
 });
 Object.defineProperty(exports, "FFIDAnnouncementBadge", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.FFIDAnnouncementBadge; }
+  get: function () { return chunkJKP3MBTT_cjs.FFIDAnnouncementBadge; }
 });
 Object.defineProperty(exports, "FFIDAnnouncementList", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.FFIDAnnouncementList; }
+  get: function () { return chunkJKP3MBTT_cjs.FFIDAnnouncementList; }
 });
 Object.defineProperty(exports, "FFIDInquiryForm", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.FFIDInquiryForm; }
+  get: function () { return chunkJKP3MBTT_cjs.FFIDInquiryForm; }
 });
 Object.defineProperty(exports, "FFIDLoginButton", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.FFIDLoginButton; }
+  get: function () { return chunkJKP3MBTT_cjs.FFIDLoginButton; }
 });
 Object.defineProperty(exports, "FFIDOrganizationSwitcher", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.FFIDOrganizationSwitcher; }
+  get: function () { return chunkJKP3MBTT_cjs.FFIDOrganizationSwitcher; }
 });
 Object.defineProperty(exports, "FFIDProvider", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.FFIDProvider; }
+  get: function () { return chunkJKP3MBTT_cjs.FFIDProvider; }
 });
 Object.defineProperty(exports, "FFIDSDKError", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.FFIDSDKError; }
+  get: function () { return chunkJKP3MBTT_cjs.FFIDSDKError; }
 });
 Object.defineProperty(exports, "FFIDSubscriptionBadge", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.FFIDSubscriptionBadge; }
+  get: function () { return chunkJKP3MBTT_cjs.FFIDSubscriptionBadge; }
 });
 Object.defineProperty(exports, "FFIDUserMenu", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.FFIDUserMenu; }
+  get: function () { return chunkJKP3MBTT_cjs.FFIDUserMenu; }
 });
 Object.defineProperty(exports, "FFID_ANNOUNCEMENTS_ERROR_CODES", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.FFID_ANNOUNCEMENTS_ERROR_CODES; }
+  get: function () { return chunkJKP3MBTT_cjs.FFID_ANNOUNCEMENTS_ERROR_CODES; }
 });
 Object.defineProperty(exports, "FFID_INQUIRY_CATEGORIES", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.FFID_INQUIRY_CATEGORIES; }
+  get: function () { return chunkJKP3MBTT_cjs.FFID_INQUIRY_CATEGORIES; }
 });
 Object.defineProperty(exports, "FFID_INQUIRY_CATEGORIES_SITE_2026", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.FFID_INQUIRY_CATEGORIES_SITE_2026; }
+  get: function () { return chunkJKP3MBTT_cjs.FFID_INQUIRY_CATEGORIES_SITE_2026; }
 });
 Object.defineProperty(exports, "computeEffectiveStatusFromSession", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.computeEffectiveStatusFromSession; }
+  get: function () { return chunkJKP3MBTT_cjs.computeEffectiveStatusFromSession; }
 });
 Object.defineProperty(exports, "createFFIDAnnouncementsClient", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.createFFIDAnnouncementsClient; }
+  get: function () { return chunkJKP3MBTT_cjs.createFFIDAnnouncementsClient; }
 });
 Object.defineProperty(exports, "createFFIDClient", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.createFFIDClient; }
+  get: function () { return chunkJKP3MBTT_cjs.createFFIDClient; }
 });
 Object.defineProperty(exports, "createTokenStore", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.createTokenStore; }
+  get: function () { return chunkJKP3MBTT_cjs.createTokenStore; }
 });
 Object.defineProperty(exports, "generateCodeChallenge", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.generateCodeChallenge; }
+  get: function () { return chunkJKP3MBTT_cjs.generateCodeChallenge; }
 });
 Object.defineProperty(exports, "generateCodeVerifier", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.generateCodeVerifier; }
+  get: function () { return chunkJKP3MBTT_cjs.generateCodeVerifier; }
+});
+Object.defineProperty(exports, "hasAccessFromUserinfo", {
+  enumerable: true,
+  get: function () { return chunkJKP3MBTT_cjs.hasAccessFromUserinfo; }
+});
+Object.defineProperty(exports, "isBlockedFromUserinfo", {
+  enumerable: true,
+  get: function () { return chunkJKP3MBTT_cjs.isBlockedFromUserinfo; }
 });
 Object.defineProperty(exports, "isFFIDInquiryCategorySite2026", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.isFFIDInquiryCategorySite2026; }
+  get: function () { return chunkJKP3MBTT_cjs.isFFIDInquiryCategorySite2026; }
 });
 Object.defineProperty(exports, "normalizeRedirectUri", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.normalizeRedirectUri; }
+  get: function () { return chunkJKP3MBTT_cjs.normalizeRedirectUri; }
 });
 Object.defineProperty(exports, "retrieveCodeVerifier", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.retrieveCodeVerifier; }
+  get: function () { return chunkJKP3MBTT_cjs.retrieveCodeVerifier; }
 });
 Object.defineProperty(exports, "storeCodeVerifier", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.storeCodeVerifier; }
+  get: function () { return chunkJKP3MBTT_cjs.storeCodeVerifier; }
 });
 Object.defineProperty(exports, "useFFID", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.useFFID; }
+  get: function () { return chunkJKP3MBTT_cjs.useFFID; }
 });
 Object.defineProperty(exports, "useFFIDAnnouncements", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.useFFIDAnnouncements; }
+  get: function () { return chunkJKP3MBTT_cjs.useFFIDAnnouncements; }
 });
 Object.defineProperty(exports, "useSubscription", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.useSubscription; }
+  get: function () { return chunkJKP3MBTT_cjs.useSubscription; }
 });
 Object.defineProperty(exports, "withSubscription", {
   enumerable: true,
-  get: function () { return chunkAAMNUM62_cjs.withSubscription; }
+  get: function () { return chunkJKP3MBTT_cjs.withSubscription; }
 });
 Object.defineProperty(exports, "ALL_DENIED_EXCEPT_NECESSARY", {
   enumerable: true,
-  get: function () { return chunkQZN4WZCV_cjs.ALL_DENIED_EXCEPT_NECESSARY; }
+  get: function () { return chunkQ5SZVLNB_cjs.ALL_DENIED_EXCEPT_NECESSARY; }
 });
 Object.defineProperty(exports, "CONSENT_COOKIE_NAME", {
   enumerable: true,
-  get: function () { return chunkQZN4WZCV_cjs.CONSENT_COOKIE_NAME; }
+  get: function () { return chunkQ5SZVLNB_cjs.CONSENT_COOKIE_NAME; }
 });
 Object.defineProperty(exports, "CONSENT_DISMISSAL_TIMESTAMP_KEY", {
   enumerable: true,
-  get: function () { return chunkQZN4WZCV_cjs.CONSENT_DISMISSAL_TIMESTAMP_KEY; }
+  get: function () { return chunkQ5SZVLNB_cjs.CONSENT_DISMISSAL_TIMESTAMP_KEY; }
 });
 Object.defineProperty(exports, "COOKIE_VERSION", {
   enumerable: true,
-  get: function () { return chunkQZN4WZCV_cjs.COOKIE_VERSION; }
+  get: function () { return chunkQ5SZVLNB_cjs.COOKIE_VERSION; }
 });
 Object.defineProperty(exports, "DEFAULT_CONSENT_ERROR_MESSAGES", {
   enumerable: true,
-  get: function () { return chunkQZN4WZCV_cjs.DEFAULT_CONSENT_ERROR_MESSAGES; }
+  get: function () { return chunkQ5SZVLNB_cjs.DEFAULT_CONSENT_ERROR_MESSAGES; }
 });
 Object.defineProperty(exports, "FFIDAnalyticsProvider", {
   enumerable: true,
-  get: function () { return chunkQZN4WZCV_cjs.FFIDAnalyticsProvider; }
+  get: function () { return chunkQ5SZVLNB_cjs.FFIDAnalyticsProvider; }
 });
 Object.defineProperty(exports, "FFIDConsentError", {
   enumerable: true,
-  get: function () { return chunkQZN4WZCV_cjs.FFIDConsentError; }
+  get: function () { return chunkQ5SZVLNB_cjs.FFIDConsentError; }
 });
 Object.defineProperty(exports, "FFIDCookieBanner", {
   enumerable: true,
-  get: function () { return chunkQZN4WZCV_cjs.FFIDCookieBanner; }
+  get: function () { return chunkQ5SZVLNB_cjs.FFIDCookieBanner; }
 });
 Object.defineProperty(exports, "FFIDCookieLink", {
   enumerable: true,
-  get: function () { return chunkQZN4WZCV_cjs.FFIDCookieLink; }
+  get: function () { return chunkQ5SZVLNB_cjs.FFIDCookieLink; }
 });
 Object.defineProperty(exports, "FFIDCookieSettings", {
   enumerable: true,
-  get: function () { return chunkQZN4WZCV_cjs.FFIDCookieSettings; }
+  get: function () { return chunkQ5SZVLNB_cjs.FFIDCookieSettings; }
 });
 Object.defineProperty(exports, "FFID_CONSENT_ERROR_CODES", {
   enumerable: true,
-  get: function () { return chunkQZN4WZCV_cjs.FFID_CONSENT_ERROR_CODES; }
+  get: function () { return chunkQ5SZVLNB_cjs.FFID_CONSENT_ERROR_CODES; }
 });
 Object.defineProperty(exports, "clearConsentDismissalTimestamp", {
   enumerable: true,
-  get: function () { return chunkQZN4WZCV_cjs.clearConsentDismissalTimestamp; }
+  get: function () { return chunkQ5SZVLNB_cjs.clearConsentDismissalTimestamp; }
 });
 Object.defineProperty(exports, "decodeConsentCookie", {
   enumerable: true,
-  get: function () { return chunkQZN4WZCV_cjs.decodeConsentCookie; }
+  get: function () { return chunkQ5SZVLNB_cjs.decodeConsentCookie; }
 });
 Object.defineProperty(exports, "encodeConsentCookie", {
   enumerable: true,
-  get: function () { return chunkQZN4WZCV_cjs.encodeConsentCookie; }
+  get: function () { return chunkQ5SZVLNB_cjs.encodeConsentCookie; }
 });
 Object.defineProperty(exports, "readConsentCookie", {
   enumerable: true,
-  get: function () { return chunkQZN4WZCV_cjs.readConsentCookie; }
+  get: function () { return chunkQ5SZVLNB_cjs.readConsentCookie; }
 });
 Object.defineProperty(exports, "readConsentDismissalTimestamp", {
   enumerable: true,
-  get: function () { return chunkQZN4WZCV_cjs.readConsentDismissalTimestamp; }
+  get: function () { return chunkQ5SZVLNB_cjs.readConsentDismissalTimestamp; }
 });
 Object.defineProperty(exports, "useFFIDConsent", {
   enumerable: true,
-  get: function () { return chunkQZN4WZCV_cjs.useFFIDConsent; }
+  get: function () { return chunkQ5SZVLNB_cjs.useFFIDConsent; }
 });
 Object.defineProperty(exports, "useFFIDConsentPreferences", {
   enumerable: true,
-  get: function () { return chunkQZN4WZCV_cjs.useFFIDConsentPreferences; }
+  get: function () { return chunkQ5SZVLNB_cjs.useFFIDConsentPreferences; }
 });
 Object.defineProperty(exports, "writeConsentCookie", {
   enumerable: true,
-  get: function () { return chunkQZN4WZCV_cjs.writeConsentCookie; }
+  get: function () { return chunkQ5SZVLNB_cjs.writeConsentCookie; }
 });
 Object.defineProperty(exports, "writeConsentDismissalTimestamp", {
   enumerable: true,
-  get: function () { return chunkQZN4WZCV_cjs.writeConsentDismissalTimestamp; }
+  get: function () { return chunkQ5SZVLNB_cjs.writeConsentDismissalTimestamp; }
 });
 exports.FFID_NEWSLETTER_DISPATCH_MAX_RECIPIENTS = FFID_NEWSLETTER_DISPATCH_MAX_RECIPIENTS;
 exports.FFID_NEWSLETTER_TYPES = FFID_NEWSLETTER_TYPES;

package/dist/index.d.cts

@@ -1,6 +1,6 @@
-import { F as FFIDSubscriptionStatus, a as FFIDConfig, b as FFIDApiResponse, c as FFIDSessionResponse, d as FFIDRedirectResult, e as FFIDError, f as FFIDSubscriptionCheckResponse, g as FFIDCheckServiceAccessParams, h as FFIDServiceAccessDecision, i as FFIDListMembersResponse, j as FFIDAddMemberParams, k as FFIDAddMemberResponse, l as FFIDAddMemberRequest, m as FFIDMemberRole, n as FFIDUpdateMemberRoleResponse, o as FFIDRemoveMemberResponse, p as FFIDProfileCallOptions, q as FFIDUserProfile, r as FFIDUpdateUserProfileRequest, s as FFIDAnalyticsConfig, t as FFIDCreateCheckoutParams, u as FFIDCheckoutSessionResponse, v as FFIDCreatePortalParams, w as FFIDPortalSessionResponse, x as FFIDVerifyAccessTokenOptions, y as FFIDOAuthUserInfo, z as FFIDInquiryCreateParams, A as FFIDInquiryCreateResponse, B as FFIDAuthMode, C as FFIDLogger, D as FFIDCacheAdapter, E as FFIDUser, G as FFIDOrganization, H as FFIDSubscription, I as FFIDSubscriptionContextValue, J as EffectiveSubscriptionStatus, K as FFIDAnnouncementsClientConfig, L as ListAnnouncementsOptions, M as FFIDAnnouncementsApiResponse, N as AnnouncementListResponse, O as FFIDAnnouncementsLogger } from './index-DfnHXRMX.cjs';
-export { P as Announcement, Q as AnnouncementStatus, R as AnnouncementType, S as FFIDAnnouncementBadge, T as FFIDAnnouncementList, U as FFIDAnnouncementsError, V as FFIDAnnouncementsErrorCode, W as FFIDAnnouncementsServerResponse, X as FFIDAssignableMemberRole, Y as FFIDCacheConfig, Z as FFIDContextValue, _ as FFIDInquiryCategory, $ as FFIDInquiryCategorySite2026, a0 as FFIDInquiryForm, a1 as FFIDInquiryFormCategoryItem, a2 as FFIDInquiryFormClassNames, a3 as FFIDInquiryFormLegalLayout, a4 as FFIDInquiryFormOrganization, a5 as FFIDInquiryFormPlaceholderContext, a6 as FFIDInquiryFormPrefill, a7 as FFIDInquiryFormProps, a8 as FFIDInquiryFormSubmitData, a9 as FFIDInquiryFormSubmitResult, aa as FFIDJwtClaims, ab as FFIDLoginButton, ac as FFIDMemberStatus, ad as FFIDOAuthTokenResponse, ae as FFIDOAuthUserInfoMemberRole, af as FFIDOAuthUserInfoSubscription, ag as FFIDOrganizationMember, ah as FFIDOrganizationSwitcher, ai as FFIDRedirectErrorCode, aj as FFIDSeatModel, ak as FFIDServiceAccessDenialReason, al as FFIDServiceAccessFailPolicy, am as FFIDSubscriptionBadge, an as FFIDTokenIntrospectionResponse, ao as FFIDUserMenu, ap as FFID_INQUIRY_CATEGORIES, aq as FFID_INQUIRY_CATEGORIES_SITE_2026, ar as UseFFIDAnnouncementsOptions, as as UseFFIDAnnouncementsReturn, at as isFFIDInquiryCategorySite2026, au as useFFIDAnnouncements } from './index-DfnHXRMX.cjs';
-export { A as ALL_DENIED_EXCEPT_NECESSARY, i as CONSENT_COOKIE_NAME, j as CONSENT_DISMISSAL_TIMESTAMP_KEY, l as COOKIE_VERSION, D as DEFAULT_CONSENT_ERROR_MESSAGES, o as FFIDAnalyticsProvider, p as FFIDAnalyticsProviderProps, c as FFIDConsentCategories, r as FFIDConsentCategoryCode, e as FFIDConsentCategoryMetadata, w as FFIDConsentError, x as FFIDConsentErrorCode, y as FFIDConsentMergeStrategy, B as FFIDConsentMergeWarning, E as FFIDConsentMergeWarningEvent, F as FFIDConsentResult, I as FFIDConsentSource, a as FFIDConsentState, d as FFIDConsentSyncResult, M as FFIDCookieBanner, N as FFIDCookieBannerClassNames, O as FFIDCookieBannerProps, Q as FFIDCookieLink, R as FFIDCookieLinkProps, f as FFIDCookiePolicy, T as FFIDCookieSettings, U as FFIDCookieSettingsClassNames, V as FFIDCookieSettingsProps, _ as FFID_CONSENT_ERROR_CODES, ae as UseFFIDConsentPreferencesReturn, af as UseFFIDConsentReturn, ag as clearConsentDismissalTimestamp, aj as decodeConsentCookie, al as encodeConsentCookie, an as readConsentCookie, ao as readConsentDismissalTimestamp, aq as useFFIDConsent, ar as useFFIDConsentPreferences, as as writeConsentCookie, at as writeConsentDismissalTimestamp } from './FFIDCookieLink-Bt0f1gyo.cjs';
+import { F as FFIDSubscriptionStatus, a as FFIDConfig, b as FFIDApiResponse, c as FFIDSessionResponse, d as FFIDRedirectResult, e as FFIDError, f as FFIDSubscriptionCheckResponse, g as FFIDCheckServiceAccessParams, h as FFIDServiceAccessDecision, i as FFIDListMembersResponse, j as FFIDAddMemberParams, k as FFIDAddMemberResponse, l as FFIDAddMemberRequest, m as FFIDMemberRole, n as FFIDUpdateMemberRoleResponse, o as FFIDRemoveMemberResponse, p as FFIDProfileCallOptions, q as FFIDUserProfile, r as FFIDUpdateUserProfileRequest, s as FFIDAnalyticsConfig, t as FFIDCreateCheckoutParams, u as FFIDCheckoutSessionResponse, v as FFIDCreatePortalParams, w as FFIDPortalSessionResponse, x as FFIDVerifyAccessTokenOptions, y as FFIDOAuthUserInfo, z as FFIDInquiryCreateParams, A as FFIDInquiryCreateResponse, B as FFIDAuthMode, C as FFIDLogger, D as FFIDCacheAdapter, E as FFIDUser, G as FFIDOrganization, H as FFIDSubscription, I as FFIDSubscriptionContextValue, J as EffectiveSubscriptionStatus, K as FFIDOAuthUserInfoSubscription, L as FFIDAnnouncementsClientConfig, M as ListAnnouncementsOptions, N as FFIDAnnouncementsApiResponse, O as AnnouncementListResponse, P as FFIDAnnouncementsLogger } from './index-lAvUS_oz.cjs';
+export { Q as Announcement, R as AnnouncementStatus, S as AnnouncementType, T as FFIDAnnouncementBadge, U as FFIDAnnouncementList, V as FFIDAnnouncementsError, W as FFIDAnnouncementsErrorCode, X as FFIDAnnouncementsServerResponse, Y as FFIDAssignableMemberRole, Z as FFIDCacheConfig, _ as FFIDContextValue, $ as FFIDInquiryCategory, a0 as FFIDInquiryCategorySite2026, a1 as FFIDInquiryForm, a2 as FFIDInquiryFormCategoryItem, a3 as FFIDInquiryFormClassNames, a4 as FFIDInquiryFormLegalLayout, a5 as FFIDInquiryFormOrganization, a6 as FFIDInquiryFormPlaceholderContext, a7 as FFIDInquiryFormPrefill, a8 as FFIDInquiryFormProps, a9 as FFIDInquiryFormSubmitData, aa as FFIDInquiryFormSubmitResult, ab as FFIDJwtClaims, ac as FFIDLoginButton, ad as FFIDMemberStatus, ae as FFIDOAuthTokenResponse, af as FFIDOAuthUserInfoMemberRole, ag as FFIDOrganizationMember, ah as FFIDOrganizationSwitcher, ai as FFIDRedirectErrorCode, aj as FFIDSeatModel, ak as FFIDServiceAccessDenialReason, al as FFIDServiceAccessFailPolicy, am as FFIDSubscriptionBadge, an as FFIDTokenIntrospectionResponse, ao as FFIDUserMenu, ap as FFID_INQUIRY_CATEGORIES, aq as FFID_INQUIRY_CATEGORIES_SITE_2026, ar as UseFFIDAnnouncementsOptions, as as UseFFIDAnnouncementsReturn, at as isFFIDInquiryCategorySite2026, au as useFFIDAnnouncements } from './index-lAvUS_oz.cjs';
+export { A as ALL_DENIED_EXCEPT_NECESSARY, i as CONSENT_COOKIE_NAME, j as CONSENT_DISMISSAL_TIMESTAMP_KEY, l as COOKIE_VERSION, D as DEFAULT_CONSENT_ERROR_MESSAGES, o as FFIDAnalyticsProvider, p as FFIDAnalyticsProviderProps, c as FFIDConsentCategories, r as FFIDConsentCategoryCode, e as FFIDConsentCategoryMetadata, w as FFIDConsentError, x as FFIDConsentErrorCode, y as FFIDConsentMergeStrategy, B as FFIDConsentMergeWarning, E as FFIDConsentMergeWarningEvent, F as FFIDConsentResult, I as FFIDConsentSource, a as FFIDConsentState, d as FFIDConsentSyncResult, M as FFIDCookieBanner, N as FFIDCookieBannerClassNames, O as FFIDCookieBannerProps, Q as FFIDCookieLink, R as FFIDCookieLinkProps, f as FFIDCookiePolicy, T as FFIDCookieSettings, U as FFIDCookieSettingsClassNames, V as FFIDCookieSettingsProps, _ as FFID_CONSENT_ERROR_CODES, ae as UseFFIDConsentPreferencesReturn, af as UseFFIDConsentReturn, ag as clearConsentDismissalTimestamp, aj as decodeConsentCookie, al as encodeConsentCookie, an as readConsentCookie, ao as readConsentDismissalTimestamp, aq as useFFIDConsent, ar as useFFIDConsentPreferences, as as writeConsentCookie, at as writeConsentDismissalTimestamp } from './FFIDCookieLink-CE01gYc4.cjs';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode, ComponentType, FC } from 'react';
 import 'zod';
@@ -1045,6 +1045,110 @@ interface ComputeEffectiveStatusInput {
  */
 declare function computeEffectiveStatusFromSession(input: ComputeEffectiveStatusInput, nowMs?: number): EffectiveSubscriptionStatus;
 
+/**
+ * Access-control predicates for the `/oauth/userinfo` subscription blob.
+ *
+ * `FFIDOAuthUserInfo.subscription.effectiveStatus` (added in SDK 5.3.0 / FFID
+ * #3353) is the canonical access-control signal for callers that consume the
+ * OAuth userinfo path — including the agent hub `syncUserFromBearerToken`
+ * primary sync path and any SSR / RSC code that reads the `FFIDProvider`
+ * context.
+ *
+ * `FFIDSession.hasAccess()` / `.isBlocked` / `.isGrace` cover the **session**
+ * path on the SDK consumer side. These helpers cover the **userinfo** path so
+ * callers do not re-implement the predicate inline (and silently drift apart
+ * across services), keeping FFID, SDK, and consumers on the same vocabulary.
+ *
+ * @see {@link FFIDOAuthUserInfoSubscription.effectiveStatus}
+ * @see {@link computeEffectiveStatusFromSession}
+ */
+
+/**
+ * `EffectiveSubscriptionStatus` values that grant access.
+ *
+ * Single source of truth shared with `client/ffid-client.ts` and any future
+ * caller that needs to fan in on the same access predicate. Mirrors the FFID
+ * backend constants in `src/app/api/v1/subscriptions/ext/check/route.ts`
+ * (route-local) — change there forces a sync here in the same PR.
+ */
+declare const ACCESS_GRANTING_EFFECTIVE_STATUSES: readonly EffectiveSubscriptionStatus[];
+/**
+ * `EffectiveSubscriptionStatus` values that should drive the explicit-block UI
+ * (reactivation CTA, plan picker). Disjoint from
+ * {@link ACCESS_GRANTING_EFFECTIVE_STATUSES}; `past_due_grace` is intentionally
+ * in NEITHER set so callers can render an in-grace recovery banner without
+ * tripping a "blocked screen" branch.
+ */
+declare const BLOCKING_EFFECTIVE_STATUSES: readonly EffectiveSubscriptionStatus[];
+/**
+ * Decide whether the `/oauth/userinfo` subscription summary grants access.
+ *
+ * Returns `true` iff `sub.effectiveStatus` is in
+ * {@link ACCESS_GRANTING_EFFECTIVE_STATUSES} (`active` or `past_due_grace`).
+ *
+ * Conservative fallback rules (security-critical — treat as part of the
+ * contract, not implementation detail):
+ *
+ * - `sub === undefined` → `false`. Either the granted OAuth scope omits
+ *   `subscription:read` (FFID #3380) or the caller used `verifyAccessToken`
+ *   without `includeProfile`. NEITHER means "no contract" (contractless users
+ *   hit HTTP 403 upstream). Returning `false` here forces narrow-scope
+ *   callers to fetch the data explicitly; treating `undefined` as "grant" is
+ *   a security regression.
+ * - `sub === null` → `false`. Caller has explicitly observed no subscription
+ *   summary (free / contractless user surfaced post-403). Deny.
+ * - `sub.effectiveStatus === null` → `false`. Backward-compat path for FFID
+ *   versions before #3353 that did not populate the field. The legacy `status`
+ *   field is intentionally NOT consulted: it lacks grace-window resolution, so
+ *   falling back to it would diverge from `/ext/check` and risk granting access
+ *   during dunning. Callers on legacy FFID should upgrade or call `/ext/check`
+ *   for the canonical answer.
+ *
+ * @example Allow access in a Next.js middleware
+ * ```ts
+ * import { hasAccessFromUserinfo } from '@feelflow/ffid-sdk'
+ *
+ * if (!hasAccessFromUserinfo(userinfo.subscription)) {
+ *   return NextResponse.redirect(new URL('/plans', req.url))
+ * }
+ * ```
+ */
+declare function hasAccessFromUserinfo(sub: FFIDOAuthUserInfoSubscription | null | undefined): boolean;
+/**
+ * Decide whether the `/oauth/userinfo` subscription summary is in a
+ * hard-blocked state.
+ *
+ * Returns `true` iff `sub.effectiveStatus` is in
+ * {@link BLOCKING_EFFECTIVE_STATUSES} (`blocked` / `canceled` / `expired` /
+ * `trial_expired`).
+ *
+ * **Not the negation of {@link hasAccessFromUserinfo}.** `past_due_grace`
+ * grants access AND is not blocked (callers should still surface a recovery
+ * banner). Conversely, `undefined` / `null` / `effectiveStatus === null`
+ * return `false` here — the data is missing, not "blocked". Callers that
+ * want a "should I show the blocked screen" predicate should branch on this
+ * helper; callers that want a "should I grant access" predicate should use
+ * {@link hasAccessFromUserinfo}. Treating absence as blocking here would
+ * surface the blocked UI to every narrow-scope caller.
+ *
+ * **Intentional asymmetry with `FFIDServiceAccessDecision.isBlocked`.** The
+ * `/ext/check` decision wrapper in `client/ffid-client.ts` flags absent
+ * effectiveStatus as `isBlocked: true` because it folds **access-gate
+ * results** (fail-closed: deny on unknown). This predicate flags **the
+ * "blocked screen" UI signal** (fail-open on absence: do not paint the
+ * blocked banner over a narrow-scope or legacy-FFID caller). The two live
+ * at different layers and the asymmetry is by design — pair this with
+ * {@link hasAccessFromUserinfo} when you want a complete access decision.
+ *
+ * @example Show blocked banner only on explicit block
+ * ```ts
+ * if (isBlockedFromUserinfo(userinfo.subscription)) {
+ *   return <BlockedBanner status={userinfo.subscription!.effectiveStatus!} />
+ * }
+ * ```
+ */
+declare function isBlockedFromUserinfo(sub: FFIDOAuthUserInfoSubscription | null | undefined): boolean;
+
 /**
  * FFID Announcements API Client
  *
@@ -1208,4 +1312,4 @@ declare function createInquiryMethods(deps: InquiryMethodsDeps): {
 };
 type FFIDInquiryClient = ReturnType<typeof createInquiryMethods>;
 
-export { AnnouncementListResponse, type ComputeEffectiveStatusInput, type ContractWizardFlowType, type ContractWizardResubscribeOptions, type ContractWizardSubscribeOptions, type ContractWizardSubscriptionOptions, DEFAULT_API_BASE_URL, DEFAULT_OAUTH_SCOPES, EffectiveSubscriptionStatus, FFIDAddMemberParams, FFIDAddMemberRequest, FFIDAddMemberResponse, FFIDAnnouncementsApiResponse, type FFIDAnnouncementsClient, FFIDAnnouncementsClientConfig, FFIDAnnouncementsLogger, FFIDApiResponse, type FFIDBillingInterval, FFIDCacheAdapter, type FFIDCancelPendingDowngradeResponse, type FFIDCancelSubscriptionParams, type FFIDCancelSubscriptionResponse, type FFIDChangePlanParams, type FFIDChangePlanResponse, FFIDCheckServiceAccessParams, FFIDCheckoutSessionResponse, type FFIDClient, FFIDConfig, FFIDCreateCheckoutParams, FFIDCreatePortalParams, FFIDError, type FFIDInquiryClient, FFIDInquiryCreateParams, FFIDInquiryCreateResponse, FFIDListMembersResponse, type FFIDListPlansResponse, FFIDLogger, FFIDMemberRole, type FFIDNewsletterBodySource, type FFIDNewsletterCampaignStatus, type FFIDNewsletterClient, type FFIDNewsletterConfirmParams, type FFIDNewsletterConfirmResponse, type FFIDNewsletterDispatchParams, type FFIDNewsletterDispatchResponse, type FFIDNewsletterSegment, type FFIDNewsletterSubscribeParams, type FFIDNewsletterSubscribeResponse, type FFIDNewsletterType, type FFIDNewsletterUnsubscribeParams, type FFIDNewsletterUnsubscribeResponse, FFIDOAuthUserInfo, FFIDOrganization, type FFIDOtpSendResponse, type FFIDOtpVerifyResponse, type FFIDPasswordResetConfirmResponse, type FFIDPasswordResetResponse, type FFIDPasswordResetVerifyResponse, type FFIDPlanChangeLineItem, type FFIDPlanChangePreview, type FFIDPlanChangePreviewResponse, type FFIDPlanInfo, FFIDPortalSessionResponse, type FFIDPreviewPlanChangeParams, type FFIDPreviewSeatChangeParams, FFIDProfileCallOptions, FFIDProvider, type FFIDProviderProps, FFIDRedirectResult, FFIDRemoveMemberResponse, type FFIDResetSessionResponse, FFIDSDKError, type FFIDSeatChangeLineItem, type FFIDSeatChangePreview, type FFIDSeatChangePreviewResponse, FFIDServiceAccessDecision, type FFIDServiceInfo, FFIDSessionResponse, type FFIDSubscribeParams, type FFIDSubscribeResponse, FFIDSubscription, FFIDSubscriptionCheckResponse, FFIDSubscriptionContextValue, type FFIDSubscriptionDetail, FFIDSubscriptionStatus, type FFIDSubscriptionSummary, type FFIDSupportedCurrency, FFIDUpdateMemberRoleResponse, FFIDUpdateUserProfileRequest, FFIDUser, FFIDUserProfile, FFIDVerifyAccessTokenOptions, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_NEWSLETTER_DISPATCH_MAX_RECIPIENTS, FFID_NEWSLETTER_TYPES, type KVNamespaceLike, ListAnnouncementsOptions, type NormalizeRedirectUriResult, type RedirectToAuthorizeOptions, type TokenData, type TokenStore, type UseFFIDReturn, type UseRequireActiveSubscriptionOptions, type UseRequireActiveSubscriptionReturn, type WithFFIDAuthOptions, type WithSubscriptionOptions, computeEffectiveStatusFromSession, createFFIDAnnouncementsClient, createFFIDClient, createKVCacheAdapter, createMemoryCacheAdapter, createTokenStore, generateCodeChallenge, generateCodeVerifier, normalizeRedirectUri, retrieveCodeVerifier, storeCodeVerifier, useFFID, useRequireActiveSubscription, useSubscription, withFFIDAuth, withSubscription };
+export { ACCESS_GRANTING_EFFECTIVE_STATUSES, AnnouncementListResponse, BLOCKING_EFFECTIVE_STATUSES, type ComputeEffectiveStatusInput, type ContractWizardFlowType, type ContractWizardResubscribeOptions, type ContractWizardSubscribeOptions, type ContractWizardSubscriptionOptions, DEFAULT_API_BASE_URL, DEFAULT_OAUTH_SCOPES, EffectiveSubscriptionStatus, FFIDAddMemberParams, FFIDAddMemberRequest, FFIDAddMemberResponse, FFIDAnnouncementsApiResponse, type FFIDAnnouncementsClient, FFIDAnnouncementsClientConfig, FFIDAnnouncementsLogger, FFIDApiResponse, type FFIDBillingInterval, FFIDCacheAdapter, type FFIDCancelPendingDowngradeResponse, type FFIDCancelSubscriptionParams, type FFIDCancelSubscriptionResponse, type FFIDChangePlanParams, type FFIDChangePlanResponse, FFIDCheckServiceAccessParams, FFIDCheckoutSessionResponse, type FFIDClient, FFIDConfig, FFIDCreateCheckoutParams, FFIDCreatePortalParams, FFIDError, type FFIDInquiryClient, FFIDInquiryCreateParams, FFIDInquiryCreateResponse, FFIDListMembersResponse, type FFIDListPlansResponse, FFIDLogger, FFIDMemberRole, type FFIDNewsletterBodySource, type FFIDNewsletterCampaignStatus, type FFIDNewsletterClient, type FFIDNewsletterConfirmParams, type FFIDNewsletterConfirmResponse, type FFIDNewsletterDispatchParams, type FFIDNewsletterDispatchResponse, type FFIDNewsletterSegment, type FFIDNewsletterSubscribeParams, type FFIDNewsletterSubscribeResponse, type FFIDNewsletterType, type FFIDNewsletterUnsubscribeParams, type FFIDNewsletterUnsubscribeResponse, FFIDOAuthUserInfo, FFIDOAuthUserInfoSubscription, FFIDOrganization, type FFIDOtpSendResponse, type FFIDOtpVerifyResponse, type FFIDPasswordResetConfirmResponse, type FFIDPasswordResetResponse, type FFIDPasswordResetVerifyResponse, type FFIDPlanChangeLineItem, type FFIDPlanChangePreview, type FFIDPlanChangePreviewResponse, type FFIDPlanInfo, FFIDPortalSessionResponse, type FFIDPreviewPlanChangeParams, type FFIDPreviewSeatChangeParams, FFIDProfileCallOptions, FFIDProvider, type FFIDProviderProps, FFIDRedirectResult, FFIDRemoveMemberResponse, type FFIDResetSessionResponse, FFIDSDKError, type FFIDSeatChangeLineItem, type FFIDSeatChangePreview, type FFIDSeatChangePreviewResponse, FFIDServiceAccessDecision, type FFIDServiceInfo, FFIDSessionResponse, type FFIDSubscribeParams, type FFIDSubscribeResponse, FFIDSubscription, FFIDSubscriptionCheckResponse, FFIDSubscriptionContextValue, type FFIDSubscriptionDetail, FFIDSubscriptionStatus, type FFIDSubscriptionSummary, type FFIDSupportedCurrency, FFIDUpdateMemberRoleResponse, FFIDUpdateUserProfileRequest, FFIDUser, FFIDUserProfile, FFIDVerifyAccessTokenOptions, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_NEWSLETTER_DISPATCH_MAX_RECIPIENTS, FFID_NEWSLETTER_TYPES, type KVNamespaceLike, ListAnnouncementsOptions, type NormalizeRedirectUriResult, type RedirectToAuthorizeOptions, type TokenData, type TokenStore, type UseFFIDReturn, type UseRequireActiveSubscriptionOptions, type UseRequireActiveSubscriptionReturn, type WithFFIDAuthOptions, type WithSubscriptionOptions, computeEffectiveStatusFromSession, createFFIDAnnouncementsClient, createFFIDClient, createKVCacheAdapter, createMemoryCacheAdapter, createTokenStore, generateCodeChallenge, generateCodeVerifier, hasAccessFromUserinfo, isBlockedFromUserinfo, normalizeRedirectUri, retrieveCodeVerifier, storeCodeVerifier, useFFID, useRequireActiveSubscription, useSubscription, withFFIDAuth, withSubscription };

package/dist/index.d.ts

@@ -1,6 +1,6 @@
-import { F as FFIDSubscriptionStatus, a as FFIDConfig, b as FFIDApiResponse, c as FFIDSessionResponse, d as FFIDRedirectResult, e as FFIDError, f as FFIDSubscriptionCheckResponse, g as FFIDCheckServiceAccessParams, h as FFIDServiceAccessDecision, i as FFIDListMembersResponse, j as FFIDAddMemberParams, k as FFIDAddMemberResponse, l as FFIDAddMemberRequest, m as FFIDMemberRole, n as FFIDUpdateMemberRoleResponse, o as FFIDRemoveMemberResponse, p as FFIDProfileCallOptions, q as FFIDUserProfile, r as FFIDUpdateUserProfileRequest, s as FFIDAnalyticsConfig, t as FFIDCreateCheckoutParams, u as FFIDCheckoutSessionResponse, v as FFIDCreatePortalParams, w as FFIDPortalSessionResponse, x as FFIDVerifyAccessTokenOptions, y as FFIDOAuthUserInfo, z as FFIDInquiryCreateParams, A as FFIDInquiryCreateResponse, B as FFIDAuthMode, C as FFIDLogger, D as FFIDCacheAdapter, E as FFIDUser, G as FFIDOrganization, H as FFIDSubscription, I as FFIDSubscriptionContextValue, J as EffectiveSubscriptionStatus, K as FFIDAnnouncementsClientConfig, L as ListAnnouncementsOptions, M as FFIDAnnouncementsApiResponse, N as AnnouncementListResponse, O as FFIDAnnouncementsLogger } from './index-DfnHXRMX.js';
-export { P as Announcement, Q as AnnouncementStatus, R as AnnouncementType, S as FFIDAnnouncementBadge, T as FFIDAnnouncementList, U as FFIDAnnouncementsError, V as FFIDAnnouncementsErrorCode, W as FFIDAnnouncementsServerResponse, X as FFIDAssignableMemberRole, Y as FFIDCacheConfig, Z as FFIDContextValue, _ as FFIDInquiryCategory, $ as FFIDInquiryCategorySite2026, a0 as FFIDInquiryForm, a1 as FFIDInquiryFormCategoryItem, a2 as FFIDInquiryFormClassNames, a3 as FFIDInquiryFormLegalLayout, a4 as FFIDInquiryFormOrganization, a5 as FFIDInquiryFormPlaceholderContext, a6 as FFIDInquiryFormPrefill, a7 as FFIDInquiryFormProps, a8 as FFIDInquiryFormSubmitData, a9 as FFIDInquiryFormSubmitResult, aa as FFIDJwtClaims, ab as FFIDLoginButton, ac as FFIDMemberStatus, ad as FFIDOAuthTokenResponse, ae as FFIDOAuthUserInfoMemberRole, af as FFIDOAuthUserInfoSubscription, ag as FFIDOrganizationMember, ah as FFIDOrganizationSwitcher, ai as FFIDRedirectErrorCode, aj as FFIDSeatModel, ak as FFIDServiceAccessDenialReason, al as FFIDServiceAccessFailPolicy, am as FFIDSubscriptionBadge, an as FFIDTokenIntrospectionResponse, ao as FFIDUserMenu, ap as FFID_INQUIRY_CATEGORIES, aq as FFID_INQUIRY_CATEGORIES_SITE_2026, ar as UseFFIDAnnouncementsOptions, as as UseFFIDAnnouncementsReturn, at as isFFIDInquiryCategorySite2026, au as useFFIDAnnouncements } from './index-DfnHXRMX.js';
-export { A as ALL_DENIED_EXCEPT_NECESSARY, i as CONSENT_COOKIE_NAME, j as CONSENT_DISMISSAL_TIMESTAMP_KEY, l as COOKIE_VERSION, D as DEFAULT_CONSENT_ERROR_MESSAGES, o as FFIDAnalyticsProvider, p as FFIDAnalyticsProviderProps, c as FFIDConsentCategories, r as FFIDConsentCategoryCode, e as FFIDConsentCategoryMetadata, w as FFIDConsentError, x as FFIDConsentErrorCode, y as FFIDConsentMergeStrategy, B as FFIDConsentMergeWarning, E as FFIDConsentMergeWarningEvent, F as FFIDConsentResult, I as FFIDConsentSource, a as FFIDConsentState, d as FFIDConsentSyncResult, M as FFIDCookieBanner, N as FFIDCookieBannerClassNames, O as FFIDCookieBannerProps, Q as FFIDCookieLink, R as FFIDCookieLinkProps, f as FFIDCookiePolicy, T as FFIDCookieSettings, U as FFIDCookieSettingsClassNames, V as FFIDCookieSettingsProps, _ as FFID_CONSENT_ERROR_CODES, ae as UseFFIDConsentPreferencesReturn, af as UseFFIDConsentReturn, ag as clearConsentDismissalTimestamp, aj as decodeConsentCookie, al as encodeConsentCookie, an as readConsentCookie, ao as readConsentDismissalTimestamp, aq as useFFIDConsent, ar as useFFIDConsentPreferences, as as writeConsentCookie, at as writeConsentDismissalTimestamp } from './FFIDCookieLink-Bt0f1gyo.js';
+import { F as FFIDSubscriptionStatus, a as FFIDConfig, b as FFIDApiResponse, c as FFIDSessionResponse, d as FFIDRedirectResult, e as FFIDError, f as FFIDSubscriptionCheckResponse, g as FFIDCheckServiceAccessParams, h as FFIDServiceAccessDecision, i as FFIDListMembersResponse, j as FFIDAddMemberParams, k as FFIDAddMemberResponse, l as FFIDAddMemberRequest, m as FFIDMemberRole, n as FFIDUpdateMemberRoleResponse, o as FFIDRemoveMemberResponse, p as FFIDProfileCallOptions, q as FFIDUserProfile, r as FFIDUpdateUserProfileRequest, s as FFIDAnalyticsConfig, t as FFIDCreateCheckoutParams, u as FFIDCheckoutSessionResponse, v as FFIDCreatePortalParams, w as FFIDPortalSessionResponse, x as FFIDVerifyAccessTokenOptions, y as FFIDOAuthUserInfo, z as FFIDInquiryCreateParams, A as FFIDInquiryCreateResponse, B as FFIDAuthMode, C as FFIDLogger, D as FFIDCacheAdapter, E as FFIDUser, G as FFIDOrganization, H as FFIDSubscription, I as FFIDSubscriptionContextValue, J as EffectiveSubscriptionStatus, K as FFIDOAuthUserInfoSubscription, L as FFIDAnnouncementsClientConfig, M as ListAnnouncementsOptions, N as FFIDAnnouncementsApiResponse, O as AnnouncementListResponse, P as FFIDAnnouncementsLogger } from './index-lAvUS_oz.js';
+export { Q as Announcement, R as AnnouncementStatus, S as AnnouncementType, T as FFIDAnnouncementBadge, U as FFIDAnnouncementList, V as FFIDAnnouncementsError, W as FFIDAnnouncementsErrorCode, X as FFIDAnnouncementsServerResponse, Y as FFIDAssignableMemberRole, Z as FFIDCacheConfig, _ as FFIDContextValue, $ as FFIDInquiryCategory, a0 as FFIDInquiryCategorySite2026, a1 as FFIDInquiryForm, a2 as FFIDInquiryFormCategoryItem, a3 as FFIDInquiryFormClassNames, a4 as FFIDInquiryFormLegalLayout, a5 as FFIDInquiryFormOrganization, a6 as FFIDInquiryFormPlaceholderContext, a7 as FFIDInquiryFormPrefill, a8 as FFIDInquiryFormProps, a9 as FFIDInquiryFormSubmitData, aa as FFIDInquiryFormSubmitResult, ab as FFIDJwtClaims, ac as FFIDLoginButton, ad as FFIDMemberStatus, ae as FFIDOAuthTokenResponse, af as FFIDOAuthUserInfoMemberRole, ag as FFIDOrganizationMember, ah as FFIDOrganizationSwitcher, ai as FFIDRedirectErrorCode, aj as FFIDSeatModel, ak as FFIDServiceAccessDenialReason, al as FFIDServiceAccessFailPolicy, am as FFIDSubscriptionBadge, an as FFIDTokenIntrospectionResponse, ao as FFIDUserMenu, ap as FFID_INQUIRY_CATEGORIES, aq as FFID_INQUIRY_CATEGORIES_SITE_2026, ar as UseFFIDAnnouncementsOptions, as as UseFFIDAnnouncementsReturn, at as isFFIDInquiryCategorySite2026, au as useFFIDAnnouncements } from './index-lAvUS_oz.js';
+export { A as ALL_DENIED_EXCEPT_NECESSARY, i as CONSENT_COOKIE_NAME, j as CONSENT_DISMISSAL_TIMESTAMP_KEY, l as COOKIE_VERSION, D as DEFAULT_CONSENT_ERROR_MESSAGES, o as FFIDAnalyticsProvider, p as FFIDAnalyticsProviderProps, c as FFIDConsentCategories, r as FFIDConsentCategoryCode, e as FFIDConsentCategoryMetadata, w as FFIDConsentError, x as FFIDConsentErrorCode, y as FFIDConsentMergeStrategy, B as FFIDConsentMergeWarning, E as FFIDConsentMergeWarningEvent, F as FFIDConsentResult, I as FFIDConsentSource, a as FFIDConsentState, d as FFIDConsentSyncResult, M as FFIDCookieBanner, N as FFIDCookieBannerClassNames, O as FFIDCookieBannerProps, Q as FFIDCookieLink, R as FFIDCookieLinkProps, f as FFIDCookiePolicy, T as FFIDCookieSettings, U as FFIDCookieSettingsClassNames, V as FFIDCookieSettingsProps, _ as FFID_CONSENT_ERROR_CODES, ae as UseFFIDConsentPreferencesReturn, af as UseFFIDConsentReturn, ag as clearConsentDismissalTimestamp, aj as decodeConsentCookie, al as encodeConsentCookie, an as readConsentCookie, ao as readConsentDismissalTimestamp, aq as useFFIDConsent, ar as useFFIDConsentPreferences, as as writeConsentCookie, at as writeConsentDismissalTimestamp } from './FFIDCookieLink-CE01gYc4.js';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode, ComponentType, FC } from 'react';
 import 'zod';
@@ -1045,6 +1045,110 @@ interface ComputeEffectiveStatusInput {
  */
 declare function computeEffectiveStatusFromSession(input: ComputeEffectiveStatusInput, nowMs?: number): EffectiveSubscriptionStatus;
 
+/**
+ * Access-control predicates for the `/oauth/userinfo` subscription blob.
+ *
+ * `FFIDOAuthUserInfo.subscription.effectiveStatus` (added in SDK 5.3.0 / FFID
+ * #3353) is the canonical access-control signal for callers that consume the
+ * OAuth userinfo path — including the agent hub `syncUserFromBearerToken`
+ * primary sync path and any SSR / RSC code that reads the `FFIDProvider`
+ * context.
+ *
+ * `FFIDSession.hasAccess()` / `.isBlocked` / `.isGrace` cover the **session**
+ * path on the SDK consumer side. These helpers cover the **userinfo** path so
+ * callers do not re-implement the predicate inline (and silently drift apart
+ * across services), keeping FFID, SDK, and consumers on the same vocabulary.
+ *
+ * @see {@link FFIDOAuthUserInfoSubscription.effectiveStatus}
+ * @see {@link computeEffectiveStatusFromSession}
+ */
+
+/**
+ * `EffectiveSubscriptionStatus` values that grant access.
+ *
+ * Single source of truth shared with `client/ffid-client.ts` and any future
+ * caller that needs to fan in on the same access predicate. Mirrors the FFID
+ * backend constants in `src/app/api/v1/subscriptions/ext/check/route.ts`
+ * (route-local) — change there forces a sync here in the same PR.
+ */
+declare const ACCESS_GRANTING_EFFECTIVE_STATUSES: readonly EffectiveSubscriptionStatus[];
+/**
+ * `EffectiveSubscriptionStatus` values that should drive the explicit-block UI
+ * (reactivation CTA, plan picker). Disjoint from
+ * {@link ACCESS_GRANTING_EFFECTIVE_STATUSES}; `past_due_grace` is intentionally
+ * in NEITHER set so callers can render an in-grace recovery banner without
+ * tripping a "blocked screen" branch.
+ */
+declare const BLOCKING_EFFECTIVE_STATUSES: readonly EffectiveSubscriptionStatus[];
+/**
+ * Decide whether the `/oauth/userinfo` subscription summary grants access.
+ *
+ * Returns `true` iff `sub.effectiveStatus` is in
+ * {@link ACCESS_GRANTING_EFFECTIVE_STATUSES} (`active` or `past_due_grace`).
+ *
+ * Conservative fallback rules (security-critical — treat as part of the
+ * contract, not implementation detail):
+ *
+ * - `sub === undefined` → `false`. Either the granted OAuth scope omits
+ *   `subscription:read` (FFID #3380) or the caller used `verifyAccessToken`
+ *   without `includeProfile`. NEITHER means "no contract" (contractless users
+ *   hit HTTP 403 upstream). Returning `false` here forces narrow-scope
+ *   callers to fetch the data explicitly; treating `undefined` as "grant" is
+ *   a security regression.
+ * - `sub === null` → `false`. Caller has explicitly observed no subscription
+ *   summary (free / contractless user surfaced post-403). Deny.
+ * - `sub.effectiveStatus === null` → `false`. Backward-compat path for FFID
+ *   versions before #3353 that did not populate the field. The legacy `status`
+ *   field is intentionally NOT consulted: it lacks grace-window resolution, so
+ *   falling back to it would diverge from `/ext/check` and risk granting access
+ *   during dunning. Callers on legacy FFID should upgrade or call `/ext/check`
+ *   for the canonical answer.
+ *
+ * @example Allow access in a Next.js middleware
+ * ```ts
+ * import { hasAccessFromUserinfo } from '@feelflow/ffid-sdk'
+ *
+ * if (!hasAccessFromUserinfo(userinfo.subscription)) {
+ *   return NextResponse.redirect(new URL('/plans', req.url))
+ * }
+ * ```
+ */
+declare function hasAccessFromUserinfo(sub: FFIDOAuthUserInfoSubscription | null | undefined): boolean;
+/**
+ * Decide whether the `/oauth/userinfo` subscription summary is in a
+ * hard-blocked state.
+ *
+ * Returns `true` iff `sub.effectiveStatus` is in
+ * {@link BLOCKING_EFFECTIVE_STATUSES} (`blocked` / `canceled` / `expired` /
+ * `trial_expired`).
+ *
+ * **Not the negation of {@link hasAccessFromUserinfo}.** `past_due_grace`
+ * grants access AND is not blocked (callers should still surface a recovery
+ * banner). Conversely, `undefined` / `null` / `effectiveStatus === null`
+ * return `false` here — the data is missing, not "blocked". Callers that
+ * want a "should I show the blocked screen" predicate should branch on this
+ * helper; callers that want a "should I grant access" predicate should use
+ * {@link hasAccessFromUserinfo}. Treating absence as blocking here would
+ * surface the blocked UI to every narrow-scope caller.
+ *
+ * **Intentional asymmetry with `FFIDServiceAccessDecision.isBlocked`.** The
+ * `/ext/check` decision wrapper in `client/ffid-client.ts` flags absent
+ * effectiveStatus as `isBlocked: true` because it folds **access-gate
+ * results** (fail-closed: deny on unknown). This predicate flags **the
+ * "blocked screen" UI signal** (fail-open on absence: do not paint the
+ * blocked banner over a narrow-scope or legacy-FFID caller). The two live
+ * at different layers and the asymmetry is by design — pair this with
+ * {@link hasAccessFromUserinfo} when you want a complete access decision.
+ *
+ * @example Show blocked banner only on explicit block
+ * ```ts
+ * if (isBlockedFromUserinfo(userinfo.subscription)) {
+ *   return <BlockedBanner status={userinfo.subscription!.effectiveStatus!} />
+ * }
+ * ```
+ */
+declare function isBlockedFromUserinfo(sub: FFIDOAuthUserInfoSubscription | null | undefined): boolean;
+
 /**
  * FFID Announcements API Client
  *
@@ -1208,4 +1312,4 @@ declare function createInquiryMethods(deps: InquiryMethodsDeps): {
 };
 type FFIDInquiryClient = ReturnType<typeof createInquiryMethods>;
 
-export { AnnouncementListResponse, type ComputeEffectiveStatusInput, type ContractWizardFlowType, type ContractWizardResubscribeOptions, type ContractWizardSubscribeOptions, type ContractWizardSubscriptionOptions, DEFAULT_API_BASE_URL, DEFAULT_OAUTH_SCOPES, EffectiveSubscriptionStatus, FFIDAddMemberParams, FFIDAddMemberRequest, FFIDAddMemberResponse, FFIDAnnouncementsApiResponse, type FFIDAnnouncementsClient, FFIDAnnouncementsClientConfig, FFIDAnnouncementsLogger, FFIDApiResponse, type FFIDBillingInterval, FFIDCacheAdapter, type FFIDCancelPendingDowngradeResponse, type FFIDCancelSubscriptionParams, type FFIDCancelSubscriptionResponse, type FFIDChangePlanParams, type FFIDChangePlanResponse, FFIDCheckServiceAccessParams, FFIDCheckoutSessionResponse, type FFIDClient, FFIDConfig, FFIDCreateCheckoutParams, FFIDCreatePortalParams, FFIDError, type FFIDInquiryClient, FFIDInquiryCreateParams, FFIDInquiryCreateResponse, FFIDListMembersResponse, type FFIDListPlansResponse, FFIDLogger, FFIDMemberRole, type FFIDNewsletterBodySource, type FFIDNewsletterCampaignStatus, type FFIDNewsletterClient, type FFIDNewsletterConfirmParams, type FFIDNewsletterConfirmResponse, type FFIDNewsletterDispatchParams, type FFIDNewsletterDispatchResponse, type FFIDNewsletterSegment, type FFIDNewsletterSubscribeParams, type FFIDNewsletterSubscribeResponse, type FFIDNewsletterType, type FFIDNewsletterUnsubscribeParams, type FFIDNewsletterUnsubscribeResponse, FFIDOAuthUserInfo, FFIDOrganization, type FFIDOtpSendResponse, type FFIDOtpVerifyResponse, type FFIDPasswordResetConfirmResponse, type FFIDPasswordResetResponse, type FFIDPasswordResetVerifyResponse, type FFIDPlanChangeLineItem, type FFIDPlanChangePreview, type FFIDPlanChangePreviewResponse, type FFIDPlanInfo, FFIDPortalSessionResponse, type FFIDPreviewPlanChangeParams, type FFIDPreviewSeatChangeParams, FFIDProfileCallOptions, FFIDProvider, type FFIDProviderProps, FFIDRedirectResult, FFIDRemoveMemberResponse, type FFIDResetSessionResponse, FFIDSDKError, type FFIDSeatChangeLineItem, type FFIDSeatChangePreview, type FFIDSeatChangePreviewResponse, FFIDServiceAccessDecision, type FFIDServiceInfo, FFIDSessionResponse, type FFIDSubscribeParams, type FFIDSubscribeResponse, FFIDSubscription, FFIDSubscriptionCheckResponse, FFIDSubscriptionContextValue, type FFIDSubscriptionDetail, FFIDSubscriptionStatus, type FFIDSubscriptionSummary, type FFIDSupportedCurrency, FFIDUpdateMemberRoleResponse, FFIDUpdateUserProfileRequest, FFIDUser, FFIDUserProfile, FFIDVerifyAccessTokenOptions, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_NEWSLETTER_DISPATCH_MAX_RECIPIENTS, FFID_NEWSLETTER_TYPES, type KVNamespaceLike, ListAnnouncementsOptions, type NormalizeRedirectUriResult, type RedirectToAuthorizeOptions, type TokenData, type TokenStore, type UseFFIDReturn, type UseRequireActiveSubscriptionOptions, type UseRequireActiveSubscriptionReturn, type WithFFIDAuthOptions, type WithSubscriptionOptions, computeEffectiveStatusFromSession, createFFIDAnnouncementsClient, createFFIDClient, createKVCacheAdapter, createMemoryCacheAdapter, createTokenStore, generateCodeChallenge, generateCodeVerifier, normalizeRedirectUri, retrieveCodeVerifier, storeCodeVerifier, useFFID, useRequireActiveSubscription, useSubscription, withFFIDAuth, withSubscription };
+export { ACCESS_GRANTING_EFFECTIVE_STATUSES, AnnouncementListResponse, BLOCKING_EFFECTIVE_STATUSES, type ComputeEffectiveStatusInput, type ContractWizardFlowType, type ContractWizardResubscribeOptions, type ContractWizardSubscribeOptions, type ContractWizardSubscriptionOptions, DEFAULT_API_BASE_URL, DEFAULT_OAUTH_SCOPES, EffectiveSubscriptionStatus, FFIDAddMemberParams, FFIDAddMemberRequest, FFIDAddMemberResponse, FFIDAnnouncementsApiResponse, type FFIDAnnouncementsClient, FFIDAnnouncementsClientConfig, FFIDAnnouncementsLogger, FFIDApiResponse, type FFIDBillingInterval, FFIDCacheAdapter, type FFIDCancelPendingDowngradeResponse, type FFIDCancelSubscriptionParams, type FFIDCancelSubscriptionResponse, type FFIDChangePlanParams, type FFIDChangePlanResponse, FFIDCheckServiceAccessParams, FFIDCheckoutSessionResponse, type FFIDClient, FFIDConfig, FFIDCreateCheckoutParams, FFIDCreatePortalParams, FFIDError, type FFIDInquiryClient, FFIDInquiryCreateParams, FFIDInquiryCreateResponse, FFIDListMembersResponse, type FFIDListPlansResponse, FFIDLogger, FFIDMemberRole, type FFIDNewsletterBodySource, type FFIDNewsletterCampaignStatus, type FFIDNewsletterClient, type FFIDNewsletterConfirmParams, type FFIDNewsletterConfirmResponse, type FFIDNewsletterDispatchParams, type FFIDNewsletterDispatchResponse, type FFIDNewsletterSegment, type FFIDNewsletterSubscribeParams, type FFIDNewsletterSubscribeResponse, type FFIDNewsletterType, type FFIDNewsletterUnsubscribeParams, type FFIDNewsletterUnsubscribeResponse, FFIDOAuthUserInfo, FFIDOAuthUserInfoSubscription, FFIDOrganization, type FFIDOtpSendResponse, type FFIDOtpVerifyResponse, type FFIDPasswordResetConfirmResponse, type FFIDPasswordResetResponse, type FFIDPasswordResetVerifyResponse, type FFIDPlanChangeLineItem, type FFIDPlanChangePreview, type FFIDPlanChangePreviewResponse, type FFIDPlanInfo, FFIDPortalSessionResponse, type FFIDPreviewPlanChangeParams, type FFIDPreviewSeatChangeParams, FFIDProfileCallOptions, FFIDProvider, type FFIDProviderProps, FFIDRedirectResult, FFIDRemoveMemberResponse, type FFIDResetSessionResponse, FFIDSDKError, type FFIDSeatChangeLineItem, type FFIDSeatChangePreview, type FFIDSeatChangePreviewResponse, FFIDServiceAccessDecision, type FFIDServiceInfo, FFIDSessionResponse, type FFIDSubscribeParams, type FFIDSubscribeResponse, FFIDSubscription, FFIDSubscriptionCheckResponse, FFIDSubscriptionContextValue, type FFIDSubscriptionDetail, FFIDSubscriptionStatus, type FFIDSubscriptionSummary, type FFIDSupportedCurrency, FFIDUpdateMemberRoleResponse, FFIDUpdateUserProfileRequest, FFIDUser, FFIDUserProfile, FFIDVerifyAccessTokenOptions, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_NEWSLETTER_DISPATCH_MAX_RECIPIENTS, FFID_NEWSLETTER_TYPES, type KVNamespaceLike, ListAnnouncementsOptions, type NormalizeRedirectUriResult, type RedirectToAuthorizeOptions, type TokenData, type TokenStore, type UseFFIDReturn, type UseRequireActiveSubscriptionOptions, type UseRequireActiveSubscriptionReturn, type WithFFIDAuthOptions, type WithSubscriptionOptions, computeEffectiveStatusFromSession, createFFIDAnnouncementsClient, createFFIDClient, createKVCacheAdapter, createMemoryCacheAdapter, createTokenStore, generateCodeChallenge, generateCodeVerifier, hasAccessFromUserinfo, isBlockedFromUserinfo, normalizeRedirectUri, retrieveCodeVerifier, storeCodeVerifier, useFFID, useRequireActiveSubscription, useSubscription, withFFIDAuth, withSubscription };

package/dist/index.js

@@ -1,6 +1,6 @@
-import { useFFIDContext, useSubscription } from './chunk-ARKFHB72.js';
-export { DEFAULT_API_BASE_URL, DEFAULT_OAUTH_SCOPES, FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDProvider, FFIDSDKError, FFIDSubscriptionBadge, FFIDUserMenu, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_INQUIRY_CATEGORIES, FFID_INQUIRY_CATEGORIES_SITE_2026, computeEffectiveStatusFromSession, createFFIDAnnouncementsClient, createFFIDClient, createTokenStore, generateCodeChallenge, generateCodeVerifier, isFFIDInquiryCategorySite2026, normalizeRedirectUri, retrieveCodeVerifier, storeCodeVerifier, useFFID, useFFIDAnnouncements, useSubscription, withSubscription } from './chunk-ARKFHB72.js';
-export { ALL_DENIED_EXCEPT_NECESSARY, CONSENT_COOKIE_NAME, CONSENT_DISMISSAL_TIMESTAMP_KEY, COOKIE_VERSION, DEFAULT_CONSENT_ERROR_MESSAGES, FFIDAnalyticsProvider, FFIDConsentError, FFIDCookieBanner, FFIDCookieLink, FFIDCookieSettings, FFID_CONSENT_ERROR_CODES, clearConsentDismissalTimestamp, decodeConsentCookie, encodeConsentCookie, readConsentCookie, readConsentDismissalTimestamp, useFFIDConsent, useFFIDConsentPreferences, writeConsentCookie, writeConsentDismissalTimestamp } from './chunk-IVKFKMLQ.js';
+import { useFFIDContext, useSubscription } from './chunk-WNYMSUHN.js';
+export { ACCESS_GRANTING_EFFECTIVE_STATUSES, BLOCKING_EFFECTIVE_STATUSES, DEFAULT_API_BASE_URL, DEFAULT_OAUTH_SCOPES, FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDProvider, FFIDSDKError, FFIDSubscriptionBadge, FFIDUserMenu, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_INQUIRY_CATEGORIES, FFID_INQUIRY_CATEGORIES_SITE_2026, computeEffectiveStatusFromSession, createFFIDAnnouncementsClient, createFFIDClient, createTokenStore, generateCodeChallenge, generateCodeVerifier, hasAccessFromUserinfo, isBlockedFromUserinfo, isFFIDInquiryCategorySite2026, normalizeRedirectUri, retrieveCodeVerifier, storeCodeVerifier, useFFID, useFFIDAnnouncements, useSubscription, withSubscription } from './chunk-WNYMSUHN.js';
+export { ALL_DENIED_EXCEPT_NECESSARY, CONSENT_COOKIE_NAME, CONSENT_DISMISSAL_TIMESTAMP_KEY, COOKIE_VERSION, DEFAULT_CONSENT_ERROR_MESSAGES, FFIDAnalyticsProvider, FFIDConsentError, FFIDCookieBanner, FFIDCookieLink, FFIDCookieSettings, FFID_CONSENT_ERROR_CODES, clearConsentDismissalTimestamp, decodeConsentCookie, encodeConsentCookie, readConsentCookie, readConsentDismissalTimestamp, useFFIDConsent, useFFIDConsentPreferences, writeConsentCookie, writeConsentDismissalTimestamp } from './chunk-KJ7FUNA6.js';
 import { useEffect, useRef } from 'react';
 import { jsx, Fragment } from 'react/jsx-runtime';