@feelflow/ffid-sdk 5.5.0 → 5.7.0

package/dist/server/index.cjs

@@ -837,7 +837,7 @@ function createProfileMethods(deps) {
 }
 
 // src/client/version-check.ts
-var SDK_VERSION = "5.5.0";
+var SDK_VERSION = "5.7.0";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {
@@ -2190,6 +2190,7 @@ function createInquiryMethods(deps) {
 // src/subscriptions/userinfo-helpers.ts
 var ACCESS_GRANTING_EFFECTIVE_STATUSES = [
   "active",
+  "active_canceling",
   "past_due_grace"
 ];
 var BLOCKING_EFFECTIVE_STATUSES = [
@@ -2229,6 +2230,12 @@ var EXT_CHECK_ENDPOINT = "/api/v1/subscriptions/ext/check";
 var DEFAULT_ALLOW_GRACE = true;
 var DEFAULT_SERVICE_ACCESS_FAIL_POLICY = "failClosed";
 var SERVICE_ACCESS_DENIED_CODE = "SERVICE_ACCESS_DENIED";
+var DENIAL_REASON_BY_DENYING_STATUS = {
+  blocked: "blocked",
+  canceled: "canceled",
+  expired: "expired",
+  trial_expired: "trial_expired"
+};
 function resolveServiceAccessDenialReason(params, allowGrace) {
   if (params.hasAccess) {
     return null;
@@ -2239,10 +2246,10 @@ function resolveServiceAccessDenialReason(params, allowGrace) {
   if (params.isGrace && !allowGrace) {
     return "grace_disallowed";
   }
-  if (params.effectiveStatus === "active" || params.effectiveStatus === "past_due_grace") {
+  if (ACCESS_GRANTING_EFFECTIVE_STATUSES.includes(params.effectiveStatus)) {
     return "blocked";
   }
-  return params.effectiveStatus;
+  return DENIAL_REASON_BY_DENYING_STATUS[params.effectiveStatus];
 }
 function toServiceAccessDecision(response, allowGrace) {
   const effectiveStatus = response.effectiveStatus ?? null;

package/dist/server/index.d.cts

@@ -1,8 +1,8 @@
-import { F as FFIDLogger, a as FFIDError, b as FFIDCacheAdapter, c as FFIDVerifyAccessTokenOptions, d as FFIDApiResponse, e as FFIDOAuthUserInfo } from '../ffid-client-CARfFhtf.cjs';
-export { f as FFIDAddMemberParams, g as FFIDAddMemberRequest, h as FFIDAddMemberResponse, i as FFIDAssignableMemberRole, j as FFIDCacheConfig, k as FFIDClient, l as FFIDConfig, m as FFIDListMembersResponse, n as FFIDMemberRole, o as FFIDOrganization, p as FFIDOrganizationMember, q as FFIDOtpSendResponse, r as FFIDOtpVerifyResponse, s as FFIDPasswordResetConfirmResponse, t as FFIDPasswordResetResponse, u as FFIDPasswordResetVerifyResponse, v as FFIDProfileCallOptions, w as FFIDRemoveMemberResponse, x as FFIDResetSessionResponse, y as FFIDSubscription, z as FFIDUpdateMemberRoleResponse, A as FFIDUpdateUserProfileRequest, B as FFIDUser, C as FFIDUserProfile, T as TokenData, D as TokenStore, E as createFFIDClient, G as createTokenStore } from '../ffid-client-CARfFhtf.cjs';
+import { F as FFIDLogger, a as FFIDError, b as FFIDCacheAdapter, c as FFIDVerifyAccessTokenOptions, d as FFIDApiResponse, e as FFIDOAuthUserInfo } from '../ffid-client-CknwTgly.cjs';
+export { f as FFIDAddMemberParams, g as FFIDAddMemberRequest, h as FFIDAddMemberResponse, i as FFIDAssignableMemberRole, j as FFIDCacheConfig, k as FFIDClient, l as FFIDConfig, m as FFIDListMembersResponse, n as FFIDMemberRole, o as FFIDOrganization, p as FFIDOrganizationMember, q as FFIDOtpSendResponse, r as FFIDOtpVerifyResponse, s as FFIDPasswordResetConfirmResponse, t as FFIDPasswordResetResponse, u as FFIDPasswordResetVerifyResponse, v as FFIDProfileCallOptions, w as FFIDRemoveMemberResponse, x as FFIDResetSessionResponse, y as FFIDSubscription, z as FFIDUpdateMemberRoleResponse, A as FFIDUpdateUserProfileRequest, B as FFIDUser, C as FFIDUserProfile, T as TokenData, D as TokenStore, E as createFFIDClient, G as createTokenStore } from '../ffid-client-CknwTgly.cjs';
 export { D as DEFAULT_API_BASE_URL, a as DEFAULT_OAUTH_SCOPES } from '../constants-D61jqRIO.cjs';
 import { z } from 'zod';
-import '../types-5g_Bg6Ey.cjs';
+import '../types-s3y11uT6.cjs';
 
 /** Token verification - verifyAccessToken() implementation */
 

package/dist/server/index.d.ts

@@ -1,8 +1,8 @@
-import { F as FFIDLogger, a as FFIDError, b as FFIDCacheAdapter, c as FFIDVerifyAccessTokenOptions, d as FFIDApiResponse, e as FFIDOAuthUserInfo } from '../ffid-client-w1s-JnFf.js';
-export { f as FFIDAddMemberParams, g as FFIDAddMemberRequest, h as FFIDAddMemberResponse, i as FFIDAssignableMemberRole, j as FFIDCacheConfig, k as FFIDClient, l as FFIDConfig, m as FFIDListMembersResponse, n as FFIDMemberRole, o as FFIDOrganization, p as FFIDOrganizationMember, q as FFIDOtpSendResponse, r as FFIDOtpVerifyResponse, s as FFIDPasswordResetConfirmResponse, t as FFIDPasswordResetResponse, u as FFIDPasswordResetVerifyResponse, v as FFIDProfileCallOptions, w as FFIDRemoveMemberResponse, x as FFIDResetSessionResponse, y as FFIDSubscription, z as FFIDUpdateMemberRoleResponse, A as FFIDUpdateUserProfileRequest, B as FFIDUser, C as FFIDUserProfile, T as TokenData, D as TokenStore, E as createFFIDClient, G as createTokenStore } from '../ffid-client-w1s-JnFf.js';
+import { F as FFIDLogger, a as FFIDError, b as FFIDCacheAdapter, c as FFIDVerifyAccessTokenOptions, d as FFIDApiResponse, e as FFIDOAuthUserInfo } from '../ffid-client-C0k2PTbO.js';
+export { f as FFIDAddMemberParams, g as FFIDAddMemberRequest, h as FFIDAddMemberResponse, i as FFIDAssignableMemberRole, j as FFIDCacheConfig, k as FFIDClient, l as FFIDConfig, m as FFIDListMembersResponse, n as FFIDMemberRole, o as FFIDOrganization, p as FFIDOrganizationMember, q as FFIDOtpSendResponse, r as FFIDOtpVerifyResponse, s as FFIDPasswordResetConfirmResponse, t as FFIDPasswordResetResponse, u as FFIDPasswordResetVerifyResponse, v as FFIDProfileCallOptions, w as FFIDRemoveMemberResponse, x as FFIDResetSessionResponse, y as FFIDSubscription, z as FFIDUpdateMemberRoleResponse, A as FFIDUpdateUserProfileRequest, B as FFIDUser, C as FFIDUserProfile, T as TokenData, D as TokenStore, E as createFFIDClient, G as createTokenStore } from '../ffid-client-C0k2PTbO.js';
 export { D as DEFAULT_API_BASE_URL, a as DEFAULT_OAUTH_SCOPES } from '../constants-D61jqRIO.js';
 import { z } from 'zod';
-import '../types-5g_Bg6Ey.js';
+import '../types-s3y11uT6.js';
 
 /** Token verification - verifyAccessToken() implementation */
 

package/dist/server/index.js

@@ -836,7 +836,7 @@ function createProfileMethods(deps) {
 }
 
 // src/client/version-check.ts
-var SDK_VERSION = "5.5.0";
+var SDK_VERSION = "5.7.0";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {
@@ -2189,6 +2189,7 @@ function createInquiryMethods(deps) {
 // src/subscriptions/userinfo-helpers.ts
 var ACCESS_GRANTING_EFFECTIVE_STATUSES = [
   "active",
+  "active_canceling",
   "past_due_grace"
 ];
 var BLOCKING_EFFECTIVE_STATUSES = [
@@ -2228,6 +2229,12 @@ var EXT_CHECK_ENDPOINT = "/api/v1/subscriptions/ext/check";
 var DEFAULT_ALLOW_GRACE = true;
 var DEFAULT_SERVICE_ACCESS_FAIL_POLICY = "failClosed";
 var SERVICE_ACCESS_DENIED_CODE = "SERVICE_ACCESS_DENIED";
+var DENIAL_REASON_BY_DENYING_STATUS = {
+  blocked: "blocked",
+  canceled: "canceled",
+  expired: "expired",
+  trial_expired: "trial_expired"
+};
 function resolveServiceAccessDenialReason(params, allowGrace) {
   if (params.hasAccess) {
     return null;
@@ -2238,10 +2245,10 @@ function resolveServiceAccessDenialReason(params, allowGrace) {
   if (params.isGrace && !allowGrace) {
     return "grace_disallowed";
   }
-  if (params.effectiveStatus === "active" || params.effectiveStatus === "past_due_grace") {
+  if (ACCESS_GRANTING_EFFECTIVE_STATUSES.includes(params.effectiveStatus)) {
     return "blocked";
   }
-  return params.effectiveStatus;
+  return DENIAL_REASON_BY_DENYING_STATUS[params.effectiveStatus];
 }
 function toServiceAccessDecision(response, allowGrace) {
   const effectiveStatus = response.effectiveStatus ?? null;

package/dist/server/test/index.d.cts

@@ -1,5 +1,5 @@
-import { k as FFIDClient, e as FFIDOAuthUserInfo } from '../../ffid-client-CARfFhtf.cjs';
-import '../../types-5g_Bg6Ey.cjs';
+import { k as FFIDClient, e as FFIDOAuthUserInfo } from '../../ffid-client-CknwTgly.cjs';
+import '../../types-s3y11uT6.cjs';
 
 /**
  * FFID SDK - Test mode client (E2E / integration test bypass)

package/dist/server/test/index.d.ts

@@ -1,5 +1,5 @@
-import { k as FFIDClient, e as FFIDOAuthUserInfo } from '../../ffid-client-w1s-JnFf.js';
-import '../../types-5g_Bg6Ey.js';
+import { k as FFIDClient, e as FFIDOAuthUserInfo } from '../../ffid-client-C0k2PTbO.js';
+import '../../types-s3y11uT6.js';
 
 /**
  * FFID SDK - Test mode client (E2E / integration test bypass)

package/dist/{types-5g_Bg6Ey.d.cts → types-s3y11uT6.d.cts}

@@ -17,6 +17,10 @@
  * branch on a single value:
  *
  * - `active` — normal paying subscription; grant full access.
+ * - `active_canceling` — paying subscription with `cancel_at_period_end=true`.
+ *   Access stays live until `currentPeriodEnd`; callers SHOULD surface a
+ *   "cancellation scheduled" badge and a reactivation CTA. Session-only
+ *   refinement of `active` — see the asymmetry note below.
  * - `past_due_grace` — payment failed but FFID is still retrying. Service
  *   SHOULD keep access and surface a recovery banner.
  * - `blocked` — payment dunning exhausted (`past_due` over grace,
@@ -29,9 +33,26 @@
  *   This is the FFID-internal runtime-expired case (see
  *   `getEffectiveSubscriptionStatus` on the server). Deny access.
  *
+ * **SDK / server asymmetry — `active_canceling` is session-only (#3460).**
+ * The backend `EffectiveSubscriptionStatus` in
+ * `src/lib/common/subscription-helpers.ts` does NOT currently include
+ * `active_canceling`; cancellation-scheduled subscriptions surface as plain
+ * `'active'` on `/api/v1/subscriptions/ext/check` and `/oauth/userinfo`, and
+ * consumers that branch on the server verdict will not see the new literal.
+ * The SDK enriches `computeEffectiveStatusFromSession` with
+ * `cancelAtPeriodEnd` (carried on `FFIDSubscription` for FFID backends from
+ * #3460 onward — older backends omit the field and the helper defaults to
+ * `false`, preserving the pre-#3460 `'active'` verdict) so `useSubscription`
+ * can surface a "cancellation scheduled" badge without waiting for an
+ * `/ext/check` round-trip. The asymmetry is safe because the new literal is
+ * access-granting (no security regression on the userinfo path); when the
+ * server's `EffectiveSubscriptionStatus` is later extended to emit
+ * `active_canceling`, this docstring MUST be updated to drop the
+ * session-only note.
+ *
  * @see /api/v1/subscriptions/ext/check
  * @see docs/03-implementation/EXPIRED_CONTRACT_HANDLING.md
  */
-type EffectiveSubscriptionStatus = 'active' | 'past_due_grace' | 'blocked' | 'canceled' | 'trial_expired' | 'expired';
+type EffectiveSubscriptionStatus = 'active' | 'active_canceling' | 'past_due_grace' | 'blocked' | 'canceled' | 'trial_expired' | 'expired';
 
 export type { EffectiveSubscriptionStatus as E };

package/dist/{types-5g_Bg6Ey.d.ts → types-s3y11uT6.d.ts}

@@ -17,6 +17,10 @@
  * branch on a single value:
  *
  * - `active` — normal paying subscription; grant full access.
+ * - `active_canceling` — paying subscription with `cancel_at_period_end=true`.
+ *   Access stays live until `currentPeriodEnd`; callers SHOULD surface a
+ *   "cancellation scheduled" badge and a reactivation CTA. Session-only
+ *   refinement of `active` — see the asymmetry note below.
  * - `past_due_grace` — payment failed but FFID is still retrying. Service
  *   SHOULD keep access and surface a recovery banner.
  * - `blocked` — payment dunning exhausted (`past_due` over grace,
@@ -29,9 +33,26 @@
  *   This is the FFID-internal runtime-expired case (see
  *   `getEffectiveSubscriptionStatus` on the server). Deny access.
  *
+ * **SDK / server asymmetry — `active_canceling` is session-only (#3460).**
+ * The backend `EffectiveSubscriptionStatus` in
+ * `src/lib/common/subscription-helpers.ts` does NOT currently include
+ * `active_canceling`; cancellation-scheduled subscriptions surface as plain
+ * `'active'` on `/api/v1/subscriptions/ext/check` and `/oauth/userinfo`, and
+ * consumers that branch on the server verdict will not see the new literal.
+ * The SDK enriches `computeEffectiveStatusFromSession` with
+ * `cancelAtPeriodEnd` (carried on `FFIDSubscription` for FFID backends from
+ * #3460 onward — older backends omit the field and the helper defaults to
+ * `false`, preserving the pre-#3460 `'active'` verdict) so `useSubscription`
+ * can surface a "cancellation scheduled" badge without waiting for an
+ * `/ext/check` round-trip. The asymmetry is safe because the new literal is
+ * access-granting (no security regression on the userinfo path); when the
+ * server's `EffectiveSubscriptionStatus` is later extended to emit
+ * `active_canceling`, this docstring MUST be updated to drop the
+ * session-only note.
+ *
  * @see /api/v1/subscriptions/ext/check
  * @see docs/03-implementation/EXPIRED_CONTRACT_HANDLING.md
  */
-type EffectiveSubscriptionStatus = 'active' | 'past_due_grace' | 'blocked' | 'canceled' | 'trial_expired' | 'expired';
+type EffectiveSubscriptionStatus = 'active' | 'active_canceling' | 'past_due_grace' | 'blocked' | 'canceled' | 'trial_expired' | 'expired';
 
 export type { EffectiveSubscriptionStatus as E };

package/dist/webhooks/index.d.cts

@@ -1,4 +1,4 @@
-import { E as EffectiveSubscriptionStatus } from '../types-5g_Bg6Ey.cjs';
+import { E as EffectiveSubscriptionStatus } from '../types-s3y11uT6.cjs';
 
 /**
  * FFID Webhook SDK Constants

package/dist/webhooks/index.d.ts

@@ -1,4 +1,4 @@
-import { E as EffectiveSubscriptionStatus } from '../types-5g_Bg6Ey.js';
+import { E as EffectiveSubscriptionStatus } from '../types-s3y11uT6.js';
 
 /**
  * FFID Webhook SDK Constants

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@feelflow/ffid-sdk",
-  "version": "5.5.0",
+  "version": "5.7.0",
   "description": "FeelFlow ID Platform SDK for React/Next.js applications",
   "keywords": [
     "feelflow",