@feelflow/ffid-sdk 5.6.0 → 5.8.0

package/dist/{chunk-WGSEZSZI.cjs → chunk-MRHDPB7H.cjs}

@@ -130,7 +130,15 @@ function normalizeUserinfo(raw) {
       seatModel: raw.subscription.seat_model ?? null,
       memberRole: raw.subscription.member_role ?? null,
       organizationId: raw.subscription.organization_id ?? null,
-      hasSeatAssignment: raw.subscription.has_seat_assignment ?? false
+      hasSeatAssignment: raw.subscription.has_seat_assignment ?? false,
+      // #3464: legacy FFID (< this issue) omits the field on the wire.
+      // The "unknown" axis is unused — no consumer differentiates "server
+      // didn't tell us" from "definitely not scheduled" because the
+      // companion `effectiveStatus` already returns `'active'` (not
+      // `'active_canceling'`) for legacy backends. Defaulting to `false`
+      // here keeps the downstream contract a plain boolean.
+      cancelAtPeriodEnd: raw.subscription.cancel_at_period_end ?? false,
+      currentPeriodEnd: raw.subscription.current_period_end ?? null
     } : void 0
   };
 }
@@ -147,8 +155,14 @@ function mapUserinfoSubscriptionToSession(userinfo, serviceCode) {
       planCode: subscription.planCode,
       planName: subscription.planCode,
       status: subscription.status,
-      currentPeriodEnd: null,
+      // #3464: userinfo now carries `current_period_end` and
+      // `cancel_at_period_end`. Pre-#3464 FFID backends still omit them on
+      // the wire (`currentPeriodEnd === null` / `cancelAtPeriodEnd === false`
+      // after `normalizeUserinfo` defaults), so the session helper sees
+      // plain `'active'` — identical to pre-#3464 behaviour.
+      currentPeriodEnd: subscription.currentPeriodEnd,
       trialEnd: null,
+      cancelAtPeriodEnd: subscription.cancelAtPeriodEnd,
       seatModel: subscription.seatModel ?? void 0,
       memberRole: subscription.memberRole ?? void 0,
       organizationId: subscription.organizationId
@@ -842,7 +856,7 @@ function createProfileMethods(deps) {
 }
 
 // src/client/version-check.ts
-var SDK_VERSION = "5.6.0";
+var SDK_VERSION = "5.8.0";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {
@@ -2247,7 +2261,7 @@ function isExpired(isoTimestamp, nowMs) {
   return parsed < nowMs;
 }
 function computeEffectiveStatusFromSession(input, nowMs = Date.now()) {
-  const { status, currentPeriodEnd, trialEnd, pastDueSince } = input;
+  const { status, currentPeriodEnd, trialEnd, pastDueSince, cancelAtPeriodEnd = false } = input;
   switch (status) {
     case "trialing": {
       const relevantEnd = trialEnd ?? currentPeriodEnd;
@@ -2256,7 +2270,8 @@ function computeEffectiveStatusFromSession(input, nowMs = Date.now()) {
     }
     case "active": {
       const expired = isExpired(currentPeriodEnd, nowMs);
-      return expired === true ? "expired" : "active";
+      if (expired === true) return "expired";
+      return cancelAtPeriodEnd ? "active_canceling" : "active";
     }
     case "past_due": {
       const baselineIso = pastDueSince ?? currentPeriodEnd;
@@ -2285,6 +2300,7 @@ function computeEffectiveStatusFromSession(input, nowMs = Date.now()) {
 // src/subscriptions/userinfo-helpers.ts
 var ACCESS_GRANTING_EFFECTIVE_STATUSES = [
   "active",
+  "active_canceling",
   "past_due_grace"
 ];
 var BLOCKING_EFFECTIVE_STATUSES = [
@@ -2338,6 +2354,12 @@ var EXT_CHECK_ENDPOINT = "/api/v1/subscriptions/ext/check";
 var DEFAULT_ALLOW_GRACE = true;
 var DEFAULT_SERVICE_ACCESS_FAIL_POLICY = "failClosed";
 var SERVICE_ACCESS_DENIED_CODE = "SERVICE_ACCESS_DENIED";
+var DENIAL_REASON_BY_DENYING_STATUS = {
+  blocked: "blocked",
+  canceled: "canceled",
+  expired: "expired",
+  trial_expired: "trial_expired"
+};
 function resolveServiceAccessDenialReason(params, allowGrace) {
   if (params.hasAccess) {
     return null;
@@ -2348,10 +2370,10 @@ function resolveServiceAccessDenialReason(params, allowGrace) {
   if (params.isGrace && !allowGrace) {
     return "grace_disallowed";
   }
-  if (params.effectiveStatus === "active" || params.effectiveStatus === "past_due_grace") {
+  if (ACCESS_GRANTING_EFFECTIVE_STATUSES.includes(params.effectiveStatus)) {
     return "blocked";
   }
-  return params.effectiveStatus;
+  return DENIAL_REASON_BY_DENYING_STATUS[params.effectiveStatus];
 }
 function toServiceAccessDecision(response, allowGrace) {
   const effectiveStatus = response.effectiveStatus ?? null;
@@ -3522,6 +3544,7 @@ function FFIDOrganizationSwitcher({
 }
 var ACCESS_GRANTING_STATUSES = [
   "active",
+  "active_canceling",
   "past_due_grace"
 ];
 var BLOCKING_STATUSES = [
@@ -3558,7 +3581,8 @@ function useSubscription() {
       //   のため `computeEffectiveStatusFromSession` 内で currentPeriodEnd を
       //   fallback に使う (Stripe は period end 近辺で past_due にする)。
       //   Canonical な verdict が必要な consumer は `/ext/check` を直接呼ぶ。
-      pastDueSince: void 0
+      pastDueSince: void 0,
+      cancelAtPeriodEnd: subscription.cancelAtPeriodEnd
     });
   }, [subscription]);
   const isGrace = effectiveStatus === "past_due_grace";

package/dist/{chunk-4SJKXEYB.js → chunk-Z6COUAR6.js}

@@ -128,7 +128,15 @@ function normalizeUserinfo(raw) {
       seatModel: raw.subscription.seat_model ?? null,
       memberRole: raw.subscription.member_role ?? null,
       organizationId: raw.subscription.organization_id ?? null,
-      hasSeatAssignment: raw.subscription.has_seat_assignment ?? false
+      hasSeatAssignment: raw.subscription.has_seat_assignment ?? false,
+      // #3464: legacy FFID (< this issue) omits the field on the wire.
+      // The "unknown" axis is unused — no consumer differentiates "server
+      // didn't tell us" from "definitely not scheduled" because the
+      // companion `effectiveStatus` already returns `'active'` (not
+      // `'active_canceling'`) for legacy backends. Defaulting to `false`
+      // here keeps the downstream contract a plain boolean.
+      cancelAtPeriodEnd: raw.subscription.cancel_at_period_end ?? false,
+      currentPeriodEnd: raw.subscription.current_period_end ?? null
     } : void 0
   };
 }
@@ -145,8 +153,14 @@ function mapUserinfoSubscriptionToSession(userinfo, serviceCode) {
       planCode: subscription.planCode,
       planName: subscription.planCode,
       status: subscription.status,
-      currentPeriodEnd: null,
+      // #3464: userinfo now carries `current_period_end` and
+      // `cancel_at_period_end`. Pre-#3464 FFID backends still omit them on
+      // the wire (`currentPeriodEnd === null` / `cancelAtPeriodEnd === false`
+      // after `normalizeUserinfo` defaults), so the session helper sees
+      // plain `'active'` — identical to pre-#3464 behaviour.
+      currentPeriodEnd: subscription.currentPeriodEnd,
       trialEnd: null,
+      cancelAtPeriodEnd: subscription.cancelAtPeriodEnd,
       seatModel: subscription.seatModel ?? void 0,
       memberRole: subscription.memberRole ?? void 0,
       organizationId: subscription.organizationId
@@ -840,7 +854,7 @@ function createProfileMethods(deps) {
 }
 
 // src/client/version-check.ts
-var SDK_VERSION = "5.6.0";
+var SDK_VERSION = "5.8.0";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {
@@ -2245,7 +2259,7 @@ function isExpired(isoTimestamp, nowMs) {
   return parsed < nowMs;
 }
 function computeEffectiveStatusFromSession(input, nowMs = Date.now()) {
-  const { status, currentPeriodEnd, trialEnd, pastDueSince } = input;
+  const { status, currentPeriodEnd, trialEnd, pastDueSince, cancelAtPeriodEnd = false } = input;
   switch (status) {
     case "trialing": {
       const relevantEnd = trialEnd ?? currentPeriodEnd;
@@ -2254,7 +2268,8 @@ function computeEffectiveStatusFromSession(input, nowMs = Date.now()) {
     }
     case "active": {
       const expired = isExpired(currentPeriodEnd, nowMs);
-      return expired === true ? "expired" : "active";
+      if (expired === true) return "expired";
+      return cancelAtPeriodEnd ? "active_canceling" : "active";
     }
     case "past_due": {
       const baselineIso = pastDueSince ?? currentPeriodEnd;
@@ -2283,6 +2298,7 @@ function computeEffectiveStatusFromSession(input, nowMs = Date.now()) {
 // src/subscriptions/userinfo-helpers.ts
 var ACCESS_GRANTING_EFFECTIVE_STATUSES = [
   "active",
+  "active_canceling",
   "past_due_grace"
 ];
 var BLOCKING_EFFECTIVE_STATUSES = [
@@ -2336,6 +2352,12 @@ var EXT_CHECK_ENDPOINT = "/api/v1/subscriptions/ext/check";
 var DEFAULT_ALLOW_GRACE = true;
 var DEFAULT_SERVICE_ACCESS_FAIL_POLICY = "failClosed";
 var SERVICE_ACCESS_DENIED_CODE = "SERVICE_ACCESS_DENIED";
+var DENIAL_REASON_BY_DENYING_STATUS = {
+  blocked: "blocked",
+  canceled: "canceled",
+  expired: "expired",
+  trial_expired: "trial_expired"
+};
 function resolveServiceAccessDenialReason(params, allowGrace) {
   if (params.hasAccess) {
     return null;
@@ -2346,10 +2368,10 @@ function resolveServiceAccessDenialReason(params, allowGrace) {
   if (params.isGrace && !allowGrace) {
     return "grace_disallowed";
   }
-  if (params.effectiveStatus === "active" || params.effectiveStatus === "past_due_grace") {
+  if (ACCESS_GRANTING_EFFECTIVE_STATUSES.includes(params.effectiveStatus)) {
     return "blocked";
   }
-  return params.effectiveStatus;
+  return DENIAL_REASON_BY_DENYING_STATUS[params.effectiveStatus];
 }
 function toServiceAccessDecision(response, allowGrace) {
   const effectiveStatus = response.effectiveStatus ?? null;
@@ -3520,6 +3542,7 @@ function FFIDOrganizationSwitcher({
 }
 var ACCESS_GRANTING_STATUSES = [
   "active",
+  "active_canceling",
   "past_due_grace"
 ];
 var BLOCKING_STATUSES = [
@@ -3556,7 +3579,8 @@ function useSubscription() {
       //   のため `computeEffectiveStatusFromSession` 内で currentPeriodEnd を
       //   fallback に使う (Stripe は period end 近辺で past_due にする)。
       //   Canonical な verdict が必要な consumer は `/ext/check` を直接呼ぶ。
-      pastDueSince: void 0
+      pastDueSince: void 0,
+      cancelAtPeriodEnd: subscription.cancelAtPeriodEnd
     });
   }, [subscription]);
   const isGrace = effectiveStatus === "past_due_grace";

package/dist/components/index.cjs

@@ -1,34 +1,34 @@
 'use strict';
 
-var chunkWGSEZSZI_cjs = require('../chunk-WGSEZSZI.cjs');
+var chunkMRHDPB7H_cjs = require('../chunk-MRHDPB7H.cjs');
 
 
 
 Object.defineProperty(exports, "FFIDAnnouncementBadge", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.FFIDAnnouncementBadge; }
+  get: function () { return chunkMRHDPB7H_cjs.FFIDAnnouncementBadge; }
 });
 Object.defineProperty(exports, "FFIDAnnouncementList", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.FFIDAnnouncementList; }
+  get: function () { return chunkMRHDPB7H_cjs.FFIDAnnouncementList; }
 });
 Object.defineProperty(exports, "FFIDInquiryForm", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.FFIDInquiryForm; }
+  get: function () { return chunkMRHDPB7H_cjs.FFIDInquiryForm; }
 });
 Object.defineProperty(exports, "FFIDLoginButton", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.FFIDLoginButton; }
+  get: function () { return chunkMRHDPB7H_cjs.FFIDLoginButton; }
 });
 Object.defineProperty(exports, "FFIDOrganizationSwitcher", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.FFIDOrganizationSwitcher; }
+  get: function () { return chunkMRHDPB7H_cjs.FFIDOrganizationSwitcher; }
 });
 Object.defineProperty(exports, "FFIDSubscriptionBadge", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.FFIDSubscriptionBadge; }
+  get: function () { return chunkMRHDPB7H_cjs.FFIDSubscriptionBadge; }
 });
 Object.defineProperty(exports, "FFIDUserMenu", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.FFIDUserMenu; }
+  get: function () { return chunkMRHDPB7H_cjs.FFIDUserMenu; }
 });

package/dist/components/index.d.cts

@@ -1,3 +1,3 @@
-export { M as FFIDAnnouncementBadge, al as FFIDAnnouncementBadgeClassNames, am as FFIDAnnouncementBadgeProps, N as FFIDAnnouncementList, an as FFIDAnnouncementListClassNames, ao as FFIDAnnouncementListProps, V as FFIDInquiryForm, W as FFIDInquiryFormCategoryItem, X as FFIDInquiryFormClassNames, Y as FFIDInquiryFormLegalLayout, Z as FFIDInquiryFormOrganization, _ as FFIDInquiryFormPlaceholderContext, $ as FFIDInquiryFormPrefill, a0 as FFIDInquiryFormProps, a1 as FFIDInquiryFormSubmitData, a2 as FFIDInquiryFormSubmitResult, a4 as FFIDLoginButton, ap as FFIDLoginButtonProps, a7 as FFIDOrganizationSwitcher, aq as FFIDOrganizationSwitcherClassNames, ar as FFIDOrganizationSwitcherProps, ac as FFIDSubscriptionBadge, as as FFIDSubscriptionBadgeClassNames, at as FFIDSubscriptionBadgeProps, ae as FFIDUserMenu, au as FFIDUserMenuClassNames, av as FFIDUserMenuProps } from '../index-_oO5sHjX.cjs';
+export { M as FFIDAnnouncementBadge, al as FFIDAnnouncementBadgeClassNames, am as FFIDAnnouncementBadgeProps, N as FFIDAnnouncementList, an as FFIDAnnouncementListClassNames, ao as FFIDAnnouncementListProps, V as FFIDInquiryForm, W as FFIDInquiryFormCategoryItem, X as FFIDInquiryFormClassNames, Y as FFIDInquiryFormLegalLayout, Z as FFIDInquiryFormOrganization, _ as FFIDInquiryFormPlaceholderContext, $ as FFIDInquiryFormPrefill, a0 as FFIDInquiryFormProps, a1 as FFIDInquiryFormSubmitData, a2 as FFIDInquiryFormSubmitResult, a4 as FFIDLoginButton, ap as FFIDLoginButtonProps, a7 as FFIDOrganizationSwitcher, aq as FFIDOrganizationSwitcherClassNames, ar as FFIDOrganizationSwitcherProps, ac as FFIDSubscriptionBadge, as as FFIDSubscriptionBadgeClassNames, at as FFIDSubscriptionBadgeProps, ae as FFIDUserMenu, au as FFIDUserMenuClassNames, av as FFIDUserMenuProps } from '../index-DeegKrLW.cjs';
 import 'react/jsx-runtime';
 import 'react';

package/dist/components/index.d.ts

@@ -1,3 +1,3 @@
-export { M as FFIDAnnouncementBadge, al as FFIDAnnouncementBadgeClassNames, am as FFIDAnnouncementBadgeProps, N as FFIDAnnouncementList, an as FFIDAnnouncementListClassNames, ao as FFIDAnnouncementListProps, V as FFIDInquiryForm, W as FFIDInquiryFormCategoryItem, X as FFIDInquiryFormClassNames, Y as FFIDInquiryFormLegalLayout, Z as FFIDInquiryFormOrganization, _ as FFIDInquiryFormPlaceholderContext, $ as FFIDInquiryFormPrefill, a0 as FFIDInquiryFormProps, a1 as FFIDInquiryFormSubmitData, a2 as FFIDInquiryFormSubmitResult, a4 as FFIDLoginButton, ap as FFIDLoginButtonProps, a7 as FFIDOrganizationSwitcher, aq as FFIDOrganizationSwitcherClassNames, ar as FFIDOrganizationSwitcherProps, ac as FFIDSubscriptionBadge, as as FFIDSubscriptionBadgeClassNames, at as FFIDSubscriptionBadgeProps, ae as FFIDUserMenu, au as FFIDUserMenuClassNames, av as FFIDUserMenuProps } from '../index-_oO5sHjX.js';
+export { M as FFIDAnnouncementBadge, al as FFIDAnnouncementBadgeClassNames, am as FFIDAnnouncementBadgeProps, N as FFIDAnnouncementList, an as FFIDAnnouncementListClassNames, ao as FFIDAnnouncementListProps, V as FFIDInquiryForm, W as FFIDInquiryFormCategoryItem, X as FFIDInquiryFormClassNames, Y as FFIDInquiryFormLegalLayout, Z as FFIDInquiryFormOrganization, _ as FFIDInquiryFormPlaceholderContext, $ as FFIDInquiryFormPrefill, a0 as FFIDInquiryFormProps, a1 as FFIDInquiryFormSubmitData, a2 as FFIDInquiryFormSubmitResult, a4 as FFIDLoginButton, ap as FFIDLoginButtonProps, a7 as FFIDOrganizationSwitcher, aq as FFIDOrganizationSwitcherClassNames, ar as FFIDOrganizationSwitcherProps, ac as FFIDSubscriptionBadge, as as FFIDSubscriptionBadgeClassNames, at as FFIDSubscriptionBadgeProps, ae as FFIDUserMenu, au as FFIDUserMenuClassNames, av as FFIDUserMenuProps } from '../index-DeegKrLW.js';
 import 'react/jsx-runtime';
 import 'react';

package/dist/components/index.js

@@ -1 +1 @@
-export { FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDSubscriptionBadge, FFIDUserMenu } from '../chunk-4SJKXEYB.js';
+export { FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDSubscriptionBadge, FFIDUserMenu } from '../chunk-Z6COUAR6.js';

package/dist/{ffid-client-CmxQxkoK.d.cts → ffid-client-BhopNmnq.d.cts}

@@ -1,4 +1,4 @@
-import { E as EffectiveSubscriptionStatus } from './types-5g_Bg6Ey.cjs';
+import { E as EffectiveSubscriptionStatus } from './types-BYdtyO_2.cjs';
 
 /**
  * Inquiry types exposed by the FFID SDK.
@@ -724,6 +724,16 @@ interface FFIDSubscription {
     currentPeriodEnd: string | null;
     /** Trial end date (null if not a trial or no trial_end set) */
     trialEnd: string | null;
+    /**
+     * Whether the subscription is scheduled to cancel at the end of the current
+     * billing period (Stripe `cancel_at_period_end`). Optional for backward
+     * compatibility with FFID backends that pre-date #3460 — when absent,
+     * `useSubscription` treats the value as `false` and surfaces plain `active`.
+     * When `true` and the period has not yet ended, `effectiveStatus` becomes
+     * `active_canceling` so consumers can render a cancellation-scheduled badge
+     * + reactivation CTA without losing access.
+     */
+    cancelAtPeriodEnd?: boolean;
     /** Service seat model (available when sourced from OAuth userinfo) */
     seatModel?: FFIDSeatModel | undefined;
     /** Member role in the resolved organization context */
@@ -748,6 +758,25 @@ interface FFIDOAuthUserInfoSubscription {
     memberRole: FFIDOAuthUserInfoMemberRole | null;
     organizationId: string | null;
     hasSeatAssignment: boolean | null;
+    /**
+     * Stripe `cancel_at_period_end` (#3464, SDK 5.8.0). `true` while the
+     * subscription is scheduled to terminate at `currentPeriodEnd`. The
+     * `normalizeUserinfo` boundary defaults the wire field to `false` when
+     * the server omits it (older FFID pre-#3464), so consumers always see
+     * a plain boolean and never branch on an "unknown" sentinel — the
+     * companion `effectiveStatus` already returns `'active'` (not
+     * `'active_canceling'`) for legacy backends since `cancel_at_period_end`
+     * is implicitly false there.
+     */
+    cancelAtPeriodEnd: boolean;
+    /**
+     * ISO timestamp of the current billing period end (#3464, SDK 5.8.0).
+     * `null` for free / seatless plans, or when serving an older FFID
+     * (pre-#3464) that does not populate the field. Exposed so callers
+     * can display the cancellation effective date without an `/ext/check`
+     * round-trip.
+     */
+    currentPeriodEnd: string | null;
 }
 /**
  * Unified user-identity shape returned by `getSession()` (→ `/oauth/userinfo`)

package/dist/{ffid-client-BXl7Dop7.d.ts → ffid-client-DoGYvIll.d.ts}

@@ -1,4 +1,4 @@
-import { E as EffectiveSubscriptionStatus } from './types-5g_Bg6Ey.js';
+import { E as EffectiveSubscriptionStatus } from './types-BYdtyO_2.js';
 
 /**
  * Inquiry types exposed by the FFID SDK.
@@ -724,6 +724,16 @@ interface FFIDSubscription {
     currentPeriodEnd: string | null;
     /** Trial end date (null if not a trial or no trial_end set) */
     trialEnd: string | null;
+    /**
+     * Whether the subscription is scheduled to cancel at the end of the current
+     * billing period (Stripe `cancel_at_period_end`). Optional for backward
+     * compatibility with FFID backends that pre-date #3460 — when absent,
+     * `useSubscription` treats the value as `false` and surfaces plain `active`.
+     * When `true` and the period has not yet ended, `effectiveStatus` becomes
+     * `active_canceling` so consumers can render a cancellation-scheduled badge
+     * + reactivation CTA without losing access.
+     */
+    cancelAtPeriodEnd?: boolean;
     /** Service seat model (available when sourced from OAuth userinfo) */
     seatModel?: FFIDSeatModel | undefined;
     /** Member role in the resolved organization context */
@@ -748,6 +758,25 @@ interface FFIDOAuthUserInfoSubscription {
     memberRole: FFIDOAuthUserInfoMemberRole | null;
     organizationId: string | null;
     hasSeatAssignment: boolean | null;
+    /**
+     * Stripe `cancel_at_period_end` (#3464, SDK 5.8.0). `true` while the
+     * subscription is scheduled to terminate at `currentPeriodEnd`. The
+     * `normalizeUserinfo` boundary defaults the wire field to `false` when
+     * the server omits it (older FFID pre-#3464), so consumers always see
+     * a plain boolean and never branch on an "unknown" sentinel — the
+     * companion `effectiveStatus` already returns `'active'` (not
+     * `'active_canceling'`) for legacy backends since `cancel_at_period_end`
+     * is implicitly false there.
+     */
+    cancelAtPeriodEnd: boolean;
+    /**
+     * ISO timestamp of the current billing period end (#3464, SDK 5.8.0).
+     * `null` for free / seatless plans, or when serving an older FFID
+     * (pre-#3464) that does not populate the field. Exposed so callers
+     * can display the cancellation effective date without an `/ext/check`
+     * round-trip.
+     */
+    currentPeriodEnd: string | null;
 }
 /**
  * Unified user-identity shape returned by `getSession()` (→ `/oauth/userinfo`)

package/dist/{index-_oO5sHjX.d.cts → index-DeegKrLW.d.cts}

@@ -41,6 +41,10 @@ interface FFIDCacheConfig {
  * branch on a single value:
  *
  * - `active` — normal paying subscription; grant full access.
+ * - `active_canceling` — paying subscription with `cancel_at_period_end=true`.
+ *   Access stays live until `currentPeriodEnd`; callers SHOULD surface a
+ *   "cancellation scheduled" badge and a reactivation CTA. Session-only
+ *   refinement of `active` — see the asymmetry note below.
  * - `past_due_grace` — payment failed but FFID is still retrying. Service
  *   SHOULD keep access and surface a recovery banner.
  * - `blocked` — payment dunning exhausted (`past_due` over grace,
@@ -53,10 +57,23 @@ interface FFIDCacheConfig {
  *   This is the FFID-internal runtime-expired case (see
  *   `getEffectiveSubscriptionStatus` on the server). Deny access.
  *
+ * **`active_canceling` is mirrored on the server (#3464, SDK 5.8.0).**
+ * Earlier (#3460, SDK 5.7.0) the literal was a session-only enrichment;
+ * since FFID #3464 the backend `EffectiveSubscriptionStatus` and both
+ * `/api/v1/subscriptions/ext/check` + `/oauth/userinfo` emit
+ * `active_canceling` directly when `cancel_at_period_end=true` and the
+ * period is still live. SDK consumers receive the same literal whether
+ * they read it from the session-derived `computeEffectiveStatusFromSession`
+ * or the server-derived `effectiveStatus` on the userinfo / ext-check
+ * paths. Pre-#3464 FFID backends omit `cancelAtPeriodEnd` on the wire; the
+ * SDK `normalizeUserinfo` boundary defaults it to `false`, so downstream
+ * consumers see a plain boolean and `computeEffectiveStatus` returns the
+ * original `'active'` verdict for legacy deployments.
+ *
  * @see /api/v1/subscriptions/ext/check
  * @see docs/03-implementation/EXPIRED_CONTRACT_HANDLING.md
  */
-type EffectiveSubscriptionStatus = 'active' | 'past_due_grace' | 'blocked' | 'canceled' | 'trial_expired' | 'expired';
+type EffectiveSubscriptionStatus = 'active' | 'active_canceling' | 'past_due_grace' | 'blocked' | 'canceled' | 'trial_expired' | 'expired';
 
 /**
  * Canonical service-access types for subscription lifecycle decisions.
@@ -230,6 +247,16 @@ interface FFIDSubscription {
     currentPeriodEnd: string | null;
     /** Trial end date (null if not a trial or no trial_end set) */
     trialEnd: string | null;
+    /**
+     * Whether the subscription is scheduled to cancel at the end of the current
+     * billing period (Stripe `cancel_at_period_end`). Optional for backward
+     * compatibility with FFID backends that pre-date #3460 — when absent,
+     * `useSubscription` treats the value as `false` and surfaces plain `active`.
+     * When `true` and the period has not yet ended, `effectiveStatus` becomes
+     * `active_canceling` so consumers can render a cancellation-scheduled badge
+     * + reactivation CTA without losing access.
+     */
+    cancelAtPeriodEnd?: boolean;
     /** Service seat model (available when sourced from OAuth userinfo) */
     seatModel?: FFIDSeatModel | undefined;
     /** Member role in the resolved organization context */
@@ -254,6 +281,25 @@ interface FFIDOAuthUserInfoSubscription {
     memberRole: FFIDOAuthUserInfoMemberRole | null;
     organizationId: string | null;
     hasSeatAssignment: boolean | null;
+    /**
+     * Stripe `cancel_at_period_end` (#3464, SDK 5.8.0). `true` while the
+     * subscription is scheduled to terminate at `currentPeriodEnd`. The
+     * `normalizeUserinfo` boundary defaults the wire field to `false` when
+     * the server omits it (older FFID pre-#3464), so consumers always see
+     * a plain boolean and never branch on an "unknown" sentinel — the
+     * companion `effectiveStatus` already returns `'active'` (not
+     * `'active_canceling'`) for legacy backends since `cancel_at_period_end`
+     * is implicitly false there.
+     */
+    cancelAtPeriodEnd: boolean;
+    /**
+     * ISO timestamp of the current billing period end (#3464, SDK 5.8.0).
+     * `null` for free / seatless plans, or when serving an older FFID
+     * (pre-#3464) that does not populate the field. Exposed so callers
+     * can display the cancellation effective date without an `/ext/check`
+     * round-trip.
+     */
+    currentPeriodEnd: string | null;
 }
 /**
  * Unified user-identity shape returned by `getSession()` (→ `/oauth/userinfo`)

package/dist/{index-_oO5sHjX.d.ts → index-DeegKrLW.d.ts}

@@ -41,6 +41,10 @@ interface FFIDCacheConfig {
  * branch on a single value:
  *
  * - `active` — normal paying subscription; grant full access.
+ * - `active_canceling` — paying subscription with `cancel_at_period_end=true`.
+ *   Access stays live until `currentPeriodEnd`; callers SHOULD surface a
+ *   "cancellation scheduled" badge and a reactivation CTA. Session-only
+ *   refinement of `active` — see the asymmetry note below.
  * - `past_due_grace` — payment failed but FFID is still retrying. Service
  *   SHOULD keep access and surface a recovery banner.
  * - `blocked` — payment dunning exhausted (`past_due` over grace,
@@ -53,10 +57,23 @@ interface FFIDCacheConfig {
  *   This is the FFID-internal runtime-expired case (see
  *   `getEffectiveSubscriptionStatus` on the server). Deny access.
  *
+ * **`active_canceling` is mirrored on the server (#3464, SDK 5.8.0).**
+ * Earlier (#3460, SDK 5.7.0) the literal was a session-only enrichment;
+ * since FFID #3464 the backend `EffectiveSubscriptionStatus` and both
+ * `/api/v1/subscriptions/ext/check` + `/oauth/userinfo` emit
+ * `active_canceling` directly when `cancel_at_period_end=true` and the
+ * period is still live. SDK consumers receive the same literal whether
+ * they read it from the session-derived `computeEffectiveStatusFromSession`
+ * or the server-derived `effectiveStatus` on the userinfo / ext-check
+ * paths. Pre-#3464 FFID backends omit `cancelAtPeriodEnd` on the wire; the
+ * SDK `normalizeUserinfo` boundary defaults it to `false`, so downstream
+ * consumers see a plain boolean and `computeEffectiveStatus` returns the
+ * original `'active'` verdict for legacy deployments.
+ *
  * @see /api/v1/subscriptions/ext/check
  * @see docs/03-implementation/EXPIRED_CONTRACT_HANDLING.md
  */
-type EffectiveSubscriptionStatus = 'active' | 'past_due_grace' | 'blocked' | 'canceled' | 'trial_expired' | 'expired';
+type EffectiveSubscriptionStatus = 'active' | 'active_canceling' | 'past_due_grace' | 'blocked' | 'canceled' | 'trial_expired' | 'expired';
 
 /**
  * Canonical service-access types for subscription lifecycle decisions.
@@ -230,6 +247,16 @@ interface FFIDSubscription {
     currentPeriodEnd: string | null;
     /** Trial end date (null if not a trial or no trial_end set) */
     trialEnd: string | null;
+    /**
+     * Whether the subscription is scheduled to cancel at the end of the current
+     * billing period (Stripe `cancel_at_period_end`). Optional for backward
+     * compatibility with FFID backends that pre-date #3460 — when absent,
+     * `useSubscription` treats the value as `false` and surfaces plain `active`.
+     * When `true` and the period has not yet ended, `effectiveStatus` becomes
+     * `active_canceling` so consumers can render a cancellation-scheduled badge
+     * + reactivation CTA without losing access.
+     */
+    cancelAtPeriodEnd?: boolean;
     /** Service seat model (available when sourced from OAuth userinfo) */
     seatModel?: FFIDSeatModel | undefined;
     /** Member role in the resolved organization context */
@@ -254,6 +281,25 @@ interface FFIDOAuthUserInfoSubscription {
     memberRole: FFIDOAuthUserInfoMemberRole | null;
     organizationId: string | null;
     hasSeatAssignment: boolean | null;
+    /**
+     * Stripe `cancel_at_period_end` (#3464, SDK 5.8.0). `true` while the
+     * subscription is scheduled to terminate at `currentPeriodEnd`. The
+     * `normalizeUserinfo` boundary defaults the wire field to `false` when
+     * the server omits it (older FFID pre-#3464), so consumers always see
+     * a plain boolean and never branch on an "unknown" sentinel — the
+     * companion `effectiveStatus` already returns `'active'` (not
+     * `'active_canceling'`) for legacy backends since `cancel_at_period_end`
+     * is implicitly false there.
+     */
+    cancelAtPeriodEnd: boolean;
+    /**
+     * ISO timestamp of the current billing period end (#3464, SDK 5.8.0).
+     * `null` for free / seatless plans, or when serving an older FFID
+     * (pre-#3464) that does not populate the field. Exposed so callers
+     * can display the cancellation effective date without an `/ext/check`
+     * round-trip.
+     */
+    currentPeriodEnd: string | null;
 }
 /**
  * Unified user-identity shape returned by `getSession()` (→ `/oauth/userinfo`)

package/dist/index.cjs

@@ -1,6 +1,6 @@
 'use strict';
 
-var chunkWGSEZSZI_cjs = require('./chunk-WGSEZSZI.cjs');
+var chunkMRHDPB7H_cjs = require('./chunk-MRHDPB7H.cjs');
 var chunkQ5SZVLNB_cjs = require('./chunk-Q5SZVLNB.cjs');
 var react = require('react');
 var jsxRuntime = require('react/jsx-runtime');
@@ -54,8 +54,8 @@ function defaultRedirect(url) {
 }
 function useRequireActiveSubscription(options) {
   const { redirectTo, allowGrace = true, onRedirect } = options;
-  const { isLoading, error } = chunkWGSEZSZI_cjs.useFFIDContext();
-  const { effectiveStatus, isBlocked, isGrace } = chunkWGSEZSZI_cjs.useSubscription();
+  const { isLoading, error } = chunkMRHDPB7H_cjs.useFFIDContext();
+  const { effectiveStatus, isBlocked, isGrace } = chunkMRHDPB7H_cjs.useSubscription();
   const hasFetchError = error !== null && effectiveStatus === null;
   const shouldRedirect = !isLoading && !hasFetchError && (isBlocked || !allowGrace && isGrace || effectiveStatus === null);
   react.useEffect(() => {
@@ -76,7 +76,7 @@ function useRequireActiveSubscription(options) {
 }
 function withFFIDAuth(Component, options = {}) {
   const WrappedComponent = (props) => {
-    const { isLoading, isAuthenticated, login } = chunkWGSEZSZI_cjs.useFFIDContext();
+    const { isLoading, isAuthenticated, login } = chunkMRHDPB7H_cjs.useFFIDContext();
     const hasRedirected = react.useRef(false);
     react.useEffect(() => {
       if (!isLoading && !isAuthenticated && options.redirectToLogin && !hasRedirected.current) {
@@ -105,131 +105,131 @@ var FFID_NEWSLETTER_DISPATCH_MAX_RECIPIENTS = 1e3;
 
 Object.defineProperty(exports, "ACCESS_GRANTING_EFFECTIVE_STATUSES", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.ACCESS_GRANTING_EFFECTIVE_STATUSES; }
+  get: function () { return chunkMRHDPB7H_cjs.ACCESS_GRANTING_EFFECTIVE_STATUSES; }
 });
 Object.defineProperty(exports, "BLOCKING_EFFECTIVE_STATUSES", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.BLOCKING_EFFECTIVE_STATUSES; }
+  get: function () { return chunkMRHDPB7H_cjs.BLOCKING_EFFECTIVE_STATUSES; }
 });
 Object.defineProperty(exports, "DEFAULT_API_BASE_URL", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.DEFAULT_API_BASE_URL; }
+  get: function () { return chunkMRHDPB7H_cjs.DEFAULT_API_BASE_URL; }
 });
 Object.defineProperty(exports, "DEFAULT_OAUTH_SCOPES", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.DEFAULT_OAUTH_SCOPES; }
+  get: function () { return chunkMRHDPB7H_cjs.DEFAULT_OAUTH_SCOPES; }
 });
 Object.defineProperty(exports, "FFIDAnnouncementBadge", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.FFIDAnnouncementBadge; }
+  get: function () { return chunkMRHDPB7H_cjs.FFIDAnnouncementBadge; }
 });
 Object.defineProperty(exports, "FFIDAnnouncementList", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.FFIDAnnouncementList; }
+  get: function () { return chunkMRHDPB7H_cjs.FFIDAnnouncementList; }
 });
 Object.defineProperty(exports, "FFIDInquiryForm", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.FFIDInquiryForm; }
+  get: function () { return chunkMRHDPB7H_cjs.FFIDInquiryForm; }
 });
 Object.defineProperty(exports, "FFIDLoginButton", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.FFIDLoginButton; }
+  get: function () { return chunkMRHDPB7H_cjs.FFIDLoginButton; }
 });
 Object.defineProperty(exports, "FFIDOrganizationSwitcher", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.FFIDOrganizationSwitcher; }
+  get: function () { return chunkMRHDPB7H_cjs.FFIDOrganizationSwitcher; }
 });
 Object.defineProperty(exports, "FFIDProvider", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.FFIDProvider; }
+  get: function () { return chunkMRHDPB7H_cjs.FFIDProvider; }
 });
 Object.defineProperty(exports, "FFIDSDKError", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.FFIDSDKError; }
+  get: function () { return chunkMRHDPB7H_cjs.FFIDSDKError; }
 });
 Object.defineProperty(exports, "FFIDSubscriptionBadge", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.FFIDSubscriptionBadge; }
+  get: function () { return chunkMRHDPB7H_cjs.FFIDSubscriptionBadge; }
 });
 Object.defineProperty(exports, "FFIDUserMenu", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.FFIDUserMenu; }
+  get: function () { return chunkMRHDPB7H_cjs.FFIDUserMenu; }
 });
 Object.defineProperty(exports, "FFID_ANNOUNCEMENTS_ERROR_CODES", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.FFID_ANNOUNCEMENTS_ERROR_CODES; }
+  get: function () { return chunkMRHDPB7H_cjs.FFID_ANNOUNCEMENTS_ERROR_CODES; }
 });
 Object.defineProperty(exports, "FFID_INQUIRY_CATEGORIES", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.FFID_INQUIRY_CATEGORIES; }
+  get: function () { return chunkMRHDPB7H_cjs.FFID_INQUIRY_CATEGORIES; }
 });
 Object.defineProperty(exports, "FFID_INQUIRY_CATEGORIES_SITE_2026", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.FFID_INQUIRY_CATEGORIES_SITE_2026; }
+  get: function () { return chunkMRHDPB7H_cjs.FFID_INQUIRY_CATEGORIES_SITE_2026; }
 });
 Object.defineProperty(exports, "computeEffectiveStatusFromSession", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.computeEffectiveStatusFromSession; }
+  get: function () { return chunkMRHDPB7H_cjs.computeEffectiveStatusFromSession; }
 });
 Object.defineProperty(exports, "createFFIDAnnouncementsClient", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.createFFIDAnnouncementsClient; }
+  get: function () { return chunkMRHDPB7H_cjs.createFFIDAnnouncementsClient; }
 });
 Object.defineProperty(exports, "createFFIDClient", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.createFFIDClient; }
+  get: function () { return chunkMRHDPB7H_cjs.createFFIDClient; }
 });
 Object.defineProperty(exports, "createTokenStore", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.createTokenStore; }
+  get: function () { return chunkMRHDPB7H_cjs.createTokenStore; }
 });
 Object.defineProperty(exports, "generateCodeChallenge", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.generateCodeChallenge; }
+  get: function () { return chunkMRHDPB7H_cjs.generateCodeChallenge; }
 });
 Object.defineProperty(exports, "generateCodeVerifier", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.generateCodeVerifier; }
+  get: function () { return chunkMRHDPB7H_cjs.generateCodeVerifier; }
 });
 Object.defineProperty(exports, "hasAccessFromUserinfo", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.hasAccessFromUserinfo; }
+  get: function () { return chunkMRHDPB7H_cjs.hasAccessFromUserinfo; }
 });
 Object.defineProperty(exports, "isBlockedFromUserinfo", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.isBlockedFromUserinfo; }
+  get: function () { return chunkMRHDPB7H_cjs.isBlockedFromUserinfo; }
 });
 Object.defineProperty(exports, "isFFIDInquiryCategorySite2026", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.isFFIDInquiryCategorySite2026; }
+  get: function () { return chunkMRHDPB7H_cjs.isFFIDInquiryCategorySite2026; }
 });
 Object.defineProperty(exports, "normalizeRedirectUri", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.normalizeRedirectUri; }
+  get: function () { return chunkMRHDPB7H_cjs.normalizeRedirectUri; }
 });
 Object.defineProperty(exports, "retrieveCodeVerifier", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.retrieveCodeVerifier; }
+  get: function () { return chunkMRHDPB7H_cjs.retrieveCodeVerifier; }
 });
 Object.defineProperty(exports, "storeCodeVerifier", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.storeCodeVerifier; }
+  get: function () { return chunkMRHDPB7H_cjs.storeCodeVerifier; }
 });
 Object.defineProperty(exports, "useFFID", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.useFFID; }
+  get: function () { return chunkMRHDPB7H_cjs.useFFID; }
 });
 Object.defineProperty(exports, "useFFIDAnnouncements", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.useFFIDAnnouncements; }
+  get: function () { return chunkMRHDPB7H_cjs.useFFIDAnnouncements; }
 });
 Object.defineProperty(exports, "useSubscription", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.useSubscription; }
+  get: function () { return chunkMRHDPB7H_cjs.useSubscription; }
 });
 Object.defineProperty(exports, "withSubscription", {
   enumerable: true,
-  get: function () { return chunkWGSEZSZI_cjs.withSubscription; }
+  get: function () { return chunkMRHDPB7H_cjs.withSubscription; }
 });
 Object.defineProperty(exports, "ALL_DENIED_EXCEPT_NECESSARY", {
   enumerable: true,

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { F as FFIDSubscriptionStatus, a as FFIDConfig, b as FFIDApiResponse, c as FFIDSessionResponse, d as FFIDRedirectResult, e as FFIDError, f as FFIDSubscriptionCheckResponse, g as FFIDCheckServiceAccessParams, h as FFIDServiceAccessDecision, i as FFIDProfileCallOptions, j as FFIDUserProfile, k as FFIDUpdateUserProfileRequest, l as FFIDAnalyticsConfig, m as FFIDCreateCheckoutParams, n as FFIDCheckoutSessionResponse, o as FFIDCreatePortalParams, p as FFIDPortalSessionResponse, q as FFIDVerifyAccessTokenOptions, r as FFIDOAuthUserInfo, s as FFIDInquiryCreateParams, t as FFIDInquiryCreateResponse, u as FFIDAuthMode, v as FFIDLogger, w as FFIDCacheAdapter, x as FFIDUser, y as FFIDOrganization, z as FFIDSubscription, A as FFIDSubscriptionContextValue, E as EffectiveSubscriptionStatus, B as FFIDOAuthUserInfoSubscription, C as FFIDAnnouncementsClientConfig, L as ListAnnouncementsOptions, D as FFIDAnnouncementsApiResponse, G as AnnouncementListResponse, H as FFIDAnnouncementsLogger } from './index-_oO5sHjX.cjs';
-export { I as Announcement, J as AnnouncementStatus, K as AnnouncementType, M as FFIDAnnouncementBadge, N as FFIDAnnouncementList, O as FFIDAnnouncementsError, P as FFIDAnnouncementsErrorCode, Q as FFIDAnnouncementsServerResponse, R as FFIDCacheConfig, S as FFIDContextValue, T as FFIDInquiryCategory, U as FFIDInquiryCategorySite2026, V as FFIDInquiryForm, W as FFIDInquiryFormCategoryItem, X as FFIDInquiryFormClassNames, Y as FFIDInquiryFormLegalLayout, Z as FFIDInquiryFormOrganization, _ as FFIDInquiryFormPlaceholderContext, $ as FFIDInquiryFormPrefill, a0 as FFIDInquiryFormProps, a1 as FFIDInquiryFormSubmitData, a2 as FFIDInquiryFormSubmitResult, a3 as FFIDJwtClaims, a4 as FFIDLoginButton, a5 as FFIDOAuthTokenResponse, a6 as FFIDOAuthUserInfoMemberRole, a7 as FFIDOrganizationSwitcher, a8 as FFIDRedirectErrorCode, a9 as FFIDSeatModel, aa as FFIDServiceAccessDenialReason, ab as FFIDServiceAccessFailPolicy, ac as FFIDSubscriptionBadge, ad as FFIDTokenIntrospectionResponse, ae as FFIDUserMenu, af as FFID_INQUIRY_CATEGORIES, ag as FFID_INQUIRY_CATEGORIES_SITE_2026, ah as UseFFIDAnnouncementsOptions, ai as UseFFIDAnnouncementsReturn, aj as isFFIDInquiryCategorySite2026, ak as useFFIDAnnouncements } from './index-_oO5sHjX.cjs';
+import { F as FFIDSubscriptionStatus, a as FFIDConfig, b as FFIDApiResponse, c as FFIDSessionResponse, d as FFIDRedirectResult, e as FFIDError, f as FFIDSubscriptionCheckResponse, g as FFIDCheckServiceAccessParams, h as FFIDServiceAccessDecision, i as FFIDProfileCallOptions, j as FFIDUserProfile, k as FFIDUpdateUserProfileRequest, l as FFIDAnalyticsConfig, m as FFIDCreateCheckoutParams, n as FFIDCheckoutSessionResponse, o as FFIDCreatePortalParams, p as FFIDPortalSessionResponse, q as FFIDVerifyAccessTokenOptions, r as FFIDOAuthUserInfo, s as FFIDInquiryCreateParams, t as FFIDInquiryCreateResponse, u as FFIDAuthMode, v as FFIDLogger, w as FFIDCacheAdapter, x as FFIDUser, y as FFIDOrganization, z as FFIDSubscription, A as FFIDSubscriptionContextValue, E as EffectiveSubscriptionStatus, B as FFIDOAuthUserInfoSubscription, C as FFIDAnnouncementsClientConfig, L as ListAnnouncementsOptions, D as FFIDAnnouncementsApiResponse, G as AnnouncementListResponse, H as FFIDAnnouncementsLogger } from './index-DeegKrLW.cjs';
+export { I as Announcement, J as AnnouncementStatus, K as AnnouncementType, M as FFIDAnnouncementBadge, N as FFIDAnnouncementList, O as FFIDAnnouncementsError, P as FFIDAnnouncementsErrorCode, Q as FFIDAnnouncementsServerResponse, R as FFIDCacheConfig, S as FFIDContextValue, T as FFIDInquiryCategory, U as FFIDInquiryCategorySite2026, V as FFIDInquiryForm, W as FFIDInquiryFormCategoryItem, X as FFIDInquiryFormClassNames, Y as FFIDInquiryFormLegalLayout, Z as FFIDInquiryFormOrganization, _ as FFIDInquiryFormPlaceholderContext, $ as FFIDInquiryFormPrefill, a0 as FFIDInquiryFormProps, a1 as FFIDInquiryFormSubmitData, a2 as FFIDInquiryFormSubmitResult, a3 as FFIDJwtClaims, a4 as FFIDLoginButton, a5 as FFIDOAuthTokenResponse, a6 as FFIDOAuthUserInfoMemberRole, a7 as FFIDOrganizationSwitcher, a8 as FFIDRedirectErrorCode, a9 as FFIDSeatModel, aa as FFIDServiceAccessDenialReason, ab as FFIDServiceAccessFailPolicy, ac as FFIDSubscriptionBadge, ad as FFIDTokenIntrospectionResponse, ae as FFIDUserMenu, af as FFID_INQUIRY_CATEGORIES, ag as FFID_INQUIRY_CATEGORIES_SITE_2026, ah as UseFFIDAnnouncementsOptions, ai as UseFFIDAnnouncementsReturn, aj as isFFIDInquiryCategorySite2026, ak as useFFIDAnnouncements } from './index-DeegKrLW.cjs';
 export { A as ALL_DENIED_EXCEPT_NECESSARY, i as CONSENT_COOKIE_NAME, j as CONSENT_DISMISSAL_TIMESTAMP_KEY, l as COOKIE_VERSION, D as DEFAULT_CONSENT_ERROR_MESSAGES, o as FFIDAnalyticsProvider, p as FFIDAnalyticsProviderProps, c as FFIDConsentCategories, r as FFIDConsentCategoryCode, e as FFIDConsentCategoryMetadata, w as FFIDConsentError, x as FFIDConsentErrorCode, y as FFIDConsentMergeStrategy, B as FFIDConsentMergeWarning, E as FFIDConsentMergeWarningEvent, F as FFIDConsentResult, I as FFIDConsentSource, a as FFIDConsentState, d as FFIDConsentSyncResult, M as FFIDCookieBanner, N as FFIDCookieBannerClassNames, O as FFIDCookieBannerProps, Q as FFIDCookieLink, R as FFIDCookieLinkProps, f as FFIDCookiePolicy, T as FFIDCookieSettings, U as FFIDCookieSettingsClassNames, V as FFIDCookieSettingsProps, _ as FFID_CONSENT_ERROR_CODES, ae as UseFFIDConsentPreferencesReturn, af as UseFFIDConsentReturn, ag as clearConsentDismissalTimestamp, aj as decodeConsentCookie, al as encodeConsentCookie, an as readConsentCookie, ao as readConsentDismissalTimestamp, aq as useFFIDConsent, ar as useFFIDConsentPreferences, as as writeConsentCookie, at as writeConsentDismissalTimestamp } from './FFIDCookieLink-CE01gYc4.cjs';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode, ComponentType, FC } from 'react';
@@ -1089,6 +1089,21 @@ interface ComputeEffectiveStatusInput {
      * `blocked`.
      */
     pastDueSince?: string | null | undefined;
+    /**
+     * Whether the subscription is scheduled to cancel at the end of the
+     * current billing period (`cancel_at_period_end=true` in Stripe).
+     *
+     * Optional / defaults to `false` for backward compatibility — pre-#3460
+     * callers (and pre-#3464 FFID backends that omit the field on the wire)
+     * do not pass this field and MUST keep observing `'active'` for the
+     * same inputs. When `true` and the period has not yet ended, the
+     * `'active'` branch returns `'active_canceling'` so consumers can render
+     * a "cancellation scheduled" badge + reactivation CTA without losing
+     * access. Outside `case 'active'` the field is intentionally ignored,
+     * so any non-`active` DB status is unaffected regardless of what Stripe
+     * sets.
+     */
+    cancelAtPeriodEnd?: boolean | undefined;
 }
 /**
  * Compute an `EffectiveSubscriptionStatus` from the fields available in the
@@ -1131,6 +1146,14 @@ declare function computeEffectiveStatusFromSession(input: ComputeEffectiveStatus
  * caller that needs to fan in on the same access predicate. Mirrors the FFID
  * backend constants in `src/app/api/v1/subscriptions/ext/check/route.ts`
  * (route-local) — change there forces a sync here in the same PR.
+ *
+ * `active_canceling` (post-#3464, server-mirrored since SDK 5.8.0) is
+ * access-granting: the FFID backend now emits the literal on
+ * `/oauth/userinfo` and `/ext/check` when `cancel_at_period_end=true` and
+ * the period is still live. `hasAccessFromUserinfo` treats it identically
+ * to `active`; `isBlockedFromUserinfo` returns `false` for it. Callers
+ * that want to render a "cancellation scheduled" badge should branch on
+ * the literal directly.
  */
 declare const ACCESS_GRANTING_EFFECTIVE_STATUSES: readonly EffectiveSubscriptionStatus[];
 /**
@@ -1145,7 +1168,8 @@ declare const BLOCKING_EFFECTIVE_STATUSES: readonly EffectiveSubscriptionStatus[
  * Decide whether the `/oauth/userinfo` subscription summary grants access.
  *
  * Returns `true` iff `sub.effectiveStatus` is in
- * {@link ACCESS_GRANTING_EFFECTIVE_STATUSES} (`active` or `past_due_grace`).
+ * {@link ACCESS_GRANTING_EFFECTIVE_STATUSES} (`active`, `active_canceling`,
+ * or `past_due_grace`).
  *
  * Conservative fallback rules (security-critical — treat as part of the
  * contract, not implementation detail):

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { F as FFIDSubscriptionStatus, a as FFIDConfig, b as FFIDApiResponse, c as FFIDSessionResponse, d as FFIDRedirectResult, e as FFIDError, f as FFIDSubscriptionCheckResponse, g as FFIDCheckServiceAccessParams, h as FFIDServiceAccessDecision, i as FFIDProfileCallOptions, j as FFIDUserProfile, k as FFIDUpdateUserProfileRequest, l as FFIDAnalyticsConfig, m as FFIDCreateCheckoutParams, n as FFIDCheckoutSessionResponse, o as FFIDCreatePortalParams, p as FFIDPortalSessionResponse, q as FFIDVerifyAccessTokenOptions, r as FFIDOAuthUserInfo, s as FFIDInquiryCreateParams, t as FFIDInquiryCreateResponse, u as FFIDAuthMode, v as FFIDLogger, w as FFIDCacheAdapter, x as FFIDUser, y as FFIDOrganization, z as FFIDSubscription, A as FFIDSubscriptionContextValue, E as EffectiveSubscriptionStatus, B as FFIDOAuthUserInfoSubscription, C as FFIDAnnouncementsClientConfig, L as ListAnnouncementsOptions, D as FFIDAnnouncementsApiResponse, G as AnnouncementListResponse, H as FFIDAnnouncementsLogger } from './index-_oO5sHjX.js';
-export { I as Announcement, J as AnnouncementStatus, K as AnnouncementType, M as FFIDAnnouncementBadge, N as FFIDAnnouncementList, O as FFIDAnnouncementsError, P as FFIDAnnouncementsErrorCode, Q as FFIDAnnouncementsServerResponse, R as FFIDCacheConfig, S as FFIDContextValue, T as FFIDInquiryCategory, U as FFIDInquiryCategorySite2026, V as FFIDInquiryForm, W as FFIDInquiryFormCategoryItem, X as FFIDInquiryFormClassNames, Y as FFIDInquiryFormLegalLayout, Z as FFIDInquiryFormOrganization, _ as FFIDInquiryFormPlaceholderContext, $ as FFIDInquiryFormPrefill, a0 as FFIDInquiryFormProps, a1 as FFIDInquiryFormSubmitData, a2 as FFIDInquiryFormSubmitResult, a3 as FFIDJwtClaims, a4 as FFIDLoginButton, a5 as FFIDOAuthTokenResponse, a6 as FFIDOAuthUserInfoMemberRole, a7 as FFIDOrganizationSwitcher, a8 as FFIDRedirectErrorCode, a9 as FFIDSeatModel, aa as FFIDServiceAccessDenialReason, ab as FFIDServiceAccessFailPolicy, ac as FFIDSubscriptionBadge, ad as FFIDTokenIntrospectionResponse, ae as FFIDUserMenu, af as FFID_INQUIRY_CATEGORIES, ag as FFID_INQUIRY_CATEGORIES_SITE_2026, ah as UseFFIDAnnouncementsOptions, ai as UseFFIDAnnouncementsReturn, aj as isFFIDInquiryCategorySite2026, ak as useFFIDAnnouncements } from './index-_oO5sHjX.js';
+import { F as FFIDSubscriptionStatus, a as FFIDConfig, b as FFIDApiResponse, c as FFIDSessionResponse, d as FFIDRedirectResult, e as FFIDError, f as FFIDSubscriptionCheckResponse, g as FFIDCheckServiceAccessParams, h as FFIDServiceAccessDecision, i as FFIDProfileCallOptions, j as FFIDUserProfile, k as FFIDUpdateUserProfileRequest, l as FFIDAnalyticsConfig, m as FFIDCreateCheckoutParams, n as FFIDCheckoutSessionResponse, o as FFIDCreatePortalParams, p as FFIDPortalSessionResponse, q as FFIDVerifyAccessTokenOptions, r as FFIDOAuthUserInfo, s as FFIDInquiryCreateParams, t as FFIDInquiryCreateResponse, u as FFIDAuthMode, v as FFIDLogger, w as FFIDCacheAdapter, x as FFIDUser, y as FFIDOrganization, z as FFIDSubscription, A as FFIDSubscriptionContextValue, E as EffectiveSubscriptionStatus, B as FFIDOAuthUserInfoSubscription, C as FFIDAnnouncementsClientConfig, L as ListAnnouncementsOptions, D as FFIDAnnouncementsApiResponse, G as AnnouncementListResponse, H as FFIDAnnouncementsLogger } from './index-DeegKrLW.js';
+export { I as Announcement, J as AnnouncementStatus, K as AnnouncementType, M as FFIDAnnouncementBadge, N as FFIDAnnouncementList, O as FFIDAnnouncementsError, P as FFIDAnnouncementsErrorCode, Q as FFIDAnnouncementsServerResponse, R as FFIDCacheConfig, S as FFIDContextValue, T as FFIDInquiryCategory, U as FFIDInquiryCategorySite2026, V as FFIDInquiryForm, W as FFIDInquiryFormCategoryItem, X as FFIDInquiryFormClassNames, Y as FFIDInquiryFormLegalLayout, Z as FFIDInquiryFormOrganization, _ as FFIDInquiryFormPlaceholderContext, $ as FFIDInquiryFormPrefill, a0 as FFIDInquiryFormProps, a1 as FFIDInquiryFormSubmitData, a2 as FFIDInquiryFormSubmitResult, a3 as FFIDJwtClaims, a4 as FFIDLoginButton, a5 as FFIDOAuthTokenResponse, a6 as FFIDOAuthUserInfoMemberRole, a7 as FFIDOrganizationSwitcher, a8 as FFIDRedirectErrorCode, a9 as FFIDSeatModel, aa as FFIDServiceAccessDenialReason, ab as FFIDServiceAccessFailPolicy, ac as FFIDSubscriptionBadge, ad as FFIDTokenIntrospectionResponse, ae as FFIDUserMenu, af as FFID_INQUIRY_CATEGORIES, ag as FFID_INQUIRY_CATEGORIES_SITE_2026, ah as UseFFIDAnnouncementsOptions, ai as UseFFIDAnnouncementsReturn, aj as isFFIDInquiryCategorySite2026, ak as useFFIDAnnouncements } from './index-DeegKrLW.js';
 export { A as ALL_DENIED_EXCEPT_NECESSARY, i as CONSENT_COOKIE_NAME, j as CONSENT_DISMISSAL_TIMESTAMP_KEY, l as COOKIE_VERSION, D as DEFAULT_CONSENT_ERROR_MESSAGES, o as FFIDAnalyticsProvider, p as FFIDAnalyticsProviderProps, c as FFIDConsentCategories, r as FFIDConsentCategoryCode, e as FFIDConsentCategoryMetadata, w as FFIDConsentError, x as FFIDConsentErrorCode, y as FFIDConsentMergeStrategy, B as FFIDConsentMergeWarning, E as FFIDConsentMergeWarningEvent, F as FFIDConsentResult, I as FFIDConsentSource, a as FFIDConsentState, d as FFIDConsentSyncResult, M as FFIDCookieBanner, N as FFIDCookieBannerClassNames, O as FFIDCookieBannerProps, Q as FFIDCookieLink, R as FFIDCookieLinkProps, f as FFIDCookiePolicy, T as FFIDCookieSettings, U as FFIDCookieSettingsClassNames, V as FFIDCookieSettingsProps, _ as FFID_CONSENT_ERROR_CODES, ae as UseFFIDConsentPreferencesReturn, af as UseFFIDConsentReturn, ag as clearConsentDismissalTimestamp, aj as decodeConsentCookie, al as encodeConsentCookie, an as readConsentCookie, ao as readConsentDismissalTimestamp, aq as useFFIDConsent, ar as useFFIDConsentPreferences, as as writeConsentCookie, at as writeConsentDismissalTimestamp } from './FFIDCookieLink-CE01gYc4.js';
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode, ComponentType, FC } from 'react';
@@ -1089,6 +1089,21 @@ interface ComputeEffectiveStatusInput {
      * `blocked`.
      */
     pastDueSince?: string | null | undefined;
+    /**
+     * Whether the subscription is scheduled to cancel at the end of the
+     * current billing period (`cancel_at_period_end=true` in Stripe).
+     *
+     * Optional / defaults to `false` for backward compatibility — pre-#3460
+     * callers (and pre-#3464 FFID backends that omit the field on the wire)
+     * do not pass this field and MUST keep observing `'active'` for the
+     * same inputs. When `true` and the period has not yet ended, the
+     * `'active'` branch returns `'active_canceling'` so consumers can render
+     * a "cancellation scheduled" badge + reactivation CTA without losing
+     * access. Outside `case 'active'` the field is intentionally ignored,
+     * so any non-`active` DB status is unaffected regardless of what Stripe
+     * sets.
+     */
+    cancelAtPeriodEnd?: boolean | undefined;
 }
 /**
  * Compute an `EffectiveSubscriptionStatus` from the fields available in the
@@ -1131,6 +1146,14 @@ declare function computeEffectiveStatusFromSession(input: ComputeEffectiveStatus
  * caller that needs to fan in on the same access predicate. Mirrors the FFID
  * backend constants in `src/app/api/v1/subscriptions/ext/check/route.ts`
  * (route-local) — change there forces a sync here in the same PR.
+ *
+ * `active_canceling` (post-#3464, server-mirrored since SDK 5.8.0) is
+ * access-granting: the FFID backend now emits the literal on
+ * `/oauth/userinfo` and `/ext/check` when `cancel_at_period_end=true` and
+ * the period is still live. `hasAccessFromUserinfo` treats it identically
+ * to `active`; `isBlockedFromUserinfo` returns `false` for it. Callers
+ * that want to render a "cancellation scheduled" badge should branch on
+ * the literal directly.
  */
 declare const ACCESS_GRANTING_EFFECTIVE_STATUSES: readonly EffectiveSubscriptionStatus[];
 /**
@@ -1145,7 +1168,8 @@ declare const BLOCKING_EFFECTIVE_STATUSES: readonly EffectiveSubscriptionStatus[
  * Decide whether the `/oauth/userinfo` subscription summary grants access.
  *
  * Returns `true` iff `sub.effectiveStatus` is in
- * {@link ACCESS_GRANTING_EFFECTIVE_STATUSES} (`active` or `past_due_grace`).
+ * {@link ACCESS_GRANTING_EFFECTIVE_STATUSES} (`active`, `active_canceling`,
+ * or `past_due_grace`).
  *
  * Conservative fallback rules (security-critical — treat as part of the
  * contract, not implementation detail):

package/dist/index.js

@@ -1,5 +1,5 @@
-import { useFFIDContext, useSubscription } from './chunk-4SJKXEYB.js';
-export { ACCESS_GRANTING_EFFECTIVE_STATUSES, BLOCKING_EFFECTIVE_STATUSES, DEFAULT_API_BASE_URL, DEFAULT_OAUTH_SCOPES, FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDProvider, FFIDSDKError, FFIDSubscriptionBadge, FFIDUserMenu, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_INQUIRY_CATEGORIES, FFID_INQUIRY_CATEGORIES_SITE_2026, computeEffectiveStatusFromSession, createFFIDAnnouncementsClient, createFFIDClient, createTokenStore, generateCodeChallenge, generateCodeVerifier, hasAccessFromUserinfo, isBlockedFromUserinfo, isFFIDInquiryCategorySite2026, normalizeRedirectUri, retrieveCodeVerifier, storeCodeVerifier, useFFID, useFFIDAnnouncements, useSubscription, withSubscription } from './chunk-4SJKXEYB.js';
+import { useFFIDContext, useSubscription } from './chunk-Z6COUAR6.js';
+export { ACCESS_GRANTING_EFFECTIVE_STATUSES, BLOCKING_EFFECTIVE_STATUSES, DEFAULT_API_BASE_URL, DEFAULT_OAUTH_SCOPES, FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDProvider, FFIDSDKError, FFIDSubscriptionBadge, FFIDUserMenu, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_INQUIRY_CATEGORIES, FFID_INQUIRY_CATEGORIES_SITE_2026, computeEffectiveStatusFromSession, createFFIDAnnouncementsClient, createFFIDClient, createTokenStore, generateCodeChallenge, generateCodeVerifier, hasAccessFromUserinfo, isBlockedFromUserinfo, isFFIDInquiryCategorySite2026, normalizeRedirectUri, retrieveCodeVerifier, storeCodeVerifier, useFFID, useFFIDAnnouncements, useSubscription, withSubscription } from './chunk-Z6COUAR6.js';
 export { ALL_DENIED_EXCEPT_NECESSARY, CONSENT_COOKIE_NAME, CONSENT_DISMISSAL_TIMESTAMP_KEY, COOKIE_VERSION, DEFAULT_CONSENT_ERROR_MESSAGES, FFIDAnalyticsProvider, FFIDConsentError, FFIDCookieBanner, FFIDCookieLink, FFIDCookieSettings, FFID_CONSENT_ERROR_CODES, clearConsentDismissalTimestamp, decodeConsentCookie, encodeConsentCookie, readConsentCookie, readConsentDismissalTimestamp, useFFIDConsent, useFFIDConsentPreferences, writeConsentCookie, writeConsentDismissalTimestamp } from './chunk-KJ7FUNA6.js';
 import { useEffect, useRef } from 'react';
 import { jsx, Fragment } from 'react/jsx-runtime';

package/dist/server/index.cjs

@@ -125,7 +125,15 @@ function normalizeUserinfo(raw) {
       seatModel: raw.subscription.seat_model ?? null,
       memberRole: raw.subscription.member_role ?? null,
       organizationId: raw.subscription.organization_id ?? null,
-      hasSeatAssignment: raw.subscription.has_seat_assignment ?? false
+      hasSeatAssignment: raw.subscription.has_seat_assignment ?? false,
+      // #3464: legacy FFID (< this issue) omits the field on the wire.
+      // The "unknown" axis is unused — no consumer differentiates "server
+      // didn't tell us" from "definitely not scheduled" because the
+      // companion `effectiveStatus` already returns `'active'` (not
+      // `'active_canceling'`) for legacy backends. Defaulting to `false`
+      // here keeps the downstream contract a plain boolean.
+      cancelAtPeriodEnd: raw.subscription.cancel_at_period_end ?? false,
+      currentPeriodEnd: raw.subscription.current_period_end ?? null
     } : void 0
   };
 }
@@ -142,8 +150,14 @@ function mapUserinfoSubscriptionToSession(userinfo, serviceCode) {
       planCode: subscription.planCode,
       planName: subscription.planCode,
       status: subscription.status,
-      currentPeriodEnd: null,
+      // #3464: userinfo now carries `current_period_end` and
+      // `cancel_at_period_end`. Pre-#3464 FFID backends still omit them on
+      // the wire (`currentPeriodEnd === null` / `cancelAtPeriodEnd === false`
+      // after `normalizeUserinfo` defaults), so the session helper sees
+      // plain `'active'` — identical to pre-#3464 behaviour.
+      currentPeriodEnd: subscription.currentPeriodEnd,
       trialEnd: null,
+      cancelAtPeriodEnd: subscription.cancelAtPeriodEnd,
       seatModel: subscription.seatModel ?? void 0,
       memberRole: subscription.memberRole ?? void 0,
       organizationId: subscription.organizationId
@@ -837,7 +851,7 @@ function createProfileMethods(deps) {
 }
 
 // src/client/version-check.ts
-var SDK_VERSION = "5.6.0";
+var SDK_VERSION = "5.8.0";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {
@@ -2190,6 +2204,7 @@ function createInquiryMethods(deps) {
 // src/subscriptions/userinfo-helpers.ts
 var ACCESS_GRANTING_EFFECTIVE_STATUSES = [
   "active",
+  "active_canceling",
   "past_due_grace"
 ];
 var BLOCKING_EFFECTIVE_STATUSES = [
@@ -2229,6 +2244,12 @@ var EXT_CHECK_ENDPOINT = "/api/v1/subscriptions/ext/check";
 var DEFAULT_ALLOW_GRACE = true;
 var DEFAULT_SERVICE_ACCESS_FAIL_POLICY = "failClosed";
 var SERVICE_ACCESS_DENIED_CODE = "SERVICE_ACCESS_DENIED";
+var DENIAL_REASON_BY_DENYING_STATUS = {
+  blocked: "blocked",
+  canceled: "canceled",
+  expired: "expired",
+  trial_expired: "trial_expired"
+};
 function resolveServiceAccessDenialReason(params, allowGrace) {
   if (params.hasAccess) {
     return null;
@@ -2239,10 +2260,10 @@ function resolveServiceAccessDenialReason(params, allowGrace) {
   if (params.isGrace && !allowGrace) {
     return "grace_disallowed";
   }
-  if (params.effectiveStatus === "active" || params.effectiveStatus === "past_due_grace") {
+  if (ACCESS_GRANTING_EFFECTIVE_STATUSES.includes(params.effectiveStatus)) {
     return "blocked";
   }
-  return params.effectiveStatus;
+  return DENIAL_REASON_BY_DENYING_STATUS[params.effectiveStatus];
 }
 function toServiceAccessDecision(response, allowGrace) {
   const effectiveStatus = response.effectiveStatus ?? null;

package/dist/server/index.d.cts

@@ -1,8 +1,8 @@
-import { F as FFIDLogger, a as FFIDError, b as FFIDCacheAdapter, c as FFIDVerifyAccessTokenOptions, d as FFIDApiResponse, e as FFIDOAuthUserInfo } from '../ffid-client-CmxQxkoK.cjs';
-export { f as FFIDAddMemberParams, g as FFIDAddMemberRequest, h as FFIDAddMemberResponse, i as FFIDAssignableMemberRole, j as FFIDCacheConfig, k as FFIDClient, l as FFIDConfig, m as FFIDListMembersResponse, n as FFIDMemberRole, o as FFIDOrganization, p as FFIDOrganizationMember, q as FFIDOtpSendResponse, r as FFIDOtpVerifyResponse, s as FFIDPasswordResetConfirmResponse, t as FFIDPasswordResetResponse, u as FFIDPasswordResetVerifyResponse, v as FFIDProfileCallOptions, w as FFIDRemoveMemberResponse, x as FFIDResetSessionResponse, y as FFIDSubscription, z as FFIDUpdateMemberRoleResponse, A as FFIDUpdateUserProfileRequest, B as FFIDUser, C as FFIDUserProfile, T as TokenData, D as TokenStore, E as createFFIDClient, G as createTokenStore } from '../ffid-client-CmxQxkoK.cjs';
+import { F as FFIDLogger, a as FFIDError, b as FFIDCacheAdapter, c as FFIDVerifyAccessTokenOptions, d as FFIDApiResponse, e as FFIDOAuthUserInfo } from '../ffid-client-BhopNmnq.cjs';
+export { f as FFIDAddMemberParams, g as FFIDAddMemberRequest, h as FFIDAddMemberResponse, i as FFIDAssignableMemberRole, j as FFIDCacheConfig, k as FFIDClient, l as FFIDConfig, m as FFIDListMembersResponse, n as FFIDMemberRole, o as FFIDOrganization, p as FFIDOrganizationMember, q as FFIDOtpSendResponse, r as FFIDOtpVerifyResponse, s as FFIDPasswordResetConfirmResponse, t as FFIDPasswordResetResponse, u as FFIDPasswordResetVerifyResponse, v as FFIDProfileCallOptions, w as FFIDRemoveMemberResponse, x as FFIDResetSessionResponse, y as FFIDSubscription, z as FFIDUpdateMemberRoleResponse, A as FFIDUpdateUserProfileRequest, B as FFIDUser, C as FFIDUserProfile, T as TokenData, D as TokenStore, E as createFFIDClient, G as createTokenStore } from '../ffid-client-BhopNmnq.cjs';
 export { D as DEFAULT_API_BASE_URL, a as DEFAULT_OAUTH_SCOPES } from '../constants-D61jqRIO.cjs';
 import { z } from 'zod';
-import '../types-5g_Bg6Ey.cjs';
+import '../types-BYdtyO_2.cjs';
 
 /** Token verification - verifyAccessToken() implementation */
 

package/dist/server/index.d.ts

@@ -1,8 +1,8 @@
-import { F as FFIDLogger, a as FFIDError, b as FFIDCacheAdapter, c as FFIDVerifyAccessTokenOptions, d as FFIDApiResponse, e as FFIDOAuthUserInfo } from '../ffid-client-BXl7Dop7.js';
-export { f as FFIDAddMemberParams, g as FFIDAddMemberRequest, h as FFIDAddMemberResponse, i as FFIDAssignableMemberRole, j as FFIDCacheConfig, k as FFIDClient, l as FFIDConfig, m as FFIDListMembersResponse, n as FFIDMemberRole, o as FFIDOrganization, p as FFIDOrganizationMember, q as FFIDOtpSendResponse, r as FFIDOtpVerifyResponse, s as FFIDPasswordResetConfirmResponse, t as FFIDPasswordResetResponse, u as FFIDPasswordResetVerifyResponse, v as FFIDProfileCallOptions, w as FFIDRemoveMemberResponse, x as FFIDResetSessionResponse, y as FFIDSubscription, z as FFIDUpdateMemberRoleResponse, A as FFIDUpdateUserProfileRequest, B as FFIDUser, C as FFIDUserProfile, T as TokenData, D as TokenStore, E as createFFIDClient, G as createTokenStore } from '../ffid-client-BXl7Dop7.js';
+import { F as FFIDLogger, a as FFIDError, b as FFIDCacheAdapter, c as FFIDVerifyAccessTokenOptions, d as FFIDApiResponse, e as FFIDOAuthUserInfo } from '../ffid-client-DoGYvIll.js';
+export { f as FFIDAddMemberParams, g as FFIDAddMemberRequest, h as FFIDAddMemberResponse, i as FFIDAssignableMemberRole, j as FFIDCacheConfig, k as FFIDClient, l as FFIDConfig, m as FFIDListMembersResponse, n as FFIDMemberRole, o as FFIDOrganization, p as FFIDOrganizationMember, q as FFIDOtpSendResponse, r as FFIDOtpVerifyResponse, s as FFIDPasswordResetConfirmResponse, t as FFIDPasswordResetResponse, u as FFIDPasswordResetVerifyResponse, v as FFIDProfileCallOptions, w as FFIDRemoveMemberResponse, x as FFIDResetSessionResponse, y as FFIDSubscription, z as FFIDUpdateMemberRoleResponse, A as FFIDUpdateUserProfileRequest, B as FFIDUser, C as FFIDUserProfile, T as TokenData, D as TokenStore, E as createFFIDClient, G as createTokenStore } from '../ffid-client-DoGYvIll.js';
 export { D as DEFAULT_API_BASE_URL, a as DEFAULT_OAUTH_SCOPES } from '../constants-D61jqRIO.js';
 import { z } from 'zod';
-import '../types-5g_Bg6Ey.js';
+import '../types-BYdtyO_2.js';
 
 /** Token verification - verifyAccessToken() implementation */
 

package/dist/server/index.js

@@ -124,7 +124,15 @@ function normalizeUserinfo(raw) {
       seatModel: raw.subscription.seat_model ?? null,
       memberRole: raw.subscription.member_role ?? null,
       organizationId: raw.subscription.organization_id ?? null,
-      hasSeatAssignment: raw.subscription.has_seat_assignment ?? false
+      hasSeatAssignment: raw.subscription.has_seat_assignment ?? false,
+      // #3464: legacy FFID (< this issue) omits the field on the wire.
+      // The "unknown" axis is unused — no consumer differentiates "server
+      // didn't tell us" from "definitely not scheduled" because the
+      // companion `effectiveStatus` already returns `'active'` (not
+      // `'active_canceling'`) for legacy backends. Defaulting to `false`
+      // here keeps the downstream contract a plain boolean.
+      cancelAtPeriodEnd: raw.subscription.cancel_at_period_end ?? false,
+      currentPeriodEnd: raw.subscription.current_period_end ?? null
     } : void 0
   };
 }
@@ -141,8 +149,14 @@ function mapUserinfoSubscriptionToSession(userinfo, serviceCode) {
       planCode: subscription.planCode,
       planName: subscription.planCode,
       status: subscription.status,
-      currentPeriodEnd: null,
+      // #3464: userinfo now carries `current_period_end` and
+      // `cancel_at_period_end`. Pre-#3464 FFID backends still omit them on
+      // the wire (`currentPeriodEnd === null` / `cancelAtPeriodEnd === false`
+      // after `normalizeUserinfo` defaults), so the session helper sees
+      // plain `'active'` — identical to pre-#3464 behaviour.
+      currentPeriodEnd: subscription.currentPeriodEnd,
       trialEnd: null,
+      cancelAtPeriodEnd: subscription.cancelAtPeriodEnd,
       seatModel: subscription.seatModel ?? void 0,
       memberRole: subscription.memberRole ?? void 0,
       organizationId: subscription.organizationId
@@ -836,7 +850,7 @@ function createProfileMethods(deps) {
 }
 
 // src/client/version-check.ts
-var SDK_VERSION = "5.6.0";
+var SDK_VERSION = "5.8.0";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {
@@ -2189,6 +2203,7 @@ function createInquiryMethods(deps) {
 // src/subscriptions/userinfo-helpers.ts
 var ACCESS_GRANTING_EFFECTIVE_STATUSES = [
   "active",
+  "active_canceling",
   "past_due_grace"
 ];
 var BLOCKING_EFFECTIVE_STATUSES = [
@@ -2228,6 +2243,12 @@ var EXT_CHECK_ENDPOINT = "/api/v1/subscriptions/ext/check";
 var DEFAULT_ALLOW_GRACE = true;
 var DEFAULT_SERVICE_ACCESS_FAIL_POLICY = "failClosed";
 var SERVICE_ACCESS_DENIED_CODE = "SERVICE_ACCESS_DENIED";
+var DENIAL_REASON_BY_DENYING_STATUS = {
+  blocked: "blocked",
+  canceled: "canceled",
+  expired: "expired",
+  trial_expired: "trial_expired"
+};
 function resolveServiceAccessDenialReason(params, allowGrace) {
   if (params.hasAccess) {
     return null;
@@ -2238,10 +2259,10 @@ function resolveServiceAccessDenialReason(params, allowGrace) {
   if (params.isGrace && !allowGrace) {
     return "grace_disallowed";
   }
-  if (params.effectiveStatus === "active" || params.effectiveStatus === "past_due_grace") {
+  if (ACCESS_GRANTING_EFFECTIVE_STATUSES.includes(params.effectiveStatus)) {
     return "blocked";
   }
-  return params.effectiveStatus;
+  return DENIAL_REASON_BY_DENYING_STATUS[params.effectiveStatus];
 }
 function toServiceAccessDecision(response, allowGrace) {
   const effectiveStatus = response.effectiveStatus ?? null;

package/dist/server/test/index.d.cts

@@ -1,5 +1,5 @@
-import { k as FFIDClient, e as FFIDOAuthUserInfo } from '../../ffid-client-CmxQxkoK.cjs';
-import '../../types-5g_Bg6Ey.cjs';
+import { k as FFIDClient, e as FFIDOAuthUserInfo } from '../../ffid-client-BhopNmnq.cjs';
+import '../../types-BYdtyO_2.cjs';
 
 /**
  * FFID SDK - Test mode client (E2E / integration test bypass)

package/dist/server/test/index.d.ts

@@ -1,5 +1,5 @@
-import { k as FFIDClient, e as FFIDOAuthUserInfo } from '../../ffid-client-BXl7Dop7.js';
-import '../../types-5g_Bg6Ey.js';
+import { k as FFIDClient, e as FFIDOAuthUserInfo } from '../../ffid-client-DoGYvIll.js';
+import '../../types-BYdtyO_2.js';
 
 /**
  * FFID SDK - Test mode client (E2E / integration test bypass)

package/dist/{types-5g_Bg6Ey.d.cts → types-BYdtyO_2.d.cts}

@@ -17,6 +17,10 @@
  * branch on a single value:
  *
  * - `active` — normal paying subscription; grant full access.
+ * - `active_canceling` — paying subscription with `cancel_at_period_end=true`.
+ *   Access stays live until `currentPeriodEnd`; callers SHOULD surface a
+ *   "cancellation scheduled" badge and a reactivation CTA. Session-only
+ *   refinement of `active` — see the asymmetry note below.
  * - `past_due_grace` — payment failed but FFID is still retrying. Service
  *   SHOULD keep access and surface a recovery banner.
  * - `blocked` — payment dunning exhausted (`past_due` over grace,
@@ -29,9 +33,22 @@
  *   This is the FFID-internal runtime-expired case (see
  *   `getEffectiveSubscriptionStatus` on the server). Deny access.
  *
+ * **`active_canceling` is mirrored on the server (#3464, SDK 5.8.0).**
+ * Earlier (#3460, SDK 5.7.0) the literal was a session-only enrichment;
+ * since FFID #3464 the backend `EffectiveSubscriptionStatus` and both
+ * `/api/v1/subscriptions/ext/check` + `/oauth/userinfo` emit
+ * `active_canceling` directly when `cancel_at_period_end=true` and the
+ * period is still live. SDK consumers receive the same literal whether
+ * they read it from the session-derived `computeEffectiveStatusFromSession`
+ * or the server-derived `effectiveStatus` on the userinfo / ext-check
+ * paths. Pre-#3464 FFID backends omit `cancelAtPeriodEnd` on the wire; the
+ * SDK `normalizeUserinfo` boundary defaults it to `false`, so downstream
+ * consumers see a plain boolean and `computeEffectiveStatus` returns the
+ * original `'active'` verdict for legacy deployments.
+ *
  * @see /api/v1/subscriptions/ext/check
  * @see docs/03-implementation/EXPIRED_CONTRACT_HANDLING.md
  */
-type EffectiveSubscriptionStatus = 'active' | 'past_due_grace' | 'blocked' | 'canceled' | 'trial_expired' | 'expired';
+type EffectiveSubscriptionStatus = 'active' | 'active_canceling' | 'past_due_grace' | 'blocked' | 'canceled' | 'trial_expired' | 'expired';
 
 export type { EffectiveSubscriptionStatus as E };

package/dist/{types-5g_Bg6Ey.d.ts → types-BYdtyO_2.d.ts}

@@ -17,6 +17,10 @@
  * branch on a single value:
  *
  * - `active` — normal paying subscription; grant full access.
+ * - `active_canceling` — paying subscription with `cancel_at_period_end=true`.
+ *   Access stays live until `currentPeriodEnd`; callers SHOULD surface a
+ *   "cancellation scheduled" badge and a reactivation CTA. Session-only
+ *   refinement of `active` — see the asymmetry note below.
  * - `past_due_grace` — payment failed but FFID is still retrying. Service
  *   SHOULD keep access and surface a recovery banner.
  * - `blocked` — payment dunning exhausted (`past_due` over grace,
@@ -29,9 +33,22 @@
  *   This is the FFID-internal runtime-expired case (see
  *   `getEffectiveSubscriptionStatus` on the server). Deny access.
  *
+ * **`active_canceling` is mirrored on the server (#3464, SDK 5.8.0).**
+ * Earlier (#3460, SDK 5.7.0) the literal was a session-only enrichment;
+ * since FFID #3464 the backend `EffectiveSubscriptionStatus` and both
+ * `/api/v1/subscriptions/ext/check` + `/oauth/userinfo` emit
+ * `active_canceling` directly when `cancel_at_period_end=true` and the
+ * period is still live. SDK consumers receive the same literal whether
+ * they read it from the session-derived `computeEffectiveStatusFromSession`
+ * or the server-derived `effectiveStatus` on the userinfo / ext-check
+ * paths. Pre-#3464 FFID backends omit `cancelAtPeriodEnd` on the wire; the
+ * SDK `normalizeUserinfo` boundary defaults it to `false`, so downstream
+ * consumers see a plain boolean and `computeEffectiveStatus` returns the
+ * original `'active'` verdict for legacy deployments.
+ *
  * @see /api/v1/subscriptions/ext/check
  * @see docs/03-implementation/EXPIRED_CONTRACT_HANDLING.md
  */
-type EffectiveSubscriptionStatus = 'active' | 'past_due_grace' | 'blocked' | 'canceled' | 'trial_expired' | 'expired';
+type EffectiveSubscriptionStatus = 'active' | 'active_canceling' | 'past_due_grace' | 'blocked' | 'canceled' | 'trial_expired' | 'expired';
 
 export type { EffectiveSubscriptionStatus as E };

package/dist/webhooks/index.d.cts

@@ -1,4 +1,4 @@
-import { E as EffectiveSubscriptionStatus } from '../types-5g_Bg6Ey.cjs';
+import { E as EffectiveSubscriptionStatus } from '../types-BYdtyO_2.cjs';
 
 /**
  * FFID Webhook SDK Constants

package/dist/webhooks/index.d.ts

@@ -1,4 +1,4 @@
-import { E as EffectiveSubscriptionStatus } from '../types-5g_Bg6Ey.js';
+import { E as EffectiveSubscriptionStatus } from '../types-BYdtyO_2.js';
 
 /**
  * FFID Webhook SDK Constants

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@feelflow/ffid-sdk",
-  "version": "5.6.0",
+  "version": "5.8.0",
   "description": "FeelFlow ID Platform SDK for React/Next.js applications",
   "keywords": [
     "feelflow",