@feelflow/ffid-sdk 5.7.0 → 5.9.0

package/dist/{chunk-FXIDKFXQ.cjs → chunk-A6MOPB7D.cjs}

@@ -111,7 +111,16 @@ var SESSION_ELIGIBLE_SUBSCRIPTION_STATUSES = [
 function isSessionEligibleSubscriptionStatus(value) {
   return typeof value === "string" && SESSION_ELIGIBLE_SUBSCRIPTION_STATUSES.includes(value);
 }
+function hasOwnKey(value, key) {
+  return Object.prototype.hasOwnProperty.call(value, key);
+}
 function normalizeUserinfo(raw) {
+  const hasOrganizationId = hasOwnKey(raw, "organization_id");
+  const hasOrganizationName = hasOwnKey(raw, "organization_name");
+  const organizationFields = hasOrganizationId ? {
+    organizationId: raw.organization_id ?? null,
+    organizationName: hasOrganizationName ? raw.organization_name ?? null : null
+  } : hasOrganizationName ? { organizationName: raw.organization_name ?? null } : {};
   return {
     sub: raw.sub,
     email: raw.email,
@@ -121,7 +130,7 @@ function normalizeUserinfo(raw) {
     department: raw.department ?? null,
     position: raw.position ?? null,
     phoneNumber: raw.phone_number ?? null,
-    organizationId: raw.organization_id ?? null,
+    ...organizationFields,
     subscription: raw.subscription ? {
       subscriptionId: raw.subscription.subscription_id ?? null,
       status: raw.subscription.status ?? null,
@@ -130,7 +139,16 @@ function normalizeUserinfo(raw) {
       seatModel: raw.subscription.seat_model ?? null,
       memberRole: raw.subscription.member_role ?? null,
       organizationId: raw.subscription.organization_id ?? null,
-      hasSeatAssignment: raw.subscription.has_seat_assignment ?? false
+      organizationName: hasOwnKey(raw.subscription, "organization_name") ? raw.subscription.organization_name ?? null : null,
+      hasSeatAssignment: raw.subscription.has_seat_assignment ?? false,
+      // #3464: legacy FFID (< this issue) omits the field on the wire.
+      // The "unknown" axis is unused — no consumer differentiates "server
+      // didn't tell us" from "definitely not scheduled" because the
+      // companion `effectiveStatus` already returns `'active'` (not
+      // `'active_canceling'`) for legacy backends. Defaulting to `false`
+      // here keeps the downstream contract a plain boolean.
+      cancelAtPeriodEnd: raw.subscription.cancel_at_period_end ?? false,
+      currentPeriodEnd: raw.subscription.current_period_end ?? null
     } : void 0
   };
 }
@@ -147,11 +165,18 @@ function mapUserinfoSubscriptionToSession(userinfo, serviceCode) {
       planCode: subscription.planCode,
       planName: subscription.planCode,
       status: subscription.status,
-      currentPeriodEnd: null,
+      // #3464: userinfo now carries `current_period_end` and
+      // `cancel_at_period_end`. Pre-#3464 FFID backends still omit them on
+      // the wire (`currentPeriodEnd === null` / `cancelAtPeriodEnd === false`
+      // after `normalizeUserinfo` defaults), so the session helper sees
+      // plain `'active'` — identical to pre-#3464 behaviour.
+      currentPeriodEnd: subscription.currentPeriodEnd,
       trialEnd: null,
+      cancelAtPeriodEnd: subscription.cancelAtPeriodEnd,
       seatModel: subscription.seatModel ?? void 0,
       memberRole: subscription.memberRole ?? void 0,
-      organizationId: subscription.organizationId
+      organizationId: subscription.organizationId,
+      organizationName: subscription.organizationName ?? void 0
     }
   ];
 }
@@ -360,7 +385,8 @@ function createVerifyAccessToken(deps) {
       department: introspectResponse.department ?? null,
       position: introspectResponse.position ?? null,
       phone_number: introspectResponse.phone_number ?? null,
-      organization_id: introspectResponse.organization_id ?? null
+      organization_id: introspectResponse.organization_id ?? null,
+      organization_name: introspectResponse.organization_name ?? null
     };
     const raw = introspectResponse.subscription ? {
       ...base,
@@ -372,6 +398,7 @@ function createVerifyAccessToken(deps) {
         seat_model: introspectResponse.subscription.seat_model,
         member_role: introspectResponse.subscription.member_role,
         organization_id: introspectResponse.subscription.organization_id,
+        organization_name: introspectResponse.subscription.organization_name ?? null,
         has_seat_assignment: introspectResponse.subscription.has_seat_assignment ?? false
       }
     } : base;
@@ -842,7 +869,7 @@ function createProfileMethods(deps) {
 }
 
 // src/client/version-check.ts
-var SDK_VERSION = "5.7.0";
+var SDK_VERSION = "5.9.0";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {

package/dist/{chunk-YAJN36SD.js → chunk-KENJXMSG.js}

@@ -109,7 +109,16 @@ var SESSION_ELIGIBLE_SUBSCRIPTION_STATUSES = [
 function isSessionEligibleSubscriptionStatus(value) {
   return typeof value === "string" && SESSION_ELIGIBLE_SUBSCRIPTION_STATUSES.includes(value);
 }
+function hasOwnKey(value, key) {
+  return Object.prototype.hasOwnProperty.call(value, key);
+}
 function normalizeUserinfo(raw) {
+  const hasOrganizationId = hasOwnKey(raw, "organization_id");
+  const hasOrganizationName = hasOwnKey(raw, "organization_name");
+  const organizationFields = hasOrganizationId ? {
+    organizationId: raw.organization_id ?? null,
+    organizationName: hasOrganizationName ? raw.organization_name ?? null : null
+  } : hasOrganizationName ? { organizationName: raw.organization_name ?? null } : {};
   return {
     sub: raw.sub,
     email: raw.email,
@@ -119,7 +128,7 @@ function normalizeUserinfo(raw) {
     department: raw.department ?? null,
     position: raw.position ?? null,
     phoneNumber: raw.phone_number ?? null,
-    organizationId: raw.organization_id ?? null,
+    ...organizationFields,
     subscription: raw.subscription ? {
       subscriptionId: raw.subscription.subscription_id ?? null,
       status: raw.subscription.status ?? null,
@@ -128,7 +137,16 @@ function normalizeUserinfo(raw) {
       seatModel: raw.subscription.seat_model ?? null,
       memberRole: raw.subscription.member_role ?? null,
       organizationId: raw.subscription.organization_id ?? null,
-      hasSeatAssignment: raw.subscription.has_seat_assignment ?? false
+      organizationName: hasOwnKey(raw.subscription, "organization_name") ? raw.subscription.organization_name ?? null : null,
+      hasSeatAssignment: raw.subscription.has_seat_assignment ?? false,
+      // #3464: legacy FFID (< this issue) omits the field on the wire.
+      // The "unknown" axis is unused — no consumer differentiates "server
+      // didn't tell us" from "definitely not scheduled" because the
+      // companion `effectiveStatus` already returns `'active'` (not
+      // `'active_canceling'`) for legacy backends. Defaulting to `false`
+      // here keeps the downstream contract a plain boolean.
+      cancelAtPeriodEnd: raw.subscription.cancel_at_period_end ?? false,
+      currentPeriodEnd: raw.subscription.current_period_end ?? null
     } : void 0
   };
 }
@@ -145,11 +163,18 @@ function mapUserinfoSubscriptionToSession(userinfo, serviceCode) {
       planCode: subscription.planCode,
       planName: subscription.planCode,
       status: subscription.status,
-      currentPeriodEnd: null,
+      // #3464: userinfo now carries `current_period_end` and
+      // `cancel_at_period_end`. Pre-#3464 FFID backends still omit them on
+      // the wire (`currentPeriodEnd === null` / `cancelAtPeriodEnd === false`
+      // after `normalizeUserinfo` defaults), so the session helper sees
+      // plain `'active'` — identical to pre-#3464 behaviour.
+      currentPeriodEnd: subscription.currentPeriodEnd,
       trialEnd: null,
+      cancelAtPeriodEnd: subscription.cancelAtPeriodEnd,
       seatModel: subscription.seatModel ?? void 0,
       memberRole: subscription.memberRole ?? void 0,
-      organizationId: subscription.organizationId
+      organizationId: subscription.organizationId,
+      organizationName: subscription.organizationName ?? void 0
     }
   ];
 }
@@ -358,7 +383,8 @@ function createVerifyAccessToken(deps) {
       department: introspectResponse.department ?? null,
       position: introspectResponse.position ?? null,
       phone_number: introspectResponse.phone_number ?? null,
-      organization_id: introspectResponse.organization_id ?? null
+      organization_id: introspectResponse.organization_id ?? null,
+      organization_name: introspectResponse.organization_name ?? null
     };
     const raw = introspectResponse.subscription ? {
       ...base,
@@ -370,6 +396,7 @@ function createVerifyAccessToken(deps) {
         seat_model: introspectResponse.subscription.seat_model,
         member_role: introspectResponse.subscription.member_role,
         organization_id: introspectResponse.subscription.organization_id,
+        organization_name: introspectResponse.subscription.organization_name ?? null,
         has_seat_assignment: introspectResponse.subscription.has_seat_assignment ?? false
       }
     } : base;
@@ -840,7 +867,7 @@ function createProfileMethods(deps) {
 }
 
 // src/client/version-check.ts
-var SDK_VERSION = "5.7.0";
+var SDK_VERSION = "5.9.0";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {

package/dist/components/index.cjs

@@ -1,34 +1,34 @@
 'use strict';
 
-var chunkFXIDKFXQ_cjs = require('../chunk-FXIDKFXQ.cjs');
+var chunkA6MOPB7D_cjs = require('../chunk-A6MOPB7D.cjs');
 
 
 
 Object.defineProperty(exports, "FFIDAnnouncementBadge", {
   enumerable: true,
-  get: function () { return chunkFXIDKFXQ_cjs.FFIDAnnouncementBadge; }
+  get: function () { return chunkA6MOPB7D_cjs.FFIDAnnouncementBadge; }
 });
 Object.defineProperty(exports, "FFIDAnnouncementList", {
   enumerable: true,
-  get: function () { return chunkFXIDKFXQ_cjs.FFIDAnnouncementList; }
+  get: function () { return chunkA6MOPB7D_cjs.FFIDAnnouncementList; }
 });
 Object.defineProperty(exports, "FFIDInquiryForm", {
   enumerable: true,
-  get: function () { return chunkFXIDKFXQ_cjs.FFIDInquiryForm; }
+  get: function () { return chunkA6MOPB7D_cjs.FFIDInquiryForm; }
 });
 Object.defineProperty(exports, "FFIDLoginButton", {
   enumerable: true,
-  get: function () { return chunkFXIDKFXQ_cjs.FFIDLoginButton; }
+  get: function () { return chunkA6MOPB7D_cjs.FFIDLoginButton; }
 });
 Object.defineProperty(exports, "FFIDOrganizationSwitcher", {
   enumerable: true,
-  get: function () { return chunkFXIDKFXQ_cjs.FFIDOrganizationSwitcher; }
+  get: function () { return chunkA6MOPB7D_cjs.FFIDOrganizationSwitcher; }
 });
 Object.defineProperty(exports, "FFIDSubscriptionBadge", {
   enumerable: true,
-  get: function () { return chunkFXIDKFXQ_cjs.FFIDSubscriptionBadge; }
+  get: function () { return chunkA6MOPB7D_cjs.FFIDSubscriptionBadge; }
 });
 Object.defineProperty(exports, "FFIDUserMenu", {
   enumerable: true,
-  get: function () { return chunkFXIDKFXQ_cjs.FFIDUserMenu; }
+  get: function () { return chunkA6MOPB7D_cjs.FFIDUserMenu; }
 });

package/dist/components/index.d.cts

@@ -1,3 +1,3 @@
-export { M as FFIDAnnouncementBadge, al as FFIDAnnouncementBadgeClassNames, am as FFIDAnnouncementBadgeProps, N as FFIDAnnouncementList, an as FFIDAnnouncementListClassNames, ao as FFIDAnnouncementListProps, V as FFIDInquiryForm, W as FFIDInquiryFormCategoryItem, X as FFIDInquiryFormClassNames, Y as FFIDInquiryFormLegalLayout, Z as FFIDInquiryFormOrganization, _ as FFIDInquiryFormPlaceholderContext, $ as FFIDInquiryFormPrefill, a0 as FFIDInquiryFormProps, a1 as FFIDInquiryFormSubmitData, a2 as FFIDInquiryFormSubmitResult, a4 as FFIDLoginButton, ap as FFIDLoginButtonProps, a7 as FFIDOrganizationSwitcher, aq as FFIDOrganizationSwitcherClassNames, ar as FFIDOrganizationSwitcherProps, ac as FFIDSubscriptionBadge, as as FFIDSubscriptionBadgeClassNames, at as FFIDSubscriptionBadgeProps, ae as FFIDUserMenu, au as FFIDUserMenuClassNames, av as FFIDUserMenuProps } from '../index-EFp_ZgK9.cjs';
+export { M as FFIDAnnouncementBadge, al as FFIDAnnouncementBadgeClassNames, am as FFIDAnnouncementBadgeProps, N as FFIDAnnouncementList, an as FFIDAnnouncementListClassNames, ao as FFIDAnnouncementListProps, V as FFIDInquiryForm, W as FFIDInquiryFormCategoryItem, X as FFIDInquiryFormClassNames, Y as FFIDInquiryFormLegalLayout, Z as FFIDInquiryFormOrganization, _ as FFIDInquiryFormPlaceholderContext, $ as FFIDInquiryFormPrefill, a0 as FFIDInquiryFormProps, a1 as FFIDInquiryFormSubmitData, a2 as FFIDInquiryFormSubmitResult, a4 as FFIDLoginButton, ap as FFIDLoginButtonProps, a7 as FFIDOrganizationSwitcher, aq as FFIDOrganizationSwitcherClassNames, ar as FFIDOrganizationSwitcherProps, ac as FFIDSubscriptionBadge, as as FFIDSubscriptionBadgeClassNames, at as FFIDSubscriptionBadgeProps, ae as FFIDUserMenu, au as FFIDUserMenuClassNames, av as FFIDUserMenuProps } from '../index-DSvX4q8E.cjs';
 import 'react/jsx-runtime';
 import 'react';

package/dist/components/index.d.ts

@@ -1,3 +1,3 @@
-export { M as FFIDAnnouncementBadge, al as FFIDAnnouncementBadgeClassNames, am as FFIDAnnouncementBadgeProps, N as FFIDAnnouncementList, an as FFIDAnnouncementListClassNames, ao as FFIDAnnouncementListProps, V as FFIDInquiryForm, W as FFIDInquiryFormCategoryItem, X as FFIDInquiryFormClassNames, Y as FFIDInquiryFormLegalLayout, Z as FFIDInquiryFormOrganization, _ as FFIDInquiryFormPlaceholderContext, $ as FFIDInquiryFormPrefill, a0 as FFIDInquiryFormProps, a1 as FFIDInquiryFormSubmitData, a2 as FFIDInquiryFormSubmitResult, a4 as FFIDLoginButton, ap as FFIDLoginButtonProps, a7 as FFIDOrganizationSwitcher, aq as FFIDOrganizationSwitcherClassNames, ar as FFIDOrganizationSwitcherProps, ac as FFIDSubscriptionBadge, as as FFIDSubscriptionBadgeClassNames, at as FFIDSubscriptionBadgeProps, ae as FFIDUserMenu, au as FFIDUserMenuClassNames, av as FFIDUserMenuProps } from '../index-EFp_ZgK9.js';
+export { M as FFIDAnnouncementBadge, al as FFIDAnnouncementBadgeClassNames, am as FFIDAnnouncementBadgeProps, N as FFIDAnnouncementList, an as FFIDAnnouncementListClassNames, ao as FFIDAnnouncementListProps, V as FFIDInquiryForm, W as FFIDInquiryFormCategoryItem, X as FFIDInquiryFormClassNames, Y as FFIDInquiryFormLegalLayout, Z as FFIDInquiryFormOrganization, _ as FFIDInquiryFormPlaceholderContext, $ as FFIDInquiryFormPrefill, a0 as FFIDInquiryFormProps, a1 as FFIDInquiryFormSubmitData, a2 as FFIDInquiryFormSubmitResult, a4 as FFIDLoginButton, ap as FFIDLoginButtonProps, a7 as FFIDOrganizationSwitcher, aq as FFIDOrganizationSwitcherClassNames, ar as FFIDOrganizationSwitcherProps, ac as FFIDSubscriptionBadge, as as FFIDSubscriptionBadgeClassNames, at as FFIDSubscriptionBadgeProps, ae as FFIDUserMenu, au as FFIDUserMenuClassNames, av as FFIDUserMenuProps } from '../index-DSvX4q8E.js';
 import 'react/jsx-runtime';
 import 'react';

package/dist/components/index.js

@@ -1 +1 @@
-export { FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDSubscriptionBadge, FFIDUserMenu } from '../chunk-YAJN36SD.js';
+export { FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDSubscriptionBadge, FFIDUserMenu } from '../chunk-KENJXMSG.js';

package/dist/{ffid-client-CknwTgly.d.cts → ffid-client-DRjzfAaS.d.cts}

@@ -1,4 +1,4 @@
-import { E as EffectiveSubscriptionStatus } from './types-s3y11uT6.cjs';
+import { E as EffectiveSubscriptionStatus } from './types-BYdtyO_2.cjs';
 
 /**
  * Inquiry types exposed by the FFID SDK.
@@ -740,6 +740,8 @@ interface FFIDSubscription {
     memberRole?: FFIDOAuthUserInfoMemberRole | undefined;
     /** Organization ID used to resolve subscription access */
     organizationId?: string | null | undefined;
+    /** Organization display name for UI rendering; not used for access resolution */
+    organizationName?: string | null | undefined;
 }
 /** OAuth userinfo subscription summary */
 interface FFIDOAuthUserInfoSubscription {
@@ -757,13 +759,35 @@ interface FFIDOAuthUserInfoSubscription {
     seatModel: FFIDSeatModel | null;
     memberRole: FFIDOAuthUserInfoMemberRole | null;
     organizationId: string | null;
+    organizationName?: string | null | undefined;
     hasSeatAssignment: boolean | null;
+    /**
+     * Stripe `cancel_at_period_end` (#3464, SDK 5.8.0). `true` while the
+     * subscription is scheduled to terminate at `currentPeriodEnd`. The
+     * `normalizeUserinfo` boundary defaults the wire field to `false` when
+     * the server omits it (older FFID pre-#3464), so consumers always see
+     * a plain boolean and never branch on an "unknown" sentinel — the
+     * companion `effectiveStatus` already returns `'active'` (not
+     * `'active_canceling'`) for legacy backends since `cancel_at_period_end`
+     * is implicitly false there.
+     */
+    cancelAtPeriodEnd: boolean;
+    /**
+     * ISO timestamp of the current billing period end (#3464, SDK 5.8.0).
+     * `null` for free / seatless plans, or when serving an older FFID
+     * (pre-#3464) that does not populate the field. Exposed so callers
+     * can display the cancellation effective date without an `/ext/check`
+     * round-trip.
+     */
+    currentPeriodEnd: string | null;
 }
 /**
  * Unified user-identity shape returned by `getSession()` (→ `/oauth/userinfo`)
- * and `verifyAccessToken()` (JWT or introspect path). `subscription` and
- * `organizationId` are scope-gated on `/oauth/userinfo` (FFID #3380, requires
- * `subscription:read`); JWT-verify additionally omits `subscription` always.
+ * and `verifyAccessToken()` (JWT or introspect path). `subscription`,
+ * `organizationId`, and `organizationName` are scope-gated on `/oauth/userinfo`
+ * (FFID #3380, requires `subscription:read`); JWT-only verify additionally
+ * omits `subscription` and `organizationName` when `includeProfile` is false
+ * because the JWT has `org_id` but no `org_name` claim.
  * See per-field JSDoc — misreading `undefined` is a security regression.
  */
 interface FFIDOAuthUserInfo {
@@ -781,6 +805,14 @@ interface FFIDOAuthUserInfo {
      * — NOT "no organization").
      */
     organizationId?: string | null | undefined;
+    /**
+     * Organization display name, `null` if the resolved organization has no name,
+     * or `undefined` if the granted scope omits `subscription:read` on
+     * `/oauth/userinfo` (FFID #3514), or if the caller used JWT verification
+     * without `includeProfile`. JWT payloads carry `org_id` but no `org_name`
+     * claim.
+     */
+    organizationName?: string | null | undefined;
     /**
      * Subscription summary for `(user, service, organization)`. Branch on
      * `effectiveStatus` (5.3.0+) for access decisions.

package/dist/{ffid-client-C0k2PTbO.d.ts → ffid-client-gboJROw0.d.ts}

@@ -1,4 +1,4 @@
-import { E as EffectiveSubscriptionStatus } from './types-s3y11uT6.js';
+import { E as EffectiveSubscriptionStatus } from './types-BYdtyO_2.js';
 
 /**
  * Inquiry types exposed by the FFID SDK.
@@ -740,6 +740,8 @@ interface FFIDSubscription {
     memberRole?: FFIDOAuthUserInfoMemberRole | undefined;
     /** Organization ID used to resolve subscription access */
     organizationId?: string | null | undefined;
+    /** Organization display name for UI rendering; not used for access resolution */
+    organizationName?: string | null | undefined;
 }
 /** OAuth userinfo subscription summary */
 interface FFIDOAuthUserInfoSubscription {
@@ -757,13 +759,35 @@ interface FFIDOAuthUserInfoSubscription {
     seatModel: FFIDSeatModel | null;
     memberRole: FFIDOAuthUserInfoMemberRole | null;
     organizationId: string | null;
+    organizationName?: string | null | undefined;
     hasSeatAssignment: boolean | null;
+    /**
+     * Stripe `cancel_at_period_end` (#3464, SDK 5.8.0). `true` while the
+     * subscription is scheduled to terminate at `currentPeriodEnd`. The
+     * `normalizeUserinfo` boundary defaults the wire field to `false` when
+     * the server omits it (older FFID pre-#3464), so consumers always see
+     * a plain boolean and never branch on an "unknown" sentinel — the
+     * companion `effectiveStatus` already returns `'active'` (not
+     * `'active_canceling'`) for legacy backends since `cancel_at_period_end`
+     * is implicitly false there.
+     */
+    cancelAtPeriodEnd: boolean;
+    /**
+     * ISO timestamp of the current billing period end (#3464, SDK 5.8.0).
+     * `null` for free / seatless plans, or when serving an older FFID
+     * (pre-#3464) that does not populate the field. Exposed so callers
+     * can display the cancellation effective date without an `/ext/check`
+     * round-trip.
+     */
+    currentPeriodEnd: string | null;
 }
 /**
  * Unified user-identity shape returned by `getSession()` (→ `/oauth/userinfo`)
- * and `verifyAccessToken()` (JWT or introspect path). `subscription` and
- * `organizationId` are scope-gated on `/oauth/userinfo` (FFID #3380, requires
- * `subscription:read`); JWT-verify additionally omits `subscription` always.
+ * and `verifyAccessToken()` (JWT or introspect path). `subscription`,
+ * `organizationId`, and `organizationName` are scope-gated on `/oauth/userinfo`
+ * (FFID #3380, requires `subscription:read`); JWT-only verify additionally
+ * omits `subscription` and `organizationName` when `includeProfile` is false
+ * because the JWT has `org_id` but no `org_name` claim.
  * See per-field JSDoc — misreading `undefined` is a security regression.
  */
 interface FFIDOAuthUserInfo {
@@ -781,6 +805,14 @@ interface FFIDOAuthUserInfo {
      * — NOT "no organization").
      */
     organizationId?: string | null | undefined;
+    /**
+     * Organization display name, `null` if the resolved organization has no name,
+     * or `undefined` if the granted scope omits `subscription:read` on
+     * `/oauth/userinfo` (FFID #3514), or if the caller used JWT verification
+     * without `includeProfile`. JWT payloads carry `org_id` but no `org_name`
+     * claim.
+     */
+    organizationName?: string | null | undefined;
     /**
      * Subscription summary for `(user, service, organization)`. Branch on
      * `effectiveStatus` (5.3.0+) for access decisions.

package/dist/{index-EFp_ZgK9.d.cts → index-DSvX4q8E.d.cts}

@@ -57,22 +57,18 @@ interface FFIDCacheConfig {
  *   This is the FFID-internal runtime-expired case (see
  *   `getEffectiveSubscriptionStatus` on the server). Deny access.
  *
- * **SDK / server asymmetry — `active_canceling` is session-only (#3460).**
- * The backend `EffectiveSubscriptionStatus` in
- * `src/lib/common/subscription-helpers.ts` does NOT currently include
- * `active_canceling`; cancellation-scheduled subscriptions surface as plain
- * `'active'` on `/api/v1/subscriptions/ext/check` and `/oauth/userinfo`, and
- * consumers that branch on the server verdict will not see the new literal.
- * The SDK enriches `computeEffectiveStatusFromSession` with
- * `cancelAtPeriodEnd` (carried on `FFIDSubscription` for FFID backends from
- * #3460 onward — older backends omit the field and the helper defaults to
- * `false`, preserving the pre-#3460 `'active'` verdict) so `useSubscription`
- * can surface a "cancellation scheduled" badge without waiting for an
- * `/ext/check` round-trip. The asymmetry is safe because the new literal is
- * access-granting (no security regression on the userinfo path); when the
- * server's `EffectiveSubscriptionStatus` is later extended to emit
- * `active_canceling`, this docstring MUST be updated to drop the
- * session-only note.
+ * **`active_canceling` is mirrored on the server (#3464, SDK 5.8.0).**
+ * Earlier (#3460, SDK 5.7.0) the literal was a session-only enrichment;
+ * since FFID #3464 the backend `EffectiveSubscriptionStatus` and both
+ * `/api/v1/subscriptions/ext/check` + `/oauth/userinfo` emit
+ * `active_canceling` directly when `cancel_at_period_end=true` and the
+ * period is still live. SDK consumers receive the same literal whether
+ * they read it from the session-derived `computeEffectiveStatusFromSession`
+ * or the server-derived `effectiveStatus` on the userinfo / ext-check
+ * paths. Pre-#3464 FFID backends omit `cancelAtPeriodEnd` on the wire; the
+ * SDK `normalizeUserinfo` boundary defaults it to `false`, so downstream
+ * consumers see a plain boolean and `computeEffectiveStatus` returns the
+ * original `'active'` verdict for legacy deployments.
  *
  * @see /api/v1/subscriptions/ext/check
  * @see docs/03-implementation/EXPIRED_CONTRACT_HANDLING.md
@@ -267,6 +263,8 @@ interface FFIDSubscription {
     memberRole?: FFIDOAuthUserInfoMemberRole | undefined;
     /** Organization ID used to resolve subscription access */
     organizationId?: string | null | undefined;
+    /** Organization display name for UI rendering; not used for access resolution */
+    organizationName?: string | null | undefined;
 }
 /** OAuth userinfo subscription summary */
 interface FFIDOAuthUserInfoSubscription {
@@ -284,13 +282,35 @@ interface FFIDOAuthUserInfoSubscription {
     seatModel: FFIDSeatModel | null;
     memberRole: FFIDOAuthUserInfoMemberRole | null;
     organizationId: string | null;
+    organizationName?: string | null | undefined;
     hasSeatAssignment: boolean | null;
+    /**
+     * Stripe `cancel_at_period_end` (#3464, SDK 5.8.0). `true` while the
+     * subscription is scheduled to terminate at `currentPeriodEnd`. The
+     * `normalizeUserinfo` boundary defaults the wire field to `false` when
+     * the server omits it (older FFID pre-#3464), so consumers always see
+     * a plain boolean and never branch on an "unknown" sentinel — the
+     * companion `effectiveStatus` already returns `'active'` (not
+     * `'active_canceling'`) for legacy backends since `cancel_at_period_end`
+     * is implicitly false there.
+     */
+    cancelAtPeriodEnd: boolean;
+    /**
+     * ISO timestamp of the current billing period end (#3464, SDK 5.8.0).
+     * `null` for free / seatless plans, or when serving an older FFID
+     * (pre-#3464) that does not populate the field. Exposed so callers
+     * can display the cancellation effective date without an `/ext/check`
+     * round-trip.
+     */
+    currentPeriodEnd: string | null;
 }
 /**
  * Unified user-identity shape returned by `getSession()` (→ `/oauth/userinfo`)
- * and `verifyAccessToken()` (JWT or introspect path). `subscription` and
- * `organizationId` are scope-gated on `/oauth/userinfo` (FFID #3380, requires
- * `subscription:read`); JWT-verify additionally omits `subscription` always.
+ * and `verifyAccessToken()` (JWT or introspect path). `subscription`,
+ * `organizationId`, and `organizationName` are scope-gated on `/oauth/userinfo`
+ * (FFID #3380, requires `subscription:read`); JWT-only verify additionally
+ * omits `subscription` and `organizationName` when `includeProfile` is false
+ * because the JWT has `org_id` but no `org_name` claim.
  * See per-field JSDoc — misreading `undefined` is a security regression.
  */
 interface FFIDOAuthUserInfo {
@@ -308,6 +328,14 @@ interface FFIDOAuthUserInfo {
      * — NOT "no organization").
      */
     organizationId?: string | null | undefined;
+    /**
+     * Organization display name, `null` if the resolved organization has no name,
+     * or `undefined` if the granted scope omits `subscription:read` on
+     * `/oauth/userinfo` (FFID #3514), or if the caller used JWT verification
+     * without `includeProfile`. JWT payloads carry `org_id` but no `org_name`
+     * claim.
+     */
+    organizationName?: string | null | undefined;
     /**
      * Subscription summary for `(user, service, organization)`. Branch on
      * `effectiveStatus` (5.3.0+) for access decisions.
@@ -836,6 +864,7 @@ interface FFIDTokenIntrospectionResponse {
     token_type?: 'Bearer';
     client_id?: string;
     organization_id?: string | null;
+    organization_name?: string | null;
     subscription?: {
         subscription_id: string | null;
         status: FFIDOAuthUserInfoSubscription['status'];
@@ -845,6 +874,7 @@ interface FFIDTokenIntrospectionResponse {
         seat_model: FFIDOAuthUserInfoSubscription['seatModel'];
         member_role: FFIDOAuthUserInfoSubscription['memberRole'];
         organization_id: string | null;
+        organization_name?: string | null;
         has_seat_assignment?: boolean;
     };
 }

package/dist/{index-EFp_ZgK9.d.ts → index-DSvX4q8E.d.ts}

@@ -57,22 +57,18 @@ interface FFIDCacheConfig {
  *   This is the FFID-internal runtime-expired case (see
  *   `getEffectiveSubscriptionStatus` on the server). Deny access.
  *
- * **SDK / server asymmetry — `active_canceling` is session-only (#3460).**
- * The backend `EffectiveSubscriptionStatus` in
- * `src/lib/common/subscription-helpers.ts` does NOT currently include
- * `active_canceling`; cancellation-scheduled subscriptions surface as plain
- * `'active'` on `/api/v1/subscriptions/ext/check` and `/oauth/userinfo`, and
- * consumers that branch on the server verdict will not see the new literal.
- * The SDK enriches `computeEffectiveStatusFromSession` with
- * `cancelAtPeriodEnd` (carried on `FFIDSubscription` for FFID backends from
- * #3460 onward — older backends omit the field and the helper defaults to
- * `false`, preserving the pre-#3460 `'active'` verdict) so `useSubscription`
- * can surface a "cancellation scheduled" badge without waiting for an
- * `/ext/check` round-trip. The asymmetry is safe because the new literal is
- * access-granting (no security regression on the userinfo path); when the
- * server's `EffectiveSubscriptionStatus` is later extended to emit
- * `active_canceling`, this docstring MUST be updated to drop the
- * session-only note.
+ * **`active_canceling` is mirrored on the server (#3464, SDK 5.8.0).**
+ * Earlier (#3460, SDK 5.7.0) the literal was a session-only enrichment;
+ * since FFID #3464 the backend `EffectiveSubscriptionStatus` and both
+ * `/api/v1/subscriptions/ext/check` + `/oauth/userinfo` emit
+ * `active_canceling` directly when `cancel_at_period_end=true` and the
+ * period is still live. SDK consumers receive the same literal whether
+ * they read it from the session-derived `computeEffectiveStatusFromSession`
+ * or the server-derived `effectiveStatus` on the userinfo / ext-check
+ * paths. Pre-#3464 FFID backends omit `cancelAtPeriodEnd` on the wire; the
+ * SDK `normalizeUserinfo` boundary defaults it to `false`, so downstream
+ * consumers see a plain boolean and `computeEffectiveStatus` returns the
+ * original `'active'` verdict for legacy deployments.
  *
  * @see /api/v1/subscriptions/ext/check
  * @see docs/03-implementation/EXPIRED_CONTRACT_HANDLING.md
@@ -267,6 +263,8 @@ interface FFIDSubscription {
     memberRole?: FFIDOAuthUserInfoMemberRole | undefined;
     /** Organization ID used to resolve subscription access */
     organizationId?: string | null | undefined;
+    /** Organization display name for UI rendering; not used for access resolution */
+    organizationName?: string | null | undefined;
 }
 /** OAuth userinfo subscription summary */
 interface FFIDOAuthUserInfoSubscription {
@@ -284,13 +282,35 @@ interface FFIDOAuthUserInfoSubscription {
     seatModel: FFIDSeatModel | null;
     memberRole: FFIDOAuthUserInfoMemberRole | null;
     organizationId: string | null;
+    organizationName?: string | null | undefined;
     hasSeatAssignment: boolean | null;
+    /**
+     * Stripe `cancel_at_period_end` (#3464, SDK 5.8.0). `true` while the
+     * subscription is scheduled to terminate at `currentPeriodEnd`. The
+     * `normalizeUserinfo` boundary defaults the wire field to `false` when
+     * the server omits it (older FFID pre-#3464), so consumers always see
+     * a plain boolean and never branch on an "unknown" sentinel — the
+     * companion `effectiveStatus` already returns `'active'` (not
+     * `'active_canceling'`) for legacy backends since `cancel_at_period_end`
+     * is implicitly false there.
+     */
+    cancelAtPeriodEnd: boolean;
+    /**
+     * ISO timestamp of the current billing period end (#3464, SDK 5.8.0).
+     * `null` for free / seatless plans, or when serving an older FFID
+     * (pre-#3464) that does not populate the field. Exposed so callers
+     * can display the cancellation effective date without an `/ext/check`
+     * round-trip.
+     */
+    currentPeriodEnd: string | null;
 }
 /**
  * Unified user-identity shape returned by `getSession()` (→ `/oauth/userinfo`)
- * and `verifyAccessToken()` (JWT or introspect path). `subscription` and
- * `organizationId` are scope-gated on `/oauth/userinfo` (FFID #3380, requires
- * `subscription:read`); JWT-verify additionally omits `subscription` always.
+ * and `verifyAccessToken()` (JWT or introspect path). `subscription`,
+ * `organizationId`, and `organizationName` are scope-gated on `/oauth/userinfo`
+ * (FFID #3380, requires `subscription:read`); JWT-only verify additionally
+ * omits `subscription` and `organizationName` when `includeProfile` is false
+ * because the JWT has `org_id` but no `org_name` claim.
  * See per-field JSDoc — misreading `undefined` is a security regression.
  */
 interface FFIDOAuthUserInfo {
@@ -308,6 +328,14 @@ interface FFIDOAuthUserInfo {
      * — NOT "no organization").
      */
     organizationId?: string | null | undefined;
+    /**
+     * Organization display name, `null` if the resolved organization has no name,
+     * or `undefined` if the granted scope omits `subscription:read` on
+     * `/oauth/userinfo` (FFID #3514), or if the caller used JWT verification
+     * without `includeProfile`. JWT payloads carry `org_id` but no `org_name`
+     * claim.
+     */
+    organizationName?: string | null | undefined;
     /**
      * Subscription summary for `(user, service, organization)`. Branch on
      * `effectiveStatus` (5.3.0+) for access decisions.
@@ -836,6 +864,7 @@ interface FFIDTokenIntrospectionResponse {
     token_type?: 'Bearer';
     client_id?: string;
     organization_id?: string | null;
+    organization_name?: string | null;
     subscription?: {
         subscription_id: string | null;
         status: FFIDOAuthUserInfoSubscription['status'];
@@ -845,6 +874,7 @@ interface FFIDTokenIntrospectionResponse {
         seat_model: FFIDOAuthUserInfoSubscription['seatModel'];
         member_role: FFIDOAuthUserInfoSubscription['memberRole'];
         organization_id: string | null;
+        organization_name?: string | null;
         has_seat_assignment?: boolean;
     };
 }