@feelflow/ffid-sdk 9.0.0 → 10.0.0

package/dist/{ffid-client-B0cORHac.d.ts → ffid-client-5uxXRgIO.d.ts}

@@ -211,178 +211,6 @@ interface FFIDCacheConfig {
     ttl: number;
 }
 
-/**
- * Canonical service-access types for subscription lifecycle decisions.
- */
-
-/** Subscription status values matching the FFID platform's SubscriptionStatus type */
-type FFIDSubscriptionStatus = 'trialing' | 'active' | 'past_due' | 'canceled' | 'pending_invoice' | 'paused' | 'incomplete' | 'incomplete_expired' | 'unpaid';
-interface FFIDSubscriptionCheckResponse {
-    hasActiveSubscription: boolean;
-    /**
-     * Canonical access decision returned by FFID's `/subscriptions/ext/check`.
-     *
-     * This is the server-side source of truth for service gates. Consumers
-     * should not recompute access from `currentPeriodEnd`, `past_due_since`, or
-     * local payment timestamps.
-     */
-    hasAccess?: boolean;
-    /** True when `effectiveStatus === 'past_due_grace'`. */
-    isGrace?: boolean;
-    /** True when FFID's canonical effective status denies service access. */
-    isBlocked?: boolean;
-    organizationId: string | null;
-    subscriptionId: string | null;
-    status: FFIDSubscriptionStatus | null;
-    planCode: string | null;
-    currentPeriodEnd: string | null;
-    /**
-     * Semantic FFID access-control status. `null` means the organization has no
-     * subscription row for this service.
-     */
-    effectiveStatus?: EffectiveSubscriptionStatus | null;
-    /**
-     * ISO timestamp at which `past_due_grace` flips to `blocked`; null outside
-     * the grace window.
-     */
-    gracePeriodEndsAt?: string | null;
-    /** Whether a canceled subscription can be resumed via a re-subscription flow. */
-    reactivatable?: boolean;
-}
-type FFIDServiceAccessFailPolicy = 'failClosed';
-type FFIDServiceAccessDenialReason = 'no_subscription' | 'grace_disallowed' | 'blocked' | 'canceled' | 'expired' | 'trial_expired' | 'ffid_unreachable';
-interface FFIDCheckServiceAccessParams {
-    userId?: string;
-    organizationId: string;
-    /**
-     * Whether `past_due_grace` should keep access open.
-     *
-     * @default true
-     */
-    allowGrace?: boolean;
-    /**
-     * Error policy when FFID cannot return a canonical decision.
-     *
-     * Currently only `failClosed` is supported: network/server/parse failures
-     * become `hasAccess=false` decisions with `denialReason='ffid_unreachable'`
-     * and the root cause in `decision.error`. Treat `hasAccess` as the gate.
-     */
-    failPolicy?: FFIDServiceAccessFailPolicy;
-}
-interface FFIDServiceAccessError {
-    code: string;
-    message: string;
-    details?: unknown;
-}
-interface FFIDServiceAccessDecision {
-    hasAccess: boolean;
-    effectiveStatus: EffectiveSubscriptionStatus | null;
-    isGrace: boolean;
-    isBlocked: boolean;
-    allowGrace: boolean;
-    failPolicy: FFIDServiceAccessFailPolicy;
-    denialReason: FFIDServiceAccessDenialReason | null;
-    organizationId: string | null;
-    subscriptionId: string | null;
-    status: FFIDSubscriptionStatus | null;
-    planCode: string | null;
-    currentPeriodEnd: string | null;
-    gracePeriodEndsAt: string | null;
-    reactivatable: boolean;
-    /**
-     * Present when the decision was produced by the SDK fail-closed policy
-     * rather than by a successful FFID response.
-     */
-    error?: FFIDServiceAccessError;
-}
-
-/**
- * Token Store
- *
- * Manages OAuth 2.0 tokens (access + refresh) with dual-storage support.
- * Falls back to in-memory storage when localStorage is unavailable
- * (e.g., Safari private browsing mode).
- */
-/**
- * Token data stored by the token store
- */
-interface TokenData {
-    /** OAuth 2.0 access token */
-    accessToken: string;
-    /** OAuth 2.0 refresh token */
-    refreshToken: string;
-    /** Expiration timestamp in milliseconds (Unix epoch) */
-    expiresAt: number;
-}
-/**
- * Token store interface for managing OAuth tokens
- */
-interface TokenStore {
-    /** Get stored tokens (null if not stored) */
-    getTokens(): TokenData | null;
-    /** Store new tokens */
-    setTokens(tokens: TokenData): void;
-    /** Clear all stored tokens */
-    clearTokens(): void;
-    /** Check if access token is expired (with 30s buffer) */
-    isAccessTokenExpired(): boolean;
-}
-/**
- * Create a token store with the specified storage type.
- *
- * When storageType is 'localStorage' (default in browser), falls back
- * to memory if localStorage is not available (e.g., Safari private mode).
- *
- * @param storageType - 'localStorage' (default) or 'memory'
- */
-declare function createTokenStore(storageType?: 'localStorage' | 'memory'): TokenStore;
-
-/**
- * Billing checkout / portal session types.
- *
- * types/index.ts のサイズ上限対応で切り出し（中身は逐語移設、#3787 Phase A）。
- */
-/**
- * Checkout session response from billing checkout endpoint
- */
-interface FFIDCheckoutSessionResponse {
-    /** Stripe Checkout session ID */
-    sessionId: string;
-    /** Stripe Checkout session URL (null if session creation had issues) */
-    url: string | null;
-}
-/**
- * Portal session response from billing portal endpoint
- */
-interface FFIDPortalSessionResponse {
-    /** Stripe Billing Portal URL */
-    url: string;
-}
-/**
- * Parameters for creating a checkout session
- */
-interface FFIDCreateCheckoutParams {
-    /** Organization ID (UUID) */
-    organizationId: string;
-    /** Subscription ID (UUID) */
-    subscriptionId: string;
-    /** URL to redirect after successful checkout */
-    successUrl: string;
-    /** URL to redirect after cancelled checkout */
-    cancelUrl: string;
-    /** Optional plan ID for upgrade or resubscription */
-    planId?: string;
-}
-/**
- * Parameters for creating a billing portal session
- */
-interface FFIDCreatePortalParams {
-    /** Organization ID (UUID) */
-    organizationId: string;
-    /** URL to redirect when user exits the portal */
-    returnUrl: string;
-}
-
 /** Billing interval for subscriptions */
 type FFIDBillingInterval = 'monthly' | 'yearly';
 /**
@@ -413,6 +241,15 @@ interface FFIDPlanInfo {
     trialDays: number;
     /** flat: period fee; per_seat: multiply by selected quantity. Older servers omit this. */
     pricingModel?: 'per_seat' | 'flat';
+    /**
+     * flat: member limit of the plan (`null` = unlimited). Absent on per_seat plans
+     * and on FFID servers released before #6392 — do not read absence as unlimited.
+     */
+    maxMembers?: number | null;
+    /** flat: monthly AI credit allowance (0 = none). Absent on older servers. */
+    monthlyCredits?: number;
+    /** Plan tier in the personal / team / enterprise ladder. Absent on older servers. */
+    tier?: 'personal' | 'team' | 'enterprise';
     /**
      * Monthly price in the smallest currency unit.
      *
@@ -490,7 +327,10 @@ interface FFIDSubscribeParams {
     planCode: string;
     /** Billing interval (default: 'monthly') */
     billingInterval?: FFIDBillingInterval;
-    /** Number of seats (default: plan's minSeats) */
+    /**
+     * Number of seats (default: plan's minSeats). per_seat plans only — a flat plan
+     * answers 400 `VALIDATION_ERROR` (`details.field: 'quantity'`), so omit it there.
+     */
     quantity?: number;
     /** User ID for seat auto-assignment (only needed for service-key mode) */
     userId?: string;
@@ -671,113 +511,654 @@ interface FFIDPlanChangePreviewBase {
     lineItems: FFIDPlanChangeLineItem[];
 }
 /**
- * Plan change proration preview. It is computed with the same rules as `changePlan()`.
+ * Plan change proration preview. It is computed with the same rules as `changePlan()`.
+ *
+ * `willApplyAtPeriodEnd` is a discriminant that constrains related fields at the type level:
+ * - `true`: a decrease reserved until the period end. `proratedAmount` is always 0 (nothing is
+ *   charged or refunded now); `effectiveDate` mirrors the subscription's `currentPeriodEnd`
+ *   (may be `null` when the subscription has no active billing cycle yet).
+ * - `false`: immediate change. `effectiveDate` is always `null`. For an increase,
+ *   `proratedAmount` is the difference up to the current period end that is charged now
+ *   (possibly Stripe-refined). A decrease on a contract that cannot be reserved also lands here:
+ *   `0` for a contract without a Stripe subscription (no refund), but Stripe's prorated amount —
+ *   negative, credited on the next invoice — for a Stripe contract with no period end yet
+ *   (e.g. during a trial).
+ */
+type FFIDPlanChangePreview = FFIDPlanChangePreviewBase & ({
+    willApplyAtPeriodEnd: true;
+    effectiveDate: string | null;
+    /** 0 on period-end-deferred changes; charge happens at the next invoice */
+    proratedAmount: 0;
+} | {
+    willApplyAtPeriodEnd: false;
+    effectiveDate: null;
+    /** Difference up to the current period end charged now (see the type doc for the decrease cases) */
+    proratedAmount: number;
+});
+/** Response from plan change preview endpoint */
+interface FFIDPlanChangePreviewResponse {
+    preview: FFIDPlanChangePreview;
+}
+/** Parameters for previewing a seat count change */
+interface FFIDPreviewSeatChangeParams {
+    /** Subscription ID (UUID) */
+    subscriptionId: string;
+    /** New seat quantity. Must be an integer within the plan's allowed range. */
+    quantity: number;
+}
+/** Seat change preview line item */
+interface FFIDSeatChangeLineItem {
+    description: string;
+    amount: number;
+}
+/**
+ * Seat change proration preview.
+ *
+ * Sister type to `FFIDPlanChangePreview`. The shared `type` discriminant lets
+ * consumers narrow a preview payload without inspecting unrelated fields.
+ *
+ * - `willApplyAtPeriodEnd=true`: a seat reduction reserved until the period end.
+ *   `proratedAmount` is 0 and `effectiveDate` is when the new seat count applies.
+ * - Otherwise the change applies immediately. For an increase, `proratedAmount` is the amount
+ *   charged now up to the current period end. A reduction that cannot be reserved is normally
+ *   `0`, but can be negative (a credit on the next invoice) for a Stripe contract with no period
+ *   end yet or when only the contract unit price is known.
+ * - `isEstimate=true` (default when Stripe is not configured or data is unavailable):
+ *   `proratedAmount` is computed locally. `isEstimate=false`: it reflects Stripe's live
+ *   proration calculation.
+ *
+ * `nextInvoiceAmount` is a local estimate: flat period fee, or `unitPrice * newQuantity`.
+ * Flat capacity changes have zero prorated cost.
+ *
+ * `pricingUnavailable=true` means custom pricing or an unverified contracted Stripe
+ * Price. Hide amounts; zero is not a quote. `custom_pricing` permits the existing
+ * unbilled seat-change flow. Require another preview before confirmation only when
+ * pricing is unavailable and the reason is not `custom_pricing`. `stripe_error` also
+ * covers invoice/address failures after the contract price is known; use
+ * `pricingUnavailable`, not the reason alone, to decide whether to hide amounts.
+ * `no_stripe_data` means invoice proration is unavailable even if the contract unit
+ * price is known. Portal seat PUT independently enforces subscription limits;
+ * external consumers should guide users to the FFID portal for seat changes.
+ */
+interface FFIDSeatChangePreview {
+    /** flat: unitPrice is the whole period fee; per_seat: multiply by capacity. */
+    pricingModel?: 'per_seat' | 'flat';
+    /** Discriminant for preview response variants (pairs with `FFIDPlanChangePreview.type`) */
+    type: 'seat-change';
+    currentQuantity: number;
+    newQuantity: number;
+    /** Per-seat price for the current billing interval */
+    unitPrice: number;
+    billingInterval: FFIDBillingInterval;
+    /**
+     * Amount charged now for the rest of the current billing period. A reserved seat reduction
+     * (`willApplyAtPeriodEnd: true`) is always `0`; see the type doc for reductions that cannot
+     * be reserved. Also `0` when `pricingUnavailable === true`; hide it instead of quoting zero.
+     */
+    proratedAmount: number;
+    /** Next invoice full amount — flat period fee or per-seat price times newQuantity */
+    nextInvoiceAmount: number;
+    nextInvoiceDate: string | null;
+    currency: FFIDSupportedCurrency;
+    /** true when proratedAmount is a local estimate rather than Stripe invoice/proration data */
+    isEstimate: boolean;
+    /** Hide amounts: custom pricing or contracted Stripe Price could not be verified. */
+    pricingUnavailable?: boolean;
+    /** Reason why `isEstimate` is true. Only meaningful when `isEstimate === true`. */
+    estimateReason?: 'no_stripe_data' | 'custom_pricing' | 'stripe_error';
+    /**
+     * `true` when the seat reduction would be reserved until the period end (8.0.0).
+     * Absent or `false` = the change applies immediately.
+     */
+    willApplyAtPeriodEnd?: boolean;
+    /** When the reserved seat count applies (present when `willApplyAtPeriodEnd` is `true`) */
+    effectiveDate?: string | null;
+    lineItems: FFIDSeatChangeLineItem[];
+}
+/** Response from seat change preview endpoint */
+interface FFIDSeatChangePreviewResponse {
+    preview: FFIDSeatChangePreview;
+}
+
+/** Deployment environments a catalog publication can apply to (single source) */
+declare const FFID_CATALOG_ENVIRONMENTS: readonly ["staging", "production"];
+/** Deployment environment a catalog publication applies to */
+type FFIDCatalogEnvironment = (typeof FFID_CATALOG_ENVIRONMENTS)[number];
+/**
+ * Tax behavior of a published price.
+ * `inclusive`: displayed price contains Stripe-calculated tax.
+ * `exclusive`: tax is added on top of the base price.
+ */
+type FFIDTaxBehavior = 'inclusive' | 'exclusive';
+/**
+ * Publication lifecycle statuses (single source — the type, the SDK runtime
+ * validator, and consumer sets all derive from this tuple so a new literal
+ * cannot be added to one side only).
+ */
+declare const FFID_CATALOG_PUBLICATION_STATUSES: readonly ["approved", "superseded", "revoking", "revoked"];
+/**
+ * Publication lifecycle status.
+ * - `approved`: sellable — the only status that permits new paid checkout
+ * - `superseded`: replaced by a newer revision (old sessions may sell through
+ *   until `sellThroughUntil`)
+ * - `revoking`: emergency stop in progress — never sellable
+ * - `revoked`: emergency stop completed — never sellable
+ */
+type FFIDCatalogPublicationStatus = (typeof FFID_CATALOG_PUBLICATION_STATUSES)[number];
+/**
+ * Human-approved publication record binding a catalog revision to the
+ * content/config hashes reviewed at approval time.
+ *
+ * All `*Hash` fields are lowercase SHA-256 hex computed with the shared
+ * canonicalization helpers in `shared/catalog-hash` — consumers re-hash the
+ * content they actually render and must refuse new sales on any mismatch.
+ */
+interface FFIDCatalogPublication {
+    serviceCode: string;
+    environment: FFIDCatalogEnvironment;
+    catalogVersion: string;
+    praxisCopyHash: string;
+    ffidCheckoutCopyHash: string;
+    legalDisclosureHash: string;
+    taxConfigurationHash: string;
+    paymentConfigurationHash: string;
+    scopeHash: string;
+    /** Monotonically increasing per (service, environment) publication counter */
+    salesEpoch: number;
+    /** FFID-generated immutable human-review approval ID */
+    approvalId: string;
+    /** ISO 8601 timestamp of the recorded human review */
+    reviewedAt: string;
+    /** ISO 8601 timestamp the publication became effective */
+    effectiveAt: string;
+    /** ISO 8601 timestamp the publication was superseded (null while current) */
+    supersededAt: string | null;
+    /** ISO 8601 upper bound for old-session sell-through (null unless superseded) */
+    sellThroughUntil: string | null;
+    /** ISO 8601 timestamp an emergency revoke took effect (null unless revoking/revoked) */
+    revocationEffectiveAt: string | null;
+    status: FFIDCatalogPublicationStatus;
+}
+/**
+ * A plan inside a published catalog revision (public-safe snapshot).
+ * Never contains Stripe Product/Price identifiers or other secrets.
+ */
+interface FFIDPublishedPlan {
+    /**
+     * Plan code — always a lowercase slug (`^[a-z0-9][a-z0-9_-]*$`).
+     * Per-service open set; see the FFID repo's
+     * `docs/04-api/PLAN_CODE_CONTRACT.md` for the full guarantees.
+     */
+    code: string;
+    name: string;
+    description: string | null;
+    /** Monthly price in the catalog currency; null when monthly is not offered */
+    priceMonthly: number | null;
+    /** Yearly price in the catalog currency; null when yearly is not offered */
+    priceYearly: number | null;
+    currency: string;
+    /** Billing intervals actually purchasable for this plan */
+    billingIntervals: FFIDBillingInterval[];
+    taxBehavior: FFIDTaxBehavior;
+    minSeats: number;
+    maxSeats: number | null;
+    displayOrder: number;
+    /** Billing model (10.0.0). Absent on snapshots published before ADR-008 (e.g. praxis) */
+    pricingModel?: 'per_seat' | 'flat';
+    /** flat: member limit (`null` = unlimited). Absent on older snapshots */
+    maxMembers?: number | null;
+    /** flat: monthly AI credit allowance (0 = none). Absent on older snapshots */
+    monthlyCredits?: number;
+    /** Plan tier. Absent on older snapshots */
+    tier?: 'personal' | 'team' | 'enterprise';
+}
+/**
+ * Response of GET /api/v1/subscriptions/ext/catalog/{serviceCode}.
+ *
+ * `catalogVersion` always equals `publication.catalogVersion`; it is hoisted
+ * to the top level so consumers can pin the version (e.g. as
+ * `expectedCatalogVersion` for checkout) without digging into the publication.
+ */
+interface FFIDPublishedCatalog {
+    service: {
+        code: string;
+        name: string;
+    };
+    catalogVersion: string;
+    publication: FFIDCatalogPublication;
+    plans: FFIDPublishedPlan[];
+}
+
+/**
+ * Credits API types (SDK 10.0.0 / FFID #6395, CREDITS_API.md v1.3.1).
+ *
+ * `pricing_model='flat'` plans (fixed fee + member limit + monthly AI credits)
+ * keep a credit ledger in FFID. These types mirror the FFID server's response
+ * shapes exactly; the FFID repository type-checks them against the server types
+ * (`src/lib/credits/__tests__/sdk-credits-types.sync.test.ts`), so a field changed
+ * on one side only fails FFID's gate.
+ *
+ * Kept out of `types/index.ts` (file-size limit). Exported directly from the
+ * package entry.
+ */
+
+/** Values of the history `type` filter / item `type` */
+declare const FFID_CREDIT_HISTORY_TYPES: readonly ["grant", "consumption", "revocation"];
+/** Kinds of credit grant */
+declare const FFID_CREDIT_GRANT_KINDS: readonly ["monthly", "manual", "pack"];
+/**
+ * Billing model of a plan. `flat` = fixed fee + member limit + monthly credits;
+ * `per_seat` = seat billing (praxis). Do not infer it from `planCode`.
+ */
+type FFIDPricingModel = 'per_seat' | 'flat';
+/** History item / filter type */
+type FFIDCreditHistoryType = (typeof FFID_CREDIT_HISTORY_TYPES)[number];
+/** Grant kind: monthly allowance, operator grant, or purchased pack */
+type FFIDCreditGrantKind = (typeof FFID_CREDIT_GRANT_KINDS)[number];
+/** Remaining credits per grant kind */
+interface FFIDCreditBreakdown {
+    monthly: number;
+    manual: number;
+    pack: number;
+}
+/** `GET /ext/{id}/credits/balance` (CREDITS_API §4.2) */
+interface FFIDCreditBalance {
+    subscriptionId: string;
+    organizationId: string;
+    serviceCode: string;
+    pricingModel: 'flat';
+    /** Credits usable now (sum of active grants' remaining) */
+    available: number;
+    /** This period's monthly allowance */
+    monthlyCredits: number;
+    /** Current monthly window; null when there is no monthly grant this period */
+    period: {
+        start: string;
+        end: string;
+    } | null;
+    breakdown: FFIDCreditBreakdown;
+    /** Next manual / pack expiry; null when none is active */
+    nextExpiry: {
+        at: string;
+        amount: number;
+    } | null;
+    lowThresholdPercent: number;
+    /** `available < monthlyCredits * lowThresholdPercent / 100` (always false when monthlyCredits = 0) */
+    isLow: boolean;
+    /** `available === 0` */
+    isExhausted: boolean;
+    /** ISO 8601 time the balance was read */
+    asOf: string;
+}
+/** `POST /ext/{id}/credits/consume` 200 response (CREDITS_API §4.1) */
+interface FFIDCreditConsumeResult {
+    /**
+     * `duplicate` = same idempotency key and amount was already consumed. No side
+     * effect; `consumptionId` / `amount` are the first call's, `balance` is current,
+     * and `crossedLow` / `crossedExhausted` are always false.
+     */
+    status: 'consumed' | 'duplicate';
+    consumptionId: string;
+    amount: number;
+    balance: {
+        available: number;
+        monthlyCredits: number;
+        breakdown: FFIDCreditBreakdown;
+    };
+    /** This consumption crossed the low-balance threshold (once per period) */
+    crossedLow: boolean;
+    /** This consumption brought the balance to 0 (once per period) */
+    crossedExhausted: boolean;
+}
+/** One row of the credit history (CREDITS_API §4.3) */
+interface FFIDCreditHistoryItem {
+    /** Grant / consumption id. For `revocation` this is the revoked grant's id */
+    id: string;
+    type: FFIDCreditHistoryType;
+    /** Always positive; the direction is given by `type` */
+    amount: number;
+    occurredAt: string;
+    /** Set for `grant` / `revocation` */
+    kind: FFIDCreditGrantKind | null;
+    expiresAt: string | null;
+    /** Set for `consumption` */
+    feature: string | null;
+    /** Set for `consumption` */
+    idempotencyKey: string | null;
+    actorUserId: string | null;
+    reason: string | null;
+    metadata: Record<string, unknown> | null;
+}
+/** `GET /ext/{id}/credits/history` (newest first) */
+interface FFIDCreditHistoryPage {
+    items: FFIDCreditHistoryItem[];
+    /** Opaque cursor for the next page; null on the last page */
+    nextCursor: string | null;
+}
+/** One purchasable credit pack (CREDITS_API §4.4) */
+interface FFIDCreditPack {
+    code: string;
+    name: string;
+    credits: number;
+    /** Tax-inclusive price in the smallest currency unit */
+    price: number;
+    currency: string;
+    taxBehavior: FFIDTaxBehavior;
+    validityMonths: number;
+    displayOrder: number;
+}
+/** `GET /ext/credits/packs` */
+interface FFIDCreditPackList {
+    serviceCode: string;
+    packs: FFIDCreditPack[];
+}
+/**
+ * `POST /ext/credits/packs/checkout` (CREDITS_API §4.5). Credits are **not**
+ * granted yet when this returns — confirm with `credits.pack_purchased` /
+ * `credits.granted` or the balance.
+ */
+interface FFIDCreditPackCheckout {
+    checkoutUrl: string;
+    sessionId: string;
+    operationId: string;
+    /** ISO 8601 */
+    expiresAt: string;
+}
+/**
+ * `credits` field added to `/ext/check` (CREDITS_API §5.1). Null for per_seat,
+ * for no subscription, **and** when FFID could not read the ledger — so null
+ * does not mean "not flat"; use `pricingModel`.
+ */
+interface FFIDSubscriptionCheckCredits {
+    available: number;
+    monthlyCredits: number;
+    isLow: boolean;
+    isExhausted: boolean;
+    periodEnd: string | null;
+}
+/**
+ * `GET /ext/{id}/seats` (CREDITS_API §5.2).
+ *
+ * flat contracts report the member limit: `maxMembers` (null = unlimited),
+ * `assignedMembers`, `availableMembers` (null = unlimited); `quantity` /
+ * `minSeats` / `maxSeats` are always 1 and `availableSeats === availableMembers`.
+ * per_seat contracts keep the seat shape and only add `pricingModel`.
+ * FFID servers released before #6392 omit `pricingModel` and the member fields.
+ */
+interface FFIDSeatsSummary {
+    subscriptionId: string;
+    organizationId: string;
+    pricingModel?: FFIDPricingModel;
+    quantity: number;
+    assignedSeats: number;
+    availableSeats: number | null;
+    minSeats: number;
+    maxSeats: number | null;
+    maxMembers?: number | null;
+    assignedMembers?: number;
+    availableMembers?: number | null;
+}
+/** Input of `client.credits.consume()` (service-key mode only) */
+interface FFIDCreditConsumeParams {
+    /** Contract id: UUID, `ffid:<uuid>` or Stripe `sub_...` */
+    subscriptionId: string;
+    /** Integer, `FFID_CREDITS_CONSUME_MIN_AMOUNT`..`FFID_CREDITS_CONSUME_MAX_AMOUNT` */
+    amount: number;
+    /**
+     * One key per AI execution, reused on retry (`FFID_CREDITS_IDEMPOTENCY_KEY_PATTERN`).
+     * Recommended: `${feature}:${requestId}`.
+     */
+    idempotencyKey: string;
+    /** Service-side feature identifier (`FFID_CREDITS_FEATURE_PATTERN`) */
+    feature: string;
+    /**
+     * Aggregation values only (model name, token counts). **No personal data** —
+     * consumption rows are accounting records and survive user deletion.
+     * JSON object, at most `FFID_CREDITS_METADATA_MAX_BYTES` bytes.
+     */
+    metadata?: Record<string, unknown>;
+    /** End user who ran the AI (UUID). Recorded for audit only */
+    userId?: string;
+}
+/** Options of `client.credits.listHistory()` */
+interface FFIDListCreditHistoryOptions {
+    /** `nextCursor` of the previous page */
+    cursor?: string;
+    /** `FFID_CREDITS_HISTORY_MIN_LIMIT`..`FFID_CREDITS_HISTORY_MAX_LIMIT` (server default 20) */
+    limit?: number;
+    /** Filter by type; omitted = all */
+    type?: FFIDCreditHistoryType;
+}
+/** Input of `client.credits.createPackCheckout()` (token mode only) */
+interface FFIDCreatePackCheckoutParams {
+    /** Contract id: UUID, `ffid:<uuid>` or Stripe `sub_...` */
+    subscriptionId: string;
+    /** `code` from `listPacks()` */
+    packCode: string;
+    /** https URL to return to after payment */
+    successUrl: string;
+    /** https URL to return to on cancel */
+    cancelUrl: string;
+    /** `FFID_CREDIT_PACK_MIN_QUANTITY`..`FFID_CREDIT_PACK_MAX_QUANTITY` (server default 1) */
+    quantity?: number;
+}
+/** Input of `client.credits.getBuyCreditsUrl()` / `redirectToBuyCredits()` */
+interface FFIDBuyCreditsUrlParams {
+    /**
+     * Contract id as a UUID or `ffid:<uuid>`. The FFID portal page takes the UUID
+     * form only, so a Stripe `sub_...` id is rejected with `VALIDATION_ERROR`.
+     */
+    subscriptionId: string;
+    /** Organization ID — passed as `?org=` so FFID selects that organization */
+    orgId?: string;
+}
+
+/**
+ * Canonical service-access types for subscription lifecycle decisions.
+ */
+
+/** Subscription status values matching the FFID platform's SubscriptionStatus type */
+type FFIDSubscriptionStatus = 'trialing' | 'active' | 'past_due' | 'canceled' | 'pending_invoice' | 'paused' | 'incomplete' | 'incomplete_expired' | 'unpaid';
+interface FFIDSubscriptionCheckResponse {
+    hasActiveSubscription: boolean;
+    /**
+     * Canonical access decision returned by FFID's `/subscriptions/ext/check`.
+     *
+     * This is the server-side source of truth for service gates. Consumers
+     * should not recompute access from `currentPeriodEnd`, `past_due_since`, or
+     * local payment timestamps.
+     */
+    hasAccess?: boolean;
+    /** True when `effectiveStatus === 'past_due_grace'`. */
+    isGrace?: boolean;
+    /** True when FFID's canonical effective status denies service access. */
+    isBlocked?: boolean;
+    organizationId: string | null;
+    subscriptionId: string | null;
+    status: FFIDSubscriptionStatus | null;
+    planCode: string | null;
+    currentPeriodEnd: string | null;
+    /**
+     * Semantic FFID access-control status. `null` means the organization has no
+     * subscription row for this service.
+     */
+    effectiveStatus?: EffectiveSubscriptionStatus | null;
+    /**
+     * ISO timestamp at which `past_due_grace` flips to `blocked`; null outside
+     * the grace window.
+     */
+    gracePeriodEndsAt?: string | null;
+    /** Whether a canceled subscription can be resumed via a re-subscription flow. */
+    reactivatable?: boolean;
+    /**
+     * Billing model of the subscription's plan (10.0.0; CREDITS_API §5.1). `null` when
+     * there is no subscription. FFID servers released before #6390 omit it.
+     */
+    pricingModel?: FFIDPricingModel | null;
+    /**
+     * Credit balance summary — flat plans only (10.0.0). `null` for per_seat, for no
+     * subscription, **and** when FFID could not read the ledger, so `null` does not
+     * mean "not flat" (use `pricingModel`). Never affects `hasAccess`.
+     */
+    credits?: FFIDSubscriptionCheckCredits | null;
+    /**
+     * The plan's member limit is full (10.0.0). Informational: `hasAccess` is not
+     * affected. A user who cannot get a seat because of it is refused at login with
+     * OAuth `denial_reason: 'member_limit_reached'`.
+     */
+    memberLimitReached?: boolean;
+}
+type FFIDServiceAccessFailPolicy = 'failClosed';
+/**
+ * Why access was denied.
+ *
+ * `member_limit_reached` (10.0.0) is FFID's denial reason when a flat plan's member
+ * limit is full and the user has no seat. It reaches you through OAuth
+ * (`denial_reason` on authorize / userinfo / introspect); `checkServiceAccess()`
+ * derives its decision from `effectiveStatus` and never returns it, because a full
+ * member limit does not change `hasAccess` (CREDITS_API §1-5). It is in this union so
+ * one exhaustive `switch` over denial reasons covers both paths.
+ */
+type FFIDServiceAccessDenialReason = 'no_subscription' | 'grace_disallowed' | 'blocked' | 'canceled' | 'expired' | 'trial_expired' | 'ffid_unreachable' | 'member_limit_reached';
+interface FFIDCheckServiceAccessParams {
+    userId?: string;
+    organizationId: string;
+    /**
+     * Whether `past_due_grace` should keep access open.
+     *
+     * @default true
+     */
+    allowGrace?: boolean;
+    /**
+     * Error policy when FFID cannot return a canonical decision.
+     *
+     * Currently only `failClosed` is supported: network/server/parse failures
+     * become `hasAccess=false` decisions with `denialReason='ffid_unreachable'`
+     * and the root cause in `decision.error`. Treat `hasAccess` as the gate.
+     */
+    failPolicy?: FFIDServiceAccessFailPolicy;
+}
+interface FFIDServiceAccessError {
+    code: string;
+    message: string;
+    details?: unknown;
+}
+interface FFIDServiceAccessDecision {
+    hasAccess: boolean;
+    effectiveStatus: EffectiveSubscriptionStatus | null;
+    isGrace: boolean;
+    isBlocked: boolean;
+    allowGrace: boolean;
+    failPolicy: FFIDServiceAccessFailPolicy;
+    denialReason: FFIDServiceAccessDenialReason | null;
+    organizationId: string | null;
+    subscriptionId: string | null;
+    status: FFIDSubscriptionStatus | null;
+    planCode: string | null;
+    currentPeriodEnd: string | null;
+    gracePeriodEndsAt: string | null;
+    reactivatable: boolean;
+    /** Passed through from `/ext/check` when the server sends it (10.0.0). Informational. */
+    pricingModel?: FFIDPricingModel | null;
+    /**
+     * Passed through from `/ext/check` (10.0.0). Gate AI features on this or on
+     * `credits.consume`'s result — not on `hasAccess`.
+     */
+    credits?: FFIDSubscriptionCheckCredits | null;
+    /** Passed through from `/ext/check` (10.0.0). Does not affect `hasAccess`. */
+    memberLimitReached?: boolean;
+    /**
+     * Present when the decision was produced by the SDK fail-closed policy
+     * rather than by a successful FFID response.
+     */
+    error?: FFIDServiceAccessError;
+}
+
+/**
+ * Token Store
+ *
+ * Manages OAuth 2.0 tokens (access + refresh) with dual-storage support.
+ * Falls back to in-memory storage when localStorage is unavailable
+ * (e.g., Safari private browsing mode).
+ */
+/**
+ * Token data stored by the token store
+ */
+interface TokenData {
+    /** OAuth 2.0 access token */
+    accessToken: string;
+    /** OAuth 2.0 refresh token */
+    refreshToken: string;
+    /** Expiration timestamp in milliseconds (Unix epoch) */
+    expiresAt: number;
+}
+/**
+ * Token store interface for managing OAuth tokens
+ */
+interface TokenStore {
+    /** Get stored tokens (null if not stored) */
+    getTokens(): TokenData | null;
+    /** Store new tokens */
+    setTokens(tokens: TokenData): void;
+    /** Clear all stored tokens */
+    clearTokens(): void;
+    /** Check if access token is expired (with 30s buffer) */
+    isAccessTokenExpired(): boolean;
+}
+/**
+ * Create a token store with the specified storage type.
  *
- * `willApplyAtPeriodEnd` is a discriminant that constrains related fields at the type level:
- * - `true`: a decrease reserved until the period end. `proratedAmount` is always 0 (nothing is
- *   charged or refunded now); `effectiveDate` mirrors the subscription's `currentPeriodEnd`
- *   (may be `null` when the subscription has no active billing cycle yet).
- * - `false`: immediate change. `effectiveDate` is always `null`. For an increase,
- *   `proratedAmount` is the difference up to the current period end that is charged now
- *   (possibly Stripe-refined). A decrease on a contract that cannot be reserved also lands here:
- *   `0` for a contract without a Stripe subscription (no refund), but Stripe's prorated amount —
- *   negative, credited on the next invoice — for a Stripe contract with no period end yet
- *   (e.g. during a trial).
+ * When storageType is 'localStorage' (default in browser), falls back
+ * to memory if localStorage is not available (e.g., Safari private mode).
+ *
+ * @param storageType - 'localStorage' (default) or 'memory'
  */
-type FFIDPlanChangePreview = FFIDPlanChangePreviewBase & ({
-    willApplyAtPeriodEnd: true;
-    effectiveDate: string | null;
-    /** 0 on period-end-deferred changes; charge happens at the next invoice */
-    proratedAmount: 0;
-} | {
-    willApplyAtPeriodEnd: false;
-    effectiveDate: null;
-    /** Difference up to the current period end charged now (see the type doc for the decrease cases) */
-    proratedAmount: number;
-});
-/** Response from plan change preview endpoint */
-interface FFIDPlanChangePreviewResponse {
-    preview: FFIDPlanChangePreview;
+declare function createTokenStore(storageType?: 'localStorage' | 'memory'): TokenStore;
+
+/**
+ * Billing checkout / portal session types.
+ *
+ * types/index.ts のサイズ上限対応で切り出し（中身は逐語移設、#3787 Phase A）。
+ */
+/**
+ * Checkout session response from billing checkout endpoint
+ */
+interface FFIDCheckoutSessionResponse {
+    /** Stripe Checkout session ID */
+    sessionId: string;
+    /** Stripe Checkout session URL (null if session creation had issues) */
+    url: string | null;
 }
-/** Parameters for previewing a seat count change */
-interface FFIDPreviewSeatChangeParams {
+/**
+ * Portal session response from billing portal endpoint
+ */
+interface FFIDPortalSessionResponse {
+    /** Stripe Billing Portal URL */
+    url: string;
+}
+/**
+ * Parameters for creating a checkout session
+ */
+interface FFIDCreateCheckoutParams {
+    /** Organization ID (UUID) */
+    organizationId: string;
     /** Subscription ID (UUID) */
     subscriptionId: string;
-    /** New seat quantity. Must be an integer within the plan's allowed range. */
-    quantity: number;
-}
-/** Seat change preview line item */
-interface FFIDSeatChangeLineItem {
-    description: string;
-    amount: number;
+    /** URL to redirect after successful checkout */
+    successUrl: string;
+    /** URL to redirect after cancelled checkout */
+    cancelUrl: string;
+    /** Optional plan ID for upgrade or resubscription */
+    planId?: string;
 }
 /**
- * Seat change proration preview.
- *
- * Sister type to `FFIDPlanChangePreview`. The shared `type` discriminant lets
- * consumers narrow a preview payload without inspecting unrelated fields.
- *
- * - `willApplyAtPeriodEnd=true`: a seat reduction reserved until the period end.
- *   `proratedAmount` is 0 and `effectiveDate` is when the new seat count applies.
- * - Otherwise the change applies immediately. For an increase, `proratedAmount` is the amount
- *   charged now up to the current period end. A reduction that cannot be reserved is normally
- *   `0`, but can be negative (a credit on the next invoice) for a Stripe contract with no period
- *   end yet or when only the contract unit price is known.
- * - `isEstimate=true` (default when Stripe is not configured or data is unavailable):
- *   `proratedAmount` is computed locally. `isEstimate=false`: it reflects Stripe's live
- *   proration calculation.
- *
- * `nextInvoiceAmount` is a local estimate: flat period fee, or `unitPrice * newQuantity`.
- * Flat capacity changes have zero prorated cost.
- *
- * `pricingUnavailable=true` means custom pricing or an unverified contracted Stripe
- * Price. Hide amounts; zero is not a quote. `custom_pricing` permits the existing
- * unbilled seat-change flow. Require another preview before confirmation only when
- * pricing is unavailable and the reason is not `custom_pricing`. `stripe_error` also
- * covers invoice/address failures after the contract price is known; use
- * `pricingUnavailable`, not the reason alone, to decide whether to hide amounts.
- * `no_stripe_data` means invoice proration is unavailable even if the contract unit
- * price is known. Portal seat PUT independently enforces subscription limits;
- * external consumers should guide users to the FFID portal for seat changes.
+ * Parameters for creating a billing portal session
  */
-interface FFIDSeatChangePreview {
-    /** flat: unitPrice is the whole period fee; per_seat: multiply by capacity. */
-    pricingModel?: 'per_seat' | 'flat';
-    /** Discriminant for preview response variants (pairs with `FFIDPlanChangePreview.type`) */
-    type: 'seat-change';
-    currentQuantity: number;
-    newQuantity: number;
-    /** Per-seat price for the current billing interval */
-    unitPrice: number;
-    billingInterval: FFIDBillingInterval;
-    /**
-     * Amount charged now for the rest of the current billing period. A reserved seat reduction
-     * (`willApplyAtPeriodEnd: true`) is always `0`; see the type doc for reductions that cannot
-     * be reserved. Also `0` when `pricingUnavailable === true`; hide it instead of quoting zero.
-     */
-    proratedAmount: number;
-    /** Next invoice full amount — flat period fee or per-seat price times newQuantity */
-    nextInvoiceAmount: number;
-    nextInvoiceDate: string | null;
-    currency: FFIDSupportedCurrency;
-    /** true when proratedAmount is a local estimate rather than Stripe invoice/proration data */
-    isEstimate: boolean;
-    /** Hide amounts: custom pricing or contracted Stripe Price could not be verified. */
-    pricingUnavailable?: boolean;
-    /** Reason why `isEstimate` is true. Only meaningful when `isEstimate === true`. */
-    estimateReason?: 'no_stripe_data' | 'custom_pricing' | 'stripe_error';
-    /**
-     * `true` when the seat reduction would be reserved until the period end (8.0.0).
-     * Absent or `false` = the change applies immediately.
-     */
-    willApplyAtPeriodEnd?: boolean;
-    /** When the reserved seat count applies (present when `willApplyAtPeriodEnd` is `true`) */
-    effectiveDate?: string | null;
-    lineItems: FFIDSeatChangeLineItem[];
-}
-/** Response from seat change preview endpoint */
-interface FFIDSeatChangePreviewResponse {
-    preview: FFIDSeatChangePreview;
+interface FFIDCreatePortalParams {
+    /** Organization ID (UUID) */
+    organizationId: string;
+    /** URL to redirect when user exits the portal */
+    returnUrl: string;
 }
 
 /** Member role in an organization */
@@ -1124,12 +1505,28 @@ interface FFIDSeatAssignmentRecord {
     createdAt: string;
     updatedAt: string;
 }
-/** GET /api/v1/subscriptions/ext/{id}/seats/assignments のレスポンス */
+/**
+ * GET /api/v1/subscriptions/ext/{id}/seats/assignments のレスポンス
+ *
+ * 10.0.0（破壊的変更）: flat 契約では `totalSeats` = 人数枠（`maxMembers`）で、
+ * 無制限のプランでは `totalSeats` / `availableSeats` が `null` になる。
+ * `pricingModel` で分岐すること（#6395（10.0.0）で assignments にも追加。それより前の FFID は返さない）。
+ */
 interface FFIDListSeatAssignmentsResponse {
     assignments: FFIDSeatAssignmentWithUser[];
-    totalSeats: number;
+    /** 課金モデル。#6395（10.0.0）で assignments にも追加（それより前の FFID サーバーは返さない） */
+    pricingModel?: 'per_seat' | 'flat';
+    /** per_seat: 契約の席数。flat: 人数枠（`null` = 無制限） */
+    totalSeats: number | null;
     assignedSeats: number;
-    availableSeats: number;
+    /** 残り。flat で無制限のときは `null` */
+    availableSeats: number | null;
+    /** flat のみ: 人数枠（`null` = 無制限） */
+    maxMembers?: number | null;
+    /** flat のみ: 割り当て済みの人数 */
+    assignedMembers?: number;
+    /** flat のみ: 残りの人数枠（`null` = 無制限） */
+    availableMembers?: number | null;
 }
 /** listSeatAssignments のパラメータ */
 interface FFIDListSeatAssignmentsParams {
@@ -1705,107 +2102,6 @@ type FFIDRedirectResult = {
     code?: FFIDRedirectErrorCode;
 };
 
-/** Deployment environments a catalog publication can apply to (single source) */
-declare const FFID_CATALOG_ENVIRONMENTS: readonly ["staging", "production"];
-/** Deployment environment a catalog publication applies to */
-type FFIDCatalogEnvironment = (typeof FFID_CATALOG_ENVIRONMENTS)[number];
-/**
- * Tax behavior of a published price.
- * `inclusive`: displayed price contains Stripe-calculated tax.
- * `exclusive`: tax is added on top of the base price.
- */
-type FFIDTaxBehavior = 'inclusive' | 'exclusive';
-/**
- * Publication lifecycle statuses (single source — the type, the SDK runtime
- * validator, and consumer sets all derive from this tuple so a new literal
- * cannot be added to one side only).
- */
-declare const FFID_CATALOG_PUBLICATION_STATUSES: readonly ["approved", "superseded", "revoking", "revoked"];
-/**
- * Publication lifecycle status.
- * - `approved`: sellable — the only status that permits new paid checkout
- * - `superseded`: replaced by a newer revision (old sessions may sell through
- *   until `sellThroughUntil`)
- * - `revoking`: emergency stop in progress — never sellable
- * - `revoked`: emergency stop completed — never sellable
- */
-type FFIDCatalogPublicationStatus = (typeof FFID_CATALOG_PUBLICATION_STATUSES)[number];
-/**
- * Human-approved publication record binding a catalog revision to the
- * content/config hashes reviewed at approval time.
- *
- * All `*Hash` fields are lowercase SHA-256 hex computed with the shared
- * canonicalization helpers in `shared/catalog-hash` — consumers re-hash the
- * content they actually render and must refuse new sales on any mismatch.
- */
-interface FFIDCatalogPublication {
-    serviceCode: string;
-    environment: FFIDCatalogEnvironment;
-    catalogVersion: string;
-    praxisCopyHash: string;
-    ffidCheckoutCopyHash: string;
-    legalDisclosureHash: string;
-    taxConfigurationHash: string;
-    paymentConfigurationHash: string;
-    scopeHash: string;
-    /** Monotonically increasing per (service, environment) publication counter */
-    salesEpoch: number;
-    /** FFID-generated immutable human-review approval ID */
-    approvalId: string;
-    /** ISO 8601 timestamp of the recorded human review */
-    reviewedAt: string;
-    /** ISO 8601 timestamp the publication became effective */
-    effectiveAt: string;
-    /** ISO 8601 timestamp the publication was superseded (null while current) */
-    supersededAt: string | null;
-    /** ISO 8601 upper bound for old-session sell-through (null unless superseded) */
-    sellThroughUntil: string | null;
-    /** ISO 8601 timestamp an emergency revoke took effect (null unless revoking/revoked) */
-    revocationEffectiveAt: string | null;
-    status: FFIDCatalogPublicationStatus;
-}
-/**
- * A plan inside a published catalog revision (public-safe snapshot).
- * Never contains Stripe Product/Price identifiers or other secrets.
- */
-interface FFIDPublishedPlan {
-    /**
-     * Plan code — always a lowercase slug (`^[a-z0-9][a-z0-9_-]*$`).
-     * Per-service open set; see the FFID repo's
-     * `docs/04-api/PLAN_CODE_CONTRACT.md` for the full guarantees.
-     */
-    code: string;
-    name: string;
-    description: string | null;
-    /** Monthly price in the catalog currency; null when monthly is not offered */
-    priceMonthly: number | null;
-    /** Yearly price in the catalog currency; null when yearly is not offered */
-    priceYearly: number | null;
-    currency: string;
-    /** Billing intervals actually purchasable for this plan */
-    billingIntervals: FFIDBillingInterval[];
-    taxBehavior: FFIDTaxBehavior;
-    minSeats: number;
-    maxSeats: number | null;
-    displayOrder: number;
-}
-/**
- * Response of GET /api/v1/subscriptions/ext/catalog/{serviceCode}.
- *
- * `catalogVersion` always equals `publication.catalogVersion`; it is hoisted
- * to the top level so consumers can pin the version (e.g. as
- * `expectedCatalogVersion` for checkout) without digging into the publication.
- */
-interface FFIDPublishedCatalog {
-    service: {
-        code: string;
-        name: string;
-    };
-    catalogVersion: string;
-    publication: FFIDCatalogPublication;
-    plans: FFIDPublishedPlan[];
-}
-
 /**
  * FFID SDK Type Definitions
  *
@@ -2513,6 +2809,7 @@ declare function createFFIDClient(config: FFIDConfig): {
     getInvoice: (params: FFIDGetInvoiceParams) => Promise<FFIDApiResponse<FFIDGetInvoiceResponse>>;
     retryPayment: (params: FFIDRetryPaymentParams) => Promise<FFIDApiResponse<FFIDRetryPaymentSummary>>;
     listSeatAssignments: (params: FFIDListSeatAssignmentsParams) => Promise<FFIDApiResponse<FFIDListSeatAssignmentsResponse>>;
+    getSeats: (subscriptionId: string) => Promise<FFIDApiResponse<FFIDSeatsSummary>>;
     assignSeats: (params: FFIDAssignSeatsParams) => Promise<FFIDApiResponse<FFIDAssignSeatsResponse>>;
     unassignSeat: (params: FFIDUnassignSeatParams) => Promise<FFIDApiResponse<FFIDUnassignSeatResponse>>;
     listPlans: () => Promise<FFIDApiResponse<FFIDListPlansResponse>>;
@@ -2523,13 +2820,16 @@ declare function createFFIDClient(config: FFIDConfig): {
     cancelSubscription: (params: FFIDCancelSubscriptionParams) => Promise<FFIDApiResponse<FFIDCancelSubscriptionResponse>>;
     cancelPendingDowngrade: (subscriptionId: string) => Promise<FFIDApiResponse<FFIDCancelPendingDowngradeResponse>>;
     previewPlanChange: (params: FFIDPreviewPlanChangeParams) => Promise<FFIDApiResponse<FFIDPlanChangePreviewResponse>>;
+    /** @deprecated 10.0.0: per_seat (praxis) only; removed in 11.0.0 */
     previewSeatChange: (params: FFIDPreviewSeatChangeParams) => Promise<FFIDApiResponse<FFIDSeatChangePreviewResponse>>;
     verifyAccessToken: (accessToken: string, options?: FFIDVerifyAccessTokenOptions) => Promise<FFIDApiResponse<FFIDOAuthUserInfo>>;
     getSubscribeUrl: (options?: ContractWizardSubscribeOptions) => string;
     redirectToSubscribe: (options?: ContractWizardSubscribeOptions) => FFIDRedirectResult;
     getChangePlanUrl: (subscriptionId: string, options?: ContractWizardSubscriptionOptions) => string;
     redirectToChangePlan: (subscriptionId: string, options?: ContractWizardSubscriptionOptions) => FFIDRedirectResult;
+    /** @deprecated 10.0.0: per_seat (praxis) only; removed in 11.0.0 */
     getChangeSeatsUrl: (subscriptionId: string, options?: ContractWizardSubscriptionOptions) => string;
+    /** @deprecated 10.0.0: per_seat (praxis) only; removed in 11.0.0 */
     redirectToChangeSeats: (subscriptionId: string, options?: ContractWizardSubscriptionOptions) => FFIDRedirectResult;
     getRecoverPaymentUrl: (subscriptionId: string, options?: ContractWizardSubscriptionOptions) => string;
     redirectToRecoverPayment: (subscriptionId: string, options?: ContractWizardSubscriptionOptions) => FFIDRedirectResult;
@@ -2557,6 +2857,16 @@ declare function createFFIDClient(config: FFIDConfig): {
     inquiry: {
         create: (params: FFIDInquiryCreateParams) => Promise<FFIDApiResponse<FFIDInquiryCreateResponse>>;
     };
+    /** Credits methods for flat plans (consume / balance / history / packs) */
+    credits: {
+        getBalance: (subscriptionId: string) => Promise<FFIDApiResponse<FFIDCreditBalance>>;
+        listHistory: (subscriptionId: string, options?: FFIDListCreditHistoryOptions) => Promise<FFIDApiResponse<FFIDCreditHistoryPage>>;
+        listPacks: (packServiceCode?: string) => Promise<FFIDApiResponse<FFIDCreditPackList>>;
+        createPackCheckout: (params: FFIDCreatePackCheckoutParams) => Promise<FFIDApiResponse<FFIDCreditPackCheckout>>;
+        consume: (params: FFIDCreditConsumeParams) => Promise<FFIDApiResponse<FFIDCreditConsumeResult>>;
+        getBuyCreditsUrl: (params: FFIDBuyCreditsUrlParams) => FFIDApiResponse<string>;
+        redirectToBuyCredits: (params: FFIDBuyCreditsUrlParams) => FFIDRedirectResult;
+    };
     /** Token store (token mode only) */
     tokenStore: TokenStore;
     /**