@feelflow/ffid-sdk 9.0.0 → 10.1.0

package/dist/{chunk-TUXIJEEZ.js → chunk-ITSQIAO5.js}

@@ -1374,7 +1374,7 @@ var FFID_ORGANIZATION_PROFILE_ERROR_CODES = {
 };
 
 // src/client/version-check.ts
-var SDK_VERSION = "9.0.0";
+var SDK_VERSION = "10.1.0";
 var SDK_USER_AGENT = `FFID-SDK/${SDK_VERSION} (TypeScript)`;
 var SDK_VERSION_HEADER = "X-FFID-SDK-Version";
 function sdkHeaders() {
@@ -1730,8 +1730,11 @@ function createProvisioningMethods(deps) {
 }
 
 // src/client/seat-methods.ts
+function seatSummaryEndpoint(subscriptionId) {
+  return `/api/v1/subscriptions/ext/${encodeURIComponent(subscriptionId)}/seats`;
+}
 function seatsEndpoint(subscriptionId) {
-  return `/api/v1/subscriptions/ext/${encodeURIComponent(subscriptionId)}/seats/assignments`;
+  return `${seatSummaryEndpoint(subscriptionId)}/assignments`;
 }
 function createSeatMethods(deps) {
   const { fetchWithAuth, createError } = deps;
@@ -1741,6 +1744,12 @@ function createSeatMethods(deps) {
     }
     return fetchWithAuth(seatsEndpoint(params.subscriptionId));
   }
+  async function getSeats(subscriptionId) {
+    if (!subscriptionId || !subscriptionId.trim()) {
+      return { error: createError("VALIDATION_ERROR", "subscriptionId \u306F\u5FC5\u9808\u3067\u3059") };
+    }
+    return fetchWithAuth(seatSummaryEndpoint(subscriptionId));
+  }
   async function assignSeats(params) {
     if (!params.subscriptionId) {
       return { error: createError("VALIDATION_ERROR", "subscriptionId \u306F\u5FC5\u9808\u3067\u3059") };
@@ -1765,7 +1774,7 @@ function createSeatMethods(deps) {
       { method: "DELETE" }
     );
   }
-  return { listSeatAssignments, assignSeats, unassignSeat };
+  return { listSeatAssignments, getSeats, assignSeats, unassignSeat };
 }
 
 // src/client/profile-methods.ts
@@ -3630,6 +3639,225 @@ function createInquiryMethods(deps) {
   return { create };
 }
 
+// src/types/credits.ts
+var FFID_CREDITS_LOW_THRESHOLD_PERCENT = 20;
+var FFID_CREDITS_CONSUME_MIN_AMOUNT = 1;
+var FFID_CREDITS_CONSUME_MAX_AMOUNT = 1e6;
+var FFID_CREDITS_METADATA_MAX_BYTES = 4096;
+var FFID_CREDITS_HISTORY_MIN_LIMIT = 1;
+var FFID_CREDITS_HISTORY_MAX_LIMIT = 100;
+var FFID_CREDITS_HISTORY_DEFAULT_LIMIT = 20;
+var FFID_CREDIT_PACK_MIN_QUANTITY = 1;
+var FFID_CREDIT_PACK_MAX_QUANTITY = 10;
+var FFID_CREDITS_IDEMPOTENCY_KEY_PATTERN = /^[A-Za-z0-9._:-]{8,128}$/;
+var FFID_CREDITS_FEATURE_PATTERN = /^[a-z0-9][a-z0-9._-]{0,63}$/;
+var FFID_CREDIT_HISTORY_TYPES = ["grant", "consumption", "revocation"];
+var FFID_CREDIT_GRANT_KINDS = ["monthly", "manual", "pack"];
+
+// src/client/credits-methods.ts
+var EXT_SUBSCRIPTIONS_PATH = "/api/v1/subscriptions/ext";
+var CREDIT_PACKS_ENDPOINT = `${EXT_SUBSCRIPTIONS_PATH}/credits/packs`;
+var CREDIT_PACK_CHECKOUT_ENDPOINT = `${CREDIT_PACKS_ENDPOINT}/checkout`;
+var PORTAL_SUBSCRIPTION_PATH = "/subscriptions";
+var BUY_CREDITS_QUERY = { key: "purchase", value: "credits" };
+var ORG_QUERY_KEY = "org";
+var FFID_CONTRACT_ID_PREFIX = "ffid:";
+var STRIPE_SUBSCRIPTION_ID_PREFIX = "sub_";
+var UUID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var VALIDATION_ERROR = "VALIDATION_ERROR";
+var FORBIDDEN = "FORBIDDEN";
+var utf8Encoder = new TextEncoder();
+function creditsEndpoint(subscriptionId, action) {
+  return `${EXT_SUBSCRIPTIONS_PATH}/${encodeURIComponent(subscriptionId)}/credits/${action}`;
+}
+function isPlainObject2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isIntegerInRange(value, min, max) {
+  return typeof value === "number" && Number.isInteger(value) && value >= min && value <= max;
+}
+function createCreditsMethods(deps) {
+  const { fetchWithAuth, createError, authMode, baseUrl, serviceCode, logger } = deps;
+  function validationError(field, message) {
+    return { error: { ...createError(VALIDATION_ERROR, message), details: { field } } };
+  }
+  function forbidden(reason, message) {
+    return { error: { ...createError(FORBIDDEN, message), details: { reason } } };
+  }
+  function missingSubscriptionId(subscriptionId) {
+    return subscriptionId && subscriptionId.trim() ? null : validationError("subscriptionId", "subscriptionId \u306F\u5FC5\u9808\u3067\u3059");
+  }
+  async function getBalance(subscriptionId) {
+    const invalid = missingSubscriptionId(subscriptionId);
+    if (invalid) return invalid;
+    return fetchWithAuth(creditsEndpoint(subscriptionId, "balance"));
+  }
+  async function listHistory(subscriptionId, options = {}) {
+    const invalid = missingSubscriptionId(subscriptionId);
+    if (invalid) return invalid;
+    const query = new URLSearchParams();
+    if (options.cursor !== void 0) query.set("cursor", options.cursor);
+    if (options.limit !== void 0) {
+      if (!isIntegerInRange(options.limit, FFID_CREDITS_HISTORY_MIN_LIMIT, FFID_CREDITS_HISTORY_MAX_LIMIT)) {
+        return validationError(
+          "limit",
+          `limit \u306F ${FFID_CREDITS_HISTORY_MIN_LIMIT}\u301C${FFID_CREDITS_HISTORY_MAX_LIMIT} \u306E\u6574\u6570\u3067\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044`
+        );
+      }
+      query.set("limit", String(options.limit));
+    }
+    if (options.type !== void 0) {
+      if (!FFID_CREDIT_HISTORY_TYPES.includes(options.type)) {
+        return validationError("type", `type \u306F ${FFID_CREDIT_HISTORY_TYPES.join(" / ")} \u306E\u3044\u305A\u308C\u304B\u3067\u3059`);
+      }
+      query.set("type", options.type);
+    }
+    const qs = query.toString();
+    return fetchWithAuth(
+      `${creditsEndpoint(subscriptionId, "history")}${qs ? `?${qs}` : ""}`
+    );
+  }
+  async function listPacks(packServiceCode) {
+    const resolved = packServiceCode ?? (authMode === "service-key" ? void 0 : serviceCode);
+    if (resolved !== void 0 && !resolved.trim()) {
+      return validationError("serviceCode", "serviceCode \u3092\u6307\u5B9A\u3059\u308B\u5834\u5408\u3001\u7A7A\u6587\u5B57\u306F\u4F7F\u7528\u3067\u304D\u307E\u305B\u3093");
+    }
+    const qs = resolved === void 0 ? "" : `?${new URLSearchParams({ serviceCode: resolved }).toString()}`;
+    return fetchWithAuth(`${CREDIT_PACKS_ENDPOINT}${qs}`);
+  }
+  async function createPackCheckout(params) {
+    if (authMode !== "token") {
+      return forbidden(
+        "bearer_required",
+        "createPackCheckout \u306F token \u30E2\u30FC\u30C9\uFF08Bearer\uFF09\u3067\u306E\u307F\u5229\u7528\u3067\u304D\u307E\u3059\u3002\u8CFC\u5165\u8005\u306E\u8A18\u9332\u306B\u5B9F\u30E6\u30FC\u30B6\u30FC\u304C\u5FC5\u8981\u306A\u305F\u3081\u3067\u3059"
+      );
+    }
+    const invalid = missingSubscriptionId(params.subscriptionId);
+    if (invalid) return invalid;
+    for (const field of ["packCode", "successUrl", "cancelUrl"]) {
+      if (!params[field] || !params[field].trim()) {
+        return validationError(field, `${field} \u306F\u5FC5\u9808\u3067\u3059`);
+      }
+    }
+    if (params.quantity !== void 0 && !isIntegerInRange(params.quantity, FFID_CREDIT_PACK_MIN_QUANTITY, FFID_CREDIT_PACK_MAX_QUANTITY)) {
+      return validationError(
+        "quantity",
+        `quantity \u306F ${FFID_CREDIT_PACK_MIN_QUANTITY}\u301C${FFID_CREDIT_PACK_MAX_QUANTITY} \u306E\u6574\u6570\u3067\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044`
+      );
+    }
+    const body = {
+      subscriptionId: params.subscriptionId,
+      packCode: params.packCode,
+      successUrl: params.successUrl,
+      cancelUrl: params.cancelUrl
+    };
+    if (params.quantity !== void 0) body.quantity = params.quantity;
+    return fetchWithAuth(CREDIT_PACK_CHECKOUT_ENDPOINT, {
+      method: "POST",
+      body: JSON.stringify(body)
+    });
+  }
+  function validateConsume(params) {
+    const invalid = missingSubscriptionId(params.subscriptionId);
+    if (invalid) return invalid;
+    if (!isIntegerInRange(params.amount, FFID_CREDITS_CONSUME_MIN_AMOUNT, FFID_CREDITS_CONSUME_MAX_AMOUNT)) {
+      return validationError(
+        "amount",
+        `amount \u306F ${FFID_CREDITS_CONSUME_MIN_AMOUNT}\u301C${FFID_CREDITS_CONSUME_MAX_AMOUNT} \u306E\u6574\u6570\u3067\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044`
+      );
+    }
+    if (typeof params.idempotencyKey !== "string" || !FFID_CREDITS_IDEMPOTENCY_KEY_PATTERN.test(params.idempotencyKey)) {
+      return validationError(
+        "idempotencyKey",
+        "idempotencyKey \u306E\u5F62\u5F0F\u304C\u4E0D\u6B63\u3067\u3059\uFF08\u82F1\u6570\u5B57\u3068 . _ : - \u306E 8\u301C128 \u6587\u5B57\u3002\u63A8\u5968\u306F feature:requestId\uFF09"
+      );
+    }
+    if (typeof params.feature !== "string" || !FFID_CREDITS_FEATURE_PATTERN.test(params.feature)) {
+      return validationError("feature", "feature \u306E\u5F62\u5F0F\u304C\u4E0D\u6B63\u3067\u3059\uFF08\u5C0F\u6587\u5B57\u82F1\u6570\u5B57\u3067\u59CB\u307E\u308B\u3001\u5C0F\u6587\u5B57\u82F1\u6570\u5B57\u3068 . _ - \u306E 1\u301C64 \u6587\u5B57\uFF09");
+    }
+    if (params.metadata !== void 0) {
+      if (!isPlainObject2(params.metadata)) {
+        return validationError("metadata", "metadata \u306F JSON \u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059");
+      }
+      let serialized;
+      try {
+        serialized = JSON.stringify(params.metadata);
+      } catch {
+        return validationError("metadata", "metadata \u306F JSON \u306B\u5909\u63DB\u3067\u304D\u308B\u5024\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059\uFF08BigInt\u30FB\u5FAA\u74B0\u53C2\u7167\u306F\u4E0D\u53EF\uFF09");
+      }
+      if (utf8Encoder.encode(serialized).byteLength > FFID_CREDITS_METADATA_MAX_BYTES) {
+        return validationError("metadata", `metadata \u306F ${FFID_CREDITS_METADATA_MAX_BYTES} \u30D0\u30A4\u30C8\u4EE5\u4E0B\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059`);
+      }
+    }
+    if (params.userId !== void 0 && !UUID_PATTERN.test(params.userId)) {
+      return validationError("userId", "userId \u306F\u6709\u52B9\u306AUUID\u5F62\u5F0F\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059");
+    }
+    return null;
+  }
+  async function consume(params) {
+    if (authMode !== "service-key") {
+      return forbidden(
+        "api_key_required",
+        "credits.consume \u306F service-key \u8A8D\u8A3C\uFF08X-Service-Api-Key\uFF09\u3067\u306E\u307F\u5229\u7528\u3067\u304D\u307E\u3059\u3002\u6D88\u8CBB\u306E\u5831\u544A\u306F\u30B5\u30FC\u30D3\u30B9\u306E\u30D0\u30C3\u30AF\u30A8\u30F3\u30C9\u304B\u3089\u884C\u3063\u3066\u304F\u3060\u3055\u3044"
+      );
+    }
+    const invalid = validateConsume(params);
+    if (invalid) return invalid;
+    const body = {
+      amount: params.amount,
+      idempotencyKey: params.idempotencyKey,
+      feature: params.feature
+    };
+    if (params.metadata !== void 0) body.metadata = params.metadata;
+    if (params.userId !== void 0) body.userId = params.userId;
+    return fetchWithAuth(creditsEndpoint(params.subscriptionId, "consume"), {
+      method: "POST",
+      body: JSON.stringify(body)
+    });
+  }
+  function getBuyCreditsUrl(params) {
+    const raw = params.subscriptionId?.trim() ?? "";
+    if (raw.startsWith(STRIPE_SUBSCRIPTION_ID_PREFIX)) {
+      return validationError(
+        "subscriptionId",
+        "getBuyCreditsUrl \u306B\u306F\u5951\u7D04\u306E UUID\uFF08\u307E\u305F\u306F ffid:<uuid>\uFF09\u3092\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044\u3002Stripe \u306E sub_... \u306F\u4F7F\u3048\u307E\u305B\u3093"
+      );
+    }
+    const uuid = raw.startsWith(FFID_CONTRACT_ID_PREFIX) ? raw.slice(FFID_CONTRACT_ID_PREFIX.length) : raw;
+    if (!UUID_PATTERN.test(uuid)) {
+      return validationError("subscriptionId", "subscriptionId \u306F\u5951\u7D04\u306E UUID\uFF08\u307E\u305F\u306F ffid:<uuid>\uFF09\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059");
+    }
+    const query = new URLSearchParams({ [BUY_CREDITS_QUERY.key]: BUY_CREDITS_QUERY.value });
+    if (params.orgId !== void 0 && params.orgId.trim()) {
+      query.set(ORG_QUERY_KEY, params.orgId);
+    }
+    return { data: `${baseUrl}${PORTAL_SUBSCRIPTION_PATH}/${encodeURIComponent(uuid)}?${query.toString()}` };
+  }
+  function redirectToBuyCredits(params) {
+    const result = getBuyCreditsUrl(params);
+    if (result.error) {
+      logger.warn("redirectToBuyCredits:", result.error.message);
+      return { success: false, error: result.error.message };
+    }
+    if (typeof window === "undefined") {
+      logger.warn("SSR \u74B0\u5883\u3067\u306F\u30EA\u30C0\u30A4\u30EC\u30AF\u30C8\u3067\u304D\u307E\u305B\u3093");
+      return { success: false, error: "SSR \u74B0\u5883\u3067\u306F\u30EA\u30C0\u30A4\u30EC\u30AF\u30C8\u3067\u304D\u307E\u305B\u3093" };
+    }
+    logger.debug("Redirecting to buy credits:", result.data);
+    window.location.href = result.data;
+    return { success: true };
+  }
+  return {
+    getBalance,
+    listHistory,
+    listPacks,
+    createPackCheckout,
+    consume,
+    getBuyCreditsUrl,
+    redirectToBuyCredits
+  };
+}
+
 // src/subscriptions/types.ts
 var EFFECTIVE_SUBSCRIPTION_STATUSES = [
   "active",
@@ -3763,7 +3991,12 @@ function toServiceAccessDecision(response, allowGrace) {
     planCode: response.planCode,
     currentPeriodEnd: response.currentPeriodEnd,
     gracePeriodEndsAt: response.gracePeriodEndsAt ?? null,
-    reactivatable: response.reactivatable ?? false
+    reactivatable: response.reactivatable ?? false,
+    // Informational pass-through (10.0.0). Deliberately not part of hasAccess /
+    // denialReason: credits and the member limit never gate access (CREDITS_API §1-5).
+    ...response.pricingModel !== void 0 ? { pricingModel: response.pricingModel } : {},
+    ...response.credits !== void 0 ? { credits: response.credits } : {},
+    ...response.memberLimitReached !== void 0 ? { memberLimitReached: response.memberLimitReached } : {}
   };
 }
 function failClosedServiceAccessDecision(params, error) {
@@ -3810,6 +4043,19 @@ var FFID_SUBSCRIPTION_ERROR_CODES = {
   FREE_DOWNGRADE_NOT_ALLOWED: "FREE_DOWNGRADE_NOT_ALLOWED",
   PAYMENT_METHOD_REQUIRED: "PAYMENT_METHOD_REQUIRED"
 };
+var FFID_CREDITS_ERROR_CODES = {
+  CREDITS_INSUFFICIENT: "CREDITS_INSUFFICIENT",
+  CREDITS_IDEMPOTENCY_CONFLICT: "CREDITS_IDEMPOTENCY_CONFLICT",
+  CREDITS_NOT_APPLICABLE: "CREDITS_NOT_APPLICABLE",
+  CREDITS_BALANCE_CAP_EXCEEDED: "CREDITS_BALANCE_CAP_EXCEEDED",
+  SEAT_BILLING_NOT_APPLICABLE: "SEAT_BILLING_NOT_APPLICABLE",
+  MEMBER_LIMIT_REACHED: "MEMBER_LIMIT_REACHED",
+  CREDIT_PACK_NOT_FOUND: "CREDIT_PACK_NOT_FOUND",
+  CREDIT_PACK_REGION_NOT_SUPPORTED: "CREDIT_PACK_REGION_NOT_SUPPORTED",
+  CREDIT_PACK_STRIPE_NOT_SYNCED: "CREDIT_PACK_STRIPE_NOT_SYNCED",
+  CREDIT_PACK_STRIPE_OUT_OF_SYNC: "CREDIT_PACK_STRIPE_OUT_OF_SYNC",
+  CREDIT_PACK_CHANGED: "CREDIT_PACK_CHANGED"
+};
 
 // src/client/ffid-client.ts
 var UNAUTHORIZED_STATUS2 = 401;
@@ -4137,7 +4383,7 @@ function createFFIDClient(config) {
     fetchWithAuth,
     createError
   });
-  const { listSeatAssignments, assignSeats, unassignSeat } = createSeatMethods({
+  const { listSeatAssignments, getSeats, assignSeats, unassignSeat } = createSeatMethods({
     fetchWithAuth,
     createError
   });
@@ -4244,6 +4490,14 @@ function createFFIDClient(config) {
     fetchWithAuth,
     createError
   });
+  const credits = createCreditsMethods({
+    fetchWithAuth,
+    createError,
+    authMode,
+    baseUrl,
+    serviceCode: config.serviceCode,
+    logger
+  });
   const verifyAccessToken = createVerifyAccessToken({
     authMode,
     baseUrl,
@@ -4299,6 +4553,7 @@ function createFFIDClient(config) {
     getInvoice,
     retryPayment,
     listSeatAssignments,
+    getSeats,
     assignSeats,
     unassignSeat,
     listPlans,
@@ -4309,13 +4564,16 @@ function createFFIDClient(config) {
     cancelSubscription,
     cancelPendingDowngrade,
     previewPlanChange,
+    /** @deprecated 10.0.0: per_seat (praxis) only; removed in 11.0.0 */
     previewSeatChange,
     verifyAccessToken,
     getSubscribeUrl,
     redirectToSubscribe,
     getChangePlanUrl,
     redirectToChangePlan,
+    /** @deprecated 10.0.0: per_seat (praxis) only; removed in 11.0.0 */
     getChangeSeatsUrl,
+    /** @deprecated 10.0.0: per_seat (praxis) only; removed in 11.0.0 */
     redirectToChangeSeats,
     getRecoverPaymentUrl,
     redirectToRecoverPayment,
@@ -4331,6 +4589,8 @@ function createFFIDClient(config) {
     newsletter,
     /** Inquiry methods (create) */
     inquiry,
+    /** Credits methods for flat plans (consume / balance / history / packs) */
+    credits,
     /** Token store (token mode only) */
     tokenStore,
     /**
@@ -4349,6 +4609,50 @@ function createFFIDClient(config) {
   };
 }
 
+// src/client/authorization-error.ts
+var FFID_OAUTH_DENIAL_REASONS = [
+  /** The user is not a member of the organization */
+  "no_membership",
+  /** The organization has no usable subscription for the service */
+  "no_active_subscription",
+  /** The organization has a subscription, but the user has no seat in it */
+  "no_seat_assignment",
+  /** The subscription has expired (canceled / past due beyond grace) */
+  "subscription_expired",
+  /** The flat plan's member limit is full, so no seat could be given */
+  "member_limit_reached"
+];
+function isFFIDOAuthDenialReason(value) {
+  return typeof value === "string" && FFID_OAUTH_DENIAL_REASONS.includes(value);
+}
+var DEFAULT_AUTHORIZATION_ERROR_MESSAGE = "\u8A8D\u53EF\u30B5\u30FC\u30D0\u30FC\u304C\u30A8\u30E9\u30FC\u3092\u8FD4\u3057\u307E\u3057\u305F";
+function buildAuthorizationError(params) {
+  const oauthError = params.get("error");
+  if (!oauthError) return null;
+  const rawReason = params.get("denial_reason");
+  const errorDescription = params.get("error_description");
+  const details = {
+    source: "authorization",
+    denialReason: isFFIDOAuthDenialReason(rawReason) ? rawReason : null,
+    errorDescription
+  };
+  return {
+    code: oauthError,
+    message: errorDescription ?? DEFAULT_AUTHORIZATION_ERROR_MESSAGE,
+    details: { ...details }
+  };
+}
+function getFFIDAuthorizationError(error) {
+  const details = error?.details;
+  if (!error || !details || details.source !== "authorization") return null;
+  const description = details.errorDescription;
+  return {
+    oauthError: error.code,
+    denialReason: isFFIDOAuthDenialReason(details.denialReason) ? details.denialReason : null,
+    errorDescription: typeof description === "string" ? description : null
+  };
+}
+
 // src/client/callback.ts
 var CALLBACK_ERROR_CODES = {
   /** Stored state missing or did not match the callback `state` (CSRF guard) */
@@ -4373,16 +4677,43 @@ function extractSearchParams(source) {
     return new URLSearchParams(query);
   }
 }
-function cleanCallbackUrlParams(logger) {
+var CODE_CALLBACK_PARAMS = ["code", "state"];
+var ERROR_CALLBACK_CONSUMED_PARAMS = ["state"];
+function cleanCallbackUrlParams(logger, names) {
   try {
     const cleanUrl = new URL(window.location.href);
-    cleanUrl.searchParams.delete("code");
-    cleanUrl.searchParams.delete("state");
+    for (const name of names) cleanUrl.searchParams.delete(name);
     window.history.replaceState({}, "", cleanUrl.toString());
   } catch (error) {
     logger.warn("handleRedirectCallback: URL \u306E\u30AF\u30EA\u30FC\u30F3\u30A2\u30C3\u30D7\u306B\u5931\u6557\u3057\u307E\u3057\u305F:", error);
   }
 }
+function validateCallbackState(client, urlState) {
+  const { logger } = client;
+  const storedState = retrieveState(logger);
+  if (storedState === null && urlState === null) return null;
+  if (storedState !== null && storedState === urlState) return null;
+  if (storedState === null && !isStateStorageAvailable()) {
+    logger.error(
+      "handleRedirectCallback: OAuth state \u3092\u4FDD\u5B58\u3067\u304D\u308B storage \u304C\u5229\u7528\u3067\u304D\u306A\u3044\u305F\u3081 CSRF \u691C\u8A3C\u304C\u3067\u304D\u307E\u305B\u3093\uFF08iOS private mode \u7B49\uFF09"
+    );
+    return {
+      error: client.createError(
+        CALLBACK_ERROR_CODES.STATE_UNAVAILABLE,
+        "OAuth state \u3092\u4FDD\u5B58\u3067\u304D\u308B storage \u304C\u5229\u7528\u3067\u304D\u306A\u3044\u305F\u3081\u8A8D\u8A3C\u3092\u5B8C\u4E86\u3067\u304D\u307E\u305B\u3093\u3002\u30D6\u30E9\u30A6\u30B6\u306E\u30D7\u30E9\u30A4\u30D9\u30FC\u30C8\u30E2\u30FC\u30C9\u3084\u30B9\u30C8\u30EC\u30FC\u30B8\u8A2D\u5B9A\u3092\u3054\u78BA\u8A8D\u304F\u3060\u3055\u3044"
+      )
+    };
+  }
+  logger.error(
+    "handleRedirectCallback: OAuth state mismatch or omitted (possible CSRF) \u2014 \u8A8D\u8A3C\u3092\u4E2D\u6B62\u3057\u307E\u3057\u305F\u3002\u6D88\u8CBB\u6E08\u307F callback \u30D1\u30E9\u30E1\u30FC\u30BF\u306E\u518D\u51E6\u7406\uFF08`cleanUrl: false` \u5229\u7528\u6642\u306E cleanup \u6F0F\u308C\u3084 reload \u7B49\uFF09\u3067\u3082\u767A\u751F\u3057\u307E\u3059"
+  );
+  return {
+    error: client.createError(
+      CALLBACK_ERROR_CODES.STATE_MISMATCH,
+      "OAuth state \u304C\u4E00\u81F4\u3057\u307E\u305B\u3093\u3002CSRF \u306E\u53EF\u80FD\u6027\u304C\u3042\u308B\u305F\u3081\u8A8D\u8A3C\u3092\u4E2D\u6B62\u3057\u307E\u3057\u305F"
+    )
+  };
+}
 async function handleRedirectCallback(client, options) {
   const { logger } = client;
   const hasWindow = typeof window !== "undefined";
@@ -4399,6 +4730,24 @@ async function handleRedirectCallback(client, options) {
   const params = extractSearchParams(source);
   const code = params.get("code");
   const urlState = params.get("state");
+  const authorizationError = buildAuthorizationError(params);
+  if (authorizationError && urlState !== null) {
+    const stateError2 = validateCallbackState(client, urlState);
+    if (stateError2) return stateError2;
+    retrieveCodeVerifier(logger);
+    logger.warn("handleRedirectCallback: \u8A8D\u53EF\u30B5\u30FC\u30D0\u30FC\u304C\u30A8\u30E9\u30FC\u3092\u8FD4\u3057\u307E\u3057\u305F:", {
+      error: authorizationError.code,
+      denialReason: params.get("denial_reason")
+    });
+    if (hasWindow) {
+      if (options?.cleanUrl !== false) {
+        cleanCallbackUrlParams(logger, ERROR_CALLBACK_CONSUMED_PARAMS);
+      } else {
+        logger.debug("handleRedirectCallback: cleanUrl=false \u306E\u305F\u3081 URL cleanup \u3092 consumer \u306B\u59D4\u8B72\u3057\u307E\u3057\u305F");
+      }
+    }
+    return { error: authorizationError };
+  }
   if (!code) {
     logger.warn("handleRedirectCallback: \u8A8D\u53EF\u30B3\u30FC\u30C9\u304C\u898B\u3064\u304B\u308A\u307E\u305B\u3093");
     return {
@@ -4408,37 +4757,13 @@ async function handleRedirectCallback(client, options) {
       )
     };
   }
-  const storedState = retrieveState(logger);
-  if (storedState !== null || urlState !== null) {
-    const stateMatches = storedState !== null && storedState === urlState;
-    if (!stateMatches) {
-      if (storedState === null && !isStateStorageAvailable()) {
-        logger.error(
-          "handleRedirectCallback: OAuth state \u3092\u4FDD\u5B58\u3067\u304D\u308B storage \u304C\u5229\u7528\u3067\u304D\u306A\u3044\u305F\u3081 CSRF \u691C\u8A3C\u304C\u3067\u304D\u307E\u305B\u3093\uFF08iOS private mode \u7B49\uFF09"
-        );
-        return {
-          error: client.createError(
-            CALLBACK_ERROR_CODES.STATE_UNAVAILABLE,
-            "OAuth state \u3092\u4FDD\u5B58\u3067\u304D\u308B storage \u304C\u5229\u7528\u3067\u304D\u306A\u3044\u305F\u3081\u8A8D\u8A3C\u3092\u5B8C\u4E86\u3067\u304D\u307E\u305B\u3093\u3002\u30D6\u30E9\u30A6\u30B6\u306E\u30D7\u30E9\u30A4\u30D9\u30FC\u30C8\u30E2\u30FC\u30C9\u3084\u30B9\u30C8\u30EC\u30FC\u30B8\u8A2D\u5B9A\u3092\u3054\u78BA\u8A8D\u304F\u3060\u3055\u3044"
-          )
-        };
-      }
-      logger.error(
-        "handleRedirectCallback: OAuth state mismatch or omitted (possible CSRF) \u2014 \u8A8D\u8A3C\u3092\u4E2D\u6B62\u3057\u307E\u3057\u305F\u3002\u6D88\u8CBB\u6E08\u307F callback \u30D1\u30E9\u30E1\u30FC\u30BF\u306E\u518D\u51E6\u7406\uFF08`cleanUrl: false` \u5229\u7528\u6642\u306E cleanup \u6F0F\u308C\u3084 reload \u7B49\uFF09\u3067\u3082\u767A\u751F\u3057\u307E\u3059"
-      );
-      return {
-        error: client.createError(
-          CALLBACK_ERROR_CODES.STATE_MISMATCH,
-          "OAuth state \u304C\u4E00\u81F4\u3057\u307E\u305B\u3093\u3002CSRF \u306E\u53EF\u80FD\u6027\u304C\u3042\u308B\u305F\u3081\u8A8D\u8A3C\u3092\u4E2D\u6B62\u3057\u307E\u3057\u305F"
-        )
-      };
-    }
-  }
+  const stateError = validateCallbackState(client, urlState);
+  if (stateError) return stateError;
   const verifier = retrieveCodeVerifier(logger);
   const result = await client.exchangeCodeForTokens(code, verifier ?? void 0);
   if (!result.error && hasWindow) {
     if (options?.cleanUrl !== false) {
-      cleanCallbackUrlParams(logger);
+      cleanCallbackUrlParams(logger, CODE_CALLBACK_PARAMS);
     } else {
       logger.debug("handleRedirectCallback: cleanUrl=false \u306E\u305F\u3081 URL cleanup \u3092 consumer \u306B\u59D4\u8B72\u3057\u307E\u3057\u305F");
     }
@@ -4447,6 +4772,13 @@ async function handleRedirectCallback(client, options) {
 }
 var DEFAULT_REFRESH_INTERVAL_MS = 5 * 60 * 1e3;
 var TOKEN_REFRESH_RATIO = 0.8;
+function resolveCallbackKey(params) {
+  const code = params.get("code");
+  if (code) return code;
+  const error = params.get("error");
+  const state = params.get("state");
+  return error && state ? `error:${error}:${state}` : null;
+}
 var FFIDContext = createContext(null);
 var FFIDClientContext = createContext(null);
 function FFIDProvider({
@@ -4626,19 +4958,26 @@ function FFIDProvider({
     },
     [organizations, client]
   );
-  const handledCodeRef = useRef(null);
+  const handledCallbackRef = useRef(null);
+  const callbackPendingRef = useRef(false);
+  const authorizationDeniedRef = useRef(false);
   useEffect(() => {
     if (client.authMode !== "token") return;
     if (typeof window === "undefined") return;
-    const urlParams = new URLSearchParams(window.location.search);
-    const code = urlParams.get("code");
-    if (!code) return;
-    if (handledCodeRef.current === code) return;
-    handledCodeRef.current = code;
-    client.logger.debug("Authorization code detected, exchanging for tokens");
+    const callbackKey = resolveCallbackKey(new URLSearchParams(window.location.search));
+    if (!callbackKey) return;
+    if (handledCallbackRef.current === callbackKey) return;
+    handledCallbackRef.current = callbackKey;
+    callbackPendingRef.current = true;
+    client.logger.debug("OAuth callback detected, handling it");
     handleRedirectCallback(client, { cleanUrl: cleanCallbackUrl }).then((result) => {
       if (result.error) {
-        client.logger.error("Token exchange failed:", result.error);
+        if (getFFIDAuthorizationError(result.error)) {
+          client.logger.warn("FFID \u304C\u30ED\u30B0\u30A4\u30F3\u3092\u62D2\u5426\u3057\u307E\u3057\u305F:", result.error);
+          authorizationDeniedRef.current = true;
+        } else {
+          client.logger.error("Token exchange failed:", result.error);
+        }
         if (result.error.code === FFID_ERROR_CODES.STATE_MISMATCH_ERROR && client.tokenStore.getTokens()) {
           client.logger.debug(
             "Stale callback rejected but stored tokens present, restoring session via refresh"
@@ -4656,13 +4995,15 @@ function FFIDProvider({
     }).catch((err) => {
       client.logger.error("Token exchange error:", err);
       setIsLoading(false);
+    }).finally(() => {
+      callbackPendingRef.current = false;
     });
   }, [client]);
   useEffect(() => {
     if (client.authMode === "token") {
+      if (callbackPendingRef.current || authorizationDeniedRef.current) return;
       if (typeof window !== "undefined") {
-        const urlParams = new URLSearchParams(window.location.search);
-        if (urlParams.has("code")) {
+        if (resolveCallbackKey(new URLSearchParams(window.location.search))) {
           return;
         }
       }
@@ -6477,4 +6818,4 @@ function FFIDInquiryForm({
   );
 }
 
-export { ACCESS_GRANTING_EFFECTIVE_STATUSES, AGENCY_INVITE_COOKIE_MAX_AGE_SEC, AGENCY_INVITE_COOKIE_NAME, AGENCY_INVITE_TOKEN_PARAM, AGENCY_INVITE_TOKEN_REDACTION, BLOCKING_EFFECTIVE_STATUSES, CATALOG_HASH_PATTERN, DEFAULT_API_BASE_URL, DEFAULT_OAUTH_SCOPES, EFFECTIVE_SUBSCRIPTION_STATUSES, FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDCatalogHashError, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDProvider, FFIDSDKError, FFIDSubscriptionBadge, FFIDUserMenu, FFID_ALLOWED_ORGANIZATION_LOGO_MIME_TYPES, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_CATALOG_ENVIRONMENTS, FFID_CATALOG_PUBLICATION_STATUSES, FFID_COMPANY_SIZE_CODES, FFID_ERROR_CODES, FFID_INDUSTRY_CODES, FFID_INQUIRY_ACQUISITION_SOURCES, FFID_INQUIRY_CATEGORIES, FFID_INQUIRY_CATEGORIES_SITE_2026, FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_BYTES, FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_MB, FFID_ORGANIZATION_PROFILE_ERROR_CODES, FFID_SUBSCRIPTION_ERROR_CODES, canonicalizeCatalogValue, captureAgencyInviteToken, cleanupStateStorage, clearAgencyInviteToken, computeEffectiveStatusFromSession, computeFFIDCheckoutCopyHash, computeLegalDisclosureHash, computePaymentConfigurationHash, computePraxisCopyHash, computeScopeHash, computeTaxConfigurationHash, createFFIDAnnouncementsClient, createFFIDClient, createTokenStore, generateCodeChallenge, generateCodeVerifier, handleRedirectCallback, hasAccessFromUserinfo, hashCanonicalJson, isBlockedFromUserinfo, isFFIDInquiryAcquisitionSource, isFFIDInquiryCategorySite2026, normalizeRedirectUri, readAgencyInviteCookie, readAgencyInviteToken, redactAgencyInviteToken, retrieveCodeVerifier, retrieveState, sha256Hex, storeCodeVerifier, storeState, useFFID, useFFIDAnnouncements, useFFIDContext, useSubscription, validatePublishedCatalog, withSubscription };
+export { ACCESS_GRANTING_EFFECTIVE_STATUSES, AGENCY_INVITE_COOKIE_MAX_AGE_SEC, AGENCY_INVITE_COOKIE_NAME, AGENCY_INVITE_TOKEN_PARAM, AGENCY_INVITE_TOKEN_REDACTION, BLOCKING_EFFECTIVE_STATUSES, CATALOG_HASH_PATTERN, DEFAULT_API_BASE_URL, DEFAULT_OAUTH_SCOPES, EFFECTIVE_SUBSCRIPTION_STATUSES, FFIDAnnouncementBadge, FFIDAnnouncementList, FFIDCatalogHashError, FFIDInquiryForm, FFIDLoginButton, FFIDOrganizationSwitcher, FFIDProvider, FFIDSDKError, FFIDSubscriptionBadge, FFIDUserMenu, FFID_ALLOWED_ORGANIZATION_LOGO_MIME_TYPES, FFID_ANNOUNCEMENTS_ERROR_CODES, FFID_CATALOG_ENVIRONMENTS, FFID_CATALOG_PUBLICATION_STATUSES, FFID_COMPANY_SIZE_CODES, FFID_CREDITS_CONSUME_MAX_AMOUNT, FFID_CREDITS_CONSUME_MIN_AMOUNT, FFID_CREDITS_ERROR_CODES, FFID_CREDITS_FEATURE_PATTERN, FFID_CREDITS_HISTORY_DEFAULT_LIMIT, FFID_CREDITS_HISTORY_MAX_LIMIT, FFID_CREDITS_HISTORY_MIN_LIMIT, FFID_CREDITS_IDEMPOTENCY_KEY_PATTERN, FFID_CREDITS_LOW_THRESHOLD_PERCENT, FFID_CREDITS_METADATA_MAX_BYTES, FFID_CREDIT_GRANT_KINDS, FFID_CREDIT_HISTORY_TYPES, FFID_CREDIT_PACK_MAX_QUANTITY, FFID_CREDIT_PACK_MIN_QUANTITY, FFID_ERROR_CODES, FFID_INDUSTRY_CODES, FFID_INQUIRY_ACQUISITION_SOURCES, FFID_INQUIRY_CATEGORIES, FFID_INQUIRY_CATEGORIES_SITE_2026, FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_BYTES, FFID_MAX_ORGANIZATION_LOGO_FILE_SIZE_MB, FFID_OAUTH_DENIAL_REASONS, FFID_ORGANIZATION_PROFILE_ERROR_CODES, FFID_SUBSCRIPTION_ERROR_CODES, canonicalizeCatalogValue, captureAgencyInviteToken, cleanupStateStorage, clearAgencyInviteToken, computeEffectiveStatusFromSession, computeFFIDCheckoutCopyHash, computeLegalDisclosureHash, computePaymentConfigurationHash, computePraxisCopyHash, computeScopeHash, computeTaxConfigurationHash, createFFIDAnnouncementsClient, createFFIDClient, createTokenStore, generateCodeChallenge, generateCodeVerifier, getFFIDAuthorizationError, handleRedirectCallback, hasAccessFromUserinfo, hashCanonicalJson, isBlockedFromUserinfo, isFFIDInquiryAcquisitionSource, isFFIDInquiryCategorySite2026, isFFIDOAuthDenialReason, normalizeRedirectUri, readAgencyInviteCookie, readAgencyInviteToken, redactAgencyInviteToken, retrieveCodeVerifier, retrieveState, sha256Hex, storeCodeVerifier, storeState, useFFID, useFFIDAnnouncements, useFFIDContext, useSubscription, validatePublishedCatalog, withSubscription };