@kerne/react 0.1.2 → 1.0.0

package/dist/{i18n-Qketn1RF.d.ts → i18n-Di5qlnL1.d.ts}

@@ -16,6 +16,22 @@ interface KerneLocalization {
         continueWith: string;
         securedByKerne: string;
         loading: string;
+        showPassword: string;
+        hidePassword: string;
+        capsLockOn: string;
+        /**
+         * The tenant's password rules, stated before the server can reject them.
+         * Only the rules that tenant actually enforces are rendered.
+         */
+        passwordHint: string;
+        passwordRequireUppercase: string;
+        passwordRequireNumber: string;
+        passwordRequireSymbol: string;
+        strengthLabel: string;
+        strengthWeak: string;
+        strengthFair: string;
+        strengthGood: string;
+        strengthStrong: string;
     };
     signIn: {
         title: string;
@@ -170,6 +186,12 @@ interface KerneLocalization {
         freePlan: string;
         seePlans: string;
         cancelNotice: string;
+        cancelSubscription: string;
+        canceling: string;
+        cancelConfirmTitle: string;
+        cancelConfirmBody: string;
+        cancelConfirmButton: string;
+        cancelConfirmDismiss: string;
         changePlan: string;
         current: string;
         switchTo: string;
@@ -195,8 +217,30 @@ interface KerneLocalization {
         subtitle: string;
         used: string;
         nothingMetered: string;
+        /** Overage ALLOW: past the included amount, tolerated and free. */
         overage: string;
+        /** Overage BILL: past the included amount, charged on top of the plan. */
+        overageBilled: string;
+        /** Overage BLOCK only - ALLOW and BILL never "reach" a limit, they keep going. */
         limitReached: string;
+        /** Overage BILL whose billing cap was hit: charging stopped, access didn't - the opposite of limitReached, not a variant of overageBilled. */
+        capReached: string;
+        /** Shown under a BILL entitlement once something has actually been billed this period. */
+        billedAmount: string;
+        loading: string;
+        loadFailed: string;
+    };
+    /** `<PricingTable>` - the marketing surface. Distinct from `billing.*`, the settings-page plan switcher. */
+    pricing: {
+        getStarted: string;
+        /** "{amount} / {interval}" - the caption under a price shown at a different cadence than it's billed. */
+        billedAt: string;
+        /** "Save {percent}%" - the label-switch hint. */
+        save: string;
+        /** Prefixes a QUOTA entitlement with no ceiling, e.g. "Unlimited projects". */
+        unlimited: string;
+        /** "+{count} more" - shown when `maxFeatures` truncates a plan's entitlement list. */
+        moreFeatures: string;
         loading: string;
         loadFailed: string;
     };

package/dist/index.cjs

@@ -17,25 +17,27 @@
 
 
 
-var _chunk3PROPZWWcjs = require('./chunk-3PROPZWW.cjs');
+
+
+var _chunkIMZFZ3P5cjs = require('./chunk-IMZFZ3P5.cjs');
 
 // src/components.tsx
 var _react = require('react'); var _react2 = _interopRequireDefault(_react);
 var _jsxruntime = require('react/jsx-runtime');
 function Authenticated({ children, fallback = null }) {
-  const { isAuthenticated } = _chunk3PROPZWWcjs.useAuth.call(void 0, );
+  const { isAuthenticated } = _chunkIMZFZ3P5cjs.useAuth.call(void 0, );
   return isAuthenticated ? children : fallback;
 }
 function Unauthenticated({ children, fallback = null }) {
-  const { isAuthenticated } = _chunk3PROPZWWcjs.useAuth.call(void 0, );
+  const { isAuthenticated } = _chunkIMZFZ3P5cjs.useAuth.call(void 0, );
   return !isAuthenticated ? children : fallback;
 }
 function AuthLoading({ children }) {
-  const client = _chunk3PROPZWWcjs.useClient.call(void 0, );
+  const client = _chunkIMZFZ3P5cjs.useClient.call(void 0, );
   return client.isLoading ? children : null;
 }
 function HasSubscription({ children, fallback = null }) {
-  const client = _chunk3PROPZWWcjs.useClient.call(void 0, );
+  const client = _chunkIMZFZ3P5cjs.useClient.call(void 0, );
   const [hasSubscription, setHasSubscription] = _react2.default.useState(null);
   _react2.default.useEffect(() => {
     client.getSubscription().then((sub) => {
@@ -47,22 +49,14 @@ function HasSubscription({ children, fallback = null }) {
   if (hasSubscription === null) return null;
   return hasSubscription ? children : fallback;
 }
-function Allows({
+function Access({
   children,
   featureKey,
-  minimum,
+  requested,
   fallback = null
 }) {
-  const client = _chunk3PROPZWWcjs.useClient.call(void 0, );
-  const [allowed, setAllowed] = _react2.default.useState(null);
-  _react2.default.useEffect(() => {
-    client.allows(featureKey, minimum).then((result) => {
-      setAllowed(result);
-    }).catch(() => {
-      setAllowed(false);
-    });
-  }, [client, featureKey, minimum]);
-  if (allowed === null) return null;
+  const { allowed, isLoading } = _chunkIMZFZ3P5cjs.useAccess.call(void 0, featureKey, requested);
+  if (isLoading) return null;
   return allowed ? children : fallback;
 }
 function Protected({
@@ -72,12 +66,12 @@ function Protected({
   authFallback = null,
   billingFallback = null
 }) {
-  const { isAuthenticated } = _chunk3PROPZWWcjs.useAuth.call(void 0, );
+  const { isAuthenticated } = _chunkIMZFZ3P5cjs.useAuth.call(void 0, );
   if (auth && !isAuthenticated) {
     return authFallback;
   }
   if (featureKey) {
-    return /* @__PURE__ */ _jsxruntime.jsx.call(void 0, Allows, { featureKey, fallback: billingFallback, children });
+    return /* @__PURE__ */ _jsxruntime.jsx.call(void 0, Access, { featureKey, fallback: billingFallback, children });
   }
   return children;
 }
@@ -183,4 +177,6 @@ function useKerneError() {
 
 
 
-exports.Allows = Allows; exports.AuthLoading = AuthLoading; exports.Authenticated = Authenticated; exports.HasSubscription = HasSubscription; exports.KerneClient = _chunk3PROPZWWcjs.KerneClient; exports.KerneContext = _chunk3PROPZWWcjs.KerneContext; exports.KerneErrorBoundary = KerneErrorBoundary; exports.KerneProvider = _chunk3PROPZWWcjs.KerneProvider; exports.Protected = Protected; exports.Unauthenticated = Unauthenticated; exports.defaultLocalization = _chunk3PROPZWWcjs.defaultLocalization; exports.useAccess = _chunk3PROPZWWcjs.useAccess; exports.useAuth = _chunk3PROPZWWcjs.useAuth; exports.useAuthConfig = _chunk3PROPZWWcjs.useAuthConfig; exports.useCheckout = _chunk3PROPZWWcjs.useCheckout; exports.useClient = _chunk3PROPZWWcjs.useClient; exports.useEntitlements = _chunk3PROPZWWcjs.useEntitlements; exports.useInvitation = _chunk3PROPZWWcjs.useInvitation; exports.useKerneError = useKerneError; exports.usePlans = _chunk3PROPZWWcjs.usePlans; exports.usePortal = _chunk3PROPZWWcjs.usePortal; exports.useSubscription = _chunk3PROPZWWcjs.useSubscription; exports.useUsage = _chunk3PROPZWWcjs.useUsage; exports.useUser = _chunk3PROPZWWcjs.useUser; exports.useWaitlist = _chunk3PROPZWWcjs.useWaitlist;
+
+
+exports.Access = Access; exports.AuthLoading = AuthLoading; exports.Authenticated = Authenticated; exports.HasSubscription = HasSubscription; exports.KerneClient = _chunkIMZFZ3P5cjs.KerneClient; exports.KerneContext = _chunkIMZFZ3P5cjs.KerneContext; exports.KerneErrorBoundary = KerneErrorBoundary; exports.KerneProvider = _chunkIMZFZ3P5cjs.KerneProvider; exports.Protected = Protected; exports.Unauthenticated = Unauthenticated; exports.defaultLocalization = _chunkIMZFZ3P5cjs.defaultLocalization; exports.useAccess = _chunkIMZFZ3P5cjs.useAccess; exports.useAuth = _chunkIMZFZ3P5cjs.useAuth; exports.useAuthConfig = _chunkIMZFZ3P5cjs.useAuthConfig; exports.useCancelSubscription = _chunkIMZFZ3P5cjs.useCancelSubscription; exports.useChangePlan = _chunkIMZFZ3P5cjs.useChangePlan; exports.useCheckout = _chunkIMZFZ3P5cjs.useCheckout; exports.useClient = _chunkIMZFZ3P5cjs.useClient; exports.useEntitlements = _chunkIMZFZ3P5cjs.useEntitlements; exports.useInvitation = _chunkIMZFZ3P5cjs.useInvitation; exports.useKerneError = useKerneError; exports.usePlans = _chunkIMZFZ3P5cjs.usePlans; exports.usePortal = _chunkIMZFZ3P5cjs.usePortal; exports.useSubscription = _chunkIMZFZ3P5cjs.useSubscription; exports.useUsage = _chunkIMZFZ3P5cjs.useUsage; exports.useUser = _chunkIMZFZ3P5cjs.useUser; exports.useWaitlist = _chunkIMZFZ3P5cjs.useWaitlist;

package/dist/index.d.cts

@@ -3,15 +3,25 @@ import React, { ReactNode, Component, ErrorInfo } from 'react';
 import { KerneConfig, JoinWaitlistParams, ValidateTokenResponse, ValidateCodeResponse } from '@kerne/server';
 export { JoinWaitlistParams, ValidateCodeResponse, ValidateTokenResponse, WaitlistEntry } from '@kerne/server';
 import * as _kerne_types from '@kerne/types';
-import { User, AuthResponse, ActivationContext, AuthConfig, EntitlementCheck, SubscriptionWithPlan, PublicPlan, Entitlements, UsageRecord } from '@kerne/types';
+import { User, AuthResponse, ActivationContext, AuthConfig, EntitlementCheck, SubscriptionWithPlan, Subscription, PublicPlan, Entitlements, UsageRecord } from '@kerne/types';
 export { ActivationContext, AuthConfig, AuthResponse, EntitlementCheck, Entitlements, PublicPlan, Subscription, SubscriptionWithPlan, UsageRecord, User } from '@kerne/types';
-import { D as DeepPartial, K as KerneLocalization } from './i18n-Qketn1RF.cjs';
-export { d as defaultLocalization } from './i18n-Qketn1RF.cjs';
+import { D as DeepPartial, K as KerneLocalization } from './i18n-Di5qlnL1.cjs';
+export { d as defaultLocalization } from './i18n-Di5qlnL1.cjs';
 
 interface KerneReactConfig extends Omit<KerneConfig, 'secretKey'> {
     storage?: Storage;
     storageKey?: string;
     onAuthChange?: (user: User | null) => void;
+    /**
+     * A cross-origin handoff arrived but could not be exchanged for a session -
+     * an expired one-time code, or an origin this tenant does not allow.
+     *
+     * Worth handling: the SDK cannot render UI, so without this the user
+     * completes a magic link, lands on your app, and is simply not signed in
+     * with nothing on screen explaining why. Typically a toast plus a link back
+     * to sign in.
+     */
+    onHandoffError?: (error: unknown) => void;
     /** Auto-refresh session before expiry (default: true) */
     autoRefresh?: boolean;
     /** Refresh buffer in seconds before expiry (default: 60) */
@@ -24,6 +34,7 @@ declare class KerneClient {
     private storage;
     private storageKey;
     private onAuthChange?;
+    private onHandoffError?;
     private autoRefresh;
     private refreshBuffer;
     private refreshTimer;
@@ -149,7 +160,7 @@ declare class KerneClient {
      * caught everything and returned `false`) - a 401/500 must not be
      * indistinguishable from a real denial, that's exactly what let the
      * `has_access`/`allowed` mismatch below ship unnoticed. Callers that want
-     * a fail-closed boolean regardless of the reason (e.g. `<Allows>`)
+     * a fail-closed boolean regardless of the reason (e.g. `<Access>`)
      * catch around this themselves.
      */
     allows(featureKey: string, requested?: number): Promise<boolean>;
@@ -166,6 +177,12 @@ declare class KerneClient {
     createPortal(returnUrl?: string): Promise<string>;
     openPortal(returnUrl?: string): Promise<void>;
     getSubscription(productSlug?: string): Promise<SubscriptionWithPlan | null>;
+    /** `immediately: true` ends it now; otherwise cancels at period end (API default). */
+    cancelSubscription(subscriptionId: string, immediately?: boolean): Promise<Subscription>;
+    /** Swaps the plan/price, effective immediately - deferring a downgrade isn't supported yet. */
+    changeSubscriptionPlan(subscriptionId: string, planPriceId: string, options?: {
+        prorationBehavior?: 'none' | 'create_prorations';
+    }): Promise<SubscriptionWithPlan>;
     /** Public pricing data - omit `productIdOrSlug` for the tenant's default product. */
     getPlans(productIdOrSlug?: string): Promise<PublicPlan[]>;
     /** Every entitlement for the current user in one call - for a "your plan" screen. */
@@ -306,6 +323,27 @@ declare function usePortal(): {
     createPortal: (returnUrl?: string) => Promise<string>;
     openPortal: (returnUrl?: string) => Promise<void>;
 };
+/**
+ * Cancels or changes the current scope's own subscription - JWT-scoped like every other hook
+ * here, so this can only ever act on the caller's own subscription (see `SubscriptionCard`).
+ *
+ * @example
+ * ```tsx
+ * const { cancelSubscription, isCanceling } = useCancelSubscription();
+ * <button onClick={() => cancelSubscription(subscriptionId)}>Cancel</button>
+ * ```
+ */
+declare function useCancelSubscription(): {
+    cancelSubscription: (subscriptionId: string, immediately?: boolean) => Promise<_kerne_types.Subscription>;
+    isCanceling: boolean;
+};
+/** Changes the current scope's own subscription to a different plan/price, effective immediately. */
+declare function useChangePlan(): {
+    changePlan: (subscriptionId: string, planPriceId: string, options?: {
+        prorationBehavior?: "none" | "create_prorations";
+    }) => Promise<SubscriptionWithPlan>;
+    isChanging: boolean;
+};
 /**
  * Whether the current scope has access to one feature - the single entry
  * point for a live, per-feature decision. Deliberately not named after what
@@ -348,6 +386,7 @@ declare function useAccess(featureKey: string, requested?: number): {
 declare function useSubscription(productSlug?: string): {
     isActive: boolean;
     planSlug: string | undefined;
+    refetch: () => void;
     subscription: SubscriptionWithPlan | null;
     isLoading: boolean;
     error: Error | null;
@@ -541,24 +580,35 @@ interface EntitlementGuardProps {
      * `UpgradePrompt`, so the whole entitlement surface reads alike.
      */
     featureKey: string;
-    /** Minimum value required (for limit features) */
-    minimum?: number;
+    /**
+     * Units the gated action is about to consume - checked before it runs, not
+     * after. A QUOTA feature with 3 remaining still passes a plain `<Access>`
+     * (>0 left), but fails `requested={5}` up front, so a batch action can be
+     * blocked before the user commits to it instead of after a partial
+     * `consume()` fails mid-way. Omit for a plain yes/no gate.
+     */
+    requested?: number;
     /** Fallback content when entitlement is not met */
     fallback?: ReactNode;
 }
 /**
- * Renders children only when the scope is entitled to a capability. Checks the
- * entitlement itself, never a plan name - a plan can be renamed or restructured
- * without breaking every place that gated on its slug.
+ * Renders children only when the subject is entitled to a capability - and,
+ * with `requested`, entitled to that many units of it right now. Checks the
+ * entitlement itself, never a plan name - a plan can be renamed or
+ * restructured without breaking every place that gated on its slug.
  *
  * @example
  * ```tsx
- * <Allows featureKey="advanced_analytics" fallback={<UpgradePrompt featureKey="advanced_analytics" />}>
+ * <Access featureKey="advanced_analytics" fallback={<UpgradePrompt featureKey="advanced_analytics" />}>
  *   <AnalyticsDashboard />
- * </Allows>
+ * </Access>
+ *
+ * <Access featureKey="ai_credits" requested={5} fallback={<UpgradePrompt reason="Not enough credits for batch processing" />}>
+ *   <BatchProcessButton count={5} />
+ * </Access>
  * ```
  */
-declare function Allows({ children, featureKey, minimum, fallback, }: EntitlementGuardProps): ReactNode;
+declare function Access({ children, featureKey, requested, fallback, }: EntitlementGuardProps): ReactNode;
 interface ProtectedProps {
     children: ReactNode;
     /** Require authentication */
@@ -641,4 +691,4 @@ declare function useKerneError(): {
     clearError: () => void;
 };
 
-export { Allows, AuthLoading, Authenticated, HasSubscription, KerneClient, KerneContext, type KerneError, KerneErrorBoundary, KerneLocalization, KerneProvider, type KerneProviderProps, type KerneReactConfig, Protected, Unauthenticated, useAccess, useAuth, useAuthConfig, useCheckout, useClient, useEntitlements, useInvitation, useKerneError, usePlans, usePortal, useSubscription, useUsage, useUser, useWaitlist };
+export { Access, AuthLoading, Authenticated, HasSubscription, KerneClient, KerneContext, type KerneError, KerneErrorBoundary, KerneLocalization, KerneProvider, type KerneProviderProps, type KerneReactConfig, Protected, Unauthenticated, useAccess, useAuth, useAuthConfig, useCancelSubscription, useChangePlan, useCheckout, useClient, useEntitlements, useInvitation, useKerneError, usePlans, usePortal, useSubscription, useUsage, useUser, useWaitlist };

package/dist/index.d.ts

@@ -3,15 +3,25 @@ import React, { ReactNode, Component, ErrorInfo } from 'react';
 import { KerneConfig, JoinWaitlistParams, ValidateTokenResponse, ValidateCodeResponse } from '@kerne/server';
 export { JoinWaitlistParams, ValidateCodeResponse, ValidateTokenResponse, WaitlistEntry } from '@kerne/server';
 import * as _kerne_types from '@kerne/types';
-import { User, AuthResponse, ActivationContext, AuthConfig, EntitlementCheck, SubscriptionWithPlan, PublicPlan, Entitlements, UsageRecord } from '@kerne/types';
+import { User, AuthResponse, ActivationContext, AuthConfig, EntitlementCheck, SubscriptionWithPlan, Subscription, PublicPlan, Entitlements, UsageRecord } from '@kerne/types';
 export { ActivationContext, AuthConfig, AuthResponse, EntitlementCheck, Entitlements, PublicPlan, Subscription, SubscriptionWithPlan, UsageRecord, User } from '@kerne/types';
-import { D as DeepPartial, K as KerneLocalization } from './i18n-Qketn1RF.js';
-export { d as defaultLocalization } from './i18n-Qketn1RF.js';
+import { D as DeepPartial, K as KerneLocalization } from './i18n-Di5qlnL1.js';
+export { d as defaultLocalization } from './i18n-Di5qlnL1.js';
 
 interface KerneReactConfig extends Omit<KerneConfig, 'secretKey'> {
     storage?: Storage;
     storageKey?: string;
     onAuthChange?: (user: User | null) => void;
+    /**
+     * A cross-origin handoff arrived but could not be exchanged for a session -
+     * an expired one-time code, or an origin this tenant does not allow.
+     *
+     * Worth handling: the SDK cannot render UI, so without this the user
+     * completes a magic link, lands on your app, and is simply not signed in
+     * with nothing on screen explaining why. Typically a toast plus a link back
+     * to sign in.
+     */
+    onHandoffError?: (error: unknown) => void;
     /** Auto-refresh session before expiry (default: true) */
     autoRefresh?: boolean;
     /** Refresh buffer in seconds before expiry (default: 60) */
@@ -24,6 +34,7 @@ declare class KerneClient {
     private storage;
     private storageKey;
     private onAuthChange?;
+    private onHandoffError?;
     private autoRefresh;
     private refreshBuffer;
     private refreshTimer;
@@ -149,7 +160,7 @@ declare class KerneClient {
      * caught everything and returned `false`) - a 401/500 must not be
      * indistinguishable from a real denial, that's exactly what let the
      * `has_access`/`allowed` mismatch below ship unnoticed. Callers that want
-     * a fail-closed boolean regardless of the reason (e.g. `<Allows>`)
+     * a fail-closed boolean regardless of the reason (e.g. `<Access>`)
      * catch around this themselves.
      */
     allows(featureKey: string, requested?: number): Promise<boolean>;
@@ -166,6 +177,12 @@ declare class KerneClient {
     createPortal(returnUrl?: string): Promise<string>;
     openPortal(returnUrl?: string): Promise<void>;
     getSubscription(productSlug?: string): Promise<SubscriptionWithPlan | null>;
+    /** `immediately: true` ends it now; otherwise cancels at period end (API default). */
+    cancelSubscription(subscriptionId: string, immediately?: boolean): Promise<Subscription>;
+    /** Swaps the plan/price, effective immediately - deferring a downgrade isn't supported yet. */
+    changeSubscriptionPlan(subscriptionId: string, planPriceId: string, options?: {
+        prorationBehavior?: 'none' | 'create_prorations';
+    }): Promise<SubscriptionWithPlan>;
     /** Public pricing data - omit `productIdOrSlug` for the tenant's default product. */
     getPlans(productIdOrSlug?: string): Promise<PublicPlan[]>;
     /** Every entitlement for the current user in one call - for a "your plan" screen. */
@@ -306,6 +323,27 @@ declare function usePortal(): {
     createPortal: (returnUrl?: string) => Promise<string>;
     openPortal: (returnUrl?: string) => Promise<void>;
 };
+/**
+ * Cancels or changes the current scope's own subscription - JWT-scoped like every other hook
+ * here, so this can only ever act on the caller's own subscription (see `SubscriptionCard`).
+ *
+ * @example
+ * ```tsx
+ * const { cancelSubscription, isCanceling } = useCancelSubscription();
+ * <button onClick={() => cancelSubscription(subscriptionId)}>Cancel</button>
+ * ```
+ */
+declare function useCancelSubscription(): {
+    cancelSubscription: (subscriptionId: string, immediately?: boolean) => Promise<_kerne_types.Subscription>;
+    isCanceling: boolean;
+};
+/** Changes the current scope's own subscription to a different plan/price, effective immediately. */
+declare function useChangePlan(): {
+    changePlan: (subscriptionId: string, planPriceId: string, options?: {
+        prorationBehavior?: "none" | "create_prorations";
+    }) => Promise<SubscriptionWithPlan>;
+    isChanging: boolean;
+};
 /**
  * Whether the current scope has access to one feature - the single entry
  * point for a live, per-feature decision. Deliberately not named after what
@@ -348,6 +386,7 @@ declare function useAccess(featureKey: string, requested?: number): {
 declare function useSubscription(productSlug?: string): {
     isActive: boolean;
     planSlug: string | undefined;
+    refetch: () => void;
     subscription: SubscriptionWithPlan | null;
     isLoading: boolean;
     error: Error | null;
@@ -541,24 +580,35 @@ interface EntitlementGuardProps {
      * `UpgradePrompt`, so the whole entitlement surface reads alike.
      */
     featureKey: string;
-    /** Minimum value required (for limit features) */
-    minimum?: number;
+    /**
+     * Units the gated action is about to consume - checked before it runs, not
+     * after. A QUOTA feature with 3 remaining still passes a plain `<Access>`
+     * (>0 left), but fails `requested={5}` up front, so a batch action can be
+     * blocked before the user commits to it instead of after a partial
+     * `consume()` fails mid-way. Omit for a plain yes/no gate.
+     */
+    requested?: number;
     /** Fallback content when entitlement is not met */
     fallback?: ReactNode;
 }
 /**
- * Renders children only when the scope is entitled to a capability. Checks the
- * entitlement itself, never a plan name - a plan can be renamed or restructured
- * without breaking every place that gated on its slug.
+ * Renders children only when the subject is entitled to a capability - and,
+ * with `requested`, entitled to that many units of it right now. Checks the
+ * entitlement itself, never a plan name - a plan can be renamed or
+ * restructured without breaking every place that gated on its slug.
  *
  * @example
  * ```tsx
- * <Allows featureKey="advanced_analytics" fallback={<UpgradePrompt featureKey="advanced_analytics" />}>
+ * <Access featureKey="advanced_analytics" fallback={<UpgradePrompt featureKey="advanced_analytics" />}>
  *   <AnalyticsDashboard />
- * </Allows>
+ * </Access>
+ *
+ * <Access featureKey="ai_credits" requested={5} fallback={<UpgradePrompt reason="Not enough credits for batch processing" />}>
+ *   <BatchProcessButton count={5} />
+ * </Access>
  * ```
  */
-declare function Allows({ children, featureKey, minimum, fallback, }: EntitlementGuardProps): ReactNode;
+declare function Access({ children, featureKey, requested, fallback, }: EntitlementGuardProps): ReactNode;
 interface ProtectedProps {
     children: ReactNode;
     /** Require authentication */
@@ -641,4 +691,4 @@ declare function useKerneError(): {
     clearError: () => void;
 };
 
-export { Allows, AuthLoading, Authenticated, HasSubscription, KerneClient, KerneContext, type KerneError, KerneErrorBoundary, KerneLocalization, KerneProvider, type KerneProviderProps, type KerneReactConfig, Protected, Unauthenticated, useAccess, useAuth, useAuthConfig, useCheckout, useClient, useEntitlements, useInvitation, useKerneError, usePlans, usePortal, useSubscription, useUsage, useUser, useWaitlist };
+export { Access, AuthLoading, Authenticated, HasSubscription, KerneClient, KerneContext, type KerneError, KerneErrorBoundary, KerneLocalization, KerneProvider, type KerneProviderProps, type KerneReactConfig, Protected, Unauthenticated, useAccess, useAuth, useAuthConfig, useCancelSubscription, useChangePlan, useCheckout, useClient, useEntitlements, useInvitation, useKerneError, usePlans, usePortal, useSubscription, useUsage, useUser, useWaitlist };

package/dist/index.js

@@ -7,6 +7,8 @@ import {
   useAccess,
   useAuth,
   useAuthConfig,
+  useCancelSubscription,
+  useChangePlan,
   useCheckout,
   useClient,
   useEntitlements,
@@ -17,7 +19,7 @@ import {
   useUsage,
   useUser,
   useWaitlist
-} from "./chunk-AIUIBAYB.js";
+} from "./chunk-NFJ2S5VJ.js";
 
 // src/components.tsx
 import React from "react";
@@ -47,22 +49,14 @@ function HasSubscription({ children, fallback = null }) {
   if (hasSubscription === null) return null;
   return hasSubscription ? children : fallback;
 }
-function Allows({
+function Access({
   children,
   featureKey,
-  minimum,
+  requested,
   fallback = null
 }) {
-  const client = useClient();
-  const [allowed, setAllowed] = React.useState(null);
-  React.useEffect(() => {
-    client.allows(featureKey, minimum).then((result) => {
-      setAllowed(result);
-    }).catch(() => {
-      setAllowed(false);
-    });
-  }, [client, featureKey, minimum]);
-  if (allowed === null) return null;
+  const { allowed, isLoading } = useAccess(featureKey, requested);
+  if (isLoading) return null;
   return allowed ? children : fallback;
 }
 function Protected({
@@ -77,7 +71,7 @@ function Protected({
     return authFallback;
   }
   if (featureKey) {
-    return /* @__PURE__ */ jsx(Allows, { featureKey, fallback: billingFallback, children });
+    return /* @__PURE__ */ jsx(Access, { featureKey, fallback: billingFallback, children });
   }
   return children;
 }
@@ -158,7 +152,7 @@ function useKerneError() {
   };
 }
 export {
-  Allows,
+  Access,
   AuthLoading,
   Authenticated,
   HasSubscription,
@@ -172,6 +166,8 @@ export {
   useAccess,
   useAuth,
   useAuthConfig,
+  useCancelSubscription,
+  useChangePlan,
   useCheckout,
   useClient,
   useEntitlements,