@everfur/sdk 0.1.1 → 0.4.0

package/dist/core/index.d.cts

@@ -1,37 +1,41 @@
 export { K as KvPort } from '../cacheEpoch-DknKn3S0.cjs';
-export { C as CapabilityKind, a as CapabilityRegistry, b as CapabilityServices, c as ChatControllerRegistry, d as ChatScope, e as CreateEverfurRuntimeInput, f as CreateRuntimeOptions, E as EntitlementPoller, g as EntitlementPollerDeps, h as EntitlementSnapshot, i as EntitlementStore, j as EverfurRuntime, k as EverfurRuntimeConfig, L as LogLevel, l as LogRecord, m as LogSink, M as MIN_POLL_INTERVAL_SECONDS, N as NULL_SECURE_STORE, P as PollScheduler, R as RuntimeTheme, n as RuntimeUser, S as SecureStorePort, T as TimerHandle, o as createEntitlementPoller, p as createEverfurRuntime } from '../runtime-Bvr8yqXm.cjs';
-export { T as TelemetryPort, n as noopTelemetry } from '../TelemetryPort-BDNr00hu.cjs';
-import { S as SuggestedPromptCategory, C as ChatController } from '../ChatController-CpUMvvZf.cjs';
-export { a as ChatControllerDeps, b as ChatHandlers, c as ChatMessage, d as ChatSnapshot, e as ChatStatus, f as Citation, E as ErrorPolicyPort, M as MESSAGE_MAX_CHARS, g as SendOptions, T as Timers, h as createChatController, i as defaultErrorPolicy } from '../ChatController-CpUMvvZf.cjs';
+import { C as CreateEverfurRuntimeInput, e as EverfurRuntime } from '../runtimeTypes-gZEJu-da.cjs';
+export { B as BeforeLogoutContext, f as BeforeLogoutHook, g as CapabilityKind, h as CapabilityRegistry, i as CapabilityServices, j as ChatControllerRegistry, k as ChatScope, E as EntitlementSnapshot, l as EntitlementStore, m as EverfurRuntimeConfig, L as LogLevel, a as LogRecord, b as LogSink, N as NULL_SECURE_STORE, P as PrepareOptions, c as PrepareResult, d as PrepareStatus, R as RuntimeTheme, n as RuntimeUser, S as SecureStorePort } from '../runtimeTypes-gZEJu-da.cjs';
+import { T as TelemetryPort } from '../TelemetryPort-BDNr00hu.cjs';
+export { n as noopTelemetry } from '../TelemetryPort-BDNr00hu.cjs';
+export { E as ErrorPolicyPort, d as defaultErrorPolicy } from '../ErrorPolicyPort-CNf4uQZP.cjs';
 export { C as CameraPort, a as CaptureOptions, M as MediaSource, u as unavailableCamera } from '../CameraPort-Cv31Pz7g.cjs';
-export { F as FileHandle, a as FilePort } from '../FilePort-BabWrv7I.cjs';
-import { P as PetRef, a as ConversationId } from '../ids-CJ1S6adf.cjs';
-import '../resolve-Dq_4_agU.cjs';
-import '../petsRepository-BEGb97M9.cjs';
-import '../EverfurResult-D92-uL82.cjs';
-import '../requestFunnel-DuUH-kAe.cjs';
-import '../config-BSjBdxrZ.cjs';
-import '../identity-Brl-lDd6.cjs';
+export { F as FileHandle, b as FilePort } from '../ports-BN6RHF9W.cjs';
+export { O as OptionalModule, o as optionalModule } from '../optionalModule-DbJmsq5f.cjs';
+import { m as ChatControllerDeps, l as ChatController, n as SuggestedPromptCategory } from '../ports-BY2ph0_y.cjs';
+export { o as CHAT_FEEDBACK_TYPES, p as CHECKIN_ANSWERABLE_STATUS, C as ChatCheckin, a as ChatCheckinTarget, b as ChatConversation, c as ChatConversationListOptions, d as ChatConversationPage, e as ChatFeedbackReceipt, f as ChatFeedbackType, q as ChatHandlers, g as ChatHistoryOptions, i as ChatMessage, h as ChatMessagePage, r as ChatSnapshot, j as ChatStatus, k as Citation, F as FEEDBACK_NOTES_MAX_CHARS, M as MAX_IMAGE_KEYS_PER_MESSAGE, S as SendOptions, s as Timers, t as isCheckinSettled } from '../ports-BY2ph0_y.cjs';
+import { E as EverfurError } from '../EverfurResult-DN9pL2Ab.cjs';
+import { P as PetRef, C as ConversationId } from '../ids-B2GAAifq.cjs';
+export { f as ATTACHMENT_ACCEPT, g as ATTACHMENT_BACKOFF_MS, h as ATTACHMENT_INITIATE_PATH, i as ATTACHMENT_MAX_ATTEMPTS, j as ATTACHMENT_MIME_TYPES, k as ATTACHMENT_QUEUE_CONCURRENCY, A as AttachmentError, a as AttachmentErrorCode, b as AttachmentOutcome, c as AttachmentQueue, l as AttachmentQueueDeps, m as AttachmentQueueSnapshot, d as AttachmentState, e as AttachmentStatus, n as AttachmentUploadPolicy, M as MAX_ATTACHMENTS_PER_MESSAGE, o as MAX_ATTACHMENT_BYTES, p as MAX_FILENAME_LENGTH, V as ValidatedAttachment, q as attachmentSize, r as createAttachmentQueue, s as formatBytes, t as initiateAttachmentUpload, u as isAttachmentMime, v as sanitizeFilename, w as uploadAttachmentBytes, x as validateAttachment } from '../attachments-BorG422I.cjs';
+import { p as EventSourceFactory, G as SdkPlatform } from '../config--Wu1Umhd.cjs';
+import { a as EntitlementResolution, F as FetchEntitlementsArgs } from '../entitlementRepository-BpJ7tiwl.cjs';
+import { E as EntitlementDecision } from '../resolve-D4Ywz5OS.cjs';
+import { A as AuthContext } from '../identity-C2-08BZW.cjs';
+import { C as ClientBranding } from '../branding-CsRdeNwK.cjs';
+export { E as EverfurThemeInput } from '../branding-CsRdeNwK.cjs';
+export { C as CreateClinicRequestBatchInput, F as FACT_FIELD_BY_KIND, w as FACT_VALUE_FIELD, x as FactFieldValue, y as FactValueKind, H as HttpRecordsClinicRepositoryDeps, z as HttpRecordsRepositoryDeps, A as RECORDS_CLINIC_BATCH_MAX, R as RecordClinicianNote, a as RecordClinicianNoteSection, b as RecordCompleteness, c as RecordConflict, d as RecordConflictCandidate, e as RecordDepthView, f as RecordDocumentContributionsView, g as RecordEncounter, h as RecordExamSystem, B as RecordFactEditInput, D as RecordFactRemoveInput, i as RecordLabMarker, j as RecordLabPoint, E as RecordMarker, G as RecordMarkerLatest, I as RecordMarkerPoint, J as RecordMarkerSummary, K as RecordMarkersView, L as RecordPdfLink, k as RecordPhysicalExam, M as RecordShare, N as RecordShareLink, O as RecordsAuthorizationSignature, P as RecordsClinicBatch, Q as RecordsClinicBatchClient, S as RecordsClinicBatchItem, T as RecordsClinicBatchResult, U as RecordsClinicTarget, m as RecordsDepthClient, n as RecordsRequestDocument, V as RecordsSignatureSuggestion, o as RecordsTimelineMedication, p as RecordsTimelineVaccine, q as RecordsTimelineView, r as RecordsTimelineVisit, s as RecordsTimelineWeight, W as createRecordsClinicBatchClient, X as createRecordsDepthClient, Y as factCorrectionFor, Z as factValueCorrection, _ as inferFactValueKind, $ as isFactReviewerLocked, t as mapDocumentContributions, u as mapRecordDepth, a0 as mapRecordMarkers, a1 as mapRecordPdfLink, a2 as mapRecordShareLink, a3 as mapRecordShareList, v as mapRecordsTimeline, a4 as mapSignatureSuggestions, a5 as resolveShareUrl } from '../depth-D5HwcvKC.cjs';
+export { R as RecordDocumentMeta, a as RecordEntity, b as RecordOrigin, f as RecordsRequestGroupView, d as RecordsRequestView } from '../models-D2EUxPZY.cjs';
+export { C as CheckinAnswer, a as CheckinOutcome, W as WatchCase } from '../casesRepository-DwtZVsbj.cjs';
+import '../petsRepository-B_gKbAzJ.cjs';
+import '../profile-CSs1wlXT.cjs';
+import '../requestFunnel-BjDpqqvm.cjs';
 
-/** The settled outcome of a guarded optional-module load. Never a throw. */
-type OptionalModule<T> = {
-    readonly available: true;
-    readonly module: T;
-} | {
-    readonly available: false;
-    readonly module: null;
-    readonly reason: string;
-};
 /**
- * Load an optional native peer behind a guard. `load` is the host-provided thunk (typically a `require`).
- * An optional `validate` type-guard rejects a present-but-wrong-shape module (a version whose surface drifted)
- * without throwing. Returns a settled result; NEVER throws.
+ * The server's own limits on a chat message, mirrored here so a violation is caught before any UI is
+ * rendered for it. `SendWidgetMessageRequest.message` on EFBackend main declares
+ * `min_length=1, max_length=4000`; the server remains authoritative and still enforces both.
  *
- * @param name  human-readable peer name, only used to build the `reason` string.
- * @param load  the thunk that resolves the module (e.g. `() => require('expo-secure-store')`).
- * @param validate  optional shape guard; when it returns false the module is treated as unavailable.
+ * These are NOT in the generated contract projection, so they are pinned here with their source rather
+ * than derived. If the server relaxes either bound, this is the one place to update.
  */
-declare function optionalModule<T>(name: string, load: () => unknown, validate?: (candidate: unknown) => candidate is T): OptionalModule<T>;
+declare const MESSAGE_MAX_CHARS = 4000;
+
+declare function createChatController(deps: ChatControllerDeps): ChatController;
 
 interface ChatBootstrapInput {
     /** omit => general conversation */
@@ -56,6 +60,11 @@ interface ChatBootstrapResult {
     readonly error: string | null;
     /** SAFE display copy: conversation not pre-initialized; the first send retries */
     readonly warning: string | null;
+    /**
+     * The typed error behind `error` or `warning` (the auth block, else the conversation-init failure), null
+     * when the conversation was primed. `runtime.prepare()` reports it as the chat step's outcome.
+     */
+    readonly cause: EverfurError | null;
     readonly diagnostics: ChatBootstrapDiagnostics;
 }
 /**
@@ -67,4 +76,130 @@ declare function bootstrapChat(input: ChatBootstrapInput, deps: {
     readonly controller: ChatController;
 }): Promise<ChatBootstrapResult>;
 
-export { type ChatBootstrapDiagnostics, type ChatBootstrapInput, type ChatBootstrapResult, ChatController, type OptionalModule, SuggestedPromptCategory, bootstrapChat, optionalModule };
+/** Minimum re-poll interval; a server ttl below this is clamped so we never hot-loop the endpoint. */
+declare const MIN_POLL_INTERVAL_SECONDS = 30;
+/** Injectable timer seam so a suite drives the re-poll clock deterministically (default: global timers). */
+type TimerHandle = ReturnType<typeof setTimeout>;
+interface PollScheduler {
+    set(callback: () => void, ms: number): TimerHandle;
+    clear(handle: TimerHandle): void;
+}
+interface EntitlementPollerDeps {
+    /** Re-derived every poll so a token refresh / user re-scope is reflected on the next hop. */
+    readonly authFor: () => AuthContext;
+    /**
+     * Push a fresh verdict into the runtime store. Called ONLY on a 200 'updated'. Carries the server-driven
+     * branding parsed from the SAME body (null when absent/unparseable -> the compiled default theme); branding
+     * is additive and orthogonal to the decisions.
+     */
+    readonly update: (decisions: readonly EntitlementDecision[], branding: ClientBranding | null) => void;
+    /** Optional region hint forwarded to the endpoint. */
+    readonly region?: string;
+    /** Called synchronously as each fetch starts; the runtime marks the store pending for a scope's first one. */
+    readonly onFetch?: () => void;
+    /**
+     * Called when a fetch settles for the current scope, whatever the outcome (`updated` after `update`,
+     * `notModified`, `failed`, a thrown resolve). Not called for a fetch a refresh() or stop() superseded.
+     */
+    readonly onSettled?: () => void;
+    readonly telemetry?: TelemetryPort;
+    /** Test seam; defaults to global timers (unref'd so a live poll never pins a Node event loop). */
+    readonly scheduler?: PollScheduler;
+    /** Test seam; defaults to the real repository call. */
+    readonly resolve?: (auth: AuthContext, args: FetchEntitlementsArgs) => Promise<EntitlementResolution>;
+    /** Floor override for tests; defaults to MIN_POLL_INTERVAL_SECONDS. */
+    readonly floorSeconds?: number;
+    /** Test seam for deterministic failure-retry jitter; defaults to Math.random. */
+    readonly rng?: () => number;
+}
+interface EntitlementPoller {
+    /** Idempotent. Kicks an immediate first poll, then self-schedules on the returned cadence. */
+    start(): void;
+    /** Idempotent. Clears the pending timer and prevents any post-stop update (dispose calls this). */
+    stop(): void;
+    /**
+     * Drop the cached revision and re-poll immediately. A user / pet re-scope invalidates the cached verdict, so
+     * the next request must be UNCONDITIONAL (no If-None-Match) to force a fresh 200 for the new scope.
+     */
+    refresh(): void;
+    /**
+     * Settle ONE verdict fetch and report it: the poll already in flight when one is (the warm-up rides the
+     * first tick rather than racing it), otherwise a fresh one. On a poller that was never started it fetches
+     * once and arms nothing. Resolves null when a stop() or refresh() superseded the fetch before it landed.
+     */
+    prime(): Promise<EntitlementResolution | null>;
+}
+declare function createEntitlementPoller(deps: EntitlementPollerDeps): EntitlementPoller;
+
+/**
+ * How long `logout()` waits for the before-logout hooks before it proceeds without them. The device unregistration
+ * the notifications hook issues is one request; a partner's sign-out screen must never hang on a slow network.
+ */
+declare const LOGOUT_HOOK_BUDGET_MS = 3000;
+
+/** Runtime-construction options, distinct from the partner-facing config (host wiring / test seams). */
+interface CreateRuntimeOptions {
+    /**
+     * Whether to start the entitlement poller. Default: start ONLY when the transport was NOT injected (a real,
+     * base-URL runtime). An injected transport is the test seam, so auto-start stays OFF to keep MockTransport
+     * suites network-free; pass `true` to exercise the wired poller against a MockTransport.
+     */
+    readonly startEntitlementPolling?: boolean;
+    /** Test seam: an injected scheduler so a suite can drive the entitlement re-poll timer deterministically. */
+    readonly pollScheduler?: PollScheduler;
+    /**
+     * Host-wiring seam: the EventSource factory the built HTTP transport falls back to when a streaming
+     * `res.body` is unavailable (stock RN fetch). The rn facade injects react-native-sse here so streaming works
+     * on stock React Native; core NEVER imports react-native-sse (it stays framework-free and only threads this
+     * through). Absent (web/expo, or an injected transport) => the fetch-body streaming path is used.
+     */
+    readonly eventSourceFactory?: EventSourceFactory;
+    /**
+     * Host-wiring seam: which entry point built this runtime, sent as X-Everfur-SDK-Platform on every request.
+     * The rn facade leaves it at the default; the web facade names `web`. Never read from partner config, for
+     * the reason on `SdkPlatform`.
+     */
+    readonly platform?: SdkPlatform;
+}
+/**
+ * Construct the runtime once (EverfurProvider mount). Builds the transport (injected test seam, else the
+ * real HTTP transport from the resolved client config), the IdentityProvider when a user is set, the
+ * capability registry, the entitlement store, and (for a real runtime) the entitlement poller.
+ * A config that cannot be resolved (missing publishableKey, or an unresolvable / non-https base URL when
+ * no transport is injected) does NOT throw: it yields a DISABLED runtime whose transport refuses and
+ * whose every capability settles to the deliberate off-state at `disabled.level === 'sdk_config'`.
+ * @throws {EverfurConfigError} only for a supplied ACTIVE secureStore, which expresses a security
+ * intent the SDK cannot yet honour and must not silently discard.
+ */
+declare function createEverfurRuntime(input: CreateEverfurRuntimeInput, opts?: CreateRuntimeOptions): EverfurRuntime;
+
+/** The pad's fixed canvas, in bitmap pixels (a 3:1 signature strip). */
+declare const SIGNATURE_CANVAS: Readonly<{
+    width: 360;
+    height: 120;
+}>;
+/** A one-bit bitmap: `pixels[y * width + x]` is 1 for ink, 0 for paper. */
+interface SignatureBitmap {
+    readonly width: number;
+    readonly height: number;
+    readonly pixels: Uint8Array;
+}
+type SignaturePoint = readonly [number, number];
+/**
+ * The pen strokes of the pad (each a polyline in canvas pixels) as ink. A single point is a dot; a stroke that
+ * leaves the canvas is clipped, never wrapped. A non-finite point is skipped, every coordinate is clamped near
+ * the canvas, and one stroke plots at most `MAX_STEPS_PER_STROKE` steps, so no input can pin the JS thread.
+ */
+declare function rasterizeStrokes(strokes: readonly (readonly SignaturePoint[])[], penRadius?: number): SignatureBitmap;
+/**
+ * A typed name as ink, centred, shrunk to fit (the web pad's shrink-to-fit rule). The scale is the largest that
+ * fits the name on one line; a name too long even at scale 1 is clipped at the canvas edge rather than wrapped.
+ */
+declare function rasterizeTypedName(name: string): SignatureBitmap;
+/**
+ * Encode a bitmap as a 1-bit grayscale PNG (ink is black on white), base64 for `signaturePngBase64`. The rows
+ * use filter type 0; the image data is one zlib stream (header, fixed-Huffman DEFLATE, Adler-32).
+ */
+declare function encodeSignaturePng(bitmap: SignatureBitmap): string;
+
+export { type ChatBootstrapDiagnostics, type ChatBootstrapInput, type ChatBootstrapResult, ChatController, ChatControllerDeps, CreateEverfurRuntimeInput, type CreateRuntimeOptions, type EntitlementPoller, type EntitlementPollerDeps, EverfurRuntime, LOGOUT_HOOK_BUDGET_MS, MESSAGE_MAX_CHARS, MIN_POLL_INTERVAL_SECONDS, type PollScheduler, SIGNATURE_CANVAS, SdkPlatform, type SignatureBitmap, type SignaturePoint, SuggestedPromptCategory, TelemetryPort, type TimerHandle, bootstrapChat, createChatController, createEntitlementPoller, createEverfurRuntime, encodeSignaturePng, rasterizeStrokes, rasterizeTypedName };

package/dist/core/index.d.ts

@@ -1,37 +1,41 @@
 export { K as KvPort } from '../cacheEpoch-DknKn3S0.js';
-export { C as CapabilityKind, a as CapabilityRegistry, b as CapabilityServices, c as ChatControllerRegistry, d as ChatScope, e as CreateEverfurRuntimeInput, f as CreateRuntimeOptions, E as EntitlementPoller, g as EntitlementPollerDeps, h as EntitlementSnapshot, i as EntitlementStore, j as EverfurRuntime, k as EverfurRuntimeConfig, L as LogLevel, l as LogRecord, m as LogSink, M as MIN_POLL_INTERVAL_SECONDS, N as NULL_SECURE_STORE, P as PollScheduler, R as RuntimeTheme, n as RuntimeUser, S as SecureStorePort, T as TimerHandle, o as createEntitlementPoller, p as createEverfurRuntime } from '../runtime-BIYzf9cK.js';
-export { T as TelemetryPort, n as noopTelemetry } from '../TelemetryPort-BDNr00hu.js';
-import { S as SuggestedPromptCategory, C as ChatController } from '../ChatController-CKdBvPj2.js';
-export { a as ChatControllerDeps, b as ChatHandlers, c as ChatMessage, d as ChatSnapshot, e as ChatStatus, f as Citation, E as ErrorPolicyPort, M as MESSAGE_MAX_CHARS, g as SendOptions, T as Timers, h as createChatController, i as defaultErrorPolicy } from '../ChatController-CKdBvPj2.js';
+import { C as CreateEverfurRuntimeInput, e as EverfurRuntime } from '../runtimeTypes-w5KqBMcs.js';
+export { B as BeforeLogoutContext, f as BeforeLogoutHook, g as CapabilityKind, h as CapabilityRegistry, i as CapabilityServices, j as ChatControllerRegistry, k as ChatScope, E as EntitlementSnapshot, l as EntitlementStore, m as EverfurRuntimeConfig, L as LogLevel, a as LogRecord, b as LogSink, N as NULL_SECURE_STORE, P as PrepareOptions, c as PrepareResult, d as PrepareStatus, R as RuntimeTheme, n as RuntimeUser, S as SecureStorePort } from '../runtimeTypes-w5KqBMcs.js';
+import { T as TelemetryPort } from '../TelemetryPort-BDNr00hu.js';
+export { n as noopTelemetry } from '../TelemetryPort-BDNr00hu.js';
+export { E as ErrorPolicyPort, d as defaultErrorPolicy } from '../ErrorPolicyPort-CwbfmxzJ.js';
 export { C as CameraPort, a as CaptureOptions, M as MediaSource, u as unavailableCamera } from '../CameraPort-Cv31Pz7g.js';
-export { F as FileHandle, a as FilePort } from '../FilePort-BabWrv7I.js';
-import { P as PetRef, a as ConversationId } from '../ids-CJ1S6adf.js';
-import '../resolve-Dq_4_agU.js';
-import '../petsRepository-Bu18r2kK.js';
-import '../EverfurResult-D92-uL82.js';
-import '../requestFunnel-dio5OmR9.js';
-import '../config-CiJ0PVBB.js';
-import '../identity-DK9zORrG.js';
+export { F as FileHandle, b as FilePort } from '../ports-BN6RHF9W.js';
+export { O as OptionalModule, o as optionalModule } from '../optionalModule-DbJmsq5f.js';
+import { m as ChatControllerDeps, l as ChatController, n as SuggestedPromptCategory } from '../ports-D7YW8qz9.js';
+export { o as CHAT_FEEDBACK_TYPES, p as CHECKIN_ANSWERABLE_STATUS, C as ChatCheckin, a as ChatCheckinTarget, b as ChatConversation, c as ChatConversationListOptions, d as ChatConversationPage, e as ChatFeedbackReceipt, f as ChatFeedbackType, q as ChatHandlers, g as ChatHistoryOptions, i as ChatMessage, h as ChatMessagePage, r as ChatSnapshot, j as ChatStatus, k as Citation, F as FEEDBACK_NOTES_MAX_CHARS, M as MAX_IMAGE_KEYS_PER_MESSAGE, S as SendOptions, s as Timers, t as isCheckinSettled } from '../ports-D7YW8qz9.js';
+import { E as EverfurError } from '../EverfurResult-DN9pL2Ab.js';
+import { P as PetRef, C as ConversationId } from '../ids-B2GAAifq.js';
+export { f as ATTACHMENT_ACCEPT, g as ATTACHMENT_BACKOFF_MS, h as ATTACHMENT_INITIATE_PATH, i as ATTACHMENT_MAX_ATTEMPTS, j as ATTACHMENT_MIME_TYPES, k as ATTACHMENT_QUEUE_CONCURRENCY, A as AttachmentError, a as AttachmentErrorCode, b as AttachmentOutcome, c as AttachmentQueue, l as AttachmentQueueDeps, m as AttachmentQueueSnapshot, d as AttachmentState, e as AttachmentStatus, n as AttachmentUploadPolicy, M as MAX_ATTACHMENTS_PER_MESSAGE, o as MAX_ATTACHMENT_BYTES, p as MAX_FILENAME_LENGTH, V as ValidatedAttachment, q as attachmentSize, r as createAttachmentQueue, s as formatBytes, t as initiateAttachmentUpload, u as isAttachmentMime, v as sanitizeFilename, w as uploadAttachmentBytes, x as validateAttachment } from '../attachments-DpldrvIW.js';
+import { p as EventSourceFactory, G as SdkPlatform } from '../config-C7eb_IMD.js';
+import { a as EntitlementResolution, F as FetchEntitlementsArgs } from '../entitlementRepository-B7egEdW6.js';
+import { E as EntitlementDecision } from '../resolve-D4Ywz5OS.js';
+import { A as AuthContext } from '../identity-CEi9GRFZ.js';
+import { C as ClientBranding } from '../branding-CsRdeNwK.js';
+export { E as EverfurThemeInput } from '../branding-CsRdeNwK.js';
+export { C as CreateClinicRequestBatchInput, F as FACT_FIELD_BY_KIND, w as FACT_VALUE_FIELD, x as FactFieldValue, y as FactValueKind, H as HttpRecordsClinicRepositoryDeps, z as HttpRecordsRepositoryDeps, A as RECORDS_CLINIC_BATCH_MAX, R as RecordClinicianNote, a as RecordClinicianNoteSection, b as RecordCompleteness, c as RecordConflict, d as RecordConflictCandidate, e as RecordDepthView, f as RecordDocumentContributionsView, g as RecordEncounter, h as RecordExamSystem, B as RecordFactEditInput, D as RecordFactRemoveInput, i as RecordLabMarker, j as RecordLabPoint, E as RecordMarker, G as RecordMarkerLatest, I as RecordMarkerPoint, J as RecordMarkerSummary, K as RecordMarkersView, L as RecordPdfLink, k as RecordPhysicalExam, M as RecordShare, N as RecordShareLink, O as RecordsAuthorizationSignature, P as RecordsClinicBatch, Q as RecordsClinicBatchClient, S as RecordsClinicBatchItem, T as RecordsClinicBatchResult, U as RecordsClinicTarget, m as RecordsDepthClient, n as RecordsRequestDocument, V as RecordsSignatureSuggestion, o as RecordsTimelineMedication, p as RecordsTimelineVaccine, q as RecordsTimelineView, r as RecordsTimelineVisit, s as RecordsTimelineWeight, W as createRecordsClinicBatchClient, X as createRecordsDepthClient, Y as factCorrectionFor, Z as factValueCorrection, _ as inferFactValueKind, $ as isFactReviewerLocked, t as mapDocumentContributions, u as mapRecordDepth, a0 as mapRecordMarkers, a1 as mapRecordPdfLink, a2 as mapRecordShareLink, a3 as mapRecordShareList, v as mapRecordsTimeline, a4 as mapSignatureSuggestions, a5 as resolveShareUrl } from '../depth-DvPwPuT_.js';
+export { R as RecordDocumentMeta, a as RecordEntity, b as RecordOrigin, f as RecordsRequestGroupView, d as RecordsRequestView } from '../models-B-Uh2LTf.js';
+export { C as CheckinAnswer, a as CheckinOutcome, W as WatchCase } from '../casesRepository-v6QczS9N.js';
+import '../petsRepository-Bk6GDwLs.js';
+import '../profile-CSs1wlXT.js';
+import '../requestFunnel-DFMGcluw.js';
 
-/** The settled outcome of a guarded optional-module load. Never a throw. */
-type OptionalModule<T> = {
-    readonly available: true;
-    readonly module: T;
-} | {
-    readonly available: false;
-    readonly module: null;
-    readonly reason: string;
-};
 /**
- * Load an optional native peer behind a guard. `load` is the host-provided thunk (typically a `require`).
- * An optional `validate` type-guard rejects a present-but-wrong-shape module (a version whose surface drifted)
- * without throwing. Returns a settled result; NEVER throws.
+ * The server's own limits on a chat message, mirrored here so a violation is caught before any UI is
+ * rendered for it. `SendWidgetMessageRequest.message` on EFBackend main declares
+ * `min_length=1, max_length=4000`; the server remains authoritative and still enforces both.
  *
- * @param name  human-readable peer name, only used to build the `reason` string.
- * @param load  the thunk that resolves the module (e.g. `() => require('expo-secure-store')`).
- * @param validate  optional shape guard; when it returns false the module is treated as unavailable.
+ * These are NOT in the generated contract projection, so they are pinned here with their source rather
+ * than derived. If the server relaxes either bound, this is the one place to update.
  */
-declare function optionalModule<T>(name: string, load: () => unknown, validate?: (candidate: unknown) => candidate is T): OptionalModule<T>;
+declare const MESSAGE_MAX_CHARS = 4000;
+
+declare function createChatController(deps: ChatControllerDeps): ChatController;
 
 interface ChatBootstrapInput {
     /** omit => general conversation */
@@ -56,6 +60,11 @@ interface ChatBootstrapResult {
     readonly error: string | null;
     /** SAFE display copy: conversation not pre-initialized; the first send retries */
     readonly warning: string | null;
+    /**
+     * The typed error behind `error` or `warning` (the auth block, else the conversation-init failure), null
+     * when the conversation was primed. `runtime.prepare()` reports it as the chat step's outcome.
+     */
+    readonly cause: EverfurError | null;
     readonly diagnostics: ChatBootstrapDiagnostics;
 }
 /**
@@ -67,4 +76,130 @@ declare function bootstrapChat(input: ChatBootstrapInput, deps: {
     readonly controller: ChatController;
 }): Promise<ChatBootstrapResult>;
 
-export { type ChatBootstrapDiagnostics, type ChatBootstrapInput, type ChatBootstrapResult, ChatController, type OptionalModule, SuggestedPromptCategory, bootstrapChat, optionalModule };
+/** Minimum re-poll interval; a server ttl below this is clamped so we never hot-loop the endpoint. */
+declare const MIN_POLL_INTERVAL_SECONDS = 30;
+/** Injectable timer seam so a suite drives the re-poll clock deterministically (default: global timers). */
+type TimerHandle = ReturnType<typeof setTimeout>;
+interface PollScheduler {
+    set(callback: () => void, ms: number): TimerHandle;
+    clear(handle: TimerHandle): void;
+}
+interface EntitlementPollerDeps {
+    /** Re-derived every poll so a token refresh / user re-scope is reflected on the next hop. */
+    readonly authFor: () => AuthContext;
+    /**
+     * Push a fresh verdict into the runtime store. Called ONLY on a 200 'updated'. Carries the server-driven
+     * branding parsed from the SAME body (null when absent/unparseable -> the compiled default theme); branding
+     * is additive and orthogonal to the decisions.
+     */
+    readonly update: (decisions: readonly EntitlementDecision[], branding: ClientBranding | null) => void;
+    /** Optional region hint forwarded to the endpoint. */
+    readonly region?: string;
+    /** Called synchronously as each fetch starts; the runtime marks the store pending for a scope's first one. */
+    readonly onFetch?: () => void;
+    /**
+     * Called when a fetch settles for the current scope, whatever the outcome (`updated` after `update`,
+     * `notModified`, `failed`, a thrown resolve). Not called for a fetch a refresh() or stop() superseded.
+     */
+    readonly onSettled?: () => void;
+    readonly telemetry?: TelemetryPort;
+    /** Test seam; defaults to global timers (unref'd so a live poll never pins a Node event loop). */
+    readonly scheduler?: PollScheduler;
+    /** Test seam; defaults to the real repository call. */
+    readonly resolve?: (auth: AuthContext, args: FetchEntitlementsArgs) => Promise<EntitlementResolution>;
+    /** Floor override for tests; defaults to MIN_POLL_INTERVAL_SECONDS. */
+    readonly floorSeconds?: number;
+    /** Test seam for deterministic failure-retry jitter; defaults to Math.random. */
+    readonly rng?: () => number;
+}
+interface EntitlementPoller {
+    /** Idempotent. Kicks an immediate first poll, then self-schedules on the returned cadence. */
+    start(): void;
+    /** Idempotent. Clears the pending timer and prevents any post-stop update (dispose calls this). */
+    stop(): void;
+    /**
+     * Drop the cached revision and re-poll immediately. A user / pet re-scope invalidates the cached verdict, so
+     * the next request must be UNCONDITIONAL (no If-None-Match) to force a fresh 200 for the new scope.
+     */
+    refresh(): void;
+    /**
+     * Settle ONE verdict fetch and report it: the poll already in flight when one is (the warm-up rides the
+     * first tick rather than racing it), otherwise a fresh one. On a poller that was never started it fetches
+     * once and arms nothing. Resolves null when a stop() or refresh() superseded the fetch before it landed.
+     */
+    prime(): Promise<EntitlementResolution | null>;
+}
+declare function createEntitlementPoller(deps: EntitlementPollerDeps): EntitlementPoller;
+
+/**
+ * How long `logout()` waits for the before-logout hooks before it proceeds without them. The device unregistration
+ * the notifications hook issues is one request; a partner's sign-out screen must never hang on a slow network.
+ */
+declare const LOGOUT_HOOK_BUDGET_MS = 3000;
+
+/** Runtime-construction options, distinct from the partner-facing config (host wiring / test seams). */
+interface CreateRuntimeOptions {
+    /**
+     * Whether to start the entitlement poller. Default: start ONLY when the transport was NOT injected (a real,
+     * base-URL runtime). An injected transport is the test seam, so auto-start stays OFF to keep MockTransport
+     * suites network-free; pass `true` to exercise the wired poller against a MockTransport.
+     */
+    readonly startEntitlementPolling?: boolean;
+    /** Test seam: an injected scheduler so a suite can drive the entitlement re-poll timer deterministically. */
+    readonly pollScheduler?: PollScheduler;
+    /**
+     * Host-wiring seam: the EventSource factory the built HTTP transport falls back to when a streaming
+     * `res.body` is unavailable (stock RN fetch). The rn facade injects react-native-sse here so streaming works
+     * on stock React Native; core NEVER imports react-native-sse (it stays framework-free and only threads this
+     * through). Absent (web/expo, or an injected transport) => the fetch-body streaming path is used.
+     */
+    readonly eventSourceFactory?: EventSourceFactory;
+    /**
+     * Host-wiring seam: which entry point built this runtime, sent as X-Everfur-SDK-Platform on every request.
+     * The rn facade leaves it at the default; the web facade names `web`. Never read from partner config, for
+     * the reason on `SdkPlatform`.
+     */
+    readonly platform?: SdkPlatform;
+}
+/**
+ * Construct the runtime once (EverfurProvider mount). Builds the transport (injected test seam, else the
+ * real HTTP transport from the resolved client config), the IdentityProvider when a user is set, the
+ * capability registry, the entitlement store, and (for a real runtime) the entitlement poller.
+ * A config that cannot be resolved (missing publishableKey, or an unresolvable / non-https base URL when
+ * no transport is injected) does NOT throw: it yields a DISABLED runtime whose transport refuses and
+ * whose every capability settles to the deliberate off-state at `disabled.level === 'sdk_config'`.
+ * @throws {EverfurConfigError} only for a supplied ACTIVE secureStore, which expresses a security
+ * intent the SDK cannot yet honour and must not silently discard.
+ */
+declare function createEverfurRuntime(input: CreateEverfurRuntimeInput, opts?: CreateRuntimeOptions): EverfurRuntime;
+
+/** The pad's fixed canvas, in bitmap pixels (a 3:1 signature strip). */
+declare const SIGNATURE_CANVAS: Readonly<{
+    width: 360;
+    height: 120;
+}>;
+/** A one-bit bitmap: `pixels[y * width + x]` is 1 for ink, 0 for paper. */
+interface SignatureBitmap {
+    readonly width: number;
+    readonly height: number;
+    readonly pixels: Uint8Array;
+}
+type SignaturePoint = readonly [number, number];
+/**
+ * The pen strokes of the pad (each a polyline in canvas pixels) as ink. A single point is a dot; a stroke that
+ * leaves the canvas is clipped, never wrapped. A non-finite point is skipped, every coordinate is clamped near
+ * the canvas, and one stroke plots at most `MAX_STEPS_PER_STROKE` steps, so no input can pin the JS thread.
+ */
+declare function rasterizeStrokes(strokes: readonly (readonly SignaturePoint[])[], penRadius?: number): SignatureBitmap;
+/**
+ * A typed name as ink, centred, shrunk to fit (the web pad's shrink-to-fit rule). The scale is the largest that
+ * fits the name on one line; a name too long even at scale 1 is clipped at the canvas edge rather than wrapped.
+ */
+declare function rasterizeTypedName(name: string): SignatureBitmap;
+/**
+ * Encode a bitmap as a 1-bit grayscale PNG (ink is black on white), base64 for `signaturePngBase64`. The rows
+ * use filter type 0; the image data is one zlib stream (header, fixed-Huffman DEFLATE, Adler-32).
+ */
+declare function encodeSignaturePng(bitmap: SignatureBitmap): string;
+
+export { type ChatBootstrapDiagnostics, type ChatBootstrapInput, type ChatBootstrapResult, ChatController, ChatControllerDeps, CreateEverfurRuntimeInput, type CreateRuntimeOptions, type EntitlementPoller, type EntitlementPollerDeps, EverfurRuntime, LOGOUT_HOOK_BUDGET_MS, MESSAGE_MAX_CHARS, MIN_POLL_INTERVAL_SECONDS, type PollScheduler, SIGNATURE_CANVAS, SdkPlatform, type SignatureBitmap, type SignaturePoint, SuggestedPromptCategory, TelemetryPort, type TimerHandle, bootstrapChat, createChatController, createEntitlementPoller, createEverfurRuntime, encodeSignaturePng, rasterizeStrokes, rasterizeTypedName };