@everfur/sdk 0.12.1 → 0.13.0

package/dist/optInView.d-CEyHR6PK.d.cts

@@ -0,0 +1,325 @@
+import { E as EverfurError } from './EverfurError.d-8NHtlgzA.cjs';
+import { E as EverfurResult } from './EverfurResult.d-BFH-3s6E.cjs';
+import { R as RequestFunnel } from './requestFunnel.d-DWQQpjFR.cjs';
+import { A as AuthContext } from './identity.d-60LeJt_s.cjs';
+import { P as PetRef, U as UserRef } from './ids.d-B2GAAifq.cjs';
+import { E as ErrorPolicyPort } from './ErrorPolicyPort.d-DirW9hgO.cjs';
+
+/** The marker a placeholder string carries, so a test (and a reviewer) can find every one. */
+declare const COPY_PLACEHOLDER_PREFIX = "[copy needed: ";
+declare const TEXTING_COPY: Readonly<{
+    loading: "Loading";
+    retry: "Try again";
+    signedOut: "Sign in required";
+    phoneLabel: "Mobile number";
+    phoneHint: "We'll text a 6-digit code to confirm it's you.";
+    phoneInvalid: "That doesn't look like a valid number. Check it and the country, then try again.";
+    consentRequired: "Please agree to receive SMS messages to continue.";
+    sendCode: "Send code";
+    sendingCode: "Sending code";
+    codeTitle: "Enter your code";
+    /** Followed by the number, which is data, not copy. */
+    codeSentTo: "We texted a 6-digit code to";
+    codeLabel: "6-digit code";
+    codeInvalidFormat: "Enter all 6 digits of the code.";
+    confirmCode: "Verify";
+    confirmingCode: "Verifying";
+    verificationInvalid: "That code is no longer valid. Request a new one.";
+    /** everfur-frontend app/product/sms-chat/copy.ts:73, for a code refused after its `expires_at`. */
+    codeExpired: "This code has expired. Request a new one.";
+    requestNewCode: "Request a new code";
+    /** everfur-frontend app/product/sms-chat/copy.ts:74, for 429 `verification_phone_limit` (this number's daily codes). */
+    noResendsLeft: "You've requested the maximum number of codes. Please try again later or contact support.";
+    changeNumber: "Use a different number";
+    defaultPetLabel: "Default pet for SMS";
+    noPetSelected: "Choose a pet";
+    savePet: "Save";
+    savingPet: "Saving";
+    petSaved: "Saved";
+    petIneligible: "That pet can't be selected anymore. Please choose another.";
+    optedOutTitle: "SMS paused";
+    verifiedTitle: "SMS Chat is on";
+    disable: "Turn off SMS Chat";
+    disabling: "Turning off";
+    disableConfirmTitle: "Turn off SMS Chat?";
+    disableConfirmBody: "We'll stop texting this number. You can turn it back on anytime.";
+    disableConfirm: "Turn off";
+    disableCancel: "Keep it on";
+    unavailableTitle: "SMS Chat isn't available yet";
+    unavailableBody: "We're still setting it up. Check back soon.";
+    phoneAlreadyLinked: "This number is already linked to another Everfur account. Contact support and we'll move it for you.";
+    providerFailed: "We couldn't send the text. Please try again.";
+    genericFailure: "That didn't go through. Please try again.";
+    /** Followed by the request id, for a support conversation. */
+    supportReference: "Support reference:";
+    /**
+     * 403 `phone_country_not_allowed`, a valid number from a country the tenant does not text. The consumer screen
+     * refuses a valid number whose own country is outside its list (everfur-frontend app/product/sms-chat/phone.ts:36)
+     * with this line (`phoneInvalid`, copy.ts:60, via SmsChatEnrollment.tsx:78-80), which points at the country.
+     */
+    phoneCountryNotAllowed: "That doesn't look like a valid number. Check it and the country, then try again.";
+    /**
+     * 429 `verification_tenant_limit`, the tenant's hourly ceiling on codes: not the member's doing, and it clears.
+     * everfur-frontend app/product/sms-chat/copy.ts:109 `temporarilyUnavailable` (everfur-mobile copy.ts:108).
+     */
+    verificationBusy: "SMS Chat is temporarily unavailable. Please try again in a few minutes.";
+    /**
+     * The label in front of the tenant profile's help contact, so the line reads "Help: hello@everfur.com" exactly as
+     * the owner-approved HELP reply does (EFBackend sms_chat_reply_copy.py:262 and :276, and the partner default
+     * partner_sms_profile.py:101).
+     */
+    helpContactLabel: "Help:";
+    /**
+     * The button that starts a new opt-in after a member opted out. The consumer's own "start SMS Chat" control:
+     * everfur-frontend copy.ts:118 `promptAccept`, the /sms page call to action (SmsOptInPage.tsx:75), everfur-mobile
+     * copy.ts:121.
+     */
+    reenroll: "Turn on SMS Chat";
+    /**
+     * The opted-out body for a member who turned texts off in the app (not by texting STOP, which keeps the brand STOP
+     * line). The consumer's approved words for that same choice: everfur-frontend copy.ts:98 `disableConfirmBody`
+     * (everfur-mobile copy.ts:102).
+     */
+    optedOutByMemberBody: "We'll stop texting this number. You can turn it back on anytime.";
+    codeWrong: "That code didn't work. Check it and try again.";
+}>;
+/** ADAPTED from the consumer deck: "Everfur" becomes the tenant's brand name. Listed for approval. */
+declare const TEXTING_BRAND_COPY: Readonly<{
+    /** consumer `introTitle`: 'Chat with Everfur by text' */
+    introTitle: (brand: string) => string;
+    /** consumer `introBody` */
+    introBody: (brand: string) => string;
+    /** consumer `statusActive`: 'You can text Everfur anytime from this number.' */
+    statusActive: (brand: string) => string;
+    /** consumer `optedOutBody` */
+    optedOutBody: (brand: string) => string;
+}>;
+/** Every placeholder key in `TEXTING_COPY`, so the list a reviewer approves cannot drift from the file. */
+declare const TEXTING_COPY_PLACEHOLDERS: readonly (keyof typeof TEXTING_COPY)[];
+/** Every string the texting opt-in shows that a partner may reword (`EverfurTextingOptIn copy=`). */
+type TextingCopy = {
+    readonly [K in keyof typeof TEXTING_COPY]: string;
+};
+/** The brand-named lines (`EverfurTextingOptIn brandCopy=`): each takes the tenant's brand name. */
+type TextingBrandCopy = {
+    readonly [K in keyof typeof TEXTING_BRAND_COPY]: (brand: string) => string;
+};
+
+/** The tenant's public texting profile, exactly as the console published it. */
+interface EverfurTextingProfile {
+    /** The name the texts, the consent words and the STOP/HELP replies use. */
+    readonly brandName: string;
+    /** The consent words the member ticks, verbatim. The server stores a digest of exactly these words. */
+    readonly consentText: string;
+    /** The version of `consentText`; sent back with the verification so the grant names what the member saw. */
+    readonly consentVersion: string;
+    /** Where a member gets help (a phone, an address or a URL as the tenant set it), or null. */
+    readonly helpContact: string | null;
+    /**
+     * EFBackend's `status_is_live`. There is no tester-only stage any more: a draft or live tenant admits every member,
+     * and only a tenant staff suspended refuses each number with `sms_not_live`, which the surface words as SMS Chat
+     * not being available. The surface draws no banner of its own for this flag.
+     */
+    readonly isLive: boolean;
+}
+/**
+ * Parse an untrusted `sms_profile_public` blob. Null when it is absent or carries no brand, consent words or
+ * consent version (the three things an opt-in cannot do without). `status_is_live` reads true only for the
+ * literal `true`: a missing flag is the not-live side, which refuses more, never less. Never throws.
+ */
+declare function parseTextingProfile(raw: unknown): EverfurTextingProfile | null;
+/**
+ * A +1 (United States or Canada) number as E.164, or null. Takes what a member types: `(415) 555-0134`,
+ * `415.555.0134`, `1 415 555 0134` or `+1 415 555 0134`. A North American number is ten digits whose area code and
+ * exchange both start 2 to 9; anything else (another country code, too few digits, letters) is null, so the
+ * surface refuses it before the wire instead of spending a verification on it.
+ */
+declare function toTextingE164(input: string): string | null;
+/** True for a string already in E.164 form (`+` and 8 to 15 digits). */
+declare function isE164(value: unknown): value is string;
+
+/** The identity states the server reports. An unknown value reads as `none`: nothing on record we can explain. */
+declare const EVERFUR_TEXTING_STATUSES: readonly ["none", "pending", "verified", "opted_out"];
+type EverfurTextingStatus = (typeof EVERFUR_TEXTING_STATUSES)[number];
+/** The member's texting identity. The raw number never comes back; `phoneMasked` is what Everfur shows anywhere. */
+interface EverfurTextingIdentity {
+    readonly status: EverfurTextingStatus;
+    readonly phoneMasked: string | null;
+    /** The consent version on record, or null. */
+    readonly consentVersion: string | null;
+    /** The pet texts are about, or null when none is chosen. */
+    readonly selectedPetRef: PetRef | null;
+}
+/** An outstanding code, as the server issued it. */
+interface EverfurTextingChallenge {
+    readonly challengeId: string;
+    /** ISO 8601, or null when the server did not say. */
+    readonly expiresAt: string | null;
+    /**
+     * How many wrong codes the server still accepts for this challenge, as it said when it issued the code
+     * (`attempts_remaining`), or null when it did not say. The controller counts it down on each refused code.
+     */
+    readonly attemptsRemaining: number | null;
+}
+interface EverfurTextingVerificationInput {
+    /** E.164 (`+14155550134`). `toTextingE164` turns what a member typed into this. */
+    readonly phoneE164: string;
+    /** The tenant profile's `consentVersion`: the words the member ticked. The server refuses any other. */
+    readonly consentVersion: string;
+}
+/** A code is digits only; the consumer screen asks for six. */
+declare const TEXTING_CODE_PATTERN: RegExp;
+interface TextingRepository {
+    /** `GET /widget/v1/me/sms-identity`. Settles; never throws. */
+    read(opts?: {
+        readonly signal?: AbortSignal;
+    }): Promise<EverfurResult<EverfurTextingIdentity>>;
+    /** `POST .../verification`: text a code to the number. Sent once, never replayed. */
+    startVerification(input: EverfurTextingVerificationInput): Promise<EverfurResult<EverfurTextingChallenge>>;
+    /** `POST .../verification/confirm`: spend the code. Sent once, never replayed. */
+    confirmVerification(challengeId: string, code: string): Promise<EverfurResult<EverfurTextingIdentity>>;
+    /** `PUT .../selected-pet`: the pet texts are about. */
+    selectPet(petRef: PetRef): Promise<EverfurResult<EverfurTextingIdentity>>;
+    /** `DELETE /widget/v1/me/sms-identity`: withdraw consent and stop texts. As available as opting in. */
+    optOut(): Promise<EverfurResult<EverfurTextingIdentity>>;
+}
+/** The part of the runtime this repository needs (`useEverfurContext().runtime` satisfies it). */
+interface TextingRuntime {
+    readonly isDisposed: boolean;
+    readonly registry: {
+        readonly services: {
+            authFor(userRef: UserRef | null): AuthContext;
+            readonly errorPolicy: ErrorPolicyPort | undefined;
+        };
+    };
+}
+/** The lower seam: one auth context, or an already-built funnel (tests). */
+interface TextingRepositoryDeps {
+    readonly auth: AuthContext;
+    readonly errorPolicy?: ErrorPolicyPort;
+    readonly funnel?: RequestFunnel;
+}
+/** The reason codes a surface branches on, by meaning. Read with `textingReasonOf`. */
+type EverfurTextingReason = 'not_live' | 'code_invalid' | 'phone_linked' | 'pet_ineligible' | 'no_identity' | 'consent_changed' | 'session_required' | 'country_not_allowed' | 'phone_code_limit' | 'tenant_code_limit';
+/** Which texting refusal an error is, or null for any other failure. */
+declare function textingReasonOf(error: EverfurError | null | undefined): EverfurTextingReason | null;
+/** The allowlist mapper for one identity body. `status` is REQUIRED: a body without one is not an identity. */
+declare function textingIdentityFromWire(raw: unknown): EverfurTextingIdentity | null;
+/** The repository over the runtime under your provider. Auth is read at CALL time; a disposed runtime sends nothing. */
+declare function createTextingRepository(runtime: TextingRuntime): TextingRepository;
+/** The same repository over one auth context (or an injected funnel). Internal seam, for deterministic tests. */
+declare function createTextingRepositoryOver(deps: TextingRepositoryDeps): TextingRepository;
+
+type TextingPhase = 'loading' | 'failed' | 'enroll' | 'requesting' | 'code' | 'confirming' | 'verified' | 'optingOut' | 'optedOut';
+/** What a refused code most likely was. See the header. */
+type TextingCodeRefusal = 'wrong' | 'expired' | 'spent';
+/** Which verb a refusal belongs to, so a surface retries the right thing. */
+type TextingAction = 'read' | 'start' | 'confirm' | 'selectPet' | 'optOut';
+interface TextingSnapshot {
+    readonly phase: TextingPhase;
+    /** The identity as the server last reported it, or null before the first read. */
+    readonly identity: EverfurTextingIdentity | null;
+    /** The outstanding code, while one is out. */
+    readonly challenge: EverfurTextingChallenge | null;
+    /** The number the current code went to (what the member typed, as E.164), for "request a new code". */
+    readonly phoneE164: string | null;
+    /** The last refusal, or null. `error.displayMessage` is safe to show. */
+    readonly error: EverfurError | null;
+    readonly failedAction: TextingAction | null;
+    /** For a refused code (`failedAction` 'confirm'), what it most likely was; null otherwise. */
+    readonly codeRefusal: TextingCodeRefusal | null;
+    /** True while a pet choice is being saved. */
+    readonly savingPet: boolean;
+    /**
+     * True while `requesting` is a new code for the code step ("Request a new code"), so a surface keeps the code step
+     * on screen with its link busy instead of flipping back to the number (audit 2026-10-20). False for a first send.
+     */
+    readonly resending: boolean;
+}
+declare class TextingController {
+    private readonly repository;
+    private readonly now;
+    private snapshot;
+    private readonly listeners;
+    /** Bumped by every step change; a settlement for an older generation is dropped. */
+    private generation;
+    private consentVersion;
+    private disposed;
+    /** `now` is the clock a refused code is judged against (epoch ms); tests pass their own. */
+    constructor(repository: TextingRepository, now?: () => number);
+    readonly subscribe: (listener: () => void) => (() => void);
+    readonly getSnapshot: () => TextingSnapshot;
+    private set;
+    /** Read the member's identity (the first load, and the way out of `failed`). */
+    load(): Promise<void>;
+    /** Text a code to `phoneE164` for the consent words of `consentVersion`. */
+    start(phoneE164: string, consentVersion: string): Promise<boolean>;
+    /** Text a new code to the same number. */
+    resend(): Promise<boolean>;
+    /** Check the code the member typed. */
+    confirm(code: string): Promise<boolean>;
+    /** Back to the number step ("use a different number"); any code in flight is abandoned. */
+    changeNumber(): void;
+    /** From `optedOut`, start a new opt-in. Withdrawing never locks a member out of coming back. */
+    reenroll(): void;
+    /** Choose the pet texts are about. The step does not change; only `savingPet` and the identity do. */
+    selectPet(petRef: PetRef): Promise<boolean>;
+    /** Withdraw consent and stop texts. */
+    optOut(): Promise<boolean>;
+    /** Stop notifying; any settlement after this is dropped. */
+    dispose(): void;
+}
+
+type EverfurTextingViewStatus = 'signedOut' | 'unavailable' | TextingSnapshot['phase'];
+interface EverfurTextingState {
+    readonly status: EverfurTextingViewStatus;
+    /** The tenant's public texting profile, or null when it has none. */
+    readonly profile: EverfurTextingProfile | null;
+    /** The controller's snapshot (identity, outstanding code, last refusal). */
+    readonly snapshot: TextingSnapshot;
+    /** Text a code to what the member typed. Refuses (settles false) for a number `validateTextingPhone` rejects. */
+    start(phone: string): Promise<boolean>;
+    resend(): Promise<boolean>;
+    confirm(code: string): Promise<boolean>;
+    changeNumber(): void;
+    reenroll(): void;
+    selectPet(petRef: PetRef): Promise<boolean>;
+    optOut(): Promise<boolean>;
+    /** Read the identity again (the way out of `failed`). */
+    refresh(): Promise<void>;
+}
+/** Why a member's input is not ready to send, or null when it is. */
+type EverfurTextingInputProblem = 'phoneInvalid' | 'consentRequired' | 'codeInvalidFormat';
+/** The opt-in's pre-flight: a +1 number and a ticked consent box, before any request is spent. */
+declare function validateTextingEnroll(phone: string, consented: boolean): EverfurTextingInputProblem | null;
+/** The surface asks for six digits, as the consumer screen does. */
+declare const TEXTING_UI_CODE_LENGTH = 6;
+declare function validateTextingCode(code: string): EverfurTextingInputProblem | null;
+/** The tenant's parsed texting profile, or null. Re-parses only when the verdict carries a new blob. */
+declare function useEverfurTextingProfile(): EverfurTextingProfile | null;
+/** The texting repository bound to the runtime under your provider, for a partner's own UI. */
+declare function useEverfurTextingRepository(): TextingRepository;
+/** The member's texting opt-in, step by step. `EverfurTextingOptIn` renders it on either host. */
+declare function useEverfurTexting(): EverfurTextingState;
+
+/**
+ * The line for a refused step. The consumer deck's own words per refusal; never the raw server message. For a refused
+ * code, pass the snapshot's `codeRefusal` so a typo, an expired code and a used-up code read differently; without it
+ * (or when the controller could not tell) the line is the deck's generic "request a new one".
+ */
+declare function textingErrorText(error: EverfurError, action: TextingAction | null, codeRefusal?: TextingCodeRefusal | null, copy?: TextingCopy): string;
+/** The support line under a refusal, when the server named the request. Null otherwise. */
+declare function textingSupportText(error: EverfurError, copy?: TextingCopy): string | null;
+/** The line for input the surface refused before any request. */
+declare function textingInputProblemText(problem: EverfurTextingInputProblem, copy?: TextingCopy): string;
+/**
+ * The opted-out body: the brand STOP line for a member who texted STOP, the consumer's turn-off line for one who
+ * turned texts off in the app. The server tells them apart without a field of its own: an in-app turn-off revokes the
+ * identity, so `opted_out` comes back with no number (and the SDK's own turn-off settles to that shape), while a STOP
+ * keeps the live identity and its masked number (EFBackend partner_sms_identity.py `partner_status`).
+ */
+declare function textingOptedOutBody(identity: EverfurTextingIdentity | null, brand: string, copy?: TextingCopy, brandCopy?: TextingBrandCopy): string;
+/** A +1 E.164 number as a member reads it: `+14155550134` becomes `(415) 555-0134`. Anything else is unchanged. */
+declare function formatTextingPhone(e164: string | null): string;
+
+export { isE164 as A, parseTextingProfile as B, COPY_PLACEHOLDER_PREFIX as C, textingErrorText as D, type EverfurTextingViewStatus as E, textingIdentityFromWire as F, textingInputProblemText as G, textingOptedOutBody as H, textingReasonOf as I, textingSupportText as J, toTextingE164 as K, useEverfurTexting as L, useEverfurTextingProfile as M, useEverfurTextingRepository as N, validateTextingCode as O, validateTextingEnroll as P, type TextingCopy as T, type TextingBrandCopy as a, EVERFUR_TEXTING_STATUSES as b, type EverfurTextingChallenge as c, type EverfurTextingIdentity as d, type EverfurTextingInputProblem as e, type EverfurTextingProfile as f, type EverfurTextingReason as g, type EverfurTextingState as h, type EverfurTextingStatus as i, type EverfurTextingVerificationInput as j, TEXTING_BRAND_COPY as k, TEXTING_CODE_PATTERN as l, TEXTING_COPY as m, TEXTING_COPY_PLACEHOLDERS as n, TEXTING_UI_CODE_LENGTH as o, type TextingAction as p, type TextingCodeRefusal as q, TextingController as r, type TextingPhase as s, type TextingRepository as t, type TextingRepositoryDeps as u, type TextingRuntime as v, type TextingSnapshot as w, createTextingRepository as x, createTextingRepositoryOver as y, formatTextingPhone as z };

package/dist/optInView.d-acKpV8V2.d.ts

@@ -0,0 +1,325 @@
+import { E as EverfurError } from './EverfurError.d-8NHtlgzA.js';
+import { E as EverfurResult } from './EverfurResult.d-D_-254ZY.js';
+import { R as RequestFunnel } from './requestFunnel.d-CXUMPw1K.js';
+import { A as AuthContext } from './identity.d-DzTijonw.js';
+import { P as PetRef, U as UserRef } from './ids.d-B2GAAifq.js';
+import { E as ErrorPolicyPort } from './ErrorPolicyPort.d-68yrE3BE.js';
+
+/** The marker a placeholder string carries, so a test (and a reviewer) can find every one. */
+declare const COPY_PLACEHOLDER_PREFIX = "[copy needed: ";
+declare const TEXTING_COPY: Readonly<{
+    loading: "Loading";
+    retry: "Try again";
+    signedOut: "Sign in required";
+    phoneLabel: "Mobile number";
+    phoneHint: "We'll text a 6-digit code to confirm it's you.";
+    phoneInvalid: "That doesn't look like a valid number. Check it and the country, then try again.";
+    consentRequired: "Please agree to receive SMS messages to continue.";
+    sendCode: "Send code";
+    sendingCode: "Sending code";
+    codeTitle: "Enter your code";
+    /** Followed by the number, which is data, not copy. */
+    codeSentTo: "We texted a 6-digit code to";
+    codeLabel: "6-digit code";
+    codeInvalidFormat: "Enter all 6 digits of the code.";
+    confirmCode: "Verify";
+    confirmingCode: "Verifying";
+    verificationInvalid: "That code is no longer valid. Request a new one.";
+    /** everfur-frontend app/product/sms-chat/copy.ts:73, for a code refused after its `expires_at`. */
+    codeExpired: "This code has expired. Request a new one.";
+    requestNewCode: "Request a new code";
+    /** everfur-frontend app/product/sms-chat/copy.ts:74, for 429 `verification_phone_limit` (this number's daily codes). */
+    noResendsLeft: "You've requested the maximum number of codes. Please try again later or contact support.";
+    changeNumber: "Use a different number";
+    defaultPetLabel: "Default pet for SMS";
+    noPetSelected: "Choose a pet";
+    savePet: "Save";
+    savingPet: "Saving";
+    petSaved: "Saved";
+    petIneligible: "That pet can't be selected anymore. Please choose another.";
+    optedOutTitle: "SMS paused";
+    verifiedTitle: "SMS Chat is on";
+    disable: "Turn off SMS Chat";
+    disabling: "Turning off";
+    disableConfirmTitle: "Turn off SMS Chat?";
+    disableConfirmBody: "We'll stop texting this number. You can turn it back on anytime.";
+    disableConfirm: "Turn off";
+    disableCancel: "Keep it on";
+    unavailableTitle: "SMS Chat isn't available yet";
+    unavailableBody: "We're still setting it up. Check back soon.";
+    phoneAlreadyLinked: "This number is already linked to another Everfur account. Contact support and we'll move it for you.";
+    providerFailed: "We couldn't send the text. Please try again.";
+    genericFailure: "That didn't go through. Please try again.";
+    /** Followed by the request id, for a support conversation. */
+    supportReference: "Support reference:";
+    /**
+     * 403 `phone_country_not_allowed`, a valid number from a country the tenant does not text. The consumer screen
+     * refuses a valid number whose own country is outside its list (everfur-frontend app/product/sms-chat/phone.ts:36)
+     * with this line (`phoneInvalid`, copy.ts:60, via SmsChatEnrollment.tsx:78-80), which points at the country.
+     */
+    phoneCountryNotAllowed: "That doesn't look like a valid number. Check it and the country, then try again.";
+    /**
+     * 429 `verification_tenant_limit`, the tenant's hourly ceiling on codes: not the member's doing, and it clears.
+     * everfur-frontend app/product/sms-chat/copy.ts:109 `temporarilyUnavailable` (everfur-mobile copy.ts:108).
+     */
+    verificationBusy: "SMS Chat is temporarily unavailable. Please try again in a few minutes.";
+    /**
+     * The label in front of the tenant profile's help contact, so the line reads "Help: hello@everfur.com" exactly as
+     * the owner-approved HELP reply does (EFBackend sms_chat_reply_copy.py:262 and :276, and the partner default
+     * partner_sms_profile.py:101).
+     */
+    helpContactLabel: "Help:";
+    /**
+     * The button that starts a new opt-in after a member opted out. The consumer's own "start SMS Chat" control:
+     * everfur-frontend copy.ts:118 `promptAccept`, the /sms page call to action (SmsOptInPage.tsx:75), everfur-mobile
+     * copy.ts:121.
+     */
+    reenroll: "Turn on SMS Chat";
+    /**
+     * The opted-out body for a member who turned texts off in the app (not by texting STOP, which keeps the brand STOP
+     * line). The consumer's approved words for that same choice: everfur-frontend copy.ts:98 `disableConfirmBody`
+     * (everfur-mobile copy.ts:102).
+     */
+    optedOutByMemberBody: "We'll stop texting this number. You can turn it back on anytime.";
+    codeWrong: "That code didn't work. Check it and try again.";
+}>;
+/** ADAPTED from the consumer deck: "Everfur" becomes the tenant's brand name. Listed for approval. */
+declare const TEXTING_BRAND_COPY: Readonly<{
+    /** consumer `introTitle`: 'Chat with Everfur by text' */
+    introTitle: (brand: string) => string;
+    /** consumer `introBody` */
+    introBody: (brand: string) => string;
+    /** consumer `statusActive`: 'You can text Everfur anytime from this number.' */
+    statusActive: (brand: string) => string;
+    /** consumer `optedOutBody` */
+    optedOutBody: (brand: string) => string;
+}>;
+/** Every placeholder key in `TEXTING_COPY`, so the list a reviewer approves cannot drift from the file. */
+declare const TEXTING_COPY_PLACEHOLDERS: readonly (keyof typeof TEXTING_COPY)[];
+/** Every string the texting opt-in shows that a partner may reword (`EverfurTextingOptIn copy=`). */
+type TextingCopy = {
+    readonly [K in keyof typeof TEXTING_COPY]: string;
+};
+/** The brand-named lines (`EverfurTextingOptIn brandCopy=`): each takes the tenant's brand name. */
+type TextingBrandCopy = {
+    readonly [K in keyof typeof TEXTING_BRAND_COPY]: (brand: string) => string;
+};
+
+/** The tenant's public texting profile, exactly as the console published it. */
+interface EverfurTextingProfile {
+    /** The name the texts, the consent words and the STOP/HELP replies use. */
+    readonly brandName: string;
+    /** The consent words the member ticks, verbatim. The server stores a digest of exactly these words. */
+    readonly consentText: string;
+    /** The version of `consentText`; sent back with the verification so the grant names what the member saw. */
+    readonly consentVersion: string;
+    /** Where a member gets help (a phone, an address or a URL as the tenant set it), or null. */
+    readonly helpContact: string | null;
+    /**
+     * EFBackend's `status_is_live`. There is no tester-only stage any more: a draft or live tenant admits every member,
+     * and only a tenant staff suspended refuses each number with `sms_not_live`, which the surface words as SMS Chat
+     * not being available. The surface draws no banner of its own for this flag.
+     */
+    readonly isLive: boolean;
+}
+/**
+ * Parse an untrusted `sms_profile_public` blob. Null when it is absent or carries no brand, consent words or
+ * consent version (the three things an opt-in cannot do without). `status_is_live` reads true only for the
+ * literal `true`: a missing flag is the not-live side, which refuses more, never less. Never throws.
+ */
+declare function parseTextingProfile(raw: unknown): EverfurTextingProfile | null;
+/**
+ * A +1 (United States or Canada) number as E.164, or null. Takes what a member types: `(415) 555-0134`,
+ * `415.555.0134`, `1 415 555 0134` or `+1 415 555 0134`. A North American number is ten digits whose area code and
+ * exchange both start 2 to 9; anything else (another country code, too few digits, letters) is null, so the
+ * surface refuses it before the wire instead of spending a verification on it.
+ */
+declare function toTextingE164(input: string): string | null;
+/** True for a string already in E.164 form (`+` and 8 to 15 digits). */
+declare function isE164(value: unknown): value is string;
+
+/** The identity states the server reports. An unknown value reads as `none`: nothing on record we can explain. */
+declare const EVERFUR_TEXTING_STATUSES: readonly ["none", "pending", "verified", "opted_out"];
+type EverfurTextingStatus = (typeof EVERFUR_TEXTING_STATUSES)[number];
+/** The member's texting identity. The raw number never comes back; `phoneMasked` is what Everfur shows anywhere. */
+interface EverfurTextingIdentity {
+    readonly status: EverfurTextingStatus;
+    readonly phoneMasked: string | null;
+    /** The consent version on record, or null. */
+    readonly consentVersion: string | null;
+    /** The pet texts are about, or null when none is chosen. */
+    readonly selectedPetRef: PetRef | null;
+}
+/** An outstanding code, as the server issued it. */
+interface EverfurTextingChallenge {
+    readonly challengeId: string;
+    /** ISO 8601, or null when the server did not say. */
+    readonly expiresAt: string | null;
+    /**
+     * How many wrong codes the server still accepts for this challenge, as it said when it issued the code
+     * (`attempts_remaining`), or null when it did not say. The controller counts it down on each refused code.
+     */
+    readonly attemptsRemaining: number | null;
+}
+interface EverfurTextingVerificationInput {
+    /** E.164 (`+14155550134`). `toTextingE164` turns what a member typed into this. */
+    readonly phoneE164: string;
+    /** The tenant profile's `consentVersion`: the words the member ticked. The server refuses any other. */
+    readonly consentVersion: string;
+}
+/** A code is digits only; the consumer screen asks for six. */
+declare const TEXTING_CODE_PATTERN: RegExp;
+interface TextingRepository {
+    /** `GET /widget/v1/me/sms-identity`. Settles; never throws. */
+    read(opts?: {
+        readonly signal?: AbortSignal;
+    }): Promise<EverfurResult<EverfurTextingIdentity>>;
+    /** `POST .../verification`: text a code to the number. Sent once, never replayed. */
+    startVerification(input: EverfurTextingVerificationInput): Promise<EverfurResult<EverfurTextingChallenge>>;
+    /** `POST .../verification/confirm`: spend the code. Sent once, never replayed. */
+    confirmVerification(challengeId: string, code: string): Promise<EverfurResult<EverfurTextingIdentity>>;
+    /** `PUT .../selected-pet`: the pet texts are about. */
+    selectPet(petRef: PetRef): Promise<EverfurResult<EverfurTextingIdentity>>;
+    /** `DELETE /widget/v1/me/sms-identity`: withdraw consent and stop texts. As available as opting in. */
+    optOut(): Promise<EverfurResult<EverfurTextingIdentity>>;
+}
+/** The part of the runtime this repository needs (`useEverfurContext().runtime` satisfies it). */
+interface TextingRuntime {
+    readonly isDisposed: boolean;
+    readonly registry: {
+        readonly services: {
+            authFor(userRef: UserRef | null): AuthContext;
+            readonly errorPolicy: ErrorPolicyPort | undefined;
+        };
+    };
+}
+/** The lower seam: one auth context, or an already-built funnel (tests). */
+interface TextingRepositoryDeps {
+    readonly auth: AuthContext;
+    readonly errorPolicy?: ErrorPolicyPort;
+    readonly funnel?: RequestFunnel;
+}
+/** The reason codes a surface branches on, by meaning. Read with `textingReasonOf`. */
+type EverfurTextingReason = 'not_live' | 'code_invalid' | 'phone_linked' | 'pet_ineligible' | 'no_identity' | 'consent_changed' | 'session_required' | 'country_not_allowed' | 'phone_code_limit' | 'tenant_code_limit';
+/** Which texting refusal an error is, or null for any other failure. */
+declare function textingReasonOf(error: EverfurError | null | undefined): EverfurTextingReason | null;
+/** The allowlist mapper for one identity body. `status` is REQUIRED: a body without one is not an identity. */
+declare function textingIdentityFromWire(raw: unknown): EverfurTextingIdentity | null;
+/** The repository over the runtime under your provider. Auth is read at CALL time; a disposed runtime sends nothing. */
+declare function createTextingRepository(runtime: TextingRuntime): TextingRepository;
+/** The same repository over one auth context (or an injected funnel). Internal seam, for deterministic tests. */
+declare function createTextingRepositoryOver(deps: TextingRepositoryDeps): TextingRepository;
+
+type TextingPhase = 'loading' | 'failed' | 'enroll' | 'requesting' | 'code' | 'confirming' | 'verified' | 'optingOut' | 'optedOut';
+/** What a refused code most likely was. See the header. */
+type TextingCodeRefusal = 'wrong' | 'expired' | 'spent';
+/** Which verb a refusal belongs to, so a surface retries the right thing. */
+type TextingAction = 'read' | 'start' | 'confirm' | 'selectPet' | 'optOut';
+interface TextingSnapshot {
+    readonly phase: TextingPhase;
+    /** The identity as the server last reported it, or null before the first read. */
+    readonly identity: EverfurTextingIdentity | null;
+    /** The outstanding code, while one is out. */
+    readonly challenge: EverfurTextingChallenge | null;
+    /** The number the current code went to (what the member typed, as E.164), for "request a new code". */
+    readonly phoneE164: string | null;
+    /** The last refusal, or null. `error.displayMessage` is safe to show. */
+    readonly error: EverfurError | null;
+    readonly failedAction: TextingAction | null;
+    /** For a refused code (`failedAction` 'confirm'), what it most likely was; null otherwise. */
+    readonly codeRefusal: TextingCodeRefusal | null;
+    /** True while a pet choice is being saved. */
+    readonly savingPet: boolean;
+    /**
+     * True while `requesting` is a new code for the code step ("Request a new code"), so a surface keeps the code step
+     * on screen with its link busy instead of flipping back to the number (audit 2026-10-20). False for a first send.
+     */
+    readonly resending: boolean;
+}
+declare class TextingController {
+    private readonly repository;
+    private readonly now;
+    private snapshot;
+    private readonly listeners;
+    /** Bumped by every step change; a settlement for an older generation is dropped. */
+    private generation;
+    private consentVersion;
+    private disposed;
+    /** `now` is the clock a refused code is judged against (epoch ms); tests pass their own. */
+    constructor(repository: TextingRepository, now?: () => number);
+    readonly subscribe: (listener: () => void) => (() => void);
+    readonly getSnapshot: () => TextingSnapshot;
+    private set;
+    /** Read the member's identity (the first load, and the way out of `failed`). */
+    load(): Promise<void>;
+    /** Text a code to `phoneE164` for the consent words of `consentVersion`. */
+    start(phoneE164: string, consentVersion: string): Promise<boolean>;
+    /** Text a new code to the same number. */
+    resend(): Promise<boolean>;
+    /** Check the code the member typed. */
+    confirm(code: string): Promise<boolean>;
+    /** Back to the number step ("use a different number"); any code in flight is abandoned. */
+    changeNumber(): void;
+    /** From `optedOut`, start a new opt-in. Withdrawing never locks a member out of coming back. */
+    reenroll(): void;
+    /** Choose the pet texts are about. The step does not change; only `savingPet` and the identity do. */
+    selectPet(petRef: PetRef): Promise<boolean>;
+    /** Withdraw consent and stop texts. */
+    optOut(): Promise<boolean>;
+    /** Stop notifying; any settlement after this is dropped. */
+    dispose(): void;
+}
+
+type EverfurTextingViewStatus = 'signedOut' | 'unavailable' | TextingSnapshot['phase'];
+interface EverfurTextingState {
+    readonly status: EverfurTextingViewStatus;
+    /** The tenant's public texting profile, or null when it has none. */
+    readonly profile: EverfurTextingProfile | null;
+    /** The controller's snapshot (identity, outstanding code, last refusal). */
+    readonly snapshot: TextingSnapshot;
+    /** Text a code to what the member typed. Refuses (settles false) for a number `validateTextingPhone` rejects. */
+    start(phone: string): Promise<boolean>;
+    resend(): Promise<boolean>;
+    confirm(code: string): Promise<boolean>;
+    changeNumber(): void;
+    reenroll(): void;
+    selectPet(petRef: PetRef): Promise<boolean>;
+    optOut(): Promise<boolean>;
+    /** Read the identity again (the way out of `failed`). */
+    refresh(): Promise<void>;
+}
+/** Why a member's input is not ready to send, or null when it is. */
+type EverfurTextingInputProblem = 'phoneInvalid' | 'consentRequired' | 'codeInvalidFormat';
+/** The opt-in's pre-flight: a +1 number and a ticked consent box, before any request is spent. */
+declare function validateTextingEnroll(phone: string, consented: boolean): EverfurTextingInputProblem | null;
+/** The surface asks for six digits, as the consumer screen does. */
+declare const TEXTING_UI_CODE_LENGTH = 6;
+declare function validateTextingCode(code: string): EverfurTextingInputProblem | null;
+/** The tenant's parsed texting profile, or null. Re-parses only when the verdict carries a new blob. */
+declare function useEverfurTextingProfile(): EverfurTextingProfile | null;
+/** The texting repository bound to the runtime under your provider, for a partner's own UI. */
+declare function useEverfurTextingRepository(): TextingRepository;
+/** The member's texting opt-in, step by step. `EverfurTextingOptIn` renders it on either host. */
+declare function useEverfurTexting(): EverfurTextingState;
+
+/**
+ * The line for a refused step. The consumer deck's own words per refusal; never the raw server message. For a refused
+ * code, pass the snapshot's `codeRefusal` so a typo, an expired code and a used-up code read differently; without it
+ * (or when the controller could not tell) the line is the deck's generic "request a new one".
+ */
+declare function textingErrorText(error: EverfurError, action: TextingAction | null, codeRefusal?: TextingCodeRefusal | null, copy?: TextingCopy): string;
+/** The support line under a refusal, when the server named the request. Null otherwise. */
+declare function textingSupportText(error: EverfurError, copy?: TextingCopy): string | null;
+/** The line for input the surface refused before any request. */
+declare function textingInputProblemText(problem: EverfurTextingInputProblem, copy?: TextingCopy): string;
+/**
+ * The opted-out body: the brand STOP line for a member who texted STOP, the consumer's turn-off line for one who
+ * turned texts off in the app. The server tells them apart without a field of its own: an in-app turn-off revokes the
+ * identity, so `opted_out` comes back with no number (and the SDK's own turn-off settles to that shape), while a STOP
+ * keeps the live identity and its masked number (EFBackend partner_sms_identity.py `partner_status`).
+ */
+declare function textingOptedOutBody(identity: EverfurTextingIdentity | null, brand: string, copy?: TextingCopy, brandCopy?: TextingBrandCopy): string;
+/** A +1 E.164 number as a member reads it: `+14155550134` becomes `(415) 555-0134`. Anything else is unchanged. */
+declare function formatTextingPhone(e164: string | null): string;
+
+export { isE164 as A, parseTextingProfile as B, COPY_PLACEHOLDER_PREFIX as C, textingErrorText as D, type EverfurTextingViewStatus as E, textingIdentityFromWire as F, textingInputProblemText as G, textingOptedOutBody as H, textingReasonOf as I, textingSupportText as J, toTextingE164 as K, useEverfurTexting as L, useEverfurTextingProfile as M, useEverfurTextingRepository as N, validateTextingCode as O, validateTextingEnroll as P, type TextingCopy as T, type TextingBrandCopy as a, EVERFUR_TEXTING_STATUSES as b, type EverfurTextingChallenge as c, type EverfurTextingIdentity as d, type EverfurTextingInputProblem as e, type EverfurTextingProfile as f, type EverfurTextingReason as g, type EverfurTextingState as h, type EverfurTextingStatus as i, type EverfurTextingVerificationInput as j, TEXTING_BRAND_COPY as k, TEXTING_CODE_PATTERN as l, TEXTING_COPY as m, TEXTING_COPY_PLACEHOLDERS as n, TEXTING_UI_CODE_LENGTH as o, type TextingAction as p, type TextingCodeRefusal as q, TextingController as r, type TextingPhase as s, type TextingRepository as t, type TextingRepositoryDeps as u, type TextingRuntime as v, type TextingSnapshot as w, createTextingRepository as x, createTextingRepositoryOver as y, formatTextingPhone as z };