@everfur/sdk 0.13.0 → 0.15.0

package/dist/{requestFunnel.d-DWQQpjFR.d.cts → requestFunnel.d-CR4akGCY.d.cts}

@@ -1,8 +1,8 @@
 import { b as EverfurErrorCode } from './EverfurError.d-8NHtlgzA.cjs';
 import { E as ErrorPolicyPort } from './ErrorPolicyPort.d-DirW9hgO.cjs';
 import { E as EverfurResult } from './EverfurResult.d-BFH-3s6E.cjs';
-import { d as EverfurRequest, F as Frame } from './config.d-BR3DT9ho.cjs';
-import { A as AuthContext } from './identity.d-60LeJt_s.cjs';
+import { d as EverfurRequest, F as Frame } from './config.d-C0WgjutL.cjs';
+import { A as AuthContext } from './identity.d-CioQhZrq.cjs';
 
 /** Why the funnel stopped, or kept going. Every settle and every retry names one. */
 type FunnelRetryReason = 'ok' | 'aborted' | 'terminal-code' | 'attempts-exhausted' | 'daily-quota-exhausted' | 'burst-throttle' | 'retryable-code' | 'server-reset-beyond-budget';

package/dist/{requestFunnel.d-CXUMPw1K.d.ts → requestFunnel.d-DFf9C__p.d.ts}

@@ -1,8 +1,8 @@
 import { b as EverfurErrorCode } from './EverfurError.d-8NHtlgzA.js';
 import { E as ErrorPolicyPort } from './ErrorPolicyPort.d-68yrE3BE.js';
 import { E as EverfurResult } from './EverfurResult.d-D_-254ZY.js';
-import { d as EverfurRequest, F as Frame } from './config.d-Dy6igYlH.js';
-import { A as AuthContext } from './identity.d-DzTijonw.js';
+import { d as EverfurRequest, F as Frame } from './config.d-zd2eTb2L.js';
+import { A as AuthContext } from './identity.d-BksOEa6m.js';
 
 /** Why the funnel stopped, or kept going. Every settle and every retry names one. */
 type FunnelRetryReason = 'ok' | 'aborted' | 'terminal-code' | 'attempts-exhausted' | 'daily-quota-exhausted' | 'burst-throttle' | 'retryable-code' | 'server-reset-beyond-budget';

package/dist/{resolve.d-jI8FmBj3.d.cts → resolve.d-CoQWUy1Y.d.cts}

@@ -89,4 +89,4 @@ interface DecideOptions {
  */
 declare function decideCapability(name: CapabilityName, decisions: readonly EntitlementDecision[], opts?: DecideOptions): CapabilityDecision;
 
-export { type CapabilityDecision as C, type DisabledLevel as D, type EntitlementDecision as E, type LevelGrant as L, type ResolvedEntitlements as R, type CapabilityName as a, type CapabilityDisabled as b, type DecideOptions as c, decideCapability as d, deniedDecisionsFor as e, resolveEntitlements as f, requires as r };
+export { type CapabilityName as C, type DisabledLevel as D, type EntitlementDecision as E, type LevelGrant as L, type ResolvedEntitlements as R, type CapabilityDecision as a, type CapabilityDisabled as b, type DecideOptions as c, decideCapability as d, deniedDecisionsFor as e, resolveEntitlements as f, requires as r };

package/dist/{resolve.d-jI8FmBj3.d.ts → resolve.d-CoQWUy1Y.d.ts}

@@ -89,4 +89,4 @@ interface DecideOptions {
  */
 declare function decideCapability(name: CapabilityName, decisions: readonly EntitlementDecision[], opts?: DecideOptions): CapabilityDecision;
 
-export { type CapabilityDecision as C, type DisabledLevel as D, type EntitlementDecision as E, type LevelGrant as L, type ResolvedEntitlements as R, type CapabilityName as a, type CapabilityDisabled as b, type DecideOptions as c, decideCapability as d, deniedDecisionsFor as e, resolveEntitlements as f, requires as r };
+export { type CapabilityName as C, type DisabledLevel as D, type EntitlementDecision as E, type LevelGrant as L, type ResolvedEntitlements as R, type CapabilityDecision as a, type CapabilityDisabled as b, type DecideOptions as c, decideCapability as d, deniedDecisionsFor as e, resolveEntitlements as f, requires as r };

package/dist/{runtimeTypes.d-4yFNNuYR.d.ts → runtimeTypes.d-BqBOrZxa.d.ts}

@@ -1,13 +1,13 @@
-import { E as EntitlementDecision, a as CapabilityName } from './resolve.d-jI8FmBj3.js';
-import { P as PetProfileInput, R as RegisteredPet, a as PetProfilePatch } from './petsRepository.d-BuGHymNx.js';
+import { E as EntitlementDecision, C as CapabilityName } from './resolve.d-CoQWUy1Y.js';
+import { P as PetProfileInput, R as RegisteredPet, a as PetProfilePatch } from './petsRepository.d-Ba3xhJcj.js';
 import { E as EverfurResult } from './EverfurResult.d-D_-254ZY.js';
-import { E as EverfurThemeInput, C as ClientBranding } from './branding.d-OIGLbQeM.js';
-import { A as AuthContext, T as TokenProvider } from './identity.d-DzTijonw.js';
+import { E as EverfurThemeInput, C as ClientBranding } from './branding.d-y6c0UwhE.js';
+import { A as AuthContext, T as TokenProvider } from './identity.d-BksOEa6m.js';
 import { U as UserRef, P as PetRef, C as ConversationId } from './ids.d-B2GAAifq.js';
-import { T as TransportPort } from './config.d-Dy6igYlH.js';
+import { T as TransportPort } from './config.d-zd2eTb2L.js';
 import { I as ImageCachePort, K as KvPort } from './cacheEpoch.d-DknKn3S0.js';
 import { E as ErrorPolicyPort } from './ErrorPolicyPort.d-68yrE3BE.js';
-import { U as UploadPort, n as ChatController } from './ports.d-COIyN624.js';
+import { U as UploadPort, n as ChatController } from './ports.d-BDtwHxmW.js';
 import { C as CameraPort } from './CameraPort.d-Cv31Pz7g.js';
 import { T as TelemetryPort } from './TelemetryPort.d-BDNr00hu.js';
 import { U as UploadTransport } from './ports.d-BX4f4UsB.js';

package/dist/{runtimeTypes.d-D6N_fhxx.d.cts → runtimeTypes.d-CHdH-y2c.d.cts}

@@ -1,13 +1,13 @@
-import { E as EntitlementDecision, a as CapabilityName } from './resolve.d-jI8FmBj3.cjs';
-import { P as PetProfileInput, R as RegisteredPet, a as PetProfilePatch } from './petsRepository.d-lp1BHRqM.cjs';
+import { E as EntitlementDecision, C as CapabilityName } from './resolve.d-CoQWUy1Y.cjs';
+import { P as PetProfileInput, R as RegisteredPet, a as PetProfilePatch } from './petsRepository.d-B5DWzU7C.cjs';
 import { E as EverfurResult } from './EverfurResult.d-BFH-3s6E.cjs';
-import { E as EverfurThemeInput, C as ClientBranding } from './branding.d-DI8S400y.cjs';
-import { A as AuthContext, T as TokenProvider } from './identity.d-60LeJt_s.cjs';
+import { E as EverfurThemeInput, C as ClientBranding } from './branding.d-Bbc6p1XY.cjs';
+import { A as AuthContext, T as TokenProvider } from './identity.d-CioQhZrq.cjs';
 import { U as UserRef, P as PetRef, C as ConversationId } from './ids.d-B2GAAifq.cjs';
-import { T as TransportPort } from './config.d-BR3DT9ho.cjs';
+import { T as TransportPort } from './config.d-C0WgjutL.cjs';
 import { I as ImageCachePort, K as KvPort } from './cacheEpoch.d-DknKn3S0.cjs';
 import { E as ErrorPolicyPort } from './ErrorPolicyPort.d-DirW9hgO.cjs';
-import { U as UploadPort, n as ChatController } from './ports.d-CEROoqnA.cjs';
+import { U as UploadPort, n as ChatController } from './ports.d-gZNTn8Qf.cjs';
 import { C as CameraPort } from './CameraPort.d-Cv31Pz7g.cjs';
 import { T as TelemetryPort } from './TelemetryPort.d-BDNr00hu.cjs';
 import { U as UploadTransport } from './ports.d-BX4f4UsB.cjs';

package/dist/{useRecordsDepth.d-sAq2Qkhr.d.cts → screenProps.d-B1dIANI0.d.cts}

@@ -1,68 +1,8 @@
-import { R as RecordsRequestId, P as PetRef } from './ids.d-B2GAAifq.cjs';
-import { $ as RecordsClinicSearchInput, a0 as RecordsClinicSearchPage, a1 as RecordsRecentClinicsInput, a2 as RecordsAuthorizationCopy, a3 as CreateClinicRequestInput, a4 as RecordsSignatureUploadPolicy, l as RecordsClinic, M as RecordsClinicBatch, N as RecordsClinicBatchClient, m as RecordsDepthClient } from './depth.d-CjPGVPDL.cjs';
-import { E as EverfurResult } from './EverfurResult.d-BFH-3s6E.cjs';
-import { j as RecordsRequestGroupView, d as RecordsRequestView } from './models.d-BnLm3VAA.cjs';
+import { P as PetRef, R as RecordsRequestId } from './ids.d-B2GAAifq.cjs';
+import { R as RecordsClinicBatch, a as RecordsClinicBatchClient } from './clinicBatch.d-BLpbpS51.cjs';
+import { C as CaptureRecordsSignature, R as RecordsClinicController } from './clinicRequestProps.d-1dCtouGA.cjs';
+import { R as RecordsClinic, c as RecordsClinicSearchInput } from './clinicModels.d-BXgKZqDb.cjs';
 import { a as RecordsAskHandler } from './recordsAsk.d-C5CGSi3j.cjs';
-import { E as EverfurError } from './EverfurError.d-8NHtlgzA.cjs';
-
-interface RecordsClinicController {
-    searchClinics(input?: RecordsClinicSearchInput): Promise<EverfurResult<RecordsClinicSearchPage>>;
-    /** The clinics this member requested from before, most recent first: the picker's "recent" section. */
-    recentClinics(input?: RecordsRecentClinicsInput): Promise<EverfurResult<RecordsClinicSearchPage>>;
-    /** A multi-clinic batch's rollup and members. Not found until Everfur switches the multi-clinic flag on. */
-    getRequestGroup(requestGroupId: string): Promise<EverfurResult<RecordsRequestGroupView>>;
-    getAuthorizationCopy(): Promise<EverfurResult<RecordsAuthorizationCopy>>;
-    createClinicRequest(input: CreateClinicRequestInput): Promise<EverfurResult<RecordsRequestView>>;
-    retryRequest(id: RecordsRequestId): Promise<EverfurResult<RecordsRequestView>>;
-    revokeRequest(id: RecordsRequestId): Promise<EverfurResult<RecordsRequestView>>;
-    updateClinicEmail(id: RecordsRequestId, clinicEmail: string): Promise<EverfurResult<RecordsRequestView>>;
-    convertToUpload(id: RecordsRequestId): Promise<EverfurResult<RecordsRequestView>>;
-    /** Bytes are uploaded by the host directly to the returned multipart policy; never through the API. */
-    initiateSignatureUpload(fileSize: number): Promise<EverfurResult<RecordsSignatureUploadPolicy>>;
-    completeSignatureUpload(uploadId: string): Promise<EverfurResult<string>>;
-}
-
-/** The exact owner-visible scope at the moment the owner chooses to sign. */
-interface RecordsSignatureContext {
-    readonly petRef: PetRef;
-    readonly petName: string;
-    readonly ownerName: string;
-    readonly clinicName: string;
-    readonly authorizationVersion: string;
-    readonly scopeText: string;
-    /** Cancel native capture/upload when the signed-in user or active pet changes. */
-    readonly signal: AbortSignal;
-}
-/**
- * A captured signature: a registered signature id (the PNG uploaded through the initiate/complete APIs, the
- * consumer's own path, which keeps the bytes off the JSON body), or an inline PNG: the built-in React Native
- * pad's one-bit image (a few hundred bytes), or any built-in pad's PNG when the direct S3 POST was refused
- * (`signatureUploadFallback.ts`). The widget create path accepts it inline up to 2 MiB of base64.
- */
-type CapturedRecordsSignature = {
-    readonly signatureId: string;
-    readonly signaturePngBase64?: never;
-} | {
-    readonly signatureId?: never;
-    readonly signaturePngBase64: string;
-};
-/**
- * Capture explicitly at the moment the owner presses Send, after seeing the scope, and return the signature.
- * null means the owner cancelled. Prefer the registered id for anything but a tiny PNG.
- */
-type CaptureRecordsSignature = (context: RecordsSignatureContext) => Promise<CapturedRecordsSignature | null>;
-interface ClinicRequestBaseProps {
-    readonly petRef: PetRef;
-    /** Display name for this exact registered petRef; the server owns the final PDF identity. */
-    readonly petName: string;
-    /** Initial value only; the owner can visibly confirm or correct it before signing. */
-    readonly ownerName: string;
-    readonly onCaptureSignature?: CaptureRecordsSignature;
-    readonly onCreated?: (request: RecordsRequestView) => void;
-    readonly onClose?: () => void;
-    /** Host/test seam over the same signed-user controller contract. */
-    readonly controller?: RecordsClinicController;
-}
 
 /** One composed clinic of the batch (the consumer `ClinicRequestDraft`). */
 interface ClinicDraft {
@@ -216,30 +156,4 @@ interface RecordsScreenBaseProps extends RecordsHostSeams {
     readonly onBack?: () => void;
 }
 
-type RecordsDepthStatus = 'loading' | 'empty' | 'error' | 'populated';
-/** One depth read as a render state. `withheld` (no consent, or a fail-closed parse) renders nothing. */
-interface UseRecordsDepthState<T> {
-    readonly status: RecordsDepthStatus;
-    readonly value: T | null;
-    readonly error: EverfurError | null;
-    /**
-     * False once a read got the router's dark 404, which is how a tenant without `partner.records_full_depth_enabled`
-     * answers EVERY depth route. The state is then `empty` with no error, so the surface draws its own nothing
-     * instead of the generic failure leaf and its unusable `Try again`. True otherwise, including for a failure
-     * that never reached the server, which proves nothing about the tenant.
-     */
-    readonly available: boolean;
-    readonly refresh: () => void;
-}
-/** The signed member's depth client over the provider's auth; a surface with no user settles to accessDenied. */
-declare function useEverfurRecordsDepthClient(): RecordsDepthClient;
-/**
- * Run one depth read for the scoped pet on mount, and again on `refresh`. `isEmpty` decides between `empty`
- * and `populated`; a withheld answer is `populated` with `withheld:true`, which every depth surface renders as
- * nothing (never a partial record).
- */
-declare function useRecordsDepthRead<T extends {
-    readonly withheld: boolean;
-}>(petRef: PetRef, read: (client: RecordsDepthClient, petRef: PetRef) => Promise<EverfurResult<T>>, isEmpty: (value: T) => boolean, extraKey?: string): UseRecordsDepthState<T>;
-
-export { type ClinicDraft as C, type RecordsDepthStatus as R, type UseRecordsDepthState as U, type ClinicLocation as a, type RecordsHostSeams as b, type RecordsScreen as c, type RecordsScreenBaseProps as d, type RecordsUrlKind as e, useRecordsDepthRead as f, type RecordsClinicController as g, type CaptureRecordsSignature as h, type ClinicRequestBaseProps as i, type ClinicBatchBaseProps as j, type CapturedRecordsSignature as k, type RecordsNavAction as l, type RecordsNavState as m, type RecordsSignatureContext as n, type RegisterSignaturePng as o, currentRecordsScreen as p, initialRecordsNav as q, popRecordsNav as r, pushRecordsNav as s, recordsNavReducer as t, useEverfurRecordsDepthClient as u, replaceRecordsNav as v, resetRecordsNav as w, transitionRecordsNav as x };
+export { type ClinicDraft as C, type RecordsHostSeams as R, type ClinicLocation as a, type RecordsScreen as b, type RecordsScreenBaseProps as c, type RecordsUrlKind as d, type ClinicBatchBaseProps as e, type RecordsNavAction as f, type RecordsNavState as g, type RegisterSignaturePng as h, currentRecordsScreen as i, initialRecordsNav as j, pushRecordsNav as k, replaceRecordsNav as l, resetRecordsNav as m, popRecordsNav as p, recordsNavReducer as r, transitionRecordsNav as t };

package/dist/{useRecordsDepth.d-DFcCfiXm.d.ts → screenProps.d-CVqFJw-J.d.ts}

@@ -1,68 +1,8 @@
-import { R as RecordsRequestId, P as PetRef } from './ids.d-B2GAAifq.js';
-import { $ as RecordsClinicSearchInput, a0 as RecordsClinicSearchPage, a1 as RecordsRecentClinicsInput, a2 as RecordsAuthorizationCopy, a3 as CreateClinicRequestInput, a4 as RecordsSignatureUploadPolicy, l as RecordsClinic, M as RecordsClinicBatch, N as RecordsClinicBatchClient, m as RecordsDepthClient } from './depth.d-OSALbYM7.js';
-import { E as EverfurResult } from './EverfurResult.d-D_-254ZY.js';
-import { j as RecordsRequestGroupView, d as RecordsRequestView } from './models.d-BagXhafD.js';
+import { P as PetRef, R as RecordsRequestId } from './ids.d-B2GAAifq.js';
+import { R as RecordsClinicBatch, a as RecordsClinicBatchClient } from './clinicBatch.d-Byjx4y_W.js';
+import { C as CaptureRecordsSignature, R as RecordsClinicController } from './clinicRequestProps.d-CjsMg_OD.js';
+import { R as RecordsClinic, c as RecordsClinicSearchInput } from './clinicModels.d-CaS64-P-.js';
 import { a as RecordsAskHandler } from './recordsAsk.d-C5CGSi3j.js';
-import { E as EverfurError } from './EverfurError.d-8NHtlgzA.js';
-
-interface RecordsClinicController {
-    searchClinics(input?: RecordsClinicSearchInput): Promise<EverfurResult<RecordsClinicSearchPage>>;
-    /** The clinics this member requested from before, most recent first: the picker's "recent" section. */
-    recentClinics(input?: RecordsRecentClinicsInput): Promise<EverfurResult<RecordsClinicSearchPage>>;
-    /** A multi-clinic batch's rollup and members. Not found until Everfur switches the multi-clinic flag on. */
-    getRequestGroup(requestGroupId: string): Promise<EverfurResult<RecordsRequestGroupView>>;
-    getAuthorizationCopy(): Promise<EverfurResult<RecordsAuthorizationCopy>>;
-    createClinicRequest(input: CreateClinicRequestInput): Promise<EverfurResult<RecordsRequestView>>;
-    retryRequest(id: RecordsRequestId): Promise<EverfurResult<RecordsRequestView>>;
-    revokeRequest(id: RecordsRequestId): Promise<EverfurResult<RecordsRequestView>>;
-    updateClinicEmail(id: RecordsRequestId, clinicEmail: string): Promise<EverfurResult<RecordsRequestView>>;
-    convertToUpload(id: RecordsRequestId): Promise<EverfurResult<RecordsRequestView>>;
-    /** Bytes are uploaded by the host directly to the returned multipart policy; never through the API. */
-    initiateSignatureUpload(fileSize: number): Promise<EverfurResult<RecordsSignatureUploadPolicy>>;
-    completeSignatureUpload(uploadId: string): Promise<EverfurResult<string>>;
-}
-
-/** The exact owner-visible scope at the moment the owner chooses to sign. */
-interface RecordsSignatureContext {
-    readonly petRef: PetRef;
-    readonly petName: string;
-    readonly ownerName: string;
-    readonly clinicName: string;
-    readonly authorizationVersion: string;
-    readonly scopeText: string;
-    /** Cancel native capture/upload when the signed-in user or active pet changes. */
-    readonly signal: AbortSignal;
-}
-/**
- * A captured signature: a registered signature id (the PNG uploaded through the initiate/complete APIs, the
- * consumer's own path, which keeps the bytes off the JSON body), or an inline PNG: the built-in React Native
- * pad's one-bit image (a few hundred bytes), or any built-in pad's PNG when the direct S3 POST was refused
- * (`signatureUploadFallback.ts`). The widget create path accepts it inline up to 2 MiB of base64.
- */
-type CapturedRecordsSignature = {
-    readonly signatureId: string;
-    readonly signaturePngBase64?: never;
-} | {
-    readonly signatureId?: never;
-    readonly signaturePngBase64: string;
-};
-/**
- * Capture explicitly at the moment the owner presses Send, after seeing the scope, and return the signature.
- * null means the owner cancelled. Prefer the registered id for anything but a tiny PNG.
- */
-type CaptureRecordsSignature = (context: RecordsSignatureContext) => Promise<CapturedRecordsSignature | null>;
-interface ClinicRequestBaseProps {
-    readonly petRef: PetRef;
-    /** Display name for this exact registered petRef; the server owns the final PDF identity. */
-    readonly petName: string;
-    /** Initial value only; the owner can visibly confirm or correct it before signing. */
-    readonly ownerName: string;
-    readonly onCaptureSignature?: CaptureRecordsSignature;
-    readonly onCreated?: (request: RecordsRequestView) => void;
-    readonly onClose?: () => void;
-    /** Host/test seam over the same signed-user controller contract. */
-    readonly controller?: RecordsClinicController;
-}
 
 /** One composed clinic of the batch (the consumer `ClinicRequestDraft`). */
 interface ClinicDraft {
@@ -216,30 +156,4 @@ interface RecordsScreenBaseProps extends RecordsHostSeams {
     readonly onBack?: () => void;
 }
 
-type RecordsDepthStatus = 'loading' | 'empty' | 'error' | 'populated';
-/** One depth read as a render state. `withheld` (no consent, or a fail-closed parse) renders nothing. */
-interface UseRecordsDepthState<T> {
-    readonly status: RecordsDepthStatus;
-    readonly value: T | null;
-    readonly error: EverfurError | null;
-    /**
-     * False once a read got the router's dark 404, which is how a tenant without `partner.records_full_depth_enabled`
-     * answers EVERY depth route. The state is then `empty` with no error, so the surface draws its own nothing
-     * instead of the generic failure leaf and its unusable `Try again`. True otherwise, including for a failure
-     * that never reached the server, which proves nothing about the tenant.
-     */
-    readonly available: boolean;
-    readonly refresh: () => void;
-}
-/** The signed member's depth client over the provider's auth; a surface with no user settles to accessDenied. */
-declare function useEverfurRecordsDepthClient(): RecordsDepthClient;
-/**
- * Run one depth read for the scoped pet on mount, and again on `refresh`. `isEmpty` decides between `empty`
- * and `populated`; a withheld answer is `populated` with `withheld:true`, which every depth surface renders as
- * nothing (never a partial record).
- */
-declare function useRecordsDepthRead<T extends {
-    readonly withheld: boolean;
-}>(petRef: PetRef, read: (client: RecordsDepthClient, petRef: PetRef) => Promise<EverfurResult<T>>, isEmpty: (value: T) => boolean, extraKey?: string): UseRecordsDepthState<T>;
-
-export { type ClinicDraft as C, type RecordsDepthStatus as R, type UseRecordsDepthState as U, type ClinicLocation as a, type RecordsHostSeams as b, type RecordsScreen as c, type RecordsScreenBaseProps as d, type RecordsUrlKind as e, useRecordsDepthRead as f, type RecordsClinicController as g, type CaptureRecordsSignature as h, type ClinicRequestBaseProps as i, type ClinicBatchBaseProps as j, type CapturedRecordsSignature as k, type RecordsNavAction as l, type RecordsNavState as m, type RecordsSignatureContext as n, type RegisterSignaturePng as o, currentRecordsScreen as p, initialRecordsNav as q, popRecordsNav as r, pushRecordsNav as s, recordsNavReducer as t, useEverfurRecordsDepthClient as u, replaceRecordsNav as v, resetRecordsNav as w, transitionRecordsNav as x };
+export { type ClinicDraft as C, type RecordsHostSeams as R, type ClinicLocation as a, type RecordsScreen as b, type RecordsScreenBaseProps as c, type RecordsUrlKind as d, type ClinicBatchBaseProps as e, type RecordsNavAction as f, type RecordsNavState as g, type RegisterSignaturePng as h, currentRecordsScreen as i, initialRecordsNav as j, pushRecordsNav as k, replaceRecordsNav as l, resetRecordsNav as m, popRecordsNav as p, recordsNavReducer as r, transitionRecordsNav as t };

package/dist/server/events/index.cjs

@@ -1,6 +1,6 @@
 "use strict";var crypto=require("crypto");function ok(value,warning){/* @__PURE__ */
 return Object.freeze({ok:true,value:value})}function err(error){/* @__PURE__ */
-return Object.freeze({ok:false,error:error})}var EverfurConfigError=class _EverfurConfigError extends Error{constructor(kind,message){super(message),this.name="EverfurConfigError",this.kind=kind,Object.setPrototypeOf(this,_EverfurConfigError.prototype)}};var EVERFUR_SIGNATURE_HEADER="Everfur-Signature",DEFAULT_WEBHOOK_TOLERANCE_SECONDS=300,SIGNATURE_SCHEME="v1",MAX_HEADER_LENGTH=4096,HEX_SHA256_LENGTH=64,DIGITS=/^[0-9]+$/,EverfurWebhookVerificationError=class _EverfurWebhookVerificationError extends Error{constructor(code){super(`Everfur webhook verification failed: ${code}`),this.name="EverfurWebhookVerificationError",this.code=code,Object.setPrototypeOf(this,_EverfurWebhookVerificationError.prototype)}};function constructEvent(payload,signatureHeader,secrets,options={}){let body=rawBodyBytes(payload),keys=requireSecrets(secrets),tolerance=options.toleranceSeconds??DEFAULT_WEBHOOK_TOLERANCE_SECONDS;if(!Number.isInteger(tolerance)||tolerance<0)throw new EverfurConfigError("invalid-argument","toleranceSeconds must be a non-negative integer");let parsed=parseSignatureHeader(signatureHeader),now=options.nowSeconds??Math.floor(Date.now()/1e3);if(Math.abs(now-parsed.timestamp)>tolerance)throw new EverfurWebhookVerificationError("timestamp_outside_tolerance");let matched=false;for(let key of keys){let expected=Buffer.from(computeSignature(key,parsed.timestamp,body),"ascii");for(let candidate of parsed.signatures){if(candidate.length!==HEX_SHA256_LENGTH)continue;let actual=Buffer.from(candidate,"utf8");actual.length===expected.length&&crypto.timingSafeEqual(expected,actual)&&(matched=true)}}if(!matched)throw new EverfurWebhookVerificationError("no_matching_signature");return parseEnvelope(body)}function generateTestSignatureHeader(params){let body=rawBodyBytes(params.payload),keys=requireSecrets(params.secrets),timestamp=params.timestamp??Math.floor(Date.now()/1e3);if(!Number.isSafeInteger(timestamp)||timestamp<0)throw new EverfurConfigError("invalid-argument","timestamp must be a non-negative integer (unix seconds)");return[`t=${timestamp}`,...keys.map(key=>`${SIGNATURE_SCHEME}=${computeSignature(key,timestamp,body)}`)].join(",")}function computeSignature(secret,timestamp,body){return crypto.createHmac("sha256",Buffer.from(secret,"utf8")).update(`${timestamp}.`,"ascii").update(body).digest("hex")}function rawBodyBytes(payload){if(typeof payload=="string")return Buffer.from(payload,"utf8");if(payload instanceof Uint8Array)return payload;throw new EverfurConfigError("invalid-argument","constructEvent needs the raw request body (a string or a Buffer), not parsed JSON: re-serialised JSON does not reproduce the signed bytes.")}function requireSecrets(secrets){let list=typeof secrets=="string"?[secrets]:Array.isArray(secrets)?secrets:[];if(list.length===0||list.some(s=>typeof s!="string"||s.length===0))throw new EverfurConfigError("invalid-argument","at least one non-empty webhook signing secret is required");return list}function parseSignatureHeader(header){if(typeof header!="string"||header.length===0||header.length>MAX_HEADER_LENGTH)throw new EverfurWebhookVerificationError("malformed_header");let timestamp=null,signatures=[];for(let item of header.split(",")){let trimmed=item.trim(),at=trimmed.indexOf("=");if(at<0)throw new EverfurWebhookVerificationError("malformed_header");let key=trimmed.slice(0,at),value=trimmed.slice(at+1);if(key==="t"){if(timestamp!==null||!DIGITS.test(value))throw new EverfurWebhookVerificationError("malformed_header");let parsed=Number(value);if(!Number.isSafeInteger(parsed))throw new EverfurWebhookVerificationError("malformed_header");timestamp=parsed}else key===SIGNATURE_SCHEME&&signatures.push(value)}if(timestamp===null||signatures.length===0)throw new EverfurWebhookVerificationError("malformed_header");return{timestamp:timestamp,signatures:signatures}}function parseEnvelope(body){let json;try{json=JSON.parse(Buffer.from(body.buffer,body.byteOffset,body.byteLength).toString("utf8"))}catch{throw new EverfurWebhookVerificationError("malformed_payload")}if(!isRecord(json))throw new EverfurWebhookVerificationError("malformed_payload");let{id:id,object:object,type:type,api_version:apiVersion,created:created,livemode:livemode,data:data}=json;if(typeof id!="string"||id.length===0||object!=="event"||typeof type!="string"||type.length===0||typeof apiVersion!="string"||typeof created!="number"||typeof livemode!="boolean"||!isRecord(data)||!isRecord(data.object))throw new EverfurWebhookVerificationError("malformed_payload");return json}function isRecord(value){return typeof value=="object"&&value!==null&&!Array.isArray(value)}var SDK_VERSION="0.13.0",SDK_PLATFORM="react-native",DEFAULT_CONTRACT_VERSION="2026-09-19",ENV_API_BASE_URL="EVERFUR_API_BASE_URL";function configFailure(reason,message){/* @__PURE__ */
+return Object.freeze({ok:false,error:error})}var EverfurConfigError=class _EverfurConfigError extends Error{constructor(kind,message){super(message),this.name="EverfurConfigError",this.kind=kind,Object.setPrototypeOf(this,_EverfurConfigError.prototype)}};var EVERFUR_SIGNATURE_HEADER="Everfur-Signature",DEFAULT_WEBHOOK_TOLERANCE_SECONDS=300,SIGNATURE_SCHEME="v1",MAX_HEADER_LENGTH=4096,HEX_SHA256_LENGTH=64,DIGITS=/^[0-9]+$/,EverfurWebhookVerificationError=class _EverfurWebhookVerificationError extends Error{constructor(code){super(`Everfur webhook verification failed: ${code}`),this.name="EverfurWebhookVerificationError",this.code=code,Object.setPrototypeOf(this,_EverfurWebhookVerificationError.prototype)}};function constructEvent(payload,signatureHeader,secrets,options={}){let body=rawBodyBytes(payload),keys=requireSecrets(secrets),tolerance=options.toleranceSeconds??DEFAULT_WEBHOOK_TOLERANCE_SECONDS;if(!Number.isInteger(tolerance)||tolerance<0)throw new EverfurConfigError("invalid-argument","toleranceSeconds must be a non-negative integer");let parsed=parseSignatureHeader(signatureHeader),now=options.nowSeconds??Math.floor(Date.now()/1e3);if(Math.abs(now-parsed.timestamp)>tolerance)throw new EverfurWebhookVerificationError("timestamp_outside_tolerance");let matched=false;for(let key of keys){let expected=Buffer.from(computeSignature(key,parsed.timestamp,body),"ascii");for(let candidate of parsed.signatures){if(candidate.length!==HEX_SHA256_LENGTH)continue;let actual=Buffer.from(candidate,"utf8");actual.length===expected.length&&crypto.timingSafeEqual(expected,actual)&&(matched=true)}}if(!matched)throw new EverfurWebhookVerificationError("no_matching_signature");return parseEnvelope(body)}function generateTestSignatureHeader(params){let body=rawBodyBytes(params.payload),keys=requireSecrets(params.secrets),timestamp=params.timestamp??Math.floor(Date.now()/1e3);if(!Number.isSafeInteger(timestamp)||timestamp<0)throw new EverfurConfigError("invalid-argument","timestamp must be a non-negative integer (unix seconds)");return[`t=${timestamp}`,...keys.map(key=>`${SIGNATURE_SCHEME}=${computeSignature(key,timestamp,body)}`)].join(",")}function computeSignature(secret,timestamp,body){return crypto.createHmac("sha256",Buffer.from(secret,"utf8")).update(`${timestamp}.`,"ascii").update(body).digest("hex")}function rawBodyBytes(payload){if(typeof payload=="string")return Buffer.from(payload,"utf8");if(payload instanceof Uint8Array)return payload;throw new EverfurConfigError("invalid-argument","constructEvent needs the raw request body (a string or a Buffer), not parsed JSON: re-serialised JSON does not reproduce the signed bytes.")}function requireSecrets(secrets){let list=typeof secrets=="string"?[secrets]:Array.isArray(secrets)?secrets:[];if(list.length===0||list.some(s=>typeof s!="string"||s.length===0))throw new EverfurConfigError("invalid-argument","at least one non-empty webhook signing secret is required");return list}function parseSignatureHeader(header){if(typeof header!="string"||header.length===0||header.length>MAX_HEADER_LENGTH)throw new EverfurWebhookVerificationError("malformed_header");let timestamp=null,signatures=[];for(let item of header.split(",")){let trimmed=item.trim(),at=trimmed.indexOf("=");if(at<0)throw new EverfurWebhookVerificationError("malformed_header");let key=trimmed.slice(0,at),value=trimmed.slice(at+1);if(key==="t"){if(timestamp!==null||!DIGITS.test(value))throw new EverfurWebhookVerificationError("malformed_header");let parsed=Number(value);if(!Number.isSafeInteger(parsed))throw new EverfurWebhookVerificationError("malformed_header");timestamp=parsed}else key===SIGNATURE_SCHEME&&signatures.push(value)}if(timestamp===null||signatures.length===0)throw new EverfurWebhookVerificationError("malformed_header");return{timestamp:timestamp,signatures:signatures}}function parseEnvelope(body){let json;try{json=JSON.parse(Buffer.from(body.buffer,body.byteOffset,body.byteLength).toString("utf8"))}catch{throw new EverfurWebhookVerificationError("malformed_payload")}if(!isRecord(json))throw new EverfurWebhookVerificationError("malformed_payload");let{id:id,object:object,type:type,api_version:apiVersion,created:created,livemode:livemode,data:data}=json;if(typeof id!="string"||id.length===0||object!=="event"||typeof type!="string"||type.length===0||typeof apiVersion!="string"||typeof created!="number"||typeof livemode!="boolean"||!isRecord(data)||!isRecord(data.object))throw new EverfurWebhookVerificationError("malformed_payload");return json}function isRecord(value){return typeof value=="object"&&value!==null&&!Array.isArray(value)}var SDK_VERSION="0.15.0",SDK_PLATFORM="react-native",DEFAULT_CONTRACT_VERSION="2026-09-19",ENV_API_BASE_URL="EVERFUR_API_BASE_URL";function configFailure(reason,message){/* @__PURE__ */
 return Object.freeze({ok:false,failure:/* @__PURE__ */Object.freeze({reason:reason,message:message})})}function tryResolveApiBaseUrl(apiBaseUrl){let explicit=apiBaseUrl?.trim(),candidate=explicit&&explicit.length>0?explicit:readEnv(ENV_API_BASE_URL);return candidate?normalizeBaseUrl(candidate):configFailure("missing-api-base-url",`apiBaseUrl is required: pass config.apiBaseUrl or set ${ENV_API_BASE_URL}. The SDK never ships a hardcoded host.`)}function resolveApiBaseUrl(apiBaseUrl){let outcome=tryResolveApiBaseUrl(apiBaseUrl);if(!outcome.ok)throw new EverfurConfigError("invalid-argument",outcome.failure.message);return outcome.value}function buildBaseHeaders(cfg){return{"X-Everfur-SDK-Version":cfg.sdkVersion,"X-Everfur-SDK-Platform":cfg.platform,"X-Everfur-Contract":cfg.contractVersion}}var ABSOLUTE_URL=/^([A-Za-z][A-Za-z0-9+.-]*):\/\/([^/?#]*)/;function hostOf(authority){return authority.slice(authority.lastIndexOf("@")+1).replace(/:\d+$/,"").toLowerCase()}function isPrintableHost(host){return host.length===0||host.includes("@")?false:host.startsWith("[")&&host.endsWith("]")?true:!host.includes(":")}function canEchoOrigin(rawTrimmed,host){let schemeEnd=rawTrimmed.indexOf("://");return schemeEnd<0||rawTrimmed.slice(schemeEnd+3).includes("@")?false:isPrintableHost(host)}function safeOrigin(scheme,host){return`${scheme}://${host}`}function normalizeBaseUrl(raw){let trimmed=raw.trim(),match=ABSOLUTE_URL.exec(trimmed);if(match===null||match[2]===void 0||match[2].length===0)return configFailure("malformed-api-base-url","apiBaseUrl is not a valid absolute URL");let scheme=(match[1]??"").toLowerCase(),host=hostOf(match[2]);if(host.length===0)return configFailure("malformed-api-base-url","apiBaseUrl is not a valid absolute URL");let shown=canEchoOrigin(trimmed,host)?`: ${safeOrigin(scheme,host)}`:"";if(scheme!=="https"){if(!(scheme==="http"&&isLoopbackHost(host)))return scheme==="http"?configFailure("insecure-api-base-url",`apiBaseUrl must use https (cleartext http is only allowed for localhost)${shown}`):configFailure("unsupported-api-base-url-scheme",`apiBaseUrl must be http(s)${shown}`)}let value=trimmed.endsWith("/")?trimmed.slice(0,-1):trimmed;/* @__PURE__ */
 return Object.freeze({ok:true,value:value})}function isLoopbackHost(hostname){let host=hostname.toLowerCase();return host==="localhost"||host==="127.0.0.1"||host==="[::1]"||host==="::1"}function readEnv(name){let value=globalThis.process?.env?.[name];return typeof value=="string"&&value.trim().length>0?value.trim():void 0}var DAILY_QUOTA_WIRE_CODE="DAILY_QUOTA_EXCEEDED",THROTTLES=/* @__PURE__ */new Set(["THROTTLINGEXCEPTION","RATELIMITED","TOOMANYREQUESTS"]);function foldDailyQuotaWireCode(code,body){if(!THROTTLES.has(code.toUpperCase().replace(/[^A-Z0-9]/g,"")))return code;let b=body,limit=b?.daily_limit??b?.error?.daily_limit;return typeof limit=="number"&&Number.isFinite(limit)?DAILY_QUOTA_WIRE_CODE:code}var CONTRACT_RETRYABILITY=/* @__PURE__ */Object.freeze([
 /* @__PURE__ */Object.freeze({wireCode:"AccessDeniedException",envelope:"http_envelope",httpStatus:403,retryable:false}),

package/dist/server/events/index.d.cts

@@ -1,6 +1,6 @@
-import { P as PartnerPetProfile } from '../../pets.d-NbJvP_kh.cjs';
+import { P as PartnerPetProfile } from '../../pets.d-B_LoizOv.cjs';
 import { E as EverfurResult } from '../../EverfurResult.d-BFH-3s6E.cjs';
-import { j as FetchLike } from '../../config.d-BR3DT9ho.cjs';
+import { j as FetchLike } from '../../config.d-C0WgjutL.cjs';
 export { b as PetActivityLevel, c as PetAllergy, d as PetAllergySeverity, e as PetBirthDatePrecision, f as PetCondition, P as PetHealthProfileInput, g as PetIndoorOutdoor, h as PetMedication, i as PetSex } from '../../profile.d-CSs1wlXT.cjs';
 import '../../EverfurError.d-8NHtlgzA.cjs';
 

package/dist/server/events/index.d.ts

@@ -1,6 +1,6 @@
-import { P as PartnerPetProfile } from '../../pets.d-C_53_fzo.js';
+import { P as PartnerPetProfile } from '../../pets.d-OWxskXCP.js';
 import { E as EverfurResult } from '../../EverfurResult.d-D_-254ZY.js';
-import { j as FetchLike } from '../../config.d-Dy6igYlH.js';
+import { j as FetchLike } from '../../config.d-zd2eTb2L.js';
 export { b as PetActivityLevel, c as PetAllergy, d as PetAllergySeverity, e as PetBirthDatePrecision, f as PetCondition, P as PetHealthProfileInput, g as PetIndoorOutdoor, h as PetMedication, i as PetSex } from '../../profile.d-CSs1wlXT.js';
 import '../../EverfurError.d-8NHtlgzA.js';
 

package/dist/server/events/index.js

@@ -1,6 +1,6 @@
 import{timingSafeEqual,createHmac,randomUUID}from"crypto";function ok(value,warning){/* @__PURE__ */
 return Object.freeze({ok:true,value:value})}function err(error){/* @__PURE__ */
-return Object.freeze({ok:false,error:error})}var EverfurConfigError=class _EverfurConfigError extends Error{constructor(kind,message){super(message),this.name="EverfurConfigError",this.kind=kind,Object.setPrototypeOf(this,_EverfurConfigError.prototype)}};var EVERFUR_SIGNATURE_HEADER="Everfur-Signature",DEFAULT_WEBHOOK_TOLERANCE_SECONDS=300,SIGNATURE_SCHEME="v1",MAX_HEADER_LENGTH=4096,HEX_SHA256_LENGTH=64,DIGITS=/^[0-9]+$/,EverfurWebhookVerificationError=class _EverfurWebhookVerificationError extends Error{constructor(code){super(`Everfur webhook verification failed: ${code}`),this.name="EverfurWebhookVerificationError",this.code=code,Object.setPrototypeOf(this,_EverfurWebhookVerificationError.prototype)}};function constructEvent(payload,signatureHeader,secrets,options={}){let body=rawBodyBytes(payload),keys=requireSecrets(secrets),tolerance=options.toleranceSeconds??DEFAULT_WEBHOOK_TOLERANCE_SECONDS;if(!Number.isInteger(tolerance)||tolerance<0)throw new EverfurConfigError("invalid-argument","toleranceSeconds must be a non-negative integer");let parsed=parseSignatureHeader(signatureHeader),now=options.nowSeconds??Math.floor(Date.now()/1e3);if(Math.abs(now-parsed.timestamp)>tolerance)throw new EverfurWebhookVerificationError("timestamp_outside_tolerance");let matched=false;for(let key of keys){let expected=Buffer.from(computeSignature(key,parsed.timestamp,body),"ascii");for(let candidate of parsed.signatures){if(candidate.length!==HEX_SHA256_LENGTH)continue;let actual=Buffer.from(candidate,"utf8");actual.length===expected.length&&timingSafeEqual(expected,actual)&&(matched=true)}}if(!matched)throw new EverfurWebhookVerificationError("no_matching_signature");return parseEnvelope(body)}function generateTestSignatureHeader(params){let body=rawBodyBytes(params.payload),keys=requireSecrets(params.secrets),timestamp=params.timestamp??Math.floor(Date.now()/1e3);if(!Number.isSafeInteger(timestamp)||timestamp<0)throw new EverfurConfigError("invalid-argument","timestamp must be a non-negative integer (unix seconds)");return[`t=${timestamp}`,...keys.map(key=>`${SIGNATURE_SCHEME}=${computeSignature(key,timestamp,body)}`)].join(",")}function computeSignature(secret,timestamp,body){return createHmac("sha256",Buffer.from(secret,"utf8")).update(`${timestamp}.`,"ascii").update(body).digest("hex")}function rawBodyBytes(payload){if(typeof payload=="string")return Buffer.from(payload,"utf8");if(payload instanceof Uint8Array)return payload;throw new EverfurConfigError("invalid-argument","constructEvent needs the raw request body (a string or a Buffer), not parsed JSON: re-serialised JSON does not reproduce the signed bytes.")}function requireSecrets(secrets){let list=typeof secrets=="string"?[secrets]:Array.isArray(secrets)?secrets:[];if(list.length===0||list.some(s=>typeof s!="string"||s.length===0))throw new EverfurConfigError("invalid-argument","at least one non-empty webhook signing secret is required");return list}function parseSignatureHeader(header){if(typeof header!="string"||header.length===0||header.length>MAX_HEADER_LENGTH)throw new EverfurWebhookVerificationError("malformed_header");let timestamp=null,signatures=[];for(let item of header.split(",")){let trimmed=item.trim(),at=trimmed.indexOf("=");if(at<0)throw new EverfurWebhookVerificationError("malformed_header");let key=trimmed.slice(0,at),value=trimmed.slice(at+1);if(key==="t"){if(timestamp!==null||!DIGITS.test(value))throw new EverfurWebhookVerificationError("malformed_header");let parsed=Number(value);if(!Number.isSafeInteger(parsed))throw new EverfurWebhookVerificationError("malformed_header");timestamp=parsed}else key===SIGNATURE_SCHEME&&signatures.push(value)}if(timestamp===null||signatures.length===0)throw new EverfurWebhookVerificationError("malformed_header");return{timestamp:timestamp,signatures:signatures}}function parseEnvelope(body){let json;try{json=JSON.parse(Buffer.from(body.buffer,body.byteOffset,body.byteLength).toString("utf8"))}catch{throw new EverfurWebhookVerificationError("malformed_payload")}if(!isRecord(json))throw new EverfurWebhookVerificationError("malformed_payload");let{id:id,object:object,type:type,api_version:apiVersion,created:created,livemode:livemode,data:data}=json;if(typeof id!="string"||id.length===0||object!=="event"||typeof type!="string"||type.length===0||typeof apiVersion!="string"||typeof created!="number"||typeof livemode!="boolean"||!isRecord(data)||!isRecord(data.object))throw new EverfurWebhookVerificationError("malformed_payload");return json}function isRecord(value){return typeof value=="object"&&value!==null&&!Array.isArray(value)}var SDK_VERSION="0.13.0",SDK_PLATFORM="react-native",DEFAULT_CONTRACT_VERSION="2026-09-19",ENV_API_BASE_URL="EVERFUR_API_BASE_URL";function configFailure(reason,message){/* @__PURE__ */
+return Object.freeze({ok:false,error:error})}var EverfurConfigError=class _EverfurConfigError extends Error{constructor(kind,message){super(message),this.name="EverfurConfigError",this.kind=kind,Object.setPrototypeOf(this,_EverfurConfigError.prototype)}};var EVERFUR_SIGNATURE_HEADER="Everfur-Signature",DEFAULT_WEBHOOK_TOLERANCE_SECONDS=300,SIGNATURE_SCHEME="v1",MAX_HEADER_LENGTH=4096,HEX_SHA256_LENGTH=64,DIGITS=/^[0-9]+$/,EverfurWebhookVerificationError=class _EverfurWebhookVerificationError extends Error{constructor(code){super(`Everfur webhook verification failed: ${code}`),this.name="EverfurWebhookVerificationError",this.code=code,Object.setPrototypeOf(this,_EverfurWebhookVerificationError.prototype)}};function constructEvent(payload,signatureHeader,secrets,options={}){let body=rawBodyBytes(payload),keys=requireSecrets(secrets),tolerance=options.toleranceSeconds??DEFAULT_WEBHOOK_TOLERANCE_SECONDS;if(!Number.isInteger(tolerance)||tolerance<0)throw new EverfurConfigError("invalid-argument","toleranceSeconds must be a non-negative integer");let parsed=parseSignatureHeader(signatureHeader),now=options.nowSeconds??Math.floor(Date.now()/1e3);if(Math.abs(now-parsed.timestamp)>tolerance)throw new EverfurWebhookVerificationError("timestamp_outside_tolerance");let matched=false;for(let key of keys){let expected=Buffer.from(computeSignature(key,parsed.timestamp,body),"ascii");for(let candidate of parsed.signatures){if(candidate.length!==HEX_SHA256_LENGTH)continue;let actual=Buffer.from(candidate,"utf8");actual.length===expected.length&&timingSafeEqual(expected,actual)&&(matched=true)}}if(!matched)throw new EverfurWebhookVerificationError("no_matching_signature");return parseEnvelope(body)}function generateTestSignatureHeader(params){let body=rawBodyBytes(params.payload),keys=requireSecrets(params.secrets),timestamp=params.timestamp??Math.floor(Date.now()/1e3);if(!Number.isSafeInteger(timestamp)||timestamp<0)throw new EverfurConfigError("invalid-argument","timestamp must be a non-negative integer (unix seconds)");return[`t=${timestamp}`,...keys.map(key=>`${SIGNATURE_SCHEME}=${computeSignature(key,timestamp,body)}`)].join(",")}function computeSignature(secret,timestamp,body){return createHmac("sha256",Buffer.from(secret,"utf8")).update(`${timestamp}.`,"ascii").update(body).digest("hex")}function rawBodyBytes(payload){if(typeof payload=="string")return Buffer.from(payload,"utf8");if(payload instanceof Uint8Array)return payload;throw new EverfurConfigError("invalid-argument","constructEvent needs the raw request body (a string or a Buffer), not parsed JSON: re-serialised JSON does not reproduce the signed bytes.")}function requireSecrets(secrets){let list=typeof secrets=="string"?[secrets]:Array.isArray(secrets)?secrets:[];if(list.length===0||list.some(s=>typeof s!="string"||s.length===0))throw new EverfurConfigError("invalid-argument","at least one non-empty webhook signing secret is required");return list}function parseSignatureHeader(header){if(typeof header!="string"||header.length===0||header.length>MAX_HEADER_LENGTH)throw new EverfurWebhookVerificationError("malformed_header");let timestamp=null,signatures=[];for(let item of header.split(",")){let trimmed=item.trim(),at=trimmed.indexOf("=");if(at<0)throw new EverfurWebhookVerificationError("malformed_header");let key=trimmed.slice(0,at),value=trimmed.slice(at+1);if(key==="t"){if(timestamp!==null||!DIGITS.test(value))throw new EverfurWebhookVerificationError("malformed_header");let parsed=Number(value);if(!Number.isSafeInteger(parsed))throw new EverfurWebhookVerificationError("malformed_header");timestamp=parsed}else key===SIGNATURE_SCHEME&&signatures.push(value)}if(timestamp===null||signatures.length===0)throw new EverfurWebhookVerificationError("malformed_header");return{timestamp:timestamp,signatures:signatures}}function parseEnvelope(body){let json;try{json=JSON.parse(Buffer.from(body.buffer,body.byteOffset,body.byteLength).toString("utf8"))}catch{throw new EverfurWebhookVerificationError("malformed_payload")}if(!isRecord(json))throw new EverfurWebhookVerificationError("malformed_payload");let{id:id,object:object,type:type,api_version:apiVersion,created:created,livemode:livemode,data:data}=json;if(typeof id!="string"||id.length===0||object!=="event"||typeof type!="string"||type.length===0||typeof apiVersion!="string"||typeof created!="number"||typeof livemode!="boolean"||!isRecord(data)||!isRecord(data.object))throw new EverfurWebhookVerificationError("malformed_payload");return json}function isRecord(value){return typeof value=="object"&&value!==null&&!Array.isArray(value)}var SDK_VERSION="0.15.0",SDK_PLATFORM="react-native",DEFAULT_CONTRACT_VERSION="2026-09-19",ENV_API_BASE_URL="EVERFUR_API_BASE_URL";function configFailure(reason,message){/* @__PURE__ */
 return Object.freeze({ok:false,failure:/* @__PURE__ */Object.freeze({reason:reason,message:message})})}function tryResolveApiBaseUrl(apiBaseUrl){let explicit=apiBaseUrl?.trim(),candidate=explicit&&explicit.length>0?explicit:readEnv(ENV_API_BASE_URL);return candidate?normalizeBaseUrl(candidate):configFailure("missing-api-base-url",`apiBaseUrl is required: pass config.apiBaseUrl or set ${ENV_API_BASE_URL}. The SDK never ships a hardcoded host.`)}function resolveApiBaseUrl(apiBaseUrl){let outcome=tryResolveApiBaseUrl(apiBaseUrl);if(!outcome.ok)throw new EverfurConfigError("invalid-argument",outcome.failure.message);return outcome.value}function buildBaseHeaders(cfg){return{"X-Everfur-SDK-Version":cfg.sdkVersion,"X-Everfur-SDK-Platform":cfg.platform,"X-Everfur-Contract":cfg.contractVersion}}var ABSOLUTE_URL=/^([A-Za-z][A-Za-z0-9+.-]*):\/\/([^/?#]*)/;function hostOf(authority){return authority.slice(authority.lastIndexOf("@")+1).replace(/:\d+$/,"").toLowerCase()}function isPrintableHost(host){return host.length===0||host.includes("@")?false:host.startsWith("[")&&host.endsWith("]")?true:!host.includes(":")}function canEchoOrigin(rawTrimmed,host){let schemeEnd=rawTrimmed.indexOf("://");return schemeEnd<0||rawTrimmed.slice(schemeEnd+3).includes("@")?false:isPrintableHost(host)}function safeOrigin(scheme,host){return`${scheme}://${host}`}function normalizeBaseUrl(raw){let trimmed=raw.trim(),match=ABSOLUTE_URL.exec(trimmed);if(match===null||match[2]===void 0||match[2].length===0)return configFailure("malformed-api-base-url","apiBaseUrl is not a valid absolute URL");let scheme=(match[1]??"").toLowerCase(),host=hostOf(match[2]);if(host.length===0)return configFailure("malformed-api-base-url","apiBaseUrl is not a valid absolute URL");let shown=canEchoOrigin(trimmed,host)?`: ${safeOrigin(scheme,host)}`:"";if(scheme!=="https"){if(!(scheme==="http"&&isLoopbackHost(host)))return scheme==="http"?configFailure("insecure-api-base-url",`apiBaseUrl must use https (cleartext http is only allowed for localhost)${shown}`):configFailure("unsupported-api-base-url-scheme",`apiBaseUrl must be http(s)${shown}`)}let value=trimmed.endsWith("/")?trimmed.slice(0,-1):trimmed;/* @__PURE__ */
 return Object.freeze({ok:true,value:value})}function isLoopbackHost(hostname){let host=hostname.toLowerCase();return host==="localhost"||host==="127.0.0.1"||host==="[::1]"||host==="::1"}function readEnv(name){let value=globalThis.process?.env?.[name];return typeof value=="string"&&value.trim().length>0?value.trim():void 0}var DAILY_QUOTA_WIRE_CODE="DAILY_QUOTA_EXCEEDED",THROTTLES=/* @__PURE__ */new Set(["THROTTLINGEXCEPTION","RATELIMITED","TOOMANYREQUESTS"]);function foldDailyQuotaWireCode(code,body){if(!THROTTLES.has(code.toUpperCase().replace(/[^A-Z0-9]/g,"")))return code;let b=body,limit=b?.daily_limit??b?.error?.daily_limit;return typeof limit=="number"&&Number.isFinite(limit)?DAILY_QUOTA_WIRE_CODE:code}var CONTRACT_RETRYABILITY=/* @__PURE__ */Object.freeze([
 /* @__PURE__ */Object.freeze({wireCode:"AccessDeniedException",envelope:"http_envelope",httpStatus:403,retryable:false}),

package/dist/server/index.cjs

@@ -1,6 +1,6 @@
 "use strict";function ok(value,warning){/* @__PURE__ */
 return Object.freeze({ok:true,value:value})}function err(error){/* @__PURE__ */
-return Object.freeze({ok:false,error:error})}var EverfurConfigError=class _EverfurConfigError extends Error{constructor(kind,message){super(message),this.name="EverfurConfigError",this.kind=kind,Object.setPrototypeOf(this,_EverfurConfigError.prototype)}};var SDK_VERSION="0.13.0",SDK_PLATFORM="react-native",DEFAULT_CONTRACT_VERSION="2026-09-19",ENV_API_BASE_URL="EVERFUR_API_BASE_URL";function configFailure(reason,message){/* @__PURE__ */
+return Object.freeze({ok:false,error:error})}var EverfurConfigError=class _EverfurConfigError extends Error{constructor(kind,message){super(message),this.name="EverfurConfigError",this.kind=kind,Object.setPrototypeOf(this,_EverfurConfigError.prototype)}};var SDK_VERSION="0.15.0",SDK_PLATFORM="react-native",DEFAULT_CONTRACT_VERSION="2026-09-19",ENV_API_BASE_URL="EVERFUR_API_BASE_URL";function configFailure(reason,message){/* @__PURE__ */
 return Object.freeze({ok:false,failure:/* @__PURE__ */Object.freeze({reason:reason,message:message})})}function tryResolveApiBaseUrl(apiBaseUrl){let explicit=apiBaseUrl?.trim(),candidate=explicit&&explicit.length>0?explicit:readEnv(ENV_API_BASE_URL);return candidate?normalizeBaseUrl(candidate):configFailure("missing-api-base-url",`apiBaseUrl is required: pass config.apiBaseUrl or set ${ENV_API_BASE_URL}. The SDK never ships a hardcoded host.`)}function resolveApiBaseUrl(apiBaseUrl){let outcome=tryResolveApiBaseUrl(apiBaseUrl);if(!outcome.ok)throw new EverfurConfigError("invalid-argument",outcome.failure.message);return outcome.value}function buildBaseHeaders(cfg){return{"X-Everfur-SDK-Version":cfg.sdkVersion,"X-Everfur-SDK-Platform":cfg.platform,"X-Everfur-Contract":cfg.contractVersion}}var ABSOLUTE_URL=/^([A-Za-z][A-Za-z0-9+.-]*):\/\/([^/?#]*)/;function hostOf(authority){return authority.slice(authority.lastIndexOf("@")+1).replace(/:\d+$/,"").toLowerCase()}function isPrintableHost(host){return host.length===0||host.includes("@")?false:host.startsWith("[")&&host.endsWith("]")?true:!host.includes(":")}function canEchoOrigin(rawTrimmed,host){let schemeEnd=rawTrimmed.indexOf("://");return schemeEnd<0||rawTrimmed.slice(schemeEnd+3).includes("@")?false:isPrintableHost(host)}function safeOrigin(scheme,host){return`${scheme}://${host}`}function normalizeBaseUrl(raw){let trimmed=raw.trim(),match=ABSOLUTE_URL.exec(trimmed);if(match===null||match[2]===void 0||match[2].length===0)return configFailure("malformed-api-base-url","apiBaseUrl is not a valid absolute URL");let scheme=(match[1]??"").toLowerCase(),host=hostOf(match[2]);if(host.length===0)return configFailure("malformed-api-base-url","apiBaseUrl is not a valid absolute URL");let shown=canEchoOrigin(trimmed,host)?`: ${safeOrigin(scheme,host)}`:"";if(scheme!=="https"){if(!(scheme==="http"&&isLoopbackHost(host)))return scheme==="http"?configFailure("insecure-api-base-url",`apiBaseUrl must use https (cleartext http is only allowed for localhost)${shown}`):configFailure("unsupported-api-base-url-scheme",`apiBaseUrl must be http(s)${shown}`)}let value=trimmed.endsWith("/")?trimmed.slice(0,-1):trimmed;/* @__PURE__ */
 return Object.freeze({ok:true,value:value})}function isLoopbackHost(hostname){let host=hostname.toLowerCase();return host==="localhost"||host==="127.0.0.1"||host==="[::1]"||host==="::1"}function readEnv(name){let value=globalThis.process?.env?.[name];return typeof value=="string"&&value.trim().length>0?value.trim():void 0}var DAILY_QUOTA_WIRE_CODE="DAILY_QUOTA_EXCEEDED",THROTTLES=/* @__PURE__ */new Set(["THROTTLINGEXCEPTION","RATELIMITED","TOOMANYREQUESTS"]);function foldDailyQuotaWireCode(code,body){if(!THROTTLES.has(code.toUpperCase().replace(/[^A-Z0-9]/g,"")))return code;let b=body,limit=b?.daily_limit??b?.error?.daily_limit;return typeof limit=="number"&&Number.isFinite(limit)?DAILY_QUOTA_WIRE_CODE:code}var CONTRACT_RETRYABILITY=/* @__PURE__ */Object.freeze([
 /* @__PURE__ */Object.freeze({wireCode:"AccessDeniedException",envelope:"http_envelope",httpStatus:403,retryable:false}),

package/dist/server/index.d.cts

@@ -1,7 +1,7 @@
 import { E as EverfurResult } from '../EverfurResult.d-BFH-3s6E.cjs';
-import { j as FetchLike } from '../config.d-BR3DT9ho.cjs';
-import { a as PartnerServerClient } from '../pets.d-NbJvP_kh.cjs';
-export { b as PartnerPet, P as PartnerPetProfile, c as PartnerPetTarget, d as PartnerPetWithProfile, e as deletePartnerPet, g as getPartnerPet, u as updatePartnerPet, f as upsertPartnerPet } from '../pets.d-NbJvP_kh.cjs';
+import { j as FetchLike } from '../config.d-C0WgjutL.cjs';
+import { a as PartnerServerClient } from '../pets.d-B_LoizOv.cjs';
+export { b as PartnerPet, P as PartnerPetProfile, c as PartnerPetTarget, d as PartnerPetWithProfile, e as deletePartnerPet, g as getPartnerPet, u as updatePartnerPet, f as upsertPartnerPet } from '../pets.d-B_LoizOv.cjs';
 export { b as PetActivityLevel, c as PetAllergy, d as PetAllergySeverity, e as PetBirthDatePrecision, f as PetCondition, a as PetHealthProfile, P as PetHealthProfileInput, g as PetIndoorOutdoor, h as PetMedication, i as PetSex } from '../profile.d-CSs1wlXT.cjs';
 export { C as CanonicalPetSpecies, c as canonicalPetSpecies } from '../species.d-BXAIMh7I.cjs';
 import '../EverfurError.d-8NHtlgzA.cjs';

package/dist/server/index.d.ts

@@ -1,7 +1,7 @@
 import { E as EverfurResult } from '../EverfurResult.d-D_-254ZY.js';
-import { j as FetchLike } from '../config.d-Dy6igYlH.js';
-import { a as PartnerServerClient } from '../pets.d-C_53_fzo.js';
-export { b as PartnerPet, P as PartnerPetProfile, c as PartnerPetTarget, d as PartnerPetWithProfile, e as deletePartnerPet, g as getPartnerPet, u as updatePartnerPet, f as upsertPartnerPet } from '../pets.d-C_53_fzo.js';
+import { j as FetchLike } from '../config.d-zd2eTb2L.js';
+import { a as PartnerServerClient } from '../pets.d-OWxskXCP.js';
+export { b as PartnerPet, P as PartnerPetProfile, c as PartnerPetTarget, d as PartnerPetWithProfile, e as deletePartnerPet, g as getPartnerPet, u as updatePartnerPet, f as upsertPartnerPet } from '../pets.d-OWxskXCP.js';
 export { b as PetActivityLevel, c as PetAllergy, d as PetAllergySeverity, e as PetBirthDatePrecision, f as PetCondition, a as PetHealthProfile, P as PetHealthProfileInput, g as PetIndoorOutdoor, h as PetMedication, i as PetSex } from '../profile.d-CSs1wlXT.js';
 export { C as CanonicalPetSpecies, c as canonicalPetSpecies } from '../species.d-BXAIMh7I.js';
 import '../EverfurError.d-8NHtlgzA.js';

package/dist/server/index.js

@@ -1,6 +1,6 @@
 function ok(value,warning){/* @__PURE__ */
 return Object.freeze({ok:true,value:value})}function err(error){/* @__PURE__ */
-return Object.freeze({ok:false,error:error})}var EverfurConfigError=class _EverfurConfigError extends Error{constructor(kind,message){super(message),this.name="EverfurConfigError",this.kind=kind,Object.setPrototypeOf(this,_EverfurConfigError.prototype)}};var SDK_VERSION="0.13.0",SDK_PLATFORM="react-native",DEFAULT_CONTRACT_VERSION="2026-09-19",ENV_API_BASE_URL="EVERFUR_API_BASE_URL";function configFailure(reason,message){/* @__PURE__ */
+return Object.freeze({ok:false,error:error})}var EverfurConfigError=class _EverfurConfigError extends Error{constructor(kind,message){super(message),this.name="EverfurConfigError",this.kind=kind,Object.setPrototypeOf(this,_EverfurConfigError.prototype)}};var SDK_VERSION="0.15.0",SDK_PLATFORM="react-native",DEFAULT_CONTRACT_VERSION="2026-09-19",ENV_API_BASE_URL="EVERFUR_API_BASE_URL";function configFailure(reason,message){/* @__PURE__ */
 return Object.freeze({ok:false,failure:/* @__PURE__ */Object.freeze({reason:reason,message:message})})}function tryResolveApiBaseUrl(apiBaseUrl){let explicit=apiBaseUrl?.trim(),candidate=explicit&&explicit.length>0?explicit:readEnv(ENV_API_BASE_URL);return candidate?normalizeBaseUrl(candidate):configFailure("missing-api-base-url",`apiBaseUrl is required: pass config.apiBaseUrl or set ${ENV_API_BASE_URL}. The SDK never ships a hardcoded host.`)}function resolveApiBaseUrl(apiBaseUrl){let outcome=tryResolveApiBaseUrl(apiBaseUrl);if(!outcome.ok)throw new EverfurConfigError("invalid-argument",outcome.failure.message);return outcome.value}function buildBaseHeaders(cfg){return{"X-Everfur-SDK-Version":cfg.sdkVersion,"X-Everfur-SDK-Platform":cfg.platform,"X-Everfur-Contract":cfg.contractVersion}}var ABSOLUTE_URL=/^([A-Za-z][A-Za-z0-9+.-]*):\/\/([^/?#]*)/;function hostOf(authority){return authority.slice(authority.lastIndexOf("@")+1).replace(/:\d+$/,"").toLowerCase()}function isPrintableHost(host){return host.length===0||host.includes("@")?false:host.startsWith("[")&&host.endsWith("]")?true:!host.includes(":")}function canEchoOrigin(rawTrimmed,host){let schemeEnd=rawTrimmed.indexOf("://");return schemeEnd<0||rawTrimmed.slice(schemeEnd+3).includes("@")?false:isPrintableHost(host)}function safeOrigin(scheme,host){return`${scheme}://${host}`}function normalizeBaseUrl(raw){let trimmed=raw.trim(),match=ABSOLUTE_URL.exec(trimmed);if(match===null||match[2]===void 0||match[2].length===0)return configFailure("malformed-api-base-url","apiBaseUrl is not a valid absolute URL");let scheme=(match[1]??"").toLowerCase(),host=hostOf(match[2]);if(host.length===0)return configFailure("malformed-api-base-url","apiBaseUrl is not a valid absolute URL");let shown=canEchoOrigin(trimmed,host)?`: ${safeOrigin(scheme,host)}`:"";if(scheme!=="https"){if(!(scheme==="http"&&isLoopbackHost(host)))return scheme==="http"?configFailure("insecure-api-base-url",`apiBaseUrl must use https (cleartext http is only allowed for localhost)${shown}`):configFailure("unsupported-api-base-url-scheme",`apiBaseUrl must be http(s)${shown}`)}let value=trimmed.endsWith("/")?trimmed.slice(0,-1):trimmed;/* @__PURE__ */
 return Object.freeze({ok:true,value:value})}function isLoopbackHost(hostname){let host=hostname.toLowerCase();return host==="localhost"||host==="127.0.0.1"||host==="[::1]"||host==="::1"}function readEnv(name){let value=globalThis.process?.env?.[name];return typeof value=="string"&&value.trim().length>0?value.trim():void 0}var DAILY_QUOTA_WIRE_CODE="DAILY_QUOTA_EXCEEDED",THROTTLES=/* @__PURE__ */new Set(["THROTTLINGEXCEPTION","RATELIMITED","TOOMANYREQUESTS"]);function foldDailyQuotaWireCode(code,body){if(!THROTTLES.has(code.toUpperCase().replace(/[^A-Z0-9]/g,"")))return code;let b=body,limit=b?.daily_limit??b?.error?.daily_limit;return typeof limit=="number"&&Number.isFinite(limit)?DAILY_QUOTA_WIRE_CODE:code}var CONTRACT_RETRYABILITY=/* @__PURE__ */Object.freeze([
 /* @__PURE__ */Object.freeze({wireCode:"AccessDeniedException",envelope:"http_envelope",httpStatus:403,retryable:false}),

package/dist/{sheetSeam.d-Cviqk89n.d.ts → sheetSeam.d-B09jf4YC.d.ts}

@@ -1,8 +1,8 @@
 import { ReactNode } from 'react';
-import { P as PetRef } from './ids.d-B2GAAifq.js';
-import { c as RecordForwardItem } from './models.d-BagXhafD.js';
+import { P as PetRef, R as RecordsRequestId } from './ids.d-B2GAAifq.js';
+import { c as RecordForwardItem } from './models.d-DOwnr8fi.js';
 import { a as RecordsAskHandler } from './recordsAsk.d-C5CGSi3j.js';
-import { U as UseEverfurRecordsState } from './useRecords.d-aQTzQZoV.js';
+import { U as UseEverfurRecordsState } from './useRecords.d-DWk61a4c.js';
 
 /** What the page hands the sheet: its records state and the page's own flows behind every button. */
 interface EverfurRecordsSheetRenderArgs {
@@ -23,6 +23,10 @@ interface EverfurRecordsSheetRenderArgs {
     readonly weightUnit?: 'lb' | 'kg' | undefined;
     /** The page's `onOpenPlan`: the top risk line's button. A sheet built with its own `onOpenPlan` keeps that. */
     readonly onOpenPlan?: (() => void) | undefined;
+    /** The page's `noVet`: the member said the pet has no vet yet, so the no-records title says to start there then. */
+    readonly noVet?: boolean | undefined;
+    /** Opens one request's tracker: the button under each line about a request or an upload still in flight. */
+    readonly onOpenRequest?: ((requestId: RecordsRequestId) => void) | undefined;
 }
 /** What the page hands the lab screen when a result opens in place. */
 interface EverfurRecordsSheetLabRenderArgs {
@@ -32,7 +36,7 @@ interface EverfurRecordsSheetLabRenderArgs {
     readonly onAsk?: RecordsAskHandler | undefined;
 }
 /**
- * Raph's v3 records sheet, built by `recordsSheet()` from `@everfur/sdk/web/records-sheet`. Pass it as
+ * The records sheet (our web app's health tab), built by `recordsSheet()` from `@everfur/sdk/web/records-sheet`. Pass it as
  * `EverfurRecordsPage`'s `sheet`. Build it once (module scope or `useMemo`), not on every render.
  */
 interface EverfurRecordsSheet {

package/dist/{sheetSeam.d-DCS3LW8g.d.cts → sheetSeam.d-BBuEIVsa.d.cts}

@@ -1,8 +1,8 @@
 import { ReactNode } from 'react';
-import { P as PetRef } from './ids.d-B2GAAifq.cjs';
-import { c as RecordForwardItem } from './models.d-BnLm3VAA.cjs';
+import { P as PetRef, R as RecordsRequestId } from './ids.d-B2GAAifq.cjs';
+import { c as RecordForwardItem } from './models.d-BSqvbTE1.cjs';
 import { a as RecordsAskHandler } from './recordsAsk.d-C5CGSi3j.cjs';
-import { U as UseEverfurRecordsState } from './useRecords.d-Cb-36SF5.cjs';
+import { U as UseEverfurRecordsState } from './useRecords.d-BYNX01El.cjs';
 
 /** What the page hands the sheet: its records state and the page's own flows behind every button. */
 interface EverfurRecordsSheetRenderArgs {
@@ -23,6 +23,10 @@ interface EverfurRecordsSheetRenderArgs {
     readonly weightUnit?: 'lb' | 'kg' | undefined;
     /** The page's `onOpenPlan`: the top risk line's button. A sheet built with its own `onOpenPlan` keeps that. */
     readonly onOpenPlan?: (() => void) | undefined;
+    /** The page's `noVet`: the member said the pet has no vet yet, so the no-records title says to start there then. */
+    readonly noVet?: boolean | undefined;
+    /** Opens one request's tracker: the button under each line about a request or an upload still in flight. */
+    readonly onOpenRequest?: ((requestId: RecordsRequestId) => void) | undefined;
 }
 /** What the page hands the lab screen when a result opens in place. */
 interface EverfurRecordsSheetLabRenderArgs {
@@ -32,7 +36,7 @@ interface EverfurRecordsSheetLabRenderArgs {
     readonly onAsk?: RecordsAskHandler | undefined;
 }
 /**
- * Raph's v3 records sheet, built by `recordsSheet()` from `@everfur/sdk/web/records-sheet`. Pass it as
+ * The records sheet (our web app's health tab), built by `recordsSheet()` from `@everfur/sdk/web/records-sheet`. Pass it as
  * `EverfurRecordsPage`'s `sheet`. Build it once (module scope or `useMemo`), not on every render.
  */
 interface EverfurRecordsSheet {