@everfur/sdk 0.3.0 → 0.4.0

package/dist/core/index.d.cts

@@ -1,43 +1,41 @@
 export { K as KvPort } from '../cacheEpoch-DknKn3S0.cjs';
-export { B as BeforeLogoutContext, e as BeforeLogoutHook, C as CapabilityKind, f as CapabilityRegistry, g as CapabilityServices, h as ChatControllerRegistry, i as ChatScope, j as CreateEverfurRuntimeInput, k as CreateRuntimeOptions, l as EntitlementPoller, m as EntitlementPollerDeps, E as EntitlementSnapshot, n as EntitlementStore, o as EverfurRuntime, p as EverfurRuntimeConfig, L as LogLevel, a as LogRecord, b as LogSink, M as MIN_POLL_INTERVAL_SECONDS, N as NULL_SECURE_STORE, q as PollScheduler, P as PrepareOptions, c as PrepareResult, d as PrepareStatus, R as RuntimeTheme, r as RuntimeUser, S as SecureStorePort, T as TimerHandle, s as createEntitlementPoller, t as createEverfurRuntime } from '../runtime-B8s-_hv8.cjs';
-export { T as TelemetryPort, n as noopTelemetry } from '../TelemetryPort-BDNr00hu.cjs';
+import { C as CreateEverfurRuntimeInput, e as EverfurRuntime } from '../runtimeTypes-gZEJu-da.cjs';
+export { B as BeforeLogoutContext, f as BeforeLogoutHook, g as CapabilityKind, h as CapabilityRegistry, i as CapabilityServices, j as ChatControllerRegistry, k as ChatScope, E as EntitlementSnapshot, l as EntitlementStore, m as EverfurRuntimeConfig, L as LogLevel, a as LogRecord, b as LogSink, N as NULL_SECURE_STORE, P as PrepareOptions, c as PrepareResult, d as PrepareStatus, R as RuntimeTheme, n as RuntimeUser, S as SecureStorePort } from '../runtimeTypes-gZEJu-da.cjs';
+import { T as TelemetryPort } from '../TelemetryPort-BDNr00hu.cjs';
+export { n as noopTelemetry } from '../TelemetryPort-BDNr00hu.cjs';
 export { E as ErrorPolicyPort, d as defaultErrorPolicy } from '../ErrorPolicyPort-CNf4uQZP.cjs';
 export { C as CameraPort, a as CaptureOptions, M as MediaSource, u as unavailableCamera } from '../CameraPort-Cv31Pz7g.cjs';
 export { F as FileHandle, b as FilePort } from '../ports-BN6RHF9W.cjs';
-import { l as SuggestedPromptCategory, m as ChatController } from '../ports-DEBzEhbp.cjs';
-export { n as CHAT_FEEDBACK_TYPES, o as CHECKIN_ANSWERABLE_STATUS, C as ChatCheckin, a as ChatCheckinTarget, p as ChatControllerDeps, b as ChatConversation, c as ChatConversationListOptions, d as ChatConversationPage, e as ChatFeedbackReceipt, f as ChatFeedbackType, q as ChatHandlers, g as ChatHistoryOptions, i as ChatMessage, h as ChatMessagePage, r as ChatSnapshot, j as ChatStatus, k as Citation, F as FEEDBACK_NOTES_MAX_CHARS, M as MAX_IMAGE_KEYS_PER_MESSAGE, s as MESSAGE_MAX_CHARS, S as SendOptions, t as Timers, u as createChatController, v as isCheckinSettled } from '../ports-DEBzEhbp.cjs';
+export { O as OptionalModule, o as optionalModule } from '../optionalModule-DbJmsq5f.cjs';
+import { m as ChatControllerDeps, l as ChatController, n as SuggestedPromptCategory } from '../ports-BY2ph0_y.cjs';
+export { o as CHAT_FEEDBACK_TYPES, p as CHECKIN_ANSWERABLE_STATUS, C as ChatCheckin, a as ChatCheckinTarget, b as ChatConversation, c as ChatConversationListOptions, d as ChatConversationPage, e as ChatFeedbackReceipt, f as ChatFeedbackType, q as ChatHandlers, g as ChatHistoryOptions, i as ChatMessage, h as ChatMessagePage, r as ChatSnapshot, j as ChatStatus, k as Citation, F as FEEDBACK_NOTES_MAX_CHARS, M as MAX_IMAGE_KEYS_PER_MESSAGE, S as SendOptions, s as Timers, t as isCheckinSettled } from '../ports-BY2ph0_y.cjs';
 import { E as EverfurError } from '../EverfurResult-DN9pL2Ab.cjs';
 import { P as PetRef, C as ConversationId } from '../ids-B2GAAifq.cjs';
-export { f as ATTACHMENT_ACCEPT, g as ATTACHMENT_BACKOFF_MS, h as ATTACHMENT_INITIATE_PATH, i as ATTACHMENT_MAX_ATTEMPTS, j as ATTACHMENT_MIME_TYPES, k as ATTACHMENT_QUEUE_CONCURRENCY, A as AttachmentError, a as AttachmentErrorCode, b as AttachmentOutcome, c as AttachmentQueue, l as AttachmentQueueDeps, m as AttachmentQueueSnapshot, d as AttachmentState, e as AttachmentStatus, n as AttachmentUploadPolicy, M as MAX_ATTACHMENTS_PER_MESSAGE, o as MAX_ATTACHMENT_BYTES, p as MAX_FILENAME_LENGTH, V as ValidatedAttachment, q as attachmentSize, r as createAttachmentQueue, s as formatBytes, t as initiateAttachmentUpload, u as isAttachmentMime, v as sanitizeFilename, w as uploadAttachmentBytes, x as validateAttachment } from '../attachments-CQgFrEQ7.cjs';
-export { G as SdkPlatform } from '../config-CzTZGlfF.cjs';
-export { c as EverfurThemeInput } from '../entitlementRepository-DKdXFgTo.cjs';
-export { C as CreateClinicRequestBatchInput, F as FACT_FIELD_BY_KIND, v as FACT_VALUE_FIELD, w as FactFieldValue, x as FactValueKind, H as HttpRecordsClinicRepositoryDeps, y as HttpRecordsRepositoryDeps, z as RECORDS_CLINIC_BATCH_MAX, R as RecordClinicianNote, a as RecordClinicianNoteSection, b as RecordCompleteness, c as RecordConflict, d as RecordConflictCandidate, e as RecordDepthView, f as RecordDocumentContributionsView, g as RecordEncounter, h as RecordExamSystem, A as RecordFactEditInput, B as RecordFactRemoveInput, i as RecordLabMarker, j as RecordLabPoint, D as RecordMarker, E as RecordMarkerLatest, G as RecordMarkerPoint, I as RecordMarkerSummary, J as RecordMarkersView, K as RecordPdfLink, k as RecordPhysicalExam, L as RecordShare, M as RecordShareLink, N as RecordsAuthorizationSignature, O as RecordsClinicBatch, P as RecordsClinicBatchClient, Q as RecordsClinicBatchItem, S as RecordsClinicBatchResult, T as RecordsClinicTarget, m as RecordsDepthClient, U as RecordsSignatureSuggestion, n as RecordsTimelineMedication, o as RecordsTimelineVaccine, p as RecordsTimelineView, q as RecordsTimelineVisit, r as RecordsTimelineWeight, V as createRecordsClinicBatchClient, W as createRecordsDepthClient, X as factCorrectionFor, Y as factValueCorrection, Z as inferFactValueKind, _ as isFactReviewerLocked, s as mapDocumentContributions, t as mapRecordDepth, $ as mapRecordMarkers, a0 as mapRecordPdfLink, a1 as mapRecordShareLink, a2 as mapRecordShareList, u as mapRecordsTimeline, a3 as mapSignatureSuggestions, a4 as resolveShareUrl } from '../depth-CErXCU8J.cjs';
+export { f as ATTACHMENT_ACCEPT, g as ATTACHMENT_BACKOFF_MS, h as ATTACHMENT_INITIATE_PATH, i as ATTACHMENT_MAX_ATTEMPTS, j as ATTACHMENT_MIME_TYPES, k as ATTACHMENT_QUEUE_CONCURRENCY, A as AttachmentError, a as AttachmentErrorCode, b as AttachmentOutcome, c as AttachmentQueue, l as AttachmentQueueDeps, m as AttachmentQueueSnapshot, d as AttachmentState, e as AttachmentStatus, n as AttachmentUploadPolicy, M as MAX_ATTACHMENTS_PER_MESSAGE, o as MAX_ATTACHMENT_BYTES, p as MAX_FILENAME_LENGTH, V as ValidatedAttachment, q as attachmentSize, r as createAttachmentQueue, s as formatBytes, t as initiateAttachmentUpload, u as isAttachmentMime, v as sanitizeFilename, w as uploadAttachmentBytes, x as validateAttachment } from '../attachments-BorG422I.cjs';
+import { p as EventSourceFactory, G as SdkPlatform } from '../config--Wu1Umhd.cjs';
+import { a as EntitlementResolution, F as FetchEntitlementsArgs } from '../entitlementRepository-BpJ7tiwl.cjs';
+import { E as EntitlementDecision } from '../resolve-D4Ywz5OS.cjs';
+import { A as AuthContext } from '../identity-C2-08BZW.cjs';
+import { C as ClientBranding } from '../branding-CsRdeNwK.cjs';
+export { E as EverfurThemeInput } from '../branding-CsRdeNwK.cjs';
+export { C as CreateClinicRequestBatchInput, F as FACT_FIELD_BY_KIND, w as FACT_VALUE_FIELD, x as FactFieldValue, y as FactValueKind, H as HttpRecordsClinicRepositoryDeps, z as HttpRecordsRepositoryDeps, A as RECORDS_CLINIC_BATCH_MAX, R as RecordClinicianNote, a as RecordClinicianNoteSection, b as RecordCompleteness, c as RecordConflict, d as RecordConflictCandidate, e as RecordDepthView, f as RecordDocumentContributionsView, g as RecordEncounter, h as RecordExamSystem, B as RecordFactEditInput, D as RecordFactRemoveInput, i as RecordLabMarker, j as RecordLabPoint, E as RecordMarker, G as RecordMarkerLatest, I as RecordMarkerPoint, J as RecordMarkerSummary, K as RecordMarkersView, L as RecordPdfLink, k as RecordPhysicalExam, M as RecordShare, N as RecordShareLink, O as RecordsAuthorizationSignature, P as RecordsClinicBatch, Q as RecordsClinicBatchClient, S as RecordsClinicBatchItem, T as RecordsClinicBatchResult, U as RecordsClinicTarget, m as RecordsDepthClient, n as RecordsRequestDocument, V as RecordsSignatureSuggestion, o as RecordsTimelineMedication, p as RecordsTimelineVaccine, q as RecordsTimelineView, r as RecordsTimelineVisit, s as RecordsTimelineWeight, W as createRecordsClinicBatchClient, X as createRecordsDepthClient, Y as factCorrectionFor, Z as factValueCorrection, _ as inferFactValueKind, $ as isFactReviewerLocked, t as mapDocumentContributions, u as mapRecordDepth, a0 as mapRecordMarkers, a1 as mapRecordPdfLink, a2 as mapRecordShareLink, a3 as mapRecordShareList, v as mapRecordsTimeline, a4 as mapSignatureSuggestions, a5 as resolveShareUrl } from '../depth-D5HwcvKC.cjs';
 export { R as RecordDocumentMeta, a as RecordEntity, b as RecordOrigin, f as RecordsRequestGroupView, d as RecordsRequestView } from '../models-D2EUxPZY.cjs';
-export { C as CheckinAnswer, a as CheckinOutcome, W as WatchCase } from '../casesRepository-DHwtGRYY.cjs';
-import '../resolve-D4Ywz5OS.cjs';
-import '../identity-DI4eVx9S.cjs';
-import '../requestFunnel-L-BQfi0z.cjs';
+export { C as CheckinAnswer, a as CheckinOutcome, W as WatchCase } from '../casesRepository-DwtZVsbj.cjs';
+import '../petsRepository-B_gKbAzJ.cjs';
 import '../profile-CSs1wlXT.cjs';
+import '../requestFunnel-BjDpqqvm.cjs';
 
-/** The settled outcome of a guarded optional-module load. Never a throw. */
-type OptionalModule<T> = {
-    readonly available: true;
-    readonly module: T;
-} | {
-    readonly available: false;
-    readonly module: null;
-    readonly reason: string;
-};
 /**
- * Load an optional native peer behind a guard. `load` is the host-provided thunk (typically a `require`).
- * An optional `validate` type-guard rejects a present-but-wrong-shape module (a version whose surface drifted)
- * without throwing. Returns a settled result; NEVER throws.
+ * The server's own limits on a chat message, mirrored here so a violation is caught before any UI is
+ * rendered for it. `SendWidgetMessageRequest.message` on EFBackend main declares
+ * `min_length=1, max_length=4000`; the server remains authoritative and still enforces both.
  *
- * @param name  human-readable peer name, only used to build the `reason` string.
- * @param load  the thunk that resolves the module (e.g. `() => require('expo-secure-store')`).
- * @param validate  optional shape guard; when it returns false the module is treated as unavailable.
+ * These are NOT in the generated contract projection, so they are pinned here with their source rather
+ * than derived. If the server relaxes either bound, this is the one place to update.
  */
-declare function optionalModule<T>(name: string, load: () => unknown, validate?: (candidate: unknown) => candidate is T): OptionalModule<T>;
+declare const MESSAGE_MAX_CHARS = 4000;
+
+declare function createChatController(deps: ChatControllerDeps): ChatController;
 
 interface ChatBootstrapInput {
     /** omit => general conversation */
@@ -78,12 +76,103 @@ declare function bootstrapChat(input: ChatBootstrapInput, deps: {
     readonly controller: ChatController;
 }): Promise<ChatBootstrapResult>;
 
+/** Minimum re-poll interval; a server ttl below this is clamped so we never hot-loop the endpoint. */
+declare const MIN_POLL_INTERVAL_SECONDS = 30;
+/** Injectable timer seam so a suite drives the re-poll clock deterministically (default: global timers). */
+type TimerHandle = ReturnType<typeof setTimeout>;
+interface PollScheduler {
+    set(callback: () => void, ms: number): TimerHandle;
+    clear(handle: TimerHandle): void;
+}
+interface EntitlementPollerDeps {
+    /** Re-derived every poll so a token refresh / user re-scope is reflected on the next hop. */
+    readonly authFor: () => AuthContext;
+    /**
+     * Push a fresh verdict into the runtime store. Called ONLY on a 200 'updated'. Carries the server-driven
+     * branding parsed from the SAME body (null when absent/unparseable -> the compiled default theme); branding
+     * is additive and orthogonal to the decisions.
+     */
+    readonly update: (decisions: readonly EntitlementDecision[], branding: ClientBranding | null) => void;
+    /** Optional region hint forwarded to the endpoint. */
+    readonly region?: string;
+    /** Called synchronously as each fetch starts; the runtime marks the store pending for a scope's first one. */
+    readonly onFetch?: () => void;
+    /**
+     * Called when a fetch settles for the current scope, whatever the outcome (`updated` after `update`,
+     * `notModified`, `failed`, a thrown resolve). Not called for a fetch a refresh() or stop() superseded.
+     */
+    readonly onSettled?: () => void;
+    readonly telemetry?: TelemetryPort;
+    /** Test seam; defaults to global timers (unref'd so a live poll never pins a Node event loop). */
+    readonly scheduler?: PollScheduler;
+    /** Test seam; defaults to the real repository call. */
+    readonly resolve?: (auth: AuthContext, args: FetchEntitlementsArgs) => Promise<EntitlementResolution>;
+    /** Floor override for tests; defaults to MIN_POLL_INTERVAL_SECONDS. */
+    readonly floorSeconds?: number;
+    /** Test seam for deterministic failure-retry jitter; defaults to Math.random. */
+    readonly rng?: () => number;
+}
+interface EntitlementPoller {
+    /** Idempotent. Kicks an immediate first poll, then self-schedules on the returned cadence. */
+    start(): void;
+    /** Idempotent. Clears the pending timer and prevents any post-stop update (dispose calls this). */
+    stop(): void;
+    /**
+     * Drop the cached revision and re-poll immediately. A user / pet re-scope invalidates the cached verdict, so
+     * the next request must be UNCONDITIONAL (no If-None-Match) to force a fresh 200 for the new scope.
+     */
+    refresh(): void;
+    /**
+     * Settle ONE verdict fetch and report it: the poll already in flight when one is (the warm-up rides the
+     * first tick rather than racing it), otherwise a fresh one. On a poller that was never started it fetches
+     * once and arms nothing. Resolves null when a stop() or refresh() superseded the fetch before it landed.
+     */
+    prime(): Promise<EntitlementResolution | null>;
+}
+declare function createEntitlementPoller(deps: EntitlementPollerDeps): EntitlementPoller;
+
 /**
  * How long `logout()` waits for the before-logout hooks before it proceeds without them. The device unregistration
  * the notifications hook issues is one request; a partner's sign-out screen must never hang on a slow network.
  */
 declare const LOGOUT_HOOK_BUDGET_MS = 3000;
 
+/** Runtime-construction options, distinct from the partner-facing config (host wiring / test seams). */
+interface CreateRuntimeOptions {
+    /**
+     * Whether to start the entitlement poller. Default: start ONLY when the transport was NOT injected (a real,
+     * base-URL runtime). An injected transport is the test seam, so auto-start stays OFF to keep MockTransport
+     * suites network-free; pass `true` to exercise the wired poller against a MockTransport.
+     */
+    readonly startEntitlementPolling?: boolean;
+    /** Test seam: an injected scheduler so a suite can drive the entitlement re-poll timer deterministically. */
+    readonly pollScheduler?: PollScheduler;
+    /**
+     * Host-wiring seam: the EventSource factory the built HTTP transport falls back to when a streaming
+     * `res.body` is unavailable (stock RN fetch). The rn facade injects react-native-sse here so streaming works
+     * on stock React Native; core NEVER imports react-native-sse (it stays framework-free and only threads this
+     * through). Absent (web/expo, or an injected transport) => the fetch-body streaming path is used.
+     */
+    readonly eventSourceFactory?: EventSourceFactory;
+    /**
+     * Host-wiring seam: which entry point built this runtime, sent as X-Everfur-SDK-Platform on every request.
+     * The rn facade leaves it at the default; the web facade names `web`. Never read from partner config, for
+     * the reason on `SdkPlatform`.
+     */
+    readonly platform?: SdkPlatform;
+}
+/**
+ * Construct the runtime once (EverfurProvider mount). Builds the transport (injected test seam, else the
+ * real HTTP transport from the resolved client config), the IdentityProvider when a user is set, the
+ * capability registry, the entitlement store, and (for a real runtime) the entitlement poller.
+ * A config that cannot be resolved (missing publishableKey, or an unresolvable / non-https base URL when
+ * no transport is injected) does NOT throw: it yields a DISABLED runtime whose transport refuses and
+ * whose every capability settles to the deliberate off-state at `disabled.level === 'sdk_config'`.
+ * @throws {EverfurConfigError} only for a supplied ACTIVE secureStore, which expresses a security
+ * intent the SDK cannot yet honour and must not silently discard.
+ */
+declare function createEverfurRuntime(input: CreateEverfurRuntimeInput, opts?: CreateRuntimeOptions): EverfurRuntime;
+
 /** The pad's fixed canvas, in bitmap pixels (a 3:1 signature strip). */
 declare const SIGNATURE_CANVAS: Readonly<{
     width: 360;
@@ -113,4 +202,4 @@ declare function rasterizeTypedName(name: string): SignatureBitmap;
  */
 declare function encodeSignaturePng(bitmap: SignatureBitmap): string;
 
-export { type ChatBootstrapDiagnostics, type ChatBootstrapInput, type ChatBootstrapResult, ChatController, LOGOUT_HOOK_BUDGET_MS, type OptionalModule, SIGNATURE_CANVAS, type SignatureBitmap, type SignaturePoint, SuggestedPromptCategory, bootstrapChat, encodeSignaturePng, optionalModule, rasterizeStrokes, rasterizeTypedName };
+export { type ChatBootstrapDiagnostics, type ChatBootstrapInput, type ChatBootstrapResult, ChatController, ChatControllerDeps, CreateEverfurRuntimeInput, type CreateRuntimeOptions, type EntitlementPoller, type EntitlementPollerDeps, EverfurRuntime, LOGOUT_HOOK_BUDGET_MS, MESSAGE_MAX_CHARS, MIN_POLL_INTERVAL_SECONDS, type PollScheduler, SIGNATURE_CANVAS, SdkPlatform, type SignatureBitmap, type SignaturePoint, SuggestedPromptCategory, TelemetryPort, type TimerHandle, bootstrapChat, createChatController, createEntitlementPoller, createEverfurRuntime, encodeSignaturePng, rasterizeStrokes, rasterizeTypedName };

package/dist/core/index.d.ts

@@ -1,43 +1,41 @@
 export { K as KvPort } from '../cacheEpoch-DknKn3S0.js';
-export { B as BeforeLogoutContext, e as BeforeLogoutHook, C as CapabilityKind, f as CapabilityRegistry, g as CapabilityServices, h as ChatControllerRegistry, i as ChatScope, j as CreateEverfurRuntimeInput, k as CreateRuntimeOptions, l as EntitlementPoller, m as EntitlementPollerDeps, E as EntitlementSnapshot, n as EntitlementStore, o as EverfurRuntime, p as EverfurRuntimeConfig, L as LogLevel, a as LogRecord, b as LogSink, M as MIN_POLL_INTERVAL_SECONDS, N as NULL_SECURE_STORE, q as PollScheduler, P as PrepareOptions, c as PrepareResult, d as PrepareStatus, R as RuntimeTheme, r as RuntimeUser, S as SecureStorePort, T as TimerHandle, s as createEntitlementPoller, t as createEverfurRuntime } from '../runtime-BR9ysG0J.js';
-export { T as TelemetryPort, n as noopTelemetry } from '../TelemetryPort-BDNr00hu.js';
+import { C as CreateEverfurRuntimeInput, e as EverfurRuntime } from '../runtimeTypes-w5KqBMcs.js';
+export { B as BeforeLogoutContext, f as BeforeLogoutHook, g as CapabilityKind, h as CapabilityRegistry, i as CapabilityServices, j as ChatControllerRegistry, k as ChatScope, E as EntitlementSnapshot, l as EntitlementStore, m as EverfurRuntimeConfig, L as LogLevel, a as LogRecord, b as LogSink, N as NULL_SECURE_STORE, P as PrepareOptions, c as PrepareResult, d as PrepareStatus, R as RuntimeTheme, n as RuntimeUser, S as SecureStorePort } from '../runtimeTypes-w5KqBMcs.js';
+import { T as TelemetryPort } from '../TelemetryPort-BDNr00hu.js';
+export { n as noopTelemetry } from '../TelemetryPort-BDNr00hu.js';
 export { E as ErrorPolicyPort, d as defaultErrorPolicy } from '../ErrorPolicyPort-CwbfmxzJ.js';
 export { C as CameraPort, a as CaptureOptions, M as MediaSource, u as unavailableCamera } from '../CameraPort-Cv31Pz7g.js';
 export { F as FileHandle, b as FilePort } from '../ports-BN6RHF9W.js';
-import { l as SuggestedPromptCategory, m as ChatController } from '../ports-DMolTRzU.js';
-export { n as CHAT_FEEDBACK_TYPES, o as CHECKIN_ANSWERABLE_STATUS, C as ChatCheckin, a as ChatCheckinTarget, p as ChatControllerDeps, b as ChatConversation, c as ChatConversationListOptions, d as ChatConversationPage, e as ChatFeedbackReceipt, f as ChatFeedbackType, q as ChatHandlers, g as ChatHistoryOptions, i as ChatMessage, h as ChatMessagePage, r as ChatSnapshot, j as ChatStatus, k as Citation, F as FEEDBACK_NOTES_MAX_CHARS, M as MAX_IMAGE_KEYS_PER_MESSAGE, s as MESSAGE_MAX_CHARS, S as SendOptions, t as Timers, u as createChatController, v as isCheckinSettled } from '../ports-DMolTRzU.js';
+export { O as OptionalModule, o as optionalModule } from '../optionalModule-DbJmsq5f.js';
+import { m as ChatControllerDeps, l as ChatController, n as SuggestedPromptCategory } from '../ports-D7YW8qz9.js';
+export { o as CHAT_FEEDBACK_TYPES, p as CHECKIN_ANSWERABLE_STATUS, C as ChatCheckin, a as ChatCheckinTarget, b as ChatConversation, c as ChatConversationListOptions, d as ChatConversationPage, e as ChatFeedbackReceipt, f as ChatFeedbackType, q as ChatHandlers, g as ChatHistoryOptions, i as ChatMessage, h as ChatMessagePage, r as ChatSnapshot, j as ChatStatus, k as Citation, F as FEEDBACK_NOTES_MAX_CHARS, M as MAX_IMAGE_KEYS_PER_MESSAGE, S as SendOptions, s as Timers, t as isCheckinSettled } from '../ports-D7YW8qz9.js';
 import { E as EverfurError } from '../EverfurResult-DN9pL2Ab.js';
 import { P as PetRef, C as ConversationId } from '../ids-B2GAAifq.js';
-export { f as ATTACHMENT_ACCEPT, g as ATTACHMENT_BACKOFF_MS, h as ATTACHMENT_INITIATE_PATH, i as ATTACHMENT_MAX_ATTEMPTS, j as ATTACHMENT_MIME_TYPES, k as ATTACHMENT_QUEUE_CONCURRENCY, A as AttachmentError, a as AttachmentErrorCode, b as AttachmentOutcome, c as AttachmentQueue, l as AttachmentQueueDeps, m as AttachmentQueueSnapshot, d as AttachmentState, e as AttachmentStatus, n as AttachmentUploadPolicy, M as MAX_ATTACHMENTS_PER_MESSAGE, o as MAX_ATTACHMENT_BYTES, p as MAX_FILENAME_LENGTH, V as ValidatedAttachment, q as attachmentSize, r as createAttachmentQueue, s as formatBytes, t as initiateAttachmentUpload, u as isAttachmentMime, v as sanitizeFilename, w as uploadAttachmentBytes, x as validateAttachment } from '../attachments-Bw3iMQgu.js';
-export { G as SdkPlatform } from '../config-DW60uRb9.js';
-export { c as EverfurThemeInput } from '../entitlementRepository-DSbzuyAW.js';
-export { C as CreateClinicRequestBatchInput, F as FACT_FIELD_BY_KIND, v as FACT_VALUE_FIELD, w as FactFieldValue, x as FactValueKind, H as HttpRecordsClinicRepositoryDeps, y as HttpRecordsRepositoryDeps, z as RECORDS_CLINIC_BATCH_MAX, R as RecordClinicianNote, a as RecordClinicianNoteSection, b as RecordCompleteness, c as RecordConflict, d as RecordConflictCandidate, e as RecordDepthView, f as RecordDocumentContributionsView, g as RecordEncounter, h as RecordExamSystem, A as RecordFactEditInput, B as RecordFactRemoveInput, i as RecordLabMarker, j as RecordLabPoint, D as RecordMarker, E as RecordMarkerLatest, G as RecordMarkerPoint, I as RecordMarkerSummary, J as RecordMarkersView, K as RecordPdfLink, k as RecordPhysicalExam, L as RecordShare, M as RecordShareLink, N as RecordsAuthorizationSignature, O as RecordsClinicBatch, P as RecordsClinicBatchClient, Q as RecordsClinicBatchItem, S as RecordsClinicBatchResult, T as RecordsClinicTarget, m as RecordsDepthClient, U as RecordsSignatureSuggestion, n as RecordsTimelineMedication, o as RecordsTimelineVaccine, p as RecordsTimelineView, q as RecordsTimelineVisit, r as RecordsTimelineWeight, V as createRecordsClinicBatchClient, W as createRecordsDepthClient, X as factCorrectionFor, Y as factValueCorrection, Z as inferFactValueKind, _ as isFactReviewerLocked, s as mapDocumentContributions, t as mapRecordDepth, $ as mapRecordMarkers, a0 as mapRecordPdfLink, a1 as mapRecordShareLink, a2 as mapRecordShareList, u as mapRecordsTimeline, a3 as mapSignatureSuggestions, a4 as resolveShareUrl } from '../depth-DjDcJ6kH.js';
+export { f as ATTACHMENT_ACCEPT, g as ATTACHMENT_BACKOFF_MS, h as ATTACHMENT_INITIATE_PATH, i as ATTACHMENT_MAX_ATTEMPTS, j as ATTACHMENT_MIME_TYPES, k as ATTACHMENT_QUEUE_CONCURRENCY, A as AttachmentError, a as AttachmentErrorCode, b as AttachmentOutcome, c as AttachmentQueue, l as AttachmentQueueDeps, m as AttachmentQueueSnapshot, d as AttachmentState, e as AttachmentStatus, n as AttachmentUploadPolicy, M as MAX_ATTACHMENTS_PER_MESSAGE, o as MAX_ATTACHMENT_BYTES, p as MAX_FILENAME_LENGTH, V as ValidatedAttachment, q as attachmentSize, r as createAttachmentQueue, s as formatBytes, t as initiateAttachmentUpload, u as isAttachmentMime, v as sanitizeFilename, w as uploadAttachmentBytes, x as validateAttachment } from '../attachments-DpldrvIW.js';
+import { p as EventSourceFactory, G as SdkPlatform } from '../config-C7eb_IMD.js';
+import { a as EntitlementResolution, F as FetchEntitlementsArgs } from '../entitlementRepository-B7egEdW6.js';
+import { E as EntitlementDecision } from '../resolve-D4Ywz5OS.js';
+import { A as AuthContext } from '../identity-CEi9GRFZ.js';
+import { C as ClientBranding } from '../branding-CsRdeNwK.js';
+export { E as EverfurThemeInput } from '../branding-CsRdeNwK.js';
+export { C as CreateClinicRequestBatchInput, F as FACT_FIELD_BY_KIND, w as FACT_VALUE_FIELD, x as FactFieldValue, y as FactValueKind, H as HttpRecordsClinicRepositoryDeps, z as HttpRecordsRepositoryDeps, A as RECORDS_CLINIC_BATCH_MAX, R as RecordClinicianNote, a as RecordClinicianNoteSection, b as RecordCompleteness, c as RecordConflict, d as RecordConflictCandidate, e as RecordDepthView, f as RecordDocumentContributionsView, g as RecordEncounter, h as RecordExamSystem, B as RecordFactEditInput, D as RecordFactRemoveInput, i as RecordLabMarker, j as RecordLabPoint, E as RecordMarker, G as RecordMarkerLatest, I as RecordMarkerPoint, J as RecordMarkerSummary, K as RecordMarkersView, L as RecordPdfLink, k as RecordPhysicalExam, M as RecordShare, N as RecordShareLink, O as RecordsAuthorizationSignature, P as RecordsClinicBatch, Q as RecordsClinicBatchClient, S as RecordsClinicBatchItem, T as RecordsClinicBatchResult, U as RecordsClinicTarget, m as RecordsDepthClient, n as RecordsRequestDocument, V as RecordsSignatureSuggestion, o as RecordsTimelineMedication, p as RecordsTimelineVaccine, q as RecordsTimelineView, r as RecordsTimelineVisit, s as RecordsTimelineWeight, W as createRecordsClinicBatchClient, X as createRecordsDepthClient, Y as factCorrectionFor, Z as factValueCorrection, _ as inferFactValueKind, $ as isFactReviewerLocked, t as mapDocumentContributions, u as mapRecordDepth, a0 as mapRecordMarkers, a1 as mapRecordPdfLink, a2 as mapRecordShareLink, a3 as mapRecordShareList, v as mapRecordsTimeline, a4 as mapSignatureSuggestions, a5 as resolveShareUrl } from '../depth-DvPwPuT_.js';
 export { R as RecordDocumentMeta, a as RecordEntity, b as RecordOrigin, f as RecordsRequestGroupView, d as RecordsRequestView } from '../models-B-Uh2LTf.js';
-export { C as CheckinAnswer, a as CheckinOutcome, W as WatchCase } from '../casesRepository-ClLv6qMl.js';
-import '../resolve-D4Ywz5OS.js';
-import '../identity-BMx2SUOM.js';
-import '../requestFunnel-CjW7uDuA.js';
+export { C as CheckinAnswer, a as CheckinOutcome, W as WatchCase } from '../casesRepository-v6QczS9N.js';
+import '../petsRepository-Bk6GDwLs.js';
 import '../profile-CSs1wlXT.js';
+import '../requestFunnel-DFMGcluw.js';
 
-/** The settled outcome of a guarded optional-module load. Never a throw. */
-type OptionalModule<T> = {
-    readonly available: true;
-    readonly module: T;
-} | {
-    readonly available: false;
-    readonly module: null;
-    readonly reason: string;
-};
 /**
- * Load an optional native peer behind a guard. `load` is the host-provided thunk (typically a `require`).
- * An optional `validate` type-guard rejects a present-but-wrong-shape module (a version whose surface drifted)
- * without throwing. Returns a settled result; NEVER throws.
+ * The server's own limits on a chat message, mirrored here so a violation is caught before any UI is
+ * rendered for it. `SendWidgetMessageRequest.message` on EFBackend main declares
+ * `min_length=1, max_length=4000`; the server remains authoritative and still enforces both.
  *
- * @param name  human-readable peer name, only used to build the `reason` string.
- * @param load  the thunk that resolves the module (e.g. `() => require('expo-secure-store')`).
- * @param validate  optional shape guard; when it returns false the module is treated as unavailable.
+ * These are NOT in the generated contract projection, so they are pinned here with their source rather
+ * than derived. If the server relaxes either bound, this is the one place to update.
  */
-declare function optionalModule<T>(name: string, load: () => unknown, validate?: (candidate: unknown) => candidate is T): OptionalModule<T>;
+declare const MESSAGE_MAX_CHARS = 4000;
+
+declare function createChatController(deps: ChatControllerDeps): ChatController;
 
 interface ChatBootstrapInput {
     /** omit => general conversation */
@@ -78,12 +76,103 @@ declare function bootstrapChat(input: ChatBootstrapInput, deps: {
     readonly controller: ChatController;
 }): Promise<ChatBootstrapResult>;
 
+/** Minimum re-poll interval; a server ttl below this is clamped so we never hot-loop the endpoint. */
+declare const MIN_POLL_INTERVAL_SECONDS = 30;
+/** Injectable timer seam so a suite drives the re-poll clock deterministically (default: global timers). */
+type TimerHandle = ReturnType<typeof setTimeout>;
+interface PollScheduler {
+    set(callback: () => void, ms: number): TimerHandle;
+    clear(handle: TimerHandle): void;
+}
+interface EntitlementPollerDeps {
+    /** Re-derived every poll so a token refresh / user re-scope is reflected on the next hop. */
+    readonly authFor: () => AuthContext;
+    /**
+     * Push a fresh verdict into the runtime store. Called ONLY on a 200 'updated'. Carries the server-driven
+     * branding parsed from the SAME body (null when absent/unparseable -> the compiled default theme); branding
+     * is additive and orthogonal to the decisions.
+     */
+    readonly update: (decisions: readonly EntitlementDecision[], branding: ClientBranding | null) => void;
+    /** Optional region hint forwarded to the endpoint. */
+    readonly region?: string;
+    /** Called synchronously as each fetch starts; the runtime marks the store pending for a scope's first one. */
+    readonly onFetch?: () => void;
+    /**
+     * Called when a fetch settles for the current scope, whatever the outcome (`updated` after `update`,
+     * `notModified`, `failed`, a thrown resolve). Not called for a fetch a refresh() or stop() superseded.
+     */
+    readonly onSettled?: () => void;
+    readonly telemetry?: TelemetryPort;
+    /** Test seam; defaults to global timers (unref'd so a live poll never pins a Node event loop). */
+    readonly scheduler?: PollScheduler;
+    /** Test seam; defaults to the real repository call. */
+    readonly resolve?: (auth: AuthContext, args: FetchEntitlementsArgs) => Promise<EntitlementResolution>;
+    /** Floor override for tests; defaults to MIN_POLL_INTERVAL_SECONDS. */
+    readonly floorSeconds?: number;
+    /** Test seam for deterministic failure-retry jitter; defaults to Math.random. */
+    readonly rng?: () => number;
+}
+interface EntitlementPoller {
+    /** Idempotent. Kicks an immediate first poll, then self-schedules on the returned cadence. */
+    start(): void;
+    /** Idempotent. Clears the pending timer and prevents any post-stop update (dispose calls this). */
+    stop(): void;
+    /**
+     * Drop the cached revision and re-poll immediately. A user / pet re-scope invalidates the cached verdict, so
+     * the next request must be UNCONDITIONAL (no If-None-Match) to force a fresh 200 for the new scope.
+     */
+    refresh(): void;
+    /**
+     * Settle ONE verdict fetch and report it: the poll already in flight when one is (the warm-up rides the
+     * first tick rather than racing it), otherwise a fresh one. On a poller that was never started it fetches
+     * once and arms nothing. Resolves null when a stop() or refresh() superseded the fetch before it landed.
+     */
+    prime(): Promise<EntitlementResolution | null>;
+}
+declare function createEntitlementPoller(deps: EntitlementPollerDeps): EntitlementPoller;
+
 /**
  * How long `logout()` waits for the before-logout hooks before it proceeds without them. The device unregistration
  * the notifications hook issues is one request; a partner's sign-out screen must never hang on a slow network.
  */
 declare const LOGOUT_HOOK_BUDGET_MS = 3000;
 
+/** Runtime-construction options, distinct from the partner-facing config (host wiring / test seams). */
+interface CreateRuntimeOptions {
+    /**
+     * Whether to start the entitlement poller. Default: start ONLY when the transport was NOT injected (a real,
+     * base-URL runtime). An injected transport is the test seam, so auto-start stays OFF to keep MockTransport
+     * suites network-free; pass `true` to exercise the wired poller against a MockTransport.
+     */
+    readonly startEntitlementPolling?: boolean;
+    /** Test seam: an injected scheduler so a suite can drive the entitlement re-poll timer deterministically. */
+    readonly pollScheduler?: PollScheduler;
+    /**
+     * Host-wiring seam: the EventSource factory the built HTTP transport falls back to when a streaming
+     * `res.body` is unavailable (stock RN fetch). The rn facade injects react-native-sse here so streaming works
+     * on stock React Native; core NEVER imports react-native-sse (it stays framework-free and only threads this
+     * through). Absent (web/expo, or an injected transport) => the fetch-body streaming path is used.
+     */
+    readonly eventSourceFactory?: EventSourceFactory;
+    /**
+     * Host-wiring seam: which entry point built this runtime, sent as X-Everfur-SDK-Platform on every request.
+     * The rn facade leaves it at the default; the web facade names `web`. Never read from partner config, for
+     * the reason on `SdkPlatform`.
+     */
+    readonly platform?: SdkPlatform;
+}
+/**
+ * Construct the runtime once (EverfurProvider mount). Builds the transport (injected test seam, else the
+ * real HTTP transport from the resolved client config), the IdentityProvider when a user is set, the
+ * capability registry, the entitlement store, and (for a real runtime) the entitlement poller.
+ * A config that cannot be resolved (missing publishableKey, or an unresolvable / non-https base URL when
+ * no transport is injected) does NOT throw: it yields a DISABLED runtime whose transport refuses and
+ * whose every capability settles to the deliberate off-state at `disabled.level === 'sdk_config'`.
+ * @throws {EverfurConfigError} only for a supplied ACTIVE secureStore, which expresses a security
+ * intent the SDK cannot yet honour and must not silently discard.
+ */
+declare function createEverfurRuntime(input: CreateEverfurRuntimeInput, opts?: CreateRuntimeOptions): EverfurRuntime;
+
 /** The pad's fixed canvas, in bitmap pixels (a 3:1 signature strip). */
 declare const SIGNATURE_CANVAS: Readonly<{
     width: 360;
@@ -113,4 +202,4 @@ declare function rasterizeTypedName(name: string): SignatureBitmap;
  */
 declare function encodeSignaturePng(bitmap: SignatureBitmap): string;
 
-export { type ChatBootstrapDiagnostics, type ChatBootstrapInput, type ChatBootstrapResult, ChatController, LOGOUT_HOOK_BUDGET_MS, type OptionalModule, SIGNATURE_CANVAS, type SignatureBitmap, type SignaturePoint, SuggestedPromptCategory, bootstrapChat, encodeSignaturePng, optionalModule, rasterizeStrokes, rasterizeTypedName };
+export { type ChatBootstrapDiagnostics, type ChatBootstrapInput, type ChatBootstrapResult, ChatController, ChatControllerDeps, CreateEverfurRuntimeInput, type CreateRuntimeOptions, type EntitlementPoller, type EntitlementPollerDeps, EverfurRuntime, LOGOUT_HOOK_BUDGET_MS, MESSAGE_MAX_CHARS, MIN_POLL_INTERVAL_SECONDS, type PollScheduler, SIGNATURE_CANVAS, SdkPlatform, type SignatureBitmap, type SignaturePoint, SuggestedPromptCategory, TelemetryPort, type TimerHandle, bootstrapChat, createChatController, createEntitlementPoller, createEverfurRuntime, encodeSignaturePng, rasterizeStrokes, rasterizeTypedName };