@everfur/sdk 0.3.0 → 0.4.0

package/dist/{depth-CErXCU8J.d.cts → depth-D5HwcvKC.d.cts}

@@ -1,7 +1,7 @@
 import { c as EverfurResult, E as EverfurError } from './EverfurResult-DN9pL2Ab.cjs';
 import { P as PetRef } from './ids-B2GAAifq.cjs';
-import { R as RequestFunnel } from './requestFunnel-L-BQfi0z.cjs';
-import { A as AuthContext } from './identity-DI4eVx9S.cjs';
+import { R as RequestFunnel } from './requestFunnel-BjDpqqvm.cjs';
+import { A as AuthContext } from './identity-C2-08BZW.cjs';
 import { E as ErrorPolicyPort } from './ErrorPolicyPort-CNf4uQZP.cjs';
 import { d as RecordsRequestView, R as RecordDocumentMeta, a as RecordEntity } from './models-D2EUxPZY.cjs';
 
@@ -254,6 +254,27 @@ interface HttpRecordsRepositoryDeps {
     readonly apiBaseUrl?: string;
 }
 
+/**
+ * One file the member uploaded onto their own request.
+ *
+ * `fileName` is null for an upload made before the server kept the name (the schema says so), and a
+ * surface must then show the format, size and time on their own rather than inventing a title.
+ * `byteSize` and `receivedAt` are nullable for the same historical reason.
+ */
+interface RecordsRequestDocument {
+    /** The document's own id on the wire. Stable, and the list key. */
+    readonly sourceDocId: string;
+    readonly fileName: string | null;
+    readonly docFormat: string | null;
+    readonly byteSize: number | null;
+    /** ISO 8601, or null when the row carries no time. */
+    readonly receivedAt: string | null;
+    /** A presigned https GET the host opens itself. Never fetched with the bearer. */
+    readonly downloadUrl: string;
+    /** Seconds the signed URL stays good for, as the server minted it. */
+    readonly expiresInSeconds: number;
+}
+
 /** A freshly minted share link. `shareUrl` is shown once; the list read never repeats it. */
 interface RecordShareLink {
     readonly shareId: string;
@@ -493,10 +514,20 @@ interface RecordsDepthClient {
     editFact(petRef: PetRef, input: RecordFactEditInput): Promise<EverfurResult<void>>;
     /** Remove one fact from the owner-facing record (append-only reject; 409 when reviewer-decided). */
     removeFact(petRef: PetRef, input: RecordFactRemoveInput): Promise<EverfurResult<void>>;
+    /**
+     * The files the member uploaded onto one of their own records requests, oldest first, each with a
+     * short-lived signed download.
+     *
+     * NOT GATED BY THE DEPTH SWITCH, unlike every other method on this client: the route bounds these
+     * on `records.record.read` and the pet's records consent only, because they are the member's OWN
+     * uploads rather than clinical depth. So a caller must NOT fold a 404 here to `available:false`
+     * and hide the member's files; a 404 means the request is not theirs.
+     */
+    listRequestDocuments(requestId: string): Promise<EverfurResult<readonly RecordsRequestDocument[]>>;
     /** The member's reusable signature gallery for the consent screen, newest first. */
     listAuthorizationSignatures(): Promise<EverfurResult<readonly RecordsSignatureSuggestion[]>>;
 }
 /** The depth client, over the same auth, funnel and error policy as the records repository. */
 declare function createRecordsDepthClient(deps: HttpRecordsRepositoryDeps): RecordsDepthClient;
 
-export { mapRecordMarkers as $, type RecordFactEditInput as A, type RecordFactRemoveInput as B, type CreateClinicRequestBatchInput as C, type RecordMarker as D, type RecordMarkerLatest as E, FACT_FIELD_BY_KIND as F, type RecordMarkerPoint as G, type HttpRecordsClinicRepositoryDeps as H, type RecordMarkerSummary as I, type RecordMarkersView as J, type RecordPdfLink as K, type RecordShare as L, type RecordShareLink as M, type RecordsAuthorizationSignature as N, type RecordsClinicBatch as O, type RecordsClinicBatchClient as P, type RecordsClinicBatchItem as Q, type RecordClinicianNote as R, type RecordsClinicBatchResult as S, type RecordsClinicTarget as T, type RecordsSignatureSuggestion as U, createRecordsClinicBatchClient as V, createRecordsDepthClient as W, factCorrectionFor as X, factValueCorrection as Y, inferFactValueKind as Z, isFactReviewerLocked as _, type RecordClinicianNoteSection as a, mapRecordPdfLink as a0, mapRecordShareLink as a1, mapRecordShareList as a2, mapSignatureSuggestions as a3, resolveShareUrl as a4, type RecordsClinicSearchInput as a5, type RecordsClinicSearchPage as a6, type RecordsRecentClinicsInput as a7, type RecordsAuthorizationCopy as a8, type CreateClinicRequestInput as a9, type RecordsSignatureUploadPolicy as aa, type RecordCompleteness as b, type RecordConflict as c, type RecordConflictCandidate as d, type RecordDepthView as e, type RecordDocumentContributionsView as f, type RecordEncounter as g, type RecordExamSystem as h, type RecordLabMarker as i, type RecordLabPoint as j, type RecordPhysicalExam as k, type RecordsClinic as l, type RecordsDepthClient as m, type RecordsTimelineMedication as n, type RecordsTimelineVaccine as o, type RecordsTimelineView as p, type RecordsTimelineVisit as q, type RecordsTimelineWeight as r, mapDocumentContributions as s, mapRecordDepth as t, mapRecordsTimeline as u, FACT_VALUE_FIELD as v, type FactFieldValue as w, type FactValueKind as x, type HttpRecordsRepositoryDeps as y, RECORDS_CLINIC_BATCH_MAX as z };
+export { isFactReviewerLocked as $, RECORDS_CLINIC_BATCH_MAX as A, type RecordFactEditInput as B, type CreateClinicRequestBatchInput as C, type RecordFactRemoveInput as D, type RecordMarker as E, FACT_FIELD_BY_KIND as F, type RecordMarkerLatest as G, type HttpRecordsClinicRepositoryDeps as H, type RecordMarkerPoint as I, type RecordMarkerSummary as J, type RecordMarkersView as K, type RecordPdfLink as L, type RecordShare as M, type RecordShareLink as N, type RecordsAuthorizationSignature as O, type RecordsClinicBatch as P, type RecordsClinicBatchClient as Q, type RecordClinicianNote as R, type RecordsClinicBatchItem as S, type RecordsClinicBatchResult as T, type RecordsClinicTarget as U, type RecordsSignatureSuggestion as V, createRecordsClinicBatchClient as W, createRecordsDepthClient as X, factCorrectionFor as Y, factValueCorrection as Z, inferFactValueKind as _, type RecordClinicianNoteSection as a, mapRecordMarkers as a0, mapRecordPdfLink as a1, mapRecordShareLink as a2, mapRecordShareList as a3, mapSignatureSuggestions as a4, resolveShareUrl as a5, type RecordsClinicSearchInput as a6, type RecordsClinicSearchPage as a7, type RecordsRecentClinicsInput as a8, type RecordsAuthorizationCopy as a9, type CreateClinicRequestInput as aa, type RecordsSignatureUploadPolicy as ab, type RecordCompleteness as b, type RecordConflict as c, type RecordConflictCandidate as d, type RecordDepthView as e, type RecordDocumentContributionsView as f, type RecordEncounter as g, type RecordExamSystem as h, type RecordLabMarker as i, type RecordLabPoint as j, type RecordPhysicalExam as k, type RecordsClinic as l, type RecordsDepthClient as m, type RecordsRequestDocument as n, type RecordsTimelineMedication as o, type RecordsTimelineVaccine as p, type RecordsTimelineView as q, type RecordsTimelineVisit as r, type RecordsTimelineWeight as s, mapDocumentContributions as t, mapRecordDepth as u, mapRecordsTimeline as v, FACT_VALUE_FIELD as w, type FactFieldValue as x, type FactValueKind as y, type HttpRecordsRepositoryDeps as z };

package/dist/{depth-DjDcJ6kH.d.ts → depth-DvPwPuT_.d.ts}

@@ -1,7 +1,7 @@
 import { c as EverfurResult, E as EverfurError } from './EverfurResult-DN9pL2Ab.js';
 import { P as PetRef } from './ids-B2GAAifq.js';
-import { R as RequestFunnel } from './requestFunnel-CjW7uDuA.js';
-import { A as AuthContext } from './identity-BMx2SUOM.js';
+import { R as RequestFunnel } from './requestFunnel-DFMGcluw.js';
+import { A as AuthContext } from './identity-CEi9GRFZ.js';
 import { E as ErrorPolicyPort } from './ErrorPolicyPort-CwbfmxzJ.js';
 import { d as RecordsRequestView, R as RecordDocumentMeta, a as RecordEntity } from './models-B-Uh2LTf.js';
 
@@ -254,6 +254,27 @@ interface HttpRecordsRepositoryDeps {
     readonly apiBaseUrl?: string;
 }
 
+/**
+ * One file the member uploaded onto their own request.
+ *
+ * `fileName` is null for an upload made before the server kept the name (the schema says so), and a
+ * surface must then show the format, size and time on their own rather than inventing a title.
+ * `byteSize` and `receivedAt` are nullable for the same historical reason.
+ */
+interface RecordsRequestDocument {
+    /** The document's own id on the wire. Stable, and the list key. */
+    readonly sourceDocId: string;
+    readonly fileName: string | null;
+    readonly docFormat: string | null;
+    readonly byteSize: number | null;
+    /** ISO 8601, or null when the row carries no time. */
+    readonly receivedAt: string | null;
+    /** A presigned https GET the host opens itself. Never fetched with the bearer. */
+    readonly downloadUrl: string;
+    /** Seconds the signed URL stays good for, as the server minted it. */
+    readonly expiresInSeconds: number;
+}
+
 /** A freshly minted share link. `shareUrl` is shown once; the list read never repeats it. */
 interface RecordShareLink {
     readonly shareId: string;
@@ -493,10 +514,20 @@ interface RecordsDepthClient {
     editFact(petRef: PetRef, input: RecordFactEditInput): Promise<EverfurResult<void>>;
     /** Remove one fact from the owner-facing record (append-only reject; 409 when reviewer-decided). */
     removeFact(petRef: PetRef, input: RecordFactRemoveInput): Promise<EverfurResult<void>>;
+    /**
+     * The files the member uploaded onto one of their own records requests, oldest first, each with a
+     * short-lived signed download.
+     *
+     * NOT GATED BY THE DEPTH SWITCH, unlike every other method on this client: the route bounds these
+     * on `records.record.read` and the pet's records consent only, because they are the member's OWN
+     * uploads rather than clinical depth. So a caller must NOT fold a 404 here to `available:false`
+     * and hide the member's files; a 404 means the request is not theirs.
+     */
+    listRequestDocuments(requestId: string): Promise<EverfurResult<readonly RecordsRequestDocument[]>>;
     /** The member's reusable signature gallery for the consent screen, newest first. */
     listAuthorizationSignatures(): Promise<EverfurResult<readonly RecordsSignatureSuggestion[]>>;
 }
 /** The depth client, over the same auth, funnel and error policy as the records repository. */
 declare function createRecordsDepthClient(deps: HttpRecordsRepositoryDeps): RecordsDepthClient;
 
-export { mapRecordMarkers as $, type RecordFactEditInput as A, type RecordFactRemoveInput as B, type CreateClinicRequestBatchInput as C, type RecordMarker as D, type RecordMarkerLatest as E, FACT_FIELD_BY_KIND as F, type RecordMarkerPoint as G, type HttpRecordsClinicRepositoryDeps as H, type RecordMarkerSummary as I, type RecordMarkersView as J, type RecordPdfLink as K, type RecordShare as L, type RecordShareLink as M, type RecordsAuthorizationSignature as N, type RecordsClinicBatch as O, type RecordsClinicBatchClient as P, type RecordsClinicBatchItem as Q, type RecordClinicianNote as R, type RecordsClinicBatchResult as S, type RecordsClinicTarget as T, type RecordsSignatureSuggestion as U, createRecordsClinicBatchClient as V, createRecordsDepthClient as W, factCorrectionFor as X, factValueCorrection as Y, inferFactValueKind as Z, isFactReviewerLocked as _, type RecordClinicianNoteSection as a, mapRecordPdfLink as a0, mapRecordShareLink as a1, mapRecordShareList as a2, mapSignatureSuggestions as a3, resolveShareUrl as a4, type RecordsClinicSearchInput as a5, type RecordsClinicSearchPage as a6, type RecordsRecentClinicsInput as a7, type RecordsAuthorizationCopy as a8, type CreateClinicRequestInput as a9, type RecordsSignatureUploadPolicy as aa, type RecordCompleteness as b, type RecordConflict as c, type RecordConflictCandidate as d, type RecordDepthView as e, type RecordDocumentContributionsView as f, type RecordEncounter as g, type RecordExamSystem as h, type RecordLabMarker as i, type RecordLabPoint as j, type RecordPhysicalExam as k, type RecordsClinic as l, type RecordsDepthClient as m, type RecordsTimelineMedication as n, type RecordsTimelineVaccine as o, type RecordsTimelineView as p, type RecordsTimelineVisit as q, type RecordsTimelineWeight as r, mapDocumentContributions as s, mapRecordDepth as t, mapRecordsTimeline as u, FACT_VALUE_FIELD as v, type FactFieldValue as w, type FactValueKind as x, type HttpRecordsRepositoryDeps as y, RECORDS_CLINIC_BATCH_MAX as z };
+export { isFactReviewerLocked as $, RECORDS_CLINIC_BATCH_MAX as A, type RecordFactEditInput as B, type CreateClinicRequestBatchInput as C, type RecordFactRemoveInput as D, type RecordMarker as E, FACT_FIELD_BY_KIND as F, type RecordMarkerLatest as G, type HttpRecordsClinicRepositoryDeps as H, type RecordMarkerPoint as I, type RecordMarkerSummary as J, type RecordMarkersView as K, type RecordPdfLink as L, type RecordShare as M, type RecordShareLink as N, type RecordsAuthorizationSignature as O, type RecordsClinicBatch as P, type RecordsClinicBatchClient as Q, type RecordClinicianNote as R, type RecordsClinicBatchItem as S, type RecordsClinicBatchResult as T, type RecordsClinicTarget as U, type RecordsSignatureSuggestion as V, createRecordsClinicBatchClient as W, createRecordsDepthClient as X, factCorrectionFor as Y, factValueCorrection as Z, inferFactValueKind as _, type RecordClinicianNoteSection as a, mapRecordMarkers as a0, mapRecordPdfLink as a1, mapRecordShareLink as a2, mapRecordShareList as a3, mapSignatureSuggestions as a4, resolveShareUrl as a5, type RecordsClinicSearchInput as a6, type RecordsClinicSearchPage as a7, type RecordsRecentClinicsInput as a8, type RecordsAuthorizationCopy as a9, type CreateClinicRequestInput as aa, type RecordsSignatureUploadPolicy as ab, type RecordCompleteness as b, type RecordConflict as c, type RecordConflictCandidate as d, type RecordDepthView as e, type RecordDocumentContributionsView as f, type RecordEncounter as g, type RecordExamSystem as h, type RecordLabMarker as i, type RecordLabPoint as j, type RecordPhysicalExam as k, type RecordsClinic as l, type RecordsDepthClient as m, type RecordsRequestDocument as n, type RecordsTimelineMedication as o, type RecordsTimelineVaccine as p, type RecordsTimelineView as q, type RecordsTimelineVisit as r, type RecordsTimelineWeight as s, mapDocumentContributions as t, mapRecordDepth as u, mapRecordsTimeline as v, FACT_VALUE_FIELD as w, type FactFieldValue as x, type FactValueKind as y, type HttpRecordsRepositoryDeps as z };

package/dist/entitlementRepository-B7egEdW6.d.ts

@@ -0,0 +1,43 @@
+import { E as EverfurError } from './EverfurResult-DN9pL2Ab.js';
+import { R as RequestFunnel } from './requestFunnel-DFMGcluw.js';
+import { A as AuthContext } from './identity-CEi9GRFZ.js';
+import { C as ClientBranding } from './branding-CsRdeNwK.js';
+import { E as EntitlementDecision } from './resolve-D4Ywz5OS.js';
+
+/** The conditional-GET endpoint (SPEC-00 §5.3). Relative; the transport prefixes the resolved base URL. */
+declare const ENTITLEMENTS_PATH = "/widget/v1/entitlements";
+/**
+ * The settled outcome of one entitlement fetch. `updated` carries a fresh verdict + the cadence to re-poll on;
+ * `notModified` means the cached verdict still holds; `failed` carries a normalized error and means keep-last.
+ */
+type EntitlementResolution = {
+    readonly kind: 'updated';
+    readonly revision: number;
+    readonly region: string;
+    readonly ttlSeconds: number;
+    readonly decisions: readonly EntitlementDecision[];
+    /**
+     * Server-driven branding parsed from the SAME 200 body's render_hints (orthogonal to capabilities).
+     * null when absent or unparseable (fail-closed -> the compiled Everfur default theme). OPTIONAL so a
+     * hand-built resolution (tests / injected resolve) need not supply it.
+     */
+    readonly branding?: ClientBranding | null;
+} | {
+    readonly kind: 'notModified';
+} | {
+    readonly kind: 'failed';
+    readonly error: EverfurError;
+};
+interface FetchEntitlementsArgs {
+    /** The revision we last stored; echoed as If-None-Match so an unchanged verdict returns 304. */
+    readonly cachedRevision?: number | null;
+    /** Optional region hint; forwarded as ?region. */
+    readonly region?: string;
+}
+/**
+ * Fetch the server-resolved entitlement verdict once. Never throws: a 304, a domain error, a network reject,
+ * and a malformed body all SETTLE to an EntitlementResolution. Fail-closed on every non-`updated` path.
+ */
+declare function fetchEntitlements(auth: AuthContext, args?: FetchEntitlementsArgs, funnel?: RequestFunnel): Promise<EntitlementResolution>;
+
+export { ENTITLEMENTS_PATH as E, type FetchEntitlementsArgs as F, type EntitlementResolution as a, fetchEntitlements as f };

package/dist/entitlementRepository-BpJ7tiwl.d.cts

@@ -0,0 +1,43 @@
+import { E as EverfurError } from './EverfurResult-DN9pL2Ab.cjs';
+import { R as RequestFunnel } from './requestFunnel-BjDpqqvm.cjs';
+import { A as AuthContext } from './identity-C2-08BZW.cjs';
+import { C as ClientBranding } from './branding-CsRdeNwK.cjs';
+import { E as EntitlementDecision } from './resolve-D4Ywz5OS.cjs';
+
+/** The conditional-GET endpoint (SPEC-00 §5.3). Relative; the transport prefixes the resolved base URL. */
+declare const ENTITLEMENTS_PATH = "/widget/v1/entitlements";
+/**
+ * The settled outcome of one entitlement fetch. `updated` carries a fresh verdict + the cadence to re-poll on;
+ * `notModified` means the cached verdict still holds; `failed` carries a normalized error and means keep-last.
+ */
+type EntitlementResolution = {
+    readonly kind: 'updated';
+    readonly revision: number;
+    readonly region: string;
+    readonly ttlSeconds: number;
+    readonly decisions: readonly EntitlementDecision[];
+    /**
+     * Server-driven branding parsed from the SAME 200 body's render_hints (orthogonal to capabilities).
+     * null when absent or unparseable (fail-closed -> the compiled Everfur default theme). OPTIONAL so a
+     * hand-built resolution (tests / injected resolve) need not supply it.
+     */
+    readonly branding?: ClientBranding | null;
+} | {
+    readonly kind: 'notModified';
+} | {
+    readonly kind: 'failed';
+    readonly error: EverfurError;
+};
+interface FetchEntitlementsArgs {
+    /** The revision we last stored; echoed as If-None-Match so an unchanged verdict returns 304. */
+    readonly cachedRevision?: number | null;
+    /** Optional region hint; forwarded as ?region. */
+    readonly region?: string;
+}
+/**
+ * Fetch the server-resolved entitlement verdict once. Never throws: a 304, a domain error, a network reject,
+ * and a malformed body all SETTLE to an EntitlementResolution. Fail-closed on every non-`updated` path.
+ */
+declare function fetchEntitlements(auth: AuthContext, args?: FetchEntitlementsArgs, funnel?: RequestFunnel): Promise<EntitlementResolution>;
+
+export { ENTITLEMENTS_PATH as E, type FetchEntitlementsArgs as F, type EntitlementResolution as a, fetchEntitlements as f };

package/dist/{identity-DI4eVx9S.d.cts → identity-C2-08BZW.d.cts}

@@ -1,6 +1,6 @@
 import { c as EverfurResult } from './EverfurResult-DN9pL2Ab.cjs';
 import { U as UserRef } from './ids-B2GAAifq.cjs';
-import { T as TransportPort, d as EverfurRequest } from './config-CzTZGlfF.cjs';
+import { T as TransportPort, d as EverfurRequest } from './config--Wu1Umhd.cjs';
 
 /**
  * A minted session token with the expiry the minter knows. `expiresAt` is what `mintPartnerSession` returns
@@ -55,7 +55,7 @@ type DeviceAuth = {
  * caller it is not: the widget context derives the identity from it (`user_ref = f"anon-{session_id}"`), so
  * without a stable value every request is a different user. `POST /conversations` creates the thread under
  * one identity and the very next `POST /conversations/{id}/messages` is resolved as another, the ownership
- * check misses, and the send settles `conversationNotFound` — every time. Each attempt also inserts a junk
+ * check misses, and the send settles `conversationNotFound`, every time. Each attempt also inserts a junk
  * virtual-user row and consumes the per-IP anonymous-creation budget.
  *
  * The format is load-bearing: the server matches `^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$`

package/dist/{identity-BMx2SUOM.d.ts → identity-CEi9GRFZ.d.ts}

@@ -1,6 +1,6 @@
 import { c as EverfurResult } from './EverfurResult-DN9pL2Ab.js';
 import { U as UserRef } from './ids-B2GAAifq.js';
-import { T as TransportPort, d as EverfurRequest } from './config-DW60uRb9.js';
+import { T as TransportPort, d as EverfurRequest } from './config-C7eb_IMD.js';
 
 /**
  * A minted session token with the expiry the minter knows. `expiresAt` is what `mintPartnerSession` returns
@@ -55,7 +55,7 @@ type DeviceAuth = {
  * caller it is not: the widget context derives the identity from it (`user_ref = f"anon-{session_id}"`), so
  * without a stable value every request is a different user. `POST /conversations` creates the thread under
  * one identity and the very next `POST /conversations/{id}/messages` is resolved as another, the ownership
- * check misses, and the send settles `conversationNotFound` — every time. Each attempt also inserts a junk
+ * check misses, and the send settles `conversationNotFound`, every time. Each attempt also inserts a junk
  * virtual-user row and consumes the per-IP anonymous-creation budget.
  *
  * The format is load-bearing: the server matches `^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$`