@everfur/sdk 0.3.0 → 0.4.0

package/dist/{entitlementRepository-DSbzuyAW.d.ts → branding-CsRdeNwK.d.cts}

@@ -1,8 +1,3 @@
-import { E as EverfurError } from './EverfurResult-DN9pL2Ab.js';
-import { R as RequestFunnel } from './requestFunnel-CjW7uDuA.js';
-import { A as AuthContext } from './identity-BMx2SUOM.js';
-import { E as EntitlementDecision } from './resolve-D4Ywz5OS.js';
-
 /** The fixed set of slot names, in the order the surfaces list them. */
 declare const THEME_SLOT_NAMES: readonly ["composerInput", "sendButton", "userBubble", "assistantBubble", "recordCard", "vetVisitButton", "primaryButton", "link"];
 type EverfurThemeSlotName = (typeof THEME_SLOT_NAMES)[number];
@@ -567,132 +562,5 @@ declare const MAX_FONT_SCALE_CEILING = 3.1;
  * constructor so it is portable + total on React Native (whose URL global is incomplete) and never throws.
  */
 declare function hardenHttpsUrl(url: string | null): string | null;
-/**
- * Overlay `b` onto `base`, field by field: a non-null branding field WINS; a null field KEEPS the base. A
- * valid brightness re-selects the matching compiled palette (light/dark); an invalid/absent brightness leaves
- * the base palette untouched. Slots merge per slot, per key. Returns a NEW deeply-frozen theme; `base` and `b`
- * are never mutated.
- *
- * The name is historical (the server was once the only overlay); `resolveTheme` applies it twice, server then
- * client, which is how the client wins per field. NOTE: foreground legibility (onPrimary/onAccent, the slot
- * guard) and URL hardening are applied by `resolveTheme`, the total entry point. Call this directly only when
- * you will finalize the result yourself.
- */
-declare function withServerBranding(base: EverfurTheme, b: ClientBranding | null): EverfurTheme;
-/**
- * Inputs to the total theme resolve. All optional; `resolveTheme(undefined)` yields the compiled Everfur
- * default. Merge order: compiled default <- server branding (render_hints) <- client theme prop, per field, with
- * the tenant's locked fields and the attribution kept from the server (see `resolveTheme`).
- */
-interface ResolveThemeInput {
-    /** Server-driven branding from the live entitlements render_hints (the tenant's console branding). */
-    readonly branding?: ClientBranding | null;
-    /**
-     * The clamped client `theme` prop. It WINS per cosmetic field over the server branding, except the fields the
-     * server lists in `locked_fields`. Its hidePoweredBy is IGNORED: whether the Everfur attribution shows is
-     * decided by server branding alone.
-     */
-    readonly clientOverride?: ClientBranding | null;
-    /**
-     * The device color scheme (useColorScheme / `prefers-color-scheme`). Read ONLY when the settled brightness is
-     * `auto` (an explicit opt-in); with no brightness set anywhere the theme is light, as Everfur's own apps are.
-     */
-    readonly colorScheme?: 'light' | 'dark' | null;
-    /** AccessibilityInfo reduced-motion / `prefers-reduced-motion`: collapses the motion tokens. */
-    readonly reducedMotion?: boolean;
-    /**
-     * The user's text scale as the host reads it (React Native: `PixelRatio.getFontScale()`; the browser: the
-     * browser's default font size over 16px). Floored at `TEXT_SCALE_FLOOR`; absent or junk reads as 1. Flowing
-     * content follows it uncapped; each chrome tier follows it up to that tier's cap (`type.scaleCaps`).
-     */
-    readonly textScale?: number;
-    /**
-     * Multiply the type sizes by the effective scale, per tier (`type.size` for content, `type.tierSizes` for every
-     * tier). A browser host passes true (CSS px do not follow the user's setting on their own); a React Native host
-     * leaves it false and lets the platform scale every Text natively, capped per tier by `maxFontSizeMultiplier`.
-     */
-    readonly scaleTypeSizes?: boolean;
-    /** The user asked for more contrast (`prefers-contrast: more`): the palette is derived by `deriveHighContrast`. */
-    readonly highContrast?: boolean;
-    /**
-     * The family the platform's generic mono keyword (`SYSTEM_MONO_FAMILY`) maps to on this host. React Native on iOS
-     * has no family named `monospace` (a Text asking for it renders proportional, and the legacy architecture
-     * red-boxes in development), so the React Native host passes `Menlo` there. Applied to the compiled default mono
-     * only: a partner's own mono face is never touched. Absent or blank, the keyword stands (the web maps it to its
-     * mono stack in CSS).
-     */
-    readonly platformMonoFamily?: string;
-    /**
-     * Whether a family name is registered with the platform, when the host can tell: true or false, else null. A
-     * NAMED face (one per-weight name, rendered without a weight) that the host reports unregistered falls back to
-     * the platform font of its group WITH its numeric weight, so medium and bold survive instead of every weight
-     * collapsing to the platform's regular. Only named faces are asked about; a throw reads as null.
-     */
-    readonly isFontRegistered?: (family: string) => boolean | null;
-}
-/** The smallest effective text scale the resolver will report (a device may ask for less; the surfaces stop here). */
-declare const TEXT_SCALE_FLOOR = 0.5;
-/**
- * Resolve the final, legible, deeply-frozen theme. Never throws, never returns null/transparent.
- *
- * PRECEDENCE (per field, owner decision of 18 September 2026; the same rule EFBackend render_hint_fold states):
- * a field in `locked_fields` (plus `hide_powered_by` always) is server-wins; every other cosmetic field is
- * client-wins.
- *   - A server branding with an unknown `schema_version` is dropped whole (default plus client theme).
- *   - `hide_powered_by`, and every name the server lists in `locked_fields`, are SERVER-WINS: the client's value
- *     for such a field is discarded before the merge, so the server's value or the compiled default stands.
- *     `slots` in the list locks every slot; `slots.<name>` locks one.
- *   - Every other cosmetic field is CLIENT-WINS: the client `theme` prop overrides the console value, and the
- *     console fills the fields the prop leaves unset. Brightness is settled the same way; set nowhere, it is
- *     LIGHT (owner decision OD28: Everfur's own apps are light-only), and `auto` follows the device scheme.
- *   - Slots overlay slot by slot (a named slot replaces the one below it whole) in the same order, after the
- *     field precedence.
- * Then the total-resolve guarantees: onPrimary/onAccent via WCAG, the slot contrast guard, https-only logo/font
- * URLs, a non-empty displayName, the text scale (floored; tiered caps on the chrome), motion collapsed under reduced
- * motion, and the high-contrast derivation when the user asked for it.
- */
-declare function resolveTheme(input?: ResolveThemeInput): EverfurTheme;
-/**
- * The console's preview helper: resolve a draft branding exactly as the device would, from the raw shapes (the
- * partner's `theme` prop and the server-shaped branding object the console is about to publish), with the device
- * inputs of the preview. Pure and total: any shape is tolerated, nothing throws.
- */
-declare function previewTheme(input: EverfurThemeInput | null, hints: unknown, options?: Omit<ResolveThemeInput, 'branding' | 'clientOverride'>): EverfurTheme;
-
-/** The conditional-GET endpoint (SPEC-00 §5.3). Relative; the transport prefixes the resolved base URL. */
-declare const ENTITLEMENTS_PATH = "/widget/v1/entitlements";
-/**
- * The settled outcome of one entitlement fetch. `updated` carries a fresh verdict + the cadence to re-poll on;
- * `notModified` means the cached verdict still holds; `failed` carries a normalized error and means keep-last.
- */
-type EntitlementResolution = {
-    readonly kind: 'updated';
-    readonly revision: number;
-    readonly region: string;
-    readonly ttlSeconds: number;
-    readonly decisions: readonly EntitlementDecision[];
-    /**
-     * Server-driven branding parsed from the SAME 200 body's render_hints (orthogonal to capabilities).
-     * null when absent or unparseable (fail-closed -> the compiled Everfur default theme). OPTIONAL so a
-     * hand-built resolution (tests / injected resolve) need not supply it.
-     */
-    readonly branding?: ClientBranding | null;
-} | {
-    readonly kind: 'notModified';
-} | {
-    readonly kind: 'failed';
-    readonly error: EverfurError;
-};
-interface FetchEntitlementsArgs {
-    /** The revision we last stored; echoed as If-None-Match so an unchanged verdict returns 304. */
-    readonly cachedRevision?: number | null;
-    /** Optional region hint; forwarded as ?region. */
-    readonly region?: string;
-}
-/**
- * Fetch the server-resolved entitlement verdict once. Never throws: a 304, a domain error, a network reject,
- * and a malformed body all SETTLE to an EntitlementResolution. Fail-closed on every non-`updated` path.
- */
-declare function fetchEntitlements(auth: AuthContext, args?: FetchEntitlementsArgs, funnel?: RequestFunnel): Promise<EntitlementResolution>;
 
-export { TEXT_SCALE_FLOOR as $, THEME_SLOT_NAMES as A, previewTheme as B, type ClientBranding as C, DEFAULT_MAX_FONT_SCALE as D, type EverfurFontWeight as E, EASING_CURVES as F, ENTITLEMENTS_PATH as G, EVERFUR_DARK as H, EVERFUR_LIGHT as I, type EntitlementResolution as J, type EverfurEasingCurve as K, type EverfurTextScaleTier as L, type FetchEntitlementsArgs as M, LOCKABLE_THEME_FIELDS as N, type LockableThemeField as O, MAX_FONT_SCALE_CEILING as P, type ResolveThemeInput as Q, type RadiusScale as R, type SurfaceStyle as S, THEME_SLOT_KEYS as T, SLOT_LOCK_PREFIX as U, SLOT_MIN_BORDER_CONTRAST as V, SLOT_MIN_CONTRAST as W, SYSTEM_FONT_FAMILY as X, SYSTEM_MONO_FAMILY as Y, type SlotGrounds as Z, type SlotLockName as _, type EverfurTheme as a, TEXT_SCALE_TIER_CAPS as a0, THEME_SCHEMA_VERSIONS as a1, type ThemeLockName as a2, cssCubicBezier as a3, deepFreeze as a4, fetchEntitlements as a5, guardSlotContrast as a6, hardenHttpsUrl as a7, isEmptyBranding as a8, isKnownBrandingSchema as a9, lockedFieldsOf as aa, mergeThemeSlots as ab, parseClientBranding as ac, parseThemeSlots as ad, resolveTheme as ae, withServerBranding as af, type EverfurFontFaceKey as b, type EverfurThemeInput as c, type EverfurColorTokens as d, type EverfurFontFamilies as e, type EverfurLetterSpacingTokens as f, type EverfurLineHeightTokens as g, type EverfurMotionDurationTokens as h, type EverfurMotionTokens as i, type EverfurRadiusTokens as j, type EverfurSpaceTokens as k, type EverfurSpringToken as l, type EverfurTextColorTokens as m, type EverfurThemeFontFaceKey as n, type EverfurThemeFontUrlsInput as o, type EverfurThemeFontsInput as p, type EverfurThemeMeta as q, type EverfurThemeSlot as r, type EverfurThemeSlotInput as s, type EverfurThemeSlotKey as t, type EverfurThemeSlotName as u, type EverfurThemeSlots as v, type EverfurThemeSlotsInput as w, type EverfurTypeSizeTokens as x, type EverfurTypeTokens as y, type EverfurWeightTokens as z };
+export { guardSlotContrast as $, THEME_SLOT_NAMES as A, EASING_CURVES as B, type ClientBranding as C, DEFAULT_MAX_FONT_SCALE as D, type EverfurThemeInput as E, EVERFUR_DARK as F, EVERFUR_LIGHT as G, type EverfurEasingCurve as H, type EverfurTextScaleTier as I, type LockableThemeField as J, SLOT_LOCK_PREFIX as K, LOCKABLE_THEME_FIELDS as L, MAX_FONT_SCALE_CEILING as M, SLOT_MIN_BORDER_CONTRAST as N, SLOT_MIN_CONTRAST as O, SYSTEM_FONT_FAMILY as P, SYSTEM_MONO_FAMILY as Q, type RadiusScale as R, type SurfaceStyle as S, THEME_SLOT_KEYS as T, type SlotGrounds as U, type SlotLockName as V, TEXT_SCALE_TIER_CAPS as W, THEME_SCHEMA_VERSIONS as X, type ThemeLockName as Y, cssCubicBezier as Z, deepFreeze as _, type EverfurTheme as a, hardenHttpsUrl as a0, isEmptyBranding as a1, isKnownBrandingSchema as a2, lockedFieldsOf as a3, mergeThemeSlots as a4, parseClientBranding as a5, parseThemeSlots as a6, type EverfurFontWeight as b, type EverfurFontFaceKey as c, type EverfurColorTokens as d, type EverfurFontFamilies as e, type EverfurLetterSpacingTokens as f, type EverfurLineHeightTokens as g, type EverfurMotionDurationTokens as h, type EverfurMotionTokens as i, type EverfurRadiusTokens as j, type EverfurSpaceTokens as k, type EverfurSpringToken as l, type EverfurTextColorTokens as m, type EverfurThemeFontFaceKey as n, type EverfurThemeFontUrlsInput as o, type EverfurThemeFontsInput as p, type EverfurThemeMeta as q, type EverfurThemeSlot as r, type EverfurThemeSlotInput as s, type EverfurThemeSlotKey as t, type EverfurThemeSlotName as u, type EverfurThemeSlots as v, type EverfurThemeSlotsInput as w, type EverfurTypeSizeTokens as x, type EverfurTypeTokens as y, type EverfurWeightTokens as z };

package/dist/{entitlementRepository-DKdXFgTo.d.cts → branding-CsRdeNwK.d.ts}

@@ -1,8 +1,3 @@
-import { E as EverfurError } from './EverfurResult-DN9pL2Ab.cjs';
-import { R as RequestFunnel } from './requestFunnel-L-BQfi0z.cjs';
-import { A as AuthContext } from './identity-DI4eVx9S.cjs';
-import { E as EntitlementDecision } from './resolve-D4Ywz5OS.cjs';
-
 /** The fixed set of slot names, in the order the surfaces list them. */
 declare const THEME_SLOT_NAMES: readonly ["composerInput", "sendButton", "userBubble", "assistantBubble", "recordCard", "vetVisitButton", "primaryButton", "link"];
 type EverfurThemeSlotName = (typeof THEME_SLOT_NAMES)[number];
@@ -567,132 +562,5 @@ declare const MAX_FONT_SCALE_CEILING = 3.1;
  * constructor so it is portable + total on React Native (whose URL global is incomplete) and never throws.
  */
 declare function hardenHttpsUrl(url: string | null): string | null;
-/**
- * Overlay `b` onto `base`, field by field: a non-null branding field WINS; a null field KEEPS the base. A
- * valid brightness re-selects the matching compiled palette (light/dark); an invalid/absent brightness leaves
- * the base palette untouched. Slots merge per slot, per key. Returns a NEW deeply-frozen theme; `base` and `b`
- * are never mutated.
- *
- * The name is historical (the server was once the only overlay); `resolveTheme` applies it twice, server then
- * client, which is how the client wins per field. NOTE: foreground legibility (onPrimary/onAccent, the slot
- * guard) and URL hardening are applied by `resolveTheme`, the total entry point. Call this directly only when
- * you will finalize the result yourself.
- */
-declare function withServerBranding(base: EverfurTheme, b: ClientBranding | null): EverfurTheme;
-/**
- * Inputs to the total theme resolve. All optional; `resolveTheme(undefined)` yields the compiled Everfur
- * default. Merge order: compiled default <- server branding (render_hints) <- client theme prop, per field, with
- * the tenant's locked fields and the attribution kept from the server (see `resolveTheme`).
- */
-interface ResolveThemeInput {
-    /** Server-driven branding from the live entitlements render_hints (the tenant's console branding). */
-    readonly branding?: ClientBranding | null;
-    /**
-     * The clamped client `theme` prop. It WINS per cosmetic field over the server branding, except the fields the
-     * server lists in `locked_fields`. Its hidePoweredBy is IGNORED: whether the Everfur attribution shows is
-     * decided by server branding alone.
-     */
-    readonly clientOverride?: ClientBranding | null;
-    /**
-     * The device color scheme (useColorScheme / `prefers-color-scheme`). Read ONLY when the settled brightness is
-     * `auto` (an explicit opt-in); with no brightness set anywhere the theme is light, as Everfur's own apps are.
-     */
-    readonly colorScheme?: 'light' | 'dark' | null;
-    /** AccessibilityInfo reduced-motion / `prefers-reduced-motion`: collapses the motion tokens. */
-    readonly reducedMotion?: boolean;
-    /**
-     * The user's text scale as the host reads it (React Native: `PixelRatio.getFontScale()`; the browser: the
-     * browser's default font size over 16px). Floored at `TEXT_SCALE_FLOOR`; absent or junk reads as 1. Flowing
-     * content follows it uncapped; each chrome tier follows it up to that tier's cap (`type.scaleCaps`).
-     */
-    readonly textScale?: number;
-    /**
-     * Multiply the type sizes by the effective scale, per tier (`type.size` for content, `type.tierSizes` for every
-     * tier). A browser host passes true (CSS px do not follow the user's setting on their own); a React Native host
-     * leaves it false and lets the platform scale every Text natively, capped per tier by `maxFontSizeMultiplier`.
-     */
-    readonly scaleTypeSizes?: boolean;
-    /** The user asked for more contrast (`prefers-contrast: more`): the palette is derived by `deriveHighContrast`. */
-    readonly highContrast?: boolean;
-    /**
-     * The family the platform's generic mono keyword (`SYSTEM_MONO_FAMILY`) maps to on this host. React Native on iOS
-     * has no family named `monospace` (a Text asking for it renders proportional, and the legacy architecture
-     * red-boxes in development), so the React Native host passes `Menlo` there. Applied to the compiled default mono
-     * only: a partner's own mono face is never touched. Absent or blank, the keyword stands (the web maps it to its
-     * mono stack in CSS).
-     */
-    readonly platformMonoFamily?: string;
-    /**
-     * Whether a family name is registered with the platform, when the host can tell: true or false, else null. A
-     * NAMED face (one per-weight name, rendered without a weight) that the host reports unregistered falls back to
-     * the platform font of its group WITH its numeric weight, so medium and bold survive instead of every weight
-     * collapsing to the platform's regular. Only named faces are asked about; a throw reads as null.
-     */
-    readonly isFontRegistered?: (family: string) => boolean | null;
-}
-/** The smallest effective text scale the resolver will report (a device may ask for less; the surfaces stop here). */
-declare const TEXT_SCALE_FLOOR = 0.5;
-/**
- * Resolve the final, legible, deeply-frozen theme. Never throws, never returns null/transparent.
- *
- * PRECEDENCE (per field, owner decision of 18 September 2026; the same rule EFBackend render_hint_fold states):
- * a field in `locked_fields` (plus `hide_powered_by` always) is server-wins; every other cosmetic field is
- * client-wins.
- *   - A server branding with an unknown `schema_version` is dropped whole (default plus client theme).
- *   - `hide_powered_by`, and every name the server lists in `locked_fields`, are SERVER-WINS: the client's value
- *     for such a field is discarded before the merge, so the server's value or the compiled default stands.
- *     `slots` in the list locks every slot; `slots.<name>` locks one.
- *   - Every other cosmetic field is CLIENT-WINS: the client `theme` prop overrides the console value, and the
- *     console fills the fields the prop leaves unset. Brightness is settled the same way; set nowhere, it is
- *     LIGHT (owner decision OD28: Everfur's own apps are light-only), and `auto` follows the device scheme.
- *   - Slots overlay slot by slot (a named slot replaces the one below it whole) in the same order, after the
- *     field precedence.
- * Then the total-resolve guarantees: onPrimary/onAccent via WCAG, the slot contrast guard, https-only logo/font
- * URLs, a non-empty displayName, the text scale (floored; tiered caps on the chrome), motion collapsed under reduced
- * motion, and the high-contrast derivation when the user asked for it.
- */
-declare function resolveTheme(input?: ResolveThemeInput): EverfurTheme;
-/**
- * The console's preview helper: resolve a draft branding exactly as the device would, from the raw shapes (the
- * partner's `theme` prop and the server-shaped branding object the console is about to publish), with the device
- * inputs of the preview. Pure and total: any shape is tolerated, nothing throws.
- */
-declare function previewTheme(input: EverfurThemeInput | null, hints: unknown, options?: Omit<ResolveThemeInput, 'branding' | 'clientOverride'>): EverfurTheme;
-
-/** The conditional-GET endpoint (SPEC-00 §5.3). Relative; the transport prefixes the resolved base URL. */
-declare const ENTITLEMENTS_PATH = "/widget/v1/entitlements";
-/**
- * The settled outcome of one entitlement fetch. `updated` carries a fresh verdict + the cadence to re-poll on;
- * `notModified` means the cached verdict still holds; `failed` carries a normalized error and means keep-last.
- */
-type EntitlementResolution = {
-    readonly kind: 'updated';
-    readonly revision: number;
-    readonly region: string;
-    readonly ttlSeconds: number;
-    readonly decisions: readonly EntitlementDecision[];
-    /**
-     * Server-driven branding parsed from the SAME 200 body's render_hints (orthogonal to capabilities).
-     * null when absent or unparseable (fail-closed -> the compiled Everfur default theme). OPTIONAL so a
-     * hand-built resolution (tests / injected resolve) need not supply it.
-     */
-    readonly branding?: ClientBranding | null;
-} | {
-    readonly kind: 'notModified';
-} | {
-    readonly kind: 'failed';
-    readonly error: EverfurError;
-};
-interface FetchEntitlementsArgs {
-    /** The revision we last stored; echoed as If-None-Match so an unchanged verdict returns 304. */
-    readonly cachedRevision?: number | null;
-    /** Optional region hint; forwarded as ?region. */
-    readonly region?: string;
-}
-/**
- * Fetch the server-resolved entitlement verdict once. Never throws: a 304, a domain error, a network reject,
- * and a malformed body all SETTLE to an EntitlementResolution. Fail-closed on every non-`updated` path.
- */
-declare function fetchEntitlements(auth: AuthContext, args?: FetchEntitlementsArgs, funnel?: RequestFunnel): Promise<EntitlementResolution>;
 
-export { TEXT_SCALE_FLOOR as $, THEME_SLOT_NAMES as A, previewTheme as B, type ClientBranding as C, DEFAULT_MAX_FONT_SCALE as D, type EverfurFontWeight as E, EASING_CURVES as F, ENTITLEMENTS_PATH as G, EVERFUR_DARK as H, EVERFUR_LIGHT as I, type EntitlementResolution as J, type EverfurEasingCurve as K, type EverfurTextScaleTier as L, type FetchEntitlementsArgs as M, LOCKABLE_THEME_FIELDS as N, type LockableThemeField as O, MAX_FONT_SCALE_CEILING as P, type ResolveThemeInput as Q, type RadiusScale as R, type SurfaceStyle as S, THEME_SLOT_KEYS as T, SLOT_LOCK_PREFIX as U, SLOT_MIN_BORDER_CONTRAST as V, SLOT_MIN_CONTRAST as W, SYSTEM_FONT_FAMILY as X, SYSTEM_MONO_FAMILY as Y, type SlotGrounds as Z, type SlotLockName as _, type EverfurTheme as a, TEXT_SCALE_TIER_CAPS as a0, THEME_SCHEMA_VERSIONS as a1, type ThemeLockName as a2, cssCubicBezier as a3, deepFreeze as a4, fetchEntitlements as a5, guardSlotContrast as a6, hardenHttpsUrl as a7, isEmptyBranding as a8, isKnownBrandingSchema as a9, lockedFieldsOf as aa, mergeThemeSlots as ab, parseClientBranding as ac, parseThemeSlots as ad, resolveTheme as ae, withServerBranding as af, type EverfurFontFaceKey as b, type EverfurThemeInput as c, type EverfurColorTokens as d, type EverfurFontFamilies as e, type EverfurLetterSpacingTokens as f, type EverfurLineHeightTokens as g, type EverfurMotionDurationTokens as h, type EverfurMotionTokens as i, type EverfurRadiusTokens as j, type EverfurSpaceTokens as k, type EverfurSpringToken as l, type EverfurTextColorTokens as m, type EverfurThemeFontFaceKey as n, type EverfurThemeFontUrlsInput as o, type EverfurThemeFontsInput as p, type EverfurThemeMeta as q, type EverfurThemeSlot as r, type EverfurThemeSlotInput as s, type EverfurThemeSlotKey as t, type EverfurThemeSlotName as u, type EverfurThemeSlots as v, type EverfurThemeSlotsInput as w, type EverfurTypeSizeTokens as x, type EverfurTypeTokens as y, type EverfurWeightTokens as z };
+export { guardSlotContrast as $, THEME_SLOT_NAMES as A, EASING_CURVES as B, type ClientBranding as C, DEFAULT_MAX_FONT_SCALE as D, type EverfurThemeInput as E, EVERFUR_DARK as F, EVERFUR_LIGHT as G, type EverfurEasingCurve as H, type EverfurTextScaleTier as I, type LockableThemeField as J, SLOT_LOCK_PREFIX as K, LOCKABLE_THEME_FIELDS as L, MAX_FONT_SCALE_CEILING as M, SLOT_MIN_BORDER_CONTRAST as N, SLOT_MIN_CONTRAST as O, SYSTEM_FONT_FAMILY as P, SYSTEM_MONO_FAMILY as Q, type RadiusScale as R, type SurfaceStyle as S, THEME_SLOT_KEYS as T, type SlotGrounds as U, type SlotLockName as V, TEXT_SCALE_TIER_CAPS as W, THEME_SCHEMA_VERSIONS as X, type ThemeLockName as Y, cssCubicBezier as Z, deepFreeze as _, type EverfurTheme as a, hardenHttpsUrl as a0, isEmptyBranding as a1, isKnownBrandingSchema as a2, lockedFieldsOf as a3, mergeThemeSlots as a4, parseClientBranding as a5, parseThemeSlots as a6, type EverfurFontWeight as b, type EverfurFontFaceKey as c, type EverfurColorTokens as d, type EverfurFontFamilies as e, type EverfurLetterSpacingTokens as f, type EverfurLineHeightTokens as g, type EverfurMotionDurationTokens as h, type EverfurMotionTokens as i, type EverfurRadiusTokens as j, type EverfurSpaceTokens as k, type EverfurSpringToken as l, type EverfurTextColorTokens as m, type EverfurThemeFontFaceKey as n, type EverfurThemeFontUrlsInput as o, type EverfurThemeFontsInput as p, type EverfurThemeMeta as q, type EverfurThemeSlot as r, type EverfurThemeSlotInput as s, type EverfurThemeSlotKey as t, type EverfurThemeSlotName as u, type EverfurThemeSlots as v, type EverfurThemeSlotsInput as w, type EverfurTypeSizeTokens as x, type EverfurTypeTokens as y, type EverfurWeightTokens as z };

package/dist/callCopy-DoQKG3-L.d.cts

@@ -0,0 +1,40 @@
+/** The phases the in-app call surface moves through. The consumer app's `CallPhase`, verbatim. */
+type VetCallPhase = 'joining' | 'joined' | 'left' | 'error';
+/**
+ * Refuses anything that is not an https room.
+ *
+ * NEVER THROWS and never echoes the input: an unparseable value returns false rather than raising, because
+ * the caller is already on a failure path when it asks.
+ */
+declare function isSafeRoomUrl(url: string): boolean;
+/**
+ * The whole credential floor: an https room AND a non-empty join token. The call surface renders nothing and
+ * creates no call object unless this is true.
+ */
+declare function isUsableRoomCredential(roomUrl: string, token: string): boolean;
+
+/** The consult length the lobby quotes, in minutes. everfur-mobile-2026-7 televetTime.ts:85 `CONSULT_MINUTES`. */
+declare const VET_CALL_CONSULT_MINUTES = 10;
+declare const VET_CALL_COPY: Readonly<{
+    /** Controls, shared by the lobby and the live call. */
+    muteCta: "Mute";
+    unmuteCta: "Unmute";
+    cameraOffCta: "Camera off";
+    cameraOnCta: "Camera on";
+    leaveCta: "Leave";
+    /** The lobby: the member is in the room and the clinician is not. */
+    lobbyTitleNoName: "Your vet is joining";
+    lobbySubtitle: "Usually under a minute";
+    lobbyPrepLabel: "WHILE YOU WAIT";
+    lobbyPrepNoPet: "Have your pet nearby and somewhere well lit.";
+    /** `{name}` is DATA from the consult, never a key. Absent, `lobbyTitleNoName` is used instead. */
+    lobbyTitle: (clinicianName: string | null | undefined) => string;
+    /** `{pet}` is DATA from the roster. Absent, the pet-free form is used instead. */
+    lobbyPrep: (petName: string | null | undefined) => string;
+    /** `{n}` is `VET_CALL_CONSULT_MINUTES`, never a hardcoded number. */
+    lobbyDuration: (minutes: number) => string;
+    /** The consumer app's `visit.joinFailedReason` (:735), shown when the call object errors. */
+    joinFailedReason: "That did not open. Try again.";
+}>;
+
+export { VET_CALL_CONSULT_MINUTES as V, VET_CALL_COPY as a, type VetCallPhase as b, isUsableRoomCredential as c, isSafeRoomUrl as i };

package/dist/callCopy-DoQKG3-L.d.ts

@@ -0,0 +1,40 @@
+/** The phases the in-app call surface moves through. The consumer app's `CallPhase`, verbatim. */
+type VetCallPhase = 'joining' | 'joined' | 'left' | 'error';
+/**
+ * Refuses anything that is not an https room.
+ *
+ * NEVER THROWS and never echoes the input: an unparseable value returns false rather than raising, because
+ * the caller is already on a failure path when it asks.
+ */
+declare function isSafeRoomUrl(url: string): boolean;
+/**
+ * The whole credential floor: an https room AND a non-empty join token. The call surface renders nothing and
+ * creates no call object unless this is true.
+ */
+declare function isUsableRoomCredential(roomUrl: string, token: string): boolean;
+
+/** The consult length the lobby quotes, in minutes. everfur-mobile-2026-7 televetTime.ts:85 `CONSULT_MINUTES`. */
+declare const VET_CALL_CONSULT_MINUTES = 10;
+declare const VET_CALL_COPY: Readonly<{
+    /** Controls, shared by the lobby and the live call. */
+    muteCta: "Mute";
+    unmuteCta: "Unmute";
+    cameraOffCta: "Camera off";
+    cameraOnCta: "Camera on";
+    leaveCta: "Leave";
+    /** The lobby: the member is in the room and the clinician is not. */
+    lobbyTitleNoName: "Your vet is joining";
+    lobbySubtitle: "Usually under a minute";
+    lobbyPrepLabel: "WHILE YOU WAIT";
+    lobbyPrepNoPet: "Have your pet nearby and somewhere well lit.";
+    /** `{name}` is DATA from the consult, never a key. Absent, `lobbyTitleNoName` is used instead. */
+    lobbyTitle: (clinicianName: string | null | undefined) => string;
+    /** `{pet}` is DATA from the roster. Absent, the pet-free form is used instead. */
+    lobbyPrep: (petName: string | null | undefined) => string;
+    /** `{n}` is `VET_CALL_CONSULT_MINUTES`, never a hardcoded number. */
+    lobbyDuration: (minutes: number) => string;
+    /** The consumer app's `visit.joinFailedReason` (:735), shown when the call object errors. */
+    joinFailedReason: "That did not open. Try again.";
+}>;
+
+export { VET_CALL_CONSULT_MINUTES as V, VET_CALL_COPY as a, type VetCallPhase as b, isUsableRoomCredential as c, isSafeRoomUrl as i };

package/dist/casesRepository-DwtZVsbj.d.cts

@@ -0,0 +1,51 @@
+import { c as EverfurResult } from './EverfurResult-DN9pL2Ab.cjs';
+import { A as AuthContext } from './identity-C2-08BZW.cjs';
+import { P as PetRef } from './ids-B2GAAifq.cjs';
+
+/** The owner's answer to a check-in, the wire values of the consumer `CheckinResponse` enum. */
+type CheckinAnswer = 'better' | 'same' | 'worse';
+/** The closed answer set, in the order the consumer surfaces offer it. */
+declare const CHECKIN_ANSWERS: readonly CheckinAnswer[];
+/**
+ * The member-safe view of one watch case (consumer `WatchCaseView`). Case STATE only: the concern itself
+ * never rides on this row. `status` is the server's vocabulary (`watching` while open, then `resolved`,
+ * `escalated` or `lapsed`), carried as a string so a status added later never breaks a frozen client.
+ */
+interface WatchCase {
+    readonly caseId: string;
+    readonly status: string;
+    /** The body-region copy hint (`ears`, `eyes`, ..., `general`), never a diagnosis. */
+    readonly bodyLocation: string | null;
+    readonly lastResponse: CheckinAnswer | null;
+    readonly checkInDueAt: string | null;
+    readonly openedAt: string | null;
+    readonly resolvedAt: string | null;
+    /** The server's own non-diagnostic post-answer line, stamped only on a BETTER resolve. */
+    readonly resolutionText: string | null;
+}
+/** The result of recording a check-in. `ctaDeepLink` is set only on a WORSE escalation (an `everfur://` pointer). */
+interface CheckinOutcome {
+    readonly case: WatchCase;
+    readonly ctaDeepLink: string | null;
+}
+interface CasesRepository {
+    /**
+     * `GET /widget/v1/pets/{pet_ref}/cases` - the pet's open (`watching`) cases. Settles `ok([])` when the pet
+     * has none, which the server makes indistinguishable from a non-member or the feature being off.
+     */
+    list(petRef: PetRef, opts?: {
+        signal?: AbortSignal;
+    }): Promise<EverfurResult<readonly WatchCase[]>>;
+    /**
+     * `POST /widget/v1/pets/{pet_ref}/cases/{case_id}/checkin` - record the owner's answer. Settles
+     * `ok(CheckinOutcome)` on 200; a case that is stale, closed, another member's or gated off is the ordinary
+     * not-found error. A malformed case id or an answer outside the closed set is refused before the wire.
+     */
+    checkin(petRef: PetRef, caseId: string, answer: CheckinAnswer, opts?: {
+        signal?: AbortSignal;
+    }): Promise<EverfurResult<CheckinOutcome>>;
+}
+/** Build the repository over a device AuthContext (personalized bearer XOR anonymous pk). */
+declare function createCasesRepository(auth: AuthContext): CasesRepository;
+
+export { type CheckinAnswer as C, type WatchCase as W, type CheckinOutcome as a, CHECKIN_ANSWERS as b, type CasesRepository as c, createCasesRepository as d };

package/dist/casesRepository-v6QczS9N.d.ts

@@ -0,0 +1,51 @@
+import { c as EverfurResult } from './EverfurResult-DN9pL2Ab.js';
+import { A as AuthContext } from './identity-CEi9GRFZ.js';
+import { P as PetRef } from './ids-B2GAAifq.js';
+
+/** The owner's answer to a check-in, the wire values of the consumer `CheckinResponse` enum. */
+type CheckinAnswer = 'better' | 'same' | 'worse';
+/** The closed answer set, in the order the consumer surfaces offer it. */
+declare const CHECKIN_ANSWERS: readonly CheckinAnswer[];
+/**
+ * The member-safe view of one watch case (consumer `WatchCaseView`). Case STATE only: the concern itself
+ * never rides on this row. `status` is the server's vocabulary (`watching` while open, then `resolved`,
+ * `escalated` or `lapsed`), carried as a string so a status added later never breaks a frozen client.
+ */
+interface WatchCase {
+    readonly caseId: string;
+    readonly status: string;
+    /** The body-region copy hint (`ears`, `eyes`, ..., `general`), never a diagnosis. */
+    readonly bodyLocation: string | null;
+    readonly lastResponse: CheckinAnswer | null;
+    readonly checkInDueAt: string | null;
+    readonly openedAt: string | null;
+    readonly resolvedAt: string | null;
+    /** The server's own non-diagnostic post-answer line, stamped only on a BETTER resolve. */
+    readonly resolutionText: string | null;
+}
+/** The result of recording a check-in. `ctaDeepLink` is set only on a WORSE escalation (an `everfur://` pointer). */
+interface CheckinOutcome {
+    readonly case: WatchCase;
+    readonly ctaDeepLink: string | null;
+}
+interface CasesRepository {
+    /**
+     * `GET /widget/v1/pets/{pet_ref}/cases` - the pet's open (`watching`) cases. Settles `ok([])` when the pet
+     * has none, which the server makes indistinguishable from a non-member or the feature being off.
+     */
+    list(petRef: PetRef, opts?: {
+        signal?: AbortSignal;
+    }): Promise<EverfurResult<readonly WatchCase[]>>;
+    /**
+     * `POST /widget/v1/pets/{pet_ref}/cases/{case_id}/checkin` - record the owner's answer. Settles
+     * `ok(CheckinOutcome)` on 200; a case that is stale, closed, another member's or gated off is the ordinary
+     * not-found error. A malformed case id or an answer outside the closed set is refused before the wire.
+     */
+    checkin(petRef: PetRef, caseId: string, answer: CheckinAnswer, opts?: {
+        signal?: AbortSignal;
+    }): Promise<EverfurResult<CheckinOutcome>>;
+}
+/** Build the repository over a device AuthContext (personalized bearer XOR anonymous pk). */
+declare function createCasesRepository(auth: AuthContext): CasesRepository;
+
+export { type CheckinAnswer as C, type WatchCase as W, type CheckinOutcome as a, CHECKIN_ANSWERS as b, type CasesRepository as c, createCasesRepository as d };