@everfur/sdk 0.4.0 → 0.5.0

package/dist/{branding-CsRdeNwK.d.ts → tokens-CIngRkvt.d.ts}

@@ -59,109 +59,6 @@ type SlotGrounds = Readonly<Record<EverfurThemeSlotName, readonly string[]>>;
  */
 declare function guardSlotContrast(slots: EverfurThemeSlots, grounds?: SlotGrounds): EverfurThemeSlots;
 
-/**
- * One slot's paint on the `theme` prop; colours in any form `parseColor` reads, the radius in dp/px. The console's
- * snake_case wire keys are accepted beside the camelCase ones.
- */
-interface EverfurThemeSlotInput {
-    readonly backgroundColor?: string | number;
-    readonly background_color?: string | number;
-    readonly borderColor?: string | number;
-    readonly border_color?: string | number;
-    readonly borderRadius?: number | string;
-    readonly border_radius?: number | string;
-    readonly textColor?: string | number;
-    readonly text_color?: string | number;
-}
-/** The `slots` map on the `theme` prop: any subset of the eight slot names. */
-type EverfurThemeSlotsInput = Readonly<Partial<Record<EverfurThemeSlotName, EverfurThemeSlotInput>>>;
-/**
- * The faces a theme names: the three text weights and the three mono weights (`EverfurFontFaceKey` on the tokens).
- * A missing weight falls back along its chain: bold -> medium -> regular, monoBold -> monoMedium -> mono.
- */
-type EverfurThemeFontFaceKey = 'regular' | 'medium' | 'bold' | 'mono' | 'monoMedium' | 'monoBold';
-/** The `fonts` map on the `theme` prop: a registered family name per face, any subset. */
-type EverfurThemeFontsInput = Readonly<Partial<Record<EverfurThemeFontFaceKey, string>>>;
-/** The `font_urls` map on the `theme` prop (web only): a brand-font URL per face, any subset. */
-type EverfurThemeFontUrlsInput = Readonly<Partial<Record<EverfurThemeFontFaceKey, string>>>;
-/**
- * The client `theme` prop. Any shape is tolerated (unknown keys are ignored, malformed values are dropped); the
- * named keys are the ones the resolver reads, in the console's snake_case with camelCase twins.
- */
-interface EverfurThemeInput {
-    readonly display_name?: string;
-    readonly displayName?: string;
-    readonly logo_url?: string;
-    readonly logoUrl?: string;
-    /** The logo shown on the dark palette; absent, `logo_url` is shown on both. */
-    readonly logo_url_dark?: string;
-    readonly logoUrlDark?: string;
-    readonly primary_color?: string | number;
-    readonly primaryColor?: string | number;
-    readonly accent_color?: string | number;
-    readonly accentColor?: string | number;
-    /** The primary fill on the dark palette; absent, it is derived from `primary_color` (`deriveDarkVariant`). */
-    readonly primary_color_dark?: string | number;
-    readonly primaryColorDark?: string | number;
-    readonly accent_color_dark?: string | number;
-    readonly accentColorDark?: string | number;
-    /**
-     * `light` or `dark` pins the palette; `auto` follows the device's scheme. Absent (here and in the console), the
-     * theme is LIGHT, as Everfur's own apps are: the device scheme is never read unless someone chose `auto`.
-     */
-    readonly brightness?: string;
-    /** The console's name for `brightness` (`light`, `dark` or `auto`); `brightness` wins when both are set. */
-    readonly color_scheme?: string;
-    readonly colorScheme?: string;
-    readonly font_family?: string;
-    readonly fontFamily?: string;
-    readonly font_url?: string;
-    readonly fontUrl?: string;
-    /**
-     * The family per face. Two conventions, the same rendering on React Native and the web:
-     *   - one registered face per weight, the way the Everfur app maps weight to family (`Azeret-Regular`,
-     *     `Azeret-Medium`, `Azeret-Bold`, `AzeretMono-Regular`): a name no other weight of its group uses is a NAMED
-     *     face, rendered with no weight of its own (React Native) or at the normal weight (the web);
-     *   - one family for every weight (`Azeret`): a name shared across the weights of a group is a BASE family, and
-     *     every face takes its numeric weight on both hosts.
-     * A missing weight falls back along its chain (regular -> medium -> bold, mono -> monoMedium -> monoBold). The host
-     * registers the faces itself (the native font files, or a web `@font-face`) and passes the NAMES only: the SDK
-     * bundles no font. Beats `font_family` for the weights it names. On React Native, when the app's font registry can
-     * tell (expo-font's), a named face that is not registered falls back to the platform font at its weight, with a
-     * development warning.
-     */
-    readonly fonts?: EverfurThemeFontsInput;
-    /**
-     * Web only: the woff2 URL per face, loaded through the SDK's brand-font allow-list (a woff2 under `/fonts/`
-     * on the Everfur SDK CDN). A URL on any other origin is refused, so a host that serves its own licensed
-     * faces loads them with its own `@font-face` and passes `fonts` names only.
-     */
-    readonly font_urls?: EverfurThemeFontUrlsInput;
-    readonly fontUrls?: EverfurThemeFontUrlsInput;
-    readonly chat_placeholder?: string;
-    readonly chatPlaceholder?: string;
-    readonly placeholder?: string;
-    /** Typed for completeness; INERT on the client. The server decides the attribution from the plan. */
-    readonly hide_powered_by?: boolean;
-    readonly hidePoweredBy?: boolean;
-    /** `white`, `cream` or `subtle`. */
-    readonly surface_style?: string;
-    readonly surfaceStyle?: string;
-    /** `sharp`, `default` or `round`. */
-    readonly radius_scale?: string;
-    readonly radiusScale?: string;
-    /**
-     * The cap on the CHROME text tiers (headings, controls, chips, badges): 1 to 3.1, or 0 for none (the default,
-     * the tiers alone: headings 2, controls 1.8, chips 1.5, badges 1.3). Flowing content is never capped.
-     */
-    readonly accessibility_max_font_scale?: number | string;
-    readonly accessibilityMaxFontScale?: number | string;
-    /** Paint overrides at the named slots. */
-    readonly slots?: EverfurThemeSlotsInput;
-    /** Tolerated for any other key; ignored by the resolver. */
-    readonly [key: string]: unknown;
-}
-
 /** Recursively freeze a plain object/array tree in place and return it (typed as the input). */
 declare function deepFreeze<T>(value: T): T;
 /** Foreground text tokens; the semantic text ramp over surfaces. */
@@ -184,7 +81,12 @@ interface EverfurColorTokens {
     readonly brandSofter: string;
     readonly brandBorder: string;
     readonly borderHairlineGreen: string;
-    /** The brand at 55%: the edge of a floating card over the chat (the attachment popover, the Everfur app's). */
+    /**
+     * The brand at 55%: the edge of a FORM CONTROL (a text field, a text area, a radio) and of a floating card over
+     * the chat (the attachment popover, the Everfur app's). The resolver guarantees it reads at 3:1 (WCAG 1.4.11) on
+     * every ground a control sits on, pushing a partner brand that does not; `brandBorder` and `borderHairlineGreen`
+     * are decorative hairlines (1.4:1 and 1.6:1) and never the only edge of a control.
+     */
     readonly brandBorderStrong: string;
     /**
      * The brand as TEXT or ICON ink. The resolver derives it from `brand`, pushed toward black (light palette) or
@@ -457,110 +359,4 @@ declare const EVERFUR_LIGHT: EverfurTheme;
 /** The compiled DARK default (deeply frozen). */
 declare const EVERFUR_DARK: EverfurTheme;
 
-interface ClientBranding {
-    readonly displayName: string | null;
-    /** normalized (https-hardened downstream) logo URL */
-    readonly logoUrl: string | null;
-    /** normalized color string (#RRGGBB or rgba(...)) or null */
-    readonly primaryColor: string | null;
-    readonly accentColor: string | null;
-    /**
-     * `light` or `dark` pins the palette; `auto` follows the device's scheme (an explicit opt-in). null (absent)
-     * resolves to LIGHT, as Everfur's own apps render. Read from `brightness`, or its console alias `color_scheme`
-     * (`colorScheme`).
-     */
-    readonly brightness: 'light' | 'dark' | 'auto' | null;
-    readonly fontFamily: string | null;
-    readonly fontUrl: string | null;
-    /**
-     * fonts: one registered family per face (`regular` / `medium` / `bold` / `mono` / `monoMedium` / `monoBold`),
-     * any subset. A name used by one face of its group only is a named face, rendered without a synthetic
-     * `fontWeight`; a name repeated across the weights of a group is a base family and takes the numeric weights.
-     * Absent/null names none (the base families stand).
-     */
-    readonly fonts?: Readonly<Partial<Record<EverfurFontFaceKey, string>>> | null;
-    /** font_urls: the brand-font URL per face (web only), any subset; hardened https-only downstream. */
-    readonly fontUrls?: Readonly<Partial<Record<EverfurFontFaceKey, string>>> | null;
-    /** composer placeholder override (chat_placeholder/placeholder); null keeps the base. */
-    readonly placeholder: string | null;
-    /**
-     * white-label switch (hide_powered_by): hide the powered-by attribution. null = unset (keep the base). Honoured
-     * from SERVER branding only: `resolveTheme` ignores it on the client override (attribution is server-only).
-     */
-    readonly hidePoweredBy: boolean | null;
-    /** primary_color_dark: the primary fill used when the resolved palette is dark. Absent/null derives one. */
-    readonly primaryColorDark?: string | null;
-    /** accent_color_dark: the accent fill used when the resolved palette is dark. Absent/null derives one. */
-    readonly accentColorDark?: string | null;
-    /**
-     * surface_style: which compiled surface the chat ground (`chatGround`) uses. Absent/null keeps the palette's
-     * white ground (the Everfur app's shell). The composer and the record cards keep their cream either way.
-     */
-    readonly surfaceStyle?: SurfaceStyle | null;
-    /** radius_scale: scales the corner radii (the pill radius is never scaled). Absent/null keeps the palette radii. */
-    readonly radiusScale?: RadiusScale | null;
-    /** logo_url_dark: the logo shown on the dark palette. Absent/null keeps logoUrl on both palettes. */
-    readonly logoUrlDark?: string | null;
-    /** slots: paint overrides at the named slots (schema 2). Absent/null paints none. */
-    readonly slots?: EverfurThemeSlots | null;
-    /**
-     * accessibility_max_font_scale: the tenant's cap on the CHROME text tiers (headings, controls, chips, badges),
-     * 1..3.1, or 0 for none. Flowing content is never capped. Absent/null keeps the default (0, the tiers alone).
-     */
-    readonly accessibilityMaxFontScale?: number | null;
-    /**
-     * locked_fields: the wire names the tenant keeps server-wins (schema 2): a field, `slots` (every slot) or
-     * `slots.<name>` (one slot); the wire also lists `hide_powered_by`, which is locked whether listed or not.
-     * Meaningful on SERVER branding only; ignored on the client override. Absent/null locks nothing beyond the
-     * attribution.
-     */
-    readonly lockedFields?: readonly ThemeLockName[] | null;
-    /**
-     * schema_version: the wire version the branding was written for. null when absent (schema 1); 0 when present but
-     * not a positive integer. A version this SDK does not know (`THEME_SCHEMA_VERSIONS`) drops the server branding.
-     */
-    readonly schemaVersion?: number | null;
-}
-/** The compiled surface a branding may pick for the chat ground (`surface_style`). */
-type SurfaceStyle = 'white' | 'cream' | 'subtle';
-/** The corner-radius scale a branding may pick (`radius_scale`). */
-type RadiusScale = 'sharp' | 'default' | 'round';
-/**
- * The wire names a tenant may list in `locked_fields` (every cosmetic field). `hide_powered_by` is not listed:
- * it is server-wins unconditionally, so locking it is meaningless.
- */
-declare const LOCKABLE_THEME_FIELDS: readonly ["display_name", "logo_url", "logo_url_dark", "primary_color", "accent_color", "primary_color_dark", "accent_color_dark", "brightness", "color_scheme", "font_family", "font_url", "fonts", "font_urls", "chat_placeholder", "surface_style", "radius_scale", "accessibility_max_font_scale", "slots"];
-type LockableThemeField = (typeof LOCKABLE_THEME_FIELDS)[number];
-/** The `locked_fields` key that locks one slot (`slots.<name>`), as EFBackend branding_slots.py emits it. */
-declare const SLOT_LOCK_PREFIX = "slots.";
-type SlotLockName = `${typeof SLOT_LOCK_PREFIX}${EverfurThemeSlotName}`;
-/** Everything `locked_fields` may name: a cosmetic field, one slot, or the (always locked) attribution. */
-type ThemeLockName = LockableThemeField | SlotLockName | 'hide_powered_by';
-/** The branding wire versions this SDK reads: 1 (absent on the wire) and 2 (the 18 Sep 2026 fields). */
-declare const THEME_SCHEMA_VERSIONS: readonly number[];
-/**
- * true when every field is null (no config) - treated by callers as "absent". The version stamp alone is not a
- * value: a branding that carries only `schema_version` is empty.
- */
-declare function isEmptyBranding(b: ClientBranding): boolean;
-/** true when the branding is absent or written for a wire version this SDK knows. */
-declare function isKnownBrandingSchema(b: ClientBranding | null): boolean;
-/** The names a server branding keeps server-wins: its `locked_fields`, plus the attribution always. */
-declare function lockedFieldsOf(b: ClientBranding | null): ReadonlySet<string>;
-/**
- * Parse an untrusted branding blob (from the entitlements render_hints, or the client `theme` prop) into a
- * normalized `ClientBranding`. Accepts BOTH snake_case and camelCase keys. Returns null when the input is not
- * an object OR when the result is empty (all fields null) - callers read null as "no config" (fail-closed to
- * the compiled default). Never throws.
- */
-declare function parseClientBranding(json: unknown): ClientBranding | null;
-/** The largest cap a tenant may set on the chrome tiers: iOS's largest accessibility text size (AX5, 310%). */
-declare const MAX_FONT_SCALE_CEILING = 3.1;
-/**
- * Return the URL only if it is an https URL with no embedded whitespace, else null (security invariant:
- * https-only; rejects http:, javascript:, data:, etc.). Uses a protocol-locked regex rather than the URL
- * constructor so it is portable + total on React Native (whose URL global is incomplete) and never throws.
- */
-declare function hardenHttpsUrl(url: string | null): string | null;
-
-export { guardSlotContrast as $, THEME_SLOT_NAMES as A, EASING_CURVES as B, type ClientBranding as C, DEFAULT_MAX_FONT_SCALE as D, type EverfurThemeInput as E, EVERFUR_DARK as F, EVERFUR_LIGHT as G, type EverfurEasingCurve as H, type EverfurTextScaleTier as I, type LockableThemeField as J, SLOT_LOCK_PREFIX as K, LOCKABLE_THEME_FIELDS as L, MAX_FONT_SCALE_CEILING as M, SLOT_MIN_BORDER_CONTRAST as N, SLOT_MIN_CONTRAST as O, SYSTEM_FONT_FAMILY as P, SYSTEM_MONO_FAMILY as Q, type RadiusScale as R, type SurfaceStyle as S, THEME_SLOT_KEYS as T, type SlotGrounds as U, type SlotLockName as V, TEXT_SCALE_TIER_CAPS as W, THEME_SCHEMA_VERSIONS as X, type ThemeLockName as Y, cssCubicBezier as Z, deepFreeze as _, type EverfurTheme as a, hardenHttpsUrl as a0, isEmptyBranding as a1, isKnownBrandingSchema as a2, lockedFieldsOf as a3, mergeThemeSlots as a4, parseClientBranding as a5, parseThemeSlots as a6, type EverfurFontWeight as b, type EverfurFontFaceKey as c, type EverfurColorTokens as d, type EverfurFontFamilies as e, type EverfurLetterSpacingTokens as f, type EverfurLineHeightTokens as g, type EverfurMotionDurationTokens as h, type EverfurMotionTokens as i, type EverfurRadiusTokens as j, type EverfurSpaceTokens as k, type EverfurSpringToken as l, type EverfurTextColorTokens as m, type EverfurThemeFontFaceKey as n, type EverfurThemeFontUrlsInput as o, type EverfurThemeFontsInput as p, type EverfurThemeMeta as q, type EverfurThemeSlot as r, type EverfurThemeSlotInput as s, type EverfurThemeSlotKey as t, type EverfurThemeSlotName as u, type EverfurThemeSlots as v, type EverfurThemeSlotsInput as w, type EverfurTypeSizeTokens as x, type EverfurTypeTokens as y, type EverfurWeightTokens as z };
+export { SLOT_MIN_CONTRAST as A, SYSTEM_FONT_FAMILY as B, SYSTEM_MONO_FAMILY as C, DEFAULT_MAX_FONT_SCALE as D, type EverfurTheme as E, type SlotGrounds as F, TEXT_SCALE_TIER_CAPS as G, cssCubicBezier as H, deepFreeze as I, guardSlotContrast as J, mergeThemeSlots as K, parseThemeSlots as L, SLOT_MIN_BORDER_CONTRAST as S, THEME_SLOT_KEYS as T, type EverfurFontWeight as a, type EverfurFontFaceKey as b, type EverfurThemeSlotName as c, type EverfurThemeSlots as d, type EverfurColorTokens as e, type EverfurFontFamilies as f, type EverfurLetterSpacingTokens as g, type EverfurLineHeightTokens as h, type EverfurMotionDurationTokens as i, type EverfurMotionTokens as j, type EverfurRadiusTokens as k, type EverfurSpaceTokens as l, type EverfurSpringToken as m, type EverfurTextColorTokens as n, type EverfurThemeMeta as o, type EverfurThemeSlot as p, type EverfurThemeSlotKey as q, type EverfurTypeSizeTokens as r, type EverfurTypeTokens as s, type EverfurWeightTokens as t, THEME_SLOT_NAMES as u, EASING_CURVES as v, EVERFUR_DARK as w, EVERFUR_LIGHT as x, type EverfurEasingCurve as y, type EverfurTextScaleTier as z };

package/dist/{typeStyle-DmoyacDG.d.ts → typeStyle-DHJzDaUo.d.cts}

@@ -1,4 +1,5 @@
-import { C as ClientBranding, E as EverfurThemeInput, a as EverfurTheme, b as EverfurFontWeight, c as EverfurFontFaceKey } from './branding-CsRdeNwK.js';
+import { C as ClientBranding, E as EverfurThemeInput } from './branding-Xb_wL8N1.cjs';
+import { E as EverfurTheme, a as EverfurFontWeight, b as EverfurFontFaceKey } from './tokens-CIngRkvt.cjs';
 
 /**
  * Overlay `b` onto `base`, field by field: a non-null branding field WINS; a null field KEEPS the base. A

package/dist/{typeStyle-CKqVYD6L.d.cts → typeStyle-YPS_MXeI.d.ts}

@@ -1,4 +1,5 @@
-import { C as ClientBranding, E as EverfurThemeInput, a as EverfurTheme, b as EverfurFontWeight, c as EverfurFontFaceKey } from './branding-CsRdeNwK.cjs';
+import { C as ClientBranding, E as EverfurThemeInput } from './branding-xpQ056sM.js';
+import { E as EverfurTheme, a as EverfurFontWeight, b as EverfurFontFaceKey } from './tokens-CIngRkvt.js';
 
 /**
  * Overlay `b` onto `base`, field by field: a non-null branding field WINS; a null field KEEPS the base. A

package/dist/{useRecordsDepth-C6rjEaLn.d.cts → useRecordsDepth-Bnw36jPr.d.cts}

@@ -1,7 +1,8 @@
 import { R as RecordsRequestId, P as PetRef } from './ids-B2GAAifq.cjs';
-import { a6 as RecordsClinicSearchInput, a7 as RecordsClinicSearchPage, a8 as RecordsRecentClinicsInput, a9 as RecordsAuthorizationCopy, aa as CreateClinicRequestInput, ab as RecordsSignatureUploadPolicy, l as RecordsClinic, P as RecordsClinicBatch, Q as RecordsClinicBatchClient, m as RecordsDepthClient } from './depth-D5HwcvKC.cjs';
-import { c as EverfurResult, E as EverfurError } from './EverfurResult-DN9pL2Ab.cjs';
-import { f as RecordsRequestGroupView, d as RecordsRequestView } from './models-D2EUxPZY.cjs';
+import { a6 as RecordsClinicSearchInput, a7 as RecordsClinicSearchPage, a8 as RecordsRecentClinicsInput, a9 as RecordsAuthorizationCopy, aa as CreateClinicRequestInput, ab as RecordsSignatureUploadPolicy, l as RecordsClinic, P as RecordsClinicBatch, Q as RecordsClinicBatchClient, m as RecordsDepthClient } from './depth-B3NFKlF9.cjs';
+import { E as EverfurResult } from './EverfurResult-ZtH-YV1h.cjs';
+import { f as RecordsRequestGroupView, d as RecordsRequestView } from './models-Bn2z0NNo.cjs';
+import { E as EverfurError } from './EverfurError-DmELDpXp.cjs';
 
 interface RecordsClinicController {
     searchClinics(input?: RecordsClinicSearchInput): Promise<EverfurResult<RecordsClinicSearchPage>>;
@@ -126,6 +127,15 @@ type RecordsScreen = {
     readonly clinic: ClinicDraft;
 } | {
     readonly name: 'upload';
+}
+/**
+ * Every upload and clinic request for the pet, each with its own status: the consumer's
+ * `RecordsRequestListScreen` (everfur-mobile src/features/records/ui/RecordsRequestListScreen.tsx, the
+ * `/records/requests` route the dashboard's `RecordsRequestsStatusCard` opens). On the web it is the
+ * records page's own request list.
+ */
+ | {
+    readonly name: 'requests';
 };
 interface RecordsNavState {
     readonly stack: readonly RecordsScreen[];
@@ -187,9 +197,18 @@ type RecordsAskHandler = (prompt: string, entityRef: RecordsAskEntityRef) => voi
 
 type ClinicLocation = NonNullable<RecordsClinicSearchInput['location']>;
 
-type RecordsUrlKind = 'share_link' | 'record_pdf';
+/**
+ * What a URL handed to `onOpenUrl` is: a revocable share link, the full record PDF (a short-lived presigned
+ * GET), or one file the member uploaded onto a request (`request_document`, web only; also short-lived).
+ */
+type RecordsUrlKind = 'share_link' | 'record_pdf' | 'request_document';
 interface RecordsHostSeams {
-    /** Open a share link or the record PDF. Default: `Linking.openURL` on React Native, `window.open` on the web. */
+    /**
+     * Share a link, or save or preview a file, your app's way. Default, which never leaves your app: React
+     * Native shares the link through the OS share sheet (`Share.share`) and offers the PDF's short-lived link
+     * the same way (pass this seam to share the FILE, e.g. expo-file-system + expo-sharing); the web shares
+     * the link with `navigator.share`, else copies it, and saves a file in place with no new tab.
+     */
     readonly onOpenUrl?: (url: string, kind: RecordsUrlKind) => void | Promise<void>;
     /** Copy a share link. Web default: `navigator.clipboard.writeText`; React Native has no default (see above). */
     readonly onCopy?: (text: string) => Promise<void>;

package/dist/{useRecordsDepth-crhBllQK.d.ts → useRecordsDepth-DFF7Faxx.d.ts}

@@ -1,7 +1,8 @@
 import { R as RecordsRequestId, P as PetRef } from './ids-B2GAAifq.js';
-import { a6 as RecordsClinicSearchInput, a7 as RecordsClinicSearchPage, a8 as RecordsRecentClinicsInput, a9 as RecordsAuthorizationCopy, aa as CreateClinicRequestInput, ab as RecordsSignatureUploadPolicy, l as RecordsClinic, P as RecordsClinicBatch, Q as RecordsClinicBatchClient, m as RecordsDepthClient } from './depth-DvPwPuT_.js';
-import { c as EverfurResult, E as EverfurError } from './EverfurResult-DN9pL2Ab.js';
-import { f as RecordsRequestGroupView, d as RecordsRequestView } from './models-B-Uh2LTf.js';
+import { a6 as RecordsClinicSearchInput, a7 as RecordsClinicSearchPage, a8 as RecordsRecentClinicsInput, a9 as RecordsAuthorizationCopy, aa as CreateClinicRequestInput, ab as RecordsSignatureUploadPolicy, l as RecordsClinic, P as RecordsClinicBatch, Q as RecordsClinicBatchClient, m as RecordsDepthClient } from './depth-DO3Ko_qs.js';
+import { E as EverfurResult } from './EverfurResult-SGvHKsCB.js';
+import { f as RecordsRequestGroupView, d as RecordsRequestView } from './models-DSqA5Ahs.js';
+import { E as EverfurError } from './EverfurError-DmELDpXp.js';
 
 interface RecordsClinicController {
     searchClinics(input?: RecordsClinicSearchInput): Promise<EverfurResult<RecordsClinicSearchPage>>;
@@ -126,6 +127,15 @@ type RecordsScreen = {
     readonly clinic: ClinicDraft;
 } | {
     readonly name: 'upload';
+}
+/**
+ * Every upload and clinic request for the pet, each with its own status: the consumer's
+ * `RecordsRequestListScreen` (everfur-mobile src/features/records/ui/RecordsRequestListScreen.tsx, the
+ * `/records/requests` route the dashboard's `RecordsRequestsStatusCard` opens). On the web it is the
+ * records page's own request list.
+ */
+ | {
+    readonly name: 'requests';
 };
 interface RecordsNavState {
     readonly stack: readonly RecordsScreen[];
@@ -187,9 +197,18 @@ type RecordsAskHandler = (prompt: string, entityRef: RecordsAskEntityRef) => voi
 
 type ClinicLocation = NonNullable<RecordsClinicSearchInput['location']>;
 
-type RecordsUrlKind = 'share_link' | 'record_pdf';
+/**
+ * What a URL handed to `onOpenUrl` is: a revocable share link, the full record PDF (a short-lived presigned
+ * GET), or one file the member uploaded onto a request (`request_document`, web only; also short-lived).
+ */
+type RecordsUrlKind = 'share_link' | 'record_pdf' | 'request_document';
 interface RecordsHostSeams {
-    /** Open a share link or the record PDF. Default: `Linking.openURL` on React Native, `window.open` on the web. */
+    /**
+     * Share a link, or save or preview a file, your app's way. Default, which never leaves your app: React
+     * Native shares the link through the OS share sheet (`Share.share`) and offers the PDF's short-lived link
+     * the same way (pass this seam to share the FILE, e.g. expo-file-system + expo-sharing); the web shares
+     * the link with `navigator.share`, else copies it, and saves a file in place with no new tab.
+     */
     readonly onOpenUrl?: (url: string, kind: RecordsUrlKind) => void | Promise<void>;
     /** Copy a share link. Web default: `navigator.clipboard.writeText`; React Native has no default (see above). */
     readonly onCopy?: (text: string) => Promise<void>;

package/dist/{useVetVisit-CjmMa896.d.ts → useVetVisit-BsjoDO-n.d.ts}

@@ -1,5 +1,6 @@
-import { c as EverfurResult, E as EverfurError } from './EverfurResult-DN9pL2Ab.js';
+import { E as EverfurError } from './EverfurError-DmELDpXp.js';
 import { P as PetRef } from './ids-B2GAAifq.js';
+import { E as EverfurResult } from './EverfurResult-SGvHKsCB.js';
 import { V as VetVisitIntent } from './visitIntent-D7_yVp1I.js';
 
 /** What the hosted page will open for a handoff minted with `visitRef`: the platform's own echo. */
@@ -138,9 +139,20 @@ interface UseVetVisitOptions {
     readonly usState?: string | null;
     /**
      * `'chat'` for the entry inside Chat. `available` then also needs Everfur's chat entry switch and a pet (the
-     * one the chat is about); the visit itself is the same hosted visit.
+     * one the chat is about); the visit itself opens wherever `prefer` says.
      */
     readonly entry?: VetVisitEntry | null;
+    /**
+     * Where `open()` and `openVisit()` take the member. Defaults to `'in-app'`.
+     *
+     * `'in-app'` opens the visit INSIDE your app: your registered presenter (`registerEverfurTelevetFlow`) if
+     * there is one, else the in-app experience Everfur provides, rendered by a mounted `EverfurTelevetHost`.
+     * Nothing is minted and nothing leaves the app.
+     *
+     * `'redirect'` is the explicit opt-in to the hosted Everfur visit: a handoff is minted and opened in a new
+     * tab (web) or the system browser (React Native). Use it only for a surface you deliberately keep hosted.
+     */
+    readonly prefer?: 'in-app' | 'redirect' | undefined;
 }
 /** What `useVetVisit` returns. The handoff URL is never part of it. */
 interface UseVetVisitState {
@@ -159,8 +171,9 @@ interface UseVetVisitState {
     /** The closed reason for the last failure, or null. */
     readonly errorReason: VetVisitErrorReason | null;
     /**
-     * Mint a handoff and open the hosted Everfur visit. Call it directly from a press or click handler. A second
-     * call while one is in flight returns the same promise rather than minting a second handoff.
+     * Open a vet visit: in your app by default, or the hosted Everfur visit when `prefer` is `'redirect'`. Call
+     * it directly from a press or click handler. On the hosted path a second call while one is in flight
+     * returns the same promise rather than minting a second handoff.
      */
     open(petRef?: PetRef | null): Promise<VetVisitOpenResult>;
     /**
@@ -178,8 +191,10 @@ interface UseVetVisitState {
      * A `null` intent on a target means the visit is over without happening (cancelled, missed): there is
      * nothing left to open, so call `open()` to book a new one instead.
      *
-     * Everfur resolves the reference at the mint against this member's own visits, so one that is not theirs
-     * settles `invalidRequest` and opens nothing. Shares the single-flight rule with `open`.
+     * In-app by default, like `open`: the request carries `visitRef` and `intent` to your presenter or to the
+     * SDK-owned experience. With `prefer: 'redirect'`, Everfur resolves the reference at the mint against this
+     * member's own visits, so one that is not theirs settles `invalidRequest` and opens nothing, and the call
+     * shares the single-flight rule with `open`.
      */
     openVisit(visitRef: string, intent?: VetVisitIntent | null): Promise<VetVisitOpenResult>;
 }

package/dist/{useVetVisit-Bc84hWUU.d.cts → useVetVisit-Ds8f1peV.d.cts}

@@ -1,5 +1,6 @@
-import { c as EverfurResult, E as EverfurError } from './EverfurResult-DN9pL2Ab.cjs';
+import { E as EverfurError } from './EverfurError-DmELDpXp.cjs';
 import { P as PetRef } from './ids-B2GAAifq.cjs';
+import { E as EverfurResult } from './EverfurResult-ZtH-YV1h.cjs';
 import { V as VetVisitIntent } from './visitIntent-D7_yVp1I.cjs';
 
 /** What the hosted page will open for a handoff minted with `visitRef`: the platform's own echo. */
@@ -138,9 +139,20 @@ interface UseVetVisitOptions {
     readonly usState?: string | null;
     /**
      * `'chat'` for the entry inside Chat. `available` then also needs Everfur's chat entry switch and a pet (the
-     * one the chat is about); the visit itself is the same hosted visit.
+     * one the chat is about); the visit itself opens wherever `prefer` says.
      */
     readonly entry?: VetVisitEntry | null;
+    /**
+     * Where `open()` and `openVisit()` take the member. Defaults to `'in-app'`.
+     *
+     * `'in-app'` opens the visit INSIDE your app: your registered presenter (`registerEverfurTelevetFlow`) if
+     * there is one, else the in-app experience Everfur provides, rendered by a mounted `EverfurTelevetHost`.
+     * Nothing is minted and nothing leaves the app.
+     *
+     * `'redirect'` is the explicit opt-in to the hosted Everfur visit: a handoff is minted and opened in a new
+     * tab (web) or the system browser (React Native). Use it only for a surface you deliberately keep hosted.
+     */
+    readonly prefer?: 'in-app' | 'redirect' | undefined;
 }
 /** What `useVetVisit` returns. The handoff URL is never part of it. */
 interface UseVetVisitState {
@@ -159,8 +171,9 @@ interface UseVetVisitState {
     /** The closed reason for the last failure, or null. */
     readonly errorReason: VetVisitErrorReason | null;
     /**
-     * Mint a handoff and open the hosted Everfur visit. Call it directly from a press or click handler. A second
-     * call while one is in flight returns the same promise rather than minting a second handoff.
+     * Open a vet visit: in your app by default, or the hosted Everfur visit when `prefer` is `'redirect'`. Call
+     * it directly from a press or click handler. On the hosted path a second call while one is in flight
+     * returns the same promise rather than minting a second handoff.
      */
     open(petRef?: PetRef | null): Promise<VetVisitOpenResult>;
     /**
@@ -178,8 +191,10 @@ interface UseVetVisitState {
      * A `null` intent on a target means the visit is over without happening (cancelled, missed): there is
      * nothing left to open, so call `open()` to book a new one instead.
      *
-     * Everfur resolves the reference at the mint against this member's own visits, so one that is not theirs
-     * settles `invalidRequest` and opens nothing. Shares the single-flight rule with `open`.
+     * In-app by default, like `open`: the request carries `visitRef` and `intent` to your presenter or to the
+     * SDK-owned experience. With `prefer: 'redirect'`, Everfur resolves the reference at the mint against this
+     * member's own visits, so one that is not theirs settles `invalidRequest` and opens nothing, and the call
+     * shares the single-flight rule with `open`.
      */
     openVisit(visitRef: string, intent?: VetVisitIntent | null): Promise<VetVisitOpenResult>;
 }

package/dist/video/index.d.cts

@@ -1,5 +1,6 @@
-import { E as EverfurError, c as EverfurResult } from '../EverfurResult-DN9pL2Ab.cjs';
-export { a as EverfurErrorCategory, b as EverfurErrorCode } from '../EverfurResult-DN9pL2Ab.cjs';
+import { E as EverfurError } from '../EverfurError-DmELDpXp.cjs';
+export { a as EverfurErrorCategory, b as EverfurErrorCode } from '../EverfurError-DmELDpXp.cjs';
+import { E as EverfurResult } from '../EverfurResult-ZtH-YV1h.cjs';
 import { J as JobId, P as PetRef } from '../ids-B2GAAifq.cjs';
 export { B as Brand, _ as __brand } from '../ids-B2GAAifq.cjs';
 import { M as MediaSource } from '../CameraPort-Cv31Pz7g.cjs';

package/dist/video/index.d.ts

@@ -1,5 +1,6 @@
-import { E as EverfurError, c as EverfurResult } from '../EverfurResult-DN9pL2Ab.js';
-export { a as EverfurErrorCategory, b as EverfurErrorCode } from '../EverfurResult-DN9pL2Ab.js';
+import { E as EverfurError } from '../EverfurError-DmELDpXp.js';
+export { a as EverfurErrorCategory, b as EverfurErrorCode } from '../EverfurError-DmELDpXp.js';
+import { E as EverfurResult } from '../EverfurResult-SGvHKsCB.js';
 import { J as JobId, P as PetRef } from '../ids-B2GAAifq.js';
 export { B as Brand, _ as __brand } from '../ids-B2GAAifq.js';
 import { M as MediaSource } from '../CameraPort-Cv31Pz7g.js';

package/dist/{view-Bxwxp4xD.d.ts → view-BqcOYFTr.d.ts}

@@ -1,9 +1,10 @@
-import { c as EverfurResult, E as EverfurError } from './EverfurResult-DN9pL2Ab.js';
+import { E as EverfurError } from './EverfurError-DmELDpXp.js';
+import { E as EverfurResult } from './EverfurResult-SGvHKsCB.js';
 import { R as RecordsRequestId, P as PetRef } from './ids-B2GAAifq.js';
 import { F as FileHandle, U as UploadTransport } from './ports-BN6RHF9W.js';
-import { C as CreateUploadRequestInput, d as RecordsRequestView, U as UploadedDocument, g as RecordsView, h as ConsentState, G as GrantConsentInput, i as RecordsDenialReason, a as RecordEntity } from './models-B-Uh2LTf.js';
-import { K as RecordMarkersView, L as RecordPdfLink, N as RecordShareLink, Q as RecordsClinicBatchClient } from './depth-DvPwPuT_.js';
-import { c as RecordsDepthStatus, i as RecordsClinicController } from './useRecordsDepth-crhBllQK.js';
+import { C as CreateUploadRequestInput, d as RecordsRequestView, U as UploadedDocument, g as RecordsView, h as ConsentState, G as GrantConsentInput, i as RecordsDenialReason, a as RecordEntity } from './models-DSqA5Ahs.js';
+import { K as RecordMarkersView, L as RecordPdfLink, N as RecordShareLink, Q as RecordsClinicBatchClient } from './depth-DO3Ko_qs.js';
+import { c as RecordsDepthStatus, i as RecordsClinicController } from './useRecordsDepth-DFF7Faxx.js';
 
 interface UploadDocumentInput {
     readonly requestId: RecordsRequestId;

package/dist/{view-DyitEO0m.d.cts → view-CaJs8WFH.d.cts}

@@ -1,9 +1,10 @@
-import { c as EverfurResult, E as EverfurError } from './EverfurResult-DN9pL2Ab.cjs';
+import { E as EverfurError } from './EverfurError-DmELDpXp.cjs';
+import { E as EverfurResult } from './EverfurResult-ZtH-YV1h.cjs';
 import { R as RecordsRequestId, P as PetRef } from './ids-B2GAAifq.cjs';
 import { F as FileHandle, U as UploadTransport } from './ports-BN6RHF9W.cjs';
-import { C as CreateUploadRequestInput, d as RecordsRequestView, U as UploadedDocument, g as RecordsView, h as ConsentState, G as GrantConsentInput, i as RecordsDenialReason, a as RecordEntity } from './models-D2EUxPZY.cjs';
-import { K as RecordMarkersView, L as RecordPdfLink, N as RecordShareLink, Q as RecordsClinicBatchClient } from './depth-D5HwcvKC.cjs';
-import { c as RecordsDepthStatus, i as RecordsClinicController } from './useRecordsDepth-C6rjEaLn.cjs';
+import { C as CreateUploadRequestInput, d as RecordsRequestView, U as UploadedDocument, g as RecordsView, h as ConsentState, G as GrantConsentInput, i as RecordsDenialReason, a as RecordEntity } from './models-Bn2z0NNo.cjs';
+import { K as RecordMarkersView, L as RecordPdfLink, N as RecordShareLink, Q as RecordsClinicBatchClient } from './depth-B3NFKlF9.cjs';
+import { c as RecordsDepthStatus, i as RecordsClinicController } from './useRecordsDepth-Bnw36jPr.cjs';
 
 interface UploadDocumentInput {
     readonly requestId: RecordsRequestId;

package/dist/web/consent/index.d.cts

@@ -1,13 +1,14 @@
 import { ReactNode, CSSProperties } from 'react';
-import { E as EverfurConsentScope } from '../../copy-UeUJVk8X.cjs';
-export { C as CONSENT_COPY, a as CONSENT_SCOPE_COPY, b as CONSENT_VERSION_MAX, c as ConsentRepository, d as ConsentRepositoryDeps, e as ConsentRowView, f as ConsentRuntime, g as ConsentScopeCopy, h as EVERFUR_CONSENT_SCOPES, i as EverfurConsentDecision, j as EverfurConsentOptions, k as EverfurConsentScopeState, l as EverfurConsentState, m as EverfurConsentStatus, n as EverfurConsentVerdict, o as consentRowView, p as createConsentRepository, q as createConsentRepositoryOver, r as isEverfurConsentScope, u as useEverfurConsent, s as useEverfurConsentRepository } from '../../copy-UeUJVk8X.cjs';
-import { E as EverfurError } from '../../EverfurResult-DN9pL2Ab.cjs';
-export { a as EverfurErrorCategory, b as EverfurErrorCode, c as EverfurResult } from '../../EverfurResult-DN9pL2Ab.cjs';
-export { A as AuthContext, I as IdentityProvider, M as MintedToken, T as TokenProvider } from '../../identity-C2-08BZW.cjs';
-export { A as AcceptedFrame, a as AnalysisCompleteFrame, b as AnalysisStartedFrame, D as DeltaFrame, c as DoneFrame, E as ErrorFrame, d as EverfurRequest, e as EverfurRequestBase, F as Frame, f as FrameBase, g as FrameKind, H as HeartbeatFrame, h as HttpMethod, M as MultipartBody, T as TransportPort, U as UnknownFrame, i as UrgencyLevel } from '../../config--Wu1Umhd.cjs';
+import { E as EverfurConsentScope } from '../../copy-CneuYdrO.cjs';
+export { C as CONSENT_COPY, a as CONSENT_SCOPE_COPY, b as CONSENT_VERSION_MAX, c as ConsentRepository, d as ConsentRepositoryDeps, e as ConsentRowView, f as ConsentRuntime, g as ConsentScopeCopy, h as EVERFUR_CONSENT_SCOPES, i as EverfurConsentDecision, j as EverfurConsentOptions, k as EverfurConsentScopeState, l as EverfurConsentState, m as EverfurConsentStatus, n as EverfurConsentVerdict, o as consentRowView, p as createConsentRepository, q as createConsentRepositoryOver, r as isEverfurConsentScope, u as useEverfurConsent, s as useEverfurConsentRepository } from '../../copy-CneuYdrO.cjs';
+import { E as EverfurError } from '../../EverfurError-DmELDpXp.cjs';
+export { a as EverfurErrorCategory, b as EverfurErrorCode } from '../../EverfurError-DmELDpXp.cjs';
+export { A as AuthContext, I as IdentityProvider, M as MintedToken, T as TokenProvider } from '../../identity-C7uxGwfT.cjs';
+export { A as AcceptedFrame, a as AnalysisCompleteFrame, b as AnalysisStartedFrame, D as DeltaFrame, c as DoneFrame, E as ErrorFrame, d as EverfurRequest, e as EverfurRequestBase, F as Frame, f as FrameBase, g as FrameKind, H as HeartbeatFrame, h as HttpMethod, M as MultipartBody, T as TransportPort, U as UnknownFrame, i as UrgencyLevel } from '../../config-DAFbf721.cjs';
 export { B as Brand, C as ConversationId, P as PetRef, R as RecordsRequestId, U as UserRef, _ as __brand } from '../../ids-B2GAAifq.cjs';
-export { E as ErrorPolicyPort } from '../../ErrorPolicyPort-CNf4uQZP.cjs';
-import '../../requestFunnel-BjDpqqvm.cjs';
+export { E as EverfurResult } from '../../EverfurResult-ZtH-YV1h.cjs';
+export { E as ErrorPolicyPort } from '../../ErrorPolicyPort-D6CybiqJ.cjs';
+import '../../requestFunnel-Djjwgoe9.cjs';
 
 interface EverfurConsentToggleProps {
     /** Which act this row is. One row is one act; two acts are two rows, never one switch. */

package/dist/web/consent/index.d.ts

@@ -1,13 +1,14 @@
 import { ReactNode, CSSProperties } from 'react';
-import { E as EverfurConsentScope } from '../../copy-DdVFDL01.js';
-export { C as CONSENT_COPY, a as CONSENT_SCOPE_COPY, b as CONSENT_VERSION_MAX, c as ConsentRepository, d as ConsentRepositoryDeps, e as ConsentRowView, f as ConsentRuntime, g as ConsentScopeCopy, h as EVERFUR_CONSENT_SCOPES, i as EverfurConsentDecision, j as EverfurConsentOptions, k as EverfurConsentScopeState, l as EverfurConsentState, m as EverfurConsentStatus, n as EverfurConsentVerdict, o as consentRowView, p as createConsentRepository, q as createConsentRepositoryOver, r as isEverfurConsentScope, u as useEverfurConsent, s as useEverfurConsentRepository } from '../../copy-DdVFDL01.js';
-import { E as EverfurError } from '../../EverfurResult-DN9pL2Ab.js';
-export { a as EverfurErrorCategory, b as EverfurErrorCode, c as EverfurResult } from '../../EverfurResult-DN9pL2Ab.js';
-export { A as AuthContext, I as IdentityProvider, M as MintedToken, T as TokenProvider } from '../../identity-CEi9GRFZ.js';
-export { A as AcceptedFrame, a as AnalysisCompleteFrame, b as AnalysisStartedFrame, D as DeltaFrame, c as DoneFrame, E as ErrorFrame, d as EverfurRequest, e as EverfurRequestBase, F as Frame, f as FrameBase, g as FrameKind, H as HeartbeatFrame, h as HttpMethod, M as MultipartBody, T as TransportPort, U as UnknownFrame, i as UrgencyLevel } from '../../config-C7eb_IMD.js';
+import { E as EverfurConsentScope } from '../../copy-CeRH3NXy.js';
+export { C as CONSENT_COPY, a as CONSENT_SCOPE_COPY, b as CONSENT_VERSION_MAX, c as ConsentRepository, d as ConsentRepositoryDeps, e as ConsentRowView, f as ConsentRuntime, g as ConsentScopeCopy, h as EVERFUR_CONSENT_SCOPES, i as EverfurConsentDecision, j as EverfurConsentOptions, k as EverfurConsentScopeState, l as EverfurConsentState, m as EverfurConsentStatus, n as EverfurConsentVerdict, o as consentRowView, p as createConsentRepository, q as createConsentRepositoryOver, r as isEverfurConsentScope, u as useEverfurConsent, s as useEverfurConsentRepository } from '../../copy-CeRH3NXy.js';
+import { E as EverfurError } from '../../EverfurError-DmELDpXp.js';
+export { a as EverfurErrorCategory, b as EverfurErrorCode } from '../../EverfurError-DmELDpXp.js';
+export { A as AuthContext, I as IdentityProvider, M as MintedToken, T as TokenProvider } from '../../identity-CLAUq-K4.js';
+export { A as AcceptedFrame, a as AnalysisCompleteFrame, b as AnalysisStartedFrame, D as DeltaFrame, c as DoneFrame, E as ErrorFrame, d as EverfurRequest, e as EverfurRequestBase, F as Frame, f as FrameBase, g as FrameKind, H as HeartbeatFrame, h as HttpMethod, M as MultipartBody, T as TransportPort, U as UnknownFrame, i as UrgencyLevel } from '../../config-ClI7QxB0.js';
 export { B as Brand, C as ConversationId, P as PetRef, R as RecordsRequestId, U as UserRef, _ as __brand } from '../../ids-B2GAAifq.js';
-export { E as ErrorPolicyPort } from '../../ErrorPolicyPort-CwbfmxzJ.js';
-import '../../requestFunnel-DFMGcluw.js';
+export { E as EverfurResult } from '../../EverfurResult-SGvHKsCB.js';
+export { E as ErrorPolicyPort } from '../../ErrorPolicyPort-D22LUVrK.js';
+import '../../requestFunnel-D7ipek3e.js';
 
 interface EverfurConsentToggleProps {
     /** Which act this row is. One row is one act; two acts are two rows, never one switch. */