@capxul/sdk-react 0.1.0-alpha.8 → 0.2.0-alpha.3

package/CHANGELOG.md

@@ -1,5 +1,122 @@
 # @capxul/sdk-react
 
+## 0.2.0-alpha.3
+
+### Patch Changes
+
+- Updated dependencies [5b99a9b]
+  - @capxul/sdk@0.2.0-alpha.3
+
+## 0.2.0-alpha.2
+
+### Minor Changes
+
+- 995383f: Epic 660: Unified auth surface
+  - Introduces AuthService promise-based auth API replacing the imperative capxul.auth.\* tuple interface
+  - Adds SignerProvisioner for deterministic Safe v1.4.1 address derivation from viem signers
+  - Adds useAuth() React hook with reactive state + promise-based methods
+  - Deprecates useAuthFlow and useAuthBootstrapFlow in favor of useAuth()
+  - Migrates reference CLI auth commands (send-otp, verify-otp, signout) to useAuth()
+  - Migrates test surfaces: walkthroughs, type tests, e2e harness signup, lazy-dx provider
+  - Adds @repo/safe-derive workspace package for Safe address derivation utilities
+  - Aligns CapxulConfig.data to \_data with internal SDK transport ownership (Epic 652)
+  - Pins esbuild to 0.25.12 to fix binary-version skew in fresh worktrees
+
+- 2ef4ee3: Reshape the organizations members surface around a single Membership entity
+  with a status lifecycle (`pending | active | revoked | expired`).
+  - Replaces the prior invitation/membership split (which produced a phantom
+    `MemberInvitation` type that never compiled) with a single `Member` type
+    exposing `status`, `email`, `acceptedAt`, `expiresAt`, and `resentCount`.
+  - New methods on `organizations.members.*`: `accept(token)`, `revoke(memberId)`,
+    `resend(memberId)`. `invite()` now returns a `MemberInviteResponse`
+    containing the raw invite token (returned once).
+  - Auto-accepts pending invitations on first sign-in for the matching email
+    via a BetterAuth post-signup hook.
+  - Nightly Convex cron expires overdue pending invitations.
+
+  Public type changes:
+  - Removed: `MemberInvitation` (was never exported; type didn't compile).
+  - Added: `MembershipStatus`, `MemberInviteResponse`.
+  - Updated: `Member` shape — see SDK reference for the full delta.
+
+  React hooks:
+  - New: `useAcceptInvitation`, `useRevokeMember`, `useResendInvitation`.
+  - Updated: `useInviteMember` returns `MemberInviteResponse` (was returning a
+    type that didn't exist).
+
+  Reference CLI:
+  - New commands: `org members invite`, `org members list`, `org members retrieve`,
+    `org members accept`, `org members updateRole`, `org members revoke`,
+    `org members remove`, `org members resend`.
+
+- c7146bf: **Transport ownership (#656):** The SDK now owns construction of the
+  authenticated `ConvexHttpClient`. Consumers no longer wire `data` manually
+  or provide `auth.createDataClient`. After `verifyOtp` exchanges a Convex
+  JWT, the SDK builds the default data client internally via
+  `createDefaultDataClient` and stores it on `config._data`.
+  - `CapxulConfig.data` renamed to `_data` (internal test seam).
+  - `CapxulAuthConfig.createDataClient` removed from public types.
+  - `convex` moved from `peerDependencies` to `dependencies`.
+
+### Patch Changes
+
+- d252aa7: Widen the published React peer dependency to `>=18.2.0 <20` so React 18 consumers, including the Ink reference proof app, can install the alpha SDK without peer conflicts.
+- Updated dependencies [995383f]
+- Updated dependencies [2ef4ee3]
+- Updated dependencies [c7146bf]
+  - @capxul/sdk@0.2.0-alpha.2
+
+## 0.2.0-alpha.1
+
+### Minor Changes
+
+- **Transport ownership (#656):** Remove the `auth.createDataClient`
+  callback from `CapxulProvider`. The React provider now passes its
+  singleton data client via `CapxulConfig._data` and lets the SDK own
+  runtime construction after OTP verification.
+
+### Patch Changes
+
+- Updated dependencies
+  - @capxul/sdk@0.2.0-alpha.1
+
+## 0.1.0-alpha.12
+
+### Minor Changes
+
+- Publish the post-alpha.11 SDK and React SDK surface: funds v1 sub-account
+  runtime coverage, React hook wiring, payments list support, and the latest
+  generated Convex API snapshots used by current alpha consumers.
+
+  Note: alpha.10 and alpha.11 were intermediate runner artifacts from the
+  prior release pipeline (manual `package.json` bumps that were never folded
+  back into the repo). alpha.12 reconciles `package.json`, the changesets
+  state, and npm to a single consistent version.
+
+### Patch Changes
+
+- Updated dependencies
+  - @capxul/sdk@0.1.0-alpha.12
+
+## 0.1.0-alpha.9
+
+### Minor Changes
+
+- Add the canonical auth bootstrap flow.
+
+  `verifyOtp()` now resolves a verified email session into either an
+  `existing_member` identity or a `bootstrap_required` continuation. New and
+  incomplete members continue through `completeBootstrap()`, which validates a
+  server-issued bootstrap token, claims the username, provisions the account/Safe
+  through the backend bootstrap path, and returns the authenticated product
+  identity. The React SDK adds `useAuthBootstrapFlow()` as the typed first-run
+  flow wrapper.
+
+### Patch Changes
+
+- Updated dependencies
+  - @capxul/sdk@0.1.0-alpha.9
+
 ## 0.1.0-alpha.8
 
 ### Minor Changes

package/README.md

@@ -152,7 +152,7 @@ cookies, or provider payloads. Proof output reports only
 | Documents | `useDocument`, `useDocuments`, `useOrgDocuments` |
 | Sub-accounts / virtual | `useSubAccount`, `useSubAccounts`, `useVirtualAccount`, `useVirtualAccounts`, `useVirtualCard`, `useVirtualCards` |
 | Settings | `useApiKey`, `useApiKeys`, `useWebhookEndpoint`, `useWebhookEndpoints`, `useWebhookEvent`, `useExternalAccount`, `useExternalAccounts`, `useBalanceLedgerEntry`, `useBalanceLedger` |
-| KYC / KYB | `useKycProfile`, `useKybProfile` |
+| KYC / KYB | `useKycProfile` |
 | Treasury | `useTreasury`, `useSafe` |
 | Operations | `useOperation` (correlation join key per CANON.md §3.3) |
 | Lifecycle | `useCapxulStatus` |