@capxul/sdk-react 0.2.0-alpha.4 → 1.0.0-alpha.6

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../src/internal/capxul-bootstrap-context.tsx","../src/internal/capxul-client-context.tsx","../src/provider.tsx","../src/internal/require-bootstrapped-client.ts","../src/internal/reactivity-keys.ts","../src/internal/unwrap-capxul-result.ts","../src/hooks/use-capxul-session.ts","../src/hooks/use-capxul-profile.ts","../src/internal/is-vitest-runtime.ts","../src/internal/invalidate-auth-boundary.ts","../src/hooks/use-capxul-account-lifecycle.ts","../src/hooks/use-capxul-account-balance.ts","../src/hooks/use-capxul-account-fund.ts","../src/hooks/use-capxul-sign-in.ts","../src/hooks/use-capxul-verify-otp.ts","../src/hooks/use-capxul-sign-out.ts","../src/hooks/use-capxul-sub-accounts.ts","../src/hooks/use-capxul-orgs.ts","../src/hooks/use-capxul-org.ts","../src/hooks/use-capxul-org-members.ts","../src/hooks/use-capxul-org-roles.ts","../src/hooks/use-capxul-org-deploy-roles.ts","../src/hooks/use-capxul-org-treasury.ts","../src/hooks/use-capxul-create-org.ts","../src/hooks/use-capxul-invite-member.ts","../src/hooks/use-capxul-remove-member.ts","../src/hooks/use-capxul-assign-role.ts","../src/hooks/use-capxul-org-spend.ts"],"sourcesContent":["\"use client\";\n\n// Bootstrap-state context (SDK publish readiness · sdk-provider-owned-bootstrap).\n//\n// `<CapxulProvider>` runs the async client bootstrap and publishes its status\n// here. Consumers read it via `useCapxul()` for an opt-in splash / error / retry\n// surface. Data hooks do NOT need it — they sit in `isPending` until the client\n// resolves (see `useCapxulClientOrNull`).\n\nimport * as React from \"react\";\nimport { createContext, useContext, type ReactNode } from \"react\";\n\nimport type { CapxulError } from \"@capxul/config\";\n\nexport type CapxulBootstrapStatus = \"bootstrapping\" | \"ready\" | \"error\";\n\nexport interface CapxulBootstrapState {\n  readonly status: CapxulBootstrapStatus;\n  readonly error: CapxulError | null;\n  readonly retry: () => void;\n}\n\nconst CapxulBootstrapContext = createContext<CapxulBootstrapState | null>(null);\n\nexport interface CapxulBootstrapProviderProps {\n  readonly value: CapxulBootstrapState;\n  readonly children: ReactNode;\n}\n\nexport function CapxulBootstrapProvider({ value, children }: CapxulBootstrapProviderProps) {\n  return (\n    <CapxulBootstrapContext.Provider value={value}>{children}</CapxulBootstrapContext.Provider>\n  );\n}\n\nexport function useCapxul(): CapxulBootstrapState {\n  const state = useContext(CapxulBootstrapContext);\n  if (state === null) {\n    throw new Error(\"useCapxul must be used within <CapxulProvider>\");\n  }\n  return state;\n}\n","\"use client\";\n\nimport * as React from \"react\";\nimport { createContext, useContext, type ReactNode } from \"react\";\n\nimport type { CapxulClient } from \"@capxul/sdk\";\n\nconst MISSING_CAPXUL_CLIENT_PROVIDER = Symbol(\"MISSING_CAPXUL_CLIENT_PROVIDER\");\n\nconst CapxulClientContext = createContext<\n  CapxulClient | null | typeof MISSING_CAPXUL_CLIENT_PROVIDER\n>(MISSING_CAPXUL_CLIENT_PROVIDER);\n\nexport interface CapxulClientProviderProps {\n  readonly client: CapxulClient | null;\n  readonly children: ReactNode;\n}\n\nexport function CapxulClientProvider({ client, children }: CapxulClientProviderProps) {\n  return <CapxulClientContext.Provider value={client}>{children}</CapxulClientContext.Provider>;\n}\n\nexport function useCapxulClient(): CapxulClient {\n  const client = useCapxulClientOrNull();\n  if (client === null) {\n    throw new Error(\"useCapxulClient called before <CapxulProvider> bootstrap resolved\");\n  }\n  return client;\n}\n\n/**\n * Returns the client, or `null` while `<CapxulProvider>` is still bootstrapping.\n * Data hooks use this so they can sit in `isPending` (disabled query) until the\n * client resolves, rather than throwing during bootstrap.\n */\nexport function useCapxulClientOrNull(): CapxulClient | null {\n  const client = useContext(CapxulClientContext);\n  if (client === MISSING_CAPXUL_CLIENT_PROVIDER) {\n    throw new Error(\"useCapxulClient must be used within <CapxulProvider>\");\n  }\n  return client;\n}\n","\"use client\";\n\n// CapxulProvider — owns the client lifecycle (sdk-provider-owned-bootstrap.md).\n//\n// Two modes:\n//   - `publishableKey` (browser/app): the provider runs the async bootstrap via\n//     `createCapxulClient`, owns the TanStack QueryClient, exposes status via\n//     `useCapxul()`, and closes the client on unmount / re-bootstrap.\n//   - `client` (Node/server consumers that bootstrap before React, plus test\n//     harnesses): a pre-built client is supplied; the provider is `ready`\n//     immediately and leaves that client's lifecycle to the caller.\n//\n// `signer` threads into the deploy lane via `createCapxulClient` when supplied.\n// Browser apps with `requirement: \"deployed\"` omit it — the SDK auto-wires Openfort.\n\nimport * as React from \"react\";\nimport { useCallback, useEffect, useMemo, useRef, useState } from \"react\";\nimport type { ReactNode } from \"react\";\nimport { QueryClient, QueryClientProvider } from \"@tanstack/react-query\";\n\nimport type { CapxulError } from \"@capxul/config\";\nimport type { AccountRequirement, CapxulClient, CapxulSigner } from \"@capxul/sdk\";\nimport { createCapxulClient } from \"@capxul/sdk\";\n\nimport {\n  CapxulBootstrapProvider,\n  type CapxulBootstrapState,\n} from \"./internal/capxul-bootstrap-context\";\nimport { CapxulClientProvider } from \"./internal/capxul-client-context\";\n\nvoid React;\n\ntype CapxulProviderSharedProps = {\n  /** Bring your own QueryClient; otherwise the provider creates one. */\n  readonly queryClient?: QueryClient;\n  readonly children: ReactNode;\n};\n\n/** Browser / app path — the provider bootstraps the client from a publishable key. */\ntype CapxulProviderPublishableKeyProps = CapxulProviderSharedProps & {\n  readonly publishableKey: string;\n  readonly client?: never;\n  /** Init-time account readiness target. Default `\"none\"`. */\n  readonly requirement?: AccountRequirement;\n  /**\n   * Optional consumer-held signer for the deploy lane. Omitted in browser apps\n   * with `requirement: \"deployed\"` — the SDK wires Openfort from bootstrap.\n   */\n  readonly signer?: CapxulSigner;\n};\n\n/**\n * Node / server / test path — a pre-built client is supplied; lifecycle stays\n * with the caller. Mutually exclusive with `publishableKey`.\n */\ntype CapxulProviderInjectedClientProps = CapxulProviderSharedProps & {\n  readonly client: CapxulClient;\n  readonly publishableKey?: never;\n  readonly requirement?: never;\n  readonly signer?: never;\n};\n\nexport type CapxulProviderProps =\n  | CapxulProviderPublishableKeyProps\n  | CapxulProviderInjectedClientProps;\n\nfunction makeDefaultQueryClient(): QueryClient {\n  return new QueryClient({\n    defaultOptions: {\n      queries: { retry: 2, staleTime: 30_000 },\n      mutations: { retry: 0 },\n    },\n  });\n}\n\nfunction isCapxulQueryKey(queryKey: readonly unknown[]): boolean {\n  return queryKey[0] === \"capxul\";\n}\n\nfunction clearClientScopedQueries(queryClient: QueryClient, ownsQueryClient: boolean): void {\n  if (ownsQueryClient) {\n    queryClient.clear();\n    return;\n  }\n  queryClient.removeQueries({ predicate: (query) => isCapxulQueryKey(query.queryKey) });\n}\n\nexport function CapxulProvider(props: CapxulProviderProps) {\n  const {\n    publishableKey,\n    client: injectedClient,\n    requirement,\n    signer,\n    queryClient,\n    children,\n  } = props;\n\n  // The QueryClient is pinned at mount: a later `queryClient` prop swap is\n  // ignored (consumers should not swap it mid-tree) — pass your own once, or\n  // let the provider create one.\n  const [resolvedQueryClient] = useState(() => queryClient ?? makeDefaultQueryClient());\n  const [ownsQueryClient] = useState(() => queryClient === undefined);\n\n  const [client, setClient] = useState<CapxulClient | null>(injectedClient ?? null);\n  const previousClientRef = useRef<CapxulClient | null>(injectedClient ?? null);\n  const [status, setStatus] = useState<CapxulBootstrapState[\"status\"]>(\n    injectedClient === undefined ? \"bootstrapping\" : \"ready\",\n  );\n  const [error, setError] = useState<CapxulError | null>(null);\n  const [attempt, setAttempt] = useState(0);\n\n  const retry = useCallback(() => {\n    setAttempt((n) => n + 1);\n  }, []);\n\n  // Bootstrap path: the provider owns the client it creates and closes it on\n  // unmount / re-bootstrap. The `cancelled` guard closes a client that resolves\n  // after the effect tears down (StrictMode double-invoke, retry, unmount).\n  useEffect(() => {\n    if (publishableKey === undefined) return;\n    let cancelled = false;\n    let created: CapxulClient | null = null;\n    setStatus(\"bootstrapping\");\n    setError(null);\n    setClient(null);\n    void (async () => {\n      const result = await createCapxulClient({\n        publishableKey,\n        ...(requirement === undefined ? {} : { requirement }),\n        ...(signer === undefined ? {} : { signer }),\n      });\n      if (cancelled) {\n        if (result.ok) await result.value._internal.close?.();\n        return;\n      }\n      if (result.ok) {\n        created = result.value;\n        setClient(result.value);\n        setStatus(\"ready\");\n      } else {\n        setError(result.error);\n        setStatus(\"error\");\n      }\n    })();\n    return () => {\n      cancelled = true;\n      void created?._internal.close?.();\n    };\n  }, [publishableKey, requirement, signer, attempt]);\n\n  // Injected-client path: track prop identity; lifecycle stays with the caller.\n  useEffect(() => {\n    if (injectedClient === undefined) return;\n    setClient(injectedClient);\n    setStatus(\"ready\");\n    setError(null);\n  }, [injectedClient]);\n\n  useEffect(() => {\n    const previous = previousClientRef.current;\n    if (previous !== null && previous !== client) {\n      clearClientScopedQueries(resolvedQueryClient, ownsQueryClient);\n    }\n    previousClientRef.current = client;\n  }, [client, ownsQueryClient, resolvedQueryClient]);\n\n  const bootstrapState = useMemo<CapxulBootstrapState>(\n    () => ({ status, error, retry }),\n    [status, error, retry],\n  );\n\n  // Validate AFTER the hooks so a publishableKey↔client prop transition never\n  // changes the hook count (rules of hooks); the throw aborts render cleanly.\n  if ((publishableKey === undefined) === (injectedClient === undefined)) {\n    throw new Error(\"CapxulProvider requires exactly one of `publishableKey` or `client`\");\n  }\n\n  return (\n    <QueryClientProvider client={resolvedQueryClient}>\n      <CapxulBootstrapProvider value={bootstrapState}>\n        <CapxulClientProvider client={client}>{children}</CapxulClientProvider>\n      </CapxulBootstrapProvider>\n    </QueryClientProvider>\n  );\n}\n","import { Errors } from \"@capxul/config\";\nimport type { CapxulClient } from \"@capxul/sdk\";\n\n/**\n * Narrow the bootstrap-nullable client to a ready client inside a query /\n * mutation function (sdk-provider-owned-bootstrap.md). Data hooks gate their\n * queries on `enabled: client !== null`, so this only ever throws for a mutation\n * triggered while `<CapxulProvider>` is still bootstrapping.\n */\nexport function requireBootstrappedClient(\n  client: CapxulClient | null,\n  method: string,\n): CapxulClient {\n  if (client === null) {\n    throw Errors.wrongState({ method, currentState: \"bootstrapping\", validStates: [\"ready\"] });\n  }\n  return client;\n}\n","// Typed query-key catalog (epic #258 · TanStack reactive surface).\n//\n// Auth-boundary mutations (`verifyOtp`, `signOut`) invalidate all three\n// keys on success. `signIn` does not — OTP sent leaves session null.\n\nimport type { AccountId, OrgId } from \"@capxul/types\";\n\nexport const capxulKeys = {\n  session: [\"capxul\", \"session\"] as const,\n  profile: [\"capxul\", \"profile\"] as const,\n  account: [\"capxul\", \"account\"] as const,\n  accountLifecycle: [\"capxul\", \"accountLifecycle\"] as const,\n  provisioning: [\"capxul\", \"provisioning\"] as const,\n  binding: [\"capxul\", \"binding\"] as const,\n  accountBalance: [\"capxul\", \"accountBalance\"] as const,\n  subAccounts: (accountId: AccountId | undefined) =>\n    [\"capxul\", \"subAccounts\", accountId ?? \"pending\"] as const,\n  // Organization domain (canon §C3, D13 — entity-scoped, keyed by OrgId).\n  orgs: [\"capxul\", \"orgs\"] as const,\n  org: (orgId: OrgId | undefined) => [\"capxul\", \"org\", orgId ?? \"pending\"] as const,\n  orgMembers: (orgId: OrgId | undefined) =>\n    [\"capxul\", \"org\", orgId ?? \"pending\", \"members\"] as const,\n  orgRoles: (orgId: OrgId | undefined) => [\"capxul\", \"org\", orgId ?? \"pending\", \"roles\"] as const,\n  orgTreasury: (orgId: OrgId | undefined) =>\n    [\"capxul\", \"org\", orgId ?? \"pending\", \"treasury\"] as const,\n} satisfies Record<string, readonly unknown[] | ((...args: never[]) => readonly unknown[])>;\n","import type { CapxulResult } from \"@capxul/sdk\";\n\n/** Unwrap a `CapxulResult` for TanStack query/mutation functions — throws into error paths. */\nexport function unwrapCapxulResult<T>(result: CapxulResult<T>): T {\n  if (result.ok) {\n    return result.value;\n  }\n  throw result.error;\n}\n","\"use client\";\n\nimport { useQuery, type UseQueryResult } from \"@tanstack/react-query\";\n\nimport type { CapxulError } from \"@capxul/config\";\nimport type { Session } from \"@capxul/sdk\";\n\nimport { useCapxulClientOrNull } from \"../internal/capxul-client-context\";\nimport { requireBootstrappedClient } from \"../internal/require-bootstrapped-client\";\nimport { capxulKeys } from \"../internal/reactivity-keys\";\nimport { unwrapCapxulResult } from \"../internal/unwrap-capxul-result\";\n\nexport type UseCapxulSessionReturn = UseQueryResult<Session | null, CapxulError>;\n\nexport function useCapxulSession(): UseCapxulSessionReturn {\n  const client = useCapxulClientOrNull();\n  return useQuery({\n    queryKey: capxulKeys.session,\n    queryFn: async () =>\n      unwrapCapxulResult(\n        await requireBootstrappedClient(client, \"auth.getSession\").auth.getSession(),\n      ),\n    enabled: client !== null,\n  });\n}\n","\"use client\";\n\nimport { useQuery, type UseQueryResult } from \"@tanstack/react-query\";\n\nimport type { CapxulError } from \"@capxul/config\";\nimport type { Profile } from \"@capxul/sdk\";\n\nimport { useCapxulClientOrNull } from \"../internal/capxul-client-context\";\nimport { requireBootstrappedClient } from \"../internal/require-bootstrapped-client\";\nimport { capxulKeys } from \"../internal/reactivity-keys\";\nimport { unwrapCapxulResult } from \"../internal/unwrap-capxul-result\";\n\nexport type UseCapxulProfileReturn = UseQueryResult<Profile | null, CapxulError>;\n\nexport function useCapxulProfile(): UseCapxulProfileReturn {\n  const client = useCapxulClientOrNull();\n  return useQuery({\n    queryKey: capxulKeys.profile,\n    queryFn: async () =>\n      unwrapCapxulResult(\n        await requireBootstrappedClient(client, \"identity.loadCurrent\").identity.loadCurrent(),\n      ),\n    enabled: client !== null,\n  });\n}\n","/** True under Vitest — disables hook polling intervals that fight fake timers. */\nexport function isVitestRuntime(): boolean {\n  return typeof process !== \"undefined\" && process.env[\"VITEST\"] === \"true\";\n}\n","import type { QueryClient } from \"@tanstack/react-query\";\n\nimport { capxulKeys } from \"./reactivity-keys\";\n\n/** Background refetch after verifyOtp — avoids hard reset cancel errors in UI. */\nexport async function invalidateAuthBoundary(queryClient: QueryClient): Promise<void> {\n  await Promise.all([\n    queryClient.invalidateQueries({ queryKey: capxulKeys.session }),\n    queryClient.invalidateQueries({ queryKey: capxulKeys.profile }),\n    queryClient.invalidateQueries({ queryKey: capxulKeys.accountLifecycle }),\n    queryClient.invalidateQueries({ queryKey: capxulKeys.accountBalance }),\n  ]);\n}\n\n/** Hard reset after signOut — drop cached authenticated rows immediately. */\nexport async function resetAuthBoundary(queryClient: QueryClient): Promise<void> {\n  await queryClient.cancelQueries({ queryKey: capxulKeys.accountBalance });\n  await Promise.all([\n    queryClient.resetQueries({ queryKey: capxulKeys.session }),\n    queryClient.resetQueries({ queryKey: capxulKeys.profile }),\n    queryClient.resetQueries({ queryKey: capxulKeys.accountLifecycle }),\n    queryClient.resetQueries({ queryKey: capxulKeys.accountBalance }),\n  ]);\n}\n","\"use client\";\n\nimport { useMutation, useQuery, useQueryClient, type UseMutationResult } from \"@tanstack/react-query\";\n\nimport type { CapxulError } from \"@capxul/config\";\nimport { isSettingUpLifecycle, type AccountLifecycle } from \"@capxul/sdk\";\n\nimport { useCapxulClientOrNull } from \"../internal/capxul-client-context\";\nimport { isVitestRuntime } from \"../internal/is-vitest-runtime\";\nimport { invalidateAuthBoundary } from \"../internal/invalidate-auth-boundary\";\nimport { capxulKeys } from \"../internal/reactivity-keys\";\nimport { requireBootstrappedClient } from \"../internal/require-bootstrapped-client\";\nimport { unwrapCapxulResult } from \"../internal/unwrap-capxul-result\";\n\nconst LOADING_LIFECYCLE: AccountLifecycle = { status: \"loading\" };\n\nexport interface UseCapxulAccountLifecycleReturn {\n  readonly lifecycle: AccountLifecycle;\n  readonly isSettingUp: boolean;\n  readonly error: CapxulError | null;\n  readonly isLoading: boolean;\n  readonly isFetching: boolean;\n  readonly isError: boolean;\n  readonly retry: UseMutationResult<AccountLifecycle, CapxulError, void>[\"mutateAsync\"];\n  readonly isRetrying: boolean;\n}\n\nexport function useCapxulAccountLifecycle(): UseCapxulAccountLifecycleReturn {\n  const client = useCapxulClientOrNull();\n  const queryClient = useQueryClient();\n\n  const query = useQuery<AccountLifecycle, CapxulError>({\n    queryKey: capxulKeys.accountLifecycle,\n    queryFn: async () =>\n      unwrapCapxulResult(\n        await requireBootstrappedClient(client, \"account.getLifecycle\").account.getLifecycle(),\n      ),\n    enabled: client !== null,\n    refetchInterval: (q) => {\n      if (isVitestRuntime()) return false;\n      const data = q.state.data;\n      if (data === undefined) return false;\n      // Keep polling through `loading` — the first fetch can race verifyOtp/session\n      // hydration; without this the hook sticks on loading forever.\n      if (data.status === \"loading\" || isSettingUpLifecycle(data)) return 2_000;\n      return false;\n    },\n  });\n\n  const retryMutation = useMutation<AccountLifecycle, CapxulError, void>({\n    mutationFn: async () =>\n      unwrapCapxulResult(\n        await requireBootstrappedClient(client, \"account.retrySetup\").account.retrySetup(),\n      ),\n    onSuccess: async () => {\n      await invalidateAuthBoundary(queryClient);\n    },\n  });\n\n  const lifecycle = query.data ?? LOADING_LIFECYCLE;\n  const failedError = lifecycle.status === \"failed\" ? lifecycle.error : null;\n\n  return {\n    lifecycle,\n    isSettingUp: isSettingUpLifecycle(lifecycle),\n    error: failedError ?? (query.isError ? query.error : null),\n    isLoading: query.isLoading,\n    isFetching: query.isFetching,\n    isError: query.isError,\n    retry: retryMutation.mutateAsync,\n    isRetrying: retryMutation.isPending,\n  };\n}\n","\"use client\";\n\nimport { useQuery, type UseQueryResult } from \"@tanstack/react-query\";\n\nimport type { CapxulError } from \"@capxul/config\";\nimport type { Account } from \"@capxul/sdk\";\n\nimport { useCapxulClientOrNull } from \"../internal/capxul-client-context\";\nimport { requireBootstrappedClient } from \"../internal/require-bootstrapped-client\";\nimport { capxulKeys } from \"../internal/reactivity-keys\";\nimport { unwrapCapxulResult } from \"../internal/unwrap-capxul-result\";\n\nexport type UseCapxulAccountBalanceReturn = UseQueryResult<Account, CapxulError>;\n\nexport type UseCapxulAccountBalanceOptions = {\n  /** When false, skips the Convex readBalance action until the account ladder is ready. */\n  readonly enabled?: boolean;\n};\n\nexport function useCapxulAccountBalance(\n  options?: UseCapxulAccountBalanceOptions,\n): UseCapxulAccountBalanceReturn {\n  const client = useCapxulClientOrNull();\n  return useQuery({\n    queryKey: capxulKeys.accountBalance,\n    queryFn: async () =>\n      unwrapCapxulResult(await requireBootstrappedClient(client, \"accounts.read\").accounts.read()),\n    enabled: client !== null && (options?.enabled ?? true),\n  });\n}\n","\"use client\";\n\nimport { useMutation, useQueryClient, type UseMutationResult } from \"@tanstack/react-query\";\n\nimport type { CapxulError } from \"@capxul/config\";\nimport type { Money } from \"@capxul/types\";\n\nimport { useCapxulClientOrNull } from \"../internal/capxul-client-context\";\nimport { requireBootstrappedClient } from \"../internal/require-bootstrapped-client\";\nimport { capxulKeys } from \"../internal/reactivity-keys\";\nimport { unwrapCapxulResult } from \"../internal/unwrap-capxul-result\";\n\nexport type UseCapxulAccountFundReturn = UseMutationResult<\n  { readonly txHash: string },\n  CapxulError,\n  Money\n>;\n\nexport function useCapxulAccountFund(): UseCapxulAccountFundReturn {\n  const client = useCapxulClientOrNull();\n  const queryClient = useQueryClient();\n  return useMutation({\n    mutationFn: async (amount: Money) =>\n      unwrapCapxulResult(\n        await requireBootstrappedClient(client, \"_internal.accounts.fund\")._internal.accounts.fund(\n          amount,\n        ),\n      ),\n    onSuccess: async () => {\n      await queryClient.invalidateQueries({ queryKey: capxulKeys.accountBalance });\n    },\n  });\n}\n","\"use client\";\n\nimport { useMutation, type UseMutationResult } from \"@tanstack/react-query\";\n\nimport type { CapxulError } from \"@capxul/config\";\n\nimport { useCapxulClientOrNull } from \"../internal/capxul-client-context\";\nimport { requireBootstrappedClient } from \"../internal/require-bootstrapped-client\";\nimport { unwrapCapxulResult } from \"../internal/unwrap-capxul-result\";\n\nexport interface SignInInput {\n  readonly email: string;\n}\n\nexport interface SignInSuccess {\n  readonly sessionId: string;\n  readonly expiresAt: number;\n}\n\nexport type UseCapxulSignInReturn = UseMutationResult<SignInSuccess, CapxulError, SignInInput>;\n\nexport function useCapxulSignIn(): UseCapxulSignInReturn {\n  const client = useCapxulClientOrNull();\n  return useMutation({\n    mutationFn: async (input: SignInInput) =>\n      unwrapCapxulResult(await requireBootstrappedClient(client, \"auth.signIn\").auth.signIn(input)),\n  });\n}\n","\"use client\";\n\nimport { useMutation, useQueryClient, type UseMutationResult } from \"@tanstack/react-query\";\n\nimport type { CapxulError } from \"@capxul/config\";\nimport type { Session } from \"@capxul/sdk\";\n\nimport { useCapxulClientOrNull } from \"../internal/capxul-client-context\";\nimport { requireBootstrappedClient } from \"../internal/require-bootstrapped-client\";\nimport { invalidateAuthBoundary } from \"../internal/invalidate-auth-boundary\";\nimport { unwrapCapxulResult } from \"../internal/unwrap-capxul-result\";\n\nexport interface VerifyOtpInput {\n  readonly email: string;\n  readonly code: string;\n}\n\nexport type UseCapxulVerifyOtpReturn = UseMutationResult<Session, CapxulError, VerifyOtpInput>;\n\nexport function useCapxulVerifyOtp(): UseCapxulVerifyOtpReturn {\n  const client = useCapxulClientOrNull();\n  const queryClient = useQueryClient();\n  return useMutation({\n    mutationFn: async (input: VerifyOtpInput) =>\n      unwrapCapxulResult(\n        await requireBootstrappedClient(client, \"auth.verifyOtp\").auth.verifyOtp(input),\n      ),\n    onSuccess: async () => {\n      await invalidateAuthBoundary(queryClient);\n    },\n  });\n}\n","\"use client\";\n\nimport { useMutation, useQueryClient, type UseMutationResult } from \"@tanstack/react-query\";\n\nimport type { CapxulError } from \"@capxul/config\";\n\nimport { useCapxulClientOrNull } from \"../internal/capxul-client-context\";\nimport { requireBootstrappedClient } from \"../internal/require-bootstrapped-client\";\nimport { resetAuthBoundary } from \"../internal/invalidate-auth-boundary\";\nimport { capxulKeys } from \"../internal/reactivity-keys\";\nimport { unwrapCapxulResult } from \"../internal/unwrap-capxul-result\";\n\nexport type UseCapxulSignOutReturn = UseMutationResult<void, CapxulError, void>;\n\nexport function useCapxulSignOut(): UseCapxulSignOutReturn {\n  const client = useCapxulClientOrNull();\n  const queryClient = useQueryClient();\n  return useMutation({\n    onMutate: async () => {\n      await queryClient.cancelQueries({ queryKey: capxulKeys.accountBalance });\n    },\n    mutationFn: async () =>\n      unwrapCapxulResult(await requireBootstrappedClient(client, \"auth.signOut\").auth.signOut()),\n    onSuccess: () => resetAuthBoundary(queryClient),\n  });\n}\n","\"use client\";\n\nimport {\n  useMutation,\n  useQuery,\n  useQueryClient,\n  type UseMutationResult,\n  type UseQueryResult,\n} from \"@tanstack/react-query\";\n\nimport { Errors, type CapxulError } from \"@capxul/config\";\nimport type { AccountId, SubAccount, SubAccountId } from \"@capxul/types\";\nimport type { TransferInput, TransferResult } from \"@capxul/sdk\";\n\nimport { useCapxulClientOrNull } from \"../internal/capxul-client-context\";\nimport { requireBootstrappedClient } from \"../internal/require-bootstrapped-client\";\nimport { capxulKeys } from \"../internal/reactivity-keys\";\nimport { unwrapCapxulResult } from \"../internal/unwrap-capxul-result\";\n\nexport type UseCapxulSubAccountsListOptions = {\n  readonly enabled?: boolean;\n};\n\nexport type UseCapxulSubAccountsListReturn = UseQueryResult<readonly SubAccount[], CapxulError>;\n\nexport function useCapxulSubAccountsList(\n  accountId: AccountId | undefined,\n  options?: UseCapxulSubAccountsListOptions,\n): UseCapxulSubAccountsListReturn {\n  const client = useCapxulClientOrNull();\n  return useQuery({\n    queryKey: capxulKeys.subAccounts(accountId),\n    queryFn: async () => {\n      if (accountId === undefined) {\n        throw Errors.invalidInput(\"accountId\", \"required for subAccounts.list\");\n      }\n      return unwrapCapxulResult(\n        await requireBootstrappedClient(client, \"subAccounts.list\").subAccounts.list(accountId),\n      );\n    },\n    enabled: client !== null && (options?.enabled ?? true) && accountId !== undefined,\n  });\n}\n\nexport type UseCapxulSubAccountCreateReturn = UseMutationResult<\n  SubAccount,\n  CapxulError,\n  { readonly accountId: AccountId; readonly name: string }\n>;\n\nexport function useCapxulSubAccountCreate(): UseCapxulSubAccountCreateReturn {\n  const client = useCapxulClientOrNull();\n  const queryClient = useQueryClient();\n  return useMutation({\n    mutationFn: async (input) =>\n      unwrapCapxulResult(\n        await requireBootstrappedClient(client, \"subAccounts.create\").subAccounts.create(\n          input.accountId,\n          { name: input.name },\n        ),\n      ),\n    onSuccess: async (_value, variables) => {\n      await queryClient.invalidateQueries({\n        queryKey: capxulKeys.subAccounts(variables.accountId),\n      });\n      await queryClient.invalidateQueries({ queryKey: capxulKeys.accountBalance });\n    },\n  });\n}\n\nexport type UseCapxulSubAccountRenameReturn = UseMutationResult<\n  SubAccount,\n  CapxulError,\n  { readonly accountId: AccountId; readonly subAccountId: SubAccountId; readonly name: string }\n>;\n\nexport function useCapxulSubAccountRename(): UseCapxulSubAccountRenameReturn {\n  const client = useCapxulClientOrNull();\n  const queryClient = useQueryClient();\n  return useMutation({\n    mutationFn: async (input) =>\n      unwrapCapxulResult(\n        await requireBootstrappedClient(client, \"subAccounts.rename\").subAccounts.rename(\n          input.subAccountId,\n          input.name,\n        ),\n      ),\n    onSuccess: async (_value, variables) => {\n      await queryClient.invalidateQueries({\n        queryKey: capxulKeys.subAccounts(variables.accountId),\n      });\n      await queryClient.invalidateQueries({ queryKey: capxulKeys.accountBalance });\n    },\n  });\n}\n\nexport type UseCapxulSubAccountDeleteReturn = UseMutationResult<\n  void,\n  CapxulError,\n  { readonly accountId: AccountId; readonly subAccountId: SubAccountId }\n>;\n\nexport function useCapxulSubAccountDelete(): UseCapxulSubAccountDeleteReturn {\n  const client = useCapxulClientOrNull();\n  const queryClient = useQueryClient();\n  return useMutation({\n    mutationFn: async (input) =>\n      unwrapCapxulResult(\n        await requireBootstrappedClient(client, \"subAccounts.delete\").subAccounts.delete(\n          input.subAccountId,\n        ),\n      ),\n    onSuccess: async (_value, variables) => {\n      await queryClient.invalidateQueries({\n        queryKey: capxulKeys.subAccounts(variables.accountId),\n      });\n      await queryClient.invalidateQueries({ queryKey: capxulKeys.accountBalance });\n    },\n  });\n}\n\n/**\n * Move money between two of the SAME Account's balances (canon §5/§12). The\n * consumer-facing labels are \"Add money\" (main → sub) and \"Move money out\"\n * (sub → main), both calling `transfer`. `accountId` is carried only to\n * invalidate the right cache keys; the SDK input itself is `{ from, to, amount }`.\n */\nexport type UseCapxulTransferReturn = UseMutationResult<\n  TransferResult,\n  CapxulError,\n  { readonly accountId: AccountId } & TransferInput\n>;\n\nexport function useCapxulTransfer(): UseCapxulTransferReturn {\n  const client = useCapxulClientOrNull();\n  const queryClient = useQueryClient();\n  return useMutation({\n    mutationFn: async ({ from, to, amount }) =>\n      unwrapCapxulResult(\n        await requireBootstrappedClient(client, \"subAccounts.transfer\").subAccounts.transfer({\n          from,\n          to,\n          amount,\n        }),\n      ),\n    onSuccess: async (_value, variables) => {\n      await queryClient.invalidateQueries({\n        queryKey: capxulKeys.subAccounts(variables.accountId),\n      });\n      await queryClient.invalidateQueries({ queryKey: capxulKeys.accountBalance });\n    },\n  });\n}\n","\"use client\";\n\nimport { useQuery, type UseQueryResult } from \"@tanstack/react-query\";\n\nimport type { CapxulError } from \"@capxul/config\";\nimport type { OrgView } from \"@capxul/sdk\";\n\nimport { useCapxulClient } from \"../internal/capxul-client-context\";\nimport { capxulKeys } from \"../internal/reactivity-keys\";\nimport { unwrapCapxulResult } from \"../internal/unwrap-capxul-result\";\n\n/**\n * List the Orgs you belong to (canon §C1 \"Org list\" / §C3). Binds directly to\n * the locked `capxul.orgs()` SDK method.\n */\nexport type UseCapxulOrgsReturn = UseQueryResult<readonly OrgView[], CapxulError>;\n\nexport type UseCapxulOrgsOptions = {\n  /**\n   * Gate the query on auth readiness. `client.orgs()` is a session-scoped\n   * authenticated read; firing it before the session token settles surfaces a\n   * spurious `NOT_AUTHENTICATED`. Consumers pass `enabled: <auth-ready>` (e.g.\n   * \"the Organization surface is active\") — mirrors `useCapxulSubAccountsList`.\n   * Defaults to `true` to preserve the bare `useCapxulOrgs()` call shape.\n   */\n  readonly enabled?: boolean;\n};\n\nexport function useCapxulOrgs(options?: UseCapxulOrgsOptions): UseCapxulOrgsReturn {\n  const client = useCapxulClient();\n  return useQuery({\n    queryKey: capxulKeys.orgs,\n    queryFn: async () => unwrapCapxulResult(await client.orgs()),\n    enabled: options?.enabled ?? true,\n  });\n}\n","\"use client\";\n\nimport { useQuery, type UseQueryResult } from \"@tanstack/react-query\";\n\nimport { Errors, type CapxulError } from \"@capxul/config\";\nimport type { OrgId, OrgView } from \"@capxul/sdk\";\n\nimport { useCapxulClient } from \"../internal/capxul-client-context\";\nimport { capxulKeys } from \"../internal/reactivity-keys\";\nimport { unwrapCapxulResult } from \"../internal/unwrap-capxul-result\";\n\nexport type UseCapxulOrgOptions = {\n  readonly enabled?: boolean;\n};\n\n/**\n * A single Org you belong to, resolved from `capxul.orgs()` and narrowed to the\n * requested `orgId` (canon §C3). Returns `null` when the Org is not in your list.\n * Gated by `orgId !== undefined`. RED until S1.\n */\nexport type UseCapxulOrgReturn = UseQueryResult<OrgView | null, CapxulError>;\n\nexport function useCapxulOrg(\n  orgId: OrgId | undefined,\n  options?: UseCapxulOrgOptions,\n): UseCapxulOrgReturn {\n  const client = useCapxulClient();\n  return useQuery({\n    queryKey: capxulKeys.org(orgId),\n    queryFn: async () => {\n      if (orgId === undefined) {\n        throw Errors.invalidInput(\"orgId\", \"required for useCapxulOrg\");\n      }\n      const orgs = unwrapCapxulResult(await client.orgs());\n      return orgs.find((org) => org.id === orgId) ?? null;\n    },\n    enabled: (options?.enabled ?? true) && orgId !== undefined,\n  });\n}\n","\"use client\";\n\nimport { useQuery, type UseQueryResult } from \"@tanstack/react-query\";\n\nimport { Errors, type CapxulError } from \"@capxul/config\";\nimport type { MemberView, OrgId } from \"@capxul/sdk\";\n\nimport { useCapxulClient } from \"../internal/capxul-client-context\";\nimport { capxulKeys } from \"../internal/reactivity-keys\";\nimport { unwrapCapxulResult } from \"../internal/unwrap-capxul-result\";\n\nexport type UseCapxulOrgMembersOptions = {\n  readonly enabled?: boolean;\n};\n\n/**\n * The members of an Org (canon §C1 \"Members\" / §C3, D8/D9). Binds directly to\n * the entity-scoped `capxul.org(orgId).members()` (D13). Gated by\n * `orgId !== undefined`. RED until S3.\n */\nexport type UseCapxulOrgMembersReturn = UseQueryResult<readonly MemberView[], CapxulError>;\n\nexport function useCapxulOrgMembers(\n  orgId: OrgId | undefined,\n  options?: UseCapxulOrgMembersOptions,\n): UseCapxulOrgMembersReturn {\n  const client = useCapxulClient();\n  return useQuery({\n    queryKey: capxulKeys.orgMembers(orgId),\n    queryFn: async () => {\n      if (orgId === undefined) {\n        throw Errors.invalidInput(\"orgId\", \"required for useCapxulOrgMembers\");\n      }\n      return unwrapCapxulResult(await client.org(orgId).members());\n    },\n    enabled: (options?.enabled ?? true) && orgId !== undefined,\n  });\n}\n","\"use client\";\n\nimport { useQuery, type UseQueryResult } from \"@tanstack/react-query\";\n\nimport { Errors, type CapxulError } from \"@capxul/config\";\nimport type { OrgId, RoleView } from \"@capxul/sdk\";\n\nimport { useCapxulClient } from \"../internal/capxul-client-context\";\nimport { capxulKeys } from \"../internal/reactivity-keys\";\nimport { unwrapCapxulResult } from \"../internal/unwrap-capxul-result\";\n\nexport type UseCapxulOrgRolesOptions = {\n  readonly enabled?: boolean;\n};\n\n/**\n * The roles seeded on an Org (canon §C1 \"Roles\" / §C3, D4/D6). Binds directly\n * to the entity-scoped `capxul.org(orgId).roles()` (D13). Gated by\n * `orgId !== undefined`. RED until S2.\n */\nexport type UseCapxulOrgRolesReturn = UseQueryResult<readonly RoleView[], CapxulError>;\n\nexport function useCapxulOrgRoles(\n  orgId: OrgId | undefined,\n  options?: UseCapxulOrgRolesOptions,\n): UseCapxulOrgRolesReturn {\n  const client = useCapxulClient();\n  return useQuery({\n    queryKey: capxulKeys.orgRoles(orgId),\n    queryFn: async () => {\n      if (orgId === undefined) {\n        throw Errors.invalidInput(\"orgId\", \"required for useCapxulOrgRoles\");\n      }\n      return unwrapCapxulResult(await client.org(orgId).roles());\n    },\n    enabled: (options?.enabled ?? true) && orgId !== undefined,\n  });\n}\n","\"use client\";\n\nimport { useMutation, useQueryClient, type UseMutationResult } from \"@tanstack/react-query\";\n\nimport type { CapxulError } from \"@capxul/config\";\nimport type { OrgId, RoleView } from \"@capxul/sdk\";\n\nimport { useCapxulClient } from \"../internal/capxul-client-context\";\nimport { capxulKeys } from \"../internal/reactivity-keys\";\nimport { unwrapCapxulResult } from \"../internal/unwrap-capxul-result\";\n\nexport type UseCapxulOrgDeployRolesReturn = UseMutationResult<\n  readonly RoleView[],\n  CapxulError,\n  OrgId\n>;\n\nexport function useCapxulOrgDeployRoles(): UseCapxulOrgDeployRolesReturn {\n  const client = useCapxulClient();\n  const queryClient = useQueryClient();\n  return useMutation({\n    mutationFn: async (orgId: OrgId) => {\n      return unwrapCapxulResult(await client.org(orgId).deployRoles());\n    },\n    onSuccess: async (_roles, orgId) => {\n      await queryClient.invalidateQueries({ queryKey: capxulKeys.orgRoles(orgId) });\n      await queryClient.invalidateQueries({ queryKey: capxulKeys.org(orgId) });\n      await queryClient.invalidateQueries({ queryKey: capxulKeys.orgs });\n    },\n  });\n}\n","\"use client\";\n\nimport { useQuery, type UseQueryResult } from \"@tanstack/react-query\";\n\nimport { Errors, type CapxulError } from \"@capxul/config\";\nimport type { OrgId } from \"@capxul/sdk\";\nimport type { Account } from \"@capxul/types\";\n\nimport { useCapxulClient } from \"../internal/capxul-client-context\";\nimport { capxulKeys } from \"../internal/reactivity-keys\";\nimport { unwrapCapxulResult } from \"../internal/unwrap-capxul-result\";\n\nexport type UseCapxulOrgTreasuryOptions = {\n  readonly enabled?: boolean;\n};\n\n/**\n * The Org treasury — the real M2 `Account` over the Org Safe (canon §C3, D3).\n * NEVER `AccountStatus` (the deploy-readiness ladder, no balance). Binds\n * directly to the entity-scoped `capxul.org(orgId).treasury()` (D13). Gated by\n * `orgId !== undefined`. RED until S1.\n */\nexport type UseCapxulOrgTreasuryReturn = UseQueryResult<Account, CapxulError>;\n\nexport function useCapxulOrgTreasury(\n  orgId: OrgId | undefined,\n  options?: UseCapxulOrgTreasuryOptions,\n): UseCapxulOrgTreasuryReturn {\n  const client = useCapxulClient();\n  return useQuery({\n    queryKey: capxulKeys.orgTreasury(orgId),\n    queryFn: async () => {\n      if (orgId === undefined) {\n        throw Errors.invalidInput(\"orgId\", \"required for useCapxulOrgTreasury\");\n      }\n      return unwrapCapxulResult(await client.org(orgId).treasury());\n    },\n    enabled: (options?.enabled ?? true) && orgId !== undefined,\n  });\n}\n","\"use client\";\n\nimport { useMutation, useQueryClient, type UseMutationResult } from \"@tanstack/react-query\";\n\nimport type { CapxulError } from \"@capxul/config\";\nimport type { CreateOrgInput, OrgView } from \"@capxul/sdk\";\n\nimport { useCapxulClient } from \"../internal/capxul-client-context\";\nimport { capxulKeys } from \"../internal/reactivity-keys\";\nimport { unwrapCapxulResult } from \"../internal/unwrap-capxul-result\";\n\n/**\n * Create an Org (canon §C2 J1 / §C3, S1). Binds directly to the locked\n * `capxul.createOrg(input)` SDK method. On success, invalidates the org list.\n * RED until S1 — `mutate` rejects with `Errors.notImplemented(\"org\",\"createOrg\")`.\n */\nexport type UseCapxulCreateOrgReturn = UseMutationResult<OrgView, CapxulError, CreateOrgInput>;\n\nexport function useCapxulCreateOrg(): UseCapxulCreateOrgReturn {\n  const client = useCapxulClient();\n  const queryClient = useQueryClient();\n  return useMutation({\n    mutationFn: async (input: CreateOrgInput) => unwrapCapxulResult(await client.createOrg(input)),\n    onSuccess: async () => {\n      await queryClient.invalidateQueries({ queryKey: capxulKeys.orgs });\n    },\n  });\n}\n","\"use client\";\n\nimport { useMutation, useQueryClient, type UseMutationResult } from \"@tanstack/react-query\";\n\nimport { Errors, type CapxulError } from \"@capxul/config\";\nimport type { InviteMemberInput, MemberView, OrgId } from \"@capxul/sdk\";\n\nimport { useCapxulClient } from \"../internal/capxul-client-context\";\nimport { capxulKeys } from \"../internal/reactivity-keys\";\nimport { unwrapCapxulResult } from \"../internal/unwrap-capxul-result\";\n\n/**\n * Invite a member to an Org by email (canon §C2 J2 virality loop / §C3, S3, D8).\n * Entity-scoped via the closed-over `orgId` (D13). Binds directly to\n * `capxul.org(orgId).invite(input)`. On success, invalidates the member list.\n * RED until S3 — `mutate` rejects with `Errors.notImplemented(\"org\",\"invite\")`.\n */\nexport type UseCapxulInviteMemberReturn = UseMutationResult<\n  MemberView,\n  CapxulError,\n  InviteMemberInput\n>;\n\nexport function useCapxulInviteMember(orgId: OrgId | undefined): UseCapxulInviteMemberReturn {\n  const client = useCapxulClient();\n  const queryClient = useQueryClient();\n  return useMutation({\n    mutationFn: async (input: InviteMemberInput) => {\n      if (orgId === undefined) {\n        throw Errors.invalidInput(\"orgId\", \"required for useCapxulInviteMember\");\n      }\n      return unwrapCapxulResult(await client.org(orgId).invite(input));\n    },\n    onSuccess: async () => {\n      if (orgId === undefined) return;\n      await queryClient.invalidateQueries({ queryKey: capxulKeys.orgMembers(orgId) });\n    },\n  });\n}\n","\"use client\";\n\nimport { useMutation, useQueryClient, type UseMutationResult } from \"@tanstack/react-query\";\n\nimport { Errors, type CapxulError } from \"@capxul/config\";\nimport type { OrgId, RemoveMemberInput } from \"@capxul/sdk\";\n\nimport { useCapxulClient } from \"../internal/capxul-client-context\";\nimport { capxulKeys } from \"../internal/reactivity-keys\";\nimport { unwrapCapxulResult } from \"../internal/unwrap-capxul-result\";\n\n/**\n * Remove a member from an Org (canon §C2 J2 / §C3, S3, D7/D8) — drives the\n * on-chain REVOKE + Convex mirror. Keyed on the member's personal Safe address\n * (D7). Entity-scoped via the closed-over `orgId` (D13). Binds directly to\n * `capxul.org(orgId).removeMember(input)`. On success, invalidates the member\n * list. RED until S3 — `mutate` rejects with\n * `Errors.notImplemented(\"org\",\"removeMember\")`.\n */\nexport type UseCapxulRemoveMemberReturn = UseMutationResult<void, CapxulError, RemoveMemberInput>;\n\nexport function useCapxulRemoveMember(orgId: OrgId | undefined): UseCapxulRemoveMemberReturn {\n  const client = useCapxulClient();\n  const queryClient = useQueryClient();\n  return useMutation({\n    mutationFn: async (input: RemoveMemberInput) => {\n      if (orgId === undefined) {\n        throw Errors.invalidInput(\"orgId\", \"required for useCapxulRemoveMember\");\n      }\n      return unwrapCapxulResult(await client.org(orgId).removeMember(input));\n    },\n    onSuccess: async () => {\n      if (orgId === undefined) return;\n      await queryClient.invalidateQueries({ queryKey: capxulKeys.orgMembers(orgId) });\n    },\n  });\n}\n","\"use client\";\n\nimport { useMutation, useQueryClient, type UseMutationResult } from \"@tanstack/react-query\";\n\nimport { Errors, type CapxulError } from \"@capxul/config\";\nimport type { AssignRoleInput, MemberView, OrgId } from \"@capxul/sdk\";\n\nimport { useCapxulClient } from \"../internal/capxul-client-context\";\nimport { capxulKeys } from \"../internal/reactivity-keys\";\nimport { unwrapCapxulResult } from \"../internal/unwrap-capxul-result\";\n\n/**\n * Assign a role to a member (canon §C2 J2 / §C3, S3, D7/D9) — drives the\n * on-chain GRANT + Convex mirror. Keyed on the member's personal Safe address\n * (D7); the `role` label maps deterministically to the on-chain `roleKey` (D9).\n * Entity-scoped via the closed-over `orgId` (D13). Binds directly to\n * `capxul.org(orgId).assignRole(input)`. On success, invalidates the member\n * list. RED until S3 — `mutate` rejects with\n * `Errors.notImplemented(\"org\",\"assignRole\")`.\n */\nexport type UseCapxulAssignRoleReturn = UseMutationResult<MemberView, CapxulError, AssignRoleInput>;\n\nexport function useCapxulAssignRole(orgId: OrgId | undefined): UseCapxulAssignRoleReturn {\n  const client = useCapxulClient();\n  const queryClient = useQueryClient();\n  return useMutation({\n    mutationFn: async (input: AssignRoleInput) => {\n      if (orgId === undefined) {\n        throw Errors.invalidInput(\"orgId\", \"required for useCapxulAssignRole\");\n      }\n      return unwrapCapxulResult(await client.org(orgId).assignRole(input));\n    },\n    onSuccess: async () => {\n      if (orgId === undefined) return;\n      await queryClient.invalidateQueries({ queryKey: capxulKeys.orgMembers(orgId) });\n    },\n  });\n}\n","\"use client\";\n\nimport { useMutation, useQueryClient, type UseMutationResult } from \"@tanstack/react-query\";\n\nimport { Errors, type CapxulError } from \"@capxul/config\";\nimport type { OrgId, OrgSpendInput, OrgSpendResult } from \"@capxul/sdk\";\n\nimport { useCapxulClient } from \"../internal/capxul-client-context\";\nimport { capxulKeys } from \"../internal/reactivity-keys\";\nimport { unwrapCapxulResult } from \"../internal/unwrap-capxul-result\";\n\n/**\n * Spend from an Org's scoped sub-account (canon §C2 J3+J4 capstone / §C3, S4,\n * D5) — two-level gated (Level 1 Zodiac cap + Level 2 envelope scope/balance)\n * one-UserOp spend via CapxulPayments. Entity-scoped via the closed-over\n * `orgId` (D13). Binds directly to `capxul.org(orgId).spend(input)`. On success,\n * invalidates the treasury (balance moved). RED until S4 — `mutate` rejects with\n * `Errors.notImplemented(\"org\",\"spend\")`.\n */\nexport type UseCapxulOrgSpendReturn = UseMutationResult<OrgSpendResult, CapxulError, OrgSpendInput>;\n\nexport function useCapxulOrgSpend(orgId: OrgId | undefined): UseCapxulOrgSpendReturn {\n  const client = useCapxulClient();\n  const queryClient = useQueryClient();\n  return useMutation({\n    mutationFn: async (input: OrgSpendInput) => {\n      if (orgId === undefined) throw Errors.invalidInput(\"orgId\", \"org is not selected\");\n      return unwrapCapxulResult(await client.org(orgId).spend(input));\n    },\n    onSuccess: async () => {\n      if (orgId === undefined) return;\n      await queryClient.invalidateQueries({ queryKey: capxulKeys.orgTreasury(orgId) });\n    },\n  });\n}\n"],"mappings":";;;;;;;AAsBA,MAAM,yBAAyB,cAA2C,IAAI;AAO9E,SAAgB,wBAAwB,EAAE,OAAO,YAA0C;CACzF,OACE,oBAAC,uBAAuB,UAAxB;EAAwC;EAAQ;CAA0C,CAAA;AAE9F;AAEA,SAAgB,YAAkC;CAChD,MAAM,QAAQ,WAAW,sBAAsB;CAC/C,IAAI,UAAU,MACZ,MAAM,IAAI,MAAM,gDAAgD;CAElE,OAAO;AACT;;;AClCA,MAAM,iCAAiC,OAAO,gCAAgC;AAE9E,MAAM,sBAAsB,cAE1B,8BAA8B;AAOhC,SAAgB,qBAAqB,EAAE,QAAQ,YAAuC;CACpF,OAAO,oBAAC,oBAAoB,UAArB;EAA8B,OAAO;EAAS;CAAuC,CAAA;AAC9F;AAEA,SAAgB,kBAAgC;CAC9C,MAAM,SAAS,sBAAsB;CACrC,IAAI,WAAW,MACb,MAAM,IAAI,MAAM,mEAAmE;CAErF,OAAO;AACT;;;;;;AAOA,SAAgB,wBAA6C;CAC3D,MAAM,SAAS,WAAW,mBAAmB;CAC7C,IAAI,WAAW,gCACb,MAAM,IAAI,MAAM,sDAAsD;CAExE,OAAO;AACT;;;ACyBA,SAAS,yBAAsC;CAC7C,OAAO,IAAI,YAAY,EACrB,gBAAgB;EACd,SAAS;GAAE,OAAO;GAAG,WAAW;EAAO;EACvC,WAAW,EAAE,OAAO,EAAE;CACxB,EACF,CAAC;AACH;AAEA,SAAS,iBAAiB,UAAuC;CAC/D,OAAO,SAAS,OAAO;AACzB;AAEA,SAAS,yBAAyB,aAA0B,iBAAgC;CAC1F,IAAI,iBAAiB;EACnB,YAAY,MAAM;EAClB;CACF;CACA,YAAY,cAAc,EAAE,YAAY,UAAU,iBAAiB,MAAM,QAAQ,EAAE,CAAC;AACtF;AAEA,SAAgB,eAAe,OAA4B;CACzD,MAAM,EACJ,gBACA,QAAQ,gBACR,aACA,QACA,aACA,aACE;CAKJ,MAAM,CAAC,uBAAuB,eAAe,eAAe,uBAAuB,CAAC;CACpF,MAAM,CAAC,mBAAmB,eAAe,gBAAgB,KAAA,CAAS;CAElE,MAAM,CAAC,QAAQ,aAAa,SAA8B,kBAAkB,IAAI;CAChF,MAAM,oBAAoB,OAA4B,kBAAkB,IAAI;CAC5E,MAAM,CAAC,QAAQ,aAAa,SAC1B,mBAAmB,KAAA,IAAY,kBAAkB,OACnD;CACA,MAAM,CAAC,OAAO,YAAY,SAA6B,IAAI;CAC3D,MAAM,CAAC,SAAS,cAAc,SAAS,CAAC;CAExC,MAAM,QAAQ,kBAAkB;EAC9B,YAAY,MAAM,IAAI,CAAC;CACzB,GAAG,CAAC,CAAC;CAKL,gBAAgB;EACd,IAAI,mBAAmB,KAAA,GAAW;EAClC,IAAI,YAAY;EAChB,IAAI,UAA+B;EACnC,UAAU,eAAe;EACzB,SAAS,IAAI;EACb,UAAU,IAAI;EACd,CAAM,YAAY;GAChB,MAAM,SAAS,MAAM,mBAAmB;IACtC;IACA,GAAI,gBAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,YAAY;IACnD,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;GAC3C,CAAC;GACD,IAAI,WAAW;IACb,IAAI,OAAO,IAAI,MAAM,OAAO,MAAM,UAAU,QAAQ;IACpD;GACF;GACA,IAAI,OAAO,IAAI;IACb,UAAU,OAAO;IACjB,UAAU,OAAO,KAAK;IACtB,UAAU,OAAO;GACnB,OAAO;IACL,SAAS,OAAO,KAAK;IACrB,UAAU,OAAO;GACnB;EACF,GAAG;EACH,aAAa;GACX,YAAY;GACZ,SAAc,UAAU,QAAQ;EAClC;CACF,GAAG;EAAC;EAAgB;EAAa;EAAQ;CAAO,CAAC;CAGjD,gBAAgB;EACd,IAAI,mBAAmB,KAAA,GAAW;EAClC,UAAU,cAAc;EACxB,UAAU,OAAO;EACjB,SAAS,IAAI;CACf,GAAG,CAAC,cAAc,CAAC;CAEnB,gBAAgB;EACd,MAAM,WAAW,kBAAkB;EACnC,IAAI,aAAa,QAAQ,aAAa,QACpC,yBAAyB,qBAAqB,eAAe;EAE/D,kBAAkB,UAAU;CAC9B,GAAG;EAAC;EAAQ;EAAiB;CAAmB,CAAC;CAEjD,MAAM,iBAAiB,eACd;EAAE;EAAQ;EAAO;CAAM,IAC9B;EAAC;EAAQ;EAAO;CAAK,CACvB;CAIA,IAAK,mBAAmB,KAAA,OAAgB,mBAAmB,KAAA,IACzD,MAAM,IAAI,MAAM,qEAAqE;CAGvF,OACE,oBAAC,qBAAD;EAAqB,QAAQ;YAC3B,oBAAC,yBAAD;GAAyB,OAAO;aAC9B,oBAAC,sBAAD;IAA8B;IAAS;GAA+B,CAAA;EAC/C,CAAA;CACN,CAAA;AAEzB;;;;;;;;;AC/KA,SAAgB,0BACd,QACA,QACc;CACd,IAAI,WAAW,MACb,MAAM,OAAO,WAAW;EAAE;EAAQ,cAAc;EAAiB,aAAa,CAAC,OAAO;CAAE,CAAC;CAE3F,OAAO;AACT;;;ACVA,MAAa,aAAa;CACxB,SAAS,CAAC,UAAU,SAAS;CAC7B,SAAS,CAAC,UAAU,SAAS;CAC7B,SAAS,CAAC,UAAU,SAAS;CAC7B,kBAAkB,CAAC,UAAU,kBAAkB;CAC/C,cAAc,CAAC,UAAU,cAAc;CACvC,SAAS,CAAC,UAAU,SAAS;CAC7B,gBAAgB,CAAC,UAAU,gBAAgB;CAC3C,cAAc,cACZ;EAAC;EAAU;EAAe,aAAa;CAAS;CAElD,MAAM,CAAC,UAAU,MAAM;CACvB,MAAM,UAA6B;EAAC;EAAU;EAAO,SAAS;CAAS;CACvE,aAAa,UACX;EAAC;EAAU;EAAO,SAAS;EAAW;CAAS;CACjD,WAAW,UAA6B;EAAC;EAAU;EAAO,SAAS;EAAW;CAAO;CACrF,cAAc,UACZ;EAAC;EAAU;EAAO,SAAS;EAAW;CAAU;AACpD;;;;ACtBA,SAAgB,mBAAsB,QAA4B;CAChE,IAAI,OAAO,IACT,OAAO,OAAO;CAEhB,MAAM,OAAO;AACf;;;ACMA,SAAgB,mBAA2C;CACzD,MAAM,SAAS,sBAAsB;CACrC,OAAO,SAAS;EACd,UAAU,WAAW;EACrB,SAAS,YACP,mBACE,MAAM,0BAA0B,QAAQ,iBAAiB,EAAE,KAAK,WAAW,CAC7E;EACF,SAAS,WAAW;CACtB,CAAC;AACH;;;ACVA,SAAgB,mBAA2C;CACzD,MAAM,SAAS,sBAAsB;CACrC,OAAO,SAAS;EACd,UAAU,WAAW;EACrB,SAAS,YACP,mBACE,MAAM,0BAA0B,QAAQ,sBAAsB,EAAE,SAAS,YAAY,CACvF;EACF,SAAS,WAAW;CACtB,CAAC;AACH;;;;ACvBA,SAAgB,kBAA2B;CACzC,OAAO,OAAO,YAAY,eAAe,QAAQ,IAAI,cAAc;AACrE;;;;ACEA,eAAsB,uBAAuB,aAAyC;CACpF,MAAM,QAAQ,IAAI;EAChB,YAAY,kBAAkB,EAAE,UAAU,WAAW,QAAQ,CAAC;EAC9D,YAAY,kBAAkB,EAAE,UAAU,WAAW,QAAQ,CAAC;EAC9D,YAAY,kBAAkB,EAAE,UAAU,WAAW,iBAAiB,CAAC;EACvE,YAAY,kBAAkB,EAAE,UAAU,WAAW,eAAe,CAAC;CACvE,CAAC;AACH;;AAGA,eAAsB,kBAAkB,aAAyC;CAC/E,MAAM,YAAY,cAAc,EAAE,UAAU,WAAW,eAAe,CAAC;CACvE,MAAM,QAAQ,IAAI;EAChB,YAAY,aAAa,EAAE,UAAU,WAAW,QAAQ,CAAC;EACzD,YAAY,aAAa,EAAE,UAAU,WAAW,QAAQ,CAAC;EACzD,YAAY,aAAa,EAAE,UAAU,WAAW,iBAAiB,CAAC;EAClE,YAAY,aAAa,EAAE,UAAU,WAAW,eAAe,CAAC;CAClE,CAAC;AACH;;;ACTA,MAAM,oBAAsC,EAAE,QAAQ,UAAU;AAahE,SAAgB,4BAA6D;CAC3E,MAAM,SAAS,sBAAsB;CACrC,MAAM,cAAc,eAAe;CAEnC,MAAM,QAAQ,SAAwC;EACpD,UAAU,WAAW;EACrB,SAAS,YACP,mBACE,MAAM,0BAA0B,QAAQ,sBAAsB,EAAE,QAAQ,aAAa,CACvF;EACF,SAAS,WAAW;EACpB,kBAAkB,MAAM;GACtB,IAAI,gBAAgB,GAAG,OAAO;GAC9B,MAAM,OAAO,EAAE,MAAM;GACrB,IAAI,SAAS,KAAA,GAAW,OAAO;GAG/B,IAAI,KAAK,WAAW,aAAa,qBAAqB,IAAI,GAAG,OAAO;GACpE,OAAO;EACT;CACF,CAAC;CAED,MAAM,gBAAgB,YAAiD;EACrE,YAAY,YACV,mBACE,MAAM,0BAA0B,QAAQ,oBAAoB,EAAE,QAAQ,WAAW,CACnF;EACF,WAAW,YAAY;GACrB,MAAM,uBAAuB,WAAW;EAC1C;CACF,CAAC;CAED,MAAM,YAAY,MAAM,QAAQ;CAChC,MAAM,cAAc,UAAU,WAAW,WAAW,UAAU,QAAQ;CAEtE,OAAO;EACL;EACA,aAAa,qBAAqB,SAAS;EAC3C,OAAO,gBAAgB,MAAM,UAAU,MAAM,QAAQ;EACrD,WAAW,MAAM;EACjB,YAAY,MAAM;EAClB,SAAS,MAAM;EACf,OAAO,cAAc;EACrB,YAAY,cAAc;CAC5B;AACF;;;ACrDA,SAAgB,wBACd,SAC+B;CAC/B,MAAM,SAAS,sBAAsB;CACrC,OAAO,SAAS;EACd,UAAU,WAAW;EACrB,SAAS,YACP,mBAAmB,MAAM,0BAA0B,QAAQ,eAAe,EAAE,SAAS,KAAK,CAAC;EAC7F,SAAS,WAAW,SAAS,SAAS,WAAW;CACnD,CAAC;AACH;;;ACXA,SAAgB,uBAAmD;CACjE,MAAM,SAAS,sBAAsB;CACrC,MAAM,cAAc,eAAe;CACnC,OAAO,YAAY;EACjB,YAAY,OAAO,WACjB,mBACE,MAAM,0BAA0B,QAAQ,yBAAyB,EAAE,UAAU,SAAS,KACpF,MACF,CACF;EACF,WAAW,YAAY;GACrB,MAAM,YAAY,kBAAkB,EAAE,UAAU,WAAW,eAAe,CAAC;EAC7E;CACF,CAAC;AACH;;;ACXA,SAAgB,kBAAyC;CACvD,MAAM,SAAS,sBAAsB;CACrC,OAAO,YAAY,EACjB,YAAY,OAAO,UACjB,mBAAmB,MAAM,0BAA0B,QAAQ,aAAa,EAAE,KAAK,OAAO,KAAK,CAAC,EAChG,CAAC;AACH;;;ACRA,SAAgB,qBAA+C;CAC7D,MAAM,SAAS,sBAAsB;CACrC,MAAM,cAAc,eAAe;CACnC,OAAO,YAAY;EACjB,YAAY,OAAO,UACjB,mBACE,MAAM,0BAA0B,QAAQ,gBAAgB,EAAE,KAAK,UAAU,KAAK,CAChF;EACF,WAAW,YAAY;GACrB,MAAM,uBAAuB,WAAW;EAC1C;CACF,CAAC;AACH;;;ACjBA,SAAgB,mBAA2C;CACzD,MAAM,SAAS,sBAAsB;CACrC,MAAM,cAAc,eAAe;CACnC,OAAO,YAAY;EACjB,UAAU,YAAY;GACpB,MAAM,YAAY,cAAc,EAAE,UAAU,WAAW,eAAe,CAAC;EACzE;EACA,YAAY,YACV,mBAAmB,MAAM,0BAA0B,QAAQ,cAAc,EAAE,KAAK,QAAQ,CAAC;EAC3F,iBAAiB,kBAAkB,WAAW;CAChD,CAAC;AACH;;;ACAA,SAAgB,yBACd,WACA,SACgC;CAChC,MAAM,SAAS,sBAAsB;CACrC,OAAO,SAAS;EACd,UAAU,WAAW,YAAY,SAAS;EAC1C,SAAS,YAAY;GACnB,IAAI,cAAc,KAAA,GAChB,MAAM,OAAO,aAAa,aAAa,+BAA+B;GAExE,OAAO,mBACL,MAAM,0BAA0B,QAAQ,kBAAkB,EAAE,YAAY,KAAK,SAAS,CACxF;EACF;EACA,SAAS,WAAW,SAAS,SAAS,WAAW,SAAS,cAAc,KAAA;CAC1E,CAAC;AACH;AAQA,SAAgB,4BAA6D;CAC3E,MAAM,SAAS,sBAAsB;CACrC,MAAM,cAAc,eAAe;CACnC,OAAO,YAAY;EACjB,YAAY,OAAO,UACjB,mBACE,MAAM,0BAA0B,QAAQ,oBAAoB,EAAE,YAAY,OACxE,MAAM,WACN,EAAE,MAAM,MAAM,KAAK,CACrB,CACF;EACF,WAAW,OAAO,QAAQ,cAAc;GACtC,MAAM,YAAY,kBAAkB,EAClC,UAAU,WAAW,YAAY,UAAU,SAAS,EACtD,CAAC;GACD,MAAM,YAAY,kBAAkB,EAAE,UAAU,WAAW,eAAe,CAAC;EAC7E;CACF,CAAC;AACH;AAQA,SAAgB,4BAA6D;CAC3E,MAAM,SAAS,sBAAsB;CACrC,MAAM,cAAc,eAAe;CACnC,OAAO,YAAY;EACjB,YAAY,OAAO,UACjB,mBACE,MAAM,0BAA0B,QAAQ,oBAAoB,EAAE,YAAY,OACxE,MAAM,cACN,MAAM,IACR,CACF;EACF,WAAW,OAAO,QAAQ,cAAc;GACtC,MAAM,YAAY,kBAAkB,EAClC,UAAU,WAAW,YAAY,UAAU,SAAS,EACtD,CAAC;GACD,MAAM,YAAY,kBAAkB,EAAE,UAAU,WAAW,eAAe,CAAC;EAC7E;CACF,CAAC;AACH;AAQA,SAAgB,4BAA6D;CAC3E,MAAM,SAAS,sBAAsB;CACrC,MAAM,cAAc,eAAe;CACnC,OAAO,YAAY;EACjB,YAAY,OAAO,UACjB,mBACE,MAAM,0BAA0B,QAAQ,oBAAoB,EAAE,YAAY,OACxE,MAAM,YACR,CACF;EACF,WAAW,OAAO,QAAQ,cAAc;GACtC,MAAM,YAAY,kBAAkB,EAClC,UAAU,WAAW,YAAY,UAAU,SAAS,EACtD,CAAC;GACD,MAAM,YAAY,kBAAkB,EAAE,UAAU,WAAW,eAAe,CAAC;EAC7E;CACF,CAAC;AACH;AAcA,SAAgB,oBAA6C;CAC3D,MAAM,SAAS,sBAAsB;CACrC,MAAM,cAAc,eAAe;CACnC,OAAO,YAAY;EACjB,YAAY,OAAO,EAAE,MAAM,IAAI,aAC7B,mBACE,MAAM,0BAA0B,QAAQ,sBAAsB,EAAE,YAAY,SAAS;GACnF;GACA;GACA;EACF,CAAC,CACH;EACF,WAAW,OAAO,QAAQ,cAAc;GACtC,MAAM,YAAY,kBAAkB,EAClC,UAAU,WAAW,YAAY,UAAU,SAAS,EACtD,CAAC;GACD,MAAM,YAAY,kBAAkB,EAAE,UAAU,WAAW,eAAe,CAAC;EAC7E;CACF,CAAC;AACH;;;AC5HA,SAAgB,cAAc,SAAqD;CACjF,MAAM,SAAS,gBAAgB;CAC/B,OAAO,SAAS;EACd,UAAU,WAAW;EACrB,SAAS,YAAY,mBAAmB,MAAM,OAAO,KAAK,CAAC;EAC3D,SAAS,SAAS,WAAW;CAC/B,CAAC;AACH;;;ACbA,SAAgB,aACd,OACA,SACoB;CACpB,MAAM,SAAS,gBAAgB;CAC/B,OAAO,SAAS;EACd,UAAU,WAAW,IAAI,KAAK;EAC9B,SAAS,YAAY;GACnB,IAAI,UAAU,KAAA,GACZ,MAAM,OAAO,aAAa,SAAS,2BAA2B;GAGhE,OADa,mBAAmB,MAAM,OAAO,KAAK,CACxC,EAAE,MAAM,QAAQ,IAAI,OAAO,KAAK,KAAK;EACjD;EACA,UAAU,SAAS,WAAW,SAAS,UAAU,KAAA;CACnD,CAAC;AACH;;;AChBA,SAAgB,oBACd,OACA,SAC2B;CAC3B,MAAM,SAAS,gBAAgB;CAC/B,OAAO,SAAS;EACd,UAAU,WAAW,WAAW,KAAK;EACrC,SAAS,YAAY;GACnB,IAAI,UAAU,KAAA,GACZ,MAAM,OAAO,aAAa,SAAS,kCAAkC;GAEvE,OAAO,mBAAmB,MAAM,OAAO,IAAI,KAAK,EAAE,QAAQ,CAAC;EAC7D;EACA,UAAU,SAAS,WAAW,SAAS,UAAU,KAAA;CACnD,CAAC;AACH;;;ACfA,SAAgB,kBACd,OACA,SACyB;CACzB,MAAM,SAAS,gBAAgB;CAC/B,OAAO,SAAS;EACd,UAAU,WAAW,SAAS,KAAK;EACnC,SAAS,YAAY;GACnB,IAAI,UAAU,KAAA,GACZ,MAAM,OAAO,aAAa,SAAS,gCAAgC;GAErE,OAAO,mBAAmB,MAAM,OAAO,IAAI,KAAK,EAAE,MAAM,CAAC;EAC3D;EACA,UAAU,SAAS,WAAW,SAAS,UAAU,KAAA;CACnD,CAAC;AACH;;;ACpBA,SAAgB,0BAAyD;CACvE,MAAM,SAAS,gBAAgB;CAC/B,MAAM,cAAc,eAAe;CACnC,OAAO,YAAY;EACjB,YAAY,OAAO,UAAiB;GAClC,OAAO,mBAAmB,MAAM,OAAO,IAAI,KAAK,EAAE,YAAY,CAAC;EACjE;EACA,WAAW,OAAO,QAAQ,UAAU;GAClC,MAAM,YAAY,kBAAkB,EAAE,UAAU,WAAW,SAAS,KAAK,EAAE,CAAC;GAC5E,MAAM,YAAY,kBAAkB,EAAE,UAAU,WAAW,IAAI,KAAK,EAAE,CAAC;GACvE,MAAM,YAAY,kBAAkB,EAAE,UAAU,WAAW,KAAK,CAAC;EACnE;CACF,CAAC;AACH;;;ACNA,SAAgB,qBACd,OACA,SAC4B;CAC5B,MAAM,SAAS,gBAAgB;CAC/B,OAAO,SAAS;EACd,UAAU,WAAW,YAAY,KAAK;EACtC,SAAS,YAAY;GACnB,IAAI,UAAU,KAAA,GACZ,MAAM,OAAO,aAAa,SAAS,mCAAmC;GAExE,OAAO,mBAAmB,MAAM,OAAO,IAAI,KAAK,EAAE,SAAS,CAAC;EAC9D;EACA,UAAU,SAAS,WAAW,SAAS,UAAU,KAAA;CACnD,CAAC;AACH;;;ACrBA,SAAgB,qBAA+C;CAC7D,MAAM,SAAS,gBAAgB;CAC/B,MAAM,cAAc,eAAe;CACnC,OAAO,YAAY;EACjB,YAAY,OAAO,UAA0B,mBAAmB,MAAM,OAAO,UAAU,KAAK,CAAC;EAC7F,WAAW,YAAY;GACrB,MAAM,YAAY,kBAAkB,EAAE,UAAU,WAAW,KAAK,CAAC;EACnE;CACF,CAAC;AACH;;;ACJA,SAAgB,sBAAsB,OAAuD;CAC3F,MAAM,SAAS,gBAAgB;CAC/B,MAAM,cAAc,eAAe;CACnC,OAAO,YAAY;EACjB,YAAY,OAAO,UAA6B;GAC9C,IAAI,UAAU,KAAA,GACZ,MAAM,OAAO,aAAa,SAAS,oCAAoC;GAEzE,OAAO,mBAAmB,MAAM,OAAO,IAAI,KAAK,EAAE,OAAO,KAAK,CAAC;EACjE;EACA,WAAW,YAAY;GACrB,IAAI,UAAU,KAAA,GAAW;GACzB,MAAM,YAAY,kBAAkB,EAAE,UAAU,WAAW,WAAW,KAAK,EAAE,CAAC;EAChF;CACF,CAAC;AACH;;;ACjBA,SAAgB,sBAAsB,OAAuD;CAC3F,MAAM,SAAS,gBAAgB;CAC/B,MAAM,cAAc,eAAe;CACnC,OAAO,YAAY;EACjB,YAAY,OAAO,UAA6B;GAC9C,IAAI,UAAU,KAAA,GACZ,MAAM,OAAO,aAAa,SAAS,oCAAoC;GAEzE,OAAO,mBAAmB,MAAM,OAAO,IAAI,KAAK,EAAE,aAAa,KAAK,CAAC;EACvE;EACA,WAAW,YAAY;GACrB,IAAI,UAAU,KAAA,GAAW;GACzB,MAAM,YAAY,kBAAkB,EAAE,UAAU,WAAW,WAAW,KAAK,EAAE,CAAC;EAChF;CACF,CAAC;AACH;;;ACdA,SAAgB,oBAAoB,OAAqD;CACvF,MAAM,SAAS,gBAAgB;CAC/B,MAAM,cAAc,eAAe;CACnC,OAAO,YAAY;EACjB,YAAY,OAAO,UAA2B;GAC5C,IAAI,UAAU,KAAA,GACZ,MAAM,OAAO,aAAa,SAAS,kCAAkC;GAEvE,OAAO,mBAAmB,MAAM,OAAO,IAAI,KAAK,EAAE,WAAW,KAAK,CAAC;EACrE;EACA,WAAW,YAAY;GACrB,IAAI,UAAU,KAAA,GAAW;GACzB,MAAM,YAAY,kBAAkB,EAAE,UAAU,WAAW,WAAW,KAAK,EAAE,CAAC;EAChF;CACF,CAAC;AACH;;;AChBA,SAAgB,kBAAkB,OAAmD;CACnF,MAAM,SAAS,gBAAgB;CAC/B,MAAM,cAAc,eAAe;CACnC,OAAO,YAAY;EACjB,YAAY,OAAO,UAAyB;GAC1C,IAAI,UAAU,KAAA,GAAW,MAAM,OAAO,aAAa,SAAS,qBAAqB;GACjF,OAAO,mBAAmB,MAAM,OAAO,IAAI,KAAK,EAAE,MAAM,KAAK,CAAC;EAChE;EACA,WAAW,YAAY;GACrB,IAAI,UAAU,KAAA,GAAW;GACzB,MAAM,YAAY,kBAAkB,EAAE,UAAU,WAAW,YAAY,KAAK,EAAE,CAAC;EACjF;CACF,CAAC;AACH"}

package/package.json

@@ -1,92 +1,54 @@
 {
   "name": "@capxul/sdk-react",
-  "version": "0.2.0-alpha.4",
-  "description": "React provider + hooks for the @capxul/sdk headless client.",
-  "license": "UNLICENSED",
-  "private": false,
-  "type": "module",
-  "homepage": "https://capxul.com",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/Xelmar-tech/Capxul.git",
-    "directory": "packages/sdk-react"
-  },
-  "bugs": {
-    "url": "https://github.com/Xelmar-tech/Capxul/issues"
-  },
-  "author": "Capxul (Xelmar Tech Ltd.)",
-  "keywords": [
-    "capxul",
-    "sdk",
-    "react",
-    "hooks",
-    "stablecoin",
-    "payments",
-    "typescript"
+  "version": "1.0.0-alpha.6",
+  "files": [
+    "dist",
+    "package.json",
+    "README.md"
   ],
+  "type": "module",
   "exports": {
     ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js",
-      "require": "./dist/index.cjs"
-    },
-    "./proof": {
-      "types": "./dist/proof/index.d.ts",
-      "import": "./dist/proof/index.js",
-      "require": "./dist/proof/index.cjs"
+      "types": "./dist/index.d.mts",
+      "import": "./dist/index.mjs"
     }
   },
-  "files": [
-    "dist",
-    "README.md",
-    "LICENSE",
-    "CHANGELOG.md"
-  ],
   "publishConfig": {
     "access": "public"
   },
   "dependencies": {
-    "@capxul/sdk": "0.2.0-alpha.4"
-  },
-  "peerDependencies": {
-    "@tanstack/react-query": "^5",
-    "@xstate/react": "^5",
-    "convex": ">=1.0.0",
-    "react": ">=18.2.0 <20",
-    "viem": ">=2.0.0"
+    "@capxul/config": "0.0.0",
+    "@capxul/sdk": "1.0.0-alpha.6",
+    "@capxul/types": "0.0.0"
   },
   "devDependencies": {
-    "@tanstack/react-query": "^5",
+    "@tanstack/react-query": "^5.66.9",
+    "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.2",
-    "@xstate/react": "^5",
-    "@types/node": "^22.15.3",
-    "@types/react": "19.2.2",
-    "@types/react-dom": "19.2.3",
-    "jsdom": "^29.0.1",
-    "react": "19.2.5",
-    "react-dom": "19.2.5",
-    "tsup": "^8.5.1",
-    "tsx": "^4.21.0",
-    "typescript": "5.9.2",
-    "viem": "2.47.10",
-    "vitest": "^4.1.2",
-    "@repo/config": "0.0.0",
-    "@repo/observability": "0.0.0",
-    "@repo/platform-kernel": "0.0.0",
-    "@repo/typescript-config": "0.0.0"
+    "@types/jsdom": "^28.0.3",
+    "@types/react": "^19.2.15",
+    "@types/react-test-renderer": "^19.1.0",
+    "@vitest/coverage-v8": "4.1.7",
+    "ink": "^7.0.3",
+    "ink-testing-library": "^4.0.0",
+    "jsdom": "^29.1.1",
+    "react": "^19.2.6",
+    "react-dom": "^19.2.6",
+    "react-test-renderer": "^19.2.6",
+    "vitest": "npm:@voidzero-dev/vite-plus-test@0.1.23"
   },
-  "scripts": {
-    "build": "tsup",
-    "check-types": "tsc --noEmit",
-    "proof:contract": "vitest run ops/proof/sdk-contract.test.ts",
-    "proof:drift": "vitest run ops/proof/reset-contract-drift.test.ts",
-    "proof:evidence": "tsx ops/proof/evidence-cli.ts",
-    "proof:plan": "tsx ops/proof/plan-cli.ts",
-    "proof:react-headless": "vitest run ops/proof/react-headless.test.tsx",
-    "test": "vitest run",
-    "test:types": "vitest run --typecheck"
+  "peerDependencies": {
+    "@tanstack/react-query": "^5.66.9",
+    "react": "^18.0.0 || ^19.0.0"
+  },
+  "engines": {
+    "node": ">=22.12.0"
   },
-  "main": "./dist/index.cjs",
-  "module": "./dist/index.js",
-  "types": "./dist/index.d.ts"
+  "scripts": {
+    "check-types": "tsc -p tsconfig.json --noEmit",
+    "lint": "oxlint -c ../../.oxlintrc.json . --deny-warnings",
+    "build": "vp pack",
+    "_vp-tasks-allowed": "vp-allowed: `test` + `test:coverage` are vp tasks in vite.config.ts so vitest self-writes don't bust cache (#205).",
+    "test:e2e": "vp test run --config vitest.e2e.config.ts"
+  }
 }

package/CHANGELOG.md

@@ -1,304 +0,0 @@
-# @capxul/sdk-react
-
-## 0.2.0-alpha.4
-
-### Minor Changes
-
-- b6c1f94: Complete the auth dogfooding epic around the canonical auth surface.
-
-  The SDK now carries the guarded OTP proof path, bootstrap continuation states,
-  canonical auth service behavior, and final funnel proof support needed for
-  first-run auth dogfooding. The React SDK aligns its auth hooks and provider
-  state with that canonical flow, including signout cleanup, bootstrap-required
-  continuations, and funnel telemetry integration.
-
-### Patch Changes
-
-- 50d3c55: Bundle the internal Safe derivation package into the SDK artifact instead of
-  publishing it as a runtime dependency, and add a packaging guard that fails when
-  publishable packages leak private `@repo/*` runtime dependencies.
-- Updated dependencies [b6c1f94]
-- Updated dependencies [50d3c55]
-  - @capxul/sdk@0.2.0-alpha.4
-
-## 0.2.0-alpha.3
-
-### Patch Changes
-
-- Updated dependencies [5b99a9b]
-  - @capxul/sdk@0.2.0-alpha.3
-
-## 0.2.0-alpha.2
-
-### Minor Changes
-
-- 995383f: Epic 660: Unified auth surface
-  - Introduces AuthService promise-based auth API replacing the imperative capxul.auth.\* tuple interface
-  - Adds SignerProvisioner for deterministic Safe v1.4.1 address derivation from viem signers
-  - Adds useAuth() React hook with reactive state + promise-based methods
-  - Deprecates useAuthFlow and useAuthBootstrapFlow in favor of useAuth()
-  - Migrates reference CLI auth commands (send-otp, verify-otp, signout) to useAuth()
-  - Migrates test surfaces: walkthroughs, type tests, e2e harness signup, lazy-dx provider
-  - Adds @repo/safe-derive workspace package for Safe address derivation utilities
-  - Aligns CapxulConfig.data to \_data with internal SDK transport ownership (Epic 652)
-  - Pins esbuild to 0.25.12 to fix binary-version skew in fresh worktrees
-
-- 2ef4ee3: Reshape the organizations members surface around a single Membership entity
-  with a status lifecycle (`pending | active | revoked | expired`).
-  - Replaces the prior invitation/membership split (which produced a phantom
-    `MemberInvitation` type that never compiled) with a single `Member` type
-    exposing `status`, `email`, `acceptedAt`, `expiresAt`, and `resentCount`.
-  - New methods on `organizations.members.*`: `accept(token)`, `revoke(memberId)`,
-    `resend(memberId)`. `invite()` now returns a `MemberInviteResponse`
-    containing the raw invite token (returned once).
-  - Auto-accepts pending invitations on first sign-in for the matching email
-    via a BetterAuth post-signup hook.
-  - Nightly Convex cron expires overdue pending invitations.
-
-  Public type changes:
-  - Removed: `MemberInvitation` (was never exported; type didn't compile).
-  - Added: `MembershipStatus`, `MemberInviteResponse`.
-  - Updated: `Member` shape — see SDK reference for the full delta.
-
-  React hooks:
-  - New: `useAcceptInvitation`, `useRevokeMember`, `useResendInvitation`.
-  - Updated: `useInviteMember` returns `MemberInviteResponse` (was returning a
-    type that didn't exist).
-
-  Reference CLI:
-  - New commands: `org members invite`, `org members list`, `org members retrieve`,
-    `org members accept`, `org members updateRole`, `org members revoke`,
-    `org members remove`, `org members resend`.
-
-- c7146bf: **Transport ownership (#656):** The SDK now owns construction of the
-  authenticated `ConvexHttpClient`. Consumers no longer wire `data` manually
-  or provide `auth.createDataClient`. After `verifyOtp` exchanges a Convex
-  JWT, the SDK builds the default data client internally via
-  `createDefaultDataClient` and stores it on `config._data`.
-  - `CapxulConfig.data` renamed to `_data` (internal test seam).
-  - `CapxulAuthConfig.createDataClient` removed from public types.
-  - `convex` moved from `peerDependencies` to `dependencies`.
-
-### Patch Changes
-
-- d252aa7: Widen the published React peer dependency to `>=18.2.0 <20` so React 18 consumers, including the Ink reference proof app, can install the alpha SDK without peer conflicts.
-- Updated dependencies [995383f]
-- Updated dependencies [2ef4ee3]
-- Updated dependencies [c7146bf]
-  - @capxul/sdk@0.2.0-alpha.2
-
-## 0.2.0-alpha.1
-
-### Minor Changes
-
-- **Transport ownership (#656):** Remove the `auth.createDataClient`
-  callback from `CapxulProvider`. The React provider now passes its
-  singleton data client via `CapxulConfig._data` and lets the SDK own
-  runtime construction after OTP verification.
-
-### Patch Changes
-
-- Updated dependencies
-  - @capxul/sdk@0.2.0-alpha.1
-
-## 0.1.0-alpha.12
-
-### Minor Changes
-
-- Publish the post-alpha.11 SDK and React SDK surface: funds v1 sub-account
-  runtime coverage, React hook wiring, payments list support, and the latest
-  generated Convex API snapshots used by current alpha consumers.
-
-  Note: alpha.10 and alpha.11 were intermediate runner artifacts from the
-  prior release pipeline (manual `package.json` bumps that were never folded
-  back into the repo). alpha.12 reconciles `package.json`, the changesets
-  state, and npm to a single consistent version.
-
-### Patch Changes
-
-- Updated dependencies
-  - @capxul/sdk@0.1.0-alpha.12
-
-## 0.1.0-alpha.9
-
-### Minor Changes
-
-- Add the canonical auth bootstrap flow.
-
-  `verifyOtp()` now resolves a verified email session into either an
-  `existing_member` identity or a `bootstrap_required` continuation. New and
-  incomplete members continue through `completeBootstrap()`, which validates a
-  server-issued bootstrap token, claims the username, provisions the account/Safe
-  through the backend bootstrap path, and returns the authenticated product
-  identity. The React SDK adds `useAuthBootstrapFlow()` as the typed first-run
-  flow wrapper.
-
-### Patch Changes
-
-- Updated dependencies
-  - @capxul/sdk@0.1.0-alpha.9
-
-## 0.1.0-alpha.8
-
-### Minor Changes
-
-- 3af04a9: Public `<CapxulProvider>` now wires authenticated Convex reads end-to-end (#487, closes #484).
-
-  The `build-time-urls` arm of `BrowserCapxulConfig` now causes the provider to internally instantiate a `ConvexReactClient`, wrap it as a `CapxulDataClient`, and feed it as `config.data` into `createCapxulClient`. The existing `auth.createDataClient` callback is wired to the same singleton so a `verifyOtp` call refreshes the data client's auth header without churning the WebSocket. The provider also wraps `client.auth.signOut` so the data client survives sign-out — post-signout reads return typed backend `NOT_AUTHENTICATED` instead of the SDK's `NOT_IMPLEMENTED` stub (closes the #474 friction as a side-effect).
-
-  New optional `sessionStore?: AuthSessionStore` prop lets browser apps opt into `localStorage`-backed persistence and Node consumers (CLIs, e2e harnesses) opt into file-backed persistence. Defaults to in-memory.
-
-  This closes the architectural gap that made the React hook surface (`useMe`, `useAccount`, `useSafe`, ...) impossible to exercise end-to-end through the public provider — previously `config.data` was never populated, so every authenticated read short-circuited to `NOT_IMPLEMENTED`. The Ink reference CLI (`apps/reference-cli/`) is rebuilt on top of the public provider as proof: 17/17 agent-driver assertions pass against live alpha-3 Convex, including a dev-OTP authenticated round-trip that mints a real session via `AUTH_DEV_OTP=00000` and exercises three distinct hook end-states (`NOT_AUTHENTICATED`, `PROFILE_NOT_FOUND`, post-signout `NOT_AUTHENTICATED`).
-
-- 57203a4: Withdrawals v1 W2 (#465) — public surface tightening + org-scope create
-  - `WithdrawalsCreateInput.destination` no longer accepts `kind`. The
-    backend now resolves the `external_account` row by FK and infers
-    the kind + rail server-side. Anything that doesn't route to
-    `chain_wallet` (or is chain_wallet but non-EVM in slice 1) returns
-    `VERIFICATION_REQUIRED` with `details.rail` + `details.currentKind`.
-  - `organizations.withdrawals.create` is now a real mutation (no
-    longer a `NOT_IMPLEMENTED` stub). Returns the `processing` row
-    only — Safe + Zodiac submission orchestration ships in W3+.
-  - `Errors.verificationRequired({ rail, currentKind })` factory
-    added; the `VERIFICATION_REQUIRED` code now broadens to cover
-    both KYC tier gates and unsupported withdrawal rails.
-
-  **Migration:** Remove `destination.kind` from any
-  `capxul.withdrawals.create({ destination: { kind, externalAccountId } })`
-  call sites. Pass only `externalAccountId`.
-
-### Patch Changes
-
-- Updated dependencies [57203a4]
-  - @capxul/sdk@0.1.0-alpha.8
-
-## 0.1.0-alpha.4
-
-### Minor Changes
-
-- Post-alpha hardening — WAVE 1 + WAVE 2 cumulative
-
-  **WAVE 1 (merged 2026-05-03 12:44Z):**
-  - S2 story 1: wire onboarding readback hooks (#469) — `me.update`, `accounts.retrieve`, `accounts.update`, `useAccount`, `useSafe`
-  - S3 phase 1: Ink reference CLI scaffold + `auth+me` end-to-end against live alpha-3 Convex (#470). Stickiness gate (D3) fired.
-  - S5: split `CapxulProvider` into public single-input `BrowserCapxulConfig` + test-only `CapxulTestProvider` from `@capxul/sdk-react/proof` (#473). Q1 lock honored. 7 type-level provider-shape guards including `@ts-expect-error` against test-provider leaking to public barrel.
-
-  **WAVE 2 (merged 2026-05-03 12:54-13:16Z):**
-  - S3 phase 2: per-domain CLI commands closing #458 (#476) — `account retrieve/update`, `safe retrieve`, `payment retrieve`, `withdrawal retrieve/list`. 12/12 agent-driver tests pass.
-  - S2 story 2: `capxul.tokenTransfers.*` non-canonical SDK namespace (#479) — Option A per #477 (canon-aligned `transfers.*` shape deferred to alpha.5+ pending backend canon work). New `useTokenTransfers` + `useTokenTransfer` hooks; new `getByTxLogIndex` backend query. Hook proof matrix length unchanged at 41 (non-canonical hooks deliberately excluded).
-
-  **S1 (#456) closed no-op** — alpha publish infrastructure (tsup, lazy-DX, transport state machine, npm metadata, READMEs, CHANGELOG, changesets, OIDC release workflow) physically merged into `api-first` via PRs #449-#452 earlier the same day; the slice merge produced 0 file changes per clean-room probe.
-
-  **Friction issues filed for alpha.4+ polish:**
-  - #474 — `me.get` returns `NOT_IMPLEMENTED` when `config.data` is undefined; should be `NOT_AUTHENTICATED`.
-  - #475 — `@capxul/sdk/headless` slim entry point excludes xstate flow machines + brand constructors (1.6 MB → much smaller).
-  - #477 / #478 — `transfers.*` / `balanceLedger.*` / `treasury` canon-shape alignment with indexer feed.
-  - #471 — Vercel-capxul-web preview-deploy systemic failure on api-first base (separate from epic).
-
-### Patch Changes
-
-- Updated dependencies
-  - @capxul/sdk@0.1.0-alpha.4
-
-## 0.1.0-alpha.3
-
-### Patch Changes
-
-- Re-export `tryCatch` from `@capxul/sdk`.
-
-  `tryCatch` is referenced in `packages/sdk/README.md` (live on npm at
-  `0.1.0-alpha.2`) and in `.claude/rules/sdk.md` as the canonical
-  async-error helper for SDK operations:
-
-  ```ts
-  import { tryCatch } from "@capxul/sdk";
-
-  const [err, payment] = await tryCatch(capxul.payments.create({ ... }));
-  ```
-
-  The helper lives at `@repo/observability/try-catch.ts` and is bundled
-  into the SDK dist via tsup `noExternal`, but it was never re-exported
-  from `packages/sdk/src/index.ts`. Consumers following the README example
-  hit `Module '"@capxul/sdk"' has no exported member 'tryCatch'.` at
-  import time.
-
-  Caught during alpha.2 spike-install verification (REVIEW.html, "What's
-  not proven" row 6). One-line public-export addition; no runtime change.
-
-- Updated dependencies
-  - @capxul/sdk@0.1.0-alpha.3
-
-## 0.1.0-alpha.2
-
-### Patch Changes
-
-- Add `convex` as a peer dependency.
-
-  `@capxul/sdk`'s bundled `_generated/api` snapshot calls
-  `anyApi` / `componentsGeneric` from `convex/server` at runtime — they
-  are not just types — and tsup correctly externalizes `convex` /
-  `convex/server` / `convex/react` so the consumer's own Convex install
-  is reused. The peer was missing from the published manifest, so
-  `require('@capxul/sdk')` failed with `Cannot find module 'convex/server'`
-  in any spike that hadn't already installed `convex`.
-
-  `@capxul/sdk-react` mirrors the peer because its bundle re-exports
-  flow-machine constructors from `@capxul/sdk` and may transitively
-  pull in the same module.
-
-  Caught during alpha.1 spike-install verification.
-
-- Updated dependencies
-  - @capxul/sdk@0.1.0-alpha.2
-
-## 0.1.0-alpha.1
-
-### Patch Changes
-
-- Move workspace `@repo/*` packages from `dependencies` to
-  `devDependencies` so the published `package.json` doesn't list them
-  as runtime deps. The tsup pipeline bundles every `@repo/*` import
-  inline (`noExternal`), so the published code has zero references to
-  those packages — but until now the published `package.json` still
-  declared them, and `npm install @capxul/sdk@0.1.0-alpha.0` failed
-  trying to resolve `@repo/api-contract@0.0.0` etc. on the public
-  registry.
-
-  `@capxul/sdk-react` keeps `@capxul/sdk` as a runtime dep — that one
-  is published.
-
-  No public surface changes. Pure publish-metadata correction caught
-  during alpha.0 spike-install verification.
-
-- Updated dependencies
-  - @capxul/sdk@0.1.0-alpha.1
-
-Changelog managed by [changesets](https://github.com/changesets/changesets) —
-see `.changeset/README.md` for the operator workflow.
-
-## 0.1.0-alpha.0
-
-### Minor Changes
-
-- Initial alpha publish.
-
-  `@capxul/sdk` ships the headless TypeScript client for Capxul's
-  `/v1/*` HTTP contract — auth, me, accounts, payments, organizations,
-  withdrawals, documents, and three XState v5 flow machines. Errors
-  are typed `CapxulError` instances with narrowed `code` unions per
-  method; `tryCatch` returns the canonical `[error, data]` tuple.
-
-  `@capxul/sdk-react` ships the React provider and hooks. The lazy-DX
-  `<CapxulProvider publishableKey="cap_pk_…">` mounts synchronously
-  and bootstraps runtime URLs through `/v1/client/bootstrap` on the
-  first SDK call. `useCapxulStatus()` exposes the canonical 5-state
-  transport lifecycle through `useSyncExternalStore`. Read hooks
-  return the canonical `QueryResult<T>` three-state discriminated
-  union (loading / data / error) — never throws on "still loading".
-
-  See each package's `README.md` for the public surface.
-
-### Patch Changes
-
-- Updated dependencies
-  - @capxul/sdk@0.1.0-alpha.0

package/LICENSE

@@ -1,44 +0,0 @@
-Copyright (c) 2026 Xelmar Tech Ltd. ("Capxul"). All rights reserved.
-
-This software ("@capxul/sdk-react", the "Software") is proprietary to
-Capxul. The Software is licensed, not sold, and is made available
-solely to registered Capxul customers under the Capxul Terms of
-Service or a separate written commercial agreement between Capxul and
-the licensee.
-
-Two-layer trust
----------------
-Capxul's value-bearing on-chain logic — Safe v1.4.1, ERC-4337 modules,
-and any contract that custodies, transfers, or signs over user funds —
-is open source under permissive licenses and is published in a
-separate, auditable repository. See:
-
-  https://github.com/Xelmar-tech/Capxul
-
-The orchestration layer in this package — React provider, hooks,
-state-machine wiring, integration glue, and any code that translates
-customer intent into transactions or routes data between subsystems —
-is the proprietary product of Capxul and is governed by this license.
-
-Customers of the Capxul platform may use this Software solely:
-  (a) to access Capxul's hosted services they have contracted for,
-  (b) within the scope of their active subscription or trial, and
-  (c) in accordance with the Capxul Terms of Service.
-
-Without limiting the foregoing, you may NOT:
-  (i)   redistribute, sublicense, sell, lease, or rent the Software,
-  (ii)  reverse-engineer, decompile, or disassemble the Software,
-        except to the limited extent applicable mandatory law
-        permits, and
-  (iii) remove or alter copyright, trademark, or other proprietary
-        notices in the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
-OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT. IN NO EVENT
-SHALL CAPXUL OR ITS AFFILIATES BE LIABLE FOR ANY CLAIM, DAMAGES, OR
-OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT, OR OTHERWISE,
-ARISING FROM, OUT OF, OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
-OTHER DEALINGS IN THE SOFTWARE.
-
-Contact: legal@capxul.com