@capxul/sdk-react 2.2.0 → 2.3.1

package/dist/{controllers-D3_Q5d2t.d.mts → controllers-BT4YzBr9.d.mts}

@@ -82,7 +82,7 @@ type OtpPendingState = Extract<IdentityState, {
   phase: "otp_pending";
 }>;
 type PendingAuthState = Extract<IdentityState, {
-  phase: "otp_sending" | "otp_verifying" | "signing_out";
+  phase: "restoring" | "otp_sending" | "otp_verifying" | "signing_out";
 }>;
 type FaultedState = Extract<IdentityState, {
   phase: "faulted";

package/dist/{controllers-ClhmseFL.mjs → controllers-VwUPB619.mjs}

@@ -80,6 +80,18 @@ const capxulKeys = {
 		orgId ?? "pending",
 		"permissions"
 	],
+	orgMe: (orgId) => [
+		"capxul",
+		"org",
+		orgId ?? "pending",
+		"me"
+	],
+	orgLifecycle: (orgId) => [
+		"capxul",
+		"org",
+		orgId ?? "pending",
+		"lifecycle"
+	],
 	contacts: (scope) => [
 		"capxul",
 		"contacts",
@@ -594,6 +606,7 @@ function CapxulAuthenticationController({ slots }) {
 			verifyCode: auth.verifyCode,
 			back: () => action(send, { _tag: "Reset" })
 		});
+		case "restoring":
 		case "otp_sending":
 		case "otp_verifying":
 		case "signing_out": return slots.pending({ state });

package/dist/index.d.mts

@@ -1,7 +1,7 @@
-import { A as useCapxulAuth, C as CreateOrganizationSubmission, D as ProfileDetails, E as OrganizationDetails, M as useCapxulIdentity, N as useCapxulSend, O as SendResult, P as useCapxulTransitions, S as CapxulSend, T as InvocationOptions, _ as ReadyDestination, a as AuthenticationSlots, b as Slot, c as ControllerAction, d as OnboardingControllerProps, f as OrgFailure, g as ProfileSlotProps, h as PendingAuthState, i as AuthenticatedState, j as useCapxulDestination, k as entered, l as FaultedState, m as OtpPendingState, n as AccountProgress, o as CapxulAuthenticationController, p as OrgProgress, r as ActionResult, s as CapxulOnboardingController, t as AccountFailure, u as NavigationAction, v as RetryAction, w as Destination, x as CapxulAuth, y as SignedOutState } from "./controllers-D3_Q5d2t.mjs";
+import { A as useCapxulAuth, C as CreateOrganizationSubmission, D as ProfileDetails, E as OrganizationDetails, M as useCapxulIdentity, N as useCapxulSend, O as SendResult, P as useCapxulTransitions, S as CapxulSend, T as InvocationOptions, _ as ReadyDestination, a as AuthenticationSlots, b as Slot, c as ControllerAction, d as OnboardingControllerProps, f as OrgFailure, g as ProfileSlotProps, h as PendingAuthState, i as AuthenticatedState, j as useCapxulDestination, k as entered, l as FaultedState, m as OtpPendingState, n as AccountProgress, o as CapxulAuthenticationController, p as OrgProgress, r as ActionResult, s as CapxulOnboardingController, t as AccountFailure, u as NavigationAction, v as RetryAction, w as Destination, x as CapxulAuth, y as SignedOutState } from "./controllers-BT4YzBr9.mjs";
 import { ReactNode } from "react";
 import { QueryClient, UseMutationResult, UseQueryResult } from "@tanstack/react-query";
-import { Account, AccountRequirement, ActivityAnnotationInput, ActivityDetail, ActivityListParams, ActivityPage, ActivityReference, AddressBookEntry, CapxulClient, CapxulError, CapxulSigner, CreateOrgInput, CurrentHoldings, HostObservability, InviteMemberInput, MemberView, Money, MoneyParseErrorReason, MovementAnnotation, OrgId, OrgView, OrganizationPaymentBatchInput, OrganizationPaymentInput, PartyId, Payment, PaymentTiming, PaymentsPayInput, Permission, PermissionReadResult, Profile, RoleView } from "@capxul/sdk";
+import { Account, AccountRequirement, ActivityAnnotationInput, ActivityDetail, ActivityListParams, ActivityPage, ActivityReference, AddressBookEntry, CapxulClient, CapxulError, CapxulSigner, CreateOrgInput, CurrentHoldings, HostObservability, IdentityDestination, InviteMemberInput, MemberView, Money, MoneyParseErrorReason, MovementAnnotation, OrgId, OrgView, OrganizationPaymentBatchInput, OrganizationPaymentInput, PartyId, Payment, PaymentTiming, PaymentsPayInput, Permission, PermissionReadResult, Profile, RoleView, isClaimed, isRestoring } from "@capxul/sdk";
 
 //#region src/provider.d.ts
 type CapxulProviderSharedProps = {
@@ -600,7 +600,7 @@ interface CapxulContactsProps {
   readonly onFailed: (error: CapxulError) => void;
   readonly children: ReactNode;
 }
-declare function Root$1({
+declare function Root$3({
   actor,
   onAdded,
   onFailed,
@@ -624,7 +624,7 @@ declare function Add({
   readonly children: (slice: ContactsAddSlice) => ReactNode;
 }): import("react/jsx-runtime").JSX.Element;
 /** The compound shape the app's own design system already uses (`StatusTabs`). */
-declare const CapxulContacts: typeof Root$1 & {
+declare const CapxulContacts: typeof Root$3 & {
   Summary: typeof Summary;
   List: typeof List;
   Add: typeof Add;
@@ -695,7 +695,7 @@ interface CapxulSendMoneyProps {
   readonly onFailed: (error: CapxulError) => void;
   readonly children: ReactNode;
 }
-declare function Root({
+declare function Root$2({
   actor,
   onSent,
   onFailed,
@@ -722,11 +722,116 @@ declare function Actions({
   readonly children: (slice: SendMoneyActionsSlice) => ReactNode;
 }): import("react/jsx-runtime").JSX.Element;
 /** The compound shape the app's own design system already uses (`StatusTabs`). */
-declare const CapxulSendMoney: typeof Root & {
+declare const CapxulSendMoney: typeof Root$2 & {
   Asset: typeof Asset;
   Amount: typeof Amount;
   Recipient: typeof Recipient;
   Actions: typeof Actions;
 };
 //#endregion
-export { type AccountFailure, type AccountProgress, type ActionResult, type AuthenticatedState, type AuthenticationSlots, type CapxulAuth, CapxulAuthenticationController, type CapxulBootstrapState, type CapxulBootstrapStatus, CapxulContacts, type CapxulContactsProps, CapxulOnboardingController, CapxulProvider, type CapxulProviderProps, type CapxulSend, CapxulSendMoney, type CapxulSendMoneyBlockedReason, type CapxulSendMoneyProps, type Contact, type ContactRelationship, type ContactRow, type ContactsActor, type ContactsAddBlockedReason, type ContactsAddError, type ContactsAddSlice, type ContactsListOptions, type ContactsListSlice, type ContactsRefusal, type ContactsSummarySlice, type ControllerAction, type CreateOrganizationSubmission, type Destination, type FaultedState, type ImageUploadInput, type ImageUploadTarget, type InvocationOptions, type NavigationAction, type OnboardingControllerProps, type OnboardingIntent, type OnboardingJourney, type OnboardingJourneyPosition, type OnboardingOrigin, type OnboardingStep, type OrgFailure, type OrgProgress, type OrganizationDetails, type OrganizationDraft, type OtpPendingState, type PayoutDraftChain, type PayoutDraftEntry, type PendingAuthState, type ProfileDetails, type ProfileDraft, type ProfileSlotProps, type ReadyDestination, type RetryAction, type SendActor, type SendMoneyActionsSlice, type SendMoneyAmountSlice, type SendMoneyAssetError, type SendMoneyAssetOption, type SendMoneyAssetSlice, type SendMoneyRecipientMethod, type SendMoneyRecipientSlice, type SendMoneyRecipientStatus, type SendResult, type SentPayment, type SignedOutState, type Slot, type UseCapxulAccountBalanceOptions, type UseCapxulAccountBalanceReturn, type UseCapxulAccountFundReturn, type UseCapxulCreateCommitmentReturn, type UseCapxulCreateOrgReturn, type UseCapxulImageUploadReturn, type UseCapxulInviteMemberReturn, type UseCapxulOrgMembersOptions, type UseCapxulOrgMembersReturn, type UseCapxulOrgRolesOptions, type UseCapxulOrgRolesReturn, type UseCapxulOrgTreasuryOptions, type UseCapxulOrgTreasuryReturn, type UseCapxulOrgsReturn, type UseCapxulPayReturn, type UseCapxulPaymentReturn, type UseCapxulPaymentsReturn, type UseCapxulProfileReturn, type UseCapxulRedirectPaymentReturn, type UseCapxulUsernameAvailabilityReturn, type UsernameAvailability, acknowledgeOnboardingDestination, activeOnboardingRecovery, clearOnboardingJourney, currentOnboardingJourneyId, entered, invalidateOnboardingJourneyObservation, loadOnboardingJourney, onboardingJourneyPosition, saveOnboardingJourney, startOnboardingJourney, useCapxul, useCapxulAccountBalance, useCapxulAccountFund, useCapxulActivity, useCapxulActivityDetail, useCapxulAnnotateMovement, useCapxulAuth, useCapxulCancelPayment, useCapxulClaimPayment, useCapxulClientOrNull, useCapxulCreateCommitment, useCapxulCreateOrg, useCapxulDestination, useCapxulHoldings, useCapxulIdentity, useCapxulImageUpload, useCapxulInviteMember, useCapxulOrgMembers, useCapxulOrgRoles, useCapxulOrgTreasury, useCapxulOrganizationPay, useCapxulOrganizationPayBatch, useCapxulOrgs, useCapxulPay, useCapxulPayment, useCapxulPayments, useCapxulPermission, useCapxulPermissionAssign, useCapxulPermissionChange, useCapxulPermissionCreate, useCapxulPermissionReplace, useCapxulPermissionRevoke, useCapxulPermissions, useCapxulProfile, useCapxulRedirectPayment, useCapxulSend, useCapxulTransitions, useCapxulUsernameAvailability };
+//#region src/headless/access/org-member.d.ts
+/** The two enforcement facts, named the way a screen asks for them. */
+type OrgMemberAction = "spend" | "managePeople";
+/**
+ * Why an action is refused — a closed list of CODES (ruling R1). `null` exactly
+ * when the action is allowed. The app owns every sentence these map to.
+ */
+type CanReason = "loading" | "no-permission" | "org-unavailable" | null;
+interface OrgMemberCanSlice {
+  /** FAILS CLOSED: `false` until the read settles. */
+  readonly allowed: boolean;
+  readonly isLoading: boolean;
+  readonly reason: CanReason;
+}
+type OrgMemberStanding = "loading" | "unavailable" | "active" | "restricted";
+interface OrgMemberStandingSlice {
+  readonly standing: OrgMemberStanding;
+  /** `standing === "active"` guarantees this is non-null — see the rule below. */
+  readonly roleLabel: string | null;
+}
+interface CapxulOrgMemberProps {
+  readonly orgId: OrgId | string | undefined;
+  readonly children: ReactNode;
+}
+declare function Root$1({
+  orgId,
+  children
+}: CapxulOrgMemberProps): import("react/jsx-runtime").JSX.Element;
+/**
+ * One part serves all four denial idioms the app already uses: disabled with no
+ * explanation, disabled plus a native `title`, a whole-surface swap, and
+ * buttons that vanish. The part branches on nothing — the root computes both
+ * slices and this picks the one the `do` prop names.
+ */
+declare function Can({
+  do: action,
+  children
+}: {
+  readonly do: OrgMemberAction;
+  readonly children: (slice: OrgMemberCanSlice) => ReactNode;
+}): import("react/jsx-runtime").JSX.Element;
+declare function Standing({
+  children
+}: {
+  readonly children: (slice: OrgMemberStandingSlice) => ReactNode;
+}): import("react/jsx-runtime").JSX.Element;
+/** The compound shape the app's own design system already uses (`StatusTabs`). */
+declare const CapxulOrgMember: typeof Root$1 & {
+  Can: typeof Can;
+  Standing: typeof Standing;
+};
+//#endregion
+//#region src/headless/access/dashboard-access.d.ts
+type DashboardScope = {
+  readonly kind: "personal";
+} | {
+  readonly kind: "organization";
+  readonly orgId?: string;
+};
+type DashboardAccessPhase = "checking" | "error" | "redirect" | "granted";
+interface DashboardAccessErrorSlice {
+  readonly error: CapxulError;
+  /** Re-runs each failed probe. */
+  readonly retry: () => void;
+}
+interface DashboardAccessRedirectSlice {
+  readonly destination: IdentityDestination;
+}
+interface CapxulDashboardAccessProps {
+  readonly scope: DashboardScope;
+  readonly children: ReactNode;
+}
+declare function Root({
+  scope,
+  children
+}: CapxulDashboardAccessProps): import("react/jsx-runtime").JSX.Element;
+/** Hands nothing — today's app renders `null` here, exactly as it does now. */
+declare function Checking({
+  children
+}: {
+  readonly children?: ReactNode;
+}): import("react/jsx-runtime").JSX.Element | null;
+declare function DashboardError({
+  children
+}: {
+  readonly children: (slice: DashboardAccessErrorSlice) => ReactNode;
+}): import("react/jsx-runtime").JSX.Element | null;
+declare function Redirect({
+  children
+}: {
+  readonly children: (slice: DashboardAccessRedirectSlice) => ReactNode;
+}): import("react/jsx-runtime").JSX.Element | null;
+declare function Granted({
+  children
+}: {
+  readonly children?: ReactNode;
+}): import("react/jsx-runtime").JSX.Element | null;
+/** The compound shape the app's own design system already uses (`StatusTabs`). */
+declare const CapxulDashboardAccess: typeof Root & {
+  Checking: typeof Checking;
+  Error: typeof DashboardError;
+  Redirect: typeof Redirect;
+  Granted: typeof Granted;
+};
+//#endregion
+export { type AccountFailure, type AccountProgress, type ActionResult, type AuthenticatedState, type AuthenticationSlots, type CanReason, type CapxulAuth, CapxulAuthenticationController, type CapxulBootstrapState, type CapxulBootstrapStatus, CapxulContacts, type CapxulContactsProps, CapxulDashboardAccess, type CapxulDashboardAccessProps, CapxulOnboardingController, CapxulOrgMember, type CapxulOrgMemberProps, CapxulProvider, type CapxulProviderProps, type CapxulSend, CapxulSendMoney, type CapxulSendMoneyBlockedReason, type CapxulSendMoneyProps, type Contact, type ContactRelationship, type ContactRow, type ContactsActor, type ContactsAddBlockedReason, type ContactsAddError, type ContactsAddSlice, type ContactsListOptions, type ContactsListSlice, type ContactsRefusal, type ContactsSummarySlice, type ControllerAction, type CreateOrganizationSubmission, type DashboardAccessErrorSlice, type DashboardAccessPhase, type DashboardAccessRedirectSlice, type DashboardScope, type Destination, type FaultedState, type ImageUploadInput, type ImageUploadTarget, type InvocationOptions, type NavigationAction, type OnboardingControllerProps, type OnboardingIntent, type OnboardingJourney, type OnboardingJourneyPosition, type OnboardingOrigin, type OnboardingStep, type OrgFailure, type OrgMemberAction, type OrgMemberCanSlice, type OrgMemberStanding, type OrgMemberStandingSlice, type OrgProgress, type OrganizationDetails, type OrganizationDraft, type OtpPendingState, type PayoutDraftChain, type PayoutDraftEntry, type PendingAuthState, type ProfileDetails, type ProfileDraft, type ProfileSlotProps, type ReadyDestination, type RetryAction, type SendActor, type SendMoneyActionsSlice, type SendMoneyAmountSlice, type SendMoneyAssetError, type SendMoneyAssetOption, type SendMoneyAssetSlice, type SendMoneyRecipientMethod, type SendMoneyRecipientSlice, type SendMoneyRecipientStatus, type SendResult, type SentPayment, type SignedOutState, type Slot, type UseCapxulAccountBalanceOptions, type UseCapxulAccountBalanceReturn, type UseCapxulAccountFundReturn, type UseCapxulCreateCommitmentReturn, type UseCapxulCreateOrgReturn, type UseCapxulImageUploadReturn, type UseCapxulInviteMemberReturn, type UseCapxulOrgMembersOptions, type UseCapxulOrgMembersReturn, type UseCapxulOrgRolesOptions, type UseCapxulOrgRolesReturn, type UseCapxulOrgTreasuryOptions, type UseCapxulOrgTreasuryReturn, type UseCapxulOrgsReturn, type UseCapxulPayReturn, type UseCapxulPaymentReturn, type UseCapxulPaymentsReturn, type UseCapxulProfileReturn, type UseCapxulRedirectPaymentReturn, type UseCapxulUsernameAvailabilityReturn, type UsernameAvailability, acknowledgeOnboardingDestination, activeOnboardingRecovery, clearOnboardingJourney, currentOnboardingJourneyId, entered, invalidateOnboardingJourneyObservation, isClaimed, isRestoring, loadOnboardingJourney, onboardingJourneyPosition, saveOnboardingJourney, startOnboardingJourney, useCapxul, useCapxulAccountBalance, useCapxulAccountFund, useCapxulActivity, useCapxulActivityDetail, useCapxulAnnotateMovement, useCapxulAuth, useCapxulCancelPayment, useCapxulClaimPayment, useCapxulClientOrNull, useCapxulCreateCommitment, useCapxulCreateOrg, useCapxulDestination, useCapxulHoldings, useCapxulIdentity, useCapxulImageUpload, useCapxulInviteMember, useCapxulOrgMembers, useCapxulOrgRoles, useCapxulOrgTreasury, useCapxulOrganizationPay, useCapxulOrganizationPayBatch, useCapxulOrgs, useCapxulPay, useCapxulPayment, useCapxulPayments, useCapxulPermission, useCapxulPermissionAssign, useCapxulPermissionChange, useCapxulPermissionCreate, useCapxulPermissionReplace, useCapxulPermissionRevoke, useCapxulPermissions, useCapxulProfile, useCapxulRedirectPayment, useCapxulSend, useCapxulTransitions, useCapxulUsernameAvailability };

package/dist/index.mjs

@@ -1,8 +1,8 @@
 "use client";
-import { a as useCapxulAuth, c as useCapxulIdentityOrNull, d as capxulKeys, f as useCapxulClientOrNull, i as entered, l as useCapxulSend, n as CapxulOnboardingController, o as useCapxulDestination, p as useCapxul, r as CapxulProvider, s as useCapxulIdentity, t as CapxulAuthenticationController, u as useCapxulTransitions } from "./controllers-ClhmseFL.mjs";
+import { a as useCapxulAuth, c as useCapxulIdentityOrNull, d as capxulKeys, f as useCapxulClientOrNull, i as entered, l as useCapxulSend, n as CapxulOnboardingController, o as useCapxulDestination, p as useCapxul, r as CapxulProvider, s as useCapxulIdentity, t as CapxulAuthenticationController, u as useCapxulTransitions } from "./controllers-VwUPB619.mjs";
 import { createContext, useCallback, useContext, useEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
-import { Errors, fingerprintPaymentIntent, formatMoney, isMoneyParseError, parseMoney } from "@capxul/sdk";
+import { CapxulError, Errors, fingerprintPaymentIntent, formatMoney, isClaimed, isClaimed as isClaimed$1, isMoneyParseError, isRestoring, isRestoring as isRestoring$1, parseMoney, resolveIdentityDestination } from "@capxul/sdk";
 import { Fragment, jsx } from "react/jsx-runtime";
 //#region src/internal/require-bootstrapped-client.ts
 /**
@@ -306,7 +306,7 @@ function useCapxulPayments(options) {
 		queryFn: async () => {
 			return unwrapCapxulResult(await requireBootstrappedClient(client, "payments.list").payments.list());
 		},
-		enabled: client !== null && identity?.phase === "authenticated" && identity.account.at === "claimed" && (options?.enabled ?? true)
+		enabled: client !== null && identity !== null && isClaimed$1(identity) && (options?.enabled ?? true)
 	});
 }
 function useCapxulPayment(paymentId, options) {
@@ -396,12 +396,13 @@ const useCapxulPermissionRevoke = (orgId) => usePermissionMutation(orgId, "revok
 const useCapxulPermissionReplace = (orgId) => usePermissionMutation(orgId, "replace");
 function useCapxulPermissions(orgId, options) {
 	const client = useCapxulClientOrNull();
+	const identity = useCapxulIdentityOrNull();
 	return useQuery({
 		queryKey: capxulKeys.orgPermissions(orgId),
 		queryFn: async () => {
 			return unwrapCapxulResult(await requireBootstrappedClient(client, "permissions.list").org(orgId).permissions.list());
 		},
-		enabled: client !== null && (options?.enabled ?? true)
+		enabled: client !== null && identity !== null && isClaimed$1(identity) && (options?.enabled ?? true)
 	});
 }
 function useCapxulPermission(orgId, permissionId) {
@@ -425,7 +426,7 @@ function useCapxulActivity(params) {
 		queryFn: async () => {
 			return unwrapCapxulResult(await requireBootstrappedClient(client, "activity.list").activity.list(params));
 		},
-		enabled: client !== null && identity?.phase === "authenticated" && identity.account.at === "claimed"
+		enabled: client !== null && identity !== null && isClaimed$1(identity)
 	});
 }
 function useCapxulActivityDetail(reference) {
@@ -437,7 +438,7 @@ function useCapxulActivityDetail(reference) {
 			if (reference === void 0) throw Errors.invalidInput("reference", "required for activity.get");
 			return unwrapCapxulResult(await requireBootstrappedClient(client, "activity.get").activity.get(reference));
 		},
-		enabled: client !== null && reference !== void 0 && identity?.phase === "authenticated" && identity.account.at === "claimed"
+		enabled: client !== null && reference !== void 0 && identity !== null && isClaimed$1(identity)
 	});
 }
 function useCapxulAnnotateMovement() {
@@ -460,7 +461,7 @@ function useCapxulHoldings() {
 		queryFn: async () => {
 			return unwrapCapxulResult(await requireBootstrappedClient(client, "holdings.current").holdings.current());
 		},
-		enabled: client !== null && identity?.phase === "authenticated" && identity.account.at === "claimed"
+		enabled: client !== null && identity !== null && isClaimed$1(identity)
 	});
 }
 //#endregion
@@ -1012,7 +1013,7 @@ function useContactsContext() {
 	if (engine === null) throw new Error("CapxulContacts parts must be used inside <CapxulContacts>");
 	return engine;
 }
-function Root$1({ actor, onAdded, onFailed, children }) {
+function Root$3({ actor, onAdded, onFailed, children }) {
 	const engine = useContacts({
 		actor,
 		onAdded,
@@ -1036,7 +1037,7 @@ function Add({ children }) {
 	return /* @__PURE__ */ jsx(Fragment, { children: children(useContactsContext().add) });
 }
 /** The compound shape the app's own design system already uses (`StatusTabs`). */
-const CapxulContacts = Object.assign(Root$1, {
+const CapxulContacts = Object.assign(Root$3, {
 	Summary,
 	List,
 	Add
@@ -1204,7 +1205,7 @@ function useSendMoneyContext() {
 	if (engine === null) throw new Error("CapxulSendMoney parts must be used inside <CapxulSendMoney>");
 	return engine;
 }
-function Root({ actor, onSent, onFailed, children }) {
+function Root$2({ actor, onSent, onFailed, children }) {
 	const engine = useSendMoney({
 		actor,
 		onSent,
@@ -1228,11 +1229,331 @@ function Actions({ children }) {
 	return /* @__PURE__ */ jsx(Fragment, { children: children(useSendMoneyContext().actions) });
 }
 /** The compound shape the app's own design system already uses (`StatusTabs`). */
-const CapxulSendMoney = Object.assign(Root, {
+const CapxulSendMoney = Object.assign(Root$2, {
 	Asset,
 	Amount,
 	Recipient,
 	Actions
 });
 //#endregion
-export { CapxulAuthenticationController, CapxulContacts, CapxulOnboardingController, CapxulProvider, CapxulSendMoney, acknowledgeOnboardingDestination, activeOnboardingRecovery, clearOnboardingJourney, currentOnboardingJourneyId, entered, invalidateOnboardingJourneyObservation, loadOnboardingJourney, onboardingJourneyPosition, saveOnboardingJourney, startOnboardingJourney, useCapxul, useCapxulAccountBalance, useCapxulAccountFund, useCapxulActivity, useCapxulActivityDetail, useCapxulAnnotateMovement, useCapxulAuth, useCapxulCancelPayment, useCapxulClaimPayment, useCapxulClientOrNull, useCapxulCreateCommitment, useCapxulCreateOrg, useCapxulDestination, useCapxulHoldings, useCapxulIdentity, useCapxulImageUpload, useCapxulInviteMember, useCapxulOrgMembers, useCapxulOrgRoles, useCapxulOrgTreasury, useCapxulOrganizationPay, useCapxulOrganizationPayBatch, useCapxulOrgs, useCapxulPay, useCapxulPayment, useCapxulPayments, useCapxulPermission, useCapxulPermissionAssign, useCapxulPermissionChange, useCapxulPermissionCreate, useCapxulPermissionReplace, useCapxulPermissionRevoke, useCapxulPermissions, useCapxulProfile, useCapxulRedirectPayment, useCapxulSend, useCapxulTransitions, useCapxulUsernameAvailability };
+//#region src/headless/access/org-member.tsx
+const DENIED_NO_ORG = {
+	allowed: false,
+	isLoading: false,
+	reason: "org-unavailable"
+};
+const DENIED_LOADING = {
+	allowed: false,
+	isLoading: true,
+	reason: "loading"
+};
+const ALLOWED = {
+	allowed: true,
+	isLoading: false,
+	reason: null
+};
+const DENIED_NO_PERMISSION = {
+	allowed: false,
+	isLoading: false,
+	reason: "no-permission"
+};
+function canSlice(reading, held) {
+	switch (reading.kind) {
+		case "no-org":
+		case "unavailable": return DENIED_NO_ORG;
+		case "loading": return DENIED_LOADING;
+		case "ready": return held(reading.me) ? ALLOWED : DENIED_NO_PERMISSION;
+	}
+}
+/**
+* The classification rule, derived line by line from the app's own expression
+* at `use-current-organization.ts:124-134`. Same order, same folds:
+*
+* | Test, in order                              | standing       |
+* | ------------------------------------------- | -------------- |
+* | the `me()` read has not settled             | `"loading"`    |
+* | the read errored, or no `orgId` was given   | `"unavailable"`|
+* | `role === null`                             | `"unavailable"`|
+* | `canManagePeople \|\| canSpend`             | `"active"`     |
+* | neither capability                          | `"restricted"` |
+*
+* `"unavailable"` folds TWO causes — a failed read and a member with no Role
+* label — exactly as today. And because the `role === null` test runs BEFORE
+* the capability test, `"active"` guarantees a non-null label, so no screen
+* needs a fallback word in that branch.
+*/
+function standingSlice(reading) {
+	if (reading.kind === "loading") return {
+		standing: "loading",
+		roleLabel: null
+	};
+	if (reading.kind !== "ready") return {
+		standing: "unavailable",
+		roleLabel: null
+	};
+	const { role, capabilities } = reading.me;
+	if (role === null) return {
+		standing: "unavailable",
+		roleLabel: null
+	};
+	return {
+		standing: capabilities.canManagePeople || capabilities.canSpend ? "active" : "restricted",
+		roleLabel: role.label
+	};
+}
+/** The engine — all the logic. NOT exported from the package barrel. */
+function useOrgMember(orgId) {
+	const client = useCapxulClientOrNull();
+	const identity = useCapxulIdentityOrNull();
+	const ready = client !== null && identity !== null && isClaimed$1(identity);
+	const mayStillOpen = client === null || identity === null || isRestoring$1(identity);
+	const query = useQuery({
+		queryKey: capxulKeys.orgMe(orgId),
+		queryFn: async () => {
+			return unwrapCapxulResult(await requireBootstrappedClient(client, "org.me").org(orgId).me());
+		},
+		enabled: ready && orgId !== void 0
+	});
+	const reading = useMemo(() => {
+		if (orgId === void 0) return { kind: "no-org" };
+		if (!ready) return { kind: mayStillOpen ? "loading" : "unavailable" };
+		if (query.error !== null) return { kind: "unavailable" };
+		if (query.data !== void 0) return {
+			kind: "ready",
+			me: query.data
+		};
+		return { kind: "loading" };
+	}, [
+		mayStillOpen,
+		orgId,
+		query.data,
+		query.error,
+		ready
+	]);
+	return useMemo(() => ({
+		can: {
+			spend: canSlice(reading, (me) => me.capabilities.canSpend),
+			managePeople: canSlice(reading, (me) => me.capabilities.canManagePeople)
+		},
+		standing: standingSlice(reading)
+	}), [reading]);
+}
+const OrgMemberContext = createContext(null);
+function useOrgMemberContext() {
+	const state = useContext(OrgMemberContext);
+	if (state === null) throw new Error("CapxulOrgMember parts must be used inside <CapxulOrgMember>");
+	return state;
+}
+function Root$1({ orgId, children }) {
+	const state = useOrgMember(orgId);
+	return /* @__PURE__ */ jsx(OrgMemberContext.Provider, {
+		value: state,
+		children
+	});
+}
+/**
+* One part serves all four denial idioms the app already uses: disabled with no
+* explanation, disabled plus a native `title`, a whole-surface swap, and
+* buttons that vanish. The part branches on nothing — the root computes both
+* slices and this picks the one the `do` prop names.
+*/
+function Can({ do: action, children }) {
+	return /* @__PURE__ */ jsx(Fragment, { children: children(useOrgMemberContext().can[action]) });
+}
+function Standing({ children }) {
+	return /* @__PURE__ */ jsx(Fragment, { children: children(useOrgMemberContext().standing) });
+}
+/** The compound shape the app's own design system already uses (`StatusTabs`). */
+const CapxulOrgMember = Object.assign(Root$1, {
+	Can,
+	Standing
+});
+//#endregion
+//#region src/headless/access/dashboard-access.tsx
+const PART_NAME = {
+	checking: "Checking",
+	error: "Error",
+	redirect: "Redirect",
+	granted: "Granted"
+};
+/**
+* Mirrors `publicIdentityFailure`, which is internal to `@capxul/sdk`
+* (`src/surface/_shared/effect-actor-bridge.ts`). The identity machine carries
+* its own failure representation; `.Error` hands a `CapxulError`, so the
+* projection happens once, here.
+*/
+function identityError(state) {
+	const { failure } = state;
+	if (failure.error !== void 0) return failure.error;
+	return new CapxulError(failure.code === "WORK_DIED" ? "UNKNOWN" : failure.code, failure.message, { layer: "identity" });
+}
+/**
+* Whether the Organization lane has reached a position that names a real
+* screen. `isRestoring` deliberately leaves this question to the gate (#1518),
+* because every org lane sits under a claimed account and `destination()`
+* already names a screen for each of its positions — except `loading`, which
+* means "still finding out" and whose destination is the provisioning screen.
+*
+* NEGATIVE classification, the same discipline `isRestoring` uses: only the
+* settled positions are enumerated, so a lane position added later HOLDS the
+* gate instead of bouncing a member who is in fact inside a ready Organization.
+* It gates the REDIRECT only, never the grant, so it can never blank a screen
+* the probes have already said yes to.
+*/
+function isOrgLaneSettled(identity) {
+	if (identity.phase !== "authenticated" || identity.account.at !== "claimed") return true;
+	const org = identity.account.org;
+	if (org === null) return true;
+	switch (org.at) {
+		case "ready":
+		case "failed": return true;
+		default: return false;
+	}
+}
+/** Exactly the Organization asked for, and ready to be used. */
+function isExactOrgReady(lifecycle, orgId) {
+	return lifecycle?.status === "ready" && String(lifecycle.orgId) === orgId;
+}
+function isLifecycleSettled(lifecycle) {
+	return lifecycle?.status === "ready" || lifecycle?.status === "failed";
+}
+function destinationOrNull(identity) {
+	return identity === null ? null : resolveIdentityDestination(identity);
+}
+function isClaimedOrFalse(identity) {
+	return identity !== null && isClaimed$1(identity);
+}
+/**
+* The branch, as one pure decision over four settled facts.
+*
+* The order is the frozen one: an error wins over everything, an unsettled
+* probe holds, and only then does the judgment speak. The last two arms are the
+* whole bug class the deleted app guard kept re-fixing — a destination is
+* obeyed only once every lane that could still change it has settled, and
+* anything else HOLDS rather than guessing.
+*/
+function decidePhase(input) {
+	if (input.error !== null) return "error";
+	if (!input.settled) return "checking";
+	if (input.granted) return "granted";
+	if (input.orgLaneSettled && input.destination !== null) return "redirect";
+	return "checking";
+}
+/** The engine — all the logic. NOT exported from the package barrel. */
+function useDashboardAccess(scope) {
+	const client = useCapxulClientOrNull();
+	const identity = useCapxulIdentityOrNull();
+	const destination = useMemo(() => destinationOrNull(identity), [identity]);
+	const orgId = scope.kind === "organization" ? scope.orgId : void 0;
+	const claimed = isClaimedOrFalse(identity);
+	const sessionError = useMemo(() => identity?.phase === "faulted" ? identityError(identity) : null, [identity]);
+	const wantsMemberships = orgId !== void 0 && claimed;
+	const memberships = useCapxulOrgs({ enabled: wantsMemberships });
+	const membershipError = wantsMemberships ? memberships.error : null;
+	const membershipsSettled = !wantsMemberships || memberships.data !== void 0 || membershipError !== null;
+	const hasMembership = orgId !== void 0 && (memberships.data ?? []).some((organization) => String(organization.id) === orgId);
+	const wantsLifecycle = wantsMemberships && membershipsSettled && hasMembership;
+	const lifecycle = useQuery({
+		queryKey: capxulKeys.orgLifecycle(orgId),
+		queryFn: async () => {
+			return unwrapCapxulResult(await requireBootstrappedClient(client, "org.getLifecycle").org(orgId).getLifecycle());
+		},
+		enabled: wantsLifecycle && client !== null
+	});
+	const lifecycleError = wantsLifecycle ? lifecycle.error : null;
+	const lifecycleSettled = !wantsLifecycle || lifecycleError !== null || isLifecycleSettled(lifecycle.data);
+	const retry = useCallback(() => {
+		if (sessionError !== null && client !== null) client.auth.getSession();
+		if (membershipError !== null) memberships.refetch();
+		if (lifecycleError !== null) lifecycle.refetch();
+	}, [
+		client,
+		sessionError,
+		membershipError,
+		lifecycleError,
+		memberships.refetch,
+		lifecycle.refetch
+	]);
+	const error = sessionError ?? membershipError ?? lifecycleError;
+	const phase = decidePhase({
+		error,
+		settled: client !== null && identity !== null && !isRestoring$1(identity) && membershipsSettled && lifecycleSettled,
+		granted: scope.kind === "personal" ? claimed : claimed && orgId !== void 0 && hasMembership && isExactOrgReady(lifecycle.data, orgId),
+		orgLaneSettled: identity !== null && isOrgLaneSettled(identity),
+		destination
+	});
+	return useMemo(() => ({
+		phase,
+		error,
+		destination,
+		retry
+	}), [
+		phase,
+		error,
+		destination,
+		retry
+	]);
+}
+const DashboardAccessContext = createContext(null);
+function useDashboardAccessContext() {
+	const value = useContext(DashboardAccessContext);
+	if (value === null) throw new Error("CapxulDashboardAccess parts must be used inside <CapxulDashboardAccess>");
+	return value;
+}
+/** A part's own turn, and its registration for the missing-part warning. */
+function usePart(phase) {
+	const { state, placed } = useDashboardAccessContext();
+	useEffect(() => {
+		placed.add(phase);
+		return () => {
+			placed.delete(phase);
+		};
+	}, [placed, phase]);
+	return state.phase === phase ? state : null;
+}
+function Root({ scope, children }) {
+	const state = useDashboardAccess(scope);
+	const [placed] = useState(() => /* @__PURE__ */ new Set());
+	const value = useMemo(() => ({
+		state,
+		placed
+	}), [state, placed]);
+	useEffect(() => {
+		if (typeof process !== "undefined" && process.env.NODE_ENV === "production") return;
+		if (placed.has(state.phase)) return;
+		console.warn(`<CapxulDashboardAccess> reached "${state.phase}" but no <CapxulDashboardAccess.${PART_NAME[state.phase]}> is placed, so nothing renders.`);
+	}, [placed, state.phase]);
+	return /* @__PURE__ */ jsx(DashboardAccessContext.Provider, {
+		value,
+		children
+	});
+}
+/** Hands nothing — today's app renders `null` here, exactly as it does now. */
+function Checking({ children }) {
+	return usePart("checking") === null ? null : /* @__PURE__ */ jsx(Fragment, { children });
+}
+function DashboardError({ children }) {
+	const state = usePart("error");
+	if (state === null || state.error === null) return null;
+	return /* @__PURE__ */ jsx(Fragment, { children: children({
+		error: state.error,
+		retry: state.retry
+	}) });
+}
+function Redirect({ children }) {
+	const state = usePart("redirect");
+	if (state === null || state.destination === null) return null;
+	return /* @__PURE__ */ jsx(Fragment, { children: children({ destination: state.destination }) });
+}
+function Granted({ children }) {
+	return usePart("granted") === null ? null : /* @__PURE__ */ jsx(Fragment, { children });
+}
+/** The compound shape the app's own design system already uses (`StatusTabs`). */
+const CapxulDashboardAccess = Object.assign(Root, {
+	Checking,
+	Error: DashboardError,
+	Redirect,
+	Granted
+});
+//#endregion
+export { CapxulAuthenticationController, CapxulContacts, CapxulDashboardAccess, CapxulOnboardingController, CapxulOrgMember, CapxulProvider, CapxulSendMoney, acknowledgeOnboardingDestination, activeOnboardingRecovery, clearOnboardingJourney, currentOnboardingJourneyId, entered, invalidateOnboardingJourneyObservation, isClaimed, isRestoring, loadOnboardingJourney, onboardingJourneyPosition, saveOnboardingJourney, startOnboardingJourney, useCapxul, useCapxulAccountBalance, useCapxulAccountFund, useCapxulActivity, useCapxulActivityDetail, useCapxulAnnotateMovement, useCapxulAuth, useCapxulCancelPayment, useCapxulClaimPayment, useCapxulClientOrNull, useCapxulCreateCommitment, useCapxulCreateOrg, useCapxulDestination, useCapxulHoldings, useCapxulIdentity, useCapxulImageUpload, useCapxulInviteMember, useCapxulOrgMembers, useCapxulOrgRoles, useCapxulOrgTreasury, useCapxulOrganizationPay, useCapxulOrganizationPayBatch, useCapxulOrgs, useCapxulPay, useCapxulPayment, useCapxulPayments, useCapxulPermission, useCapxulPermissionAssign, useCapxulPermissionChange, useCapxulPermissionCreate, useCapxulPermissionReplace, useCapxulPermissionRevoke, useCapxulPermissions, useCapxulProfile, useCapxulRedirectPayment, useCapxulSend, useCapxulTransitions, useCapxulUsernameAvailability };

package/dist/testing/index.d.mts

@@ -1,4 +1,4 @@
-import { a as AuthenticationSlots, d as OnboardingControllerProps } from "../controllers-D3_Q5d2t.mjs";
+import { a as AuthenticationSlots, d as OnboardingControllerProps } from "../controllers-BT4YzBr9.mjs";
 import * as React from "react";
 import { ReactNode } from "react";
 import { CapxulTestClient, CapxulTestClock, CapxulTestObservation, CreateCapxulTestClientOptions, SeedTestIdentityInput, createCapxulTestClient } from "@capxul/sdk/testing";

package/dist/testing/index.mjs

@@ -1,4 +1,4 @@
-import { n as CapxulOnboardingController, r as CapxulProvider, t as CapxulAuthenticationController } from "../controllers-ClhmseFL.mjs";
+import { n as CapxulOnboardingController, r as CapxulProvider, t as CapxulAuthenticationController } from "../controllers-VwUPB619.mjs";
 import "react";
 import { jsx } from "react/jsx-runtime";
 import { createCapxulTestClient } from "@capxul/sdk/testing";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/sdk-react",
-  "version": "2.2.0",
+  "version": "2.3.1",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Xelmar-tech/infrastructure.git",
@@ -26,7 +26,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@capxul/sdk": "2.2.0"
+    "@capxul/sdk": "2.3.1"
   },
   "devDependencies": {
     "@tanstack/react-query": "^5.66.9",
@@ -43,7 +43,7 @@
     "vite-plus": "0.1.23",
     "vitest": "npm:@voidzero-dev/vite-plus-test@0.1.23",
     "@capxul/errors": "0.0.1",
-    "@capxul/types": "0.1.0",
+    "@capxul/types": "0.2.0",
     "@capxul/typescript-config": "0.0.0"
   },
   "peerDependencies": {