@capxul/sdk-react 4.20.0-beta.2 → 4.20.0-beta.20

package/README.md

@@ -27,13 +27,13 @@ export function Providers({ children }: { children: React.ReactNode }) {
 - The provider restores Account readiness after a complete authenticated
   session. Account and Organization readiness transitions refresh active
   authenticated queries.
-- `CapxulAuthenticationController` and `CapxulOnboardingController` select
-  app-owned slots and render no SDK-owned DOM. The onboarding controller keeps
-  no Organization submission: after a reload the Core SDK reads the pending
-  Organization from the backend and attaches it, so the app re-submits nothing.
-  A claimed identity with no Organization and no app-held form step reports
-  `organizationProgress` with `{ at: "loading", orgId: null }` until that
-  attach lands.
+- CapxulAuthenticationController and CapxulOnboardingController select
+  app-owned slots and render no SDK-owned DOM. Organization create begins a
+  backend setup and returns its exact ID. The Core SDK actor subscribes to
+  that setup. Awaiting authorization, attention, and failure reach actionable
+  slots; processing and rechecking reach a finite progress slot.
+- CapxulDashboardAccess combines current setup with current org.me authority.
+  A historical ready setup does not grant access after authority is revoked.
 - Rich-data hooks such as `useCapxulProfile`, `useCapxulOrgs`, members, roles,
   treasury, and money hooks remain TanStack Query projections. Personal
   holdings and activity reads start only after the Account is claimed.
@@ -56,6 +56,8 @@ export function Providers({ children }: { children: React.ReactNode }) {
   engine hook stays module-scoped. Both actor paths ship: a personal actor omits
   `.Source` and spends the personal Account; an organization actor holds the
   Budget the payment is drawn from and spends the treasury Account.
+  The submitted amount uses the selected registry AssetId and precision. This
+  includes 18-decimal WETH.
 - `CapxulContacts` is the compound address-book component. One root owns the
   book behaviour and draws nothing. The `.Summary`, `.List`, and `.Add` region
   parts each hand the screen one finished slice, and a `.List` row carries its
@@ -75,6 +77,9 @@ export function Providers({ children }: { children: React.ReactNode }) {
   and an amount the caller passed in `prefill` wins over it. Both engine hooks
   stay module-scoped.
 
+Activity groups use AssetId. The SDK resolves symbols and precision only for
+display and CSV output. Assets with the same peg remain separate.
+
 Payroll confirmation restores a saved run before enabling submission. An
 uncertain run keeps its period, amounts, recipients, and SDK request key across
 close/reopen and reload. Its fields remain fixed until Core confirms success or terminal closure.
@@ -98,6 +103,16 @@ The testing harness uses the real public provider and controllers and imports
 its client factory only through `@capxul/sdk/testing`; it owns no renderer or
 parallel identity state.
 
+## Activity documents
+
+`CapxulActivity.Detail` exposes `documents`, `selectedDocument`, and
+`selectDocument({ documentHash, contentHash })`. Selection defaults to the
+instruction, then the Movement Memo. `renderDocument()` returns safe semantic
+HTML. `downloadDocument()` returns exact bytes for a deliberate download.
+The host owns the panel and download action. Do not log these results.
+Account or Organization changes clear selection and cancel pending reads.
+These methods replace the receipt-only selector and action.
+
 ## Documentation
 
 - [Maintainer context](./CONTEXT.md)

package/dist/{controllers-BWmKRFy6.d.mts → controllers-BMAU2kKH.d.mts}

@@ -106,14 +106,8 @@ type AccountProgress = Exclude<Readiness, {
 type AccountFailure = Extract<Readiness, {
   at: "failed";
 }>;
-type OrgProgress = Exclude<OrgLane, {
-  at: "failed";
-} | {
-  at: "ready";
-}>;
-type OrgFailure = Extract<OrgLane, {
-  at: "failed";
-}>;
+type OrgProgress = OrgLane;
+type OrgFailure = OrgLane;
 type ReadyDestination = Extract<IdentityDestination, {
   to: "dashboardPersonal" | "dashboardOrganization";
 }>;

package/dist/{controllers-DXmEHrnw.mjs → controllers-BV3e8WD3.mjs}

@@ -228,7 +228,7 @@ async function guarded(runtime, verb, options, run) {
 	}
 }
 function organizationFailure(reason, state) {
-	const stateFailure = state.phase === "faulted" ? state.failure : state.phase === "authenticated" && state.account.at === "failed" ? state.account.failure : state.phase === "authenticated" && state.account.at === "claimed" && state.account.org?.at === "failed" ? state.account.org.failure : void 0;
+	const stateFailure = state.phase === "faulted" ? state.failure : state.phase === "authenticated" && state.account.at === "failed" ? state.account.failure : state.phase === "authenticated" && state.account.at === "claimed" ? state.account.org?.failure : void 0;
 	if (stateFailure?.code === reason) return {
 		ok: false,
 		reason,
@@ -266,8 +266,7 @@ function normalizeOrganization(organization) {
 /** The Organization id when its lane is already running or finished, else null. */
 const runningOrganization = (state) => {
 	if (state.phase !== "authenticated" || state.account.at !== "claimed") return null;
-	const org = state.account.org;
-	return org !== null && (org.at === "loading" || org.at === "settingUp" || org.at === "ready") ? org.orgId : null;
+	return state.account.org?.orgId ?? null;
 };
 /** A superseded session read waits at most this long for the winning read. */
 const SESSION_SETTLE_LIMIT_MS = 3e4;
@@ -488,20 +487,6 @@ function createAuth(client, clearAuthenticatedQueries) {
 				ok: true,
 				orgId: running
 			};
-			if (current.phase === "authenticated" && current.account.at === "claimed") {
-				const org = current.account.org;
-				if (org?.at === "failed" && org.orgId !== null) {
-					if (!org.retryable) return {
-						ok: false,
-						reason: org.failure.code
-					};
-					const retried = await runtime.send({ _tag: "RetryOrganization" }, invocation);
-					return failure(retried) ?? {
-						ok: true,
-						orgId: org.orgId
-					};
-				}
-			}
 			const prepared = await prepareOrganization(submission, invocation);
 			if (!prepared.ok) return prepared;
 			const opened = runningOrganization(runtime.snapshot());
@@ -509,20 +494,24 @@ function createAuth(client, clearAuthenticatedQueries) {
 				ok: true,
 				orgId: opened
 			};
-			const created = await runtime.send({
-				_tag: "CreateOrganization",
-				draft: prepared.organization
-			}, invocation);
-			const refused = failure(created);
-			if (refused !== null) return refused;
-			const state = created.state;
-			const org = state.phase === "authenticated" && state.account.at === "claimed" ? state.account.org : null;
-			return org?.at === "ready" && org.orgId !== null ? {
-				ok: true,
-				orgId: org.orgId
-			} : {
+			const begun = await client.onboarding.beginOrganization(prepared.organization, invocation);
+			if (!begun.ok) return {
 				ok: false,
-				reason: "UNKNOWN"
+				reason: begun.error.code,
+				error: begun.error
+			};
+			const { orgId, setup } = begun.value;
+			if (setup.status === "awaitingAuthorization") {
+				const authorized = await client.org(orgId).setup.authorize(invocation);
+				if (!authorized.ok) return {
+					ok: false,
+					reason: authorized.error.code,
+					error: authorized.error
+				};
+			}
+			return {
+				ok: true,
+				orgId: String(orgId)
 			};
 		}).then((result) => {
 			if (result.ok) return result;
@@ -535,8 +524,21 @@ function createAuth(client, clearAuthenticatedQueries) {
 		}),
 		retry: (options) => guarded(runtime, "retry", options, async (invocation) => {
 			const state = runtime.snapshot();
-			const event = state.phase === "authenticated" && state.account.at === "claimed" ? { _tag: "RetryOrganization" } : { _tag: "RetryAccount" };
-			const result = await runtime.send(event, invocation);
+			const orgId = runningOrganization(state);
+			if (orgId !== null) {
+				const scoped = client.org(orgId);
+				const current = await scoped.setup.get(invocation);
+				if (!current.ok) return {
+					ok: false,
+					reason: current.error.code
+				};
+				const result = current.value.status === "awaitingAuthorization" ? await scoped.setup.authorize(invocation) : await scoped.setup.resume(invocation);
+				return result.ok ? { ok: true } : {
+					ok: false,
+					reason: result.error.code
+				};
+			}
+			const result = await runtime.send({ _tag: "RetryAccount" }, invocation);
 			return failure(result) ?? { ok: true };
 		}),
 		resumeSubmittedOrganization: (submission, options) => guarded(runtime, "createOrganization", options, async (invocation) => {
@@ -565,7 +567,7 @@ function CapxulIdentityProvider({ client, children }) {
 				if (!active) return;
 				state = runtime.snapshot();
 			}
-			if (state.phase === "authenticated" && state.profileComplete && state.account.at === "unknown") await runtime.send({ _tag: "EnsureAccount" }, { signal: controller.signal });
+			if (client._internal.accountSetup !== "explicit" && state.phase === "authenticated" && state.profileComplete && state.account.at === "unknown") await runtime.send({ _tag: "EnsureAccount" }, { signal: controller.signal });
 		}).catch(() => void 0);
 		return () => {
 			active = false;
@@ -580,7 +582,7 @@ function CapxulIdentityProvider({ client, children }) {
 			const account = actingAccount(state);
 			const accountChanged = previousAccount !== void 0 && account !== void 0 && account !== previousAccount;
 			previousAccount = account;
-			if (record.outcome === "applied" && (record.from !== record.to || accountChanged) && (record.to === "authenticated:claimed" || record.to === "authenticated:claimed:ready")) queryClient.invalidateQueries({
+			if (record.outcome === "applied" && (record.from !== record.to || accountChanged) && (record.to === "authenticated:claimed" || record.to === "authenticated:claimed:organization")) queryClient.invalidateQueries({
 				queryKey: capxulKeys.root,
 				...accountChanged ? { refetchType: "none" } : {}
 			});
@@ -720,6 +722,7 @@ function clearClientScopedQueries(queryClient, ownsQueryClient) {
 }
 function CapxulProvider(props) {
 	const { publishableKey, client: injectedClient, requirement, signer, observability, bootstrapBaseUrl, queryClient, children } = props;
+	const accountSetup = "accountSetup" in props ? props.accountSetup : void 0;
 	const [resolvedQueryClient] = useState(() => queryClient ?? makeDefaultQueryClient());
 	const [ownsQueryClient] = useState(() => queryClient === void 0);
 	const [attempt, setAttempt] = useState(0);
@@ -731,13 +734,15 @@ function CapxulProvider(props) {
 		...requirement === void 0 ? {} : { requirement },
 		...signer === void 0 ? {} : { signer },
 		...observability === void 0 ? {} : { observability },
-		...bootstrapBaseUrl === void 0 ? {} : { bootstrapBaseUrl }
+		...bootstrapBaseUrl === void 0 ? {} : { bootstrapBaseUrl },
+		...accountSetup === void 0 ? {} : { accountSetup }
 	}, [
 		publishableKey,
 		requirement,
 		signer,
 		observability,
 		bootstrapBaseUrl,
+		accountSetup,
 		attempt
 	]);
 	const [ownedBootstrap, setOwnedBootstrap] = useState(null);
@@ -919,15 +924,15 @@ function CapxulOnboardingController(props) {
 	if (submission !== null && state.account.at === "claimed") {
 		const org = state.account.org;
 		if (org === null) return organizationForm(props, state, auth, submission);
-		if (org.at === "failed") {
-			const retry = org.retryable ? org.orgId === null ? (options) => auth.createOrganization(submission, options) : auth.retry : void 0;
+		if (org.observation === "error" || org.setup?.status === "failed" || org.setup?.status === "needsAttention" || org.setup?.status === "awaitingAuthorization") {
+			const retry = org.orgId === null ? (options) => auth.createOrganization(submission, options) : auth.retry;
 			return slots.organizationFailure({
 				state,
 				org,
-				...retry === void 0 ? {} : { retry }
+				retry
 			});
 		}
-		if (org.at !== "ready") return slots.organizationProgress({
+		if (org.setup?.status !== "ready" || org.observation !== "connected") return slots.organizationProgress({
 			state,
 			org
 		});

package/dist/index.d.mts

@@ -1,7 +1,7 @@
-import { A as entered, C as CreateOrganizationFailure, D as OrganizationDetails, E as InvocationOptions, F as useCapxulTransitions, M as useCapxulDestination, N as useCapxulIdentity, O as ProfileDetails, P as useCapxulSend, S as CapxulSend, T as Destination, _ as ReadyDestination, a as AuthenticationSlots, b as Slot, c as ControllerAction, d as OnboardingControllerProps, f as OrgFailure, g as ProfileSlotProps, h as PendingAuthState, i as AuthenticatedState, j as useCapxulAuth, k as SendResult, l as FaultedState, m as OtpPendingState, n as AccountProgress, o as CapxulAuthenticationController, p as OrgProgress, r as ActionResult, s as CapxulOnboardingController, t as AccountFailure, u as NavigationAction, v as RetryAction, w as CreateOrganizationSubmission, x as CapxulAuth, y as SignedOutState } from "./controllers-BWmKRFy6.mjs";
+import { A as entered, C as CreateOrganizationFailure, D as OrganizationDetails, E as InvocationOptions, F as useCapxulTransitions, M as useCapxulDestination, N as useCapxulIdentity, O as ProfileDetails, P as useCapxulSend, S as CapxulSend, T as Destination, _ as ReadyDestination, a as AuthenticationSlots, b as Slot, c as ControllerAction, d as OnboardingControllerProps, f as OrgFailure, g as ProfileSlotProps, h as PendingAuthState, i as AuthenticatedState, j as useCapxulAuth, k as SendResult, l as FaultedState, m as OtpPendingState, n as AccountProgress, o as CapxulAuthenticationController, p as OrgProgress, r as ActionResult, s as CapxulOnboardingController, t as AccountFailure, u as NavigationAction, v as RetryAction, w as CreateOrganizationSubmission, x as CapxulAuth, y as SignedOutState } from "./controllers-BMAU2kKH.mjs";
 import { ReactNode, RefCallback } from "react";
 import { QueryClient, UseMutationResult, UseQueryResult } from "@tanstack/react-query";
-import { Account, AccountRequirement, ActivityAnnotation, ActivityAnnotationInput, ActivityDetail, ActivityKind, ActivityListParams, ActivityPage, ActivityPhase, ActivityRange, ActivityReference, ActorReference, AddressBookEntry, BudgetId, CapxulClient, CapxulError, CapxulResult, CapxulSigner, CreateOrgInput, CurrentHoldings, HostObservability, IdentityDestination, IdentityState, InviteMemberInput, MemberView, Money, MoneyParseErrorReason, OrgId, OrgView, OrganizationPaymentBatchInput, OrganizationPaymentInput, PartyId, Payment, PaymentDirection, PaymentDocumentRef, PaymentDocumentRender, PaymentStatus, PaymentTiming, PaymentType, PaymentsPayInput, PayrollGroupId, PayrollGroupInput, PayrollRunId, PayrollRunStatus, Permission, PermissionMethods, PermissionReadResult, Profile, RoleView, SubmittedPermissionExecution, isClaimed, isRestoring } from "@capxul/sdk";
+import { Account, AccountRequirement, ActivityAnnotation, ActivityAnnotationInput, ActivityDetail, ActivityKind, ActivityListParams, ActivityPage, ActivityPhase, ActivityRange, ActivityReference, ActivitySummaryTotal, ActorReference, AddressBookEntry, AssetAmount, AssetId, BudgetId, CapxulClient, CapxulError, CapxulResult, CapxulSigner, CurrentHoldings, HostObservability, IdentityDestination, IdentityState, MemberView, Money, MoneyParseErrorReason, OrgId, OrganizationAccess, OrganizationOnboarding, OrganizationOnboardingInput, OrganizationPaymentBatchInput, OrganizationPaymentInput, PartyId, Payment, PaymentDirection, PaymentDocumentDownload, PaymentDocumentReadRef, PaymentDocumentRef, PaymentDocumentRender, PaymentStatus, PaymentTiming, PaymentType, PaymentsPayInput, PayrollGroupId, PayrollGroupInput, PayrollRunId, PayrollRunStatus, Permission, PermissionMethods, PermissionReadResult, Profile, RoleView, SubmittedPermissionExecution, isClaimed, isRestoring } from "@capxul/sdk";
 //#region src/provider.d.ts
 type CapxulProviderSharedProps = {
   /** Bring your own QueryClient; otherwise the provider creates one. */
@@ -28,6 +28,11 @@ type CapxulProviderPublishableKeyProps = CapxulProviderSharedProps & {
    * route cross-origin for the publishable key's allowed origins.
    */
   readonly bootstrapBaseUrl?: string;
+  /**
+   * AUTH A3. Pass `"explicit"` on `/connect` so restore and OTP do not write
+   * Profile, Account, or invitations. Default automatic.
+   */
+  readonly accountSetup?: "automatic" | "explicit";
 };
 /**
  * Node / server / test path — a pre-built client is supplied; lifecycle stays
@@ -77,7 +82,7 @@ declare function useCapxulAccountBalance(options?: UseCapxulAccountBalanceOption
 //#region src/hooks/use-capxul-account-fund.d.ts
 type UseCapxulAccountFundReturn = UseMutationResult<{
   readonly txHash: string;
-}, CapxulError, Money>;
+}, CapxulError, AssetAmount>;
 declare function useCapxulAccountFund(): UseCapxulAccountFundReturn;
 //#endregion
 //#region src/hooks/use-capxul-money.d.ts
@@ -143,7 +148,7 @@ declare function useCapxulHoldings(params?: UseCapxulHoldingsParams): UseQueryRe
  * List the Organizations that the current user can access. Binds directly to
  * the locked `capxul.orgs()` SDK method.
  */
-type UseCapxulOrgsReturn = UseQueryResult<readonly OrgView[], CapxulError>;
+type UseCapxulOrgsReturn = UseQueryResult<readonly OrganizationAccess[], CapxulError>;
 type UseCapxulOrgsOptions = {
   /**
    * Gate the query on auth readiness. `client.orgs()` is a session-scoped
@@ -194,29 +199,11 @@ declare function useCapxulOrgTreasury(orgId: OrgId | undefined, options?: UseCap
 //#region src/hooks/use-capxul-create-org.d.ts
 /**
  * Create an Organization. Binds directly to the
- * `capxul.createOrg(input)` SDK method. On success, invalidates the org list.
+ * `onboarding.completeOrganization(input)` SDK method. On success, invalidates the org list.
  */
-type UseCapxulCreateOrgReturn = UseMutationResult<OrgView, CapxulError, CreateOrgInput>;
+type UseCapxulCreateOrgReturn = UseMutationResult<OrganizationOnboarding, CapxulError, OrganizationOnboardingInput>;
 declare function useCapxulCreateOrg(): UseCapxulCreateOrgReturn;
 //#endregion
-//#region src/hooks/use-capxul-invite-member.d.ts
-/**
- * R06 (#1964): `options` is the browser attempt the caller captured before the
- * person pressed Send. It reaches the SDK operation unchanged, so the durable
- * `org_invite_sent` and the later `org_invite_progressed` carry that attempt's
- * correlation. Absent, the invitation keeps its own invocation context.
- */
-type UseCapxulInviteMemberInput = InviteMemberInput & {
-  readonly options?: InvocationOptions;
-};
-/**
- * Invite a member to an Organization by email. The hook uses the closed-over `orgId`.
- * It binds directly to
- * `capxul.org(orgId).invite(input)`. On success, invalidates the member list.
- */
-type UseCapxulInviteMemberReturn = UseMutationResult<MemberView, CapxulError, UseCapxulInviteMemberInput>;
-declare function useCapxulInviteMember(orgId: OrgId | undefined): UseCapxulInviteMemberReturn;
-//#endregion
 //#region src/headless/journey/journey-state.d.ts
 type OnboardingIntent = "personal" | "organization";
 type OnboardingStep = "profile" | "organization" | "provisioning";
@@ -456,7 +443,7 @@ interface CapxulContactsProps {
   readonly onFailed: (error: CapxulError, options?: InvocationOptions) => void;
   readonly children: ReactNode;
 }
-declare function Root$6({ actor, onAdded, onFailed, children }: CapxulContactsProps): import("react/jsx-runtime").JSX.Element;
+declare function Root$7({ actor, onAdded, onFailed, children }: CapxulContactsProps): import("react/jsx-runtime").JSX.Element;
 declare function Summary$3({ children }: {
   readonly children: (slice: ContactsSummarySlice) => ReactNode;
 }): import("react/jsx-runtime").JSX.Element;
@@ -467,7 +454,7 @@ declare function Add({ children }: {
   readonly children: (slice: ContactsAddSlice) => ReactNode;
 }): import("react/jsx-runtime").JSX.Element;
 /** The compound shape the app's own design system already uses (`StatusTabs`). */
-declare const CapxulContacts: typeof Root$6 & {
+declare const CapxulContacts: typeof Root$7 & {
   Summary: typeof Summary$3;
   List: typeof List;
   Add: typeof Add;
@@ -520,8 +507,8 @@ type ActivityRow = {
  */
 type SummaryWindow = "all" | "last30days" | ActivityRange;
 /**
- * Finished money strings for ONE currency bucket, so no consumer indexes an
- * array of per-currency totals. All four strings are `null` and `count` is `0`
+ * Finished valuation strings in the display currency. Unrated assets remain
+ * separate. All four strings are `null` and `count` is `0`
  * when the window holds no activity — we say there is nothing, the app says it
  * in its own words.
  */
@@ -532,6 +519,7 @@ interface ActivitySummarySlice {
   readonly moneyOut: string | null;
   readonly net: string | null;
   readonly pending: string | null;
+  readonly unrated: readonly ActivitySummaryTotal[];
   /** A count is not money, so it is not formatted. */
   readonly count: number;
   readonly isLoading: boolean;
@@ -595,9 +583,12 @@ interface ActivityLoadMoreSlice {
 interface ActivityDetailSlice {
   /** Current Payment state from the existing detail read; absent for Movements. */
   readonly payment?: Pick<Payment, "status" | "execution">;
-  /** ONE finished document, never the array, so no consumer writes `documents[0]`. */
-  readonly receiptDocument: PaymentDocumentRef | null;
-  readonly openReceiptDocument: () => Promise<PaymentDocumentRender>;
+  readonly documents: readonly PaymentDocumentRef[];
+  readonly selectedDocument: PaymentDocumentRef | null;
+  readonly selectDocument: (ref: PaymentDocumentReadRef) => void;
+  readonly renderDocument: () => Promise<PaymentDocumentRender>;
+  /** Return exact bytes on a deliberate action. The host owns the download URL. */
+  readonly downloadDocument: () => Promise<PaymentDocumentDownload>;
   readonly isOpeningDocument: boolean;
   readonly memo: string;
   readonly setMemo: (text: string) => void;
@@ -637,7 +628,7 @@ interface CapxulActivityProps {
   readonly pageSize?: number;
   readonly children: ReactNode;
 }
-declare function Root$5({ actor, pageSize, children }: CapxulActivityProps): import("react/jsx-runtime").JSX.Element;
+declare function Root$6({ actor, pageSize, children }: CapxulActivityProps): import("react/jsx-runtime").JSX.Element;
 /**
  * The one part that holds a query rather than reading the engine's: it takes a
  * `window` prop, and two placements can ask for different windows, so a single
@@ -668,7 +659,7 @@ declare function Export({ children }: {
   readonly children: (slice: ActivityExportSlice) => ReactNode;
 }): import("react/jsx-runtime").JSX.Element;
 /** The compound shape the app's own design system already uses (`StatusTabs`). */
-declare const CapxulActivity: typeof Root$5 & {
+declare const CapxulActivity: typeof Root$6 & {
   Summary: typeof Summary$2;
   Filters: typeof Filters;
   Search: typeof Search;
@@ -703,7 +694,7 @@ type SentPayment = {
   /** The backend payment row. */
   readonly payment: Payment;
   /** What we parsed and sent — `.value` is the comma-stripped major-unit string. */
-  readonly amount: Money;
+  readonly amount: AssetAmount;
   /** The trimmed text the person typed — the app's success toast interpolates it. */
   readonly recipient: string;
 };
@@ -711,7 +702,7 @@ type SentPayment = {
  * Refusal CODES, never sentences (#1447 ruling 8). The app maps each code to
  * the words it already prints; no English refusal string ships from here.
  */
-type CapxulSendMoneyBlockedReason = "signer-not-ready" | "amount-invalid" | "recipient-unresolved" | "no-source" | "no-asset";
+type CapxulSendMoneyBlockedReason = "signer-not-ready" | "amount-invalid" | "recipient-unresolved" | "no-source" | "no-asset" | "asset-unnamed";
 /**
  * One Budget the member can spend from — the id the payment carries, and
  * nothing else.
@@ -736,7 +727,7 @@ interface SendMoneySourceSlice {
   readonly isPending: boolean;
 }
 interface SendMoneyAssetOption {
-  readonly id: string;
+  readonly id: AssetId;
   readonly symbol: string;
   readonly availableDisplay: string;
 }
@@ -771,7 +762,7 @@ interface CapxulSendMoneyProps {
   readonly onFailed: (error: CapxulError) => void;
   readonly children: ReactNode;
 }
-declare function Root$4({ actor, onSent, onFailed, children }: CapxulSendMoneyProps): import("react/jsx-runtime").JSX.Element;
+declare function Root$5({ actor, onSent, onFailed, children }: CapxulSendMoneyProps): import("react/jsx-runtime").JSX.Element;
 declare function Source({ children }: {
   readonly children: (slice: SendMoneySourceSlice) => ReactNode;
 }): import("react/jsx-runtime").JSX.Element;
@@ -788,7 +779,7 @@ declare function Actions$1({ children }: {
   readonly children: (slice: SendMoneyActionsSlice) => ReactNode;
 }): import("react/jsx-runtime").JSX.Element;
 /** The compound shape the app's own design system already uses (`StatusTabs`). */
-declare const CapxulSendMoney: typeof Root$4 & {
+declare const CapxulSendMoney: typeof Root$5 & {
   Source: typeof Source;
   Asset: typeof Asset$1;
   Amount: typeof Amount;
@@ -820,7 +811,7 @@ interface CapxulOrgMemberProps {
   readonly orgId: OrgId | string | undefined;
   readonly children: ReactNode;
 }
-declare function Root$3({ orgId, children }: CapxulOrgMemberProps): import("react/jsx-runtime").JSX.Element;
+declare function Root$4({ orgId, children }: CapxulOrgMemberProps): import("react/jsx-runtime").JSX.Element;
 /**
  * One part serves all four denial idioms the app already uses: disabled with no
  * explanation, disabled plus a native `title`, a whole-surface swap, and
@@ -835,7 +826,7 @@ declare function Standing({ children }: {
   readonly children: (slice: OrgMemberStandingSlice) => ReactNode;
 }): import("react/jsx-runtime").JSX.Element;
 /** The compound shape the app's own design system already uses (`StatusTabs`). */
-declare const CapxulOrgMember: typeof Root$3 & {
+declare const CapxulOrgMember: typeof Root$4 & {
   Can: typeof Can;
   Standing: typeof Standing;
 };
@@ -849,14 +840,14 @@ type DashboardScope = {
 };
 type DashboardAccessPhase = "checking" | "error" | "redirect" | "granted";
 /**
- * Which of the three probes produced the error the screen is showing. The
+ * Which probe produced the error the screen is showing. The
  * error code alone cannot say: a provider failure reads the same whether the
  * session read, the membership list or the lifecycle read raised it, and a
  * consumer that reports a displayed gate error has to keep those apart
  * (#1963 R05-2). It names the SOURCE only; `retry` still re-runs every failed
  * probe, exactly as before.
  */
-type DashboardAccessProbe = "session" | "membership" | "lifecycle";
+type DashboardAccessProbe = "session" | "membership" | "lifecycle" | "authority";
 interface DashboardAccessErrorSlice {
   readonly error: CapxulError;
   /** The probe the surfaced error came from, in the frozen precedence order. */
@@ -871,9 +862,9 @@ interface CapxulDashboardAccessProps {
   readonly scope: DashboardScope;
   readonly children: ReactNode;
 }
-declare function Root$2({ scope, children }: CapxulDashboardAccessProps): import("react/jsx-runtime").JSX.Element;
+declare function Root$3({ scope, children }: CapxulDashboardAccessProps): import("react/jsx-runtime").JSX.Element;
 /** Hands nothing — today's app renders `null` here, exactly as it does now. */
-declare function Checking({ children }: {
+declare function Checking$1({ children }: {
   readonly children?: ReactNode;
 }): import("react/jsx-runtime").JSX.Element | null;
 declare function DashboardError({ children }: {
@@ -892,8 +883,8 @@ declare function Granted({ children }: {
   readonly children?: ReactNode;
 }): import("react/jsx-runtime").JSX.Element | null;
 /** The compound shape the app's own design system already uses (`StatusTabs`). */
-declare const CapxulDashboardAccess: typeof Root$2 & {
-  Checking: typeof Checking;
+declare const CapxulDashboardAccess: typeof Root$3 & {
+  Checking: typeof Checking$1;
   Error: typeof DashboardError;
   Redirect: typeof Redirect;
   Granted: typeof Granted;
@@ -941,7 +932,7 @@ interface CapxulPayrollProps {
   readonly orgId: OrgId | undefined;
   readonly children: ReactNode;
 }
-declare function Root$1({ orgId, children }: CapxulPayrollProps): import("react/jsx-runtime").JSX.Element;
+declare function Root$2({ orgId, children }: CapxulPayrollProps): import("react/jsx-runtime").JSX.Element;
 declare function Summary$1({ children }: {
   readonly children: (slice: PayrollSummarySlice) => ReactNode;
 }): import("react/jsx-runtime").JSX.Element;
@@ -953,7 +944,7 @@ declare function Groups({ children }: {
  * There is NO `.Runs` part (ruling Q6): no shipped region has the right shape
  * for a run list, and a part without a production caller may not ship.
  */
-declare const CapxulPayroll: typeof Root$1 & {
+declare const CapxulPayroll: typeof Root$2 & {
   Summary: typeof Summary$1;
   Groups: typeof Groups;
 };
@@ -975,10 +966,10 @@ interface PayrollRecipientOption {
 //#region src/headless/payroll/use-payroll-run.d.ts
 /**
  * Refusal CODES, never sentences (ADR-0023 R1). `blockedReason` names the FIRST
- * false fact in the fixed order of the contract's seven-row table, so the same
- * composer state always yields the same code.
+ * false fact in the fixed order below, so the same composer state always
+ * yields the same code.
  */
-type CapxulPayrollRunBlockedReason = "signer-not-ready" | "no-source" | "ambiguous-source" | "no-asset" | "no-recipients" | "amount-invalid" | "insufficient-funds";
+type CapxulPayrollRunBlockedReason = "signer-not-ready" | "no-source" | "ambiguous-source" | "no-asset" | "no-recipients" | "amount-invalid" | "insufficient-funds" | "asset-unnamed";
 interface PayrollRunGroupOption {
   readonly id: PayrollGroupId;
   readonly label: string;
@@ -1005,7 +996,7 @@ interface PayrollRunAmountEntry {
   /** True while the value is one we seeded and the employer has not edited. */
   readonly prefilled: boolean;
   /** The treasury asset's currency. Rows stay absent until this value exists. */
-  readonly currency: Money["currency"];
+  readonly currency: string;
 }
 interface PayrollRunAmountsSlice {
   readonly entries: readonly PayrollRunAmountEntry[];
@@ -1058,7 +1049,7 @@ interface CapxulPayrollRunProps {
   readonly onFailed: (error: CapxulError) => void;
   readonly children: ReactNode;
 }
-declare function Root({ orgId, prefill, onRun, onFailed, children }: CapxulPayrollRunProps): import("react/jsx-runtime").JSX.Element;
+declare function Root$1({ orgId, prefill, onRun, onFailed, children }: CapxulPayrollRunProps): import("react/jsx-runtime").JSX.Element;
 declare function Recipients({ children }: {
   readonly children: (slice: PayrollRunRecipientsSlice) => ReactNode;
 }): import("react/jsx-runtime").JSX.Element;
@@ -1075,7 +1066,7 @@ declare function Actions({ children }: {
   readonly children: (slice: PayrollRunActionsSlice) => ReactNode;
 }): import("react/jsx-runtime").JSX.Element;
 /** The compound shape the app's own design system already uses (`StatusTabs`). */
-declare const CapxulPayrollRun: typeof Root & {
+declare const CapxulPayrollRun: typeof Root$1 & {
   Recipients: typeof Recipients;
   Amounts: typeof Amounts;
   Asset: typeof Asset;
@@ -1083,6 +1074,64 @@ declare const CapxulPayrollRun: typeof Root & {
   Actions: typeof Actions;
 };
 //#endregion
+//#region src/headless/client-connection/use-client-connection.d.ts
+interface OtpSlice {
+  readonly email: string;
+  readonly pending: boolean;
+  readonly canResend: boolean;
+  readonly verifyCode: (code: string) => Promise<void>;
+  readonly resend: () => Promise<void>;
+}
+interface ConsentSlice {
+  readonly verifiedEmail: string;
+  readonly clientLabel: string;
+  readonly scopeCodes: readonly string[];
+  readonly purpose: "login" | "signup";
+  readonly setupState: "not_required" | "new" | "resumable";
+  readonly pending: boolean;
+  readonly accept: () => Promise<void>;
+  readonly cancel: () => Promise<void>;
+}
+interface CompleteSlice {
+  readonly outcome: "connected";
+}
+interface FailureSlice {
+  readonly code: string;
+  readonly field?: string;
+  readonly retry: () => Promise<void>;
+  readonly cancel: () => Promise<void>;
+}
+//#endregion
+//#region src/headless/client-connection/client-connection.d.ts
+interface CapxulClientConnectionProps {
+  readonly client: CapxulClient;
+  readonly requestId: string;
+  readonly children: ReactNode;
+}
+declare function Root({ client, requestId, children }: CapxulClientConnectionProps): import("react/jsx-runtime").JSX.Element;
+declare function Checking({ children }: {
+  readonly children: ReactNode;
+}): import("react/jsx-runtime").JSX.Element | null;
+declare function Otp({ children }: {
+  readonly children: (slice: OtpSlice) => ReactNode;
+}): import("react/jsx-runtime").JSX.Element | null;
+declare function Consent({ children }: {
+  readonly children: (slice: ConsentSlice) => ReactNode;
+}): import("react/jsx-runtime").JSX.Element | null;
+declare function Complete({ children }: {
+  readonly children: (slice: CompleteSlice) => ReactNode;
+}): import("react/jsx-runtime").JSX.Element | null;
+declare function Failure({ children }: {
+  readonly children: (slice: FailureSlice) => ReactNode;
+}): import("react/jsx-runtime").JSX.Element | null;
+declare const CapxulClientConnection: typeof Root & {
+  Checking: typeof Checking;
+  Otp: typeof Otp;
+  Consent: typeof Consent;
+  Complete: typeof Complete;
+  Failure: typeof Failure;
+};
+//#endregion
 //#region src/internal/reactivity-keys.d.ts
 declare const capxulKeys: {
   root: readonly ["capxul"];
@@ -1113,4 +1162,4 @@ declare const capxulKeys: {
   payment: (paymentId: string | undefined) => readonly ["capxul", "payments", string];
 };
 //#endregion
-export { type AccountFailure, type AccountProgress, type ActionResult, type ActivityDetailSlice, type ActivityExportSlice, type ActivityFilterValues, type ActivityFiltersSlice, type ActivityLoadMoreSlice, type ActivityReceipt, type ActivityRow, type ActivityRowsSlice, type ActivitySearchSlice, type ActivitySummarySlice, type AuthenticatedState, type AuthenticationSlots, type CanReason, CapxulActivity, type CapxulActivityProps, type CapxulAuth, CapxulAuthenticationController, type CapxulBootstrapState, type CapxulBootstrapStatus, CapxulContacts, type CapxulContactsProps, CapxulDashboardAccess, type CapxulDashboardAccessProps, CapxulOnboardingController, CapxulOrgMember, type CapxulOrgMemberProps, CapxulPayroll, type CapxulPayrollProps, CapxulPayrollRun, type CapxulPayrollRunBlockedReason, type CapxulPayrollRunProps, CapxulProvider, type CapxulProviderProps, type CapxulSend, CapxulSendMoney, type CapxulSendMoneyBlockedReason, type CapxulSendMoneyProps, type Contact, type ContactRelationship, type ContactRow, type ContactsActor, type ContactsAddBlockedReason, type ContactsAddError, type ContactsAddSlice, type ContactsListOptions, type ContactsListSlice, type ContactsRefusal, type ContactsSummarySlice, type ControllerAction, type CreateOrganizationFailure, type CreateOrganizationSubmission, type CsvExport, type DashboardAccessErrorSlice, type DashboardAccessPhase, type DashboardAccessProbe, type DashboardAccessRedirectSlice, type DashboardScope, type Destination, type FaultedState, type HandleAvailability, type ImageUploadInput, type ImageUploadTarget, type InvocationOptions, type NavigationAction, type OnboardingControllerProps, type OnboardingIntent, type OnboardingJourney, type OnboardingJourneyPosition, type OnboardingOrigin, type OnboardingStep, type OrgFailure, type OrgMemberAction, type OrgMemberCanSlice, type OrgMemberStanding, type OrgMemberStandingSlice, type OrgProgress, type OrganizationDetails, type OrganizationDraft, type OtpPendingState, type PayoutDraftChain, type PayoutDraftEntry, type PayrollGroupRow, type PayrollGroupsSlice, type PayrollRecipientOption, type PayrollRunActionsSlice, type PayrollRunAmountEntry, type PayrollRunAmountsSlice, type PayrollRunAssetSlice, type PayrollRunGroupOption, type PayrollRunPrefill, type PayrollRunRecipientsSlice, type PayrollRunStatus, type PayrollRunSummarySlice, type PayrollSummarySlice, type PendingAuthState, type ProfileDetails, type ProfileDraft, type ProfileSlotProps, type ReadyDestination, type RetryAction, type SendActor, type SendMoneyActionsSlice, type SendMoneyAmountSlice, type SendMoneyAssetError, type SendMoneyAssetOption, type SendMoneyAssetSlice, type SendMoneyRecipientSlice, type SendMoneyRecipientStatus, type SendMoneySourceError, type SendMoneySourceOption, type SendMoneySourceSlice, type SendResult, type SentPayment, type SentPayrollRun, type SignedOutState, type Slot, type SummaryWindow, type UseCapxulAccountBalanceOptions, type UseCapxulAccountBalanceReturn, type UseCapxulAccountFundReturn, type UseCapxulCreateCommitmentReturn, type UseCapxulCreateOrgReturn, type UseCapxulHandleAvailabilityReturn, type UseCapxulImageUploadReturn, type UseCapxulInviteMemberInput, type UseCapxulInviteMemberReturn, type UseCapxulOrgMembersOptions, type UseCapxulOrgMembersReturn, type UseCapxulOrgRolesOptions, type UseCapxulOrgRolesReturn, type UseCapxulOrgTreasuryOptions, type UseCapxulOrgTreasuryReturn, type UseCapxulOrgsReturn, type UseCapxulPayReturn, type UseCapxulPaymentReturn, type UseCapxulPaymentsReturn, type UseCapxulProfileReturn, type UseCapxulRedirectPaymentReturn, type UseCapxulUploadImageReturn, acknowledgeOnboardingDestination, activeOnboardingRecovery, capxulKeys, clearOnboardingJourney, currentOnboardingJourneyId, entered, invalidateOnboardingJourneyObservation, isClaimed, isRestoring, loadOnboardingJourney, onboardingJourneyPosition, saveOnboardingJourney, startOnboardingJourney, useCapxul, useCapxulAccountBalance, useCapxulAccountFund, useCapxulActivity, useCapxulActivityDetail, useCapxulAnnotateMovement, useCapxulAuth, useCapxulCancelPayment, useCapxulClaimPayment, useCapxulClientOrNull, useCapxulCreateCommitment, useCapxulCreateOrg, useCapxulDestination, useCapxulHandleAvailability, useCapxulHoldings, useCapxulIdentity, useCapxulImageUpload, useCapxulInviteMember, useCapxulOrgMembers, useCapxulOrgRoles, useCapxulOrgTreasury, useCapxulOrganizationPay, useCapxulOrganizationPayBatch, useCapxulOrgs, useCapxulPay, useCapxulPayment, useCapxulPayments, useCapxulPermission, useCapxulPermissionAssign, useCapxulPermissionChange, useCapxulPermissionCreate, useCapxulPermissionReplace, useCapxulPermissionRevoke, useCapxulPermissions, useCapxulProfile, useCapxulRedirectPayment, useCapxulSend, useCapxulTransitions, useCapxulUploadImage };
+export { type AccountFailure, type AccountProgress, type ActionResult, type ActivityDetailSlice, type ActivityExportSlice, type ActivityFilterValues, type ActivityFiltersSlice, type ActivityLoadMoreSlice, type ActivityReceipt, type ActivityRow, type ActivityRowsSlice, type ActivitySearchSlice, type ActivitySummarySlice, type AuthenticatedState, type AuthenticationSlots, type CanReason, CapxulActivity, type CapxulActivityProps, type CapxulAuth, CapxulAuthenticationController, type CapxulBootstrapState, type CapxulBootstrapStatus, CapxulClientConnection, type CapxulClientConnectionProps, CapxulContacts, type CapxulContactsProps, CapxulDashboardAccess, type CapxulDashboardAccessProps, CapxulOnboardingController, CapxulOrgMember, type CapxulOrgMemberProps, CapxulPayroll, type CapxulPayrollProps, CapxulPayrollRun, type CapxulPayrollRunBlockedReason, type CapxulPayrollRunProps, CapxulProvider, type CapxulProviderProps, type CapxulSend, CapxulSendMoney, type CapxulSendMoneyBlockedReason, type CapxulSendMoneyProps, type CompleteSlice as ClientConnectionCompleteSlice, type ConsentSlice as ClientConnectionConsentSlice, type FailureSlice as ClientConnectionFailureSlice, type OtpSlice as ClientConnectionOtpSlice, type Contact, type ContactRelationship, type ContactRow, type ContactsActor, type ContactsAddBlockedReason, type ContactsAddError, type ContactsAddSlice, type ContactsListOptions, type ContactsListSlice, type ContactsRefusal, type ContactsSummarySlice, type ControllerAction, type CreateOrganizationFailure, type CreateOrganizationSubmission, type CsvExport, type DashboardAccessErrorSlice, type DashboardAccessPhase, type DashboardAccessProbe, type DashboardAccessRedirectSlice, type DashboardScope, type Destination, type FaultedState, type HandleAvailability, type ImageUploadInput, type ImageUploadTarget, type InvocationOptions, type NavigationAction, type OnboardingControllerProps, type OnboardingIntent, type OnboardingJourney, type OnboardingJourneyPosition, type OnboardingOrigin, type OnboardingStep, type OrgFailure, type OrgMemberAction, type OrgMemberCanSlice, type OrgMemberStanding, type OrgMemberStandingSlice, type OrgProgress, type OrganizationDetails, type OrganizationDraft, type OtpPendingState, type PayoutDraftChain, type PayoutDraftEntry, type PayrollGroupRow, type PayrollGroupsSlice, type PayrollRecipientOption, type PayrollRunActionsSlice, type PayrollRunAmountEntry, type PayrollRunAmountsSlice, type PayrollRunAssetSlice, type PayrollRunGroupOption, type PayrollRunPrefill, type PayrollRunRecipientsSlice, type PayrollRunStatus, type PayrollRunSummarySlice, type PayrollSummarySlice, type PendingAuthState, type ProfileDetails, type ProfileDraft, type ProfileSlotProps, type ReadyDestination, type RetryAction, type SendActor, type SendMoneyActionsSlice, type SendMoneyAmountSlice, type SendMoneyAssetError, type SendMoneyAssetOption, type SendMoneyAssetSlice, type SendMoneyRecipientSlice, type SendMoneyRecipientStatus, type SendMoneySourceError, type SendMoneySourceOption, type SendMoneySourceSlice, type SendResult, type SentPayment, type SentPayrollRun, type SignedOutState, type Slot, type SummaryWindow, type UseCapxulAccountBalanceOptions, type UseCapxulAccountBalanceReturn, type UseCapxulAccountFundReturn, type UseCapxulCreateCommitmentReturn, type UseCapxulCreateOrgReturn, type UseCapxulHandleAvailabilityReturn, type UseCapxulImageUploadReturn, type UseCapxulOrgMembersOptions, type UseCapxulOrgMembersReturn, type UseCapxulOrgRolesOptions, type UseCapxulOrgRolesReturn, type UseCapxulOrgTreasuryOptions, type UseCapxulOrgTreasuryReturn, type UseCapxulOrgsReturn, type UseCapxulPayReturn, type UseCapxulPaymentReturn, type UseCapxulPaymentsReturn, type UseCapxulProfileReturn, type UseCapxulRedirectPaymentReturn, type UseCapxulUploadImageReturn, acknowledgeOnboardingDestination, activeOnboardingRecovery, capxulKeys, clearOnboardingJourney, currentOnboardingJourneyId, entered, invalidateOnboardingJourneyObservation, isClaimed, isRestoring, loadOnboardingJourney, onboardingJourneyPosition, saveOnboardingJourney, startOnboardingJourney, useCapxul, useCapxulAccountBalance, useCapxulAccountFund, useCapxulActivity, useCapxulActivityDetail, useCapxulAnnotateMovement, useCapxulAuth, useCapxulCancelPayment, useCapxulClaimPayment, useCapxulClientOrNull, useCapxulCreateCommitment, useCapxulCreateOrg, useCapxulDestination, useCapxulHandleAvailability, useCapxulHoldings, useCapxulIdentity, useCapxulImageUpload, useCapxulOrgMembers, useCapxulOrgRoles, useCapxulOrgTreasury, useCapxulOrganizationPay, useCapxulOrganizationPayBatch, useCapxulOrgs, useCapxulPay, useCapxulPayment, useCapxulPayments, useCapxulPermission, useCapxulPermissionAssign, useCapxulPermissionChange, useCapxulPermissionCreate, useCapxulPermissionReplace, useCapxulPermissionRevoke, useCapxulPermissions, useCapxulProfile, useCapxulRedirectPayment, useCapxulSend, useCapxulTransitions, useCapxulUploadImage };