@capxul/sdk-react 4.20.0-beta.23 → 4.20.0-beta.26

package/dist/{controllers-BMAU2kKH.d.mts → onboarding-controller-DrJiYWfY.d.mts}

@@ -1,6 +1,6 @@
 import { ReactNode } from "react";
-import { CapxulClient, CapxulError, CapxulErrorCode, IdentityDestination, IdentityEvent, IdentityProfileDetails, IdentityState, IdentityTransition, OrgLane, Readiness, StateLabel } from "@capxul/sdk";
-//#region src/identity.d.ts
+import { CapxulClient, CapxulError, CapxulErrorCode, IdentityDestination, IdentityEvent, IdentityProfileDetails, IdentityState, IdentityTransition, OrgLane, Readiness } from "@capxul/sdk";
+//#region src/platform/identity-contract.d.ts
 type Destination = IdentityDestination;
 interface InvocationOptions {
   readonly correlationId?: string;
@@ -36,9 +36,11 @@ interface CreateOrganizationSubmission {
   readonly profileDetails: ProfileDetails;
   readonly organization: OrganizationDetails;
 }
+/** A refused facade call: its code, and the whole error when one was raised. */
 type FacadeFailure = {
   readonly ok: false;
   readonly reason: CapxulErrorCode;
+  readonly error?: CapxulError;
 };
 type CreateOrganizationFailure = FacadeFailure & {
   readonly error: CapxulError;
@@ -65,14 +67,8 @@ interface CapxulAuth {
   readonly retry: (options?: InvocationOptions) => Promise<EmptyResult>;
 }
 type TransitionListener = (record: IdentityTransition, state: IdentityState) => void;
-declare function useCapxulIdentity(): IdentityState;
-declare function useCapxulSend(): CapxulSend;
-declare function useCapxulAuth(): CapxulAuth;
-declare function useCapxulDestination(): Destination | null;
-declare function useCapxulTransitions(listener: TransitionListener): void;
-declare const entered: (record: IdentityTransition, target: StateLabel) => boolean;
 //#endregion
-//#region src/controllers.d.ts
+//#region src/access/controllers.d.ts
 type Slot<P> = (props: P) => ReactNode;
 type ActionResult = {
   readonly ok: true;
@@ -148,6 +144,8 @@ type ProfileSlotProps = {
   readonly continueOrganization: (profile: ProfileDetails) => void;
   readonly cancel: NavigationAction;
 };
+//#endregion
+//#region src/access/onboarding-controller.d.ts
 interface OnboardingControllerProps {
   readonly intent: "personal" | "organization" | null;
   readonly organizationProfile: ProfileDetails | null;
@@ -202,6 +200,6 @@ interface OnboardingControllerProps {
     }>;
   };
 }
-declare function CapxulOnboardingController(props: OnboardingControllerProps): ReactNode;
+declare function CapxulOnboardingController(props: OnboardingControllerProps): import("react").ReactNode;
 //#endregion
-export { entered as A, CreateOrganizationFailure as C, OrganizationDetails as D, InvocationOptions as E, useCapxulTransitions as F, useCapxulDestination as M, useCapxulIdentity as N, ProfileDetails as O, useCapxulSend as P, CapxulSend as S, Destination as T, ReadyDestination as _, AuthenticationSlots as a, Slot as b, ControllerAction as c, OnboardingControllerProps as d, OrgFailure as f, ProfileSlotProps as g, PendingAuthState as h, AuthenticatedState as i, useCapxulAuth as j, SendResult as k, FaultedState as l, OtpPendingState as m, AccountProgress as n, CapxulAuthenticationController as o, OrgProgress as p, ActionResult as r, CapxulOnboardingController as s, AccountFailure as t, NavigationAction as u, RetryAction as v, CreateOrganizationSubmission as w, CapxulAuth as x, SignedOutState as y };
+export { TransitionListener as A, CreateOrganizationFailure as C, OrganizationDetails as D, InvocationOptions as E, ProfileDetails as O, CapxulSend as S, Destination as T, ReadyDestination as _, ActionResult as a, Slot as b, CapxulAuthenticationController as c, NavigationAction as d, OrgFailure as f, ProfileSlotProps as g, PendingAuthState as h, AccountProgress as i, SendResult as k, ControllerAction as l, OtpPendingState as m, OnboardingControllerProps as n, AuthenticatedState as o, OrgProgress as p, AccountFailure as r, AuthenticationSlots as s, CapxulOnboardingController as t, FaultedState as u, RetryAction as v, CreateOrganizationSubmission as w, CapxulAuth as x, SignedOutState as y };

package/dist/{controllers-BV3e8WD3.mjs → onboarding-controller-ZlvveARR.mjs}

@@ -1,8 +1,8 @@
 import { createContext, useCallback, useContext, useEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { QueryClient, QueryClientProvider, useQueryClient } from "@tanstack/react-query";
-import { CapxulError, createCapxulClient, isCapxulError, resolveIdentityDestination, toCountryCode, toHandle } from "@capxul/sdk";
+import { CapxulError, createCapxulClient, isCapxulError, resolveIdentityDestination, toCountryCode, toHandle, toOrgId } from "@capxul/sdk";
 import { jsx } from "react/jsx-runtime";
-//#region src/internal/capxul-bootstrap-context.tsx
+//#region src/platform/bootstrap-context.tsx
 const CapxulBootstrapContext = createContext(null);
 function CapxulBootstrapProvider({ value, children }) {
 	return /* @__PURE__ */ jsx(CapxulBootstrapContext.Provider, {
@@ -16,7 +16,7 @@ function useCapxul() {
 	return state;
 }
 //#endregion
-//#region src/internal/capxul-client-context.tsx
+//#region src/platform/client-context.tsx
 const MISSING_CAPXUL_CLIENT_PROVIDER = Symbol("MISSING_CAPXUL_CLIENT_PROVIDER");
 const CapxulClientContext = createContext(MISSING_CAPXUL_CLIENT_PROVIDER);
 function CapxulClientProvider({ client, children }) {
@@ -36,7 +36,14 @@ function useCapxulClientOrNull() {
 	return client;
 }
 //#endregion
-//#region src/internal/reactivity-keys.ts
+//#region src/platform/query-keys.ts
+/**
+* An Organization id a consumer passed as a plain string (often a URL
+* parameter), as a key segment. An absent or empty id names no Organization.
+*/
+function orgKeySegment(orgId) {
+	return orgId === void 0 || orgId === "" ? void 0 : toOrgId(orgId);
+}
 /**
 * The account a read is answered FOR, as a key segment (#2007 R19).
 *
@@ -144,7 +151,7 @@ const capxulKeys = {
 		"terms"
 	],
 	activity: ["capxul", "activity"],
-	activityDetail: (reference, actor = void 0) => [
+	activityDetail: (reference, actor) => [
 		"capxul",
 		"activity",
 		actor ?? "self",
@@ -170,7 +177,7 @@ const capxulKeys = {
 	]
 };
 //#endregion
-//#region src/internal/invocation-controls.ts
+//#region src/platform/invocation-controls.ts
 /**
 * Keep only the five public option fields, and only when they hold the right
 * kind of value. A named action verb takes its attempt as an optional FIRST
@@ -209,71 +216,23 @@ function toInvocationControls(options) {
 	};
 }
 //#endregion
-//#region src/identity.tsx
-const MISSING_IDENTITY_PROVIDER = Symbol("MISSING_IDENTITY_PROVIDER");
-const IdentityContext = createContext(MISSING_IDENTITY_PROVIDER);
+//#region src/platform/identity-lanes.ts
 const failure = (result) => result.ok ? null : {
 	ok: false,
 	reason: result.refused
 };
-async function guarded(runtime, verb, options, run) {
-	const invocation = toInvocationControls(options);
-	try {
-		return await (runtime.runFacade?.(verb, invocation, run) ?? run(invocation));
-	} catch {
-		return {
-			ok: false,
-			reason: "UNKNOWN"
-		};
-	}
-}
-function organizationFailure(reason, state) {
-	const stateFailure = state.phase === "faulted" ? state.failure : state.phase === "authenticated" && state.account.at === "failed" ? state.account.failure : state.phase === "authenticated" && state.account.at === "claimed" ? state.account.org?.failure : void 0;
-	if (stateFailure?.code === reason) return {
-		ok: false,
-		reason,
-		error: stateFailure.error ?? new CapxulError(stateFailure.code === "WORK_DIED" ? "UNKNOWN" : stateFailure.code, stateFailure.message, {
-			...stateFailure.mode === void 0 ? {} : { details: { failure_mode: stateFailure.mode } },
-			layer: "identity"
-		})
-	};
-	return {
-		ok: false,
-		reason,
-		error: new CapxulError(reason === "WORK_DIED" ? "UNKNOWN" : reason, reason === "INVALID_INPUT" ? "Organization details are invalid." : "Organization creation failed.", { layer: "identity" })
-	};
-}
-function normalizeOrganization(organization) {
-	const name = typeof organization.name === "string" ? organization.name.trim() : "";
-	const handle = typeof organization.handle === "string" ? organization.handle.trim().toLowerCase() : "";
-	if (name.length === 0) return null;
-	if (organization.bio !== void 0 && typeof organization.bio !== "string") return null;
-	if (organization.size !== void 0 && typeof organization.size !== "string") return null;
-	if (organization.logoStorageId !== void 0 && (typeof organization.logoStorageId !== "string" || organization.logoStorageId.length === 0)) return null;
-	try {
-		return {
-			name,
-			handle: toHandle(handle),
-			country: toCountryCode(organization.country),
-			...organization.bio === void 0 ? {} : { bio: organization.bio },
-			...organization.size === void 0 ? {} : { size: organization.size },
-			...organization.logoStorageId === void 0 ? {} : { logoStorageId: organization.logoStorageId }
-		};
-	} catch {
-		return null;
-	}
-}
-/** The Organization id when its lane is already running or finished, else null. */
-const runningOrganization = (state) => {
-	if (state.phase !== "authenticated" || state.account.at !== "claimed") return null;
-	return state.account.org?.orgId ?? null;
-};
 /** A superseded session read waits at most this long for the winning read. */
 const SESSION_SETTLE_LIMIT_MS = 3e4;
 const accountInFlight = (state) => state.phase === "authenticated" && (state.account.at === "deriving" || state.account.at === "claiming");
-function createAuth(client, clearAuthenticatedQueries) {
-	const runtime = client._internal.identity;
-	const settledSession = (invocation) => new Promise((resolve) => {
+/**
+* The session slot keeps the latest ReadSession only: a second reader
+* interrupts the first and the machine refuses the first with SUPERSEDED.
+* Two onboarding callers read at once after a reload (the controller's
+* resume and the recovery submit), so the loser must wait for the winner's
+* read to land and then continue on the shared state, not fail.
+*/
+function settledSession(runtime, invocation) {
+	return new Promise((resolve) => {
 		let done = false;
 		let stop = null;
 		let timer = null;
@@ -309,20 +268,29 @@ function createAuth(client, clearAuthenticatedQueries) {
 		stop = unsubscribe;
 		timer = setTimeout(() => finish({
 			ok: false,
-			reason: "UNKNOWN"
+			reason: "UNKNOWN",
+			error: new CapxulError("UNKNOWN", "The session did not settle in time.", {
+				mode: "timeout",
+				layer: "identity",
+				details: { limitMs: SESSION_SETTLE_LIMIT_MS }
+			})
 		}), SESSION_SETTLE_LIMIT_MS);
 	});
-	const read = async (invocation) => {
-		const result = await runtime.send({ _tag: "ReadSession" }, invocation);
-		const refused = failure(result);
-		if (refused === null) return { ok: true };
-		return refused.reason === "SUPERSEDED" ? settledSession(invocation) : refused;
-	};
-	const ensureAccount = async (invocation) => {
-		const result = await runtime.send({ _tag: "EnsureAccount" }, invocation);
-		return failure(result) ?? { ok: true };
-	};
-	const settledAccount = (invocation) => new Promise((resolve) => {
+}
+/** Read the session; a superseded read waits for the winning one. */
+async function readSession(runtime, invocation) {
+	const result = await runtime.send({ _tag: "ReadSession" }, invocation);
+	const refused = failure(result);
+	if (refused === null) return { ok: true };
+	return refused.reason === "SUPERSEDED" ? settledSession(runtime, invocation) : refused;
+}
+/**
+* The account lane accepts no account event while a derivation or claim is
+* landing. A person who submits the Organization before their own Safe claim
+* settles must wait for it, not be refused with WRONG_STATE.
+*/
+function settledAccount(runtime, invocation) {
+	return new Promise((resolve) => {
 		let done = false;
 		let stop = null;
 		const onAbort = () => finish({
@@ -351,44 +319,110 @@ function createAuth(client, clearAuthenticatedQueries) {
 		stop = unsubscribe;
 		if (!accountInFlight(runtime.snapshot())) finish({ ok: true });
 	});
-	const reachClaimed = async (invocation) => {
-		let state = runtime.snapshot();
-		if (accountInFlight(state)) {
-			const settled = await settledAccount(invocation);
-			if (!settled.ok) return settled;
-			state = runtime.snapshot();
-		}
-		if (state.phase !== "authenticated" || state.account.at === "unknown") {
-			const result = await runtime.send({ _tag: "EnsureAccount" }, invocation);
-			const refused = failure(result);
-			if (refused !== null) return refused;
-			state = result.state;
-		}
+}
+/** Drive the person's own Account to claimed, waiting out a landing derivation or claim. */
+async function reachClaimed(runtime, invocation) {
+	let state = runtime.snapshot();
+	if (accountInFlight(state)) {
+		const settled = await settledAccount(runtime, invocation);
+		if (!settled.ok) return settled;
+		state = runtime.snapshot();
+	}
+	if (state.phase !== "authenticated" || state.account.at === "unknown") {
+		const result = await runtime.send({ _tag: "EnsureAccount" }, invocation);
+		const refused = failure(result);
+		if (refused !== null) return refused;
+		state = result.state;
+	}
+	if (state.phase !== "authenticated") return {
+		ok: false,
+		reason: "WRONG_STATE"
+	};
+	if (state.account.at === "claimed") return { ok: true };
+	if (accountInFlight(state)) {
+		const settled = await settledAccount(runtime, invocation);
+		if (!settled.ok) return settled;
+		state = runtime.snapshot();
 		if (state.phase !== "authenticated") return {
 			ok: false,
 			reason: "WRONG_STATE"
 		};
 		if (state.account.at === "claimed") return { ok: true };
-		if (accountInFlight(state)) {
-			const settled = await settledAccount(invocation);
-			if (!settled.ok) return settled;
-			state = runtime.snapshot();
-			if (state.phase !== "authenticated") return {
-				ok: false,
-				reason: "WRONG_STATE"
-			};
-			if (state.account.at === "claimed") return { ok: true };
-		}
-		const event = state.account.at === "failed" ? { _tag: "RetryAccount" } : state.account.at === "counterfactual" ? { _tag: "ClaimAccount" } : { _tag: "EnsureAccount" };
-		const result = await runtime.send(event, invocation);
-		const refused = failure(result);
-		if (refused !== null) return refused;
-		const next = result.state;
-		return next.phase === "authenticated" && next.account.at === "claimed" ? { ok: true } : {
+	}
+	const event = state.account.at === "failed" ? { _tag: "RetryAccount" } : state.account.at === "counterfactual" ? { _tag: "ClaimAccount" } : { _tag: "EnsureAccount" };
+	const result = await runtime.send(event, invocation);
+	const refused = failure(result);
+	if (refused !== null) return refused;
+	const next = result.state;
+	return next.phase === "authenticated" && next.account.at === "claimed" ? { ok: true } : {
+		ok: false,
+		reason: "WRONG_STATE"
+	};
+}
+//#endregion
+//#region src/platform/organization-submission.ts
+function organizationFailure(reason, state) {
+	const stateFailure = state.phase === "faulted" ? state.failure : state.phase === "authenticated" && state.account.at === "failed" ? state.account.failure : state.phase === "authenticated" && state.account.at === "claimed" ? state.account.org?.failure : void 0;
+	if (stateFailure?.code === reason) return {
+		ok: false,
+		reason,
+		error: stateFailure.error ?? new CapxulError(stateFailure.code === "WORK_DIED" ? "UNKNOWN" : stateFailure.code, stateFailure.message, {
+			...stateFailure.mode === void 0 ? {} : { details: { failure_mode: stateFailure.mode } },
+			layer: "identity"
+		})
+	};
+	return {
+		ok: false,
+		reason,
+		error: new CapxulError(reason === "WORK_DIED" ? "UNKNOWN" : reason, reason === "INVALID_INPUT" ? "Organization details are invalid." : "Organization creation failed.", { layer: "identity" })
+	};
+}
+function normalizeOrganization(organization) {
+	const name = typeof organization.name === "string" ? organization.name.trim() : "";
+	const handle = typeof organization.handle === "string" ? organization.handle.trim().toLowerCase() : "";
+	if (name.length === 0) return null;
+	if (organization.bio !== void 0 && typeof organization.bio !== "string") return null;
+	if (organization.size !== void 0 && typeof organization.size !== "string") return null;
+	if (organization.logoStorageId !== void 0 && (typeof organization.logoStorageId !== "string" || organization.logoStorageId.length === 0)) return null;
+	try {
+		return {
+			name,
+			handle: toHandle(handle),
+			country: toCountryCode(organization.country),
+			...organization.bio === void 0 ? {} : { bio: organization.bio },
+			...organization.size === void 0 ? {} : { size: organization.size },
+			...organization.logoStorageId === void 0 ? {} : { logoStorageId: organization.logoStorageId }
+		};
+	} catch {
+		return null;
+	}
+}
+/** The Organization id when its lane is already running or finished, else null. */
+const runningOrganization = (state) => {
+	if (state.phase !== "authenticated" || state.account.at !== "claimed") return null;
+	return state.account.org?.orgId ?? null;
+};
+//#endregion
+//#region src/platform/identity-auth.ts
+async function guarded(runtime, verb, options, run) {
+	const invocation = toInvocationControls(options);
+	try {
+		return await (runtime.runFacade?.(verb, invocation, run) ?? run(invocation));
+	} catch (cause) {
+		const error = isCapxulError(cause) ? cause : new CapxulError("UNKNOWN", "The identity request failed unexpectedly.", {
+			cause,
+			layer: "identity"
+		});
+		return {
 			ok: false,
-			reason: "WRONG_STATE"
+			reason: error.code,
+			error
 		};
-	};
+	}
+}
+/** The auth verbs behind `useCapxulAuth`, each run as one guarded facade call. */
+function createAuth(client, clearAuthenticatedQueries) {
+	const runtime = client._internal.identity;
 	const completeProfile = async (profile, invocation) => {
 		const result = await runtime.completeProfile(profile, invocation);
 		return result.ok ? { ok: true } : result;
@@ -399,14 +433,14 @@ function createAuth(client, clearAuthenticatedQueries) {
 			ok: false,
 			reason: "INVALID_INPUT"
 		};
-		const refreshed = await read(invocation);
+		const refreshed = await readSession(runtime, invocation);
 		if (!refreshed.ok) return refreshed;
 		const current = runtime.snapshot();
 		if (current.phase !== "authenticated" || !current.profileComplete) {
 			const completed = await runtime.completeProfile(submission.profileDetails, invocation);
 			if (!completed.ok) return completed;
 		}
-		const claimed = await reachClaimed(invocation);
+		const claimed = await reachClaimed(runtime, invocation);
 		return claimed.ok ? {
 			ok: true,
 			organization
@@ -476,9 +510,9 @@ function createAuth(client, clearAuthenticatedQueries) {
 				ok: false,
 				reason: completed.reason
 			};
-			const refreshed = await read(invocation);
+			const refreshed = await readSession(runtime, invocation);
 			if (!refreshed.ok) return refreshed;
-			return ensureAccount(invocation);
+			return failure(await runtime.send({ _tag: "EnsureAccount" }, invocation)) ?? { ok: true };
 		}),
 		createOrganization: (submission, options) => guarded(runtime, "createOrganization", options, async (invocation) => {
 			const current = runtime.snapshot();
@@ -526,7 +560,7 @@ function createAuth(client, clearAuthenticatedQueries) {
 			const state = runtime.snapshot();
 			const orgId = runningOrganization(state);
 			if (orgId !== null) {
-				const scoped = client.org(orgId);
+				const scoped = client.org(toOrgId(orgId));
 				const current = await scoped.setup.get(invocation);
 				if (!current.ok) return {
 					ok: false,
@@ -550,6 +584,10 @@ function createAuth(client, clearAuthenticatedQueries) {
 		})
 	};
 }
+//#endregion
+//#region src/platform/identity.tsx
+const MISSING_IDENTITY_PROVIDER = Symbol("MISSING_IDENTITY_PROVIDER");
+const IdentityContext = createContext(MISSING_IDENTITY_PROVIDER);
 function CapxulIdentityProvider({ client, children }) {
 	const queryClient = useQueryClient();
 	const runtime = client?._internal.identity ?? null;
@@ -667,7 +705,7 @@ function useCapxulTransitions(listener) {
 }
 const entered = (record, target) => record.outcome === "applied" && record.from !== target && record.to === target;
 //#endregion
-//#region src/provider.tsx
+//#region src/platform/provider.tsx
 /**
 * Transient failure codes worth a retry — network blips, rate limits, and
 * upstream provider/unknown hiccups that a later attempt may clear. Everything
@@ -819,7 +857,80 @@ function CapxulProvider(props) {
 	});
 }
 //#endregion
-//#region src/controllers.tsx
+//#region ../protocol/src/errors/failure-modes.ts
+/**
+* Why an operation failed — the one flat vocabulary. The first four are the
+* auth/provider diagnoses that predate this file. The rest name the chain
+* path. `FailureMode` is derived from this list so a runtime membership check
+* (the SDK's `$exception` projection, the observability schema) and the type
+* can never drift apart.
+*/
+const FAILURE_MODES = [
+	"auth-origin-mismatch",
+	"stale-openfort-cache",
+	"app-env-allowlist",
+	"no-secure-context",
+	"signer-not-ready",
+	"rate-limited",
+	"timeout",
+	"upstream-down",
+	"revert",
+	"insufficient-balance",
+	"insufficient-allowance",
+	"rejected",
+	"unauthorized",
+	"forbidden",
+	"bad-request",
+	"method-unsupported",
+	"unknown"
+];
+function isFailureMode(value) {
+	return typeof value === "string" && FAILURE_MODES.includes(value);
+}
+//#endregion
+//#region ../protocol/src/errors/model.ts
+/**
+* `Code` narrows to the literal a factory passes, so `Errors.invalidInput(...)`
+* is a `CapxulError<"INVALID_INPUT">`. An operation's error channel is then the
+* union of the codes it can actually produce.
+*/
+var CapxulError$1 = class extends Error {
+	code;
+	details;
+	correlationId;
+	layer;
+	/** The one-word cause (`FailureMode`). `chain.mode` when a chain cause is set. */
+	mode;
+	/** The structured chain-path cause. Never rewritten by a later layer. */
+	chain;
+	constructor(code, message, options = {}) {
+		super(message, "cause" in options ? { cause: options.cause } : void 0);
+		this.name = "CapxulError";
+		this.code = code;
+		if (options.details !== void 0) this.details = options.details;
+		if (options.correlationId !== void 0) this.correlationId = options.correlationId;
+		if (options.layer !== void 0) this.layer = options.layer;
+		const legacy = options.details?.failure_mode;
+		const mode = options.chain?.mode ?? (isFailureMode(options.mode) ? options.mode : void 0) ?? (isFailureMode(legacy) ? legacy : void 0);
+		if (mode !== void 0) this.mode = mode;
+		if (options.chain !== void 0) this.chain = options.chain;
+	}
+};
+//#endregion
+//#region ../protocol/src/primitives/absurd.ts
+/**
+* The default branch of an exhaustive switch: `default: return absurd(value)`.
+* The compiler proves it unreachable; if a value the types rule out arrives at
+* run time anyway, it fails as a named defect instead of falling through.
+*/
+function absurd(value) {
+	throw new CapxulError$1("UNKNOWN", "An exhaustive switch received a value its type rules out.", { details: {
+		defect: "unreachable_case",
+		value: String(value)
+	} });
+}
+//#endregion
+//#region src/access/controllers.tsx
 const action = async (send, event) => {
 	const result = await send(event);
 	return result.ok ? { ok: true } : {
@@ -858,11 +969,14 @@ function CapxulAuthenticationController({ slots }) {
 			state,
 			destination
 		});
+		default: return absurd(state);
 	}
 }
 function ready(destination) {
 	return destination?.to === "dashboardPersonal" || destination?.to === "dashboardOrganization";
 }
+//#endregion
+//#region src/access/onboarding-controller.tsx
 function CapxulOnboardingController(props) {
 	const state = useCapxulIdentity();
 	const destination = useCapxulDestination();
@@ -981,4 +1095,4 @@ function organizationForm(props, state, auth, submitted) {
 	});
 }
 //#endregion
-export { useCapxul as _, useCapxulAuth as a, useCapxulIdentityOrNull as c, toInvocationControls as d, toInvocationOptions as f, useCapxulClientOrNull as g, capxulKeys as h, entered as i, useCapxulSend as l, actingAccount as m, CapxulOnboardingController as n, useCapxulDestination as o, accountKey as p, CapxulProvider as r, useCapxulIdentity as s, CapxulAuthenticationController as t, useCapxulTransitions as u };
+export { orgKeySegment as _, entered as a, useCapxulIdentity as c, useCapxulTransitions as d, toInvocationControls as f, capxulKeys as g, actingAccount as h, CapxulProvider as i, useCapxulIdentityOrNull as l, accountKey as m, CapxulAuthenticationController as n, useCapxulAuth as o, toInvocationOptions as p, absurd as r, useCapxulDestination as s, CapxulOnboardingController as t, useCapxulSend as u, useCapxulClientOrNull as v, useCapxul as y };

package/dist/testing/index.d.mts

@@ -1,12 +1,12 @@
-import { a as AuthenticationSlots, d as OnboardingControllerProps } from "../controllers-BMAU2kKH.mjs";
+import { n as OnboardingControllerProps, s as AuthenticationSlots } from "../onboarding-controller-DrJiYWfY.mjs";
 import * as React from "react";
 import { ReactNode } from "react";
 import { CapxulTestClient, CapxulTestClock, CapxulTestObservation, CreateCapxulTestClientOptions, SeedTestIdentityInput, createCapxulTestClient } from "@capxul/sdk/testing";
 //#region src/testing/index.d.ts
-interface CreateCapxulReactTestHarnessOptions extends CreateCapxulTestClientOptions {
+export interface CreateCapxulReactTestHarnessOptions extends CreateCapxulTestClientOptions {
   readonly testing?: CapxulTestClient;
 }
-interface CapxulReactTestHarness {
+export interface CapxulReactTestHarness {
   readonly testing: CapxulTestClient;
   readonly client: CapxulTestClient["client"];
   readonly provider: (children: ReactNode) => React.JSX.Element;
@@ -14,6 +14,6 @@ interface CapxulReactTestHarness {
   readonly onboarding: (props: OnboardingControllerProps) => React.JSX.Element;
 }
 /** Build renderer-neutral React test elements over the real SDK testing client. */
-declare function createCapxulReactTestHarness(options?: CreateCapxulReactTestHarnessOptions): CapxulReactTestHarness;
+export declare function createCapxulReactTestHarness(options?: CreateCapxulReactTestHarnessOptions): CapxulReactTestHarness;
 //#endregion
-export { CapxulReactTestHarness, type CapxulTestClient, type CapxulTestClock, type CapxulTestObservation, CreateCapxulReactTestHarnessOptions, type CreateCapxulTestClientOptions, type SeedTestIdentityInput, createCapxulReactTestHarness, createCapxulTestClient };
+export { type CapxulTestClient, type CapxulTestClock, type CapxulTestObservation, type CreateCapxulTestClientOptions, type SeedTestIdentityInput, createCapxulTestClient };

package/dist/testing/index.mjs

@@ -1,4 +1,4 @@
-import { n as CapxulOnboardingController, r as CapxulProvider, t as CapxulAuthenticationController } from "../controllers-BV3e8WD3.mjs";
+import { i as CapxulProvider, n as CapxulAuthenticationController, t as CapxulOnboardingController } from "../onboarding-controller-ZlvveARR.mjs";
 import "react";
 import { jsx } from "react/jsx-runtime";
 import { createCapxulTestClient } from "@capxul/sdk/testing";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/sdk-react",
-  "version": "4.20.0-beta.23",
+  "version": "4.20.0-beta.26",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Xelmar-tech/infrastructure.git",
@@ -12,6 +12,36 @@
     "README.md"
   ],
   "type": "module",
+  "imports": {
+    "#access": "./src/access/index.ts",
+    "#access/client-connection": "./src/access/client-connection.tsx",
+    "#access/controllers": "./src/access/controllers.tsx",
+    "#access/dashboard-access": "./src/access/dashboard-access.tsx",
+    "#access/onboarding-controller": "./src/access/onboarding-controller.tsx",
+    "#accounts": "./src/accounts/index.ts",
+    "#activity": "./src/activity/index.ts",
+    "#activity/activity": "./src/activity/activity.tsx",
+    "#media": "./src/media/index.ts",
+    "#organizations": "./src/organizations/index.ts",
+    "#organizations/org-member": "./src/organizations/org-member.tsx",
+    "#package.json": "./package.json",
+    "#parties": "./src/parties/index.ts",
+    "#parties/contacts": "./src/parties/contacts.tsx",
+    "#payments": "./src/payments/index.ts",
+    "#payments/send-money": "./src/payments/send-money.tsx",
+    "#payroll": "./src/payroll/index.ts",
+    "#payroll/payroll": "./src/payroll/payroll.tsx",
+    "#payroll/payroll-run": "./src/payroll/payroll-run.tsx",
+    "#permissions": "./src/permissions/index.ts",
+    "#platform/bootstrap-context": "./src/platform/bootstrap-context.tsx",
+    "#platform/client-context": "./src/platform/client-context.tsx",
+    "#platform/identity": "./src/platform/identity.tsx",
+    "#platform/provider": "./src/platform/provider.tsx",
+    "#platform/tests/render-hook-with-capxul": "./src/platform/tests/render-hook-with-capxul.tsx",
+    "#profiles": "./src/profiles/index.ts",
+    "#testing": "./src/testing/index.tsx",
+    "#*": "./src/*.ts"
+  },
   "exports": {
     ".": {
       "types": "./dist/index.d.mts",
@@ -26,26 +56,26 @@
     "access": "public"
   },
   "dependencies": {
-    "@capxul/sdk": "4.20.0-beta.23"
+    "@capxul/sdk": "4.20.0-beta.26"
   },
   "devDependencies": {
     "@tanstack/react-query": "^5.66.9",
     "@testing-library/react": "^16.3.2",
+    "@total-typescript/shoehorn": "0.1.2",
     "@types/jsdom": "^28.0.3",
     "@types/react": "^19.2.15",
     "@typescript/native": "npm:typescript@7.0.2",
-    "@vitest/coverage-v8": "4.1.11",
+    "@vitest/coverage-v8": "5.0.1",
     "ink": "^7.0.3",
     "ink-testing-library": "^4.0.0",
     "jsdom": "^29.1.1",
     "react": "^19.2.6",
     "react-dom": "^19.2.6",
-    "vite": "npm:@voidzero-dev/vite-plus-core@0.3.0",
-    "vite-plus": "0.3.0",
-    "vitest": "4.1.11",
-    "@capxul/config": "0.4.0-beta.1",
-    "@capxul/errors": "0.3.0",
-    "@capxul/types": "0.3.0",
+    "typescript": "npm:@typescript/typescript6@6.0.2",
+    "vite": "npm:@voidzero-dev/vite-plus-core@1.0.0",
+    "vite-plus": "1.0.0",
+    "vitest": "5.0.1",
+    "@capxul/protocol": "0.2.0-beta.0",
     "@capxul/typescript-config": "0.0.0"
   },
   "peerDependencies": {
@@ -57,7 +87,7 @@
   },
   "scripts": {
     "check-types": "vp exec ../../node_modules/@typescript/native/bin/tsc -p tsconfig.json --noEmit",
-    "lint": "vp lint -c ../../.oxlintrc.json . --deny-warnings",
+    "lint": "vp lint -c ../../.oxlintrc.json .",
     "build": "vp pack",
     "_vp-tasks-allowed": "vp-allowed: `test` + `test:coverage` are vp tasks in vite.config.ts so vitest self-writes don't bust cache (#205)."
   }