@capxul/sdk 0.1.0-alpha.9 → 0.2.0-alpha.4

package/dist/{client-ChZrdf3R.d.ts → client-CbUeJoM9.d.ts}

@@ -1,9 +1,8 @@
 import { Account as Account$1 } from 'viem';
-import * as xstate from 'xstate';
 import { AnyStateMachine } from 'xstate';
-import { A as AccountId, S as SafeId, c as KycProfileId, b as ExternalAccountId, f as SubAccountId, d as OrganizationId, a as ApiKeyId, X as TimestampIso, U as Username, E as Email, D as DocumentId, O as OperationId, P as PaymentId, g as TransferId, k as WithdrawalId, W as WebhookEndpointId, j as WebhookEventId, M as MemberId, K as KybProfileId, V as VirtualAccountId, i as VirtualCardId } from './next-action-DkrwXYay.js';
-import { d as CapxulResult, C as CapxulError$1 } from './errors-QHD5Tlok.js';
-import { A as Account, U as UserIdentifier, a as AccountLookupResult, S as Safe, i as KycProfile, E as ExternalAccount, L as List, v as SubAccount, B as BalanceLedgerEntry, b as ApiKey, a0 as CreateApiKeyRequest, a1 as CreateDocumentRequest, D as Document, O as Operation, l as OperationStatus, k as Money, C as CreatePaymentResult, o as Payment, F as TransferEndpoint, f as CreateTransferResult, y as Transfer, g as CreateWithdrawalResult, _ as Withdrawal, a2 as CreateWebhookEndpointRequest, Y as WebhookEndpoint, Z as WebhookEvent, n as Organization, J as Treasury, M as Member, K as KybProfile, a3 as CreateVirtualAccountRequest, V as VirtualAccount, a4 as CreateVirtualCardRequest, Q as VirtualCard } from './types-PM4AQRLP.js';
+import { A as AccountId, S as SafeId, c as KycProfileId, b as ExternalAccountId, f as SubAccountId, d as OrganizationId, a as ApiKeyId, X as TimestampIso, U as Username, E as Email, D as DocumentId, O as OperationId, P as PaymentId, g as TransferId, k as WithdrawalId, W as WebhookEndpointId, j as WebhookEventId, M as MemberId, V as VirtualAccountId, i as VirtualCardId } from './next-action-CTGl8wpy.js';
+import { d as CapxulResult, C as CapxulError } from './errors-CwhCWGxm.js';
+import { A as Account, X as UserIdentifier, a as AccountLookupResult, S as Safe, k as KycProfile, E as ExternalAccount, L as List, F as SubAccount, B as BalanceLedgerEntry, b as ApiKey, a5 as CreateApiKeyRequest, a6 as CreateDocumentRequest, D as Document, O as Operation, q as OperationStatus, p as Money, C as CreatePaymentResult, t as Payment, Q as TransferEndpoint, f as CreateTransferResult, J as Transfer, g as CreateWithdrawalResult, a3 as Withdrawal, a7 as CreateWebhookEndpointRequest, a1 as WebhookEndpoint, a2 as WebhookEvent, s as Organization, W as Treasury, o as MembershipStatus, M as Member, n as MemberInviteResponse, a8 as CreateVirtualAccountRequest, Y as VirtualAccount, a9 as CreateVirtualCardRequest, _ as VirtualCard } from './types-BD4VAQb5.js';
 
 /**
  * Accounts domain — individual user accounts per sdk-surface.md §1a.
@@ -22,7 +21,6 @@ type AccountUpdateInput = Partial<{
 type LocalPrivateKeySignerProvider = {
     readonly kind: "local-private-key";
     readonly signerAddress: string;
-    readonly safeAddress: string;
 };
 type AccountProvisionPersonalInput = {
     readonly displayName?: string;
@@ -40,6 +38,7 @@ type AccountListInput = {
 type AccountCreateSubAccountInput = {
     readonly accountId: AccountId;
     readonly name: string;
+    readonly purpose?: string;
 };
 type AccountCreateExternalAccountInput = {
     readonly accountId: AccountId;
@@ -59,6 +58,7 @@ type UpdateCodes$1 = "NOT_AUTHENTICATED" | "PERMISSION_DENIED" | "NOT_FOUND" | "
 type ListCodes$b = "NOT_AUTHENTICATED" | "PERMISSION_DENIED" | "INVALID_INPUT";
 type SafeRetrieveCodes$1 = "NOT_AUTHENTICATED" | "PERMISSION_DENIED" | "NOT_FOUND" | "SAFE_NOT_READY";
 type RemoveCodes$5 = "NOT_AUTHENTICATED" | "PERMISSION_DENIED" | "NOT_FOUND";
+type SubAccountRemoveCodes$1 = "NOT_AUTHENTICATED" | "PERMISSION_DENIED" | "NOT_FOUND" | "INVALID_INPUT";
 type AccountSafesClient = {
     readonly retrieve: (safeId: SafeId) => Promise<CapxulResult<Safe, SafeRetrieveCodes$1>>;
 };
@@ -75,12 +75,12 @@ type AccountExternalAccountsClient = {
     readonly remove: (externalAccountId: ExternalAccountId) => Promise<CapxulResult<void, RemoveCodes$5>>;
 };
 type AccountSubAccountsClient = {
-    readonly create: (input: AccountCreateSubAccountInput) => Promise<CapxulResult<SubAccount, UpdateCodes$1>>;
+    readonly create: (input: AccountCreateSubAccountInput) => Promise<CapxulResult<SubAccount, UpdateCodes$1 | "PROVIDER_ERROR">>;
     readonly list: (input: {
         readonly accountId: AccountId;
-    } & AccountListInput) => Promise<CapxulResult<List<SubAccount>, ListCodes$b>>;
-    readonly retrieve: (subAccountId: SubAccountId) => Promise<CapxulResult<SubAccount, RetrieveCodes$e>>;
-    readonly remove: (subAccountId: SubAccountId) => Promise<CapxulResult<void, RemoveCodes$5>>;
+    } & AccountListInput) => Promise<CapxulResult<List<SubAccount>, ListCodes$b | "PROVIDER_ERROR">>;
+    readonly retrieve: (subAccountId: SubAccountId) => Promise<CapxulResult<SubAccount, RetrieveCodes$e | "PROVIDER_ERROR">>;
+    readonly remove: (subAccountId: SubAccountId) => Promise<CapxulResult<SubAccount, SubAccountRemoveCodes$1 | "PROVIDER_ERROR">>;
 };
 type AccountBalanceLedgerClient = {
     readonly list: (input: {
@@ -183,13 +183,6 @@ type AuthSessionStore = {
     set(session: Session): void;
     clear(): void;
 };
-type AuthSendOtpInput = {
-    readonly email: string;
-};
-type AuthVerifyOtpInput = {
-    readonly email: string;
-    readonly otp: string;
-};
 type AuthBootstrapToken = string & {
     readonly __capxulAuthBootstrapTokenBrand: "AuthBootstrapToken";
 };
@@ -211,7 +204,6 @@ type VerifyOtpResult = {
 type CompleteBootstrapInput = {
     readonly bootstrapToken: AuthBootstrapToken;
     readonly username: Username;
-    readonly signerProvider: LocalPrivateKeySignerProvider;
     readonly displayName?: string;
     readonly countryCode?: string;
 };
@@ -222,10 +214,6 @@ type CompleteBootstrapResult = {
     readonly username: Username;
     readonly safe: Safe;
 };
-type AuthServiceTokenMintInput = {
-    readonly apiKey: string;
-    readonly audience?: string;
-};
 /**
  * Options bag for auth methods that perform outbound `fetch` work.
  *
@@ -239,26 +227,37 @@ type AuthServiceTokenMintInput = {
 type AuthMethodOptions = {
     readonly signal?: AbortSignal;
 };
-type ServiceToken = {
-    readonly token: string;
-    readonly expiresAt: TimestampIso;
-};
-type SendOtpCodes = "EMAIL_DELIVERY_FAILED" | "INVALID_INPUT" | "RATE_LIMITED" | "NETWORK_ERROR";
-type VerifyOtpCodes = "INVALID_INPUT" | "NOT_AUTHENTICATED" | "RATE_LIMITED" | "OPERATION_TIMEOUT" | "NETWORK_ERROR";
-type CompleteBootstrapCodes = "INVALID_INPUT" | "IDEMPOTENCY_CONFLICT" | "RATE_LIMITED" | "PROFILE_NOT_FOUND" | "SMART_ACCOUNT_MISSING" | "PROVIDER_UNAVAILABLE" | "PROVIDER_REJECTED" | "OPERATION_TIMEOUT" | "NETWORK_ERROR" | "INTERNAL_ERROR";
-type GetSessionCodes = "NETWORK_ERROR";
-type SignOutCodes = "NOT_AUTHENTICATED" | "NETWORK_ERROR";
-type ServiceTokenMintCodes = "API_KEY_INVALID" | "API_KEY_EXPIRED" | "INVALID_INPUT" | "RATE_LIMITED" | "NETWORK_ERROR";
-type AuthClient = {
-    readonly sendOtp: (input: AuthSendOtpInput, options?: AuthMethodOptions) => Promise<CapxulResult<void, SendOtpCodes>>;
-    readonly verifyOtp: (input: AuthVerifyOtpInput, options?: AuthMethodOptions) => Promise<CapxulResult<VerifyOtpResult, VerifyOtpCodes>>;
-    readonly completeBootstrap: (input: CompleteBootstrapInput) => Promise<CapxulResult<CompleteBootstrapResult, CompleteBootstrapCodes>>;
-    readonly getSession: () => Promise<CapxulResult<Session | null, GetSessionCodes>>;
-    readonly signOut: () => Promise<CapxulResult<void, SignOutCodes>>;
-    readonly serviceTokenMint: (input: AuthServiceTokenMintInput) => Promise<CapxulResult<ServiceToken, ServiceTokenMintCodes>>;
-    /** Internal bridge for flow hooks that need the authenticated Convex data client. */
-    readonly getDataClient: () => CapxulDataClient | null;
-};
+
+/**
+ * AuthService — unified promise-based auth surface.
+ *
+ * Wraps the imperative `AuthClient` tuple API with a class-based,
+ * promise-based interface. `signOut` preserves the data-client
+ * reference so provider-owned singletons survive sign-in/sign-out
+ * cycles.
+ */
+
+declare class AuthService {
+    private authClient;
+    private sessionStore;
+    private config;
+    constructor(config?: CapxulConfig);
+    sendOtp(email: string, options?: AuthMethodOptions): Promise<void>;
+    verifyOtp(email: string, otp: string, options?: AuthMethodOptions): Promise<VerifyOtpResult>;
+    completeBootstrap(params: CompleteBootstrapInput, signer?: Account$1): Promise<CompleteBootstrapResult>;
+    /**
+     * Clears the persisted session and, when a transport was pre-injected,
+     * drops the cached auth header.
+     *
+     * **Transport safety note:** `clearAuth()` is only invoked when
+     * `config._transport` was supplied at construction (e.g. by the React
+     * provider). If `AuthService` is instantiated directly in a Node/CLI
+     * context without an injected transport, the transport-side auth cache
+     * is the caller's responsibility.
+     */
+    signOut(): Promise<void>;
+    getSession(): Promise<Session | null>;
+}
 
 /**
  * Documents domain — unified artifact primitive per sdk-surface.md §1a
@@ -294,9 +293,9 @@ type OrgDocumentsCancelInput = {
     readonly documentId: DocumentId;
 };
 type CreateCodes$7 = "NOT_AUTHENTICATED" | "PERMISSION_DENIED" | "INVALID_INPUT" | "IDEMPOTENCY_CONFLICT" | "RATE_LIMITED" | "NETWORK_ERROR";
-type RetrieveCodes$c = "NOT_AUTHENTICATED" | "PERMISSION_DENIED" | "NOT_FOUND";
+type RetrieveCodes$c = "NOT_AUTHENTICATED" | "PERMISSION_DENIED" | "NOT_FOUND" | "INVALID_INPUT";
 type ListCodes$9 = "NOT_AUTHENTICATED" | "PERMISSION_DENIED" | "INVALID_INPUT";
-type CancelCodes$1 = "NOT_AUTHENTICATED" | "PERMISSION_DENIED" | "NOT_FOUND" | "OPERATION_CANCELED";
+type CancelCodes$1 = "NOT_AUTHENTICATED" | "PERMISSION_DENIED" | "NOT_FOUND" | "INVALID_INPUT" | "OPERATION_CANCELED";
 type DocumentsClient = {
     readonly create: (input: DocumentsCreateInput) => Promise<CapxulResult<Document, CreateCodes$7>>;
     readonly retrieve: (documentId: DocumentId) => Promise<CapxulResult<Document, RetrieveCodes$c>>;
@@ -691,7 +690,7 @@ type WebhookEventsClient = {
 
 type OrganizationsCreateInput = {
     readonly name: string;
-    readonly country: string;
+    readonly country?: string;
 };
 type OrganizationsListInput = {
     readonly limit?: number;
@@ -710,6 +709,9 @@ type OrgMemberInviteInput = {
     readonly email: string;
     readonly role: Member["role"];
 };
+type OrgMemberAcceptInput = {
+    readonly token: string;
+};
 type OrgMemberUpdateRoleInput = {
     readonly organizationId: OrganizationId;
     readonly memberId: MemberId;
@@ -720,21 +722,23 @@ type OrgMemberRemoveInput = {
     readonly memberId: MemberId;
 };
 type OrgMemberRetrieveInput = OrgMemberRemoveInput;
+type OrgMemberRevokeInput = OrgMemberRemoveInput;
+type OrgMemberResendInput = OrgMemberRemoveInput;
 type OrgListInput = {
     readonly organizationId: OrganizationId;
     readonly limit?: number;
     readonly cursor?: string;
 };
-type OrgKybProfileStartInput = {
-    readonly organizationId: OrganizationId;
-};
-type OrgKybProfileRetrieveInput = {
+type OrgMemberListInput = {
     readonly organizationId: OrganizationId;
-    readonly kybProfileId: KybProfileId;
+    readonly status?: MembershipStatus | "all";
+    readonly limit?: number;
+    readonly cursor?: string;
 };
 type OrgCreateSubAccountInput = {
     readonly organizationId: OrganizationId;
     readonly name: string;
+    readonly purpose?: string;
 };
 type OrgCreateExternalAccountInput = {
     readonly organizationId: OrganizationId;
@@ -766,6 +770,7 @@ type UpdateCodes = "NOT_AUTHENTICATED" | "PERMISSION_DENIED" | "NOT_FOUND" | "IN
 type SafeRetrieveCodes = "NOT_AUTHENTICATED" | "PERMISSION_DENIED" | "NOT_FOUND";
 type TreasuryRetrieveCodes = "NOT_AUTHENTICATED" | "PERMISSION_DENIED" | "NOT_FOUND" | "SAFE_NOT_READY";
 type RemoveCodes$2 = RetrieveCodes$4;
+type SubAccountRemoveCodes = "NOT_AUTHENTICATED" | "PERMISSION_DENIED" | "NOT_FOUND" | "INVALID_INPUT";
 type OrgSafesClient = {
     readonly retrieve: (input: OrgSafeRetrieveInput) => Promise<CapxulResult<Safe, SafeRetrieveCodes>>;
 };
@@ -773,27 +778,26 @@ type OrgTreasuryClient = {
     readonly retrieve: (organizationId: OrganizationId) => Promise<CapxulResult<Treasury, TreasuryRetrieveCodes>>;
 };
 type OrgMembersClient = {
-    readonly list: (input: OrgListInput) => Promise<CapxulResult<List<Member>, ListCodes$3>>;
+    readonly list: (input: OrgMemberListInput) => Promise<CapxulResult<List<Member>, ListCodes$3>>;
     readonly retrieve: (input: OrgMemberRetrieveInput) => Promise<CapxulResult<Member, RetrieveCodes$4>>;
-    readonly invite: (input: OrgMemberInviteInput) => Promise<CapxulResult<Member, UpdateCodes>>;
+    readonly invite: (input: OrgMemberInviteInput) => Promise<CapxulResult<MemberInviteResponse, UpdateCodes>>;
+    readonly accept: (input: OrgMemberAcceptInput) => Promise<CapxulResult<Member, UpdateCodes>>;
     readonly updateRole: (input: OrgMemberUpdateRoleInput) => Promise<CapxulResult<Member, UpdateCodes>>;
+    readonly revoke: (input: OrgMemberRevokeInput) => Promise<CapxulResult<Member, UpdateCodes>>;
     readonly remove: (input: OrgMemberRemoveInput) => Promise<CapxulResult<void, RemoveCodes$2>>;
-};
-type OrgKybProfileClient = {
-    readonly start: (input: OrgKybProfileStartInput) => Promise<CapxulResult<KybProfile, CreateCodes$2>>;
-    readonly retrieve: (input: OrgKybProfileRetrieveInput) => Promise<CapxulResult<KybProfile, RetrieveCodes$4>>;
+    readonly resend: (input: OrgMemberResendInput) => Promise<CapxulResult<MemberInviteResponse, UpdateCodes>>;
 };
 type OrgSubAccountsClient = {
-    readonly create: (input: OrgCreateSubAccountInput) => Promise<CapxulResult<SubAccount, UpdateCodes>>;
-    readonly list: (input: OrgListInput) => Promise<CapxulResult<List<SubAccount>, ListCodes$3>>;
+    readonly create: (input: OrgCreateSubAccountInput) => Promise<CapxulResult<SubAccount, UpdateCodes | "PROVIDER_ERROR">>;
+    readonly list: (input: OrgListInput) => Promise<CapxulResult<List<SubAccount>, ListCodes$3 | "PROVIDER_ERROR">>;
     readonly retrieve: (input: {
         readonly organizationId: OrganizationId;
         readonly subAccountId: SubAccountId;
-    }) => Promise<CapxulResult<SubAccount, RetrieveCodes$4>>;
+    }) => Promise<CapxulResult<SubAccount, RetrieveCodes$4 | "PROVIDER_ERROR">>;
     readonly remove: (input: {
         readonly organizationId: OrganizationId;
         readonly subAccountId: SubAccountId;
-    }) => Promise<CapxulResult<void, RemoveCodes$2>>;
+    }) => Promise<CapxulResult<SubAccount, SubAccountRemoveCodes | "PROVIDER_ERROR">>;
 };
 type OrgExternalAccountsClient = {
     readonly create: (input: OrgCreateExternalAccountInput) => Promise<CapxulResult<ExternalAccount, UpdateCodes>>;
@@ -824,7 +828,6 @@ type OrganizationsClient = {
     readonly treasury: OrgTreasuryClient;
     readonly members: OrgMembersClient;
     readonly apiKeys: OrgApiKeysClient;
-    readonly kybProfile: OrgKybProfileClient;
     readonly subAccounts: OrgSubAccountsClient;
     readonly externalAccounts: OrgExternalAccountsClient;
     readonly balanceLedger: OrgBalanceLedgerClient;
@@ -918,7 +921,7 @@ type TransportState = {
     readonly runtime: TransportRuntime;
 } | {
     readonly status: "error";
-    readonly error: CapxulError$1;
+    readonly error: CapxulError;
 };
 type TransportRuntime = {
     readonly authBaseUrl: string;
@@ -977,13 +980,20 @@ declare function makeHttpTransport(config: BrowserCapxulConfig): HttpTransport;
  * `accounts.subAccounts.create(...)` or
  * `organizations.subAccounts.create(...)`), so only `retrieve` and
  * `remove` live at the top level.
+ *
+ * Wired in PR-2a of the funds-v1 balance-closure stack: the backend
+ * always returns truthful `balance: Money` per canon §sub_account
+ * (PR-1 made `toCanonShape` populate it from `computeSubAccountBalance`).
+ * The SDK brands the wire shape and passes the balance through as-is.
+ * NO zero-balance fallback exists at the SDK layer — if the backend
+ * ever omits `balance`, that is a bug to surface, not paper over.
  */
 
-type RetrieveCodes$3 = "NOT_AUTHENTICATED" | "PERMISSION_DENIED" | "NOT_FOUND";
-type RemoveCodes$1 = RetrieveCodes$3;
+type RetrieveCodes$3 = "NOT_AUTHENTICATED" | "PERMISSION_DENIED" | "NOT_FOUND" | "PROVIDER_ERROR";
+type RemoveCodes$1 = "NOT_AUTHENTICATED" | "PERMISSION_DENIED" | "NOT_FOUND" | "INVALID_INPUT" | "PROVIDER_ERROR";
 type SubAccountsClient = {
     readonly retrieve: (subAccountId: SubAccountId) => Promise<CapxulResult<SubAccount, RetrieveCodes$3>>;
-    readonly remove: (subAccountId: SubAccountId) => Promise<CapxulResult<void, RemoveCodes$1>>;
+    readonly remove: (subAccountId: SubAccountId) => Promise<CapxulResult<SubAccount, RemoveCodes$1>>;
 };
 
 /**
@@ -1138,161 +1148,6 @@ type VirtualCardsClient = {
     readonly cancel: (virtualCardId: VirtualCardId) => Promise<CapxulResult<VirtualCard, MutateCodes>>;
 };
 
-/**
- * Unified error type used across the entire stack: backend, SDK, and frontend.
- * One class, one set of codes, one language.
- *
- * Backend throws CapxulError → withErrorBoundary serializes to ConvexError →
- * SDK deserializes back to CapxulError → frontend routes on err.code.
- */
-type CapxulErrorCode = "NOT_AUTHENTICATED" | "EMAIL_DELIVERY_FAILED" | "API_KEY_INVALID" | "API_KEY_EXPIRED" | "PROFILE_NOT_FOUND" | "SMART_ACCOUNT_MISSING" | "PLAYER_NOT_FOUND" | "ACCOUNT_NOT_FOUND" | "PROVIDER_ERROR" | "INVALID_INPUT" | "ENV_MISSING" | "NOT_IMPLEMENTED" | "VERIFICATION_REQUIRED" | "INSUFFICIENT_BALANCE" | "INVALID_RECIPIENT" | "TRANSACTION_FAILED" | "RATE_LIMITED" | "NETWORK_ERROR" | "PERMISSION_DENIED" | "IDEMPOTENCY_CONFLICT" | "NOT_FOUND" | "OPERATION_CANCELED" | "OPERATION_TIMEOUT" | "ACTION_REQUIRED" | "KYC_REQUIRED" | "POLICY_DENIED" | "SAFE_NOT_READY" | "PROVIDER_UNAVAILABLE" | "PROVIDER_REJECTED" | "RECONCILIATION_FAILED" | "INTERNAL_ERROR" | "QUOTE_EXPIRED" | "QUOTE_NOT_FOUND" | "UNKNOWN";
-declare class CapxulError extends Error {
-    readonly code: CapxulErrorCode;
-    readonly details?: Record<string, unknown>;
-    readonly correlationId?: string;
-    readonly layer?: string;
-    constructor(code: CapxulErrorCode, message: string, options?: {
-        cause?: unknown;
-        details?: Record<string, unknown>;
-        correlationId?: string;
-        layer?: string;
-    });
-}
-
-type AuthBootstrapFlowError = CapxulError$1 | CapxulError;
-type AuthBootstrapFlowContext = {
-    readonly email: Email | null;
-    readonly code: string | null;
-    readonly username: Username | null;
-    readonly signerProvider: LocalPrivateKeySignerProvider | null;
-    readonly bootstrapToken: AuthBootstrapToken | null;
-    readonly bootstrapReason: AuthBootstrapReason | null;
-    readonly session: Session | null;
-    readonly account: Account | null;
-    readonly safe: Safe | null;
-    readonly error: AuthBootstrapFlowError | null;
-};
-type AuthBootstrapFlowEvent = {
-    readonly type: "ENTER_EMAIL";
-    readonly email: Email;
-} | {
-    readonly type: "REQUEST_OTP";
-} | {
-    readonly type: "ENTER_OTP";
-    readonly code: string;
-} | {
-    readonly type: "VERIFY_OTP";
-} | {
-    readonly type: "ENTER_USERNAME";
-    readonly username: Username;
-} | {
-    readonly type: "ENTER_SIGNER_PROVIDER";
-    readonly signerProvider: LocalPrivateKeySignerProvider;
-} | {
-    readonly type: "COMPLETE_BOOTSTRAP";
-} | {
-    readonly type: "BACK";
-} | {
-    readonly type: "RESET";
-} | {
-    readonly type: "SIGN_OUT";
-};
-declare function createAuthBootstrapFlowMachine(client: CapxulClient): xstate.StateMachine<AuthBootstrapFlowContext, {
-    readonly type: "ENTER_EMAIL";
-    readonly email: Email;
-} | {
-    readonly type: "REQUEST_OTP";
-} | {
-    readonly type: "ENTER_OTP";
-    readonly code: string;
-} | {
-    readonly type: "VERIFY_OTP";
-} | {
-    readonly type: "ENTER_USERNAME";
-    readonly username: Username;
-} | {
-    readonly type: "ENTER_SIGNER_PROVIDER";
-    readonly signerProvider: LocalPrivateKeySignerProvider;
-} | {
-    readonly type: "COMPLETE_BOOTSTRAP";
-} | {
-    readonly type: "BACK";
-} | {
-    readonly type: "RESET";
-} | {
-    readonly type: "SIGN_OUT";
-}, {
-    [x: string]: xstate.ActorRefFromLogic<xstate.PromiseActorLogic<void, void, xstate.EventObject>> | xstate.ActorRefFromLogic<xstate.PromiseActorLogic<void, {
-        email: Email;
-    }, xstate.EventObject>> | xstate.ActorRefFromLogic<xstate.PromiseActorLogic<VerifyOtpResult, {
-        email: Email;
-        code: string;
-    }, xstate.EventObject>> | xstate.ActorRefFromLogic<xstate.PromiseActorLogic<CompleteBootstrapResult, {
-        bootstrapToken: AuthBootstrapToken;
-        username: Username;
-        signerProvider: LocalPrivateKeySignerProvider;
-    }, xstate.EventObject>> | undefined;
-}, {
-    src: "sendOtp";
-    logic: xstate.PromiseActorLogic<void, {
-        email: Email;
-    }, xstate.EventObject>;
-    id: string | undefined;
-} | {
-    src: "verifyOtp";
-    logic: xstate.PromiseActorLogic<VerifyOtpResult, {
-        email: Email;
-        code: string;
-    }, xstate.EventObject>;
-    id: string | undefined;
-} | {
-    src: "signOut";
-    logic: xstate.PromiseActorLogic<void, void, xstate.EventObject>;
-    id: string | undefined;
-} | {
-    src: "completeBootstrap";
-    logic: xstate.PromiseActorLogic<CompleteBootstrapResult, {
-        bootstrapToken: AuthBootstrapToken;
-        username: Username;
-        signerProvider: LocalPrivateKeySignerProvider;
-    }, xstate.EventObject>;
-    id: string | undefined;
-}, {
-    type: "trackOtpRequested";
-    params: unknown;
-} | {
-    type: "trackTimeoutFailed";
-    params: unknown;
-} | {
-    type: "trackVerified";
-    params: unknown;
-} | {
-    type: "identifyAndTrack";
-    params: unknown;
-} | {
-    type: "trackSignedOut";
-    params: unknown;
-} | {
-    type: "trackFailed";
-    params: unknown;
-} | {
-    type: "trackBootstrapRequired";
-    params: unknown;
-}, never, never, "email" | "authenticated" | "error" | "bootstrap_required" | "sending_otp" | "otp_requested" | "signing_out" | "verifying_otp" | "completing_bootstrap", string, xstate.NonReducibleUnknown, xstate.NonReducibleUnknown, xstate.EventObject, xstate.MetaObject, {
-    id: "authBootstrap";
-    states: {
-        readonly email: {};
-        readonly sending_otp: {};
-        readonly otp_requested: {};
-        readonly verifying_otp: {};
-        readonly bootstrap_required: {};
-        readonly completing_bootstrap: {};
-        readonly authenticated: {};
-        readonly signing_out: {};
-        readonly error: {};
-    };
-}>;
-
 /**
  * Root `@capxul/sdk` client factory.
  *
@@ -1340,11 +1195,6 @@ type CapxulAuthConfig = {
     readonly convexTokenUrl?: string;
     /** Scenario/browser-local session store shared by auth + onboarding hooks. */
     readonly sessionStore?: AuthSessionStore;
-    /**
-     * Optional bridge for environments that can build an authenticated data
-     * client after BetterAuth returns a session.
-     */
-    readonly createDataClient?: (session: Session) => Promise<CapxulDataClient>;
 };
 type CapxulConfig = {
     /** Server-to-server partner key. Mutually exclusive with `publishableKey`. */
@@ -1360,12 +1210,13 @@ type CapxulConfig = {
      */
     readonly signer?: Account$1;
     /**
-     * Inject an authenticated Convex data client.
+     * @internal
      *
-     * Slice F.2 uses this for the restart payment + operation runtime
-     * path while the `/v1/*` service-token bridge remains unfinished.
+     * Test-only override seam for injecting an authenticated Convex data client.
+     * The SDK now owns runtime construction of the data client; this field is
+     * reserved for tests and the React provider's singleton lifecycle.
      */
-    readonly data?: CapxulDataClient;
+    readonly _data?: CapxulDataClient;
     /**
      * Chain + bundler configuration for on-chain submission.
      *
@@ -1403,7 +1254,7 @@ type CapxulConfig = {
     readonly _transport?: HttpTransport;
 };
 /**
- * Per-call factories for the three Stack-1 XState v5 flow machines.
+ * Per-call factories for XState v5 flow machines.
  *
  * Each factory returns a fresh machine instance bound to this
  * `CapxulClient`. The consumer is responsible for creating a single
@@ -1419,8 +1270,6 @@ type CapxulConfig = {
  * `./flows/*` when they need them.
  */
 type CapxulFlowFactories = {
-    readonly auth: () => AnyStateMachine;
-    readonly authBootstrap: () => ReturnType<typeof createAuthBootstrapFlowMachine>;
     readonly onboarding: () => AnyStateMachine;
     readonly provisioning: () => AnyStateMachine;
 };
@@ -1441,7 +1290,7 @@ type CapxulClient = {
      * `createCapxulClient()` call. See Codex P1 finding on PR #406.
      */
     readonly id: string;
-    readonly auth: AuthClient;
+    readonly auth: AuthService;
     readonly me: MeClient;
     readonly accounts: AccountsClient;
     readonly organizations: OrganizationsClient;
@@ -1476,11 +1325,11 @@ type CapxulClient = {
  * Two-pass construction: the per-domain clients (`auth`, `me`, …) are
  * built first, then `flows` is assigned with factories that close over
  * the fully-built `client` so the spawned XState machines can call
- * back into `client.auth.sendOtp`, `client.accounts.provisionPersonal`,
- * etc. The intermediate `clientWithoutFlows` value is typed without
+ * back into `client.accounts.provisionPersonal`, etc. The intermediate
+ * `clientWithoutFlows` value is typed without
  * `flows`; `Object.assign` mutates a single `flows` field on it before
  * the returned `CapxulClient` cast — minimal and contained.
  */
 declare function createCapxulClient(config?: CapxulConfig): CapxulClient;
 
-export { createAuthBootstrapFlowMachine as $, type AccountProvisionPersonalInput as A, type BrowserCapxulConfig as B, CapxulError as C, type DocumentsClient as D, type ExternalAccountsClient as E, type TokenTransferId as F, type TokenTransfersClient as G, type HttpTransport as H, type TokenTransfersListInput as I, type TokenTransfersListPage as J, type TokenTransfersRetrieveInput as K, type LocalPrivateKeySignerProvider as L, type MeClient as M, type TransfersClient as N, type OperationsClient as O, type PaymentsClient as P, type TransportRuntime as Q, type TransportState as R, type Session as S, type TokenTransfer as T, type VirtualAccountsClient as U, type VerifyOtpResult as V, type VirtualCardsClient as W, type WebhookEndpointCreateResult as X, type WebhookEndpointsClient as Y, type WebhookEventsClient as Z, type WithdrawalsClient as _, type CapxulClient as a, createCapxulClient as a0, makeHttpTransport as a1, toTokenTransferId as a2, type AccountsClient as b, type ApiKeyCreateResult as c, type ApiKeysClient as d, type AuthBootstrapFlowContext as e, type AuthBootstrapFlowError as f, type AuthBootstrapFlowEvent as g, type AuthBootstrapReason as h, type AuthBootstrapToken as i, type AuthClient as j, type AuthSessionStore as k, type CapxulAuthConfig as l, type CapxulConfig as m, type CapxulDataClient as n, type CapxulFlowFactories as o, type CapxulSigningConfig as p, type CompleteBootstrapInput as q, type CompleteBootstrapResult as r, type OrgDocumentsClient as s, type OrgPaymentsClient as t, type OrgSafesClient as u, type OrgTransfersClient as v, type OrgTreasuryClient as w, type OrgWithdrawalsClient as x, type OrganizationsClient as y, type SubAccountsClient as z };
+export { type AccountProvisionPersonalInput as A, type BrowserCapxulConfig as B, type CapxulClient as C, type DocumentsClient as D, type ExternalAccountsClient as E, type TokenTransfersListPage as F, type TokenTransfersRetrieveInput as G, type HttpTransport as H, type TransfersClient as I, type TransportRuntime as J, type TransportState as K, type LocalPrivateKeySignerProvider as L, type MeClient as M, type VirtualAccountsClient as N, type OperationsClient as O, type PaymentsClient as P, type VirtualCardsClient as Q, type WebhookEndpointsClient as R, type Session as S, type TokenTransfer as T, type WebhookEventsClient as U, type VerifyOtpResult as V, type WebhookEndpointCreateResult as W, type WithdrawalsClient as X, createCapxulClient as Y, makeHttpTransport as Z, toTokenTransferId as _, type AccountsClient as a, type ApiKeyCreateResult as b, type ApiKeysClient as c, type AuthBootstrapReason as d, type AuthBootstrapToken as e, AuthService as f, type AuthSessionStore as g, type CapxulAuthConfig as h, type CapxulConfig as i, type CapxulDataClient as j, type CapxulFlowFactories as k, type CapxulSigningConfig as l, type CompleteBootstrapInput as m, type CompleteBootstrapResult as n, type OrgDocumentsClient as o, type OrgMembersClient as p, type OrgPaymentsClient as q, type OrgSafesClient as r, type OrgTransfersClient as s, type OrgTreasuryClient as t, type OrgWithdrawalsClient as u, type OrganizationsClient as v, type SubAccountsClient as w, type TokenTransferId as x, type TokenTransfersClient as y, type TokenTransfersListInput as z };