@capxul/sdk 0.1.0-alpha.9 → 0.2.0-alpha.4

package/dist/index.d.cts

@@ -1,114 +1,35 @@
-import { S as Session, C as CapxulError$1, a as CapxulClient, A as AccountProvisionPersonalInput } from './client-DG6ODWu6.cjs';
-export { b as AccountsClient, c as ApiKeyCreateResult, d as ApiKeysClient, e as AuthBootstrapFlowContext, f as AuthBootstrapFlowError, g as AuthBootstrapFlowEvent, h as AuthBootstrapReason, i as AuthBootstrapToken, j as AuthClient, k as AuthSessionStore, B as BrowserCapxulConfig, l as CapxulAuthConfig, m as CapxulConfig, n as CapxulDataClient, o as CapxulFlowFactories, p as CapxulSigningConfig, q as CompleteBootstrapInput, r as CompleteBootstrapResult, D as DocumentsClient, E as ExternalAccountsClient, H as HttpTransport, L as LocalPrivateKeySignerProvider, M as MeClient, O as OperationsClient, s as OrgDocumentsClient, t as OrgPaymentsClient, u as OrgSafesClient, v as OrgTransfersClient, w as OrgTreasuryClient, x as OrgWithdrawalsClient, y as OrganizationsClient, P as PaymentsClient, z as SubAccountsClient, T as TokenTransfer, F as TokenTransferId, G as TokenTransfersClient, I as TokenTransfersListInput, J as TokenTransfersListPage, K as TokenTransfersRetrieveInput, N as TransfersClient, Q as TransportRuntime, R as TransportState, V as VerifyOtpResult, U as VirtualAccountsClient, W as VirtualCardsClient, X as WebhookEndpointCreateResult, Y as WebhookEndpointsClient, Z as WebhookEventsClient, _ as WithdrawalsClient, $ as createAuthBootstrapFlowMachine, a0 as createCapxulClient, a1 as makeHttpTransport, a2 as toTokenTransferId } from './client-DG6ODWu6.cjs';
+import { A as AccountProvisionPersonalInput, C as CapxulClient } from './client-UEm2oZbZ.cjs';
+export { a as AccountsClient, b as ApiKeyCreateResult, c as ApiKeysClient, d as AuthBootstrapReason, e as AuthBootstrapToken, f as AuthService, g as AuthSessionStore, B as BrowserCapxulConfig, h as CapxulAuthConfig, i as CapxulConfig, j as CapxulDataClient, k as CapxulFlowFactories, l as CapxulSigningConfig, m as CompleteBootstrapInput, n as CompleteBootstrapResult, D as DocumentsClient, E as ExternalAccountsClient, H as HttpTransport, L as LocalPrivateKeySignerProvider, M as MeClient, O as OperationsClient, o as OrgDocumentsClient, p as OrgMembersClient, q as OrgPaymentsClient, r as OrgSafesClient, s as OrgTransfersClient, t as OrgTreasuryClient, u as OrgWithdrawalsClient, v as OrganizationsClient, P as PaymentsClient, S as Session, w as SubAccountsClient, T as TokenTransfer, x as TokenTransferId, y as TokenTransfersClient, z as TokenTransfersListInput, F as TokenTransfersListPage, G as TokenTransfersRetrieveInput, I as TransfersClient, J as TransportRuntime, K as TransportState, V as VerifyOtpResult, N as VirtualAccountsClient, Q as VirtualCardsClient, W as WebhookEndpointCreateResult, R as WebhookEndpointsClient, U as WebhookEventsClient, X as WithdrawalsClient, Y as createCapxulClient, Z as makeHttpTransport, _ as toTokenTransferId } from './client-UEm2oZbZ.cjs';
 import * as xstate from 'xstate';
-import { E as Email, U as Username, O as OperationId, N as NextAction } from './next-action-DkrwXYay.cjs';
-export { A as AccountId, a as ApiKeyId, B as BalanceLedgerEntryId, C as CorrelationId, D as DocumentId, b as ExternalAccountId, K as KybProfileId, c as KycProfileId, M as MemberId, d as OrganizationId, P as PaymentId, e as PhoneNumber, S as SafeId, f as SubAccountId, T as TransactionIntentId, g as TransferId, h as TreasuryId, V as VirtualAccountId, i as VirtualCardId, W as WebhookEndpointId, j as WebhookEventId, k as WithdrawalId, t as toAccountId, l as toApiKeyId, m as toBalanceLedgerEntryId, n as toDocumentId, o as toEmail, p as toExternalAccountId, q as toKybProfileId, r as toKycProfileId, s as toMemberId, u as toOperationId, v as toOrganizationId, w as toPaymentId, x as toPhoneNumber, y as toSafeId, z as toSubAccountId, F as toTransferId, G as toTreasuryId, H as toUsername, I as toVirtualAccountId, J as toVirtualCardId, L as toWebhookEndpointId, Q as toWebhookEventId, R as toWithdrawalId } from './next-action-DkrwXYay.cjs';
-import { C as CapxulError, a as CapxulErrorCode } from './errors-GgKrSUKp.cjs';
-export { b as CapxulErrorDetails, c as CapxulErrorEnvelope, d as CapxulResult } from './errors-GgKrSUKp.cjs';
-import { A as Account } from './types-hfcOE7Oi.cjs';
-export { a as AccountLookupResult, b as ApiKey, c as ApiKeyEnvironment, d as ApiKeyType, B as BalanceLedgerEntry, e as BankStatementDocument, C as CreatePaymentResult, f as CreateTransferResult, g as CreateWithdrawalResult, D as Document, E as ExternalAccount, h as ExternalAccountKind, I as InvoiceDocument, K as KybProfile, i as KycProfile, j as KycUploadDocument, L as List, M as Member, k as Money, O as Operation, l as OperationStatus, m as OperationSummary, n as Organization, P as PageInfo, o as Payment, p as PaymentParty, q as PaymentStatus, r as PayrollRunDocument, s as PayrollScheduleDocument, R as ReceiptDocument, S as Safe, t as Scope, u as Settlement, v as SubAccount, w as SubAccountOwnerKind, T as TaxFormDocument, x as TimestampIso, y as Transfer, z as TransferCustody, F as TransferEndpoint, G as TransferFx, H as TransferStatus, J as Treasury, U as UserIdentifier, V as VirtualAccount, N as VirtualAccountOwnerKind, Q as VirtualCard, W as VirtualCardLimits, X as VirtualCardOwnerKind, Y as WebhookEndpoint, Z as WebhookEvent, _ as Withdrawal, $ as WithdrawalStatus } from './types-hfcOE7Oi.cjs';
+import { C as CapxulError$1, a as CapxulErrorCode$1 } from './errors-rqxuUhQP.cjs';
+export { b as CapxulErrorDetails, c as CapxulErrorEnvelope, d as CapxulResult } from './errors-rqxuUhQP.cjs';
+import { A as Account } from './types-HlwCIjgQ.cjs';
+export { a as AccountLookupResult, b as ApiKey, c as ApiKeyEnvironment, d as ApiKeyType, B as BalanceLedgerEntry, e as BankStatementDocument, C as CreatePaymentResult, f as CreateTransferResult, g as CreateWithdrawalResult, D as Document, E as ExternalAccount, h as ExternalAccountKind, I as IdentityProfileBase, i as InvoiceDocument, K as KybProfile, j as KybStatus, k as KycProfile, l as KycStatus, m as KycUploadDocument, L as List, M as Member, n as MemberInviteResponse, o as MembershipStatus, p as Money, O as Operation, q as OperationStatus, r as OperationSummary, s as Organization, P as PageInfo, t as Payment, u as PaymentParty, v as PaymentStatus, w as PayrollRunDocument, x as PayrollScheduleDocument, R as ReceiptDocument, S as Safe, y as Scope, z as Settlement, F as SubAccount, G as SubAccountOwnerKind, T as TaxFormDocument, H as TimestampIso, J as Transfer, N as TransferCustody, Q as TransferEndpoint, U as TransferFx, V as TransferStatus, W as Treasury, X as UserIdentifier, Y as VirtualAccount, Z as VirtualAccountOwnerKind, _ as VirtualCard, $ as VirtualCardLimits, a0 as VirtualCardOwnerKind, a1 as WebhookEndpoint, a2 as WebhookEvent, a3 as Withdrawal, a4 as WithdrawalStatus } from './types-HlwCIjgQ.cjs';
+import { U as Username, O as OperationId, N as NextAction } from './next-action-CTGl8wpy.cjs';
+export { A as AccountId, a as ApiKeyId, B as BalanceLedgerEntryId, C as CorrelationId, D as DocumentId, E as Email, b as ExternalAccountId, K as KybProfileId, c as KycProfileId, M as MemberId, d as OrganizationId, P as PaymentId, e as PhoneNumber, S as SafeId, f as SubAccountId, T as TransactionIntentId, g as TransferId, h as TreasuryId, V as VirtualAccountId, i as VirtualCardId, W as WebhookEndpointId, j as WebhookEventId, k as WithdrawalId, t as toAccountId, l as toApiKeyId, m as toBalanceLedgerEntryId, n as toDocumentId, o as toEmail, p as toExternalAccountId, q as toKybProfileId, r as toKycProfileId, s as toMemberId, u as toOperationId, v as toOrganizationId, w as toPaymentId, x as toPhoneNumber, y as toSafeId, z as toSubAccountId, F as toTransferId, G as toTreasuryId, H as toUsername, I as toVirtualAccountId, J as toVirtualCardId, L as toWebhookEndpointId, Q as toWebhookEventId, R as toWithdrawalId } from './next-action-CTGl8wpy.cjs';
 import { Account as Account$1 } from 'viem';
 export { WebhookVerificationOptions, WebhookVerificationResult, verifyWebhook } from './webhooks.cjs';
 
 /**
- * Auth flow errors may originate from two CapxulError surfaces:
- *  - the SDK-local generic `CapxulError<Codes>` returned by
- *    `client.auth.*` tuple methods
- *  - the `@repo/config` `CapxulError` produced by the `Errors.xxx()`
- *    factory family (per `error-handling.md`)
- *
- * Both share `.code`, `.message`, `.details`, and extend `Error`. The
- * union keeps either origin assignable to `context.error` without an
- * `as` cast at the call site.
- */
-type AuthFlowError = CapxulError | CapxulError$1;
-type AuthFlowContext = {
-    readonly email: Email | null;
-    readonly session: Session | null;
-    readonly error: AuthFlowError | null;
-};
-type AuthFlowEvent = {
-    readonly type: "REQUEST_OTP";
-    readonly email: Email;
-} | {
-    readonly type: "VERIFY";
-    readonly code: string;
-} | {
-    readonly type: "RESET";
-} | {
-    readonly type: "SIGN_OUT";
-};
-/**
- * Build the auth state machine bound to a `CapxulClient` instance.
+ * Unified error type used across the entire stack: backend, SDK, and frontend.
+ * One class, one set of codes, one language.
  *
- * States: `idle -> sending_otp -> otp_requested -> verifying ->
- * authenticated -> signing_out -> idle`, with `error` as a sidecar
- * from any async step.
+ * Backend throws CapxulError → withErrorBoundary serializes to ConvexError →
+ * SDK deserializes back to CapxulError → frontend routes on err.code.
  */
-declare function createAuthFlowMachine(client: CapxulClient): xstate.StateMachine<AuthFlowContext, {
-    readonly type: "REQUEST_OTP";
-    readonly email: Email;
-} | {
-    readonly type: "VERIFY";
-    readonly code: string;
-} | {
-    readonly type: "RESET";
-} | {
-    readonly type: "SIGN_OUT";
-}, {
-    [x: string]: xstate.ActorRefFromLogic<xstate.PromiseActorLogic<void, {
-        email: Email;
-    }, xstate.EventObject>> | xstate.ActorRefFromLogic<xstate.PromiseActorLogic<Session, {
-        email: Email;
-        code: string;
-    }, xstate.EventObject>> | xstate.ActorRefFromLogic<xstate.PromiseActorLogic<void, void, xstate.EventObject>> | undefined;
-}, {
-    src: "sendOtp";
-    logic: xstate.PromiseActorLogic<void, {
-        email: Email;
-    }, xstate.EventObject>;
-    id: string | undefined;
-} | {
-    src: "verifyOtp";
-    logic: xstate.PromiseActorLogic<Session, {
-        email: Email;
-        code: string;
-    }, xstate.EventObject>;
-    id: string | undefined;
-} | {
-    src: "signOut";
-    logic: xstate.PromiseActorLogic<void, void, xstate.EventObject>;
-    id: string | undefined;
-}, {
-    type: "trackOtpRequested";
-    params: unknown;
-} | {
-    type: "trackOtpFailed";
-    params: unknown;
-} | {
-    type: "trackTimeoutFailed";
-    params: unknown;
-} | {
-    type: "trackVerified";
-    params: unknown;
-} | {
-    type: "identifyAndTrack";
-    params: unknown;
-} | {
-    type: "trackSignedOut";
-    params: unknown;
-}, never, never, "idle" | "authenticated" | "error" | "sending_otp" | "otp_requested" | "verifying" | "signing_out", string, xstate.NonReducibleUnknown, xstate.NonReducibleUnknown, xstate.EventObject, xstate.MetaObject, {
-    id: "auth";
-    states: {
-        readonly idle: {};
-        readonly sending_otp: {};
-        readonly otp_requested: {};
-        readonly verifying: {};
-        readonly authenticated: {};
-        readonly signing_out: {};
-        readonly error: {};
-    };
-}>;
+type CapxulErrorCode = "NOT_AUTHENTICATED" | "EMAIL_DELIVERY_FAILED" | "API_KEY_INVALID" | "API_KEY_EXPIRED" | "PROFILE_NOT_FOUND" | "SMART_ACCOUNT_MISSING" | "PLAYER_NOT_FOUND" | "ACCOUNT_NOT_FOUND" | "PROVIDER_ERROR" | "INVALID_INPUT" | "ENV_MISSING" | "NOT_IMPLEMENTED" | "VERIFICATION_REQUIRED" | "INSUFFICIENT_BALANCE" | "INVALID_RECIPIENT" | "TRANSACTION_FAILED" | "RATE_LIMITED" | "NETWORK_ERROR" | "PERMISSION_DENIED" | "IDEMPOTENCY_CONFLICT" | "NOT_FOUND" | "OPERATION_CANCELED" | "OPERATION_TIMEOUT" | "ACTION_REQUIRED" | "KYC_REQUIRED" | "POLICY_DENIED" | "SAFE_NOT_READY" | "PROVIDER_UNAVAILABLE" | "PROVIDER_REJECTED" | "RECONCILIATION_FAILED" | "INTERNAL_ERROR" | "QUOTE_EXPIRED" | "QUOTE_NOT_FOUND" | "INDEXER_DELIVERY_TIMEOUT" | "UNKNOWN";
+declare class CapxulError extends Error {
+    readonly code: CapxulErrorCode;
+    readonly details?: Record<string, unknown>;
+    readonly correlationId?: string;
+    readonly layer?: string;
+    constructor(code: CapxulErrorCode, message: string, options?: {
+        cause?: unknown;
+        details?: Record<string, unknown>;
+        correlationId?: string;
+        layer?: string;
+    });
+}
 
 /**
  * Provisioning flow errors may originate from two CapxulError surfaces:
@@ -120,7 +41,7 @@ declare function createAuthFlowMachine(client: CapxulClient): xstate.StateMachin
  *
  * Both share `.code`, `.message`, `.details`, and extend `Error`.
  */
-type ProvisioningFlowError = CapxulError | CapxulError$1;
+type ProvisioningFlowError = CapxulError$1 | CapxulError;
 type ProvisioningFlowContext = {
     readonly input: AccountProvisionPersonalInput | null;
     readonly account: Account | null;
@@ -197,7 +118,7 @@ declare function createProvisioningMachine(client: CapxulClient): xstate.StateMa
 }, {
     type: "hasInput";
     params: unknown;
-}, never, "idle" | "error" | "done" | "starting" | "running", string, {
+}, never, "done" | "error" | "idle" | "starting" | "running", string, {
     readonly input: AccountProvisionPersonalInput;
 }, {
     readonly account: Account;
@@ -227,7 +148,7 @@ declare function createProvisioningMachine(client: CapxulClient): xstate.StateMa
  *
  * Both share `.code`, `.message`, `.details`, and extend `Error`.
  */
-type OnboardingFlowError = CapxulError | CapxulError$1;
+type OnboardingFlowError = CapxulError$1 | CapxulError;
 /** Subjects supported by the onboarding flow. */
 type OnboardingSubjectKind = "account" | "organization";
 /**
@@ -305,7 +226,7 @@ declare function createOnboardingFlowMachine(client: CapxulClient): xstate.State
     }, {
         type: "hasInput";
         params: unknown;
-    }, never, "idle" | "error" | "done" | "starting" | "running", string, {
+    }, never, "done" | "error" | "idle" | "starting" | "running", string, {
         readonly input: AccountProvisionPersonalInput;
     }, {
         readonly account: Account;
@@ -347,7 +268,7 @@ declare function createOnboardingFlowMachine(client: CapxulClient): xstate.State
     }, {
         type: "hasInput";
         params: unknown;
-    }, never, "idle" | "error" | "done" | "starting" | "running", string, {
+    }, never, "done" | "error" | "idle" | "starting" | "running", string, {
         readonly input: AccountProvisionPersonalInput;
     }, {
         readonly account: Account;
@@ -440,8 +361,8 @@ declare function createOnboardingFlowMachine(client: CapxulClient): xstate.State
  * No `default:` arm needed — the compile-time exhaustiveness check is
  * the contract.
  */
-declare function matchError<Codes extends CapxulErrorCode, R>(err: CapxulError<Codes>, handlers: {
-    [K in Codes]: (err: CapxulError<K>) => R;
+declare function matchError<Codes extends CapxulErrorCode$1, R>(err: CapxulError$1<Codes>, handlers: {
+    [K in Codes]: (err: CapxulError$1<K>) => R;
 }): R;
 /**
  * Exhaustive resource-status dispatch per CANON.md §4.44.
@@ -497,4 +418,44 @@ declare function tryCatch<T>(promise: Promise<T>): Promise<[Error, null] | [null
  */
 declare function createLocalSigner(privateKey: `0x${string}`): Account$1;
 
-export { Account, AccountProvisionPersonalInput, type AuthFlowContext, type AuthFlowError, type AuthFlowEvent, CapxulClient, CapxulError, CapxulErrorCode, Email, NextAction, type OnboardingFlowContext, type OnboardingFlowError, type OnboardingFlowEvent, type OnboardingProfileInput, type OnboardingSubjectKind, OperationId, type ProvisioningFlowContext, type ProvisioningFlowError, type ProvisioningFlowEvent, type ProvisioningFlowInput, type ProvisioningFlowOutput, Session, Username, createAuthFlowMachine, createLocalSigner, createOnboardingFlowMachine, createProvisioningMachine as createProvisioningFlowMachine, matchAction, matchError, matchStatus, tryCatch };
+type SignerProvisionResult = {
+    readonly signer: Account$1;
+    readonly safeAddress: `0x${string}`;
+};
+/**
+ * Headless signer auto-provisioner.
+ *
+ * Generates a fresh viem private-key account and deterministically derives
+ * the corresponding Safe v1.4.1 address.
+ *
+ * No consumer computes `safeAddress` — it is derived internally and
+ * returned alongside the signer so `AuthService.completeBootstrap`
+ * can supply it to the backend.
+ *
+ * **Key persistence note:** Every call to `provision()` mints a fresh
+ * private key. The caller MUST persist the returned `signer` (or its
+ * private key) if the derived `safeAddress` must be recoverable in
+ * future sessions. The bootstrap flow persists the signer via the
+ * backend (`signerProvider` row), but direct API consumers are
+ * responsible for their own key storage.
+ */
+declare class SignerProvisioner {
+    provision(): SignerProvisionResult;
+}
+
+type PaymentToken = {
+    readonly address: `0x${string}`;
+    readonly decimals: number;
+    readonly symbol: string;
+};
+/**
+ * Resolve a currency code to its on-chain payment token metadata.
+ *
+ * Currently supports USDC only (USD and USDC codes map to the same
+ * token). Non-USDC codes return a `NOT_IMPLEMENTED` stub so callers
+ * can scaffold multi-currency flows before the registry is fully
+ * populated.
+ */
+declare function resolvePaymentToken(currency: string): PaymentToken;
+
+export { Account, AccountProvisionPersonalInput, CapxulClient, CapxulError$1 as CapxulError, CapxulErrorCode$1 as CapxulErrorCode, NextAction, type OnboardingFlowContext, type OnboardingFlowError, type OnboardingFlowEvent, type OnboardingProfileInput, type OnboardingSubjectKind, OperationId, type PaymentToken, type ProvisioningFlowContext, type ProvisioningFlowError, type ProvisioningFlowEvent, type ProvisioningFlowInput, type ProvisioningFlowOutput, type SignerProvisionResult, SignerProvisioner, Username, createLocalSigner, createOnboardingFlowMachine, createProvisioningMachine as createProvisioningFlowMachine, matchAction, matchError, matchStatus, resolvePaymentToken, tryCatch };

package/dist/index.d.ts

@@ -1,114 +1,35 @@
-import { S as Session, C as CapxulError$1, a as CapxulClient, A as AccountProvisionPersonalInput } from './client-ChZrdf3R.js';
-export { b as AccountsClient, c as ApiKeyCreateResult, d as ApiKeysClient, e as AuthBootstrapFlowContext, f as AuthBootstrapFlowError, g as AuthBootstrapFlowEvent, h as AuthBootstrapReason, i as AuthBootstrapToken, j as AuthClient, k as AuthSessionStore, B as BrowserCapxulConfig, l as CapxulAuthConfig, m as CapxulConfig, n as CapxulDataClient, o as CapxulFlowFactories, p as CapxulSigningConfig, q as CompleteBootstrapInput, r as CompleteBootstrapResult, D as DocumentsClient, E as ExternalAccountsClient, H as HttpTransport, L as LocalPrivateKeySignerProvider, M as MeClient, O as OperationsClient, s as OrgDocumentsClient, t as OrgPaymentsClient, u as OrgSafesClient, v as OrgTransfersClient, w as OrgTreasuryClient, x as OrgWithdrawalsClient, y as OrganizationsClient, P as PaymentsClient, z as SubAccountsClient, T as TokenTransfer, F as TokenTransferId, G as TokenTransfersClient, I as TokenTransfersListInput, J as TokenTransfersListPage, K as TokenTransfersRetrieveInput, N as TransfersClient, Q as TransportRuntime, R as TransportState, V as VerifyOtpResult, U as VirtualAccountsClient, W as VirtualCardsClient, X as WebhookEndpointCreateResult, Y as WebhookEndpointsClient, Z as WebhookEventsClient, _ as WithdrawalsClient, $ as createAuthBootstrapFlowMachine, a0 as createCapxulClient, a1 as makeHttpTransport, a2 as toTokenTransferId } from './client-ChZrdf3R.js';
+import { A as AccountProvisionPersonalInput, C as CapxulClient } from './client-CbUeJoM9.js';
+export { a as AccountsClient, b as ApiKeyCreateResult, c as ApiKeysClient, d as AuthBootstrapReason, e as AuthBootstrapToken, f as AuthService, g as AuthSessionStore, B as BrowserCapxulConfig, h as CapxulAuthConfig, i as CapxulConfig, j as CapxulDataClient, k as CapxulFlowFactories, l as CapxulSigningConfig, m as CompleteBootstrapInput, n as CompleteBootstrapResult, D as DocumentsClient, E as ExternalAccountsClient, H as HttpTransport, L as LocalPrivateKeySignerProvider, M as MeClient, O as OperationsClient, o as OrgDocumentsClient, p as OrgMembersClient, q as OrgPaymentsClient, r as OrgSafesClient, s as OrgTransfersClient, t as OrgTreasuryClient, u as OrgWithdrawalsClient, v as OrganizationsClient, P as PaymentsClient, S as Session, w as SubAccountsClient, T as TokenTransfer, x as TokenTransferId, y as TokenTransfersClient, z as TokenTransfersListInput, F as TokenTransfersListPage, G as TokenTransfersRetrieveInput, I as TransfersClient, J as TransportRuntime, K as TransportState, V as VerifyOtpResult, N as VirtualAccountsClient, Q as VirtualCardsClient, W as WebhookEndpointCreateResult, R as WebhookEndpointsClient, U as WebhookEventsClient, X as WithdrawalsClient, Y as createCapxulClient, Z as makeHttpTransport, _ as toTokenTransferId } from './client-CbUeJoM9.js';
 import * as xstate from 'xstate';
-import { E as Email, U as Username, O as OperationId, N as NextAction } from './next-action-DkrwXYay.js';
-export { A as AccountId, a as ApiKeyId, B as BalanceLedgerEntryId, C as CorrelationId, D as DocumentId, b as ExternalAccountId, K as KybProfileId, c as KycProfileId, M as MemberId, d as OrganizationId, P as PaymentId, e as PhoneNumber, S as SafeId, f as SubAccountId, T as TransactionIntentId, g as TransferId, h as TreasuryId, V as VirtualAccountId, i as VirtualCardId, W as WebhookEndpointId, j as WebhookEventId, k as WithdrawalId, t as toAccountId, l as toApiKeyId, m as toBalanceLedgerEntryId, n as toDocumentId, o as toEmail, p as toExternalAccountId, q as toKybProfileId, r as toKycProfileId, s as toMemberId, u as toOperationId, v as toOrganizationId, w as toPaymentId, x as toPhoneNumber, y as toSafeId, z as toSubAccountId, F as toTransferId, G as toTreasuryId, H as toUsername, I as toVirtualAccountId, J as toVirtualCardId, L as toWebhookEndpointId, Q as toWebhookEventId, R as toWithdrawalId } from './next-action-DkrwXYay.js';
-import { C as CapxulError, a as CapxulErrorCode } from './errors-QHD5Tlok.js';
-export { b as CapxulErrorDetails, c as CapxulErrorEnvelope, d as CapxulResult } from './errors-QHD5Tlok.js';
-import { A as Account } from './types-PM4AQRLP.js';
-export { a as AccountLookupResult, b as ApiKey, c as ApiKeyEnvironment, d as ApiKeyType, B as BalanceLedgerEntry, e as BankStatementDocument, C as CreatePaymentResult, f as CreateTransferResult, g as CreateWithdrawalResult, D as Document, E as ExternalAccount, h as ExternalAccountKind, I as InvoiceDocument, K as KybProfile, i as KycProfile, j as KycUploadDocument, L as List, M as Member, k as Money, O as Operation, l as OperationStatus, m as OperationSummary, n as Organization, P as PageInfo, o as Payment, p as PaymentParty, q as PaymentStatus, r as PayrollRunDocument, s as PayrollScheduleDocument, R as ReceiptDocument, S as Safe, t as Scope, u as Settlement, v as SubAccount, w as SubAccountOwnerKind, T as TaxFormDocument, x as TimestampIso, y as Transfer, z as TransferCustody, F as TransferEndpoint, G as TransferFx, H as TransferStatus, J as Treasury, U as UserIdentifier, V as VirtualAccount, N as VirtualAccountOwnerKind, Q as VirtualCard, W as VirtualCardLimits, X as VirtualCardOwnerKind, Y as WebhookEndpoint, Z as WebhookEvent, _ as Withdrawal, $ as WithdrawalStatus } from './types-PM4AQRLP.js';
+import { C as CapxulError$1, a as CapxulErrorCode$1 } from './errors-CwhCWGxm.js';
+export { b as CapxulErrorDetails, c as CapxulErrorEnvelope, d as CapxulResult } from './errors-CwhCWGxm.js';
+import { A as Account } from './types-BD4VAQb5.js';
+export { a as AccountLookupResult, b as ApiKey, c as ApiKeyEnvironment, d as ApiKeyType, B as BalanceLedgerEntry, e as BankStatementDocument, C as CreatePaymentResult, f as CreateTransferResult, g as CreateWithdrawalResult, D as Document, E as ExternalAccount, h as ExternalAccountKind, I as IdentityProfileBase, i as InvoiceDocument, K as KybProfile, j as KybStatus, k as KycProfile, l as KycStatus, m as KycUploadDocument, L as List, M as Member, n as MemberInviteResponse, o as MembershipStatus, p as Money, O as Operation, q as OperationStatus, r as OperationSummary, s as Organization, P as PageInfo, t as Payment, u as PaymentParty, v as PaymentStatus, w as PayrollRunDocument, x as PayrollScheduleDocument, R as ReceiptDocument, S as Safe, y as Scope, z as Settlement, F as SubAccount, G as SubAccountOwnerKind, T as TaxFormDocument, H as TimestampIso, J as Transfer, N as TransferCustody, Q as TransferEndpoint, U as TransferFx, V as TransferStatus, W as Treasury, X as UserIdentifier, Y as VirtualAccount, Z as VirtualAccountOwnerKind, _ as VirtualCard, $ as VirtualCardLimits, a0 as VirtualCardOwnerKind, a1 as WebhookEndpoint, a2 as WebhookEvent, a3 as Withdrawal, a4 as WithdrawalStatus } from './types-BD4VAQb5.js';
+import { U as Username, O as OperationId, N as NextAction } from './next-action-CTGl8wpy.js';
+export { A as AccountId, a as ApiKeyId, B as BalanceLedgerEntryId, C as CorrelationId, D as DocumentId, E as Email, b as ExternalAccountId, K as KybProfileId, c as KycProfileId, M as MemberId, d as OrganizationId, P as PaymentId, e as PhoneNumber, S as SafeId, f as SubAccountId, T as TransactionIntentId, g as TransferId, h as TreasuryId, V as VirtualAccountId, i as VirtualCardId, W as WebhookEndpointId, j as WebhookEventId, k as WithdrawalId, t as toAccountId, l as toApiKeyId, m as toBalanceLedgerEntryId, n as toDocumentId, o as toEmail, p as toExternalAccountId, q as toKybProfileId, r as toKycProfileId, s as toMemberId, u as toOperationId, v as toOrganizationId, w as toPaymentId, x as toPhoneNumber, y as toSafeId, z as toSubAccountId, F as toTransferId, G as toTreasuryId, H as toUsername, I as toVirtualAccountId, J as toVirtualCardId, L as toWebhookEndpointId, Q as toWebhookEventId, R as toWithdrawalId } from './next-action-CTGl8wpy.js';
 import { Account as Account$1 } from 'viem';
 export { WebhookVerificationOptions, WebhookVerificationResult, verifyWebhook } from './webhooks.js';
 
 /**
- * Auth flow errors may originate from two CapxulError surfaces:
- *  - the SDK-local generic `CapxulError<Codes>` returned by
- *    `client.auth.*` tuple methods
- *  - the `@repo/config` `CapxulError` produced by the `Errors.xxx()`
- *    factory family (per `error-handling.md`)
- *
- * Both share `.code`, `.message`, `.details`, and extend `Error`. The
- * union keeps either origin assignable to `context.error` without an
- * `as` cast at the call site.
- */
-type AuthFlowError = CapxulError | CapxulError$1;
-type AuthFlowContext = {
-    readonly email: Email | null;
-    readonly session: Session | null;
-    readonly error: AuthFlowError | null;
-};
-type AuthFlowEvent = {
-    readonly type: "REQUEST_OTP";
-    readonly email: Email;
-} | {
-    readonly type: "VERIFY";
-    readonly code: string;
-} | {
-    readonly type: "RESET";
-} | {
-    readonly type: "SIGN_OUT";
-};
-/**
- * Build the auth state machine bound to a `CapxulClient` instance.
+ * Unified error type used across the entire stack: backend, SDK, and frontend.
+ * One class, one set of codes, one language.
  *
- * States: `idle -> sending_otp -> otp_requested -> verifying ->
- * authenticated -> signing_out -> idle`, with `error` as a sidecar
- * from any async step.
+ * Backend throws CapxulError → withErrorBoundary serializes to ConvexError →
+ * SDK deserializes back to CapxulError → frontend routes on err.code.
  */
-declare function createAuthFlowMachine(client: CapxulClient): xstate.StateMachine<AuthFlowContext, {
-    readonly type: "REQUEST_OTP";
-    readonly email: Email;
-} | {
-    readonly type: "VERIFY";
-    readonly code: string;
-} | {
-    readonly type: "RESET";
-} | {
-    readonly type: "SIGN_OUT";
-}, {
-    [x: string]: xstate.ActorRefFromLogic<xstate.PromiseActorLogic<void, {
-        email: Email;
-    }, xstate.EventObject>> | xstate.ActorRefFromLogic<xstate.PromiseActorLogic<Session, {
-        email: Email;
-        code: string;
-    }, xstate.EventObject>> | xstate.ActorRefFromLogic<xstate.PromiseActorLogic<void, void, xstate.EventObject>> | undefined;
-}, {
-    src: "sendOtp";
-    logic: xstate.PromiseActorLogic<void, {
-        email: Email;
-    }, xstate.EventObject>;
-    id: string | undefined;
-} | {
-    src: "verifyOtp";
-    logic: xstate.PromiseActorLogic<Session, {
-        email: Email;
-        code: string;
-    }, xstate.EventObject>;
-    id: string | undefined;
-} | {
-    src: "signOut";
-    logic: xstate.PromiseActorLogic<void, void, xstate.EventObject>;
-    id: string | undefined;
-}, {
-    type: "trackOtpRequested";
-    params: unknown;
-} | {
-    type: "trackOtpFailed";
-    params: unknown;
-} | {
-    type: "trackTimeoutFailed";
-    params: unknown;
-} | {
-    type: "trackVerified";
-    params: unknown;
-} | {
-    type: "identifyAndTrack";
-    params: unknown;
-} | {
-    type: "trackSignedOut";
-    params: unknown;
-}, never, never, "idle" | "authenticated" | "error" | "sending_otp" | "otp_requested" | "verifying" | "signing_out", string, xstate.NonReducibleUnknown, xstate.NonReducibleUnknown, xstate.EventObject, xstate.MetaObject, {
-    id: "auth";
-    states: {
-        readonly idle: {};
-        readonly sending_otp: {};
-        readonly otp_requested: {};
-        readonly verifying: {};
-        readonly authenticated: {};
-        readonly signing_out: {};
-        readonly error: {};
-    };
-}>;
+type CapxulErrorCode = "NOT_AUTHENTICATED" | "EMAIL_DELIVERY_FAILED" | "API_KEY_INVALID" | "API_KEY_EXPIRED" | "PROFILE_NOT_FOUND" | "SMART_ACCOUNT_MISSING" | "PLAYER_NOT_FOUND" | "ACCOUNT_NOT_FOUND" | "PROVIDER_ERROR" | "INVALID_INPUT" | "ENV_MISSING" | "NOT_IMPLEMENTED" | "VERIFICATION_REQUIRED" | "INSUFFICIENT_BALANCE" | "INVALID_RECIPIENT" | "TRANSACTION_FAILED" | "RATE_LIMITED" | "NETWORK_ERROR" | "PERMISSION_DENIED" | "IDEMPOTENCY_CONFLICT" | "NOT_FOUND" | "OPERATION_CANCELED" | "OPERATION_TIMEOUT" | "ACTION_REQUIRED" | "KYC_REQUIRED" | "POLICY_DENIED" | "SAFE_NOT_READY" | "PROVIDER_UNAVAILABLE" | "PROVIDER_REJECTED" | "RECONCILIATION_FAILED" | "INTERNAL_ERROR" | "QUOTE_EXPIRED" | "QUOTE_NOT_FOUND" | "INDEXER_DELIVERY_TIMEOUT" | "UNKNOWN";
+declare class CapxulError extends Error {
+    readonly code: CapxulErrorCode;
+    readonly details?: Record<string, unknown>;
+    readonly correlationId?: string;
+    readonly layer?: string;
+    constructor(code: CapxulErrorCode, message: string, options?: {
+        cause?: unknown;
+        details?: Record<string, unknown>;
+        correlationId?: string;
+        layer?: string;
+    });
+}
 
 /**
  * Provisioning flow errors may originate from two CapxulError surfaces:
@@ -120,7 +41,7 @@ declare function createAuthFlowMachine(client: CapxulClient): xstate.StateMachin
  *
  * Both share `.code`, `.message`, `.details`, and extend `Error`.
  */
-type ProvisioningFlowError = CapxulError | CapxulError$1;
+type ProvisioningFlowError = CapxulError$1 | CapxulError;
 type ProvisioningFlowContext = {
     readonly input: AccountProvisionPersonalInput | null;
     readonly account: Account | null;
@@ -197,7 +118,7 @@ declare function createProvisioningMachine(client: CapxulClient): xstate.StateMa
 }, {
     type: "hasInput";
     params: unknown;
-}, never, "idle" | "error" | "done" | "starting" | "running", string, {
+}, never, "done" | "error" | "idle" | "starting" | "running", string, {
     readonly input: AccountProvisionPersonalInput;
 }, {
     readonly account: Account;
@@ -227,7 +148,7 @@ declare function createProvisioningMachine(client: CapxulClient): xstate.StateMa
  *
  * Both share `.code`, `.message`, `.details`, and extend `Error`.
  */
-type OnboardingFlowError = CapxulError | CapxulError$1;
+type OnboardingFlowError = CapxulError$1 | CapxulError;
 /** Subjects supported by the onboarding flow. */
 type OnboardingSubjectKind = "account" | "organization";
 /**
@@ -305,7 +226,7 @@ declare function createOnboardingFlowMachine(client: CapxulClient): xstate.State
     }, {
         type: "hasInput";
         params: unknown;
-    }, never, "idle" | "error" | "done" | "starting" | "running", string, {
+    }, never, "done" | "error" | "idle" | "starting" | "running", string, {
         readonly input: AccountProvisionPersonalInput;
     }, {
         readonly account: Account;
@@ -347,7 +268,7 @@ declare function createOnboardingFlowMachine(client: CapxulClient): xstate.State
     }, {
         type: "hasInput";
         params: unknown;
-    }, never, "idle" | "error" | "done" | "starting" | "running", string, {
+    }, never, "done" | "error" | "idle" | "starting" | "running", string, {
         readonly input: AccountProvisionPersonalInput;
     }, {
         readonly account: Account;
@@ -440,8 +361,8 @@ declare function createOnboardingFlowMachine(client: CapxulClient): xstate.State
  * No `default:` arm needed — the compile-time exhaustiveness check is
  * the contract.
  */
-declare function matchError<Codes extends CapxulErrorCode, R>(err: CapxulError<Codes>, handlers: {
-    [K in Codes]: (err: CapxulError<K>) => R;
+declare function matchError<Codes extends CapxulErrorCode$1, R>(err: CapxulError$1<Codes>, handlers: {
+    [K in Codes]: (err: CapxulError$1<K>) => R;
 }): R;
 /**
  * Exhaustive resource-status dispatch per CANON.md §4.44.
@@ -497,4 +418,44 @@ declare function tryCatch<T>(promise: Promise<T>): Promise<[Error, null] | [null
  */
 declare function createLocalSigner(privateKey: `0x${string}`): Account$1;
 
-export { Account, AccountProvisionPersonalInput, type AuthFlowContext, type AuthFlowError, type AuthFlowEvent, CapxulClient, CapxulError, CapxulErrorCode, Email, NextAction, type OnboardingFlowContext, type OnboardingFlowError, type OnboardingFlowEvent, type OnboardingProfileInput, type OnboardingSubjectKind, OperationId, type ProvisioningFlowContext, type ProvisioningFlowError, type ProvisioningFlowEvent, type ProvisioningFlowInput, type ProvisioningFlowOutput, Session, Username, createAuthFlowMachine, createLocalSigner, createOnboardingFlowMachine, createProvisioningMachine as createProvisioningFlowMachine, matchAction, matchError, matchStatus, tryCatch };
+type SignerProvisionResult = {
+    readonly signer: Account$1;
+    readonly safeAddress: `0x${string}`;
+};
+/**
+ * Headless signer auto-provisioner.
+ *
+ * Generates a fresh viem private-key account and deterministically derives
+ * the corresponding Safe v1.4.1 address.
+ *
+ * No consumer computes `safeAddress` — it is derived internally and
+ * returned alongside the signer so `AuthService.completeBootstrap`
+ * can supply it to the backend.
+ *
+ * **Key persistence note:** Every call to `provision()` mints a fresh
+ * private key. The caller MUST persist the returned `signer` (or its
+ * private key) if the derived `safeAddress` must be recoverable in
+ * future sessions. The bootstrap flow persists the signer via the
+ * backend (`signerProvider` row), but direct API consumers are
+ * responsible for their own key storage.
+ */
+declare class SignerProvisioner {
+    provision(): SignerProvisionResult;
+}
+
+type PaymentToken = {
+    readonly address: `0x${string}`;
+    readonly decimals: number;
+    readonly symbol: string;
+};
+/**
+ * Resolve a currency code to its on-chain payment token metadata.
+ *
+ * Currently supports USDC only (USD and USDC codes map to the same
+ * token). Non-USDC codes return a `NOT_IMPLEMENTED` stub so callers
+ * can scaffold multi-currency flows before the registry is fully
+ * populated.
+ */
+declare function resolvePaymentToken(currency: string): PaymentToken;
+
+export { Account, AccountProvisionPersonalInput, CapxulClient, CapxulError$1 as CapxulError, CapxulErrorCode$1 as CapxulErrorCode, NextAction, type OnboardingFlowContext, type OnboardingFlowError, type OnboardingFlowEvent, type OnboardingProfileInput, type OnboardingSubjectKind, OperationId, type PaymentToken, type ProvisioningFlowContext, type ProvisioningFlowError, type ProvisioningFlowEvent, type ProvisioningFlowInput, type ProvisioningFlowOutput, type SignerProvisionResult, SignerProvisioner, Username, createLocalSigner, createOnboardingFlowMachine, createProvisioningMachine as createProvisioningFlowMachine, matchAction, matchError, matchStatus, resolvePaymentToken, tryCatch };