@capxul/sdk 1.0.0-alpha.10 → 1.0.0-alpha.12

package/dist/index.d.mts

@@ -1,10 +1,14 @@
-import { A as SubAccount, C as PublishableKey, D as RunId, E as RoleKey, F as CapxulErrorDetails, I as FailureMode, N as CapxulError, O as SessionToken, P as CapxulErrorCode, S as Profile$1, T as PublishableKeyRecord, _ as EpochMs, a as AnonymousDistinctId, b as Money, c as AuthUserId, d as CountryCode, f as CurrencyCode, g as Email, h as DurationMs, i as AllowedOrigin, j as SubAccountId, k as SmartAccount$1, m as DocumentHash, n as AccountId, o as AppId, p as DeveloperApplication, r as Address, s as AuthSession, t as Account, u as ChainId, w as PublishableKeyId, x as OrgId } from "./index-CTXgQ_xR.mjs";
-import { a as AccountProvider, c as Eip1193Provider, d as CapxulResult, f as Profile, g as AuthCachePort, i as injectedWalletSigner, l as eip1193AccountProvider, m as SmartAccount, n as CapxulSigner, o as AccountProviderSource, p as Session, r as Eip1193RequestProvider, s as AccountRequirement, t as CapxulDigestSigner, u as localPrivateKeyAccountProvider, v as CachedJwt } from "./signer-D9fUJp8o.mjs";
-import { a as SafeDeploymentEvidence, n as SafeDeploymentConfig } from "./safe-deployment-D3k9yndM.mjs";
-import { Hex } from "viem";
+import { a as AccountProvider, c as Eip1193Provider, d as CapxulResult, f as Profile, g as AuthCachePort, i as injectedWalletSigner, l as eip1193AccountProvider, m as SmartAccount, n as CapxulSigner, o as AccountProviderSource, p as Session, r as Eip1193RequestProvider, s as AccountRequirement, t as CapxulDigestSigner, u as localPrivateKeyAccountProvider, v as CachedJwt } from "./signer-DEMJbpJ2.mjs";
+import { a as SafeDeploymentEvidence, n as SafeDeploymentConfig } from "./safe-deployment-DMGB1kEL.mjs";
+import { CapxulError, CapxulError as CapxulError$1, CapxulErrorCode, CapxulErrorCode as CapxulErrorCode$1, CapxulErrorDetails, CapxulErrorDetails as CapxulErrorDetails$1, isCapxulError } from "@capxul/errors";
+import { CapxulError as CapxulError$2, CapxulErrorCode as CapxulErrorCode$2, CapxulErrorDetails as CapxulErrorDetails$2, FailureMode } from "@capxul/config";
+import { Account, Account as Account$1, AccountId, Address, Address as Address$1, AllowedOrigin, AnonymousDistinctId, AppId, AuthSession, AuthSession as AuthSession$1, AuthUserId, AuthUserId as AuthUserId$1, ChainId, CountryCode, DeveloperApplication, DurationMs, Email, EpochMs, Money, Money as Money$1, OrgId, OrgId as OrgId$1, Profile as Profile$1, PublishableKey, PublishableKeyId, PublishableKeyRecord, RoleKey, RoleKey as RoleKey$1, RunId, SessionToken, SmartAccount as SmartAccount$1, SubAccount, SubAccount as SubAccount$1, SubAccountId, SubAccountId as SubAccountId$1 } from "@capxul/types";
 import { Context, Effect, Layer, Request } from "effect";
 import { FunctionReference } from "convex/server";
+import { Hex } from "viem";
 import { Schema } from "@effect/schema";
+import { AttachablePaymentDocumentEnvelopeV1, LineItemV1, OnchainEvidence, PaymentDocumentEnvelopeV1, WithdrawalDocumentEnvelopeV1 } from "@capxul/wire";
+import { TelemetryPort } from "@capxul/observability";
 import { Machine } from "@effect/experimental";
 
 //#region src/ports/auth-client.d.ts
@@ -39,8 +43,8 @@ declare class AuthClientError extends AuthClientError_base<{
 interface AuthClientPort {
   canSendOtp(input: CanSendOtpInput, options?: AuthClientOperationOptions): Effect.Effect<CanSendOtpStatus, AuthClientError>;
   sendOtp(input: SendOtpInput, options?: AuthClientOperationOptions): Effect.Effect<void, AuthClientError>;
-  verifyOtp(input: VerifyOtpInput, options?: AuthClientOperationOptions): Effect.Effect<AuthSession, AuthClientError>;
-  getSession(options?: AuthClientOperationOptions): Effect.Effect<AuthSession | null, AuthClientError>;
+  verifyOtp(input: VerifyOtpInput, options?: AuthClientOperationOptions): Effect.Effect<AuthSession$1, AuthClientError>;
+  getSession(options?: AuthClientOperationOptions): Effect.Effect<AuthSession$1 | null, AuthClientError>;
   signOut(options?: AuthClientOperationOptions): Effect.Effect<void, AuthClientError>;
   /**
    * Fetches a Convex-aud JWT from `/api/auth/convex/token` (W7). Server mints
@@ -65,50 +69,6 @@ declare class ClockError extends ClockError_base<{
   readonly cause: unknown;
 }> {}
 //#endregion
-//#region ../observability/src/telemetry-port.d.ts
-/**
- * Context for reporting handled errors via `reportHandledError`.
- * Carries structured metadata extracted from the error context.
- */
-interface HandledErrorReportContext$1 {
-  readonly layer?: string;
-  readonly operation?: string;
-  readonly failure_mode?: FailureMode;
-  readonly provider?: string;
-}
-/**
- * Canonical TelemetryPort interface. Every adapter (production, test, in-memory)
- * implements this contract. All methods return `Effect<void, never>` —
- * fire-and-forget, defects are caught and traced.
- */
-interface TelemetryPort {
-  readonly emit: (event: TelemetryEvent) => Effect.Effect<void, never>;
-  readonly identify: (input: TelemetryIdentifyInput) => Effect.Effect<void, never>;
-  readonly group: (input: TelemetryGroupInput) => Effect.Effect<void, never>;
-  readonly reset: () => Effect.Effect<void, never>;
-  readonly reportHandledError?: (error: CapxulError, context?: HandledErrorReportContext$1) => Effect.Effect<void, never>;
-}
-//#endregion
-//#region ../observability/src/index.d.ts
-declare const TELEMETRY_EVENT_NAMES: readonly ["auth_otp_requested", "auth_otp_delivered", "auth_otp_expired", "auth_verified", "auth_failed", "auth_signed_out", "provisioning_safe_created", "provisioning_safe_confirmed", "bootstrap_resolved", "bootstrap_failed", "account_balance_read", "account_balance_failed", "faucet_requested", "faucet_confirmed", "faucet_failed", "subaccount_created", "subaccount_renamed", "subaccount_deleted", "subaccount_op_failed", "transfer_requested", "transfer_confirmed", "transfer_failed", "org_create_started", "org_safe_created", "org_safe_confirmed", "org_roles_seeded", "org_created", "org_create_failed", "org_invite_sent", "org_invite_accepted", "org_role_granted", "org_member_active", "org_member_removed", "org_invite_expired", "org_role_grant_failed", "payment_requested", "payment_resolved", "payment_document_attached", "payment_submitted", "payment_settled", "payment_claimed", "payment_cancelled", "payment_redirected", "payment_failed", "stream_created", "stream_claimed", "stream_cancelled", "stream_completed", "stream_failed", "withdrawal_requested", "withdrawal_submitted", "withdrawal_settled", "withdrawal_failed"];
-type TelemetryEventName = (typeof TELEMETRY_EVENT_NAMES)[number];
-type TelemetryProps = Record<string, unknown>;
-type TelemetryEvent = {
-  readonly name: TelemetryEventName;
-  readonly props?: TelemetryProps | undefined;
-};
-interface TelemetryIdentifyInput {
-  readonly distinctId: string;
-  readonly anonDistinctId?: AnonymousDistinctId;
-  readonly traits?: TelemetryProps;
-  readonly properties?: TelemetryProps;
-}
-interface TelemetryGroupInput {
-  readonly groupType: string;
-  readonly groupKey: string;
-  readonly properties?: TelemetryProps;
-}
-//#endregion
 //#region src/flows/auth.d.ts
 interface AuthFlowInput {
   readonly otpTtlMs?: number;
@@ -117,10 +77,10 @@ type AuthFlowState = "idle" | "sending_otp" | "otp_requested" | "verifying" | "a
 interface AuthFlowContext {
   readonly state: AuthFlowState;
   readonly email: Email | null;
-  readonly session: AuthSession | null;
+  readonly session: AuthSession$1 | null;
   readonly otpRequestedAt: EpochMs | null;
   readonly anonDistinctId?: AnonymousDistinctId;
-  readonly error: CapxulError | null;
+  readonly error: CapxulError$2 | null;
 }
 interface AuthFlowObserver {
   readonly input: AuthFlowInput;
@@ -148,10 +108,10 @@ declare const EnvError_base: new <A extends Record<string, any> = {}>(args: impo
   readonly _tag: "EnvError";
 } & Readonly<A>;
 declare class EnvError extends EnvError_base<{
-  readonly publicError: CapxulError;
-  readonly publicCode?: CapxulErrorCode;
+  readonly publicError: CapxulError$2;
+  readonly publicCode?: CapxulErrorCode$2;
   readonly key?: string;
-  readonly details?: CapxulErrorDetails;
+  readonly details?: CapxulErrorDetails$2;
   readonly cause?: unknown;
 }> {}
 interface EnvPort {
@@ -173,11 +133,11 @@ declare const TransportError_base: new <A extends Record<string, any> = {}>(args
 declare class TransportError extends TransportError_base<{
   readonly operation: TransportOperationKind;
   readonly name: string;
-  readonly publicCode: CapxulErrorCode;
-  readonly publicError: CapxulError;
+  readonly publicCode: CapxulErrorCode$2;
+  readonly publicError: CapxulError$2;
   readonly cause: unknown;
   readonly correlationId?: string;
-  readonly details?: CapxulErrorDetails;
+  readonly details?: CapxulErrorDetails$2;
 }> {}
 interface TransportPort {
   readonly runQuery: <TOutput = unknown, TArgs = unknown>(request: TransportRequest<TArgs>) => Effect.Effect<TOutput, TransportError>;
@@ -219,9 +179,9 @@ declare const BootstrapError_base: new <A extends Record<string, any> = {}>(args
 declare class BootstrapError extends BootstrapError_base<{
   readonly operation: "resolve";
   readonly kind: BootstrapErrorKind;
-  readonly publicCode: CapxulErrorCode;
+  readonly publicCode: CapxulErrorCode$2;
   readonly cause: unknown;
-  readonly details?: CapxulErrorDetails;
+  readonly details?: CapxulErrorDetails$2;
 }> {}
 interface BootstrapPort {
   readonly resolve: (input: BootstrapInput) => Effect.Effect<BootstrapResolution, BootstrapError>;
@@ -265,7 +225,7 @@ type Unsubscribe = () => void;
  *
  * @internal-use
  */
-type Snapshot<T, E = CapxulError> = {
+type Snapshot<T, E = CapxulError$2> = {
   readonly status: "loading";
 } | {
   readonly status: "ok";
@@ -281,10 +241,10 @@ declare const ConvexCallError_base: new <A extends Record<string, any> = {}>(arg
 } & Readonly<A>;
 declare class ConvexCallError extends ConvexCallError_base<{
   readonly operation: string;
-  readonly publicCode: CapxulErrorCode;
-  readonly publicError: CapxulError;
+  readonly publicCode: CapxulErrorCode$2;
+  readonly publicError: CapxulError$2;
   readonly cause: unknown;
-  readonly details?: CapxulErrorDetails;
+  readonly details?: CapxulErrorDetails$2;
 }> {}
 interface ConvexCallPort {
   query<TArgs extends Record<string, unknown>, TOutput>(fn: FunctionReference<"query", "public", TArgs, TOutput>, args: TArgs): Effect.Effect<TOutput, ConvexCallError>;
@@ -301,22 +261,22 @@ interface ConvexCallPort {
 //#endregion
 //#region src/ports/credentials.d.ts
 type CreateApplicationInput = {
-  readonly authUserId: AuthUserId;
+  readonly authUserId: AuthUserId$1;
   readonly name: string;
   readonly allowedOrigins: readonly AllowedOrigin[];
 };
 type MintKeyInput = {
   readonly applicationId: AppId;
-  readonly authUserId: AuthUserId;
+  readonly authUserId: AuthUserId$1;
 };
 type RotateKeyInput = {
   readonly keyId: PublishableKeyId;
-  readonly authUserId: AuthUserId;
+  readonly authUserId: AuthUserId$1;
   readonly graceMs: DurationMs;
 };
 type RevokeKeyInput = {
   readonly keyId: PublishableKeyId;
-  readonly authUserId: AuthUserId;
+  readonly authUserId: AuthUserId$1;
 };
 type RotateKeyResult = {
   readonly active: PublishableKeyRecord;
@@ -327,13 +287,13 @@ declare const CredentialsError_base: new <A extends Record<string, any> = {}>(ar
 } & Readonly<A>;
 declare class CredentialsError extends CredentialsError_base<{
   readonly operation: string;
-  readonly publicCode: CapxulErrorCode;
-  readonly publicError: CapxulError;
+  readonly publicCode: CapxulErrorCode$2;
+  readonly publicError: CapxulError$2;
   readonly cause: unknown;
-  readonly details?: CapxulErrorDetails;
+  readonly details?: CapxulErrorDetails$2;
 }> {}
 interface CredentialsPort {
-  listApplications(authUserId: AuthUserId): Effect.Effect<readonly DeveloperApplication[], CredentialsError>;
+  listApplications(authUserId: AuthUserId$1): Effect.Effect<readonly DeveloperApplication[], CredentialsError>;
   createApplication(input: CreateApplicationInput): Effect.Effect<DeveloperApplication, CredentialsError>;
   mintPublishableKey(input: MintKeyInput): Effect.Effect<PublishableKeyRecord, CredentialsError>;
   rotatePublishableKey(input: RotateKeyInput): Effect.Effect<RotateKeyResult, CredentialsError>;
@@ -342,13 +302,13 @@ interface CredentialsPort {
 //#endregion
 //#region src/ports/identity.d.ts
 type CreateIdentityInput = {
-  readonly authUserId: AuthUserId;
+  readonly authUserId: AuthUserId$1;
   readonly email: Email;
   readonly displayName?: string;
   readonly country?: CountryCode;
 };
 type UpdateIdentityInput = {
-  readonly authUserId: AuthUserId;
+  readonly authUserId: AuthUserId$1;
   readonly displayName?: string;
   readonly country?: CountryCode;
 };
@@ -361,24 +321,24 @@ type UpdateIdentityInput = {
  * flags live on the wire row and are not projected onto the read surface.
  */
 type CompleteOnboardingIdentityInput = {
-  readonly authUserId: AuthUserId;
+  readonly authUserId: AuthUserId$1;
   readonly email: Email;
   readonly displayName: string;
   readonly country: CountryCode;
-  readonly withdrawalAddress?: Address;
+  readonly withdrawalAddress?: Address$1;
 };
 declare const IdentityError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P] }>) => import("effect/Cause").YieldableError & {
   readonly _tag: "IdentityError";
 } & Readonly<A>;
 declare class IdentityError extends IdentityError_base<{
   readonly operation: string;
-  readonly publicCode: CapxulErrorCode;
-  readonly publicError: CapxulError;
+  readonly publicCode: CapxulErrorCode$2;
+  readonly publicError: CapxulError$2;
   readonly cause: unknown;
-  readonly details?: CapxulErrorDetails;
+  readonly details?: CapxulErrorDetails$2;
 }> {}
 interface IdentityPort {
-  loadByAuthUserId(authUserId: AuthUserId): Effect.Effect<Profile$1 | null, IdentityError, never>;
+  loadByAuthUserId(authUserId: AuthUserId$1): Effect.Effect<Profile$1 | null, IdentityError, never>;
   create(input: CreateIdentityInput): Effect.Effect<Profile$1, IdentityError, never>;
   update(input: UpdateIdentityInput): Effect.Effect<Profile$1, IdentityError, never>;
   /** D-ONBOARD (#669): idempotent upsert that marks the identity onboarded. */
@@ -387,7 +347,7 @@ interface IdentityPort {
 //#endregion
 //#region src/ports/smart-account.d.ts
 type ProvisionInput = {
-  readonly authUserId: AuthUserId;
+  readonly authUserId: AuthUserId$1;
   readonly chainId: ChainId;
 };
 /**
@@ -405,9 +365,9 @@ type ProvisionInput = {
  * `eth_getUserOperationReceipt(userOpHash)` to re-verify and derive.
  */
 type ConfirmDeploymentInput = {
-  readonly authUserId: AuthUserId;
+  readonly authUserId: AuthUserId$1;
   readonly chainId: ChainId;
-  readonly safeAddress: Address;
+  readonly safeAddress: Address$1;
   readonly evidence: SafeDeploymentEvidence;
   /**
    * Optional live-E2E correlation id. This does not prove deployment; the
@@ -423,9 +383,9 @@ type ConfirmDeploymentInput = {
  * nothing at claim.
  */
 type ClaimInput = {
-  readonly authUserId: AuthUserId;
+  readonly authUserId: AuthUserId$1;
   readonly chainId: ChainId;
-  readonly signerAddress: Address;
+  readonly signerAddress: Address$1;
   readonly telemetryRunId?: RunId;
 };
 declare const SmartAccountError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P] }>) => import("effect/Cause").YieldableError & {
@@ -433,14 +393,14 @@ declare const SmartAccountError_base: new <A extends Record<string, any> = {}>(a
 } & Readonly<A>;
 declare class SmartAccountError extends SmartAccountError_base<{
   readonly operation: string;
-  readonly publicCode: CapxulErrorCode;
-  readonly publicError: CapxulError;
+  readonly publicCode: CapxulErrorCode$2;
+  readonly publicError: CapxulError$2;
   readonly cause: unknown;
-  readonly details?: CapxulErrorDetails;
+  readonly details?: CapxulErrorDetails$2;
 }> {}
 interface SmartAccountPort {
-  loadByAuthUserId(authUserId: AuthUserId): Effect.Effect<SmartAccount$1 | null, SmartAccountError, never>;
-  loadBySmartAccountAddress(address: Address): Effect.Effect<SmartAccount$1 | null, SmartAccountError, never>;
+  loadByAuthUserId(authUserId: AuthUserId$1): Effect.Effect<SmartAccount$1 | null, SmartAccountError, never>;
+  loadBySmartAccountAddress(address: Address$1): Effect.Effect<SmartAccount$1 | null, SmartAccountError, never>;
   provision(input: ProvisionInput): Effect.Effect<SmartAccount$1, SmartAccountError, never>;
   /**
    * Persist on-chain Safe-deployment evidence. The backend re-verifies
@@ -468,7 +428,7 @@ type ReadAccountBalanceInput = {
 };
 type FundFromFaucetInput = {
   readonly chainId: ChainId;
-  readonly amount: Money;
+  readonly amount: Money$1;
 };
 type FundFromFaucetResult = {
   readonly txHash: string;
@@ -478,17 +438,17 @@ declare const AccountReadError_base: new <A extends Record<string, any> = {}>(ar
 } & Readonly<A>;
 declare class AccountReadError extends AccountReadError_base<{
   readonly operation: string;
-  readonly publicCode: CapxulErrorCode;
-  readonly publicError: CapxulError;
+  readonly publicCode: CapxulErrorCode$2;
+  readonly publicError: CapxulError$2;
   readonly cause: unknown;
-  readonly details?: CapxulErrorDetails;
+  readonly details?: CapxulErrorDetails$2;
 }> {}
 /**
  * Logical Account money read (M2 Slice S1a). Joins the `accounts` row with a
  * live RPC `balanceOf` pull; the adapter lifts wire integers to `Money`.
  */
 interface AccountReadPort {
-  readBalance(input: ReadAccountBalanceInput): Effect.Effect<Account, AccountReadError, never>;
+  readBalance(input: ReadAccountBalanceInput): Effect.Effect<Account$1, AccountReadError, never>;
   fundFromFaucet(input: FundFromFaucetInput): Effect.Effect<FundFromFaucetResult, AccountReadError, never>;
 }
 //#endregion
@@ -498,20 +458,20 @@ declare const SubAccountError_base: new <A extends Record<string, any> = {}>(arg
 } & Readonly<A>;
 declare class SubAccountError extends SubAccountError_base<{
   readonly operation: string;
-  readonly publicCode: CapxulErrorCode;
-  readonly publicError: CapxulError;
+  readonly publicCode: CapxulErrorCode$2;
+  readonly publicError: CapxulError$2;
   readonly cause: unknown;
-  readonly details?: CapxulErrorDetails;
+  readonly details?: CapxulErrorDetails$2;
 }> {}
 type CreateSubAccountInput = {
   readonly accountId: AccountId;
   readonly name: string;
 };
 type SubAccountIdInput = {
-  readonly subAccountId: SubAccountId;
+  readonly subAccountId: SubAccountId$1;
 };
 type RenameSubAccountInput = {
-  readonly subAccountId: SubAccountId;
+  readonly subAccountId: SubAccountId$1;
   readonly name: string;
 };
 /**
@@ -520,7 +480,7 @@ type RenameSubAccountInput = {
  * specific sub-account, addressed by its `SubAccountId` (canon
  * `account-balance-model.md` §5, §12).
  */
-type TransferEndpoint = "main" | SubAccountId;
+type TransferEndpoint = "main" | SubAccountId$1;
 /**
  * Move money between two of the SAME Account's balances (canon §12). The
  * backend resolves the Account from auth (v1 = one Account per user), so the
@@ -531,7 +491,7 @@ type TransferEndpoint = "main" | SubAccountId;
 type TransferInput = {
   readonly from: TransferEndpoint;
   readonly to: TransferEndpoint;
-  readonly amount: Money;
+  readonly amount: Money$1;
 };
 /**
  * Result of a `transfer`: the recomputed `available` (`balanceOf − Σ`), plus
@@ -539,17 +499,17 @@ type TransferInput = {
  * has no stored row, so its slot is `null`.
  */
 type TransferResult = {
-  readonly available: Money;
-  readonly from: SubAccount | null;
-  readonly to: SubAccount | null;
+  readonly available: Money$1;
+  readonly from: SubAccount$1 | null;
+  readonly to: SubAccount$1 | null;
 };
 interface SubAccountPort {
-  create(input: CreateSubAccountInput): Effect.Effect<SubAccount, SubAccountError, never>;
-  get(input: SubAccountIdInput): Effect.Effect<SubAccount | null, SubAccountError, never>;
+  create(input: CreateSubAccountInput): Effect.Effect<SubAccount$1, SubAccountError, never>;
+  get(input: SubAccountIdInput): Effect.Effect<SubAccount$1 | null, SubAccountError, never>;
   list(input: {
     readonly accountId: AccountId;
-  }): Effect.Effect<readonly SubAccount[], SubAccountError, never>;
-  rename(input: RenameSubAccountInput): Effect.Effect<SubAccount, SubAccountError, never>;
+  }): Effect.Effect<readonly SubAccount$1[], SubAccountError, never>;
+  rename(input: RenameSubAccountInput): Effect.Effect<SubAccount$1, SubAccountError, never>;
   delete(input: SubAccountIdInput): Effect.Effect<void, SubAccountError, never>;
   transfer(input: TransferInput): Effect.Effect<TransferResult, SubAccountError, never>;
 }
@@ -612,7 +572,7 @@ interface FlowPorts {
  * convention, flow-shape composites stay co-located with their flow.
  */
 interface ExternalSigner {
-  readonly address: Address;
+  readonly address: Address$1;
   readonly signedProof: string;
 }
 //#endregion
@@ -674,7 +634,7 @@ type ProvisioningPhase = {
 } | {
   readonly status: "failed";
   readonly at: ProvisioningFailureStep;
-  readonly error: CapxulError;
+  readonly error: CapxulError$2;
 };
 //#endregion
 //#region src/client/account-lifecycle.d.ts
@@ -691,248 +651,48 @@ type AccountLifecycle = {
 } | {
   readonly status: "failed";
   readonly at: AccountSetupStep;
-  readonly error: CapxulError;
+  readonly error: CapxulError$2;
 };
 declare function isSettingUpLifecycle(lifecycle: AccountLifecycle): boolean;
 //#endregion
-//#region ../wire/src/financial-ops.d.ts
-declare const AttachablePaymentDocumentEnvelope: Schema.Union<[Schema.Struct<{
-  protocol: Schema.Literal<["capxul.payment-document"]>;
-  version: Schema.Literal<[1]>;
-  domain: Schema.Struct<{
-    name: Schema.Literal<["CapxulPayments"]>;
-    version: Schema.Literal<["1"]>;
-    chainId: Schema.Schema<ChainId, number, never>;
-    verifyingContract: Schema.Literal<["0xe740ea65521edc9bef0ea75d30b5334711db99f4"]>;
-  }>;
-  primaryType: Schema.Literal<["Memo"]>;
-  message: Schema.Struct<{
-    kind: Schema.Literal<[0]>;
-    reference: typeof Schema.String;
-    note: typeof Schema.String;
-    issuedAt: Schema.refine<number, Schema.Schema<number, number, never>>;
-  }>;
-}>, Schema.Struct<{
-  protocol: Schema.Literal<["capxul.payment-document"]>;
-  version: Schema.Literal<[1]>;
-  domain: Schema.Struct<{
-    name: Schema.Literal<["CapxulPayments"]>;
-    version: Schema.Literal<["1"]>;
-    chainId: Schema.Schema<ChainId, number, never>;
-    verifyingContract: Schema.Literal<["0xe740ea65521edc9bef0ea75d30b5334711db99f4"]>;
-  }>;
-  primaryType: Schema.Literal<["Invoice"]>;
-  message: Schema.Struct<{
-    kind: Schema.Literal<[1]>;
-    invoiceNumber: typeof Schema.String;
-    payerRef: typeof Schema.String;
-    payeeRef: typeof Schema.String;
-    amount: Schema.refine<string, Schema.Schema<string, string, never>>;
-    currency: Schema.Schema<CurrencyCode, string, never>;
-    decimals: Schema.refine<number, Schema.Schema<number, number, never>>;
-    issuedAt: Schema.refine<number, Schema.Schema<number, number, never>>;
-    dueAt: Schema.refine<number, Schema.Schema<number, number, never>>;
-    lineItemsHash: Schema.Schema<DocumentHash, string, never>;
-  }>;
-}>, Schema.Struct<{
-  protocol: Schema.Literal<["capxul.payment-document"]>;
-  version: Schema.Literal<[1]>;
-  domain: Schema.Struct<{
-    name: Schema.Literal<["CapxulPayments"]>;
-    version: Schema.Literal<["1"]>;
-    chainId: Schema.Schema<ChainId, number, never>;
-    verifyingContract: Schema.Literal<["0xe740ea65521edc9bef0ea75d30b5334711db99f4"]>;
-  }>;
-  primaryType: Schema.Literal<["Payslip"]>;
-  message: Schema.Struct<{
-    kind: Schema.Literal<[2]>;
-    employerRef: typeof Schema.String;
-    employeeRef: typeof Schema.String;
-    period: typeof Schema.String;
-    gross: Schema.refine<string, Schema.Schema<string, string, never>>;
-    net: Schema.refine<string, Schema.Schema<string, string, never>>;
-    currency: Schema.Schema<CurrencyCode, string, never>;
-    decimals: Schema.refine<number, Schema.Schema<number, number, never>>;
-    issuedAt: Schema.refine<number, Schema.Schema<number, number, never>>;
-  }>;
-}>, Schema.Struct<{
-  protocol: Schema.Literal<["capxul.payment-document"]>;
-  version: Schema.Literal<[1]>;
-  domain: Schema.Struct<{
-    name: Schema.Literal<["CapxulPayments"]>;
-    version: Schema.Literal<["1"]>;
-    chainId: Schema.Schema<ChainId, number, never>;
-    verifyingContract: Schema.Literal<["0xe740ea65521edc9bef0ea75d30b5334711db99f4"]>;
-  }>;
-  primaryType: Schema.Literal<["Receipt"]>;
-  message: Schema.Struct<{
-    kind: Schema.Literal<[3]>;
-    reference: typeof Schema.String;
-    amount: Schema.refine<string, Schema.Schema<string, string, never>>;
-    currency: Schema.Schema<CurrencyCode, string, never>;
-    decimals: Schema.refine<number, Schema.Schema<number, number, never>>;
-    paidAt: Schema.refine<number, Schema.Schema<number, number, never>>;
-    note: typeof Schema.String;
-  }>;
-}>]>;
-declare const WithdrawalDocumentEnvelope: Schema.Struct<{
-  protocol: Schema.Literal<["capxul.payment-document"]>;
-  version: Schema.Literal<[1]>;
-  domain: Schema.Struct<{
-    name: Schema.Literal<["CapxulPayments"]>;
-    version: Schema.Literal<["1"]>;
-    chainId: Schema.Schema<ChainId, number, never>;
-    verifyingContract: Schema.Literal<["0xe740ea65521edc9bef0ea75d30b5334711db99f4"]>;
-  }>;
-  primaryType: Schema.Literal<["Withdrawal"]>;
-  message: Schema.Struct<{
-    kind: Schema.Literal<[4]>;
-    reference: typeof Schema.String;
-    amount: Schema.refine<string, Schema.Schema<string, string, never>>;
-    currency: Schema.Schema<CurrencyCode, string, never>;
-    decimals: Schema.refine<number, Schema.Schema<number, number, never>>;
-    destChain: Schema.Schema<ChainId, number, never>;
-    destAddress: Schema.refine<string, Schema.Schema<string, string, never>>;
-    settledAt: Schema.refine<number, Schema.Schema<number, number, never>>;
-    provider: typeof Schema.String;
-    note: typeof Schema.String;
-  }>;
-}>;
-declare const PaymentDocumentEnvelope: Schema.Union<[Schema.Union<[Schema.Struct<{
-  protocol: Schema.Literal<["capxul.payment-document"]>;
-  version: Schema.Literal<[1]>;
-  domain: Schema.Struct<{
-    name: Schema.Literal<["CapxulPayments"]>;
-    version: Schema.Literal<["1"]>;
-    chainId: Schema.Schema<ChainId, number, never>;
-    verifyingContract: Schema.Literal<["0xe740ea65521edc9bef0ea75d30b5334711db99f4"]>;
-  }>;
-  primaryType: Schema.Literal<["Memo"]>;
-  message: Schema.Struct<{
-    kind: Schema.Literal<[0]>;
-    reference: typeof Schema.String;
-    note: typeof Schema.String;
-    issuedAt: Schema.refine<number, Schema.Schema<number, number, never>>;
-  }>;
-}>, Schema.Struct<{
-  protocol: Schema.Literal<["capxul.payment-document"]>;
-  version: Schema.Literal<[1]>;
-  domain: Schema.Struct<{
-    name: Schema.Literal<["CapxulPayments"]>;
-    version: Schema.Literal<["1"]>;
-    chainId: Schema.Schema<ChainId, number, never>;
-    verifyingContract: Schema.Literal<["0xe740ea65521edc9bef0ea75d30b5334711db99f4"]>;
-  }>;
-  primaryType: Schema.Literal<["Invoice"]>;
-  message: Schema.Struct<{
-    kind: Schema.Literal<[1]>;
-    invoiceNumber: typeof Schema.String;
-    payerRef: typeof Schema.String;
-    payeeRef: typeof Schema.String;
-    amount: Schema.refine<string, Schema.Schema<string, string, never>>;
-    currency: Schema.Schema<CurrencyCode, string, never>;
-    decimals: Schema.refine<number, Schema.Schema<number, number, never>>;
-    issuedAt: Schema.refine<number, Schema.Schema<number, number, never>>;
-    dueAt: Schema.refine<number, Schema.Schema<number, number, never>>;
-    lineItemsHash: Schema.Schema<DocumentHash, string, never>;
-  }>;
-}>, Schema.Struct<{
-  protocol: Schema.Literal<["capxul.payment-document"]>;
-  version: Schema.Literal<[1]>;
-  domain: Schema.Struct<{
-    name: Schema.Literal<["CapxulPayments"]>;
-    version: Schema.Literal<["1"]>;
-    chainId: Schema.Schema<ChainId, number, never>;
-    verifyingContract: Schema.Literal<["0xe740ea65521edc9bef0ea75d30b5334711db99f4"]>;
-  }>;
-  primaryType: Schema.Literal<["Payslip"]>;
-  message: Schema.Struct<{
-    kind: Schema.Literal<[2]>;
-    employerRef: typeof Schema.String;
-    employeeRef: typeof Schema.String;
-    period: typeof Schema.String;
-    gross: Schema.refine<string, Schema.Schema<string, string, never>>;
-    net: Schema.refine<string, Schema.Schema<string, string, never>>;
-    currency: Schema.Schema<CurrencyCode, string, never>;
-    decimals: Schema.refine<number, Schema.Schema<number, number, never>>;
-    issuedAt: Schema.refine<number, Schema.Schema<number, number, never>>;
-  }>;
-}>, Schema.Struct<{
-  protocol: Schema.Literal<["capxul.payment-document"]>;
-  version: Schema.Literal<[1]>;
-  domain: Schema.Struct<{
-    name: Schema.Literal<["CapxulPayments"]>;
-    version: Schema.Literal<["1"]>;
-    chainId: Schema.Schema<ChainId, number, never>;
-    verifyingContract: Schema.Literal<["0xe740ea65521edc9bef0ea75d30b5334711db99f4"]>;
-  }>;
-  primaryType: Schema.Literal<["Receipt"]>;
-  message: Schema.Struct<{
-    kind: Schema.Literal<[3]>;
-    reference: typeof Schema.String;
-    amount: Schema.refine<string, Schema.Schema<string, string, never>>;
-    currency: Schema.Schema<CurrencyCode, string, never>;
-    decimals: Schema.refine<number, Schema.Schema<number, number, never>>;
-    paidAt: Schema.refine<number, Schema.Schema<number, number, never>>;
-    note: typeof Schema.String;
-  }>;
-}>]>, Schema.Struct<{
-  protocol: Schema.Literal<["capxul.payment-document"]>;
-  version: Schema.Literal<[1]>;
-  domain: Schema.Struct<{
-    name: Schema.Literal<["CapxulPayments"]>;
-    version: Schema.Literal<["1"]>;
-    chainId: Schema.Schema<ChainId, number, never>;
-    verifyingContract: Schema.Literal<["0xe740ea65521edc9bef0ea75d30b5334711db99f4"]>;
-  }>;
-  primaryType: Schema.Literal<["Withdrawal"]>;
-  message: Schema.Struct<{
-    kind: Schema.Literal<[4]>;
-    reference: typeof Schema.String;
-    amount: Schema.refine<string, Schema.Schema<string, string, never>>;
-    currency: Schema.Schema<CurrencyCode, string, never>;
-    decimals: Schema.refine<number, Schema.Schema<number, number, never>>;
-    destChain: Schema.Schema<ChainId, number, never>;
-    destAddress: Schema.refine<string, Schema.Schema<string, string, never>>;
-    settledAt: Schema.refine<number, Schema.Schema<number, number, never>>;
-    provider: typeof Schema.String;
-    note: typeof Schema.String;
-  }>;
-}>]>;
-/**
- * #592 invoice line item. `quantity` is a positive integer; `unitMinor` is the
- * per-unit price in integer minor units. The list is canonically hashed by
- * `hashLineItems` (payment-document-hash.ts) into the Invoice `lineItemsHash`,
- * and Σ(quantity × unitMinor) MUST equal the invoice `amount`. The hash binds
- * the documentHash to the exact items; the sum-check makes the items add up to
- * the amount due. See the payment-document spec (canon/mcp/financial-ops.md).
- */
-declare const LineItem: Schema.Struct<{
-  description: typeof Schema.String;
-  quantity: Schema.refine<number, Schema.Schema<number, number, never>>;
-  unitMinor: Schema.refine<string, Schema.Schema<string, string, never>>;
-}>;
-type AttachablePaymentDocumentEnvelopeV1 = Schema.Schema.Type<typeof AttachablePaymentDocumentEnvelope>;
-type PaymentDocumentEnvelopeV1 = Schema.Schema.Type<typeof PaymentDocumentEnvelope>;
-type WithdrawalDocumentEnvelopeV1 = Schema.Schema.Type<typeof WithdrawalDocumentEnvelope>;
-type LineItemV1 = Schema.Schema.Type<typeof LineItem>;
-//#endregion
-//#region ../wire/src/leak-safety.d.ts
-declare const OnchainEvidenceBrand: unique symbol;
-/**
- * The branded `{ userOpHash, txHash }` pair. On-chain settlement evidence is
- * INTERNAL — it flows on the server-internal channel only, never onto a wire
- * Payment or any MCP tool output. The brand makes "this is internal evidence"
- * a type, so a loose pair can't be passed where a wire field is expected.
- */
-type OnchainEvidence = {
-  readonly userOpHash: string;
-  readonly txHash: string;
-} & {
-  readonly [OnchainEvidenceBrand]: "OnchainEvidence";
-};
-//#endregion
 //#region src/client/financial-ops.d.ts
+type ActorReference = {
+  readonly kind: "personal";
+} | {
+  readonly kind: "organization";
+  readonly organizationId: string;
+};
+type TargetReference = {
+  readonly kind: "handle";
+  readonly handle: string;
+} | {
+  readonly kind: "email";
+  readonly email: string;
+} | {
+  readonly kind: "organization";
+  readonly handle: string;
+} | {
+  readonly kind: "payee";
+  readonly id: string;
+} | {
+  readonly kind: "destination";
+  readonly id: string;
+};
+interface ResolvedTarget {
+  readonly reference: TargetReference;
+  readonly label: string;
+  readonly kind: "person" | "organization" | "payee" | "destination";
+  readonly capabilities: {
+    readonly canPay: boolean;
+    readonly canRequest: boolean;
+    readonly canPayout: boolean;
+  };
+}
+interface TargetsMethods {
+  resolve(reference: TargetReference, options?: {
+    readonly signal?: AbortSignal;
+  }): Promise<CapxulResult<ResolvedTarget>>;
+}
 type RecipientResolutionKind = "email" | "org" | "payee";
 type Ref = {
   readonly kind: "handle";
@@ -1054,8 +814,10 @@ interface Payment {
   readonly updatedAt: number;
 }
 interface PaymentsPayInput {
-  readonly to: Ref;
+  readonly actor?: ActorReference;
+  readonly to: TargetReference;
   readonly amount: PaymentMoney;
+  readonly paymentType?: PaymentType;
   /** Full EIP-712 document envelope; hashed + stored, committed on-chain. */
   readonly document?: AttachablePaymentDocumentEnvelopeV1;
   /**
@@ -1089,16 +851,25 @@ interface PaymentsWithdrawInput {
  * id and never re-enters a raw wallet address on this path.
  */
 interface PaymentsPayoutInput {
-  readonly actor?: {
-    readonly kind: "account";
-  } | {
-    readonly kind: "org";
-    readonly orgId: string;
-  };
+  readonly actor?: ActorReference;
   readonly destinationId: string;
   readonly amount: PaymentMoney;
 }
-type DestinationKind = "bank" | "mobile-money" | "wallet";
+type DestinationKind = "bank_account" | "mobile_money" | "external_account";
+type DestinationRail = {
+  readonly kind: "bank";
+  readonly country: string;
+  readonly currency: string;
+} | {
+  readonly kind: "mobile_money";
+  readonly country: string;
+  readonly currency: string;
+  readonly provider: string;
+} | {
+  readonly kind: "chain";
+  readonly network: string;
+  readonly asset?: string;
+};
 type DestinationPayload = {
   readonly accountHolderName: string;
   readonly bankName: string;
@@ -1118,40 +889,30 @@ interface Destination {
   readonly id: string;
   readonly counterpartyId: string;
   readonly ref: Ref;
+  readonly target: TargetReference;
   readonly kind: DestinationKind;
+  readonly rail: DestinationRail;
   readonly label: string | null;
   readonly payload: DestinationPayload;
   readonly createdAt: number;
   readonly updatedAt: number;
 }
 interface DestinationAddInput {
-  readonly actor?: {
-    readonly kind: "account";
-  } | {
-    readonly kind: "org";
-    readonly orgId: string;
-  };
-  readonly ref: Ref;
+  readonly actor?: ActorReference;
+  readonly target?: TargetReference;
+  readonly ref?: Ref;
   readonly kind: DestinationKind;
   readonly label?: string;
   readonly payload: DestinationPayload;
 }
 interface DestinationListInput {
-  readonly actor?: {
-    readonly kind: "account";
-  } | {
-    readonly kind: "org";
-    readonly orgId: string;
-  };
-  readonly ref: Ref;
+  readonly actor?: ActorReference;
+  readonly target?: TargetReference;
+  readonly ref?: Ref;
+  readonly kind?: DestinationKind;
 }
 interface DestinationRemoveInput {
-  readonly actor?: {
-    readonly kind: "account";
-  } | {
-    readonly kind: "org";
-    readonly orgId: string;
-  };
+  readonly actor?: ActorReference;
   readonly destinationId: string;
 }
 interface DestinationsMethods {
@@ -1167,6 +928,63 @@ interface DestinationsMethods {
     readonly id: string;
   }>>;
 }
+interface ActivityListParams {
+  readonly actor?: ActorReference;
+  readonly cursor?: string;
+  readonly limit?: number;
+  readonly paymentType?: PaymentType;
+  readonly timing?: PaymentTiming["kind"];
+}
+interface ActivityItem {
+  readonly id: string;
+  readonly actor: ActorReference;
+  readonly kind: "payment" | "payout" | "withdrawal" | "deposit" | "claim";
+  readonly direction: "in" | "out" | "internal";
+  readonly status: PaymentStatus;
+  readonly amount: PaymentMoney;
+  readonly title: string;
+  readonly subtitle: string | null;
+  readonly target: TargetReference | null;
+  readonly paymentId: string | null;
+  readonly createdAt: number;
+  readonly updatedAt: number;
+}
+interface ActivityPage {
+  readonly items: readonly ActivityItem[];
+  readonly nextCursor: string | null;
+}
+interface ActivityMethods {
+  list(params?: ActivityListParams, options?: {
+    readonly signal?: AbortSignal;
+  }): Promise<CapxulResult<ActivityPage>>;
+}
+interface OfframpQuoteInput {
+  readonly actor?: ActorReference;
+  readonly destinationId: string;
+  readonly amount: PaymentMoney;
+}
+interface OfframpQuote {
+  readonly id: string;
+  readonly input: OfframpQuoteInput;
+  readonly expiresAt: number;
+  readonly receivedAmount: PaymentMoney;
+  readonly fee: PaymentMoney;
+}
+interface OfframpStatus {
+  readonly id: string;
+  readonly status: "pending" | "processing" | "completed" | "failed" | "cancelled";
+  readonly paymentId: string | null;
+  readonly destinationId: string;
+  readonly updatedAt: number;
+}
+interface OfframpMethods {
+  quote(input: OfframpQuoteInput, options?: {
+    readonly signal?: AbortSignal;
+  }): Promise<CapxulResult<OfframpQuote>>;
+  status(offrampId: string, options?: {
+    readonly signal?: AbortSignal;
+  }): Promise<CapxulResult<OfframpStatus>>;
+}
 interface PaymentSettlementInput {
   readonly paymentId: string;
   readonly evidence: OnchainEvidence;
@@ -1348,6 +1166,9 @@ interface PaymentsMethods {
   get(paymentId: string, options?: {
     readonly signal?: AbortSignal;
   }): Promise<CapxulResult<Payment | null>>;
+  cancel(paymentId: string, options?: {
+    readonly signal?: AbortSignal;
+  }): Promise<CapxulResult<Payment>>;
   /**
    * Host-execution + on-chain-evidence channel — off the public surface
    * (production-surface-policy.md pattern). Self-custody integrators drive this;
@@ -1523,8 +1344,11 @@ interface FinancialOpsMethods {
   readonly me: MeMethods;
   readonly handles: HandlesMethods;
   readonly payees: PayeesMethods;
+  readonly targets: TargetsMethods;
   readonly destinations: DestinationsMethods;
   readonly payments: PaymentsMethods;
+  readonly activity: ActivityMethods;
+  readonly offramp: OfframpMethods;
   readonly paymentDocuments: PaymentDocumentsMethods;
   /** Receivables surface (G5 · #548). */
   readonly paymentRequests: PaymentRequestsMethods;
@@ -1687,7 +1511,7 @@ type AccountStatus = {
   readonly requirement: AccountRequirement;
   readonly chainId: number;
   readonly source: AccountProviderSource;
-  readonly signerAddress: Address;
+  readonly signerAddress: Address$1;
 } | {
   readonly status: "accountPrepared";
   readonly requirement: AccountRequirement;
@@ -1766,7 +1590,7 @@ interface AccountInternalSurface {
 interface AccountsMethods {
   read(options?: {
     readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<Account>>;
+  }): Promise<CapxulResult<Account$1>>;
 }
 /**
  * Faucet surface (dev-only). Deliberately OFF the public `AccountsMethods`;
@@ -1774,37 +1598,13 @@ interface AccountsMethods {
  * The reference CLI uses it behind a test-env gate — consumers never see `fund`.
  */
 interface AccountsFaucetMethods {
-  fund(amount: Money, options?: {
+  fund(amount: Money$1, options?: {
     readonly signal?: AbortSignal;
   }): Promise<CapxulResult<{
     readonly txHash: string;
   }>>;
 }
 //#endregion
-//#region src/client/sub-accounts.d.ts
-interface SubAccountsMethods {
-  create(accountId: AccountId, input: {
-    readonly name: string;
-  }, options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<SubAccount>>;
-  get(subAccountId: SubAccountId, options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<SubAccount | null>>;
-  list(accountId: AccountId, options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<readonly SubAccount[]>>;
-  rename(subAccountId: SubAccountId, name: string, options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<SubAccount>>;
-  delete(subAccountId: SubAccountId, options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<void>>;
-  transfer(input: TransferInput, options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<TransferResult>>;
-}
-//#endregion
 //#region src/client/org-spend-gate.d.ts
 /**
  * The role's allowed recipients. The address form backs the S4 `spend` path
@@ -1813,12 +1613,12 @@ interface SubAccountsMethods {
  * (handle/email/payee/org) compared in the same ref space as the role's set.
  * Comparison is case-insensitive over the raw string value either way.
  */
-type SpendGateRecipients = "anyone" | readonly (Address | string)[];
+type SpendGateRecipients = "anyone" | readonly (Address$1 | string)[];
 type SpendGateSubAccountScope = {
   readonly scope: "all";
 } | {
   readonly scope: "only";
-  readonly subAccountIds: readonly SubAccountId[];
+  readonly subAccountIds: readonly SubAccountId$1[];
 };
 //#endregion
 //#region src/ports/org.d.ts
@@ -1830,48 +1630,48 @@ type SpendGateSubAccountScope = {
  * internally and enforces the real validated recipient on the gate.
  */
 type OrgSpendShape = {
-  readonly from: SubAccountId;
-  readonly to: Address;
-  readonly amount: Money;
+  readonly from: SubAccountId$1;
+  readonly to: Address$1;
+  readonly amount: Money$1;
 };
 type CreateOrgPortInput = {
   readonly input: CreateOrgInput;
 };
 type ReadOrgTreasuryInput = {
-  readonly orgId: OrgId;
+  readonly orgId: OrgId$1;
 };
 type ListOrgsInput = Record<never, never>;
 type ListOrgRolesInput = {
-  readonly orgId: OrgId;
+  readonly orgId: OrgId$1;
 };
 type ListOrgMembersInput = {
-  readonly orgId: OrgId;
+  readonly orgId: OrgId$1;
 };
 type InviteOrgMemberInput = {
-  readonly orgId: OrgId;
+  readonly orgId: OrgId$1;
   readonly input: InviteMemberInput;
 };
 type ResendOrgInviteTokenInput = {
-  readonly orgId: OrgId;
+  readonly orgId: OrgId$1;
   readonly email: string;
 };
 type DetectPendingOrgInvitationsInput = Record<never, never>;
 type DetectPendingOrgInvitationsResult$1 = {
-  readonly matched: readonly OrgId[];
+  readonly matched: readonly OrgId$1[];
 };
 type DeployOrgRolesInput = {
-  readonly orgId: OrgId;
+  readonly orgId: OrgId$1;
 };
 type OrgRolesDeploymentResult = {
-  readonly orgId: OrgId;
+  readonly orgId: OrgId$1;
   readonly roles: readonly RoleView[];
 };
 type GrantOrgRoleInput = {
-  readonly orgId: OrgId;
+  readonly orgId: OrgId$1;
   readonly input: AssignRoleInput;
 };
 type RevokeOrgRoleInput = {
-  readonly orgId: OrgId;
+  readonly orgId: OrgId$1;
   readonly input: RemoveMemberInput;
 };
 type OrgSpendAuthority = {
@@ -1885,7 +1685,7 @@ type OrgSpendAuthority = {
   readonly role?: string;
 };
 type ReadOrgSpendAuthorityInput = {
-  readonly orgId: OrgId;
+  readonly orgId: OrgId$1;
   readonly input: OrgSpendShape;
   readonly amountRaw: string;
 };
@@ -1894,10 +1694,10 @@ declare const OrgError_base: new <A extends Record<string, any> = {}>(args: impo
 } & Readonly<A>;
 declare class OrgError extends OrgError_base<{
   readonly operation: string;
-  readonly publicCode: CapxulErrorCode;
-  readonly publicError: CapxulError;
+  readonly publicCode: CapxulErrorCode$1;
+  readonly publicError: CapxulError$1;
   readonly cause: unknown;
-  readonly details?: CapxulErrorDetails;
+  readonly details?: CapxulErrorDetails$1;
 }> {}
 /**
  * Live org seam. `createOrg` runs the SDK-orchestrated deploy (D10) and returns
@@ -1907,7 +1707,7 @@ declare class OrgError extends OrgError_base<{
  */
 interface OrgPort {
   createOrg(input: CreateOrgPortInput): Effect.Effect<OrgView, OrgError, never>;
-  readTreasury(input: ReadOrgTreasuryInput): Effect.Effect<Account, OrgError, never>;
+  readTreasury(input: ReadOrgTreasuryInput): Effect.Effect<Account$1, OrgError, never>;
   listOrgs(input: ListOrgsInput): Effect.Effect<readonly OrgView[], OrgError, never>;
   listRoles(input: ListOrgRolesInput): Effect.Effect<readonly RoleView[], OrgError, never>;
   listMembers(input: ListOrgMembersInput): Effect.Effect<readonly MemberView[], OrgError, never>;
@@ -1922,13 +1722,13 @@ interface OrgRolesDeploymentPort {
   revokeRole(input: RevokeOrgRoleInput): Effect.Effect<void, OrgError, never>;
 }
 type SubmitOrgSpendViaPaymentsInput = {
-  readonly orgId: OrgId;
+  readonly orgId: OrgId$1;
   readonly input: OrgSpendViaPaymentsInput;
   readonly amountRaw: string;
   readonly authority: OrgSpendAuthority;
 };
 type SubmitOrgBatchPayrollInput = {
-  readonly orgId: OrgId;
+  readonly orgId: OrgId$1;
   readonly from: OrgSpendViaPaymentsInput["from"];
   readonly runs: readonly {
     readonly run: OrgPayrollRun;
@@ -1968,13 +1768,28 @@ type MemberStatus = "pending" | "pending_safe" | "pending_grant" | "active" | "r
  * brand.
  */
 type OrgView = {
-  readonly id: OrgId;
+  readonly id: OrgId$1;
   readonly name: string;
   readonly handle: string;
-  readonly safeAddress: Address; /** The viewing member's own role label within this org. */
+  readonly safeAddress: Address$1; /** The viewing member's own role label within this org. */
   readonly role: string; /** The Org treasury — the real M2 Account over the Org Safe (D3). */
-  readonly treasury: Account;
+  readonly treasury: Account$1;
 };
+interface OrganizationAccount {
+  readonly id: string;
+  readonly address: string | null;
+  readonly balance: Money$1;
+  readonly available: Money$1;
+}
+interface OrganizationAuditLogItem {
+  readonly id: string;
+  readonly organizationId: string;
+  readonly action: string;
+  readonly actor: string | null;
+  readonly summary: string;
+  readonly createdAt: number;
+  readonly metadata?: Record<string, unknown>;
+}
 /**
  * One member of an Org (canon §C1 "Members" — name/email, role, status; D7/D8).
  * `personalSafeAddress` is the member-identity key (D7 — Safe-as-identity); it
@@ -1982,12 +1797,12 @@ type OrgView = {
  * yet provisioned a personal Safe). `email` is the universal entry point (D8).
  */
 type MemberView = {
-  readonly orgId: OrgId;
+  readonly orgId: OrgId$1;
   readonly email: Email;
   readonly name: string | null; /** Member-identity key (D7). `null` until the invitee provisions a Safe. */
-  readonly personalSafeAddress: Address | null; /** The member's role label (maps deterministically to the on-chain `roleKey`, D9). */
+  readonly personalSafeAddress: Address$1 | null; /** The member's role label (maps deterministically to the on-chain `roleKey`, D9). */
   readonly role: string;
-  readonly roleKey: RoleKey | null;
+  readonly roleKey: RoleKey$1 | null;
   readonly status: MemberStatus;
   readonly grantTxHash: string | null;
   readonly revokeTxHash: string | null;
@@ -1999,9 +1814,9 @@ type MemberView = {
  * (the Owner role).
  */
 type RoleSpendCap = {
-  readonly perTx?: Money;
-  readonly perDay?: Money;
-  readonly toRecipients?: "anyone" | readonly Address[];
+  readonly perTx?: Money$1;
+  readonly perDay?: Money$1;
+  readonly toRecipients?: "anyone" | readonly Address$1[];
 };
 /**
  * The Capxul-owned Role DSL definition (D4). `label` becomes the sticky
@@ -2013,7 +1828,7 @@ type RoleDefinition = {
   readonly label: string;
   readonly spend?: RoleSpendCap;
   readonly subAccounts?: {
-    readonly scope: "all" | readonly SubAccountId[];
+    readonly scope: "all" | readonly SubAccountId$1[];
   };
   readonly canManageMembers?: boolean;
   readonly canManageRoles?: boolean;
@@ -2024,9 +1839,9 @@ type RoleDefinition = {
  * is the full Role DSL entry.
  */
 type RoleView = {
-  readonly orgId: OrgId;
+  readonly orgId: OrgId$1;
   readonly label: string;
-  readonly roleKey: RoleKey;
+  readonly roleKey: RoleKey$1;
   readonly definition: RoleDefinition;
 };
 /** Built-in role templates that seed a new Org at creation (D6). */
@@ -2064,7 +1879,7 @@ type ResendInviteTokenInput = {
  * mirror.
  */
 type RemoveMemberInput = {
-  readonly memberSafeAddress: Address;
+  readonly memberSafeAddress: Address$1;
 };
 /**
  * Input to `org(orgId).assignRole` (S3, D7/D9). Keyed on the member's personal
@@ -2072,7 +1887,7 @@ type RemoveMemberInput = {
  * label maps deterministically to the on-chain `roleKey`.
  */
 type AssignRoleInput = {
-  readonly memberSafeAddress: Address;
+  readonly memberSafeAddress: Address$1;
   readonly role: string;
 };
 /**
@@ -2085,9 +1900,9 @@ type AssignRoleInput = {
  * `from` is the Level-2 sub-account envelope the spend draws from (D5).
  */
 type OrgSpendViaPaymentsInput = {
-  readonly from: SubAccountId; /** Validated recipient ref (handle/email/payee/org) — never a raw address. */
+  readonly from: SubAccountId$1; /** Validated recipient ref (handle/email/payee/org) — never a raw address. */
   readonly to: Ref;
-  readonly amount: Money; /** Full EIP-712 payment document; hashed + stored, committed on-chain. */
+  readonly amount: Money$1; /** Full EIP-712 payment document; hashed + stored, committed on-chain. */
   readonly document?: PaymentDocumentEnvelopeV1;
   readonly timing?: PaymentTiming;
   readonly paymentType?: PaymentType;
@@ -2099,7 +1914,7 @@ type OrgSpendViaPaymentsInput = {
  */
 type OrgPayrollRun = {
   /** Validated recipient ref (handle/email/payee/org) — never a raw address. */readonly to: Ref;
-  readonly amount: Money;
+  readonly amount: Money$1;
   readonly timing?: PaymentTiming; /** The payslip — an EIP-712 payment document, committed by `documentHash`. */
   readonly payslip?: PaymentDocumentEnvelopeV1;
 };
@@ -2111,11 +1926,11 @@ type OrgPayrollRun = {
  * run.
  */
 type OrgBatchPayrollInput = {
-  readonly from: SubAccountId;
+  readonly from: SubAccountId$1;
   readonly runs: readonly OrgPayrollRun[];
 };
 type DetectPendingOrgInvitationsResult = {
-  readonly matched: readonly OrgId[];
+  readonly matched: readonly OrgId$1[];
 };
 /**
  * Entity-scoped Org method bundle, returned by `capxul.org(orgId)`. Every
@@ -2126,7 +1941,7 @@ type DetectPendingOrgInvitationsResult = {
 interface PayrollRosterLine {
   readonly id: string;
   readonly employee: Ref;
-  readonly amount: Money;
+  readonly amount: Money$1;
   readonly timing: PaymentTiming;
   readonly status: "active" | "paused" | "ended";
 }
@@ -2136,12 +1951,12 @@ interface PayrollPayslipTemplate {
 }
 interface PayrollRosterAddInput {
   readonly employee: Ref;
-  readonly amount: Money;
+  readonly amount: Money$1;
   readonly timing: PaymentTiming;
   readonly payslipTemplate?: PaymentDocumentEnvelopeV1 | PayrollPayslipTemplate;
 }
 interface PayrollRunInput {
-  readonly from: SubAccountId;
+  readonly from: SubAccountId$1;
   readonly period: string;
 }
 interface PayrollMethods {
@@ -2167,7 +1982,12 @@ interface OrgScopedMethods extends ActorRelationshipMethods {
   /** The Org treasury — the real M2 Account over the Org Safe (D3). */
   treasury(options?: {
     readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<Account>>;
+  }): Promise<CapxulResult<Account$1>>;
+  readonly account: {
+    get(options?: {
+      readonly signal?: AbortSignal;
+    }): Promise<CapxulResult<OrganizationAccount>>;
+  };
   members(options?: {
     readonly signal?: AbortSignal;
   }): Promise<CapxulResult<readonly MemberView[]>>;
@@ -2180,14 +2000,6 @@ interface OrgScopedMethods extends ActorRelationshipMethods {
   invite(input: InviteMemberInput, options?: {
     readonly signal?: AbortSignal;
   }): Promise<CapxulResult<MemberView>>;
-  pendingMembers(options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<readonly MemberView[]>>;
-  readonly inviteToken: {
-    resend(input: ResendInviteTokenInput, options?: {
-      readonly signal?: AbortSignal;
-    }): Promise<CapxulResult<MemberView>>;
-  };
   removeMember(input: RemoveMemberInput, options?: {
     readonly signal?: AbortSignal;
   }): Promise<CapxulResult<void>>;
@@ -2212,6 +2024,9 @@ interface OrgScopedMethods extends ActorRelationshipMethods {
     readonly signal?: AbortSignal;
   }): Promise<CapxulResult<readonly Payment[]>>;
   readonly payroll: PayrollMethods;
+  auditLog(options?: {
+    readonly signal?: AbortSignal;
+  }): Promise<CapxulResult<readonly OrganizationAuditLogItem[]>>;
 }
 type OrgsMethod = {
   (options?: {
@@ -2231,7 +2046,64 @@ interface OrgMethods {
   }): Promise<CapxulResult<OrgView>>;
   readonly orgs: OrgsMethod;
   /** Resolve the entity-scoped bundle for a specific Org (D13). */
-  org(orgId: OrgId): OrgScopedMethods;
+  org(orgId: OrgId$1): OrgScopedMethods;
+}
+//#endregion
+//#region src/client/current-user.d.ts
+interface CurrentUserContext {
+  readonly user: {
+    readonly id: string;
+    readonly email: string;
+    readonly displayName: string | null;
+    readonly handle: string | null;
+    readonly paymentLink: {
+      readonly handle: string;
+      readonly url: string;
+    } | null;
+  };
+  readonly personalAccount: {
+    readonly id: string;
+    readonly address: string | null;
+  } | null;
+  readonly organizations: readonly {
+    readonly id: string;
+    readonly name: string;
+    readonly handle: string;
+    readonly role: string;
+    readonly account: {
+      readonly id: string;
+      readonly address: string | null;
+    } | null;
+  }[];
+}
+interface CurrentUserMethods {
+  get(options?: {
+    readonly signal?: AbortSignal;
+  }): Promise<CapxulResult<CurrentUserContext>>;
+}
+//#endregion
+//#region src/client/sub-accounts.d.ts
+interface SubAccountsMethods {
+  create(accountId: AccountId, input: {
+    readonly name: string;
+  }, options?: {
+    readonly signal?: AbortSignal;
+  }): Promise<CapxulResult<SubAccount$1>>;
+  get(subAccountId: SubAccountId$1, options?: {
+    readonly signal?: AbortSignal;
+  }): Promise<CapxulResult<SubAccount$1 | null>>;
+  list(accountId: AccountId, options?: {
+    readonly signal?: AbortSignal;
+  }): Promise<CapxulResult<readonly SubAccount$1[]>>;
+  rename(subAccountId: SubAccountId$1, name: string, options?: {
+    readonly signal?: AbortSignal;
+  }): Promise<CapxulResult<SubAccount$1>>;
+  delete(subAccountId: SubAccountId$1, options?: {
+    readonly signal?: AbortSignal;
+  }): Promise<CapxulResult<void>>;
+  transfer(input: TransferInput, options?: {
+    readonly signal?: AbortSignal;
+  }): Promise<CapxulResult<TransferResult>>;
 }
 //#endregion
 //#region src/client/onboarding.d.ts
@@ -2295,9 +2167,11 @@ interface CapxulClient {
    * Returns `{ balance, available }` as `Money` — never wei or token units.
    */
   readonly accounts: AccountsMethods;
+  readonly currentUser: CurrentUserMethods;
   readonly me: MeMethods;
   readonly handles: HandlesMethods;
   readonly payees: PayeesMethods;
+  readonly targets: TargetsMethods;
   readonly destinations: DestinationsMethods;
   /**
    * Direct Payments surface (G2 · #545). `pay` records a validated-recipient
@@ -2305,6 +2179,8 @@ interface CapxulClient {
    * callback. The MCP `draft → simulate → approve → execute` workbench is G6.
    */
   readonly payments: PaymentsMethods;
+  readonly activity: ActivityMethods;
+  readonly offramp: OfframpMethods;
   /** Payment document verification (G2 · #545): re-derive the EIP-712 hash. */
   readonly paymentDocuments: PaymentDocumentsMethods;
   /**
@@ -2570,5 +2446,5 @@ declare function captureException(telemetry: TelemetryPort, error: unknown, cont
  */
 declare function captureExceptionSync(telemetry: TelemetryPort, error: unknown, context?: HandledErrorReportContext): void;
 //#endregion
-export { type Account, type AccountLifecycle, type AccountMethods, type AccountProvider, type AccountProviderSource, type AccountRequirement, type AccountSetupStep, type AccountsMethods, type ActorProfile, type ActorProfileMethods, type ActorRelationshipMethods, type ActorRequest, type ActorRequestIssueInput, type ActorRequestsMethods, type Address, type AddressBookAddInput, type AddressBookEntry, type AddressBookLabelInput, type AddressBookMethods, type AssignRoleInput, type AuthMethods, type AuthSession, type AuthUserId, type CapxulClient, type CapxulClientInput, type CapxulDigestSigner, type CapxulResult, type CapxulSigner, type CompleteOrganizationOnboardingInput, type CompleteOrganizationOnboardingResult, type CompletePersonalOnboardingInput, type CompletePersonalOnboardingResult, type CreateCapxulClientInput, type CreateOrgInput, type DepositInstructions, type Destination, type DestinationAddInput, type DestinationKind, type DestinationListInput, type DestinationPayload, type DestinationRemoveInput, type DestinationsMethods, type DetectPendingOrgInvitationsResult, type DevPrivateKeySignerInput, type Eip1193Provider, type Eip1193RequestProvider, type FinancialOpsMethods, type HandledErrorReportContext, type HandlesMethods, type IdentityMethods, type InboxApproveInput, type InboxItem, type InboxMethods, type InsightsMethods, type InsightsSummary, type InviteMemberInput, type MeMethods, type MeProfile, type MemberStatus, type MemberView, type Money, type OnboardingMethods, type OpenfortEmbeddedSignerInput, type OpenfortEmbeddedWalletApi, type OpenfortEmbeddedWalletPort, type OrgBatchPayrollInput, type OrgId, type OrgMethods, type OrgPayrollRun, type OrgScopedMethods, type OrgSpendViaPaymentsInput, type OrgTemplate, type OrgView, type Payee, type PayeesMethods, type Payment, type PaymentDocumentRef, type PaymentDocumentRender, type PaymentDocumentVerification, type PaymentDocumentsMethods, type PaymentDraft, type PaymentDraftStatus, type PaymentMoney, type PaymentRequest, type PaymentRequestStatus, type PaymentRequestsCreateInput, type PaymentRequestsMethods, type PaymentSettlementInput, type PaymentStatus, type PaymentTiming, type PaymentType, type PaymentsMethods, type PaymentsPayInput, type PaymentsPayoutInput, type PaymentsWithdrawInput, type PayrollMethods, type PayrollPayslipTemplate, type PayrollRosterAddInput, type PayrollRosterLine, type PayrollRunInput, type Profile, type RecipientResolution, type RecipientResolutionKind, type ReconciliationEntry, type Ref, type RemoveMemberInput, type ResendInviteTokenInput, type RoleDefinition, type RoleKey, type RoleSpendCap, type RoleView, type Session, type SmartAccount, type SmartAccountMethods, type SubAccount, type SubAccountId, type SubAccountsMethods, type TelemetryPort, type TransferEndpoint, type TransferInput, type TransferResult, type WorkbenchDraftInput, type WorkbenchExecuteInput, type WorkbenchMethods, type WorkbenchMintResult, captureException, captureExceptionSync, createCapxulClient, deriveDevPrivateKey, devPrivateKeySigner, eip1193AccountProvider, embeddedSigner, injectedWalletSigner, isSettingUpLifecycle, localPrivateKeyAccountProvider, openfortEmbeddedSigner, openfortEmbeddedSignerFromWallet, openfortEmbeddedWalletPort };
+export { type Account, type AccountLifecycle, type AccountMethods, type AccountProvider, type AccountProviderSource, type AccountRequirement, type AccountSetupStep, type AccountsMethods, type ActivityItem, type ActivityListParams, type ActivityMethods, type ActivityPage, type ActorProfile, type ActorProfileMethods, type ActorReference, type ActorRelationshipMethods, type ActorRequest, type ActorRequestIssueInput, type ActorRequestsMethods, type Address, type AddressBookAddInput, type AddressBookEntry, type AddressBookLabelInput, type AddressBookMethods, type AssignRoleInput, type AuthMethods, type AuthSession, type AuthUserId, type CapxulClient, type CapxulClientInput, type CapxulDigestSigner, CapxulError, type CapxulErrorCode, type CapxulErrorDetails, type CapxulResult, type CapxulSigner, type CompleteOrganizationOnboardingInput, type CompleteOrganizationOnboardingResult, type CompletePersonalOnboardingInput, type CompletePersonalOnboardingResult, type CreateCapxulClientInput, type CreateOrgInput, type CurrentUserContext, type CurrentUserMethods, type DepositInstructions, type Destination, type DestinationAddInput, type DestinationKind, type DestinationListInput, type DestinationPayload, type DestinationRail, type DestinationRemoveInput, type DestinationsMethods, type DetectPendingOrgInvitationsResult, type DevPrivateKeySignerInput, type Eip1193Provider, type Eip1193RequestProvider, type FinancialOpsMethods, type HandledErrorReportContext, type HandlesMethods, type IdentityMethods, type InboxApproveInput, type InboxItem, type InboxMethods, type InsightsMethods, type InsightsSummary, type InviteMemberInput, type MeMethods, type MeProfile, type MemberStatus, type MemberView, type Money, type OfframpMethods, type OfframpQuote, type OfframpQuoteInput, type OfframpStatus, type OnboardingMethods, type OpenfortEmbeddedSignerInput, type OpenfortEmbeddedWalletApi, type OpenfortEmbeddedWalletPort, type OrgBatchPayrollInput, type OrgId, type OrgMethods, type OrgPayrollRun, type OrgScopedMethods, type OrgSpendViaPaymentsInput, type OrgTemplate, type OrgView, type OrganizationAccount, type OrganizationAuditLogItem, type Payee, type PayeesMethods, type Payment, type PaymentDocumentRef, type PaymentDocumentRender, type PaymentDocumentVerification, type PaymentDocumentsMethods, type PaymentDraft, type PaymentDraftStatus, type PaymentMoney, type PaymentRequest, type PaymentRequestStatus, type PaymentRequestsCreateInput, type PaymentRequestsMethods, type PaymentSettlementInput, type PaymentStatus, type PaymentTiming, type PaymentType, type PaymentsMethods, type PaymentsPayInput, type PaymentsPayoutInput, type PaymentsWithdrawInput, type PayrollMethods, type PayrollPayslipTemplate, type PayrollRosterAddInput, type PayrollRosterLine, type PayrollRunInput, type Profile, type RecipientResolution, type RecipientResolutionKind, type ReconciliationEntry, type Ref, type RemoveMemberInput, type ResendInviteTokenInput, type ResolvedTarget, type RoleDefinition, type RoleKey, type RoleSpendCap, type RoleView, type Session, type SmartAccount, type SmartAccountMethods, type SubAccount, type SubAccountId, type SubAccountsMethods, type TargetReference, type TargetsMethods, type TelemetryPort, type TransferEndpoint, type TransferInput, type TransferResult, type WorkbenchDraftInput, type WorkbenchExecuteInput, type WorkbenchMethods, type WorkbenchMintResult, captureException, captureExceptionSync, createCapxulClient, deriveDevPrivateKey, devPrivateKeySigner, eip1193AccountProvider, embeddedSigner, injectedWalletSigner, isCapxulError, isSettingUpLifecycle, localPrivateKeyAccountProvider, openfortEmbeddedSigner, openfortEmbeddedSignerFromWallet, openfortEmbeddedWalletPort };
 //# sourceMappingURL=index.d.mts.map