@capxul/sdk 2.0.2 → 2.1.1

package/dist/{create-capxul-client-BixUOzdC.d.mts → create-capxul-client-BI-6Za6X.d.mts}

@@ -1,4 +1,4 @@
-import { $ as CapxulErrorDetails, A as CountryCode, B as PermissionAssignmentId, C as AllowedOrigin, D as AuthUserId, E as AuthSession, F as EpochMs, G as SessionToken, H as Profile, I as Money, J as WeiAmount, K as SmartAccount, L as MovementId, M as DocumentHash, N as DurationMs, O as BlockNumber, P as Email, Q as CapxulErrorCode, R as OrgId, S as AllowanceKey, T as AppId, U as PublishableKey, V as PermissionId, W as RoleKey, Z as CapxulError, d as CapxulResult, et as Failure, f as Profile$1, g as AuthCachePort, j as CurrencyCode, k as ChainId, m as SmartAccount$1, n as CapxulSigner, o as AccountProviderSource, p as Session$1, q as TxHash, s as AccountRequirement, tt as FailureMode, v as CachedJwt, w as AnonymousDistinctId, x as Address$1, y as Account$1, z as PaymentCommandId } from "./signer-CeH3ULzn.mjs";
+import { $ as CapxulErrorDetails, A as CountryCode, B as PermissionAssignmentId, C as AllowedOrigin, D as AuthUserId, E as AuthSession, F as EpochMs, G as SessionToken, H as Profile, I as Money, J as WeiAmount, K as SmartAccount, L as MovementId, M as DocumentHash, N as DurationMs, O as BlockNumber, P as Email, Q as CapxulErrorCode, R as OrgId, S as AllowanceKey, T as AppId, U as PublishableKey, V as PermissionId, W as RoleKey, Z as CapxulError, d as CapxulResult, et as Failure, f as Profile$1, g as AuthCachePort, j as CurrencyCode, k as ChainId, m as SmartAccount$1, n as CapxulSigner, o as AccountProviderSource, p as Session$1, q as TxHash, s as AccountRequirement, tt as FailureMode, v as CachedJwt, w as AnonymousDistinctId, x as Address$1, y as Account$1, z as PaymentCommandId } from "./signer-Bj4F-RwT.mjs";
 import { Address, Hex } from "viem";
 import { Context, Effect, Layer, Schema, Scope, Tracer } from "effect";
 import { FunctionReference } from "convex/server";
@@ -63,7 +63,7 @@ interface Session {
   readonly email: string;
   readonly authUserId: string;
 }
-/** the pre-S1 account lane — PRD #462: wallet→identity→provision is counterfactual
+/** The initial account state is counterfactual
  * and signerless; `deploy` is the separate claim step that needs a signer. */
 type AccountStep = "wallet" | "identity" | "provision" | "deploy";
 /** org-lifecycle.ts:7-11, verbatim. */
@@ -152,7 +152,7 @@ type IdentityState = {
   readonly phase: "faulted";
   readonly failure: Failure;
   /** Non-null exactly when an OTP entry is resumable — the incumbent's
-   * `email !== null && otpRequestedAt !== null` pair (the pre-S1 auth machine),
+   * `email !== null && otpRequestedAt !== null` pair,
    * made structural. */
   readonly resume: {
     readonly email: string;
@@ -331,7 +331,7 @@ type TelemetryEvent = {
  * a present `unknown` is loud), and sync v2 never synthesizes an artifact for
  * it.
  */
-declare const CAPXUL_ENVS: readonly ["development", "e2e", "staging", "production", "unknown"];
+declare const CAPXUL_ENVS: readonly ["development", "staging", "production", "unknown"];
 type CapxulEnv = (typeof CAPXUL_ENVS)[number];
 interface TelemetryIdentifyInput {
   readonly distinctId: string;
@@ -349,14 +349,17 @@ interface TelemetryGroupInput {
 declare const EngineeringTelemetryBootstrapPolicy: Schema.Struct<{
   readonly host: Schema.refine<string, Schema.String>;
   readonly projectToken: Schema.refine<string, Schema.String>;
-  readonly capxulEnv: Schema.Union<readonly [Schema.Literal<"development">, Schema.Literal<"e2e">, Schema.Literal<"staging">, Schema.Literal<"production">]>;
+  readonly capxulEnv: Schema.Union<readonly [Schema.Literal<"development">, Schema.Literal<"staging">, Schema.Literal<"production">]>;
 }>;
 type EngineeringTelemetryBootstrapPolicyV1 = Schema.Schema.Type<typeof EngineeringTelemetryBootstrapPolicy>;
 //#endregion
 //#region ../wire/src/status.d.ts
-/** The closed L2 Payment status authority. */
-declare const L2_PAYMENT_STATUSES: readonly ["pending", "settling", "scheduled", "streaming", "pending_claim", "settled", "cancelled", "failed"];
-type L2PaymentStatus = (typeof L2_PAYMENT_STATUSES)[number];
+/** The closed Payment status authority. */
+declare const PAYMENT_STATUSES: readonly ["pending", "settling", "scheduled", "streaming", "pending_claim", "settled", "cancelled", "failed"];
+type PaymentStatus$1 = (typeof PAYMENT_STATUSES)[number];
+/** The payment direction relative to the current actor. */
+declare const PAYMENT_DIRECTIONS: readonly ["in", "out", "self"];
+type PaymentDirection$1 = (typeof PAYMENT_DIRECTIONS)[number];
 /** What a payment is FOR. Pairs with `PAYMENT_DOCUMENT_KINDS`. */
 declare const PAYMENT_TYPES: readonly ["unspecified", "invoice", "payroll", "reimbursement"];
 type PaymentType$1 = (typeof PAYMENT_TYPES)[number];
@@ -378,7 +381,7 @@ declare const AttachablePaymentDocumentEnvelope: Schema.Union<readonly [Schema.S
     readonly name: Schema.Literal<"CapxulPayments">;
     readonly version: Schema.Literal<"1">;
     readonly chainId: Schema.Codec<ChainId, number, never, never>;
-    readonly verifyingContract: Schema.Literal<"0xe740ea65521edc9bef0ea75d30b5334711db99f4">;
+    readonly verifyingContract: Schema.Literal<"0xA3ACDD016f706eD432A9a0545C45F0943f996b60">;
   }>;
   readonly primaryType: Schema.Literal<"Memo">;
   readonly message: Schema.Struct<{
@@ -394,7 +397,7 @@ declare const AttachablePaymentDocumentEnvelope: Schema.Union<readonly [Schema.S
     readonly name: Schema.Literal<"CapxulPayments">;
     readonly version: Schema.Literal<"1">;
     readonly chainId: Schema.Codec<ChainId, number, never, never>;
-    readonly verifyingContract: Schema.Literal<"0xe740ea65521edc9bef0ea75d30b5334711db99f4">;
+    readonly verifyingContract: Schema.Literal<"0xA3ACDD016f706eD432A9a0545C45F0943f996b60">;
   }>;
   readonly primaryType: Schema.Literal<"Invoice">;
   readonly message: Schema.Struct<{
@@ -416,7 +419,7 @@ declare const AttachablePaymentDocumentEnvelope: Schema.Union<readonly [Schema.S
     readonly name: Schema.Literal<"CapxulPayments">;
     readonly version: Schema.Literal<"1">;
     readonly chainId: Schema.Codec<ChainId, number, never, never>;
-    readonly verifyingContract: Schema.Literal<"0xe740ea65521edc9bef0ea75d30b5334711db99f4">;
+    readonly verifyingContract: Schema.Literal<"0xA3ACDD016f706eD432A9a0545C45F0943f996b60">;
   }>;
   readonly primaryType: Schema.Literal<"Payslip">;
   readonly message: Schema.Struct<{
@@ -437,7 +440,7 @@ declare const AttachablePaymentDocumentEnvelope: Schema.Union<readonly [Schema.S
     readonly name: Schema.Literal<"CapxulPayments">;
     readonly version: Schema.Literal<"1">;
     readonly chainId: Schema.Codec<ChainId, number, never, never>;
-    readonly verifyingContract: Schema.Literal<"0xe740ea65521edc9bef0ea75d30b5334711db99f4">;
+    readonly verifyingContract: Schema.Literal<"0xA3ACDD016f706eD432A9a0545C45F0943f996b60">;
   }>;
   readonly primaryType: Schema.Literal<"Receipt">;
   readonly message: Schema.Struct<{
@@ -466,7 +469,7 @@ declare const LineItem: Schema.Struct<{
 type AttachablePaymentDocumentEnvelopeV1 = Schema.Schema.Type<typeof AttachablePaymentDocumentEnvelope>;
 type LineItemV1 = Schema.Schema.Type<typeof LineItem>;
 //#endregion
-//#region ../wire/src/l2-money.d.ts
+//#region ../wire/src/money.d.ts
 declare const MovementAnnotationSchema: Schema.Struct<{
   readonly movementId: Schema.Codec<MovementId, string, never, never>;
   readonly actor: Schema.Union<readonly [Schema.Struct<{
@@ -681,14 +684,10 @@ type Unsubscribe = () => void;
  *   - `error`   · a failed snapshot carrying a typed error (defaults to
  *                 `CapxulError`)
  *
- * The substrate guarantees the first snapshot is `loading` (CC8 in the
- * `ConvexCallPort` contract); subsequent snapshots carry `ok` or `error`
- * per the underlying transport.
+ * The first snapshot is `loading`. Later snapshots carry `ok` or `error`.
  *
- * Per ARCH-LOCK-1 (`docs/decisions/stage-4-reactivity-pivot.html`), domain
- * ports do not expose reactive callback methods — this pair lives on the
- * substrate port that owns `subscribe` (#1145 re-homed it from the former
- * `ports/subscription.ts`, which was never a port).
+ * Domain ports do not expose reactive callback methods. `ConvexCallPort` owns
+ * the `subscribe` method.
  *
  * @internal-use
  */
@@ -719,7 +718,7 @@ interface ConvexCallPort {
    * Substrate-level reactive transport over Convex's `onUpdate`.
    *
    * @internal-use — substrate only; see `ports/subscription.ts`. Domain
-   * ports do not expose reactive callback methods to consumers (ARCH-LOCK-1).
+   * ports do not expose reactive callback methods to consumers.
    */
   subscribe<TArgs extends Record<string, unknown>, TOutput>(fn: FunctionReference<"query", "public", TArgs, TOutput>, args: TArgs, callback: (snapshot: Snapshot<TOutput>) => void): Effect.Effect<Unsubscribe, ConvexCallError>;
 }
@@ -771,19 +770,7 @@ interface IdentityPort {
 }
 //#endregion
 //#region src/ports/smart-account.d.ts
-/**
- * Configuration for a Safe deployment: the chain + RPC endpoint +
- * gas-sponsorship policy. `receiptTimeoutMs` is optional; the deploying
- * adapter applies a default when omitted.
- *
- * #1145 (DEMOLITION §D4): re-homed here from the deleted
- * `ports/safe-deployment.ts`. The SafeDeploymentPort itself was fakes-only
- * plus one e2e adapter; the real Safe lifecycle is backend-orchestrated
- * through this port. Only the two data shapes below survive on the SDK
- * surface — `SafeDeploymentConfig` parameterises the org-deploy seam
- * (`orgDeploymentConfig`), `SafeDeploymentEvidence` is the payload of
- * `confirmDeployment`.
- */
+/** Safe deployment configuration for the Organization setup adapter. */
 type SafeDeploymentConfig = {
   readonly chainId: ChainId;
   readonly rpcUrl: string;
@@ -910,7 +897,7 @@ declare class AccountReadError extends AccountReadError_base<{
   readonly details?: CapxulErrorDetails;
 }> {}
 /**
- * Logical Account money read (M2 Slice S1a). Joins the `accounts` row with a
+ * The Account money read joins the `accounts` row with a
  * live RPC `balanceOf` pull; the adapter lifts wire integers to `Money`.
  */
 interface AccountReadPort {
@@ -919,15 +906,7 @@ interface AccountReadPort {
 }
 //#endregion
 //#region src/flows/types.d.ts
-/**
- * The full port bundle that `assembleCapxulClient` consumes.
- * (Was 13 before #1145 / DEMOLITION §D4 deleted the credentials, env and
- * transport ports — built by `production.ts`, read by nobody.)
- *
- * The identity actor receives this bundle through `BootIdentityFlowInput` and
- * uses only the existing ports needed by each work lane. Other domain flows
- * retain their own narrowed inputs.
- */
+/** The runtime port bundle that `assembleCapxulClient` uses. */
 interface FlowPorts {
   readonly authClient: AuthClientPort;
   readonly authCache: AuthCachePort;
@@ -1105,6 +1084,10 @@ type AccountLifecycle = {
 };
 declare function isSettingUpLifecycle(lifecycle: AccountLifecycle): boolean;
 //#endregion
+//#region src/surface/payment-command-execution.d.ts
+/** Return one stable fingerprint for one JSON payment intent. */
+declare function fingerprintPaymentIntent(intent: unknown): Promise<string>;
+//#endregion
 //#region src/surface/money.d.ts
 type ActorReference = {
   readonly kind: "personal";
@@ -1226,7 +1209,8 @@ interface PaymentMoney {
   readonly value: string;
   readonly decimals: number;
 }
-type PaymentStatus = L2PaymentStatus;
+type PaymentStatus = PaymentStatus$1;
+type PaymentDirection = PaymentDirection$1;
 type PaymentType = PaymentType$1;
 type PaymentDocumentKind = PaymentDocumentKind$1;
 interface PaymentDocumentRef {
@@ -1252,6 +1236,12 @@ interface Payment {
   readonly status: PaymentStatus;
   readonly amount: PaymentMoney;
   readonly paymentType: PaymentType;
+  readonly direction: PaymentDirection;
+  readonly counterpartyLabel: string;
+  readonly receipt: {
+    readonly chainId: number;
+    readonly transactionHash: string;
+  } | null;
   readonly recipient: {
     readonly kind: "handle" | "email" | "payee" | "capxulUserId" | "me" | "org" | "external_address";
     readonly label: string;
@@ -1265,8 +1255,6 @@ interface Payment {
   readonly updatedAt: number;
 }
 interface PaymentsPayInput {
-  /** Stable idempotency key for caller retries. Omit only for a one-shot payment. */
-  readonly requestKey?: string;
   readonly actor?: ActorReference;
   readonly to: TargetReference;
   readonly amount: PaymentMoney;
@@ -1282,7 +1270,7 @@ interface PaymentsPayInput {
   /** Full EIP-712 document envelope; hashed + stored, committed on-chain. */
   readonly document?: AttachablePaymentDocumentEnvelopeV1;
   /**
-   * Timing clause (D-SHAPE · #646). Omitted ⇒ `instant` (the G2 direct-send path).
+   * Payment timing. Omitted means `instant`.
    * A `scheduled`/`stream` clause turns the payment into a Commitment
    * (escrow-vest-claim) backed by `CapxulPayments.createCommitment`.
    */
@@ -1388,6 +1376,7 @@ interface ActivityListParams {
 type ActivityReference = {
   readonly kind: "payment";
   readonly id: string;
+  readonly actor?: ActorReference;
 } | {
   readonly kind: "movement";
   readonly id: string;
@@ -1398,6 +1387,12 @@ type ActivityItem = {
   readonly ledgerKind: "Payment" | "Payout" | "Deposit";
   readonly status: PaymentStatus;
   readonly amount: PaymentMoney;
+  readonly direction: PaymentDirection;
+  readonly counterpartyLabel: string;
+  readonly receipt: {
+    readonly chainId: number;
+    readonly transactionHash: string;
+  } | null;
   readonly createdAt: number;
   readonly updatedAt: number;
 } | {
@@ -1523,10 +1518,8 @@ interface PaymentDocumentRender {
   readonly html: string;
 }
 /**
- * The PUBLIC, Stripe-shaped Payments surface (D2 · #564). Genus verbs only —
- * `pay` / `list` / `get`. No `userOpHash` / `txHash` / `onchainCommitmentId` /
- * `chainId` / `safeAddress`. Host-execution + on-chain evidence live on the
- * `_internal` channel below; an external builder never touches custody substrate.
+ * The public Payments surface uses product-level methods. A settled receipt can
+ * include `chainId` and `transactionHash`. Internal custody fields stay private.
  */
 interface PaymentsMethods {
   pay(input: PaymentsPayInput, options?: {
@@ -1740,8 +1733,8 @@ type AccountStatus = {
  * here has those two own-keys and nothing else).
  *
  * Per `packages/sdk/docs/architecture.md`, the
- * `AccountStatus` discriminant — including the variants this slice can
- * only reach via `getStatus` (e.g. `accountPrepared`) — is the durable
+ * `AccountStatus` discriminant includes variants that are returned only by
+ * `getStatus` (for example, `accountPrepared`). It is the durable
  * shape consumers depend on. Sibling #161 will extend `ensureReady` to
  * advance the ladder past `accountProviderReady` and from
  * `accountPrepared` to `accountReady(deployed)`; until then, the type
@@ -1794,7 +1787,7 @@ interface AccountsMethods {
 /**
  * Faucet surface (dev-only). Deliberately OFF the public `AccountsMethods`;
  * reachable only via `client._internal.accounts` (production-surface-policy.md).
- * The reference CLI uses it behind a test-env gate — consumers never see `fund`.
+ * The reference CLI uses it only in the test environment. Consumers do not see `fund`.
  */
 interface AccountsFaucetMethods {
   fund(amount: Money, options?: {
@@ -1840,12 +1833,7 @@ declare class OrgError extends OrgError_base<{
   readonly cause: unknown;
   readonly details?: CapxulErrorDetails;
 }> {}
-/**
- * Live org seam. `createOrg` runs the SDK-orchestrated deploy (D10) and returns
- * the created `OrgView` (its treasury is the real M2 `Account` over the Org
- * Safe — $0 at creation, D3). `readTreasury` pulls the org's Account via RPC
- * `balanceOf` (D3). `listOrgs` lists the orgs the authenticated user belongs to.
- */
+/** The live Organization port creates, reads, and lists Organizations. */
 interface OrgPort {
   createOrg(input: CreateOrgPortInput): Effect.Effect<OrgView, OrgError, never>;
   readTreasury(input: ReadOrgTreasuryInput): Effect.Effect<Account$1, OrgError, never>;
@@ -1906,12 +1894,10 @@ interface OrganizationPaymentItemInput {
 }
 interface OrganizationPaymentInput extends OrganizationPaymentItemInput {
   readonly permissionId: string;
-  readonly requestKey: string;
   readonly lineage?: PaymentCommandLineage;
 }
 interface OrganizationPaymentBatchInput {
   readonly permissionId: string;
-  readonly requestKey: string;
   readonly items: readonly OrganizationPaymentItemInput[];
   readonly lineage?: PaymentCommandLineage;
 }
@@ -1925,27 +1911,15 @@ interface OrganizationPaymentsMethods {
 }
 //#endregion
 //#region src/surface/org.d.ts
-/**
- * A member's lifecycle status (D9 — unified `Member` with status
- * `pending | active | revoked | expired`). `pending` = invited (incl. a
- * non-user emailed into existence) but not yet a provisioned member with an
- * on-chain grant; `active` = on-chain role granted; `revoked` = offboarded
- * (on-chain REVOKE fired); `expired` = pending invitation timed out.
- */
+/** The membership state for one Organization member. */
 type MemberStatus = "pending" | "pending_safe" | "pending_grant" | "active" | "revoked" | "expired";
-/**
- * One Org you belong to (canon §C1 "Org list" — name, role, balance).
- * `role` is the member's role label within THIS org. `treasury` is the M2
- * `Account` over the Org Safe (D3). `handle` is the globally-unique,
- * normalized org handle (D10a). Pure record of brand-typed fields — not a
- * brand.
- */
+/** One Organization that the current user can access. */
 type OrgView = {
   readonly id: OrgId;
   readonly name: string;
   readonly handle: string;
   readonly safeAddress: Address$1; /** The viewing member's own role label within this org. */
-  readonly role: string; /** The Org treasury — the real M2 Account over the Org Safe (D3). */
+  readonly role: string; /** The Organization treasury Account. */
   readonly treasury: Account$1; /** #1064: onboarding-collected description + size bucket; null when unset. */
   readonly bio: string | null;
   readonly size: string | null; /** #1061 / ADR-0014: logo serving URL resolved at read time; null when unset. */
@@ -1967,38 +1941,28 @@ interface OrganizationAuditLogItem {
   readonly metadata?: Record<string, unknown>;
 }
 /**
- * One member of an Org (canon §C1 "Members" — name/email, role, status; D7/D8).
- * `personalSafeAddress` is the member-identity key (D7 — Safe-as-identity); it
+ * One Organization member. `personalSafeAddress` is the member identity key. It
  * is `null` while the member is still `pending` (emailed into existence but not
- * yet provisioned a personal Safe). `email` is the universal entry point (D8).
+ * yet provisioned a personal Safe). `email` is the universal entry point.
  */
 type MemberView = {
   readonly orgId: OrgId;
   readonly email: Email;
-  readonly name: string | null; /** Member-identity key (D7). `null` until the invitee provisions a Safe. */
-  readonly personalSafeAddress: Address$1 | null; /** The member's role label (maps deterministically to the on-chain `roleKey`, D9). */
+  readonly name: string | null; /** Member identity key. `null` until the invitee provisions a Safe. */
+  readonly personalSafeAddress: Address$1 | null; /** The member role label maps to the on-chain `roleKey`. */
   readonly role: string;
   readonly roleKey: RoleKey | null;
   readonly status: MemberStatus;
   readonly grantTxHash: string | null;
   readonly revokeTxHash: string | null;
 };
-/**
- * A role's on-chain Level-1 spend cap (D4/D5 — physically enforced via Zodiac
- * Roles + Allowance). `perTx` / `perDay` are `Money`; `toRecipients` scopes the
- * allowed recipient set. Omitting a field means "unbounded on that axis"
- * (the Owner role).
- */
+/** A role spend cap that Zodiac Roles and Allowance enforce on-chain. */
 type RoleSpendCap = {
   readonly perTx?: Money;
   readonly perDay?: Money;
   readonly toRecipients?: "anyone" | readonly Address$1[];
 };
-/**
- * The Capxul-owned Role DSL definition (D4). `label` becomes the sticky
- * bytes32 `roleKey` on-chain. `spend` compiles to Level-1 on-chain Zodiac
- * conditions. Management flags compile to off-chain guards.
- */
+/** A Capxul Role definition. */
 type RoleDefinition = {
   readonly label: string;
   readonly spend?: RoleSpendCap;
@@ -2006,7 +1970,7 @@ type RoleDefinition = {
   readonly canManageRoles?: boolean;
 };
 /**
- * One role seeded on an Org (canon §C1 "Roles" — label + caps; D4/D6).
+ * One role seeded on an Organization.
  * `roleKey` is the on-chain bytes32 role key derived from the label. `definition`
  * is the full Role DSL entry.
  */
@@ -2016,13 +1980,13 @@ type RoleView = {
   readonly roleKey: RoleKey;
   readonly definition: RoleDefinition;
 };
-/** Built-in role templates that seed a new Org at creation (D6). */
+/** Built-in role templates for a new Organization. */
 type OrgTemplate = "Solo" | "Startup" | "Custom";
 /**
- * Input to `capxul.createOrg` (S1, D10a, D14). `name` is the display name;
- * `handle` is the globally-unique normalized handle (`^[a-z0-9-]{3,32}$`, D10a);
- * `template` seeds the initial role set (D6); `country` is stored unvalidated
- * (D14 — KYB deferred). For `template: "Custom"`, `roles` carries the authored
+ * Input to `capxul.createOrg`. `name` is the display name.
+ * `handle` is the globally unique normalized handle (`^[a-z0-9-]{3,32}$`).
+ * `template` seeds the initial role set. `country` is stored without validation.
+ * For `template: "Custom"`, `roles` carries the authored
  * `RoleDefinition[]`.
  */
 type CreateOrgInput = {
@@ -2033,10 +1997,10 @@ type CreateOrgInput = {
   readonly roles?: readonly RoleDefinition[];
 };
 /**
- * Input to `org(orgId).invite` (S3, D8). Email is the universal entry point —
- * inviting an address that is not yet a Capxul user auto-creates a `pending`
+ * Input to `org(orgId).invite`. Email is the universal entry point.
+ * An address that is not yet a Capxul user creates a `pending`
  * membership that resolves on sign-in. `role` is invitation metadata. It does
- * not grant an L2 Permission.
+ * not grant an on-chain Permission.
  */
 type InviteMemberInput = {
   readonly email: string;
@@ -2049,12 +2013,7 @@ type ResendInviteTokenInput = {
 type DetectPendingOrgInvitationsResult = {
   readonly matched: readonly OrgId[];
 };
-/**
- * Entity-scoped Org method bundle, returned by `capxul.org(orgId)`. Every
- * method names the entity implicitly via the closed-over `orgId` (D13 — no
- * stateful active context). `treasury()` returns the real M2 `Account` over
- * the Org Safe (D3).
- */
+/** Organization methods for one `orgId`. */
 interface OrgScopedMethods extends ActorRelationshipMethods {
   /** Observe the durable, leak-safe lifecycle for this Organization only. */
   getLifecycle(options?: {
@@ -2064,7 +2023,7 @@ interface OrgScopedMethods extends ActorRelationshipMethods {
   retrySetup(options?: {
     readonly signal?: AbortSignal;
   }): Promise<CapxulResult<OrgLifecycle>>;
-  /** The Org treasury — the real M2 Account over the Org Safe (D3). */
+  /** The Organization treasury Account. */
   treasury(options?: {
     readonly signal?: AbortSignal;
   }): Promise<CapxulResult<Account$1>>;
@@ -2104,14 +2063,14 @@ type OrgsMethod = {
 };
 /**
  * Top-level Org method bundle, exposed at `client.org` / `client.orgs` /
- * `client.createOrg`. `org(orgId)` resolves the entity-scoped bundle (D13).
+ * `client.createOrg`. `org(orgId)` resolves the entity-scoped bundle.
  */
 interface OrgMethods {
   createOrg(input: CreateOrgInput, options?: {
     readonly signal?: AbortSignal;
   }): Promise<CapxulResult<OrgView>>;
   readonly orgs: OrgsMethod;
-  /** Resolve the entity-scoped bundle for a specific Org (D13). */
+  /** Resolve the entity-scoped bundle for a specific Organization. */
   org(orgId: OrgId): OrgScopedMethods;
 }
 //#endregion
@@ -2253,19 +2212,14 @@ interface IdentityRuntime {
     readonly ok: false;
     readonly reason: CapxulErrorCode;
   }>;
-  /** @internal One facade bridge; optional only for pre-S2 consumer test doubles. */
+  /** @internal Optional facade bridge for consumer test doubles. */
   readonly runFacade?: <T>(verb: IdentityFacadeVerb, controls: InvocationControls | undefined, run: (controls: InvocationControls) => Promise<T>) => Promise<T>;
 }
 interface CapxulClient {
   readonly auth: AuthMethods;
   readonly smartAccount: SmartAccountMethods;
   readonly identity: IdentityMethods;
-  /**
-   * Liveness surface (#1149 proof lane): `health(nonce)` round-trips a nonce
-   * through the configured deployment. The only method here that is useful
-   * before sign-in, and the only one whose whole point is that the answer
-   * came from the backend rather than from this process.
-   */
+  /** `health(nonce)` returns the nonce from the configured deployment. Use it to verify backend liveness before sign-in. */
   readonly system: SystemMethods;
   /**
    * Consumer-facing account readiness surface (issue #159 · AC1+AC3).
@@ -2274,7 +2228,7 @@ interface CapxulClient {
    */
   readonly account: AccountMethods;
   /**
-   * Consumer-facing logical Account money read (M2 Slice S1a · #265).
+   * Consumer-facing Account money read.
    * Returns `{ balance, available }` as `Money` — never wei or token units.
    */
   readonly accounts: AccountsMethods;
@@ -2285,7 +2239,7 @@ interface CapxulClient {
   readonly targets: TargetsMethods;
   readonly destinations: DestinationsMethods;
   /**
-   * Direct Payments surface (G2 · #545). `pay` records a validated-recipient
+   * Direct Payments surface. `pay` records a validated-recipient
    * payment; `list`/`get` read the ledger; `markSettled` is the host-execution
    * callback.
    */
@@ -2293,18 +2247,18 @@ interface CapxulClient {
   readonly activity: ActivityMethods;
   readonly holdings: HoldingsMethods;
   readonly offramp: OfframpMethods;
-  /** Payment document verification (G2 · #545): re-derive the EIP-712 hash. */
+  /** Re-derive a Payment document EIP-712 hash. */
   readonly paymentDocuments: PaymentDocumentsMethods;
   /**
    * Media surface (#1061 / ADR-0014): profile-image + org-logo upload/record.
    */
   readonly media: MediaMethods;
   /**
-   * Organization domain surface (canon `org-domain-model.md` §C2/§C3, D13).
+   * Organization domain surface.
    * `createOrg(input)` creates an Org; `orgs()` lists the Orgs you belong to;
    * `org(orgId)` resolves the entity-scoped bundle (treasury / members / roles,
    * invitations, Permissions, and payments). Explicit entity scoping —
-   * NO stateful active context (D13). RED until the S1→S4 slices fill it.
+   * It has no stateful active context.
    */
   readonly createOrg: OrgMethods["createOrg"];
   readonly orgs: OrgMethods["orgs"];
@@ -2381,15 +2335,14 @@ interface CreateCapxulClientInput {
    */
   readonly signer?: CapxulSigner;
   /**
-   * Optional live Org-deploy lane (canon D10 SDK-orchestrated Org Safe deploy +
-   * D3 RPC treasury). When supplied, `client.createOrg` / `org(id).treasury`
+   * Optional live Organization deployment. When supplied, `client.createOrg` and `org(id).treasury`
    * run the live path (real deploy + on-chain balance); when omitted, the
    * hermetic `$0` path runs (a fresh Org has no on-chain funds). The adapter
    * that CONSTRUCTS this port (deployer key + RPC + authenticated Convex seam)
    * is wired by the CLI deploy-stack; the factory only threads it through.
    */
   readonly orgDeploymentPort?: OrgPort;
-  /** Locked D6 data-port name. Prefer over `orgDeploymentPort` in new code. */
+  /** Preferred Organization deployment data port. */
   readonly orgPort?: OrgPort;
   /**
    * Internal Organization lifecycle capability. The Core SDK owns its
@@ -2404,4 +2357,4 @@ interface CreateCapxulClientInput {
   };
 }
 //#endregion
-export { InboxMethods as $, WireObservationContext as $t, OrganizationPaymentsMethods as A, PaymentDocumentRender as At, AccountMethods as B, RecipientResolutionKind as Bt, ResendInviteTokenInput as C, OfframpQuoteInput as Ct, OrganizationPaymentBatchInput as D, Payment as Dt, RoleView as E, PayeesMethods as Et, PermissionOptions as F, PaymentTiming as Ft, ActorRequestIssueInput as G, AccountLifecycle as Gt, ActorProfileMethods as H, ResolvedTarget as Ht, PermissionReplaceInput as I, PaymentType as It, AddressBookEntry as J, IdentityMethods as Jt, ActorRequestsMethods as K, AccountSetupStep as Kt, PermissionRevokeInput as L, PaymentsMethods as Lt, PermissionChangeInput as M, PaymentDocumentsMethods as Mt, PermissionCreateInput as N, PaymentMoney as Nt, OrganizationPaymentInput as O, PaymentDocumentKind as Ot, PermissionMethods as P, PaymentStatus as Pt, InboxItem as Q, OrgSetupStep as Qt, PermissionReadResult as R, PaymentsPayInput as Rt, OrganizationAuditLogItem as S, OfframpQuote as St, RoleSpendCap as T, Payee as Tt, ActorRelationshipMethods as U, TargetReference as Ut, ActorProfile as V, Ref$1 as Vt, ActorRequest as W, TargetsMethods as Wt, AddressBookMethods as X, AuthMethods as Xt, AddressBookLabelInput as Y, SmartAccountMethods as Yt, InboxApproveInput as Z, OrgLifecycle as Zt, OrgMethods as _, IdentityTransition as _n, FinancialOpsMethods as _t, IdentityRuntimeSendResult as a, TelemetryEvent as an, ActivityPage as at, OrgView as b, MeProfile as bt, SystemHealth as c, TelemetryPort as cn, DepositInstructions as ct, CurrentUserMethods as d, IdentityEvent as dn, DestinationKind as dt, CurrentHoldings as en, ActivityAnnotationInput as et, CreateOrgInput as f, IdentityState as fn, DestinationListInput as ft, MemberView as g, destination as gn, DestinationsMethods as gt, MemberStatus as h, StateLabel as hn, DestinationRemoveInput as ht, IdentityRuntime as i, CapxulEnv as in, ActivityMethods as it, PermissionAssignInput as j, PaymentDocumentVerification as jt, OrganizationPaymentItemInput as k, PaymentDocumentRef as kt, MediaMethods as l, CAPXUL_PAYMENTS_V2_ADDRESS as ln, Destination as lt, InviteMemberInput as m, Readiness as mn, DestinationRail as mt, CreateCapxulClientInput as n, Permission as nn, ActivityItem as nt, HoldingsMethods as o, TelemetryGroupInput as on, ActivityReference as ot, DetectPendingOrgInvitationsResult as p, OrgLane as pn, DestinationPayload as pt, AddressBookAddInput as q, isSettingUpLifecycle as qt, IdentityProfileDetails as r, SubmittedPermissionExecution as rn, ActivityListParams as rt, SystemMethods as s, TelemetryIdentifyInput as sn, ActorReference as st, CapxulClient as t, MovementAnnotation as tn, ActivityDetail as tt, CurrentUserContext as u, Destination$1 as un, DestinationAddInput as ut, OrgScopedMethods as v, InvocationControls as vn, HandlesMethods as vt, RoleDefinition as w, OfframpStatus as wt, OrganizationAccount as x, OfframpMethods as xt, OrgTemplate as y, MeMethods as yt, AccountsMethods as z, RecipientResolution as zt };
+export { InboxMethods as $, OrgLifecycle as $t, OrganizationPaymentsMethods as A, PaymentDocumentRef as At, AccountMethods as B, RecipientResolution as Bt, ResendInviteTokenInput as C, OfframpQuoteInput as Ct, OrganizationPaymentBatchInput as D, Payment as Dt, RoleView as E, PayeesMethods as Et, PermissionOptions as F, PaymentStatus as Ft, ActorRequestIssueInput as G, TargetsMethods as Gt, ActorProfileMethods as H, Ref$1 as Ht, PermissionReplaceInput as I, PaymentTiming as It, AddressBookEntry as J, AccountSetupStep as Jt, ActorRequestsMethods as K, fingerprintPaymentIntent as Kt, PermissionRevokeInput as L, PaymentType as Lt, PermissionChangeInput as M, PaymentDocumentVerification as Mt, PermissionCreateInput as N, PaymentDocumentsMethods as Nt, OrganizationPaymentInput as O, PaymentDirection as Ot, PermissionMethods as P, PaymentMoney as Pt, InboxItem as Q, AuthMethods as Qt, PermissionReadResult as R, PaymentsMethods as Rt, OrganizationAuditLogItem as S, OfframpQuote as St, RoleSpendCap as T, Payee as Tt, ActorRelationshipMethods as U, ResolvedTarget as Ut, ActorProfile as V, RecipientResolutionKind as Vt, ActorRequest as W, TargetReference as Wt, AddressBookMethods as X, IdentityMethods as Xt, AddressBookLabelInput as Y, isSettingUpLifecycle as Yt, InboxApproveInput as Z, SmartAccountMethods as Zt, OrgMethods as _, StateLabel as _n, FinancialOpsMethods as _t, IdentityRuntimeSendResult as a, SubmittedPermissionExecution as an, ActivityPage as at, OrgView as b, InvocationControls as bn, MeProfile as bt, SystemHealth as c, TelemetryGroupInput as cn, DepositInstructions as ct, CurrentUserMethods as d, CAPXUL_PAYMENTS_V2_ADDRESS as dn, DestinationKind as dt, OrgSetupStep as en, ActivityAnnotationInput as et, CreateOrgInput as f, Destination$1 as fn, DestinationListInput as ft, MemberView as g, Readiness as gn, DestinationsMethods as gt, MemberStatus as h, OrgLane as hn, DestinationRemoveInput as ht, IdentityRuntime as i, Permission as in, ActivityMethods as it, PermissionAssignInput as j, PaymentDocumentRender as jt, OrganizationPaymentItemInput as k, PaymentDocumentKind as kt, MediaMethods as l, TelemetryIdentifyInput as ln, Destination as lt, InviteMemberInput as m, IdentityState as mn, DestinationRail as mt, CreateCapxulClientInput as n, CurrentHoldings as nn, ActivityItem as nt, HoldingsMethods as o, CapxulEnv as on, ActivityReference as ot, DetectPendingOrgInvitationsResult as p, IdentityEvent as pn, DestinationPayload as pt, AddressBookAddInput as q, AccountLifecycle as qt, IdentityProfileDetails as r, MovementAnnotation as rn, ActivityListParams as rt, SystemMethods as s, TelemetryEvent as sn, ActorReference as st, CapxulClient as t, WireObservationContext as tn, ActivityDetail as tt, CurrentUserContext as u, TelemetryPort as un, DestinationAddInput as ut, OrgScopedMethods as v, destination as vn, HandlesMethods as vt, RoleDefinition as w, OfframpStatus as wt, OrganizationAccount as x, OfframpMethods as xt, OrgTemplate as y, IdentityTransition as yn, MeMethods as yt, AccountsMethods as z, PaymentsPayInput as zt };