@capxul/sdk 2.3.0 → 2.3.2

package/dist/{create-capxul-client-mArFr_Os.mjs → create-capxul-client-DgvnboPR.mjs}

@@ -2702,8 +2702,8 @@ const nonEmpty = (name) => Schema.String.pipe(Schema.refine((value) => value.len
 const nonNegativeInteger = (name) => Schema.Number.pipe(Schema.refine((value) => Number.isSafeInteger(value) && value >= 0, { message: `${name} must be a non-negative safe integer` }));
 const BaseSepoliaChainIdSchema = ChainIdSchema$1.pipe(Schema.refine((value) => value === 84532, { message: "chainId must be 84532" }));
 const Uint16Schema = Schema.Number.pipe(Schema.refine((value) => Number.isSafeInteger(value) && value >= 0 && value <= 65535, { message: "kind must be a uint16 value" }));
-const Uint8Schema = Schema.Number.pipe(Schema.refine((value) => Number.isSafeInteger(value) && value >= 0 && value <= 255, { message: "must be a uint8 value" }));
-const Bytes4Schema = Schema.String.pipe(Schema.refine((value) => /^0x[0-9a-fA-F]{8}$/u.test(value), { message: "must be a 0x-prefixed bytes4 value" }));
+Schema.Number.pipe(Schema.refine((value) => Number.isSafeInteger(value) && value >= 0 && value <= 255, { message: "must be a uint8 value" }));
+Schema.String.pipe(Schema.refine((value) => /^0x[0-9a-fA-F]{8}$/u.test(value), { message: "must be a 0x-prefixed bytes4 value" }));
 const HexDataSchema = Schema.String.pipe(Schema.refine((value) => /^0x(?:[0-9a-fA-F]{2})*$/u.test(value), { message: "must be 0x-prefixed byte data" }));
 const Uint48Schema = Schema.Number.pipe(Schema.refine((value) => Number.isSafeInteger(value) && value >= 0 && value <= 0xffffffffffff, { message: "must be a uint48 value" }));
 const Uint256StringSchema = Schema.String.pipe(Schema.refine((value) => {
@@ -2846,8 +2846,7 @@ const PermissionStateSchema = Schema.Literals([
 	"active",
 	"suspended",
 	"revoked",
-	"superseded",
-	"quarantined"
+	"superseded"
 ]);
 const StoredPermissionCommandSchema = Schema.Struct({
 	commandId: PaymentCommandIdSchema,
@@ -2871,8 +2870,7 @@ Schema.Struct({
 Schema.Union([
 	Schema.Struct({
 		status: Schema.Literal("pending"),
-		reason: Schema.Literals(["receipt_missing", "not_finalized"]),
-		receipt: Schema.optional(ReceiptRefSchema)
+		reason: Schema.Literal("receipt_missing")
 	}),
 	Schema.Struct({
 		status: Schema.Literal("verified"),
@@ -3141,112 +3139,6 @@ Schema.Struct({
 	transfers: Schema.Array(FinalizedTransferEvidenceSchema),
 	requestCount: nonNegativeInteger("requestCount")
 });
-const FinalizedPermissionFactRangeSchema = Schema.Struct({
-	chainId: BaseSepoliaChainIdSchema,
-	organizationSafe: SafeAddressSchema,
-	rolesModules: Schema.Array(ModuleAddressSchema),
-	fromBlock: BlockNumberSchema$1,
-	toBlock: BlockNumberSchema$1
-}).pipe(Schema.refine((range) => range.toBlock >= range.fromBlock && range.toBlock - range.fromBlock < 1e4, { message: "toBlock must be at or after fromBlock and the range must contain fewer than 10,000 block intervals" }));
-const FinalizedPermissionFactCommonSchema = Schema.Struct({
-	chainId: BaseSepoliaChainIdSchema,
-	transactionHash: TxHashSchema$1,
-	blockNumber: BlockNumberSchema$1,
-	blockHash: Bytes32Schema,
-	logIndex: LogIndexSchema,
-	emitter: AddressSchema$1,
-	topic0: Bytes32Schema,
-	dataHash: Bytes32Schema,
-	authorityHash: Bytes32Schema
-});
-const FinalizedPermissionModuleFactSchema = Schema.Struct({
-	...FinalizedPermissionFactCommonSchema.fields,
-	kind: Schema.Literals(["module_enabled", "module_disabled"]),
-	organizationSafe: SafeAddressSchema,
-	module: ModuleAddressSchema
-});
-const FinalizedPermissionRoleAssignmentFactSchema = Schema.Struct({
-	...FinalizedPermissionFactCommonSchema.fields,
-	kind: Schema.Literal("assignment"),
-	rolesModule: ModuleAddressSchema,
-	memberSafe: SafeAddressSchema,
-	roleKeys: Schema.Array(RoleKeySchema),
-	memberOf: Schema.Array(Schema.Boolean)
-});
-const FinalizedPermissionTargetAuthorityFactSchema = Schema.Union([Schema.Struct({
-	...FinalizedPermissionFactCommonSchema.fields,
-	kind: Schema.Literal("allow_target"),
-	rolesModule: ModuleAddressSchema,
-	roleKey: RoleKeySchema,
-	target: AddressSchema$1,
-	options: Uint8Schema
-}), Schema.Struct({
-	...FinalizedPermissionFactCommonSchema.fields,
-	kind: Schema.Literals(["scope_target", "revoke_target"]),
-	rolesModule: ModuleAddressSchema,
-	roleKey: RoleKeySchema,
-	target: AddressSchema$1
-})]);
-const PermissionScopeConditionSchema = Schema.Struct({
-	parent: Uint8Schema,
-	paramType: Uint8Schema,
-	operator: Uint8Schema,
-	compValue: HexDataSchema
-});
-const FinalizedPermissionFunctionAuthorityFactSchema = Schema.Union([
-	Schema.Struct({
-		...FinalizedPermissionFactCommonSchema.fields,
-		kind: Schema.Literal("allow_function"),
-		rolesModule: ModuleAddressSchema,
-		roleKey: RoleKeySchema,
-		target: AddressSchema$1,
-		selector: Bytes4Schema,
-		options: Uint8Schema
-	}),
-	Schema.Struct({
-		...FinalizedPermissionFactCommonSchema.fields,
-		kind: Schema.Literal("scope_function"),
-		rolesModule: ModuleAddressSchema,
-		roleKey: RoleKeySchema,
-		target: AddressSchema$1,
-		selector: Bytes4Schema,
-		options: Uint8Schema,
-		conditions: Schema.Array(PermissionScopeConditionSchema)
-	}),
-	Schema.Struct({
-		...FinalizedPermissionFactCommonSchema.fields,
-		kind: Schema.Literal("revoke_function"),
-		rolesModule: ModuleAddressSchema,
-		roleKey: RoleKeySchema,
-		target: AddressSchema$1,
-		selector: Bytes4Schema
-	})
-]);
-const FinalizedPermissionAllowanceAuthorityFactSchema = Schema.Struct({
-	...FinalizedPermissionFactCommonSchema.fields,
-	kind: Schema.Literal("allowance"),
-	rolesModule: ModuleAddressSchema,
-	allowanceKey: AllowanceKeySchema,
-	balance: WeiAmountSchema$1,
-	maxRefill: WeiAmountSchema$1,
-	refill: WeiAmountSchema$1,
-	period: Uint256StringSchema,
-	timestamp: Uint256StringSchema
-});
-const FinalizedPermissionFactSchema = Schema.Union([
-	FinalizedPermissionModuleFactSchema,
-	FinalizedPermissionRoleAssignmentFactSchema,
-	FinalizedPermissionTargetAuthorityFactSchema,
-	FinalizedPermissionFunctionAuthorityFactSchema,
-	FinalizedPermissionAllowanceAuthorityFactSchema
-]);
-Schema.Struct({
-	range: FinalizedPermissionFactRangeSchema,
-	finalizedHead: FinalizedBlockReferenceSchema,
-	anchor: FinalizedBlockReferenceSchema,
-	facts: Schema.Array(FinalizedPermissionFactSchema),
-	requestCount: nonNegativeInteger("requestCount")
-});
 const FinalizedMoneyEvidenceCommonSchema = Schema.Struct({
 	chainId: BaseSepoliaChainIdSchema,
 	contractAddress: AddressSchema$1,
@@ -4649,11 +4541,14 @@ async function executePersonalPayment(deps, payment, signal, requestKey) {
 function isAborted$1(signal) {
 	return signal?.aborted === true;
 }
+function canonicalJson(value) {
+	const canonical = JSON.stringify(value, (_key, item) => item !== null && typeof item === "object" && !Array.isArray(item) ? Object.fromEntries(Object.entries(item).sort(([left], [right]) => left.localeCompare(right))) : item);
+	if (canonical === void 0) throw new TypeError("Payment intent must be JSON data");
+	return canonical;
+}
 /** Return one stable fingerprint for one JSON payment intent. */
 async function fingerprintPaymentIntent(intent) {
-	const canonical = JSON.stringify(intent, (_key, value) => value !== null && typeof value === "object" && !Array.isArray(value) ? Object.fromEntries(Object.entries(value).sort(([left], [right]) => left.localeCompare(right))) : value);
-	if (canonical === void 0) throw new TypeError("Payment intent must be JSON data");
-	return keccak256(toBytes(canonical));
+	return keccak256(toBytes(canonicalJson(intent)));
 }
 async function executePrepared(deps, prepare, expectedRequest, signal) {
 	if (isAborted$1(signal)) return {
@@ -5515,7 +5410,7 @@ function mapOk(result, f) {
 }
 //#endregion
 //#region package.json
-var version = "2.3.0";
+var version = "2.3.2";
 //#endregion
 //#region src/ports/auth-client.ts
 var AuthClientError = class extends Data.TaggedError("AuthClientError") {};
@@ -5975,8 +5870,6 @@ const PermissionMirrorVerificationProps = Schema.Struct({
 	outcome: Schema.String,
 	reason: Schema.String,
 	chain_id: Schema.Number,
-	finality: Schema.String,
-	lag_blocks: Schema.Number,
 	retry_count: Schema.Number
 });
 const MovementScanWindowProps = Schema.Struct({
@@ -7521,7 +7414,7 @@ async function execute(deps, orgId, command, signal) {
 	} }));
 	if (!prepared.ok) return prepared;
 	const expectedSafe = deriveCapxulSafeAddress({ email: session.email });
-	if (prepared.value.chainId !== deps.chainId || prepared.value.signerAddress.toLowerCase() !== signerAddress.toLowerCase() || prepared.value.userOpSenderSafe.toLowerCase() !== expectedSafe.toLowerCase() || prepared.value.operation !== command.operation || prepared.value.orgId !== orgId || JSON.stringify(prepared.value.command) !== JSON.stringify(command)) return {
+	if (prepared.value.chainId !== deps.chainId || prepared.value.signerAddress.toLowerCase() !== signerAddress.toLowerCase() || prepared.value.userOpSenderSafe.toLowerCase() !== expectedSafe.toLowerCase() || prepared.value.operation !== command.operation || prepared.value.orgId !== orgId || canonicalJson(prepared.value.command) !== canonicalJson(command)) return {
 		ok: false,
 		error: Errors.invalidInput("permission", "prepared authority mismatch")
 	};

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import { $ as toAddress, C as Address, H as PartyId, J as RoleKey, N as CountryCode, O as AuthSession, S as AccountId, V as OrgId, a as SignerStatusStore, at as Errors, c as AccountProviderSource, ct as isCapxulError, d as eip1193AccountProvider, et as toCountryCode, f as localPrivateKeyAccountProvider, g as SmartAccount, h as Session, i as SignerStatus, it as CapxulErrorDetails, j as BudgetId, k as AuthUserId, l as AccountRequirement, m as Profile, n as CapxulSigner, nt as CapxulError, o as injectedWalletSigner, p as CapxulResult, r as Eip1193RequestProvider, rt as CapxulErrorCode, s as AccountProvider, st as FailureMode, t as CapxulDigestSigner, tt as CAPXUL_ERROR_CODES, u as Eip1193Provider, x as Account, z as Money } from "./signer-BejoR3bA.mjs";
-import { $ as AccountMethods, $t as RecipientResolution, A as OrganizationAccount, An as isClaimed, At as FinancialOpsMethods, B as PermissionAssignInput, Bt as Payment, C as InviteMemberInput, Cn as Destination$1, Ct as DestinationAddInput, D as OrgScopedMethods, Dn as Readiness, Dt as DestinationRail, E as OrgMethods, En as OrgLane, Et as DestinationPayload, F as RoleView, Ft as OfframpQuote, G as PermissionReplaceInput, Gt as PaymentDocumentVerification, H as PermissionCreateInput, Ht as PaymentDocumentKind, I as OrganizationPaymentBatchInput, It as OfframpQuoteInput, J as Budget, Jt as PaymentStatus, K as PermissionRevokeInput, Kt as PaymentDocumentsMethods, L as OrganizationPaymentInput, Lt as OfframpStatus, M as ResendInviteTokenInput, Mn as IdentityTransition, Mt as MeMethods, N as RoleDefinition, Nn as InvocationControls, Nt as MeProfile, O as OrgTemplate, On as StateLabel, Ot as DestinationRemoveInput, P as RoleSpendCap, Pt as OfframpMethods, Q as AccountsMethods, Qt as PaymentsPayInput, R as OrganizationPaymentItemInput, Rt as Payee, S as DetectPendingOrgInvitationsResult, Sn as CAPXUL_PAYMENTS_V2_ADDRESS, St as Destination, T as MemberView, Tn as IdentityState, Tt as DestinationListInput, U as PermissionMethods, Ut as PaymentDocumentRef, V as PermissionChangeInput, Vt as PaymentDirection, W as PermissionOptions, Wt as PaymentDocumentRender, X as OrgMeMethod, Xt as PaymentType, Y as OrgMe, Yt as PaymentTiming, Z as OrgMeOptions, Zt as PaymentsMethods, _ as SystemHealth, _n as SubmittedPermissionExecution, _t as ActivityMethods, a as SdkFailureObservation, an as fingerprintPaymentIntent, at as ActorRequestsMethods, b as CurrentUserMethods, bt as ActorReference, c as PostHogObservabilityOptions, cn as isSettingUpLifecycle, ct as AddressBookLabelInput, d as CreateCapxulClientInput, dn as AuthMethods, dt as InboxItem, en as RecipientResolutionKind, et as ActorProfile, f as IdentityProfileDetails, fn as OrgLifecycle, ft as InboxMethods, g as SystemMethods, gn as Permission, gt as ActivityListParams, h as HoldingsMethods, hn as MovementAnnotation, ht as ActivityItem, i as ObservationDelivery, in as TargetsMethods, it as ActorRequestIssueInput, j as OrganizationAuditLogItem, jn as isRestoring, jt as HandlesMethods, k as OrgView, kn as destination, kt as DestinationsMethods, l as postHogObservability, ln as IdentityMethods, lt as AddressBookMethods, m as IdentityRuntimeSendResult, mn as CurrentHoldings, mt as ActivityDetail, n as ObservationAdapter, nn as ResolvedTarget, nt as ActorRelationshipMethods, o as HostObservability, on as AccountLifecycle, ot as AddressBookAddInput, p as IdentityRuntime, pn as OrgSetupStep, pt as ActivityAnnotationInput, q as PermissionReadResult, qt as PaymentMoney, r as ObservationContext, rn as TargetReference, rt as ActorRequest, s as PostHogObservabilityClient, sn as AccountSetupStep, st as AddressBookEntry, t as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, tn as Ref, tt as ActorProfileMethods, u as CapxulClient, un as SmartAccountMethods, ut as InboxApproveInput, v as MediaMethods, vt as ActivityPage, w as MemberStatus, wn as IdentityEvent, wt as DestinationKind, x as CreateOrgInput, xn as TelemetryPort, xt as DepositInstructions, y as CurrentUserContext, yt as ActivityReference, z as OrganizationPaymentsMethods, zt as PayeesMethods } from "./observation-Ci8gIQjm.mjs";
+import { $ as AccountMethods, $t as RecipientResolution, A as OrganizationAccount, An as isClaimed, At as FinancialOpsMethods, B as PermissionAssignInput, Bt as Payment, C as InviteMemberInput, Cn as Destination$1, Ct as DestinationAddInput, D as OrgScopedMethods, Dn as Readiness, Dt as DestinationRail, E as OrgMethods, En as OrgLane, Et as DestinationPayload, F as RoleView, Ft as OfframpQuote, G as PermissionReplaceInput, Gt as PaymentDocumentVerification, H as PermissionCreateInput, Ht as PaymentDocumentKind, I as OrganizationPaymentBatchInput, It as OfframpQuoteInput, J as Budget, Jt as PaymentStatus, K as PermissionRevokeInput, Kt as PaymentDocumentsMethods, L as OrganizationPaymentInput, Lt as OfframpStatus, M as ResendInviteTokenInput, Mn as IdentityTransition, Mt as MeMethods, N as RoleDefinition, Nn as InvocationControls, Nt as MeProfile, O as OrgTemplate, On as StateLabel, Ot as DestinationRemoveInput, P as RoleSpendCap, Pt as OfframpMethods, Q as AccountsMethods, Qt as PaymentsPayInput, R as OrganizationPaymentItemInput, Rt as Payee, S as DetectPendingOrgInvitationsResult, Sn as CAPXUL_PAYMENTS_V2_ADDRESS, St as Destination, T as MemberView, Tn as IdentityState, Tt as DestinationListInput, U as PermissionMethods, Ut as PaymentDocumentRef, V as PermissionChangeInput, Vt as PaymentDirection, W as PermissionOptions, Wt as PaymentDocumentRender, X as OrgMeMethod, Xt as PaymentType, Y as OrgMe, Yt as PaymentTiming, Z as OrgMeOptions, Zt as PaymentsMethods, _ as SystemHealth, _n as SubmittedPermissionExecution, _t as ActivityMethods, a as SdkFailureObservation, an as fingerprintPaymentIntent, at as ActorRequestsMethods, b as CurrentUserMethods, bt as ActorReference, c as PostHogObservabilityOptions, cn as isSettingUpLifecycle, ct as AddressBookLabelInput, d as CreateCapxulClientInput, dn as AuthMethods, dt as InboxItem, en as RecipientResolutionKind, et as ActorProfile, f as IdentityProfileDetails, fn as OrgLifecycle, ft as InboxMethods, g as SystemMethods, gn as Permission, gt as ActivityListParams, h as HoldingsMethods, hn as MovementAnnotation, ht as ActivityItem, i as ObservationDelivery, in as TargetsMethods, it as ActorRequestIssueInput, j as OrganizationAuditLogItem, jn as isRestoring, jt as HandlesMethods, k as OrgView, kn as destination, kt as DestinationsMethods, l as postHogObservability, ln as IdentityMethods, lt as AddressBookMethods, m as IdentityRuntimeSendResult, mn as CurrentHoldings, mt as ActivityDetail, n as ObservationAdapter, nn as ResolvedTarget, nt as ActorRelationshipMethods, o as HostObservability, on as AccountLifecycle, ot as AddressBookAddInput, p as IdentityRuntime, pn as OrgSetupStep, pt as ActivityAnnotationInput, q as PermissionReadResult, qt as PaymentMoney, r as ObservationContext, rn as TargetReference, rt as ActorRequest, s as PostHogObservabilityClient, sn as AccountSetupStep, st as AddressBookEntry, t as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, tn as Ref, tt as ActorProfileMethods, u as CapxulClient, un as SmartAccountMethods, ut as InboxApproveInput, v as MediaMethods, vt as ActivityPage, w as MemberStatus, wn as IdentityEvent, wt as DestinationKind, x as CreateOrgInput, xn as TelemetryPort, xt as DepositInstructions, y as CurrentUserContext, yt as ActivityReference, z as OrganizationPaymentsMethods, zt as PayeesMethods } from "./observation-CLhrvkF6.mjs";
 import { Hex } from "viem";
 import { Context, Effect, Layer } from "effect";
 import { FunctionReference } from "convex/server";

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { A as fingerprintPaymentIntent, B as formatTraceparent, C as ClockPortTag, D as AuthClientError, E as authClientPortFromPromiseAdapter, F as sanitizeObservationContext, G as signerFailure, H as readInvocationObservation, I as CAPXUL_FUNCTIONS, J as BASE_SEPOLIA_CHAIN_ID, K as CAPXUL_PAYMENTS_V2_ADDRESS, L as BootstrapEnvelope, M as fromWei, N as OBSERVATION_CONTEXT_HEADER, O as AuthClientPortTag, P as encodeObservationContextHeader, Q as isRestoring, R as EngineeringTelemetryBootstrapPolicy, S as ClockError, T as bootstrapErrorFromCapxul, U as causeChain, V as copyInvocationObservation, W as injectedWalletSigner, X as destination, Z as isClaimed, _ as wireChainId, a as observeFailedResult, b as ConvexCallPortTag, c as captureExceptionSync, d as TelemetryPortTag, g as accountReadErrorFromCapxul, h as AccountReadPortTag, i as observationContextProps, j as toWei, k as version, l as detectAuthCacheAdapter, m as smartAccountErrorFromCapxul, n as postHogProductTelemetry, o as postHogFailureObservation, p as SmartAccountPortTag, q as normalizeBindingEmail, r as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, s as captureException, t as assembleCapxulClient, u as PostHogTelemetryLayer, v as IdentityPortTag, w as BootstrapPortTag, x as convexCallErrorFromCapxul, y as identityErrorFromCapxul, z as isSettingUpLifecycle } from "./create-capxul-client-mArFr_Os.mjs";
+import { A as fingerprintPaymentIntent, B as formatTraceparent, C as ClockPortTag, D as AuthClientError, E as authClientPortFromPromiseAdapter, F as sanitizeObservationContext, G as signerFailure, H as readInvocationObservation, I as CAPXUL_FUNCTIONS, J as BASE_SEPOLIA_CHAIN_ID, K as CAPXUL_PAYMENTS_V2_ADDRESS, L as BootstrapEnvelope, M as fromWei, N as OBSERVATION_CONTEXT_HEADER, O as AuthClientPortTag, P as encodeObservationContextHeader, Q as isRestoring, R as EngineeringTelemetryBootstrapPolicy, S as ClockError, T as bootstrapErrorFromCapxul, U as causeChain, V as copyInvocationObservation, W as injectedWalletSigner, X as destination, Z as isClaimed, _ as wireChainId, a as observeFailedResult, b as ConvexCallPortTag, c as captureExceptionSync, d as TelemetryPortTag, g as accountReadErrorFromCapxul, h as AccountReadPortTag, i as observationContextProps, j as toWei, k as version, l as detectAuthCacheAdapter, m as smartAccountErrorFromCapxul, n as postHogProductTelemetry, o as postHogFailureObservation, p as SmartAccountPortTag, q as normalizeBindingEmail, r as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, s as captureException, t as assembleCapxulClient, u as PostHogTelemetryLayer, v as IdentityPortTag, w as BootstrapPortTag, x as convexCallErrorFromCapxul, y as identityErrorFromCapxul, z as isSettingUpLifecycle } from "./create-capxul-client-DgvnboPR.mjs";
 import { C as toDurationMs, D as toJwtToken, E as toEpochSeconds, F as CAPXUL_ERROR_CODES, I as CapxulError, M as toRoleKey, N as toSessionToken, O as toKycTier, P as decodeConvexError, R as Errors, S as toCurrencyCode, T as toEpochMs, b as toChainId, g as toAllowedOrigin, h as toAddress, j as toPublishableKey, k as toOrgId, m as toAccountId, o as AuthCachePortTag, p as currencySymbolFor, v as toAuthUserId, w as toEmail, x as toCountryCode, z as isCapxulError } from "./InMemoryAuthCacheAdapter-qMpBOGb3.mjs";
 import { keccak256, recoverAddress, stringToHex } from "viem";
 import { Cause, Context, Data, Effect, Exit, Layer, Result, SchemaIssue, SchemaParser, Scope, Tracer } from "effect";

package/dist/{observation-Ci8gIQjm.d.mts → observation-CLhrvkF6.d.mts}

@@ -524,7 +524,7 @@ declare const PermissionSchema: Schema.Struct<{
   readonly permissionId: Schema.Codec<PermissionId, string, never, never>;
   readonly orgId: Schema.refine<string, Schema.String>;
   readonly type: Schema.Literals<readonly ["budget", "managePeople"]>;
-  readonly state: Schema.Literals<readonly ["pending", "active", "suspended", "revoked", "superseded", "quarantined"]>;
+  readonly state: Schema.Literals<readonly ["pending", "active", "suspended", "revoked", "superseded"]>;
   readonly revision: Schema.refine<number, Schema.Number>;
   readonly roleKey: Schema.Codec<RoleKey, string, never, never>;
   readonly tokenAddress: Schema.optional<Schema.Codec<Address$1, string, never, never>>;
@@ -542,7 +542,7 @@ declare const PermissionAssignmentSchema: Schema.Struct<{
     readonly kind: Schema.Literal<"organization">;
     readonly orgId: Schema.refine<string, Schema.String>;
   }>]>;
-  readonly state: Schema.Literals<readonly ["pending", "active", "suspended", "revoked", "superseded", "quarantined"]>;
+  readonly state: Schema.Literals<readonly ["pending", "active", "suspended", "revoked", "superseded"]>;
 }>;
 type PermissionAssignment = Schema.Schema.Type<typeof PermissionAssignmentSchema>;
 declare const CurrentHoldingsSchema: Schema.Struct<{
@@ -598,7 +598,7 @@ declare const SubmittedPermissionExecutionSchema: Schema.Struct<{
     readonly permissionId: Schema.Codec<PermissionId, string, never, never>;
     readonly orgId: Schema.refine<string, Schema.String>;
     readonly type: Schema.Literals<readonly ["budget", "managePeople"]>;
-    readonly state: Schema.Literals<readonly ["pending", "active", "suspended", "revoked", "superseded", "quarantined"]>;
+    readonly state: Schema.Literals<readonly ["pending", "active", "suspended", "revoked", "superseded"]>;
     readonly revision: Schema.refine<number, Schema.Number>;
     readonly roleKey: Schema.Codec<RoleKey, string, never, never>;
     readonly tokenAddress: Schema.optional<Schema.Codec<Address$1, string, never, never>>;
@@ -614,12 +614,12 @@ declare const SubmittedPermissionExecutionSchema: Schema.Struct<{
       readonly kind: Schema.Literal<"organization">;
       readonly orgId: Schema.refine<string, Schema.String>;
     }>]>;
-    readonly state: Schema.Literals<readonly ["pending", "active", "suspended", "revoked", "superseded", "quarantined"]>;
+    readonly state: Schema.Literals<readonly ["pending", "active", "suspended", "revoked", "superseded"]>;
   }>, Schema.$Array<Schema.Struct<{
     readonly permissionId: Schema.Codec<PermissionId, string, never, never>;
     readonly orgId: Schema.refine<string, Schema.String>;
     readonly type: Schema.Literals<readonly ["budget", "managePeople"]>;
-    readonly state: Schema.Literals<readonly ["pending", "active", "suspended", "revoked", "superseded", "quarantined"]>;
+    readonly state: Schema.Literals<readonly ["pending", "active", "suspended", "revoked", "superseded"]>;
     readonly revision: Schema.refine<number, Schema.Number>;
     readonly roleKey: Schema.Codec<RoleKey, string, never, never>;
     readonly tokenAddress: Schema.optional<Schema.Codec<Address$1, string, never, never>>;

package/dist/testing/index.d.mts

@@ -1,4 +1,4 @@
-import { Mn as IdentityTransition, bn as TelemetryIdentifyInput, n as ObservationAdapter, u as CapxulClient, vn as TelemetryEvent, yn as TelemetryGroupInput } from "../observation-Ci8gIQjm.mjs";
+import { Mn as IdentityTransition, bn as TelemetryIdentifyInput, n as ObservationAdapter, u as CapxulClient, vn as TelemetryEvent, yn as TelemetryGroupInput } from "../observation-CLhrvkF6.mjs";
 import { Effect, Layer } from "effect";
 
 //#region src/testing/telemetry/RecordingTelemetryAdapter.d.ts

package/dist/testing/index.mjs

@@ -1,4 +1,4 @@
-import { E as authClientPortFromPromiseAdapter, M as fromWei, T as bootstrapErrorFromCapxul, Y as deriveCapxulSafeAddress, _ as wireChainId, f as redactTelemetryEvent, g as accountReadErrorFromCapxul, j as toWei, m as smartAccountErrorFromCapxul, t as assembleCapxulClient, x as convexCallErrorFromCapxul, y as identityErrorFromCapxul } from "../create-capxul-client-mArFr_Os.mjs";
+import { E as authClientPortFromPromiseAdapter, M as fromWei, T as bootstrapErrorFromCapxul, Y as deriveCapxulSafeAddress, _ as wireChainId, f as redactTelemetryEvent, g as accountReadErrorFromCapxul, j as toWei, m as smartAccountErrorFromCapxul, t as assembleCapxulClient, x as convexCallErrorFromCapxul, y as identityErrorFromCapxul } from "../create-capxul-client-DgvnboPR.mjs";
 import { C as toDurationMs, D as toJwtToken, E as toEpochSeconds, I as CapxulError, N as toSessionToken, O as toKycTier, R as Errors, T as toEpochMs, _ as toAppId, b as toChainId, g as toAllowedOrigin, h as toAddress, j as toPublishableKey, m as toAccountId, t as InMemoryAuthCacheAdapter, v as toAuthUserId, w as toEmail, x as toCountryCode } from "../InMemoryAuthCacheAdapter-qMpBOGb3.mjs";
 import { keccak256 } from "viem";
 import { Effect, Result, Semaphore } from "effect";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/sdk",
-  "version": "2.3.0",
+  "version": "2.3.2",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Xelmar-tech/infrastructure.git",
@@ -47,11 +47,11 @@
     "vite-plus": "0.1.23",
     "vitest": "npm:@voidzero-dev/vite-plus-test@0.1.23",
     "@capxul/config": "0.2.0",
-    "@capxul/observability": "2.3.0",
-    "@capxul/typescript-config": "0.0.0",
     "@capxul/errors": "0.0.1",
+    "@capxul/typescript-config": "0.0.0",
+    "@capxul/types": "0.2.0",
     "@capxul/wire": "0.4.0",
-    "@capxul/types": "0.2.0"
+    "@capxul/observability": "2.3.2"
   },
   "_permissionlessPinReason": "permissionless.toSafeSmartAccount is pinned to 0.3.4 for live Safe deployment E2E. Counterfactual address fixtures captured 2026-05-17 in packages/backend/convex/_shared/__tests__/counterfactual.test.ts and packages/config/tests/safe.test.ts must be re-verified before upgrading.",
   "scripts": {