@capxul/sdk 2.8.0 → 3.0.0

package/dist/node/index.d.mts

@@ -1,4 +1,5 @@
-import { O as AuthSession, _ as AuthCacheError, b as CachedJwt, n as CapxulSigner, v as AuthCachePort, y as AuthCachePortTag } from "../signer-xGhV5Q7i.mjs";
+import { C as CachedJwt, M as AuthSession, S as AuthCachePortTag, b as AuthCacheError, n as CapxulSigner, x as AuthCachePort } from "../signer-HY5Ju8xs.mjs";
+import { n as oauthBearerAuthClient, t as OAuthBearerAuthClientInput } from "../OAuthBearerAuthClient-GkHnGqNi.mjs";
 import { Hex } from "viem";
 import { Effect, FileSystem, Layer, Path } from "effect";
 //#region src/adapters/auth-cache/FileSystemAuthCacheAdapter.d.ts
@@ -47,4 +48,4 @@ declare function localPrivateKeySigner(input: {
  */
 declare function detectNodeAuthCacheAdapter(options?: DetectNodeAuthCacheAdapterOptions): AuthCachePort;
 //#endregion
-export { DetectNodeAuthCacheAdapterOptions, FileSystemAuthCacheAdapter, FileSystemAuthCacheLayer, detectNodeAuthCacheAdapter, localPrivateKeySigner };
+export { DetectNodeAuthCacheAdapterOptions, FileSystemAuthCacheAdapter, FileSystemAuthCacheLayer, type OAuthBearerAuthClientInput, detectNodeAuthCacheAdapter, localPrivateKeySigner, oauthBearerAuthClient };

package/dist/node/index.mjs

@@ -1,4 +1,5 @@
-import { a as AuthCacheError, h as toAddress, i as parseCachedJwt, n as BrowserAuthCacheAdapter, o as AuthCachePortTag, r as parseAuthSession, t as InMemoryAuthCacheAdapter } from "../InMemoryAuthCacheAdapter-FptQ2p7C.mjs";
+import { E as toAddress, a as parseCachedJwt, i as parseAuthSession, n as InMemoryAuthCacheAdapter, o as AuthCacheError, r as BrowserAuthCacheAdapter, s as AuthCachePortTag } from "../clock-0c5NM-TY.mjs";
+import { t as oauthBearerAuthClient } from "../OAuthBearerAuthClient-BZ6tXt4m.mjs";
 import { Effect, FileSystem, Layer, Path } from "effect";
 import { privateKeyToAccount } from "viem/accounts";
 import * as os from "node:os";
@@ -153,4 +154,4 @@ function resolveDefaultAuthCachePath(resolveHomeDirectory) {
 	}
 }
 //#endregion
-export { FileSystemAuthCacheAdapter, FileSystemAuthCacheLayer, detectNodeAuthCacheAdapter, localPrivateKeySigner };
+export { FileSystemAuthCacheAdapter, FileSystemAuthCacheLayer, detectNodeAuthCacheAdapter, localPrivateKeySigner, oauthBearerAuthClient };

package/dist/{observation-YhuU8yQX.d.mts → observation-CR3_haBB.d.mts}

@@ -1,5 +1,5 @@
-import { $ as WeiAmount, A as BlockNumber, B as OrgId, C as Address$1, D as AppId, E as AnonymousDistinctId, F as DocumentHash, G as PermissionAssignmentId, H as PaymentCommandId, I as DurationMs, J as PublishableKey, K as PermissionId, L as Email, M as ChainId, N as CountryCode, O as AuthSession, P as CurrencyCode, Q as TxHash, R as EpochMs, T as AllowedOrigin, U as PayrollGroupId, V as PartyId, W as PayrollRunId, X as SessionToken, Y as RoleKey, Z as SmartAccount, a as SignerStatusStore, at as CapxulErrorDetails, b as CachedJwt, c as AccountProviderSource, g as SmartAccount$1, h as Session$1, it as CapxulErrorCode, j as BudgetId, k as AuthUserId, l as AccountRequirement, m as Profile$1, n as CapxulSigner, p as CapxulResult, pt as FailureMode, q as Profile, rt as CapxulError, st as Failure, v as AuthCachePort, w as AllowanceKey, x as Account$1, z as Money } from "./signer-xGhV5Q7i.mjs";
-import { Address, Hex } from "viem";
+import { $ as RoleKey, A as AnonymousDistinctId, B as DurationMs, D as Address$1, F as BudgetId, G as PartyId, H as EpochMs, I as ChainId, J as PayrollRunId, K as PaymentCommandId, L as CountryCode, M as AuthSession, N as AuthUserId, O as AllowanceKey, P as BlockNumber, Q as PublishableKey, R as CurrencyCode, T as Account$1, U as Money, V as Email, W as OrgId, X as PermissionId, Y as PermissionAssignmentId, Z as Profile, _ as ClockPort, _t as FailureMode, a as SignerStatusStore, c as AccountProviderSource, ct as CapxulErrorCode, dt as Failure, et as SessionToken, g as SmartAccount$1, h as Session$1, j as AppId, k as AllowedOrigin, l as AccountRequirement, lt as CapxulErrorDetails, m as Profile$1, n as CapxulSigner, nt as TxHash, p as CapxulResult, q as PayrollGroupId, rt as WeiAmount, st as CapxulError, tt as SmartAccount, v as AuthClientPort, x as AuthCachePort, y as CanSendOtpStatus, z as DocumentHash } from "./signer-HY5Ju8xs.mjs";
+import { Hex } from "viem";
 import { Context, Effect, Layer, Schema, Scope, Tracer } from "effect";
 import { FunctionReference } from "convex/server";
 //#region src/domain/machine/shell.d.ts
@@ -312,68 +312,6 @@ interface TelemetryGroupInput {
   readonly properties?: TelemetryProps;
 }
 //#endregion
-//#region ../config/src/capxul-payments-v2.d.ts
-/** Immutable CapxulPaymentsV2 deployment on Base Sepolia. */
-declare const CAPXUL_PAYMENTS_V2_ADDRESS: Address;
-//#endregion
-//#region src/ports/auth-client.d.ts
-type AuthClientOperationOptions = {
-  readonly signal?: AbortSignal;
-};
-type SendOtpInput = {
-  readonly email: Email;
-};
-type CanSendOtpInput = {
-  readonly email: Email;
-};
-type CanSendOtpStatus = {
-  readonly allowed: boolean;
-  readonly cooldownMs: DurationMs;
-};
-type VerifyOtpInput = {
-  readonly email: Email;
-  readonly otp: string;
-};
-type GetConvexJwtOptions = AuthClientOperationOptions & {
-  readonly forceRefresh?: boolean;
-};
-declare const AuthClientError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
-  readonly _tag: "AuthClientError";
-} & Readonly<A>;
-declare class AuthClientError extends AuthClientError_base<{
-  readonly operation: string;
-  readonly kind: string;
-  readonly cause: unknown;
-}> {}
-interface AuthClientPort {
-  canSendOtp(input: CanSendOtpInput, options?: AuthClientOperationOptions): Effect.Effect<CanSendOtpStatus, AuthClientError>;
-  sendOtp(input: SendOtpInput, options?: AuthClientOperationOptions): Effect.Effect<void, AuthClientError>;
-  verifyOtp(input: VerifyOtpInput, options?: AuthClientOperationOptions): Effect.Effect<AuthSession, AuthClientError>;
-  getSession(options?: AuthClientOperationOptions): Effect.Effect<AuthSession | null, AuthClientError>;
-  signOut(options?: AuthClientOperationOptions): Effect.Effect<void, AuthClientError>;
-  /**
-   * Fetches a Convex-aud JWT from `/api/auth/convex/token` (W7). Server mints
-   * a fresh JWT on every call per Probe A's 2026-05-19 finding (RS256, 900 s
-   * lifetime, `iss = <site-url>`, `aud = convex`). The caller (the SDK's
-   * `tokenProvider` wired into ConvexCallPort) is responsible for the
-   * `exp - 30s` proactive cache + `forceRefresh` callback handshake.
-   */
-  getConvexJwt(options?: GetConvexJwtOptions): Effect.Effect<CachedJwt, AuthClientError>;
-}
-//#endregion
-//#region src/ports/clock.d.ts
-interface ClockPort {
-  readonly now: Effect.Effect<EpochMs, ClockError>;
-  readonly sleep: (duration: DurationMs) => Effect.Effect<void, ClockError>;
-}
-declare const ClockError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
-  readonly _tag: "ClockError";
-} & Readonly<A>;
-declare class ClockError extends ClockError_base<{
-  readonly operation: "now" | "sleep" | "initialize";
-  readonly cause: unknown;
-}> {}
-//#endregion
 //#region ../wire/src/bootstrap.d.ts
 declare const EngineeringTelemetryBootstrapPolicy: Schema.Struct<{
   readonly host: Schema.refine<string, Schema.String>;
@@ -719,6 +657,20 @@ type Snapshot<T, E = CapxulError> = {
   readonly status: "error";
   readonly error: E;
 };
+type ConvexTransportFailure = {
+  readonly kind: "connection-lost-in-flight";
+  readonly connection_id: string;
+  readonly start_connection_count: number;
+  readonly connection_count: number;
+  readonly connection_retries?: number;
+  readonly close_code?: number;
+  readonly close_was_clean?: boolean;
+  readonly close_reason_present?: boolean;
+  readonly document_visibility?: string;
+  readonly navigator_online?: boolean;
+  readonly last_browser_event?: "visibility-visible" | "visibility-hidden" | "pagehide" | "pageshow" | "online" | "offline";
+  readonly ms_since_browser_event?: number;
+};
 declare const ConvexCallError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
   readonly _tag: "ConvexCallError";
 } & Readonly<A>;
@@ -728,6 +680,7 @@ declare class ConvexCallError extends ConvexCallError_base<{
   readonly publicError: CapxulError;
   readonly cause: unknown;
   readonly details?: CapxulErrorDetails;
+  readonly transport?: ConvexTransportFailure;
 }> {}
 interface ConvexCallPort {
   query<TArgs extends Record<string, unknown>, TOutput>(fn: FunctionReference<"query", "public", TArgs, TOutput>, args: TArgs): Effect.Effect<TOutput, ConvexCallError>;
@@ -2776,16 +2729,30 @@ interface SdkFailureObservation {
 /**
  * The PII-safe subset of `CapxulError.details`, already in PostHog property
  * shape. `provider` + `provider_operation` name the failing dependency
- * (`convex bootstrap`, `openfort configure`), `failure_mode` / `reason` are
- * enumerated codes, `http_status` is the upstream status. Anything else on
+ * (`convex bootstrap`, `openfort configure`). `provider_error_source` names
+ * the owner of an allow-listed `provider_error_code`. `failure_mode` / `reason`
+ * are enumerated codes. `http_status` is the upstream status. Anything else on
  * `details` (ids, field names, free text) is dropped at the boundary.
  */
 interface SdkFailureDetail {
   readonly provider?: string;
   readonly provider_operation?: string;
+  readonly provider_error_source?: string;
+  readonly provider_error_code?: string;
+  readonly target_host?: string;
   readonly failure_mode?: string;
   readonly reason?: string;
   readonly http_status?: number;
+  readonly connection_id?: string;
+  readonly connection_count?: number;
+  readonly connection_retries?: number;
+  readonly close_code?: number;
+  readonly close_was_clean?: boolean;
+  readonly close_reason_present?: boolean;
+  readonly document_visibility?: string;
+  readonly navigator_online?: boolean;
+  readonly last_browser_event?: string;
+  readonly ms_since_browser_event?: number;
   /** ADR-0023 R7: the chain cause, flat, same keys as every other producer. */
   readonly chain_upstream?: string;
   readonly chain_method?: string;
@@ -2816,4 +2783,4 @@ interface ObservationAdapter {
 /** Stable PostHog event used for typed failures that are expected product outcomes. */
 declare const CAPXUL_SDK_EXPECTED_OUTCOME_EVENT = "capxul_sdk_expected_outcome";
 //#endregion
-export { OrganizationPaymentsMethods as $, IdentityState as $n, MeMethods as $t, OrgView as A, AccountSetupStep as An, ActivityFilter as At, PayrollGroupInput as B, SubmittedPermissionExecution as Bn, ActivitySummaryTotal as Bt, DetectPendingOrgInvitationsResult as C, RecipientResolutionKind as Cn, AddressBookMethods as Ct, OrgMethods as D, TargetsMethods as Dn, ActivityAnnotation as Dt, MemberView as E, TargetReference as En, InboxMethods as Et, RoleSpendCap as F, OrgLifecycle as Fn, ActivityPage as Ft, PayrollRun as G, RequestStatus as Gn, DestinationKind as Gt, PayrollGroupsMethods as H, PAYMENT_DIRECTIONS as Hn, DepositInstructions as Ht, RoleView as I, OrgSetupStep as In, ActivityRange as It, PayrollRuns as J, TelemetryGroupInput as Jn, DestinationRail as Jt, PayrollRunItemInput as K, CAPXUL_PAYMENTS_V2_ADDRESS as Kn, DestinationListInput as Kt, AuthorizeRunInput as L, ActorRef as Ln, ActivityReference as Lt, OrganizationAuditLogItem as M, IdentityMethods as Mn, ActivityKind as Mt, ResendInviteTokenInput as N, SmartAccountMethods as Nn, ActivityListParams as Nt, OrgScopedMethods as O, fingerprintPaymentIntent as On, ActivityAnnotationInput as Ot, RoleDefinition as P, AuthMethods as Pn, ActivityMethods as Pt, OrganizationPaymentItemInput as Q, IdentityEvent as Qn, HandlesMethods as Qt, PayrollEngagementTerms as R, CurrentHoldings as Rn, ActivitySummary as Rt, CreateOrgInput as S, RecipientResolution as Sn, AddressBookLabelInput as St, MemberStatus as T, ResolvedTarget as Tn, InboxItem as Tt, PayrollMethods as U, PAYMENT_STATUSES as Un, Destination as Ut, PayrollGroupMember as V, InboxStatus as Vn, ActorReference as Vt, PayrollOptions as W, PaymentStatus$1 as Wn, DestinationAddInput as Wt, OrganizationPaymentBatchInput as X, TelemetryPort as Xn, DestinationsMethods as Xt, PayrollTermsUnit as Y, TelemetryIdentifyInput as Yn, DestinationRemoveInput as Yt, OrganizationPaymentInput as Z, Destination$1 as Zn, FinancialOpsMethods as Zt, SystemMethods as _, PaymentStatus as _n, ActorRequest as _t, SdkFailureObservation as a, OfframpStatus as an, isRestoring as ar, PermissionReplaceInput as at, CurrentUserContext as b, PaymentsMethods as bn, AddressBookAddInput as bt, PostHogObservabilityOptions as c, Payment as cn, Budget as ct, CreateCapxulClientInput as d, PaymentDocumentKind as dn, OrgMeOptions as dt, MeProfile as en, OrgLane as er, PermissionAssignInput as et, IdentityProfileDetails as f, PaymentDocumentRef as fn, AccountsMethods as ft, Holding as g, PaymentMoney as gn, ActorRelationshipMethods as gt, HoldingsMethods as h, PaymentDocumentsMethods as hn, ActorProfileMethods as ht, ObservationDelivery as i, OfframpQuoteInput as in, isClaimed as ir, PermissionOptions as it, OrganizationAccount as j, isSettingUpLifecycle as jn, ActivityItem as jt, OrgTemplate as k, AccountLifecycle as kn, ActivityDetail as kt, postHogObservability as l, PaymentActivityEvidence as ln, OrgMe as lt, IdentityRuntimeSendResult as m, PaymentDocumentVerification as mn, ActorProfile as mt, ObservationAdapter as n, OfframpMethods as nn, StateLabel as nr, PermissionCreateInput as nt, HostObservability as o, Payee as on, IdentityTransition as or, PermissionRevokeInput as ot, IdentityRuntime as p, PaymentDocumentRender as pn, AccountMethods as pt, PayrollRunStatus as q, TelemetryEvent as qn, DestinationPayload as qt, ObservationContext as r, OfframpQuote as rn, destination as rr, PermissionMethods as rt, PostHogObservabilityClient as s, PayeesMethods as sn, InvocationControls as sr, PermissionReadResult as st, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT as t, MovementActivityEvidence as tn, Readiness as tr, PermissionChangeInput as tt, CapxulClient as u, PaymentDirection as un, OrgMeMethod as ut, SystemHealth as v, PaymentTiming as vn, ActorRequestIssueInput as vt, InviteMemberInput as w, Ref$1 as wn, InboxApproveInput as wt, CurrentUserMethods as x, PaymentsPayInput as xn, AddressBookEntry as xt, MediaMethods as y, PaymentType as yn, ActorRequestsMethods as yt, PayrollGroup as z, Permission as zn, ActivitySummaryParams as zt };
+export { OrganizationPaymentsMethods as $, OrgLane as $n, MeMethods as $t, OrgView as A, AccountSetupStep as An, ActivityFilter as At, PayrollGroupInput as B, SubmittedPermissionExecution as Bn, ActivitySummaryTotal as Bt, DetectPendingOrgInvitationsResult as C, RecipientResolutionKind as Cn, AddressBookMethods as Ct, OrgMethods as D, TargetsMethods as Dn, ActivityAnnotation as Dt, MemberView as E, TargetReference as En, InboxMethods as Et, RoleSpendCap as F, OrgLifecycle as Fn, ActivityPage as Ft, PayrollRun as G, RequestStatus as Gn, DestinationKind as Gt, PayrollGroupsMethods as H, PAYMENT_DIRECTIONS as Hn, DepositInstructions as Ht, RoleView as I, OrgSetupStep as In, ActivityRange as It, PayrollRuns as J, TelemetryIdentifyInput as Jn, DestinationRail as Jt, PayrollRunItemInput as K, TelemetryEvent as Kn, DestinationListInput as Kt, AuthorizeRunInput as L, ActorRef as Ln, ActivityReference as Lt, OrganizationAuditLogItem as M, IdentityMethods as Mn, ActivityKind as Mt, ResendInviteTokenInput as N, SmartAccountMethods as Nn, ActivityListParams as Nt, OrgScopedMethods as O, fingerprintPaymentIntent as On, ActivityAnnotationInput as Ot, RoleDefinition as P, AuthMethods as Pn, ActivityMethods as Pt, OrganizationPaymentItemInput as Q, IdentityState as Qn, HandlesMethods as Qt, PayrollEngagementTerms as R, CurrentHoldings as Rn, ActivitySummary as Rt, CreateOrgInput as S, RecipientResolution as Sn, AddressBookLabelInput as St, MemberStatus as T, ResolvedTarget as Tn, InboxItem as Tt, PayrollMethods as U, PAYMENT_STATUSES as Un, Destination as Ut, PayrollGroupMember as V, InboxStatus as Vn, ActorReference as Vt, PayrollOptions as W, PaymentStatus$1 as Wn, DestinationAddInput as Wt, OrganizationPaymentBatchInput as X, Destination$1 as Xn, DestinationsMethods as Xt, PayrollTermsUnit as Y, TelemetryPort as Yn, DestinationRemoveInput as Yt, OrganizationPaymentInput as Z, IdentityEvent as Zn, FinancialOpsMethods as Zt, SystemMethods as _, PaymentStatus as _n, ActorRequest as _t, SdkFailureObservation as a, OfframpStatus as an, IdentityTransition as ar, PermissionReplaceInput as at, CurrentUserContext as b, PaymentsMethods as bn, AddressBookAddInput as bt, PostHogObservabilityOptions as c, Payment as cn, Budget as ct, CreateCapxulClientInput as d, PaymentDocumentKind as dn, OrgMeOptions as dt, MeProfile as en, Readiness as er, PermissionAssignInput as et, IdentityProfileDetails as f, PaymentDocumentRef as fn, AccountsMethods as ft, Holding as g, PaymentMoney as gn, ActorRelationshipMethods as gt, HoldingsMethods as h, PaymentDocumentsMethods as hn, ActorProfileMethods as ht, ObservationDelivery as i, OfframpQuoteInput as in, isRestoring as ir, PermissionOptions as it, OrganizationAccount as j, isSettingUpLifecycle as jn, ActivityItem as jt, OrgTemplate as k, AccountLifecycle as kn, ActivityDetail as kt, postHogObservability as l, PaymentActivityEvidence as ln, OrgMe as lt, IdentityRuntimeSendResult as m, PaymentDocumentVerification as mn, ActorProfile as mt, ObservationAdapter as n, OfframpMethods as nn, destination as nr, PermissionCreateInput as nt, HostObservability as o, Payee as on, InvocationControls as or, PermissionRevokeInput as ot, IdentityRuntime as p, PaymentDocumentRender as pn, AccountMethods as pt, PayrollRunStatus as q, TelemetryGroupInput as qn, DestinationPayload as qt, ObservationContext as r, OfframpQuote as rn, isClaimed as rr, PermissionMethods as rt, PostHogObservabilityClient as s, PayeesMethods as sn, PermissionReadResult as st, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT as t, MovementActivityEvidence as tn, StateLabel as tr, PermissionChangeInput as tt, CapxulClient as u, PaymentDirection as un, OrgMeMethod as ut, SystemHealth as v, PaymentTiming as vn, ActorRequestIssueInput as vt, InviteMemberInput as w, Ref$1 as wn, InboxApproveInput as wt, CurrentUserMethods as x, PaymentsPayInput as xn, AddressBookEntry as xt, MediaMethods as y, PaymentType as yn, ActorRequestsMethods as yt, PayrollGroup as z, Permission as zn, ActivitySummaryParams as zt };

package/dist/{signer-xGhV5Q7i.d.mts → signer-HY5Ju8xs.d.mts}

@@ -1,4 +1,4 @@
-import { Account, Hex } from "viem";
+import { Account, Address, Hex } from "viem";
 import { Context, Effect } from "effect";
 //#region ../errors/src/chain-cause.d.ts
 /**
@@ -17,6 +17,8 @@ declare const FAILURE_MODES: readonly [
 "app-env-allowlist",
 /** Sandboxed/headless browser with no Web Crypto. */
 "no-secure-context",
+/** The embedded wallet lost its configured signer state. */
+"signer-not-ready",
 /** One upstream answered HTTP 429 or JSON-RPC -32005. Retryable. */
 "rate-limited",
 /** No answer inside the budget. Retryable. */
@@ -104,6 +106,22 @@ declare class CapxulError extends Error {
   constructor(code: CapxulErrorCode, message: string, options?: CapxulErrorOptions);
 }
 declare function isCapxulError(value: unknown): value is CapxulError;
+type NetworkErrorOptions = {
+  readonly provider?: string;
+  readonly target_host?: string;
+  readonly failure_mode?: FailureMode;
+  readonly reason?: "connection-lost-in-flight";
+  readonly connection_id?: string;
+  readonly connection_count?: number;
+  readonly connection_retries?: number;
+  readonly close_code?: number;
+  readonly close_was_clean?: boolean;
+  readonly close_reason_present?: boolean;
+  readonly document_visibility?: string;
+  readonly navigator_online?: boolean;
+  readonly last_browser_event?: string;
+  readonly ms_since_browser_event?: number;
+};
 declare const Errors: {
   readonly notAuthenticated: (message?: string, opts?: {
     readonly failure_mode?: FailureMode;
@@ -182,7 +200,7 @@ declare const Errors: {
     readonly retryAfterMs?: number;
     readonly resource?: string;
   }) => CapxulError;
-  readonly networkError: (operation: string, cause?: unknown) => CapxulError;
+  readonly networkError: (operation: string, cause?: unknown, opts?: NetworkErrorOptions) => CapxulError;
   readonly unknown: (cause?: unknown) => CapxulError;
   readonly otpExpired: (details?: {
     readonly email?: string;
@@ -193,6 +211,11 @@ declare const Errors: {
     readonly reason?: string;
     readonly cause?: unknown;
   }) => CapxulError;
+  readonly superseded: (details: {
+    readonly operation: string;
+    readonly reason: string;
+    readonly executionId?: string;
+  }) => CapxulError;
   readonly cancelled: (details?: {
     readonly operation?: string;
     readonly reason?: string;
@@ -319,6 +342,10 @@ type SupportedCurrencyCode = (typeof SUPPORTED_CURRENCIES)[number]["code"];
 declare function toAddress(raw: unknown): Address$1;
 declare function toCountryCode(raw: unknown): CountryCode;
 //#endregion
+//#region ../config/src/capxul-payments-v2.d.ts
+/** Immutable CapxulPaymentsV2 deployment on Base Sepolia. */
+declare const CAPXUL_PAYMENTS_V2_ADDRESS: Address;
+//#endregion
 //#region src/ports/auth-cache.d.ts
 /**
  * AuthCachePort stores the user session and the cached
@@ -364,6 +391,64 @@ declare class AuthCacheError extends AuthCacheError_base<{
 declare const AuthCachePortTag_base: Context.ServiceClass<AuthCachePortTag, "@capxul/sdk/ports/AuthCachePort", AuthCachePort>;
 declare class AuthCachePortTag extends AuthCachePortTag_base {}
 //#endregion
+//#region src/ports/auth-client.d.ts
+type AuthClientOperationOptions = {
+  readonly signal?: AbortSignal;
+};
+type SendOtpInput = {
+  readonly email: Email;
+};
+type CanSendOtpInput = {
+  readonly email: Email;
+};
+type CanSendOtpStatus = {
+  readonly allowed: boolean;
+  readonly cooldownMs: DurationMs;
+};
+type VerifyOtpInput = {
+  readonly email: Email;
+  readonly otp: string;
+};
+type GetConvexJwtOptions = AuthClientOperationOptions & {
+  readonly forceRefresh?: boolean;
+};
+declare const AuthClientError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+  readonly _tag: "AuthClientError";
+} & Readonly<A>;
+declare class AuthClientError extends AuthClientError_base<{
+  readonly operation: string;
+  readonly kind: string;
+  readonly cause: unknown;
+}> {}
+interface AuthClientPort {
+  canSendOtp(input: CanSendOtpInput, options?: AuthClientOperationOptions): Effect.Effect<CanSendOtpStatus, AuthClientError>;
+  sendOtp(input: SendOtpInput, options?: AuthClientOperationOptions): Effect.Effect<void, AuthClientError>;
+  verifyOtp(input: VerifyOtpInput, options?: AuthClientOperationOptions): Effect.Effect<AuthSession, AuthClientError>;
+  getSession(options?: AuthClientOperationOptions): Effect.Effect<AuthSession | null, AuthClientError>;
+  signOut(options?: AuthClientOperationOptions): Effect.Effect<void, AuthClientError>;
+  /**
+   * Fetches a Convex-aud JWT from `/api/auth/convex/token` (W7). Server mints
+   * a fresh JWT on every call per Probe A's 2026-05-19 finding (RS256, 900 s
+   * lifetime, `iss = <site-url>`, `aud = convex`). The caller (the SDK's
+   * `tokenProvider` wired into ConvexCallPort) is responsible for the
+   * `exp - 30s` proactive cache + `forceRefresh` callback handshake.
+   */
+  getConvexJwt(options?: GetConvexJwtOptions): Effect.Effect<CachedJwt, AuthClientError>;
+}
+//#endregion
+//#region src/ports/clock.d.ts
+interface ClockPort {
+  readonly now: Effect.Effect<EpochMs, ClockError>;
+  readonly sleep: (duration: DurationMs) => Effect.Effect<void, ClockError>;
+}
+declare const ClockError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+  readonly _tag: "ClockError";
+} & Readonly<A>;
+declare class ClockError extends ClockError_base<{
+  readonly operation: "now" | "sleep" | "initialize";
+  readonly cause: unknown;
+}> {}
+//#endregion
 //#region src/surface/types.d.ts
 type Session = AuthSession;
 type Profile = Profile$1;
@@ -487,4 +572,4 @@ interface Eip1193RequestProvider {
  */
 declare function injectedWalletSigner(provider: Eip1193RequestProvider): CapxulSigner;
 //#endregion
-export { WeiAmount as $, BlockNumber as A, OrgId as B, Address$1 as C, AppId as D, AnonymousDistinctId as E, DocumentHash as F, PermissionAssignmentId as G, PaymentCommandId as H, DurationMs as I, PublishableKey as J, PermissionId as K, Email as L, ChainId as M, CountryCode as N, AuthSession as O, CurrencyCode as P, TxHash as Q, EpochMs as R, AccountId as S, AllowedOrigin as T, PayrollGroupId as U, PartyId as V, PayrollRunId as W, SessionToken as X, RoleKey as Y, SmartAccount$1 as Z, AuthCacheError as _, SignerStatusStore as a, CapxulErrorDetails as at, CachedJwt as b, AccountProviderSource as c, isCapxulError as ct, eip1193AccountProvider as d, ChainUpstream as dt, toAddress as et, localPrivateKeyAccountProvider as f, FAILURE_MODES as ft, SmartAccount as g, Session as h, SignerStatus as i, CapxulErrorCode as it, BudgetId as j, AuthUserId as k, AccountRequirement as l, CHAIN_UPSTREAMS as lt, Profile as m, RevertSummary as mt, CapxulSigner as n, CAPXUL_ERROR_CODES as nt, injectedWalletSigner as o, Errors as ot, CapxulResult as p, FailureMode as pt, Profile$1 as q, Eip1193RequestProvider as r, CapxulError as rt, AccountProvider as s, Failure as st, CapxulDigestSigner as t, toCountryCode as tt, Eip1193Provider as u, ChainCause as ut, AuthCachePort as v, AllowanceKey as w, Account$1 as x, AuthCachePortTag as y, Money as z };
+export { RoleKey as $, AnonymousDistinctId as A, DurationMs as B, CachedJwt as C, Address$1 as D, AccountId as E, BudgetId as F, PartyId as G, EpochMs as H, ChainId as I, PayrollRunId as J, PaymentCommandId as K, CountryCode as L, AuthSession as M, AuthUserId as N, AllowanceKey as O, BlockNumber as P, PublishableKey as Q, CurrencyCode as R, AuthCachePortTag as S, Account$1 as T, Money as U, Email as V, OrgId as W, PermissionId as X, PermissionAssignmentId as Y, Profile$1 as Z, ClockPort as _, FailureMode as _t, SignerStatusStore as a, toCountryCode as at, AuthCacheError as b, AccountProviderSource as c, CapxulErrorCode as ct, eip1193AccountProvider as d, Failure as dt, SessionToken as et, localPrivateKeyAccountProvider as f, isCapxulError as ft, SmartAccount as g, FAILURE_MODES as gt, Session as h, ChainUpstream as ht, SignerStatus as i, toAddress as it, AppId as j, AllowedOrigin as k, AccountRequirement as l, CapxulErrorDetails as lt, Profile as m, ChainCause as mt, CapxulSigner as n, TxHash as nt, injectedWalletSigner as o, CAPXUL_ERROR_CODES as ot, CapxulResult as p, CHAIN_UPSTREAMS as pt, PayrollGroupId as q, Eip1193RequestProvider as r, WeiAmount as rt, AccountProvider as s, CapxulError as st, CapxulDigestSigner as t, SmartAccount$1 as tt, Eip1193Provider as u, Errors as ut, AuthClientPort as v, RevertSummary as vt, CAPXUL_PAYMENTS_V2_ADDRESS as w, AuthCachePort as x, CanSendOtpStatus as y, DocumentHash as z };

package/dist/testing/index.d.mts

@@ -1,4 +1,4 @@
-import { Jn as TelemetryGroupInput, Yn as TelemetryIdentifyInput, n as ObservationAdapter, or as IdentityTransition, qn as TelemetryEvent, u as CapxulClient } from "../observation-YhuU8yQX.mjs";
+import { Jn as TelemetryIdentifyInput, Kn as TelemetryEvent, ar as IdentityTransition, n as ObservationAdapter, qn as TelemetryGroupInput, u as CapxulClient } from "../observation-CR3_haBB.mjs";
 import { Effect, Layer } from "effect";
 //#region src/testing/telemetry/RecordingTelemetryAdapter.d.ts
 type RecordingTelemetryOperation = {

package/dist/testing/index.mjs

@@ -1,5 +1,5 @@
-import { $ as deriveCapxulSafeAddress, P as fromWei, b as authClientPortFromPromiseAdapter, c as smartAccountErrorFromCapxul, d as wireChainId, h as convexCallErrorFromCapxul, o as redactTelemetryEvent, p as identityErrorFromCapxul, t as assembleCapxulClient, u as accountReadErrorFromCapxul, w as toWei, y as bootstrapErrorFromCapxul } from "../create-capxul-client-YSN2yN8m.mjs";
-import { B as Errors, C as toDurationMs, D as toJwtToken, E as toEpochSeconds, F as toSessionToken, N as toPublishableKey, O as toKycTier, R as CapxulError, T as toEpochMs, _ as toAppId, b as toChainId, g as toAllowedOrigin, h as toAddress, m as toAccountId, t as InMemoryAuthCacheAdapter, v as toAuthUserId, w as toEmail, x as toCountryCode } from "../InMemoryAuthCacheAdapter-FptQ2p7C.mjs";
+import { F as fromWei, _ as convexCallErrorFromCapxul, c as redactTelemetryEvent, h as identityErrorFromCapxul, i as smartAccountErrorFromCapxul, o as accountReadErrorFromCapxul, p as wireChainId, t as assembleCapxulClient, x as toWei, y as bootstrapErrorFromCapxul } from "../create-capxul-client-DwINzpXZ.mjs";
+import { D as toAllowedOrigin, E as toAddress, F as toEmail, I as toEpochMs, K as toSessionToken, L as toEpochSeconds, M as toCountryCode, O as toAppId, P as toDurationMs, R as toJwtToken, T as toAccountId, W as toPublishableKey, Y as CapxulError, Z as Errors, _ as deriveCapxulSafeAddress, j as toChainId, k as toAuthUserId, n as InMemoryAuthCacheAdapter, t as readClockNow, u as authClientPortFromPromiseAdapter, z as toKycTier } from "../clock-0c5NM-TY.mjs";
 import { keccak256 } from "viem";
 import { Effect, Result, Semaphore } from "effect";
 import { getFunctionName } from "convex/server";
@@ -43,26 +43,6 @@ function cloneAccount(account) {
 	};
 }
 //#endregion
-//#region src/adapters/_shared/clock.ts
-async function readClockNow(clock) {
-	try {
-		const result = await Effect.runPromise(Effect.result(clock.now));
-		if (Result.isFailure(result)) return {
-			ok: false,
-			error: Errors.providerError("clock", "now", result.failure)
-		};
-		return {
-			ok: true,
-			value: result.success
-		};
-	} catch (cause) {
-		return {
-			ok: false,
-			error: Errors.providerError("clock", "now", cause)
-		};
-	}
-}
-//#endregion
 //#region src/testing/clock/ManualClockAdapter.ts
 /**
 * Event-discipline test clock. Time moves only when a release primitive is

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/sdk",
-  "version": "2.8.0",
+  "version": "3.0.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Xelmar-tech/infrastructure.git",
@@ -47,12 +47,12 @@
     "vite": "npm:@voidzero-dev/vite-plus-core@0.3.0",
     "vite-plus": "0.3.0",
     "vitest": "4.1.11",
-    "@capxul/types": "0.2.1",
     "@capxul/errors": "0.0.2",
-    "@capxul/wire": "0.5.1",
+    "@capxul/types": "0.2.1",
     "@capxul/typescript-config": "0.0.0",
-    "@capxul/observability": "2.8.0",
-    "@capxul/config": "0.2.1"
+    "@capxul/wire": "0.5.1",
+    "@capxul/config": "0.2.1",
+    "@capxul/observability": "3.0.0"
   },
   "_permissionlessPinReason": "permissionless.toSafeSmartAccount is pinned to 0.3.4 for live Safe deployment E2E. Counterfactual address fixtures captured 2026-05-17 in packages/backend/convex/_shared/__tests__/counterfactual.test.ts and packages/config/tests/safe.test.ts must be re-verified before upgrading.",
   "scripts": {