@capxul/sdk 4.20.0-beta.28 → 4.20.0-beta.29

package/dist/{access-SP-ur4Ku.mjs → access-wvksqkgT.mjs}

@@ -1,4 +1,4 @@
-import { Cause, Clock, Context, Data, Deferred, Effect, Exit, Fiber, Layer, Option, Predicate, Queue, Ref, Result, Schema, SchemaGetter, SchemaIssue, SchemaParser } from "effect";
+import { Cause, Clock, Context, Data, Deferred, Effect, Exit, Fiber, Layer, Option, Predicate, Queue, Ref, Result, Schema, SchemaAST, SchemaGetter, SchemaIssue, SchemaParser } from "effect";
 import { makeFunctionReference } from "convex/server";
 import { bytesToHex, concat, decodeErrorResult, encodeAbiParameters, encodeFunctionData, encodePacked, formatUnits, getContractAddress, hashTypedData, isAddress, isHex, keccak256, pad, padHex, parseAbiParameters, recoverAddress, recoverTypedDataAddress, toBytes, toFunctionSignature, toHex } from "viem";
 import { getUserOperationHash } from "viem/account-abstraction";
@@ -936,6 +936,21 @@ function markFailureInvocationSnapshot(failure, snapshot) {
 function readFailureInvocationSnapshot(failure) {
 	return isRecord(failure) ? failureInvocationSnapshots.get(failure) : void 0;
 }
+/**
+* The operation each failure came from, by the error it carries. A public
+* method's path (`approvals.review`) is not always an operation name; the row
+* it called (`accounts.approvals.review`) is. The innermost call marks first
+* and keeps the mark, so the report names the row that actually failed.
+*/
+const failureOperations = /* @__PURE__ */ new WeakMap();
+/** @internal Record which operation a failure came from; the first mark is kept. */
+function markFailureOperation(error, operation) {
+	if (isRecord(error) && !failureOperations.has(error)) failureOperations.set(error, operation);
+}
+/** @internal The operation a failure came from, when a runner marked it. */
+function readFailureOperation(error) {
+	return isRecord(error) ? failureOperations.get(error) : void 0;
+}
 //#endregion
 //#region src/observability/http-headers.ts
 /** Resolve one bounded pre-auth snapshot for an outbound SDK HTTP request. */
@@ -2079,7 +2094,9 @@ async function runIfActive(signal, operation, effect, runPromise, observe) {
 		signal.addEventListener("abort", onAbort, { once: true });
 		return Effect.sync(() => signal.removeEventListener("abort", onAbort));
 	}));
-	return runProgram(observe === void 0 ? controlled : observe(controlled), runPromise);
+	const result = await runProgram(observe === void 0 ? controlled : observe(controlled), runPromise);
+	if (!result.ok) markFailureOperation(result.error, operation);
+	return result;
 }
 //#endregion
 //#region src/platform/capxul-effect.ts
@@ -4688,7 +4705,9 @@ const OrganizationPaymentExecutionItemSchema = Schema.Struct({
 		"invoice",
 		"payroll",
 		"reimbursement"
-	]))
+	])),
+	/** When the recipient gets it: instant (the default), or held until a date or over a period. */
+	timing: Schema.optional(PaymentTiming)
 }).check(Schema.makeFilter((value) => Schema.is(PaymentDocumentOptionsSchema)(value)));
 const PrepareOrganizationPaymentExecutionInputSchema = Schema.Struct({
 	orgId: nonEmpty("orgId"),
@@ -4798,11 +4817,20 @@ const PreparedPaymentCommandExecutionSchema = Schema.Struct({
 //#region ../protocol/src/accounts/approval-schema.ts
 const APPROVAL_ID_RE = /^approval_[0-9A-HJKMNP-TV-Z]{26}$/u;
 const ApprovalIdSchema = Schema.String.pipe(Schema.refine((value) => APPROVAL_ID_RE.test(value), { message: "must be approval_ plus a ULID" }));
-/** What is being approved. */
+/**
+* What is being approved. A `permission_change` creates, changes, assigns,
+* revokes or replaces an Organization's Permissions; an `invitation` sets up
+* the rights an invitation offers. Neither moves money. A `payment_cancel`
+* returns a held Payment to whoever funded it; a `payment_redirect` sends it
+* to someone else.
+*/
 const APPROVAL_KINDS = [
 	"payment",
 	"payroll_run",
+	"payment_cancel",
+	"payment_redirect",
 	"permission_change",
+	"invitation",
 	"bank_payout"
 ];
 /**
@@ -5026,8 +5054,7 @@ const approvals = {
 		errors: [
 			...CALL$10,
 			...DEFECTS,
-			"WRONG_STATE",
-			"NOT_IMPLEMENTED"
+			"WRONG_STATE"
 		]
 	}),
 	/** The approval as the person reads it, with its state judged against its expiry. */
@@ -5619,6 +5646,15 @@ const PermissionSchema = Schema.Struct({
 	limitRaw: Schema.optional(WeiAmountSchema$1),
 	allowanceKey: Schema.optional(AllowanceKeySchema)
 });
+/**
+* A refilling Budget's refill (#2439): how much each one adds, every how many
+* days, and when the next one is due.
+*/
+const BudgetNextRefillSchema = Schema.Struct({
+	amount: AssetAmountSchema,
+	everyDays: Schema.Finite,
+	nextAt: EpochMsSchema$1
+});
 const PermissionAssignmentSchema = Schema.Struct({
 	permissionAssignmentId: PermissionAssignmentIdSchema,
 	permissionId: PermissionIdSchema,
@@ -8239,6 +8275,30 @@ const authorities = {
 			"ROLE_PERMISSION_DENIED"
 		]
 	}),
+	/**
+	* What one active Budget can still spend now: its Roles allowance, read on
+	* chain at the latest block as the payment gate reads it. `left` is null for
+	* a Budget with no allowance (no cap). `refill` names a refilling Budget's
+	* refill and when the next one is due; null for a one-off or uncapped Budget
+	* (#2439). For a participant of the Organization.
+	*/
+	budgetLeft: Operation.action("permissions.authorities.budgetLeft", {
+		input: Schema.Struct({
+			orgId: OrgId,
+			budgetId: PermissionIdSchema
+		}),
+		output: Schema.Struct({
+			budgetId: PermissionIdSchema,
+			left: Schema.NullOr(AssetAmountSchema),
+			refill: Schema.optionalKey(Schema.NullOr(BudgetNextRefillSchema))
+		}),
+		errors: [
+			...CALL$2,
+			...DEFECTS,
+			...CHAIN$1,
+			"ROLE_PERMISSION_DENIED"
+		]
+	}),
 	/** Whether the caller's Account may spend this amount from this Budget right now. */
 	authorize: Operation.query("permissions.authorities.authorize", {
 		input: MoneyAuthorizationRequestSchema,
@@ -9129,6 +9189,7 @@ const ORGANIZATION_OPERATIONS = {
 		payment: "org.payment",
 		permissions: {
 			assign: "org.permissions.assign",
+			budgetLeft: "org.permissions.budgetLeft",
 			change: "org.permissions.change",
 			create: "org.permissions.create",
 			get: "org.permissions.get",
@@ -9375,6 +9436,9 @@ emitChanged: "payroll.groups.emitChanged" }
 	},
 	/** Permissions' internal functions; its public rows join from `OPERATIONS`. */
 	permissions: {
+		authorities: { 
+		/** The Budget-left read's participant check and the Budget's stored allowance. */
+loadBudgetLeft: "permissions.authorities.loadBudgetLeft" },
 		commands: {
 			/** The prepare action's transaction: authorize, plan and save the command. */
 			prepareIntent: "permissions.commands.prepareIntent",
@@ -10570,6 +10634,14 @@ Schema.Struct({
 		account_kind: Schema.optional(AccountKindSchema)
 	})
 });
+Schema.Struct({
+	name: Schema.Literal("ui_approval_sign_in_required"),
+	props: Schema.Struct({
+		...TelemetryEnvelopeProps,
+		approval_id: Schema.String,
+		reason: Schema.Literals(["signed_out", "wrong_account"])
+	})
+});
 Schema.Struct({
 	name: Schema.Literal("payroll_group_changed"),
 	props: Schema.Struct({
@@ -10825,6 +10897,8 @@ const CLI_COMMAND_NAMES = [
 	"payment.get",
 	"payment.wait",
 	"payment.retry",
+	"payment.cancel",
+	"payment.redirect",
 	"inbox",
 	CAPXUL_OPERATIONS.inbox.list,
 	"inbox.get",
@@ -12611,7 +12685,7 @@ function mapAccountLifecycle(input) {
 }
 //#endregion
 //#region package.json
-var version = "4.20.0-beta.28";
+var version = "4.20.0-beta.29";
 //#endregion
 //#region src/observability/telemetry/exception-projection.ts
 /** Fixed fallback for failures that have no safe message. */
@@ -12663,7 +12737,7 @@ function report(adapter, kind, operation, cause, invocation, origin, authoritati
 			link = link.cause;
 		}
 	} else if (reportedByMachine(cause)) return;
-	const operationName = normalizeCapxulOperation(operation);
+	const operationName = isCapxulOperation(operation) ? operation : normalizeCapxulOperation(readFailureOperation(cause) ?? operation);
 	const kindName = normalizeErrorKind(errorKind(cause));
 	const context = sanitizeObservationContext({
 		...invocation.context,
@@ -17763,7 +17837,7 @@ function paymentExecutionIntent(input) {
 			value: decoded.success
 		} : {
 			ok: false,
-			error: invalidPaymentField(decoded.failure.issue)
+			error: invalidPaymentField(decoded.failure.issue, "invalid personal payment input")
 		};
 	} catch {
 		return {
@@ -17773,11 +17847,28 @@ function paymentExecutionIntent(input) {
 	}
 }
 const formatIssue = SchemaIssue.makeFormatterStandardSchemaV1();
-/** The first failing field and why, e.g. `amount.value`, as the backend's row decode names it (#2381). */
-function invalidPaymentField(issue) {
+/** A key the schema allows only as absent (`currency?: never`). Effect reports it as an empty `AnyOf`. */
+const forbiddenKey = (ast) => SchemaAST.isUnion(ast) && ast.types.every((type) => SchemaAST.isNever(type) || SchemaAST.isUndefined(type));
+/** Whether the issue that the formatter reports first is a key the caller must not pass. */
+function unknownKey(issue) {
+	switch (issue._tag) {
+		case "Encoding":
+		case "Filter":
+		case "Pointer": return unknownKey(issue.issue);
+		case "Composite": return unknownKey(issue.issues[0]);
+		case "AnyOf": return issue.issues[0] === void 0 ? forbiddenKey(issue.ast) : unknownKey(issue.issues[0]);
+		default: return issue._tag === "UnexpectedKey";
+	}
+}
+/**
+* The first failing field and why, e.g. `amount.value`, as the backend's row decode names it (#2381).
+* `callerPath` maps the decoded path to the path the caller passed (#2400).
+*/
+function invalidPaymentField(issue, fallbackReason, callerPath = (path) => path) {
 	const first = formatIssue(issue).issues[0];
-	const field = first?.path?.map((segment) => String(typeof segment === "object" ? segment.key : segment)).join(".");
-	return Errors.invalidInput(field === void 0 || field.length === 0 ? "payment" : field, first?.message ?? "invalid personal payment input");
+	const path = callerPath(first?.path?.map((segment) => String(typeof segment === "object" ? segment.key : segment)) ?? []);
+	const reason = path.length > 0 && unknownKey(issue) ? `unknown field \`${path.at(-1)}\`` : first?.message;
+	return Errors.invalidInput(path.length === 0 ? "payment" : path.join("."), reason ?? fallbackReason);
 }
 function normalizePaymentTiming(payment) {
 	const { release: _release, ...rest } = payment;
@@ -18347,7 +18438,13 @@ const organizationPaymentIntentSchema = Schema.Struct({
 	items: PrepareOrganizationPaymentExecutionInputSchema.fields.items,
 	lineage: PrepareOrganizationPaymentExecutionInputSchema.fields.lineage
 });
-function organizationPaymentIntent(orgId, input) {
+/** One Payment's decoded `items.0.amount.value` is the caller's `amount.value`. */
+const singleItemPath = (path) => path[0] === "items" && path[1] === "0" ? path.slice(2) : path;
+/**
+* Decode a batch. `single` says the caller passed one Payment that its call
+* site wrapped as `items: [item]`, so a refusal names the caller's own field.
+*/
+function organizationPaymentIntent(orgId, input, single = false) {
 	if (input.requestKey !== void 0) {
 		if (Schema.decodeResult(PrepareOrganizationPaymentExecutionInputSchema.fields.requestKey)(input.requestKey)._tag === "Failure") return {
 			ok: false,
@@ -18360,13 +18457,14 @@ function organizationPaymentIntent(orgId, input) {
 		items: input.items,
 		...input.lineage === void 0 ? {} : { lineage: input.lineage }
 	});
-	return decoded._tag === "Failure" ? {
-		ok: false,
-		error: Errors.invalidInput("payment", "invalid Organization Payment input")
-	} : {
+	if (decoded._tag === "Success") return {
 		ok: true,
 		value: decoded.success
 	};
+	return {
+		ok: false,
+		error: invalidPaymentField(decoded.failure.issue, "invalid Organization Payment input", single ? singleItemPath : void 0)
+	};
 }
 async function organizationPaymentRequest(scope, actor, intent, providedKey) {
 	let requestKey;
@@ -18472,12 +18570,12 @@ function executionDependencies$1(input) {
 * Submit one Organization payment batch. Callers that repeat a request key join
 * the flight already in progress instead of preparing a second execution.
 */
-async function executeOrganizationBatch(scope, input, signal, operation, controls, onPrepared) {
+async function executeOrganizationBatch(scope, input, signal, operation, controls, onPrepared, single = false) {
 	if (signal?.aborted === true) return {
 		ok: false,
 		error: Errors.cancelled({ operation })
 	};
-	const intent = organizationPaymentIntent(scope.orgId, input);
+	const intent = organizationPaymentIntent(scope.orgId, input, single);
 	if (!intent.ok) return intent;
 	const execution = executionDependencies$1(scope.deps);
 	if (execution === null) return {
@@ -18594,7 +18692,7 @@ function makeOrganizationPaymentsMethods(deps, orgId) {
 		requestKeyScope: deps.requestKeyScope ?? `client-${crypto.randomUUID()}`,
 		flights: /* @__PURE__ */ new Map()
 	};
-	const execute = (input, signal, operation = "organization-pay-batch", controls, onPrepared) => executeOrganizationBatch(scope, input, signal, operation, controls, onPrepared);
+	const execute = (input, signal, operation = "organization-pay-batch", controls, onPrepared, single = false) => executeOrganizationBatch(scope, input, signal, operation, controls, onPrepared, single);
 	/** One Owner-signed cancel or redirect, answering the one Payment it acted on (#2299). */
 	const ownerLifecycle = (intent, controls, operation) => runCapxulEffect(Effect.gen(function* () {
 		const captured = carryInvocationParentSpan(controls, yield* Effect.currentSpan.pipe(Effect.orDie));
@@ -18661,7 +18759,7 @@ function makeOrganizationPaymentsMethods(deps, orgId) {
 						...providedRequestKey === void 0 ? {} : { requestKey: providedRequestKey },
 						items: [item],
 						...lineage === void 0 ? {} : { lineage }
-					}, controls?.signal, "organization-pay", captured, options?.onPrepared);
+					}, controls?.signal, "organization-pay", captured, options?.onPrepared, true);
 					if (!result.ok) return result;
 					const payment = result.value[0];
 					return payment === void 0 ? {
@@ -19846,20 +19944,45 @@ async function checked(deps, signerAddress, prepared, expected, close) {
 	};
 	return close ? abandonPrepared(deps, evidence.executionId, "prepared_mismatch", refused) : refused;
 }
-/** A retry, a request payment or a payroll run, rather than a new Payment. */
-const isCommandApproval = (input) => "retry" in input || "request" in input || "payrollRun" in input;
-/** Prepare a retry, a request payment or a payroll run for `signerAddress`, checked. */
+/** A retry, cancel or redirect, a request payment or a payroll run, rather than a new Payment. */
+const isCommandApproval = (input) => "retry" in input || "cancel" in input || "redirect" in input || "request" in input || "payrollRun" in input;
+/** The next step of an existing Payment the input names; a recipient that cannot be one is refused. */
+function lifecycleIntent(input) {
+	if ("retry" in input) return {
+		ok: true,
+		value: {
+			kind: "retry",
+			paymentId: input.retry
+		}
+	};
+	if ("cancel" in input) return {
+		ok: true,
+		value: {
+			kind: "cancel",
+			paymentId: input.cancel
+		}
+	};
+	const recipient = normalizeTargetForBackend(input.to, "to");
+	return recipient.ok ? {
+		ok: true,
+		value: {
+			kind: "redirect",
+			paymentId: input.redirect,
+			recipient: recipient.value
+		}
+	} : recipient;
+}
+/** Prepare a retry, cancel, redirect, request payment or payroll run for `signerAddress`, checked. */
 function prepareVerifiedCommand(deps, input, signerAddress, signal) {
-	if ("retry" in input) return prepareVerifiedRetry(deps, input, signerAddress, signal);
 	if ("request" in input) return prepareVerifiedRequestPayment(deps, input, signerAddress, signal);
-	return prepareVerifiedPayrollRun(deps, input, signerAddress, signal);
-}
-/** The retry of one Payment, prepared in the scope that paid it. */
-async function prepareVerifiedRetry(deps, input, signerAddress, signal) {
-	const intent = {
-		kind: "retry",
-		paymentId: input.retry
-	};
+	if ("payrollRun" in input) return prepareVerifiedPayrollRun(deps, input, signerAddress, signal);
+	return prepareVerifiedLifecycle(deps, input, signerAddress, signal);
+}
+/** The next step of one Payment, prepared in the scope that paid it. */
+async function prepareVerifiedLifecycle(deps, input, signerAddress, signal) {
+	const named = lifecycleIntent(input);
+	if (!named.ok) return named;
+	const intent = named.value;
 	return checked(deps, signerAddress, await runIfActive(signal, CAPXUL_OPERATIONS.payments.prepareLifecycleExecution, () => callOperation(deps.convexCall, lifecycles.prepareScoped, {
 		signerAddress,
 		intent,
@@ -19928,7 +20051,7 @@ async function prepareVerifiedOrganizationPayment(deps, input, signerAddress, si
 		items: [item],
 		...lineage === void 0 ? {} : { lineage },
 		...requestKey === void 0 ? {} : { requestKey }
-	});
+	}, true);
 	if (!intent.ok) return intent;
 	const session = deps.actor?.authSession() ?? null;
 	if (session === null || deps.chainId === void 0) return {
@@ -19986,6 +20109,16 @@ async function readApprovalPayments(deps, paymentIds, organizationId, signal) {
 }
 //#endregion
 //#region src/accounts/approvals.ts
+/** A Permission write or an invitation, rather than a Payment. */
+const isPermissionChange = (input) => "permission" in input || "invite" in input;
+/** Only a Permission change or an invitation moves no money: its own owner sends it. */
+const movesMoney = (approval) => approval.kind !== "permission_change" && approval.kind !== "invitation";
+/**
+* A wait ends once it is sent: a Permission change or an invitation, and a
+* cancel or redirect of a held Payment, whose Payment was sent long before
+* and so cannot say whether this step was (#2439).
+*/
+const endsOnceSent = (approval) => !movesMoney(approval) || approval.kind === "payment_cancel" || approval.kind === "payment_redirect";
 function makeApprovalsMethods(deps) {
 	const call = (name, row, args, signal) => runIfActive(signal, name, () => callOperation(deps.convexCall, row, args, { fresh: true }).pipe(Effect.mapError((publicError) => ({ publicError }))), deps.runPromise);
 	const get = (approvalId) => call(approvals.get.name, approvals.get, { approvalId });
@@ -20026,6 +20159,10 @@ function makeApprovalsMethods(deps) {
 	const prepare = async (input, options) => {
 		const signal = options?.signal;
 		if (isCommandApproval(input)) return openApproval(signal, (signerAddress) => prepareVerifiedCommand(deps, input, signerAddress, signal));
+		if (isPermissionChange(input)) return openApproval(signal, async (signerAddress) => {
+			const { prepareVerifiedPermissionChange } = await import("./permission-approvals-B4iv9bXz.mjs");
+			return prepareVerifiedPermissionChange(deps, input, signerAddress, signal);
+		});
 		if ("organizationId" in input) return openApproval(signal, (signerAddress) => prepareVerifiedOrganizationPayment(deps, input, signerAddress, signal));
 		const intent = paymentExecutionIntent(input);
 		if (!intent.ok) return intent;
@@ -20092,10 +20229,23 @@ function makeApprovalsMethods(deps) {
 	const submit = async (approvalId) => {
 		const consumed = await call(approvals.consume.name, approvals.consume, { approvalId });
 		if (!consumed.ok) return consumed;
-		const sent = await call(executions.submitCommand.name, executions.submitCommand, {
-			executionId: consumed.value.approval.operation.executionId,
-			signature: consumed.value.signature
-		});
+		const { approval, signature } = consumed.value;
+		const signed = {
+			executionId: approval.operation.executionId,
+			signature
+		};
+		if (!movesMoney(approval)) {
+			const row = approval.kind === "invitation" ? configurations : commands;
+			const sent = await call(row.submitExecution.name, row.submitExecution, signed);
+			return sent.ok ? {
+				ok: true,
+				value: {
+					approval,
+					payments: []
+				}
+			} : sent;
+		}
+		const sent = await call(executions.submitCommand.name, executions.submitCommand, signed);
 		if (!sent.ok) return sent;
 		return {
 			ok: true,
@@ -20118,6 +20268,20 @@ function makeApprovalsMethods(deps) {
 			ok: true,
 			value: null
 		};
+		if (endsOnceSent(approval)) {
+			if (approval.state !== "approved" && approval.state !== "consumed") return {
+				ok: true,
+				value: {
+					approval,
+					payments: []
+				}
+			};
+			const sent = await submit(approvalId);
+			return sent.ok || !anotherSendInFlight(sent.error) ? sent : {
+				ok: true,
+				value: null
+			};
+		}
 		const payments = await readApprovalPayments(deps, approval.operation.paymentIds, organizationId ?? (approval.actor.kind === "organization" ? approval.actor.orgId : void 0), signal);
 		if (!payments.ok) return payments;
 		if (unsent(approval, payments.value)) {
@@ -23047,4 +23211,4 @@ function executeIdentityProductObservation(telemetry, record, state) {
 	return ignoreTransportFailure(() => invocationTelemetry.emit(mapped), "emit", mapped.name).pipe(Effect.andThen(ignoreTransportFailure(after, mapped.name === "auth_signed_out" ? "reset" : "identify", mapped.name)));
 }
 //#endregion
-export { parseAssetAmount as $, hashPermissionReplacementPreview as $n, carryInvocationParentSpan as $r, isSettingUpLifecycle as $t, registerProductTelemetryInvocation as A, toEpochSeconds as Ai, onboardings as An, isEvmAddress as Ar, safe4337MultiSendUserOpCallData as At, makeOrganizationPaymentsMethods as B, isRecord as Bi, invitations as Bn, runPortEffect as Br, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT as Bt, AccountReadPortTag as C, globalLocalStorage as Ci, EXCEPTION_EVENT_NAME as Cn, toRoleKey as Cr, SEND_SIGNATURE as Ct, convexCallErrorFromCapxul as D, parseCachedJwt as Di, normalizeCapxulOperation as Dn, toCurrencyCode as Dr, deriveCapxulSafeAddress as Dt, ConvexCallPortTag as E, parseAuthSession as Ei, isCapxulOperation as En, toAssetId as Er, TOKENS as Et, decodePayrollRunInput as F, Errors as Fi, PreparedPermissionExecutionSchema as Fn, reference as Fr, callOperation as Ft, makeActorRelationshipMethods as G, workspaces as Gn, awaitCapxulResult as Gr, withCapturedAttemptContext as Gt, makePaymentsMethods as H, AuthCacheError as Hi, roles as Hn, observationOnlyControls as Hr, observeFailedResult as Ht, toPayrollGroupId as I, CapxulError as Ii, PermissionCommandViewSchema as In, makeAuthMethods as Ir, asCapxulError as It, makeTargetsMethods as J, ORGANIZATION_SETUP_STATUSES as Jn, toCapxulResult as Jr, normalizeExceptionErrorKind as Jt, makeCheckoutMethods as K, OrganizationSetupSchema as Kn, defectAsCapxulError as Kr, EXCEPTION_MESSAGE as Kt, makeAccountMethods as L, isCapxulError as Li, PayrollGroupIdSchema as Ln, askIdentity as Lr, toPublicError$1 as Lt, makeApprovalsMethods as M, toEmail as Mi, commands as Mn, toChainId as Mr, BASE_SEPOLIA_CHAIN_ID as Mt, makePayrollMethods as N, toJwtToken as Ni, configurations as Nn, toWeiAmount as Nr, MULTI_SEND_CALL_ONLY as Nt, retryIdempotentRead as O, toDurationMs as Oi, OPERATIONS as On, toExactAssetAmount as Or, normalizeSafeSaltEmail as Ot, makeUnavailablePayrollMethods as P, toSessionToken as Pi, replacements as Pn, absurd as Pr, SAFE_SENTINEL_OWNERS as Pt, formatAssetAmount as Q, InvitationViewSchema as Qn, ActorFailure as Qr, version as Qt, emitDepositInitiated as R, FAILURE_MODES$1 as Ri, PayrollGroupInputSchema as Rn, publicIdentityFailure as Rr, failureDetail as Rt, valueIn as S, detectAuthCacheAdapter as Si, CLI_INVOCATION_KINDS as Sn, toPermissionId as Sr, SEND_BATCH_SIGNATURE as St, TelemetryPortTag as T, BrowserAuthCacheAdapter as Ti, CAPXUL_OPERATIONS as Tn, currencySymbolFor as Tr, CONFIGURED_MONEY_ASSETS as Tt, waitForPaymentSubmission as U, AuthCachePortTag as Ui, setups as Un, runCapxulEffect as Ur, observeSdkClient as Ut, makeOfframpMethods as V, readField as Vi, members as Vn, sessionFromActor as Vr, postHogFailureObservation as Vt, makeDestinationsMethods as W, treasuries as Wn, withVerifiedOrganizationScope as Wr, observationContextProps as Wt, assetAmountFromRaw as X, decodeChainCause as Xn, CAPXUL_ERROR_CODES as Xr, projectSdkException as Xt, subscribeFreshQuery as Y, CHAIN_UPSTREAMS as Yn, formatTraceparent as Yr, normalizeExceptionOperation as Yt, assetSymbolFor as Z, toOrgId as Zn, EXPECTED_OPERATION_OUTCOMES as Zr, safeExceptionLabel as Zt, accountFromAccountPositions as _, toAppId as _i, validateHandle as _n, PAYMENT_STATUSES as _r, ROLES_SET_ALLOWANCE_ABI as _t, paymentPhase as a, readClockNow as ai, openfortSignerNotReadyCode as an, roleKeyForPermission as ar, fingerprintPaymentIntent as at, MONEY_READ_RATES as b, AuthClientError as bi, CLI_CAPABILITIES as bn, toBudgetId as br, ROLE_MANAGEMENT_SIGNATURES as bt, makePaymentDocumentsMethods as c, observationRequestHeaders as ci, resolveFailureMode as cn, images as cr, resolveOrgPermissionIdentity as ct, SmartAccountPortTag as d, readInvocationObservation as di, toCountryCode as dn, isBytes32 as dr, MULTI_SEND_SELECTOR as dt, withInvocationParentSpan as ei, UNOBSERVABLE_SIGNER_STATUS as en, decodePermissionIntent as er, requireAsset as et, smartAccountErrorFromCapxul as f, sanitizeObservationContext as fi, toKycTier as fn, toExactHex as fr, OPERATOR as ft, ConvexAccountLayer as g, toAllowedOrigin as gi, toPartyId as gn, PAYMENT_DIRECTIONS as gr, ROLES_EXEC_TRANSACTION_WITH_ROLE_ABI as gt, makeAccountsMethods as h, isCredentialField as hi, toHandle as hn, toLowerHex as hr, ROLES_ASSIGN_ROLES_ABI as ht, inboxPhase as i, ClockPortTag as ii, isSignerNotReadySignal as in, ORG_BUDGET_ACTIONS as ir, canonicalJson as it, wireChainId as j, toAuthUserId as ji, authorities as jn, toAddress as jr, buildSafeMultiSendExecTransactionCall as jt, bindProductTelemetryInvocation as k, toEpochMs as ki, details as kn, EVM_ADDRESS_RE$1 as kr, safe4337ExecuteUserOpCallData as kt, makeSmartAccountMethods as l, attachInvocationObservation as li, makeCurrentUserMethods as ln, toAccountId as lr, CREATE_COMMITMENT_SIGNATURE as lt, PonderIndexerAdapter as m, redactUrlSecrets as mi, HANDLE_RE as mn, toLowerBytes32 as mr, PARAMETER_TYPE as mt, bootIdentityFlow as n, SystemClockLayer as ni, injectedWalletSigner as nn, CurrentPolicySchema as nr, isMoneyParseError as nt, requestPhase as o, BetterAuthNodeLayer as oi, recoverRawDigestSigner as on, diagnostics as or, moneySafeOpDigest as ot, makeHoldingsMethods as p, redactSecrets as pi, toTesterKind as pn, toLowerAddress as pr, OWNER_COMMITMENT_SIGNATURES as pt, isCheckoutSettlementConsumed as q, ORGANIZATION_SETUP_REASONS as qn, runIfActive as qr, SDK_VERSION as qt, makeMeMethods as r, ClockError as ri, isEcdsaSignatureHex as rn, MONTHLY_REFILL_PERIOD_SECONDS as rr, parseMoney as rt, makeActivityMethods as s, BetterAuthBrowserLayer as si, signerFailure as sn, AppIdSchema$1 as sr, ZODIAC_MODULE_PROXY_FACTORY as st, executeIdentityProductObservation as t, oauthBearerAuthClient as ti, causeChain as tn, keepRefillOnChange as tr, toRaw as tt, ConvexSmartAccountLayer as u, copyInvocationObservation as ui, makeClientRequestMethods as un, PaymentDocumentOptionsSchema as ur, MODULE_PROXY_FACTORY_ABI as ut, accountPositionsFromWire as v, toPublishableKey as vi, redactTelemetryEvent as vn, DurationMsSchema$1 as vr, ROLES_SET_TRANSACTION_UNWRAPPER_ABI as vt, accountReadErrorFromCapxul as w, InMemoryAuthCacheAdapter as wi, stampTelemetryEnvelope as wn, ChainIdSchema$1 as wr, CAPXUL_PAYMENTS_V2_ADDRESS as wt, valueActivitySummary as x, AuthClientPortTag as xi, CLI_COMMAND_NAMES as xn, toPermissionAssignmentId as xr, SAFE_ENABLE_MODULE_ABI as xt, positionPeg as y, authClientPortFromPromiseAdapter as yi, redactTelemetryProps as yn, EpochMsSchema$1 as yr, ROLES_SET_UP_ABI as yt, logDroppedEvent as z, isFailureMode as zi, FixedOfferDraftSchema as zn, runIdentityFacade as zr, failureEvidenceProps as zt };
+export { formatAssetAmount as $, InvitationViewSchema as $n, ActorFailure as $r, version as $t, registerProductTelemetryInvocation as A, toEpochMs as Ai, details as An, EVM_ADDRESS_RE$1 as Ar, safe4337ExecuteUserOpCallData as At, makeOrganizationPaymentsMethods as B, isFailureMode as Bi, FixedOfferDraftSchema as Bn, runIdentityFacade as Br, failureEvidenceProps as Bt, AccountReadPortTag as C, detectAuthCacheAdapter as Ci, CLI_INVOCATION_KINDS as Cn, toPermissionId as Cr, SEND_BATCH_SIGNATURE as Ct, convexCallErrorFromCapxul as D, parseAuthSession as Di, isCapxulOperation as Dn, toAssetId as Dr, TOKENS as Dt, ConvexCallPortTag as E, BrowserAuthCacheAdapter as Ei, CAPXUL_OPERATIONS as En, currencySymbolFor as Er, CONFIGURED_MONEY_ASSETS as Et, decodePayrollRunInput as F, toSessionToken as Fi, replacements as Fn, absurd as Fr, SAFE_SENTINEL_OWNERS as Ft, makeActorRelationshipMethods as G, treasuries as Gn, withVerifiedOrganizationScope as Gr, observationContextProps as Gt, makePaymentsMethods as H, readField as Hi, members as Hn, sessionFromActor as Hr, postHogFailureObservation as Ht, toPayrollGroupId as I, Errors as Ii, PreparedPermissionExecutionSchema as In, reference as Ir, callOperation as It, makeTargetsMethods as J, ORGANIZATION_SETUP_REASONS as Jn, runIfActive as Jr, SDK_VERSION as Jt, makeCheckoutMethods as K, workspaces as Kn, awaitCapxulResult as Kr, withCapturedAttemptContext as Kt, makeAccountMethods as L, CapxulError as Li, PermissionCommandViewSchema as Ln, makeAuthMethods as Lr, asCapxulError as Lt, makeApprovalsMethods as M, toAuthUserId as Mi, authorities as Mn, toAddress as Mr, buildSafeMultiSendExecTransactionCall as Mt, makePayrollMethods as N, toEmail as Ni, commands as Nn, toChainId as Nr, BASE_SEPOLIA_CHAIN_ID as Nt, retryIdempotentRead as O, parseCachedJwt as Oi, normalizeCapxulOperation as On, toCurrencyCode as Or, deriveCapxulSafeAddress as Ot, makeUnavailablePayrollMethods as P, toJwtToken as Pi, configurations as Pn, toWeiAmount as Pr, MULTI_SEND_CALL_ONLY as Pt, assetSymbolFor as Q, toOrgId as Qn, EXPECTED_OPERATION_OUTCOMES as Qr, safeExceptionLabel as Qt, emitDepositInitiated as R, isCapxulError as Ri, PayrollGroupIdSchema as Rn, askIdentity as Rr, toPublicError$1 as Rt, valueIn as S, AuthClientPortTag as Si, CLI_COMMAND_NAMES as Sn, toPermissionAssignmentId as Sr, SAFE_ENABLE_MODULE_ABI as St, TelemetryPortTag as T, InMemoryAuthCacheAdapter as Ti, stampTelemetryEnvelope as Tn, ChainIdSchema$1 as Tr, CAPXUL_PAYMENTS_V2_ADDRESS as Tt, waitForPaymentSubmission as U, AuthCacheError as Ui, roles as Un, observationOnlyControls as Ur, observeFailedResult as Ut, makeOfframpMethods as V, isRecord as Vi, invitations as Vn, runPortEffect as Vr, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT as Vt, makeDestinationsMethods as W, AuthCachePortTag as Wi, setups as Wn, runCapxulEffect as Wr, observeSdkClient as Wt, abandonPrepared as X, CHAIN_UPSTREAMS as Xn, formatTraceparent as Xr, normalizeExceptionOperation as Xt, subscribeFreshQuery as Y, ORGANIZATION_SETUP_STATUSES as Yn, toCapxulResult as Yr, normalizeExceptionErrorKind as Yt, assetAmountFromRaw as Z, decodeChainCause as Zn, CAPXUL_ERROR_CODES as Zr, projectSdkException as Zt, accountFromAccountPositions as _, toAllowedOrigin as _i, toPartyId as _n, PAYMENT_DIRECTIONS as _r, ROLES_EXEC_TRANSACTION_WITH_ROLE_ABI as _t, paymentPhase as a, ClockPortTag as ai, isSignerNotReadySignal as an, ORG_BUDGET_ACTIONS as ar, canonicalJson as at, MONEY_READ_RATES as b, authClientPortFromPromiseAdapter as bi, redactTelemetryProps as bn, EpochMsSchema$1 as br, ROLES_SET_UP_ABI as bt, makePaymentDocumentsMethods as c, BetterAuthBrowserLayer as ci, signerFailure as cn, AppIdSchema$1 as cr, ZODIAC_MODULE_PROXY_FACTORY as ct, SmartAccountPortTag as d, copyInvocationObservation as di, makeClientRequestMethods as dn, PaymentDocumentOptionsSchema as dr, MODULE_PROXY_FACTORY_ABI as dt, carryInvocationParentSpan as ei, isSettingUpLifecycle as en, hashPermissionReplacementPreview as er, parseAssetAmount as et, smartAccountErrorFromCapxul as f, readInvocationObservation as fi, toCountryCode as fn, isBytes32 as fr, MULTI_SEND_SELECTOR as ft, ConvexAccountLayer as g, isCredentialField as gi, toHandle as gn, toLowerHex as gr, ROLES_ASSIGN_ROLES_ABI as gt, makeAccountsMethods as h, redactUrlSecrets as hi, HANDLE_RE as hn, toLowerBytes32 as hr, PARAMETER_TYPE as ht, inboxPhase as i, ClockError as ii, isEcdsaSignatureHex as in, MONTHLY_REFILL_PERIOD_SECONDS as ir, parseMoney as it, wireChainId as j, toEpochSeconds as ji, onboardings as jn, isEvmAddress as jr, safe4337MultiSendUserOpCallData as jt, bindProductTelemetryInvocation as k, toDurationMs as ki, OPERATIONS as kn, toExactAssetAmount as kr, normalizeSafeSaltEmail as kt, makeSmartAccountMethods as l, observationRequestHeaders as li, resolveFailureMode as ln, images as lr, resolveOrgPermissionIdentity as lt, PonderIndexerAdapter as m, redactSecrets as mi, toTesterKind as mn, toLowerAddress as mr, OWNER_COMMITMENT_SIGNATURES as mt, bootIdentityFlow as n, oauthBearerAuthClient as ni, causeChain as nn, keepRefillOnChange as nr, toRaw as nt, requestPhase as o, readClockNow as oi, openfortSignerNotReadyCode as on, roleKeyForPermission as or, fingerprintPaymentIntent as ot, makeHoldingsMethods as p, sanitizeObservationContext as pi, toKycTier as pn, toExactHex as pr, OPERATOR as pt, isCheckoutSettlementConsumed as q, OrganizationSetupSchema as qn, defectAsCapxulError as qr, EXCEPTION_MESSAGE as qt, makeMeMethods as r, SystemClockLayer as ri, injectedWalletSigner as rn, CurrentPolicySchema as rr, isMoneyParseError as rt, makeActivityMethods as s, BetterAuthNodeLayer as si, recoverRawDigestSigner as sn, diagnostics as sr, moneySafeOpDigest as st, executeIdentityProductObservation as t, withInvocationParentSpan as ti, UNOBSERVABLE_SIGNER_STATUS as tn, decodePermissionIntent as tr, requireAsset as tt, ConvexSmartAccountLayer as u, attachInvocationObservation as ui, makeCurrentUserMethods as un, toAccountId as ur, CREATE_COMMITMENT_SIGNATURE as ut, accountPositionsFromWire as v, toAppId as vi, validateHandle as vn, PAYMENT_STATUSES as vr, ROLES_SET_ALLOWANCE_ABI as vt, accountReadErrorFromCapxul as w, globalLocalStorage as wi, EXCEPTION_EVENT_NAME as wn, toRoleKey as wr, SEND_SIGNATURE as wt, valueActivitySummary as x, AuthClientError as xi, CLI_CAPABILITIES as xn, toBudgetId as xr, ROLE_MANAGEMENT_SIGNATURES as xt, positionPeg as y, toPublishableKey as yi, redactTelemetryEvent as yn, DurationMsSchema$1 as yr, ROLES_SET_TRANSACTION_UNWRAPPER_ABI as yt, logDroppedEvent as z, FAILURE_MODES$1 as zi, PayrollGroupInputSchema as zn, publicIdentityFailure as zr, failureDetail as zt };