@capxul/sdk 4.20.0-beta.36 → 4.20.0-beta.37

package/dist/{index-9tVY0-g7.d.mts → index-DzfcTT6t.d.mts}

@@ -20,11 +20,13 @@ declare const EXPECTED_OPERATION_OUTCOMES: ReadonlySet<CapxulErrorCode>;
 //#endregion
 //#region ../protocol/src/errors/failure-modes.d.ts
 /**
- * Why an operation failed — the one flat vocabulary. The first four are the
- * auth/provider diagnoses that predate this file. The rest name the chain
- * path. `FailureMode` is derived from this list so a runtime membership check
- * (the SDK's `$exception` projection, the observability schema) and the type
- * can never drift apart.
+ * Why an operation failed — the one flat vocabulary. The first five are the
+ * auth and signer diagnoses that predate this file. The next eleven name the
+ * chain path. `refused` and `defect` name a provider refusal and a Capxul
+ * fault on any path (ADR-0039 D2). `FailureMode` is derived from this list so
+ * a runtime membership check (the SDK's `$exception` projection, the
+ * observability schema) and the type can never drift apart. Every word has a
+ * failure class in `classes.ts`.
  */
 declare const FAILURE_MODES: readonly [
 /** OTP cookies live on `localhost:PORT` but OpenFort hits the Convex host. */
@@ -41,7 +43,12 @@ declare const FAILURE_MODES: readonly [
 "rate-limited",
 /** No answer inside the budget. Retryable. */
 "timeout",
-/** HTTP 5xx, a connection failure, or a malformed envelope. Retryable. */
+/**
+ * HTTP 5xx, a connection failure, an answer cut off in transit, or a chain
+ * RPC answer of the wrong shape (the next upstream may answer it). Retryable.
+ * A complete HTTP provider answer Capxul cannot use is
+ * `PROVIDER_RESPONSE_INVALID`, with no mode.
+ */
 "upstream-down",
 /** Simulation or execution reverted; `chain.revert` names it when decodable. */
 "revert",
@@ -59,6 +66,10 @@ declare const FAILURE_MODES: readonly [
 "bad-request",
 /** The node does not serve the method (JSON-RPC -32601). The next upstream may. */
 "method-unsupported",
+/** The provider understood the request and refused it: an account, permission or policy refusal. */
+"refused",
+/** A Capxul bug or misconfiguration: Capxul's own code or settings failed. */
+"defect",
 /** No cause could be determined. */
 "unknown"];
 type FailureMode = (typeof FAILURE_MODES)[number];
@@ -212,6 +223,98 @@ type NetworkErrorOptions = {
   readonly ms_since_browser_event?: number;
 };
 //#endregion
+//#region ../protocol/src/errors/provider-evidence.d.ts
+/**
+ * The providers a failure can name: Capxul's integrations and the ports the
+ * SDK and the backend call. Closed, so `details.provider` is a known word and
+ * a projection with no free text can still send it (ADR-0039 D6).
+ */
+declare const PROVIDERS: readonly ["account-abstraction", "agent-exchange", "auth-cache", "auth-client", "better-auth", "bootstrap", "bridge", "browserBridge", "capxul-backend", "chain", "chain-evidence", "chain-rpc", "clock", "convex", "convex-storage", "credentials", "indexer", "invoice", "openfort", "openfort.shield", "ponder", "posthog", "resend", "sdk", "sdk-react", "signer", "verification"];
+type ProviderName = (typeof PROVIDERS)[number];
+/** What is wrong with the part of a provider's answer that `field` names (ADR-0039 D1). */
+declare const PROVIDER_PROBLEMS: readonly ["missing", "invalid", "conflict"];
+type ProviderProblem = (typeof PROVIDER_PROBLEMS)[number];
+/**
+ * The modes of a provider failure with no usable answer: none arrived, or
+ * Capxul diagnosed what in the caller's environment kept the provider from
+ * answering (the five auth and signer diagnoses). The mode is the evidence.
+ * Every other mode names a refusal, which needs the status that refused, so
+ * each mode belongs to exactly one provider factory.
+ */
+declare const PROVIDER_UNAVAILABLE_MODES: readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "defect", "unknown"];
+type ProviderUnavailableMode = (typeof PROVIDER_UNAVAILABLE_MODES)[number];
+/** The modes of a provider that understood the request and refused it. */
+type ProviderRefusalMode = Exclude<FailureMode, ProviderUnavailableMode>;
+/**
+ * What was caught, never a sentence about it: a string does not compile
+ * (ADR-0039 guard T1). A value typed `unknown` passes, because it is the
+ * caught value itself.
+ */
+type Caught<C> = C extends string ? never : C;
+/**
+ * The evidence a provider failure names (ADR-0039 D1). Each fact becomes the
+ * `details` key of the same name. `operation` is the provider's own operation,
+ * such as `virtualAccountHistory` or `eth_call`.
+ */
+interface ProviderEvidence {
+  readonly provider: ProviderName;
+  readonly operation: string;
+  readonly httpStatus?: number | undefined;
+  /** The provider's own error code, such as Bridge's `code`. */
+  readonly providerCode?: string | undefined;
+  /** The request or answer field the failure names. */
+  readonly field?: string | undefined;
+  /** The provider's id for this request, for its support. */
+  readonly requestId?: string | undefined;
+  /** More evidence for an operator. The wire masks every credential in it. */
+  readonly details?: Readonly<Record<string, unknown>> | undefined;
+}
+/**
+ * A refusal names what refused: the HTTP status, the chain cause that carries
+ * it, or, when the answer kept no status, the mode Capxul read from the
+ * provider's error class or code (Openfort's `AuthorizationError` has none).
+ */
+type RefusalEvidence = {
+  readonly httpStatus: number;
+  readonly chain?: ChainCause | undefined;
+} | {
+  readonly chain: ChainCause;
+  readonly httpStatus?: undefined;
+} | {
+  readonly mode: ProviderRefusalMode;
+  readonly httpStatus?: undefined;
+  readonly chain?: undefined;
+};
+/** `Errors.providerUnavailable`: no usable answer arrived. */
+type ProviderUnavailableInput<C> = ProviderEvidence & {
+  readonly mode: ProviderUnavailableMode;
+  readonly chain?: ChainCause | undefined;
+  readonly cause?: Caught<C>;
+};
+/** `Errors.providerRefused`: the provider understood the request and refused it. */
+type ProviderRefusalInput<C> = Omit<ProviderEvidence, "httpStatus"> & RefusalEvidence & {
+  readonly mode?: ProviderRefusalMode | undefined;
+  readonly cause?: Caught<C>;
+};
+/** `Errors.providerResponseInvalid`: the provider answered, and Capxul cannot use the answer. */
+type ProviderResponseInvalidInput<C> = ProviderEvidence & {
+  readonly field: string;
+  readonly problem: ProviderProblem;
+  readonly reason?: string | undefined;
+  readonly cause?: Caught<C>;
+};
+/**
+ * `Errors.providerRefusedInput`: the provider understood the request and
+ * refused the person's own input (ADR-0039 D2). `field` names that input in
+ * Capxul's words, and `reason` is the provider's own reason for it.
+ */
+type ProviderInputRefusalInput<C> = Omit<ProviderEvidence, "httpStatus" | "field"> & {
+  readonly httpStatus: number;
+  readonly field: string;
+  readonly reason: string;
+  readonly cause?: Caught<C>;
+};
+//#endregion
 //#region ../protocol/src/errors/factories.d.ts
 declare const Errors: {
   readonly notAuthenticated: (message?: string, opts?: {
@@ -239,33 +342,48 @@ declare const Errors: {
     readonly expectedOwner: string;
     readonly signerAddress: string;
   }) => CapxulError<"ACCOUNT_CLAIMED_BY_OTHER_SIGNER">;
-  readonly providerError: (provider: string, operation: string, cause: unknown, opts?: {
-    readonly failure_mode?: FailureMode;
-    readonly httpStatus?: number;
-    /** Extra evidence for the operator (response body, edge error code). */
-    readonly details?: Readonly<Record<string, unknown>>;
-    /** The structured chain-path cause; sets `mode` and `details.failure_mode` too. */
-    readonly chain?: ChainCause;
-  }) => CapxulError<"PROVIDER_ERROR">;
   /**
-   * The provider answered, but its answer cannot be used: `field` names the
-   * part that is missing or malformed and `reason` says what is wrong with it.
-   * Distinct from `PROVIDER_ERROR`, where the call itself failed or was refused.
+   * No usable answer came from the provider. `mode` says why: `timeout`,
+   * `upstream-down` or `rate-limited` when the provider is at fault (retry
+   * later); `signer-not-ready` or `no-secure-context` when the local signer
+   * cannot answer; `defect` when Capxul's own side failed before an answer
+   * could be used; `unknown` when nothing says. A chain cause, when given,
+   * names the same mode with its upstream evidence.
+   */
+  readonly providerUnavailable: <C = never>(input: ProviderUnavailableInput<C>) => CapxulError<"PROVIDER_ERROR">;
+  /**
+   * The provider understood the request and refused it. The HTTP status is
+   * required, or the chain cause that carries the refusal. `mode` says how,
+   * and is `refused` unless the answer says more (`unauthorized`,
+   * `forbidden`, `bad-request`, `revert`, ...).
+   */
+  readonly providerRefused: <C = never>(input: ProviderRefusalInput<C>) => CapxulError<"PROVIDER_ERROR">;
+  /**
+   * The provider answered, but Capxul cannot use its answer: `field` names
+   * the part, and `problem` says what is wrong with it (`missing`, `invalid`
+   * or `conflict`). `reason` adds the specific words. Distinct from
+   * `PROVIDER_ERROR`, where no usable answer arrived or the provider refused.
+   */
+  readonly providerResponseInvalid: <C = never>(input: ProviderResponseInvalidInput<C>) => CapxulError<"PROVIDER_RESPONSE_INVALID">;
+  /**
+   * The provider understood the request and refused the person's own input,
+   * such as an amount below its minimum: `INVALID_INPUT`, so the caller acts
+   * (ADR-0039 D2). `field` names the input as Capxul's caller knows it, and
+   * `reason` is the provider's reason, which the person reads. The status that
+   * refused is required. The field never sits before the colon, as in
+   * `invalidInput` (CAP-441).
    */
-  readonly providerResponseInvalid: (provider: string, operation: string, field: string, reason: string) => CapxulError<"PROVIDER_RESPONSE_INVALID">;
+  readonly providerRefusedInput: <C = never>(input: ProviderInputRefusalInput<C>) => CapxulError<"INVALID_INPUT">;
   readonly capabilityUnavailable: (provider: string, operation: string) => CapxulError<"CAPABILITY_UNAVAILABLE">;
-  readonly invalidInput: (field: string, reason: string) => CapxulError<"INVALID_INPUT">;
-  readonly envMissing: (name: string) => CapxulError<"ENV_MISSING">;
-  readonly notImplemented: (domain: string, method: string) => CapxulError<"NOT_IMPLEMENTED">;
   /**
-   * Sibling factory to {@link Errors.providerError} for the per-state timeout
-   * path in flows. Same `PROVIDER_ERROR` code as
-   * `providerError`, plus a `details.reason: "timeout"` discriminator so
-   * downstream observers can distinguish failure modes without parsing the
-   * message string. The redacted message names the timeout budget; the
-   * native `cause` carries the same information for `reportError` fidelity.
+   * The caller's input is wrong: `field` names it. `cause` is what refused it, such as a decode failure.
+   * The field never sits before the colon: the prose mask reads `signature:` as a credential label
+   * and would cut the next word on every surface that masks the text again (CAP-441).
    */
-  readonly providerTimeout: (provider: string, operation: string, timeoutMs: number) => CapxulError<"PROVIDER_ERROR">;
+  readonly invalidInput: <C = never>(field: string, reason: string, cause?: Caught<C>) => CapxulError<"INVALID_INPUT">;
+  /** `cause` is what refused the value, when it is set but unusable. */
+  readonly envMissing: <C = never>(name: string, cause?: Caught<C>) => CapxulError<"ENV_MISSING">;
+  readonly notImplemented: (domain: string, method: string) => CapxulError<"NOT_IMPLEMENTED">;
   readonly verificationRequired: (details: VerificationRequiredDetails) => CapxulError<"VERIFICATION_REQUIRED">;
   readonly insufficientBalance: (asset: string, available: string, required: string) => CapxulError<"INSUFFICIENT_BALANCE">;
   readonly invalidRecipient: (reason: string) => CapxulError<"INVALID_RECIPIENT">;
@@ -295,33 +413,34 @@ declare const Errors: {
    * Roles condition violation) from an inconclusive infra failure. A confirmed
    * revert is the ONLY mode the org spend port may map to a roles denial.
    */
-  readonly transactionFailed: (operation: string, cause?: unknown, extra?: {
+  readonly transactionFailed: <C = never>(operation: string, cause?: Caught<C>, extra?: {
     readonly reason?: string;
+    readonly userOpHash?: string;
   }) => CapxulError<"TRANSACTION_FAILED">;
   readonly rateLimited: (details?: {
     readonly retryAfterMs?: number;
     readonly resource?: string;
   }) => CapxulError<"RATE_LIMITED">;
-  readonly networkError: (operation: string, cause?: unknown, opts?: NetworkErrorOptions) => CapxulError<"NETWORK_ERROR">;
-  readonly unknown: (cause?: unknown) => CapxulError<"UNKNOWN">;
+  readonly networkError: <C = never>(operation: string, cause?: Caught<C>, opts?: NetworkErrorOptions) => CapxulError<"NETWORK_ERROR">;
+  readonly unknown: <C = never>(cause?: Caught<C>) => CapxulError<"UNKNOWN">;
   readonly otpExpired: (details?: {
     readonly email?: string;
     readonly expiredAt?: number;
   }) => CapxulError<"OTP_EXPIRED">;
-  readonly signerRejected: (details: {
+  readonly signerRejected: <C = never>(details: {
     readonly source: SignerSource;
     readonly reason?: string;
-    readonly cause?: unknown;
+    readonly cause?: Caught<C>;
   }) => CapxulError<"SIGNER_REJECTED">;
   readonly superseded: (details: {
     readonly operation: string;
     readonly reason: string;
     readonly executionId?: string;
   }) => CapxulError<"SUPERSEDED">;
-  readonly cancelled: (details?: {
+  readonly cancelled: <C = never>(details?: {
     readonly operation?: string;
     readonly reason?: string;
-  }) => CapxulError<"CANCELLED">;
+  }, cause?: Caught<C>) => CapxulError<"CANCELLED">;
   /**
    * Method called from a flow state where its precondition fails (TA16). The
    * SDK's method API short-circuits with this error before driving the
@@ -338,6 +457,37 @@ declare const Errors: {
   }) => CapxulError<"WRONG_STATE">;
 };
 //#endregion
+//#region ../protocol/src/errors/classes.d.ts
+/**
+ * Who acts on a failure (ADR-0039 D2). A class is derived from code and mode
+ * by the two tables below and is never stored, so it cannot disagree with
+ * them. No layer rewrites it (ADR-0023 R10).
+ */
+declare const FAILURE_CLASSES: readonly [
+/** The caller's request or environment is wrong. The caller (the person or the calling app) acts. */
+"input",
+/** The request is valid; the current state refuses it. The person or another party acts after a re-read, or waits. */
+"state",
+/** No usable answer arrived (timeout, 5xx, rate limit). Nobody acts now: retry later. Operations act if it persists. */
+"provider-unavailable",
+/** The provider understood the request and refused it. Capxul operations act: account, permission or policy. */
+"provider-refused",
+/** The provider answered; Capxul could not use it. Capxul engineering acts: the parser or a provider change. */
+"provider-answer",
+/** A Capxul bug or misconfiguration, or no known cause. Capxul engineering acts. */
+"defect"];
+type FailureClass = (typeof FAILURE_CLASSES)[number];
+/**
+ * Who acts on this failure. A fixed class wins over the mode; a catch-all
+ * code takes the class of its mode, and a catch-all with no mode is a defect,
+ * because nothing classified it. Total on any value: a code or mode outside
+ * the vocabulary (a hand-built object, a newer peer) is a defect too.
+ */
+declare function failureClass(failure: {
+  readonly code: CapxulErrorCode;
+  readonly mode?: FailureMode | undefined;
+}): FailureClass;
+//#endregion
 //#region ../protocol/src/errors/schema.d.ts
 declare const SerializedCapxulErrorSchema: Schema.Struct<{
   readonly code: Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "PROVIDER_RESPONSE_INVALID", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>;
@@ -345,9 +495,9 @@ declare const SerializedCapxulErrorSchema: Schema.Struct<{
   readonly details: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>;
   readonly correlationId: Schema.optionalKey<Schema.String>;
   readonly layer: Schema.optionalKey<Schema.String>;
-  readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>>;
+  readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>>;
   readonly chain: Schema.optionalKey<Schema.Struct<{
-    readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+    readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
     readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
     readonly method: Schema.String;
     readonly retryable: Schema.Boolean;
@@ -361,7 +511,7 @@ declare const SerializedCapxulErrorSchema: Schema.Struct<{
     readonly providerMessage: Schema.optionalKey<Schema.String>;
     readonly attempts: Schema.optionalKey<Schema.$Array<Schema.Struct<{
       readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
-      readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+      readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
       readonly httpStatus: Schema.optionalKey<Schema.Finite>;
       readonly rpcCode: Schema.optionalKey<Schema.Finite>;
       readonly durationMs: Schema.Finite;
@@ -586,7 +736,15 @@ type OperationError<O extends Operation> = O["errors"][number];
  * through the SDK can return any of them.
  */
 declare const CALLER_SIDE: readonly ["NETWORK_ERROR", "CANCELLED", "UNKNOWN", "NOT_IMPLEMENTED", "CAPABILITY_UNAVAILABLE"];
-type CallerSideCode = (typeof CALLER_SIDE)[number];
+/**
+ * Why a call ran signed out when the auth provider gave no token for the
+ * session (CAP-404): `PROVIDER_ERROR` or `PROVIDER_RESPONSE_INVALID`, naming
+ * the provider and its operation, or `RATE_LIMITED`. A call through the SDK can
+ * return any of them. The backend's own failure with one of these codes still
+ * needs its row to declare it.
+ */
+declare const TOKEN_FAILURES: readonly ["PROVIDER_ERROR", "PROVIDER_RESPONSE_INVALID", "RATE_LIMITED"];
+type CallerSideCode = (typeof CALLER_SIDE)[number] | (typeof TOKEN_FAILURES)[number];
 /** Every code a caller of this operation can receive: the row's, plus the caller side's. */
 type CallError<O extends Operation> = OperationError<O> | CallerSideCode;
 type Spec<Input extends WireInput, Output extends WireSchema, Code extends CapxulErrorCode> = {
@@ -786,6 +944,11 @@ interface SdkFailureDetail {
   readonly navigator_online?: boolean;
   readonly last_browser_event?: string;
   readonly ms_since_browser_event?: number;
+  /**
+   * CAP-387: how long a redacted backend refusal ran, in whole milliseconds,
+   * as the SDK measured it. Evidence only: it never sets the code or the mode.
+   */
+  readonly elapsed_ms?: number;
   /** ADR-0023 R7: the chain cause, flat, same keys as every other producer. */
   readonly chain_upstream?: string;
   readonly chain_method?: string;
@@ -923,6 +1086,12 @@ declare class ConvexCallError extends ConvexCallError_base<{
   readonly cause: unknown;
   readonly details?: CapxulErrorDetails;
   readonly transport?: ConvexTransportFailure;
+  /**
+   * The call ran signed out because the auth provider failed to give the
+   * session's token, and `publicError` is that failure, not the backend's
+   * refusal (CAP-404).
+   */
+  readonly tokenFailure?: true;
 }> {}
 interface ConvexCallPort {
   query<TArgs extends Record<string, unknown>, TOutput>(fn: FunctionReference<"query", "public", TArgs, TOutput>, args: TArgs, options?: {
@@ -1572,7 +1741,7 @@ declare const claims: {
     readonly deployedAt: Schema.NullOr<Schema.Finite>;
     readonly claimedAt: Schema.NullOr<Schema.Finite>;
     readonly createdAt: Schema.Finite;
-  }>, "ACCOUNT_CLAIMED_BY_OTHER_SIGNER" | "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROFILE_NOT_FOUND" | "PROVIDER_ERROR" | "UNKNOWN" | "WRONG_STATE">;
+  }>, "ACCOUNT_CLAIMED_BY_OTHER_SIGNER" | "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROFILE_NOT_FOUND" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "UNKNOWN" | "WRONG_STATE">;
 };
 declare const balances: {
   /** Every settlement asset's raw balance in the caller's personal Safe on this chain. */
@@ -1599,7 +1768,7 @@ declare const grants: {
     readonly rawAmount: Schema.String;
   }>, Schema.Struct<{
     readonly txHash: Schema.String;
-  }>, "ACCOUNT_NOT_FOUND" | "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "SMART_ACCOUNT_MISSING" | "TRANSACTION_FAILED" | "UNKNOWN" | "WRONG_STATE">;
+  }>, "ACCOUNT_NOT_FOUND" | "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "SMART_ACCOUNT_MISSING" | "TRANSACTION_FAILED" | "UNKNOWN" | "WRONG_STATE">;
 };
 /**
  * A prepared money action waits here for the person to sign it with their own
@@ -1643,7 +1812,7 @@ declare const approvals: {
         readonly explorerUrl: Schema.String;
       }>;
       readonly warnings: Schema.optional<Schema.$Array<Schema.Struct<{
-        readonly code: Schema.Literal<"RECIPIENT_ON_CAPXUL">;
+        readonly code: Schema.String;
         readonly message: Schema.String;
       }>>>;
     }>;
@@ -1718,7 +1887,7 @@ declare const approvals: {
         readonly explorerUrl: Schema.String;
       }>;
       readonly warnings: Schema.optional<Schema.$Array<Schema.Struct<{
-        readonly code: Schema.Literal<"RECIPIENT_ON_CAPXUL">;
+        readonly code: Schema.String;
         readonly message: Schema.String;
       }>>>;
     }>;
@@ -1794,7 +1963,7 @@ declare const approvals: {
           readonly explorerUrl: Schema.String;
         }>;
         readonly warnings: Schema.optional<Schema.$Array<Schema.Struct<{
-          readonly code: Schema.Literal<"RECIPIENT_ON_CAPXUL">;
+          readonly code: Schema.String;
           readonly message: Schema.String;
         }>>>;
       }>;
@@ -1871,7 +2040,7 @@ declare const approvals: {
         readonly explorerUrl: Schema.String;
       }>;
       readonly warnings: Schema.optional<Schema.$Array<Schema.Struct<{
-        readonly code: Schema.Literal<"RECIPIENT_ON_CAPXUL">;
+        readonly code: Schema.String;
         readonly message: Schema.String;
       }>>>;
     }>;
@@ -1950,7 +2119,7 @@ declare const approvals: {
         readonly explorerUrl: Schema.String;
       }>;
       readonly warnings: Schema.optional<Schema.$Array<Schema.Struct<{
-        readonly code: Schema.Literal<"RECIPIENT_ON_CAPXUL">;
+        readonly code: Schema.String;
         readonly message: Schema.String;
       }>>>;
     }>;
@@ -2025,7 +2194,7 @@ declare const approvals: {
         readonly explorerUrl: Schema.String;
       }>;
       readonly warnings: Schema.optional<Schema.$Array<Schema.Struct<{
-        readonly code: Schema.Literal<"RECIPIENT_ON_CAPXUL">;
+        readonly code: Schema.String;
         readonly message: Schema.String;
       }>>>;
     }>;
@@ -2101,7 +2270,7 @@ declare const approvals: {
           readonly explorerUrl: Schema.String;
         }>;
         readonly warnings: Schema.optional<Schema.$Array<Schema.Struct<{
-          readonly code: Schema.Literal<"RECIPIENT_ON_CAPXUL">;
+          readonly code: Schema.String;
           readonly message: Schema.String;
         }>>>;
       }>;
@@ -3976,9 +4145,9 @@ declare const workspaces: {
             readonly details: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>;
             readonly correlationId: Schema.optionalKey<Schema.String>;
             readonly layer: Schema.optionalKey<Schema.String>;
-            readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>>;
+            readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>>;
             readonly chain: Schema.optionalKey<Schema.Struct<{
-              readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+              readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
               readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
               readonly method: Schema.String;
               readonly retryable: Schema.Boolean;
@@ -3992,7 +4161,7 @@ declare const workspaces: {
               readonly providerMessage: Schema.optionalKey<Schema.String>;
               readonly attempts: Schema.optionalKey<Schema.$Array<Schema.Struct<{
                 readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
-                readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+                readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
                 readonly httpStatus: Schema.optionalKey<Schema.Finite>;
                 readonly rpcCode: Schema.optionalKey<Schema.Finite>;
                 readonly durationMs: Schema.Finite;
@@ -4013,9 +4182,9 @@ declare const workspaces: {
             readonly details: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>;
             readonly correlationId: Schema.optionalKey<Schema.String>;
             readonly layer: Schema.optionalKey<Schema.String>;
-            readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>>;
+            readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>>;
             readonly chain: Schema.optionalKey<Schema.Struct<{
-              readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+              readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
               readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
               readonly method: Schema.String;
               readonly retryable: Schema.Boolean;
@@ -4029,7 +4198,7 @@ declare const workspaces: {
               readonly providerMessage: Schema.optionalKey<Schema.String>;
               readonly attempts: Schema.optionalKey<Schema.$Array<Schema.Struct<{
                 readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
-                readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+                readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
                 readonly httpStatus: Schema.optionalKey<Schema.Finite>;
                 readonly rpcCode: Schema.optionalKey<Schema.Finite>;
                 readonly durationMs: Schema.Finite;
@@ -4268,9 +4437,9 @@ declare const setups: {
           readonly details: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>;
           readonly correlationId: Schema.optionalKey<Schema.String>;
           readonly layer: Schema.optionalKey<Schema.String>;
-          readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>>;
+          readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>>;
           readonly chain: Schema.optionalKey<Schema.Struct<{
-            readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+            readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
             readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
             readonly method: Schema.String;
             readonly retryable: Schema.Boolean;
@@ -4284,7 +4453,7 @@ declare const setups: {
             readonly providerMessage: Schema.optionalKey<Schema.String>;
             readonly attempts: Schema.optionalKey<Schema.$Array<Schema.Struct<{
               readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
-              readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+              readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
               readonly httpStatus: Schema.optionalKey<Schema.Finite>;
               readonly rpcCode: Schema.optionalKey<Schema.Finite>;
               readonly durationMs: Schema.Finite;
@@ -4305,9 +4474,9 @@ declare const setups: {
           readonly details: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>;
           readonly correlationId: Schema.optionalKey<Schema.String>;
           readonly layer: Schema.optionalKey<Schema.String>;
-          readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>>;
+          readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>>;
           readonly chain: Schema.optionalKey<Schema.Struct<{
-            readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+            readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
             readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
             readonly method: Schema.String;
             readonly retryable: Schema.Boolean;
@@ -4321,7 +4490,7 @@ declare const setups: {
             readonly providerMessage: Schema.optionalKey<Schema.String>;
             readonly attempts: Schema.optionalKey<Schema.$Array<Schema.Struct<{
               readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
-              readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+              readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
               readonly httpStatus: Schema.optionalKey<Schema.Finite>;
               readonly rpcCode: Schema.optionalKey<Schema.Finite>;
               readonly durationMs: Schema.Finite;
@@ -4355,9 +4524,9 @@ declare const setups: {
         readonly details: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>;
         readonly correlationId: Schema.optionalKey<Schema.String>;
         readonly layer: Schema.optionalKey<Schema.String>;
-        readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>>;
+        readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>>;
         readonly chain: Schema.optionalKey<Schema.Struct<{
-          readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+          readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
           readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
           readonly method: Schema.String;
           readonly retryable: Schema.Boolean;
@@ -4371,7 +4540,7 @@ declare const setups: {
           readonly providerMessage: Schema.optionalKey<Schema.String>;
           readonly attempts: Schema.optionalKey<Schema.$Array<Schema.Struct<{
             readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
-            readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+            readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
             readonly httpStatus: Schema.optionalKey<Schema.Finite>;
             readonly rpcCode: Schema.optionalKey<Schema.Finite>;
             readonly durationMs: Schema.Finite;
@@ -4392,9 +4561,9 @@ declare const setups: {
         readonly details: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>;
         readonly correlationId: Schema.optionalKey<Schema.String>;
         readonly layer: Schema.optionalKey<Schema.String>;
-        readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>>;
+        readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>>;
         readonly chain: Schema.optionalKey<Schema.Struct<{
-          readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+          readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
           readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
           readonly method: Schema.String;
           readonly retryable: Schema.Boolean;
@@ -4408,7 +4577,7 @@ declare const setups: {
           readonly providerMessage: Schema.optionalKey<Schema.String>;
           readonly attempts: Schema.optionalKey<Schema.$Array<Schema.Struct<{
             readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
-            readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+            readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
             readonly httpStatus: Schema.optionalKey<Schema.Finite>;
             readonly rpcCode: Schema.optionalKey<Schema.Finite>;
             readonly durationMs: Schema.Finite;
@@ -4469,9 +4638,9 @@ declare const setups: {
           readonly details: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>;
           readonly correlationId: Schema.optionalKey<Schema.String>;
           readonly layer: Schema.optionalKey<Schema.String>;
-          readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>>;
+          readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>>;
           readonly chain: Schema.optionalKey<Schema.Struct<{
-            readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+            readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
             readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
             readonly method: Schema.String;
             readonly retryable: Schema.Boolean;
@@ -4485,7 +4654,7 @@ declare const setups: {
             readonly providerMessage: Schema.optionalKey<Schema.String>;
             readonly attempts: Schema.optionalKey<Schema.$Array<Schema.Struct<{
               readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
-              readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+              readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
               readonly httpStatus: Schema.optionalKey<Schema.Finite>;
               readonly rpcCode: Schema.optionalKey<Schema.Finite>;
               readonly durationMs: Schema.Finite;
@@ -4506,9 +4675,9 @@ declare const setups: {
           readonly details: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>;
           readonly correlationId: Schema.optionalKey<Schema.String>;
           readonly layer: Schema.optionalKey<Schema.String>;
-          readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>>;
+          readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>>;
           readonly chain: Schema.optionalKey<Schema.Struct<{
-            readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+            readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
             readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
             readonly method: Schema.String;
             readonly retryable: Schema.Boolean;
@@ -4522,7 +4691,7 @@ declare const setups: {
             readonly providerMessage: Schema.optionalKey<Schema.String>;
             readonly attempts: Schema.optionalKey<Schema.$Array<Schema.Struct<{
               readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
-              readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+              readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
               readonly httpStatus: Schema.optionalKey<Schema.Finite>;
               readonly rpcCode: Schema.optionalKey<Schema.Finite>;
               readonly durationMs: Schema.Finite;
@@ -4557,9 +4726,9 @@ declare const setups: {
         readonly details: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>;
         readonly correlationId: Schema.optionalKey<Schema.String>;
         readonly layer: Schema.optionalKey<Schema.String>;
-        readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>>;
+        readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>>;
         readonly chain: Schema.optionalKey<Schema.Struct<{
-          readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+          readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
           readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
           readonly method: Schema.String;
           readonly retryable: Schema.Boolean;
@@ -4573,7 +4742,7 @@ declare const setups: {
           readonly providerMessage: Schema.optionalKey<Schema.String>;
           readonly attempts: Schema.optionalKey<Schema.$Array<Schema.Struct<{
             readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
-            readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+            readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
             readonly httpStatus: Schema.optionalKey<Schema.Finite>;
             readonly rpcCode: Schema.optionalKey<Schema.Finite>;
             readonly durationMs: Schema.Finite;
@@ -4594,9 +4763,9 @@ declare const setups: {
         readonly details: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>;
         readonly correlationId: Schema.optionalKey<Schema.String>;
         readonly layer: Schema.optionalKey<Schema.String>;
-        readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>>;
+        readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>>;
         readonly chain: Schema.optionalKey<Schema.Struct<{
-          readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+          readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
           readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
           readonly method: Schema.String;
           readonly retryable: Schema.Boolean;
@@ -4610,7 +4779,7 @@ declare const setups: {
           readonly providerMessage: Schema.optionalKey<Schema.String>;
           readonly attempts: Schema.optionalKey<Schema.$Array<Schema.Struct<{
             readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
-            readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+            readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
             readonly httpStatus: Schema.optionalKey<Schema.Finite>;
             readonly rpcCode: Schema.optionalKey<Schema.Finite>;
             readonly durationMs: Schema.Finite;
@@ -4654,7 +4823,7 @@ declare const setups: {
       readonly paymasterPostOpGasLimit: Schema.optional<Schema.Codec<`0x${string}`, string, never, never>>;
       readonly paymasterData: Schema.Codec<`0x${string}`, string, never, never>;
     }>;
-  }>, "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "UNKNOWN" | "WRONG_STATE">;
+  }>, "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "UNKNOWN" | "WRONG_STATE">;
   /** Accept the signed bootstrap's hash, then send it from the one elected sender. */
   submitAuthorization: Operation<"action", "organizations.setups.submitAuthorization", Schema.Struct<{
     readonly orgId: Schema.NonEmptyString;
@@ -4690,9 +4859,9 @@ declare const setups: {
         readonly details: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>;
         readonly correlationId: Schema.optionalKey<Schema.String>;
         readonly layer: Schema.optionalKey<Schema.String>;
-        readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>>;
+        readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>>;
         readonly chain: Schema.optionalKey<Schema.Struct<{
-          readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+          readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
           readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
           readonly method: Schema.String;
           readonly retryable: Schema.Boolean;
@@ -4706,7 +4875,7 @@ declare const setups: {
           readonly providerMessage: Schema.optionalKey<Schema.String>;
           readonly attempts: Schema.optionalKey<Schema.$Array<Schema.Struct<{
             readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
-            readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+            readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
             readonly httpStatus: Schema.optionalKey<Schema.Finite>;
             readonly rpcCode: Schema.optionalKey<Schema.Finite>;
             readonly durationMs: Schema.Finite;
@@ -4727,9 +4896,9 @@ declare const setups: {
         readonly details: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>;
         readonly correlationId: Schema.optionalKey<Schema.String>;
         readonly layer: Schema.optionalKey<Schema.String>;
-        readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>>;
+        readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>>;
         readonly chain: Schema.optionalKey<Schema.Struct<{
-          readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+          readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
           readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
           readonly method: Schema.String;
           readonly retryable: Schema.Boolean;
@@ -4743,7 +4912,7 @@ declare const setups: {
           readonly providerMessage: Schema.optionalKey<Schema.String>;
           readonly attempts: Schema.optionalKey<Schema.$Array<Schema.Struct<{
             readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
-            readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+            readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
             readonly httpStatus: Schema.optionalKey<Schema.Finite>;
             readonly rpcCode: Schema.optionalKey<Schema.Finite>;
             readonly durationMs: Schema.Finite;
@@ -5041,7 +5210,7 @@ declare const verifications$1: {
       readonly argv: Schema.$Array<Schema.String>;
     }>;
     readonly status: Schema.Literals<readonly ["in_review", "approved", "rejected", "restricted"]>;
-  }>]>, "ENV_MISSING" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
+  }>]>, "ENV_MISSING" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
   start: Operation<"action", "parties.verifications.start", Schema.Struct<{
     readonly orgId: Schema.optionalKey<Schema.String>;
     readonly invitationId: Schema.optionalKey<Schema.String>;
@@ -5167,7 +5336,7 @@ declare const verifications$1: {
       readonly argv: Schema.$Array<Schema.String>;
     }>;
     readonly status: Schema.Literals<readonly ["in_review", "approved", "rejected", "restricted"]>;
-  }>]>, "ENV_MISSING" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
+  }>]>, "ENV_MISSING" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
   status: Operation<"action", "parties.verifications.status", Schema.Struct<{
     orgId: Schema.optionalKey<Schema.String>;
     invitationId: Schema.optionalKey<Schema.String>;
@@ -5292,7 +5461,7 @@ declare const verifications$1: {
       readonly argv: Schema.$Array<Schema.String>;
     }>;
     readonly status: Schema.Literals<readonly ["in_review", "approved", "rejected", "restricted"]>;
-  }>]>, "ENV_MISSING" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
+  }>]>, "ENV_MISSING" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
   answer: Operation<"action", "parties.verifications.answer", Schema.Struct<{
     readonly orgId: Schema.optionalKey<Schema.String>;
     readonly invitationId: Schema.optionalKey<Schema.String>;
@@ -5419,7 +5588,7 @@ declare const verifications$1: {
       readonly argv: Schema.$Array<Schema.String>;
     }>;
     readonly status: Schema.Literals<readonly ["in_review", "approved", "rejected", "restricted"]>;
-  }>]>, "ENV_MISSING" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
+  }>]>, "ENV_MISSING" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
 };
 declare const contacts: {
   /** The actor's address book, most recent activity first. Hidden entries only when asked. */
@@ -5892,10 +6061,10 @@ declare const quotes: {
     }>;
     readonly rate: import("effect/Schema").optionalKey<import("effect/Schema").String>;
     readonly warnings: import("effect/Schema").$Array<import("effect/Schema").Struct<{
-      readonly code: import("effect/Schema").Literal<"RECIPIENT_ON_CAPXUL">;
+      readonly code: import("effect/Schema").String;
       readonly message: import("effect/Schema").String;
     }>>;
-  }>, "ACCOUNT_NOT_FOUND" | "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "SMART_ACCOUNT_MISSING" | "UNKNOWN" | "VERIFICATION_REQUIRED" | "WRONG_STATE">;
+  }>, "ACCOUNT_NOT_FOUND" | "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "SMART_ACCOUNT_MISSING" | "UNKNOWN" | "VERIFICATION_REQUIRED" | "WRONG_STATE">;
 };
 //#endregion
 //#region ../protocol/src/payments/operations.d.ts
@@ -6839,7 +7008,7 @@ declare const commands$1: {
         readonly updatedAt: Schema.Codec<EpochMs, number, never, never>;
       }>;
     }>>;
-  }>, "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
+  }>, "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
   /** A batch of Payments from an Organization Budget the caller may spend from. */
   prepareOrganization: Operation<"action", "payments.commands.prepareOrganization", Schema.Struct<{
     readonly orgId: Schema.refine<string, Schema.String>;
@@ -8654,7 +8823,7 @@ declare const commands$1: {
         readonly updatedAt: Schema.Codec<EpochMs, number, never, never>;
       }>>;
     }>>;
-  }>, "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
+  }>, "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
   /** The Payment a payer confirmed for a request, exactly as the request froze it. */
   prepareRequest: Operation<"action", "payments.commands.prepareRequest", Schema.Struct<{
     readonly confirmation: Schema.Union<readonly [Schema.Struct<{
@@ -10447,7 +10616,7 @@ declare const commands$1: {
         readonly updatedAt: Schema.Codec<EpochMs, number, never, never>;
       }>>;
     }>>;
-  }>, "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
+  }>, "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
   /** A registered payer's Payment for an Offer checkout. */
   prepareOfferCheckout: Operation<"action", "payments.commands.prepareOfferCheckout", Schema.Struct<{
     readonly checkoutId: Schema.String;
@@ -10590,7 +10759,7 @@ declare const commands$1: {
         readonly documentHash: Schema.Codec<DocumentHash, string, never, never>;
       }>]>>;
     }>;
-  }>, "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
+  }>, "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
   /** A registered payer's Payment for an Invoice checkout link. */
   prepareInvoiceCheckout: Operation<"action", "payments.commands.prepareInvoiceCheckout", Schema.Struct<{
     readonly linkToken: Schema.String;
@@ -10723,7 +10892,7 @@ declare const commands$1: {
       readonly contractAddress: Schema.Codec<Address$1, string, never, never>;
       readonly settlementId: Schema.Codec<`0x${string}`, string, never, never>;
     }>;
-  }>, "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
+  }>, "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
 };
 /** An existing Payment: retry its send, or claim, cancel or redirect its commitment. */
 declare const lifecycles: {
@@ -12495,7 +12664,7 @@ declare const lifecycles: {
         readonly updatedAt: Schema.Codec<EpochMs, number, never, never>;
       }>>;
     }>>;
-  }>, "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
+  }>, "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
   /** The same, refused unless the Payment belongs to the scope the caller names. */
   prepareScoped: Operation<"action", "payments.lifecycles.prepareScoped", Schema.Struct<{
     readonly signerAddress: Schema.Codec<Address$1, string, never, never>;
@@ -14270,7 +14439,7 @@ declare const lifecycles: {
         readonly updatedAt: Schema.Codec<EpochMs, number, never, never>;
       }>>;
     }>>;
-  }>, "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
+  }>, "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
   /** What retrying an Organization's failed Payment would send again, before anyone signs. */
   previewRetry: Operation<"query", "payments.lifecycles.previewRetry", Schema.Struct<{
     readonly orgId: Schema.NonEmptyString;
@@ -14464,7 +14633,7 @@ declare const executions: {
       readonly createdAt: Schema.Codec<EpochMs, number, never, never>;
       readonly updatedAt: Schema.Codec<EpochMs, number, never, never>;
     }>;
-  }>, "ACCOUNT_NOT_FOUND" | "ENV_MISSING" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "SMART_ACCOUNT_MISSING" | "SUPERSEDED" | "UNKNOWN" | "WRONG_STATE">;
+  }>, "ACCOUNT_NOT_FOUND" | "ENV_MISSING" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "SMART_ACCOUNT_MISSING" | "SUPERSEDED" | "UNKNOWN" | "WRONG_STATE">;
   /** Send any prepared command's signed execution and record every Payment it carries. */
   submitCommand: Operation<"action", "payments.executions.submitCommand", Schema.Struct<{
     readonly executionId: Schema.refine<string, Schema.String>;
@@ -14559,7 +14728,7 @@ declare const executions: {
       readonly createdAt: Schema.Codec<EpochMs, number, never, never>;
       readonly updatedAt: Schema.Codec<EpochMs, number, never, never>;
     }>>;
-  }>, "ACCOUNT_NOT_FOUND" | "ENV_MISSING" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "SMART_ACCOUNT_MISSING" | "SUPERSEDED" | "UNKNOWN" | "WRONG_STATE">;
+  }>, "ACCOUNT_NOT_FOUND" | "ENV_MISSING" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "SMART_ACCOUNT_MISSING" | "SUPERSEDED" | "UNKNOWN" | "WRONG_STATE">;
   /** Close a prepared execution the signer refused or the caller dropped; false when it moved on. */
   abandon: Operation<"action", "payments.executions.abandon", Schema.Struct<{
     readonly executionId: Schema.refine<string, Schema.String>;
@@ -16471,7 +16640,7 @@ declare const runs: {
         }>>;
       }>;
     }>]>;
-  }>, "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
+  }>, "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
   /** One saved run with its exact Payslips and Payments; null when the Organization has none by that id. */
   get: Operation<"query", "payroll.runs.get", Schema.Struct<{
     readonly orgId: Schema.NonEmptyString;
@@ -17366,16 +17535,6 @@ declare const commands: {
       readonly retryCount: number;
       readonly automaticRetry: "exhausted" | "none" | "scheduled";
       readonly verification: {
-        readonly status: "mismatch";
-        readonly code: "conflicting_replay" | "extra_authority_event" | "failed_user_operation" | "missing_event" | "non_canonical_block" | "wrong_chain" | "wrong_contract_identity" | "wrong_event_order" | "wrong_fact_tuple" | "wrong_sender" | "wrong_state";
-        readonly receipt?: {
-          readonly chainId: ChainId;
-          readonly userOpHash: `0x${string}`;
-          readonly transactionHash: TxHash;
-          readonly blockNumber: BlockNumber;
-          readonly blockHash: `0x${string}`;
-        } | undefined;
-      } | {
         readonly status: "pending";
         readonly reason: "receipt_missing";
       } | {
@@ -17401,6 +17560,16 @@ declare const commands: {
           readonly dataHash: `0x${string}`;
         }[];
         readonly factsHash: `0x${string}`;
+      } | {
+        readonly status: "mismatch";
+        readonly code: "conflicting_replay" | "extra_authority_event" | "failed_user_operation" | "missing_event" | "non_canonical_block" | "wrong_chain" | "wrong_contract_identity" | "wrong_event_order" | "wrong_fact_tuple" | "wrong_sender" | "wrong_state";
+        readonly receipt?: {
+          readonly chainId: ChainId;
+          readonly userOpHash: `0x${string}`;
+          readonly transactionHash: TxHash;
+          readonly blockNumber: BlockNumber;
+          readonly blockHash: `0x${string}`;
+        } | undefined;
       } | {
         readonly status: "provider_failure";
         readonly retryable: true;
@@ -19212,7 +19381,7 @@ declare const commands: {
       readonly limitRaw: Schema.optional<Schema.Codec<WeiAmount, string, never, never>>;
       readonly allowanceKey: Schema.optional<Schema.Codec<AllowanceKey, string, never, never>>;
     }>>]>;
-  }>, "ACCOUNT_NOT_FOUND" | "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "SMART_ACCOUNT_MISSING" | "UNKNOWN" | "WRONG_STATE">;
+  }>, "ACCOUNT_NOT_FOUND" | "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "SMART_ACCOUNT_MISSING" | "UNKNOWN" | "WRONG_STATE">;
   /** Send the signed UserOperation, record it, and schedule its verification. */
   submitExecution: Operation<"action", "permissions.commands.submitExecution", Schema.Struct<{
     readonly executionId: Schema.refine<string, Schema.String>;
@@ -19308,7 +19477,7 @@ declare const commands: {
       readonly limitRaw: Schema.optional<Schema.Codec<WeiAmount, string, never, never>>;
       readonly allowanceKey: Schema.optional<Schema.Codec<AllowanceKey, string, never, never>>;
     }>>]>;
-  }>, "ACCOUNT_NOT_FOUND" | "ENV_MISSING" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "SMART_ACCOUNT_MISSING" | "SUPERSEDED" | "UNKNOWN" | "WRONG_STATE">;
+  }>, "ACCOUNT_NOT_FOUND" | "ENV_MISSING" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "SMART_ACCOUNT_MISSING" | "SUPERSEDED" | "UNKNOWN" | "WRONG_STATE">;
 };
 declare const replacements: {
   /** What replacing the Organization's Roles module would carry over, with its snapshot hash. */
@@ -20164,7 +20333,7 @@ declare const replacements: {
       readonly limitRaw: Schema.optional<Schema.Codec<WeiAmount, string, never, never>>;
       readonly allowanceKey: Schema.optional<Schema.Codec<AllowanceKey, string, never, never>>;
     }>>]>;
-  }>, "ACCOUNT_NOT_FOUND" | "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "SMART_ACCOUNT_MISSING" | "UNKNOWN" | "WRONG_STATE">;
+  }>, "ACCOUNT_NOT_FOUND" | "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "SMART_ACCOUNT_MISSING" | "UNKNOWN" | "WRONG_STATE">;
 };
 declare const verifications: {
   /** Read the receipt of the caller's submitted command and apply what it proves. */
@@ -20392,7 +20561,7 @@ declare const authorities: {
       readonly everyDays: Schema.Finite;
       readonly nextAt: Schema.Codec<EpochMs, number, never, never>;
     }>>>;
-  }>, "ENV_MISSING" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "UNKNOWN">;
+  }>, "ENV_MISSING" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "UNKNOWN">;
   /** Whether the caller's Account may spend this amount from this Budget right now. */
   authorize: Operation<"query", "permissions.authorities.authorize", Schema.Struct<{
     readonly orgId: Schema.refine<string, Schema.String>;
@@ -20474,7 +20643,7 @@ declare const configurations: {
     readonly signerAddress: Schema.Codec<Address$1, string, never, never>;
     readonly userOpSenderSafe: Schema.Codec<SafeAddress, string, never, never>;
     readonly digest: Schema.Codec<`0x${string}`, string, never, never>;
-  }>, "ACCOUNT_NOT_FOUND" | "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "SMART_ACCOUNT_MISSING" | "UNKNOWN" | "WRONG_STATE">;
+  }>, "ACCOUNT_NOT_FOUND" | "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "SMART_ACCOUNT_MISSING" | "UNKNOWN" | "WRONG_STATE">;
   /** Send the signed configuration, record it, and schedule its verification. */
   submitExecution: Operation<"action", "permissions.configurations.submitExecution", Schema.Struct<{
     readonly executionId: Schema.refine<string, Schema.String>;
@@ -20484,7 +20653,7 @@ declare const configurations: {
     readonly executionId: Schema.refine<string, Schema.String>;
     readonly commandId: Schema.Codec<PaymentCommandId, string, never, never>;
     readonly userOpHash: Schema.Codec<`0x${string}`, string, never, never>;
-  }>, "ACCOUNT_NOT_FOUND" | "ENV_MISSING" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "SMART_ACCOUNT_MISSING" | "SUPERSEDED" | "UNKNOWN" | "WRONG_STATE">;
+  }>, "ACCOUNT_NOT_FOUND" | "ENV_MISSING" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "SMART_ACCOUNT_MISSING" | "SUPERSEDED" | "UNKNOWN" | "WRONG_STATE">;
 };
 //#endregion
 //#region ../protocol/src/profiles/operations.d.ts
@@ -25251,7 +25420,7 @@ declare const checkouts: {
       readonly settlementId: Schema.Codec<`0x${string}`, string, never, never>;
       readonly documentKind: Schema.Literals<readonly ["memo", "invoice"]>;
     }>;
-  }>, "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
+  }>, "ENV_MISSING" | "INSUFFICIENT_BALANCE" | "INVALID_INPUT" | "NOT_AUTHENTICATED" | "NOT_IMPLEMENTED" | "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID" | "ROLE_PERMISSION_DENIED" | "UNKNOWN" | "WRONG_STATE">;
   /** An Invoice link's public terms, or null when the link names no Invoice. */
   invoice: Operation<"query", "requests.checkouts.invoice", Schema.Struct<{
     readonly linkToken: Schema.String;
@@ -26409,7 +26578,16 @@ declare const CAPXUL_OPERATIONS: {
   };
   readonly auth: {
     readonly canSendOtp: "auth.canSendOtp";
+    readonly createEncryptionSession: "auth.createEncryptionSession";
+    readonly clientRequests: {
+      readonly accept: "auth.clientRequests.accept";
+      readonly cancel: "auth.clientRequests.cancel";
+      readonly read: "auth.clientRequests.read";
+      readonly sendOtp: "auth.clientRequests.sendOtp";
+      readonly verifyOtp: "auth.clientRequests.verifyOtp";
+    };
     readonly getSession: "auth.getSession";
+    readonly resumeOtp: "auth.resumeOtp";
     readonly signIn: "auth.signIn";
     readonly signOut: "auth.signOut";
     readonly sendVerificationOtp: "auth.sendVerificationOTP";
@@ -26419,10 +26597,6 @@ declare const CAPXUL_OPERATIONS: {
     readonly createOrg: "createOrg";
     readonly orgs: "orgs";
   };
-  readonly clientRequests: {
-    readonly decide: "clientRequests.decide";
-    readonly read: "clientRequests.read";
-  };
   readonly currentUser: {
     readonly get: "currentUser.get";
   };
@@ -26467,8 +26641,10 @@ declare const CAPXUL_OPERATIONS: {
     readonly get: "me.get";
   };
   readonly onboarding: {
+    readonly beginOrganization: "onboarding.beginOrganization";
     readonly completeOrganization: "onboarding.completeOrganization";
     readonly completePerson: "onboarding.completePerson";
+    readonly listOrganizationSetups: "onboarding.listOrganizationSetups";
   };
   readonly smartAccount: {
     readonly claim: "smartAccount.claim";
@@ -26553,6 +26729,9 @@ declare const CAPXUL_OPERATIONS: {
     };
     readonly retry: "org.retry";
     readonly roles: "org.roles";
+    readonly setup: {
+      readonly subscribe: "org.setup.subscribe";
+    };
     readonly treasury: "org.treasury";
   };
   readonly organization: {
@@ -26889,6 +27068,9 @@ declare const CAPXUL_OPERATIONS: {
     readonly health: "system.health";
     readonly ping: "system.ping";
   };
+  readonly mcp: {
+    readonly request: "mcp.request";
+  };
   readonly _internal: {
     readonly accounts: {
       readonly fund: "_internal.accounts.fund";
@@ -28856,9 +29038,9 @@ declare const OrganizationSetupSchema: Schema.Struct<{
       readonly details: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>;
       readonly correlationId: Schema.optionalKey<Schema.String>;
       readonly layer: Schema.optionalKey<Schema.String>;
-      readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>>;
+      readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>>;
       readonly chain: Schema.optionalKey<Schema.Struct<{
-        readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+        readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
         readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
         readonly method: Schema.String;
         readonly retryable: Schema.Boolean;
@@ -28872,7 +29054,7 @@ declare const OrganizationSetupSchema: Schema.Struct<{
         readonly providerMessage: Schema.optionalKey<Schema.String>;
         readonly attempts: Schema.optionalKey<Schema.$Array<Schema.Struct<{
           readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
-          readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+          readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
           readonly httpStatus: Schema.optionalKey<Schema.Finite>;
           readonly rpcCode: Schema.optionalKey<Schema.Finite>;
           readonly durationMs: Schema.Finite;
@@ -28893,9 +29075,9 @@ declare const OrganizationSetupSchema: Schema.Struct<{
       readonly details: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Unknown>>;
       readonly correlationId: Schema.optionalKey<Schema.String>;
       readonly layer: Schema.optionalKey<Schema.String>;
-      readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>>;
+      readonly mode: Schema.optionalKey<Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>>;
       readonly chain: Schema.optionalKey<Schema.Struct<{
-        readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+        readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
         readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
         readonly method: Schema.String;
         readonly retryable: Schema.Boolean;
@@ -28909,7 +29091,7 @@ declare const OrganizationSetupSchema: Schema.Struct<{
         readonly providerMessage: Schema.optionalKey<Schema.String>;
         readonly attempts: Schema.optionalKey<Schema.$Array<Schema.Struct<{
           readonly upstream: Schema.Literals<readonly ["alchemy", "infura", "public", "alto", "gateway"]>;
-          readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "unknown"]>;
+          readonly mode: Schema.Literals<readonly ["auth-origin-mismatch", "stale-openfort-cache", "app-env-allowlist", "no-secure-context", "signer-not-ready", "rate-limited", "timeout", "upstream-down", "revert", "insufficient-balance", "insufficient-allowance", "rejected", "unauthorized", "forbidden", "bad-request", "method-unsupported", "refused", "defect", "unknown"]>;
           readonly httpStatus: Schema.optionalKey<Schema.Finite>;
           readonly rpcCode: Schema.optionalKey<Schema.Finite>;
           readonly durationMs: Schema.Finite;
@@ -29048,8 +29230,9 @@ declare const PaymentQuoteSchema: Schema.Struct<{
     readonly onCapxul: Schema.Boolean;
   }>;
   readonly rate: Schema.optionalKey<Schema.String>;
+  /** Read with any code: an unknown one does not make the quote unreadable. */
   readonly warnings: Schema.$Array<Schema.Struct<{
-    readonly code: Schema.Literal<"RECIPIENT_ON_CAPXUL">;
+    readonly code: Schema.String;
     readonly message: Schema.String;
   }>>;
 }>;
@@ -34211,8 +34394,9 @@ declare const ApprovalSchema: Schema.Struct<{
       readonly name: Schema.String;
       readonly explorerUrl: Schema.String;
     }>;
+    /** Read with any code: an unknown one does not make the approval unreadable. */
     readonly warnings: Schema.optional<Schema.$Array<Schema.Struct<{
-      readonly code: Schema.Literal<"RECIPIENT_ON_CAPXUL">;
+      readonly code: Schema.String;
       readonly message: Schema.String;
     }>>>;
   }>;
@@ -38331,6 +38515,8 @@ type Readiness = {
   readonly failure: Failure;
   readonly retryable: boolean;
 };
+/** The calls whose failed work faults the identity machine. */
+type FaultingCall = "RequestOtp" | "VerifyOtp" | "ReadSession" | "SignOut";
 type IdentityState =
 /** The INITIAL state: a session probe is in flight and the machine knows
  * nothing yet. Distinct from `signed_out`, which is a settled answer. Without
@@ -38361,6 +38547,10 @@ type IdentityState =
 } | {
   readonly phase: "faulted";
   readonly failure: Failure;
+  /** The call whose work faulted the machine. A failed `ReadSession` is
+   * the one fault after which the machine does not know whether the
+   * person is signed in (CAP-420). */
+  readonly failedAt: FaultingCall;
   /** Non-null exactly when an OTP entry is resumable — the incumbent's
    * `email !== null && otpRequestedAt !== null` pair,
    * made structural. */
@@ -39261,10 +39451,15 @@ interface SystemMethods {
 }
 //#endregion
 //#region src/media/images.d.ts
-/** The upload's URL request can fail as its row says; the POST itself fails as `PROVIDER_ERROR`. */
+/**
+ * The upload's URL request can fail as its row says. The POST itself fails as
+ * `PROVIDER_ERROR` (no answer, or a refusal), or as `PROVIDER_RESPONSE_INVALID`
+ * when its answer names no storage id.
+ */
 type UploadImageResult = CapxulResult<{
   readonly storageId: string;
-}, CallError<typeof images.generateUploadUrl> | "PROVIDER_ERROR">;
+}, CallError<typeof images.generateUploadUrl> | UploadFailureCode>;
+type UploadFailureCode = "PROVIDER_ERROR" | "PROVIDER_RESPONSE_INVALID";
 interface MediaMethods {
   uploadImage(blob: Blob, options?: InvocationControls): Promise<UploadImageResult>;
   setProfileImage(input: OperationInput<typeof images.setProfileImage>, options?: InvocationControls): Promise<OperationResult<typeof images.setProfileImage>>;
@@ -39522,6 +39717,62 @@ declare function formatMoney(money: FormattableMoney, options?: {
   readonly grammar?: "symbol" | "code";
 }): string;
 //#endregion
+//#region ../protocol/src/errors/withheld.d.ts
+/**
+ * A cause deliberately not carried (ADR-0023 R11): the result keeps the name
+ * of what was caught and says why the rest is withheld. The one licensed way
+ * to drop a cause.
+ */
+declare function withheld(cause: unknown, reason: string): Error;
+//#endregion
+//#region ../protocol/src/errors/projection.d.ts
+/**
+ * How much text a producer may send. `full` (backend, SDK) sends every key,
+ * each string masked and bounded. `none` (CLI) sends closed facts only: no
+ * message, no cause and no provider request id.
+ */
+type FailureTextPolicy = "full" | "none";
+/** The properties of one failure row. Each key is absent when the failure does not name it. */
+interface FailureProperties {
+  /** The error code. */
+  readonly error_kind: CapxulErrorCode;
+  /** Who acts on the failure. */
+  readonly failure_class: FailureClass;
+  /** The Capxul operation that failed. */
+  readonly operation?: string;
+  readonly failure_mode?: FailureMode;
+  readonly provider?: ProviderName;
+  /** The provider's own operation (`details.operation` of a provider failure). */
+  readonly provider_operation?: string;
+  readonly provider_code?: string;
+  readonly http_status?: number;
+  readonly field?: string;
+  readonly problem?: ProviderProblem;
+  readonly request_id?: string;
+  /**
+   * How long the call ran before it failed, in whole milliseconds, as the
+   * producer measured it (`details.elapsed_ms`, CAP-387). Evidence only.
+   */
+  readonly elapsed_ms?: number;
+  readonly error_message?: string;
+  /** The cause chain, outermost first. */
+  readonly error_cause?: string;
+  readonly $issue_name: string;
+  /** `code:mode:operation`, so one issue is one cause at one operation. */
+  readonly $exception_fingerprint: string;
+}
+/**
+ * The PostHog properties of a failure, under one text policy. `operation` is
+ * the Capxul operation that failed. `details.operation` is the provider's
+ * operation only on a provider failure (one that names `details.provider`);
+ * on any other failure it is not sent, because it names a step of Capxul's
+ * own and not a provider call.
+ */
+declare function failureProperties(error: CapxulError, options: {
+  readonly operation: string;
+  readonly text: FailureTextPolicy;
+}): FailureProperties;
+//#endregion
 //#region ../protocol/src/evm/payments-abi.d.ts
 /** Immutable CapxulPaymentsV2 deployment on Base Sepolia. */
 declare const CAPXUL_PAYMENTS_V2_ADDRESS: Address;
@@ -39673,6 +39924,10 @@ interface HostObservability {
   readonly failures: ObservationAdapter;
   readonly product: TelemetryPort;
 }
+/**
+ * The subset of a posthog-js client the SDK may call. Only `capture` is
+ * required: a host that only wants event capture can omit the others.
+ */
 interface PostHogObservabilityClient {
   capture(event: string, properties?: Readonly<Record<string, unknown>>): unknown;
   captureException?(exception: Error, properties?: Readonly<Record<string, unknown>>): unknown;
@@ -39680,7 +39935,20 @@ interface PostHogObservabilityClient {
   group?(groupType: string, groupKey: string, properties?: Readonly<Record<string, unknown>>): unknown;
   reset?(): unknown;
 }
+/** Masked factory words from the SDK's private original typed-failure path.
+ * These are an in-process host capability, never serialized event authority.
+ */
+interface PostHogFailureCanonicalWords {
+  readonly error_message?: string;
+  readonly $exception_message?: string;
+  readonly $issue_description?: string;
+  readonly exceptionValue?: string;
+}
+/** Host capture seam for SDK failures only. Delivery remains best effort. */
+type PostHogFailureCapture = (event: string, properties: Readonly<Record<string, unknown>>, canonicalWords?: PostHogFailureCanonicalWords) => unknown;
 interface PostHogObservabilityOptions {
+  /** Optional failure-only capture hook; omission uses the client's capture. */
+  readonly failureCapture?: PostHogFailureCapture;
   /** Consent / kill-switch seam. Defaults to enabled. */
   readonly enabled?: boolean | (() => boolean);
   /** Omission preserves bootstrap engineering. False/throw closes the acquired runtime's collection. */
@@ -39757,16 +40025,19 @@ interface HandledErrorReportContext {
   readonly layer?: string;
   /** Host input is normalized at the reporting boundary. */
   readonly operation?: string;
+  /** The provider of an error that is not a `CapxulError`; a `CapxulError` names its own. */
   readonly provider?: string;
-  readonly capxul_error_code?: string;
+  /** The mode of an error that is not a `CapxulError`; a `CapxulError` names its own. */
   readonly failure_mode?: FailureMode;
 }
 /**
  * Capture an error as a `$exception` event through the telemetry port,
  * formatted for PostHog Error Tracking.
  *
- * Parses stack traces into `$exception_list` format, extracts structured
- * metadata from CapxulError objects, and supplements with context props.
+ * The failure facts are the failure row (`failureProperties`, ADR-0039 D6)
+ * under the full text policy. An error that is not a `CapxulError` is
+ * reported as `UNKNOWN`; its text is withheld, since a host error can quote
+ * anything. Parses stack traces into `$exception_list` format.
  * Fire-and-forget: telemetry defects are silently swallowed.
  * Returns `Effect<void, never>` for use in Effect pipelines; the underlying
  * adapter work is synchronous, so callers outside Effect contexts can
@@ -39796,4 +40067,21 @@ type CheckoutLinkReference = {
 /** Build a reference URL. The consumer still reads authoritative terms from the backend. */
 declare function checkoutUrl(frontendOrigin: string, reference: CheckoutLinkReference): string;
 //#endregion
-export { AuthMethods as $, RequestPaymentConfirmation as $a, PaymentDocumentsMethods as $i, PaymentPrepared as $n, ORGANIZATION_SETUP_REASONS as $o, PayrollRunApprovalInput as $r, AddressBookMethods as $t, formatAssetAmount as A, localPrivateKeyAccountProvider as Aa, MeProfile as Ai, VerificationInput as An, TelemetryIdentifyInput as Ao, ApprovalsMethods as Ar, Money as As, Budget as At, IdentityProfileDetails as B, PreparedOfferCheckoutExecution as Ba, ActivityKind as Bi, TargetReference as Bn, oauthBearerAuthClient as Bo, PermissionMethods as Br, FAILURE_MODES as Bs, DestinationAddInput as Bt, OpenfortBrowserSigner as C, SignerStatusStore as Ca, AccountLifecycle as Ci, BankDetailsOverview as Cn, OfferedAuthority as Co, valueActivitySummary as Cr, AuthUserId as Cs, InvitationSubscriptionOptions as Ct, CAPXUL_PAYMENTS_V2_ADDRESS as D, AccountRequirement as Da, DepositInstructions as Di, BankAccountField as Dn, CurrentPolicy as Do, ApprovalInput as Dr, Errors as Ds, InvitePreviewInput as Dt, createOpenfortBrowserSigner as E, AccountProviderSource as Ea, AccountMethods as Ei, BankAccountDetails as En, BudgetIntent as Eo, TOKENS as Er, toAddress as Es, InvitePrepared as Et, MoneyParseErrorReason as F, FixedOfferDraft as Fa, ActivityAnnotation as Fi, VerificationQuestion as Fn, CapxulOperation as Fo, BudgetLeft as Fr, isCapxulError as Fs, BankingMethods as Ft, SystemHealth as G, PrepareInvoiceCheckoutExecutionInput as Ga, ActivityReference as Gi, OrganizationPaymentRetryPreview as Gn, AuthCacheError as Go, PermissionReplaceInput as Gr, DestinationRemoveInput as Gt, IdentityRuntimeSendResult as H, InvoiceCheckoutReconciliation as Ha, ActivityMethods as Hi, OrganizationPaymentBatchInput as Hn, ObservationContext as Ho, PermissionPolicyChange as Hr, CAPXUL_ERROR_CODES as Hs, DestinationListInput as Ht, isMoneyParseError as I, FixedOfferDraftSchema as Ia, ActivityAnnotationInput as Ii, VerificationStatus as In, NormalizedCapxulOperation as Io, PermissionAssignInput as Ir, CHAIN_UPSTREAMS as Is, BankDepositCandidatesOptions as It, destination as J, PreparedRequestCheckoutExecution as Ja, ActivitySummaryTotal as Ji, Payment as Jn, CachedJwt as Jo, PermissionCommandView as Jr, ActorProfileMethods as Jt, SystemMethods as K, PrepareRequestCheckoutExecutionInput as Ka, ActivitySummary as Ki, OrganizationPaymentsMethods as Kn, AuthCachePort as Ko, PermissionRevokeInput as Kr, DestinationsMethods as Kt, parseMoney as L, OfferCheckout as La, ActivityDetail as Li, RecipientResolution as Ln, isCapxulOperation as Lo, PermissionAssignmentEffect as Lr, ChainCause as Ls, BankDepositMethods as Lt, requireAsset as M, CheckoutReconciliation as Ma, inboxPhase as Mi, VerificationOperations as Mn, TelemetryPortEvent as Mo, PermissionApprovalInput as Mr, toCurrencyCode as Ms, OrgMeMethod as Mt, toRaw as N, CheckoutState as Na, paymentPhase as Ni, VerificationAnswers as Nn, TelemetryPort as No, PermissionWrite as Nr, CapxulError as Ns, OrgMeOptions as Nt, formatMoney as O, Eip1193Provider as Oa, Home as Oi, BankAccountFilter as On, Permission as Oo, ApprovalOutcome as Or, AssetAmount as Os, OrgInvitations as Ot, MoneyParseError as P, FixedOffer as Pa, requestPhase as Pi, VerificationPersonInput as Pn, CAPXUL_OPERATIONS as Po, decodePermissionIntent as Pr, CapxulErrorDetails as Ps, BankDetailsMethods as Pt, CurrentUserMethods as Q, RequestCheckoutSummary as Qa, PAYMENT_STATUSES as Qi, PaymentMoney as Qn, Page as Qo, CancelApprovalInput as Qr, AddressBookLabelInput as Qt, CapxulClient as R, OfferCheckoutPreparation as Ra, ActivityFilter as Ri, Ref$1 as Rn, normalizeCapxulOperation as Ro, PermissionChangeInput as Rr, ChainUpstream as Rs, BankDepositsListOptions as Rt, OpenfortBrowserAuth as S, SignerStatus as Sa, Approval as Si, BankDetails as Sn, InvitePreview as So, Valuation as Sr, AuthSession as Ss, InvitationSnapshot as St, OpenfortBrowserSignerOptions as T, AccountProvider as Ta, isSettingUpLifecycle as Ti, BankAccount as Tn, PermissionReplacementPreview as To, AssetMetadata as Tr, EVM_ADDRESS_RE as Ts, InviteOptions as Tt, MediaMethods as U, InvoiceCheckoutState as Ua, ActivityPage as Ui, OrganizationPaymentInput as Un, ObservationDelivery as Uo, PermissionPrepared as Ur, CapxulErrorCode as Us, DestinationPayload as Ut, IdentityRuntime as V, InvoiceCheckoutPreparation as Va, ActivityListParams as Vi, TargetsMethods as Vn, ObservationAdapter as Vo, PermissionOptions as Vr, FailureMode as Vs, DestinationKind as Vt, UploadImageResult as W, InvoiceCheckoutSummary as Wa, ActivityRange as Wi, OrganizationPaymentItemInput as Wn, SdkFailureObservation as Wo, PermissionReadResult as Wr, EXPECTED_OPERATION_OUTCOMES as Ws, DestinationRail as Wt, isRestoring as X, RequestCheckoutReconciliation as Xa, PaymentActivityEvidence as Xi, PaymentDocumentKind as Xn, CapxulResult as Xo, PermissionIntent as Xr, AddressBookAddInput as Xt, isClaimed as Y, RequestCheckoutPreparation as Ya, MovementActivityEvidence as Yi, PaymentDirection as Yn, ActorReference as Yo, SubmittedPermissionExecution as Yr, ActorRelationshipMethods as Yt, CurrentUserContext as Z, RequestCheckoutState as Za, PAYMENT_DIRECTIONS as Zi, PaymentDocumentRef as Zn, OperationResult as Zo, OrganizationApprovalInput as Zr, AddressBookEntry as Zt, OpenfortEmbeddedWalletPort as _, ActorRef as _a, PayrollTermsUnit as _i, BankCurrency as _n, InvitationRecovery as _o, HoldingsMethods as _r, HANDLE_RE as _s, OrganizationAccess as _t, captureExceptionSync as a, CompletedPersonProfile as aa, AuthorizeRunOptions as ai, InboxFulfillOptions as an, OrganizationSetupPageInput as ao, PaymentsPayInput as ar, BudgetId as as, IdentityTransition as at, deriveDevPrivateKey as b, CapxulSigner as ba, PayrollGroupInputSchema as bi, BankDepositMatchCandidate as bn, InviteGrant as bo, Rate as br, toHandle as bs, RoleDefinition as bt, CapxulClientInput as c, OrganizationOnboardingInput as ca, PayrollGroupInput as ci, CheckoutsMethods as cn, Unsubscribe as co, PaymentDocumentOptions as cr, toBudgetId as cs, Readiness as ct, PostHogObservabilityOptions as d, PersonOnboardingInput as da, PayrollMethods as di, PayRequestRegisteredInput as dn, GranteeRef as do, SupportingReceiptInput as dr, Account$1 as ds, MemberIdentityProjection as dt, PaymentDocumentDownload as ea, RedirectApprovalInput as ei, ActorRequest as en, RequestPaymentTerms as eo, PaymentSnapshot as er, OrgId as es, Session as et, postHogObservability as f, ReadyAccountLifecycle as fa, PayrollOptions as fi, isCheckoutSettlementConsumed as fn, InvitationAcceptInput as fo, PaymentQuoteInput as fr, AccountId as fs, MemberStatus as ft, OpenfortEmbeddedWalletApi as g, PayoutAddress as ga, PayrollRuns as gi, BankAccountsMethods as gn, InvitationPhase as go, positionPeg as gr, toCountryCode as gs, OrgView as gt, openfortEmbeddedSignerFromWallet as h, Profile as ha, PayrollRunStatus as hi, BankAccountRequirementsInput as hn, InvitationPageInput as ho, SmartAccountMethods as hr, TesterKind as hs, OrgScopedMethods as ht, captureException as i, LineItemV3 as ia, AuthorizeRunInput as ii, InboxApproveInput as in, OrganizationSetupPage as io, PaymentType as ir, toPayrollGroupId as is, IdentityEvent as it, parseAssetAmount as j, CheckoutReceipt as ja, ActivityPhase as ji, VerificationMethods as jn, TelemetryEvent as jo, InvitationApprovalInput as jr, toAssetId as js, OrgMe as jt, assetSymbolFor as k, eip1193AccountProvider as ka, MeMethods as ki, BankAccountTarget as kn, TelemetryGroupInput as ko, ApprovalWaitOptions as kr, AssetId as ks, OwnInvitationsMethod as kt, HostObservability as l, OrganizationOnboardingOptions as la, PayrollGroupMember as li, CreateOfferCheckoutInput as ln, AuthorityRef as lo, PaymentDocumentOptionsSchema as lr, toPermissionAssignmentId as ls, StateLabel as lt, embeddedSigner as m, IdentityMethods as ma, PayrollRunItemInput as mi, BankAccountRequirements as mn, InvitationPage as mo, SmartAccount as mr, CountryCode as ms, OrgMethods as mt, checkoutUrl as n, PaymentDocumentRender as na, RetryApprovalInput as ni, ActorRequestsMethods as nn, InvocationControls as no, PaymentSubscriptionOptions as nr, PayrollGroupId as ns, ClientRequests as nt, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT as o, OnboardingMethods as oa, PayrollEngagementTerms as oi, InboxItem as on, OrganizationSetupSnapshot as oo, PaymentsPayOptions as or, PermissionId as os, IdentityState as ot, OpenfortEmbeddedSignerInput as p, CompleteProfileInput as pa, PayrollRun as pi, BankAccountAddInput as pn, InvitationId as po, FinancialOpsMethods as pr, toAccountId as ps, MemberView as pt, Destination as q, PreparedInvoiceCheckoutExecution as qa, ActivitySummaryParams as qi, PaymentsMethods as qn, AuthCachePortTag as qo, PermissionCommandSnapshot as qr, ActorProfile as qt, HandledErrorReportContext as r, PaymentDocumentVerification as ra, decodePayrollRunInput as ri, OffersMethods as rn, OrganizationSetup as ro, PaymentTiming as rr, PayrollRunId as rs, ClientRequestView as rt, createCapxulClient as s, OrganizationOnboarding as sa, PayrollGroup as si, InboxMethods as sn, SetupIssue as so, InvoiceDraft as sr, RoleKey as ss, OrgLane as st, CheckoutLinkReference as t, PaymentDocumentReadRef as ta, RequestApprovalInput as ti, ActorRequestIssueInput as tn, PaymentQuote as to, PaymentStatus as tr, toOrgId as ts, AccountSetupPolicy as tt, PostHogObservabilityClient as u, PersonOnboarding as ua, PayrollGroupsMethods as ui, PayInvoiceRegisteredInput as un, EndingReason as uo, PaymentInstructionInput as ur, toPermissionId as us, AssignmentProjection as ut, openfortEmbeddedWalletPort as v, fingerprintPaymentIntent as va, PayrollRunSnapshot as vi, BankDeposit as vn, InvitationTarget as vo, CurrentHoldings as vr, Handle as vs, OrganizationAccount as vt, OpenfortBrowserSignerBootstrap as w, injectedWalletSigner as wa, AccountSetupStep as wi, SettlementToken as wn, SpendingScope as wo, valueIn as wr, Address$1 as ws, InviteMethod as wt, devPrivateKeySigner as x, Eip1193RequestProvider as xa, PayrollRunDetail as xi, BankDepositsPage as xn, InviteInput as xo, RateSource as xr, toPartyId as xs, RoleView as xt, DevPrivateKeySignerInput as y, CapxulDigestSigner as ya, PayrollGroupIdSchema as yi, BankDepositCandidatesPage as yn, InvitationView as yo, AccountsMethods as yr, PartyId as ys, OrganizationAuditLogItem as yt, CreateCapxulClientInput as z, PrepareOfferCheckoutExecutionInput as za, ActivityItem as zi, ResolvedTarget as zn, OAuthBearerAuthClientInput as zo, PermissionCreateInput as zr, RevertSummary as zs, Destination$1 as zt };
+//#region ../protocol/src/primitives/warning.d.ts
+/** The warning codes this build writes and acts on. */
+declare const WARNING_CODES: readonly [
+/** The recipient is on Capxul: paying their Capxul account is free and instant. */
+"RECIPIENT_ON_CAPXUL"];
+type WarningCode = (typeof WARNING_CODES)[number];
+/** A warning as a client reads it: any code, and the sentence to show. */
+declare const WarningSchema: Schema.Struct<{
+  readonly code: Schema.String;
+  readonly message: Schema.String;
+}>;
+type Warning = typeof WarningSchema.Type;
+/** Whether `warning` has this known code. */
+declare function hasWarningCode<Code extends WarningCode>(warning: Warning, code: Code): warning is Warning & {
+  readonly code: Code;
+};
+//#endregion
+export { MediaMethods as $, InvoiceCheckoutState as $a, ActivityPage as $i, OrganizationPaymentInput as $n, ObservationDelivery as $o, PermissionPrepared as $r, CapxulError as $s, DestinationPayload as $t, OpenfortBrowserSignerBootstrap as A, CapxulSigner as Aa, PayrollGroupInputSchema as Ai, BankDepositMatchCandidate as An, InviteGrant as Ao, Rate as Ar, toHandle as As, RoleDefinition as At, formatAssetAmount as B, localPrivateKeyAccountProvider as Ba, MeProfile as Bi, VerificationInput as Bn, TelemetryIdentifyInput as Bo, ApprovalsMethods as Br, Errors as Bs, Budget as Bt, OpenfortEmbeddedWalletPort as C, CompleteProfileInput as Ca, PayrollRun as Ci, BankAccountAddInput as Cn, InvitationId as Co, FinancialOpsMethods as Cr, toAccountId as Cs, MemberView as Ct, devPrivateKeySigner as D, ActorRef as Da, PayrollTermsUnit as Di, BankCurrency as Dn, InvitationRecovery as Do, HoldingsMethods as Dr, HANDLE_RE as Ds, OrganizationAccess as Dt, deriveDevPrivateKey as E, PayoutAddress as Ea, PayrollRuns as Ei, BankAccountsMethods as En, InvitationPhase as Eo, positionPeg as Er, toCountryCode as Es, OrgView as Et, FailureTextPolicy as F, AccountProvider as Fa, isSettingUpLifecycle as Fi, BankAccount as Fn, PermissionReplacementPreview as Fo, AssetMetadata as Fr, EVM_ADDRESS_RE as Fs, InviteOptions as Ft, MoneyParseErrorReason as G, FixedOfferDraft as Ga, ActivityAnnotation as Gi, VerificationQuestion as Gn, CapxulOperation as Go, BudgetLeft as Gr, ProviderProblem as Gs, BankingMethods as Gt, requireAsset as H, CheckoutReconciliation as Ha, inboxPhase as Hi, VerificationOperations as Hn, TelemetryPortEvent as Ho, PermissionApprovalInput as Hr, PROVIDER_PROBLEMS as Hs, OrgMeMethod as Ht, failureProperties as I, AccountProviderSource as Ia, AccountMethods as Ii, BankAccountDetails as In, BudgetIntent as Io, TOKENS as Ir, toAddress as Is, InvitePrepared as It, CapxulClient as J, OfferCheckoutPreparation as Ja, ActivityFilter as Ji, Ref$1 as Jn, normalizeCapxulOperation as Jo, PermissionChangeInput as Jr, AssetAmount as Js, BankDepositsListOptions as Jt, isMoneyParseError as K, FixedOfferDraftSchema as Ka, ActivityAnnotationInput as Ki, VerificationStatus as Kn, NormalizedCapxulOperation as Ko, PermissionAssignInput as Kr, ProviderRefusalMode as Ks, BankDepositCandidatesOptions as Kt, withheld as L, AccountRequirement as La, DepositInstructions as Li, BankAccountField as Ln, CurrentPolicy as Lo, ApprovalInput as Lr, FAILURE_CLASSES as Ls, InvitePreviewInput as Lt, createOpenfortBrowserSigner as M, SignerStatus as Ma, Approval as Mi, BankDetails as Mn, InvitePreview as Mo, Valuation as Mr, AuthSession as Ms, InvitationSnapshot as Mt, CAPXUL_PAYMENTS_V2_ADDRESS as N, SignerStatusStore as Na, AccountLifecycle as Ni, BankDetailsOverview as Nn, OfferedAuthority as No, valueActivitySummary as Nr, AuthUserId as Ns, InvitationSubscriptionOptions as Nt, OpenfortBrowserAuth as O, fingerprintPaymentIntent as Oa, PayrollRunSnapshot as Oi, BankDeposit as On, InvitationTarget as Oo, CurrentHoldings as Or, Handle as Os, OrganizationAccount as Ot, FailureProperties as P, injectedWalletSigner as Pa, AccountSetupStep as Pi, SettlementToken as Pn, SpendingScope as Po, valueIn as Pr, Address$1 as Ps, InviteMethod as Pt, IdentityRuntimeSendResult as Q, InvoiceCheckoutReconciliation as Qa, ActivityMethods as Qi, OrganizationPaymentBatchInput as Qn, ObservationContext as Qo, PermissionPolicyChange as Qr, toCurrencyCode as Qs, DestinationListInput as Qt, formatMoney as R, Eip1193Provider as Ra, Home as Ri, BankAccountFilter as Rn, Permission as Ro, ApprovalOutcome as Rr, FailureClass as Rs, OrgInvitations as Rt, OpenfortEmbeddedWalletApi as S, ReadyAccountLifecycle as Sa, PayrollOptions as Si, isCheckoutSettlementConsumed as Sn, InvitationAcceptInput as So, PaymentQuoteInput as Sr, AccountId as Ss, MemberStatus as St, DevPrivateKeySignerInput as T, Profile as Ta, PayrollRunStatus as Ti, BankAccountRequirementsInput as Tn, InvitationPageInput as To, SmartAccountMethods as Tr, TesterKind as Ts, OrgScopedMethods as Tt, toRaw as U, CheckoutState as Ua, paymentPhase as Ui, VerificationAnswers as Un, TelemetryPort as Uo, PermissionWrite as Ur, ProviderEvidence as Us, OrgMeOptions as Ut, parseAssetAmount as V, CheckoutReceipt as Va, ActivityPhase as Vi, VerificationMethods as Vn, TelemetryEvent as Vo, InvitationApprovalInput as Vr, PROVIDERS as Vs, OrgMe as Vt, MoneyParseError as W, FixedOffer as Wa, requestPhase as Wi, VerificationPersonInput as Wn, CAPXUL_OPERATIONS as Wo, decodePermissionIntent as Wr, ProviderName as Ws, BankDetailsMethods as Wt, IdentityProfileDetails as X, PreparedOfferCheckoutExecution as Xa, ActivityKind as Xi, TargetReference as Xn, oauthBearerAuthClient as Xo, PermissionMethods as Xr, Money as Xs, DestinationAddInput as Xt, CreateCapxulClientInput as Y, PrepareOfferCheckoutExecutionInput as Ya, ActivityItem as Yi, ResolvedTarget as Yn, OAuthBearerAuthClientInput as Yo, PermissionCreateInput as Yr, AssetId as Ys, Destination$1 as Yt, IdentityRuntime as Z, InvoiceCheckoutPreparation as Za, ActivityListParams as Zi, TargetsMethods as Zn, ObservationAdapter as Zo, PermissionOptions as Zr, toAssetId as Zs, DestinationKind as Zt, PostHogObservabilityOptions as _, OrganizationOnboarding as _a, PayrollGroup as _i, InboxMethods as _n, SetupIssue as _o, InvoiceDraft as _r, RoleKey as _s, OrgLane as _t, CheckoutLinkReference as a, MovementActivityEvidence as aa, RevertSummary as ac, SubmittedPermissionExecution as ai, ActorRelationshipMethods as an, RequestCheckoutPreparation as ao, PaymentDirection as ar, ActorReference as as, isClaimed as at, embeddedSigner as b, PersonOnboarding as ba, PayrollGroupsMethods as bi, PayInvoiceRegisteredInput as bn, EndingReason as bo, PaymentInstructionInput as br, toPermissionId as bs, AssignmentProjection as bt, captureException as c, PAYMENT_STATUSES as ca, CAPXUL_ERROR_CODES as cc, CancelApprovalInput as ci, AddressBookLabelInput as cn, RequestCheckoutSummary as co, PaymentMoney as cr, Page as cs, CurrentUserMethods as ct, createCapxulClient as d, PaymentDocumentReadRef as da, RequestApprovalInput as di, ActorRequestIssueInput as dn, PaymentQuote as do, PaymentStatus as dr, toOrgId as ds, AccountSetupPolicy as dt, ActivityRange as ea, CapxulErrorDetails as ec, PermissionReadResult as ei, DestinationRail as en, InvoiceCheckoutSummary as eo, OrganizationPaymentItemInput as er, SdkFailureObservation as es, UploadImageResult as et, CapxulClientInput as f, PaymentDocumentRender as fa, RetryApprovalInput as fi, ActorRequestsMethods as fn, InvocationControls as fo, PaymentSubscriptionOptions as fr, PayrollGroupId as fs, ClientRequests as ft, PostHogObservabilityClient as g, OnboardingMethods as ga, PayrollEngagementTerms as gi, InboxItem as gn, OrganizationSetupSnapshot as go, PaymentsPayOptions as gr, PermissionId as gs, IdentityState as gt, PostHogFailureCapture as h, CompletedPersonProfile as ha, AuthorizeRunOptions as hi, InboxFulfillOptions as hn, OrganizationSetupPageInput as ho, PaymentsPayInput as hr, BudgetId as hs, IdentityTransition as ht, hasWarningCode as i, ActivitySummaryTotal as ia, ChainUpstream as ic, PermissionCommandView as ii, ActorProfileMethods as in, PreparedRequestCheckoutExecution as io, Payment as ir, CachedJwt as is, destination as it, OpenfortBrowserSignerOptions as j, Eip1193RequestProvider as ja, PayrollRunDetail as ji, BankDepositsPage as jn, InviteInput as jo, RateSource as jr, toPartyId as js, RoleView as jt, OpenfortBrowserSigner as k, CapxulDigestSigner as ka, PayrollGroupIdSchema as ki, BankDepositCandidatesPage as kn, InvitationView as ko, AccountsMethods as kr, PartyId as ks, OrganizationAuditLogItem as kt, captureExceptionSync as l, PaymentDocumentsMethods as la, CapxulErrorCode as lc, PayrollRunApprovalInput as li, AddressBookMethods as ln, RequestPaymentConfirmation as lo, PaymentPrepared as lr, ORGANIZATION_SETUP_REASONS as ls, AuthMethods as lt, PostHogFailureCanonicalWords as m, LineItemV3 as ma, AuthorizeRunInput as mi, InboxApproveInput as mn, OrganizationSetupPage as mo, PaymentType as mr, toPayrollGroupId as ms, IdentityEvent as mt, Warning as n, ActivitySummary as na, CHAIN_UPSTREAMS as nc, PermissionRevokeInput as ni, DestinationsMethods as nn, PrepareRequestCheckoutExecutionInput as no, OrganizationPaymentsMethods as nr, AuthCachePort as ns, SystemMethods as nt, checkoutUrl as o, PaymentActivityEvidence as oa, FAILURE_MODES as oc, PermissionIntent as oi, AddressBookAddInput as on, RequestCheckoutReconciliation as oo, PaymentDocumentKind as or, CapxulResult as os, isRestoring as ot, HostObservability as p, PaymentDocumentVerification as pa, decodePayrollRunInput as pi, OffersMethods as pn, OrganizationSetup as po, PaymentTiming as pr, PayrollRunId as ps, ClientRequestView as pt, parseMoney as q, OfferCheckout as qa, ActivityDetail as qi, RecipientResolution as qn, isCapxulOperation as qo, PermissionAssignmentEffect as qr, ProviderUnavailableMode as qs, BankDepositMethods as qt, WarningCode as r, ActivitySummaryParams as ra, ChainCause as rc, PermissionCommandSnapshot as ri, ActorProfile as rn, PreparedInvoiceCheckoutExecution as ro, PaymentsMethods as rr, AuthCachePortTag as rs, Destination as rt, HandledErrorReportContext as s, PAYMENT_DIRECTIONS as sa, FailureMode as sc, OrganizationApprovalInput as si, AddressBookEntry as sn, RequestCheckoutState as so, PaymentDocumentRef as sr, OperationResult as ss, CurrentUserContext as st, WARNING_CODES as t, ActivityReference as ta, isCapxulError as tc, PermissionReplaceInput as ti, DestinationRemoveInput as tn, PrepareInvoiceCheckoutExecutionInput as to, OrganizationPaymentRetryPreview as tr, AuthCacheError as ts, SystemHealth as tt, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT as u, PaymentDocumentDownload as ua, EXPECTED_OPERATION_OUTCOMES as uc, RedirectApprovalInput as ui, ActorRequest as un, RequestPaymentTerms as uo, PaymentSnapshot as ur, OrgId as us, Session as ut, postHogObservability as v, OrganizationOnboardingInput as va, PayrollGroupInput as vi, CheckoutsMethods as vn, Unsubscribe as vo, PaymentDocumentOptions as vr, toBudgetId as vs, Readiness as vt, openfortEmbeddedWalletPort as w, IdentityMethods as wa, PayrollRunItemInput as wi, BankAccountRequirements as wn, InvitationPage as wo, SmartAccount as wr, CountryCode as ws, OrgMethods as wt, openfortEmbeddedSignerFromWallet as x, PersonOnboardingInput as xa, PayrollMethods as xi, PayRequestRegisteredInput as xn, GranteeRef as xo, SupportingReceiptInput as xr, Account$1 as xs, MemberIdentityProjection as xt, OpenfortEmbeddedSignerInput as y, OrganizationOnboardingOptions as ya, PayrollGroupMember as yi, CreateOfferCheckoutInput as yn, AuthorityRef as yo, PaymentDocumentOptionsSchema as yr, toPermissionAssignmentId as ys, StateLabel as yt, assetSymbolFor as z, eip1193AccountProvider as za, MeMethods as zi, BankAccountTarget as zn, TelemetryGroupInput as zo, ApprovalWaitOptions as zr, failureClass as zs, OwnInvitationsMethod as zt };