@capxul/mcp 4.1.2 → 4.1.3

package/dist/main.mjs

@@ -11559,7 +11559,7 @@ const moneyExecutionContract = {
 };
 //#endregion
 //#region ../../packages/sdk/package.json
-var version$1 = "4.1.2";
+var version$1 = "4.1.3";
 //#endregion
 //#region ../../packages/sdk/src/telemetry/exception-projection.ts
 /** Fixed fallback for failures that have no safe message. */
@@ -12421,8 +12421,18 @@ function parsePaymentRequestKeyState(value) {
 	if (typeof state.key !== "string" || !Array.isArray(state.active) || state.active.some((attempt) => typeof attempt !== "string") || typeof state.resolved !== "boolean") throw new TypeError("Invalid payment request key state");
 	return state;
 }
-async function paymentRequestKeyLifecycle(operation, intent, provided) {
-	if (provided !== void 0) return {
+/** A persisted caller key cannot displace another unresolved or active intent. */
+function managedRequestKeyState(state, provided, hasActiveAttempt) {
+	if (provided === void 0 || state.key === provided) return state;
+	if (!state.resolved || hasActiveAttempt) throw Errors.invalidInput("requestKey", "another request key is unresolved");
+	return {
+		key: provided,
+		active: [],
+		resolved: false
+	};
+}
+async function paymentRequestKeyLifecycle(operation, intent, provided, options) {
+	if (provided !== void 0 && options?.manageProvidedKey !== true) return {
 		key: provided,
 		finish: async () => void 0
 	};
@@ -12435,11 +12445,12 @@ async function paymentRequestKeyLifecycle(operation, intent, provided) {
 		})}`;
 		if (typeof window === "undefined") {
 			const attemptId = randomPaymentRequestKey();
-			const state = memoryPaymentRequestKeys.get(slot) ?? {
-				key: randomPaymentRequestKey(),
+			let state = memoryPaymentRequestKeys.get(slot) ?? {
+				key: provided ?? randomPaymentRequestKey(),
 				active: [],
 				resolved: false
 			};
+			state = managedRequestKeyState(state, provided, state.active.length > 0);
 			state.active.push(attemptId);
 			memoryPaymentRequestKeys.set(slot, state);
 			let finished = false;
@@ -12463,14 +12474,15 @@ async function paymentRequestKeyLifecycle(operation, intent, provided) {
 		const key = await manager.request(slot, async () => {
 			const stored = window.localStorage.getItem(slot);
 			let state = stored === null ? {
-				key: randomPaymentRequestKey(),
+				key: provided ?? randomPaymentRequestKey(),
 				active: [],
 				resolved: false
 			} : parsePaymentRequestKeyState(stored);
 			const registered = state.active.includes(attemptId);
 			const active = await heldPaymentAttemptIds(manager, slot);
+			state = managedRequestKeyState(state, provided, active.some((id) => id !== attemptId));
 			if (!registered && active.every((id) => id === attemptId) && state.resolved) state = {
-				key: randomPaymentRequestKey(),
+				key: provided ?? randomPaymentRequestKey(),
 				active: [],
 				resolved: false
 			};
@@ -43907,21 +43919,54 @@ function executionDependencies(deps) {
 		signer: deps.signer
 	};
 }
+/** Read only the exact backend prepare receipt, never an arbitrary signer failure. */
+function payrollResolution(error, requestKey) {
+	const details = error.details;
+	if (error.code !== "WRONG_STATE" || details?.method !== AUTHORIZE_RUN || details.requestKey !== requestKey || typeof details.commandId !== "string" || typeof details.runId !== "string") return void 0;
+	return details.payrollResolution === "failed" || details.payrollResolution === "settled" ? details.payrollResolution : void 0;
+}
 function makePayrollMethods(deps, orgId) {
 	const requestKeyScope = deps.requestKeyScope ?? `client-${crypto.randomUUID()}`;
-	async function authorize(input, controls) {
+	async function authorize(input, controls, onRequestKey, onResolved) {
 		const signal = controls?.signal;
 		const execution = executionDependencies(deps);
 		if (execution === null) return {
 			ok: false,
 			error: Errors.notImplemented("payroll", "executionComposition")
 		};
-		const requestKey = await paymentRequestKeyLifecycle(`${requestKeyScope}:${AUTHORIZE_RUN}`, {
+		const { requestKey: provided, ...canonicalInput } = input;
+		const actorId = onRequestKey === void 0 ? void 0 : execution.actor.authSession()?.authUserId;
+		if (onRequestKey !== void 0 && actorId === void 0) return {
+			ok: false,
+			error: Errors.notAuthenticated()
+		};
+		const requestKey = await paymentRequestKeyLifecycle(`${requestKeyScope}:${AUTHORIZE_RUN}`, onRequestKey === void 0 ? {
 			orgId,
 			input
-		}, input.requestKey);
+		} : {
+			actorId,
+			orgId,
+			input: canonicalInput
+		}, provided, onRequestKey === void 0 ? void 0 : { manageProvidedKey: true });
+		try {
+			await onRequestKey?.(requestKey.key);
+			if (onRequestKey !== void 0 && execution.actor.authSession()?.authUserId !== actorId) {
+				await requestKey.finish(false).catch(() => void 0);
+				return {
+					ok: false,
+					error: Errors.notAuthenticated()
+				};
+			}
+		} catch (cause) {
+			await requestKey.finish(false).catch(() => void 0);
+			return {
+				ok: false,
+				error: cause instanceof CapxulError ? cause : Errors.unknown(cause)
+			};
+		}
 		let authorized;
 		let preparedClosed = false;
+		let terminalReplay;
 		const submitted = await executePrepared(execution, async (signerAddress) => {
 			const prepared = await runIfActive(signal, AUTHORIZE_RUN, () => withInvocationParentSpan(Effect.suspend(() => deps.convexCall.action(payrollContract.authorizeRun, copyInvocationObservation(controls, { input: {
 				orgId,
@@ -43931,7 +43976,10 @@ function makePayrollMethods(deps, orgId) {
 				period: input.period,
 				items: input.items
 			} }))), controls), deps.runPromise);
-			if (!prepared.ok) return prepared;
+			if (!prepared.ok) {
+				terminalReplay = payrollResolution(prepared.error, requestKey.key);
+				return prepared;
+			}
 			authorized = prepared.value.run;
 			return {
 				ok: true,
@@ -43944,8 +43992,12 @@ function makePayrollMethods(deps, orgId) {
 			runId: authorized.id,
 			items: input.items
 		})(request), true, () => preparedClosed = true, signal, controls);
+		const resolution = preparedClosed ? "failed" : terminalReplay;
+		if (resolution !== void 0) try {
+			await onResolved?.(resolution);
+		} catch {}
 		try {
-			await requestKey.finish(submitted.ok || preparedClosed);
+			await requestKey.finish(submitted.ok || resolution !== void 0);
 		} catch {}
 		if (!submitted.ok) return submitted;
 		return authorized === void 0 ? {
@@ -43967,7 +44019,7 @@ function makePayrollMethods(deps, orgId) {
 				if (controls?.signal?.aborted === true) return yield* Effect.fail(Errors.cancelled({ operation: AUTHORIZE_RUN }));
 				const parent = yield* Effect.currentSpan.pipe(Effect.orDie);
 				const result = yield* Effect.tryPromise({
-					try: () => authorize(input, carryInvocationParentSpan(controls, parent)),
+					try: () => authorize(input, carryInvocationParentSpan(controls, parent), options?.onRequestKey, options?.onResolved),
 					catch: (cause) => cause instanceof CapxulError ? cause : Errors.unknown(cause)
 				});
 				return yield* result.ok ? Effect.succeed(result.value) : Effect.fail(result.error);
@@ -46653,7 +46705,7 @@ function stdioIdentity(env = process.env, options = {}) {
 }
 //#endregion
 //#region package.json
-var version = "4.1.2";
+var version = "4.1.3";
 //#endregion
 //#region src/deps.ts
 const NO_IDENTITY = async () => void 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/mcp",
-  "version": "4.1.2",
+  "version": "4.1.3",
   "private": false,
   "description": "Capxul MCP server for auth, Account readiness, identity, Organizations, relationships, requests, destinations, and testnet funding over Streamable HTTP.",
   "keywords": [
@@ -51,7 +51,7 @@
     "vite": "npm:@voidzero-dev/vite-plus-core@0.3.0",
     "vite-plus": "0.3.0",
     "@capxul/config": "0.3.0",
-    "@capxul/sdk": "4.1.2",
+    "@capxul/sdk": "4.1.3",
     "@capxul/typescript-config": "0.0.0"
   },
   "scripts": {