@capxul/mcp 4.1.2 → 4.1.4

package/dist/main.mjs

@@ -5177,6 +5177,7 @@ const ActivityFilterProps = {
 	filter_status: Schema.optional(Schema.Array(Schema.Literals([
 		"pending",
 		"settling",
+		"unresolved",
 		"pending_claim",
 		"scheduled",
 		"streaming",
@@ -10353,6 +10354,7 @@ function verifiedOperationFields(attributes) {
 /** Observe a public Effect that already uses the canonical CapxulError channel. */
 async function runCapxulEffect(effect, controls, operation = CAPXUL_OPERATIONS.runtime.port, runPromise = Effect.runPromise) {
 	const invocation = readInvocationObservation(controls);
+	let owningSpan;
 	const correlationId = safeEngineeringIdentifier(invocation?.context?.correlationId ?? controls?.correlation_id);
 	const context = invocation?.active === false ? void 0 : sanitizeObservationContext(invocation?.context);
 	const fields = {
@@ -10379,6 +10381,10 @@ async function runCapxulEffect(effect, controls, operation = CAPXUL_OPERATIONS.r
 		const failure = error instanceof CapxulError ? error : void 0;
 		const outcome = Exit.isSuccess(exit) ? "succeeded" : failure?.code === "CANCELLED" ? "cancelled" : failure !== void 0 && EXPECTED_OPERATION_OUTCOMES.has(failure.code) ? "refused" : "failed";
 		const span = yield* Effect.currentSpan.pipe(Effect.orDie);
+		if (Exit.isFailure(exit) && invocation?.active === true) owningSpan = Object.freeze({
+			traceId: span.traceId,
+			spanId: span.spanId
+		});
 		const completion = {
 			...fields,
 			...verifiedOperationFields(span.attributes),
@@ -10392,7 +10398,10 @@ async function runCapxulEffect(effect, controls, operation = CAPXUL_OPERATIONS.r
 		yield* (outcome === "failed" ? Effect.logError("capxul_sdk_operation") : Effect.logInfo("capxul_sdk_operation")).pipe(Effect.annotateLogs(completion), Effect.catchCause(() => Effect.void));
 		return yield* Exit.isSuccess(exit) ? Effect.succeed(exit.value) : Effect.failCause(exit.cause);
 	}).pipe(Effect.withSpan(operation)), controls));
-	return !result.ok && invocation !== void 0 ? markFailureInvocationSnapshot(result, invocation) : result;
+	return !result.ok && invocation !== void 0 ? markFailureInvocationSnapshot(result, {
+		...invocation,
+		...owningSpan === void 0 ? {} : { owningSpan }
+	}) : result;
 }
 /** Map machine-internal failure state onto the public SDK error vocabulary. */
 function publicIdentityFailure(failure) {
@@ -11559,7 +11568,7 @@ const moneyExecutionContract = {
 };
 //#endregion
 //#region ../../packages/sdk/package.json
-var version$1 = "4.1.2";
+var version$1 = "4.1.4";
 //#endregion
 //#region ../../packages/sdk/src/telemetry/exception-projection.ts
 /** Fixed fallback for failures that have no safe message. */
@@ -11698,7 +11707,8 @@ function report(adapter, kind, operation, cause, invocation, origin, authoritati
 	}, {
 		active: invocation.active,
 		...invocation.actorId === void 0 ? {} : { actorId: invocation.actorId },
-		...context === void 0 ? {} : { context }
+		...context === void 0 ? {} : { context },
+		...invocation.owningSpan === void 0 ? {} : { owningSpan: invocation.owningSpan }
 	});
 	try {
 		ignoreDeliveryFailure(kind === "operation" ? adapter.captureOperationFailure(failure) : adapter.captureException(failure));
@@ -12421,8 +12431,18 @@ function parsePaymentRequestKeyState(value) {
 	if (typeof state.key !== "string" || !Array.isArray(state.active) || state.active.some((attempt) => typeof attempt !== "string") || typeof state.resolved !== "boolean") throw new TypeError("Invalid payment request key state");
 	return state;
 }
-async function paymentRequestKeyLifecycle(operation, intent, provided) {
-	if (provided !== void 0) return {
+/** A persisted caller key cannot displace another unresolved or active intent. */
+function managedRequestKeyState(state, provided, hasActiveAttempt) {
+	if (provided === void 0 || state.key === provided) return state;
+	if (!state.resolved || hasActiveAttempt) throw Errors.invalidInput("requestKey", "another request key is unresolved");
+	return {
+		key: provided,
+		active: [],
+		resolved: false
+	};
+}
+async function paymentRequestKeyLifecycle(operation, intent, provided, options) {
+	if (provided !== void 0 && options?.manageProvidedKey !== true) return {
 		key: provided,
 		finish: async () => void 0
 	};
@@ -12435,11 +12455,12 @@ async function paymentRequestKeyLifecycle(operation, intent, provided) {
 		})}`;
 		if (typeof window === "undefined") {
 			const attemptId = randomPaymentRequestKey();
-			const state = memoryPaymentRequestKeys.get(slot) ?? {
-				key: randomPaymentRequestKey(),
+			let state = memoryPaymentRequestKeys.get(slot) ?? {
+				key: provided ?? randomPaymentRequestKey(),
 				active: [],
 				resolved: false
 			};
+			state = managedRequestKeyState(state, provided, state.active.length > 0);
 			state.active.push(attemptId);
 			memoryPaymentRequestKeys.set(slot, state);
 			let finished = false;
@@ -12463,14 +12484,15 @@ async function paymentRequestKeyLifecycle(operation, intent, provided) {
 		const key = await manager.request(slot, async () => {
 			const stored = window.localStorage.getItem(slot);
 			let state = stored === null ? {
-				key: randomPaymentRequestKey(),
+				key: provided ?? randomPaymentRequestKey(),
 				active: [],
 				resolved: false
 			} : parsePaymentRequestKeyState(stored);
 			const registered = state.active.includes(attemptId);
 			const active = await heldPaymentAttemptIds(manager, slot);
+			state = managedRequestKeyState(state, provided, active.some((id) => id !== attemptId));
 			if (!registered && active.every((id) => id === attemptId) && state.resolved) state = {
-				key: randomPaymentRequestKey(),
+				key: provided ?? randomPaymentRequestKey(),
 				active: [],
 				resolved: false
 			};
@@ -43907,21 +43929,54 @@ function executionDependencies(deps) {
 		signer: deps.signer
 	};
 }
+/** Read only the exact backend prepare receipt, never an arbitrary signer failure. */
+function payrollResolution(error, requestKey) {
+	const details = error.details;
+	if (error.code !== "WRONG_STATE" || details?.method !== AUTHORIZE_RUN || details.requestKey !== requestKey || typeof details.commandId !== "string" || typeof details.runId !== "string") return void 0;
+	return details.payrollResolution === "failed" || details.payrollResolution === "settled" ? details.payrollResolution : void 0;
+}
 function makePayrollMethods(deps, orgId) {
 	const requestKeyScope = deps.requestKeyScope ?? `client-${crypto.randomUUID()}`;
-	async function authorize(input, controls) {
+	async function authorize(input, controls, onRequestKey, onResolved) {
 		const signal = controls?.signal;
 		const execution = executionDependencies(deps);
 		if (execution === null) return {
 			ok: false,
 			error: Errors.notImplemented("payroll", "executionComposition")
 		};
-		const requestKey = await paymentRequestKeyLifecycle(`${requestKeyScope}:${AUTHORIZE_RUN}`, {
+		const { requestKey: provided, ...canonicalInput } = input;
+		const actorId = onRequestKey === void 0 ? void 0 : execution.actor.authSession()?.authUserId;
+		if (onRequestKey !== void 0 && actorId === void 0) return {
+			ok: false,
+			error: Errors.notAuthenticated()
+		};
+		const requestKey = await paymentRequestKeyLifecycle(`${requestKeyScope}:${AUTHORIZE_RUN}`, onRequestKey === void 0 ? {
 			orgId,
 			input
-		}, input.requestKey);
+		} : {
+			actorId,
+			orgId,
+			input: canonicalInput
+		}, provided, onRequestKey === void 0 ? void 0 : { manageProvidedKey: true });
+		try {
+			await onRequestKey?.(requestKey.key);
+			if (onRequestKey !== void 0 && execution.actor.authSession()?.authUserId !== actorId) {
+				await requestKey.finish(false).catch(() => void 0);
+				return {
+					ok: false,
+					error: Errors.notAuthenticated()
+				};
+			}
+		} catch (cause) {
+			await requestKey.finish(false).catch(() => void 0);
+			return {
+				ok: false,
+				error: cause instanceof CapxulError ? cause : Errors.unknown(cause)
+			};
+		}
 		let authorized;
 		let preparedClosed = false;
+		let terminalReplay;
 		const submitted = await executePrepared(execution, async (signerAddress) => {
 			const prepared = await runIfActive(signal, AUTHORIZE_RUN, () => withInvocationParentSpan(Effect.suspend(() => deps.convexCall.action(payrollContract.authorizeRun, copyInvocationObservation(controls, { input: {
 				orgId,
@@ -43931,7 +43986,10 @@ function makePayrollMethods(deps, orgId) {
 				period: input.period,
 				items: input.items
 			} }))), controls), deps.runPromise);
-			if (!prepared.ok) return prepared;
+			if (!prepared.ok) {
+				terminalReplay = payrollResolution(prepared.error, requestKey.key);
+				return prepared;
+			}
 			authorized = prepared.value.run;
 			return {
 				ok: true,
@@ -43944,8 +44002,12 @@ function makePayrollMethods(deps, orgId) {
 			runId: authorized.id,
 			items: input.items
 		})(request), true, () => preparedClosed = true, signal, controls);
+		const resolution = preparedClosed ? "failed" : terminalReplay;
+		if (resolution !== void 0) try {
+			await onResolved?.(resolution);
+		} catch {}
 		try {
-			await requestKey.finish(submitted.ok || preparedClosed);
+			await requestKey.finish(submitted.ok || resolution !== void 0);
 		} catch {}
 		if (!submitted.ok) return submitted;
 		return authorized === void 0 ? {
@@ -43967,7 +44029,7 @@ function makePayrollMethods(deps, orgId) {
 				if (controls?.signal?.aborted === true) return yield* Effect.fail(Errors.cancelled({ operation: AUTHORIZE_RUN }));
 				const parent = yield* Effect.currentSpan.pipe(Effect.orDie);
 				const result = yield* Effect.tryPromise({
-					try: () => authorize(input, carryInvocationParentSpan(controls, parent)),
+					try: () => authorize(input, carryInvocationParentSpan(controls, parent), options?.onRequestKey, options?.onResolved),
 					catch: (cause) => cause instanceof CapxulError ? cause : Errors.unknown(cause)
 				});
 				return yield* result.ok ? Effect.succeed(result.value) : Effect.fail(result.error);
@@ -46653,7 +46715,7 @@ function stdioIdentity(env = process.env, options = {}) {
 }
 //#endregion
 //#region package.json
-var version = "4.1.2";
+var version = "4.1.4";
 //#endregion
 //#region src/deps.ts
 const NO_IDENTITY = async () => void 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/mcp",
-  "version": "4.1.2",
+  "version": "4.1.4",
   "private": false,
   "description": "Capxul MCP server for auth, Account readiness, identity, Organizations, relationships, requests, destinations, and testnet funding over Streamable HTTP.",
   "keywords": [
@@ -51,7 +51,7 @@
     "vite": "npm:@voidzero-dev/vite-plus-core@0.3.0",
     "vite-plus": "0.3.0",
     "@capxul/config": "0.3.0",
-    "@capxul/sdk": "4.1.2",
+    "@capxul/sdk": "4.1.4",
     "@capxul/typescript-config": "0.0.0"
   },
   "scripts": {