@capxul/mcp 4.2.0-rc.3 → 4.2.0-rc.5

package/dist/capxul-source.json

@@ -1,11 +1,11 @@
 {
   "source": {
-    "commit": "4547e113caca6cf936b489dda3c22c68ea2f30d8",
-    "tree": "6ccaeaf77b6d8fef28eacd312d0b884a383c502f",
+    "commit": "72be9c2d5c9b2dcdd27fa5c5acb22163ddec5c44",
+    "tree": "1529290d3427ecf12fece6ff70fbea35b077b6a9",
     "branch": "codex/programme-rc",
     "repository": "https://github.com/Xelmar-tech/infrastructure",
     "lockfileSha256": "5870f53b72706d103220c1bcf733cb4fb71196aea32a9cfbdc277d73cc959264"
   },
   "name": "@capxul/mcp",
-  "version": "4.2.0-rc.3"
+  "version": "4.2.0-rc.5"
 }

package/dist/main.mjs

@@ -3738,6 +3738,12 @@ const USDX_BASE_SEPOLIA_TOKEN = {
 USDX_BASE_SEPOLIA_TOKEN.chainId;
 USDX_BASE_SEPOLIA_TOKEN.chainId;
 10n ** BigInt(6);
+/**
+* The bootstrap manage role. It administers people and roles, cannot spend,
+* and is not a signer of the Organization Safe; "Owner" implied the latter,
+* so the label is Admin (ruled 2026-09-06).
+*/
+const ADMIN_ROLE_LABEL = "Admin";
 function normalizeOrgRoleLabel(label) {
 	const normalized = label.trim().replace(/\s+/g, " ");
 	if (normalized.length === 0) throw Errors.invalidInput("role.label", "must be a non-empty role label");
@@ -7658,10 +7664,24 @@ const DepositSettledProps = Schema.Struct({
 });
 const PermissionMirrorVerificationProps = Schema.Struct({
 	...TelemetryEnvelopeProps,
+	/** The RECEIPT verification outcome. What the mirror then did is separate. */
 	outcome: Schema.String,
 	reason: Schema.String,
 	chain_id: Schema.Number,
-	retry_count: Schema.Number
+	retry_count: Schema.Number,
+	/**
+	* #1960 R02, consumed by R03. A verified receipt is not an applied Permission:
+	* these two optional fields let the producer say what the applying mutation
+	* actually returned, and which command it was, without either fact rewriting
+	* the receipt outcome above. Absent when application has not happened yet.
+	*/
+	application_result: Schema.optional(Schema.Literals([
+		"applied",
+		"replayed",
+		"conflicting_replay",
+		"revision_mismatch"
+	])),
+	command_id: OptionalString
 });
 const MovementScanWindowProps = Schema.Struct({
 	...TelemetryEnvelopeProps,
@@ -7887,6 +7907,10 @@ Schema.Struct({
 	name: Schema.Literal("movement_scan_incident"),
 	props: MovementScanIncidentProps
 });
+/** The one spelling of "whose scope did this happen in" across every surface. */
+const ScopeKindSchema = Schema.Literals(["account", "organization"]);
+const AccountKindSchema = Schema.Literals(["personalSafe", "orgTreasury"]);
+const OptionalReasonCode = Schema.optional(Schema.Literals(CAPXUL_ERROR_CODES));
 const ActivityReferenceProps = {
 	reference_kind: Schema.Literals(["payment", "movement"]),
 	reference_id: Schema.String
@@ -7917,8 +7941,8 @@ const ActivityFilterProps = {
 };
 const ActivityActionProps = {
 	...TelemetryEnvelopeProps,
-	scope_kind: Schema.Literals(["account", "organization"]),
-	reason_code: Schema.optional(Schema.Literals(CAPXUL_ERROR_CODES))
+	scope_kind: ScopeKindSchema,
+	reason_code: OptionalReasonCode
 };
 Schema.Struct({
 	name: Schema.Literal("contact_relationship_changed"),
@@ -7930,7 +7954,7 @@ Schema.Struct({
 			"hidden",
 			"restored"
 		]),
-		scope_kind: Schema.Literals(["account", "organization"]),
+		scope_kind: ScopeKindSchema,
 		scope_id: Schema.String,
 		owner_party_id: Schema.String,
 		party_id: Schema.String,
@@ -7946,9 +7970,9 @@ Schema.Struct({
 });
 const ContactActionProps = {
 	...TelemetryEnvelopeProps,
-	scope_kind: Schema.Literals(["account", "organization"]),
+	scope_kind: ScopeKindSchema,
 	party_id: OptionalString,
-	reason_code: Schema.optional(Schema.Literals(CAPXUL_ERROR_CODES))
+	reason_code: OptionalReasonCode
 };
 Schema.Struct({
 	name: Schema.Literal("ui_contact_action_completed"),
@@ -7975,7 +7999,7 @@ Schema.Struct({
 	props: Schema.Struct({
 		...TelemetryEnvelopeProps,
 		...ActivityReferenceProps,
-		scope_kind: Schema.Literals(["account", "organization"]),
+		scope_kind: ScopeKindSchema,
 		scope_id: Schema.String,
 		occurred_at: Schema.Number
 	})
@@ -8030,6 +8054,193 @@ Schema.Struct({
 		})
 	])
 });
+/**
+* Reliability closeout (#1960 R02) — the shape every explicit UI observation
+* below shares. `scope_kind` says whose surface the person was looking at,
+* `organization_id` is the verified Organization the producer resolved (absent
+* on a personal action), and `reason_code` is a catalog error code, never copy.
+*/
+const UiStepProps = {
+	...TelemetryEnvelopeProps,
+	scope_kind: ScopeKindSchema,
+	organization_id: OptionalOrgId,
+	reason_code: OptionalReasonCode
+};
+const AccessRecoveryCompletedProps = Schema.Union([Schema.Struct({
+	...TelemetryEnvelopeProps,
+	recovery: Schema.Literal("session_restoration"),
+	outcome: Schema.Literals([
+		"restored",
+		"absent",
+		"failed"
+	]),
+	reason_code: OptionalReasonCode,
+	organization_id: OptionalOrgId
+}), Schema.Struct({
+	...TelemetryEnvelopeProps,
+	recovery: Schema.Literal("signer_readiness"),
+	outcome: Schema.Literals(["ready", "unavailable"]),
+	reason_code: OptionalReasonCode,
+	organization_id: OptionalOrgId
+})]);
+Schema.Struct({
+	name: Schema.Literal("access_recovery_completed"),
+	props: AccessRecoveryCompletedProps
+});
+Schema.Struct({
+	name: Schema.Literal("ui_access_step_completed"),
+	props: Schema.Struct({
+		...UiStepProps,
+		step: Schema.Literals([
+			"dashboard_granted",
+			"redirect_completed",
+			"gate_error_displayed",
+			"retry_selected",
+			"capability_refusal_displayed",
+			"signer_refusal_displayed"
+		]),
+		capability: Schema.optional(Schema.Literals(["spend", "managePeople"])),
+		probe: Schema.optional(Schema.Literals([
+			"session",
+			"membership",
+			"lifecycle"
+		])),
+		reason: Schema.optional(Schema.Literals([
+			"loading",
+			"no-permission",
+			"org-unavailable"
+		]))
+	})
+});
+Schema.Struct({
+	name: Schema.Literal("org_invite_progressed"),
+	props: Schema.Struct({
+		...TelemetryEnvelopeProps,
+		organization_id: OrgIdTelemetrySchema,
+		progress: Schema.Literals([
+			"account_ready",
+			"permission_applied",
+			"membership_activated",
+			"revoked"
+		]),
+		/** The invited Party. The initiating actor stays on the envelope's identity. */
+		member_party_id: Schema.String,
+		occurred_at: Schema.Number
+	})
+});
+Schema.Struct({
+	name: Schema.Literal("invoice_issued"),
+	props: Schema.Struct({
+		...TelemetryEnvelopeProps,
+		request_id: Schema.String,
+		issuer_scope_kind: ScopeKindSchema,
+		issuer_scope_id: Schema.String,
+		payer_party_id: OptionalString,
+		occurred_at: Schema.Number
+	})
+});
+Schema.Struct({
+	name: Schema.Literal("invoice_request_transitioned"),
+	props: Schema.Struct({
+		...TelemetryEnvelopeProps,
+		request_id: Schema.String,
+		transition: Schema.Literals([
+			"approval_prepared",
+			"declined",
+			"cancelled"
+		]),
+		actor_scope_kind: ScopeKindSchema,
+		actor_scope_id: Schema.String,
+		occurred_at: Schema.Number
+	})
+});
+Schema.Struct({
+	name: Schema.Literal("ui_invoice_step_completed"),
+	props: Schema.Struct({
+		...UiStepProps,
+		step: Schema.Literals([
+			"opened",
+			"previewed",
+			"dismissed",
+			"submitted",
+			"result_displayed",
+			"refusal_displayed",
+			"retry_selected"
+		]),
+		request_id: OptionalString
+	})
+});
+Schema.Struct({
+	name: Schema.Literal("ui_treasury_step_completed"),
+	props: Schema.Struct({
+		...UiStepProps,
+		step: Schema.Literals([
+			"balance_displayed",
+			"read_refusal_displayed",
+			"retry_selected",
+			"recovery_completed"
+		]),
+		account_kind: Schema.optional(AccountKindSchema)
+	})
+});
+Schema.Struct({
+	name: Schema.Literal("ui_receive_step_completed"),
+	props: Schema.Struct({
+		...UiStepProps,
+		step: Schema.Literals([
+			"instructions_displayed",
+			"address_copied",
+			"copy_failed",
+			"refusal_displayed",
+			"retry_selected"
+		]),
+		account_kind: Schema.optional(AccountKindSchema)
+	})
+});
+Schema.Struct({
+	name: Schema.Literal("payroll_group_changed"),
+	props: Schema.Struct({
+		...TelemetryEnvelopeProps,
+		organization_id: OrgIdTelemetrySchema,
+		change: Schema.Literals([
+			"created",
+			"updated",
+			"deleted"
+		]),
+		group_id: Schema.String,
+		member_count: Schema.Number,
+		occurred_at: Schema.Number
+	})
+});
+Schema.Struct({
+	name: Schema.Literal("payroll_run_transitioned"),
+	props: Schema.Struct({
+		...TelemetryEnvelopeProps,
+		organization_id: OrgIdTelemetrySchema,
+		transition: Schema.Literals([
+			"prepared",
+			"authorized",
+			"settled"
+		]),
+		run_id: Schema.String,
+		payment_count: Schema.optional(Schema.Number),
+		occurred_at: Schema.Number
+	})
+});
+Schema.Struct({
+	name: Schema.Literal("ui_payroll_action_completed"),
+	props: Schema.Struct({
+		...UiStepProps,
+		action: Schema.Literals([
+			"opened",
+			"refusal_displayed",
+			"recovery_completed",
+			"cancelled",
+			"submitted_displayed"
+		]),
+		run_id: OptionalString
+	})
+});
 function redactTelemetryProps(name, props, options = {}) {
 	if (props === void 0) return void 0;
 	const clone = cloneProps$1(props);
@@ -8447,7 +8658,8 @@ const CAPXUL_FUNCTIONS = {
 		listMine: "org/queries:listMine",
 		listRolesByOrgId: "org/queries:listRolesByOrgId",
 		loadByOrgId: "org/queries:loadByOrgId",
-		me: "org/queries:me"
+		me: "org/queries:me",
+		pendingSetup: "org/queries:pendingSetup"
 	},
 	"smartAccount/actions": {
 		claim: "smartAccount/actions:claim",
@@ -12046,7 +12258,7 @@ const moneyExecutionContract = {
 };
 //#endregion
 //#region ../../packages/sdk/package.json
-var version$1 = "4.2.0-rc.3";
+var version$1 = "4.2.0-rc.5";
 //#endregion
 //#region ../../packages/sdk/src/telemetry/exception-projection.ts
 /** Fixed fallback for failures that have no safe message. */
@@ -12219,6 +12431,34 @@ function ignoreDeliveryFailure(delivery) {
 		Promise.resolve(delivery).catch(() => void 0);
 	} catch {}
 }
+/**
+* Fold a caller-captured attempt identity into the host's resolved context.
+*
+* The host's `resolveContext` runs at the moment an SDK method is entered, so a
+* host that mints a correlation per resolve gives every operation of one user
+* attempt a different identity — and a user or Organization switch between the
+* click and the reply relabels an action that already started. When the caller
+* captured `correlation_id`/`journey_id` BEFORE the action started, that is the
+* attempt, and it replaces what the resolver returned for this one call. The
+* result is what the SDK span/Log, the failure envelope and the backend carrier
+* all read, so the three agree by construction rather than by convention.
+*
+* A caller that captured nothing gets the resolver's context unchanged, so
+* automatic reads keep their own invocation context.
+*/
+function withCapturedAttemptContext(context, controls) {
+	const correlationId = controls?.correlation_id;
+	const journeyId = controls?.journey_id;
+	if (correlationId === void 0 && journeyId === void 0) return context;
+	const captured = sanitizeObservationContext({
+		...correlationId === void 0 ? {} : { correlationId },
+		...journeyId === void 0 ? {} : { journeyId }
+	});
+	return captured === void 0 ? context : {
+		...context,
+		...captured
+	};
+}
 const MAX_EVIDENCE_TEXT = 4e3;
 const MAX_CAUSE_DEPTH = 8;
 function evidenceText(value) {
@@ -14445,7 +14685,8 @@ var BetterAuthBrowserAdapter = class {
 		try {
 			const res = await this.fetchImpl(this.url("/api/auth/get-session"), withSignal$1({
 				method: "GET",
-				credentials: "include"
+				credentials: "include",
+				cache: "no-store"
 			}, options?.signal));
 			if (options?.signal?.aborted) return {
 				ok: false,
@@ -14517,7 +14758,8 @@ var BetterAuthBrowserAdapter = class {
 		try {
 			const res = await this.fetchImpl(this.url("/api/auth/convex/token"), withSignal$1({
 				method: "GET",
-				credentials: "include"
+				credentials: "include",
+				cache: "no-store"
 			}, options?.signal));
 			if (options?.signal?.aborted) return {
 				ok: false,
@@ -18966,6 +19208,7 @@ function orgIdBody(orgId) {
 //#region ../../packages/sdk/src/adapters/org/ConvexOrganizationAdapter.ts
 const DEFAULT_FUNCTIONS$1 = {
 	listAll: makeFunctionReference(CAPXUL_FUNCTIONS["org/queries"].listAll),
+	pendingSetup: makeFunctionReference(CAPXUL_FUNCTIONS["org/queries"].pendingSetup),
 	listRoles: makeFunctionReference(CAPXUL_FUNCTIONS["org/queries"].listRolesByOrgId),
 	listMembers: makeFunctionReference(CAPXUL_FUNCTIONS["org/queries"].listMembersByOrgId),
 	readTreasury: makeFunctionReference(CAPXUL_FUNCTIONS["org/actions"].readTreasury),
@@ -19001,6 +19244,9 @@ var ConvexOrganizationAdapter = class {
 			return brandOrgView(wire, treasury, viewerRole);
 		})))), Effect.catchDefect((cause) => Effect.fail(toOrgError("listOrgs", cause))));
 	}
+	pendingSetup(input) {
+		return this.#convex.query(this.#fns.pendingSetup, copyInvocationObservation(input, {})).pipe(Effect.mapError((error) => orgErrorFromCapxul("pendingSetup", error.publicError, error)), Effect.map((wire) => wire === null ? null : { orgId: toOrgId(wire.orgId) }), Effect.catchDefect((cause) => Effect.fail(toOrgError("pendingSetup", cause))));
+	}
 	readTreasury(input) {
 		return this.#readTreasuryWire(input).pipe(Effect.catchDefect((cause) => Effect.fail(toOrgError("readTreasury", cause))));
 	}
@@ -19418,6 +19664,32 @@ var ConsoleDiagnosticAdapter = class {
 	}
 };
 //#endregion
+//#region ../../packages/sdk/src/adapters/diagnostic/EffectLogDiagnosticAdapter.ts
+/**
+* Diagnostic breadcrumbs as SDK log records. The signer's readiness cycle
+* traces (`openfort.*`) used to reach only the browser console; through this
+* adapter they run in the client's own Effect context, so the engineering
+* telemetry layer ships them to PostHog Logs beside `identity.transition`.
+* Logging never throws back into the cycle that emitted it.
+*/
+var EffectLogDiagnosticAdapter = class {
+	#runPromise;
+	#console;
+	constructor(context, consoleFallback) {
+		this.#runPromise = Effect.runPromiseWith(context);
+		this.#console = consoleFallback;
+	}
+	trace(scope, detail) {
+		this.#console?.trace(scope, detail);
+		try {
+			this.#runPromise(Effect.logInfo(scope).pipe(Effect.annotateLogs({
+				...detail,
+				diagnostic_scope: scope
+			}), Effect.catchCause(() => Effect.void))).catch(() => void 0);
+		} catch {}
+	}
+};
+//#endregion
 //#region ../../node_modules/.pnpm/axios@1.17.0/node_modules/axios/lib/helpers/bind.js
 /**
 * Create a bound version of a function with a specified `this` context
@@ -42502,9 +42774,28 @@ function createOpenfortBrowserSignerFromBootstrap(bootstrap, options = {}) {
 	function encryptionSessionUrl() {
 		return `${authBaseUrl}/encryption-session`;
 	}
+	let cycleStartedAt = null;
+	let stepStartedAt = 0;
+	let tokenCalls = 0;
+	const sinceCycleStart = () => cycleStartedAt === null ? void 0 : Date.now() - cycleStartedAt;
+	const step = (name, extra = {}) => {
+		const now = Date.now();
+		diagnostic?.trace("openfort.step", {
+			step: name,
+			duration_ms: now - stepStartedAt,
+			elapsed_ms: sinceCycleStart(),
+			...extra
+		});
+		stepStartedAt = now;
+	};
 	async function fetchBetterAuthAccessToken() {
+		tokenCalls += 1;
+		const tokenStartedAt = Date.now();
 		try {
-			const response = await fetch(betterAuthSessionUrl(), { credentials: "include" });
+			const response = await fetch(betterAuthSessionUrl(), {
+				credentials: "include",
+				cache: "no-store"
+			});
 			if (!response.ok) {
 				diagnostic?.trace("openfort.token", {
 					ok: false,
@@ -42525,7 +42816,10 @@ function createOpenfortBrowserSignerFromBootstrap(bootstrap, options = {}) {
 			}
 			diagnostic?.trace("openfort.token", {
 				ok: true,
-				tokenPresent: true
+				tokenPresent: true,
+				call: tokenCalls,
+				duration_ms: Date.now() - tokenStartedAt,
+				elapsed_ms: sinceCycleStart()
 			});
 			return token;
 		} catch (cause) {
@@ -42581,10 +42875,16 @@ function createOpenfortBrowserSignerFromBootstrap(bootstrap, options = {}) {
 	let walletReadyPromise = null;
 	function startWalletReady() {
 		return (async () => {
+			const startedAt = Date.now();
+			cycleStartedAt = startedAt;
+			stepStartedAt = startedAt;
+			tokenCalls = 0;
 			if (isInsecureBrowserContext()) failNoSecureContext();
 			await openfort.waitForInitialization();
+			step("initialize");
 			const accessToken = await fetchBetterAuthAccessToken();
 			if (accessToken === null) throw openfortProviderError("token", /* @__PURE__ */ new Error("Better Auth access token unavailable for Openfort"));
+			step("token");
 			let encryptionResponse;
 			try {
 				encryptionResponse = await fetch(encryptionSessionUrl(), {
@@ -42627,10 +42927,12 @@ function createOpenfortBrowserSignerFromBootstrap(bootstrap, options = {}) {
 				ok: true,
 				httpStatus: encryptionResponse.status
 			});
+			step("encryptionSession", { httpStatus: encryptionResponse.status });
 			let embeddedState;
 			try {
 				embeddedState = await openfort.embeddedWallet.getEmbeddedState();
 				diagnostic?.trace("openfort.embeddedState", { state: embeddedState });
+				step("embeddedState", { state: embeddedState });
 			} catch (cause) {
 				diagnostic?.trace("openfort.embeddedState", {
 					ok: false,
@@ -42644,6 +42946,7 @@ function createOpenfortBrowserSignerFromBootstrap(bootstrap, options = {}) {
 				try {
 					await configureEmbeddedWallet(encryptionBody.sessionId);
 					diagnostic?.trace("openfort.configure", { ok: true });
+					step("configure");
 				} catch (cause) {
 					const error = openfortProviderError("configure", cause);
 					diagnostic?.trace("openfort.configure", {
@@ -42656,6 +42959,7 @@ function createOpenfortBrowserSignerFromBootstrap(bootstrap, options = {}) {
 			try {
 				await openfort.embeddedWallet.get();
 				diagnostic?.trace("openfort.get", { ok: true });
+				step("get");
 			} catch (cause) {
 				if (!isStaleUserSignal(cause)) {
 					diagnostic?.trace("openfort.get", {
@@ -42669,7 +42973,13 @@ function createOpenfortBrowserSignerFromBootstrap(bootstrap, options = {}) {
 					failure_mode: "stale-openfort-cache"
 				});
 				await healStaleOpenfortCache(encryptionBody.sessionId);
+				step("healStaleCache");
 			}
+			step("walletReady", {
+				ok: true,
+				total_ms: Date.now() - startedAt,
+				token_calls: tokenCalls
+			});
 		})();
 	}
 	async function ensureOpenfortWalletReady() {
@@ -42752,9 +43062,13 @@ function createOpenfortBrowserSignerFromBootstrap(bootstrap, options = {}) {
 		statusStore,
 		ensureWalletReady: ensureOpenfortWalletReady,
 		getAddress: async () => {
+			const addressStartedAt = Date.now();
 			try {
 				const address = await signer.getAddress();
-				diagnostic?.trace("openfort.address", { ok: true });
+				diagnostic?.trace("openfort.address", {
+					ok: true,
+					duration_ms: Date.now() - addressStartedAt
+				});
 				return address;
 			} catch (cause) {
 				diagnostic?.trace("openfort.address", {
@@ -44917,7 +45231,7 @@ function hermeticOrgView(input) {
 		name: input.name,
 		handle: input.handle,
 		safeAddress: toAddress(placeholder),
-		role: "Owner",
+		role: ADMIN_ROLE_LABEL,
 		treasury: zeroTreasury(orgId),
 		bio: null,
 		size: null,
@@ -45713,6 +46027,43 @@ function startSignerReadinessOnClaim(actor, signer) {
 		browserSigner.ensureWalletReady?.().catch(() => {});
 	});
 }
+/**
+* Attach a pending Organization when the identity becomes claimed.
+*
+* A reload during Organization setup used to leave the app re-submitting the
+* stored draft, and that second submission raced the controller's resume on
+* `ReadSession` — the loser was refused with `SUPERSEDED`. The backend already
+* knows the truth: `pendingSetup()` reports the owner's Organization whose
+* setup has not finished. The SDK asks once per authenticated user and sends
+* `AttachOrganization`, which the identity flow runs as `orgLane(…, attach)`.
+* The app then re-submits nothing.
+*
+* The read is fire-and-forget, as the signer readiness cycle is: a failure is
+* swallowed and the ask is released, so the next state change retries. The ask
+* is held to ONE per authUserId, so the claimed transitions that follow (the
+* org lane's own) start no second read, and a new session asks again.
+*/
+function attachPendingOrganizationOnClaim(actor, organizationPort) {
+	const pendingSetup = organizationPort?.pendingSetup?.bind(organizationPort);
+	if (pendingSetup === void 0) return () => {};
+	let askedFor = null;
+	return actor.subscribe((state) => {
+		if (state.phase !== "authenticated" || state.account.at !== "claimed") return;
+		if (state.account.org !== null) return;
+		const authUserId = state.session.authUserId;
+		if (askedFor === authUserId) return;
+		askedFor = authUserId;
+		Effect.runPromise(pendingSetup({})).then((pending) => {
+			if (pending === null) return;
+			return Effect.runPromise(actor.ask({
+				_tag: "AttachOrganization",
+				orgId: String(pending.orgId)
+			}));
+		}).catch(() => {
+			askedFor = null;
+		});
+	});
+}
 function assembleCapxulClient(input) {
 	const observation = input;
 	const authCache = input.authCache ?? detectAuthCacheAdapter();
@@ -45742,18 +46093,20 @@ function assembleCapxulClient(input) {
 		}, failureObservation, normalizeCapxulOperation(`identity.${record.event}`), "machine");
 	});
 	const unsubscribeSignerReadiness = startSignerReadinessOnClaim(actor, input.signer);
+	const selectedOrgPort = input.orgPort ?? input.orgDeploymentPort;
+	const unsubscribePendingOrganization = attachPendingOrganizationOnClaim(actor, selectedOrgPort);
 	let stopPromise = null;
 	const stopActor = () => {
 		if (stopPromise === null) {
 			unsubscribeProductTelemetry();
 			unsubscribeFailureObservation();
 			unsubscribeSignerReadiness();
+			unsubscribePendingOrganization();
 			stopPromise = effectRunner.runPromise(Scope.close(scope, Exit.void));
 		}
 		return stopPromise;
 	};
 	if (input.signal !== void 0) input.signal.addEventListener("abort", () => void stopActor(), { once: true });
-	const selectedOrgPort = input.orgPort ?? input.orgDeploymentPort;
 	let detectPendingOrgInvitations;
 	let kickProvisioning;
 	const financialOps = makeFinancialOpsMethods({
@@ -45793,10 +46146,13 @@ function assembleCapxulClient(input) {
 		...input.invokeTimeoutMs === void 0 ? {} : { invokeTimeoutMs: input.invokeTimeoutMs },
 		afterVerifyOtp: async () => {
 			const browserSigner = input.signer;
-			if (browserSigner !== void 0 && "resetSession" in browserSigner && typeof browserSigner.resetSession === "function") try {
-				browserSigner.resetSession();
-			} catch (cause) {
-				throw signerFailure(browserSigner.source, "resetSession", cause);
+			if (browserSigner !== void 0 && "resetSession" in browserSigner && typeof browserSigner.resetSession === "function") {
+				try {
+					browserSigner.resetSession();
+				} catch (cause) {
+					throw signerFailure(browserSigner.source, "resetSession", cause);
+				}
+				if (browserSigner.statusStore?.status() === "unknown" && typeof browserSigner.ensureWalletReady === "function") browserSigner.ensureWalletReady().catch(() => {});
 			}
 			await detectPendingOrgInvitations?.();
 			kickProvisioning?.();
@@ -46015,8 +46371,10 @@ function withHostObservationControls(snapshot, input, actorId) {
 	const previous = readInvocationObservation(input);
 	if (previous !== void 0) return attachInvocationObservation({ ...input }, previous);
 	const captured = snapshot?.() ?? { active: true };
+	const context = captured.active ? withCapturedAttemptContext(captured.context, input) : captured.context;
 	return attachInvocationObservation({ ...input }, {
 		...captured,
+		...context === void 0 ? {} : { context },
 		...actorId === void 0 ? {} : { actorId }
 	});
 }
@@ -46619,7 +46977,7 @@ async function createCapxulClientWithSignerControls(input, controls) {
 			...adapters.value.bootstrap,
 			authBaseUrl: resolvedAuthBaseUrl
 		}, {
-			diagnostic: new ConsoleDiagnosticAdapter(),
+			diagnostic: new EffectLogDiagnosticAdapter(adapters.value.context, new ConsoleDiagnosticAdapter()),
 			signUserOpHash: controls.signEmbeddedUserOpHash
 		});
 		signer = withSignerControl(signer, controls.signUserOpHash);
@@ -47435,7 +47793,7 @@ function stdioIdentity(env = process.env, options = {}) {
 }
 //#endregion
 //#region package.json
-var version = "4.2.0-rc.3";
+var version = "4.2.0-rc.5";
 //#endregion
 //#region src/deps.ts
 const NO_IDENTITY = async () => void 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/mcp",
-  "version": "4.2.0-rc.3",
+  "version": "4.2.0-rc.5",
   "private": false,
   "description": "Capxul MCP server for auth, Account readiness, identity, Organizations, relationships, requests, destinations, and testnet funding over Streamable HTTP.",
   "keywords": [
@@ -51,8 +51,8 @@
     "vite": "npm:@voidzero-dev/vite-plus-core@0.3.0",
     "vite-plus": "0.3.0",
     "@capxul/config": "0.3.0",
-    "@capxul/sdk": "4.2.0-rc.3",
-    "@capxul/typescript-config": "0.0.0"
+    "@capxul/typescript-config": "0.0.0",
+    "@capxul/sdk": "4.2.0-rc.5"
   },
   "scripts": {
     "dev": "vp exec tsx src/main.ts serve",