@capxul/mcp 4.2.0-rc.4 → 4.2.0-rc.5

package/dist/capxul-source.json

@@ -1,11 +1,11 @@
 {
   "source": {
-    "commit": "400e4b861e8c10091ad2d9e71fc0502fe222a801",
-    "tree": "c3afb8bb5f3ce69ee8aa1e8fbe811fe213627887",
+    "commit": "72be9c2d5c9b2dcdd27fa5c5acb22163ddec5c44",
+    "tree": "1529290d3427ecf12fece6ff70fbea35b077b6a9",
     "branch": "codex/programme-rc",
     "repository": "https://github.com/Xelmar-tech/infrastructure",
     "lockfileSha256": "5870f53b72706d103220c1bcf733cb4fb71196aea32a9cfbdc277d73cc959264"
   },
   "name": "@capxul/mcp",
-  "version": "4.2.0-rc.4"
+  "version": "4.2.0-rc.5"
 }

package/dist/main.mjs

@@ -3738,6 +3738,12 @@ const USDX_BASE_SEPOLIA_TOKEN = {
 USDX_BASE_SEPOLIA_TOKEN.chainId;
 USDX_BASE_SEPOLIA_TOKEN.chainId;
 10n ** BigInt(6);
+/**
+* The bootstrap manage role. It administers people and roles, cannot spend,
+* and is not a signer of the Organization Safe; "Owner" implied the latter,
+* so the label is Admin (ruled 2026-09-06).
+*/
+const ADMIN_ROLE_LABEL = "Admin";
 function normalizeOrgRoleLabel(label) {
 	const normalized = label.trim().replace(/\s+/g, " ");
 	if (normalized.length === 0) throw Errors.invalidInput("role.label", "must be a non-empty role label");
@@ -8652,7 +8658,8 @@ const CAPXUL_FUNCTIONS = {
 		listMine: "org/queries:listMine",
 		listRolesByOrgId: "org/queries:listRolesByOrgId",
 		loadByOrgId: "org/queries:loadByOrgId",
-		me: "org/queries:me"
+		me: "org/queries:me",
+		pendingSetup: "org/queries:pendingSetup"
 	},
 	"smartAccount/actions": {
 		claim: "smartAccount/actions:claim",
@@ -12251,7 +12258,7 @@ const moneyExecutionContract = {
 };
 //#endregion
 //#region ../../packages/sdk/package.json
-var version$1 = "4.2.0-rc.4";
+var version$1 = "4.2.0-rc.5";
 //#endregion
 //#region ../../packages/sdk/src/telemetry/exception-projection.ts
 /** Fixed fallback for failures that have no safe message. */
@@ -14678,7 +14685,8 @@ var BetterAuthBrowserAdapter = class {
 		try {
 			const res = await this.fetchImpl(this.url("/api/auth/get-session"), withSignal$1({
 				method: "GET",
-				credentials: "include"
+				credentials: "include",
+				cache: "no-store"
 			}, options?.signal));
 			if (options?.signal?.aborted) return {
 				ok: false,
@@ -14750,7 +14758,8 @@ var BetterAuthBrowserAdapter = class {
 		try {
 			const res = await this.fetchImpl(this.url("/api/auth/convex/token"), withSignal$1({
 				method: "GET",
-				credentials: "include"
+				credentials: "include",
+				cache: "no-store"
 			}, options?.signal));
 			if (options?.signal?.aborted) return {
 				ok: false,
@@ -19199,6 +19208,7 @@ function orgIdBody(orgId) {
 //#region ../../packages/sdk/src/adapters/org/ConvexOrganizationAdapter.ts
 const DEFAULT_FUNCTIONS$1 = {
 	listAll: makeFunctionReference(CAPXUL_FUNCTIONS["org/queries"].listAll),
+	pendingSetup: makeFunctionReference(CAPXUL_FUNCTIONS["org/queries"].pendingSetup),
 	listRoles: makeFunctionReference(CAPXUL_FUNCTIONS["org/queries"].listRolesByOrgId),
 	listMembers: makeFunctionReference(CAPXUL_FUNCTIONS["org/queries"].listMembersByOrgId),
 	readTreasury: makeFunctionReference(CAPXUL_FUNCTIONS["org/actions"].readTreasury),
@@ -19234,6 +19244,9 @@ var ConvexOrganizationAdapter = class {
 			return brandOrgView(wire, treasury, viewerRole);
 		})))), Effect.catchDefect((cause) => Effect.fail(toOrgError("listOrgs", cause))));
 	}
+	pendingSetup(input) {
+		return this.#convex.query(this.#fns.pendingSetup, copyInvocationObservation(input, {})).pipe(Effect.mapError((error) => orgErrorFromCapxul("pendingSetup", error.publicError, error)), Effect.map((wire) => wire === null ? null : { orgId: toOrgId(wire.orgId) }), Effect.catchDefect((cause) => Effect.fail(toOrgError("pendingSetup", cause))));
+	}
 	readTreasury(input) {
 		return this.#readTreasuryWire(input).pipe(Effect.catchDefect((cause) => Effect.fail(toOrgError("readTreasury", cause))));
 	}
@@ -42779,7 +42792,10 @@ function createOpenfortBrowserSignerFromBootstrap(bootstrap, options = {}) {
 		tokenCalls += 1;
 		const tokenStartedAt = Date.now();
 		try {
-			const response = await fetch(betterAuthSessionUrl(), { credentials: "include" });
+			const response = await fetch(betterAuthSessionUrl(), {
+				credentials: "include",
+				cache: "no-store"
+			});
 			if (!response.ok) {
 				diagnostic?.trace("openfort.token", {
 					ok: false,
@@ -45215,7 +45231,7 @@ function hermeticOrgView(input) {
 		name: input.name,
 		handle: input.handle,
 		safeAddress: toAddress(placeholder),
-		role: "Owner",
+		role: ADMIN_ROLE_LABEL,
 		treasury: zeroTreasury(orgId),
 		bio: null,
 		size: null,
@@ -46011,6 +46027,43 @@ function startSignerReadinessOnClaim(actor, signer) {
 		browserSigner.ensureWalletReady?.().catch(() => {});
 	});
 }
+/**
+* Attach a pending Organization when the identity becomes claimed.
+*
+* A reload during Organization setup used to leave the app re-submitting the
+* stored draft, and that second submission raced the controller's resume on
+* `ReadSession` — the loser was refused with `SUPERSEDED`. The backend already
+* knows the truth: `pendingSetup()` reports the owner's Organization whose
+* setup has not finished. The SDK asks once per authenticated user and sends
+* `AttachOrganization`, which the identity flow runs as `orgLane(…, attach)`.
+* The app then re-submits nothing.
+*
+* The read is fire-and-forget, as the signer readiness cycle is: a failure is
+* swallowed and the ask is released, so the next state change retries. The ask
+* is held to ONE per authUserId, so the claimed transitions that follow (the
+* org lane's own) start no second read, and a new session asks again.
+*/
+function attachPendingOrganizationOnClaim(actor, organizationPort) {
+	const pendingSetup = organizationPort?.pendingSetup?.bind(organizationPort);
+	if (pendingSetup === void 0) return () => {};
+	let askedFor = null;
+	return actor.subscribe((state) => {
+		if (state.phase !== "authenticated" || state.account.at !== "claimed") return;
+		if (state.account.org !== null) return;
+		const authUserId = state.session.authUserId;
+		if (askedFor === authUserId) return;
+		askedFor = authUserId;
+		Effect.runPromise(pendingSetup({})).then((pending) => {
+			if (pending === null) return;
+			return Effect.runPromise(actor.ask({
+				_tag: "AttachOrganization",
+				orgId: String(pending.orgId)
+			}));
+		}).catch(() => {
+			askedFor = null;
+		});
+	});
+}
 function assembleCapxulClient(input) {
 	const observation = input;
 	const authCache = input.authCache ?? detectAuthCacheAdapter();
@@ -46040,18 +46093,20 @@ function assembleCapxulClient(input) {
 		}, failureObservation, normalizeCapxulOperation(`identity.${record.event}`), "machine");
 	});
 	const unsubscribeSignerReadiness = startSignerReadinessOnClaim(actor, input.signer);
+	const selectedOrgPort = input.orgPort ?? input.orgDeploymentPort;
+	const unsubscribePendingOrganization = attachPendingOrganizationOnClaim(actor, selectedOrgPort);
 	let stopPromise = null;
 	const stopActor = () => {
 		if (stopPromise === null) {
 			unsubscribeProductTelemetry();
 			unsubscribeFailureObservation();
 			unsubscribeSignerReadiness();
+			unsubscribePendingOrganization();
 			stopPromise = effectRunner.runPromise(Scope.close(scope, Exit.void));
 		}
 		return stopPromise;
 	};
 	if (input.signal !== void 0) input.signal.addEventListener("abort", () => void stopActor(), { once: true });
-	const selectedOrgPort = input.orgPort ?? input.orgDeploymentPort;
 	let detectPendingOrgInvitations;
 	let kickProvisioning;
 	const financialOps = makeFinancialOpsMethods({
@@ -47738,7 +47793,7 @@ function stdioIdentity(env = process.env, options = {}) {
 }
 //#endregion
 //#region package.json
-var version = "4.2.0-rc.4";
+var version = "4.2.0-rc.5";
 //#endregion
 //#region src/deps.ts
 const NO_IDENTITY = async () => void 0;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/mcp",
-  "version": "4.2.0-rc.4",
+  "version": "4.2.0-rc.5",
   "private": false,
   "description": "Capxul MCP server for auth, Account readiness, identity, Organizations, relationships, requests, destinations, and testnet funding over Streamable HTTP.",
   "keywords": [
@@ -50,9 +50,9 @@
     "typescript": "npm:@typescript/typescript6@6.0.2",
     "vite": "npm:@voidzero-dev/vite-plus-core@0.3.0",
     "vite-plus": "0.3.0",
-    "@capxul/sdk": "4.2.0-rc.4",
     "@capxul/config": "0.3.0",
-    "@capxul/typescript-config": "0.0.0"
+    "@capxul/typescript-config": "0.0.0",
+    "@capxul/sdk": "4.2.0-rc.5"
   },
   "scripts": {
     "dev": "vp exec tsx src/main.ts serve",