@capxul/mcp 4.20.0-beta.30 → 4.20.0-beta.32

package/dist/main.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { i as __exportAll, o as __require, r as __commonJSMin, s as __toESM } from "./lib-DnmstTkB.mjs";
-import { $ as isSignerNotReadySignal, $t as ChainIdSchema, A as makeApprovalsMethods, An as detectAuthCacheAdapter, At as publicKeyToAddress, B as BASE_SEPOLIA_CHAIN_ID, Bn as redactUrlSecrets, Bt as toBytes, C as makeAccountsMethods, Cn as copyInvocationObservation, Ct as toOrgId, D as ConvexCallPortTag, Dn as toPublishableKey, Dt as isBytes32, E as TelemetryPortTag, En as toAllowedOrigin, Et as images, F as makeDestinationsMethods, Fn as AuthCachePortTag, Ft as concatHex, G as failureEvidenceProps, Gn as CapxulError, Gt as hexToBigInt, H as asCapxulError, Hn as isRecord, Ht as numberToHex, I as makeCheckoutMethods, In as deserializeCapxulError, It as isAddress, J as withCapturedAttemptContext, Jn as isFailureMode, Jt as BaseError, K as observeFailedResult, Kn as isCapxulError, Kt as hexToNumber, L as makeTargetsMethods, Ln as serializeCapxulError, Lt as InvalidAddressError, M as logDroppedEvent, Mn as toEpochMs, Mt as createCursor, N as makeOfframpMethods, Nn as toAuthUserId, Nt as slice, O as convexCallErrorFromCapxul, On as AuthClientError, Ot as hashTypedData, P as makePaymentsMethods, Pn as toEmail, Pt as concat, Q as isEcdsaSignatureHex, Qt as EpochMsSchema, Rn as decodeChainCause, Rt as keccak256, S as PonderIndexerAdapter, Sn as attachInvocationObservation, St as ORGANIZATION_SETUP_STATUSES, T as AccountReadPortTag, Tn as sanitizeObservationContext, Tt as AppIdSchema, U as toPublicError, Un as readField, Ut as stringToHex, V as callOperation, Vn as isCredentialField, Vt as bytesToHex, W as failureDetail, Wn as Errors, Wt as toHex, X as UNOBSERVABLE_SIGNER_STATUS, Xt as isHex, Y as version$2, Yt as size, Z as causeChain, Zt as DurationMsSchema, _ as makePaymentDocumentsMethods, _n as SystemClockLayer, _t as OPERATIONS, an as askIdentity, at as toCountryCode, b as SmartAccountPortTag, bn as BetterAuthBrowserLayer, bt as setups, cn as runPortEffect, ct as toHandle, dn as toCapxulResult, dt as CLI_CAPABILITIES, en as isEvmAddress, et as openfortSignerNotReadyCode, fn as formatTraceparent, ft as CLI_COMMAND_NAMES, g as makeActivityMethods, gn as oauthBearerAuthClient, gt as normalizeCapxulOperation, h as makeMeMethods, hn as carryInvocationParentSpan, ht as isCapxulOperation, in as makeAuthMethods, it as makeClientRequestMethods, j as makeAccountMethods, jn as globalLocalStorage, jt as formatGwei$1, k as bindProductTelemetryInvocation, kn as AuthClientPortTag, kt as toRlp, ln as sessionFromActor, lt as validateHandle, m as bootIdentityFlow, mn as ActorFailure, mt as CAPXUL_OPERATIONS, n as makeOrgMethods, nn as absurd, nt as signerFailure, o as ConvexOrganizationAdapter, on as publicIdentityFailure, ot as toKycTier, p as executeIdentityProductObservation, pn as CAPXUL_ERROR_CODES, pt as CLI_INVOCATION_KINDS, q as observeSdkClient, qn as FAILURE_MODES, qt as trim$1, rn as getFunctionName, rt as makeCurrentUserMethods, s as OrgPortTag, sn as runIdentityFacade, st as toTesterKind, t as ConvexOrganizationSetupAdapter, tn as toAddress, tt as recoverRawDigestSigner, un as runCapxulEffect, ut as redactTelemetryProps, v as makeSmartAccountMethods, vn as ClockPortTag, vt as details, w as ConvexAccountLayer, wn as readInvocationObservation, wt as diagnostics, x as makeHoldingsMethods, xn as observationRequestHeaders, xt as ORGANIZATION_SETUP_REASONS, y as ConvexSmartAccountLayer, yn as BetterAuthNodeLayer, yt as onboardings, z as normalizeSafeSaltEmail, zn as redactSecrets, zt as hexToBytes } from "./organizations-CyTR7Lft.mjs";
+import { $ as isSignerNotReadySignal, $t as ChainIdSchema, A as bindProductTelemetryInvocation, An as detectAuthCacheAdapter, At as publicKeyToAddress, B as BASE_SEPOLIA_CHAIN_ID, Bn as redactUrlSecrets, Bt as toBytes, C as PonderIndexerAdapter, Cn as copyInvocationObservation, Ct as toOrgId, D as TelemetryPortTag, Dn as toPublishableKey, Dt as isBytes32, E as AccountReadPortTag, En as toAllowedOrigin, Et as images, F as makeCheckoutMethods, Fn as AuthCachePortTag, Ft as concatHex, G as failureEvidenceProps, Gn as CapxulError, Gt as hexToBigInt, H as asCapxulError, Hn as isRecord, Ht as numberToHex, I as makeTargetsMethods, In as deserializeCapxulError, It as isAddress, J as withCapturedAttemptContext, Jn as isFailureMode, Jt as BaseError, K as observeFailedResult, Kn as isCapxulError, Kt as hexToNumber, L as makeVerificationMethods, Ln as serializeCapxulError, Lt as InvalidAddressError, M as makeAccountMethods, Mn as toEpochMs, Mt as createCursor, N as makePaymentsMethods, Nn as toAuthUserId, Nt as slice, O as ConvexCallPortTag, On as AuthClientError, Ot as hashTypedData, P as makeDestinationsMethods, Pn as toEmail, Pt as concat, Q as isEcdsaSignatureHex, Qt as EpochMsSchema, Rn as decodeChainCause, Rt as keccak256, S as makeHoldingsMethods, Sn as attachInvocationObservation, St as ORGANIZATION_SETUP_STATUSES, T as ConvexAccountLayer, Tn as sanitizeObservationContext, Tt as AppIdSchema, U as toPublicError, Un as readField, Ut as stringToHex, V as callOperation, Vn as isCredentialField, Vt as bytesToHex, W as failureDetail, Wn as Errors, Wt as toHex, X as UNOBSERVABLE_SIGNER_STATUS, Xt as isHex, Y as version$2, Yt as size, Z as causeChain, Zt as DurationMsSchema, _ as makeActivityMethods, _n as SystemClockLayer, _t as OPERATIONS, an as askIdentity, at as toCountryCode, b as ConvexSmartAccountLayer, bn as BetterAuthBrowserLayer, bt as setups, c as OrgPortTag, cn as runPortEffect, ct as toHandle, dn as toCapxulResult, dt as CLI_CAPABILITIES, en as isEvmAddress, et as openfortSignerNotReadyCode, fn as formatTraceparent, ft as CLI_COMMAND_NAMES, g as makeMeMethods, gn as oauthBearerAuthClient, gt as normalizeCapxulOperation, h as bootIdentityFlow, hn as carryInvocationParentSpan, ht as isCapxulOperation, in as makeAuthMethods, it as makeClientRequestMethods, j as makeApprovalsMethods, jn as globalLocalStorage, jt as formatGwei$1, k as convexCallErrorFromCapxul, kn as AuthClientPortTag, kt as toRlp, ln as sessionFromActor, lt as validateHandle, m as executeIdentityProductObservation, mn as ActorFailure, mt as CAPXUL_OPERATIONS, n as makeOrgMethods, nn as absurd, nt as signerFailure, on as publicIdentityFailure, ot as toKycTier, pn as CAPXUL_ERROR_CODES, pt as CLI_INVOCATION_KINDS, q as observeSdkClient, qn as FAILURE_MODES, qt as trim$1, r as makeBankingMethods, rn as getFunctionName, rt as makeCurrentUserMethods, s as ConvexOrganizationAdapter, sn as runIdentityFacade, st as toTesterKind, t as ConvexOrganizationSetupAdapter, tn as toAddress, tt as recoverRawDigestSigner, un as runCapxulEffect, ut as redactTelemetryProps, v as makePaymentDocumentsMethods, vn as ClockPortTag, vt as details, w as makeAccountsMethods, wn as readInvocationObservation, wt as diagnostics, x as SmartAccountPortTag, xn as observationRequestHeaders, xt as ORGANIZATION_SETUP_REASONS, y as makeSmartAccountMethods, yn as BetterAuthNodeLayer, yt as onboardings, z as normalizeSafeSaltEmail, zn as redactSecrets, zt as hexToBytes } from "./organizations-D0q0-iDF.mjs";
 import { n as sha256$2, t as secp256k1 } from "./secp256k1-b-_IancF.mjs";
 import { t as require_lib } from "./lib-CoGPQsbr.mjs";
 import { serveStdio } from "@modelcontextprotocol/server/stdio";
@@ -35,10 +35,13 @@ function readSdkEnvConfig(env = process.env) {
 	if (publishableKey === void 0 || publishableKey.length === 0) throw Errors.envMissing("CAPXUL_MCP_PUBLISHABLE_KEY (or CAPXUL_E2E_PUBLISHABLE_KEY)");
 	const bootstrapBaseUrl = env.CAPXUL_MCP_BOOTSTRAP_URL?.trim() || env.CONVEX_SITE_URL?.trim();
 	if (bootstrapBaseUrl === void 0 || bootstrapBaseUrl.length === 0) throw Errors.envMissing("CAPXUL_MCP_BOOTSTRAP_URL (or CONVEX_SITE_URL)");
+	const origin = env.CAPXUL_MCP_ORIGIN?.trim() || env.CAPXUL_E2E_ORIGIN?.trim() || env.SITE_URL?.trim() || bootstrapBaseUrl;
+	const devToolsUrl = env.CAPXUL_DEVTOOLS_URL?.trim() || void 0;
 	return {
+		...devToolsUrl === void 0 ? {} : { devToolsUrl },
 		publishableKey,
 		bootstrapBaseUrl,
-		origin: env.CAPXUL_MCP_ORIGIN?.trim() || env.CAPXUL_E2E_ORIGIN?.trim() || env.SITE_URL?.trim() || bootstrapBaseUrl,
+		origin,
 		authBaseUrl: readAuthBaseUrl(env) ?? bootstrapBaseUrl
 	};
 }
@@ -447,7 +450,7 @@ var ConvexError = class extends (_b = Error, _a = IDENTIFYING_FIELD, _b) {
 //#region ../../node_modules/.pnpm/convex@1.39.1_react@19.2.7/node_modules/convex/dist/esm/index.js
 const version$1 = "1.39.1";
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/unit/formatGwei.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/unit/formatGwei.js
 /**
 * Converts numerical wei to a string representation of gwei.
 *
@@ -463,7 +466,7 @@ function formatGwei(wei, unit = "wei") {
 	return formatGwei$1(wei, unit);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/errors/transaction.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/errors/transaction.js
 function prettyPrint(args) {
 	const entries = Object.entries(args).map(([key, value]) => {
 		if (value === void 0 || value === false) return null;
@@ -504,7 +507,7 @@ var InvalidStorageKeySizeError = class extends BaseError {
 	}
 };
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/authorization/hashAuthorization.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/authorization/hashAuthorization.js
 /**
 * Computes an Authorization hash in [EIP-7702 format](https://eips.ethereum.org/EIPS/eip-7702): `keccak256('0x05' || rlp([chain_id, address, nonce]))`.
 */
@@ -520,7 +523,7 @@ function hashAuthorization(parameters) {
 	return hash;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/errors/node.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/errors/node.js
 var ExecutionRevertedError = class extends BaseError {
 	constructor({ cause, message } = {}) {
 		const reason = message?.replace("execution reverted: ", "")?.replace("execution reverted", "");
@@ -758,7 +761,7 @@ Object.defineProperty(TipAboveFeeCapError, "nodeMessage", {
 -(2n ** (256n - 1n));
 const maxUint256 = 2n ** 256n - 1n;
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/blob/blobsToCommitments.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/blob/blobsToCommitments.js
 /**
 * Compute commitments from a list of blobs.
 *
@@ -780,7 +783,7 @@ function blobsToCommitments(parameters) {
 	return to === "bytes" ? commitments : commitments.map((x) => bytesToHex(x));
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/blob/blobsToProofs.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/blob/blobsToProofs.js
 /**
 * Compute the proofs for a list of blobs and their commitments.
 *
@@ -825,7 +828,7 @@ function blobsToProofs(parameters) {
 /** @deprecated Use import from `noble/hashes/sha2` module */
 const sha256$1 = sha256$2;
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/hash/sha256.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/hash/sha256.js
 function sha256(value, to_) {
 	const to = to_ || "hex";
 	const bytes = sha256$1(isHex(value, { strict: false }) ? toBytes(value) : value);
@@ -833,7 +836,7 @@ function sha256(value, to_) {
 	return toHex(bytes);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/blob/commitmentToVersionedHash.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/blob/commitmentToVersionedHash.js
 /**
 * Transform a commitment to it's versioned hash.
 *
@@ -859,7 +862,7 @@ function commitmentToVersionedHash(parameters) {
 	return to === "bytes" ? versionedHash : bytesToHex(versionedHash);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/blob/commitmentsToVersionedHashes.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/blob/commitmentsToVersionedHashes.js
 /**
 * Transform a list of commitments to their versioned hashes.
 *
@@ -889,7 +892,7 @@ function commitmentsToVersionedHashes(parameters) {
 	return hashes;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/constants/blob.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/constants/blob.js
 /** Blob limit per transaction. */
 const blobsPerTransaction = 6;
 /** The number of field elements in a blob. */
@@ -899,7 +902,7 @@ const bytesPerBlob = 32 * fieldElementsPerBlob;
 /** Blob bytes limit per transaction. */
 const maxBytesPerTransaction = bytesPerBlob * blobsPerTransaction - 1 - 1 * fieldElementsPerBlob * blobsPerTransaction;
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/errors/blob.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/errors/blob.js
 var BlobSizeTooLargeError = class extends BaseError {
 	constructor({ maxSize, size }) {
 		super("Blob size is too large.", {
@@ -930,7 +933,7 @@ var InvalidVersionedHashVersionError = class extends BaseError {
 	}
 };
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/blob/toBlobs.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/blob/toBlobs.js
 /**
 * Transforms arbitrary data to blobs.
 *
@@ -973,7 +976,7 @@ function toBlobs(parameters) {
 	return to === "bytes" ? blobs.map((x) => x.bytes) : blobs.map((x) => bytesToHex(x.bytes));
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/blob/toBlobSidecars.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/blob/toBlobSidecars.js
 /**
 * Transforms arbitrary data (or blobs, commitments, & proofs) into a sidecar array.
 *
@@ -1027,7 +1030,7 @@ function toBlobSidecars(parameters) {
 	return sidecars;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/transaction/getTransactionType.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/transaction/getTransactionType.js
 function getTransactionType(transaction) {
 	if (transaction.type) return transaction.type;
 	if (typeof transaction.authorizationList !== "undefined") return "eip7702";
@@ -1040,14 +1043,14 @@ function getTransactionType(transaction) {
 	throw new InvalidSerializableTransactionError({ transaction });
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/errors/chain.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/errors/chain.js
 var InvalidChainIdError = class extends BaseError {
 	constructor({ chainId }) {
 		super(typeof chainId === "number" ? `Chain ID "${chainId}" is invalid.` : "Chain ID is invalid.", { name: "InvalidChainIdError" });
 	}
 };
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/transaction/assertTransaction.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/transaction/assertTransaction.js
 function assertTransactionEIP7702(transaction) {
 	const { authorizationList } = transaction;
 	if (authorizationList) for (const authorization of authorizationList) {
@@ -1102,7 +1105,7 @@ function assertTransactionLegacy(transaction) {
 	if (gasPrice && gasPrice > maxUint256) throw new FeeCapTooHighError({ maxFeePerGas: gasPrice });
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/transaction/serializeAccessList.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/transaction/serializeAccessList.js
 function serializeAccessList(accessList) {
 	if (!accessList || accessList.length === 0) return [];
 	const serializedAccessList = [];
@@ -1115,7 +1118,7 @@ function serializeAccessList(accessList) {
 	return serializedAccessList;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/transaction/serializeTransaction.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/transaction/serializeTransaction.js
 function serializeTransaction(transaction, signature) {
 	const type = getTransactionType(transaction);
 	if (type === "eip1559") return serializeTransactionEIP1559(transaction, signature);
@@ -1290,7 +1293,7 @@ function toYParitySignatureArray(transaction, signature_) {
 	];
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/authorization/serializeAuthorizationList.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/authorization/serializeAuthorizationList.js
 function serializeAuthorizationList(authorizationList) {
 	if (!authorizationList || authorizationList.length === 0) return [];
 	const serializedAuthorizationList = [];
@@ -1307,10 +1310,10 @@ function serializeAuthorizationList(authorizationList) {
 	return serializedAuthorizationList;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/constants/strings.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/constants/strings.js
 const presignMessagePrefix = "Ethereum Signed Message:\n";
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/signature/toPrefixedMessage.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/signature/toPrefixedMessage.js
 function toPrefixedMessage(message_) {
 	const message = (() => {
 		if (typeof message_ === "string") return stringToHex(message_);
@@ -1321,12 +1324,12 @@ function toPrefixedMessage(message_) {
 	return concat([prefix, message]);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/signature/hashMessage.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/signature/hashMessage.js
 function hashMessage(message, to_) {
 	return keccak256(toPrefixedMessage(message), to_);
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/signature/serializeSignature.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/signature/serializeSignature.js
 /**
 * @description Converts a signature into hex format.
 *
@@ -1419,7 +1422,7 @@ function isPostHogUrlProperty(key) {
 	return normalized.includes("url") || normalized.includes("referrer") || normalized.includes("path") || normalized.includes("filename");
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/accounts/toAccount.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/accounts/toAccount.js
 /**
 * @description Creates an Account from a custom signing implementation.
 *
@@ -1447,7 +1450,7 @@ function toAccount(source) {
 	};
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/accounts/utils/sign.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/accounts/utils/sign.js
 let extraEntropy = false;
 /**
 * @description Signs a hash with a given private key.
@@ -1477,7 +1480,7 @@ async function sign({ hash, privateKey, to = "object" }) {
 	})();
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/accounts/utils/signAuthorization.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/accounts/utils/signAuthorization.js
 /**
 * Signs an Authorization hash in [EIP-7702 format](https://eips.ethereum.org/EIPS/eip-7702): `keccak256('0x05' || rlp([chain_id, address, nonce]))`.
 */
@@ -1502,7 +1505,7 @@ async function signAuthorization(parameters) {
 	return signature;
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/accounts/utils/signMessage.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/accounts/utils/signMessage.js
 /**
 * @description Calculates an Ethereum-specific signature in [EIP-191 format](https://eips.ethereum.org/EIPS/eip-191):
 * `keccak256("\x19Ethereum Signed Message:\n" + len(message) + message))`.
@@ -1517,7 +1520,7 @@ async function signMessage({ message, privateKey }) {
 	});
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/accounts/utils/signTransaction.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/accounts/utils/signTransaction.js
 async function signTransaction(parameters) {
 	const { privateKey, transaction, serializer = serializeTransaction } = parameters;
 	const signableTransaction = (() => {
@@ -1533,7 +1536,7 @@ async function signTransaction(parameters) {
 	}));
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/accounts/utils/signTypedData.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/accounts/utils/signTypedData.js
 /**
 * @description Signs typed data and calculates an Ethereum-specific signature in [https://eips.ethereum.org/EIPS/eip-712](https://eips.ethereum.org/EIPS/eip-712):
 * `sign(keccak256("\x19\x01" ‖ domainSeparator ‖ hashStruct(message)))`.
@@ -1549,7 +1552,7 @@ async function signTypedData(parameters) {
 	});
 }
 //#endregion
-//#region ../../node_modules/.pnpm/viem@2.55.18_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/accounts/privateKeyToAccount.js
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/accounts/privateKeyToAccount.js
 /**
 * @description Creates an Account from a private key.
 *
@@ -25182,6 +25185,76 @@ function devPrivateKeySigner(input) {
 	};
 }
 //#endregion
+//#region ../../packages/observability/src/devtools.ts
+/** Local inspection is an explicit host choice, independent of remote telemetry. */
+function validateDevToolsUrl(value) {
+	const url = new URL(value);
+	if (!["ws:", "wss:"].includes(url.protocol) || ![
+		"localhost",
+		"127.0.0.1",
+		"[::1]",
+		"host.docker.internal"
+	].includes(url.hostname) || url.username !== "" || url.password !== "" || url.search !== "" || url.hash !== "") throw new TypeError("devToolsUrl must be a local WebSocket URL without credentials");
+	return url.href;
+}
+function localSpan(delegate) {
+	const attributes = new Map(delegate.attributes);
+	let status = delegate.status;
+	return {
+		_tag: "Span",
+		name: delegate.name,
+		spanId: delegate.spanId,
+		traceId: delegate.traceId,
+		parent: delegate.parent,
+		annotations: delegate.annotations,
+		sampled: delegate.sampled,
+		kind: delegate.kind,
+		attributes,
+		get status() {
+			return status;
+		},
+		get links() {
+			return delegate.links;
+		},
+		attribute(key, value) {
+			attributes.set(key, value);
+			delegate.attribute(key, value);
+		},
+		event(name, time, values) {
+			delegate.event(name, time, values);
+		},
+		addLinks(links) {
+			delegate.addLinks(links);
+		},
+		end(endTime, exit) {
+			delegate.end(endTime, exit);
+			status = {
+				_tag: "Ended",
+				startTime: status.startTime,
+				endTime,
+				exit
+			};
+		}
+	};
+}
+/** Acquire after the host layer so traces and metrics use the same context. */
+function withDevTools(layer, url) {
+	if (url === void 0) return layer;
+	const endpoint = validateDevToolsUrl(url);
+	return Layer.unwrap(Effect.promise(async () => {
+		const [{ DevToolsClient }, { Socket }] = await Promise.all([import("effect/devtools"), import("effect/socket")]);
+		const client = DevToolsClient.layer.pipe(Layer.provide(Socket.layerWebSocket(endpoint)), Layer.provide(Socket.layerWebSocketConstructorGlobal));
+		return Layer.effect(Tracer.Tracer, Effect.gen(function* () {
+			const delegate = yield* Effect.tracer;
+			const mirror = Tracer.make({
+				span: (options) => localSpan(delegate.span(options)),
+				...delegate.context === void 0 ? {} : { context: delegate.context.bind(delegate) }
+			});
+			return yield* DevToolsClient.makeTracer.pipe(Effect.provideService(Tracer.Tracer, mirror));
+		})).pipe(Layer.provide(client), Layer.provideMerge(layer));
+	}));
+}
+//#endregion
 //#region ../../packages/protocol/src/errors/convex-decoding.ts
 const KNOWN_CODES = new Set(CAPXUL_ERROR_CODES);
 function isCapxulCode(value) {
@@ -30408,6 +30481,123 @@ const attributes = (input, limit = 32) => {
 };
 const terminalName = (name) => name === "cli.command.completed" || name === "cli.wallet.step" || CLI_COMMAND_NAMES.some((command) => name === `cli.command.${command}`);
 //#endregion
+//#region ../../packages/observability/src/engineering/tracer.ts
+const failureText = (failure, key, limit, source) => {
+	if (failure === null || typeof failure !== "object") return void 0;
+	try {
+		let owner = failure;
+		let descriptor;
+		for (let depth = 0; owner !== null && depth < 4; depth += 1) {
+			descriptor = Object.getOwnPropertyDescriptor(owner, key);
+			if (descriptor !== void 0 || key !== "name") break;
+			owner = Object.getPrototypeOf(owner);
+		}
+		const value = descriptor?.value;
+		return typeof value === "string" || key === "code" && typeof value === "number" ? redactSecrets(String(value), source).slice(0, limit) : void 0;
+	} catch {
+		return;
+	}
+};
+const exportFailure = (failure, source) => {
+	const message = failureText(failure, "message", 2048, source) ?? (typeof failure === "string" ? redactSecrets(failure, source).slice(0, 2048) : "Engineering operation failed");
+	const code = failureText(failure, "code", 128);
+	const error = new Error((code === void 0 ? message : `${message} [code=${code}]`).slice(0, 2048));
+	error.name = failureText(failure, "_tag", 128) ?? failureText(failure, "name", 128) ?? "Error";
+	error.stack = failureText(failure, "stack", 8192, source) ?? `${error.name}: ${error.message}`;
+	return error;
+};
+const exportFailureExit = (cause, source) => Exit.failCause(Cause.fromReasons(cause.reasons.filter((reason) => !Cause.isInterruptReason(reason)).slice(0, 8).map((reason) => Cause.isFailReason(reason) ? Cause.makeFailReason(exportFailure(reason.error, source)) : Cause.makeDieReason(exportFailure(reason.defect, source)))));
+const BROWSER_KEEPALIVE_BYTES = 65536;
+let unfinishedBrowserExportBytes = 0;
+const hasBrowserDocument = () => typeof window !== "undefined" && typeof document !== "undefined";
+const browserExportClient = (client) => HttpClient.transform(client, (response, request) => Effect.acquireUseRelease(Effect.sync(() => {
+	const bytes = "contentLength" in request.body ? request.body.contentLength : void 0;
+	if (request.body._tag === "Stream" || request.body._tag === "FormData" || bytes === void 0 || !Number.isSafeInteger(bytes) || bytes < 0 || unfinishedBrowserExportBytes + bytes > BROWSER_KEEPALIVE_BYTES) return;
+	unfinishedBrowserExportBytes += bytes;
+	return bytes;
+}), (bytes) => response.pipe(Effect.provideService(FetchHttpClient.RequestInit, { keepalive: bytes !== void 0 }), Effect.tap((result) => bytes === void 0 ? Effect.void : Stream.runDrain(result.stream).pipe(Effect.catchIf((error) => error.reason._tag === "EmptyBodyError", () => Effect.void)))), (bytes) => Effect.sync(() => {
+	if (bytes !== void 0) unfinishedBrowserExportBytes -= bytes;
+})));
+const spanUpstream = (span) => {
+	let current = span;
+	while (current?._tag === "Span") {
+		const upstream = current.attributes.get("chain.upstream");
+		if (upstream === "alchemy" || upstream === "infura" || upstream === "gateway") return upstream;
+		current = current.parent._tag === "Some" ? current.parent.value : void 0;
+	}
+};
+function redactHttpPath(path, fullUrl, source) {
+	let origin = "https://redaction.invalid";
+	try {
+		const url = new URL(String(fullUrl));
+		if (url.protocol === "https:" || url.protocol === "http:") origin = url.origin;
+	} catch {}
+	const prefix = path.startsWith("/") ? origin : "";
+	return redactUrlSecrets(`${prefix}${path}`, source).slice(prefix.length, prefix.length + 2048);
+}
+/** A span whose prototype is `span`: it answers every Span member until an own property overrides it. */
+function inheritSpan(span) {
+	const wrapped = Object.create(span);
+	Object.defineProperties(wrapped, {
+		traceId: { get: () => span.traceId },
+		spanId: { get: () => span.spanId },
+		attributes: { get: () => span.attributes },
+		event: {
+			value: span.event.bind(span),
+			configurable: true
+		},
+		addLinks: {
+			value: span.addLinks.bind(span),
+			configurable: true
+		}
+	});
+	return wrapped;
+}
+/** Preserve domain exits while preventing the OTLP serializer from seeing raw causes. */
+const makeLeakSafeEngineeringTracer = (delegate, enabled = () => true) => Tracer.make({
+	span(options) {
+		const span = enabled() ? delegate.span(options) : new Tracer.NativeSpan(options);
+		const wrapped = inheritSpan(span);
+		Object.defineProperty(wrapped, "attribute", { value: (name, value) => {
+			const source = spanUpstream(span);
+			const header = /^http\.(?:request|response)\.header\.(.+)$/u.exec(name)?.[1];
+			if (header !== void 0 && isCredentialField(header, "header")) span.attribute(name, "[REDACTED]");
+			else if (typeof value === "string" && name === "url.query") span.attribute(name, redactUrlSecrets(`?${value}`).slice(1, 2049));
+			else if (typeof value === "string" && (name === "url.path" || name === "http.target")) {
+				const fullUrl = span.attributes.get("url.full") ?? span.attributes.get("http.url");
+				const path = name === "url.path" && typeof fullUrl === "string" ? /^https?:\/\/[^/]+([^?#]*)/u.exec(fullUrl)?.[1] ?? value : value;
+				span.attribute(name, redactHttpPath(path, fullUrl, source));
+			} else if (typeof value === "string" && (name === "url.full" || name === "http.url" || header === "location" || header === "referer" || header === "referrer")) span.attribute(name, redactUrlSecrets(value, source).slice(0, 2048));
+			else if (header !== void 0 && typeof value === "string") span.attribute(name, redactSecrets(value, source).slice(0, 2048));
+			else span.attribute(name, value);
+		} });
+		Object.defineProperty(wrapped, "end", {
+			configurable: false,
+			enumerable: false,
+			value: (endTime, exit) => {
+				if (!enabled()) {
+					Object.defineProperty(wrapped, "status", { value: {
+						_tag: "Ended",
+						startTime: span.status.startTime,
+						endTime,
+						exit
+					} });
+					return;
+				}
+				if (Exit.isFailure(exit) && !Cause.hasInterruptsOnly(exit.cause)) {
+					const first = exit.cause.reasons.find((reason) => !Cause.isInterruptReason(reason));
+					const code = failureText(first === void 0 ? void 0 : Cause.isFailReason(first) ? first.error : first.defect, "code", 128);
+					if (code !== void 0) span.attribute("error.code", code);
+					span.end(endTime, exportFailureExit(exit.cause, spanUpstream(span)));
+				} else span.end(endTime, exit);
+			},
+			writable: false
+		});
+		return wrapped;
+	},
+	...delegate.context === void 0 ? {} : { context: delegate.context.bind(delegate) }
+});
+//#endregion
 //#region ../../packages/observability/src/delivery/records.ts
 function admittedLogger(state, delegate) {
 	return Logger.make((options) => {
@@ -30463,7 +30653,7 @@ function admittedTracer(state, delegate) {
 /** The span as a producer sees it: at most 32 fields and 2000 attribute bytes, 2 events, 2 links. */
 function boundedSpan(state, span) {
 	const { budget } = state;
-	const wrapped = Object.create(span);
+	const wrapped = inheritSpan(span);
 	let fields = 0, events = 0, links = 0, attributeBytes = 0;
 	let ended = false;
 	Object.defineProperties(wrapped, {
@@ -30696,109 +30886,6 @@ const validateEngineeringTelemetryConfig = (config) => {
 	};
 };
 //#endregion
-//#region ../../packages/observability/src/engineering/tracer.ts
-const failureText = (failure, key, limit, source) => {
-	if (failure === null || typeof failure !== "object") return void 0;
-	try {
-		let owner = failure;
-		let descriptor;
-		for (let depth = 0; owner !== null && depth < 4; depth += 1) {
-			descriptor = Object.getOwnPropertyDescriptor(owner, key);
-			if (descriptor !== void 0 || key !== "name") break;
-			owner = Object.getPrototypeOf(owner);
-		}
-		const value = descriptor?.value;
-		return typeof value === "string" || key === "code" && typeof value === "number" ? redactSecrets(String(value), source).slice(0, limit) : void 0;
-	} catch {
-		return;
-	}
-};
-const exportFailure = (failure, source) => {
-	const message = failureText(failure, "message", 2048, source) ?? (typeof failure === "string" ? redactSecrets(failure, source).slice(0, 2048) : "Engineering operation failed");
-	const code = failureText(failure, "code", 128);
-	const error = new Error((code === void 0 ? message : `${message} [code=${code}]`).slice(0, 2048));
-	error.name = failureText(failure, "_tag", 128) ?? failureText(failure, "name", 128) ?? "Error";
-	error.stack = failureText(failure, "stack", 8192, source) ?? `${error.name}: ${error.message}`;
-	return error;
-};
-const exportFailureExit = (cause, source) => Exit.failCause(Cause.fromReasons(cause.reasons.filter((reason) => !Cause.isInterruptReason(reason)).slice(0, 8).map((reason) => Cause.isFailReason(reason) ? Cause.makeFailReason(exportFailure(reason.error, source)) : Cause.makeDieReason(exportFailure(reason.defect, source)))));
-const BROWSER_KEEPALIVE_BYTES = 65536;
-let unfinishedBrowserExportBytes = 0;
-const hasBrowserDocument = () => typeof window !== "undefined" && typeof document !== "undefined";
-const browserExportClient = (client) => HttpClient.transform(client, (response, request) => Effect.acquireUseRelease(Effect.sync(() => {
-	const bytes = "contentLength" in request.body ? request.body.contentLength : void 0;
-	if (request.body._tag === "Stream" || request.body._tag === "FormData" || bytes === void 0 || !Number.isSafeInteger(bytes) || bytes < 0 || unfinishedBrowserExportBytes + bytes > BROWSER_KEEPALIVE_BYTES) return;
-	unfinishedBrowserExportBytes += bytes;
-	return bytes;
-}), (bytes) => response.pipe(Effect.provideService(FetchHttpClient.RequestInit, { keepalive: bytes !== void 0 }), Effect.tap((result) => bytes === void 0 ? Effect.void : Stream.runDrain(result.stream).pipe(Effect.catchIf((error) => error.reason._tag === "EmptyBodyError", () => Effect.void)))), (bytes) => Effect.sync(() => {
-	if (bytes !== void 0) unfinishedBrowserExportBytes -= bytes;
-})));
-const spanUpstream = (span) => {
-	let current = span;
-	while (current?._tag === "Span") {
-		const upstream = current.attributes.get("chain.upstream");
-		if (upstream === "alchemy" || upstream === "infura" || upstream === "gateway") return upstream;
-		current = current.parent._tag === "Some" ? current.parent.value : void 0;
-	}
-};
-function redactHttpPath(path, fullUrl, source) {
-	let origin = "https://redaction.invalid";
-	try {
-		const url = new URL(String(fullUrl));
-		if (url.protocol === "https:" || url.protocol === "http:") origin = url.origin;
-	} catch {}
-	const prefix = path.startsWith("/") ? origin : "";
-	return redactUrlSecrets(`${prefix}${path}`, source).slice(prefix.length, prefix.length + 2048);
-}
-/** A span whose prototype is `span`: it answers every Span member until an own property overrides it. */
-function inheritSpan(span) {
-	return Object.create(span);
-}
-/** Preserve domain exits while preventing the OTLP serializer from seeing raw causes. */
-const makeLeakSafeEngineeringTracer = (delegate, enabled = () => true) => Tracer.make({
-	span(options) {
-		const span = enabled() ? delegate.span(options) : new Tracer.NativeSpan(options);
-		const wrapped = inheritSpan(span);
-		Object.defineProperty(wrapped, "attribute", { value: (name, value) => {
-			const source = spanUpstream(span);
-			const header = /^http\.(?:request|response)\.header\.(.+)$/u.exec(name)?.[1];
-			if (header !== void 0 && isCredentialField(header, "header")) span.attribute(name, "[REDACTED]");
-			else if (typeof value === "string" && name === "url.query") span.attribute(name, redactUrlSecrets(`?${value}`).slice(1, 2049));
-			else if (typeof value === "string" && (name === "url.path" || name === "http.target")) {
-				const fullUrl = span.attributes.get("url.full") ?? span.attributes.get("http.url");
-				const path = name === "url.path" && typeof fullUrl === "string" ? /^https?:\/\/[^/]+([^?#]*)/u.exec(fullUrl)?.[1] ?? value : value;
-				span.attribute(name, redactHttpPath(path, fullUrl, source));
-			} else if (typeof value === "string" && (name === "url.full" || name === "http.url" || header === "location" || header === "referer" || header === "referrer")) span.attribute(name, redactUrlSecrets(value, source).slice(0, 2048));
-			else if (header !== void 0 && typeof value === "string") span.attribute(name, redactSecrets(value, source).slice(0, 2048));
-			else span.attribute(name, value);
-		} });
-		Object.defineProperty(wrapped, "end", {
-			configurable: false,
-			enumerable: false,
-			value: (endTime, exit) => {
-				if (!enabled()) {
-					Object.defineProperty(wrapped, "status", { value: {
-						_tag: "Ended",
-						startTime: span.status.startTime,
-						endTime,
-						exit
-					} });
-					return;
-				}
-				if (Exit.isFailure(exit) && !Cause.hasInterruptsOnly(exit.cause)) {
-					const first = exit.cause.reasons.find((reason) => !Cause.isInterruptReason(reason));
-					const code = failureText(first === void 0 ? void 0 : Cause.isFailReason(first) ? first.error : first.defect, "code", 128);
-					if (code !== void 0) span.attribute("error.code", code);
-					span.end(endTime, exportFailureExit(exit.cause, spanUpstream(span)));
-				} else span.end(endTime, exit);
-			},
-			writable: false
-		});
-		return wrapped;
-	},
-	...delegate.context === void 0 ? {} : { context: delegate.context.bind(delegate) }
-});
-//#endregion
 //#region ../../packages/observability/src/engineering/minimal.ts
 const MINIMAL_LOG_NAMES = /* @__PURE__ */ new Set([
 	"capxul_sdk_operation",
@@ -31458,6 +31545,14 @@ function makeProductionAdapterLayer(input) {
 //#region ../../packages/sdk/src/platform/production-input.ts
 function validateCreateCapxulClientInput(input) {
 	const runtime = input.runtime ?? detectRuntime();
+	if (input.devToolsUrl !== void 0) try {
+		validateDevToolsUrl(input.devToolsUrl);
+	} catch {
+		return {
+			ok: false,
+			error: Errors.invalidInput("devToolsUrl", "must be a local ws or wss URL without credentials")
+		};
+	}
 	if (input.signer !== void 0 && input.openfortSignerFactory !== void 0) return {
 		ok: false,
 		error: Errors.invalidInput("signer", "choose signer or openfortSignerFactory")
@@ -31622,7 +31717,7 @@ async function createProductionAdapters(input) {
 			...input.resetSignerSession === void 0 ? {} : { resetSignerSession: input.resetSignerSession }
 		});
 		const applicationLayer = Layer.merge(portsLayer, optionalEngineeringTelemetryLayer(bootstrapResult.value.engineeringTelemetry, resolvedInput.value.runtime, hostEngineeringPolicy(input.observability))).pipe(Layer.provideMerge(localDiagnosticsLayer(localDiagnostics, resolvedInput.value.runtime)));
-		const context = await Effect.runPromise(Layer.buildWithScope(applicationLayer, scope));
+		const context = await Effect.runPromise(Layer.buildWithScope(withDevTools(applicationLayer, input.devToolsUrl), scope));
 		const collected = await Effect.runPromise(collectProductionFlowPorts.pipe(Effect.provide(context)));
 		const indexerUrl = input.indexerUrl ?? bootstrapResult.value.indexerUrl;
 		const indexerRead = productionIndexerReadPort(indexerUrl === void 0 ? input : {
@@ -31676,7 +31771,6 @@ function makeFinancialOpsMethods(deps) {
 		payments: makePaymentsMethods(deps),
 		approvals: makeApprovalsMethods(deps),
 		activity: makeActivityMethods(deps),
-		offramp: makeOfframpMethods(),
 		paymentDocuments: makePaymentDocumentsMethods(deps)
 	};
 }
@@ -31801,6 +31895,21 @@ function withHostObservationControls(snapshot, input, actorId) {
 	});
 }
 //#endregion
+//#region ../../packages/sdk/src/observability/telemetry/emit-once.ts
+/**
+* A product event that could not be built or emitted never reaches the caller
+* as a failure, and is never lost silently: the drop is logged by event name.
+*/
+function logDroppedEvent(eventName) {
+	return (effect) => effect.pipe(Effect.catchCause((cause) => {
+		const reason = Cause.squash(cause);
+		return Effect.logWarning("product.telemetry.emit.dropped").pipe(Effect.annotateLogs({
+			product_event: eventName,
+			reason: reason instanceof Error ? reason.message : String(reason)
+		}), Effect.ignoreCause);
+	}));
+}
+//#endregion
 //#region ../../packages/sdk/src/platform/client/signer-readiness.ts
 /**
 * Start the signer readiness cycle when the identity becomes claimed (#1667).
@@ -32084,6 +32193,37 @@ function makeClientInternals(input, shared) {
 	};
 }
 //#endregion
+//#region ../../packages/sdk/src/platform/client/scopes.ts
+const makeClientScopes = (input, runPromise, invocationControls) => {
+	const shared = {
+		convexCall: input.ports.convexCall,
+		runPromise,
+		invocationControls
+	};
+	const verification = {
+		...input.ports,
+		siteBaseUrl: input.bootstrap.siteBaseUrl,
+		runPromise,
+		invocationControls
+	};
+	return {
+		personal: {
+			banking: makeBankingMethods(shared),
+			verification: makeVerificationMethods(verification)
+		},
+		organization: {
+			banking: (orgId) => makeBankingMethods(shared, {
+				kind: "org",
+				orgId
+			}),
+			verification: (orgId) => makeVerificationMethods(verification, {
+				kind: "organization",
+				orgId
+			})
+		}
+	};
+};
+//#endregion
 //#region ../../packages/sdk/src/platform/client/assemble.ts
 function assembleCapxulClient(input) {
 	const observation = input;
@@ -32095,7 +32235,6 @@ function assembleCapxulClient(input) {
 	};
 	const { actor, stopActor } = bootClientActor(input, effectRunner, observation);
 	const invocationControls = (controls) => withHostObservationControls(observation.hostObservationSnapshot, controls, actor.authSession()?.authUserId);
-	const selectedOrgPort = input.orgPort;
 	let kickProvisioning;
 	const financialOps = makeFinancialOpsMethods({
 		runPromise: effectRunner.runPromise,
@@ -32204,6 +32343,7 @@ function assembleCapxulClient(input) {
 		invocationControls
 	};
 	const accounts = makeAccountsMethods(accountsInput);
+	const scopes = makeClientScopes(input, effectRunner.runPromise, invocationControls);
 	const orgMethods = makeOrgMethods({
 		actor,
 		chainId: input.bootstrap.chainId,
@@ -32211,8 +32351,9 @@ function assembleCapxulClient(input) {
 		runPromise: effectRunner.runPromise,
 		invocationControls,
 		requestKeyScope: `${input.bootstrap.convexUrl}:${String(input.bootstrap.chainId)}`,
-		...selectedOrgPort === void 0 ? {} : { orgPort: selectedOrgPort },
+		...input.orgPort === void 0 ? {} : { orgPort: input.orgPort },
 		convexCall: input.ports.convexCall,
+		...scopes.organization,
 		...input.signer === void 0 ? {} : { signer: input.signer },
 		...input.organizationSetup === void 0 ? {} : { organizationSetup: input.organizationSetup }
 	});
@@ -32224,6 +32365,7 @@ function assembleCapxulClient(input) {
 	});
 	const identityRuntime = makeIdentityRuntime(actor, input.ports.identity, effectRunner.runPromise);
 	const client = {
+		...scopes.personal,
 		checkouts: makeCheckoutMethods({
 			convexCall: input.ports.convexCall,
 			runPromise: effectRunner.runPromise,
@@ -32994,7 +33136,7 @@ function stdioIdentity(env = process.env, options = {}) {
 }
 //#endregion
 //#region package.json
-var version = "4.20.0-beta.30";
+var version = "4.20.0-beta.32";
 //#endregion
 //#region src/deps.ts
 const NO_IDENTITY = async () => void 0;
@@ -33436,6 +33578,7 @@ async function createSdkClient(input, createClient = createCapxulClient) {
 		authBaseUrl: config.authBaseUrl,
 		requirement: signer === void 0 ? "counterfactual" : "deployed",
 		runtime: "node",
+		...config.devToolsUrl === void 0 ? {} : { devToolsUrl: config.devToolsUrl },
 		...identity === void 0 ? {} : { authClient: identity.authClient },
 		...signer === void 0 ? {} : { signer }
 	});