@capxul/mcp 4.20.0-beta.37 → 4.20.0-beta.39

package/dist/main.mjs

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { i as __exportAll, o as __require, r as __commonJSMin, s as __toESM } from "./lib-DnmstTkB.mjs";
-import { $ as deserializeCapxulError, $n as readField, $t as ORGANIZATION_SETUP_REASONS, A as convexCallErrorFromCapxul, An as size, At as oauthBearerAuthClient, Bn as redactSecrets, Bt as CLI_CAPABILITIES, C as PonderIndexerAdapter, Cn as numberToHex$1, Ct as runPortEffect, D as TelemetryPortTag, Dn as hexToNumber, Dt as formatTraceparent, E as AccountReadPortTag, En as hexToBigInt, Et as toCapxulResult, F as makeDestinationsMethods, Fn as isEvmAddress, Ft as observationRequestHeaders, G as toPublicError, Gn as AuthClientError, Gt as MCP_EXPECTED_OUTCOME_EVENT_NAME, H as BASE_SEPOLIA_CHAIN_ID, Hn as isCredentialField, Ht as CLI_INVOCATION_KINDS, I as makeCheckoutMethods, In as toAddress, It as attachInvocationObservation, J as observeFailedResult, Jn as globalLocalStorage, Jt as normalizeCapxulOperation, K as failureDetail$1, Kn as AuthClientPortTag, Kt as CAPXUL_OPERATIONS, L as makeTargetsMethods, Ln as absurd, Lt as copyInvocationObservation, M as makeApprovalsMethods, Mn as DurationMsSchema, Mt as ClockPortTag, N as makeAccountMethods, Nn as EpochMsSchema, Nt as BetterAuthNodeLayer, O as ConvexCallError, On as trim$1, Ot as ActorFailure, P as makePaymentsMethods, Pn as ChainIdSchema, Pt as BetterAuthBrowserLayer, Q as version$2, Qn as isRecord, Qt as setups, R as makeVerificationMethods, Rn as getFunctionName, Rt as readInvocationObservation, S as makeHoldingsMethods, Sn as bytesToHex, St as runIdentityFacade, T as ConvexAccountLayer, Tn as toHex, Tt as runCapxulEffect, U as callOperation, Un as toAllowedOrigin, Ut as FAILURE_CLASSES, V as normalizeSafeSaltEmail, Vn as redactUrlSecrets, Vt as CLI_COMMAND_NAMES, W as asCapxulError, Wn as toPublishableKey, Wt as EXCEPTION_EVENT_NAME, X as withCapturedAttemptContext, Xn as toAuthUserId, Xt as details, Y as observeSdkClient, Yn as toEpochMs, Yt as OPERATIONS, Z as failureProperties, Zn as toEmail, Zt as onboardings, _ as makeActivityMethods, _n as concatHex, _t as validateHandle, an as diagnostics, ar as httpStatusMode, at as isEcdsaSignatureHex, b as ConvexSmartAccountLayer, bn as keccak256$1, bt as noSessionError, c as OrgPortTag, cn as isBytes32, cr as FAILURE_MODES, ct as recoverRawDigestSigner, dn as toRlp, dt as makeCurrentUserMethods, en as ORGANIZATION_SETUP_STATUSES, er as AuthCachePortTag, et as maskedMessage, fn as publicKeyToAddress, ft as makeClientRequestMethods, g as makeMeMethods, gn as concat, gt as toHandle, h as bootIdentityFlow, hn as slice, ht as toTesterKind, in as toOrgId, ir as PROVIDER_PROBLEMS, it as httpStatusOf, j as bindProductTelemetryInvocation, jn as isHex, jt as SystemClockLayer, k as ConvexCallPortTag, kn as BaseError, kt as carryInvocationParentSpan, ln as hashTypedData, lr as isFailureMode, lt as signerFailure, m as executeIdentityProductObservation, mn as createCursor, mt as toKycTier, n as makeOrgMethods, nn as CAPXUL_ERROR_CODES, nr as providerStatusFailure, nt as UNOBSERVABLE_SIGNER_STATUS, on as AppIdSchema, or as CapxulError, ot as isSignerNotReadySignal, pn as formatGwei$1, pt as toCountryCode, q as failureEvidenceProps, qn as detectAuthCacheAdapter, qt as isCapxulOperation, r as makeBankingMethods, rn as isExpectedOutcome, rr as PROVIDERS, rt as causeChain, s as ConvexOrganizationAdapter, sn as images, sr as isCapxulError, st as openfortSignerNotReadyCode, t as ConvexOrganizationSetupAdapter, tn as decodeChainCause, tr as Errors, tt as serializeCapxulError, un as sha256, ut as signerPathFailure, v as makePaymentDocumentsMethods, vn as isAddress, vt as makeAuthMethods, w as makeAccountsMethods, wn as stringToHex, wt as sessionFromActor, x as SmartAccountPortTag, xn as hexToBytes, xt as publicIdentityFailure, y as makeSmartAccountMethods, yn as InvalidAddressError, yt as askIdentity, z as withheld, zn as sanitizeObservationContext, zt as redactTelemetryProps } from "./organizations-CQzoDh5i.mjs";
+import { $ as deserializeCapxulError, $n as readField, $t as ORGANIZATION_SETUP_REASONS, A as convexCallErrorFromCapxul, An as size, At as oauthBearerAuthClient, Bn as redactSecrets, Bt as CLI_CAPABILITIES, C as PonderIndexerAdapter, Cn as numberToHex$1, Ct as runPortEffect, D as TelemetryPortTag, Dn as hexToNumber, Dt as formatTraceparent, E as AccountReadPortTag, En as hexToBigInt, Et as toCapxulResult, F as makeDestinationsMethods, Fn as isEvmAddress, Ft as observationRequestHeaders, G as toPublicError, Gn as AuthClientError, Gt as MCP_EXPECTED_OUTCOME_EVENT_NAME, H as BASE_SEPOLIA_CHAIN_ID, Hn as isCredentialField, Ht as CLI_INVOCATION_KINDS, I as makeCheckoutMethods, In as toAddress, It as attachInvocationObservation, J as observeFailedResult, Jn as globalLocalStorage, Jt as normalizeCapxulOperation, K as failureDetail$1, Kn as AuthClientPortTag, Kt as CAPXUL_OPERATIONS, L as makeTargetsMethods, Ln as absurd, Lt as copyInvocationObservation, M as makeApprovalsMethods, Mn as DurationMsSchema, Mt as ClockPortTag, N as makeAccountMethods, Nn as EpochMsSchema, Nt as BetterAuthNodeLayer, O as ConvexCallError, On as trim$1, Ot as ActorFailure, P as makePaymentsMethods, Pn as ChainIdSchema, Pt as BetterAuthBrowserLayer, Q as version$2, Qn as isRecord, Qt as setups, R as makeVerificationMethods, Rn as getFunctionName, Rt as readInvocationObservation, S as makeHoldingsMethods, Sn as bytesToHex, St as runIdentityFacade, T as ConvexAccountLayer, Tn as toHex, Tt as runCapxulEffect, U as callOperation, Un as toAllowedOrigin, Ut as FAILURE_CLASSES, V as normalizeSafeSaltEmail, Vn as redactUrlSecrets, Vt as CLI_COMMAND_NAMES, W as asCapxulError, Wn as toPublishableKey, Wt as EXCEPTION_EVENT_NAME, X as withCapturedAttemptContext, Xn as toAuthUserId, Xt as details, Y as observeSdkClient, Yn as toEpochMs, Yt as OPERATIONS, Z as failureProperties, Zn as toEmail, Zt as onboardings, _ as makeActivityMethods, _n as concatHex, _t as validateHandle, an as diagnostics, ar as httpStatusMode, at as isEcdsaSignatureHex, b as ConvexSmartAccountLayer, bn as keccak256$1, bt as noSessionError, c as OrgPortTag, cn as isBytes32, cr as FAILURE_MODES, ct as recoverRawDigestSigner, dn as toRlp, dt as makeCurrentUserMethods, en as ORGANIZATION_SETUP_STATUSES, er as AuthCachePortTag, et as maskedMessage, fn as publicKeyToAddress, ft as makeClientRequestMethods, g as makeMeMethods, gn as concat, gt as toHandle, h as bootIdentityFlow, hn as slice, ht as toTesterKind, in as toOrgId, ir as PROVIDER_PROBLEMS, it as httpStatusOf, j as bindProductTelemetryInvocation, jn as isHex, jt as SystemClockLayer, k as ConvexCallPortTag, kn as BaseError, kt as carryInvocationParentSpan, ln as hashTypedData, lr as isFailureMode, lt as signerFailure, m as executeIdentityProductObservation, mn as createCursor, mt as toKycTier, n as makeOrgMethods, nn as CAPXUL_ERROR_CODES, nr as providerStatusFailure, nt as UNOBSERVABLE_SIGNER_STATUS, on as AppIdSchema, or as CapxulError, ot as isSignerNotReadySignal, pn as formatGwei$1, pt as toCountryCode, q as failureEvidenceProps, qn as detectAuthCacheAdapter, qt as isCapxulOperation, r as makeBankingMethods, rn as isExpectedOutcome, rr as PROVIDERS, rt as causeChain, s as ConvexOrganizationAdapter, sn as images, sr as isCapxulError, st as openfortSignerNotReadyCode, t as ConvexOrganizationSetupAdapter, tn as decodeChainCause, tr as Errors, tt as serializeCapxulError, un as sha256, ut as signerPathFailure, v as makePaymentDocumentsMethods, vn as isAddress, vt as makeAuthMethods, w as makeAccountsMethods, wn as stringToHex, wt as sessionFromActor, x as SmartAccountPortTag, xn as hexToBytes, xt as publicIdentityFailure, y as makeSmartAccountMethods, yn as InvalidAddressError, yt as askIdentity, z as withheld, zn as sanitizeObservationContext, zt as redactTelemetryProps } from "./organizations-DLp8ddZI.mjs";
 import { t as secp256k1 } from "./secp256k1-vkvPWdOZ.mjs";
 import { t as require_lib } from "./lib-CoGPQsbr.mjs";
 import { serveStdio } from "@modelcontextprotocol/server/stdio";
@@ -39759,7 +39759,7 @@ async function createCapxulClient(input) {
 }
 //#endregion
 //#region package.json
-var version = "4.20.0-beta.37";
+var version = "4.20.0-beta.39";
 //#endregion
 //#region src/failure-report.ts
 /**
@@ -40503,6 +40503,103 @@ function toolCallNames(body) {
 	return names;
 }
 //#endregion
+//#region src/request-body.ts
+/**
+* The gate must read the body before the handler does, so the size limit lives
+* here. `CAPXUL_MCP_HOST` can bind this server off loopback, and a JSON-RPC
+* request that needs more than this is not one of ours.
+*/
+const MAX_BODY_BYTES = 1048576;
+const TOO_LARGE = Symbol("body-too-large");
+/**
+* How long a body may take to arrive in full. The size limit alone does not
+* bound a slow client: a trickle below it would hold the socket until Node's
+* own request timeout, minutes later. A whole 1 MiB body still fits at about
+* 35 KiB/s.
+*/
+const BODY_DEADLINE_MS = 3e4;
+const TIMED_OUT = Symbol("body-timed-out");
+/**
+* Reads the body with listeners rather than `for await`: leaving that loop
+* early destroys the request, and the client would see a reset instead of the
+* 413 or 408. Past the limit or the deadline this stops listening and leaves
+* the stream to the caller.
+*/
+function readJsonBody(req, deadlineMs = BODY_DEADLINE_MS) {
+	return new Promise((resolve, reject) => {
+		const chunks = [];
+		let size = 0;
+		const settle = (finish) => {
+			clearTimeout(deadline);
+			req.off("data", onData);
+			req.off("end", onEnd);
+			req.off("error", onError);
+			req.off("close", onClose);
+			finish();
+		};
+		const onData = (chunk) => {
+			const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+			size += buffer.length;
+			if (size > MAX_BODY_BYTES) return settle(() => resolve(TOO_LARGE));
+			chunks.push(buffer);
+		};
+		const onEnd = () => settle(() => resolve(parseJsonBody(chunks)));
+		const onError = (cause) => settle(() => reject(cause));
+		const onClose = () => settle(() => reject(/* @__PURE__ */ new Error("request closed before its body ended")));
+		const deadline = setTimeout(() => settle(() => resolve(TIMED_OUT)), deadlineMs);
+		req.on("data", onData);
+		req.on("end", onEnd);
+		req.on("error", onError);
+		req.on("close", onClose);
+	});
+}
+/**
+* How much of an oversized body the 413 path reads and discards before it
+* gives up on the connection: one more limit's worth, for at most five
+* seconds. A slow client cannot hold the socket longer than this.
+*/
+const MAX_DRAIN_BYTES = MAX_BODY_BYTES;
+const MAX_DRAIN_MS = 5e3;
+/**
+* Discards the rest of a body `readJsonBody` gave up on. `drained`: it ended
+* within the bound. `abandoned`: it did not, and the connection must close.
+* `gone`: the client closed it first, so nothing can be answered.
+*/
+function drainRest(req) {
+	if (req.readableEnded) return Promise.resolve("drained");
+	if (req.destroyed) return Promise.resolve("gone");
+	return new Promise((resolve) => {
+		let size = 0;
+		const settle = (outcome) => {
+			clearTimeout(deadline);
+			req.off("data", onData);
+			req.off("end", onEnd);
+			req.off("error", onGone);
+			req.off("close", onGone);
+			resolve(outcome);
+		};
+		const onData = (chunk) => {
+			size += Buffer.byteLength(chunk);
+			if (size > MAX_DRAIN_BYTES) settle("abandoned");
+		};
+		const onEnd = () => settle("drained");
+		const onGone = () => settle("gone");
+		const deadline = setTimeout(() => settle("abandoned"), MAX_DRAIN_MS);
+		req.on("data", onData);
+		req.on("end", onEnd);
+		req.on("error", onGone);
+		req.on("close", onGone);
+	});
+}
+function parseJsonBody(chunks) {
+	if (chunks.length === 0) return void 0;
+	try {
+		return JSON.parse(Buffer.concat(chunks).toString("utf8"));
+	} catch {
+		return;
+	}
+}
+//#endregion
 //#region src/deps.ts
 const NO_IDENTITY = async () => void 0;
 function makeRequestScope(deps, source = NO_IDENTITY) {
@@ -40645,45 +40742,62 @@ const LOOPBACK_HOSTS = /* @__PURE__ */ new Set([
 	"::1",
 	"localhost"
 ]);
+/**
+* Node's own bound on receiving a whole request, headers included. The body
+* deadline answers `/mcp` first; this closes the requests that path never
+* reads, such as a body sent to a 404 or 405, which Node otherwise drains for
+* its five-minute default. Node checks it every `connectionsCheckingInterval`.
+*/
+const REQUEST_TIMEOUT_MS = 45e3;
+const CONNECTIONS_CHECKING_INTERVAL_MS = 5e3;
 async function startHttpServer(input) {
-	const httpServer = createServer();
+	const httpServer = createServer({
+		requestTimeout: REQUEST_TIMEOUT_MS,
+		connectionsCheckingInterval: CONNECTIONS_CHECKING_INTERVAL_MS
+	});
 	await new Promise((resolve, reject) => {
 		httpServer.once("error", reject);
 		httpServer.listen(input.port, input.host, resolve);
 	});
 	const address = httpServer.address();
 	const port = typeof address === "object" && address !== null ? address.port : input.port;
-	const resource = readResourceEnvConfig(port, input.env ?? process.env);
-	const identities = makeIdentityResolver({
-		exchange: resource.exchange,
-		...input.fetch === void 0 ? {} : { fetch: input.fetch },
-		...input.now === void 0 ? {} : { now: input.now }
-	});
-	const handler = createHandler({
-		deps: input.deps,
-		identityForToken: (token) => identities.peek(token)
-	});
-	const mcp = toNodeHandler(handler);
-	const guards = LOOPBACK_HOSTS.has(input.host) ? [localhostHostValidation(), localhostOriginValidation()] : [];
-	httpServer.on("request", (req, res) => {
-		handle({
-			req,
-			res,
-			resource,
-			identities,
-			mcp,
-			guards,
-			deps: input.deps
-		}).catch((cause) => {
-			if (!res.headersSent) writeJson(res, 500, { error: "internal_error" });
-			console.error("[capxul-mcp] request failed:", cause);
-			reportRequestFailure(input.deps, cause);
+	try {
+		const resource = readResourceEnvConfig(port, input.env ?? process.env);
+		const identities = makeIdentityResolver({
+			exchange: resource.exchange,
+			...input.fetch === void 0 ? {} : { fetch: input.fetch },
+			...input.now === void 0 ? {} : { now: input.now }
 		});
-	});
-	return {
-		port,
-		close: () => closeHttpServer(httpServer, handler)
-	};
+		const handler = createHandler({
+			deps: input.deps,
+			identityForToken: (token) => identities.peek(token)
+		});
+		const mcp = toNodeHandler(handler);
+		const guards = LOOPBACK_HOSTS.has(input.host) ? [localhostHostValidation(), localhostOriginValidation()] : [];
+		httpServer.on("request", (req, res) => {
+			handle({
+				req,
+				res,
+				resource,
+				identities,
+				mcp,
+				guards,
+				deps: input.deps,
+				bodyDeadlineMs: input.bodyDeadlineMs
+			}).catch((cause) => {
+				if (!res.headersSent) writeJson(res, 500, { error: "internal_error" });
+				console.error("[capxul-mcp] request failed:", cause);
+				reportRequestFailure(input.deps, cause);
+			});
+		});
+		return {
+			port,
+			close: () => closeHttpServer(httpServer, handler)
+		};
+	} catch (cause) {
+		await closeListener(httpServer);
+		throw cause;
+	}
 }
 async function handle(input) {
 	const { req, res } = input;
@@ -40695,8 +40809,25 @@ async function handle(input) {
 	}
 	if (url.pathname !== "/mcp") return writeJson(res, 404, { error: "not_found" });
 	if (req.method !== "POST") return writeMethodNotAllowed(res, "POST");
-	const body = await readJsonBody(req);
-	if (body === TOO_LARGE) return writeJson(res, 413, { error: "payload_too_large" });
+	const body = await readJsonBody(req, input.bodyDeadlineMs);
+	if (body === TIMED_OUT) {
+		res.writeHead(408, {
+			"Content-Type": "application/json",
+			Connection: "close"
+		});
+		res.end(JSON.stringify({ error: "request_timeout" }));
+		return;
+	}
+	if (body === TOO_LARGE) {
+		const rest = await drainRest(req);
+		if (rest === "gone") return;
+		res.writeHead(413, {
+			"Content-Type": "application/json",
+			...rest === "abandoned" ? { Connection: "close" } : {}
+		});
+		res.end(JSON.stringify({ error: "payload_too_large" }));
+		return;
+	}
 	const decision = await authorize({
 		body,
 		authorization: headerValue(req, "authorization"),
@@ -40765,29 +40896,6 @@ function protectedResourceMetadata(resource) {
 		scopes_supported: [...AGENT_SCOPES]
 	};
 }
-/**
-* The gate must read the body before the handler does, so the size limit lives
-* here. `CAPXUL_MCP_HOST` can bind this server off loopback, and a JSON-RPC
-* request that needs more than this is not one of ours.
-*/
-const MAX_BODY_BYTES = 1048576;
-const TOO_LARGE = Symbol("body-too-large");
-async function readJsonBody(req) {
-	const chunks = [];
-	let size = 0;
-	for await (const chunk of req) {
-		const buffer = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-		size += buffer.length;
-		if (size > MAX_BODY_BYTES) return TOO_LARGE;
-		chunks.push(buffer);
-	}
-	if (chunks.length === 0) return void 0;
-	try {
-		return JSON.parse(Buffer.concat(chunks).toString("utf8"));
-	} catch {
-		return;
-	}
-}
 function headerValue(req, name) {
 	const value = req.headers[name];
 	return Array.isArray(value) ? value[0] : value;
@@ -40805,6 +40913,9 @@ function writeJson(res, status, body) {
 }
 async function closeHttpServer(server, handler) {
 	await handler.close();
+	await closeListener(server);
+}
+async function closeListener(server) {
 	await new Promise((resolve, reject) => {
 		server.close((error) => error === void 0 ? resolve() : reject(error));
 		server.closeAllConnections();

package/dist/{organizations-CQzoDh5i.mjs → organizations-DLp8ddZI.mjs}

@@ -404,9 +404,11 @@ const Errors = {
 	* internal state machine. `currentState` is the Effect-machine snapshot
 	* tag (stringified from the SDK's actor-shell snapshot; see
 	* `packages/errors/CONTEXT.md`); `validStates`
-	* enumerates the states the method accepts.
+	* enumerates the states the method accepts that the target can still reach.
+	* An empty list means the target is final, and the message says so instead
+	* of listing states.
 	*/
-	wrongState: (details) => new CapxulError("WRONG_STATE", `${details.method} called from state '${details.currentState}'; valid states: ${details.validStates.join(", ")}`, { details: {
+	wrongState: (details) => new CapxulError("WRONG_STATE", details.validStates.length === 0 ? `${details.method} called from state '${details.currentState}'; it can no longer move to any state` : `${details.method} called from state '${details.currentState}'; valid states: ${details.validStates.join(", ")}`, { details: {
 		method: details.method,
 		currentState: details.currentState,
 		validStates: [...details.validStates],
@@ -2160,6 +2162,8 @@ const Payment = Schema.Struct({
 		notSent: Schema.optionalKey(Schema.Literal(true))
 	})),
 	requestedOutput: Schema.optionalKey(MoneySchema),
+	/** What Bridge reports reached the recipient's bank. Present once delivery is done. */
+	deliveredOutput: Schema.optionalKey(MoneySchema),
 	outputExact: Schema.optionalKey(Schema.Boolean),
 	recipientOnCapxul: Schema.optionalKey(Schema.Boolean),
 	recipientWarning: Schema.optionalKey(Schema.Boolean),
@@ -2179,7 +2183,7 @@ const Payment = Schema.Struct({
 	})),
 	createdAt: EpochMsSchema$1,
 	updatedAt: EpochMsSchema$1
-}).pipe(Schema.check(Schema.makeFilter((payment) => payment.documents.every((document) => document.role !== "instruction" || document.kind === "memo" || paymentTypeForDocumentKind(document.kind) === payment.paymentType), { message: "document kind must map to paymentType" }), Schema.makeFilter((payment) => payment.recipient.kind === "party_account" ? payment.requestedOutput !== void 0 && payment.outputExact !== void 0 && payment.recipientOnCapxul !== void 0 && payment.recipientWarning !== void 0 && payment.links !== void 0 && payment.legs?.length === 2 && payment.legs[0]?.kind === "funding" && payment.legs[1]?.kind === "delivery" : payment.requestedOutput === void 0 && payment.outputExact === void 0 && payment.recipientOnCapxul === void 0 && payment.recipientWarning === void 0 && payment.links === void 0 && payment.legs === void 0, { message: "Bank payout Payments require their quote, output and two rail legs" })));
+}).pipe(Schema.check(Schema.makeFilter((payment) => payment.documents.every((document) => document.role !== "instruction" || document.kind === "memo" || paymentTypeForDocumentKind(document.kind) === payment.paymentType), { message: "document kind must map to paymentType" }), Schema.makeFilter((payment) => payment.recipient.kind === "party_account" ? payment.requestedOutput !== void 0 && payment.outputExact !== void 0 && payment.recipientOnCapxul !== void 0 && payment.recipientWarning !== void 0 && payment.links !== void 0 && payment.legs?.length === 2 && payment.legs[0]?.kind === "funding" && payment.legs[1]?.kind === "delivery" : payment.requestedOutput === void 0 && payment.deliveredOutput === void 0 && payment.outputExact === void 0 && payment.recipientOnCapxul === void 0 && payment.recipientWarning === void 0 && payment.links === void 0 && payment.legs === void 0, { message: "Bank payout Payments require their quote, output and two rail legs" })));
 //#endregion
 //#region ../../packages/protocol/src/payments/model.ts
 function toPaymentId(raw) {
@@ -2784,6 +2788,8 @@ const PaymentQuoteSchema = Schema.Struct({
 	requestedOutput: MoneySchema,
 	outputExact: Schema.Boolean,
 	funding: AssetAmountSchema,
+	/** The part of `funding` that covers rate movement before the transfer is funded. */
+	slippage: Schema.optionalKey(AssetAmountSchema),
 	expiresAt: Schema.Finite,
 	recipient: Schema.Struct({
 		label: Schema.String,
@@ -17733,7 +17739,7 @@ function causeFromSummary(links) {
 }
 //#endregion
 //#region ../../packages/sdk/package.json
-var version$1 = "4.20.0-beta.37";
+var version$1 = "4.20.0-beta.39";
 //#endregion
 //#region ../../packages/sdk/src/observability/telemetry/exception-projection.ts
 /** Fixed fallback for failures that have no safe message. */
@@ -26200,7 +26206,7 @@ function makeApprovalsMethods(deps) {
 		const signal = options?.signal;
 		if (isCommandApproval(input)) return openApproval(signal, (signerAddress) => prepareVerifiedCommand(deps, input, signerAddress, signal));
 		if (isPermissionChange(input)) return openApproval(signal, async (signerAddress) => {
-			const { prepareVerifiedPermissionChange } = await import("./permission-approvals-COFV61rL.mjs");
+			const { prepareVerifiedPermissionChange } = await import("./permission-approvals-Co_RwJB1.mjs");
 			return prepareVerifiedPermissionChange(deps, input, signerAddress, signal);
 		});
 		if ("organizationId" in input) return checkedBankApproval(deps, input, await openApproval(signal, (signerAddress) => prepareVerifiedOrganizationPayment(deps, input, signerAddress, signal)));

package/dist/{permission-approvals-COFV61rL.mjs → permission-approvals-Co_RwJB1.mjs}

@@ -1,4 +1,4 @@
-import { B as abandonPrepared, Kt as CAPXUL_OPERATIONS, Ln as absurd, W as asCapxulError, a as prepareConfiguration, bt as noSessionError, d as verifiedPreparation, f as buildCommand, i as authorInvitation, l as preparePermission, o as verifiedConfiguration, or as CapxulError, p as validateReplacementInput, u as preparedIdentity } from "./organizations-CQzoDh5i.mjs";
+import { B as abandonPrepared, Kt as CAPXUL_OPERATIONS, Ln as absurd, W as asCapxulError, a as prepareConfiguration, bt as noSessionError, d as verifiedPreparation, f as buildCommand, i as authorInvitation, l as preparePermission, o as verifiedConfiguration, or as CapxulError, p as validateReplacementInput, u as preparedIdentity } from "./organizations-DLp8ddZI.mjs";
 //#region ../../packages/sdk/src/accounts/permission-approvals.ts
 /** Prepare a Permission write or an invitation's configuration for `signerAddress`, checked. */
 function prepareVerifiedPermissionChange(deps, input, signerAddress, signal) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/mcp",
-  "version": "4.20.0-beta.37",
+  "version": "4.20.0-beta.39",
   "private": false,
   "description": "Capxul MCP server for auth, Account readiness, identity, Organizations, relationships, requests, destinations, and testnet funding over Streamable HTTP.",
   "keywords": [
@@ -54,9 +54,9 @@
     "typescript": "npm:@typescript/typescript6@6.0.2",
     "vite": "npm:@voidzero-dev/vite-plus-core@1.0.0",
     "vite-plus": "1.0.0",
-    "@capxul/observability": "4.20.0-beta.37",
+    "@capxul/observability": "4.20.0-beta.39",
     "@capxul/protocol": "0.2.0-beta.8",
-    "@capxul/sdk": "4.20.0-beta.37",
+    "@capxul/sdk": "4.20.0-beta.39",
     "@capxul/typescript-config": "0.0.0"
   },
   "scripts": {