@capxul/sdk 1.0.0-alpha.19 → 1.0.0-alpha.20

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { A as toSessionToken, C as toEpochSeconds, D as toPublishableKey, E as toOrgId, F as Errors, I as isCapxulError, M as decodeConvexError, N as CapxulError, O as toPublishableKeyId, P as EXPECTED_OPERATION_OUTCOMES, S as toEpochMs, T as toKycTier, _ as toChainId, b as toDurationMs, c as BYTES32_RE, d as toAccountId, f as toAddress, g as toAuthUserId, h as toAppId, j as toSubAccountId, k as toRoleKey, l as EVM_ADDRESS_RE$1, m as toAnonymousDistinctId, n as BrowserAuthCacheAdapter, o as AuthCachePortTag, p as toAllowedOrigin, s as APP_ID_RE, t as InMemoryAuthCacheAdapter, u as SUPPORTED_CURRENCY_CODES, v as toCountryCode, w as toJwtToken, x as toEmail, y as toCurrencyCode } from "./InMemoryAuthCacheAdapter-BuVZpnSx.mjs";
+import { A as toSessionToken, C as toEpochSeconds, D as toPublishableKey, E as toOrgId, F as Errors, I as isCapxulError, M as decodeConvexError, N as CapxulError, O as toPublishableKeyId, P as EXPECTED_OPERATION_OUTCOMES, S as toEpochMs, T as toKycTier, _ as toChainId, b as toDurationMs, c as BYTES32_RE, d as toAccountId, f as toAddress, g as toAuthUserId, h as toAppId, j as toSubAccountId, k as toRoleKey, l as EVM_ADDRESS_RE$1, m as toAnonymousDistinctId, n as BrowserAuthCacheAdapter, o as AuthCachePortTag, p as toAllowedOrigin, s as APP_ID_RE, t as InMemoryAuthCacheAdapter, u as SUPPORTED_CURRENCY_CODES, v as toCountryCode, w as toJwtToken, x as toEmail, y as toCurrencyCode } from "./InMemoryAuthCacheAdapter-CHYpYyk5.mjs";
 import { concat, formatUnits, keccak256, padHex, parseUnits, recoverAddress, stringToHex, toBytes, toEventSelector, toFunctionSelector } from "viem";
 import { Context, Data, Deferred, Duration, Effect, Either, Exit, Layer, Ref, Request, Scope } from "effect";
 import { getFunctionName, makeFunctionReference } from "convex/server";
@@ -249,13 +249,31 @@ function parseV8StackFrames(error) {
 	}
 	return frames;
 }
+/** Fixed, leak-safe frame used when the error carries no parseable stack. */
+const SDK_BOUNDARY_FILENAME = "capxul-sdk-observation://boundary";
 /**
-* Build PostHog's `$exception_list` format from a list of frames.
-* Returns `[{ frames: [...] }]` or `undefined` if the frames list is empty.
+* Build PostHog's `$exception_list` (always a single entry). Error Tracking
+* groups on `type`, so it is ALWAYS present (the CapxulError code) — the
+* previous `[{ frames }]` shape omitted it and PostHog dropped the event as
+* "missing field `type`". When the error has no parseable stack, a synthetic
+* boundary frame stands in so the event still ingests as a real Issue (#1031).
 */
-function buildExceptionList(frames) {
-	if (frames.length === 0) return void 0;
-	return [{ frames }];
+function buildExceptionList(input) {
+	const frames = input.frames.length > 0 ? input.frames : [{
+		filename: SDK_BOUNDARY_FILENAME,
+		function: input.operation ?? "unknown",
+		lineno: 1,
+		colno: 1
+	}];
+	return [{
+		type: input.type,
+		value: input.value,
+		mechanism: {
+			handled: true,
+			type: "capxul_sdk_boundary"
+		},
+		stacktrace: { frames }
+	}];
 }
 //#endregion
 //#region src/telemetry/get-failure-mode.ts
@@ -306,6 +324,8 @@ function resolveFailureMode(error, contextFailureMode) {
 }
 //#endregion
 //#region src/telemetry/capture-exception.ts
+/** Fixed, leak-safe message — the raw error message may carry PII and never ships. */
+const EXCEPTION_MESSAGE = "Capxul SDK operation failed";
 /**
 * Capture an error as a `$exception` event through the telemetry port,
 * formatted for PostHog Error Tracking.
@@ -319,16 +339,24 @@ function resolveFailureMode(error, contextFailureMode) {
 */
 function captureException(telemetry, error, context) {
 	return Effect.catchAllDefect(Effect.sync(() => {
-		const exceptionList = buildExceptionList(error instanceof Error ? parseV8StackFrames(error) : []);
+		const frames = error instanceof Error ? parseV8StackFrames(error) : [];
 		const capxulError = isCapxulError(error) ? error : null;
+		const errorCode = capxulError?.code ?? context?.capxul_error_code ?? "UNKNOWN";
 		const props = {
-			capxul_error_code: capxulError?.code ?? context?.capxul_error_code ?? "UNKNOWN",
+			capxul_error_code: errorCode,
+			$exception_type: errorCode,
+			$exception_message: EXCEPTION_MESSAGE,
+			$exception_list: buildExceptionList({
+				type: errorCode,
+				value: EXCEPTION_MESSAGE,
+				...context?.operation === void 0 ? {} : { operation: context.operation },
+				frames
+			}),
 			layer: capxulError?.layer ?? context?.layer,
 			operation: context?.operation,
 			provider: context?.provider,
 			failure_mode: resolveFailureMode(error, context?.failure_mode)
 		};
-		if (exceptionList !== void 0) props.$exception_list = exceptionList;
 		if (capxulError?.details !== void 0) props.details = JSON.stringify(capxulError.details);
 		for (const key of Object.keys(props)) if (props[key] === void 0) delete props[key];
 		return telemetry.emit({
@@ -1624,7 +1652,7 @@ async function recoverRawDigestSigner(input) {
 }
 //#endregion
 //#region package.json
-var version = "1.0.0-alpha.19";
+var version = "1.0.0-alpha.20";
 //#endregion
 //#region src/ports/auth-client.ts
 var AuthClientError = class extends Data.TaggedError("AuthClientError") {};
@@ -5239,6 +5267,18 @@ function transportErrorFromThrown(operation, request, cause) {
 	return transportErrorFromCapxul(operation, request, cause instanceof Error ? Errors.providerError("transport", request.name, cause) : Errors.providerError("transport", request.name, new Error(String(cause))), cause);
 }
 //#endregion
+//#region src/adapters/diagnostic/ConsoleDiagnosticAdapter.ts
+const DEFAULT_ACCOUNT_SETUP_LOG_PREFIX = "[capxul:account-setup]";
+var ConsoleDiagnosticAdapter = class {
+	prefix;
+	constructor(prefix = DEFAULT_ACCOUNT_SETUP_LOG_PREFIX) {
+		this.prefix = prefix;
+	}
+	trace(scope, detail) {
+		globalThis.console?.debug?.(`${this.prefix} ${scope}`, detail);
+	}
+};
+//#endregion
 //#region src/openfort/create-openfort-browser-signer.ts
 function openfortProviderError(operation, cause) {
 	return cause instanceof CapxulError ? cause : Errors.providerError("openfort", operation, cause, { failure_mode: "unknown" });
@@ -6599,10 +6639,6 @@ function makeCurrentUserMethods(deps) {
 			deps.smartAccount.loadCurrent(options),
 			deps.orgs(options)
 		]);
-		if (!account.ok) return {
-			ok: false,
-			error: account.error
-		};
 		if (!smartAccount.ok) return {
 			ok: false,
 			error: smartAccount.error
@@ -6611,6 +6647,10 @@ function makeCurrentUserMethods(deps) {
 			ok: false,
 			error: organizations.error
 		};
+		if (!account.ok && account.error.code !== "SMART_ACCOUNT_MISSING") return {
+			ok: false,
+			error: account.error
+		};
 		return {
 			ok: true,
 			value: {
@@ -6621,10 +6661,10 @@ function makeCurrentUserMethods(deps) {
 					handle: null,
 					paymentLink: null
 				},
-				personalAccount: {
+				personalAccount: account.ok ? {
 					id: account.value.id,
 					address: smartAccount.value?.smartAccountAddress ?? null
-				},
+				} : null,
 				organizations: organizations.value.map((organization) => ({
 					id: organization.id,
 					name: organization.name,
@@ -8838,24 +8878,34 @@ function ignoreDeliveryFailure(delivery) {
 		Promise.resolve(delivery).catch(() => void 0);
 	} catch {}
 }
+/**
+* Map an ALREADY-sanitized observation context to the snake_case PostHog
+* property keys. Shared by the failure boundary here and the host
+* success-telemetry seam (`telemetry/from-posthog.ts`) so both attach identical
+* correlation fields from one definition.
+*/
+function observationContextProps(context) {
+	const props = {};
+	if (context?.application !== void 0) props.application = context.application;
+	if (context?.release !== void 0) props.release = context.release;
+	if (context?.sessionId !== void 0) props.session_id = context.sessionId;
+	if (context?.organizationId !== void 0) props.organization_id = context.organizationId;
+	if (context?.correlationId !== void 0) props.correlation_id = context.correlationId;
+	if (context?.anonymousId !== void 0) props.anonymous_id = context.anonymousId;
+	return props;
+}
 function postHogProperties(failure, context) {
-	const properties = {
-		sdk_version: failure.sdkVersion,
-		operation: failure.operation,
-		error_kind: failure.errorKind,
-		handled: true
-	};
 	const merged = sanitizeObservationContext({
 		...context,
 		...failure.context
 	});
-	if (merged?.application !== void 0) properties.application = merged.application;
-	if (merged?.release !== void 0) properties.release = merged.release;
-	if (merged?.sessionId !== void 0) properties.session_id = merged.sessionId;
-	if (merged?.organizationId !== void 0) properties.organization_id = merged.organizationId;
-	if (merged?.correlationId !== void 0) properties.correlation_id = merged.correlationId;
-	if (merged?.anonymousId !== void 0) properties.anonymous_id = merged.anonymousId;
-	return properties;
+	return {
+		sdk_version: failure.sdkVersion,
+		operation: failure.operation,
+		error_kind: failure.errorKind,
+		handled: true,
+		...observationContextProps(merged)
+	};
 }
 function resolveContext(context) {
 	return sanitizeObservationContext(resolveRawContext(context));
@@ -8906,7 +8956,7 @@ function normalizeErrorKind(value) {
 	return typeof value === "string" && /^[A-Za-z][A-Za-z0-9_.-]{0,63}$/u.test(value) ? value : "Error";
 }
 function syntheticException(operation, kind) {
-	const error = /* @__PURE__ */ new Error("Capxul SDK operation failed");
+	const error = /* @__PURE__ */ new Error(EXCEPTION_MESSAGE);
 	error.name = kind;
 	error.stack = `${kind}: ${error.message}\n    at CapxulSdkBoundary.${operation} (capxul-sdk-observation://boundary/${operation}:1:1)`;
 	return error;
@@ -9252,6 +9302,9 @@ async function createCapxulClient$1(input) {
 		if (signer === void 0 && runtime === "browser") signer = createOpenfortBrowserSignerFromBootstrap({
 			...adapters.value.bootstrap,
 			authBaseUrl: resolvedAuthBaseUrl
+		}, {
+			diagnostic: new ConsoleDiagnosticAdapter(),
+			telemetry: adapters.value.ports.telemetry
 		});
 		const client = wireOpenfortSignerLifecycle(assembleCapxulClient({
 			ports: adapters.value.ports,
@@ -9466,6 +9519,73 @@ async function createCapxulClient(input) {
 	return createCapxulClient$1(input);
 }
 //#endregion
-export { CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, CapxulError, captureException, captureExceptionSync, createCapxulClient, deriveDevPrivateKey, devPrivateKeySigner, eip1193AccountProvider, embeddedSigner, fromPostHog, injectedWalletSigner, isCapxulError, isSettingUpLifecycle, localPrivateKeyAccountProvider, openfortEmbeddedSigner, openfortEmbeddedSignerFromWallet, openfortEmbeddedWalletPort };
+//#region src/telemetry/from-posthog.ts
+/**
+* Drop props that must never cross to a host-owned external sink. Today that is
+* the `$exception` `details` blob: `captureException` serializes
+* `CapxulError.details` (e.g. `{ asset, available, required }`, `{ name }`,
+* `{ accountId }` — errors.ts) into it, and the shared redactor has no
+* `$exception` rule, so it is stripped here at the boundary (infra#1037). The
+* safe fields (error code, operation, failure_mode, the fixed leak-safe message,
+* stack frames) are preserved.
+*/
+function stripHostUnsafeProps(props) {
+	if (props === void 0) return void 0;
+	const { details: _details, ...safe } = props;
+	return safe;
+}
+/**
+* Adapt the host's already-initialized posthog-like client into a
+* `TelemetryPort` for the `telemetry` prop / input. This port SUPPLANTS the
+* SDK's no-op default telemetry sink (`production.ts` binds it via
+* `Layer.succeed`, not `compose` — there is no client-side success relay to
+* compose with); it is additive to Capxul's backend first-party record and
+* never owns the client.
+*/
+function telemetryFromPostHog(client, options = {}) {
+	const active = () => {
+		if (client === null || client === void 0) return false;
+		try {
+			return typeof options.enabled === "function" ? options.enabled() : options.enabled ?? true;
+		} catch {
+			return false;
+		}
+	};
+	const contextProps = () => {
+		let raw;
+		try {
+			raw = typeof options.context === "function" ? options.context() : options.context;
+		} catch {
+			return {};
+		}
+		return observationContextProps(sanitizeObservationContext(raw));
+	};
+	return new PostHogTelemetryAdapter({
+		capture: (name, props) => {
+			if (!active() || client === null || client === void 0) return;
+			client.capture(name, {
+				...stripHostUnsafeProps(props),
+				...contextProps()
+			});
+		},
+		identify: (input) => {
+			if (!active() || client?.identify === void 0) return;
+			client.identify(input.distinctId, {
+				...input.traits,
+				...input.properties
+			});
+		},
+		group: (input) => {
+			if (!active() || client?.group === void 0) return;
+			client.group(input.groupType, input.groupKey, input.properties === void 0 ? void 0 : { ...input.properties });
+		},
+		reset: () => {
+			if (!active() || client?.reset === void 0) return;
+			client.reset();
+		}
+	});
+}
+//#endregion
+export { CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, CapxulError, captureException, captureExceptionSync, createCapxulClient, deriveDevPrivateKey, devPrivateKeySigner, eip1193AccountProvider, embeddedSigner, fromPostHog, injectedWalletSigner, isCapxulError, isSettingUpLifecycle, localPrivateKeyAccountProvider, openfortEmbeddedSigner, openfortEmbeddedSignerFromWallet, openfortEmbeddedWalletPort, telemetryFromPostHog };
 
 //# sourceMappingURL=index.mjs.map