@capxul/sdk 1.2.2 → 1.2.3

package/dist/{create-capxul-client-DVzm78RU.mjs → create-capxul-client-BTnlLLag.mjs}

@@ -925,6 +925,50 @@ function isProvisioningTelemetryDebugEnabled() {
 	return globalThis.process?.env?.CAPXUL_DEBUG_TELEMETRY === "1";
 }
 //#endregion
+//#region src/internal/invocation-observation.ts
+const INVOCATION_OBSERVATION = Symbol("capxul.invocation-observation");
+const FAILURE_INVOCATION_SNAPSHOT = Symbol("capxul.failure-invocation-snapshot");
+/** @internal Attach one immutable, non-wire invocation snapshot to an SDK-owned object. */
+function attachInvocationObservation(target, source) {
+	const snapshot = Object.freeze(source.context === void 0 ? { active: source.active } : {
+		active: source.active,
+		context: Object.freeze({ ...source.context })
+	});
+	Object.defineProperty(target, INVOCATION_OBSERVATION, {
+		configurable: false,
+		enumerable: false,
+		value: snapshot,
+		writable: false
+	});
+	return target;
+}
+/** @internal Read the snapshot without exposing its symbol or adding a wire field. */
+function readInvocationObservation(source) {
+	if (typeof source !== "object" || source === null) return void 0;
+	return source[INVOCATION_OBSERVATION];
+}
+/** @internal Carry a snapshot across an SDK adapter projection without resolving again. */
+function copyInvocationObservation(source, target) {
+	const snapshot = readInvocationObservation(source);
+	return snapshot === void 0 ? target : attachInvocationObservation(target, snapshot);
+}
+/** @internal Carry the public call-start delivery decision with its failure envelope. */
+function markFailureInvocationSnapshot(failure, snapshot) {
+	Object.defineProperty(failure, FAILURE_INVOCATION_SNAPSHOT, {
+		configurable: false,
+		enumerable: false,
+		value: Object.freeze(snapshot),
+		writable: false
+	});
+	return failure;
+}
+/** @internal Read the call-start delivery decision; undefined means a direct adapter call. */
+function readFailureInvocationSnapshot(failure) {
+	if (typeof failure !== "object" || failure === null) return void 0;
+	const snapshot = failure[FAILURE_INVOCATION_SNAPSHOT];
+	return typeof snapshot === "object" && snapshot !== null && "active" in snapshot ? snapshot : void 0;
+}
+//#endregion
 //#region src/domain/machine/telemetry.ts
 const definedEntries = (values) => Object.fromEntries(Object.entries(values).filter((entry) => entry[1] !== void 0));
 const SAFE_ENGINEERING_ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u;
@@ -1067,7 +1111,7 @@ const boot = (spec, options = {}) => Effect.gen(function* () {
 	const makeFailure = (state, event, reason, details) => new ActorFailure(reason, spec.machine, spec.label(state), event._tag, details);
 	const nonApplied = (state, event, reason, outcome, env) => {
 		const slot = env.origin?.slot ?? spec.slot(event);
-		return {
+		return copyInvocationObservation(env.invocation, {
 			machine: spec.machine,
 			state: spec.label(state),
 			event: event._tag,
@@ -1077,9 +1121,9 @@ const boot = (spec, options = {}) => Effect.gen(function* () {
 			duration_ms: duration(env.startedAt),
 			...withCarriage(env.invocation),
 			...outcome === "refused" ? { refusal_code: reason } : { error_code: reason }
-		};
+		});
 	};
-	const applied = (from, to, event, slot, epoch, env) => ({
+	const applied = (from, to, event, slot, epoch, env) => copyInvocationObservation(env.invocation, {
 		machine: spec.machine,
 		from: spec.label(from),
 		event: event._tag,
@@ -1606,6 +1650,25 @@ const EpochMsSchema$1 = Schema.Number.pipe(Schema.refine((n) => Number.isSafeInt
 const DurationMsSchema$1 = Schema.Number.pipe(Schema.refine((n) => Number.isSafeInteger(n) && n >= 0, { message: "must be a non-negative safe integer" }));
 //#endregion
 //#region ../wire/src/bootstrap.ts
+const PUBLIC_POSTHOG_PROJECT_TOKEN = /^phc_[A-Za-z0-9_-]{1,191}$/u;
+const PostHogIngestOrigin = Schema.String.pipe(Schema.refine((value) => {
+	try {
+		const url = new URL(value);
+		return url.protocol === "https:" && url.username.length === 0 && url.password.length === 0 && url.pathname === "/" && url.search.length === 0 && url.hash.length === 0 && (url.hostname === "posthog.com" || url.hostname.endsWith(".posthog.com"));
+	} catch {
+		return false;
+	}
+}, { message: "must be a credential-free PostHog HTTPS ingest origin" }));
+const EngineeringTelemetryBootstrapPolicy = Schema.Struct({
+	host: PostHogIngestOrigin,
+	projectToken: Schema.String.pipe(Schema.refine((value) => PUBLIC_POSTHOG_PROJECT_TOKEN.test(value), { message: "must be a public PostHog project token" })),
+	capxulEnv: Schema.Union([
+		Schema.Literal("development"),
+		Schema.Literal("e2e"),
+		Schema.Literal("staging"),
+		Schema.Literal("production")
+	])
+});
 /**
 * `BootstrapEnvelope` v1.
 *
@@ -1631,7 +1694,8 @@ const BootstrapEnvelope = Schema.Struct({
 		convexUrl: Schema.String,
 		siteBaseUrl: Schema.String,
 		openfortPublishableKey: Schema.String,
-		shieldPublishableKey: Schema.String
+		shieldPublishableKey: Schema.String,
+		engineeringTelemetry: Schema.optional(EngineeringTelemetryBootstrapPolicy)
 	})
 });
 //#endregion
@@ -2879,6 +2943,9 @@ function makeAccountMethods(deps) {
 	};
 }
 //#endregion
+//#region package.json
+var version = "1.2.3";
+//#endregion
 //#region src/ports/auth-client.ts
 var AuthClientError = class extends Data.TaggedError("AuthClientError") {};
 var AuthClientPortTag = class extends Context.Service()("@capxul/sdk/ports/AuthClientPort") {};
@@ -2904,11 +2971,11 @@ function fromResult(operation, run) {
 		})
 	}).pipe(Effect.flatMap((result) => result.ok ? Effect.succeed(result.value) : Effect.fail(new AuthClientError({
 		operation,
-		kind: errorKind(result.error),
+		kind: errorKind$1(result.error),
 		cause: result.error
 	}))));
 }
-function errorKind(error) {
+function errorKind$1(error) {
 	if (error.code === "CANCELLED") return "cancelled";
 	if (error.code === "NETWORK_ERROR") return "network";
 	if (error.code === "INVALID_INPUT" || error.code === "OTP_EXPIRED") return "validation";
@@ -2945,45 +3012,6 @@ function convexCallErrorFromCapxul(operation, error) {
 }
 var ConvexCallPortTag = class extends Context.Service()("@capxul/sdk/ports/ConvexCallPort") {};
 //#endregion
-//#region src/internal/invocation-observation.ts
-const INVOCATION_OBSERVATION = Symbol("capxul.invocation-observation");
-const FAILURE_INVOCATION_SNAPSHOT = Symbol("capxul.failure-invocation-snapshot");
-/** @internal Attach one immutable, non-wire invocation snapshot to an SDK-owned object. */
-function attachInvocationObservation(target, context) {
-	const snapshot = Object.freeze(context === void 0 ? {} : { context: Object.freeze({ ...context }) });
-	Object.defineProperty(target, INVOCATION_OBSERVATION, {
-		configurable: false,
-		enumerable: false,
-		value: snapshot,
-		writable: false
-	});
-	return target;
-}
-/** @internal Read the snapshot without exposing its symbol or adding a wire field. */
-function readInvocationObservation(source) {
-	if (typeof source !== "object" || source === null) return void 0;
-	return source[INVOCATION_OBSERVATION];
-}
-/** @internal Carry a snapshot across an SDK adapter projection without resolving again. */
-function copyInvocationObservation(source, target) {
-	const snapshot = readInvocationObservation(source);
-	return snapshot === void 0 ? target : attachInvocationObservation(target, snapshot.context);
-}
-/** @internal Mark a failure envelope as already resolved at the public invocation boundary. */
-function markFailureInvocationSnapshot(failure) {
-	Object.defineProperty(failure, FAILURE_INVOCATION_SNAPSHOT, {
-		configurable: false,
-		enumerable: false,
-		value: true,
-		writable: false
-	});
-	return failure;
-}
-/** @internal Distinguish public-boundary failures from direct adapter calls. */
-function hasFailureInvocationSnapshot(failure) {
-	return typeof failure === "object" && failure !== null && failure[FAILURE_INVOCATION_SNAPSHOT] === true;
-}
-//#endregion
 //#region src/ports/identity.ts
 var IdentityError = class extends Data.TaggedError("IdentityError") {};
 function identityErrorFromCapxul(operation, error, cause = error) {
@@ -3162,7 +3190,6 @@ const TelemetryEnvelopeProps = {
 		"mcp",
 		"e2e"
 	]),
-	capxul_e2e_run_id: OptionalString,
 	journey_id: OptionalString,
 	correlation_id: OptionalString,
 	sdk_version: OptionalString
@@ -3764,7 +3791,7 @@ function redactTelemetryEvent(event, options = {}) {
 }
 function redactTelemetryProps(name, props, options = {}) {
 	if (props === void 0) return void 0;
-	const clone = cloneProps(props);
+	const clone = cloneProps$1(props);
 	if (options.rawMode === true) return clone;
 	for (const key of PII_PROP_KEYS_BY_EVENT[name] ?? []) redactProperty(clone, key);
 	return clone;
@@ -3779,17 +3806,17 @@ function redactProperty(props, key) {
 	const value = props[key];
 	if (typeof value === "string") props[key] = sha256Hex(value).slice(0, 12);
 }
-function cloneProps(props) {
+function cloneProps$1(props) {
 	const cloned = {};
-	for (const [key, value] of Object.entries(props)) cloned[key] = cloneTelemetryValue(value);
+	for (const [key, value] of Object.entries(props)) cloned[key] = cloneTelemetryValue$1(value);
 	return cloned;
 }
-function cloneTelemetryValue(value) {
-	if (Array.isArray(value)) return value.map(cloneTelemetryValue);
+function cloneTelemetryValue$1(value) {
+	if (Array.isArray(value)) return value.map(cloneTelemetryValue$1);
 	if (value === null || typeof value !== "object") return value;
 	if (Object.getPrototypeOf(value) !== Object.prototype) return value;
 	const cloned = {};
-	for (const [key, nested] of Object.entries(value)) cloned[key] = cloneTelemetryValue(nested);
+	for (const [key, nested] of Object.entries(value)) cloned[key] = cloneTelemetryValue$1(nested);
 	return cloned;
 }
 const SHA256_INITIAL_HASH = [
@@ -3947,6 +3974,90 @@ function rotr(value, bits) {
 //#region src/ports/telemetry.ts
 var TelemetryPortTag = class extends Context.Service()("@capxul/sdk/ports/TelemetryPort") {};
 //#endregion
+//#region src/adapters/telemetry/PostHogTelemetryAdapter.ts
+var PostHogTelemetryAdapter = class {
+	#capture;
+	#identify;
+	#group;
+	#reset;
+	constructor(deps) {
+		this.#capture = deps.capture;
+		this.#identify = deps.identify ?? (() => void 0);
+		this.#group = deps.group ?? (() => void 0);
+		this.#reset = deps.reset ?? (() => void 0);
+	}
+	emit(event) {
+		return this.#run(() => this.#capture(event.name, redactTelemetryProps(event.name, cloneProps(event.props)), event), "emit", event.name);
+	}
+	identify(input) {
+		return this.#run(() => this.#identify(cloneIdentifyInput(input)), "identify");
+	}
+	group(input) {
+		return this.#run(() => this.#group(cloneGroupInput(input)), "group");
+	}
+	reset() {
+		return this.#run(() => this.#reset(), "reset");
+	}
+	#run(operation, operationName, eventName) {
+		const diagnose = Effect.logWarning("product.telemetry.transport.dropped").pipe(Effect.annotateLogs({
+			operation: operationName,
+			...eventName === void 0 ? {} : { product_event: eventName }
+		}), Effect.catchCause(() => Effect.void));
+		return Effect.suspend(() => {
+			let pending;
+			try {
+				pending = operation();
+			} catch {
+				return diagnose;
+			}
+			if (pending === void 0) return Effect.void;
+			const transport = Effect.tryPromise({
+				try: () => pending,
+				catch: () => void 0
+			}).pipe(Effect.catch(() => diagnose));
+			return Effect.forkDetach(transport, { startImmediately: true }).pipe(Effect.asVoid);
+		});
+	}
+};
+function PostHogTelemetryLayer(deps) {
+	return Layer.succeed(TelemetryPortTag, new PostHogTelemetryAdapter(deps));
+}
+function cloneIdentifyInput(input) {
+	const traits = input.traits === void 0 ? void 0 : cloneProps(input.traits);
+	const properties = input.properties === void 0 ? void 0 : cloneProps(input.properties);
+	return {
+		distinctId: input.distinctId,
+		...input.anonDistinctId === void 0 ? {} : { anonDistinctId: input.anonDistinctId },
+		...traits === void 0 ? {} : { traits },
+		...properties === void 0 ? {} : { properties }
+	};
+}
+function cloneGroupInput(input) {
+	const properties = input.properties === void 0 ? void 0 : cloneProps(input.properties);
+	return properties === void 0 ? {
+		groupType: input.groupType,
+		groupKey: input.groupKey
+	} : {
+		groupType: input.groupType,
+		groupKey: input.groupKey,
+		properties
+	};
+}
+function cloneProps(props) {
+	if (props === void 0) return void 0;
+	const cloned = {};
+	for (const [key, value] of Object.entries(props)) cloned[key] = cloneTelemetryValue(value);
+	return cloned;
+}
+function cloneTelemetryValue(value) {
+	if (Array.isArray(value)) return value.map(cloneTelemetryValue);
+	if (value === null || typeof value !== "object") return value;
+	if (Object.getPrototypeOf(value) !== Object.prototype) return value;
+	const cloned = {};
+	for (const [key, nested] of Object.entries(value)) cloned[key] = cloneTelemetryValue(nested);
+	return cloned;
+}
+//#endregion
 //#region src/flows/identity.ts
 const IDENTITY_SLOT = {
 	session: "identity:session",
@@ -4288,7 +4399,7 @@ const identitySpec = (input, sessionStore = { current: null }) => {
 				case "RequestOtp": return {
 					slot: IDENTITY_SLOT.auth,
 					port: "auth-client",
-					run: (send) => call("auth-client.send-otp", input.ports.authClient.sendOtp({ email: toEmail(event.email) })).pipe(Effect.andThen(call("clock.now", input.ports.clock.now)), Effect.flatMap((at) => send({
+					run: (send, controls) => call("auth-client.send-otp", input.ports.authClient.sendOtp(copyInvocationObservation(controls, { email: toEmail(event.email) }))).pipe(Effect.andThen(call("clock.now", input.ports.clock.now)), Effect.flatMap((at) => send({
 						_tag: "OtpSent",
 						at
 					})), Effect.catch((failure) => send({
@@ -4299,10 +4410,10 @@ const identitySpec = (input, sessionStore = { current: null }) => {
 				case "VerifyOtp": return {
 					slot: IDENTITY_SLOT.auth,
 					port: "auth-client",
-					run: (send) => call("auth-client.verify-otp", input.ports.authClient.verifyOtp({
+					run: (send, controls) => call("auth-client.verify-otp", input.ports.authClient.verifyOtp(copyInvocationObservation(controls, {
 						email: toEmail(event.email),
 						otp: event.otp
-					})).pipe(Effect.tap((session) => Effect.sync(() => {
+					}))).pipe(Effect.tap((session) => Effect.sync(() => {
 						sessionStore.current = session;
 					})), Effect.flatMap((session) => sessionProfile(input, session).pipe(Effect.flatMap((loaded) => send({
 						_tag: "Verified",
@@ -4316,7 +4427,7 @@ const identitySpec = (input, sessionStore = { current: null }) => {
 				case "ReadSession": return {
 					slot: IDENTITY_SLOT.session,
 					port: "auth-client",
-					run: (send) => call("auth-client.get-session", input.ports.authClient.getSession()).pipe(Effect.tap((session) => Effect.sync(() => {
+					run: (send, controls) => call("auth-client.get-session", input.ports.authClient.getSession(copyInvocationObservation(controls, {}))).pipe(Effect.tap((session) => Effect.sync(() => {
 						sessionStore.current = session;
 					})), Effect.flatMap((session) => sessionProfile(input, session)), Effect.flatMap((loaded) => send({
 						_tag: "SessionRead",
@@ -4331,7 +4442,7 @@ const identitySpec = (input, sessionStore = { current: null }) => {
 				case "SignOut": return {
 					slot: IDENTITY_SLOT.auth,
 					port: "auth-client",
-					run: (send) => call("auth-client.sign-out", input.ports.authClient.signOut()).pipe(Effect.andThen(send({ _tag: "SignedOut" })), Effect.catch((failure) => send({
+					run: (send, controls) => call("auth-client.sign-out", input.ports.authClient.signOut(copyInvocationObservation(controls, {}))).pipe(Effect.andThen(send({ _tag: "SignedOut" })), Effect.catch((failure) => send({
 						_tag: "SignOutFailed",
 						failure
 					}).pipe(Effect.andThen(Effect.fail(failure)))), Effect.ensuring(Effect.sync(() => {
@@ -6709,6 +6820,275 @@ function detectAuthCacheAdapter() {
 	return new InMemoryAuthCacheAdapter();
 }
 //#endregion
+//#region src/observation.ts
+const SDK_VERSION = version;
+/** Stable PostHog event used for typed failures that are expected product outcomes. */
+const CAPXUL_SDK_EXPECTED_OUTCOME_EVENT = "capxul_sdk_expected_outcome";
+/**
+* Adapt the host's already-initialized PostHog-like client. This function does
+* not import, initialize, configure, or own PostHog.
+*/
+function postHogFailureObservation(policy, fixedSnapshot) {
+	const prepare = (failure) => {
+		const callStartSnapshot = readFailureInvocationSnapshot(failure) ?? fixedSnapshot;
+		const directSnapshot = callStartSnapshot === void 0 ? policy.snapshot() : void 0;
+		if (!(callStartSnapshot?.active ?? directSnapshot?.active) || policy.client === null || policy.client === void 0) return;
+		const safeFailure = sanitizeFailureObservation(failure);
+		return [safeFailure, postHogProperties(safeFailure, callStartSnapshot?.context ?? directSnapshot?.context)];
+	};
+	const captureOperationFailure = (failure) => {
+		const prepared = prepare(failure);
+		if (prepared === void 0 || policy.client === null || policy.client === void 0) return;
+		const [safeFailure, properties] = prepared;
+		if (classifyOperationOutcome(safeFailure.errorKind) === "expected") {
+			policy.deliver(() => policy.client.capture(CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, {
+				...properties,
+				outcome_class: "expected"
+			}));
+			return;
+		}
+		policy.deliver(() => policy.client.capture("$exception", postHogExceptionProperties(safeFailure, properties)));
+	};
+	const captureException = (failure) => {
+		const prepared = prepare(failure);
+		if (prepared === void 0 || policy.client === null || policy.client === void 0) return;
+		const [safeFailure, properties] = prepared;
+		policy.deliver(() => policy.client.capture("$exception", postHogExceptionProperties(safeFailure, properties)));
+	};
+	return {
+		resolveContext: () => {
+			const snapshot = fixedSnapshot ?? policy.snapshot();
+			if (!snapshot.active) return void 0;
+			return snapshot.context ?? {};
+		},
+		captureOperationFailure,
+		captureException
+	};
+}
+function classifyOperationOutcome(kind) {
+	return EXPECTED_OPERATION_OUTCOMES.has(kind) ? "expected" : "unexpected";
+}
+/** @internal Reports a factory-level typed failure without changing its identity. */
+function observeFailedResult(result, adapter, operation) {
+	if (adapter !== void 0 && isFailedResult(result)) report(adapter, "operation", operation, result.error, resolveAdapterContext(adapter));
+	return result;
+}
+function report(adapter, kind, operation, cause, invocationContext) {
+	const operationName = normalizeOperation(operation);
+	const kindName = normalizeErrorKind(errorKind(cause));
+	const context = sanitizeObservationContext({
+		...invocationContext,
+		...isCapxulError(cause) && cause.correlationId !== void 0 ? { correlationId: cause.correlationId } : {}
+	});
+	const failure = markFailureInvocationSnapshot({
+		exception: syntheticException(operationName, kindName),
+		sdkVersion: SDK_VERSION,
+		operation: operationName,
+		errorKind: kindName,
+		...context === void 0 ? {} : { context }
+	}, {
+		active: invocationContext !== void 0,
+		...context === void 0 ? {} : { context }
+	});
+	try {
+		ignoreDeliveryFailure(kind === "operation" ? adapter.captureOperationFailure(failure) : adapter.captureException(failure));
+	} catch {}
+}
+function resolveAdapterContext(adapter) {
+	try {
+		return adapter.resolveContext?.();
+	} catch {
+		return;
+	}
+}
+function ignoreDeliveryFailure(delivery) {
+	if (!isPromiseLike(delivery)) return;
+	try {
+		Promise.resolve(delivery).catch(() => void 0);
+	} catch {}
+}
+/**
+* Map an ALREADY-sanitized observation context to the snake_case PostHog
+* property keys. Shared by the failure boundary here and the host
+* success-telemetry seam (`telemetry/from-posthog.ts`) so both attach identical
+* correlation fields from one definition.
+*/
+function observationContextProps(context) {
+	const props = {};
+	if (context?.application !== void 0) props.application = context.application;
+	if (context?.release !== void 0) props.release = context.release;
+	if (context?.sessionId !== void 0) props.session_id = context.sessionId;
+	if (context?.organizationId !== void 0) props.organization_id = context.organizationId;
+	if (context?.journeyId !== void 0) props.journey_id = context.journeyId;
+	if (context?.correlationId !== void 0) props.correlation_id = context.correlationId;
+	if (context?.anonymousId !== void 0) props.anonymous_id = context.anonymousId;
+	return props;
+}
+function postHogProperties(failure, context) {
+	const merged = sanitizeObservationContext({
+		...context,
+		...failure.context
+	});
+	return {
+		sdk_version: failure.sdkVersion,
+		operation: failure.operation,
+		error_kind: failure.errorKind,
+		handled: true,
+		...observationContextProps(merged)
+	};
+}
+function postHogExceptionProperties(failure, properties) {
+	const filename = `capxul-sdk-observation://boundary/${failure.operation}`;
+	return {
+		...properties,
+		$exception_type: failure.errorKind,
+		$exception_message: EXCEPTION_MESSAGE,
+		$exception_level: "error",
+		$exception_list: [{
+			type: failure.errorKind,
+			value: EXCEPTION_MESSAGE,
+			mechanism: {
+				type: "capxul_sdk_boundary",
+				handled: true,
+				synthetic: true
+			},
+			stacktrace: {
+				type: "raw",
+				frames: [{
+					platform: "javascript",
+					filename,
+					function: `CapxulSdkBoundary.${failure.operation}`,
+					lineno: 1,
+					colno: 1,
+					in_app: true
+				}]
+			}
+		}]
+	};
+}
+function errorKind(cause) {
+	try {
+		if (isCapxulError(cause)) return normalizeErrorKind(cause.code);
+		if (cause instanceof Error) return normalizeErrorKind(cause.name);
+		return "UnknownFailure";
+	} catch {
+		return "Error";
+	}
+}
+function sanitizeFailureObservation(failure) {
+	const operation = normalizeOperation(failure.operation);
+	const kind = normalizeErrorKind(failure.errorKind);
+	const context = sanitizeObservationContext(failure.context);
+	return {
+		exception: syntheticException(operation, kind),
+		sdkVersion: normalizeSdkVersion(failure.sdkVersion),
+		operation,
+		errorKind: kind,
+		...context === void 0 ? {} : { context }
+	};
+}
+function normalizeSdkVersion(value) {
+	return typeof value === "string" && /^[A-Za-z0-9][A-Za-z0-9.+_-]{0,127}$/u.test(value) ? value : "unknown";
+}
+function normalizeOperation(value) {
+	return typeof value === "string" && /^[A-Za-z0-9_][A-Za-z0-9_.-]{0,255}$/u.test(value) ? value : "unknown";
+}
+function normalizeErrorKind(value) {
+	return typeof value === "string" && /^[A-Za-z][A-Za-z0-9_.-]{0,63}$/u.test(value) ? value : "Error";
+}
+function syntheticException(operation, kind) {
+	const error = /* @__PURE__ */ new Error(EXCEPTION_MESSAGE);
+	error.name = kind;
+	error.stack = `${kind}: ${error.message}\n    at CapxulSdkBoundary.${operation} (capxul-sdk-observation://boundary/${operation}:1:1)`;
+	return error;
+}
+function isPromiseLike(value) {
+	return (typeof value === "object" || typeof value === "function") && value !== null && typeof value.then === "function";
+}
+function isPlainObject(value) {
+	if (typeof value !== "object" || value === null) return false;
+	const prototype = Object.getPrototypeOf(value);
+	return prototype === Object.prototype || prototype === null;
+}
+function isCapxulResult(value) {
+	return isPlainObject(value) && typeof value.ok === "boolean";
+}
+function isFailedResult(value) {
+	return isCapxulResult(value) && value.ok === false && "error" in value;
+}
+//#endregion
+//#region src/telemetry/from-posthog.ts
+const PRODUCT_INVOCATION = Symbol("capxul.product-telemetry-invocation");
+/** @internal Bind paired emit/identify/reset work to one call-start snapshot. */
+function bindProductTelemetryInvocation(telemetry, source) {
+	return telemetry[PRODUCT_INVOCATION]?.(source) ?? telemetry;
+}
+/**
+* Drop props that must never cross to a host-owned external sink. Today that is
+* the `$exception` `details` blob: `captureException` serializes
+* `CapxulError.details` (e.g. `{ asset, available, required }`, `{ name }`,
+* `{ accountId }` — errors.ts) into it, and the shared redactor has no
+* `$exception` rule, so it is stripped here at the boundary (infra#1037). The
+* safe fields (error code, operation, failure_mode, the fixed leak-safe message,
+* stack frames) are preserved.
+*/
+function stripHostUnsafeProps(props) {
+	if (props === void 0) return void 0;
+	const { details: _details, ...safe } = props;
+	return safe;
+}
+/**
+* The subset of a posthog-js client the seam calls. `identify` / `group` /
+* `reset` are optional — a host that only wants event capture can omit them.
+*/
+/**
+* Adapt the host's already-initialized posthog-like client into a
+* `TelemetryPort` for the `telemetry` prop / input. This port SUPPLANTS the
+* SDK's no-op default telemetry sink (`production.ts` binds it via
+* `Layer.succeed`, not `compose` — there is no client-side success relay to
+* compose with); it is additive to Capxul's backend first-party record and
+* never owns the client.
+*/
+function postHogProductTelemetry(policy, fixedSnapshot) {
+	const telemetry = new PostHogTelemetryAdapter({
+		capture: (name, props, source) => {
+			const snapshot = readInvocationObservation(source) ?? fixedSnapshot ?? policy.snapshot();
+			if (!snapshot.active || policy.client === null || policy.client === void 0) return;
+			const event = stampTelemetryEnvelope({
+				name,
+				props
+			}, {
+				capxul_env: policy.capxulEnv,
+				producer: "sdk"
+			});
+			policy.deliver(() => policy.client.capture(name, {
+				...stripHostUnsafeProps(event.props),
+				...observationContextProps(snapshot.context)
+			}));
+		},
+		identify: (input) => {
+			if (!(fixedSnapshot ?? policy.snapshot()).active || policy.client?.identify === void 0) return;
+			policy.deliver(() => policy.client.identify(input.distinctId, {
+				...input.traits,
+				...input.properties
+			}));
+		},
+		group: (input) => {
+			if (!(fixedSnapshot ?? policy.snapshot()).active || policy.client?.group === void 0) return;
+			policy.deliver(() => policy.client.group(input.groupType, input.groupKey, input.properties === void 0 ? void 0 : { ...input.properties }));
+		},
+		reset: () => {
+			if (!(fixedSnapshot ?? policy.snapshot()).active || policy.client?.reset === void 0) return;
+			policy.deliver(() => policy.client.reset());
+		}
+	});
+	Object.defineProperty(telemetry, PRODUCT_INVOCATION, {
+		enumerable: false,
+		value: (source) => postHogProductTelemetry(policy, readInvocationObservation(source) ?? fixedSnapshot ?? policy.snapshot())
+	});
+	return telemetry;
+}
+//#endregion
 //#region src/telemetry/identity-product.ts
 const NONE = null;
 const IDENTITY_EVENT_TAG_SET = new Set(IDENTITY_EVENT_TAGS);
@@ -6791,13 +7171,15 @@ const ignoreTransportFailure = (operation, operationName, eventName) => Effect.s
 	product_event: eventName
 }), Effect.catchCause(() => Effect.void))));
 function executeIdentityProductObservation(telemetry, record, state) {
-	const observation = mapIdentityProductObservation(record, state);
-	if (observation === null) return Effect.void;
-	const after = () => observation.name === "auth_verified" && state.phase === "authenticated" ? telemetry.identify({
+	const mapped = mapIdentityProductObservation(record, state);
+	if (mapped === null) return Effect.void;
+	copyInvocationObservation(record, mapped);
+	const invocationTelemetry = bindProductTelemetryInvocation(telemetry, mapped);
+	const after = () => mapped.name === "auth_verified" && state.phase === "authenticated" ? invocationTelemetry.identify({
 		distinctId: state.session.authUserId,
 		traits: { email_domain: emailDomain(state.session.email) }
-	}) : observation.name === "auth_signed_out" ? telemetry.reset() : Effect.void;
-	return ignoreTransportFailure(() => telemetry.emit(observation), "emit", observation.name).pipe(Effect.andThen(ignoreTransportFailure(after, observation.name === "auth_signed_out" ? "reset" : "identify", observation.name)));
+	}) : mapped.name === "auth_signed_out" ? invocationTelemetry.reset() : Effect.void;
+	return ignoreTransportFailure(() => invocationTelemetry.emit(mapped), "emit", mapped.name).pipe(Effect.andThen(ignoreTransportFailure(after, mapped.name === "auth_signed_out" ? "reset" : "identify", mapped.name)));
 }
 //#endregion
 //#region src/surface/create-capxul-client.ts
@@ -6808,14 +7190,14 @@ function assembleCapxulClient(input) {
 		runPromise: Effect.runPromise
 	};
 	const scope = effectRunner.runSync(Scope.make());
-	const actor = effectRunner.runSync(Scope.provide(bootIdentityFlow({
+	const actor = withHostObservation(effectRunner.runSync(Scope.provide(bootIdentityFlow({
 		ports: input.ports,
 		chainId: input.bootstrap.chainId,
 		requirement: input.requirement,
 		...input.signer === void 0 ? {} : { signer: input.signer },
 		...input.organizationSetup === void 0 ? {} : { organizationSetup: input.organizationSetup },
 		...input.otpTtlMs === void 0 ? {} : { otpTtlMs: input.otpTtlMs }
-	}), scope));
+	}), scope)), input.hostObservationSnapshot);
 	const unsubscribeProductTelemetry = actor.subscribeTransitions((record) => {
 		effectRunner.runPromise(executeIdentityProductObservation(input.ports.telemetry, record, actor.snapshot())).catch(() => {});
 	});
@@ -6997,7 +7379,21 @@ function assembleCapxulClient(input) {
 		}
 	};
 }
+function withHostObservation(actor, snapshot) {
+	if (snapshot === void 0) return actor;
+	const controls = (input) => {
+		const captured = snapshot();
+		const copied = { ...input };
+		return captured === void 0 ? copied : attachInvocationObservation(copied, captured);
+	};
+	return {
+		...actor,
+		ask: (event, input) => actor.ask(event, controls(input)),
+		tell: (event, input) => actor.tell(event, controls(input)),
+		restoreAuthSession: (session, input) => actor.restoreAuthSession(session, controls(input))
+	};
+}
 //#endregion
-export { OBSERVATION_CONTEXT_HEADER as A, normalizeBindingEmail as B, convexCallErrorFromCapxul as C, bootstrapErrorFromCapxul as D, BootstrapPortTag as E, isSettingUpLifecycle as F, deriveCapxulSafeAddress as H, formatTraceparent as I, EXCEPTION_MESSAGE as L, sanitizeObservationContext as M, CAPXUL_FUNCTIONS as N, authClientPortFromPromiseAdapter as O, BootstrapEnvelope as P, captureException as R, ConvexCallPortTag as S, ClockPortTag as T, destination as U, BASE_SEPOLIA_CHAIN_ID as V, identityErrorFromCapxul as _, redactTelemetryProps as a, markFailureInvocationSnapshot as b, smartAccountErrorFromCapxul as c, fromWei as d, AccountReadPortTag as f, IdentityPortTag as g, wireChainId as h, redactTelemetryEvent as i, encodeObservationContextHeader as j, AuthClientPortTag as k, SubAccountPortTag as l, toWei as m, detectAuthCacheAdapter as n, stampTelemetryEnvelope as o, accountReadErrorFromCapxul as p, TelemetryPortTag as r, SmartAccountPortTag as s, assembleCapxulClient as t, subAccountErrorFromCapxul as u, copyInvocationObservation as v, ClockError as w, readInvocationObservation as x, hasFailureInvocationSnapshot as y, captureExceptionSync as z };
+export { version as A, readInvocationObservation as B, convexCallErrorFromCapxul as C, bootstrapErrorFromCapxul as D, BootstrapPortTag as E, BootstrapEnvelope as F, deriveCapxulSafeAddress as G, captureExceptionSync as H, EngineeringTelemetryBootstrapPolicy as I, destination as K, isSettingUpLifecycle as L, encodeObservationContextHeader as M, sanitizeObservationContext as N, authClientPortFromPromiseAdapter as O, CAPXUL_FUNCTIONS as P, formatTraceparent as R, ConvexCallPortTag as S, ClockPortTag as T, normalizeBindingEmail as U, captureException as V, BASE_SEPOLIA_CHAIN_ID as W, accountReadErrorFromCapxul as _, observeFailedResult as a, IdentityPortTag as b, PostHogTelemetryLayer as c, SmartAccountPortTag as d, smartAccountErrorFromCapxul as f, AccountReadPortTag as g, fromWei as h, observationContextProps as i, OBSERVATION_CONTEXT_HEADER as j, AuthClientPortTag as k, TelemetryPortTag as l, subAccountErrorFromCapxul as m, postHogProductTelemetry as n, postHogFailureObservation as o, SubAccountPortTag as p, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT as r, detectAuthCacheAdapter as s, assembleCapxulClient as t, redactTelemetryEvent as u, toWei as v, ClockError as w, identityErrorFromCapxul as x, wireChainId as y, copyInvocationObservation as z };
 
-//# sourceMappingURL=create-capxul-client-DVzm78RU.mjs.map
+//# sourceMappingURL=create-capxul-client-BTnlLLag.mjs.map