@capxul/sdk 1.2.2 → 2.0.0

package/README.md

@@ -19,32 +19,30 @@ const client = created.value;
 Every public operation resolves a `Promise<CapxulResult<T>>`. Domain failures
 are values, not thrown exceptions.
 
-## Engineering telemetry
+## Observability
 
-Production hosts can opt into sanitized Effect logs and traces through the
-public client input:
+Hosts can attach the PostHog client they already initialized through one
+product-and-failure module:
 
 ```ts
+import { postHogObservability } from "@capxul/sdk";
+
 const created = await createCapxulClient({
   publishableKey: "cap_pk_…",
-  engineeringTelemetry: {
-    host: "https://us.i.posthog.com",
-    headers: { Authorization: "Bearer phc_…" },
+  observability: postHogObservability(posthog, {
     capxulEnv: "production",
-    serviceName: "capxul-sdk",
-  },
+    context: () => ({ correlationId, journeyId, organizationId }),
+  }),
 });
 ```
 
-Use the browser-safe PostHog project token (`phc_...`), never a personal API
-key (`phx_...`) or another secret. The host URL must be a credential-free HTTPS
-origin; credentials belong only in the explicit header. The SDK supplies its
-runtime producer and version, permits only closed identity classifications and
-safe correlation identifiers, and excludes email, OTP, auth/session tokens,
-wallet data, request/response bodies, provider messages, raw causes, and
-stacks. Export is best-effort and cannot change the operation result. An OTLP
-HTTP 200 is not delivery proof: verify a live run by querying both PostHog
-`logs` and `posthog.trace_spans` for the same fresh trace.
+The SDK initializes no analytics client and preserves host consent. Product
+events and sanitized failures share one enable/context/delivery policy.
+Engineering logs and traces are separate internally, but applications do not
+configure them: the versioned bootstrap response optionally supplies the
+governed PostHog ingest origin, public project token, and environment. The SDK
+derives endpoints, service, producer, and version. Missing or invalid policy
+disables engineering export without failing client creation.
 
 Onboarding uses explicit domain objects. Personal completion accepts
 `{ profile }`; Organization completion accepts independently validated
@@ -60,7 +58,8 @@ Public Profile reads include the durable `onboarded` flag and optional
 The packed npm package exposes only:
 
 - `@capxul/sdk` — the client factory, public method and value types, signers,
-  and observation helpers.
+  host observability helper, and immutable Base Sepolia Payment contract
+  identity.
 - `@capxul/sdk/node` — Node-only signer and runtime helpers.
 - `@capxul/sdk/testing` — the real identity runtime assembled over
   deterministic in-memory ports, with OTP, advance-only clock, transition,
@@ -96,8 +95,8 @@ The testing entry is identity-scoped and hermetic. Fine-grained
   evidence, and update triggers.
 - [Architecture](./docs/architecture.md) — client assembly, flows, ports,
   adapters, and proof map.
-- [Observation](./docs/observation.md) — host-owned failure observation and
-  bounded backend linkage.
+- [Observation](./docs/observation.md) — unified host observability,
+  bootstrap-owned engineering policy, and bounded backend linkage.
 - [Public SDK documentation](../../apps/docs/content/docs/sdk/index.mdx) —
   tutorials, guides, reference, and explanation for npm consumers.
 

package/dist/{InMemoryAuthCacheAdapter-Dr1sEd9y.mjs → InMemoryAuthCacheAdapter-Rc8tCtml.mjs}

@@ -8,6 +8,7 @@ const CAPXUL_ERROR_CODES = [
 	"PLAYER_NOT_FOUND",
 	"ACCOUNT_NOT_FOUND",
 	"PROVIDER_ERROR",
+	"CAPABILITY_UNAVAILABLE",
 	"INVALID_INPUT",
 	"ENV_MISSING",
 	"NOT_IMPLEMENTED",
@@ -46,6 +47,7 @@ const EXPECTED_OPERATION_OUTCOMES = new Set([
 	"INSUFFICIENT_BALANCE",
 	"INVALID_RECIPIENT",
 	"ROLE_PERMISSION_DENIED",
+	"CAPABILITY_UNAVAILABLE",
 	"RATE_LIMITED",
 	"OTP_EXPIRED",
 	"WRONG_STATE",
@@ -103,6 +105,10 @@ const Errors = {
 			details
 		});
 	},
+	capabilityUnavailable: (provider, operation) => new CapxulError("CAPABILITY_UNAVAILABLE", "Provider capability is unavailable", { details: {
+		provider,
+		operation
+	} }),
 	invalidInput: (field, reason) => new CapxulError("INVALID_INPUT", `Invalid ${field}: ${reason}`, { details: {
 		field,
 		reason
@@ -227,6 +233,7 @@ function decodeConvexError(err) {
 //#region ../types/src/index.ts
 const EVM_ADDRESS_RE = /^0x[0-9a-f]{40}$/i;
 const BYTES32_RE = /^0x[0-9a-f]{64}$/i;
+const ZERO_BYTES32 = `0x${"0".repeat(64)}`;
 const PUBLISHABLE_KEY_PATTERN = /^cap_pk_(test|live)_[0-9A-HJKMNP-TV-Z]{32}$/;
 const SUPPORTED_CURRENCIES = [
 	{
@@ -260,8 +267,8 @@ Object.fromEntries(SUPPORTED_CURRENCIES.map((currency) => [currency.code, curren
 const EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
 const COUNTRY_CODE_RE = /^[A-Z]{2}$/;
 const ACCOUNT_ID_RE = /^account_[0-9A-Za-z]+$/;
-const SUBACCOUNT_ID_RE = /^subaccount_[0-9A-Za-z]+$/;
 const APP_ID_RE = /^app_[0-7][0-9A-HJKMNP-TV-Z]{25}$/;
+const WEI_RE = /^[0-9]+$/;
 Math.floor(Number.MAX_SAFE_INTEGER / 1e3);
 function toAddress(raw) {
 	if (typeof raw !== "string" || !EVM_ADDRESS_RE.test(raw)) throw Errors.invalidInput("address", invalidValueReason("invalid EVM address format", raw));
@@ -278,10 +285,6 @@ function toAccountId(raw) {
 	if (typeof raw !== "string" || !ACCOUNT_ID_RE.test(raw)) throw Errors.invalidInput("accountId", invalidValueReason("must be account_ plus an alphanumeric id", raw));
 	return raw;
 }
-function toSubAccountId(raw) {
-	if (typeof raw !== "string" || !SUBACCOUNT_ID_RE.test(raw)) throw Errors.invalidInput("subAccountId", invalidValueReason("must be subaccount_ plus an alphanumeric id", raw));
-	return raw;
-}
 function toOrgId(raw) {
 	return toNonEmptyStringBrand(raw, "orgId");
 }
@@ -472,6 +475,4 @@ Layer.effect(AuthCachePortTag, Effect.sync(() => new InMemoryAuthCacheAdapter())
 	cause
 }))));
 //#endregion
-export { decodeConvexError as A, toJwtToken as C, toRoleKey as D, toPublishableKey as E, EXPECTED_OPERATION_OUTCOMES as M, Errors as N, toSessionToken as O, isCapxulError as P, toEpochSeconds as S, toOrgId as T, toCountryCode as _, AuthCacheError as a, toEmail as b, BYTES32_RE as c, toAccountId as d, toAddress as f, toChainId as g, toAuthUserId as h, parseCachedJwt as i, CapxulError as j, toSubAccountId as k, EVM_ADDRESS_RE as l, toAppId as m, BrowserAuthCacheAdapter as n, AuthCachePortTag as o, toAllowedOrigin as p, parseAuthSession as r, APP_ID_RE as s, InMemoryAuthCacheAdapter as t, SUPPORTED_CURRENCY_CODES as u, toCurrencyCode as v, toKycTier as w, toEpochMs as x, toDurationMs as y };
-
-//# sourceMappingURL=InMemoryAuthCacheAdapter-Dr1sEd9y.mjs.map
+export { toSessionToken as A, toEpochMs as C, toOrgId as D, toKycTier as E, isCapxulError as F, CapxulError as M, EXPECTED_OPERATION_OUTCOMES as N, toPublishableKey as O, Errors as P, toEmail as S, toJwtToken as T, toAuthUserId as _, AuthCacheError as a, toCurrencyCode as b, BYTES32_RE as c, WEI_RE as d, ZERO_BYTES32 as f, toAppId as g, toAllowedOrigin as h, parseCachedJwt as i, decodeConvexError as j, toRoleKey as k, EVM_ADDRESS_RE as l, toAddress as m, BrowserAuthCacheAdapter as n, AuthCachePortTag as o, toAccountId as p, parseAuthSession as r, APP_ID_RE as s, InMemoryAuthCacheAdapter as t, SUPPORTED_CURRENCY_CODES as u, toChainId as v, toEpochSeconds as w, toDurationMs as x, toCountryCode as y };