@capxul/sdk 2.1.0 → 2.2.0

package/dist/index.d.mts

@@ -1,9 +1,28 @@
-import { $ as CapxulErrorDetails, A as CountryCode, D as AuthUserId, E as AuthSession, I as Money, Q as CapxulErrorCode, R as OrgId, W as RoleKey, X as toCountryCode, Y as toAddress, Z as CapxulError, a as AccountProvider, b as AccountId, c as Eip1193Provider, d as CapxulResult, f as Profile, i as injectedWalletSigner, l as eip1193AccountProvider, m as SmartAccount, n as CapxulSigner, nt as isCapxulError, o as AccountProviderSource, p as Session, r as Eip1193RequestProvider, s as AccountRequirement, t as CapxulDigestSigner, tt as FailureMode, u as localPrivateKeyAccountProvider, x as Address, y as Account } from "./signer-Bj4F-RwT.mjs";
-import { $ as InboxMethods, $t as OrgLifecycle, A as OrganizationPaymentsMethods, At as PaymentDocumentRef, B as AccountMethods, Bt as RecipientResolution, C as ResendInviteTokenInput, Ct as OfframpQuoteInput, D as OrganizationPaymentBatchInput, Dt as Payment, E as RoleView, Et as PayeesMethods, F as PermissionOptions, Ft as PaymentStatus, G as ActorRequestIssueInput, Gt as TargetsMethods, H as ActorProfileMethods, Ht as Ref, I as PermissionReplaceInput, It as PaymentTiming, J as AddressBookEntry, Jt as AccountSetupStep, K as ActorRequestsMethods, Kt as fingerprintPaymentIntent, L as PermissionRevokeInput, Lt as PaymentType, M as PermissionChangeInput, Mt as PaymentDocumentVerification, N as PermissionCreateInput, Nt as PaymentDocumentsMethods, O as OrganizationPaymentInput, Ot as PaymentDirection, P as PermissionMethods, Pt as PaymentMoney, Q as InboxItem, Qt as AuthMethods, R as PermissionReadResult, Rt as PaymentsMethods, S as OrganizationAuditLogItem, St as OfframpQuote, T as RoleSpendCap, Tt as Payee, U as ActorRelationshipMethods, Ut as ResolvedTarget, V as ActorProfile, Vt as RecipientResolutionKind, W as ActorRequest, Wt as TargetReference, X as AddressBookMethods, Xt as IdentityMethods, Y as AddressBookLabelInput, Yt as isSettingUpLifecycle, Z as InboxApproveInput, Zt as SmartAccountMethods, _ as OrgMethods, _n as StateLabel, _t as FinancialOpsMethods, a as IdentityRuntimeSendResult, an as SubmittedPermissionExecution, at as ActivityPage, b as OrgView, bn as InvocationControls, bt as MeProfile, c as SystemHealth, ct as DepositInstructions, d as CurrentUserMethods, dn as CAPXUL_PAYMENTS_V2_ADDRESS, dt as DestinationKind, en as OrgSetupStep, et as ActivityAnnotationInput, f as CreateOrgInput, fn as Destination$1, ft as DestinationListInput, g as MemberView, gn as Readiness, gt as DestinationsMethods, h as MemberStatus, hn as OrgLane, ht as DestinationRemoveInput, i as IdentityRuntime, in as Permission, it as ActivityMethods, j as PermissionAssignInput, jt as PaymentDocumentRender, k as OrganizationPaymentItemInput, kt as PaymentDocumentKind, l as MediaMethods, lt as Destination, m as InviteMemberInput, mn as IdentityState, mt as DestinationRail, n as CreateCapxulClientInput, nn as CurrentHoldings, nt as ActivityItem, o as HoldingsMethods, on as CapxulEnv, ot as ActivityReference, p as DetectPendingOrgInvitationsResult, pn as IdentityEvent, pt as DestinationPayload, q as AddressBookAddInput, qt as AccountLifecycle, r as IdentityProfileDetails, rn as MovementAnnotation, rt as ActivityListParams, s as SystemMethods, st as ActorReference, t as CapxulClient, tn as WireObservationContext, tt as ActivityDetail, u as CurrentUserContext, un as TelemetryPort, ut as DestinationAddInput, v as OrgScopedMethods, vn as destination, vt as HandlesMethods, w as RoleDefinition, wt as OfframpStatus, x as OrganizationAccount, xt as OfframpMethods, y as OrgTemplate, yn as IdentityTransition, yt as MeMethods, z as AccountsMethods, zt as PaymentsPayInput } from "./create-capxul-client-DmV6qEq4.mjs";
+import { $ as CapxulError, A as CountryCode, D as AuthUserId, E as AuthSession, G as RoleKey, I as Money, Q as CAPXUL_ERROR_CODES, R as OrgId, X as toAddress, Z as toCountryCode, a as AccountProvider, at as isCapxulError, b as AccountId, c as Eip1193Provider, d as CapxulResult, et as CapxulErrorCode, f as Profile, i as injectedWalletSigner, it as FailureMode, l as eip1193AccountProvider, m as SmartAccount, n as CapxulSigner, nt as Errors, o as AccountProviderSource, p as Session, r as Eip1193RequestProvider, s as AccountRequirement, t as CapxulDigestSigner, tt as CapxulErrorDetails, u as localPrivateKeyAccountProvider, x as Address, y as Account, z as PartyId } from "./signer-D4roBkcX.mjs";
+import { $ as ActorRequest, $t as TargetReference, A as OrganizationAccount, At as OfframpMethods, B as PermissionAssignInput, Bt as PaymentDocumentRender, C as InviteMemberInput, Cn as Readiness, Ct as DestinationRail, D as OrgScopedMethods, Dn as InvocationControls, Dt as HandlesMethods, E as OrgMethods, En as IdentityTransition, Et as FinancialOpsMethods, F as RoleView, Ft as PayeesMethods, G as PermissionReplaceInput, Gt as PaymentTiming, H as PermissionCreateInput, Ht as PaymentDocumentsMethods, I as OrganizationPaymentBatchInput, It as Payment, J as AccountsMethods, Jt as PaymentsPayInput, K as PermissionRevokeInput, Kt as PaymentType, L as OrganizationPaymentInput, Lt as PaymentDirection, M as ResendInviteTokenInput, Mt as OfframpQuoteInput, N as RoleDefinition, Nt as OfframpStatus, O as OrgTemplate, Ot as MeMethods, P as RoleSpendCap, Pt as Payee, Q as ActorRelationshipMethods, Qt as ResolvedTarget, R as OrganizationPaymentItemInput, Rt as PaymentDocumentKind, S as DetectPendingOrgInvitationsResult, Sn as OrgLane, St as DestinationPayload, T as MemberView, Tn as destination, Tt as DestinationsMethods, U as PermissionMethods, Ut as PaymentMoney, V as PermissionChangeInput, Vt as PaymentDocumentVerification, W as PermissionOptions, Wt as PaymentStatus, X as ActorProfile, Xt as RecipientResolutionKind, Y as AccountMethods, Yt as RecipientResolution, Z as ActorProfileMethods, Zt as Ref, _ as SystemHealth, _n as TelemetryPort, _t as DepositInstructions, a as SdkFailureObservation, an as IdentityMethods, at as AddressBookMethods, b as CurrentUserMethods, bn as IdentityEvent, bt as DestinationKind, c as PostHogObservabilityOptions, cn as OrgLifecycle, ct as InboxMethods, d as CreateCapxulClientInput, dn as MovementAnnotation, dt as ActivityItem, en as TargetsMethods, et as ActorRequestIssueInput, f as IdentityProfileDetails, fn as Permission, ft as ActivityListParams, g as SystemMethods, gt as ActorReference, h as HoldingsMethods, ht as ActivityReference, i as ObservationDelivery, in as isSettingUpLifecycle, it as AddressBookLabelInput, j as OrganizationAuditLogItem, jt as OfframpQuote, k as OrgView, kt as MeProfile, l as postHogObservability, ln as OrgSetupStep, lt as ActivityAnnotationInput, m as IdentityRuntimeSendResult, mt as ActivityPage, n as ObservationAdapter, nn as AccountLifecycle, nt as AddressBookAddInput, o as HostObservability, on as SmartAccountMethods, ot as InboxApproveInput, p as IdentityRuntime, pn as SubmittedPermissionExecution, pt as ActivityMethods, q as PermissionReadResult, qt as PaymentsMethods, r as ObservationContext, rn as AccountSetupStep, rt as AddressBookEntry, s as PostHogObservabilityClient, sn as AuthMethods, st as InboxItem, t as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, tn as fingerprintPaymentIntent, tt as ActorRequestsMethods, u as CapxulClient, un as CurrentHoldings, ut as ActivityDetail, v as MediaMethods, vn as CAPXUL_PAYMENTS_V2_ADDRESS, vt as Destination, w as MemberStatus, wn as StateLabel, wt as DestinationRemoveInput, x as CreateOrgInput, xn as IdentityState, xt as DestinationListInput, y as CurrentUserContext, yn as Destination$1, yt as DestinationAddInput, z as OrganizationPaymentsMethods, zt as PaymentDocumentRef } from "./observation-BwPo8qeo.mjs";
 import { Hex } from "viem";
 import { Context, Effect, Layer } from "effect";
 import { FunctionReference } from "convex/server";
 
+//#region src/domain/money/format-money.d.ts
+declare function formatMoney(money: Money, options?: {
+  readonly grammar?: "symbol" | "code";
+}): string;
+//#endregion
+//#region src/domain/money/parse-money.d.ts
+type MoneyParseErrorReason = "required" | "too-long" | "invalid-format" | "non-positive" | "too-many-decimals";
+interface MoneyParseError {
+  readonly kind: "error";
+  readonly reason: MoneyParseErrorReason;
+}
+/**
+ * ADR-0023 R1: the reason is a closed code and the ONLY failure vocabulary —
+ * the consuming app maps each code to its own sentence. The SDK ships no
+ * English for user-text failure.
+ */
+declare function isMoneyParseError(value: Money | MoneyParseError): value is MoneyParseError;
+declare function parseMoney(input: string, asset: Pick<Money, "currency" | "decimals">): Money | MoneyParseError;
+//#endregion
 //#region src/adapters/auth-cache/BrowserAuthCacheAdapter.d.ts
 interface BrowserStorageShape {
   getItem(key: string): string | null;
@@ -86,65 +105,6 @@ declare function openfortEmbeddedSigner(input: OpenfortEmbeddedSignerInput): Ope
  */
 declare const embeddedSigner: typeof openfortEmbeddedSigner;
 //#endregion
-//#region src/host-observability.d.ts
-/** One host-owned observability module at the SDK consumer boundary. */
-interface HostObservability {
-  readonly failures: ObservationAdapter;
-  readonly product: TelemetryPort;
-}
-interface PostHogObservabilityClient {
-  capture(event: string, properties?: Readonly<Record<string, unknown>>): unknown;
-  captureException?(exception: Error, properties?: Readonly<Record<string, unknown>>): unknown;
-  identify?(distinctId: string, properties?: Readonly<Record<string, unknown>>): unknown;
-  group?(groupType: string, groupKey: string, properties?: Readonly<Record<string, unknown>>): unknown;
-  reset?(): unknown;
-}
-interface PostHogObservabilityOptions {
-  /** Consent / kill-switch seam. Defaults to enabled. */
-  readonly enabled?: boolean | (() => boolean);
-  /** Host environment stamped on every SDK-owned product event. */
-  readonly capxulEnv?: CapxulEnv;
-  /** Host-owned correlation context shared by product and failure delivery. */
-  readonly context?: ObservationContext | (() => ObservationContext | undefined);
-}
-/** Build the SDK's one host module around an already-initialized PostHog client. */
-declare function postHogObservability(client: PostHogObservabilityClient | null | undefined, options?: PostHogObservabilityOptions): HostObservability;
-//#endregion
-//#region src/observation.d.ts
-/** Host-owned correlation fields that are safe to attach to an SDK failure. */
-interface ObservationContext extends Omit<WireObservationContext, "applicationId"> {}
-/**
- * The small, SDK-owned failure envelope delivered to observation adapters.
- * Method arguments, response bodies, wallet payloads, and arbitrary error
- * details are deliberately absent.
- */
-interface SdkFailureObservation {
-  readonly exception: Error;
-  readonly sdkVersion: string;
-  readonly operation: string;
-  readonly errorKind: string;
-  /** Invocation snapshot; failure correlation wins over later host state. */
-  readonly context?: ObservationContext;
-}
-type ObservationDelivery = void | PromiseLike<void>;
-/**
- * High-level host observation boundary. The SDK owns when each method is
- * called; the host owns the destination client, consent, and delivery policy.
- */
-interface ObservationAdapter {
-  /**
-   * Optional read-only invocation context. Transport adapters snapshot it once
-   * at call start; implementations must not mutate global SDK state.
-   */
-  readonly resolveContext?: () => ObservationContext | undefined;
-  /** A method returned the SDK's typed `{ ok: false, error }` result. */
-  captureOperationFailure(failure: SdkFailureObservation): ObservationDelivery;
-  /** A method unexpectedly threw or rejected instead of returning a typed result. */
-  captureException(exception: SdkFailureObservation): ObservationDelivery;
-}
-/** Stable PostHog event used for typed failures that are expected product outcomes. */
-declare const CAPXUL_SDK_EXPECTED_OUTCOME_EVENT = "capxul_sdk_expected_outcome";
-//#endregion
 //#region src/production.d.ts
 /**
  * Consumer-facing `createCapxulClient` input (SDK DX public surface · #326).
@@ -202,9 +162,10 @@ interface HandledErrorReportContext {
 declare function captureException(telemetry: TelemetryPort, error: unknown, context?: HandledErrorReportContext): Effect.Effect<void, never>;
 /**
  * Synchronous fire-and-forget capture. Runs the Effect inline with
- * `Effect.runSync` so callers outside an Effect context (e.g. React
- * hooks before throwing) can report errors without awaiting.
+ * `Effect.runSync` so callers outside an Effect context can report errors
+ * without awaiting. Core SDK public methods use the assembled observation
+ * boundary instead.
  */
 declare function captureExceptionSync(telemetry: TelemetryPort, error: unknown, context?: HandledErrorReportContext): void;
 //#endregion
-export { type Account, type AccountId, type AccountLifecycle, type AccountMethods, type AccountProvider, type AccountProviderSource, type AccountRequirement, type AccountSetupStep, type AccountsMethods, type ActivityAnnotationInput, type ActivityDetail, type ActivityItem, type ActivityListParams, type ActivityMethods, type ActivityPage, type ActivityReference, type ActorProfile, type ActorProfileMethods, type ActorReference, type ActorRelationshipMethods, type ActorRequest, type ActorRequestIssueInput, type ActorRequestsMethods, type Address, type AddressBookAddInput, type AddressBookEntry, type AddressBookLabelInput, type AddressBookMethods, type AuthMethods, type AuthSession, type AuthUserId, CAPXUL_PAYMENTS_V2_ADDRESS, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, type CapxulClient, type CapxulClientInput, type CapxulDigestSigner, CapxulError, type CapxulErrorCode, type CapxulErrorDetails, type CapxulResult, type CapxulSigner, type CountryCode, type CreateCapxulClientInput, type CreateOrgInput, type CurrentHoldings, type CurrentUserContext, type CurrentUserMethods, type DepositInstructions, type Destination, type DestinationAddInput, type DestinationKind, type DestinationListInput, type DestinationPayload, type DestinationRail, type DestinationRemoveInput, type DestinationsMethods, type DetectPendingOrgInvitationsResult, type DevPrivateKeySignerInput, type Eip1193Provider, type Eip1193RequestProvider, type FinancialOpsMethods, type HandledErrorReportContext, type HandlesMethods, type HoldingsMethods, type HostObservability, type Destination$1 as IdentityDestination, type IdentityEvent, type IdentityMethods, type IdentityProfileDetails, type IdentityRuntime, type IdentityRuntimeSendResult, type IdentityState, type IdentityTransition, type InboxApproveInput, type InboxItem, type InboxMethods, type InviteMemberInput, type InvocationControls, type MeMethods, type MeProfile, type MediaMethods, type MemberStatus, type MemberView, type Money, type MovementAnnotation, type ObservationAdapter, type ObservationContext, type ObservationDelivery, type OfframpMethods, type OfframpQuote, type OfframpQuoteInput, type OfframpStatus, type OpenfortEmbeddedSignerInput, type OpenfortEmbeddedWalletApi, type OpenfortEmbeddedWalletPort, type OrgId, type OrgLane, type OrgLifecycle, type OrgMethods, type OrgScopedMethods, type OrgSetupStep, type OrgTemplate, type OrgView, type OrganizationAccount, type OrganizationAuditLogItem, type OrganizationPaymentBatchInput, type OrganizationPaymentInput, type OrganizationPaymentItemInput, type OrganizationPaymentsMethods, type Payee, type PayeesMethods, type Payment, type PaymentDirection, type PaymentDocumentKind, type PaymentDocumentRef, type PaymentDocumentRender, type PaymentDocumentVerification, type PaymentDocumentsMethods, type PaymentMoney, type PaymentStatus, type PaymentTiming, type PaymentType, type PaymentsMethods, type PaymentsPayInput, type Permission, type PermissionAssignInput, type PermissionChangeInput, type PermissionCreateInput, type PermissionMethods, type PermissionOptions, type PermissionReadResult, type PermissionReplaceInput, type PermissionRevokeInput, type PostHogObservabilityClient, type PostHogObservabilityOptions, type Profile, type Readiness, type RecipientResolution, type RecipientResolutionKind, type Ref, type ResendInviteTokenInput, type ResolvedTarget, type RoleDefinition, type RoleKey, type RoleSpendCap, type RoleView, type SdkFailureObservation, type Session, type SmartAccount, type SmartAccountMethods, type StateLabel, type SubmittedPermissionExecution, type SystemHealth, type SystemMethods, type TargetReference, type TargetsMethods, type TelemetryPort, captureException, captureExceptionSync, createCapxulClient, deriveDevPrivateKey, devPrivateKeySigner, eip1193AccountProvider, embeddedSigner, fingerprintPaymentIntent, injectedWalletSigner, isCapxulError, isSettingUpLifecycle, localPrivateKeyAccountProvider, openfortEmbeddedSigner, openfortEmbeddedSignerFromWallet, openfortEmbeddedWalletPort, postHogObservability, destination as resolveIdentityDestination, toCountryCode, toAddress as toEvmAddress };
+export { type Account, type AccountId, type AccountLifecycle, type AccountMethods, type AccountProvider, type AccountProviderSource, type AccountRequirement, type AccountSetupStep, type AccountsMethods, type ActivityAnnotationInput, type ActivityDetail, type ActivityItem, type ActivityListParams, type ActivityMethods, type ActivityPage, type ActivityReference, type ActorProfile, type ActorProfileMethods, type ActorReference, type ActorRelationshipMethods, type ActorRequest, type ActorRequestIssueInput, type ActorRequestsMethods, type Address, type AddressBookAddInput, type AddressBookEntry, type AddressBookLabelInput, type AddressBookMethods, type AuthMethods, type AuthSession, type AuthUserId, CAPXUL_ERROR_CODES, CAPXUL_PAYMENTS_V2_ADDRESS, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, type CapxulClient, type CapxulClientInput, type CapxulDigestSigner, CapxulError, type CapxulErrorCode, type CapxulErrorDetails, type CapxulResult, type CapxulSigner, type CountryCode, type CreateCapxulClientInput, type CreateOrgInput, type CurrentHoldings, type CurrentUserContext, type CurrentUserMethods, type DepositInstructions, type Destination, type DestinationAddInput, type DestinationKind, type DestinationListInput, type DestinationPayload, type DestinationRail, type DestinationRemoveInput, type DestinationsMethods, type DetectPendingOrgInvitationsResult, type DevPrivateKeySignerInput, type Eip1193Provider, type Eip1193RequestProvider, Errors, type FinancialOpsMethods, type HandledErrorReportContext, type HandlesMethods, type HoldingsMethods, type HostObservability, type Destination$1 as IdentityDestination, type IdentityEvent, type IdentityMethods, type IdentityProfileDetails, type IdentityRuntime, type IdentityRuntimeSendResult, type IdentityState, type IdentityTransition, type InboxApproveInput, type InboxItem, type InboxMethods, type InviteMemberInput, type InvocationControls, type MeMethods, type MeProfile, type MediaMethods, type MemberStatus, type MemberView, type Money, type MoneyParseError, type MoneyParseErrorReason, type MovementAnnotation, type ObservationAdapter, type ObservationContext, type ObservationDelivery, type OfframpMethods, type OfframpQuote, type OfframpQuoteInput, type OfframpStatus, type OpenfortEmbeddedSignerInput, type OpenfortEmbeddedWalletApi, type OpenfortEmbeddedWalletPort, type OrgId, type OrgLane, type OrgLifecycle, type OrgMethods, type OrgScopedMethods, type OrgSetupStep, type OrgTemplate, type OrgView, type OrganizationAccount, type OrganizationAuditLogItem, type OrganizationPaymentBatchInput, type OrganizationPaymentInput, type OrganizationPaymentItemInput, type OrganizationPaymentsMethods, type PartyId, type Payee, type PayeesMethods, type Payment, type PaymentDirection, type PaymentDocumentKind, type PaymentDocumentRef, type PaymentDocumentRender, type PaymentDocumentVerification, type PaymentDocumentsMethods, type PaymentMoney, type PaymentStatus, type PaymentTiming, type PaymentType, type PaymentsMethods, type PaymentsPayInput, type Permission, type PermissionAssignInput, type PermissionChangeInput, type PermissionCreateInput, type PermissionMethods, type PermissionOptions, type PermissionReadResult, type PermissionReplaceInput, type PermissionRevokeInput, type PostHogObservabilityClient, type PostHogObservabilityOptions, type Profile, type Readiness, type RecipientResolution, type RecipientResolutionKind, type Ref, type ResendInviteTokenInput, type ResolvedTarget, type RoleDefinition, type RoleKey, type RoleSpendCap, type RoleView, type SdkFailureObservation, type Session, type SmartAccount, type SmartAccountMethods, type StateLabel, type SubmittedPermissionExecution, type SystemHealth, type SystemMethods, type TargetReference, type TargetsMethods, type TelemetryPort, captureException, captureExceptionSync, createCapxulClient, deriveDevPrivateKey, devPrivateKeySigner, eip1193AccountProvider, embeddedSigner, fingerprintPaymentIntent, formatMoney, injectedWalletSigner, isCapxulError, isMoneyParseError, isSettingUpLifecycle, localPrivateKeyAccountProvider, openfortEmbeddedSigner, openfortEmbeddedSignerFromWallet, openfortEmbeddedWalletPort, parseMoney, postHogObservability, destination as resolveIdentityDestination, toCountryCode, toAddress as toEvmAddress };

package/dist/index.mjs

@@ -1,5 +1,5 @@
-import { A as OBSERVATION_CONTEXT_HEADER, B as captureException, C as bootstrapErrorFromCapxul, D as fingerprintPaymentIntent, E as version, F as EngineeringTelemetryBootstrapPolicy, H as CAPXUL_PAYMENTS_V2_ADDRESS, I as isSettingUpLifecycle, K as destination, L as formatTraceparent, M as sanitizeObservationContext, N as CAPXUL_FUNCTIONS, O as toWei, P as BootstrapEnvelope, R as copyInvocationObservation, S as BootstrapPortTag, T as AuthClientPortTag, U as normalizeBindingEmail, V as captureExceptionSync, W as BASE_SEPOLIA_CHAIN_ID, _ as identityErrorFromCapxul, a as observeFailedResult, b as ClockError, c as PostHogTelemetryLayer, d as SmartAccountPortTag, f as smartAccountErrorFromCapxul, g as IdentityPortTag, h as wireChainId, i as observationContextProps, j as encodeObservationContextHeader, k as fromWei, l as TelemetryPortTag, m as accountReadErrorFromCapxul, n as postHogProductTelemetry, o as postHogFailureObservation, p as AccountReadPortTag, r as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, s as detectAuthCacheAdapter, t as assembleCapxulClient, v as ConvexCallPortTag, w as authClientPortFromPromiseAdapter, x as ClockPortTag, y as convexCallErrorFromCapxul, z as readInvocationObservation } from "./create-capxul-client-CMUq5w10.mjs";
-import { A as toSessionToken, C as toEpochMs, D as toOrgId, E as toKycTier, F as isCapxulError, M as CapxulError, O as toPublishableKey, P as Errors, S as toEmail, T as toJwtToken, _ as toAuthUserId, b as toCurrencyCode, h as toAllowedOrigin, j as decodeConvexError, k as toRoleKey, m as toAddress, o as AuthCachePortTag, p as toAccountId, v as toChainId, w as toEpochSeconds, x as toDurationMs, y as toCountryCode } from "./InMemoryAuthCacheAdapter-Rc8tCtml.mjs";
+import { A as fingerprintPaymentIntent, B as formatTraceparent, C as ClockPortTag, D as AuthClientError, E as authClientPortFromPromiseAdapter, F as sanitizeObservationContext, G as CAPXUL_PAYMENTS_V2_ADDRESS, H as readInvocationObservation, I as CAPXUL_FUNCTIONS, K as normalizeBindingEmail, L as BootstrapEnvelope, M as fromWei, N as OBSERVATION_CONTEXT_HEADER, O as AuthClientPortTag, P as encodeObservationContextHeader, R as EngineeringTelemetryBootstrapPolicy, S as ClockError, T as bootstrapErrorFromCapxul, U as injectedWalletSigner, V as copyInvocationObservation, W as signerFailure, Y as destination, _ as wireChainId, a as observeFailedResult, b as ConvexCallPortTag, c as captureExceptionSync, d as TelemetryPortTag, g as accountReadErrorFromCapxul, h as AccountReadPortTag, i as observationContextProps, j as toWei, k as version, l as detectAuthCacheAdapter, m as smartAccountErrorFromCapxul, n as postHogProductTelemetry, o as postHogFailureObservation, p as SmartAccountPortTag, q as BASE_SEPOLIA_CHAIN_ID, r as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, s as captureException, t as assembleCapxulClient, u as PostHogTelemetryLayer, v as IdentityPortTag, w as BootstrapPortTag, x as convexCallErrorFromCapxul, y as identityErrorFromCapxul, z as isSettingUpLifecycle } from "./create-capxul-client-B8qMV-_e.mjs";
+import { A as toPublishableKey, C as toEmail, D as toKycTier, E as toJwtToken, F as CapxulError, L as Errors, M as toSessionToken, N as decodeConvexError, O as toOrgId, P as CAPXUL_ERROR_CODES, R as isCapxulError, S as toDurationMs, T as toEpochSeconds, b as toCountryCode, g as toAllowedOrigin, h as toAddress, j as toRoleKey, m as toAccountId, o as AuthCachePortTag, p as currencySymbolFor, v as toAuthUserId, w as toEpochMs, x as toCurrencyCode, y as toChainId } from "./InMemoryAuthCacheAdapter-PycLJWeW.mjs";
 import { keccak256, recoverAddress, stringToHex } from "viem";
 import { Cause, Context, Data, Effect, Exit, Layer, Result, SchemaIssue, SchemaParser, Scope, Tracer } from "effect";
 import { getFunctionName, makeFunctionReference } from "convex/server";
@@ -8,6 +8,89 @@ import { FetchHttpClient, Headers, HttpClient } from "effect/unstable/http";
 import { OtlpExporter, OtlpLogger, OtlpSerialization, OtlpTracer } from "effect/unstable/observability";
 import { ConvexClient } from "convex/browser";
 import { AccountTypeEnum, ChainTypeEnum, EmbeddedState, Openfort, RecoveryMethod, ThirdPartyOAuthProvider } from "@openfort/openfort-js";
+//#region src/domain/money/format-money.ts
+function formatMoney(money, options = {}) {
+	if (!Number.isInteger(money.decimals) || money.decimals < 0) throw Errors.invalidInput("money.decimals", "must be a non-negative integer");
+	const symbol = currencySymbolFor(money.currency);
+	const maximumFractionDigits = options.grammar === "code" ? 4 : 2;
+	const rounded = roundDecimal(money.value, money.decimals, maximumFractionDigits);
+	const grouped = rounded.integer.replace(/\B(?=(\d{3})+(?!\d))/g, ",");
+	const signed = `${rounded.negative ? "-" : ""}${grouped}`;
+	if (options.grammar === "code") {
+		if (!rounded.hadFraction) return `${signed} ${String(money.currency)}`;
+		let displayedFraction = rounded.fraction;
+		while (displayedFraction.length > 2 && displayedFraction.endsWith("0")) displayedFraction = displayedFraction.slice(0, -1);
+		return `${signed}.${displayedFraction} ${String(money.currency)}`;
+	}
+	return `${symbol}${signed}.${rounded.fraction}`;
+}
+function roundDecimal(value, decimals, maximumFractionDigits) {
+	const match = /^(-?)(\d+)(?:\.(\d+))?$/.exec(value);
+	if (match === null) throw Errors.invalidInput("money.value", "must be a base-10 decimal string");
+	const integer = match[2] ?? "0";
+	const sourceFraction = match[3] ?? "";
+	if (sourceFraction.length > decimals) throw Errors.invalidInput("money.value", "fraction exceeds money.decimals");
+	const scale = 10n ** BigInt(maximumFractionDigits);
+	const keptFraction = sourceFraction.slice(0, maximumFractionDigits).padEnd(maximumFractionDigits, "0");
+	let scaled = BigInt(integer) * scale + BigInt(keptFraction || "0");
+	if ((sourceFraction[maximumFractionDigits] ?? "0") >= "5") scaled += 1n;
+	return {
+		negative: match[1] === "-",
+		integer: (scaled / scale).toString(),
+		fraction: (scaled % scale).toString().padStart(maximumFractionDigits, "0"),
+		hadFraction: /[1-9]/.test(sourceFraction)
+	};
+}
+//#endregion
+//#region src/domain/money/parse-money.ts
+/**
+* ADR-0023 R1: the reason is a closed code and the ONLY failure vocabulary —
+* the consuming app maps each code to its own sentence. The SDK ships no
+* English for user-text failure.
+*/
+function isMoneyParseError(value) {
+	return "kind" in value;
+}
+const AMOUNT_PATTERN = /^(?:\d{1,3}(?:,\d{3})+|\d+)(?:\.\d+)?$/;
+const ZERO_PATTERN = /^0+(?:\.0+)?$/;
+function parseMoney(input, asset) {
+	if (!Number.isInteger(asset.decimals) || asset.decimals < 0) throw Errors.invalidInput("asset.decimals", "must be a non-negative integer");
+	const value = input.trim();
+	if (value.length === 0) return {
+		kind: "error",
+		reason: "required"
+	};
+	if (value.length > 24) return {
+		kind: "error",
+		reason: "too-long"
+	};
+	const negative = value.startsWith("-");
+	const unsigned = negative ? value.slice(1) : value;
+	if (!AMOUNT_PATTERN.test(unsigned)) return {
+		kind: "error",
+		reason: "invalid-format"
+	};
+	if (negative) return {
+		kind: "error",
+		reason: "non-positive"
+	};
+	const normalized = unsigned.replaceAll(",", "");
+	const fraction = normalized.split(".")[1];
+	if (fraction !== void 0 && fraction.length > asset.decimals) return {
+		kind: "error",
+		reason: "too-many-decimals"
+	};
+	if (ZERO_PATTERN.test(normalized)) return {
+		kind: "error",
+		reason: "non-positive"
+	};
+	return {
+		currency: asset.currency,
+		value: normalized,
+		decimals: asset.decimals
+	};
+}
+//#endregion
 //#region src/surface/account-providers.ts
 function localPrivateKeyAccountProvider(input) {
 	const account = privateKeyToAccount(input.privateKey);
@@ -53,7 +136,7 @@ function eip1193AccountProvider(input) {
 			} catch (err) {
 				return {
 					ok: false,
-					error: Errors.providerError("eip1193", "eth_accounts", err)
+					error: signerFailure("injected-eip1193", "eth_accounts", err)
 				};
 			} finally {
 				inFlight = null;
@@ -78,60 +161,6 @@ function firstAccount(value) {
 	return typeof first === "string" ? first : null;
 }
 //#endregion
-//#region src/signer.ts
-const EVM_ADDRESS_HEX$1 = /^0x[0-9a-fA-F]{40}$/;
-const ECDSA_SIGNATURE_HEX$1 = /^0x[0-9a-fA-F]{130}$/;
-const SAFE_OP_DIGEST_HEX$1 = /^0x[0-9a-fA-F]{64}$/;
-/**
-* Browser `CapxulSigner` backed by an injected EIP-1193 wallet (MetaMask, etc.).
-* Signs the SafeOp digest via `eth_sign`, then verifies the returned signature
-* recovers the selected account against that raw digest. Wallets that prefix
-* `eth_sign` payloads are rejected before the backend submits an invalid SafeOp.
-* The node key signer lives in `@capxul/sdk/node` (`localPrivateKeySigner`).
-*/
-function injectedWalletSigner(provider) {
-	const resolveAddress = async () => {
-		const accounts = await provider.request({ method: "eth_requestAccounts" });
-		const first = Array.isArray(accounts) ? accounts[0] : void 0;
-		if (typeof first !== "string") throw new Error("injectedWalletSigner: wallet returned no accounts");
-		if (!EVM_ADDRESS_HEX$1.test(first)) throw new Error("injectedWalletSigner: wallet returned invalid address format");
-		return toAddress(first);
-	};
-	return {
-		source: "injected-eip1193",
-		getAddress: resolveAddress,
-		async signUserOpHash(hash) {
-			if (!SAFE_OP_DIGEST_HEX$1.test(hash)) throw new Error("injectedWalletSigner: SafeOp digest must be a 0x-prefixed 32-byte hex");
-			const address = await resolveAddress();
-			let signature;
-			try {
-				signature = await provider.request({
-					method: "eth_sign",
-					params: [address, hash]
-				});
-			} catch (cause) {
-				const detail = cause instanceof Error ? cause.message : String(cause);
-				throw new Error(`injectedWalletSigner: eth_sign failed; enable raw-hash signing for deployment (${detail})`, { cause });
-			}
-			if (typeof signature !== "string") throw new Error("injectedWalletSigner: wallet returned a non-string signature");
-			if (!ECDSA_SIGNATURE_HEX$1.test(signature)) throw new Error("injectedWalletSigner: wallet returned invalid signature format");
-			if ((await recoverRawDigestSigner$1({
-				hash,
-				signature
-			})).toLowerCase() !== address.toLowerCase()) throw new Error("injectedWalletSigner: wallet signature did not recover the selected account for the raw SafeOp digest; use a raw-hash-capable wallet or @capxul/sdk/node localPrivateKeySigner for deployed flows");
-			return signature;
-		}
-	};
-}
-async function recoverRawDigestSigner$1(input) {
-	try {
-		return toAddress(await recoverAddress(input));
-	} catch (cause) {
-		const detail = cause instanceof Error ? cause.message : String(cause);
-		throw new Error(`injectedWalletSigner: could not verify raw SafeOp digest signature (${detail})`, { cause });
-	}
-}
-//#endregion
 //#region src/dev-signer.ts
 const SESSION_KEY = "capxul.session";
 /**
@@ -1399,9 +1428,27 @@ function mapToCapxulError(operation, err) {
 function mapToConvexCallError(operation, err) {
 	return convexCallErrorFromCapxul(operation, mapToCapxulError(operation, err));
 }
+const TRANSPORT_ERROR_CODES = new Set([
+	"EAI_AGAIN",
+	"ECONNREFUSED",
+	"ECONNRESET",
+	"ENOTFOUND",
+	"EPIPE",
+	"ETIMEDOUT",
+	"UND_ERR_CONNECT_TIMEOUT",
+	"UND_ERR_HEADERS_TIMEOUT",
+	"UND_ERR_SOCKET"
+]);
 function isTransportError(err) {
-	const message = err.message.toLowerCase();
-	return message.includes("failed to fetch") || message.includes("network") || message.includes("econnrefused") || message.includes("econnreset") || message.includes("enotfound") || message.includes("etimedout") || message.includes("socket");
+	const seen = /* @__PURE__ */ new Set();
+	let current = err;
+	while (current !== void 0 && !seen.has(current)) {
+		seen.add(current);
+		const code = current.code;
+		if (current.name === "FetchError" || current.name === "NetworkError" || typeof code === "string" && TRANSPORT_ERROR_CODES.has(code)) return true;
+		current = current.cause instanceof Error ? current.cause : void 0;
+	}
+	return false;
 }
 //#endregion
 //#region src/adapters/identity/ConvexIdentityAdapter.ts
@@ -1848,7 +1895,7 @@ var ConvexOrganizationSetupAdapter = class {
 	async authorizeAndSubmitBootstrap(input) {
 		const cancelled = cancellation(input.signal);
 		if (cancelled !== void 0) return cancelled;
-		const signerAddress = await signerResult("getAddress", () => this.#signer.getAddress());
+		const signerAddress = await signerResult(this.#signer.source, "getAddress", () => this.#signer.getAddress());
 		if (!signerAddress.ok) return signerAddress;
 		const prepared = await runCall("prepareBootstrap", this.#convex.action(this.#fns.prepareBootstrap, copyInvocationObservation(input, {
 			orgId: input.orgId,
@@ -1860,7 +1907,7 @@ var ConvexOrganizationSetupAdapter = class {
 		if (!authority.ok) return authority;
 		const cancelledAfterPrepare = cancellation(input.signal);
 		if (cancelledAfterPrepare !== void 0) return cancelledAfterPrepare;
-		const signature = await signerResult("signUserOpHash", () => this.#signer.signUserOpHash(prepared.value.digest));
+		const signature = await signerResult(this.#signer.source, "signUserOpHash", () => this.#signer.signUserOpHash(prepared.value.digest));
 		if (!signature.ok) return signature;
 		const cancelledAfterSign = cancellation(input.signal);
 		if (cancelledAfterSign !== void 0) return cancelledAfterSign;
@@ -1949,7 +1996,7 @@ function resetSignerSession(signer) {
 			value: void 0
 		};
 	} catch (cause) {
-		return fail(cause instanceof CapxulError ? cause : Errors.providerError("openfort", "resetSession", cause, { failure_mode: "unknown" }));
+		return fail(signerFailure(signer.source, "resetSession", cause));
 	}
 }
 async function runCall(operation, effect) {
@@ -1971,14 +2018,14 @@ function publicError(operation, cause) {
 	}
 	return Errors.providerError("convex-organization", operation, cause);
 }
-async function signerResult(operation, run) {
+async function signerResult(source, operation, run) {
 	try {
 		return {
 			ok: true,
 			value: await run()
 		};
 	} catch (cause) {
-		return fail(cause instanceof CapxulError ? cause : Errors.providerError("organization-signer", operation, cause));
+		return fail(signerFailure(source, operation, cause));
 	}
 }
 function validatePreparedAuthorities(prepared, signerAddress) {
@@ -2114,28 +2161,20 @@ function clearStaleOpenfortBrowserStorage(publishableKey) {
 }
 function createOpenfortBrowserSignerFromBootstrap(bootstrap, options = {}) {
 	const diagnostic = options.diagnostic;
-	const telemetry = options.telemetry;
 	const authBaseUrl = normalizeBetterAuthBaseUrl(bootstrap.authBaseUrl);
 	/**
 	* Closes the black hole: when the browser has no Web Crypto, OpenFort's
 	* `configure` would resolve to no address and the failure would be reported
 	* as `unknown`. Detect it before any network/wallet work, tag it
 	* `no-secure-context` on a PROVIDER_ERROR scoped to `configure`, breadcrumb
-	* it via DiagnosticPort, and self-report via TelemetryPort.
+	* it via DiagnosticPort. The assembled Core SDK boundary reports the error.
 	*/
 	function failNoSecureContext() {
 		diagnostic?.trace("openfort.configure", {
 			ok: false,
 			failure_mode: "no-secure-context"
 		});
-		const error = Errors.providerError("openfort", "configure", /* @__PURE__ */ new Error("Web Crypto unavailable: browser is not a secure context"), { failure_mode: "no-secure-context" });
-		if (telemetry) captureExceptionSync(telemetry, error, {
-			layer: "openfort",
-			operation: "configure",
-			provider: "openfort",
-			failure_mode: "no-secure-context"
-		});
-		throw error;
+		throw Errors.providerError("openfort", "configure", /* @__PURE__ */ new Error("Web Crypto unavailable: browser is not a secure context"), { failure_mode: "no-secure-context" });
 	}
 	function betterAuthSessionUrl() {
 		return `${authBaseUrl}/get-session`;
@@ -2674,16 +2713,24 @@ function refreshConvexAuthOnSession(authClient, refresh) {
 * particular object rather than on the auth seam itself. Here it wraps
 * `AuthClientPort.signOut`, so it holds for every route to a sign-out.
 *
-* `Effect.ensuring` (not `Effect.tap`) is deliberate: the old wrapper used
-* `try/finally`, so the session was reset even when sign-out failed. Dropping
-* to `tap` would silently strand an Openfort session on the error path.
+* Capture the sign-out exit before reset. This preserves the old `try/finally`
+* order and keeps a reset failure in the typed error channel.
 */
 function resetSignerSessionOnSignOut(authClient, resetRef) {
 	return {
 		...authClient,
-		signOut: (options) => authClient.signOut(options).pipe(Effect.ensuring(Effect.sync(() => {
-			resetRef.current?.();
-		})))
+		signOut: (options) => Effect.gen(function* () {
+			const exit = yield* Effect.exit(authClient.signOut(options));
+			yield* Effect.try({
+				try: () => resetRef.current?.(),
+				catch: (cause) => new AuthClientError({
+					operation: "signOut",
+					kind: "signer",
+					cause
+				})
+			});
+			return yield* exit;
+		})
 	};
 }
 async function createCapxulClient$1(input) {
@@ -2709,14 +2756,15 @@ async function createCapxulClient$1(input) {
 		if (signer === void 0 && runtime === "browser") signer = createOpenfortBrowserSignerFromBootstrap({
 			...adapters.value.bootstrap,
 			authBaseUrl: resolvedAuthBaseUrl
-		}, {
-			diagnostic: new ConsoleDiagnosticAdapter(),
-			telemetry: adapters.value.ports.telemetry
-		});
+		}, { diagnostic: new ConsoleDiagnosticAdapter() });
 		if (signer !== void 0 && "resetSession" in signer) {
-			const { resetSession } = signer;
+			const { resetSession, source } = signer;
 			resetSignerSession.current = () => {
-				resetSession();
+				try {
+					resetSession();
+				} catch (cause) {
+					throw signerFailure(source, "resetSession", cause);
+				}
 			};
 		}
 		const client = assembleCapxulClient({
@@ -2734,6 +2782,7 @@ async function createCapxulClient$1(input) {
 			...input.signal === void 0 ? {} : { signal: input.signal },
 			...input.otpTtlMs === void 0 ? {} : { otpTtlMs: input.otpTtlMs },
 			invokeTimeoutMs: input.invokeTimeoutMs ?? 3e4,
+			...input.observability?.failures === void 0 && input.observation === void 0 ? {} : { failureObservation: input.observability?.failures ?? input.observation },
 			...input.observability === void 0 ? {} : { hostObservationSnapshot: () => snapshotHostObservability(input.observability) },
 			effectRunner: {
 				runSync: Effect.runSyncWith(adapters.value.context),
@@ -2743,7 +2792,11 @@ async function createCapxulClient$1(input) {
 		const upstreamClose = adapters.value.close;
 		const close = idempotentClose(async () => {
 			try {
-				if ("resetSession" in (signer ?? {})) signer.resetSession();
+				if (signer !== void 0 && "resetSession" in signer) try {
+					signer.resetSession();
+				} catch (cause) {
+					throw signerFailure(signer.source, "resetSession", cause);
+				}
 			} finally {
 				await Promise.all([client._internal.close?.(), upstreamClose()]);
 			}
@@ -2912,4 +2965,4 @@ async function createCapxulClient(input) {
 	return createCapxulClient$1(input);
 }
 //#endregion
-export { CAPXUL_PAYMENTS_V2_ADDRESS, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, CapxulError, captureException, captureExceptionSync, createCapxulClient, deriveDevPrivateKey, devPrivateKeySigner, eip1193AccountProvider, embeddedSigner, fingerprintPaymentIntent, injectedWalletSigner, isCapxulError, isSettingUpLifecycle, localPrivateKeyAccountProvider, openfortEmbeddedSigner, openfortEmbeddedSignerFromWallet, openfortEmbeddedWalletPort, postHogObservability, destination as resolveIdentityDestination, toCountryCode, toAddress as toEvmAddress };
+export { CAPXUL_ERROR_CODES, CAPXUL_PAYMENTS_V2_ADDRESS, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, CapxulError, Errors, captureException, captureExceptionSync, createCapxulClient, deriveDevPrivateKey, devPrivateKeySigner, eip1193AccountProvider, embeddedSigner, fingerprintPaymentIntent, formatMoney, injectedWalletSigner, isCapxulError, isMoneyParseError, isSettingUpLifecycle, localPrivateKeyAccountProvider, openfortEmbeddedSigner, openfortEmbeddedSignerFromWallet, openfortEmbeddedWalletPort, parseMoney, postHogObservability, destination as resolveIdentityDestination, toCountryCode, toAddress as toEvmAddress };

package/dist/node/index.d.mts

@@ -1,4 +1,4 @@
-import { E as AuthSession, _ as AuthCachePortTag, g as AuthCachePort, h as AuthCacheError, n as CapxulSigner, v as CachedJwt } from "../signer-Bj4F-RwT.mjs";
+import { E as AuthSession, _ as AuthCachePortTag, g as AuthCachePort, h as AuthCacheError, n as CapxulSigner, v as CachedJwt } from "../signer-D4roBkcX.mjs";
 import { Hex } from "viem";
 import { Effect, FileSystem, Layer, Path } from "effect";
 

package/dist/node/index.mjs

@@ -1,4 +1,4 @@
-import { a as AuthCacheError, i as parseCachedJwt, m as toAddress, n as BrowserAuthCacheAdapter, o as AuthCachePortTag, r as parseAuthSession, t as InMemoryAuthCacheAdapter } from "../InMemoryAuthCacheAdapter-Rc8tCtml.mjs";
+import { a as AuthCacheError, h as toAddress, i as parseCachedJwt, n as BrowserAuthCacheAdapter, o as AuthCachePortTag, r as parseAuthSession, t as InMemoryAuthCacheAdapter } from "../InMemoryAuthCacheAdapter-PycLJWeW.mjs";
 import { Effect, FileSystem, Layer, Path } from "effect";
 import { privateKeyToAccount } from "viem/accounts";
 import * as os from "node:os";