@capxul/sdk 2.5.0 → 2.5.2

package/dist/{InMemoryAuthCacheAdapter-D5Cv0yz0.mjs → InMemoryAuthCacheAdapter-uOcqpqu8.mjs}

@@ -96,10 +96,12 @@ const Errors = {
 	accountNotFound: (accountId) => new CapxulError("ACCOUNT_NOT_FOUND", accountId ? `Openfort account ${accountId} not found` : "Openfort account not found", accountId === void 0 ? void 0 : { details: { accountId } }),
 	providerError: (provider, operation, cause, opts) => {
 		const details = {
+			...opts?.details,
 			provider,
 			operation
 		};
 		if (opts?.failure_mode) details.failure_mode = opts.failure_mode;
+		if (opts?.httpStatus !== void 0) details.httpStatus = opts.httpStatus;
 		return new CapxulError("PROVIDER_ERROR", `Provider error: ${provider} ${operation}`, {
 			cause,
 			details

package/dist/{create-capxul-client-Btl4qyNC.mjs → create-capxul-client-BDksczn-.mjs}

@@ -1,4 +1,4 @@
-import { A as toPartyId, B as Errors, M as toPayrollRunId, P as toRoleKey, R as CapxulError, S as toCurrencyCode, V as isCapxulError, b as toChainId, c as BYTES32_RE, d as WEI_RE, f as ZERO_BYTES32, h as toAddress, j as toPayrollGroupId, k as toOrgId, l as EVM_ADDRESS_RE$1, m as toAccountId, n as BrowserAuthCacheAdapter, s as APP_ID_RE, t as InMemoryAuthCacheAdapter, u as SUPPORTED_CURRENCY_CODES, v as toAuthUserId, w as toEmail, x as toCountryCode, y as toBudgetId, z as EXPECTED_OPERATION_OUTCOMES } from "./InMemoryAuthCacheAdapter-D5Cv0yz0.mjs";
+import { A as toPartyId, B as Errors, M as toPayrollRunId, P as toRoleKey, R as CapxulError, S as toCurrencyCode, V as isCapxulError, b as toChainId, c as BYTES32_RE, d as WEI_RE, f as ZERO_BYTES32, h as toAddress, j as toPayrollGroupId, k as toOrgId, l as EVM_ADDRESS_RE$1, m as toAccountId, n as BrowserAuthCacheAdapter, s as APP_ID_RE, t as InMemoryAuthCacheAdapter, u as SUPPORTED_CURRENCY_CODES, v as toAuthUserId, w as toEmail, x as toCountryCode, y as toBudgetId, z as EXPECTED_OPERATION_OUTCOMES } from "./InMemoryAuthCacheAdapter-uOcqpqu8.mjs";
 import { concat, encodeAbiParameters, encodeFunctionData, encodePacked, formatUnits, getContractAddress, keccak256, padHex, parseUnits, recoverAddress, stringToHex, toBytes, toEventSelector, toFunctionSelector, toFunctionSignature } from "viem";
 import { Context, Data, Deferred, Effect, Exit, Fiber, Layer, Queue, Ref, Result, Schema, SchemaGetter, Scope } from "effect";
 import { makeFunctionReference } from "convex/server";
@@ -2902,6 +2902,9 @@ const SENSITIVE_MATERIAL_PATTERNS = [
 	/eyJ[A-Za-z0-9_-]*\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/u,
 	/(?:(?:sk|pk|rk)_(?:live|test)|(?:phc|phx|ghp|gho|ghu|ghs|ghr|whsec)_|github_pat_|xox[baprs]-|AKIA[0-9A-Z]{16}|AIza)[A-Za-z0-9_-]*/iu
 ];
+const RAW_PRIVATE_KEY_MASK = /(^|[^a-fA-F0-9])[a-fA-F0-9]{64}(?=$|[^a-fA-F0-9])/gu;
+const KNOWN_CREDENTIAL_MASK = /(?:(?:sk|pk|rk)_(?:live|test)|(?:phc|phx|ghp|gho|ghu|ghs|ghr|whsec)_|github_pat_|xox[baprs]-|AKIA[0-9A-Z]{16}|AIza)[A-Za-z0-9_-]*/giu;
+const LABELLED_SECRET_MASK = /\b(api[ _-]?key|access[ _-]?token|token|secret|password|passphrase|private[ _-]?key|authorization|cookie|signature|request[ _-]?body|credential|otp|one[ _-]?time[ _-]?(?:password|code)|verification[ _-]?code)\b\s*[:=]\s*(?:"[^"]*"|'[^']*'|[^\s,;]+)/giu;
 /**
 * Reject: does the value carry any known secret material? Best effort — callers
 * drop the whole value on a match; a false negative is a leak, a false positive
@@ -2910,6 +2913,14 @@ const SENSITIVE_MATERIAL_PATTERNS = [
 function containsSensitiveMaterial(value) {
 	return SENSITIVE_MATERIAL_PATTERNS.some((pattern) => pattern.test(value));
 }
+/**
+* Mask: return the value with every known secret rewritten to `[REDACTED]`,
+* preserving surrounding text. Used where a value must still be shown (log
+* lines, issue bodies) but must not carry live credentials.
+*/
+function redactSecrets(value) {
+	return value.replace(/\bBearer\s+[^\s,;]+/giu, "Bearer [REDACTED]").replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/gu, "[REDACTED]").replace(/\b0x[a-fA-F0-9]{40,}\b/gu, "[REDACTED]").replace(RAW_PRIVATE_KEY_MASK, "$1[REDACTED]").replace(KNOWN_CREDENTIAL_MASK, "[REDACTED]").replace(LABELLED_SECRET_MASK, (_match, label) => `${label}=[REDACTED]`);
+}
 //#endregion
 //#region ../wire/src/observation-context.ts
 /** Single bounded HTTP carrier used before a Convex action envelope exists. */
@@ -3243,8 +3254,8 @@ var ActorFailure = class extends Error {
 	event;
 	details;
 	_tag = "ActorFailure";
-	constructor(reason, machine, state, event, details) {
-		super(`${machine}:${state}:${event} ${reason}`);
+	constructor(reason, machine, state, event, details, cause) {
+		super(`${machine}:${state}:${event} ${reason}`, cause === void 0 ? void 0 : { cause });
 		this.reason = reason;
 		this.machine = machine;
 		this.state = state;
@@ -3319,8 +3330,8 @@ const boot = (spec, options = {}) => Effect.gen(function* () {
 			defect(cause);
 		}
 	};
-	const makeFailure = (state, event, reason, details) => new ActorFailure(reason, spec.machine, spec.label(state), event._tag, details);
-	const nonApplied = (state, event, reason, outcome, env) => {
+	const makeFailure = (state, event, reason, details, cause) => new ActorFailure(reason, spec.machine, spec.label(state), event._tag, details, cause);
+	const nonApplied = (state, event, reason, outcome, env, failure) => {
 		const slot = env.origin?.slot ?? spec.slot(event);
 		return copyInvocationObservation(env.invocation, {
 			machine: spec.machine,
@@ -3331,7 +3342,8 @@ const boot = (spec, options = {}) => Effect.gen(function* () {
 			outcome,
 			duration_ms: duration(env.startedAt),
 			...withCarriage(env.invocation),
-			...outcome === "refused" ? { refusal_code: reason } : { error_code: reason }
+			...outcome === "refused" ? { refusal_code: reason } : { error_code: reason },
+			...failure === void 0 ? {} : { failure }
 		});
 	};
 	const applied = (from, to, event, slot, epoch, env) => copyInvocationObservation(env.invocation, {
@@ -3384,12 +3396,13 @@ const boot = (spec, options = {}) => Effect.gen(function* () {
 				slots.delete(env.origin.slot);
 				defect(exit.defect);
 				const event = { _tag: env.origin.event };
-				const failedState = yield* recoverFailure(state, env.origin, {
+				const died = {
 					code: "WORK_DIED",
-					message: "Identity work died"
-				});
-				yield* emit(nonApplied(failedState, event, "WORK_DIED", "failed", env));
-				yield* failReply(held.reply, makeFailure(failedState, event, "WORK_DIED"));
+					message: exit.defect instanceof Error ? exit.defect.message : "Identity work died"
+				};
+				const failedState = yield* recoverFailure(state, env.origin, died);
+				yield* emit(nonApplied(failedState, event, "WORK_DIED", "failed", env, died));
+				yield* failReply(held.reply, makeFailure(failedState, event, "WORK_DIED", void 0, died));
 				return;
 			}
 			if (exit.failure !== void 0) {
@@ -3397,9 +3410,9 @@ const boot = (spec, options = {}) => Effect.gen(function* () {
 				const outcome = exit.failure.code === "CANCELLED" ? "cancelled" : "failed";
 				const event = { _tag: env.origin.event };
 				const failedState = exit.failure === timeoutFailure || exit.failure === cancelledFailure ? yield* recoverFailure(state, env.origin, exit.failure) : state;
-				yield* emit(nonApplied(failedState, event, exit.failure.code, outcome, env));
+				yield* emit(nonApplied(failedState, event, exit.failure.code, outcome, env, exit.failure));
 				const details = exit.failure === timeoutFailure ? { reason: "timeout" } : void 0;
-				yield* failReply(held.reply, makeFailure(failedState, event, exit.failure.code, details));
+				yield* failReply(held.reply, makeFailure(failedState, event, exit.failure.code, details, exit.failure.error ?? exit.failure));
 				return;
 			}
 			yield* finish(env.origin, state);
@@ -5528,7 +5541,7 @@ function mapOk(result, f) {
 }
 //#endregion
 //#region package.json
-var version = "2.5.0";
+var version = "2.5.2";
 //#endregion
 //#region src/ports/auth-client.ts
 var AuthClientError = class extends Data.TaggedError("AuthClientError") {};
@@ -8824,23 +8837,50 @@ function observeSdkClient(client, adapter, snapshot) {
 	}
 }
 /** @internal Reports a factory-level typed failure without changing its identity. */
-function observeFailedResult(result, adapter, operation) {
-	if (adapter !== void 0 && isFailedResult(result)) report(adapter, "operation", operation, result.error, resolveAdapterSnapshot(adapter));
+function observeFailedResult(result, adapter, operation, origin) {
+	if (adapter !== void 0 && isFailedResult(result)) report(adapter, "operation", operation, result.error, resolveAdapterSnapshot(adapter), origin);
 	return result;
 }
-function report(adapter, kind, operation, cause, invocation) {
+/**
+* One failure, one event. The identity machine reports a failed transition
+* first; when the same `CapxulError` then surfaces as a public method result
+* (directly or down its `cause` chain), the boundary drops that second report.
+* Only machine-reported errors are remembered, so a caller that reuses one
+* error object across unrelated public methods still sees every report.
+*/
+const machineReportedCauses = /* @__PURE__ */ new WeakSet();
+function reportedByMachine(cause) {
+	let link = cause;
+	for (let depth = 0; depth < 8 && typeof link === "object" && link !== null; depth++) {
+		if (machineReportedCauses.has(link)) return true;
+		link = link.cause;
+	}
+	return false;
+}
+function report(adapter, kind, operation, cause, invocation, origin) {
+	if (origin === "machine") {
+		let link = cause;
+		for (let depth = 0; depth < 8 && typeof link === "object" && link !== null; depth++) {
+			machineReportedCauses.add(link);
+			link = link.cause;
+		}
+	} else if (reportedByMachine(cause)) return;
 	const operationName = normalizeOperation(operation);
 	const kindName = normalizeErrorKind(errorKind(cause));
 	const context = sanitizeObservationContext({
 		...invocation.context,
 		...isCapxulError(cause) && cause.correlationId !== void 0 ? { correlationId: cause.correlationId } : {}
 	});
+	const detail = failureDetail(cause);
+	const evidence = failureEvidence(cause);
 	const failure = markFailureInvocationSnapshot({
-		exception: syntheticException(operationName, kindName),
+		exception: syntheticException(operationName, kindName, evidence.message, evidence.stack),
 		sdkVersion: SDK_VERSION,
 		operation: operationName,
 		errorKind: kindName,
-		...context === void 0 ? {} : { context }
+		...context === void 0 ? {} : { context },
+		...detail === void 0 ? {} : { detail },
+		...evidence
 	}, {
 		active: invocation.active,
 		...context === void 0 ? {} : { context }
@@ -8903,19 +8943,24 @@ function postHogProperties(failure, context) {
 		operation: failure.operation,
 		error_kind: failure.errorKind,
 		handled: true,
+		...failure.detail,
+		...failure.message === void 0 ? {} : { error_message: failure.message },
+		...failure.details === void 0 ? {} : { error_details: failure.details },
+		...failure.causeChain === void 0 ? {} : { error_cause: failure.causeChain.join(" <- ") },
 		...observationContextProps(merged)
 	};
 }
 function postHogExceptionProperties(failure, properties) {
 	const filename = `capxul-sdk-observation://boundary/${failure.operation}`;
+	const message = failure.message ?? "Capxul SDK operation failed";
 	return {
 		...properties,
 		$exception_type: failure.errorKind,
-		$exception_message: EXCEPTION_MESSAGE,
+		$exception_message: message,
 		$exception_level: "error",
 		$exception_list: [{
 			type: failure.errorKind,
-			value: EXCEPTION_MESSAGE,
+			value: message,
 			mechanism: {
 				type: "capxul_sdk_boundary",
 				handled: true,
@@ -8931,10 +8976,77 @@ function postHogExceptionProperties(failure, properties) {
 					colno: 1,
 					in_app: true
 				}]
-			}
+			},
+			...failure.stack === void 0 ? {} : { stack: failure.stack }
 		}]
 	};
 }
+const MAX_EVIDENCE_TEXT = 4e3;
+const MAX_CAUSE_DEPTH = 8;
+function evidenceText(value) {
+	if (typeof value !== "string" || value.length === 0) return void 0;
+	return redactSecrets(value).slice(0, MAX_EVIDENCE_TEXT);
+}
+/** A field whose NAME says credential is masked whatever its value looks like. */
+const CREDENTIAL_FIELD_NAME = /(?:otp|pass(?:word|wd|phrase)?|token|secret|credential|api[_-]?key|private[_-]?key|authorization|cookie|session)/iu;
+/** Copy a details object into a JSON-safe shape with every string masked. */
+function evidenceValue(value, depth = 0) {
+	if (typeof value === "string") return evidenceText(value);
+	if (typeof value === "number" || typeof value === "boolean" || value === null) return value;
+	if (typeof value === "bigint") return value.toString();
+	if (value instanceof Error) return evidenceText(value.message);
+	if (depth >= 4 || typeof value !== "object") return void 0;
+	if (Array.isArray(value)) return value.slice(0, 50).map((item) => evidenceValue(item, depth + 1));
+	const copy = {};
+	for (const [key, nested] of Object.entries(value)) {
+		if (CREDENTIAL_FIELD_NAME.test(key)) {
+			copy[key] = "[REDACTED]";
+			continue;
+		}
+		const safe = evidenceValue(nested, depth + 1);
+		if (safe !== void 0) copy[key] = safe;
+	}
+	return copy;
+}
+/**
+* @internal The evidence in PostHog property shape, for product events that
+* name a failure (`bootstrap_failed`). Same keys as the `$exception` event.
+*/
+function failureEvidenceProps(cause) {
+	const evidence = failureEvidence(cause);
+	return {
+		...evidence.message === void 0 ? {} : { error_message: evidence.message },
+		...evidence.details === void 0 ? {} : { error_details: evidence.details },
+		...evidence.causeChain === void 0 ? {} : { error_cause: evidence.causeChain.join(" <- ") }
+	};
+}
+/** The real failure, masked for secrets only. Never throws. */
+function failureEvidence(cause) {
+	try {
+		const message = cause instanceof Error ? evidenceText(cause.message) : evidenceText(cause);
+		const stack = cause instanceof Error ? evidenceText(cause.stack) : void 0;
+		const details = isCapxulError(cause) && typeof cause.details === "object" && cause.details !== null ? evidenceValue(cause.details) : void 0;
+		const causeChain = [];
+		let previous = message;
+		let link = cause instanceof Error ? cause.cause : void 0;
+		for (let depth = 0; depth < MAX_CAUSE_DEPTH && link !== void 0 && link !== null; depth++) {
+			const text = link instanceof Error ? evidenceText(link.message) : evidenceText(link);
+			if (text !== void 0 && text !== previous) {
+				causeChain.push(text);
+				previous = text;
+			}
+			link = link instanceof Error ? link.cause : void 0;
+		}
+		return {
+			...message === void 0 ? {} : { message },
+			...details === void 0 || Object.keys(details).length === 0 ? {} : { details },
+			...causeChain.length === 0 ? {} : { causeChain },
+			...stack === void 0 ? {} : { stack }
+		};
+	} catch {
+		return {};
+	}
+}
 function errorKind(cause) {
 	try {
 		if (isCapxulError(cause)) return normalizeErrorKind(cause.code);
@@ -8948,14 +9060,61 @@ function sanitizeFailureObservation(failure) {
 	const operation = normalizeOperation(failure.operation);
 	const kind = normalizeErrorKind(failure.errorKind);
 	const context = sanitizeObservationContext(failure.context);
+	const detail = sanitizeFailureDetail(failure.detail);
+	const message = evidenceText(failure.message);
+	const stack = evidenceText(failure.stack);
+	const details = typeof failure.details === "object" && failure.details !== null ? evidenceValue(failure.details) : void 0;
+	const causeChain = Array.isArray(failure.causeChain) ? failure.causeChain.map(evidenceText).filter((text) => text !== void 0) : void 0;
 	return {
-		exception: syntheticException(operation, kind),
+		exception: syntheticException(operation, kind, message, stack),
 		sdkVersion: normalizeSdkVersion(failure.sdkVersion),
 		operation,
 		errorKind: kind,
-		...context === void 0 ? {} : { context }
+		...context === void 0 ? {} : { context },
+		...detail === void 0 ? {} : { detail },
+		...message === void 0 ? {} : { message },
+		...details === void 0 || Object.keys(details).length === 0 ? {} : { details },
+		...causeChain === void 0 || causeChain.length === 0 ? {} : { causeChain },
+		...stack === void 0 ? {} : { stack }
 	};
 }
+/**
+* @internal Lift the enumerated discriminators off a `CapxulError` so a
+* boundary event says WHICH provider failed and HOW, not just `PROVIDER_ERROR`.
+* Shared by the failure boundary and the `bootstrap_failed` product event.
+*/
+function failureDetail(cause) {
+	if (!isCapxulError(cause)) return void 0;
+	const details = cause.details;
+	if (typeof details !== "object" || details === null) return void 0;
+	const source = details;
+	return sanitizeFailureDetail({
+		provider: source.provider,
+		provider_operation: source.operation,
+		failure_mode: source.failure_mode,
+		reason: source.reason,
+		http_status: source.httpStatus
+	});
+}
+function sanitizeFailureDetail(input) {
+	if (typeof input !== "object" || input === null) return void 0;
+	const source = input;
+	const detail = {};
+	for (const key of [
+		"provider",
+		"provider_operation",
+		"failure_mode",
+		"reason"
+	]) {
+		const value = source[key];
+		if (typeof value === "string" && ENUMERATED_DETAIL_RE.test(value)) detail[key] = value;
+	}
+	const status = source.http_status;
+	if (typeof status === "number" && Number.isInteger(status) && status >= 100 && status <= 599) detail.http_status = status;
+	return Object.keys(detail).length === 0 ? void 0 : detail;
+}
+/** Enumerated codes only (`convex`, `no-secure-context`, `bootstrap-encode`); free text fails. */
+const ENUMERATED_DETAIL_RE = /^[A-Za-z][A-Za-z0-9_.-]{0,63}$/u;
 function normalizeSdkVersion(value) {
 	return typeof value === "string" && /^[A-Za-z0-9][A-Za-z0-9.+_-]{0,127}$/u.test(value) ? value : "unknown";
 }
@@ -8965,10 +9124,10 @@ function normalizeOperation(value) {
 function normalizeErrorKind(value) {
 	return typeof value === "string" && /^[A-Za-z][A-Za-z0-9_.-]{0,63}$/u.test(value) ? value : "Error";
 }
-function syntheticException(operation, kind) {
-	const error = /* @__PURE__ */ new Error(EXCEPTION_MESSAGE);
+function syntheticException(operation, kind, message = EXCEPTION_MESSAGE, stack) {
+	const error = new Error(message);
 	error.name = kind;
-	error.stack = `${kind}: ${error.message}\n    at CapxulSdkBoundary.${operation} (capxul-sdk-observation://boundary/${operation}:1:1)`;
+	error.stack = `${kind}: ${error.message}\n    at CapxulSdkBoundary.${operation} (capxul-sdk-observation://boundary/${operation}:1:1)` + (stack === void 0 ? "" : `\nCaused by: ${stack}`);
 	return error;
 }
 function isPromiseLike(value) {
@@ -9173,10 +9332,19 @@ function assembleCapxulClient(input) {
 	const unsubscribeProductTelemetry = actor.subscribeTransitions((record) => {
 		effectRunner.runPromise(executeIdentityProductObservation(input.ports.telemetry, record, actor.snapshot())).catch(() => {});
 	});
+	const failureObservation = observation.failureObservation;
+	const unsubscribeFailureObservation = failureObservation === void 0 ? () => {} : actor.subscribeTransitions((record) => {
+		if (record.outcome !== "failed") return;
+		observeFailedResult({
+			ok: false,
+			error: transitionError(record)
+		}, failureObservation, `identity.${record.event}`, "machine");
+	});
 	let stopPromise = null;
 	const stopActor = () => {
 		if (stopPromise === null) {
 			unsubscribeProductTelemetry();
+			unsubscribeFailureObservation();
 			stopPromise = effectRunner.runPromise(Scope.close(scope, Exit.void));
 		}
 		return stopPromise;
@@ -9361,6 +9529,30 @@ function assembleCapxulClient(input) {
 		}
 	}, observation.failureObservation, observation.hostObservationSnapshot);
 }
+function transitionError(record) {
+	const failure = record.failure;
+	if (failure?.error !== void 0) {
+		const error = failure.error;
+		if (record.correlation_id === void 0 || error.correlationId !== void 0) return error;
+		return new CapxulError(error.code, error.message, {
+			cause: error,
+			correlationId: record.correlation_id,
+			...error.details === void 0 ? {} : { details: error.details },
+			...error.layer === void 0 ? {} : { layer: error.layer }
+		});
+	}
+	return new CapxulError(record.error_code, failure?.message ?? "Identity work failed", {
+		...failure === void 0 ? {} : { cause: failure },
+		details: {
+			machine: record.machine,
+			state: record.state,
+			event: record.event,
+			slot: record.slot,
+			...failure?.mode === void 0 ? {} : { failure_mode: failure.mode }
+		},
+		...record.correlation_id === void 0 ? {} : { correlationId: record.correlation_id }
+	});
+}
 function withHostObservation(actor, snapshot) {
 	if (snapshot === void 0) return actor;
 	const controls = (input) => {
@@ -9376,4 +9568,4 @@ function withHostObservation(actor, snapshot) {
 	};
 }
 //#endregion
-export { isClaimed as $, fingerprintPaymentIntent as A, OBSERVATION_CONTEXT_HEADER as B, ClockPortTag as C, AuthClientError as D, authClientPortFromPromiseAdapter as E, copyInvocationObservation as F, CAPXUL_FUNCTIONS as G, sanitizeObservationContext as H, readInvocationObservation as I, CAPXUL_PAYMENTS_V2_ADDRESS as J, BootstrapEnvelope as K, causeChain as L, fromWei as M, isSettingUpLifecycle as N, AuthClientPortTag as O, formatTraceparent as P, destination as Q, injectedWalletSigner as R, ClockError as S, bootstrapErrorFromCapxul as T, PAYMENT_DIRECTIONS as U, encodeObservationContextHeader as V, PAYMENT_STATUSES as W, BASE_SEPOLIA_CHAIN_ID as X, normalizeBindingEmail as Y, deriveCapxulSafeAddress as Z, wireChainId as _, observeFailedResult as a, ConvexCallPortTag as b, captureExceptionSync as c, TelemetryPortTag as d, isRestoring as et, redactTelemetryEvent as f, accountReadErrorFromCapxul as g, AccountReadPortTag as h, observationContextProps as i, toWei as j, version as k, detectAuthCacheAdapter as l, smartAccountErrorFromCapxul as m, postHogProductTelemetry as n, postHogFailureObservation as o, SmartAccountPortTag as p, EngineeringTelemetryBootstrapPolicy as q, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT as r, captureException as s, assembleCapxulClient as t, PostHogTelemetryLayer as u, IdentityPortTag as v, BootstrapPortTag as w, convexCallErrorFromCapxul as x, identityErrorFromCapxul as y, signerFailure as z };
+export { deriveCapxulSafeAddress as $, AuthClientPortTag as A, injectedWalletSigner as B, convexCallErrorFromCapxul as C, bootstrapErrorFromCapxul as D, BootstrapPortTag as E, isSettingUpLifecycle as F, PAYMENT_DIRECTIONS as G, OBSERVATION_CONTEXT_HEADER as H, formatTraceparent as I, BootstrapEnvelope as J, PAYMENT_STATUSES as K, copyInvocationObservation as L, fingerprintPaymentIntent as M, toWei as N, authClientPortFromPromiseAdapter as O, fromWei as P, BASE_SEPOLIA_CHAIN_ID as Q, readInvocationObservation as R, ConvexCallPortTag as S, ClockPortTag as T, encodeObservationContextHeader as U, signerFailure as V, sanitizeObservationContext as W, CAPXUL_PAYMENTS_V2_ADDRESS as X, EngineeringTelemetryBootstrapPolicy as Y, normalizeBindingEmail as Z, AccountReadPortTag as _, failureEvidenceProps as a, IdentityPortTag as b, postHogFailureObservation as c, detectAuthCacheAdapter as d, destination as et, PostHogTelemetryLayer as f, smartAccountErrorFromCapxul as g, SmartAccountPortTag as h, failureDetail as i, version as j, AuthClientError as k, captureException as l, redactTelemetryEvent as m, postHogProductTelemetry as n, isRestoring as nt, observationContextProps as o, TelemetryPortTag as p, CAPXUL_FUNCTIONS as q, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT as r, observeFailedResult as s, assembleCapxulClient as t, isClaimed as tt, captureExceptionSync as u, accountReadErrorFromCapxul as v, ClockError as w, identityErrorFromCapxul as x, wireChainId as y, causeChain as z };

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { B as OrgId, C as Address, N as CountryCode, O as AuthSession, S as AccountId, U as PayrollGroupId, V as PartyId, W as PayrollRunId, Y as RoleKey, a as SignerStatusStore, at as CapxulErrorDetails, c as AccountProviderSource, ct as FailureMode, d as eip1193AccountProvider, et as toAddress, f as localPrivateKeyAccountProvider, g as SmartAccount, h as Session, i as SignerStatus, it as CapxulErrorCode, j as BudgetId, k as AuthUserId, l as AccountRequirement, lt as isCapxulError, m as Profile, n as CapxulSigner, nt as CAPXUL_ERROR_CODES, o as injectedWalletSigner, ot as Errors, p as CapxulResult, r as Eip1193RequestProvider, rt as CapxulError, s as AccountProvider, t as CapxulDigestSigner, tt as toCountryCode, u as Eip1193Provider, x as Account, z as Money } from "./signer-CRzTIrau.mjs";
-import { $ as PermissionChangeInput, $n as Readiness, $t as MovementActivityEvidence, A as OrgView, An as IdentityMethods, At as ActivityKind, B as PayrollGroupMember, Bn as PAYMENT_DIRECTIONS, Bt as DepositInstructions, C as DetectPendingOrgInvitationsResult, Cn as ResolvedTarget, Ct as InboxItem, D as OrgMethods, Dn as AccountLifecycle, Dt as ActivityDetail, E as MemberView, En as fingerprintPaymentIntent, Et as ActivityAnnotationInput, F as RoleSpendCap, Fn as ActorRef, Ft as ActivityReference, G as PayrollRunItemInput, Gt as DestinationPayload, H as PayrollMethods, Hn as PaymentStatus$1, Ht as DestinationAddInput, I as RoleView, In as CurrentHoldings, It as ActivitySummary, J as OrganizationPaymentBatchInput, Jn as CAPXUL_PAYMENTS_V2_ADDRESS, Jt as DestinationsMethods, K as PayrollRunStatus, Kt as DestinationRail, L as AuthorizeRunInput, Ln as Permission, Lt as ActivitySummaryParams, M as OrganizationAuditLogItem, Mn as AuthMethods, Mt as ActivityMethods, N as ResendInviteTokenInput, Nn as OrgLifecycle, Nt as ActivityPage, O as OrgScopedMethods, On as AccountSetupStep, Ot as ActivityFilter, P as RoleDefinition, Pn as OrgSetupStep, Pt as ActivityRange, Q as PermissionAssignInput, Qn as OrgLane, Qt as MeProfile, R as PayrollGroup, Rn as SubmittedPermissionExecution, Rt as ActivitySummaryTotal, S as CreateOrgInput, Sn as Ref, St as InboxApproveInput, T as MemberStatus, Tn as TargetsMethods, Tt as ActivityAnnotation, U as PayrollOptions, Un as RequestStatus, Ut as DestinationKind, V as PayrollGroupsMethods, Vn as PAYMENT_STATUSES, Vt as Destination, W as PayrollRun, Wt as DestinationListInput, X as OrganizationPaymentItemInput, Xn as IdentityEvent, Xt as HandlesMethods, Y as OrganizationPaymentInput, Yn as Destination$1, Yt as FinancialOpsMethods, Z as OrganizationPaymentsMethods, Zn as IdentityState, Zt as MeMethods, _ as SystemMethods, _n as PaymentType, _t as ActorRequestsMethods, a as SdkFailureObservation, an as PayeesMethods, ar as InvocationControls, at as PermissionReadResult, b as CurrentUserContext, bn as RecipientResolution, bt as AddressBookLabelInput, c as PostHogObservabilityOptions, cn as PaymentDirection, ct as OrgMeMethod, d as CreateCapxulClientInput, dn as PaymentDocumentRender, dt as AccountMethods, en as OfframpMethods, er as StateLabel, et as PermissionCreateInput, f as IdentityProfileDetails, fn as PaymentDocumentVerification, ft as ActorProfile, g as Holding, gn as PaymentTiming, gt as ActorRequestIssueInput, h as HoldingsMethods, hn as PaymentStatus, ht as ActorRequest, i as ObservationDelivery, in as Payee, ir as IdentityTransition, it as PermissionRevokeInput, j as OrganizationAccount, jn as SmartAccountMethods, jt as ActivityListParams, k as OrgTemplate, kn as isSettingUpLifecycle, kt as ActivityItem, l as postHogObservability, ln as PaymentDocumentKind, lt as OrgMeOptions, m as IdentityRuntimeSendResult, mn as PaymentMoney, mt as ActorRelationshipMethods, n as ObservationAdapter, nn as OfframpQuoteInput, nr as isClaimed, nt as PermissionOptions, o as HostObservability, on as Payment, ot as Budget, p as IdentityRuntime, pn as PaymentDocumentsMethods, pt as ActorProfileMethods, q as PayrollRuns, qn as TelemetryPort, qt as DestinationRemoveInput, r as ObservationContext, rn as OfframpStatus, rr as isRestoring, rt as PermissionReplaceInput, s as PostHogObservabilityClient, sn as PaymentActivityEvidence, st as OrgMe, t as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, tn as OfframpQuote, tr as destination, tt as PermissionMethods, u as CapxulClient, un as PaymentDocumentRef, ut as AccountsMethods, v as SystemHealth, vn as PaymentsMethods, vt as AddressBookAddInput, w as InviteMemberInput, wn as TargetReference, wt as InboxMethods, x as CurrentUserMethods, xn as RecipientResolutionKind, xt as AddressBookMethods, y as MediaMethods, yn as PaymentsPayInput, yt as AddressBookEntry, z as PayrollGroupInput, zn as InboxStatus, zt as ActorReference } from "./observation-CyNjyQxv.mjs";
+import { B as OrgId, C as Address, N as CountryCode, O as AuthSession, S as AccountId, U as PayrollGroupId, V as PartyId, W as PayrollRunId, Y as RoleKey, a as SignerStatusStore, at as CapxulErrorDetails, c as AccountProviderSource, ct as FailureMode, d as eip1193AccountProvider, et as toAddress, f as localPrivateKeyAccountProvider, g as SmartAccount, h as Session, i as SignerStatus, it as CapxulErrorCode, j as BudgetId, k as AuthUserId, l as AccountRequirement, lt as isCapxulError, m as Profile, n as CapxulSigner, nt as CAPXUL_ERROR_CODES, o as injectedWalletSigner, ot as Errors, p as CapxulResult, r as Eip1193RequestProvider, rt as CapxulError, s as AccountProvider, t as CapxulDigestSigner, tt as toCountryCode, u as Eip1193Provider, x as Account, z as Money } from "./signer-BSEG9xgN.mjs";
+import { $ as PermissionChangeInput, $n as Readiness, $t as MovementActivityEvidence, A as OrgView, An as IdentityMethods, At as ActivityKind, B as PayrollGroupMember, Bn as PAYMENT_DIRECTIONS, Bt as DepositInstructions, C as DetectPendingOrgInvitationsResult, Cn as ResolvedTarget, Ct as InboxItem, D as OrgMethods, Dn as AccountLifecycle, Dt as ActivityDetail, E as MemberView, En as fingerprintPaymentIntent, Et as ActivityAnnotationInput, F as RoleSpendCap, Fn as ActorRef, Ft as ActivityReference, G as PayrollRunItemInput, Gt as DestinationPayload, H as PayrollMethods, Hn as PaymentStatus$1, Ht as DestinationAddInput, I as RoleView, In as CurrentHoldings, It as ActivitySummary, J as OrganizationPaymentBatchInput, Jn as CAPXUL_PAYMENTS_V2_ADDRESS, Jt as DestinationsMethods, K as PayrollRunStatus, Kt as DestinationRail, L as AuthorizeRunInput, Ln as Permission, Lt as ActivitySummaryParams, M as OrganizationAuditLogItem, Mn as AuthMethods, Mt as ActivityMethods, N as ResendInviteTokenInput, Nn as OrgLifecycle, Nt as ActivityPage, O as OrgScopedMethods, On as AccountSetupStep, Ot as ActivityFilter, P as RoleDefinition, Pn as OrgSetupStep, Pt as ActivityRange, Q as PermissionAssignInput, Qn as OrgLane, Qt as MeProfile, R as PayrollGroup, Rn as SubmittedPermissionExecution, Rt as ActivitySummaryTotal, S as CreateOrgInput, Sn as Ref, St as InboxApproveInput, T as MemberStatus, Tn as TargetsMethods, Tt as ActivityAnnotation, U as PayrollOptions, Un as RequestStatus, Ut as DestinationKind, V as PayrollGroupsMethods, Vn as PAYMENT_STATUSES, Vt as Destination, W as PayrollRun, Wt as DestinationListInput, X as OrganizationPaymentItemInput, Xn as IdentityEvent, Xt as HandlesMethods, Y as OrganizationPaymentInput, Yn as Destination$1, Yt as FinancialOpsMethods, Z as OrganizationPaymentsMethods, Zn as IdentityState, Zt as MeMethods, _ as SystemMethods, _n as PaymentType, _t as ActorRequestsMethods, a as SdkFailureObservation, an as PayeesMethods, ar as InvocationControls, at as PermissionReadResult, b as CurrentUserContext, bn as RecipientResolution, bt as AddressBookLabelInput, c as PostHogObservabilityOptions, cn as PaymentDirection, ct as OrgMeMethod, d as CreateCapxulClientInput, dn as PaymentDocumentRender, dt as AccountMethods, en as OfframpMethods, er as StateLabel, et as PermissionCreateInput, f as IdentityProfileDetails, fn as PaymentDocumentVerification, ft as ActorProfile, g as Holding, gn as PaymentTiming, gt as ActorRequestIssueInput, h as HoldingsMethods, hn as PaymentStatus, ht as ActorRequest, i as ObservationDelivery, in as Payee, ir as IdentityTransition, it as PermissionRevokeInput, j as OrganizationAccount, jn as SmartAccountMethods, jt as ActivityListParams, k as OrgTemplate, kn as isSettingUpLifecycle, kt as ActivityItem, l as postHogObservability, ln as PaymentDocumentKind, lt as OrgMeOptions, m as IdentityRuntimeSendResult, mn as PaymentMoney, mt as ActorRelationshipMethods, n as ObservationAdapter, nn as OfframpQuoteInput, nr as isClaimed, nt as PermissionOptions, o as HostObservability, on as Payment, ot as Budget, p as IdentityRuntime, pn as PaymentDocumentsMethods, pt as ActorProfileMethods, q as PayrollRuns, qn as TelemetryPort, qt as DestinationRemoveInput, r as ObservationContext, rn as OfframpStatus, rr as isRestoring, rt as PermissionReplaceInput, s as PostHogObservabilityClient, sn as PaymentActivityEvidence, st as OrgMe, t as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, tn as OfframpQuote, tr as destination, tt as PermissionMethods, u as CapxulClient, un as PaymentDocumentRef, ut as AccountsMethods, v as SystemHealth, vn as PaymentsMethods, vt as AddressBookAddInput, w as InviteMemberInput, wn as TargetReference, wt as InboxMethods, x as CurrentUserMethods, xn as RecipientResolutionKind, xt as AddressBookMethods, y as MediaMethods, yn as PaymentsPayInput, yt as AddressBookEntry, z as PayrollGroupInput, zn as InboxStatus, zt as ActorReference } from "./observation-BQ2VKWH5.mjs";
 import { Hex } from "viem";
 import { Context, Effect, Layer } from "effect";
 import { FunctionReference } from "convex/server";

package/dist/index.mjs

@@ -1,7 +1,7 @@
-import { $ as isClaimed, A as fingerprintPaymentIntent, B as OBSERVATION_CONTEXT_HEADER, C as ClockPortTag, D as AuthClientError, E as authClientPortFromPromiseAdapter, F as copyInvocationObservation, G as CAPXUL_FUNCTIONS, H as sanitizeObservationContext, I as readInvocationObservation, J as CAPXUL_PAYMENTS_V2_ADDRESS, K as BootstrapEnvelope, L as causeChain, M as fromWei, N as isSettingUpLifecycle, O as AuthClientPortTag, P as formatTraceparent, Q as destination, R as injectedWalletSigner, S as ClockError, T as bootstrapErrorFromCapxul, U as PAYMENT_DIRECTIONS, V as encodeObservationContextHeader, W as PAYMENT_STATUSES, X as BASE_SEPOLIA_CHAIN_ID, Y as normalizeBindingEmail, _ as wireChainId, a as observeFailedResult, b as ConvexCallPortTag, c as captureExceptionSync, d as TelemetryPortTag, et as isRestoring, g as accountReadErrorFromCapxul, h as AccountReadPortTag, i as observationContextProps, j as toWei, k as version, l as detectAuthCacheAdapter, m as smartAccountErrorFromCapxul, n as postHogProductTelemetry, o as postHogFailureObservation, p as SmartAccountPortTag, q as EngineeringTelemetryBootstrapPolicy, r as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, s as captureException, t as assembleCapxulClient, u as PostHogTelemetryLayer, v as IdentityPortTag, w as BootstrapPortTag, x as convexCallErrorFromCapxul, y as identityErrorFromCapxul, z as signerFailure } from "./create-capxul-client-Btl4qyNC.mjs";
-import { B as Errors, C as toDurationMs, D as toJwtToken, E as toEpochSeconds, F as toSessionToken, I as decodeConvexError, L as CAPXUL_ERROR_CODES, N as toPublishableKey, O as toKycTier, P as toRoleKey, R as CapxulError, S as toCurrencyCode, T as toEpochMs, V as isCapxulError, b as toChainId, g as toAllowedOrigin, h as toAddress, k as toOrgId, m as toAccountId, o as AuthCachePortTag, p as currencySymbolFor, v as toAuthUserId, w as toEmail, x as toCountryCode } from "./InMemoryAuthCacheAdapter-D5Cv0yz0.mjs";
+import { A as AuthClientPortTag, B as injectedWalletSigner, C as convexCallErrorFromCapxul, D as bootstrapErrorFromCapxul, E as BootstrapPortTag, F as isSettingUpLifecycle, G as PAYMENT_DIRECTIONS, H as OBSERVATION_CONTEXT_HEADER, I as formatTraceparent, J as BootstrapEnvelope, K as PAYMENT_STATUSES, L as copyInvocationObservation, M as fingerprintPaymentIntent, N as toWei, O as authClientPortFromPromiseAdapter, P as fromWei, Q as BASE_SEPOLIA_CHAIN_ID, R as readInvocationObservation, S as ConvexCallPortTag, T as ClockPortTag, U as encodeObservationContextHeader, V as signerFailure, W as sanitizeObservationContext, X as CAPXUL_PAYMENTS_V2_ADDRESS, Y as EngineeringTelemetryBootstrapPolicy, Z as normalizeBindingEmail, _ as AccountReadPortTag, a as failureEvidenceProps, b as IdentityPortTag, c as postHogFailureObservation, d as detectAuthCacheAdapter, et as destination, f as PostHogTelemetryLayer, g as smartAccountErrorFromCapxul, h as SmartAccountPortTag, i as failureDetail, j as version, k as AuthClientError, l as captureException, n as postHogProductTelemetry, nt as isRestoring, o as observationContextProps, p as TelemetryPortTag, q as CAPXUL_FUNCTIONS, r as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, s as observeFailedResult, t as assembleCapxulClient, tt as isClaimed, u as captureExceptionSync, v as accountReadErrorFromCapxul, w as ClockError, x as identityErrorFromCapxul, y as wireChainId, z as causeChain } from "./create-capxul-client-BDksczn-.mjs";
+import { B as Errors, C as toDurationMs, D as toJwtToken, E as toEpochSeconds, F as toSessionToken, I as decodeConvexError, L as CAPXUL_ERROR_CODES, N as toPublishableKey, O as toKycTier, P as toRoleKey, R as CapxulError, S as toCurrencyCode, T as toEpochMs, V as isCapxulError, b as toChainId, g as toAllowedOrigin, h as toAddress, k as toOrgId, m as toAccountId, o as AuthCachePortTag, p as currencySymbolFor, v as toAuthUserId, w as toEmail, x as toCountryCode } from "./InMemoryAuthCacheAdapter-uOcqpqu8.mjs";
 import { keccak256, recoverAddress, stringToHex } from "viem";
-import { Cause, Context, Data, Effect, Exit, Layer, Result, SchemaIssue, SchemaParser, Scope, Tracer } from "effect";
+import { Cause, Context, Data, Duration, Effect, Exit, Layer, Result, Schedule, SchemaIssue, SchemaParser, Scope, Tracer } from "effect";
 import { getFunctionName, makeFunctionReference } from "convex/server";
 import { privateKeyToAccount } from "viem/accounts";
 import { FetchHttpClient, Headers, HttpClient } from "effect/unstable/http";
@@ -1266,6 +1266,33 @@ function BetterAuthNodeLayer(deps) {
 }
 //#endregion
 //#region src/adapters/bootstrap/HttpBootstrapAdapter.ts
+const DEFAULT_RETRY = {
+	attempts: 2,
+	baseDelayMs: 400
+};
+/** Request-side statuses a proxy or backend returns while momentarily unable to serve. */
+const TRANSIENT_HTTP_STATUSES = new Set([
+	408,
+	425,
+	429
+]);
+/** Every 5xx is a server-side condition worth one more try; the client sent nothing wrong. */
+function isTransientHttpStatus(status) {
+	return status >= 500 || TRANSIENT_HTTP_STATUSES.has(status);
+}
+/**
+* A transient HTTP status is worth one more try. The bootstrap call crosses
+* the host's own proxy before it reaches Convex, and every observed failure
+* of that hop cleared on a retry seconds later. A network rejection (offline,
+* DNS, CORS) is not retried: it does not clear in a second, and the caller
+* surfaces it as `NETWORK_ERROR` at once. Auth and input rejections are
+* deterministic and never retried.
+*/
+function isTransientBootstrapFailure(error) {
+	if (error.kind !== "provider") return false;
+	const status = error.details?.httpStatus;
+	return typeof status === "number" && isTransientHttpStatus(status);
+}
 async function safeText(res) {
 	try {
 		return await res.text();
@@ -1277,12 +1304,21 @@ var HttpBootstrapAdapter = class {
 	bootstrapBaseUrl;
 	fetchImpl;
 	observation;
+	retry;
 	constructor(deps) {
 		this.bootstrapBaseUrl = deps.bootstrapBaseUrl.replace(/\/$/, "");
 		this.observation = deps.observation;
+		this.retry = deps.retry ?? DEFAULT_RETRY;
 		this.fetchImpl = deps.fetch ?? ((input, init) => globalThis.fetch(input, init));
 	}
 	resolve(input) {
+		return this.attempt(input).pipe(Effect.retry({
+			times: this.retry.attempts,
+			while: isTransientBootstrapFailure,
+			schedule: Schedule.exponential(Duration.millis(this.retry.baseDelayMs))
+		}));
+	}
+	attempt(input) {
 		return Effect.tryPromise({
 			try: () => {
 				const headers = {
@@ -1335,7 +1371,17 @@ var HttpBootstrapAdapter = class {
 		return Effect.promise(() => safeText(res)).pipe(Effect.flatMap((body) => {
 			if (res.status === 401 || body.startsWith("NOT_AUTHENTICATED")) return Effect.fail(bootstrapErrorFromCapxul("notAuthenticated", Errors.notAuthenticated()));
 			if (res.status === 400 || body.startsWith("INVALID_INPUT")) return Effect.fail(bootstrapErrorFromCapxul("invalidInput", Errors.invalidInput("publishableKey", "rejected by bootstrap")));
-			return Effect.fail(bootstrapErrorFromCapxul("provider", Errors.providerError("convex", "bootstrap", /* @__PURE__ */ new Error(`HTTP ${res.status}`))));
+			const responseBody = body.slice(0, 300);
+			const edgeError = res.headers?.get?.("x-vercel-error") ?? void 0;
+			const edgeRequestId = res.headers?.get?.("x-vercel-id") ?? void 0;
+			return Effect.fail(bootstrapErrorFromCapxul("provider", Errors.providerError("convex", "bootstrap", /* @__PURE__ */ new Error(`HTTP ${res.status}${edgeError === void 0 ? "" : ` ${edgeError}`}`), {
+				httpStatus: res.status,
+				details: {
+					...responseBody.length === 0 ? {} : { responseBody },
+					...edgeError === void 0 ? {} : { edgeError },
+					...edgeRequestId === void 0 ? {} : { edgeRequestId }
+				}
+			})));
 		}));
 	}
 };
@@ -2794,7 +2840,9 @@ async function createProductionAdapters(input) {
 				name: "bootstrap_failed",
 				props: {
 					...bootstrapTelemetryEnvelope(input, resolvedInput.value),
-					reason: bootstrapResult.error.code
+					reason: bootstrapResult.error.code,
+					...failureDetail(bootstrapResult.error),
+					...failureEvidenceProps(bootstrapResult.error)
 				}
 			});
 			await closeScope().catch(() => void 0);

package/dist/node/index.d.mts

@@ -1,4 +1,4 @@
-import { O as AuthSession, _ as AuthCacheError, b as CachedJwt, n as CapxulSigner, v as AuthCachePort, y as AuthCachePortTag } from "../signer-CRzTIrau.mjs";
+import { O as AuthSession, _ as AuthCacheError, b as CachedJwt, n as CapxulSigner, v as AuthCachePort, y as AuthCachePortTag } from "../signer-BSEG9xgN.mjs";
 import { Hex } from "viem";
 import { Effect, FileSystem, Layer, Path } from "effect";
 

package/dist/node/index.mjs

@@ -1,4 +1,4 @@
-import { a as AuthCacheError, h as toAddress, i as parseCachedJwt, n as BrowserAuthCacheAdapter, o as AuthCachePortTag, r as parseAuthSession, t as InMemoryAuthCacheAdapter } from "../InMemoryAuthCacheAdapter-D5Cv0yz0.mjs";
+import { a as AuthCacheError, h as toAddress, i as parseCachedJwt, n as BrowserAuthCacheAdapter, o as AuthCachePortTag, r as parseAuthSession, t as InMemoryAuthCacheAdapter } from "../InMemoryAuthCacheAdapter-uOcqpqu8.mjs";
 import { Effect, FileSystem, Layer, Path } from "effect";
 import { privateKeyToAccount } from "viem/accounts";
 import * as os from "node:os";

package/dist/{observation-CyNjyQxv.d.mts → observation-BQ2VKWH5.d.mts}

@@ -1,4 +1,4 @@
-import { $ as WeiAmount, A as BlockNumber, B as OrgId, C as Address$1, D as AppId, E as AnonymousDistinctId, F as DocumentHash, G as PermissionAssignmentId, H as PaymentCommandId, I as DurationMs, J as PublishableKey, K as PermissionId, L as Email, M as ChainId, N as CountryCode, O as AuthSession, P as CurrencyCode, Q as TxHash, R as EpochMs, T as AllowedOrigin, U as PayrollGroupId, V as PartyId, W as PayrollRunId, X as SessionToken, Y as RoleKey, Z as SmartAccount, a as SignerStatusStore, at as CapxulErrorDetails, b as CachedJwt, c as AccountProviderSource, ct as FailureMode, g as SmartAccount$1, h as Session$1, it as CapxulErrorCode, j as BudgetId, k as AuthUserId, l as AccountRequirement, m as Profile$1, n as CapxulSigner, p as CapxulResult, q as Profile, rt as CapxulError, st as Failure, v as AuthCachePort, w as AllowanceKey, x as Account$1, z as Money } from "./signer-CRzTIrau.mjs";
+import { $ as WeiAmount, A as BlockNumber, B as OrgId, C as Address$1, D as AppId, E as AnonymousDistinctId, F as DocumentHash, G as PermissionAssignmentId, H as PaymentCommandId, I as DurationMs, J as PublishableKey, K as PermissionId, L as Email, M as ChainId, N as CountryCode, O as AuthSession, P as CurrencyCode, Q as TxHash, R as EpochMs, T as AllowedOrigin, U as PayrollGroupId, V as PartyId, W as PayrollRunId, X as SessionToken, Y as RoleKey, Z as SmartAccount, a as SignerStatusStore, at as CapxulErrorDetails, b as CachedJwt, c as AccountProviderSource, ct as FailureMode, g as SmartAccount$1, h as Session$1, it as CapxulErrorCode, j as BudgetId, k as AuthUserId, l as AccountRequirement, m as Profile$1, n as CapxulSigner, p as CapxulResult, q as Profile, rt as CapxulError, st as Failure, v as AuthCachePort, w as AllowanceKey, x as Account$1, z as Money } from "./signer-BSEG9xgN.mjs";
 import { Address, Hex } from "viem";
 import { Context, Effect, Layer, Schema, Scope, Tracer } from "effect";
 import { FunctionReference } from "convex/server";
@@ -38,7 +38,8 @@ type IdentityTransition = (RecordBase & {
   readonly outcome: "failed" | "cancelled";
   readonly state: string;
   readonly error_code: CapxulErrorCode;
-  readonly refusal_code?: never;
+  readonly refusal_code?: never; /** The typed failure behind `error_code`, with its `CapxulError` when the port gave one. */
+  readonly failure?: Failure;
 });
 declare class ActorFailure<Reason extends CapxulErrorCode> extends Error {
   readonly reason: Reason;
@@ -47,7 +48,7 @@ declare class ActorFailure<Reason extends CapxulErrorCode> extends Error {
   readonly event: string;
   readonly details?: Readonly<Record<string, unknown>> | undefined;
   readonly _tag = "ActorFailure";
-  constructor(reason: Reason, machine: string, state: string, event: string, details?: Readonly<Record<string, unknown>> | undefined);
+  constructor(reason: Reason, machine: string, state: string, event: string, details?: Readonly<Record<string, unknown>> | undefined, cause?: unknown);
 }
 interface Actor<S, Pub, Reason extends CapxulErrorCode> {
   readonly ask: (event: Pub, controls?: InvocationControls) => Effect.Effect<S, ActorFailure<Reason | CapxulErrorCode>>;
@@ -2701,9 +2702,11 @@ declare function postHogObservability(client: PostHogObservabilityClient | null
 /** Host-owned correlation fields that are safe to attach to an SDK failure. */
 interface ObservationContext extends Omit<WireObservationContext, "applicationId"> {}
 /**
- * The small, SDK-owned failure envelope delivered to observation adapters.
- * Method arguments, response bodies, wallet payloads, and arbitrary error
- * details are deliberately absent.
+ * The SDK-owned failure envelope delivered to observation adapters. It carries
+ * the real error message, the `CapxulError.details` object, the cause chain,
+ * and the stack. Secret material (keys, tokens, bearer headers) is masked;
+ * nothing else is withheld. Ruling 2026-09-01: an operator reading an issue
+ * needs the actual failure, not a placeholder.
  */
 interface SdkFailureObservation {
   readonly exception: Error;
@@ -2712,6 +2715,30 @@ interface SdkFailureObservation {
   readonly errorKind: string;
   /** Invocation snapshot; failure correlation wins over later host state. */
   readonly context?: ObservationContext;
+  /** Enumerated discriminators from `CapxulError.details`, in property shape. */
+  readonly detail?: SdkFailureDetail;
+  /** The error's own message, secrets masked. */
+  readonly message?: string;
+  /** The full `CapxulError.details` object, secrets masked, JSON-safe. */
+  readonly details?: Readonly<Record<string, unknown>>;
+  /** Messages down the `cause` chain, outermost first, secrets masked. */
+  readonly causeChain?: readonly string[];
+  /** The original stack when the error had one, secrets masked. */
+  readonly stack?: string;
+}
+/**
+ * The PII-safe subset of `CapxulError.details`, already in PostHog property
+ * shape. `provider` + `provider_operation` name the failing dependency
+ * (`convex bootstrap`, `openfort configure`), `failure_mode` / `reason` are
+ * enumerated codes, `http_status` is the upstream status. Anything else on
+ * `details` (ids, field names, free text) is dropped at the boundary.
+ */
+interface SdkFailureDetail {
+  readonly provider?: string;
+  readonly provider_operation?: string;
+  readonly failure_mode?: string;
+  readonly reason?: string;
+  readonly http_status?: number;
 }
 type ObservationDelivery = void | PromiseLike<void>;
 /**

package/dist/{signer-CRzTIrau.d.mts → signer-BSEG9xgN.d.mts}

@@ -66,6 +66,8 @@ declare const Errors: {
   readonly accountNotFound: (accountId?: string) => CapxulError;
   readonly providerError: (provider: string, operation: string, cause: unknown, opts?: {
     readonly failure_mode?: FailureMode;
+    readonly httpStatus?: number; /** Extra evidence for the operator (response body, edge error code). */
+    readonly details?: Readonly<Record<string, unknown>>;
   }) => CapxulError;
   readonly capabilityUnavailable: (provider: string, operation: string) => CapxulError;
   readonly invalidInput: (field: string, reason: string) => CapxulError;

package/dist/testing/index.d.mts

@@ -1,4 +1,4 @@
-import { Gn as TelemetryGroupInput, Kn as TelemetryIdentifyInput, Wn as TelemetryEvent, ir as IdentityTransition, n as ObservationAdapter, u as CapxulClient } from "../observation-CyNjyQxv.mjs";
+import { Gn as TelemetryGroupInput, Kn as TelemetryIdentifyInput, Wn as TelemetryEvent, ir as IdentityTransition, n as ObservationAdapter, u as CapxulClient } from "../observation-BQ2VKWH5.mjs";
 import { Effect, Layer } from "effect";
 
 //#region src/testing/telemetry/RecordingTelemetryAdapter.d.ts

package/dist/testing/index.mjs

@@ -1,5 +1,5 @@
-import { E as authClientPortFromPromiseAdapter, M as fromWei, T as bootstrapErrorFromCapxul, Z as deriveCapxulSafeAddress, _ as wireChainId, f as redactTelemetryEvent, g as accountReadErrorFromCapxul, j as toWei, m as smartAccountErrorFromCapxul, t as assembleCapxulClient, x as convexCallErrorFromCapxul, y as identityErrorFromCapxul } from "../create-capxul-client-Btl4qyNC.mjs";
-import { B as Errors, C as toDurationMs, D as toJwtToken, E as toEpochSeconds, F as toSessionToken, N as toPublishableKey, O as toKycTier, R as CapxulError, T as toEpochMs, _ as toAppId, b as toChainId, g as toAllowedOrigin, h as toAddress, m as toAccountId, t as InMemoryAuthCacheAdapter, v as toAuthUserId, w as toEmail, x as toCountryCode } from "../InMemoryAuthCacheAdapter-D5Cv0yz0.mjs";
+import { $ as deriveCapxulSafeAddress, C as convexCallErrorFromCapxul, D as bootstrapErrorFromCapxul, N as toWei, O as authClientPortFromPromiseAdapter, P as fromWei, g as smartAccountErrorFromCapxul, m as redactTelemetryEvent, t as assembleCapxulClient, v as accountReadErrorFromCapxul, x as identityErrorFromCapxul, y as wireChainId } from "../create-capxul-client-BDksczn-.mjs";
+import { B as Errors, C as toDurationMs, D as toJwtToken, E as toEpochSeconds, F as toSessionToken, N as toPublishableKey, O as toKycTier, R as CapxulError, T as toEpochMs, _ as toAppId, b as toChainId, g as toAllowedOrigin, h as toAddress, m as toAccountId, t as InMemoryAuthCacheAdapter, v as toAuthUserId, w as toEmail, x as toCountryCode } from "../InMemoryAuthCacheAdapter-uOcqpqu8.mjs";
 import { keccak256 } from "viem";
 import { Effect, Result, Semaphore } from "effect";
 import { getFunctionName } from "convex/server";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/sdk",
-  "version": "2.5.0",
+  "version": "2.5.2",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Xelmar-tech/infrastructure.git",
@@ -46,12 +46,12 @@
     "typescript": "npm:@typescript/typescript6@6.0.2",
     "vite-plus": "0.1.23",
     "vitest": "npm:@voidzero-dev/vite-plus-test@0.1.23",
-    "@capxul/types": "0.2.0",
+    "@capxul/config": "0.2.1",
+    "@capxul/errors": "0.0.2",
     "@capxul/typescript-config": "0.0.0",
-    "@capxul/config": "0.2.0",
-    "@capxul/observability": "2.5.0",
-    "@capxul/wire": "0.5.0",
-    "@capxul/errors": "0.0.1"
+    "@capxul/observability": "2.5.2",
+    "@capxul/wire": "0.5.1",
+    "@capxul/types": "0.2.1"
   },
   "_permissionlessPinReason": "permissionless.toSafeSmartAccount is pinned to 0.3.4 for live Safe deployment E2E. Counterfactual address fixtures captured 2026-05-17 in packages/backend/convex/_shared/__tests__/counterfactual.test.ts and packages/config/tests/safe.test.ts must be re-verified before upgrading.",
   "scripts": {