@capxul/sdk 2.5.3 → 2.5.4

package/dist/{create-capxul-client-DkAxmhLG.mjs → create-capxul-client-BGhQ0sKC.mjs}

@@ -1,6 +1,6 @@
 import { A as toPartyId, B as Errors, M as toPayrollRunId, P as toRoleKey, R as CapxulError, S as toCurrencyCode, V as isCapxulError, b as toChainId, c as BYTES32_RE, d as WEI_RE, f as ZERO_BYTES32, h as toAddress, j as toPayrollGroupId, k as toOrgId, l as EVM_ADDRESS_RE$1, m as toAccountId, n as BrowserAuthCacheAdapter, s as APP_ID_RE, t as InMemoryAuthCacheAdapter, u as SUPPORTED_CURRENCY_CODES, v as toAuthUserId, w as toEmail, x as toCountryCode, y as toBudgetId, z as EXPECTED_OPERATION_OUTCOMES } from "./InMemoryAuthCacheAdapter-uOcqpqu8.mjs";
 import { concat, encodeAbiParameters, encodeFunctionData, encodePacked, formatUnits, getContractAddress, keccak256, padHex, parseUnits, recoverAddress, stringToHex, toBytes, toEventSelector, toFunctionSelector, toFunctionSignature } from "viem";
-import { Context, Data, Deferred, Effect, Exit, Fiber, Layer, Queue, Ref, Result, Schema, SchemaGetter, Scope } from "effect";
+import { Context, Data, Deferred, Duration, Effect, Exit, Fiber, Layer, Queue, Ref, Result, Schema, SchemaGetter, Scope } from "effect";
 import { makeFunctionReference } from "convex/server";
 //#region src/domain/identity/model.ts
 const WRONG = { refused: "WRONG_STATE" };
@@ -4549,73 +4549,8 @@ function isMoneyTelemetryDebugEnabled() {
 	return globalThis.process?.env?.CAPXUL_DEBUG_TELEMETRY === "1";
 }
 //#endregion
-//#region src/surface/payment-execution.ts
-function mismatch(field, message) {
-	return {
-		ok: false,
-		error: Errors.invalidInput(field, message)
-	};
-}
-function cancelled(operation) {
-	return {
-		ok: false,
-		error: Errors.cancelled({ operation })
-	};
-}
-function isAborted$2(signal) {
-	return signal?.aborted === true;
-}
-async function signerCall(source, operation, run) {
-	try {
-		return {
-			ok: true,
-			value: await run()
-		};
-	} catch (cause) {
-		return {
-			ok: false,
-			error: signerFailure(source, operation, cause)
-		};
-	}
-}
-async function executePersonalPayment(deps, payment, signal, requestKey) {
-	if (isAborted$2(signal)) return cancelled("payments.pay");
-	if (deps.signer === void 0) return mismatch("signer", "payments.pay requires a configured CapxulSigner");
-	const session = deps.actor.authSession();
-	if (session === null) return {
-		ok: false,
-		error: Errors.notAuthenticated()
-	};
-	const signerAddress = await signerCall(deps.signer.source, "getAddress", () => deps.signer.getAddress());
-	if (!signerAddress.ok) return signerAddress;
-	const expectedSafe = deriveCapxulSafeAddress({ email: session.email });
-	const resolvedRequestKey = requestKey ?? `pay_${crypto.randomUUID()}`;
-	const prepared = await runIfActive(signal, "payments.prepareExecution", () => deps.convexCall.action(deps.functions.preparePaymentExecution, { input: {
-		requestKey: resolvedRequestKey,
-		signerAddress: signerAddress.value,
-		payment
-	} }));
-	if (!prepared.ok) return prepared;
-	if (prepared.value.requestKey !== resolvedRequestKey || JSON.stringify(prepared.value.payment) !== JSON.stringify(payment)) return mismatch("payment", "prepared Payment execution uses another request");
-	if (prepared.value.chainId !== deps.chainId) return mismatch("chainId", "prepared Payment execution uses another chain");
-	if (prepared.value.signerAddress.toLowerCase() !== signerAddress.value.toLowerCase()) return mismatch("signerAddress", "prepared Payment execution uses another signer");
-	if (prepared.value.userOpSenderSafe.toLowerCase() !== expectedSafe.toLowerCase()) return mismatch("userOpSenderSafe", "prepared Payment execution uses another Account Safe");
-	if (prepared.value.emitPaymentInitiated) await emitPaymentInitiated(deps.telemetry, {
-		kind: prepared.value.purposeKind,
-		paymentId: prepared.value.paymentId
-	});
-	if (isAborted$2(signal)) return cancelled("payments.pay");
-	const signature = await signerCall(deps.signer.source, "signUserOpHash", () => deps.signer.signUserOpHash(prepared.value.digest));
-	if (!signature.ok) return signature;
-	if (isAborted$2(signal)) return cancelled("payments.pay");
-	return runIfActive(void 0, "payments.submitExecution", () => deps.convexCall.action(deps.functions.submitPaymentExecution, { input: {
-		executionId: prepared.value.executionId,
-		signature: signature.value
-	} }));
-}
-//#endregion
 //#region src/surface/payment-command-execution.ts
-function isAborted$1(signal) {
+function isAborted$2(signal) {
 	return signal?.aborted === true;
 }
 function canonicalJson(value) {
@@ -4631,7 +4566,7 @@ function matchesIntent(expected) {
 	return async (request) => await fingerprintPaymentIntent(request) === await fingerprintPaymentIntent(expected);
 }
 async function executePrepared(deps, prepare, isExpectedRequest, signal) {
-	if (isAborted$1(signal)) return {
+	if (isAborted$2(signal)) return {
 		ok: false,
 		error: Errors.cancelled({ operation: "payments" })
 	};
@@ -4660,7 +4595,7 @@ async function executePrepared(deps, prepare, isExpectedRequest, signal) {
 		ok: false,
 		error: Errors.invalidInput("payment", "prepared authority mismatch")
 	};
-	if (isAborted$1(signal)) return {
+	if (isAborted$2(signal)) return {
 		ok: false,
 		error: Errors.cancelled({ operation: "payments" })
 	};
@@ -4673,7 +4608,7 @@ async function executePrepared(deps, prepare, isExpectedRequest, signal) {
 			error: signerFailure(deps.signer.source, "signUserOpHash", cause)
 		};
 	}
-	if (isAborted$1(signal)) return {
+	if (isAborted$2(signal)) return {
 		ok: false,
 		error: Errors.cancelled({ operation: "payments" })
 	};
@@ -4695,6 +4630,71 @@ function executeOrganizationPayment(deps, input, signal) {
 	} })), matchesIntent(input), signal);
 }
 //#endregion
+//#region src/surface/payment-execution.ts
+function mismatch(field, message) {
+	return {
+		ok: false,
+		error: Errors.invalidInput(field, message)
+	};
+}
+function cancelled(operation) {
+	return {
+		ok: false,
+		error: Errors.cancelled({ operation })
+	};
+}
+function isAborted$1(signal) {
+	return signal?.aborted === true;
+}
+async function signerCall(source, operation, run) {
+	try {
+		return {
+			ok: true,
+			value: await run()
+		};
+	} catch (cause) {
+		return {
+			ok: false,
+			error: signerFailure(source, operation, cause)
+		};
+	}
+}
+async function executePersonalPayment(deps, payment, signal, requestKey) {
+	if (isAborted$1(signal)) return cancelled("payments.pay");
+	if (deps.signer === void 0) return mismatch("signer", "payments.pay requires a configured CapxulSigner");
+	const session = deps.actor.authSession();
+	if (session === null) return {
+		ok: false,
+		error: Errors.notAuthenticated()
+	};
+	const signerAddress = await signerCall(deps.signer.source, "getAddress", () => deps.signer.getAddress());
+	if (!signerAddress.ok) return signerAddress;
+	const expectedSafe = deriveCapxulSafeAddress({ email: session.email });
+	const resolvedRequestKey = requestKey ?? `pay_${crypto.randomUUID()}`;
+	const prepared = await runIfActive(signal, "payments.prepareExecution", () => deps.convexCall.action(deps.functions.preparePaymentExecution, { input: {
+		requestKey: resolvedRequestKey,
+		signerAddress: signerAddress.value,
+		payment
+	} }));
+	if (!prepared.ok) return prepared;
+	if (prepared.value.requestKey !== resolvedRequestKey || canonicalJson(prepared.value.payment) !== canonicalJson(payment)) return mismatch("payment", "prepared Payment execution uses another request");
+	if (prepared.value.chainId !== deps.chainId) return mismatch("chainId", "prepared Payment execution uses another chain");
+	if (prepared.value.signerAddress.toLowerCase() !== signerAddress.value.toLowerCase()) return mismatch("signerAddress", "prepared Payment execution uses another signer");
+	if (prepared.value.userOpSenderSafe.toLowerCase() !== expectedSafe.toLowerCase()) return mismatch("userOpSenderSafe", "prepared Payment execution uses another Account Safe");
+	if (prepared.value.emitPaymentInitiated) await emitPaymentInitiated(deps.telemetry, {
+		kind: prepared.value.purposeKind,
+		paymentId: prepared.value.paymentId
+	});
+	if (isAborted$1(signal)) return cancelled("payments.pay");
+	const signature = await signerCall(deps.signer.source, "signUserOpHash", () => deps.signer.signUserOpHash(prepared.value.digest));
+	if (!signature.ok) return signature;
+	if (isAborted$1(signal)) return cancelled("payments.pay");
+	return runIfActive(void 0, "payments.submitExecution", () => deps.convexCall.action(deps.functions.submitPaymentExecution, { input: {
+		executionId: prepared.value.executionId,
+		signature: signature.value
+	} }));
+}
+//#endregion
 //#region src/surface/money.ts
 function actorReferenceToBackend(actor) {
 	if (actor === void 0) return void 0;
@@ -5541,7 +5541,7 @@ function mapOk(result, f) {
 }
 //#endregion
 //#region package.json
-var version = "2.5.3";
+var version = "2.5.4";
 //#endregion
 //#region src/ports/auth-client.ts
 var AuthClientError = class extends Data.TaggedError("AuthClientError") {};
@@ -5828,6 +5828,28 @@ const FaucetFailedProps = Schema.Struct({
 	...TelemetryEnvelopeProps,
 	reason: OptionalString
 });
+const AaGatewayUpstreamFallbackProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	method: Schema.String,
+	from_upstream: Schema.Literals([
+		"alchemy",
+		"infura",
+		"public"
+	]),
+	to_upstream: Schema.optional(Schema.Literals([
+		"alchemy",
+		"infura",
+		"public"
+	])),
+	failure: Schema.Literals([
+		"http-429",
+		"http-5xx",
+		"rpc-rate-limit",
+		"timeout",
+		"network"
+	]),
+	status: Schema.optional(Schema.Number)
+});
 const ORG_ID_TELEMETRY_RE = /^org_[0-9A-Za-z]+$/;
 const OrgIdTelemetrySchema = Schema.String.pipe(Schema.refine((value) => ORG_ID_TELEMETRY_RE.test(value), { message: "must be org_ plus an alphanumeric id" }));
 const OptionalOrgId = Schema.optional(OrgIdTelemetrySchema);
@@ -5878,6 +5900,8 @@ const OrganizationCreationFailedProps = Schema.Struct({
 	stage: OnboardingStageSchema,
 	error_code: Schema.String,
 	retryable: Schema.Boolean,
+	/** #1655: the SDK's backoff before this attempt. Absent on the first attempt. */
+	backoff_ms: Schema.optional(DurationMsSchema),
 	failure_reason: Schema.optional(Schema.Literals([
 		"deterministic_address_mismatch",
 		"receipt_provider_unavailable",
@@ -6128,6 +6152,10 @@ Schema.Struct({
 	name: Schema.Literal("faucet_failed"),
 	props: FaucetFailedProps
 });
+Schema.Struct({
+	name: Schema.Literal("aa_gateway_upstream_fallback"),
+	props: AaGatewayUpstreamFallbackProps
+});
 Schema.Struct({
 	name: Schema.Literal("org_create_started"),
 	props: OrgCreateStartedProps
@@ -6518,6 +6546,29 @@ const IDENTITY_SLOT_BY_EVENT = {
 	OrgFailed: IDENTITY_SLOT.org
 };
 const identitySlot = (event) => IDENTITY_SLOT_BY_EVENT[event._tag];
+/** 2 s, 4 s, 8 s, 16 s, 32 s, 60 s, 60 s: about three minutes, then the user decides. */
+const DEFAULT_CONFIRMATION_BACKOFF = {
+	initialDelayMs: 2e3,
+	maxDelayMs: 6e4,
+	maxRetries: 7
+};
+/**
+* A public partial override must not bring the tight loop back: a zero,
+* negative, or non-finite delay, or a non-integer or infinite retry count,
+* falls back to the default for that field. `maxDelayMs` is never below
+* `initialDelayMs`.
+*/
+const positiveMs = (value, fallback) => value !== void 0 && Number.isFinite(value) && value > 0 ? value : fallback;
+function normalizeConfirmationBackoff(override) {
+	const initialDelayMs = positiveMs(override?.initialDelayMs, DEFAULT_CONFIRMATION_BACKOFF.initialDelayMs);
+	const maxDelayMs = Math.max(initialDelayMs, positiveMs(override?.maxDelayMs, DEFAULT_CONFIRMATION_BACKOFF.maxDelayMs));
+	const retries = override?.maxRetries;
+	return {
+		initialDelayMs,
+		maxDelayMs,
+		maxRetries: retries !== void 0 && Number.isSafeInteger(retries) && retries >= 0 ? retries : DEFAULT_CONFIRMATION_BACKOFF.maxRetries
+	};
+}
 const failureOf = (error) => {
 	if (error instanceof CapxulError) {
 		const mode = error.details?.failure_mode;
@@ -6626,7 +6677,7 @@ const orgEngineeringContext = (controls, parent) => {
 		...traceparent === void 0 ? {} : { traceparent }
 	};
 };
-const runOrgStep = (setup, orgId, step, controls) => {
+const runOrgStep = (setup, orgId, step, controls, retryDelayMs) => {
 	const [name, invoke] = step === "preparingFounderAccount" ? ["organization-setup.prepare-founder-account", (parent) => setup.prepareFounderAccount({
 		orgId,
 		observationContext: orgEngineeringContext(controls, parent)
@@ -6638,11 +6689,12 @@ const runOrgStep = (setup, orgId, step, controls) => {
 		observationContext: orgEngineeringContext(controls, parent)
 	})] : ["organization-setup.confirm-submitted-bootstrap", (parent) => setup.confirmSubmittedBootstrap({
 		orgId,
-		observationContext: orgEngineeringContext(controls, parent)
+		observationContext: orgEngineeringContext(controls, parent),
+		...retryDelayMs === void 0 ? {} : { retryDelayMs }
 	})];
 	return resultEffect(name, invoke);
 };
-const orgLane = (setup, start, send, controls) => Effect.gen(function* () {
+const orgLane = (setup, start, send, controls, backoff) => Effect.gen(function* () {
 	let orgId;
 	let lifecycle;
 	if (start.kind === "create") {
@@ -6705,9 +6757,12 @@ const orgLane = (setup, start, send, controls) => Effect.gen(function* () {
 		orgId,
 		step
 	});
+	let retries = 0;
+	let retryDelayMs;
 	while (step !== "ready") {
 		const current = step;
-		const advanced = yield* Effect.result(runOrgStep(setup, orgId, current, controls));
+		const advanced = yield* Effect.result(runOrgStep(setup, orgId, current, controls, retryDelayMs));
+		retryDelayMs = void 0;
 		if (Result.isFailure(advanced)) {
 			yield* send({
 				_tag: "OrgFailed",
@@ -6719,6 +6774,38 @@ const orgLane = (setup, start, send, controls) => Effect.gen(function* () {
 		}
 		lifecycle = advanced.success;
 		if (lifecycle.status === "failed") {
+			if (lifecycle.at === "confirmingBootstrap" && lifecycle.retryable && retries < backoff.maxRetries) {
+				const delayMs = Math.min(backoff.initialDelayMs * 2 ** retries, backoff.maxDelayMs);
+				retries += 1;
+				yield* Effect.sleep(Duration.millis(delayMs));
+				const reset = yield* Effect.result(resultEffect("organization-setup.retry", (parent) => setup.retry({
+					orgId,
+					observationContext: orgEngineeringContext(controls, parent)
+				})));
+				if (Result.isFailure(reset)) {
+					yield* send({
+						_tag: "OrgFailed",
+						orgId,
+						step: current,
+						failure: reset.failure
+					});
+					return yield* Effect.fail(reset.failure);
+				}
+				lifecycle = reset.success;
+				if (lifecycle.status !== "failed") {
+					retryDelayMs = delayMs;
+					step = orgStep(lifecycle);
+					yield* step === "ready" ? send({
+						_tag: "OrgReady",
+						orgId
+					}) : send({
+						_tag: "OrgAt",
+						orgId,
+						step
+					});
+					continue;
+				}
+			}
 			const failure = failureOf(lifecycle.error);
 			yield* send({
 				_tag: "OrgFailed",
@@ -6797,6 +6884,7 @@ const identitySpec = (input, sessionStore = { current: null }) => {
 		hasSigner: input.signer !== void 0,
 		...input.otpTtlMs === void 0 ? {} : { otpTtlMs: input.otpTtlMs }
 	};
+	const backoff = normalizeConfirmationBackoff(input.confirmationBackoff);
 	return {
 		machine: "identity",
 		initial: RESTORING,
@@ -6902,7 +6990,7 @@ const identitySpec = (input, sessionStore = { current: null }) => {
 					run: (send, controls) => orgLane(input.organizationSetup, {
 						kind: "create",
 						draft: event.draft
-					}, send, controls)
+					}, send, controls, backoff)
 				};
 				case "AttachOrganization": return input.organizationSetup === void 0 || org?.at !== "loading" ? void 0 : {
 					slot: IDENTITY_SLOT.org,
@@ -6910,7 +6998,7 @@ const identitySpec = (input, sessionStore = { current: null }) => {
 					run: (send, controls) => orgLane(input.organizationSetup, {
 						kind: "attach",
 						orgId: org.orgId
-					}, send, controls)
+					}, send, controls, backoff)
 				};
 				case "RetryOrganization": return input.organizationSetup === void 0 || org?.at !== "settingUp" ? void 0 : {
 					slot: IDENTITY_SLOT.org,
@@ -6918,7 +7006,7 @@ const identitySpec = (input, sessionStore = { current: null }) => {
 					run: (send, controls) => orgLane(input.organizationSetup, {
 						kind: "retry",
 						orgId: org.orgId
-					}, send, controls)
+					}, send, controls, backoff)
 				};
 				default: return;
 			}
@@ -9313,6 +9401,43 @@ function executeIdentityProductObservation(telemetry, record, state) {
 }
 //#endregion
 //#region src/surface/create-capxul-client.ts
+/**
+* Start the signer readiness cycle when the identity becomes claimed (#1667).
+*
+* The cycle used to run only from the embedded-wallet port's `getAddress` and
+* `signRawDigest`. Nothing calls those after a sign-in or a session restore,
+* and `resetSession`, which every OTP verify performs, sets the status back to
+* `unknown`. Thus `client.signer.status()` never left `unknown` on a fresh
+* session, and each `.Actions` gate that requires `ready` stayed closed. A
+* claimed identity is the first point where the browser signer has a session to
+* recover. A signed-out client starts no cycle and reports `unknown`.
+*
+* The assembly does not await the call, on purpose: readiness must converge
+* without a signature. The cycle reports its own failure. It writes
+* `unavailable` to the same store the gate reads, and adds a DiagnosticPort
+* breadcrumb, and the next `getAddress` retries it, as before. The rejection is
+* thus observed and not discarded. A throw here would only cause an unhandled
+* rejection, and the actor shell removes an observer that throws.
+*
+* The `unknown` test holds this to ONE cycle per session. The call sets the
+* status to `recovering` synchronously, so the later claimed transitions of the
+* same session, such as the org lane, start no second cycle, and a
+* `resetSession` that sets the status back to `unknown` permits one more.
+*
+* ponytail: one cycle per claim. A cycle that fails stays `unavailable` until
+* a `getAddress` or a new claim, so a gate that refuses to sign while
+* `unavailable` needs a reload. Give the action part an explicit retry if that
+* becomes the common failure.
+*/
+function startSignerReadinessOnClaim(actor, signer) {
+	if (signer?.statusStore === void 0 || signer.ensureWalletReady === void 0) return () => {};
+	const browserSigner = signer;
+	return actor.subscribe((state) => {
+		if (state.phase !== "authenticated" || state.account.at !== "claimed") return;
+		if (browserSigner.statusStore?.status() !== "unknown") return;
+		browserSigner.ensureWalletReady?.().catch(() => {});
+	});
+}
 function assembleCapxulClient(input) {
 	const observation = input;
 	const authCache = input.authCache ?? detectAuthCacheAdapter();
@@ -9340,11 +9465,13 @@ function assembleCapxulClient(input) {
 			error: transitionError(record)
 		}, failureObservation, `identity.${record.event}`, "machine");
 	});
+	const unsubscribeSignerReadiness = startSignerReadinessOnClaim(actor, input.signer);
 	let stopPromise = null;
 	const stopActor = () => {
 		if (stopPromise === null) {
 			unsubscribeProductTelemetry();
 			unsubscribeFailureObservation();
+			unsubscribeSignerReadiness();
 			stopPromise = effectRunner.runPromise(Scope.close(scope, Exit.void));
 		}
 		return stopPromise;

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { B as OrgId, C as Address, N as CountryCode, O as AuthSession, S as AccountId, U as PayrollGroupId, V as PartyId, W as PayrollRunId, Y as RoleKey, a as SignerStatusStore, at as CapxulErrorDetails, c as AccountProviderSource, ct as FailureMode, d as eip1193AccountProvider, et as toAddress, f as localPrivateKeyAccountProvider, g as SmartAccount, h as Session, i as SignerStatus, it as CapxulErrorCode, j as BudgetId, k as AuthUserId, l as AccountRequirement, lt as isCapxulError, m as Profile, n as CapxulSigner, nt as CAPXUL_ERROR_CODES, o as injectedWalletSigner, ot as Errors, p as CapxulResult, r as Eip1193RequestProvider, rt as CapxulError, s as AccountProvider, t as CapxulDigestSigner, tt as toCountryCode, u as Eip1193Provider, x as Account, z as Money } from "./signer-BSEG9xgN.mjs";
-import { $ as PermissionChangeInput, $n as Readiness, $t as MovementActivityEvidence, A as OrgView, An as IdentityMethods, At as ActivityKind, B as PayrollGroupMember, Bn as PAYMENT_DIRECTIONS, Bt as DepositInstructions, C as DetectPendingOrgInvitationsResult, Cn as ResolvedTarget, Ct as InboxItem, D as OrgMethods, Dn as AccountLifecycle, Dt as ActivityDetail, E as MemberView, En as fingerprintPaymentIntent, Et as ActivityAnnotationInput, F as RoleSpendCap, Fn as ActorRef, Ft as ActivityReference, G as PayrollRunItemInput, Gt as DestinationPayload, H as PayrollMethods, Hn as PaymentStatus$1, Ht as DestinationAddInput, I as RoleView, In as CurrentHoldings, It as ActivitySummary, J as OrganizationPaymentBatchInput, Jn as CAPXUL_PAYMENTS_V2_ADDRESS, Jt as DestinationsMethods, K as PayrollRunStatus, Kt as DestinationRail, L as AuthorizeRunInput, Ln as Permission, Lt as ActivitySummaryParams, M as OrganizationAuditLogItem, Mn as AuthMethods, Mt as ActivityMethods, N as ResendInviteTokenInput, Nn as OrgLifecycle, Nt as ActivityPage, O as OrgScopedMethods, On as AccountSetupStep, Ot as ActivityFilter, P as RoleDefinition, Pn as OrgSetupStep, Pt as ActivityRange, Q as PermissionAssignInput, Qn as OrgLane, Qt as MeProfile, R as PayrollGroup, Rn as SubmittedPermissionExecution, Rt as ActivitySummaryTotal, S as CreateOrgInput, Sn as Ref, St as InboxApproveInput, T as MemberStatus, Tn as TargetsMethods, Tt as ActivityAnnotation, U as PayrollOptions, Un as RequestStatus, Ut as DestinationKind, V as PayrollGroupsMethods, Vn as PAYMENT_STATUSES, Vt as Destination, W as PayrollRun, Wt as DestinationListInput, X as OrganizationPaymentItemInput, Xn as IdentityEvent, Xt as HandlesMethods, Y as OrganizationPaymentInput, Yn as Destination$1, Yt as FinancialOpsMethods, Z as OrganizationPaymentsMethods, Zn as IdentityState, Zt as MeMethods, _ as SystemMethods, _n as PaymentType, _t as ActorRequestsMethods, a as SdkFailureObservation, an as PayeesMethods, ar as InvocationControls, at as PermissionReadResult, b as CurrentUserContext, bn as RecipientResolution, bt as AddressBookLabelInput, c as PostHogObservabilityOptions, cn as PaymentDirection, ct as OrgMeMethod, d as CreateCapxulClientInput, dn as PaymentDocumentRender, dt as AccountMethods, en as OfframpMethods, er as StateLabel, et as PermissionCreateInput, f as IdentityProfileDetails, fn as PaymentDocumentVerification, ft as ActorProfile, g as Holding, gn as PaymentTiming, gt as ActorRequestIssueInput, h as HoldingsMethods, hn as PaymentStatus, ht as ActorRequest, i as ObservationDelivery, in as Payee, ir as IdentityTransition, it as PermissionRevokeInput, j as OrganizationAccount, jn as SmartAccountMethods, jt as ActivityListParams, k as OrgTemplate, kn as isSettingUpLifecycle, kt as ActivityItem, l as postHogObservability, ln as PaymentDocumentKind, lt as OrgMeOptions, m as IdentityRuntimeSendResult, mn as PaymentMoney, mt as ActorRelationshipMethods, n as ObservationAdapter, nn as OfframpQuoteInput, nr as isClaimed, nt as PermissionOptions, o as HostObservability, on as Payment, ot as Budget, p as IdentityRuntime, pn as PaymentDocumentsMethods, pt as ActorProfileMethods, q as PayrollRuns, qn as TelemetryPort, qt as DestinationRemoveInput, r as ObservationContext, rn as OfframpStatus, rr as isRestoring, rt as PermissionReplaceInput, s as PostHogObservabilityClient, sn as PaymentActivityEvidence, st as OrgMe, t as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, tn as OfframpQuote, tr as destination, tt as PermissionMethods, u as CapxulClient, un as PaymentDocumentRef, ut as AccountsMethods, v as SystemHealth, vn as PaymentsMethods, vt as AddressBookAddInput, w as InviteMemberInput, wn as TargetReference, wt as InboxMethods, x as CurrentUserMethods, xn as RecipientResolutionKind, xt as AddressBookMethods, y as MediaMethods, yn as PaymentsPayInput, yt as AddressBookEntry, z as PayrollGroupInput, zn as InboxStatus, zt as ActorReference } from "./observation-BQ2VKWH5.mjs";
+import { B as OrgId, C as Address, N as CountryCode, O as AuthSession, S as AccountId, U as PayrollGroupId, V as PartyId, W as PayrollRunId, Y as RoleKey, a as SignerStatusStore, at as CapxulErrorDetails, c as AccountProviderSource, ct as FailureMode, d as eip1193AccountProvider, et as toAddress, f as localPrivateKeyAccountProvider, g as SmartAccount, h as Session, i as SignerStatus, it as CapxulErrorCode, j as BudgetId, k as AuthUserId, l as AccountRequirement, lt as isCapxulError, m as Profile, n as CapxulSigner, nt as CAPXUL_ERROR_CODES, o as injectedWalletSigner, ot as Errors, p as CapxulResult, r as Eip1193RequestProvider, rt as CapxulError, s as AccountProvider, t as CapxulDigestSigner, tt as toCountryCode, u as Eip1193Provider, x as Account, z as Money } from "./signer-DIZRkFHh.mjs";
+import { $ as PermissionChangeInput, $n as Readiness, $t as MovementActivityEvidence, A as OrgView, An as IdentityMethods, At as ActivityKind, B as PayrollGroupMember, Bn as PAYMENT_DIRECTIONS, Bt as DepositInstructions, C as DetectPendingOrgInvitationsResult, Cn as ResolvedTarget, Ct as InboxItem, D as OrgMethods, Dn as AccountLifecycle, Dt as ActivityDetail, E as MemberView, En as fingerprintPaymentIntent, Et as ActivityAnnotationInput, F as RoleSpendCap, Fn as ActorRef, Ft as ActivityReference, G as PayrollRunItemInput, Gt as DestinationPayload, H as PayrollMethods, Hn as PaymentStatus$1, Ht as DestinationAddInput, I as RoleView, In as CurrentHoldings, It as ActivitySummary, J as OrganizationPaymentBatchInput, Jn as CAPXUL_PAYMENTS_V2_ADDRESS, Jt as DestinationsMethods, K as PayrollRunStatus, Kt as DestinationRail, L as AuthorizeRunInput, Ln as Permission, Lt as ActivitySummaryParams, M as OrganizationAuditLogItem, Mn as AuthMethods, Mt as ActivityMethods, N as ResendInviteTokenInput, Nn as OrgLifecycle, Nt as ActivityPage, O as OrgScopedMethods, On as AccountSetupStep, Ot as ActivityFilter, P as RoleDefinition, Pn as OrgSetupStep, Pt as ActivityRange, Q as PermissionAssignInput, Qn as OrgLane, Qt as MeProfile, R as PayrollGroup, Rn as SubmittedPermissionExecution, Rt as ActivitySummaryTotal, S as CreateOrgInput, Sn as Ref, St as InboxApproveInput, T as MemberStatus, Tn as TargetsMethods, Tt as ActivityAnnotation, U as PayrollOptions, Un as RequestStatus, Ut as DestinationKind, V as PayrollGroupsMethods, Vn as PAYMENT_STATUSES, Vt as Destination, W as PayrollRun, Wt as DestinationListInput, X as OrganizationPaymentItemInput, Xn as IdentityEvent, Xt as HandlesMethods, Y as OrganizationPaymentInput, Yn as Destination$1, Yt as FinancialOpsMethods, Z as OrganizationPaymentsMethods, Zn as IdentityState, Zt as MeMethods, _ as SystemMethods, _n as PaymentType, _t as ActorRequestsMethods, a as SdkFailureObservation, an as PayeesMethods, ar as InvocationControls, at as PermissionReadResult, b as CurrentUserContext, bn as RecipientResolution, bt as AddressBookLabelInput, c as PostHogObservabilityOptions, cn as PaymentDirection, ct as OrgMeMethod, d as CreateCapxulClientInput, dn as PaymentDocumentRender, dt as AccountMethods, en as OfframpMethods, er as StateLabel, et as PermissionCreateInput, f as IdentityProfileDetails, fn as PaymentDocumentVerification, ft as ActorProfile, g as Holding, gn as PaymentTiming, gt as ActorRequestIssueInput, h as HoldingsMethods, hn as PaymentStatus, ht as ActorRequest, i as ObservationDelivery, in as Payee, ir as IdentityTransition, it as PermissionRevokeInput, j as OrganizationAccount, jn as SmartAccountMethods, jt as ActivityListParams, k as OrgTemplate, kn as isSettingUpLifecycle, kt as ActivityItem, l as postHogObservability, ln as PaymentDocumentKind, lt as OrgMeOptions, m as IdentityRuntimeSendResult, mn as PaymentMoney, mt as ActorRelationshipMethods, n as ObservationAdapter, nn as OfframpQuoteInput, nr as isClaimed, nt as PermissionOptions, o as HostObservability, on as Payment, ot as Budget, p as IdentityRuntime, pn as PaymentDocumentsMethods, pt as ActorProfileMethods, q as PayrollRuns, qn as TelemetryPort, qt as DestinationRemoveInput, r as ObservationContext, rn as OfframpStatus, rr as isRestoring, rt as PermissionReplaceInput, s as PostHogObservabilityClient, sn as PaymentActivityEvidence, st as OrgMe, t as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, tn as OfframpQuote, tr as destination, tt as PermissionMethods, u as CapxulClient, un as PaymentDocumentRef, ut as AccountsMethods, v as SystemHealth, vn as PaymentsMethods, vt as AddressBookAddInput, w as InviteMemberInput, wn as TargetReference, wt as InboxMethods, x as CurrentUserMethods, xn as RecipientResolutionKind, xt as AddressBookMethods, y as MediaMethods, yn as PaymentsPayInput, yt as AddressBookEntry, z as PayrollGroupInput, zn as InboxStatus, zt as ActorReference } from "./observation-CXl5XZDX.mjs";
 import { Hex } from "viem";
 import { Context, Effect, Layer } from "effect";
 import { FunctionReference } from "convex/server";

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { A as AuthClientPortTag, B as injectedWalletSigner, C as convexCallErrorFromCapxul, D as bootstrapErrorFromCapxul, E as BootstrapPortTag, F as isSettingUpLifecycle, G as PAYMENT_DIRECTIONS, H as OBSERVATION_CONTEXT_HEADER, I as formatTraceparent, J as BootstrapEnvelope, K as PAYMENT_STATUSES, L as copyInvocationObservation, M as fingerprintPaymentIntent, N as toWei, O as authClientPortFromPromiseAdapter, P as fromWei, Q as BASE_SEPOLIA_CHAIN_ID, R as readInvocationObservation, S as ConvexCallPortTag, T as ClockPortTag, U as encodeObservationContextHeader, V as signerFailure, W as sanitizeObservationContext, X as CAPXUL_PAYMENTS_V2_ADDRESS, Y as EngineeringTelemetryBootstrapPolicy, Z as normalizeBindingEmail, _ as AccountReadPortTag, a as failureEvidenceProps, b as IdentityPortTag, c as postHogFailureObservation, d as detectAuthCacheAdapter, et as destination, f as PostHogTelemetryLayer, g as smartAccountErrorFromCapxul, h as SmartAccountPortTag, i as failureDetail, j as version, k as AuthClientError, l as captureException, n as postHogProductTelemetry, nt as isRestoring, o as observationContextProps, p as TelemetryPortTag, q as CAPXUL_FUNCTIONS, r as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, s as observeFailedResult, t as assembleCapxulClient, tt as isClaimed, u as captureExceptionSync, v as accountReadErrorFromCapxul, w as ClockError, x as identityErrorFromCapxul, y as wireChainId, z as causeChain } from "./create-capxul-client-DkAxmhLG.mjs";
+import { A as AuthClientPortTag, B as injectedWalletSigner, C as convexCallErrorFromCapxul, D as bootstrapErrorFromCapxul, E as BootstrapPortTag, F as isSettingUpLifecycle, G as PAYMENT_DIRECTIONS, H as OBSERVATION_CONTEXT_HEADER, I as formatTraceparent, J as BootstrapEnvelope, K as PAYMENT_STATUSES, L as copyInvocationObservation, M as fingerprintPaymentIntent, N as toWei, O as authClientPortFromPromiseAdapter, P as fromWei, Q as BASE_SEPOLIA_CHAIN_ID, R as readInvocationObservation, S as ConvexCallPortTag, T as ClockPortTag, U as encodeObservationContextHeader, V as signerFailure, W as sanitizeObservationContext, X as CAPXUL_PAYMENTS_V2_ADDRESS, Y as EngineeringTelemetryBootstrapPolicy, Z as normalizeBindingEmail, _ as AccountReadPortTag, a as failureEvidenceProps, b as IdentityPortTag, c as postHogFailureObservation, d as detectAuthCacheAdapter, et as destination, f as PostHogTelemetryLayer, g as smartAccountErrorFromCapxul, h as SmartAccountPortTag, i as failureDetail, j as version, k as AuthClientError, l as captureException, n as postHogProductTelemetry, nt as isRestoring, o as observationContextProps, p as TelemetryPortTag, q as CAPXUL_FUNCTIONS, r as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, s as observeFailedResult, t as assembleCapxulClient, tt as isClaimed, u as captureExceptionSync, v as accountReadErrorFromCapxul, w as ClockError, x as identityErrorFromCapxul, y as wireChainId, z as causeChain } from "./create-capxul-client-BGhQ0sKC.mjs";
 import { B as Errors, C as toDurationMs, D as toJwtToken, E as toEpochSeconds, F as toSessionToken, I as decodeConvexError, L as CAPXUL_ERROR_CODES, N as toPublishableKey, O as toKycTier, P as toRoleKey, R as CapxulError, S as toCurrencyCode, T as toEpochMs, V as isCapxulError, b as toChainId, g as toAllowedOrigin, h as toAddress, k as toOrgId, m as toAccountId, o as AuthCachePortTag, p as currencySymbolFor, v as toAuthUserId, w as toEmail, x as toCountryCode } from "./InMemoryAuthCacheAdapter-uOcqpqu8.mjs";
 import { keccak256, recoverAddress, stringToHex } from "viem";
 import { Cause, Context, Data, Duration, Effect, Exit, Layer, Result, Schedule, SchemaIssue, SchemaParser, Scope, Tracer } from "effect";
@@ -2061,7 +2061,8 @@ var ConvexOrganizationSetupAdapter = class {
 	confirmSubmittedBootstrap(input) {
 		return this.#lifecycleAction("confirmBootstrap", input, () => this.#convex.action(this.#fns.confirmBootstrap, copyInvocationObservation(input, {
 			orgId: input.orgId,
-			...input.observationContext === void 0 ? {} : { observationContext: input.observationContext }
+			...input.observationContext === void 0 ? {} : { observationContext: input.observationContext },
+			...input.retryDelayMs === void 0 ? {} : { retryDelayMs: input.retryDelayMs }
 		})));
 	}
 	async recordFailure(input) {
@@ -2566,6 +2567,7 @@ function createOpenfortBrowserSignerFromBootstrap(bootstrap, options = {}) {
 	return {
 		...signer,
 		statusStore,
+		ensureWalletReady: ensureOpenfortWalletReady,
 		getAddress: async () => {
 			try {
 				const address = await signer.getAddress();

package/dist/node/index.d.mts

@@ -1,4 +1,4 @@
-import { O as AuthSession, _ as AuthCacheError, b as CachedJwt, n as CapxulSigner, v as AuthCachePort, y as AuthCachePortTag } from "../signer-BSEG9xgN.mjs";
+import { O as AuthSession, _ as AuthCacheError, b as CachedJwt, n as CapxulSigner, v as AuthCachePort, y as AuthCachePortTag } from "../signer-DIZRkFHh.mjs";
 import { Hex } from "viem";
 import { Effect, FileSystem, Layer, Path } from "effect";
 

package/dist/{observation-BQ2VKWH5.d.mts → observation-CXl5XZDX.d.mts}

@@ -1,4 +1,4 @@
-import { $ as WeiAmount, A as BlockNumber, B as OrgId, C as Address$1, D as AppId, E as AnonymousDistinctId, F as DocumentHash, G as PermissionAssignmentId, H as PaymentCommandId, I as DurationMs, J as PublishableKey, K as PermissionId, L as Email, M as ChainId, N as CountryCode, O as AuthSession, P as CurrencyCode, Q as TxHash, R as EpochMs, T as AllowedOrigin, U as PayrollGroupId, V as PartyId, W as PayrollRunId, X as SessionToken, Y as RoleKey, Z as SmartAccount, a as SignerStatusStore, at as CapxulErrorDetails, b as CachedJwt, c as AccountProviderSource, ct as FailureMode, g as SmartAccount$1, h as Session$1, it as CapxulErrorCode, j as BudgetId, k as AuthUserId, l as AccountRequirement, m as Profile$1, n as CapxulSigner, p as CapxulResult, q as Profile, rt as CapxulError, st as Failure, v as AuthCachePort, w as AllowanceKey, x as Account$1, z as Money } from "./signer-BSEG9xgN.mjs";
+import { $ as WeiAmount, A as BlockNumber, B as OrgId, C as Address$1, D as AppId, E as AnonymousDistinctId, F as DocumentHash, G as PermissionAssignmentId, H as PaymentCommandId, I as DurationMs, J as PublishableKey, K as PermissionId, L as Email, M as ChainId, N as CountryCode, O as AuthSession, P as CurrencyCode, Q as TxHash, R as EpochMs, T as AllowedOrigin, U as PayrollGroupId, V as PartyId, W as PayrollRunId, X as SessionToken, Y as RoleKey, Z as SmartAccount, a as SignerStatusStore, at as CapxulErrorDetails, b as CachedJwt, c as AccountProviderSource, ct as FailureMode, g as SmartAccount$1, h as Session$1, it as CapxulErrorCode, j as BudgetId, k as AuthUserId, l as AccountRequirement, m as Profile$1, n as CapxulSigner, p as CapxulResult, q as Profile, rt as CapxulError, st as Failure, v as AuthCachePort, w as AllowanceKey, x as Account$1, z as Money } from "./signer-DIZRkFHh.mjs";
 import { Address, Hex } from "viem";
 import { Context, Effect, Layer, Schema, Scope, Tracer } from "effect";
 import { FunctionReference } from "convex/server";
@@ -340,7 +340,7 @@ interface TelemetryPort {
 }
 //#endregion
 //#region ../observability/src/index.d.ts
-declare const TELEMETRY_EVENT_NAMES: readonly ["auth_otp_requested", "auth_otp_delivered", "auth_otp_expired", "auth_verified", "auth_failed", "auth_signed_out", "onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "provisioning_safe_created", "provisioning_safe_confirmed", "bootstrap_resolved", "bootstrap_failed", "member_activation_started", "member_activation_ready", "member_activation_failed", "organization_creation_started", "organization_creation_ready", "organization_creation_failed", "account_balance_read", "account_balance_failed", "faucet_requested", "faucet_confirmed", "faucet_failed", "org_create_started", "org_safe_created", "org_safe_confirmed", "org_roles_seeded", "org_created", "org_create_failed", "org_invite_sent", "org_invite_accepted", "org_invite_expired", "payment_initiated", "payment_settled", "payment_failed", "deposit_initiated", "deposit_settled", "permission_mirror_verification", "movement_scan_window", "movement_scan_checkpoint", "movement_scan_incident"];
+declare const TELEMETRY_EVENT_NAMES: readonly ["auth_otp_requested", "auth_otp_delivered", "auth_otp_expired", "auth_verified", "auth_failed", "auth_signed_out", "onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "provisioning_safe_created", "provisioning_safe_confirmed", "bootstrap_resolved", "bootstrap_failed", "member_activation_started", "member_activation_ready", "member_activation_failed", "organization_creation_started", "organization_creation_ready", "organization_creation_failed", "aa_gateway_upstream_fallback", "account_balance_read", "account_balance_failed", "faucet_requested", "faucet_confirmed", "faucet_failed", "org_create_started", "org_safe_created", "org_safe_confirmed", "org_roles_seeded", "org_created", "org_create_failed", "org_invite_sent", "org_invite_accepted", "org_invite_expired", "payment_initiated", "payment_settled", "payment_failed", "deposit_initiated", "deposit_settled", "permission_mirror_verification", "movement_scan_window", "movement_scan_checkpoint", "movement_scan_incident"];
 type TelemetryEventName = (typeof TELEMETRY_EVENT_NAMES)[number];
 type TelemetryProps = Record<string, unknown>;
 type TelemetryEvent = {
@@ -974,6 +974,12 @@ type OrganizationSetupStepInput = {
   readonly orgId: OrgId;
   readonly signal?: AbortSignal; /** @internal Safe trace/correlation carriage owned by the identity flow. */
   readonly observationContext?: WireObservationContext;
+  /**
+   * @internal #1655: milliseconds the identity flow waited before this
+   * confirmation attempt. Absent on the first attempt. The backend copies it
+   * onto `organization_creation_failed` as `backoff_ms`.
+   */
+  readonly retryDelayMs?: number;
 };
 type RecordOrganizationSetupFailureInput = {
   readonly orgId: OrgId;

package/dist/{signer-BSEG9xgN.d.mts → signer-DIZRkFHh.d.mts}

@@ -21,7 +21,7 @@ type CapxulErrorCode = (typeof CAPXUL_ERROR_CODES)[number];
  *   into `unknown`; the signer's secure-context probe now names it.
  * - `unknown`: catch-all when no cause could be determined.
  */
-type FailureMode = "auth-origin-mismatch" | "stale-openfort-cache" | "app-env-allowlist" | "no-secure-context" | "unknown";
+type FailureMode = "auth-origin-mismatch" | "stale-openfort-cache" | "app-env-allowlist" | "no-secure-context" /** #1684: an upstream RPC provider throttled the call (HTTP 429 or JSON-RPC -32005). Retryable. */ | "rate-limited" | "unknown";
 /**
  * The one failure representation carried by domain state, actor work, and
  * public error projection. Keeping it beside the canonical error catalog
@@ -378,6 +378,14 @@ interface CapxulSigner extends CapxulDigestSigner {
    * `client.signer`, and substitutes `UNOBSERVABLE_SIGNER_STATUS` when absent.
    */
   readonly statusStore?: SignerStatusStore;
+  /**
+   * Start this signer's readiness cycle, or join the one already running,
+   * without signing anything. `assembleCapxulClient` calls it when the
+   * identity is claimed, so the status converges on `ready` or `unavailable`
+   * on its own (#1667). A signer that runs no cycle omits this, and keeps
+   * reporting `unknown`.
+   */
+  readonly ensureWalletReady?: () => Promise<void>;
 }
 /**
  * Observable signer readiness (ACCESS #1520 · C12). `unknown` means the

package/dist/testing/index.d.mts

@@ -1,4 +1,4 @@
-import { Gn as TelemetryGroupInput, Kn as TelemetryIdentifyInput, Wn as TelemetryEvent, ir as IdentityTransition, n as ObservationAdapter, u as CapxulClient } from "../observation-BQ2VKWH5.mjs";
+import { Gn as TelemetryGroupInput, Kn as TelemetryIdentifyInput, Wn as TelemetryEvent, ir as IdentityTransition, n as ObservationAdapter, u as CapxulClient } from "../observation-CXl5XZDX.mjs";
 import { Effect, Layer } from "effect";
 
 //#region src/testing/telemetry/RecordingTelemetryAdapter.d.ts

package/dist/testing/index.mjs

@@ -1,4 +1,4 @@
-import { $ as deriveCapxulSafeAddress, C as convexCallErrorFromCapxul, D as bootstrapErrorFromCapxul, N as toWei, O as authClientPortFromPromiseAdapter, P as fromWei, g as smartAccountErrorFromCapxul, m as redactTelemetryEvent, t as assembleCapxulClient, v as accountReadErrorFromCapxul, x as identityErrorFromCapxul, y as wireChainId } from "../create-capxul-client-DkAxmhLG.mjs";
+import { $ as deriveCapxulSafeAddress, C as convexCallErrorFromCapxul, D as bootstrapErrorFromCapxul, N as toWei, O as authClientPortFromPromiseAdapter, P as fromWei, g as smartAccountErrorFromCapxul, m as redactTelemetryEvent, t as assembleCapxulClient, v as accountReadErrorFromCapxul, x as identityErrorFromCapxul, y as wireChainId } from "../create-capxul-client-BGhQ0sKC.mjs";
 import { B as Errors, C as toDurationMs, D as toJwtToken, E as toEpochSeconds, F as toSessionToken, N as toPublishableKey, O as toKycTier, R as CapxulError, T as toEpochMs, _ as toAppId, b as toChainId, g as toAllowedOrigin, h as toAddress, m as toAccountId, t as InMemoryAuthCacheAdapter, v as toAuthUserId, w as toEmail, x as toCountryCode } from "../InMemoryAuthCacheAdapter-uOcqpqu8.mjs";
 import { keccak256 } from "viem";
 import { Effect, Result, Semaphore } from "effect";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/sdk",
-  "version": "2.5.3",
+  "version": "2.5.4",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Xelmar-tech/infrastructure.git",
@@ -49,9 +49,9 @@
     "@capxul/config": "0.2.1",
     "@capxul/errors": "0.0.2",
     "@capxul/types": "0.2.1",
-    "@capxul/observability": "2.5.3",
-    "@capxul/typescript-config": "0.0.0",
-    "@capxul/wire": "0.5.1"
+    "@capxul/observability": "2.5.4",
+    "@capxul/wire": "0.5.1",
+    "@capxul/typescript-config": "0.0.0"
   },
   "_permissionlessPinReason": "permissionless.toSafeSmartAccount is pinned to 0.3.4 for live Safe deployment E2E. Counterfactual address fixtures captured 2026-05-17 in packages/backend/convex/_shared/__tests__/counterfactual.test.ts and packages/config/tests/safe.test.ts must be re-verified before upgrading.",
   "scripts": {