@capxul/sdk 2.6.1 → 2.8.0

package/dist/{InMemoryAuthCacheAdapter-VZBv1fOH.mjs → InMemoryAuthCacheAdapter-FptQ2p7C.mjs}

@@ -121,6 +121,58 @@ function chainCauseProperties(chain) {
 	};
 }
 /**
+* Safe (safe-contracts v1.4.1) revert codes. The contracts revert with these
+* short strings to save gas; the sentence lives in the Safe docs
+* (`docs/error_codes.md`). Every Safe on the Capxul rail is this version.
+*/
+const SAFE_REVERT_REASONS = {
+	GS000: "could not finish initialization",
+	GS001: "threshold needs to be defined",
+	GS010: "not enough gas to execute Safe transaction",
+	GS011: "could not pay gas costs with ether",
+	GS012: "could not pay gas costs with token",
+	GS013: "Safe transaction failed when gasPrice and safeTxGas were 0",
+	GS020: "signatures data too short",
+	GS021: "invalid contract signature location: inside static part",
+	GS022: "invalid contract signature location: length not present",
+	GS023: "invalid contract signature location: data not complete",
+	GS024: "invalid contract signature provided",
+	GS025: "hash has not been approved",
+	GS026: "invalid owner provided",
+	GS030: "only owners can approve a hash",
+	GS031: "method can only be called from this contract",
+	GS100: "modules have already been initialized",
+	GS101: "invalid module address provided",
+	GS102: "module has already been added",
+	GS103: "invalid prevModule, module pair provided",
+	GS104: "method can only be called from an enabled module",
+	GS105: "invalid starting point for fetching paginated modules",
+	GS106: "invalid page size for fetching paginated modules",
+	GS200: "owners have already been set up",
+	GS201: "threshold cannot exceed owner count",
+	GS202: "threshold needs to be greater than 0",
+	GS203: "invalid owner address provided",
+	GS204: "address is already an owner",
+	GS205: "invalid prevOwner, owner pair provided",
+	GS300: "guard does not implement IERC165",
+	GS400: "fallback handler cannot be set to self"
+};
+/**
+* `Error(GS205: invalid prevOwner, owner pair provided)`, or the bare selector
+* when the name is unknown. Safe codes travel only as the `message` of an
+* `Error(string)` revert, so only that argument is expanded from
+* {@link SAFE_REVERT_REASONS}; every other argument reads `name=value`, even
+* when a custom error's field happens to hold a `GS` string.
+*/
+function revertSummaryText(revert) {
+	if (revert.name === null) return revert.selector === "0x" ? "empty revert" : `unknown selector ${revert.selector}`;
+	const args = Object.entries(revert.args).map(([name, value]) => {
+		const reason = revert.name === "Error" && name === "message" ? SAFE_REVERT_REASONS[value] : void 0;
+		return reason === void 0 ? `${name}=${value}` : `${value}: ${reason}`;
+	}).join(", ");
+	return `${revert.name}(${args})`;
+}
+/**
 * The error-tracking fingerprint for a failure: the code, the one-word cause,
 * and the operation. PostHog groups `$exception` rows by this value, so one
 * issue is one cause at one operation instead of every provider failure in
@@ -138,6 +190,7 @@ const CAPXUL_ERROR_CODES = [
 	"SMART_ACCOUNT_MISSING",
 	"PLAYER_NOT_FOUND",
 	"ACCOUNT_NOT_FOUND",
+	"ACCOUNT_CLAIMED_BY_OTHER_SIGNER",
 	"PROVIDER_ERROR",
 	"CAPABILITY_UNAVAILABLE",
 	"INVALID_INPUT",
@@ -168,7 +221,7 @@ const CAPXUL_ERROR_CODES = [
 * code rename forces this set to move with it) stops the two sides of the wire
 * from drifting and silently splitting one outcome across two streams.
 */
-const EXPECTED_OPERATION_OUTCOMES = new Set([
+const EXPECTED_OPERATION_OUTCOMES = /* @__PURE__ */ new Set([
 	"INVALID_INPUT",
 	"NOT_AUTHENTICATED",
 	"SMART_ACCOUNT_MISSING",
@@ -237,6 +290,14 @@ const Errors = {
 	smartAccountMissing: (authUserId) => new CapxulError("SMART_ACCOUNT_MISSING", "Smart account not provisioned", { details: { authUserId } }),
 	playerNotFound: (playerId) => new CapxulError("PLAYER_NOT_FOUND", playerId ? `Openfort player ${playerId} not found` : "Openfort player not found", playerId === void 0 ? void 0 : { details: { playerId } }),
 	accountNotFound: (accountId) => new CapxulError("ACCOUNT_NOT_FOUND", accountId ? `Openfort account ${accountId} not found` : "Openfort account not found", accountId === void 0 ? void 0 : { details: { accountId } }),
+	/**
+	* The Safe at this email's address is deployed and its owner is neither the
+	* Capxul bootstrap owner nor the caller's signer. The claim
+	* `swapOwner(bootstrap → signer)` cannot succeed: only the on-chain owner
+	* can hand the account over. Read from `getOwners()` before any
+	* UserOperation is built (2026-09-02), so no simulation and no retry.
+	*/
+	accountClaimedByOtherSigner: (details) => new CapxulError("ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "This account is already owned by a different signer.", { details }),
 	providerError: (provider, operation, cause, opts) => {
 		const details = {
 			...opts?.details,
@@ -648,4 +709,4 @@ Layer.effect(AuthCachePortTag, Effect.sync(() => new InMemoryAuthCacheAdapter())
 	cause
 }))));
 //#endregion
-export { toPartyId as A, Errors as B, toDurationMs as C, toJwtToken as D, toEpochSeconds as E, toSessionToken as F, failureFingerprint as G, CHAIN_UPSTREAMS as H, decodeConvexError as I, isFailureMode as K, CAPXUL_ERROR_CODES as L, toPayrollRunId as M, toPublishableKey as N, toKycTier as O, toRoleKey as P, CapxulError as R, toCurrencyCode as S, toEpochMs as T, FAILURE_MODES as U, isCapxulError as V, chainCauseProperties as W, toAppId as _, AuthCacheError as a, toChainId as b, BYTES32_RE as c, WEI_RE as d, ZERO_BYTES32 as f, toAllowedOrigin as g, toAddress as h, parseCachedJwt as i, toPayrollGroupId as j, toOrgId as k, EVM_ADDRESS_RE as l, toAccountId as m, BrowserAuthCacheAdapter as n, AuthCachePortTag as o, currencySymbolFor as p, parseAuthSession as r, APP_ID_RE as s, InMemoryAuthCacheAdapter as t, SUPPORTED_CURRENCY_CODES as u, toAuthUserId as v, toEmail as w, toCountryCode as x, toBudgetId as y, EXPECTED_OPERATION_OUTCOMES as z };
+export { toPartyId as A, Errors as B, toDurationMs as C, toJwtToken as D, toEpochSeconds as E, toSessionToken as F, failureFingerprint as G, CHAIN_UPSTREAMS as H, decodeConvexError as I, isFailureMode as K, CAPXUL_ERROR_CODES as L, toPayrollRunId as M, toPublishableKey as N, toKycTier as O, toRoleKey as P, CapxulError as R, toCurrencyCode as S, toEpochMs as T, FAILURE_MODES as U, isCapxulError as V, chainCauseProperties as W, toAppId as _, AuthCacheError as a, toChainId as b, BYTES32_RE as c, WEI_RE as d, ZERO_BYTES32 as f, toAllowedOrigin as g, toAddress as h, parseCachedJwt as i, toPayrollGroupId as j, toOrgId as k, EVM_ADDRESS_RE as l, toAccountId as m, BrowserAuthCacheAdapter as n, AuthCachePortTag as o, currencySymbolFor as p, revertSummaryText as q, parseAuthSession as r, APP_ID_RE as s, InMemoryAuthCacheAdapter as t, SUPPORTED_CURRENCY_CODES as u, toAuthUserId as v, toEmail as w, toCountryCode as x, toBudgetId as y, EXPECTED_OPERATION_OUTCOMES as z };

package/dist/{create-capxul-client-C_MxJ8mV.mjs → create-capxul-client-YSN2yN8m.mjs}

@@ -1,15 +1,31 @@
-import { A as toPartyId, B as Errors, G as failureFingerprint, H as CHAIN_UPSTREAMS, K as isFailureMode, M as toPayrollRunId, P as toRoleKey, R as CapxulError, S as toCurrencyCode, U as FAILURE_MODES$1, V as isCapxulError, W as chainCauseProperties, b as toChainId, c as BYTES32_RE, d as WEI_RE, f as ZERO_BYTES32, h as toAddress, j as toPayrollGroupId, k as toOrgId, l as EVM_ADDRESS_RE$1, m as toAccountId, n as BrowserAuthCacheAdapter, s as APP_ID_RE, t as InMemoryAuthCacheAdapter, u as SUPPORTED_CURRENCY_CODES, v as toAuthUserId, w as toEmail, x as toCountryCode, y as toBudgetId, z as EXPECTED_OPERATION_OUTCOMES } from "./InMemoryAuthCacheAdapter-VZBv1fOH.mjs";
+import { A as toPartyId, B as Errors, G as failureFingerprint, H as CHAIN_UPSTREAMS, K as isFailureMode, M as toPayrollRunId, P as toRoleKey, R as CapxulError, S as toCurrencyCode, U as FAILURE_MODES$1, V as isCapxulError, W as chainCauseProperties, b as toChainId, c as BYTES32_RE, d as WEI_RE, f as ZERO_BYTES32, h as toAddress, j as toPayrollGroupId, k as toOrgId, l as EVM_ADDRESS_RE$1, m as toAccountId, n as BrowserAuthCacheAdapter, q as revertSummaryText, s as APP_ID_RE, t as InMemoryAuthCacheAdapter, u as SUPPORTED_CURRENCY_CODES, v as toAuthUserId, w as toEmail, x as toCountryCode, y as toBudgetId, z as EXPECTED_OPERATION_OUTCOMES } from "./InMemoryAuthCacheAdapter-FptQ2p7C.mjs";
 import { concat, encodeAbiParameters, encodeFunctionData, encodePacked, formatUnits, getContractAddress, keccak256, padHex, parseUnits, recoverAddress, stringToHex, toBytes, toEventSelector, toFunctionSelector, toFunctionSignature } from "viem";
 import { Context, Data, Deferred, Duration, Effect, Exit, Fiber, Layer, Queue, Ref, Result, Schema, SchemaGetter, Scope } from "effect";
 import { makeFunctionReference } from "convex/server";
 //#region src/domain/identity/model.ts
 const WRONG = { refused: "WRONG_STATE" };
 /** org-lifecycle.ts:173-184, lifted verbatim. */
+/**
+* Causes that do not change on a retry: the same request reverts, is refused,
+* or fails the same pre-flight again. A retry re-enters the same lane and
+* fails the same way (the GS205 loop of 2026-09-02).
+*/
+const DEFINITIVE_PROVIDER_MODES = /* @__PURE__ */ new Set([
+	"auth-origin-mismatch",
+	"app-env-allowlist",
+	"no-secure-context",
+	"revert",
+	"insufficient-balance",
+	"insufficient-allowance",
+	"rejected",
+	"unauthorized"
+]);
 const isRetryable = (failure) => {
 	if (failure.code === "CANCELLED" || failure.code === "SIGNER_REJECTED") return true;
 	if (failure.code === "PROVIDER_ERROR") {
-		const mode = failure.mode;
-		return mode !== "auth-origin-mismatch" && mode !== "app-env-allowlist" && mode !== "no-secure-context";
+		const chainRetryable = failure.error?.chain?.retryable;
+		if (chainRetryable !== void 0) return chainRetryable;
+		return !DEFINITIVE_PROVIDER_MODES.has(failure.mode);
 	}
 	return failure.code === "NETWORK_ERROR" || failure.code === "UNKNOWN";
 };
@@ -512,22 +528,24 @@ function buildCapxulSafeInitializer(owner) {
 		functionName: "enableModules",
 		args: [[SAFE_4337_MODULE]]
 	});
+	const enableModulesByteLen = BigInt((enableModulesCall.length - 2) / 2);
+	const multiSendPayload = encodePacked([
+		"uint8",
+		"address",
+		"uint256",
+		"uint256",
+		"bytes"
+	], [
+		1,
+		SAFE_MODULE_SETUP,
+		0n,
+		enableModulesByteLen,
+		enableModulesCall
+	]);
 	const setupData = encodeFunctionData({
 		abi: multiSendAbi,
 		functionName: "multiSend",
-		args: [encodePacked([
-			"uint8",
-			"address",
-			"uint256",
-			"uint256",
-			"bytes"
-		], [
-			1,
-			SAFE_MODULE_SETUP,
-			0n,
-			BigInt((enableModulesCall.length - 2) / 2),
-			enableModulesCall
-		])]
+		args: [multiSendPayload]
 	});
 	return encodeFunctionData({
 		abi: safeSetupAbi,
@@ -597,11 +615,13 @@ function deriveCapxulSafeAddressForOwner(input) {
 		email: input.email,
 		namespace: input.namespace
 	});
+	const salt = keccak256(encodePacked(["bytes32", "uint256"], [keccak256(initializer), saltNonce]));
+	const deploymentCode = concat([SAFE_PROXY_CREATION_CODE, encodeAbiParameters([{ type: "uint256" }], [BigInt(SAFE_L2_SINGLETON)])]);
 	return getContractAddress({
 		opcode: "CREATE2",
 		from: SAFE_PROXY_FACTORY,
-		salt: keccak256(encodePacked(["bytes32", "uint256"], [keccak256(initializer), saltNonce])),
-		bytecodeHash: keccak256(concat([SAFE_PROXY_CREATION_CODE, encodeAbiParameters([{ type: "uint256" }], [BigInt(SAFE_L2_SINGLETON)])]))
+		salt,
+		bytecodeHash: keccak256(deploymentCode)
 	}).toLowerCase();
 }
 /**
@@ -3387,10 +3407,11 @@ const boot = (spec, options = {}) => Effect.gen(function* () {
 		const outcome = spec.transition(state, event);
 		if ("refused" in outcome) return Effect.succeed(state);
 		return Ref.set(cell, outcome.next).pipe(Effect.tap(() => {
-			return emit(applied(state, outcome.next, event, cursor.slot, cursor.epoch, {
+			const record = applied(state, outcome.next, event, cursor.slot, cursor.epoch, {
 				invocation: cursor.invocation,
 				startedAt: cursor.startedAt
-			})).pipe(Effect.andThen(Effect.sync(() => {
+			});
+			return emit(record).pipe(Effect.andThen(Effect.sync(() => {
 				notify(outcome.next);
 			})));
 		}), Effect.as(outcome.next));
@@ -4490,7 +4511,7 @@ const moneyExecutionContract = {
 };
 //#endregion
 //#region package.json
-var version = "2.6.1";
+var version = "2.8.0";
 //#endregion
 //#region src/telemetry/stack-frame-parser.ts
 /**
@@ -4883,7 +4904,7 @@ function postHogExceptionProperties(failure, properties) {
 		$exception_level: "error",
 		$exception_fingerprint: failureFingerprint(failure.errorKind, isFailureMode(mode) ? mode : void 0, failure.operation),
 		$issue_name: issueName(failure, isFailureMode(mode) ? mode : void 0),
-		$issue_description: failure.detail?.chain_provider_message ?? message,
+		$issue_description: issueDescription(failure, message),
 		$exception_list: [{
 			type: failure.errorKind,
 			value: message,
@@ -4907,6 +4928,22 @@ function postHogExceptionProperties(failure, properties) {
 		}]
 	};
 }
+/**
+* The decoded revert leads the description: the provider's own message masks
+* the raw revert data (`reason: [REDACTED]`), and the name plus arguments
+* (`Error(message=GS205)`) is what tells one revert from another.
+*/
+function issueDescription(failure, message) {
+	const detail = failure.detail;
+	const providerMessage = detail?.chain_provider_message;
+	if (detail?.chain_revert_name === void 0) return providerMessage ?? message;
+	const revert = revertSummaryText({
+		name: detail.chain_revert_name === "unknown" ? null : detail.chain_revert_name,
+		selector: detail.chain_revert_selector ?? "0x",
+		args: detail.chain_revert_args ?? {}
+	});
+	return providerMessage === void 0 ? revert : `${revert}; ${providerMessage}`;
+}
 function issueName(failure, mode) {
 	const upstream = failure.detail?.chain_upstream;
 	const method = failure.detail?.chain_method;
@@ -5045,12 +5082,13 @@ function sanitizeChainDetail(source, detail) {
 	for (const key of [
 		"chain_upstream",
 		"chain_method",
-		"chain_revert_name",
-		"chain_revert_selector"
+		"chain_revert_name"
 	]) {
 		const value = source[key];
 		if (typeof value === "string" && ENUMERATED_DETAIL_RE.test(value)) detail[key] = value;
 	}
+	const selector = source.chain_revert_selector;
+	if (typeof selector === "string" && REVERT_SELECTOR_RE.test(selector)) detail.chain_revert_selector = selector;
 	if (typeof source.chain_retryable === "boolean") detail.chain_retryable = source.chain_retryable;
 	const chainHttpStatus = source.chain_http_status;
 	if (typeof chainHttpStatus === "number" && Number.isInteger(chainHttpStatus) && chainHttpStatus >= 100 && chainHttpStatus <= 599) detail.chain_http_status = chainHttpStatus;
@@ -5076,6 +5114,8 @@ function sanitizeFailureDetail(input) {
 }
 /** Enumerated codes only (`convex`, `no-secure-context`, `bootstrap-encode`); free text fails. */
 const ENUMERATED_DETAIL_RE = /^[A-Za-z][A-Za-z0-9_.-]{0,63}$/u;
+/** A four-byte revert selector, or the bare `0x` of an empty revert. */
+const REVERT_SELECTOR_RE = /^0x(?:[0-9a-fA-F]{8})?$/u;
 function normalizeSdkVersion(value) {
 	return typeof value === "string" && /^[A-Za-z0-9][A-Za-z0-9.+_-]{0,127}$/u.test(value) ? value : "unknown";
 }
@@ -5388,7 +5428,7 @@ const paymentAttemptReleases = /* @__PURE__ */ new Set();
 let paymentAttemptPagehideInstalled = false;
 function randomPaymentRequestKey() {
 	try {
-		return `pay_${Array.from(crypto.getRandomValues(new Uint8Array(16)), (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+		return `pay_${Array.from(crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(16)), (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
 	} catch (cause) {
 		throw Errors.providerError("sdk", "paymentRequestKey", cause);
 	}
@@ -5594,7 +5634,8 @@ function makeFinancialOpsMethods(deps) {
 		};
 		let requestKey;
 		try {
-			requestKey = await paymentRequestKeyLifecycle(`personal-pay:${requestKeyScope}:${deps.actor.authSession()?.authUserId ?? "signed-out"}`, input, input.requestKey);
+			const actorId = deps.actor.authSession()?.authUserId ?? "signed-out";
+			requestKey = await paymentRequestKeyLifecycle(`personal-pay:${requestKeyScope}:${actorId}`, input, input.requestKey);
 		} catch (cause) {
 			return {
 				ok: false,
@@ -7048,7 +7089,7 @@ const SHA256_K = [
 function sha256Hex(input) {
 	const padded = padSha256Message(new TextEncoder().encode(input));
 	const view = new DataView(padded.buffer, padded.byteOffset, padded.byteLength);
-	const words = new Uint32Array(64);
+	const words = /* @__PURE__ */ new Uint32Array(64);
 	let h0 = SHA256_INITIAL_HASH[0];
 	let h1 = SHA256_INITIAL_HASH[1];
 	let h2 = SHA256_INITIAL_HASH[2];
@@ -7852,7 +7893,7 @@ function clearAuthCacheEffect(authCache) {
 	return authCache.clearSession.pipe(Effect.mapError((cause) => Errors.providerError("auth-cache", "clearSession", cause)), Effect.andThen(authCache.clearJwt.pipe(Effect.mapError((cause) => Errors.providerError("auth-cache", "clearJwt", cause)))));
 }
 function cryptoRandomId() {
-	const bytes = new Uint8Array(8);
+	const bytes = /* @__PURE__ */ new Uint8Array(8);
 	if (typeof globalThis.crypto !== "undefined" && typeof globalThis.crypto.getRandomValues === "function") globalThis.crypto.getRandomValues(bytes);
 	else for (let i = 0; i < bytes.length; i++) bytes[i] = Math.floor(Math.random() * 256);
 	return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
@@ -9301,7 +9342,7 @@ const organizationPaymentExecutionUnavailable = () => Promise.resolve({
 const holdingsContract = { current: makeFunctionReference(CAPXUL_FUNCTIONS["holdings/actions"].current) };
 //#endregion
 //#region src/domain/money/primary-holding.ts
-const CURRENCY_BY_TOKEN_SYMBOL = new Map([["USDX", toCurrencyCode("USD")]]);
+const CURRENCY_BY_TOKEN_SYMBOL = /* @__PURE__ */ new Map([["USDX", toCurrencyCode("USD")]]);
 /**
 * The designated display asset: the payable row holding the most money, or
 * `null` when no row is payable.

package/dist/index.d.mts

@@ -1,9 +1,8 @@
-import { B as OrgId, C as Address, N as CountryCode, O as AuthSession, S as AccountId, U as PayrollGroupId, V as PartyId, W as PayrollRunId, Y as RoleKey, a as SignerStatusStore, at as CapxulErrorDetails, c as AccountProviderSource, ct as isCapxulError, d as eip1193AccountProvider, dt as ChainUpstream, et as toAddress, f as localPrivateKeyAccountProvider, ft as FAILURE_MODES, g as SmartAccount, h as Session, i as SignerStatus, it as CapxulErrorCode, j as BudgetId, k as AuthUserId, l as AccountRequirement, lt as CHAIN_UPSTREAMS, m as Profile, mt as RevertSummary, n as CapxulSigner, nt as CAPXUL_ERROR_CODES, o as injectedWalletSigner, ot as Errors, p as CapxulResult, pt as FailureMode, r as Eip1193RequestProvider, rt as CapxulError, s as AccountProvider, t as CapxulDigestSigner, tt as toCountryCode, u as Eip1193Provider, ut as ChainCause, x as Account, z as Money } from "./signer-tokSaxrJ.mjs";
-import { $ as OrganizationPaymentsMethods, $n as IdentityState, $t as MeMethods, A as OrgView, An as AccountSetupStep, At as ActivityFilter, B as PayrollGroupInput, Bn as SubmittedPermissionExecution, Bt as ActivitySummaryTotal, C as DetectPendingOrgInvitationsResult, Cn as RecipientResolutionKind, Ct as AddressBookMethods, D as OrgMethods, Dn as TargetsMethods, Dt as ActivityAnnotation, E as MemberView, En as TargetReference, Et as InboxMethods, F as RoleSpendCap, Fn as OrgLifecycle, Ft as ActivityPage, G as PayrollRun, Gn as RequestStatus, Gt as DestinationKind, H as PayrollGroupsMethods, Hn as PAYMENT_DIRECTIONS, Ht as DepositInstructions, I as RoleView, In as OrgSetupStep, It as ActivityRange, J as PayrollRuns, Jt as DestinationRail, K as PayrollRunItemInput, Kn as CAPXUL_PAYMENTS_V2_ADDRESS, Kt as DestinationListInput, L as AuthorizeRunInput, Ln as ActorRef, Lt as ActivityReference, M as OrganizationAuditLogItem, Mn as IdentityMethods, Mt as ActivityKind, N as ResendInviteTokenInput, Nn as SmartAccountMethods, Nt as ActivityListParams, O as OrgScopedMethods, On as fingerprintPaymentIntent, Ot as ActivityAnnotationInput, P as RoleDefinition, Pn as AuthMethods, Pt as ActivityMethods, Q as OrganizationPaymentItemInput, Qn as IdentityEvent, Qt as HandlesMethods, R as PayrollEngagementTerms, Rn as CurrentHoldings, Rt as ActivitySummary, S as CreateOrgInput, Sn as RecipientResolution, St as AddressBookLabelInput, T as MemberStatus, Tn as ResolvedTarget, Tt as InboxItem, U as PayrollMethods, Un as PAYMENT_STATUSES, Ut as Destination, V as PayrollGroupMember, Vn as InboxStatus, Vt as ActorReference, W as PayrollOptions, Wn as PaymentStatus$1, Wt as DestinationAddInput, X as OrganizationPaymentBatchInput, Xn as TelemetryPort, Xt as DestinationsMethods, Y as PayrollTermsUnit, Yt as DestinationRemoveInput, Z as OrganizationPaymentInput, Zn as Destination$1, Zt as FinancialOpsMethods, _ as SystemMethods, _n as PaymentStatus, _t as ActorRequest, a as SdkFailureObservation, an as OfframpStatus, ar as isRestoring, at as PermissionReplaceInput, b as CurrentUserContext, bn as PaymentsMethods, bt as AddressBookAddInput, c as PostHogObservabilityOptions, cn as Payment, ct as Budget, d as CreateCapxulClientInput, dn as PaymentDocumentKind, dt as OrgMeOptions, en as MeProfile, er as OrgLane, et as PermissionAssignInput, f as IdentityProfileDetails, fn as PaymentDocumentRef, ft as AccountsMethods, g as Holding, gn as PaymentMoney, gt as ActorRelationshipMethods, h as HoldingsMethods, hn as PaymentDocumentsMethods, ht as ActorProfileMethods, i as ObservationDelivery, in as OfframpQuoteInput, ir as isClaimed, it as PermissionOptions, j as OrganizationAccount, jn as isSettingUpLifecycle, jt as ActivityItem, k as OrgTemplate, kn as AccountLifecycle, kt as ActivityDetail, l as postHogObservability, ln as PaymentActivityEvidence, lt as OrgMe, m as IdentityRuntimeSendResult, mn as PaymentDocumentVerification, mt as ActorProfile, n as ObservationAdapter, nn as OfframpMethods, nr as StateLabel, nt as PermissionCreateInput, o as HostObservability, on as Payee, or as IdentityTransition, ot as PermissionRevokeInput, p as IdentityRuntime, pn as PaymentDocumentRender, pt as AccountMethods, q as PayrollRunStatus, qt as DestinationPayload, r as ObservationContext, rn as OfframpQuote, rr as destination, rt as PermissionMethods, s as PostHogObservabilityClient, sn as PayeesMethods, sr as InvocationControls, st as PermissionReadResult, t as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, tn as MovementActivityEvidence, tr as Readiness, tt as PermissionChangeInput, u as CapxulClient, un as PaymentDirection, ut as OrgMeMethod, v as SystemHealth, vn as PaymentTiming, vt as ActorRequestIssueInput, w as InviteMemberInput, wn as Ref, wt as InboxApproveInput, x as CurrentUserMethods, xn as PaymentsPayInput, xt as AddressBookEntry, y as MediaMethods, yn as PaymentType, yt as ActorRequestsMethods, z as PayrollGroup, zn as Permission, zt as ActivitySummaryParams } from "./observation-Desw1A8U.mjs";
+import { B as OrgId, C as Address, N as CountryCode, O as AuthSession, S as AccountId, U as PayrollGroupId, V as PartyId, W as PayrollRunId, Y as RoleKey, a as SignerStatusStore, at as CapxulErrorDetails, c as AccountProviderSource, ct as isCapxulError, d as eip1193AccountProvider, dt as ChainUpstream, et as toAddress, f as localPrivateKeyAccountProvider, ft as FAILURE_MODES, g as SmartAccount, h as Session, i as SignerStatus, it as CapxulErrorCode, j as BudgetId, k as AuthUserId, l as AccountRequirement, lt as CHAIN_UPSTREAMS, m as Profile, mt as RevertSummary, n as CapxulSigner, nt as CAPXUL_ERROR_CODES, o as injectedWalletSigner, ot as Errors, p as CapxulResult, pt as FailureMode, r as Eip1193RequestProvider, rt as CapxulError, s as AccountProvider, t as CapxulDigestSigner, tt as toCountryCode, u as Eip1193Provider, ut as ChainCause, x as Account, z as Money } from "./signer-xGhV5Q7i.mjs";
+import { $ as OrganizationPaymentsMethods, $n as IdentityState, $t as MeMethods, A as OrgView, An as AccountSetupStep, At as ActivityFilter, B as PayrollGroupInput, Bn as SubmittedPermissionExecution, Bt as ActivitySummaryTotal, C as DetectPendingOrgInvitationsResult, Cn as RecipientResolutionKind, Ct as AddressBookMethods, D as OrgMethods, Dn as TargetsMethods, Dt as ActivityAnnotation, E as MemberView, En as TargetReference, Et as InboxMethods, F as RoleSpendCap, Fn as OrgLifecycle, Ft as ActivityPage, G as PayrollRun, Gn as RequestStatus, Gt as DestinationKind, H as PayrollGroupsMethods, Hn as PAYMENT_DIRECTIONS, Ht as DepositInstructions, I as RoleView, In as OrgSetupStep, It as ActivityRange, J as PayrollRuns, Jt as DestinationRail, K as PayrollRunItemInput, Kn as CAPXUL_PAYMENTS_V2_ADDRESS, Kt as DestinationListInput, L as AuthorizeRunInput, Ln as ActorRef, Lt as ActivityReference, M as OrganizationAuditLogItem, Mn as IdentityMethods, Mt as ActivityKind, N as ResendInviteTokenInput, Nn as SmartAccountMethods, Nt as ActivityListParams, O as OrgScopedMethods, On as fingerprintPaymentIntent, Ot as ActivityAnnotationInput, P as RoleDefinition, Pn as AuthMethods, Pt as ActivityMethods, Q as OrganizationPaymentItemInput, Qn as IdentityEvent, Qt as HandlesMethods, R as PayrollEngagementTerms, Rn as CurrentHoldings, Rt as ActivitySummary, S as CreateOrgInput, Sn as RecipientResolution, St as AddressBookLabelInput, T as MemberStatus, Tn as ResolvedTarget, Tt as InboxItem, U as PayrollMethods, Un as PAYMENT_STATUSES, Ut as Destination, V as PayrollGroupMember, Vn as InboxStatus, Vt as ActorReference, W as PayrollOptions, Wn as PaymentStatus$1, Wt as DestinationAddInput, X as OrganizationPaymentBatchInput, Xn as TelemetryPort, Xt as DestinationsMethods, Y as PayrollTermsUnit, Yt as DestinationRemoveInput, Z as OrganizationPaymentInput, Zn as Destination$1, Zt as FinancialOpsMethods, _ as SystemMethods, _n as PaymentStatus, _t as ActorRequest, a as SdkFailureObservation, an as OfframpStatus, ar as isRestoring, at as PermissionReplaceInput, b as CurrentUserContext, bn as PaymentsMethods, bt as AddressBookAddInput, c as PostHogObservabilityOptions, cn as Payment, ct as Budget, d as CreateCapxulClientInput, dn as PaymentDocumentKind, dt as OrgMeOptions, en as MeProfile, er as OrgLane, et as PermissionAssignInput, f as IdentityProfileDetails, fn as PaymentDocumentRef, ft as AccountsMethods, g as Holding, gn as PaymentMoney, gt as ActorRelationshipMethods, h as HoldingsMethods, hn as PaymentDocumentsMethods, ht as ActorProfileMethods, i as ObservationDelivery, in as OfframpQuoteInput, ir as isClaimed, it as PermissionOptions, j as OrganizationAccount, jn as isSettingUpLifecycle, jt as ActivityItem, k as OrgTemplate, kn as AccountLifecycle, kt as ActivityDetail, l as postHogObservability, ln as PaymentActivityEvidence, lt as OrgMe, m as IdentityRuntimeSendResult, mn as PaymentDocumentVerification, mt as ActorProfile, n as ObservationAdapter, nn as OfframpMethods, nr as StateLabel, nt as PermissionCreateInput, o as HostObservability, on as Payee, or as IdentityTransition, ot as PermissionRevokeInput, p as IdentityRuntime, pn as PaymentDocumentRender, pt as AccountMethods, q as PayrollRunStatus, qt as DestinationPayload, r as ObservationContext, rn as OfframpQuote, rr as destination, rt as PermissionMethods, s as PostHogObservabilityClient, sn as PayeesMethods, sr as InvocationControls, st as PermissionReadResult, t as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, tn as MovementActivityEvidence, tr as Readiness, tt as PermissionChangeInput, u as CapxulClient, un as PaymentDirection, ut as OrgMeMethod, v as SystemHealth, vn as PaymentTiming, vt as ActorRequestIssueInput, w as InviteMemberInput, wn as Ref, wt as InboxApproveInput, x as CurrentUserMethods, xn as PaymentsPayInput, xt as AddressBookEntry, y as MediaMethods, yn as PaymentType, yt as ActorRequestsMethods, z as PayrollGroup, zn as Permission, zt as ActivitySummaryParams } from "./observation-YhuU8yQX.mjs";
 import { Hex } from "viem";
 import { Context, Effect, Layer } from "effect";
 import { FunctionReference } from "convex/server";
-
 //#region src/domain/activity/phase.d.ts
 interface ActivityPhase {
   /** The row is in a final state. No subsequent status change occurs. */
@@ -127,7 +126,8 @@ declare function openfortEmbeddedSignerFromWallet(input: {
  * and verifies recovery before the backend submits.
  */
 type OpenfortEmbeddedSigner = CapxulSigner & {
-  /** Drop cached `getAddress()` so the next read hits the embedded wallet again. */readonly resetAddressCache: () => void;
+  /** Drop cached `getAddress()` so the next read hits the embedded wallet again. */
+  readonly resetAddressCache: () => void;
 };
 declare function openfortEmbeddedSigner(input: OpenfortEmbeddedSignerInput): OpenfortEmbeddedSigner;
 /**

package/dist/index.mjs

@@ -1,5 +1,5 @@
-import { A as postHogFailureObservation, B as injectedWalletSigner, C as fingerprintPaymentIntent, D as failureEvidenceProps, E as failureDetail, F as isSettingUpLifecycle, G as PAYMENT_DIRECTIONS, H as OBSERVATION_CONTEXT_HEADER, I as formatTraceparent, J as BootstrapEnvelope, K as PAYMENT_STATUSES, L as copyInvocationObservation, M as captureExceptionSync, N as version, O as observationContextProps, P as fromWei, Q as BASE_SEPOLIA_CHAIN_ID, R as readInvocationObservation, S as AuthClientPortTag, T as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, U as encodeObservationContextHeader, V as signerFailure, W as sanitizeObservationContext, X as CAPXUL_PAYMENTS_V2_ADDRESS, Y as EngineeringTelemetryBootstrapPolicy, Z as normalizeBindingEmail, _ as ClockPortTag, a as TelemetryPortTag, b as authClientPortFromPromiseAdapter, c as smartAccountErrorFromCapxul, d as wireChainId, et as destination, f as IdentityPortTag, g as ClockError, h as convexCallErrorFromCapxul, i as PostHogTelemetryLayer, j as captureException, k as observeFailedResult, l as AccountReadPortTag, m as ConvexCallPortTag, n as postHogProductTelemetry, nt as isRestoring, p as identityErrorFromCapxul, q as CAPXUL_FUNCTIONS, r as detectAuthCacheAdapter, s as SmartAccountPortTag, t as assembleCapxulClient, tt as isClaimed, u as accountReadErrorFromCapxul, v as BootstrapPortTag, w as toWei, x as AuthClientError, y as bootstrapErrorFromCapxul, z as causeChain } from "./create-capxul-client-C_MxJ8mV.mjs";
-import { B as Errors, C as toDurationMs, D as toJwtToken, E as toEpochSeconds, F as toSessionToken, H as CHAIN_UPSTREAMS, I as decodeConvexError, L as CAPXUL_ERROR_CODES, N as toPublishableKey, O as toKycTier, P as toRoleKey, R as CapxulError, S as toCurrencyCode, T as toEpochMs, U as FAILURE_MODES, V as isCapxulError, b as toChainId, g as toAllowedOrigin, h as toAddress, k as toOrgId, m as toAccountId, o as AuthCachePortTag, p as currencySymbolFor, v as toAuthUserId, w as toEmail, x as toCountryCode } from "./InMemoryAuthCacheAdapter-VZBv1fOH.mjs";
+import { A as postHogFailureObservation, B as injectedWalletSigner, C as fingerprintPaymentIntent, D as failureEvidenceProps, E as failureDetail, F as isSettingUpLifecycle, G as PAYMENT_DIRECTIONS, H as OBSERVATION_CONTEXT_HEADER, I as formatTraceparent, J as BootstrapEnvelope, K as PAYMENT_STATUSES, L as copyInvocationObservation, M as captureExceptionSync, N as version, O as observationContextProps, P as fromWei, Q as BASE_SEPOLIA_CHAIN_ID, R as readInvocationObservation, S as AuthClientPortTag, T as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, U as encodeObservationContextHeader, V as signerFailure, W as sanitizeObservationContext, X as CAPXUL_PAYMENTS_V2_ADDRESS, Y as EngineeringTelemetryBootstrapPolicy, Z as normalizeBindingEmail, _ as ClockPortTag, a as TelemetryPortTag, b as authClientPortFromPromiseAdapter, c as smartAccountErrorFromCapxul, d as wireChainId, et as destination, f as IdentityPortTag, g as ClockError, h as convexCallErrorFromCapxul, i as PostHogTelemetryLayer, j as captureException, k as observeFailedResult, l as AccountReadPortTag, m as ConvexCallPortTag, n as postHogProductTelemetry, nt as isRestoring, p as identityErrorFromCapxul, q as CAPXUL_FUNCTIONS, r as detectAuthCacheAdapter, s as SmartAccountPortTag, t as assembleCapxulClient, tt as isClaimed, u as accountReadErrorFromCapxul, v as BootstrapPortTag, w as toWei, x as AuthClientError, y as bootstrapErrorFromCapxul, z as causeChain } from "./create-capxul-client-YSN2yN8m.mjs";
+import { B as Errors, C as toDurationMs, D as toJwtToken, E as toEpochSeconds, F as toSessionToken, H as CHAIN_UPSTREAMS, I as decodeConvexError, L as CAPXUL_ERROR_CODES, N as toPublishableKey, O as toKycTier, P as toRoleKey, R as CapxulError, S as toCurrencyCode, T as toEpochMs, U as FAILURE_MODES, V as isCapxulError, b as toChainId, g as toAllowedOrigin, h as toAddress, k as toOrgId, m as toAccountId, o as AuthCachePortTag, p as currencySymbolFor, v as toAuthUserId, w as toEmail, x as toCountryCode } from "./InMemoryAuthCacheAdapter-FptQ2p7C.mjs";
 import { keccak256, recoverAddress, stringToHex } from "viem";
 import { Cause, Context, Data, Duration, Effect, Exit, Layer, Result, Schedule, SchemaIssue, SchemaParser, Scope, Tracer } from "effect";
 import { getFunctionName, makeFunctionReference } from "convex/server";
@@ -445,7 +445,7 @@ const postHogOtlpEndpoints = (host) => {
 	};
 };
 const ENGINEERING_CAPXUL_ENV_SET = new Set(ENGINEERING_CAPXUL_ENVS);
-const ENGINEERING_PRODUCERS = new Set(["browser", "server"]);
+const ENGINEERING_PRODUCERS = /* @__PURE__ */ new Set(["browser", "server"]);
 const PUBLIC_POSTHOG_AUTHORIZATION = /^Bearer phc_[A-Za-z0-9_-]{1,191}$/u;
 const SAFE_RESOURCE_VALUE = /^[A-Za-z0-9][A-Za-z0-9._+@/-]{0,127}$/u;
 const validateEngineeringTelemetryConfig = (config) => {
@@ -566,7 +566,7 @@ function authSessionFromBetterAuth$1(token, user) {
 		authUserId: toAuthUserId(user.id),
 		email: toEmail(user.email),
 		token: toSessionToken(token),
-		expiresAt: toEpochMs(Date.now() + 10080 * 60 * 1e3)
+		expiresAt: toEpochMs(Date.now() + 6048e5)
 	};
 }
 async function safeJson$1(res) {
@@ -957,7 +957,7 @@ function authSessionFromBetterAuth(token, user) {
 		authUserId: toAuthUserId(user.id),
 		email: toEmail(user.email),
 		token: toSessionToken(token),
-		expiresAt: toEpochMs(Date.now() + 10080 * 60 * 1e3)
+		expiresAt: toEpochMs(Date.now() + 6048e5)
 	};
 }
 async function safeJson(res) {
@@ -1271,7 +1271,7 @@ const DEFAULT_RETRY = {
 	baseDelayMs: 400
 };
 /** Request-side statuses a proxy or backend returns while momentarily unable to serve. */
-const TRANSIENT_HTTP_STATUSES = new Set([
+const TRANSIENT_HTTP_STATUSES = /* @__PURE__ */ new Set([
 	408,
 	425,
 	429
@@ -1421,7 +1421,7 @@ function SystemClockLayer() {
 //#endregion
 //#region src/adapters/convex-call/ConvexCallAdapter.ts
 /** Exact floor-first allowlist; every additional handler must migrate its validator first. */
-const OBSERVED_CONVEX_ACTIONS = new Set([
+const OBSERVED_CONVEX_ACTIONS = /* @__PURE__ */ new Set([
 	"smartAccount/actions:claim",
 	"org/actions:prepareFounderAccount",
 	"org/actions:prepareBootstrap",
@@ -1429,12 +1429,12 @@ const OBSERVED_CONVEX_ACTIONS = new Set([
 	"org/actions:resumeBootstrapSubmission",
 	"org/actions:confirmBootstrap"
 ]);
-const OBSERVED_CONVEX_QUERIES = new Set([
+const OBSERVED_CONVEX_QUERIES = /* @__PURE__ */ new Set([
 	"identity/queries:loadByAuthUserId",
 	"smartAccount/queries:loadByAuthUserId",
 	"org/lifecycle:load"
 ]);
-const OBSERVED_CONVEX_MUTATIONS = new Set([
+const OBSERVED_CONVEX_MUTATIONS = /* @__PURE__ */ new Set([
 	"identity/mutations:create",
 	"identity/mutations:update",
 	"identity/mutations:completeOnboarding",
@@ -1558,7 +1558,7 @@ function mapToCapxulError(operation, err) {
 function mapToConvexCallError(operation, err) {
 	return convexCallErrorFromCapxul(operation, mapToCapxulError(operation, err));
 }
-const TRANSPORT_ERROR_CODES = new Set([
+const TRANSPORT_ERROR_CODES = /* @__PURE__ */ new Set([
 	"EAI_AGAIN",
 	"ECONNREFUSED",
 	"ECONNRESET",
@@ -2308,7 +2308,7 @@ function clearStaleOpenfortBrowserStorage(publishableKey) {
 * tagging them `stale-openfort-cache` would delete the triage signal the tag
 * exists to carry.
 */
-const STALE_USER_ERROR_CODES = new Set(["USER_NOT_FOUND"]);
+const STALE_USER_ERROR_CODES = /* @__PURE__ */ new Set(["USER_NOT_FOUND"]);
 /**
 * The one predicate that opens the heal. It reads the Openfort error code and
 * never the message text (ADR-0023 R4). It walks the cause chain the way
@@ -2606,7 +2606,8 @@ function postHogObservability(client, options = {}) {
 		if (client === null || client === void 0) return inactive;
 		try {
 			if (!(typeof options.enabled === "function" ? options.enabled() : options.enabled ?? true)) return inactive;
-			const sanitized = sanitizeObservationContext(typeof options.context === "function" ? options.context() : options.context);
+			const rawContext = typeof options.context === "function" ? options.context() : options.context;
+			const sanitized = sanitizeObservationContext(rawContext);
 			const context = sanitized === void 0 ? void 0 : Object.freeze({ ...sanitized });
 			return Object.freeze({
 				active: true,

package/dist/node/index.d.mts

@@ -1,7 +1,6 @@
-import { O as AuthSession, _ as AuthCacheError, b as CachedJwt, n as CapxulSigner, v as AuthCachePort, y as AuthCachePortTag } from "../signer-tokSaxrJ.mjs";
+import { O as AuthSession, _ as AuthCacheError, b as CachedJwt, n as CapxulSigner, v as AuthCachePort, y as AuthCachePortTag } from "../signer-xGhV5Q7i.mjs";
 import { Hex } from "viem";
 import { Effect, FileSystem, Layer, Path } from "effect";
-
 //#region src/adapters/auth-cache/FileSystemAuthCacheAdapter.d.ts
 type FileSystemRuntime = FileSystem.FileSystem | Path.Path;
 declare class FileSystemAuthCacheAdapter implements AuthCachePort {

package/dist/node/index.mjs

@@ -1,4 +1,4 @@
-import { a as AuthCacheError, h as toAddress, i as parseCachedJwt, n as BrowserAuthCacheAdapter, o as AuthCachePortTag, r as parseAuthSession, t as InMemoryAuthCacheAdapter } from "../InMemoryAuthCacheAdapter-VZBv1fOH.mjs";
+import { a as AuthCacheError, h as toAddress, i as parseCachedJwt, n as BrowserAuthCacheAdapter, o as AuthCachePortTag, r as parseAuthSession, t as InMemoryAuthCacheAdapter } from "../InMemoryAuthCacheAdapter-FptQ2p7C.mjs";
 import { Effect, FileSystem, Layer, Path } from "effect";
 import { privateKeyToAccount } from "viem/accounts";
 import * as os from "node:os";

package/dist/{observation-Desw1A8U.d.mts → observation-YhuU8yQX.d.mts}

@@ -1,8 +1,7 @@
-import { $ as WeiAmount, A as BlockNumber, B as OrgId, C as Address$1, D as AppId, E as AnonymousDistinctId, F as DocumentHash, G as PermissionAssignmentId, H as PaymentCommandId, I as DurationMs, J as PublishableKey, K as PermissionId, L as Email, M as ChainId, N as CountryCode, O as AuthSession, P as CurrencyCode, Q as TxHash, R as EpochMs, T as AllowedOrigin, U as PayrollGroupId, V as PartyId, W as PayrollRunId, X as SessionToken, Y as RoleKey, Z as SmartAccount, a as SignerStatusStore, at as CapxulErrorDetails, b as CachedJwt, c as AccountProviderSource, g as SmartAccount$1, h as Session$1, it as CapxulErrorCode, j as BudgetId, k as AuthUserId, l as AccountRequirement, m as Profile$1, n as CapxulSigner, p as CapxulResult, pt as FailureMode, q as Profile, rt as CapxulError, st as Failure, v as AuthCachePort, w as AllowanceKey, x as Account$1, z as Money } from "./signer-tokSaxrJ.mjs";
+import { $ as WeiAmount, A as BlockNumber, B as OrgId, C as Address$1, D as AppId, E as AnonymousDistinctId, F as DocumentHash, G as PermissionAssignmentId, H as PaymentCommandId, I as DurationMs, J as PublishableKey, K as PermissionId, L as Email, M as ChainId, N as CountryCode, O as AuthSession, P as CurrencyCode, Q as TxHash, R as EpochMs, T as AllowedOrigin, U as PayrollGroupId, V as PartyId, W as PayrollRunId, X as SessionToken, Y as RoleKey, Z as SmartAccount, a as SignerStatusStore, at as CapxulErrorDetails, b as CachedJwt, c as AccountProviderSource, g as SmartAccount$1, h as Session$1, it as CapxulErrorCode, j as BudgetId, k as AuthUserId, l as AccountRequirement, m as Profile$1, n as CapxulSigner, p as CapxulResult, pt as FailureMode, q as Profile, rt as CapxulError, st as Failure, v as AuthCachePort, w as AllowanceKey, x as Account$1, z as Money } from "./signer-xGhV5Q7i.mjs";
 import { Address, Hex } from "viem";
 import { Context, Effect, Layer, Schema, Scope, Tracer } from "effect";
 import { FunctionReference } from "convex/server";
-
 //#region src/domain/machine/shell.d.ts
 declare const INVOCATION_PARENT_SPAN: unique symbol;
 interface InvocationControls {
@@ -38,7 +37,8 @@ type IdentityTransition = (RecordBase & {
   readonly outcome: "failed" | "cancelled";
   readonly state: string;
   readonly error_code: CapxulErrorCode;
-  readonly refusal_code?: never; /** The typed failure behind `error_code`, with its `CapxulError` when the port gave one. */
+  readonly refusal_code?: never;
+  /** The typed failure behind `error_code`, with its `CapxulError` when the port gave one. */
   readonly failure?: Failure;
 });
 declare class ActorFailure<Reason extends CapxulErrorCode> extends Error {
@@ -337,7 +337,7 @@ type VerifyOtpInput = {
 type GetConvexJwtOptions = AuthClientOperationOptions & {
   readonly forceRefresh?: boolean;
 };
-declare const AuthClientError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P] }>) => import("effect/Cause").YieldableError & {
+declare const AuthClientError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
   readonly _tag: "AuthClientError";
 } & Readonly<A>;
 declare class AuthClientError extends AuthClientError_base<{
@@ -366,7 +366,7 @@ interface ClockPort {
   readonly now: Effect.Effect<EpochMs, ClockError>;
   readonly sleep: (duration: DurationMs) => Effect.Effect<void, ClockError>;
 }
-declare const ClockError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P] }>) => import("effect/Cause").YieldableError & {
+declare const ClockError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
   readonly _tag: "ClockError";
 } & Readonly<A>;
 declare class ClockError extends ClockError_base<{
@@ -668,7 +668,7 @@ type BootstrapResolution = {
   readonly engineeringTelemetry?: EngineeringTelemetryBootstrapPolicyV1;
 };
 type BootstrapErrorKind = "notAuthenticated" | "network" | "provider" | "malformedBody" | "invalidInput" | "rateLimited";
-declare const BootstrapError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P] }>) => import("effect/Cause").YieldableError & {
+declare const BootstrapError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
   readonly _tag: "BootstrapError";
 } & Readonly<A>;
 declare class BootstrapError extends BootstrapError_base<{
@@ -719,7 +719,7 @@ type Snapshot<T, E = CapxulError> = {
   readonly status: "error";
   readonly error: E;
 };
-declare const ConvexCallError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P] }>) => import("effect/Cause").YieldableError & {
+declare const ConvexCallError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
   readonly _tag: "ConvexCallError";
 } & Readonly<A>;
 declare class ConvexCallError extends ConvexCallError_base<{
@@ -767,10 +767,11 @@ type CompleteOnboardingIdentityInput = {
   readonly email: Email;
   readonly displayName: string;
   readonly country: CountryCode;
-  readonly withdrawalAddress?: Address$1; /** #1062: optional globally-unique handle — store-when-present, backend-normalized. */
+  readonly withdrawalAddress?: Address$1;
+  /** #1062: optional globally-unique handle — store-when-present, backend-normalized. */
   readonly username?: string;
 };
-declare const IdentityError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P] }>) => import("effect/Cause").YieldableError & {
+declare const IdentityError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
   readonly _tag: "IdentityError";
 } & Readonly<A>;
 declare class IdentityError extends IdentityError_base<{
@@ -826,7 +827,8 @@ type SafeDeploymentEvidence = {
 };
 type ProvisionInput = {
   readonly authUserId: AuthUserId;
-  readonly chainId: ChainId; /** Verified session email. The backend reads the same value from BetterAuth. */
+  readonly chainId: ChainId;
+  /** Verified session email. The backend reads the same value from BetterAuth. */
   readonly email: Email;
 };
 /**
@@ -860,7 +862,7 @@ type ClaimInput = {
   readonly chainId: ChainId;
   readonly signerAddress: Address$1;
 };
-declare const SmartAccountError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P] }>) => import("effect/Cause").YieldableError & {
+declare const SmartAccountError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
   readonly _tag: "SmartAccountError";
 } & Readonly<A>;
 declare class SmartAccountError extends SmartAccountError_base<{
@@ -905,7 +907,7 @@ type FundFromFaucetInput = {
 type FundFromFaucetResult = {
   readonly txHash: string;
 };
-declare const AccountReadError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P] }>) => import("effect/Cause").YieldableError & {
+declare const AccountReadError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
   readonly _tag: "AccountReadError";
 } & Readonly<A>;
 declare class AccountReadError extends AccountReadError_base<{
@@ -967,14 +969,17 @@ type OrgLifecycle = {
 type StartOrResumeOrganizationInput = {
   readonly name: string;
   readonly handle: string;
-  readonly country: string; /** #1064: optional onboarding-collected description + size bucket. */
+  readonly country: string;
+  /** #1064: optional onboarding-collected description + size bucket. */
   readonly bio?: string;
-  readonly size?: string; /** @internal Safe trace/correlation carriage owned by the identity flow. */
+  readonly size?: string;
+  /** @internal Safe trace/correlation carriage owned by the identity flow. */
   readonly observationContext?: WireObservationContext;
 };
 type OrganizationSetupStepInput = {
   readonly orgId: OrgId;
-  readonly signal?: AbortSignal; /** @internal Safe trace/correlation carriage owned by the identity flow. */
+  readonly signal?: AbortSignal;
+  /** @internal Safe trace/correlation carriage owned by the identity flow. */
   readonly observationContext?: WireObservationContext;
   /**
    * @internal #1655: milliseconds the identity flow waited before this
@@ -986,7 +991,8 @@ type OrganizationSetupStepInput = {
 type RecordOrganizationSetupFailureInput = {
   readonly orgId: OrgId;
   readonly error: CapxulError;
-  readonly retryable: boolean; /** @internal Safe trace/correlation carriage owned by the identity flow. */
+  readonly retryable: boolean;
+  /** @internal Safe trace/correlation carriage owned by the identity flow. */
   readonly observationContext?: WireObservationContext;
 };
 /**
@@ -1432,7 +1438,8 @@ type ActivityItem = {
   readonly kind: "payment";
   readonly id: string;
   readonly ledgerKind: "Payment" | "Payout" | "Deposit";
-  readonly status: PaymentStatus; /** What the payment is FOR. On the list row so a title needs no second read. */
+  readonly status: PaymentStatus;
+  /** What the payment is FOR. On the list row so a title needs no second read. */
   readonly paymentType: PaymentType;
   readonly amount: PaymentMoney;
   readonly direction: PaymentDirection;
@@ -1448,7 +1455,8 @@ type ActivityItem = {
   readonly id: string;
   readonly classification: "movement_only_outflow";
   readonly amount: PaymentMoney;
-  readonly direction: PaymentDirection; /** Short-form counterparty address today. */
+  readonly direction: PaymentDirection;
+  /** Short-form counterparty address today. */
   readonly counterpartyLabel: string;
   readonly receipt: {
     readonly chainId: number;
@@ -1948,7 +1956,7 @@ type DetectPendingOrgInvitationsInput = Record<never, never>;
 type DetectPendingOrgInvitationsResult$1 = {
   readonly matched: readonly OrgId[];
 };
-declare const OrgError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P] }>) => import("effect/Cause").YieldableError & {
+declare const OrgError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
   readonly _tag: "OrgError";
 } & Readonly<A>;
 declare class OrgError extends OrgError_base<{
@@ -2215,11 +2223,15 @@ type OrgView = {
   readonly id: OrgId;
   readonly name: string;
   readonly handle: string;
-  readonly safeAddress: Address$1; /** The viewing member's own role label within this org. */
-  readonly role: string; /** The Organization treasury Account. */
-  readonly treasury: Account$1; /** #1064: onboarding-collected description + size bucket; null when unset. */
+  readonly safeAddress: Address$1;
+  /** The viewing member's own role label within this org. */
+  readonly role: string;
+  /** The Organization treasury Account. */
+  readonly treasury: Account$1;
+  /** #1064: onboarding-collected description + size bucket; null when unset. */
   readonly bio: string | null;
-  readonly size: string | null; /** #1061 / ADR-0014: logo serving URL resolved at read time; null when unset. */
+  readonly size: string | null;
+  /** #1061 / ADR-0014: logo serving URL resolved at read time; null when unset. */
   readonly logoUrl: string | null;
 };
 interface OrganizationAccount {
@@ -2245,8 +2257,10 @@ interface OrganizationAuditLogItem {
 type MemberView = {
   readonly orgId: OrgId;
   readonly email: Email;
-  readonly name: string | null; /** Member identity key. `null` until the invitee provisions a Safe. */
-  readonly personalSafeAddress: Address$1 | null; /** The member role label maps to the on-chain `roleKey`. */
+  readonly name: string | null;
+  /** Member identity key. `null` until the invitee provisions a Safe. */
+  readonly personalSafeAddress: Address$1 | null;
+  /** The member role label maps to the on-chain `roleKey`. */
   readonly role: string;
   readonly roleKey: RoleKey | null;
   readonly status: MemberStatus;
@@ -2628,8 +2642,10 @@ interface CapxulClient {
      * Dev-only faucet bundle (production-surface-policy.md). `fund` lives here,
      * NOT on the public `client.accounts` surface.
      */
-    readonly accounts: AccountsFaucetMethods; /** Quarantined Reference-harness evidence; never a product Organization method. */
-    readonly organizationSetup: OrganizationSetupProofMethods; /** Product telemetry projection for internal composition and test harnesses. */
+    readonly accounts: AccountsFaucetMethods;
+    /** Quarantined Reference-harness evidence; never a product Organization method. */
+    readonly organizationSetup: OrganizationSetupProofMethods;
+    /** Product telemetry projection for internal composition and test harnesses. */
     readonly telemetry?: TelemetryPort;
     readonly close?: () => Promise<void>;
   };

package/dist/{signer-tokSaxrJ.d.mts → signer-xGhV5Q7i.d.mts}

@@ -1,6 +1,5 @@
 import { Account, Hex } from "viem";
 import { Context, Effect } from "effect";
-
 //#region ../errors/src/chain-cause.d.ts
 /**
  * Why an operation failed — the one flat vocabulary. The first four are the
@@ -9,7 +8,33 @@ import { Context, Effect } from "effect";
  * (the SDK's `$exception` projection, the observability schema) and the type
  * can never drift apart.
  */
-declare const FAILURE_MODES: readonly [/** OTP cookies live on `localhost:PORT` but OpenFort hits the Convex host. */"auth-origin-mismatch", /** An old `userId` in scoped storage makes the SDK skip re-auth → 401. */"stale-openfort-cache", /** The selected app/deployment origin is not allowlisted → 401. */"app-env-allowlist", /** Sandboxed/headless browser with no Web Crypto. */"no-secure-context", /** One upstream answered HTTP 429 or JSON-RPC -32005. Retryable. */"rate-limited", /** No answer inside the budget. Retryable. */"timeout", /** HTTP 5xx, a connection failure, or a malformed envelope. Retryable. */"upstream-down", /** Simulation or execution reverted; `chain.revert` names it when decodable. */"revert", /** A balance pre-flight shortfall or a decoded `ERC20InsufficientBalance`. */"insufficient-balance", /** A decoded `ERC20InsufficientAllowance`. */"insufficient-allowance", /** The bundler's validation refused the operation (AA2x/AA3x); its text is carried. */"rejected", /** The gateway refused the token. */"unauthorized", /** No cause could be determined. */"unknown"];
+declare const FAILURE_MODES: readonly [
+/** OTP cookies live on `localhost:PORT` but OpenFort hits the Convex host. */
+"auth-origin-mismatch",
+/** An old `userId` in scoped storage makes the SDK skip re-auth → 401. */
+"stale-openfort-cache",
+/** The selected app/deployment origin is not allowlisted → 401. */
+"app-env-allowlist",
+/** Sandboxed/headless browser with no Web Crypto. */
+"no-secure-context",
+/** One upstream answered HTTP 429 or JSON-RPC -32005. Retryable. */
+"rate-limited",
+/** No answer inside the budget. Retryable. */
+"timeout",
+/** HTTP 5xx, a connection failure, or a malformed envelope. Retryable. */
+"upstream-down",
+/** Simulation or execution reverted; `chain.revert` names it when decodable. */
+"revert",
+/** A balance pre-flight shortfall or a decoded `ERC20InsufficientBalance`. */
+"insufficient-balance",
+/** A decoded `ERC20InsufficientAllowance`. */
+"insufficient-allowance",
+/** The bundler's validation refused the operation (AA2x/AA3x); its text is carried. */
+"rejected",
+/** The gateway refused the token. */
+"unauthorized",
+/** No cause could be determined. */
+"unknown"];
 type FailureMode = (typeof FAILURE_MODES)[number];
 /** Who answered. `alto` is the bundler; `gateway` is the AA gateway's own logic. */
 declare const CHAIN_UPSTREAMS: readonly ["alchemy", "infura", "public", "alto", "gateway"];
@@ -38,7 +63,7 @@ type ChainCause = {
 };
 //#endregion
 //#region ../errors/src/errors.d.ts
-declare const CAPXUL_ERROR_CODES: readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"];
+declare const CAPXUL_ERROR_CODES: readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"];
 type CapxulErrorCode = (typeof CAPXUL_ERROR_CODES)[number];
 /**
  * The one failure representation carried by domain state, actor work, and
@@ -88,10 +113,29 @@ declare const Errors: {
   readonly smartAccountMissing: (authUserId: string) => CapxulError;
   readonly playerNotFound: (playerId?: string) => CapxulError;
   readonly accountNotFound: (accountId?: string) => CapxulError;
+  /**
+   * The Safe at this email's address is deployed and its owner is neither the
+   * Capxul bootstrap owner nor the caller's signer. The claim
+   * `swapOwner(bootstrap → signer)` cannot succeed: only the on-chain owner
+   * can hand the account over. Read from `getOwners()` before any
+   * UserOperation is built (2026-09-02), so no simulation and no retry.
+   */
+  readonly accountClaimedByOtherSigner: (details: {
+    readonly safeAddress: string;
+    readonly onChainOwner: string;
+    /** A bounded sample of the `getOwners()` answer, for a Safe that is not single-owner. */
+    readonly owners?: readonly string[];
+    /** The full size of that answer, when the sample is shorter. */
+    readonly ownerCount?: number;
+    readonly expectedOwner: string;
+    readonly signerAddress: string;
+  }) => CapxulError;
   readonly providerError: (provider: string, operation: string, cause: unknown, opts?: {
     readonly failure_mode?: FailureMode;
-    readonly httpStatus?: number; /** Extra evidence for the operator (response body, edge error code). */
-    readonly details?: Readonly<Record<string, unknown>>; /** The structured chain-path cause; sets `mode` and `details.failure_mode` too. */
+    readonly httpStatus?: number;
+    /** Extra evidence for the operator (response body, edge error code). */
+    readonly details?: Readonly<Record<string, unknown>>;
+    /** The structured chain-path cause; sets `mode` and `details.failure_mode` too. */
     readonly chain?: ChainCause;
   }) => CapxulError;
   readonly capabilityUnavailable: (provider: string, operation: string) => CapxulError;
@@ -310,7 +354,7 @@ interface CachedJwt {
   readonly token: JwtToken;
   readonly expEpochSeconds: EpochSeconds;
 }
-declare const AuthCacheError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P] }>) => import("effect/Cause").YieldableError & {
+declare const AuthCacheError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
   readonly _tag: "AuthCacheError";
 } & Readonly<A>;
 declare class AuthCacheError extends AuthCacheError_base<{

package/dist/testing/index.d.mts

@@ -1,6 +1,5 @@
-import { Jn as TelemetryGroupInput, Yn as TelemetryIdentifyInput, n as ObservationAdapter, or as IdentityTransition, qn as TelemetryEvent, u as CapxulClient } from "../observation-Desw1A8U.mjs";
+import { Jn as TelemetryGroupInput, Yn as TelemetryIdentifyInput, n as ObservationAdapter, or as IdentityTransition, qn as TelemetryEvent, u as CapxulClient } from "../observation-YhuU8yQX.mjs";
 import { Effect, Layer } from "effect";
-
 //#region src/testing/telemetry/RecordingTelemetryAdapter.d.ts
 type RecordingTelemetryOperation = {
   readonly type: "emit";

package/dist/testing/index.mjs

@@ -1,5 +1,5 @@
-import { $ as deriveCapxulSafeAddress, P as fromWei, b as authClientPortFromPromiseAdapter, c as smartAccountErrorFromCapxul, d as wireChainId, h as convexCallErrorFromCapxul, o as redactTelemetryEvent, p as identityErrorFromCapxul, t as assembleCapxulClient, u as accountReadErrorFromCapxul, w as toWei, y as bootstrapErrorFromCapxul } from "../create-capxul-client-C_MxJ8mV.mjs";
-import { B as Errors, C as toDurationMs, D as toJwtToken, E as toEpochSeconds, F as toSessionToken, N as toPublishableKey, O as toKycTier, R as CapxulError, T as toEpochMs, _ as toAppId, b as toChainId, g as toAllowedOrigin, h as toAddress, m as toAccountId, t as InMemoryAuthCacheAdapter, v as toAuthUserId, w as toEmail, x as toCountryCode } from "../InMemoryAuthCacheAdapter-VZBv1fOH.mjs";
+import { $ as deriveCapxulSafeAddress, P as fromWei, b as authClientPortFromPromiseAdapter, c as smartAccountErrorFromCapxul, d as wireChainId, h as convexCallErrorFromCapxul, o as redactTelemetryEvent, p as identityErrorFromCapxul, t as assembleCapxulClient, u as accountReadErrorFromCapxul, w as toWei, y as bootstrapErrorFromCapxul } from "../create-capxul-client-YSN2yN8m.mjs";
+import { B as Errors, C as toDurationMs, D as toJwtToken, E as toEpochSeconds, F as toSessionToken, N as toPublishableKey, O as toKycTier, R as CapxulError, T as toEpochMs, _ as toAppId, b as toChainId, g as toAllowedOrigin, h as toAddress, m as toAccountId, t as InMemoryAuthCacheAdapter, v as toAuthUserId, w as toEmail, x as toCountryCode } from "../InMemoryAuthCacheAdapter-FptQ2p7C.mjs";
 import { keccak256 } from "viem";
 import { Effect, Result, Semaphore } from "effect";
 import { getFunctionName } from "convex/server";
@@ -155,9 +155,9 @@ var ManualClockUnderTest = class {
 };
 //#endregion
 //#region src/testing/auth-client/InMemoryAuthClientAdapter.ts
-const DEFAULT_OTP_TTL_MS = toDurationMs(300 * 1e3);
-const DEFAULT_SESSION_TTL_MS = toDurationMs(1440 * 60 * 1e3);
-const DEFAULT_JWT_TTL_MS = toDurationMs(900 * 1e3);
+const DEFAULT_OTP_TTL_MS = toDurationMs(3e5);
+const DEFAULT_SESSION_TTL_MS = toDurationMs(864e5);
+const DEFAULT_JWT_TTL_MS = toDurationMs(9e5);
 /**
 * Hermetic OTP + session state machine implementing `AuthClientPort`. Wires
 * through `AuthCachePort` for persistence (clause A11) and `ClockPort`
@@ -608,7 +608,7 @@ function cloneProfileOrNull(profile) {
 }
 //#endregion
 //#region src/testing/smart-account/smart-account-derivation.ts
-const SUPPORTED_CHAIN_IDS = new Set([84532, 8453]);
+const SUPPORTED_CHAIN_IDS = /* @__PURE__ */ new Set([84532, 8453]);
 toAddress("0xa6b71e26c5e0845f74c812102ca7114b6a896ab2");
 keccak256("0x");
 function isSupportedSmartAccountChain(chainId) {
@@ -870,18 +870,19 @@ function createCapxulTestClient(options = {}) {
 	});
 	const identity = new InMemoryIdentityAdapter({ clock });
 	const telemetry = new RecordingTelemetryAdapter();
+	const ports = {
+		authClient: authClientPortFromPromiseAdapter(authClient),
+		authCache,
+		identity,
+		smartAccount: new InMemorySmartAccountAdapter({ clock }),
+		accountRead: new InMemoryAccountReadAdapter({ rawBalance: "0" }),
+		bootstrap: new BootstrapStubAdapter({ script: { resolutions: /* @__PURE__ */ new Map([[`${toPublishableKey("cap_pk_test_0123456789ABCDEFGHJKMNPQRSTVWXYZ")}::${toAllowedOrigin("https://example.test")}`, TEST_BOOTSTRAP]]) } }),
+		clock,
+		telemetry,
+		convexCall: new ConvexCallStubAdapter({ script: {} })
+	};
 	const client = assembleCapxulClient({
-		ports: {
-			authClient: authClientPortFromPromiseAdapter(authClient),
-			authCache,
-			identity,
-			smartAccount: new InMemorySmartAccountAdapter({ clock }),
-			accountRead: new InMemoryAccountReadAdapter({ rawBalance: "0" }),
-			bootstrap: new BootstrapStubAdapter({ script: { resolutions: new Map([[`${toPublishableKey("cap_pk_test_0123456789ABCDEFGHJKMNPQRSTVWXYZ")}::${toAllowedOrigin("https://example.test")}`, TEST_BOOTSTRAP]]) } }),
-			clock,
-			telemetry,
-			convexCall: new ConvexCallStubAdapter({ script: {} })
-		},
+		ports,
 		bootstrap: TEST_BOOTSTRAP,
 		authCache,
 		requirement: options.requirement ?? "none",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/sdk",
-  "version": "2.6.1",
+  "version": "2.8.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Xelmar-tech/infrastructure.git",
@@ -39,24 +39,25 @@
   "devDependencies": {
     "@effect/vitest": "4.0.0-beta.105",
     "@typescript/native": "npm:typescript@7.0.2",
-    "@vitest/coverage-v8": "4.1.7",
+    "@vitest/coverage-v8": "4.1.11",
     "fast-check": "^3.23.2",
     "permissionless": "0.3.4",
     "posthog-js": "^1.418.10",
     "typescript": "npm:@typescript/typescript6@6.0.2",
-    "vite-plus": "0.1.23",
-    "vitest": "npm:@voidzero-dev/vite-plus-test@0.1.23",
-    "@capxul/config": "0.2.1",
+    "vite": "npm:@voidzero-dev/vite-plus-core@0.3.0",
+    "vite-plus": "0.3.0",
+    "vitest": "4.1.11",
+    "@capxul/types": "0.2.1",
     "@capxul/errors": "0.0.2",
-    "@capxul/typescript-config": "0.0.0",
     "@capxul/wire": "0.5.1",
-    "@capxul/observability": "2.6.1",
-    "@capxul/types": "0.2.1"
+    "@capxul/typescript-config": "0.0.0",
+    "@capxul/observability": "2.8.0",
+    "@capxul/config": "0.2.1"
   },
   "_permissionlessPinReason": "permissionless.toSafeSmartAccount is pinned to 0.3.4 for live Safe deployment E2E. Counterfactual address fixtures captured 2026-05-17 in packages/backend/convex/_shared/__tests__/counterfactual.test.ts and packages/config/tests/safe.test.ts must be re-verified before upgrading.",
   "scripts": {
     "check-types": "vp exec ../../node_modules/@typescript/native/bin/tsc -p tsconfig.json --noEmit",
-    "lint": "vp exec oxlint -c ../../.oxlintrc.json . --deny-warnings",
+    "lint": "vp lint -c ../../.oxlintrc.json . --deny-warnings",
     "build": "vp pack",
     "_vp-tasks-allowed": "vp-allowed: `test` + `test:coverage` are vp tasks in vite.config.ts so vitest self-writes don't bust cache (#205). `test:coverage:full` keeps the script form because it composes 5 reporters at invocation time.",
     "test:coverage:full": "CAPXUL_FAST_CHECK_NUM_RUNS=50 vp test run --coverage --coverage.reporter=text --coverage.reporter=json-summary --coverage.reporter=json --coverage.reporter=html --coverage.reporter=clover",