@capxul/sdk 2.7.0 → 2.8.2

package/dist/{InMemoryAuthCacheAdapter-B6PHyzCN.mjs → InMemoryAuthCacheAdapter-BrEN-men.mjs}

@@ -12,6 +12,7 @@ const FAILURE_MODES = [
 	"stale-openfort-cache",
 	"app-env-allowlist",
 	"no-secure-context",
+	"signer-not-ready",
 	"rate-limited",
 	"timeout",
 	"upstream-down",
@@ -121,6 +122,58 @@ function chainCauseProperties(chain) {
 	};
 }
 /**
+* Safe (safe-contracts v1.4.1) revert codes. The contracts revert with these
+* short strings to save gas; the sentence lives in the Safe docs
+* (`docs/error_codes.md`). Every Safe on the Capxul rail is this version.
+*/
+const SAFE_REVERT_REASONS = {
+	GS000: "could not finish initialization",
+	GS001: "threshold needs to be defined",
+	GS010: "not enough gas to execute Safe transaction",
+	GS011: "could not pay gas costs with ether",
+	GS012: "could not pay gas costs with token",
+	GS013: "Safe transaction failed when gasPrice and safeTxGas were 0",
+	GS020: "signatures data too short",
+	GS021: "invalid contract signature location: inside static part",
+	GS022: "invalid contract signature location: length not present",
+	GS023: "invalid contract signature location: data not complete",
+	GS024: "invalid contract signature provided",
+	GS025: "hash has not been approved",
+	GS026: "invalid owner provided",
+	GS030: "only owners can approve a hash",
+	GS031: "method can only be called from this contract",
+	GS100: "modules have already been initialized",
+	GS101: "invalid module address provided",
+	GS102: "module has already been added",
+	GS103: "invalid prevModule, module pair provided",
+	GS104: "method can only be called from an enabled module",
+	GS105: "invalid starting point for fetching paginated modules",
+	GS106: "invalid page size for fetching paginated modules",
+	GS200: "owners have already been set up",
+	GS201: "threshold cannot exceed owner count",
+	GS202: "threshold needs to be greater than 0",
+	GS203: "invalid owner address provided",
+	GS204: "address is already an owner",
+	GS205: "invalid prevOwner, owner pair provided",
+	GS300: "guard does not implement IERC165",
+	GS400: "fallback handler cannot be set to self"
+};
+/**
+* `Error(GS205: invalid prevOwner, owner pair provided)`, or the bare selector
+* when the name is unknown. Safe codes travel only as the `message` of an
+* `Error(string)` revert, so only that argument is expanded from
+* {@link SAFE_REVERT_REASONS}; every other argument reads `name=value`, even
+* when a custom error's field happens to hold a `GS` string.
+*/
+function revertSummaryText(revert) {
+	if (revert.name === null) return revert.selector === "0x" ? "empty revert" : `unknown selector ${revert.selector}`;
+	const args = Object.entries(revert.args).map(([name, value]) => {
+		const reason = revert.name === "Error" && name === "message" ? SAFE_REVERT_REASONS[value] : void 0;
+		return reason === void 0 ? `${name}=${value}` : `${value}: ${reason}`;
+	}).join(", ");
+	return `${revert.name}(${args})`;
+}
+/**
 * The error-tracking fingerprint for a failure: the code, the one-word cause,
 * and the operation. PostHog groups `$exception` rows by this value, so one
 * issue is one cause at one operation instead of every provider failure in
@@ -138,6 +191,7 @@ const CAPXUL_ERROR_CODES = [
 	"SMART_ACCOUNT_MISSING",
 	"PLAYER_NOT_FOUND",
 	"ACCOUNT_NOT_FOUND",
+	"ACCOUNT_CLAIMED_BY_OTHER_SIGNER",
 	"PROVIDER_ERROR",
 	"CAPABILITY_UNAVAILABLE",
 	"INVALID_INPUT",
@@ -172,6 +226,7 @@ const EXPECTED_OPERATION_OUTCOMES = /* @__PURE__ */ new Set([
 	"INVALID_INPUT",
 	"NOT_AUTHENTICATED",
 	"SMART_ACCOUNT_MISSING",
+	"ACCOUNT_CLAIMED_BY_OTHER_SIGNER",
 	"CANCELLED",
 	"SIGNER_REJECTED",
 	"VERIFICATION_REQUIRED",
@@ -230,6 +285,46 @@ function compactErrorOptions(options) {
 	if (options.chain !== void 0) result.chain = options.chain;
 	return result;
 }
+const NETWORK_DETAIL_LABEL_RE = /^[A-Za-z][A-Za-z0-9_.-]{0,63}$/u;
+const NETWORK_TARGET_HOST_RE = /^[A-Za-z0-9.[\]:-]{1,253}$/u;
+const DOCUMENT_VISIBILITY = /* @__PURE__ */ new Set(["hidden", "visible"]);
+const BROWSER_LIFECYCLE_EVENTS = /* @__PURE__ */ new Set([
+	"visibility-visible",
+	"visibility-hidden",
+	"pagehide",
+	"pageshow",
+	"online",
+	"offline"
+]);
+function networkErrorDetails(operation, options) {
+	const details = { operation };
+	if (options === void 0) return details;
+	if (typeof options.provider === "string" && NETWORK_DETAIL_LABEL_RE.test(options.provider)) details.provider = options.provider;
+	if (typeof options.target_host === "string" && NETWORK_TARGET_HOST_RE.test(options.target_host)) details.target_host = options.target_host;
+	if (isFailureMode(options.failure_mode)) details.failure_mode = options.failure_mode;
+	if (options.reason === "connection-lost-in-flight") details.reason = options.reason;
+	if (typeof options.connection_id === "string" && NETWORK_DETAIL_LABEL_RE.test(options.connection_id)) details.connection_id = options.connection_id;
+	for (const key of [
+		"connection_count",
+		"connection_retries",
+		"close_code",
+		"ms_since_browser_event"
+	]) {
+		const value = options[key];
+		if (typeof value === "number" && Number.isSafeInteger(value) && value >= 0 && (key !== "close_code" || value <= 4999)) details[key] = value;
+	}
+	for (const key of [
+		"close_was_clean",
+		"close_reason_present",
+		"navigator_online"
+	]) {
+		const value = options[key];
+		if (typeof value === "boolean") details[key] = value;
+	}
+	if (DOCUMENT_VISIBILITY.has(options.document_visibility ?? "")) details.document_visibility = options.document_visibility;
+	if (BROWSER_LIFECYCLE_EVENTS.has(options.last_browser_event ?? "")) details.last_browser_event = options.last_browser_event;
+	return details;
+}
 const Errors = {
 	notAuthenticated: (message, opts) => new CapxulError("NOT_AUTHENTICATED", message ?? "Not authenticated", opts?.failure_mode ? { details: { failure_mode: opts.failure_mode } } : void 0),
 	emailDeliveryFailed: (detail) => new CapxulError("EMAIL_DELIVERY_FAILED", "Failed to send email", { details: { detail } }),
@@ -237,6 +332,14 @@ const Errors = {
 	smartAccountMissing: (authUserId) => new CapxulError("SMART_ACCOUNT_MISSING", "Smart account not provisioned", { details: { authUserId } }),
 	playerNotFound: (playerId) => new CapxulError("PLAYER_NOT_FOUND", playerId ? `Openfort player ${playerId} not found` : "Openfort player not found", playerId === void 0 ? void 0 : { details: { playerId } }),
 	accountNotFound: (accountId) => new CapxulError("ACCOUNT_NOT_FOUND", accountId ? `Openfort account ${accountId} not found` : "Openfort account not found", accountId === void 0 ? void 0 : { details: { accountId } }),
+	/**
+	* The Safe at this email's address is deployed and its owner is neither the
+	* Capxul bootstrap owner nor the caller's signer. The claim
+	* `swapOwner(bootstrap → signer)` cannot succeed: only the on-chain owner
+	* can hand the account over. Read from `getOwners()` before any
+	* UserOperation is built (2026-09-02), so no simulation and no retry.
+	*/
+	accountClaimedByOtherSigner: (details) => new CapxulError("ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "This account is already owned by a different signer.", { details }),
 	providerError: (provider, operation, cause, opts) => {
 		const details = {
 			...opts?.details,
@@ -320,10 +423,14 @@ const Errors = {
 		}
 	}),
 	rateLimited: (details) => new CapxulError("RATE_LIMITED", "Rate limit exceeded", details === void 0 ? void 0 : { details: { ...details } }),
-	networkError: (operation, cause) => new CapxulError("NETWORK_ERROR", `Network error during ${operation}`, {
-		cause,
-		details: { operation }
-	}),
+	networkError: (operation, cause, opts) => {
+		const mode = isFailureMode(opts?.failure_mode) ? opts.failure_mode : void 0;
+		return new CapxulError("NETWORK_ERROR", `Network error during ${operation}`, {
+			cause,
+			details: networkErrorDetails(operation, opts),
+			...mode === void 0 ? {} : { mode }
+		});
+	},
 	unknown: (cause) => new CapxulError("UNKNOWN", "Unknown error", { cause }),
 	otpExpired: (details) => new CapxulError("OTP_EXPIRED", "Verification code has expired. Request a new one.", details === void 0 ? void 0 : { details: { ...details } }),
 	signerRejected: (details) => new CapxulError("SIGNER_REJECTED", "Signer rejected the request.", {
@@ -333,6 +440,11 @@ const Errors = {
 			reason: details.reason
 		}
 	}),
+	superseded: (details) => new CapxulError("SUPERSEDED", "Operation was superseded.", { details: {
+		operation: details.operation,
+		reason: details.reason,
+		...details.executionId === void 0 ? {} : { executionId: details.executionId }
+	} }),
 	cancelled: (details) => new CapxulError("CANCELLED", "Operation was cancelled.", details === void 0 ? void 0 : { details: { ...details } }),
 	/**
 	* Method called from a flow state where its precondition fails (TA16). The
@@ -648,4 +760,4 @@ Layer.effect(AuthCachePortTag, Effect.sync(() => new InMemoryAuthCacheAdapter())
 	cause
 }))));
 //#endregion
-export { toPartyId as A, Errors as B, toDurationMs as C, toJwtToken as D, toEpochSeconds as E, toSessionToken as F, failureFingerprint as G, CHAIN_UPSTREAMS as H, decodeConvexError as I, isFailureMode as K, CAPXUL_ERROR_CODES as L, toPayrollRunId as M, toPublishableKey as N, toKycTier as O, toRoleKey as P, CapxulError as R, toCurrencyCode as S, toEpochMs as T, FAILURE_MODES as U, isCapxulError as V, chainCauseProperties as W, toAppId as _, AuthCacheError as a, toChainId as b, BYTES32_RE as c, WEI_RE as d, ZERO_BYTES32 as f, toAllowedOrigin as g, toAddress as h, parseCachedJwt as i, toPayrollGroupId as j, toOrgId as k, EVM_ADDRESS_RE as l, toAccountId as m, BrowserAuthCacheAdapter as n, AuthCachePortTag as o, currencySymbolFor as p, parseAuthSession as r, APP_ID_RE as s, InMemoryAuthCacheAdapter as t, SUPPORTED_CURRENCY_CODES as u, toAuthUserId as v, toEmail as w, toCountryCode as x, toBudgetId as y, EXPECTED_OPERATION_OUTCOMES as z };
+export { toPartyId as A, Errors as B, toDurationMs as C, toJwtToken as D, toEpochSeconds as E, toSessionToken as F, decodeChainCause as G, CHAIN_UPSTREAMS as H, decodeConvexError as I, revertSummaryText as J, failureFingerprint as K, CAPXUL_ERROR_CODES as L, toPayrollRunId as M, toPublishableKey as N, toKycTier as O, toRoleKey as P, CapxulError as R, toCurrencyCode as S, toEpochMs as T, FAILURE_MODES as U, isCapxulError as V, chainCauseProperties as W, toAppId as _, AuthCacheError as a, toChainId as b, BYTES32_RE as c, WEI_RE as d, ZERO_BYTES32 as f, toAllowedOrigin as g, toAddress as h, parseCachedJwt as i, toPayrollGroupId as j, toOrgId as k, EVM_ADDRESS_RE as l, toAccountId as m, BrowserAuthCacheAdapter as n, AuthCachePortTag as o, currencySymbolFor as p, isFailureMode as q, parseAuthSession as r, APP_ID_RE as s, InMemoryAuthCacheAdapter as t, SUPPORTED_CURRENCY_CODES as u, toAuthUserId as v, toEmail as w, toCountryCode as x, toBudgetId as y, EXPECTED_OPERATION_OUTCOMES as z };