@capxul/sdk 2.7.0 → 2.8.2

package/dist/node/index.d.mts

@@ -1,4 +1,4 @@
-import { O as AuthSession, _ as AuthCacheError, b as CachedJwt, n as CapxulSigner, v as AuthCachePort, y as AuthCachePortTag } from "../signer-BMRxwX13.mjs";
+import { O as AuthSession, _ as AuthCacheError, b as CachedJwt, n as CapxulSigner, v as AuthCachePort, y as AuthCachePortTag } from "../signer-BdDgF200.mjs";
 import { Hex } from "viem";
 import { Effect, FileSystem, Layer, Path } from "effect";
 //#region src/adapters/auth-cache/FileSystemAuthCacheAdapter.d.ts

package/dist/node/index.mjs

@@ -1,4 +1,4 @@
-import { a as AuthCacheError, h as toAddress, i as parseCachedJwt, n as BrowserAuthCacheAdapter, o as AuthCachePortTag, r as parseAuthSession, t as InMemoryAuthCacheAdapter } from "../InMemoryAuthCacheAdapter-B6PHyzCN.mjs";
+import { a as AuthCacheError, h as toAddress, i as parseCachedJwt, n as BrowserAuthCacheAdapter, o as AuthCachePortTag, r as parseAuthSession, t as InMemoryAuthCacheAdapter } from "../InMemoryAuthCacheAdapter-BrEN-men.mjs";
 import { Effect, FileSystem, Layer, Path } from "effect";
 import { privateKeyToAccount } from "viem/accounts";
 import * as os from "node:os";

package/dist/{observation-BMW_idMZ.d.mts → observation-D-oCDlMS.d.mts}

@@ -1,4 +1,4 @@
-import { $ as WeiAmount, A as BlockNumber, B as OrgId, C as Address$1, D as AppId, E as AnonymousDistinctId, F as DocumentHash, G as PermissionAssignmentId, H as PaymentCommandId, I as DurationMs, J as PublishableKey, K as PermissionId, L as Email, M as ChainId, N as CountryCode, O as AuthSession, P as CurrencyCode, Q as TxHash, R as EpochMs, T as AllowedOrigin, U as PayrollGroupId, V as PartyId, W as PayrollRunId, X as SessionToken, Y as RoleKey, Z as SmartAccount, a as SignerStatusStore, at as CapxulErrorDetails, b as CachedJwt, c as AccountProviderSource, g as SmartAccount$1, h as Session$1, it as CapxulErrorCode, j as BudgetId, k as AuthUserId, l as AccountRequirement, m as Profile$1, n as CapxulSigner, p as CapxulResult, pt as FailureMode, q as Profile, rt as CapxulError, st as Failure, v as AuthCachePort, w as AllowanceKey, x as Account$1, z as Money } from "./signer-BMRxwX13.mjs";
+import { $ as WeiAmount, A as BlockNumber, B as OrgId, C as Address$1, D as AppId, E as AnonymousDistinctId, F as DocumentHash, G as PermissionAssignmentId, H as PaymentCommandId, I as DurationMs, J as PublishableKey, K as PermissionId, L as Email, M as ChainId, N as CountryCode, O as AuthSession, P as CurrencyCode, Q as TxHash, R as EpochMs, T as AllowedOrigin, U as PayrollGroupId, V as PartyId, W as PayrollRunId, X as SessionToken, Y as RoleKey, Z as SmartAccount, a as SignerStatusStore, at as CapxulErrorDetails, b as CachedJwt, c as AccountProviderSource, g as SmartAccount$1, h as Session$1, it as CapxulErrorCode, j as BudgetId, k as AuthUserId, l as AccountRequirement, m as Profile$1, n as CapxulSigner, p as CapxulResult, pt as FailureMode, q as Profile, rt as CapxulError, st as Failure, v as AuthCachePort, w as AllowanceKey, x as Account$1, z as Money } from "./signer-BdDgF200.mjs";
 import { Address, Hex } from "viem";
 import { Context, Effect, Layer, Schema, Scope, Tracer } from "effect";
 import { FunctionReference } from "convex/server";
@@ -719,6 +719,20 @@ type Snapshot<T, E = CapxulError> = {
   readonly status: "error";
   readonly error: E;
 };
+type ConvexTransportFailure = {
+  readonly kind: "connection-lost-in-flight";
+  readonly connection_id: string;
+  readonly start_connection_count: number;
+  readonly connection_count: number;
+  readonly connection_retries?: number;
+  readonly close_code?: number;
+  readonly close_was_clean?: boolean;
+  readonly close_reason_present?: boolean;
+  readonly document_visibility?: string;
+  readonly navigator_online?: boolean;
+  readonly last_browser_event?: "visibility-visible" | "visibility-hidden" | "pagehide" | "pageshow" | "online" | "offline";
+  readonly ms_since_browser_event?: number;
+};
 declare const ConvexCallError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
   readonly _tag: "ConvexCallError";
 } & Readonly<A>;
@@ -728,6 +742,7 @@ declare class ConvexCallError extends ConvexCallError_base<{
   readonly publicError: CapxulError;
   readonly cause: unknown;
   readonly details?: CapxulErrorDetails;
+  readonly transport?: ConvexTransportFailure;
 }> {}
 interface ConvexCallPort {
   query<TArgs extends Record<string, unknown>, TOutput>(fn: FunctionReference<"query", "public", TArgs, TOutput>, args: TArgs): Effect.Effect<TOutput, ConvexCallError>;
@@ -2776,16 +2791,30 @@ interface SdkFailureObservation {
 /**
  * The PII-safe subset of `CapxulError.details`, already in PostHog property
  * shape. `provider` + `provider_operation` name the failing dependency
- * (`convex bootstrap`, `openfort configure`), `failure_mode` / `reason` are
- * enumerated codes, `http_status` is the upstream status. Anything else on
+ * (`convex bootstrap`, `openfort configure`). `provider_error_source` names
+ * the owner of an allow-listed `provider_error_code`. `failure_mode` / `reason`
+ * are enumerated codes. `http_status` is the upstream status. Anything else on
  * `details` (ids, field names, free text) is dropped at the boundary.
  */
 interface SdkFailureDetail {
   readonly provider?: string;
   readonly provider_operation?: string;
+  readonly provider_error_source?: string;
+  readonly provider_error_code?: string;
+  readonly target_host?: string;
   readonly failure_mode?: string;
   readonly reason?: string;
   readonly http_status?: number;
+  readonly connection_id?: string;
+  readonly connection_count?: number;
+  readonly connection_retries?: number;
+  readonly close_code?: number;
+  readonly close_was_clean?: boolean;
+  readonly close_reason_present?: boolean;
+  readonly document_visibility?: string;
+  readonly navigator_online?: boolean;
+  readonly last_browser_event?: string;
+  readonly ms_since_browser_event?: number;
   /** ADR-0023 R7: the chain cause, flat, same keys as every other producer. */
   readonly chain_upstream?: string;
   readonly chain_method?: string;

package/dist/{signer-BMRxwX13.d.mts → signer-BdDgF200.d.mts}

@@ -17,6 +17,8 @@ declare const FAILURE_MODES: readonly [
 "app-env-allowlist",
 /** Sandboxed/headless browser with no Web Crypto. */
 "no-secure-context",
+/** The embedded wallet lost its configured signer state. */
+"signer-not-ready",
 /** One upstream answered HTTP 429 or JSON-RPC -32005. Retryable. */
 "rate-limited",
 /** No answer inside the budget. Retryable. */
@@ -63,7 +65,7 @@ type ChainCause = {
 };
 //#endregion
 //#region ../errors/src/errors.d.ts
-declare const CAPXUL_ERROR_CODES: readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"];
+declare const CAPXUL_ERROR_CODES: readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"];
 type CapxulErrorCode = (typeof CAPXUL_ERROR_CODES)[number];
 /**
  * The one failure representation carried by domain state, actor work, and
@@ -104,6 +106,22 @@ declare class CapxulError extends Error {
   constructor(code: CapxulErrorCode, message: string, options?: CapxulErrorOptions);
 }
 declare function isCapxulError(value: unknown): value is CapxulError;
+type NetworkErrorOptions = {
+  readonly provider?: string;
+  readonly target_host?: string;
+  readonly failure_mode?: FailureMode;
+  readonly reason?: "connection-lost-in-flight";
+  readonly connection_id?: string;
+  readonly connection_count?: number;
+  readonly connection_retries?: number;
+  readonly close_code?: number;
+  readonly close_was_clean?: boolean;
+  readonly close_reason_present?: boolean;
+  readonly document_visibility?: string;
+  readonly navigator_online?: boolean;
+  readonly last_browser_event?: string;
+  readonly ms_since_browser_event?: number;
+};
 declare const Errors: {
   readonly notAuthenticated: (message?: string, opts?: {
     readonly failure_mode?: FailureMode;
@@ -113,6 +131,23 @@ declare const Errors: {
   readonly smartAccountMissing: (authUserId: string) => CapxulError;
   readonly playerNotFound: (playerId?: string) => CapxulError;
   readonly accountNotFound: (accountId?: string) => CapxulError;
+  /**
+   * The Safe at this email's address is deployed and its owner is neither the
+   * Capxul bootstrap owner nor the caller's signer. The claim
+   * `swapOwner(bootstrap → signer)` cannot succeed: only the on-chain owner
+   * can hand the account over. Read from `getOwners()` before any
+   * UserOperation is built (2026-09-02), so no simulation and no retry.
+   */
+  readonly accountClaimedByOtherSigner: (details: {
+    readonly safeAddress: string;
+    readonly onChainOwner: string;
+    /** A bounded sample of the `getOwners()` answer, for a Safe that is not single-owner. */
+    readonly owners?: readonly string[];
+    /** The full size of that answer, when the sample is shorter. */
+    readonly ownerCount?: number;
+    readonly expectedOwner: string;
+    readonly signerAddress: string;
+  }) => CapxulError;
   readonly providerError: (provider: string, operation: string, cause: unknown, opts?: {
     readonly failure_mode?: FailureMode;
     readonly httpStatus?: number;
@@ -165,7 +200,7 @@ declare const Errors: {
     readonly retryAfterMs?: number;
     readonly resource?: string;
   }) => CapxulError;
-  readonly networkError: (operation: string, cause?: unknown) => CapxulError;
+  readonly networkError: (operation: string, cause?: unknown, opts?: NetworkErrorOptions) => CapxulError;
   readonly unknown: (cause?: unknown) => CapxulError;
   readonly otpExpired: (details?: {
     readonly email?: string;
@@ -176,6 +211,11 @@ declare const Errors: {
     readonly reason?: string;
     readonly cause?: unknown;
   }) => CapxulError;
+  readonly superseded: (details: {
+    readonly operation: string;
+    readonly reason: string;
+    readonly executionId?: string;
+  }) => CapxulError;
   readonly cancelled: (details?: {
     readonly operation?: string;
     readonly reason?: string;

package/dist/testing/index.d.mts

@@ -1,4 +1,4 @@
-import { Jn as TelemetryGroupInput, Yn as TelemetryIdentifyInput, n as ObservationAdapter, or as IdentityTransition, qn as TelemetryEvent, u as CapxulClient } from "../observation-BMW_idMZ.mjs";
+import { Jn as TelemetryGroupInput, Yn as TelemetryIdentifyInput, n as ObservationAdapter, or as IdentityTransition, qn as TelemetryEvent, u as CapxulClient } from "../observation-D-oCDlMS.mjs";
 import { Effect, Layer } from "effect";
 //#region src/testing/telemetry/RecordingTelemetryAdapter.d.ts
 type RecordingTelemetryOperation = {

package/dist/testing/index.mjs

@@ -1,5 +1,5 @@
-import { $ as deriveCapxulSafeAddress, P as fromWei, b as authClientPortFromPromiseAdapter, c as smartAccountErrorFromCapxul, d as wireChainId, h as convexCallErrorFromCapxul, o as redactTelemetryEvent, p as identityErrorFromCapxul, t as assembleCapxulClient, u as accountReadErrorFromCapxul, w as toWei, y as bootstrapErrorFromCapxul } from "../create-capxul-client-DNYuHQGS.mjs";
-import { B as Errors, C as toDurationMs, D as toJwtToken, E as toEpochSeconds, F as toSessionToken, N as toPublishableKey, O as toKycTier, R as CapxulError, T as toEpochMs, _ as toAppId, b as toChainId, g as toAllowedOrigin, h as toAddress, m as toAccountId, t as InMemoryAuthCacheAdapter, v as toAuthUserId, w as toEmail, x as toCountryCode } from "../InMemoryAuthCacheAdapter-B6PHyzCN.mjs";
+import { B as fromWei, E as toWei, S as authClientPortFromPromiseAdapter, _ as convexCallErrorFromCapxul, c as redactTelemetryEvent, ct as deriveCapxulSafeAddress, h as identityErrorFromCapxul, i as smartAccountErrorFromCapxul, o as accountReadErrorFromCapxul, p as wireChainId, t as assembleCapxulClient, x as bootstrapErrorFromCapxul } from "../create-capxul-client-BKJHefmA.mjs";
+import { B as Errors, C as toDurationMs, D as toJwtToken, E as toEpochSeconds, F as toSessionToken, N as toPublishableKey, O as toKycTier, R as CapxulError, T as toEpochMs, _ as toAppId, b as toChainId, g as toAllowedOrigin, h as toAddress, m as toAccountId, t as InMemoryAuthCacheAdapter, v as toAuthUserId, w as toEmail, x as toCountryCode } from "../InMemoryAuthCacheAdapter-BrEN-men.mjs";
 import { keccak256 } from "viem";
 import { Effect, Result, Semaphore } from "effect";
 import { getFunctionName } from "convex/server";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/sdk",
-  "version": "2.7.0",
+  "version": "2.8.2",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Xelmar-tech/infrastructure.git",
@@ -47,12 +47,12 @@
     "vite": "npm:@voidzero-dev/vite-plus-core@0.3.0",
     "vite-plus": "0.3.0",
     "vitest": "4.1.11",
-    "@capxul/config": "0.2.1",
-    "@capxul/wire": "0.5.1",
     "@capxul/errors": "0.0.2",
-    "@capxul/typescript-config": "0.0.0",
+    "@capxul/observability": "2.8.2",
     "@capxul/types": "0.2.1",
-    "@capxul/observability": "2.7.0"
+    "@capxul/config": "0.2.1",
+    "@capxul/wire": "0.5.1",
+    "@capxul/typescript-config": "0.0.0"
   },
   "_permissionlessPinReason": "permissionless.toSafeSmartAccount is pinned to 0.3.4 for live Safe deployment E2E. Counterfactual address fixtures captured 2026-05-17 in packages/backend/convex/_shared/__tests__/counterfactual.test.ts and packages/config/tests/safe.test.ts must be re-verified before upgrading.",
   "scripts": {