@capxul/sdk 2.8.0 → 3.0.0

package/dist/{create-capxul-client-YSN2yN8m.mjs → create-capxul-client-DwINzpXZ.mjs}

@@ -1,5 +1,5 @@
-import { A as toPartyId, B as Errors, G as failureFingerprint, H as CHAIN_UPSTREAMS, K as isFailureMode, M as toPayrollRunId, P as toRoleKey, R as CapxulError, S as toCurrencyCode, U as FAILURE_MODES$1, V as isCapxulError, W as chainCauseProperties, b as toChainId, c as BYTES32_RE, d as WEI_RE, f as ZERO_BYTES32, h as toAddress, j as toPayrollGroupId, k as toOrgId, l as EVM_ADDRESS_RE$1, m as toAccountId, n as BrowserAuthCacheAdapter, q as revertSummaryText, s as APP_ID_RE, t as InMemoryAuthCacheAdapter, u as SUPPORTED_CURRENCY_CODES, v as toAuthUserId, w as toEmail, x as toCountryCode, y as toBudgetId, z as EXPECTED_OPERATION_OUTCOMES } from "./InMemoryAuthCacheAdapter-FptQ2p7C.mjs";
-import { concat, encodeAbiParameters, encodeFunctionData, encodePacked, formatUnits, getContractAddress, keccak256, padHex, parseUnits, recoverAddress, stringToHex, toBytes, toEventSelector, toFunctionSelector, toFunctionSignature } from "viem";
+import { $ as CHAIN_UPSTREAMS, A as toBudgetId, B as toOrgId, C as ZERO_BYTES32, E as toAddress, F as toEmail, G as toRoleKey, H as toPayrollGroupId, J as CAPXUL_ERROR_CODES, M as toCountryCode, N as toCurrencyCode, Q as isCapxulError, S as WEI_RE, T as toAccountId, U as toPayrollRunId, V as toPartyId, X as EXPECTED_OPERATION_OUTCOMES, Y as CapxulError, Z as Errors, _ as deriveCapxulSafeAddress, at as revertSummaryText, b as EVM_ADDRESS_RE$1, et as FAILURE_MODES$1, it as isFailureMode, j as toChainId, k as toAuthUserId, n as InMemoryAuthCacheAdapter, nt as decodeChainCause, p as orgRoleKeyForLabel, r as BrowserAuthCacheAdapter, rt as failureFingerprint, tt as chainCauseProperties, v as APP_ID_RE, x as SUPPORTED_CURRENCY_CODES, y as BYTES32_RE } from "./clock-0c5NM-TY.mjs";
+import { formatUnits, keccak256, parseUnits, recoverAddress, toBytes } from "viem";
 import { Context, Data, Deferred, Duration, Effect, Exit, Fiber, Layer, Queue, Ref, Result, Schema, SchemaGetter, Scope } from "effect";
 import { makeFunctionReference } from "convex/server";
 //#region src/domain/identity/model.ts
@@ -14,6 +14,7 @@ const DEFINITIVE_PROVIDER_MODES = /* @__PURE__ */ new Set([
 	"auth-origin-mismatch",
 	"app-env-allowlist",
 	"no-secure-context",
+	"signer-not-ready",
 	"revert",
 	"insufficient-balance",
 	"insufficient-allowance",
@@ -397,938 +398,6 @@ const isRestoring = (state) => {
 * it in #1521; this ticket ships the selector they move onto. */
 const isClaimed = (state) => state.phase === "authenticated" && state.account.at === "claimed";
 //#endregion
-//#region ../config/src/tokens.ts
-/** `TestUSDC` ("USDX") — Base Sepolia, 6 decimals, open `mint`. (Canon §1.) */
-const USDX_ADDRESS_BASE_SEPOLIA = "0xf09fcbb6df9f8f918e58f9c8ab15a76ade862b77";
-USDX_ADDRESS_BASE_SEPOLIA.toLowerCase();
-//#endregion
-//#region ../config/src/org-payments.ts
-/** Zodiac MultiSendCallOnly module on Base Sepolia. */
-const MULTI_SEND_CALL_ONLY = "0x9641d764fc13c8b624c04430c7356c1c7c8102e2";
-//#endregion
-//#region ../config/src/safe.ts
-const BASE_SEPOLIA_CHAIN_ID = 84532;
-const SAFE_PROXY_FACTORY = "0x4e1DCf7AD4e460CfD30791CCC4F9c8a4f820ec67";
-const SAFE_L2_SINGLETON = "0x29fcB43b46531BcA003ddC8FCB67FFE91900C762";
-const SAFE_MODULE_SETUP = "0x2dd68b007B46fBe91B9A7c3EDa5A7a1063cB5b47";
-const SAFE_4337_MODULE = "0x75cf11467937ce3F2f357CE24ffc3DBF8fD5c226";
-const MULTI_SEND = "0x38869bf66a61cF6bDB996A6aE40D5853Fd43B526";
-/**
-* The Capxul bootstrap owner — the sole `setup()` owner of every unclaimed
-* personal Safe under derivation v2. This address is part of the CREATE2
-* preimage of EVERY personal Safe address: treat it exactly like
-* `SAFE_PROXY_FACTORY` (changing it is a derivation-version event → v3).
-* The private key lives backend-only (`CAPXUL_BOOTSTRAP_OWNER_PRIVATE_KEY`)
-* and signs exactly one kind of operation: the claim userOp that deploys the
-* Safe and swaps this owner out for the user's signer (PRD #462). The earlier
-* ClaimGuard derivation-v3 placeholder (#461) is closed; future mainnet-scale
-* hardening should be filed against the current payments/claim architecture.
-*/
-const CAPXUL_BOOTSTRAP_OWNER = "0x425fca96f4a3e18fb80974e38096b5da460f2704";
-const SAFE_PROXY_CREATION_CODE = "0x608060405234801561001057600080fd5b506040516101e63803806101e68339818101604052602081101561003357600080fd5b8101908080519060200190929190505050600073ffffffffffffffffffffffffffffffffffffffff168173ffffffffffffffffffffffffffffffffffffffff1614156100ca576040517f08c379a00000000000000000000000000000000000000000000000000000000081526004018080602001828103825260228152602001806101c46022913960400191505060405180910390fd5b806000806101000a81548173ffffffffffffffffffffffffffffffffffffffff021916908373ffffffffffffffffffffffffffffffffffffffff1602179055505060ab806101196000396000f3fe608060405273ffffffffffffffffffffffffffffffffffffffff600054167fa619486e0000000000000000000000000000000000000000000000000000000060003514156050578060005260206000f35b3660008037600080366000845af43d6000803e60008114156070573d6000fd5b3d6000f3fea264697066735822122003d1488ee65e08fa41e58e888a9865554c535f2c77126a82cb4c0f917f31441364736f6c63430007060033496e76616c69642073696e676c65746f6e20616464726573732070726f7669646564";
-/**
-* Normalize an email for use as a Capxul Safe salt input.
-*
-* Trims surrounding whitespace and lowercases the address so that
-* `"  User+Demo@Example.COM  "` and `"user+demo@example.com"` derive
-* the same `safeAddress`. This is the canonical normalization rule —
-* any future change here would shift every existing user's Safe
-* address, so the rule is pinned by the fixture matrix in
-* `packages/config/tests/safe-address-conformance.test.ts`.
-*
-* @param email - The raw email address to normalize
-* @returns The trimmed, lowercased email
-*/
-function normalizeSafeSaltEmail(email) {
-	return email.trim().toLowerCase();
-}
-/**
-* Compute the deterministic Safe salt nonce for a `(namespace, email)`
-* pair. The salt nonce is the `bigint` reading of
-* `keccak256(namespace + ":" + normalizeSafeSaltEmail(email))`.
-*
-* Namespace defaults to `CAPXUL_SAFE_SALT_NAMESPACE`
-* (`"capxul:safe:email:v2"`) — the per-version Capxul scheme. Pass a
-* different namespace only for pinned pre-v2 artifacts
-* (`CAPXUL_SAFE_SALT_NAMESPACE_V1`, faucet Safe) or when bumping the scheme.
-*
-* @param input.email - The email to derive the salt nonce from
-* @param input.namespace - Optional namespace override (defaults to `CAPXUL_SAFE_SALT_NAMESPACE`)
-* @returns The Capxul-namespaced salt nonce as a `bigint`
-*/
-function computeCapxulSafeSaltNonce(input) {
-	const namespace = input.namespace ?? "capxul:safe:email:v2";
-	const normalizedEmail = normalizeSafeSaltEmail(input.email);
-	return BigInt(keccak256(toBytes(`${namespace}:${normalizedEmail}`)));
-}
-const ZERO_ADDRESS = "0x0000000000000000000000000000000000000000";
-const safeSetupAbi = [{
-	type: "function",
-	name: "setup",
-	stateMutability: "nonpayable",
-	inputs: [
-		{
-			name: "_owners",
-			type: "address[]"
-		},
-		{
-			name: "_threshold",
-			type: "uint256"
-		},
-		{
-			name: "to",
-			type: "address"
-		},
-		{
-			name: "data",
-			type: "bytes"
-		},
-		{
-			name: "fallbackHandler",
-			type: "address"
-		},
-		{
-			name: "paymentToken",
-			type: "address"
-		},
-		{
-			name: "payment",
-			type: "uint256"
-		},
-		{
-			name: "paymentReceiver",
-			type: "address"
-		}
-	],
-	outputs: []
-}];
-const enableModulesAbi = [{
-	type: "function",
-	name: "enableModules",
-	stateMutability: "nonpayable",
-	inputs: [{
-		name: "modules",
-		type: "address[]"
-	}],
-	outputs: []
-}];
-const multiSendAbi = [{
-	type: "function",
-	name: "multiSend",
-	stateMutability: "payable",
-	inputs: [{
-		name: "transactions",
-		type: "bytes"
-	}],
-	outputs: []
-}];
-function buildCapxulSafeInitializer(owner) {
-	const enableModulesCall = encodeFunctionData({
-		abi: enableModulesAbi,
-		functionName: "enableModules",
-		args: [[SAFE_4337_MODULE]]
-	});
-	const enableModulesByteLen = BigInt((enableModulesCall.length - 2) / 2);
-	const multiSendPayload = encodePacked([
-		"uint8",
-		"address",
-		"uint256",
-		"uint256",
-		"bytes"
-	], [
-		1,
-		SAFE_MODULE_SETUP,
-		0n,
-		enableModulesByteLen,
-		enableModulesCall
-	]);
-	const setupData = encodeFunctionData({
-		abi: multiSendAbi,
-		functionName: "multiSend",
-		args: [multiSendPayload]
-	});
-	return encodeFunctionData({
-		abi: safeSetupAbi,
-		functionName: "setup",
-		args: [
-			[owner],
-			1n,
-			MULTI_SEND,
-			setupData,
-			SAFE_4337_MODULE,
-			ZERO_ADDRESS,
-			0n,
-			ZERO_ADDRESS
-		]
-	});
-}
-const ADDRESS_REGEX = /^0x[0-9a-fA-F]{40}$/;
-function validateAndNormalizeAddress(field, value) {
-	const address = value.toLowerCase();
-	if (!ADDRESS_REGEX.test(address)) throw Errors.invalidInput(field, `must be 0x + 40 hex chars, got ${value}`);
-	return address;
-}
-/**
-* Pure derivation of the Capxul personal Safe address — **v2: email only**
-* (PRD #462). The Safe v1.4.1 (SafeL2) + 4337-module initializer's sole owner
-* is the fixed `CAPXUL_BOOTSTRAP_OWNER`, so the address is a pure function of
-* the (normalized) email and exists before any user signer does. The user's
-* signer is installed at claim time via `swapOwner` — signer rotation can
-* never move the address (org-domain rule D7, now system-wide).
-*
-* Returns the lowercased `0x` + 40 hex string (raw — no brand applied so this
-* function is callable from both `@capxul/config` consumers that don't have
-* `@capxul/types` available, and from packages that re-brand at their own
-* boundary).
-*
-* Algorithm: exactly mirrors `permissionless.toSafeSmartAccount({ version:
-* "1.4.1", safeSingletonAddress: SAFE_L2_SINGLETON, owners: [BOOTSTRAP] })`
-* + the Capxul-canonical module setup (delegatecall into
-* `SafeModuleSetup.enableModules([SAFE_4337_MODULE])` via the MultiSend lane
-* during proxy setup). The proxy creation code is pinned at
-* `SAFE_PROXY_CREATION_CODE`; the salt is Capxul-namespaced (v2) via
-* `computeCapxulSafeSaltNonce({ email })`.
-*
-* Canonical: SDK deployment adapters and
-* `packages/backend/convex/smartAccount/mutations.ts:provision` import this
-* function; the conformance test at
-* `packages/config/tests/safe-address-conformance.test.ts` pins the matrix.
-*/
-function deriveCapxulSafeAddress(input) {
-	return deriveCapxulSafeAddressForOwner({
-		ownerAddress: CAPXUL_BOOTSTRAP_OWNER,
-		email: input.email
-	});
-}
-/**
-* Owner-parametrized derivation core. Two callers only:
-* 1. `deriveCapxulSafeAddress` (canonical v2: owner = bootstrap, namespace v2);
-* 2. the backend faucet Safe (`testUsdcMint.ts`: owner = deployer EOA,
-*    namespace pinned to `CAPXUL_SAFE_SALT_NAMESPACE_V1` so its deployed
-*    address never moves).
-* Do NOT introduce new owner-parametrized lanes — per-user owners in the
-* derivation is exactly the v1 mistake v2 removes.
-*/
-function deriveCapxulSafeAddressForOwner(input) {
-	const initializer = buildCapxulSafeInitializer(validateAndNormalizeAddress("ownerAddress", input.ownerAddress));
-	const saltNonce = computeCapxulSafeSaltNonce(input.namespace === void 0 ? { email: input.email } : {
-		email: input.email,
-		namespace: input.namespace
-	});
-	const salt = keccak256(encodePacked(["bytes32", "uint256"], [keccak256(initializer), saltNonce]));
-	const deploymentCode = concat([SAFE_PROXY_CREATION_CODE, encodeAbiParameters([{ type: "uint256" }], [BigInt(SAFE_L2_SINGLETON)])]);
-	return getContractAddress({
-		opcode: "CREATE2",
-		from: SAFE_PROXY_FACTORY,
-		salt,
-		bytecodeHash: keccak256(deploymentCode)
-	}).toLowerCase();
-}
-/**
-* Normalize a raw email for binding id + Safe salt derivation.
-* Delegates to {@link normalizeSafeSaltEmail} so binding resolution and
-* `deriveCapxulSafeAddress` never drift apart.
-*/
-function normalizeBindingEmail(email) {
-	return normalizeSafeSaltEmail(email);
-}
-//#endregion
-//#region ../config/src/capxul-payments-v2.ts
-/** The exact compiled CapxulPaymentsV2 ABI. */
-const CAPXUL_PAYMENTS_V2_ABI = [
-	{
-		type: "function",
-		name: "cancel",
-		inputs: [{
-			name: "commitmentId",
-			type: "uint256",
-			internalType: "uint256"
-		}, {
-			name: "documentHash",
-			type: "bytes32",
-			internalType: "bytes32"
-		}],
-		outputs: [],
-		stateMutability: "nonpayable"
-	},
-	{
-		type: "function",
-		name: "claim",
-		inputs: [{
-			name: "commitmentId",
-			type: "uint256",
-			internalType: "uint256"
-		}],
-		outputs: [],
-		stateMutability: "nonpayable"
-	},
-	{
-		type: "function",
-		name: "claimableAmount",
-		inputs: [{
-			name: "commitmentId",
-			type: "uint256",
-			internalType: "uint256"
-		}],
-		outputs: [{
-			name: "",
-			type: "uint256",
-			internalType: "uint256"
-		}],
-		stateMutability: "view"
-	},
-	{
-		type: "function",
-		name: "commitments",
-		inputs: [{
-			name: "",
-			type: "uint256",
-			internalType: "uint256"
-		}],
-		outputs: [
-			{
-				name: "settlementId",
-				type: "bytes32",
-				internalType: "bytes32"
-			},
-			{
-				name: "creator",
-				type: "address",
-				internalType: "address"
-			},
-			{
-				name: "recipient",
-				type: "address",
-				internalType: "address"
-			},
-			{
-				name: "token",
-				type: "address",
-				internalType: "address"
-			},
-			{
-				name: "totalAmount",
-				type: "uint256",
-				internalType: "uint256"
-			},
-			{
-				name: "claimed",
-				type: "uint256",
-				internalType: "uint256"
-			},
-			{
-				name: "startTime",
-				type: "uint48",
-				internalType: "uint48"
-			},
-			{
-				name: "cliffTime",
-				type: "uint48",
-				internalType: "uint48"
-			},
-			{
-				name: "endTime",
-				type: "uint48",
-				internalType: "uint48"
-			},
-			{
-				name: "kind",
-				type: "uint16",
-				internalType: "uint16"
-			},
-			{
-				name: "documentHash",
-				type: "bytes32",
-				internalType: "bytes32"
-			},
-			{
-				name: "cancelled",
-				type: "bool",
-				internalType: "bool"
-			}
-		],
-		stateMutability: "view"
-	},
-	{
-		type: "function",
-		name: "createCommitment",
-		inputs: [{
-			name: "input",
-			type: "tuple",
-			internalType: "struct CapxulPaymentsV2.CommitmentInput",
-			components: [
-				{
-					name: "settlementId",
-					type: "bytes32",
-					internalType: "bytes32"
-				},
-				{
-					name: "recipient",
-					type: "address",
-					internalType: "address"
-				},
-				{
-					name: "token",
-					type: "address",
-					internalType: "address"
-				},
-				{
-					name: "totalAmount",
-					type: "uint256",
-					internalType: "uint256"
-				},
-				{
-					name: "startTime",
-					type: "uint48",
-					internalType: "uint48"
-				},
-				{
-					name: "cliffTime",
-					type: "uint48",
-					internalType: "uint48"
-				},
-				{
-					name: "endTime",
-					type: "uint48",
-					internalType: "uint48"
-				},
-				{
-					name: "kind",
-					type: "uint16",
-					internalType: "uint16"
-				},
-				{
-					name: "documentHash",
-					type: "bytes32",
-					internalType: "bytes32"
-				}
-			]
-		}],
-		outputs: [{
-			name: "commitmentId",
-			type: "uint256",
-			internalType: "uint256"
-		}],
-		stateMutability: "nonpayable"
-	},
-	{
-		type: "function",
-		name: "nextCommitmentId",
-		inputs: [],
-		outputs: [{
-			name: "",
-			type: "uint256",
-			internalType: "uint256"
-		}],
-		stateMutability: "view"
-	},
-	{
-		type: "function",
-		name: "redirect",
-		inputs: [
-			{
-				name: "commitmentId",
-				type: "uint256",
-				internalType: "uint256"
-			},
-			{
-				name: "recipient",
-				type: "address",
-				internalType: "address"
-			},
-			{
-				name: "documentHash",
-				type: "bytes32",
-				internalType: "bytes32"
-			}
-		],
-		outputs: [],
-		stateMutability: "nonpayable"
-	},
-	{
-		type: "function",
-		name: "send",
-		inputs: [{
-			name: "item",
-			type: "tuple",
-			internalType: "struct CapxulPaymentsV2.PaymentItem",
-			components: [
-				{
-					name: "settlementId",
-					type: "bytes32",
-					internalType: "bytes32"
-				},
-				{
-					name: "recipient",
-					type: "address",
-					internalType: "address"
-				},
-				{
-					name: "token",
-					type: "address",
-					internalType: "address"
-				},
-				{
-					name: "amount",
-					type: "uint256",
-					internalType: "uint256"
-				},
-				{
-					name: "kind",
-					type: "uint16",
-					internalType: "uint16"
-				},
-				{
-					name: "documentHash",
-					type: "bytes32",
-					internalType: "bytes32"
-				}
-			]
-		}],
-		outputs: [],
-		stateMutability: "nonpayable"
-	},
-	{
-		type: "function",
-		name: "sendBatch",
-		inputs: [{
-			name: "items",
-			type: "tuple[]",
-			internalType: "struct CapxulPaymentsV2.PaymentItem[]",
-			components: [
-				{
-					name: "settlementId",
-					type: "bytes32",
-					internalType: "bytes32"
-				},
-				{
-					name: "recipient",
-					type: "address",
-					internalType: "address"
-				},
-				{
-					name: "token",
-					type: "address",
-					internalType: "address"
-				},
-				{
-					name: "amount",
-					type: "uint256",
-					internalType: "uint256"
-				},
-				{
-					name: "kind",
-					type: "uint16",
-					internalType: "uint16"
-				},
-				{
-					name: "documentHash",
-					type: "bytes32",
-					internalType: "bytes32"
-				}
-			]
-		}],
-		outputs: [],
-		stateMutability: "nonpayable"
-	},
-	{
-		type: "function",
-		name: "vestedAmount",
-		inputs: [{
-			name: "commitmentId",
-			type: "uint256",
-			internalType: "uint256"
-		}],
-		outputs: [{
-			name: "",
-			type: "uint256",
-			internalType: "uint256"
-		}],
-		stateMutability: "view"
-	},
-	{
-		type: "event",
-		name: "CommitmentCancelled",
-		inputs: [
-			{
-				name: "commitmentId",
-				type: "uint256",
-				indexed: true,
-				internalType: "uint256"
-			},
-			{
-				name: "settlementId",
-				type: "bytes32",
-				indexed: true,
-				internalType: "bytes32"
-			},
-			{
-				name: "creator",
-				type: "address",
-				indexed: true,
-				internalType: "address"
-			},
-			{
-				name: "vestedUnclaimed",
-				type: "uint256",
-				indexed: false,
-				internalType: "uint256"
-			},
-			{
-				name: "unvestedReturned",
-				type: "uint256",
-				indexed: false,
-				internalType: "uint256"
-			},
-			{
-				name: "documentHash",
-				type: "bytes32",
-				indexed: false,
-				internalType: "bytes32"
-			}
-		],
-		anonymous: false
-	},
-	{
-		type: "event",
-		name: "CommitmentCreated",
-		inputs: [
-			{
-				name: "commitmentId",
-				type: "uint256",
-				indexed: true,
-				internalType: "uint256"
-			},
-			{
-				name: "settlementId",
-				type: "bytes32",
-				indexed: true,
-				internalType: "bytes32"
-			},
-			{
-				name: "creator",
-				type: "address",
-				indexed: true,
-				internalType: "address"
-			},
-			{
-				name: "recipient",
-				type: "address",
-				indexed: false,
-				internalType: "address"
-			},
-			{
-				name: "token",
-				type: "address",
-				indexed: false,
-				internalType: "address"
-			},
-			{
-				name: "totalAmount",
-				type: "uint256",
-				indexed: false,
-				internalType: "uint256"
-			},
-			{
-				name: "startTime",
-				type: "uint48",
-				indexed: false,
-				internalType: "uint48"
-			},
-			{
-				name: "cliffTime",
-				type: "uint48",
-				indexed: false,
-				internalType: "uint48"
-			},
-			{
-				name: "endTime",
-				type: "uint48",
-				indexed: false,
-				internalType: "uint48"
-			},
-			{
-				name: "kind",
-				type: "uint16",
-				indexed: false,
-				internalType: "uint16"
-			},
-			{
-				name: "documentHash",
-				type: "bytes32",
-				indexed: false,
-				internalType: "bytes32"
-			}
-		],
-		anonymous: false
-	},
-	{
-		type: "event",
-		name: "CommitmentRedirected",
-		inputs: [
-			{
-				name: "commitmentId",
-				type: "uint256",
-				indexed: true,
-				internalType: "uint256"
-			},
-			{
-				name: "settlementId",
-				type: "bytes32",
-				indexed: true,
-				internalType: "bytes32"
-			},
-			{
-				name: "oldRecipient",
-				type: "address",
-				indexed: true,
-				internalType: "address"
-			},
-			{
-				name: "newRecipient",
-				type: "address",
-				indexed: false,
-				internalType: "address"
-			},
-			{
-				name: "documentHash",
-				type: "bytes32",
-				indexed: false,
-				internalType: "bytes32"
-			}
-		],
-		anonymous: false
-	},
-	{
-		type: "event",
-		name: "FundsClaimed",
-		inputs: [
-			{
-				name: "commitmentId",
-				type: "uint256",
-				indexed: true,
-				internalType: "uint256"
-			},
-			{
-				name: "settlementId",
-				type: "bytes32",
-				indexed: true,
-				internalType: "bytes32"
-			},
-			{
-				name: "recipient",
-				type: "address",
-				indexed: true,
-				internalType: "address"
-			},
-			{
-				name: "amount",
-				type: "uint256",
-				indexed: false,
-				internalType: "uint256"
-			},
-			{
-				name: "documentHash",
-				type: "bytes32",
-				indexed: false,
-				internalType: "bytes32"
-			}
-		],
-		anonymous: false
-	},
-	{
-		type: "event",
-		name: "PaymentSent",
-		inputs: [
-			{
-				name: "settlementId",
-				type: "bytes32",
-				indexed: true,
-				internalType: "bytes32"
-			},
-			{
-				name: "sender",
-				type: "address",
-				indexed: true,
-				internalType: "address"
-			},
-			{
-				name: "recipient",
-				type: "address",
-				indexed: true,
-				internalType: "address"
-			},
-			{
-				name: "token",
-				type: "address",
-				indexed: false,
-				internalType: "address"
-			},
-			{
-				name: "amount",
-				type: "uint256",
-				indexed: false,
-				internalType: "uint256"
-			},
-			{
-				name: "kind",
-				type: "uint16",
-				indexed: false,
-				internalType: "uint16"
-			},
-			{
-				name: "documentHash",
-				type: "bytes32",
-				indexed: false,
-				internalType: "bytes32"
-			}
-		],
-		anonymous: false
-	},
-	{
-		type: "error",
-		name: "AlreadyCancelled",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "AlreadyClaimed",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "DocumentHashMismatch",
-		inputs: [{
-			name: "expected",
-			type: "bytes32",
-			internalType: "bytes32"
-		}, {
-			name: "supplied",
-			type: "bytes32",
-			internalType: "bytes32"
-		}]
-	},
-	{
-		type: "error",
-		name: "InvalidTimeParams",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "NotCreator",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "NotRecipient",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "NothingToClaim",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "SettlementIdConsumed",
-		inputs: [{
-			name: "settlementId",
-			type: "bytes32",
-			internalType: "bytes32"
-		}]
-	},
-	{
-		type: "error",
-		name: "TokenCallReturnedFalse",
-		inputs: [{
-			name: "token",
-			type: "address",
-			internalType: "address"
-		}]
-	},
-	{
-		type: "error",
-		name: "TokenHasNoCode",
-		inputs: [{
-			name: "token",
-			type: "address",
-			internalType: "address"
-		}]
-	},
-	{
-		type: "error",
-		name: "ZeroAddress",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "ZeroAmount",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "ZeroDocumentHash",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "ZeroSettlementId",
-		inputs: []
-	}
-];
-/** Immutable CapxulPaymentsV2 deployment on Base Sepolia. */
-const CAPXUL_PAYMENTS_V2_ADDRESS = "0x7a5c25aB7ce91d7a475B71cd1ec33E230291f8a4";
-//#endregion
-//#region ../config/src/route.ts
-/** USDX on Base Sepolia — the only settlement token in v1. */
-const USDX_BASE_SEPOLIA_TOKEN = {
-	chainId: BASE_SEPOLIA_CHAIN_ID,
-	address: USDX_ADDRESS_BASE_SEPOLIA,
-	decimals: 6
-};
-USDX_BASE_SEPOLIA_TOKEN.chainId;
-USDX_BASE_SEPOLIA_TOKEN.chainId;
-10n ** BigInt(6);
-function normalizeOrgRoleLabel(label) {
-	const normalized = label.trim().replace(/\s+/g, " ");
-	if (normalized.length === 0) throw Errors.invalidInput("role.label", "must be a non-empty role label");
-	return normalized;
-}
-function orgRoleKeyForLabel(label) {
-	return keccak256(toBytes(normalizeOrgRoleLabel(label).toLowerCase()));
-}
-padHex(stringToHex("FM_DAILY"), {
-	size: 32,
-	dir: "right"
-}), padHex(stringToHex("TL_DAILY"), {
-	size: 32,
-	dir: "right"
-});
-padHex(concat([MULTI_SEND_CALL_ONLY, "0x8d80ff0a"]), {
-	dir: "right",
-	size: 32
-});
-function paymentsV2Signature(name) {
-	const item = CAPXUL_PAYMENTS_V2_ABI.find((candidate) => candidate.type === "function" && candidate.name === name);
-	if (item === void 0) throw new Error(`CapxulPaymentsV2 ABI has no ${name} function`);
-	return toFunctionSignature(item);
-}
-paymentsV2Signature("send");
-paymentsV2Signature("sendBatch");
-paymentsV2Signature("createCommitment");
-paymentsV2Signature("cancel");
-paymentsV2Signature("redirect");
-new Map([
-	["assignRoles(address,bytes32[],bool[])", "AssignRoles(address,bytes32[],bool[])"],
-	["allowTarget(bytes32,address,uint8)", "AllowTarget(bytes32,address,uint8)"],
-	["scopeTarget(bytes32,address)", "ScopeTarget(bytes32,address)"],
-	["revokeTarget(bytes32,address)", "RevokeTarget(bytes32,address)"],
-	["allowFunction(bytes32,address,bytes4,uint8)", "AllowFunction(bytes32,address,bytes4,uint8)"],
-	["scopeFunction(bytes32,address,bytes4,(uint8,uint8,uint8,bytes)[],uint8)", "ScopeFunction(bytes32,address,bytes4,(uint8,uint8,uint8,bytes)[],uint8)"],
-	["revokeFunction(bytes32,address,bytes4)", "RevokeFunction(bytes32,address,bytes4)"],
-	["setAllowance(bytes32,uint128,uint128,uint128,uint64,uint64)", "SetAllowance(bytes32,uint128,uint128,uint128,uint64,uint64)"]
-].map(([functionSignature, eventSignature]) => [toFunctionSelector(functionSignature), toEventSelector(eventSignature)]));
-//#endregion
 //#region ../wire/src/brands.ts
 const lowercasedString = Schema.String.pipe(Schema.decodeTo(Schema.String, {
 	decode: SchemaGetter.transform((value) => value.toLowerCase()),
@@ -3044,6 +2113,50 @@ function isSafeField(field, value) {
 	return value.length > 0 && value.length <= rule.maxLength && value === value.trim() && !value.includes("://") && !containsSensitiveMaterial(value) && rule.pattern.test(value);
 }
 //#endregion
+//#region src/internal/invocation-observation.ts
+const INVOCATION_OBSERVATION = Symbol("capxul.invocation-observation");
+const FAILURE_INVOCATION_SNAPSHOT = Symbol("capxul.failure-invocation-snapshot");
+/** @internal Attach one immutable, non-wire invocation snapshot to an SDK-owned object. */
+function attachInvocationObservation(target, source) {
+	const snapshot = Object.freeze(source.context === void 0 ? { active: source.active } : {
+		active: source.active,
+		context: Object.freeze({ ...source.context })
+	});
+	Object.defineProperty(target, INVOCATION_OBSERVATION, {
+		configurable: false,
+		enumerable: false,
+		value: snapshot,
+		writable: false
+	});
+	return target;
+}
+/** @internal Read the snapshot without exposing its symbol or adding a wire field. */
+function readInvocationObservation(source) {
+	if (typeof source !== "object" || source === null) return void 0;
+	return source[INVOCATION_OBSERVATION];
+}
+/** @internal Carry a snapshot across an SDK adapter projection without resolving again. */
+function copyInvocationObservation(source, target) {
+	const snapshot = readInvocationObservation(source);
+	return snapshot === void 0 ? target : attachInvocationObservation(target, snapshot);
+}
+/** @internal Carry the public call-start delivery decision with its failure envelope. */
+function markFailureInvocationSnapshot(failure, snapshot) {
+	Object.defineProperty(failure, FAILURE_INVOCATION_SNAPSHOT, {
+		configurable: false,
+		enumerable: false,
+		value: Object.freeze(snapshot),
+		writable: false
+	});
+	return failure;
+}
+/** @internal Read the call-start delivery decision; undefined means a direct adapter call. */
+function readFailureInvocationSnapshot(failure) {
+	if (typeof failure !== "object" || failure === null) return void 0;
+	const snapshot = failure[FAILURE_INVOCATION_SNAPSHOT];
+	return typeof snapshot === "object" && snapshot !== null && "active" in snapshot ? snapshot : void 0;
+}
+//#endregion
 //#region src/surface/_shared/provisioning-telemetry.ts
 async function emitProvisioningTelemetry(telemetry, smartAccount) {
 	if (telemetry === void 0) return;
@@ -3121,9 +2234,29 @@ function* causeChain(cause) {
 		current = current.cause;
 	}
 }
+const SIGNER_NOT_READY_CODES = /* @__PURE__ */ new Set(["MISSING_SIGNER", "NOT_CONFIGURED"]);
+function isOpenfortSignerNotReadyCode(value) {
+	return typeof value === "string" && SIGNER_NOT_READY_CODES.has(value);
+}
+/** Return the exact Openfort code that requires an embedded-signer rebuild. */
+function openfortSignerNotReadyCode(cause) {
+	for (const link of causeChain(cause)) {
+		const error = link;
+		for (const value of [
+			error.error,
+			error.code,
+			error.details?.provider_error_code
+		]) if (isOpenfortSignerNotReadyCode(value)) return value;
+	}
+}
+/** Openfort's typed signal that its embedded signer state must be rebuilt. */
+function isSignerNotReadySignal(cause) {
+	return openfortSignerNotReadyCode(cause) !== void 0;
+}
 /** Fold a signer throw into the public error contract. */
 function signerFailure(source, operation, cause) {
 	let failureMode;
+	const providerErrorCode = source === "openfort-embedded" ? openfortSignerNotReadyCode(cause) : void 0;
 	for (const link of causeChain(cause)) {
 		if (link instanceof CapxulError && link.code === "SIGNER_REJECTED") return link;
 		failureMode = getFailureMode(link) ?? failureMode;
@@ -3132,8 +2265,15 @@ function signerFailure(source, operation, cause) {
 			source,
 			cause
 		});
+		if (providerErrorCode !== void 0) failureMode = "signer-not-ready";
 	}
-	return Errors.providerError("signer", operation, cause, failureMode === void 0 ? void 0 : { failure_mode: failureMode });
+	return Errors.providerError("signer", operation, cause, failureMode === void 0 && providerErrorCode === void 0 ? void 0 : {
+		...failureMode === void 0 ? {} : { failure_mode: failureMode },
+		...providerErrorCode === void 0 ? {} : { details: {
+			provider_error_source: "openfort",
+			provider_error_code: providerErrorCode
+		} }
+	});
 }
 /**
 * Browser `CapxulSigner` backed by an injected EIP-1193 wallet (MetaMask, etc.).
@@ -3185,50 +2325,6 @@ async function recoverRawDigestSigner(input) {
 	}
 }
 //#endregion
-//#region src/internal/invocation-observation.ts
-const INVOCATION_OBSERVATION = Symbol("capxul.invocation-observation");
-const FAILURE_INVOCATION_SNAPSHOT = Symbol("capxul.failure-invocation-snapshot");
-/** @internal Attach one immutable, non-wire invocation snapshot to an SDK-owned object. */
-function attachInvocationObservation(target, source) {
-	const snapshot = Object.freeze(source.context === void 0 ? { active: source.active } : {
-		active: source.active,
-		context: Object.freeze({ ...source.context })
-	});
-	Object.defineProperty(target, INVOCATION_OBSERVATION, {
-		configurable: false,
-		enumerable: false,
-		value: snapshot,
-		writable: false
-	});
-	return target;
-}
-/** @internal Read the snapshot without exposing its symbol or adding a wire field. */
-function readInvocationObservation(source) {
-	if (typeof source !== "object" || source === null) return void 0;
-	return source[INVOCATION_OBSERVATION];
-}
-/** @internal Carry a snapshot across an SDK adapter projection without resolving again. */
-function copyInvocationObservation(source, target) {
-	const snapshot = readInvocationObservation(source);
-	return snapshot === void 0 ? target : attachInvocationObservation(target, snapshot);
-}
-/** @internal Carry the public call-start delivery decision with its failure envelope. */
-function markFailureInvocationSnapshot(failure, snapshot) {
-	Object.defineProperty(failure, FAILURE_INVOCATION_SNAPSHOT, {
-		configurable: false,
-		enumerable: false,
-		value: Object.freeze(snapshot),
-		writable: false
-	});
-	return failure;
-}
-/** @internal Read the call-start delivery decision; undefined means a direct adapter call. */
-function readFailureInvocationSnapshot(failure) {
-	if (typeof failure !== "object" || failure === null) return void 0;
-	const snapshot = failure[FAILURE_INVOCATION_SNAPSHOT];
-	return typeof snapshot === "object" && snapshot !== null && "active" in snapshot ? snapshot : void 0;
-}
-//#endregion
 //#region src/domain/machine/telemetry.ts
 const definedEntries = (values) => Object.fromEntries(Object.entries(values).filter((entry) => entry[1] !== void 0));
 const SAFE_ENGINEERING_ID = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/u;
@@ -3690,21 +2786,27 @@ async function runIdentityFacade(verb, controls, run, runPromise = Effect.runPro
 async function runPortEffect(effect, controls, operation = "port", runPromise = Effect.runPromise) {
 	const deadlineDelay = controls?.deadlineMs === void 0 ? void 0 : Math.max(0, controls.deadlineMs - Date.now());
 	const timeoutMs = controls?.timeoutMs === void 0 ? deadlineDelay : deadlineDelay === void 0 ? controls.timeoutMs : Math.min(controls.timeoutMs, deadlineDelay);
-	const observed = (timeoutMs === void 0 ? effect : effect.pipe(Effect.timeoutOrElse({
+	return runCapxulEffect((timeoutMs === void 0 ? effect : effect.pipe(Effect.timeoutOrElse({
 		duration: `${timeoutMs} millis`,
 		orElse: () => Effect.fail({ publicError: Errors.providerTimeout("sdk", operation, timeoutMs) })
-	}))).pipe(Effect.tap(() => Effect.annotateCurrentSpan({ outcome: "succeeded" })), Effect.tapError((failure) => {
-		const mode = failure.publicError.details?.failure_mode;
+	}))).pipe(Effect.mapError((failure) => failure.publicError)), controls, operation, runPromise);
+}
+/** Observe a public Effect that already uses the canonical CapxulError channel. */
+async function runCapxulEffect(effect, controls, operation = "port", runPromise = Effect.runPromise) {
+	const invocation = readInvocationObservation(controls);
+	const correlationId = safeEngineeringIdentifier(controls?.correlation_id ?? invocation?.context?.correlationId);
+	const observed = effect.pipe(Effect.tap(() => Effect.annotateCurrentSpan({ outcome: "succeeded" })), Effect.tapError((error) => {
+		const mode = error.mode ?? error.details?.failure_mode;
 		return Effect.annotateCurrentSpan({
-			outcome: portFailureOutcome(failure.publicError.code),
-			failure_code: failure.publicError.code,
+			outcome: portFailureOutcome(error.code),
+			failure_code: error.code,
 			...typeof mode === "string" ? { mode } : {}
 		});
 	}), Effect.tapDefect(() => Effect.annotateCurrentSpan({
 		outcome: "failed",
 		failure_code: "UNKNOWN"
-	})), Effect.withSpan(`identity.port.${operation}`));
-	return runIfActive(controls?.signal, operation, () => withInvocationParentSpan(observed, controls), runPromise);
+	})), Effect.withSpan(`identity.port.${operation}`), Effect.annotateSpans(correlationId === void 0 ? {} : { correlation_id: correlationId }));
+	return runIfActive(controls?.signal, operation, () => withInvocationParentSpan(observed, controls).pipe(Effect.mapError((publicError) => ({ publicError }))), runPromise);
 }
 /** Map machine-internal failure state onto the public SDK error vocabulary. */
 function publicIdentityFailure(failure) {
@@ -4419,7 +3521,7 @@ function makeAccountMethods(deps) {
 			value: provisioningPhase(deps.actor.snapshot())
 		};
 	};
-	const resolveLifecycle = async () => {
+	const resolveLifecycle = async (controls) => {
 		const phase = provisioningPhase(deps.actor.snapshot());
 		const status = await getStatus();
 		if (!status.ok) return accountFailureResult(status.error);
@@ -4427,7 +3529,7 @@ function makeAccountMethods(deps) {
 		if (status.value.status !== "notAuthenticated" && (phase.status === "ready" || isRequirementMet(status.value, requirement))) {
 			const accountReadPort = deps.accountReadPort;
 			if (accountReadPort === void 0) return accountFailureResult(Errors.invalidInput("account", "accountReadPort is required to resolve ready lifecycle"));
-			const account = await runPortEffect(accountReadPort.readBalance({ chainId: toChainId(deps.chainId) }));
+			const account = await runPortEffect(accountReadPort.readBalance(copyInvocationObservation(controls, { chainId: toChainId(deps.chainId) })), controls, "accounts.read", deps.runPromise);
 			if (!account.ok) return accountFailureResult(account.error);
 			accountId = String(account.value.id);
 		}
@@ -4441,8 +3543,9 @@ function makeAccountMethods(deps) {
 			})
 		};
 	};
-	const getLifecycle = () => resolveLifecycle();
+	const getLifecycle = () => resolveLifecycle(deps.invocationControls?.());
 	const retrySetup = async () => {
+		const controls = deps.invocationControls?.();
 		const resetSession = deps.signer?.resetSession;
 		if (typeof resetSession === "function") try {
 			resetSession.call(deps.signer);
@@ -4451,7 +3554,7 @@ function makeAccountMethods(deps) {
 		}
 		const retried = await drive({ _tag: "RetryAccount" });
 		if (!retried.ok) return accountFailureResult(retried.error);
-		return resolveLifecycle();
+		return resolveLifecycle(controls);
 	};
 	return {
 		methods: {
@@ -4511,146 +3614,45 @@ const moneyExecutionContract = {
 };
 //#endregion
 //#region package.json
-var version = "2.8.0";
+var version = "3.0.0";
 //#endregion
-//#region src/telemetry/stack-frame-parser.ts
-/**
-* Regex for V8/Chrome stack trace frame lines.
-* Matches:
-*   `at functionName (url:line:col)`
-*   `at url:line:col`
-*   `at async functionName (url:line:col)`
-*   `at new ClassName (url:line:col)`
-*/
-const V8_FRAME_RE = /^\s*at\s+(?:(.+?)\s+\()?(?:(.+?)(?::(\d+):(\d+))?|(.+?))\)?\s*$/;
-function isNonUrlName(name) {
-	return name === "<anonymous>" || name.startsWith("eval") || name.startsWith("new ") || name.startsWith("async ");
-}
-/**
-* Parse a V8/Chrome-style stack trace string into PostHog `ExceptionFrame` objects.
-* Returns an empty array when `error.stack` is absent or empty.
-*
-* Handles:
-* - Standard `at functionName (url:line:col)`
-* - Bare `at url:line:col` (no function name)
-* - `at async functionName (url:line:col)`
-* - `at new ClassName (url:line:col)`
-* - Native frames: `at Array.forEach (<anonymous>)`
-*/
-function parseV8StackFrames(error) {
-	const stack = error.stack;
-	if (stack === void 0 || stack === null || stack === "") return [];
-	const lines = stack.split("\n");
-	const frames = [];
-	for (const line of lines) {
-		const trimmed = line.trim();
-		if (!trimmed.startsWith("at ")) continue;
-		const match = V8_FRAME_RE.exec(trimmed);
-		if (match === null) continue;
-		if (match[1] !== void 0) frames.push({
-			function: match[1],
-			filename: match[2],
-			lineno: match[3] !== void 0 ? Number(match[3]) : null,
-			colno: match[4] !== void 0 ? Number(match[4]) : null
-		});
-		else if (match[2] !== void 0 && !isNonUrlName(match[2])) frames.push({
-			function: "<anonymous>",
-			filename: match[2],
-			lineno: match[3] !== void 0 ? Number(match[3]) : null,
-			colno: match[4] !== void 0 ? Number(match[4]) : null
-		});
-		else frames.push({
-			function: match[1] ?? match[2] ?? match[5] ?? "<anonymous>",
-			filename: match[2] ?? match[5] ?? "<anonymous>",
-			lineno: match[3] !== void 0 ? Number(match[3]) : null,
-			colno: match[4] !== void 0 ? Number(match[4]) : null
-		});
-	}
-	return frames;
+//#region src/telemetry/exception-projection.ts
+/** Fixed fallback for failures that have no safe message. */
+const EXCEPTION_MESSAGE = "Capxul SDK operation failed";
+const SDK_VERSION = version;
+/** The one PostHog Error Tracking projection for every SDK exception emitter. */
+function projectSdkException(input) {
+	const operation = normalizeExceptionOperation(input.operation);
+	const errorKind = normalizeExceptionErrorKind(input.errorKind);
+	const mode = isFailureMode(input.failureMode) ? input.failureMode : void 0;
+	const message = input.message ?? "Capxul SDK operation failed";
+	const where = input.chainUpstream === void 0 ? "" : ` on ${input.chainUpstream}${input.chainMethod === void 0 ? "" : ` during ${input.chainMethod}`}`;
+	return {
+		...input.properties,
+		sdk_version: input.sdkVersion,
+		operation,
+		error_kind: errorKind,
+		handled: true,
+		$exception_type: errorKind,
+		$exception_message: message,
+		$exception_level: "error",
+		$exception_fingerprint: failureFingerprint(errorKind, mode, operation),
+		$issue_name: `${errorKind}${mode === void 0 ? "" : `: ${mode}`}${where} (${operation})`,
+		$issue_description: input.issueDescription ?? message,
+		$exception_list: input.exceptionList
+	};
 }
-/** Fixed, leak-safe frame used when the error carries no parseable stack. */
-const SDK_BOUNDARY_FILENAME = "capxul-sdk-observation://boundary";
-/**
-* Build PostHog's `$exception_list` (always a single entry). Error Tracking
-* groups on `type`, so it is ALWAYS present (the CapxulError code) — the
-* previous `[{ frames }]` shape omitted it and PostHog dropped the event as
-* "missing field `type`". When the error has no parseable stack, a synthetic
-* boundary frame stands in so the event still ingests as a real Issue (#1031).
-*/
-function buildExceptionList(input) {
-	const frames = input.frames.length > 0 ? input.frames : [{
-		filename: SDK_BOUNDARY_FILENAME,
-		function: input.operation ?? "unknown",
-		lineno: 1,
-		colno: 1
-	}];
-	return [{
-		type: input.type,
-		value: input.value,
-		mechanism: {
-			handled: true,
-			type: "capxul_sdk_boundary"
-		},
-		stacktrace: { frames }
-	}];
+function normalizeExceptionOperation(value) {
+	return typeof value === "string" && /^[A-Za-z0-9_][A-Za-z0-9_.-]{0,255}$/u.test(value) ? value : "unknown";
 }
-//#endregion
-//#region src/telemetry/capture-exception.ts
-/** Fixed, leak-safe message — the raw error message may carry PII and never ships. */
-const EXCEPTION_MESSAGE = "Capxul SDK operation failed";
-/**
-* Capture an error as a `$exception` event through the telemetry port,
-* formatted for PostHog Error Tracking.
-*
-* Parses stack traces into `$exception_list` format, extracts structured
-* metadata from CapxulError objects, and supplements with context props.
-* Fire-and-forget: telemetry defects are silently swallowed.
-* Returns `Effect<void, never>` for use in Effect pipelines; the underlying
-* adapter work is synchronous, so callers outside Effect contexts can
-* use `Effect.runSync`.
-*/
-function captureException(telemetry, error, context) {
-	return Effect.catchDefect(Effect.sync(() => {
-		const frames = error instanceof Error ? parseV8StackFrames(error) : [];
-		const capxulError = isCapxulError(error) ? error : null;
-		const errorCode = capxulError?.code ?? context?.capxul_error_code ?? "UNKNOWN";
-		const props = {
-			capxul_error_code: errorCode,
-			$exception_type: errorCode,
-			$exception_message: EXCEPTION_MESSAGE,
-			$exception_list: buildExceptionList({
-				type: errorCode,
-				value: EXCEPTION_MESSAGE,
-				...context?.operation === void 0 ? {} : { operation: context.operation },
-				frames
-			}),
-			layer: capxulError?.layer ?? context?.layer,
-			operation: context?.operation,
-			provider: context?.provider,
-			failure_mode: resolveFailureMode(error, context?.failure_mode)
-		};
-		if (capxulError?.details !== void 0) props.details = JSON.stringify(capxulError.details);
-		for (const key of Object.keys(props)) if (props[key] === void 0) delete props[key];
-		return telemetry.emit({
-			name: "$exception",
-			props
-		});
-	}).pipe(Effect.flatten), () => Effect.void);
+function normalizeExceptionErrorKind(value) {
+	return safeExceptionLabel(value) ?? "UNKNOWN";
 }
-/**
-* Synchronous fire-and-forget capture. Runs the Effect inline with
-* `Effect.runSync` so callers outside an Effect context can report errors
-* without awaiting. Core SDK public methods use the assembled observation
-* boundary instead.
-*/
-function captureExceptionSync(telemetry, error, context) {
-	try {
-		Effect.runSync(captureException(telemetry, error, context));
-	} catch {}
+function safeExceptionLabel(value) {
+	return typeof value === "string" && /^[A-Za-z][A-Za-z0-9_.-]{0,63}$/u.test(value) ? value : void 0;
 }
 //#endregion
 //#region src/observation.ts
-const SDK_VERSION = version;
 /** Stable PostHog event used for typed failures that are expected product outcomes. */
 const CAPXUL_SDK_EXPECTED_OUTCOME_EVENT = "capxul_sdk_expected_outcome";
 /**
@@ -4676,13 +3678,13 @@ function postHogFailureObservation(policy, fixedSnapshot) {
 			}));
 			return;
 		}
-		policy.deliver(() => policy.client.capture("$exception", postHogExceptionProperties(safeFailure, properties)));
+		policy.deliver(() => policy.client.capture("$exception", projectFailureException(safeFailure, properties)));
 	};
 	const captureException = (failure) => {
 		const prepared = prepare(failure);
 		if (prepared === void 0 || policy.client === null || policy.client === void 0) return;
 		const [safeFailure, properties] = prepared;
-		policy.deliver(() => policy.client.capture("$exception", postHogExceptionProperties(safeFailure, properties)));
+		policy.deliver(() => policy.client.capture("$exception", projectFailureException(safeFailure, properties)));
 	};
 	return {
 		resolveContext: () => {
@@ -4809,7 +3811,7 @@ function report(adapter, kind, operation, cause, invocation, origin) {
 		}
 	} else if (reportedByMachine(cause)) return;
 	const operationName = normalizeOperation(operation);
-	const kindName = normalizeErrorKind(errorKind$1(cause));
+	const kindName = normalizeErrorKind(errorKind(cause));
 	const context = sanitizeObservationContext({
 		...invocation.context,
 		...isCapxulError(cause) && cause.correlationId !== void 0 ? { correlationId: cause.correlationId } : {}
@@ -4893,19 +3895,20 @@ function postHogProperties(failure, context) {
 		...observationContextProps(merged)
 	};
 }
-function postHogExceptionProperties(failure, properties) {
+function projectFailureException(failure, properties) {
 	const filename = `capxul-sdk-observation://boundary/${failure.operation}`;
 	const message = failure.message ?? "Capxul SDK operation failed";
-	const mode = failure.detail?.failure_mode;
-	return {
-		...properties,
-		$exception_type: failure.errorKind,
-		$exception_message: message,
-		$exception_level: "error",
-		$exception_fingerprint: failureFingerprint(failure.errorKind, isFailureMode(mode) ? mode : void 0, failure.operation),
-		$issue_name: issueName(failure, isFailureMode(mode) ? mode : void 0),
-		$issue_description: issueDescription(failure, message),
-		$exception_list: [{
+	return projectSdkException({
+		properties,
+		sdkVersion: failure.sdkVersion,
+		operation: failure.operation,
+		errorKind: failure.errorKind,
+		failureMode: failure.detail?.failure_mode,
+		message,
+		issueDescription: issueDescription(failure, message),
+		...failure.detail?.chain_upstream === void 0 ? {} : { chainUpstream: failure.detail.chain_upstream },
+		...failure.detail?.chain_method === void 0 ? {} : { chainMethod: failure.detail.chain_method },
+		exceptionList: [{
 			type: failure.errorKind,
 			value: message,
 			mechanism: {
@@ -4926,7 +3929,7 @@ function postHogExceptionProperties(failure, properties) {
 			},
 			...failure.stack === void 0 ? {} : { stack: failure.stack }
 		}]
-	};
+	});
 }
 /**
 * The decoded revert leads the description: the provider's own message masks
@@ -4944,13 +3947,6 @@ function issueDescription(failure, message) {
 	});
 	return providerMessage === void 0 ? revert : `${revert}; ${providerMessage}`;
 }
-function issueName(failure, mode) {
-	const upstream = failure.detail?.chain_upstream;
-	const method = failure.detail?.chain_method;
-	const cause = mode === void 0 ? "" : `: ${mode}`;
-	const where = typeof upstream !== "string" ? "" : ` on ${upstream}${typeof method === "string" ? ` during ${method}` : ""}`;
-	return `${failure.errorKind}${cause}${where} (${failure.operation})`;
-}
 const MAX_EVIDENCE_TEXT = 4e3;
 const MAX_CAUSE_DEPTH = 8;
 function evidenceText(value) {
@@ -5017,7 +4013,7 @@ function failureEvidence(cause) {
 		return {};
 	}
 }
-function errorKind$1(cause) {
+function errorKind(cause) {
 	try {
 		if (isCapxulError(cause)) return normalizeErrorKind(cause.code);
 		if (cause instanceof Error) return normalizeErrorKind(cause.name);
@@ -5054,18 +4050,45 @@ function sanitizeFailureObservation(failure) {
 * Shared by the failure boundary and the `bootstrap_failed` product event.
 */
 function failureDetail(cause) {
-	if (!isCapxulError(cause)) return void 0;
-	const details = cause.details;
+	const error = observationError(cause);
+	if (error === void 0) return void 0;
+	const details = error.details;
 	const source = typeof details === "object" && details !== null ? details : {};
 	return sanitizeFailureDetail({
 		provider: source.provider,
 		provider_operation: source.operation,
-		failure_mode: cause.mode ?? source.failure_mode,
+		provider_error_source: source.provider_error_source,
+		provider_error_code: source.provider_error_code,
+		target_host: source.target_host,
+		failure_mode: error.mode ?? source.failure_mode,
 		reason: source.reason,
 		http_status: source.httpStatus,
-		...cause.chain === void 0 ? {} : chainCauseProperties(cause.chain)
+		connection_id: source.connection_id,
+		connection_count: source.connection_count,
+		connection_retries: source.connection_retries,
+		close_code: source.close_code,
+		close_was_clean: source.close_was_clean,
+		close_reason_present: source.close_reason_present,
+		document_visibility: source.document_visibility,
+		navigator_online: source.navigator_online,
+		last_browser_event: source.last_browser_event,
+		ms_since_browser_event: source.ms_since_browser_event,
+		...error.chain === void 0 ? {} : chainCauseProperties(error.chain)
 	});
 }
+const CAPXUL_ERROR_CODE_SET = new Set(CAPXUL_ERROR_CODES);
+function observationError(cause) {
+	if (isCapxulError(cause)) return cause;
+	if (typeof cause !== "object" || cause === null) return void 0;
+	const candidate = cause;
+	if (typeof candidate.code !== "string" || !CAPXUL_ERROR_CODE_SET.has(candidate.code) || typeof candidate.message !== "string") return;
+	const chain = decodeChainCause(candidate.chain);
+	return {
+		...candidate.details === void 0 ? {} : { details: candidate.details },
+		...candidate.mode === void 0 ? {} : { mode: candidate.mode },
+		...chain === null ? {} : { chain }
+	};
+}
 /** The chain-cause half of {@link sanitizeFailureDetail}: same bounds, same masking. */
 function sanitizeChainDetail(source, detail) {
 	for (const key of [
@@ -5077,6 +4100,7 @@ function sanitizeChainDetail(source, detail) {
 		const value = source[key];
 		if (typeof value === "string" && ENUMERATED_DETAIL_RE.test(value)) detail[key] = value;
 	}
+	sanitizeProviderErrorDetail(source, detail);
 	const status = source.http_status;
 	if (typeof status === "number" && Number.isInteger(status) && status >= 100 && status <= 599) detail.http_status = status;
 	for (const key of [
@@ -5105,15 +4129,51 @@ function sanitizeChainDetail(source, detail) {
 	const providerMessage = evidenceText(source.chain_provider_message);
 	if (providerMessage !== void 0) detail.chain_provider_message = providerMessage;
 }
+function sanitizeProviderErrorDetail(source, detail) {
+	if (source.provider_error_source !== "openfort") return;
+	detail.provider_error_source = "openfort";
+	if (isOpenfortSignerNotReadyCode(source.provider_error_code)) detail.provider_error_code = source.provider_error_code;
+}
+function sanitizeConnectionDetail(source, detail) {
+	const targetHost = source.target_host;
+	if (typeof targetHost === "string" && TARGET_HOST_RE.test(targetHost)) detail.target_host = targetHost;
+	for (const key of [
+		"connection_id",
+		"document_visibility",
+		"last_browser_event"
+	]) {
+		const value = source[key];
+		if (typeof value === "string" && ENUMERATED_DETAIL_RE.test(value)) detail[key] = value;
+	}
+	for (const key of [
+		"connection_count",
+		"connection_retries",
+		"close_code",
+		"ms_since_browser_event"
+	]) {
+		const value = source[key];
+		if (typeof value === "number" && Number.isSafeInteger(value) && value >= 0 && (key !== "close_code" || value <= 4999)) detail[key] = value;
+	}
+	for (const key of [
+		"close_was_clean",
+		"close_reason_present",
+		"navigator_online"
+	]) {
+		const value = source[key];
+		if (typeof value === "boolean") detail[key] = value;
+	}
+}
 function sanitizeFailureDetail(input) {
 	if (typeof input !== "object" || input === null) return void 0;
 	const source = input;
 	const detail = {};
+	sanitizeConnectionDetail(source, detail);
 	sanitizeChainDetail(source, detail);
 	return Object.keys(detail).length === 0 ? void 0 : detail;
 }
 /** Enumerated codes only (`convex`, `no-secure-context`, `bootstrap-encode`); free text fails. */
 const ENUMERATED_DETAIL_RE = /^[A-Za-z][A-Za-z0-9_.-]{0,63}$/u;
+const TARGET_HOST_RE = /^[A-Za-z0-9.[\]:-]{1,253}$/u;
 /** A four-byte revert selector, or the bare `0x` of an empty revert. */
 const REVERT_SELECTOR_RE = /^0x(?:[0-9a-fA-F]{8})?$/u;
 function normalizeSdkVersion(value) {
@@ -6222,42 +5282,6 @@ function mapOk(result, f) {
 	}
 }
 //#endregion
-//#region src/ports/auth-client.ts
-var AuthClientError = class extends Data.TaggedError("AuthClientError") {};
-var AuthClientPortTag = class extends Context.Service()("@capxul/sdk/ports/AuthClientPort") {};
-//#endregion
-//#region src/adapters/auth-client/effect-port.ts
-function authClientPortFromPromiseAdapter(adapter) {
-	return {
-		canSendOtp: (input, options) => fromResult("canSendOtp", () => adapter.canSendOtp(input, options)),
-		sendOtp: (input, options) => fromResult("sendOtp", () => adapter.sendOtp(input, options)),
-		verifyOtp: (input, options) => fromResult("verifyOtp", () => adapter.verifyOtp(input, options)),
-		getSession: (options) => fromResult("getSession", () => adapter.getSession(options)),
-		signOut: (options) => fromResult("signOut", () => adapter.signOut(options)),
-		getConvexJwt: (options) => fromResult("getConvexJwt", () => adapter.getConvexJwt(options))
-	};
-}
-function fromResult(operation, run) {
-	return Effect.tryPromise({
-		try: run,
-		catch: (cause) => new AuthClientError({
-			operation,
-			kind: "thrown",
-			cause
-		})
-	}).pipe(Effect.flatMap((result) => result.ok ? Effect.succeed(result.value) : Effect.fail(new AuthClientError({
-		operation,
-		kind: errorKind(result.error),
-		cause: result.error
-	}))));
-}
-function errorKind(error) {
-	if (error.code === "CANCELLED") return "cancelled";
-	if (error.code === "NETWORK_ERROR") return "network";
-	if (error.code === "INVALID_INPUT" || error.code === "OTP_EXPIRED") return "validation";
-	return "provider";
-}
-//#endregion
 //#region src/ports/bootstrap.ts
 var BootstrapError = class extends Data.TaggedError("BootstrapError") {};
 function bootstrapErrorFromCapxul(kind, error) {
@@ -6271,19 +5295,16 @@ function bootstrapErrorFromCapxul(kind, error) {
 }
 var BootstrapPortTag = class extends Context.Service()("@capxul/sdk/ports/BootstrapPort") {};
 //#endregion
-//#region src/ports/clock.ts
-var ClockError = class extends Data.TaggedError("ClockError") {};
-var ClockPortTag = class extends Context.Service()("@capxul/sdk/ports/ClockPort") {};
-//#endregion
 //#region src/ports/convex-call.ts
 var ConvexCallError = class extends Data.TaggedError("ConvexCallError") {};
-function convexCallErrorFromCapxul(operation, error) {
+function convexCallErrorFromCapxul(operation, error, transport) {
 	return new ConvexCallError({
 		operation,
 		publicCode: error.code,
 		publicError: error,
 		cause: error,
-		...error.details === void 0 ? {} : { details: error.details }
+		...error.details === void 0 ? {} : { details: error.details },
+		...transport === void 0 ? {} : { transport }
 	});
 }
 var ConvexCallPortTag = class extends Context.Service()("@capxul/sdk/ports/ConvexCallPort") {};
@@ -6324,31 +5345,56 @@ function wireChainId(chainId) {
 	return chainId;
 }
 //#endregion
-//#region src/ports/account-read.ts
-var AccountReadError = class extends Data.TaggedError("AccountReadError") {};
-function accountReadErrorFromCapxul(operation, error, cause = error) {
-	return new AccountReadError({
-		operation,
-		publicCode: error.code,
-		publicError: error,
-		cause,
-		...error.details === void 0 ? {} : { details: error.details }
-	});
+//#region src/telemetry/invocation.ts
+const PRODUCT_INVOCATION = Symbol("capxul.product-telemetry-invocation");
+function bindProductTelemetryInvocation(telemetry, source) {
+	return telemetry[PRODUCT_INVOCATION]?.(source) ?? telemetry;
 }
-var AccountReadPortTag = class extends Context.Service()("@capxul/sdk/ports/AccountReadPort") {};
 //#endregion
-//#region src/ports/smart-account.ts
-var SmartAccountError = class extends Data.TaggedError("SmartAccountError") {};
-function smartAccountErrorFromCapxul(operation, error, cause = error) {
-	return new SmartAccountError({
-		operation,
-		publicCode: error.code,
-		publicError: error,
-		cause,
-		...error.details === void 0 ? {} : { details: error.details }
+//#region src/adapters/convex-call/retry-idempotent-read.ts
+const MAX_RETRIES = 2;
+function isConnectionLoss(error) {
+	return error.publicCode === "NETWORK_ERROR" && error.publicError.mode === "upstream-down" && error.publicError.details?.reason === "connection-lost-in-flight";
+}
+function retryIdempotentRead(effect, operation, telemetry, invocationSource) {
+	return Effect.suspend(() => {
+		let attempt = 0;
+		const invocationTelemetry = telemetry === void 0 ? void 0 : bindProductTelemetryInvocation(telemetry, invocationSource);
+		return effect.pipe(Effect.tapError((error) => {
+			if (!isConnectionLoss(error) || attempt >= MAX_RETRIES) return Effect.void;
+			attempt += 1;
+			const eventFields = {
+				operation,
+				failure_mode: "upstream-down",
+				reason: "connection-lost-in-flight",
+				attempt,
+				delay_ms: 0,
+				...error.transport === void 0 ? {} : {
+					connection_id: error.transport.connection_id,
+					connection_count: error.transport.connection_count
+				}
+			};
+			const transport = error.transport;
+			const connection = transport === void 0 ? void 0 : omitTransportKind(transport);
+			const log = Effect.logInfo("capxul.operation.retried").pipe(Effect.annotateLogs(connection === void 0 ? eventFields : {
+				...eventFields,
+				...connection
+			}), Effect.catchCause(() => Effect.void));
+			if (invocationTelemetry === void 0) return log;
+			return log.pipe(Effect.andThen(invocationTelemetry.emit({
+				name: "operation_retried",
+				props: eventFields
+			})), Effect.catchCause(() => Effect.void));
+		}), Effect.retry({
+			times: MAX_RETRIES,
+			while: isConnectionLoss
+		}));
 	});
 }
-var SmartAccountPortTag = class extends Context.Service()("@capxul/sdk/ports/SmartAccountPort") {};
+function omitTransportKind(transport) {
+	const { kind: _kind, ...connection } = transport;
+	return connection;
+}
 //#endregion
 //#region ../observability/src/index.ts
 const PII = Schema.String.pipe(Schema.brand("PII"));
@@ -6500,7 +5546,10 @@ const BootstrapFailedProps = Schema.Struct({
 	applicationId: OptionalAppId,
 	durationMs: OptionalDurationMs,
 	origin: OptionalString,
-	reason: OptionalString
+	provider: OptionalString,
+	provider_operation: OptionalString,
+	reason: OptionalString,
+	target_host: OptionalString
 });
 const AccountBalanceReadProps = Schema.Struct({
 	...TelemetryEnvelopeProps,
@@ -6565,6 +5614,9 @@ const OperationRetriedProps = Schema.Struct({
 	...TelemetryEnvelopeProps,
 	operation: Schema.String,
 	failure_mode: FailureModeSchema,
+	reason: Schema.optional(Schema.Literal("connection-lost-in-flight")),
+	connection_id: OptionalString,
+	connection_count: Schema.optional(Schema.Number),
 	attempt: Schema.Number,
 	delay_ms: DurationMsSchema
 });
@@ -6741,7 +5793,9 @@ const PaymentVerificationRetryProps = Schema.Struct({
 	command_id: Schema.String,
 	attempt: Schema.Number,
 	reason_code: Schema.String,
-	chain_id: Schema.Number
+	chain_id: Schema.Number,
+	delay_ms: DurationMsSchema,
+	outcome: Schema.Literals(["scheduled", "unresolved"])
 });
 const DepositInitiatedProps = Schema.Struct({ ...TelemetryEnvelopeProps });
 const DepositSettledProps = Schema.Struct({
@@ -6982,7 +6036,7 @@ function redactTelemetryEvent(event, options = {}) {
 }
 function redactTelemetryProps(name, props, options = {}) {
 	if (props === void 0) return void 0;
-	const clone = cloneProps$1(props);
+	const clone = cloneProps(props);
 	if (options.rawMode === true) return clone;
 	for (const key of PII_PROP_KEYS_BY_EVENT[name] ?? []) redactProperty(clone, key);
 	return clone;
@@ -6997,17 +6051,17 @@ function redactProperty(props, key) {
 	const value = props[key];
 	if (typeof value === "string") props[key] = sha256Hex(value).slice(0, 12);
 }
-function cloneProps$1(props) {
+function cloneProps(props) {
 	const cloned = {};
-	for (const [key, value] of Object.entries(props)) cloned[key] = cloneTelemetryValue$1(value);
+	for (const [key, value] of Object.entries(props)) cloned[key] = cloneTelemetryValue(value);
 	return cloned;
 }
-function cloneTelemetryValue$1(value) {
-	if (Array.isArray(value)) return value.map(cloneTelemetryValue$1);
+function cloneTelemetryValue(value) {
+	if (Array.isArray(value)) return value.map(cloneTelemetryValue);
 	if (value === null || typeof value !== "object") return value;
 	if (Object.getPrototypeOf(value) !== Object.prototype) return value;
 	const cloned = {};
-	for (const [key, nested] of Object.entries(value)) cloned[key] = cloneTelemetryValue$1(nested);
+	for (const [key, nested] of Object.entries(value)) cloned[key] = cloneTelemetryValue(nested);
 	return cloned;
 }
 const SHA256_INITIAL_HASH = [
@@ -7165,89 +6219,31 @@ function rotr(value, bits) {
 //#region src/ports/telemetry.ts
 var TelemetryPortTag = class extends Context.Service()("@capxul/sdk/ports/TelemetryPort") {};
 //#endregion
-//#region src/adapters/telemetry/PostHogTelemetryAdapter.ts
-var PostHogTelemetryAdapter = class {
-	#capture;
-	#identify;
-	#group;
-	#reset;
-	constructor(deps) {
-		this.#capture = deps.capture;
-		this.#identify = deps.identify ?? (() => void 0);
-		this.#group = deps.group ?? (() => void 0);
-		this.#reset = deps.reset ?? (() => void 0);
-	}
-	emit(event) {
-		return this.#run(() => this.#capture(event.name, redactTelemetryProps(event.name, cloneProps(event.props)), event), "emit", event.name);
-	}
-	identify(input) {
-		return this.#run(() => this.#identify(cloneIdentifyInput(input)), "identify");
-	}
-	group(input) {
-		return this.#run(() => this.#group(cloneGroupInput(input)), "group");
-	}
-	reset() {
-		return this.#run(() => this.#reset(), "reset");
-	}
-	#run(operation, operationName, eventName) {
-		const diagnose = Effect.logWarning("product.telemetry.transport.dropped").pipe(Effect.annotateLogs({
-			operation: operationName,
-			...eventName === void 0 ? {} : { product_event: eventName }
-		}), Effect.catchCause(() => Effect.void));
-		return Effect.suspend(() => {
-			let pending;
-			try {
-				pending = operation();
-			} catch {
-				return diagnose;
-			}
-			if (pending === void 0) return Effect.void;
-			const transport = Effect.tryPromise({
-				try: () => pending,
-				catch: () => void 0
-			}).pipe(Effect.catch(() => diagnose));
-			return Effect.forkDetach(transport, { startImmediately: true }).pipe(Effect.asVoid);
-		});
-	}
-};
-function PostHogTelemetryLayer(deps) {
-	return Layer.succeed(TelemetryPortTag, new PostHogTelemetryAdapter(deps));
-}
-function cloneIdentifyInput(input) {
-	const traits = input.traits === void 0 ? void 0 : cloneProps(input.traits);
-	const properties = input.properties === void 0 ? void 0 : cloneProps(input.properties);
-	return {
-		distinctId: input.distinctId,
-		...input.anonDistinctId === void 0 ? {} : { anonDistinctId: input.anonDistinctId },
-		...traits === void 0 ? {} : { traits },
-		...properties === void 0 ? {} : { properties }
-	};
-}
-function cloneGroupInput(input) {
-	const properties = input.properties === void 0 ? void 0 : cloneProps(input.properties);
-	return properties === void 0 ? {
-		groupType: input.groupType,
-		groupKey: input.groupKey
-	} : {
-		groupType: input.groupType,
-		groupKey: input.groupKey,
-		properties
-	};
-}
-function cloneProps(props) {
-	if (props === void 0) return void 0;
-	const cloned = {};
-	for (const [key, value] of Object.entries(props)) cloned[key] = cloneTelemetryValue(value);
-	return cloned;
+//#region src/ports/account-read.ts
+var AccountReadError = class extends Data.TaggedError("AccountReadError") {};
+function accountReadErrorFromCapxul(operation, error, cause = error) {
+	return new AccountReadError({
+		operation,
+		publicCode: error.code,
+		publicError: error,
+		cause,
+		...error.details === void 0 ? {} : { details: error.details }
+	});
 }
-function cloneTelemetryValue(value) {
-	if (Array.isArray(value)) return value.map(cloneTelemetryValue);
-	if (value === null || typeof value !== "object") return value;
-	if (Object.getPrototypeOf(value) !== Object.prototype) return value;
-	const cloned = {};
-	for (const [key, nested] of Object.entries(value)) cloned[key] = cloneTelemetryValue(nested);
-	return cloned;
+var AccountReadPortTag = class extends Context.Service()("@capxul/sdk/ports/AccountReadPort") {};
+//#endregion
+//#region src/ports/smart-account.ts
+var SmartAccountError = class extends Data.TaggedError("SmartAccountError") {};
+function smartAccountErrorFromCapxul(operation, error, cause = error) {
+	return new SmartAccountError({
+		operation,
+		publicCode: error.code,
+		publicError: error,
+		cause,
+		...error.details === void 0 ? {} : { details: error.details }
+	});
 }
+var SmartAccountPortTag = class extends Context.Service()("@capxul/sdk/ports/SmartAccountPort") {};
 //#endregion
 //#region src/flows/identity.ts
 const IDENTITY_SLOT = {
@@ -8167,7 +7163,7 @@ function accountsDepsLayer(deps) {
 }
 const readAccountProgram = Effect.gen(function* () {
 	const deps = yield* AccountsDepsTag;
-	return yield* deps.accountReadPort.readBalance({ chainId: deps.chainId }).pipe(Effect.tapError((error) => Effect.promise(() => emitAccountBalanceFailed(deps.telemetry, error.publicError))), Effect.mapError((error) => error.publicError));
+	return yield* deps.accountReadPort.readBalance(copyInvocationObservation(deps.invocationSource, { chainId: deps.chainId })).pipe(Effect.tapError((error) => Effect.promise(() => emitAccountBalanceFailed(deps.telemetry, error.publicError))), Effect.mapError((error) => error.publicError));
 });
 function fundFromFaucetProgram(amount) {
 	return Effect.gen(function* () {
@@ -8197,7 +7193,11 @@ function makeAccountsMethods(deps) {
 				ok: false,
 				error: Errors.cancelled({ operation: "accounts.read" })
 			};
-			return toCapxulResult(readAccountProgram, accountsDepsLayer(deps));
+			const controls = deps.invocationControls?.(options) ?? options;
+			return runCapxulEffect(readAccountProgram.pipe(Effect.provide(accountsDepsLayer({
+				...deps,
+				...controls === void 0 ? {} : { invocationSource: controls }
+			}))), controls, "accounts.read", deps.runPromise);
 		},
 		async fund(amount, options) {
 			if (options?.signal?.aborted) return {
@@ -8962,7 +7962,7 @@ function emitCreationFunnelTail(telemetry, org, chainId) {
 function readTreasuryProgram(orgId) {
 	return Effect.gen(function* () {
 		const deps = yield* OrgDepsTag;
-		if (deps.orgPort !== void 0) return yield* deps.orgPort.readTreasury({ orgId }).pipe(Effect.mapError((error) => error.publicError));
+		if (deps.orgPort !== void 0) return yield* deps.orgPort.readTreasury(copyInvocationObservation(deps.invocationSource, { orgId })).pipe(Effect.mapError((error) => error.publicError));
 		return zeroTreasury(orgId);
 	});
 }
@@ -9046,7 +8046,7 @@ function detectAndAcceptPendingInvitationsProgram() {
 function listOrgsProgram() {
 	return Effect.gen(function* () {
 		const deps = yield* OrgDepsTag;
-		if (deps.orgPort !== void 0) return yield* deps.orgPort.listOrgs({}).pipe(Effect.mapError((error) => error.publicError));
+		if (deps.orgPort !== void 0) return yield* deps.orgPort.listOrgs(copyInvocationObservation(deps.invocationSource, {})).pipe(Effect.mapError((error) => error.publicError));
 		return [];
 	});
 }
@@ -9134,11 +8134,28 @@ function isRetryableOrganizationSetupFailure(error) {
 * state. The closed-over `orgId` is its only entity reference.
 */
 function makeOrgMethods(deps) {
-	const layer = orgDepsLayer({
+	const orgDeps = {
 		...deps.orgPort === void 0 ? {} : { orgPort: deps.orgPort },
 		...deps.chainId === void 0 ? {} : { chainId: deps.chainId },
 		...deps.telemetry === void 0 ? {} : { telemetry: deps.telemetry }
-	});
+	};
+	const layer = orgDepsLayer(orgDeps);
+	const treasury = (orgId, controls) => {
+		return runCapxulEffect(readTreasuryProgram(orgId).pipe(Effect.provide(orgDepsLayer({
+			...orgDeps,
+			...controls === void 0 ? {} : { invocationSource: controls }
+		}))), controls, "org.treasury", deps.runPromise);
+	};
+	const listOrganizations = (controls) => {
+		if (controls?.signal?.aborted) return Promise.resolve({
+			ok: false,
+			error: Errors.cancelled({ operation: "org.orgs" })
+		});
+		return runCapxulEffect(listOrgsProgram().pipe(Effect.provide(orgDepsLayer({
+			...orgDeps,
+			...controls === void 0 ? {} : { invocationSource: controls }
+		}))), controls, "org.orgs", deps.runPromise);
+	};
 	return {
 		createOrg(input, options) {
 			if (options?.signal?.aborted) return Promise.resolve({
@@ -9147,13 +8164,7 @@ function makeOrgMethods(deps) {
 			});
 			return toCapxulResult(createOrgProgram(input), layer);
 		},
-		orgs: Object.assign((options) => {
-			if (options?.signal?.aborted) return Promise.resolve({
-				ok: false,
-				error: Errors.cancelled({ operation: "org.orgs" })
-			});
-			return toCapxulResult(listOrgsProgram(), layer);
-		}, { detectAndAcceptPendingInvitations(options) {
+		orgs: Object.assign((options) => listOrganizations(deps.invocationControls?.(options) ?? options), { detectAndAcceptPendingInvitations(options) {
 			if (options?.signal?.aborted) return Promise.resolve({
 				ok: false,
 				error: Errors.cancelled({ operation: "orgs.detectAndAcceptPendingInvitations" })
@@ -9225,19 +8236,20 @@ function makeOrgMethods(deps) {
 						ok: false,
 						error: Errors.cancelled({ operation: "org.treasury" })
 					});
-					return toCapxulResult(readTreasuryProgram(orgId), layer);
+					return treasury(orgId, deps.invocationControls?.(options) ?? options);
 				},
 				account: { async get(options) {
 					if (options?.signal?.aborted) return {
 						ok: false,
 						error: Errors.cancelled({ operation: "org.account.get" })
 					};
-					const treasury = await toCapxulResult(readTreasuryProgram(orgId), layer);
-					if (!treasury.ok) return {
+					const controls = deps.invocationControls?.(options) ?? options;
+					const treasuryResult = await treasury(orgId, controls);
+					if (!treasuryResult.ok) return {
 						ok: false,
-						error: treasury.error
+						error: treasuryResult.error
 					};
-					const orgList = await toCapxulResult(listOrgsProgram(), layer);
+					const orgList = await listOrganizations(controls);
 					if (!orgList.ok) return {
 						ok: false,
 						error: orgList.error
@@ -9246,10 +8258,10 @@ function makeOrgMethods(deps) {
 					return {
 						ok: true,
 						value: {
-							id: treasury.value.id,
+							id: treasuryResult.value.id,
 							address: org?.safeAddress ?? null,
-							balance: treasury.value.balance,
-							available: treasury.value.available
+							balance: treasuryResult.value.balance,
+							available: treasuryResult.value.available
 						}
 					};
 				} },
@@ -9401,13 +8413,16 @@ function compareDecimal(first, second) {
 //#region src/surface/holdings.ts
 function makeHoldingsMethods(deps) {
 	const functions = deps.functions ?? holdingsContract;
-	const read = (operation, actor, signal, pick) => runIfActive(signal, operation, () => deps.convexCall.action(functions.current, actor?.kind === "organization" ? { actor: {
-		kind: "organization",
-		orgId: actor.organizationId
-	} } : {}).pipe(Effect.map(pick)));
+	const read = (operation, actor, options, pick) => {
+		const controls = deps.invocationControls?.(options) ?? options;
+		return runCapxulEffect(retryIdempotentRead(deps.convexCall.action(functions.current, copyInvocationObservation(controls, actor?.kind === "organization" ? { actor: {
+			kind: "organization",
+			orgId: actor.organizationId
+		} } : {})), operation, deps.telemetry, controls).pipe(Effect.map(pick), Effect.mapError((error) => error.publicError)), controls, operation, deps.runPromise);
+	};
 	return {
-		current: (input, options) => read("holdings.current", input?.actor, options?.signal, (snapshot) => snapshot),
-		primary: (input, options) => read("holdings.primary", input?.actor, options?.signal, (snapshot) => primaryHolding(snapshot.rows))
+		current: (input, options) => read("holdings.current", input?.actor, options, (snapshot) => snapshot),
+		primary: (input, options) => read("holdings.primary", input?.actor, options, (snapshot) => primaryHolding(snapshot.rows))
 	};
 }
 //#endregion
@@ -9418,78 +8433,6 @@ function detectAuthCacheAdapter() {
 	return new InMemoryAuthCacheAdapter();
 }
 //#endregion
-//#region src/telemetry/from-posthog.ts
-const PRODUCT_INVOCATION = Symbol("capxul.product-telemetry-invocation");
-/** @internal Bind paired emit/identify/reset work to one call-start snapshot. */
-function bindProductTelemetryInvocation(telemetry, source) {
-	return telemetry[PRODUCT_INVOCATION]?.(source) ?? telemetry;
-}
-/**
-* Drop props that must never cross to a host-owned external sink. Today that is
-* the `$exception` `details` blob: `captureException` serializes
-* `CapxulError.details` (e.g. `{ asset, available, required }`, `{ name }`,
-* `{ accountId }` — errors.ts) into it, and the shared redactor has no
-* `$exception` rule, so it is stripped here at the boundary (infra#1037). The
-* safe fields (error code, operation, failure_mode, the fixed leak-safe message,
-* stack frames) are preserved.
-*/
-function stripHostUnsafeProps(props) {
-	if (props === void 0) return void 0;
-	const { details: _details, ...safe } = props;
-	return safe;
-}
-/**
-* The subset of a posthog-js client the seam calls. `identify` / `group` /
-* `reset` are optional — a host that only wants event capture can omit them.
-*/
-/**
-* Adapt the host's already-initialized posthog-like client into a
-* `TelemetryPort` for the `telemetry` prop / input. This port SUPPLANTS the
-* SDK's no-op default telemetry sink (`production.ts` binds it via
-* `Layer.succeed`, not `compose` — there is no client-side success relay to
-* compose with); it is additive to Capxul's backend first-party record and
-* never owns the client.
-*/
-function postHogProductTelemetry(policy, fixedSnapshot) {
-	const telemetry = new PostHogTelemetryAdapter({
-		capture: (name, props, source) => {
-			const snapshot = readInvocationObservation(source) ?? fixedSnapshot ?? policy.snapshot();
-			if (!snapshot.active || policy.client === null || policy.client === void 0) return;
-			const event = stampTelemetryEnvelope({
-				name,
-				props
-			}, {
-				capxul_env: policy.capxulEnv,
-				producer: "sdk"
-			});
-			policy.deliver(() => policy.client.capture(name, {
-				...stripHostUnsafeProps(event.props),
-				...observationContextProps(snapshot.context)
-			}));
-		},
-		identify: (input) => {
-			if (!(fixedSnapshot ?? policy.snapshot()).active || policy.client?.identify === void 0) return;
-			policy.deliver(() => policy.client.identify(input.distinctId, {
-				...input.traits,
-				...input.properties
-			}));
-		},
-		group: (input) => {
-			if (!(fixedSnapshot ?? policy.snapshot()).active || policy.client?.group === void 0) return;
-			policy.deliver(() => policy.client.group(input.groupType, input.groupKey, input.properties === void 0 ? void 0 : { ...input.properties }));
-		},
-		reset: () => {
-			if (!(fixedSnapshot ?? policy.snapshot()).active || policy.client?.reset === void 0) return;
-			policy.deliver(() => policy.client.reset());
-		}
-	});
-	Object.defineProperty(telemetry, PRODUCT_INVOCATION, {
-		enumerable: false,
-		value: (source) => postHogProductTelemetry(policy, readInvocationObservation(source) ?? fixedSnapshot ?? policy.snapshot())
-	});
-	return telemetry;
-}
-//#endregion
 //#region src/telemetry/identity-product.ts
 const NONE = null;
 const IDENTITY_EVENT_TAG_SET = new Set(IDENTITY_EVENT_TAGS);
@@ -9686,6 +8629,8 @@ function assembleCapxulClient(input) {
 		accountReadPort: input.ports.accountRead,
 		profileMethods: financialOps.me,
 		convexCall: input.ports.convexCall,
+		runPromise: effectRunner.runPromise,
+		invocationControls: (controls) => withHostObservationControls(observation.hostObservationSnapshot, controls),
 		...input.signer === void 0 ? {} : { signer: input.signer }
 	});
 	kickProvisioning = accountBundle.kickProvisioning;
@@ -9723,16 +8668,25 @@ function assembleCapxulClient(input) {
 	});
 	const system = makeSystemMethods({ convexCall: input.ports.convexCall });
 	const media = makeMediaMethods({ convexCall: input.ports.convexCall });
-	const holdings = makeHoldingsMethods({ convexCall: input.ports.convexCall });
+	const holdings = makeHoldingsMethods({
+		convexCall: input.ports.convexCall,
+		telemetry: input.ports.telemetry,
+		runPromise: effectRunner.runPromise,
+		invocationControls: (controls) => withHostObservationControls(observation.hostObservationSnapshot, controls)
+	});
 	const accounts = makeAccountsMethods({
 		accountReadPort: input.ports.accountRead,
 		chainId: input.bootstrap.chainId,
-		telemetry: input.ports.telemetry
+		telemetry: input.ports.telemetry,
+		runPromise: effectRunner.runPromise,
+		invocationControls: (controls) => withHostObservationControls(observation.hostObservationSnapshot, controls)
 	});
 	const orgMethods = makeOrgMethods({
 		actor,
 		chainId: input.bootstrap.chainId,
 		telemetry: input.ports.telemetry,
+		runPromise: effectRunner.runPromise,
+		invocationControls: (controls) => withHostObservationControls(observation.hostObservationSnapshot, controls),
 		requestKeyScope: `${input.bootstrap.convexUrl}:${String(input.bootstrap.chainId)}`,
 		...selectedOrgPort === void 0 ? {} : { orgPort: selectedOrgPort },
 		convexCall: input.ports.convexCall,
@@ -9869,11 +8823,7 @@ function transitionError(record) {
 }
 function withHostObservation(actor, snapshot) {
 	if (snapshot === void 0) return actor;
-	const controls = (input) => {
-		const captured = snapshot();
-		const copied = { ...input };
-		return captured === void 0 ? copied : attachInvocationObservation(copied, captured);
-	};
+	const controls = (input) => withHostObservationControls(snapshot, input);
 	return {
 		...actor,
 		ask: (event, input) => actor.ask(event, controls(input)),
@@ -9881,5 +8831,10 @@ function withHostObservation(actor, snapshot) {
 		restoreAuthSession: (session, input) => actor.restoreAuthSession(session, controls(input))
 	};
 }
+function withHostObservationControls(snapshot, input) {
+	const copied = { ...input };
+	const captured = snapshot?.();
+	return captured === void 0 ? copied : attachInvocationObservation(copied, captured);
+}
 //#endregion
-export { deriveCapxulSafeAddress as $, postHogFailureObservation as A, injectedWalletSigner as B, fingerprintPaymentIntent as C, failureEvidenceProps as D, failureDetail as E, isSettingUpLifecycle as F, PAYMENT_DIRECTIONS as G, OBSERVATION_CONTEXT_HEADER as H, formatTraceparent as I, BootstrapEnvelope as J, PAYMENT_STATUSES as K, copyInvocationObservation as L, captureExceptionSync as M, version as N, observationContextProps as O, fromWei as P, BASE_SEPOLIA_CHAIN_ID as Q, readInvocationObservation as R, AuthClientPortTag as S, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT as T, encodeObservationContextHeader as U, signerFailure as V, sanitizeObservationContext as W, CAPXUL_PAYMENTS_V2_ADDRESS as X, EngineeringTelemetryBootstrapPolicy as Y, normalizeBindingEmail as Z, ClockPortTag as _, TelemetryPortTag as a, authClientPortFromPromiseAdapter as b, smartAccountErrorFromCapxul as c, wireChainId as d, destination as et, IdentityPortTag as f, ClockError as g, convexCallErrorFromCapxul as h, PostHogTelemetryLayer as i, captureException as j, observeFailedResult as k, AccountReadPortTag as l, ConvexCallPortTag as m, postHogProductTelemetry as n, isRestoring as nt, redactTelemetryEvent as o, identityErrorFromCapxul as p, CAPXUL_FUNCTIONS as q, detectAuthCacheAdapter as r, SmartAccountPortTag as s, assembleCapxulClient as t, isClaimed as tt, accountReadErrorFromCapxul as u, BootstrapPortTag as v, toWei as w, AuthClientError as x, bootstrapErrorFromCapxul as y, causeChain as z };
+export { EngineeringTelemetryBootstrapPolicy as $, normalizeExceptionErrorKind as A, isSignerNotReadySignal as B, failureDetail as C, postHogFailureObservation as D, observeFailedResult as E, fromWei as F, readInvocationObservation as G, signerFailure as H, isSettingUpLifecycle as I, sanitizeObservationContext as J, OBSERVATION_CONTEXT_HEADER as K, formatTraceparent as L, projectSdkException as M, safeExceptionLabel as N, EXCEPTION_MESSAGE as O, version as P, BootstrapEnvelope as Q, causeChain as R, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT as S, observationContextProps as T, resolveFailureMode as U, openfortSignerNotReadyCode as V, copyInvocationObservation as W, PAYMENT_STATUSES as X, PAYMENT_DIRECTIONS as Y, CAPXUL_FUNCTIONS as Z, convexCallErrorFromCapxul as _, AccountReadPortTag as a, fingerprintPaymentIntent as b, redactTelemetryEvent as c, retryIdempotentRead as d, destination as et, PRODUCT_INVOCATION as f, ConvexCallPortTag as g, identityErrorFromCapxul as h, smartAccountErrorFromCapxul as i, normalizeExceptionOperation as j, SDK_VERSION as k, redactTelemetryProps as l, IdentityPortTag as m, detectAuthCacheAdapter as n, isRestoring as nt, accountReadErrorFromCapxul as o, wireChainId as p, encodeObservationContextHeader as q, SmartAccountPortTag as r, TelemetryPortTag as s, assembleCapxulClient as t, isClaimed as tt, stampTelemetryEnvelope as u, BootstrapPortTag as v, failureEvidenceProps as w, toWei as x, bootstrapErrorFromCapxul as y, injectedWalletSigner as z };