@capxul/sdk 2.8.2 → 3.0.2

package/dist/{create-capxul-client-BKJHefmA.mjs → create-capxul-client-Ch_pfcoR.mjs}

@@ -1,5 +1,5 @@
-import { A as toPartyId, B as Errors, G as decodeChainCause, H as CHAIN_UPSTREAMS, J as revertSummaryText, K as failureFingerprint, L as CAPXUL_ERROR_CODES, M as toPayrollRunId, P as toRoleKey, R as CapxulError, S as toCurrencyCode, U as FAILURE_MODES$1, V as isCapxulError, W as chainCauseProperties, b as toChainId, c as BYTES32_RE, d as WEI_RE, f as ZERO_BYTES32, h as toAddress, j as toPayrollGroupId, k as toOrgId, l as EVM_ADDRESS_RE$1, m as toAccountId, n as BrowserAuthCacheAdapter, q as isFailureMode, s as APP_ID_RE, t as InMemoryAuthCacheAdapter, u as SUPPORTED_CURRENCY_CODES, v as toAuthUserId, w as toEmail, x as toCountryCode, y as toBudgetId, z as EXPECTED_OPERATION_OUTCOMES } from "./InMemoryAuthCacheAdapter-BrEN-men.mjs";
-import { concat, encodeAbiParameters, encodeFunctionData, encodePacked, formatUnits, getContractAddress, keccak256, padHex, parseUnits, recoverAddress, stringToHex, toBytes, toEventSelector, toFunctionSelector, toFunctionSignature } from "viem";
+import { $ as CHAIN_UPSTREAMS, A as toBudgetId, B as toOrgId, C as ZERO_BYTES32, E as toAddress, F as toEmail, G as toRoleKey, H as toPayrollGroupId, J as CAPXUL_ERROR_CODES, M as toCountryCode, N as toCurrencyCode, Q as isCapxulError, S as WEI_RE, T as toAccountId, U as toPayrollRunId, V as toPartyId, X as EXPECTED_OPERATION_OUTCOMES, Y as CapxulError, Z as Errors, _ as deriveCapxulSafeAddress, at as failureFingerprint, b as EVM_ADDRESS_RE$1, ct as revertSummaryText, et as FAILURE_MODES$1, it as decodeChainCause, j as toChainId, k as toAuthUserId, lt as containsSensitiveMaterial, n as InMemoryAuthCacheAdapter, nt as chainCauseProperties, ot as isChainUpstream, p as orgRoleKeyForLabel, r as BrowserAuthCacheAdapter, rt as chainEvidenceLabel, st as isFailureMode, tt as boundedResponseHeaders, ut as redactSecrets, v as APP_ID_RE, x as SUPPORTED_CURRENCY_CODES, y as BYTES32_RE } from "./clock-m_aHLaNm.mjs";
+import { formatUnits, keccak256, parseUnits, recoverAddress, toBytes } from "viem";
 import { Context, Data, Deferred, Duration, Effect, Exit, Fiber, Layer, Queue, Ref, Result, Schema, SchemaGetter, Scope } from "effect";
 import { makeFunctionReference } from "convex/server";
 //#region src/domain/identity/model.ts
@@ -19,7 +19,10 @@ const DEFINITIVE_PROVIDER_MODES = /* @__PURE__ */ new Set([
 	"insufficient-balance",
 	"insufficient-allowance",
 	"rejected",
-	"unauthorized"
+	"unauthorized",
+	"forbidden",
+	"bad-request",
+	"method-unsupported"
 ]);
 const isRetryable = (failure) => {
 	if (failure.code === "CANCELLED" || failure.code === "SIGNER_REJECTED") return true;
@@ -398,938 +401,6 @@ const isRestoring = (state) => {
 * it in #1521; this ticket ships the selector they move onto. */
 const isClaimed = (state) => state.phase === "authenticated" && state.account.at === "claimed";
 //#endregion
-//#region ../config/src/tokens.ts
-/** `TestUSDC` ("USDX") — Base Sepolia, 6 decimals, open `mint`. (Canon §1.) */
-const USDX_ADDRESS_BASE_SEPOLIA = "0xf09fcbb6df9f8f918e58f9c8ab15a76ade862b77";
-USDX_ADDRESS_BASE_SEPOLIA.toLowerCase();
-//#endregion
-//#region ../config/src/org-payments.ts
-/** Zodiac MultiSendCallOnly module on Base Sepolia. */
-const MULTI_SEND_CALL_ONLY = "0x9641d764fc13c8b624c04430c7356c1c7c8102e2";
-//#endregion
-//#region ../config/src/safe.ts
-const BASE_SEPOLIA_CHAIN_ID = 84532;
-const SAFE_PROXY_FACTORY = "0x4e1DCf7AD4e460CfD30791CCC4F9c8a4f820ec67";
-const SAFE_L2_SINGLETON = "0x29fcB43b46531BcA003ddC8FCB67FFE91900C762";
-const SAFE_MODULE_SETUP = "0x2dd68b007B46fBe91B9A7c3EDa5A7a1063cB5b47";
-const SAFE_4337_MODULE = "0x75cf11467937ce3F2f357CE24ffc3DBF8fD5c226";
-const MULTI_SEND = "0x38869bf66a61cF6bDB996A6aE40D5853Fd43B526";
-/**
-* The Capxul bootstrap owner — the sole `setup()` owner of every unclaimed
-* personal Safe under derivation v2. This address is part of the CREATE2
-* preimage of EVERY personal Safe address: treat it exactly like
-* `SAFE_PROXY_FACTORY` (changing it is a derivation-version event → v3).
-* The private key lives backend-only (`CAPXUL_BOOTSTRAP_OWNER_PRIVATE_KEY`)
-* and signs exactly one kind of operation: the claim userOp that deploys the
-* Safe and swaps this owner out for the user's signer (PRD #462). The earlier
-* ClaimGuard derivation-v3 placeholder (#461) is closed; future mainnet-scale
-* hardening should be filed against the current payments/claim architecture.
-*/
-const CAPXUL_BOOTSTRAP_OWNER = "0x425fca96f4a3e18fb80974e38096b5da460f2704";
-const SAFE_PROXY_CREATION_CODE = "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";
-/**
-* Normalize an email for use as a Capxul Safe salt input.
-*
-* Trims surrounding whitespace and lowercases the address so that
-* `"  User+Demo@Example.COM  "` and `"user+demo@example.com"` derive
-* the same `safeAddress`. This is the canonical normalization rule —
-* any future change here would shift every existing user's Safe
-* address, so the rule is pinned by the fixture matrix in
-* `packages/config/tests/safe-address-conformance.test.ts`.
-*
-* @param email - The raw email address to normalize
-* @returns The trimmed, lowercased email
-*/
-function normalizeSafeSaltEmail(email) {
-	return email.trim().toLowerCase();
-}
-/**
-* Compute the deterministic Safe salt nonce for a `(namespace, email)`
-* pair. The salt nonce is the `bigint` reading of
-* `keccak256(namespace + ":" + normalizeSafeSaltEmail(email))`.
-*
-* Namespace defaults to `CAPXUL_SAFE_SALT_NAMESPACE`
-* (`"capxul:safe:email:v2"`) — the per-version Capxul scheme. Pass a
-* different namespace only for pinned pre-v2 artifacts
-* (`CAPXUL_SAFE_SALT_NAMESPACE_V1`, faucet Safe) or when bumping the scheme.
-*
-* @param input.email - The email to derive the salt nonce from
-* @param input.namespace - Optional namespace override (defaults to `CAPXUL_SAFE_SALT_NAMESPACE`)
-* @returns The Capxul-namespaced salt nonce as a `bigint`
-*/
-function computeCapxulSafeSaltNonce(input) {
-	const namespace = input.namespace ?? "capxul:safe:email:v2";
-	const normalizedEmail = normalizeSafeSaltEmail(input.email);
-	return BigInt(keccak256(toBytes(`${namespace}:${normalizedEmail}`)));
-}
-const ZERO_ADDRESS = "0x0000000000000000000000000000000000000000";
-const safeSetupAbi = [{
-	type: "function",
-	name: "setup",
-	stateMutability: "nonpayable",
-	inputs: [
-		{
-			name: "_owners",
-			type: "address[]"
-		},
-		{
-			name: "_threshold",
-			type: "uint256"
-		},
-		{
-			name: "to",
-			type: "address"
-		},
-		{
-			name: "data",
-			type: "bytes"
-		},
-		{
-			name: "fallbackHandler",
-			type: "address"
-		},
-		{
-			name: "paymentToken",
-			type: "address"
-		},
-		{
-			name: "payment",
-			type: "uint256"
-		},
-		{
-			name: "paymentReceiver",
-			type: "address"
-		}
-	],
-	outputs: []
-}];
-const enableModulesAbi = [{
-	type: "function",
-	name: "enableModules",
-	stateMutability: "nonpayable",
-	inputs: [{
-		name: "modules",
-		type: "address[]"
-	}],
-	outputs: []
-}];
-const multiSendAbi = [{
-	type: "function",
-	name: "multiSend",
-	stateMutability: "payable",
-	inputs: [{
-		name: "transactions",
-		type: "bytes"
-	}],
-	outputs: []
-}];
-function buildCapxulSafeInitializer(owner) {
-	const enableModulesCall = encodeFunctionData({
-		abi: enableModulesAbi,
-		functionName: "enableModules",
-		args: [[SAFE_4337_MODULE]]
-	});
-	const enableModulesByteLen = BigInt((enableModulesCall.length - 2) / 2);
-	const multiSendPayload = encodePacked([
-		"uint8",
-		"address",
-		"uint256",
-		"uint256",
-		"bytes"
-	], [
-		1,
-		SAFE_MODULE_SETUP,
-		0n,
-		enableModulesByteLen,
-		enableModulesCall
-	]);
-	const setupData = encodeFunctionData({
-		abi: multiSendAbi,
-		functionName: "multiSend",
-		args: [multiSendPayload]
-	});
-	return encodeFunctionData({
-		abi: safeSetupAbi,
-		functionName: "setup",
-		args: [
-			[owner],
-			1n,
-			MULTI_SEND,
-			setupData,
-			SAFE_4337_MODULE,
-			ZERO_ADDRESS,
-			0n,
-			ZERO_ADDRESS
-		]
-	});
-}
-const ADDRESS_REGEX = /^0x[0-9a-fA-F]{40}$/;
-function validateAndNormalizeAddress(field, value) {
-	const address = value.toLowerCase();
-	if (!ADDRESS_REGEX.test(address)) throw Errors.invalidInput(field, `must be 0x + 40 hex chars, got ${value}`);
-	return address;
-}
-/**
-* Pure derivation of the Capxul personal Safe address — **v2: email only**
-* (PRD #462). The Safe v1.4.1 (SafeL2) + 4337-module initializer's sole owner
-* is the fixed `CAPXUL_BOOTSTRAP_OWNER`, so the address is a pure function of
-* the (normalized) email and exists before any user signer does. The user's
-* signer is installed at claim time via `swapOwner` — signer rotation can
-* never move the address (org-domain rule D7, now system-wide).
-*
-* Returns the lowercased `0x` + 40 hex string (raw — no brand applied so this
-* function is callable from both `@capxul/config` consumers that don't have
-* `@capxul/types` available, and from packages that re-brand at their own
-* boundary).
-*
-* Algorithm: exactly mirrors `permissionless.toSafeSmartAccount({ version:
-* "1.4.1", safeSingletonAddress: SAFE_L2_SINGLETON, owners: [BOOTSTRAP] })`
-* + the Capxul-canonical module setup (delegatecall into
-* `SafeModuleSetup.enableModules([SAFE_4337_MODULE])` via the MultiSend lane
-* during proxy setup). The proxy creation code is pinned at
-* `SAFE_PROXY_CREATION_CODE`; the salt is Capxul-namespaced (v2) via
-* `computeCapxulSafeSaltNonce({ email })`.
-*
-* Canonical: SDK deployment adapters and
-* `packages/backend/convex/smartAccount/mutations.ts:provision` import this
-* function; the conformance test at
-* `packages/config/tests/safe-address-conformance.test.ts` pins the matrix.
-*/
-function deriveCapxulSafeAddress(input) {
-	return deriveCapxulSafeAddressForOwner({
-		ownerAddress: CAPXUL_BOOTSTRAP_OWNER,
-		email: input.email
-	});
-}
-/**
-* Owner-parametrized derivation core. Two callers only:
-* 1. `deriveCapxulSafeAddress` (canonical v2: owner = bootstrap, namespace v2);
-* 2. the backend faucet Safe (`testUsdcMint.ts`: owner = deployer EOA,
-*    namespace pinned to `CAPXUL_SAFE_SALT_NAMESPACE_V1` so its deployed
-*    address never moves).
-* Do NOT introduce new owner-parametrized lanes — per-user owners in the
-* derivation is exactly the v1 mistake v2 removes.
-*/
-function deriveCapxulSafeAddressForOwner(input) {
-	const initializer = buildCapxulSafeInitializer(validateAndNormalizeAddress("ownerAddress", input.ownerAddress));
-	const saltNonce = computeCapxulSafeSaltNonce(input.namespace === void 0 ? { email: input.email } : {
-		email: input.email,
-		namespace: input.namespace
-	});
-	const salt = keccak256(encodePacked(["bytes32", "uint256"], [keccak256(initializer), saltNonce]));
-	const deploymentCode = concat([SAFE_PROXY_CREATION_CODE, encodeAbiParameters([{ type: "uint256" }], [BigInt(SAFE_L2_SINGLETON)])]);
-	return getContractAddress({
-		opcode: "CREATE2",
-		from: SAFE_PROXY_FACTORY,
-		salt,
-		bytecodeHash: keccak256(deploymentCode)
-	}).toLowerCase();
-}
-/**
-* Normalize a raw email for binding id + Safe salt derivation.
-* Delegates to {@link normalizeSafeSaltEmail} so binding resolution and
-* `deriveCapxulSafeAddress` never drift apart.
-*/
-function normalizeBindingEmail(email) {
-	return normalizeSafeSaltEmail(email);
-}
-//#endregion
-//#region ../config/src/capxul-payments-v2.ts
-/** The exact compiled CapxulPaymentsV2 ABI. */
-const CAPXUL_PAYMENTS_V2_ABI = [
-	{
-		type: "function",
-		name: "cancel",
-		inputs: [{
-			name: "commitmentId",
-			type: "uint256",
-			internalType: "uint256"
-		}, {
-			name: "documentHash",
-			type: "bytes32",
-			internalType: "bytes32"
-		}],
-		outputs: [],
-		stateMutability: "nonpayable"
-	},
-	{
-		type: "function",
-		name: "claim",
-		inputs: [{
-			name: "commitmentId",
-			type: "uint256",
-			internalType: "uint256"
-		}],
-		outputs: [],
-		stateMutability: "nonpayable"
-	},
-	{
-		type: "function",
-		name: "claimableAmount",
-		inputs: [{
-			name: "commitmentId",
-			type: "uint256",
-			internalType: "uint256"
-		}],
-		outputs: [{
-			name: "",
-			type: "uint256",
-			internalType: "uint256"
-		}],
-		stateMutability: "view"
-	},
-	{
-		type: "function",
-		name: "commitments",
-		inputs: [{
-			name: "",
-			type: "uint256",
-			internalType: "uint256"
-		}],
-		outputs: [
-			{
-				name: "settlementId",
-				type: "bytes32",
-				internalType: "bytes32"
-			},
-			{
-				name: "creator",
-				type: "address",
-				internalType: "address"
-			},
-			{
-				name: "recipient",
-				type: "address",
-				internalType: "address"
-			},
-			{
-				name: "token",
-				type: "address",
-				internalType: "address"
-			},
-			{
-				name: "totalAmount",
-				type: "uint256",
-				internalType: "uint256"
-			},
-			{
-				name: "claimed",
-				type: "uint256",
-				internalType: "uint256"
-			},
-			{
-				name: "startTime",
-				type: "uint48",
-				internalType: "uint48"
-			},
-			{
-				name: "cliffTime",
-				type: "uint48",
-				internalType: "uint48"
-			},
-			{
-				name: "endTime",
-				type: "uint48",
-				internalType: "uint48"
-			},
-			{
-				name: "kind",
-				type: "uint16",
-				internalType: "uint16"
-			},
-			{
-				name: "documentHash",
-				type: "bytes32",
-				internalType: "bytes32"
-			},
-			{
-				name: "cancelled",
-				type: "bool",
-				internalType: "bool"
-			}
-		],
-		stateMutability: "view"
-	},
-	{
-		type: "function",
-		name: "createCommitment",
-		inputs: [{
-			name: "input",
-			type: "tuple",
-			internalType: "struct CapxulPaymentsV2.CommitmentInput",
-			components: [
-				{
-					name: "settlementId",
-					type: "bytes32",
-					internalType: "bytes32"
-				},
-				{
-					name: "recipient",
-					type: "address",
-					internalType: "address"
-				},
-				{
-					name: "token",
-					type: "address",
-					internalType: "address"
-				},
-				{
-					name: "totalAmount",
-					type: "uint256",
-					internalType: "uint256"
-				},
-				{
-					name: "startTime",
-					type: "uint48",
-					internalType: "uint48"
-				},
-				{
-					name: "cliffTime",
-					type: "uint48",
-					internalType: "uint48"
-				},
-				{
-					name: "endTime",
-					type: "uint48",
-					internalType: "uint48"
-				},
-				{
-					name: "kind",
-					type: "uint16",
-					internalType: "uint16"
-				},
-				{
-					name: "documentHash",
-					type: "bytes32",
-					internalType: "bytes32"
-				}
-			]
-		}],
-		outputs: [{
-			name: "commitmentId",
-			type: "uint256",
-			internalType: "uint256"
-		}],
-		stateMutability: "nonpayable"
-	},
-	{
-		type: "function",
-		name: "nextCommitmentId",
-		inputs: [],
-		outputs: [{
-			name: "",
-			type: "uint256",
-			internalType: "uint256"
-		}],
-		stateMutability: "view"
-	},
-	{
-		type: "function",
-		name: "redirect",
-		inputs: [
-			{
-				name: "commitmentId",
-				type: "uint256",
-				internalType: "uint256"
-			},
-			{
-				name: "recipient",
-				type: "address",
-				internalType: "address"
-			},
-			{
-				name: "documentHash",
-				type: "bytes32",
-				internalType: "bytes32"
-			}
-		],
-		outputs: [],
-		stateMutability: "nonpayable"
-	},
-	{
-		type: "function",
-		name: "send",
-		inputs: [{
-			name: "item",
-			type: "tuple",
-			internalType: "struct CapxulPaymentsV2.PaymentItem",
-			components: [
-				{
-					name: "settlementId",
-					type: "bytes32",
-					internalType: "bytes32"
-				},
-				{
-					name: "recipient",
-					type: "address",
-					internalType: "address"
-				},
-				{
-					name: "token",
-					type: "address",
-					internalType: "address"
-				},
-				{
-					name: "amount",
-					type: "uint256",
-					internalType: "uint256"
-				},
-				{
-					name: "kind",
-					type: "uint16",
-					internalType: "uint16"
-				},
-				{
-					name: "documentHash",
-					type: "bytes32",
-					internalType: "bytes32"
-				}
-			]
-		}],
-		outputs: [],
-		stateMutability: "nonpayable"
-	},
-	{
-		type: "function",
-		name: "sendBatch",
-		inputs: [{
-			name: "items",
-			type: "tuple[]",
-			internalType: "struct CapxulPaymentsV2.PaymentItem[]",
-			components: [
-				{
-					name: "settlementId",
-					type: "bytes32",
-					internalType: "bytes32"
-				},
-				{
-					name: "recipient",
-					type: "address",
-					internalType: "address"
-				},
-				{
-					name: "token",
-					type: "address",
-					internalType: "address"
-				},
-				{
-					name: "amount",
-					type: "uint256",
-					internalType: "uint256"
-				},
-				{
-					name: "kind",
-					type: "uint16",
-					internalType: "uint16"
-				},
-				{
-					name: "documentHash",
-					type: "bytes32",
-					internalType: "bytes32"
-				}
-			]
-		}],
-		outputs: [],
-		stateMutability: "nonpayable"
-	},
-	{
-		type: "function",
-		name: "vestedAmount",
-		inputs: [{
-			name: "commitmentId",
-			type: "uint256",
-			internalType: "uint256"
-		}],
-		outputs: [{
-			name: "",
-			type: "uint256",
-			internalType: "uint256"
-		}],
-		stateMutability: "view"
-	},
-	{
-		type: "event",
-		name: "CommitmentCancelled",
-		inputs: [
-			{
-				name: "commitmentId",
-				type: "uint256",
-				indexed: true,
-				internalType: "uint256"
-			},
-			{
-				name: "settlementId",
-				type: "bytes32",
-				indexed: true,
-				internalType: "bytes32"
-			},
-			{
-				name: "creator",
-				type: "address",
-				indexed: true,
-				internalType: "address"
-			},
-			{
-				name: "vestedUnclaimed",
-				type: "uint256",
-				indexed: false,
-				internalType: "uint256"
-			},
-			{
-				name: "unvestedReturned",
-				type: "uint256",
-				indexed: false,
-				internalType: "uint256"
-			},
-			{
-				name: "documentHash",
-				type: "bytes32",
-				indexed: false,
-				internalType: "bytes32"
-			}
-		],
-		anonymous: false
-	},
-	{
-		type: "event",
-		name: "CommitmentCreated",
-		inputs: [
-			{
-				name: "commitmentId",
-				type: "uint256",
-				indexed: true,
-				internalType: "uint256"
-			},
-			{
-				name: "settlementId",
-				type: "bytes32",
-				indexed: true,
-				internalType: "bytes32"
-			},
-			{
-				name: "creator",
-				type: "address",
-				indexed: true,
-				internalType: "address"
-			},
-			{
-				name: "recipient",
-				type: "address",
-				indexed: false,
-				internalType: "address"
-			},
-			{
-				name: "token",
-				type: "address",
-				indexed: false,
-				internalType: "address"
-			},
-			{
-				name: "totalAmount",
-				type: "uint256",
-				indexed: false,
-				internalType: "uint256"
-			},
-			{
-				name: "startTime",
-				type: "uint48",
-				indexed: false,
-				internalType: "uint48"
-			},
-			{
-				name: "cliffTime",
-				type: "uint48",
-				indexed: false,
-				internalType: "uint48"
-			},
-			{
-				name: "endTime",
-				type: "uint48",
-				indexed: false,
-				internalType: "uint48"
-			},
-			{
-				name: "kind",
-				type: "uint16",
-				indexed: false,
-				internalType: "uint16"
-			},
-			{
-				name: "documentHash",
-				type: "bytes32",
-				indexed: false,
-				internalType: "bytes32"
-			}
-		],
-		anonymous: false
-	},
-	{
-		type: "event",
-		name: "CommitmentRedirected",
-		inputs: [
-			{
-				name: "commitmentId",
-				type: "uint256",
-				indexed: true,
-				internalType: "uint256"
-			},
-			{
-				name: "settlementId",
-				type: "bytes32",
-				indexed: true,
-				internalType: "bytes32"
-			},
-			{
-				name: "oldRecipient",
-				type: "address",
-				indexed: true,
-				internalType: "address"
-			},
-			{
-				name: "newRecipient",
-				type: "address",
-				indexed: false,
-				internalType: "address"
-			},
-			{
-				name: "documentHash",
-				type: "bytes32",
-				indexed: false,
-				internalType: "bytes32"
-			}
-		],
-		anonymous: false
-	},
-	{
-		type: "event",
-		name: "FundsClaimed",
-		inputs: [
-			{
-				name: "commitmentId",
-				type: "uint256",
-				indexed: true,
-				internalType: "uint256"
-			},
-			{
-				name: "settlementId",
-				type: "bytes32",
-				indexed: true,
-				internalType: "bytes32"
-			},
-			{
-				name: "recipient",
-				type: "address",
-				indexed: true,
-				internalType: "address"
-			},
-			{
-				name: "amount",
-				type: "uint256",
-				indexed: false,
-				internalType: "uint256"
-			},
-			{
-				name: "documentHash",
-				type: "bytes32",
-				indexed: false,
-				internalType: "bytes32"
-			}
-		],
-		anonymous: false
-	},
-	{
-		type: "event",
-		name: "PaymentSent",
-		inputs: [
-			{
-				name: "settlementId",
-				type: "bytes32",
-				indexed: true,
-				internalType: "bytes32"
-			},
-			{
-				name: "sender",
-				type: "address",
-				indexed: true,
-				internalType: "address"
-			},
-			{
-				name: "recipient",
-				type: "address",
-				indexed: true,
-				internalType: "address"
-			},
-			{
-				name: "token",
-				type: "address",
-				indexed: false,
-				internalType: "address"
-			},
-			{
-				name: "amount",
-				type: "uint256",
-				indexed: false,
-				internalType: "uint256"
-			},
-			{
-				name: "kind",
-				type: "uint16",
-				indexed: false,
-				internalType: "uint16"
-			},
-			{
-				name: "documentHash",
-				type: "bytes32",
-				indexed: false,
-				internalType: "bytes32"
-			}
-		],
-		anonymous: false
-	},
-	{
-		type: "error",
-		name: "AlreadyCancelled",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "AlreadyClaimed",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "DocumentHashMismatch",
-		inputs: [{
-			name: "expected",
-			type: "bytes32",
-			internalType: "bytes32"
-		}, {
-			name: "supplied",
-			type: "bytes32",
-			internalType: "bytes32"
-		}]
-	},
-	{
-		type: "error",
-		name: "InvalidTimeParams",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "NotCreator",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "NotRecipient",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "NothingToClaim",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "SettlementIdConsumed",
-		inputs: [{
-			name: "settlementId",
-			type: "bytes32",
-			internalType: "bytes32"
-		}]
-	},
-	{
-		type: "error",
-		name: "TokenCallReturnedFalse",
-		inputs: [{
-			name: "token",
-			type: "address",
-			internalType: "address"
-		}]
-	},
-	{
-		type: "error",
-		name: "TokenHasNoCode",
-		inputs: [{
-			name: "token",
-			type: "address",
-			internalType: "address"
-		}]
-	},
-	{
-		type: "error",
-		name: "ZeroAddress",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "ZeroAmount",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "ZeroDocumentHash",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "ZeroSettlementId",
-		inputs: []
-	}
-];
-/** Immutable CapxulPaymentsV2 deployment on Base Sepolia. */
-const CAPXUL_PAYMENTS_V2_ADDRESS = "0x7a5c25aB7ce91d7a475B71cd1ec33E230291f8a4";
-//#endregion
-//#region ../config/src/route.ts
-/** USDX on Base Sepolia — the only settlement token in v1. */
-const USDX_BASE_SEPOLIA_TOKEN = {
-	chainId: BASE_SEPOLIA_CHAIN_ID,
-	address: USDX_ADDRESS_BASE_SEPOLIA,
-	decimals: 6
-};
-USDX_BASE_SEPOLIA_TOKEN.chainId;
-USDX_BASE_SEPOLIA_TOKEN.chainId;
-10n ** BigInt(6);
-function normalizeOrgRoleLabel(label) {
-	const normalized = label.trim().replace(/\s+/g, " ");
-	if (normalized.length === 0) throw Errors.invalidInput("role.label", "must be a non-empty role label");
-	return normalized;
-}
-function orgRoleKeyForLabel(label) {
-	return keccak256(toBytes(normalizeOrgRoleLabel(label).toLowerCase()));
-}
-padHex(stringToHex("FM_DAILY"), {
-	size: 32,
-	dir: "right"
-}), padHex(stringToHex("TL_DAILY"), {
-	size: 32,
-	dir: "right"
-});
-padHex(concat([MULTI_SEND_CALL_ONLY, "0x8d80ff0a"]), {
-	dir: "right",
-	size: 32
-});
-function paymentsV2Signature(name) {
-	const item = CAPXUL_PAYMENTS_V2_ABI.find((candidate) => candidate.type === "function" && candidate.name === name);
-	if (item === void 0) throw new Error(`CapxulPaymentsV2 ABI has no ${name} function`);
-	return toFunctionSignature(item);
-}
-paymentsV2Signature("send");
-paymentsV2Signature("sendBatch");
-paymentsV2Signature("createCommitment");
-paymentsV2Signature("cancel");
-paymentsV2Signature("redirect");
-new Map([
-	["assignRoles(address,bytes32[],bool[])", "AssignRoles(address,bytes32[],bool[])"],
-	["allowTarget(bytes32,address,uint8)", "AllowTarget(bytes32,address,uint8)"],
-	["scopeTarget(bytes32,address)", "ScopeTarget(bytes32,address)"],
-	["revokeTarget(bytes32,address)", "RevokeTarget(bytes32,address)"],
-	["allowFunction(bytes32,address,bytes4,uint8)", "AllowFunction(bytes32,address,bytes4,uint8)"],
-	["scopeFunction(bytes32,address,bytes4,(uint8,uint8,uint8,bytes)[],uint8)", "ScopeFunction(bytes32,address,bytes4,(uint8,uint8,uint8,bytes)[],uint8)"],
-	["revokeFunction(bytes32,address,bytes4)", "RevokeFunction(bytes32,address,bytes4)"],
-	["setAllowance(bytes32,uint128,uint128,uint128,uint64,uint64)", "SetAllowance(bytes32,uint128,uint128,uint128,uint64,uint64)"]
-].map(([functionSignature, eventSignature]) => [toFunctionSelector(functionSignature), toEventSelector(eventSignature)]));
-//#endregion
 //#region ../wire/src/brands.ts
 const lowercasedString = Schema.String.pipe(Schema.decodeTo(Schema.String, {
 	decode: SchemaGetter.transform((value) => value.toLowerCase()),
@@ -2950,33 +2021,6 @@ Schema.Struct({
 @media (max-width:540px){.capxul-doc{padding:1.75rem 1.25rem}.capxul-doc .doc-parties{grid-template-columns:1fr}}
 `.trim();
 //#endregion
-//#region ../wire/src/secret-material.ts
-const SENSITIVE_MATERIAL_PATTERNS = [
-	/0x[a-fA-F0-9]{40,}/u,
-	/(?:^|[^a-fA-F0-9])[a-fA-F0-9]{64}(?:$|[^a-fA-F0-9])/u,
-	/eyJ[A-Za-z0-9_-]*\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/u,
-	/(?:(?:sk|pk|rk)_(?:live|test)|(?:phc|phx|ghp|gho|ghu|ghs|ghr|whsec)_|github_pat_|xox[baprs]-|AKIA[0-9A-Z]{16}|AIza)[A-Za-z0-9_-]*/iu
-];
-const RAW_PRIVATE_KEY_MASK = /(^|[^a-fA-F0-9])[a-fA-F0-9]{64}(?=$|[^a-fA-F0-9])/gu;
-const KNOWN_CREDENTIAL_MASK = /(?:(?:sk|pk|rk)_(?:live|test)|(?:phc|phx|ghp|gho|ghu|ghs|ghr|whsec)_|github_pat_|xox[baprs]-|AKIA[0-9A-Z]{16}|AIza)[A-Za-z0-9_-]*/giu;
-const LABELLED_SECRET_MASK = /\b(api[ _-]?key|access[ _-]?token|token|secret|password|passphrase|private[ _-]?key|authorization|cookie|signature|request[ _-]?body|credential|otp|one[ _-]?time[ _-]?(?:password|code)|verification[ _-]?code)\b\s*[:=]\s*(?:"[^"]*"|'[^']*'|[^\s,;]+)/giu;
-/**
-* Reject: does the value carry any known secret material? Best effort — callers
-* drop the whole value on a match; a false negative is a leak, a false positive
-* merely omits an observation field.
-*/
-function containsSensitiveMaterial(value) {
-	return SENSITIVE_MATERIAL_PATTERNS.some((pattern) => pattern.test(value));
-}
-/**
-* Mask: return the value with every known secret rewritten to `[REDACTED]`,
-* preserving surrounding text. Used where a value must still be shown (log
-* lines, issue bodies) but must not carry live credentials.
-*/
-function redactSecrets(value) {
-	return value.replace(/\bBearer\s+[^\s,;]+/giu, "Bearer [REDACTED]").replace(/\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\b/gu, "[REDACTED]").replace(/\b0x[a-fA-F0-9]{40,}\b/gu, "[REDACTED]").replace(RAW_PRIVATE_KEY_MASK, "$1[REDACTED]").replace(KNOWN_CREDENTIAL_MASK, "[REDACTED]").replace(LABELLED_SECRET_MASK, (_match, label) => `${label}=[REDACTED]`);
-}
-//#endregion
 //#region ../wire/src/observation-context.ts
 /** Single bounded HTTP carrier used before a Convex action envelope exists. */
 const OBSERVATION_CONTEXT_HEADER = "x-capxul-observation-context";
@@ -4546,7 +3590,7 @@ const moneyExecutionContract = {
 };
 //#endregion
 //#region package.json
-var version = "2.8.2";
+var version = "3.0.2";
 //#endregion
 //#region src/telemetry/exception-projection.ts
 /** Fixed fallback for failures that have no safe message. */
@@ -4558,6 +3602,10 @@ function projectSdkException(input) {
 	const errorKind = normalizeExceptionErrorKind(input.errorKind);
 	const mode = isFailureMode(input.failureMode) ? input.failureMode : void 0;
 	const message = input.message ?? "Capxul SDK operation failed";
+	const evidence = mode === void 0 ? "" : chainEvidenceLabel({
+		httpStatus: input.chainHttpStatus,
+		rpcCode: input.chainRpcCode
+	});
 	const where = input.chainUpstream === void 0 ? "" : ` on ${input.chainUpstream}${input.chainMethod === void 0 ? "" : ` during ${input.chainMethod}`}`;
 	return {
 		...input.properties,
@@ -4569,13 +3617,19 @@ function projectSdkException(input) {
 		$exception_message: message,
 		$exception_level: "error",
 		$exception_fingerprint: failureFingerprint(errorKind, mode, operation),
-		$issue_name: `${errorKind}${mode === void 0 ? "" : `: ${mode}`}${where} (${operation})`,
+		$issue_name: `${errorKind}${mode === void 0 ? "" : `: ${mode}`}${evidence}${where} (${operation})`,
 		$issue_description: input.issueDescription ?? message,
 		$exception_list: input.exceptionList
 	};
 }
+/**
+* `:` and `/` are allowed because this also accepts a `provider_operation`
+* fallback, and a Convex function names itself `dir/file:function`. Kept byte-
+* equal to the backend's own `normalizeOperation`: when the two disagree, one
+* side silently rewrites the operation to `unknown` and the issue loses its name.
+*/
 function normalizeExceptionOperation(value) {
-	return typeof value === "string" && /^[A-Za-z0-9_][A-Za-z0-9_.-]{0,255}$/u.test(value) ? value : "unknown";
+	return typeof value === "string" && /^[A-Za-z0-9_][A-Za-z0-9_.:/-]{0,255}$/u.test(value) ? value : "unknown";
 }
 function normalizeExceptionErrorKind(value) {
 	return safeExceptionLabel(value) ?? "UNKNOWN";
@@ -4743,7 +3797,7 @@ function report(adapter, kind, operation, cause, invocation, origin) {
 		}
 	} else if (reportedByMachine(cause)) return;
 	const operationName = normalizeOperation(operation);
-	const kindName = normalizeErrorKind(errorKind$1(cause));
+	const kindName = normalizeErrorKind(errorKind(cause));
 	const context = sanitizeObservationContext({
 		...invocation.context,
 		...isCapxulError(cause) && cause.correlationId !== void 0 ? { correlationId: cause.correlationId } : {}
@@ -4840,6 +3894,8 @@ function projectFailureException(failure, properties) {
 		issueDescription: issueDescription(failure, message),
 		...failure.detail?.chain_upstream === void 0 ? {} : { chainUpstream: failure.detail.chain_upstream },
 		...failure.detail?.chain_method === void 0 ? {} : { chainMethod: failure.detail.chain_method },
+		...failure.detail?.chain_http_status === void 0 ? {} : { chainHttpStatus: failure.detail.chain_http_status },
+		...failure.detail?.chain_rpc_code === void 0 ? {} : { chainRpcCode: failure.detail.chain_rpc_code },
 		exceptionList: [{
 			type: failure.errorKind,
 			value: message,
@@ -4864,8 +3920,8 @@ function projectFailureException(failure, properties) {
 	});
 }
 /**
-* The decoded revert leads the description: the provider's own message masks
-* the raw revert data (`reason: [REDACTED]`), and the name plus arguments
+* The decoded revert leads the description: the provider's own message carries
+* the raw revert data (`reason: 0x…`), and the name plus arguments
 * (`Error(message=GS205)`) is what tells one revert from another.
 */
 function issueDescription(failure, message) {
@@ -4945,7 +4001,7 @@ function failureEvidence(cause) {
 		return {};
 	}
 }
-function errorKind$1(cause) {
+function errorKind(cause) {
 	try {
 		if (isCapxulError(cause)) return normalizeErrorKind(cause.code);
 		if (cause instanceof Error) return normalizeErrorKind(cause.name);
@@ -5025,13 +4081,13 @@ function observationError(cause) {
 function sanitizeChainDetail(source, detail) {
 	for (const key of [
 		"provider",
-		"provider_operation",
 		"failure_mode",
 		"reason"
 	]) {
 		const value = source[key];
 		if (typeof value === "string" && ENUMERATED_DETAIL_RE.test(value)) detail[key] = value;
 	}
+	sanitizeProviderOperation(source, detail);
 	sanitizeProviderErrorDetail(source, detail);
 	const status = source.http_status;
 	if (typeof status === "number" && Number.isInteger(status) && status >= 100 && status <= 599) detail.http_status = status;
@@ -5060,6 +4116,43 @@ function sanitizeChainDetail(source, detail) {
 	}
 	const providerMessage = evidenceText(source.chain_provider_message);
 	if (providerMessage !== void 0) detail.chain_provider_message = providerMessage;
+	sanitizeChainAttempts(source, detail);
+}
+/** One flat attempt entry, or undefined when a field is not what the vocabulary allows. */
+function sanitizeChainAttempt(entry) {
+	if (!isPlainObject(entry)) return void 0;
+	const duration = entry.duration_ms;
+	if (!isChainUpstream(entry.upstream) || !isFailureMode(entry.failure_mode) || typeof duration !== "number" || !Number.isFinite(duration) || duration < 0) return;
+	return {
+		upstream: entry.upstream,
+		failure_mode: entry.failure_mode,
+		...typeof entry.http_status === "number" && Number.isInteger(entry.http_status) ? { http_status: entry.http_status } : {},
+		...typeof entry.rpc_code === "number" && Number.isInteger(entry.rpc_code) ? { rpc_code: entry.rpc_code } : {},
+		duration_ms: Math.round(duration)
+	};
+}
+/**
+* The attempt sequence and the refusing upstream's headers (#1818), same
+* bounds as the backend; a malformed entry is dropped, never invented.
+*/
+function sanitizeChainAttempts(source, detail) {
+	if (Array.isArray(source.chain_attempts)) {
+		const attempts = source.chain_attempts.slice(0, 5).map(sanitizeChainAttempt);
+		if (attempts.length > 0 && attempts.every((attempt) => attempt !== void 0)) detail.chain_attempts = attempts;
+	}
+	if (isPlainObject(source.chain_response_headers)) {
+		const raw = source.chain_response_headers;
+		const headers = boundedResponseHeaders((name) => {
+			const value = raw[name];
+			return typeof value === "string" ? value : null;
+		});
+		if (Object.keys(headers).length > 0) detail.chain_response_headers = headers;
+	}
+}
+/** Its own check because a provider operation carries that provider's separators. */
+function sanitizeProviderOperation(source, detail) {
+	const value = source.provider_operation;
+	if (typeof value === "string" && PROVIDER_OPERATION_RE.test(value)) detail.provider_operation = value;
 }
 function sanitizeProviderErrorDetail(source, detail) {
 	if (source.provider_error_source !== "openfort") return;
@@ -5105,14 +4198,25 @@ function sanitizeFailureDetail(input) {
 }
 /** Enumerated codes only (`convex`, `no-secure-context`, `bootstrap-encode`); free text fails. */
 const ENUMERATED_DETAIL_RE = /^[A-Za-z][A-Za-z0-9_.-]{0,63}$/u;
+/**
+* A provider operation NAMES A FUNCTION on the provider, so it carries that
+* provider's separators. Convex writes its own as `dir/file:function`
+* (`media:setProfileImage`), and the enumerated shape above rejects both `:`
+* and `/` — so the operation was dropped and the PostHog issue lost the name of
+* what actually failed (staging, 2026-09-03). This widens the separators, not
+* the class: no spaces, same bound, and it matches the backend's own
+* `normalizeOperation`, which has always accepted them.
+*/
+const PROVIDER_OPERATION_RE = /^[A-Za-z][A-Za-z0-9_.:/-]{0,63}$/u;
 const TARGET_HOST_RE = /^[A-Za-z0-9.[\]:-]{1,253}$/u;
 /** A four-byte revert selector, or the bare `0x` of an empty revert. */
 const REVERT_SELECTOR_RE = /^0x(?:[0-9a-fA-F]{8})?$/u;
 function normalizeSdkVersion(value) {
 	return typeof value === "string" && /^[A-Za-z0-9][A-Za-z0-9.+_-]{0,127}$/u.test(value) ? value : "unknown";
 }
+/** Same shape as the backend's `normalizeOperation`: a Convex path (`dir/file:fn`) survives. */
 function normalizeOperation(value) {
-	return typeof value === "string" && /^[A-Za-z0-9_][A-Za-z0-9_.-]{0,255}$/u.test(value) ? value : "unknown";
+	return typeof value === "string" && /^[A-Za-z0-9_][A-Za-z0-9_.:/-]{0,255}$/u.test(value) ? value : "unknown";
 }
 function normalizeErrorKind(value) {
 	return typeof value === "string" && /^[A-Za-z][A-Za-z0-9_.-]{0,63}$/u.test(value) ? value : "Error";
@@ -6214,42 +5318,6 @@ function mapOk(result, f) {
 	}
 }
 //#endregion
-//#region src/ports/auth-client.ts
-var AuthClientError = class extends Data.TaggedError("AuthClientError") {};
-var AuthClientPortTag = class extends Context.Service()("@capxul/sdk/ports/AuthClientPort") {};
-//#endregion
-//#region src/adapters/auth-client/effect-port.ts
-function authClientPortFromPromiseAdapter(adapter) {
-	return {
-		canSendOtp: (input, options) => fromResult("canSendOtp", () => adapter.canSendOtp(input, options)),
-		sendOtp: (input, options) => fromResult("sendOtp", () => adapter.sendOtp(input, options)),
-		verifyOtp: (input, options) => fromResult("verifyOtp", () => adapter.verifyOtp(input, options)),
-		getSession: (options) => fromResult("getSession", () => adapter.getSession(options)),
-		signOut: (options) => fromResult("signOut", () => adapter.signOut(options)),
-		getConvexJwt: (options) => fromResult("getConvexJwt", () => adapter.getConvexJwt(options))
-	};
-}
-function fromResult(operation, run) {
-	return Effect.tryPromise({
-		try: run,
-		catch: (cause) => new AuthClientError({
-			operation,
-			kind: "thrown",
-			cause
-		})
-	}).pipe(Effect.flatMap((result) => result.ok ? Effect.succeed(result.value) : Effect.fail(new AuthClientError({
-		operation,
-		kind: errorKind(result.error),
-		cause: result.error
-	}))));
-}
-function errorKind(error) {
-	if (error.code === "CANCELLED") return "cancelled";
-	if (error.code === "NETWORK_ERROR") return "network";
-	if (error.code === "INVALID_INPUT" || error.code === "OTP_EXPIRED") return "validation";
-	return "provider";
-}
-//#endregion
 //#region src/ports/bootstrap.ts
 var BootstrapError = class extends Data.TaggedError("BootstrapError") {};
 function bootstrapErrorFromCapxul(kind, error) {
@@ -6263,10 +5331,6 @@ function bootstrapErrorFromCapxul(kind, error) {
 }
 var BootstrapPortTag = class extends Context.Service()("@capxul/sdk/ports/BootstrapPort") {};
 //#endregion
-//#region src/ports/clock.ts
-var ClockError = class extends Data.TaggedError("ClockError") {};
-var ClockPortTag = class extends Context.Service()("@capxul/sdk/ports/ClockPort") {};
-//#endregion
 //#region src/ports/convex-call.ts
 var ConvexCallError = class extends Data.TaggedError("ConvexCallError") {};
 function convexCallErrorFromCapxul(operation, error, transport) {
@@ -6434,6 +5498,29 @@ const TelemetryEnvelopeProps = {
 */
 const FailureModeSchema = Schema.Literals(FAILURE_MODES$1);
 const ChainUpstreamSchema = Schema.Literals(CHAIN_UPSTREAMS);
+/**
+* The refusing upstream's response headers (#1818): exactly the names in
+* `RESPONSE_HEADER_ALLOWLIST`, each optional, so the catalog itself refuses a
+* `set-cookie` or `authorization` that a producer let through.
+*/
+const ResponseHeadersSchema = Schema.Struct({
+	"retry-after": OptionalString,
+	"www-authenticate": OptionalString,
+	"content-type": OptionalString,
+	"x-request-id": OptionalString,
+	"cf-ray": OptionalString,
+	"x-ratelimit-remaining": OptionalString,
+	"x-ratelimit-reset": OptionalString,
+	server: OptionalString
+});
+/** One upstream tried, flat (#1818): the `chain_attempts` entry on every producer's row. */
+const ChainAttemptSchema = Schema.Struct({
+	upstream: ChainUpstreamSchema,
+	failure_mode: FailureModeSchema,
+	http_status: Schema.optional(Schema.Number),
+	rpc_code: Schema.optional(Schema.Number),
+	duration_ms: Schema.Number
+});
 const ChainCauseTelemetryProps = {
 	failure_mode: Schema.optional(FailureModeSchema),
 	chain_upstream: Schema.optional(ChainUpstreamSchema),
@@ -6444,7 +5531,9 @@ const ChainCauseTelemetryProps = {
 	chain_revert_name: OptionalString,
 	chain_revert_selector: OptionalString,
 	chain_revert_args: Schema.optional(Schema.Record(Schema.String, Schema.String)),
-	chain_provider_message: OptionalString
+	chain_provider_message: OptionalString,
+	chain_attempts: Schema.optional(Schema.Array(ChainAttemptSchema)),
+	chain_response_headers: Schema.optional(ResponseHeadersSchema)
 };
 /**
 * Stamp the required envelope onto an event at its emit boundary. Call-site
@@ -6562,7 +5651,8 @@ const ChainUpstreamFallbackProps = Schema.Struct({
 	failure_mode: FailureModeSchema,
 	exhausted: Schema.Boolean,
 	http_status: Schema.optional(Schema.Number),
-	rpc_code: Schema.optional(Schema.Number)
+	rpc_code: Schema.optional(Schema.Number),
+	response_headers: Schema.optional(ResponseHeadersSchema)
 });
 const BundlerErrorProps = Schema.Struct({
 	...TelemetryEnvelopeProps,
@@ -9089,10 +8179,18 @@ async function recordSetupFailure(setup, orgId, error, retryable, observationSou
 	if (!scopedRecorded.ok) return scopedRecorded;
 	return scopedRecorded;
 }
+/**
+* ADR-0023 R7: the layer that saw the chain failure says whether the same
+* request can succeed later; its word wins over the mode table. The table is
+* the one `identity/model.ts` uses, so the two gates read one list
+* (`org.account.get` retried a `transient: false` 403 in 1.5 s, 2026-09-03).
+*/
 function isRetryableProviderFailure(error) {
-	const mode = error.details?.failure_mode;
-	return mode !== "auth-origin-mismatch" && mode !== "app-env-allowlist" && mode !== "no-secure-context";
+	if (error.chain !== void 0) return error.chain.retryable;
+	const mode = error.mode ?? error.details?.failure_mode;
+	return !DEFINITIVE_PROVIDER_MODES.has(isFailureMode(mode) ? mode : void 0);
 }
+/** @internal Exported for the retry-gate test; the surface calls it from the setup loop. */
 function isRetryableOrganizationSetupFailure(error) {
 	if (error.code === "CANCELLED" || error.code === "SIGNER_REJECTED") return true;
 	if (error.code === "PROVIDER_ERROR") return isRetryableProviderFailure(error);
@@ -9809,4 +8907,4 @@ function withHostObservationControls(snapshot, input) {
 	return captured === void 0 ? copied : attachInvocationObservation(copied, captured);
 }
 //#endregion
-export { sanitizeObservationContext as $, observationContextProps as A, fromWei as B, AuthClientError as C, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT as D, toWei as E, normalizeExceptionErrorKind as F, isSignerNotReadySignal as G, formatTraceparent as H, normalizeExceptionOperation as I, resolveFailureMode as J, openfortSignerNotReadyCode as K, projectSdkException as L, postHogFailureObservation as M, EXCEPTION_MESSAGE as N, failureDetail as O, SDK_VERSION as P, encodeObservationContextHeader as Q, safeExceptionLabel as R, authClientPortFromPromiseAdapter as S, fingerprintPaymentIntent as T, causeChain as U, isSettingUpLifecycle as V, injectedWalletSigner as W, readInvocationObservation as X, copyInvocationObservation as Y, OBSERVATION_CONTEXT_HEADER as Z, convexCallErrorFromCapxul as _, AccountReadPortTag as a, CAPXUL_PAYMENTS_V2_ADDRESS as at, BootstrapPortTag as b, redactTelemetryEvent as c, deriveCapxulSafeAddress as ct, retryIdempotentRead as d, isRestoring as dt, PAYMENT_DIRECTIONS as et, PRODUCT_INVOCATION as f, ConvexCallPortTag as g, identityErrorFromCapxul as h, smartAccountErrorFromCapxul as i, EngineeringTelemetryBootstrapPolicy as it, observeFailedResult as j, failureEvidenceProps as k, redactTelemetryProps as l, destination as lt, IdentityPortTag as m, detectAuthCacheAdapter as n, CAPXUL_FUNCTIONS as nt, accountReadErrorFromCapxul as o, normalizeBindingEmail as ot, wireChainId as p, signerFailure as q, SmartAccountPortTag as r, BootstrapEnvelope as rt, TelemetryPortTag as s, BASE_SEPOLIA_CHAIN_ID as st, assembleCapxulClient as t, PAYMENT_STATUSES as tt, stampTelemetryEnvelope as u, isClaimed as ut, ClockError as v, AuthClientPortTag as w, bootstrapErrorFromCapxul as x, ClockPortTag as y, version as z };
+export { EngineeringTelemetryBootstrapPolicy as $, normalizeExceptionErrorKind as A, isSignerNotReadySignal as B, failureDetail as C, postHogFailureObservation as D, observeFailedResult as E, fromWei as F, readInvocationObservation as G, signerFailure as H, isSettingUpLifecycle as I, sanitizeObservationContext as J, OBSERVATION_CONTEXT_HEADER as K, formatTraceparent as L, projectSdkException as M, safeExceptionLabel as N, EXCEPTION_MESSAGE as O, version as P, BootstrapEnvelope as Q, causeChain as R, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT as S, observationContextProps as T, resolveFailureMode as U, openfortSignerNotReadyCode as V, copyInvocationObservation as W, PAYMENT_STATUSES as X, PAYMENT_DIRECTIONS as Y, CAPXUL_FUNCTIONS as Z, convexCallErrorFromCapxul as _, AccountReadPortTag as a, fingerprintPaymentIntent as b, redactTelemetryEvent as c, retryIdempotentRead as d, destination as et, PRODUCT_INVOCATION as f, ConvexCallPortTag as g, identityErrorFromCapxul as h, smartAccountErrorFromCapxul as i, normalizeExceptionOperation as j, SDK_VERSION as k, redactTelemetryProps as l, IdentityPortTag as m, detectAuthCacheAdapter as n, isRestoring as nt, accountReadErrorFromCapxul as o, wireChainId as p, encodeObservationContextHeader as q, SmartAccountPortTag as r, TelemetryPortTag as s, assembleCapxulClient as t, isClaimed as tt, stampTelemetryEnvelope as u, BootstrapPortTag as v, failureEvidenceProps as w, toWei as x, bootstrapErrorFromCapxul as y, injectedWalletSigner as z };