@capxul/sdk 4.1.0 → 4.1.1

package/dist/{create-capxul-client-rpLwGwD-.mjs → create-capxul-client-QHfE4dEP.mjs}

@@ -1306,7 +1306,20 @@ const QuickPayExternalAddressAcknowledgedProps = Schema.Struct({
 	external_address_acknowledged: Schema.Literal(true),
 	organization_id: OptionalOrgId
 });
-const DepositInitiatedProps = Schema.Struct({ ...TelemetryEnvelopeProps });
+const DepositInitiatedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	scope_kind: Schema.optional(Schema.Literals(["account", "organization"])),
+	account_kind: Schema.optional(Schema.Literals(["personalSafe", "orgTreasury"])),
+	chain_id: Schema.optional(Schema.Number),
+	network: Schema.optional(Schema.Literal("base-sepolia")),
+	organization_id: OptionalOrgId,
+	$groups: Schema.optional(Schema.Struct({ organization: OptionalOrgId })),
+	actor_id: OptionalString,
+	actor_kind: Schema.optional(Schema.Literal("authenticated")),
+	distinct_id: OptionalString,
+	trace_id: OptionalString,
+	span_id: OptionalString
+});
 const DepositSettledProps = Schema.Struct({
 	...TelemetryEnvelopeProps,
 	chain_id: Schema.Number,
@@ -4325,6 +4338,23 @@ function observationOnlyControls(controls) {
 	const { signal: _signal, timeoutMs: _timeoutMs, deadlineMs: _deadlineMs, ...observation } = controls ?? {};
 	return copyInvocationObservation(controls, observation);
 }
+/** Project only SDK-owned facts. A caller Organization hint is not authority. */
+function verifiedOperationFields(attributes) {
+	const domain = {};
+	const organizationId = attributes.get("verified_organization_id");
+	if (typeof organizationId === "string" && safeEngineeringIdentifier(organizationId) !== void 0) domain.organization_id = organizationId;
+	for (const [key, allowed] of [
+		["scope_kind", ["account", "organization"]],
+		["account_kind", ["personalSafe", "orgTreasury"]],
+		["network", ["base-sepolia"]]
+	]) {
+		const value = attributes.get(key);
+		if (typeof value === "string" && allowed.some((candidate) => candidate === value)) domain[key] = value;
+	}
+	const chainId = attributes.get("chain_id");
+	if (typeof chainId === "number" && Number.isSafeInteger(chainId) && chainId > 0) domain.chain_id = chainId;
+	return domain;
+}
 /** Observe a public Effect that already uses the canonical CapxulError channel. */
 async function runCapxulEffect(effect, controls, operation = CAPXUL_OPERATIONS.runtime.port, runPromise = Effect.runPromise) {
 	const invocation = readInvocationObservation(controls);
@@ -4353,8 +4383,10 @@ async function runCapxulEffect(effect, controls, operation = CAPXUL_OPERATIONS.r
 		const error = Exit.isFailure(exit) ? Cause.squash(exit.cause) : void 0;
 		const failure = error instanceof CapxulError ? error : void 0;
 		const outcome = Exit.isSuccess(exit) ? "succeeded" : failure?.code === "CANCELLED" ? "cancelled" : failure !== void 0 && EXPECTED_OPERATION_OUTCOMES.has(failure.code) ? "refused" : "failed";
+		const span = yield* Effect.currentSpan.pipe(Effect.orDie);
 		const completion = {
 			...fields,
+			...verifiedOperationFields(span.attributes),
 			duration_ms,
 			outcome,
 			...failure === void 0 ? {} : { failure_code: failure.code },
@@ -5187,7 +5219,7 @@ const moneyExecutionContract = {
 };
 //#endregion
 //#region package.json
-var version = "4.1.0";
+var version = "4.1.1";
 //#endregion
 //#region src/telemetry/exception-projection.ts
 /** Fixed fallback for failures that have no safe message. */
@@ -5898,11 +5930,50 @@ function emitAccountBalanceFailed(telemetry, error) {
 		}
 	});
 }
-function emitDepositInitiated(telemetry) {
-	return emitMoneyTelemetry(telemetry, {
-		name: "deposit_initiated",
-		props: {}
-	});
+/** A successful authorized instruction read, not an incoming transfer. */
+function emitDepositInitiated(telemetry, instructions, source, verifiedOrganizationId) {
+	return Effect.gen(function* () {
+		const organizationId = safeEngineeringIdentifier(verifiedOrganizationId);
+		const fields = {
+			scope_kind: organizationId === void 0 ? "account" : "organization",
+			account_kind: organizationId === void 0 ? "personalSafe" : "orgTreasury",
+			...Number.isSafeInteger(instructions.chainId) && instructions.chainId > 0 ? { chain_id: instructions.chainId } : {},
+			...instructions.network === "base-sepolia" ? { network: instructions.network } : {},
+			...organizationId === void 0 ? {} : { verified_organization_id: organizationId }
+		};
+		yield* Effect.annotateCurrentSpan(fields);
+		if (telemetry === void 0) return;
+		const span = yield* Effect.currentSpan;
+		const snapshot = readInvocationObservation(source);
+		const { organizationId: _hint, ...context } = snapshot?.context ?? {};
+		const event = {
+			name: "deposit_initiated",
+			props: {
+				scope_kind: fields.scope_kind,
+				account_kind: fields.account_kind,
+				...fields.chain_id === void 0 ? {} : { chain_id: fields.chain_id },
+				...fields.network === void 0 ? {} : { network: fields.network },
+				$groups: organizationId === void 0 ? {} : { organization: organizationId },
+				...safeEngineeringIdentifier(snapshot?.actorId) === void 0 ? {} : {
+					actor_id: snapshot.actorId,
+					actor_kind: "authenticated",
+					distinct_id: snapshot.actorId
+				},
+				trace_id: span.traceId,
+				span_id: span.spanId,
+				...organizationId === void 0 ? {} : { organization_id: organizationId }
+			}
+		};
+		yield* telemetry.emit(snapshot === void 0 ? event : attachInvocationObservation(event, {
+			active: snapshot.active,
+			...snapshot?.actorId === void 0 ? {} : { actorId: snapshot.actorId },
+			context: {
+				...context,
+				...organizationId === void 0 ? {} : { organizationId },
+				traceparent: `00-${span.traceId}-${span.spanId}-01`
+			}
+		}));
+	}).pipe(Effect.catchCause(() => Effect.void));
 }
 function emitPaymentInitiated(telemetry, input) {
 	return emitMoneyTelemetry(telemetry, {
@@ -6518,7 +6589,10 @@ function makeFinancialOpsMethods(deps) {
 	return {
 		me: {
 			get: (options) => runIfActive(options?.signal, CAPXUL_OPERATIONS.me.get, () => deps.convexCall.query(fns.me, {})),
-			depositInstructions: (options) => runIfActive(options?.signal, CAPXUL_OPERATIONS.me.depositInstructions, () => deps.convexCall.query(fns.depositInstructions, {}).pipe(Effect.tap(() => Effect.promise(() => emitDepositInitiated(deps.telemetry)))))
+			depositInstructions: (options) => {
+				const controls = deps.invocationControls?.(options) ?? options;
+				return runPortEffect(Effect.suspend(() => deps.convexCall.query(fns.depositInstructions, copyInvocationObservation(controls, {}))).pipe(Effect.tap((instructions) => emitDepositInitiated(deps.telemetry, instructions, controls))), controls, CAPXUL_OPERATIONS.me.depositInstructions, deps.runPromise);
+			}
 		},
 		targets: { resolve: async (reference, options) => {
 			const recipient = normalizeTargetForBackend(reference, "reference");
@@ -6526,43 +6600,57 @@ function makeFinancialOpsMethods(deps) {
 			return mapOk(await runIfActive(options?.signal, CAPXUL_OPERATIONS.recipient.resolve, () => deps.convexCall.query(fns.resolveRecipient, { recipient: recipient.value })), resolvedTargetFromResolution);
 		} },
 		destinations: {
-			add: async (input, options) => {
-				const scope = normalizeDestinationInputScope(input, "target");
-				if (!scope.ok) return {
-					ok: false,
-					error: scope.error
-				};
-				const scopeValue = scope.value;
-				if (scopeValue === void 0) return {
-					ok: false,
-					error: Errors.invalidInput("target", DESTINATION_SCOPE_MESSAGE)
+			add: (input, options) => {
+				const controls = deps.invocationControls?.(options) ?? options;
+				const actor = actorReferenceToBackend(input.actor);
+				const verifiedScope = {
+					scope_kind: actor?.kind === "org" ? "organization" : "account",
+					...actor?.kind === "org" ? { verified_organization_id: actor.orgId } : {}
 				};
-				const backendActor = actorReferenceToBackend(input.actor);
-				return mapOk(await runIfActive(options?.signal, CAPXUL_OPERATIONS.destinations.add, () => deps.convexCall.mutation(fns.addDestination, {
-					...backendActor === void 0 ? {} : { actor: backendActor },
-					...isSelfTarget(scopeValue) ? { self: true } : { ref: scopeValue },
-					kind: destinationKindToBackend(input.kind),
-					...input.label === void 0 ? {} : { label: input.label },
-					payload: input.payload
-				})), destinationFromBackend);
+				return runPortEffect(Effect.suspend(() => {
+					const scope = normalizeDestinationInputScope(input, "target");
+					if (!scope.ok) return Effect.fail({ publicError: scope.error });
+					const scopeValue = scope.value;
+					if (scopeValue === void 0) return Effect.fail({ publicError: Errors.invalidInput("target", DESTINATION_SCOPE_MESSAGE) });
+					return deps.convexCall.mutation(fns.addDestination, copyInvocationObservation(controls, {
+						...actor === void 0 ? {} : { actor },
+						...isSelfTarget(scopeValue) ? { self: true } : { ref: scopeValue },
+						kind: destinationKindToBackend(input.kind),
+						...input.label === void 0 ? {} : { label: input.label },
+						payload: input.payload
+					})).pipe(Effect.map(destinationFromBackend), Effect.tap(() => Effect.annotateCurrentSpan(verifiedScope)));
+				}), controls, CAPXUL_OPERATIONS.destinations.add, deps.runPromise);
 			},
-			list: async (input, options) => {
-				const scope = normalizeDestinationInputScope(input, "target");
-				if (!scope.ok) return {
-					ok: false,
-					error: scope.error
+			list: (input, options) => {
+				const controls = deps.invocationControls?.(options) ?? options;
+				const actor = actorReferenceToBackend(input.actor);
+				const verifiedScope = {
+					scope_kind: actor?.kind === "org" ? "organization" : "account",
+					...actor?.kind === "org" ? { verified_organization_id: actor.orgId } : {}
 				};
-				const scopeValue = scope.value;
-				return mapOk(await runIfActive(options?.signal, CAPXUL_OPERATIONS.destinations.list, () => deps.convexCall.query(fns.listDestinations, {
-					...input.actor === void 0 ? {} : { actor: actorReferenceToBackend(input.actor) },
-					...scopeValue !== void 0 && isSelfTarget(scopeValue) ? { self: true } : {},
-					...scopeValue !== void 0 && !isSelfTarget(scopeValue) ? { ref: scopeValue } : {}
-				})), (destinations) => destinations.map(destinationFromBackend).filter((destination) => input.kind === void 0 || destination.kind === input.kind));
+				return runPortEffect(Effect.suspend(() => {
+					const scope = normalizeDestinationInputScope(input, "target");
+					if (!scope.ok) return Effect.fail({ publicError: scope.error });
+					const scopeValue = scope.value;
+					return deps.convexCall.query(fns.listDestinations, copyInvocationObservation(controls, {
+						...actor === void 0 ? {} : { actor },
+						...scopeValue !== void 0 && isSelfTarget(scopeValue) ? { self: true } : {},
+						...scopeValue !== void 0 && !isSelfTarget(scopeValue) ? { ref: scopeValue } : {}
+					})).pipe(Effect.map((destinations) => destinations.map(destinationFromBackend).filter((destination) => input.kind === void 0 || destination.kind === input.kind)), Effect.tap(() => Effect.annotateCurrentSpan(verifiedScope)));
+				}), controls, CAPXUL_OPERATIONS.destinations.list, deps.runPromise);
 			},
-			remove: (input, options) => runIfActive(options?.signal, CAPXUL_OPERATIONS.destinations.remove, () => deps.convexCall.mutation(fns.removeDestination, {
-				...input.actor === void 0 ? {} : { actor: actorReferenceToBackend(input.actor) },
-				destinationId: input.destinationId
-			}))
+			remove: (input, options) => {
+				const controls = deps.invocationControls?.(options) ?? options;
+				const actor = actorReferenceToBackend(input.actor);
+				const verifiedScope = {
+					scope_kind: actor?.kind === "org" ? "organization" : "account",
+					...actor?.kind === "org" ? { verified_organization_id: actor.orgId } : {}
+				};
+				return runPortEffect(Effect.suspend(() => deps.convexCall.mutation(fns.removeDestination, copyInvocationObservation(controls, {
+					...actor === void 0 ? {} : { actor },
+					destinationId: input.destinationId
+				})).pipe(Effect.tap(() => Effect.annotateCurrentSpan(verifiedScope)))), controls, CAPXUL_OPERATIONS.destinations.remove, deps.runPromise);
+			}
 		},
 		payments: {
 			pay,
@@ -9170,7 +9258,7 @@ function readOrgDepositInstructionsProgram(orgId) {
 		const deps = yield* OrgDepsTag;
 		const org = findOrgById(yield* listOrgsProgram(), orgId);
 		if (org === void 0) return yield* Effect.fail(orgNotFound(orgId));
-		return {
+		const instructions = {
 			accountKind: "orgTreasury",
 			chainId: Number(deps.chainId ?? 84532),
 			network: "base-sepolia",
@@ -9178,6 +9266,8 @@ function readOrgDepositInstructionsProgram(orgId) {
 			address: String(org.safeAddress).toLowerCase(),
 			label: "Capxul org treasury"
 		};
+		yield* emitDepositInitiated(deps.telemetry, instructions, deps.invocationSource, String(org.id));
+		return instructions;
 	});
 }
 function listRolesProgram(orgId) {
@@ -9412,12 +9502,12 @@ function makeOrgMethods(deps) {
 						});
 						return toCapxulResult(readOrgProfileProgram(orgId), layer);
 					},
-					depositInstructions(_options) {
-						if (_options?.signal?.aborted) return Promise.resolve({
-							ok: false,
-							error: Errors.cancelled({ operation: CAPXUL_OPERATIONS.org.profile.depositInstructions })
-						});
-						return toCapxulResult(readOrgDepositInstructionsProgram(orgId), layer);
+					depositInstructions(options) {
+						const controls = deps.invocationControls?.(options) ?? options;
+						return runCapxulEffect(readOrgDepositInstructionsProgram(orgId).pipe(Effect.provide(orgDepsLayer({
+							...orgDeps,
+							...controls === void 0 ? {} : { invocationSource: controls }
+						}))), controls, CAPXUL_OPERATIONS.org.profile.depositInstructions, deps.runPromise);
 					}
 				},
 				treasury(options) {

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { $ as stampTelemetryEnvelope, A as safeExceptionLabel, B as resolveFailureMode, C as observeFailedResult, D as normalizeExceptionErrorKind, E as SDK_VERSION$1, F as causeChain, G as sanitizeObservationContext, H as readInvocationObservation, I as injectedWalletSigner, J as CAPXUL_FUNCTIONS, K as PAYMENT_DIRECTIONS, L as isSignerNotReadySignal, M as fromWei, N as isSettingUpLifecycle, O as normalizeExceptionOperation, P as formatTraceparent, Q as redactTelemetryProps, R as openfortSignerNotReadyCode, S as observationContextProps, T as EXCEPTION_MESSAGE, U as OBSERVATION_CONTEXT_HEADER, V as copyInvocationObservation, W as encodeObservationContextHeader, X as EngineeringTelemetryBootstrapPolicy, Y as BootstrapEnvelope, _ as fingerprintPaymentIntent, a as AccountReadPortTag, at as isRestoring, b as failureDetail, c as retryIdempotentRead, d as IdentityPortTag, et as CAPXUL_OPERATIONS, f as identityErrorFromCapxul, g as bootstrapErrorFromCapxul, h as BootstrapPortTag, i as smartAccountErrorFromCapxul, it as isClaimed, j as version, k as projectSdkException, l as PRODUCT_INVOCATION, m as convexCallErrorFromCapxul, n as detectAuthCacheAdapter, nt as normalizeCapxulOperation, o as accountReadErrorFromCapxul, p as ConvexCallPortTag, q as PAYMENT_STATUSES, r as SmartAccountPortTag, rt as destination, s as TelemetryPortTag, t as assembleCapxulClient, tt as isCapxulOperation, u as wireChainId, v as toWei, w as postHogFailureObservation, x as failureEvidenceProps, y as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, z as signerFailure } from "./create-capxul-client-rpLwGwD-.mjs";
+import { $ as stampTelemetryEnvelope, A as safeExceptionLabel, B as resolveFailureMode, C as observeFailedResult, D as normalizeExceptionErrorKind, E as SDK_VERSION$1, F as causeChain, G as sanitizeObservationContext, H as readInvocationObservation, I as injectedWalletSigner, J as CAPXUL_FUNCTIONS, K as PAYMENT_DIRECTIONS, L as isSignerNotReadySignal, M as fromWei, N as isSettingUpLifecycle, O as normalizeExceptionOperation, P as formatTraceparent, Q as redactTelemetryProps, R as openfortSignerNotReadyCode, S as observationContextProps, T as EXCEPTION_MESSAGE, U as OBSERVATION_CONTEXT_HEADER, V as copyInvocationObservation, W as encodeObservationContextHeader, X as EngineeringTelemetryBootstrapPolicy, Y as BootstrapEnvelope, _ as fingerprintPaymentIntent, a as AccountReadPortTag, at as isRestoring, b as failureDetail, c as retryIdempotentRead, d as IdentityPortTag, et as CAPXUL_OPERATIONS, f as identityErrorFromCapxul, g as bootstrapErrorFromCapxul, h as BootstrapPortTag, i as smartAccountErrorFromCapxul, it as isClaimed, j as version, k as projectSdkException, l as PRODUCT_INVOCATION, m as convexCallErrorFromCapxul, n as detectAuthCacheAdapter, nt as normalizeCapxulOperation, o as accountReadErrorFromCapxul, p as ConvexCallPortTag, q as PAYMENT_STATUSES, r as SmartAccountPortTag, rt as destination, s as TelemetryPortTag, t as assembleCapxulClient, tt as isCapxulOperation, u as wireChainId, v as toWei, w as postHogFailureObservation, x as failureEvidenceProps, y as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, z as signerFailure } from "./create-capxul-client-QHfE4dEP.mjs";
 import { $ as CapxulError, A as toAuthUserId, B as toJwtToken, D as toAddress, E as toAccountId, F as toDurationMs, H as toOrgId, I as toEmail, J as toSessionToken, K as toPublishableKey, L as toEpochMs, M as toChainId, N as toCountryCode, O as toAllowedOrigin, P as toCurrencyCode, Q as CAPXUL_ERROR_CODES, R as toEpochSeconds, T as currencySymbolFor, U as toPartyId, V as toKycTier, X as HANDLE_RE, Y as toTesterKind, Z as decodeConvexError, d as AuthClientError, f as AuthClientPortTag, g as BASE_SEPOLIA_CHAIN_ID, h as normalizeBindingEmail, it as FAILURE_MODES, l as ClockPortTag, m as CAPXUL_PAYMENTS_V2_ADDRESS, nt as isCapxulError, q as toRoleKey, rt as CHAIN_UPSTREAMS, s as AuthCachePortTag, tt as Errors, u as authClientPortFromPromiseAdapter, x as EVM_ADDRESS_RE, z as toHandle } from "./clock-C2AUlq1V.mjs";
 import { n as SystemClockLayer } from "./OAuthBearerAuthClient-BHvDR8_0.mjs";
 import { Cause, Context, Data, Duration, Effect, Exit, Layer, Result, Schedule, SchemaIssue, SchemaParser, Scope, Tracer } from "effect";
@@ -1615,6 +1615,8 @@ const OBSERVED_CONVEX_QUERIES = /* @__PURE__ */ new Set([
 	"movement/activity:list",
 	"movement/activity:summary",
 	"movement/activity:get",
+	"financialOps/queries:depositInstructions",
+	"financialOps/destinations:list",
 	"financialOps/queries:verifyPaymentDocument",
 	"financialOps/queries:renderStoredDocument",
 	"financialOps/addressBook:list",
@@ -1632,6 +1634,8 @@ const OBSERVED_CONVEX_QUERIES = /* @__PURE__ */ new Set([
 ]);
 const OBSERVED_CONVEX_MUTATIONS = /* @__PURE__ */ new Set([
 	"movement/activity:annotate",
+	"financialOps/destinations:add",
+	"financialOps/destinations:remove",
 	"financialOps/addressBook:add",
 	"financialOps/addressBook:hide",
 	"financialOps/addressBook:unhide",

package/dist/testing/index.mjs

@@ -1,4 +1,4 @@
-import { M as fromWei, Z as redactTelemetryEvent, f as identityErrorFromCapxul, g as bootstrapErrorFromCapxul, i as smartAccountErrorFromCapxul, m as convexCallErrorFromCapxul, o as accountReadErrorFromCapxul, t as assembleCapxulClient, u as wireChainId, v as toWei } from "../create-capxul-client-rpLwGwD-.mjs";
+import { M as fromWei, Z as redactTelemetryEvent, f as identityErrorFromCapxul, g as bootstrapErrorFromCapxul, i as smartAccountErrorFromCapxul, m as convexCallErrorFromCapxul, o as accountReadErrorFromCapxul, t as assembleCapxulClient, u as wireChainId, v as toWei } from "../create-capxul-client-QHfE4dEP.mjs";
 import { $ as CapxulError, A as toAuthUserId, B as toJwtToken, D as toAddress, E as toAccountId, F as toDurationMs, I as toEmail, J as toSessionToken, K as toPublishableKey, L as toEpochMs, M as toChainId, N as toCountryCode, O as toAllowedOrigin, R as toEpochSeconds, V as toKycTier, _ as deriveCapxulSafeAddress, k as toAppId, n as InMemoryAuthCacheAdapter, t as readClockNow, tt as Errors, u as authClientPortFromPromiseAdapter, v as validateHandle, z as toHandle } from "../clock-C2AUlq1V.mjs";
 import { Effect, Result, Semaphore } from "effect";
 import { keccak256 } from "viem";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/sdk",
-  "version": "4.1.0",
+  "version": "4.1.1",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Xelmar-tech/infrastructure.git",
@@ -49,10 +49,10 @@
     "vitest": "4.1.11",
     "@capxul/config": "0.3.0",
     "@capxul/errors": "0.3.0",
-    "@capxul/typescript-config": "0.0.0",
+    "@capxul/types": "0.3.0",
+    "@capxul/observability": "4.1.1",
     "@capxul/wire": "0.7.0",
-    "@capxul/observability": "4.1.0",
-    "@capxul/types": "0.3.0"
+    "@capxul/typescript-config": "0.0.0"
   },
   "_permissionlessPinReason": "permissionless.toSafeSmartAccount is pinned to 0.3.4 for live Safe deployment E2E. Counterfactual address fixtures captured 2026-05-17 in packages/backend/convex/_shared/__tests__/counterfactual.test.ts and packages/config/tests/safe.test.ts must be re-verified before upgrading.",
   "scripts": {