@capxul/sdk 4.20.0-beta.3 → 4.20.0-beta.31

package/dist/index.mjs

@@ -1,239 +1,67 @@
-import { A as signerFailure, B as isRestoring, C as normalizeExceptionErrorKind, E as safeExceptionLabel, F as CAPXUL_OPERATIONS, I as isCapxulOperation, L as normalizeCapxulOperation, M as PAYMENT_DIRECTIONS, N as PAYMENT_STATUSES, O as isSettingUpLifecycle, R as destination, S as SDK_VERSION, T as projectSdkException, _ as fingerprintPaymentIntent, b as failureDetail, d as embeddedSigner, f as openfortEmbeddedSigner, g as devPrivateKeySigner, h as deriveDevPrivateKey, j as resolveFailureMode, k as injectedWalletSigner, m as openfortEmbeddedWalletPort, p as openfortEmbeddedSignerFromWallet, r as postHogObservability, t as createCapxulClient$1, w as normalizeExceptionOperation, x as EXCEPTION_MESSAGE, y as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, z as isClaimed } from "./production-M4dWz5g4.mjs";
-import { $ as toPartyId, I as toAddress, N as assetIdFor, P as currencySymbolFor, U as toCountryCode, W as toCurrencyCode, Y as toHandle, _t as FAILURE_MODES, b as configuredMoneyAssetById, dt as CAPXUL_ERROR_CODES, ft as CapxulError, g as CAPXUL_PAYMENTS_V2_ADDRESS, gt as CHAIN_UPSTREAMS, ht as isCapxulError, k as EVM_ADDRESS_RE, lt as HANDLE_RE, mt as Errors } from "./OAuthBearerAuthClient-DWkofxdZ.mjs";
-import { formatUnits } from "viem";
+import { p as decodePermissionIntent } from "./organizations-wucUfgJr.mjs";
+import { $ as formatAssetAmount, Ar as EVM_ADDRESS_RE, Bn as FixedOfferDraftSchema, Cr as toPermissionId, Dn as isCapxulOperation, Dr as toAssetId, Dt as TOKENS, En as CAPXUL_OPERATIONS, Er as currencySymbolFor, F as decodePayrollRunInput, I as toPayrollGroupId, Ii as Errors, Jn as ORGANIZATION_SETUP_REASONS, Jt as SDK_VERSION, Li as CapxulError, Mr as toAddress, On as normalizeCapxulOperation, Or as toCurrencyCode, Q as assetSymbolFor, Qn as toOrgId, Qr as EXPECTED_OPERATION_OUTCOMES, Qt as safeExceptionLabel, Ri as isCapxulError, Rn as PayrollGroupIdSchema, S as valueIn, Sr as toPermissionAssignmentId, Tt as CAPXUL_PAYMENTS_V2_ADDRESS, Vt as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, Xn as CHAIN_UPSTREAMS, Xt as normalizeExceptionOperation, Yt as normalizeExceptionErrorKind, Zr as CAPXUL_ERROR_CODES, Zt as projectSdkException, _n as toPartyId, _r as PAYMENT_DIRECTIONS, a as paymentPhase, cn as signerFailure, dr as PaymentDocumentOptionsSchema, en as isSettingUpLifecycle, et as parseAssetAmount, fn as toCountryCode, gn as toHandle, hn as HANDLE_RE, i as inboxPhase, it as parseMoney, ln as resolveFailureMode, nt as toRaw, o as requestPhase, ot as fingerprintPaymentIntent, q as isCheckoutSettlementConsumed, qt as EXCEPTION_MESSAGE, rn as injectedWalletSigner, rt as isMoneyParseError, tt as requireAsset, ur as toAccountId, vr as PAYMENT_STATUSES, wn as EXCEPTION_EVENT_NAME, x as valueActivitySummary, xr as toBudgetId, y as positionPeg, zi as FAILURE_MODES, zn as PayrollGroupInputSchema, zt as failureDetail } from "./access-B-2qmxF_.mjs";
+import { d as devPrivateKeySigner, f as createOpenfortBrowserSigner, h as openfortEmbeddedWalletPort, i as postHogObservability, m as openfortEmbeddedSignerFromWallet, p as embeddedSigner, t as createCapxulClient$1, u as deriveDevPrivateKey } from "./production-2L76NWS5.mjs";
 import { Effect } from "effect";
 import { privateKeyToAccount } from "viem/accounts";
-//#region src/domain/activity/phase.ts
-const PENDING = Object.freeze({
-	terminal: false,
-	outcome: null,
-	needsAction: false
-});
-const AWAITING_ACTOR = Object.freeze({
-	terminal: false,
-	outcome: null,
-	needsAction: true
-});
-const COMPLETED = Object.freeze({
-	terminal: true,
-	outcome: "good",
-	needsAction: false
-});
-const FAILED = Object.freeze({
-	terminal: true,
-	outcome: "bad",
-	needsAction: false
-});
-const WITHDRAWN = Object.freeze({
-	terminal: true,
-	outcome: "neutral",
-	needsAction: false
-});
+//#region src/access/identity/selectors.ts
 /**
-* The `default` arm of each interpreter below.
-*
-* The `never` parameter keeps the compile-time guarantee: a status that you add
-* to a wire vocabulary and do not add to a switch does not fit here, and the
-* package does not build.
-*
-* The refusal covers run time. A wire status is a type claim about a string
-* that no code narrows, so an unknown status can arrive. This function refuses
-* it. It does not let an `undefined` typed `ActivityPhase` reach a screen,
-* where the first property read fails.
-*/
-function unknownStatus(status) {
-	throw Errors.invalidInput("status", "unknown activity status");
-}
-/** Interpret a Payment status. `pending_claim` waits for the actor who reads it. */
-function paymentPhase(status) {
-	switch (status) {
-		case "pending":
-		case "settling":
-		case "scheduled":
-		case "streaming": return PENDING;
-		case "pending_claim": return AWAITING_ACTOR;
-		case "settled": return COMPLETED;
-		case "cancelled": return WITHDRAWN;
-		case "failed":
-		case "unresolved": return FAILED;
-		default: return unknownStatus(status);
-	}
-}
-/** Interpret a payment Request as its ISSUER sees it. An issuer does not wait for itself. */
-function requestPhase(status) {
-	switch (status) {
-		case "draft":
-		case "sent":
-		case "viewed":
-		case "pending_settlement": return PENDING;
-		case "paid": return COMPLETED;
-		case "declined":
-		case "expired": return FAILED;
-		case "cancelled": return WITHDRAWN;
-		default: return unknownStatus(status);
-	}
-}
-/** Interpret the same request as its RECIPIENT sees it. `open` waits for the recipient. */
-function inboxPhase(status) {
-	switch (status) {
-		case "open": return AWAITING_ACTOR;
-		case "approved": return PENDING;
-		case "paid": return COMPLETED;
-		case "declined":
-		case "expired": return FAILED;
-		case "cancelled": return WITHDRAWN;
-		default: return unknownStatus(status);
-	}
-}
-//#endregion
-//#region src/domain/money/parse-money.ts
-/**
-* ADR-0023 R1: the reason is a closed code and the ONLY failure vocabulary —
-* the consuming app maps each code to its own sentence. The SDK ships no
-* English for user-text failure.
+* The post-auth destination and provisioning lane merge as one total switch
+* over the nest. "An active journey outranks default
+* routing; org-list contents never choose a destination" holds by construction:
+* there is no org list in the state, only the ONE active lane.
 */
-function isMoneyParseError(value) {
-	return "kind" in value;
-}
-const AMOUNT_PATTERN = /^(?:\d{1,3}(?:,\d{3})+|\d+)(?:\.\d+)?$/;
-const ZERO_PATTERN = /^0+(?:\.0+)?$/;
-function parseMoney(input, asset) {
-	const parsed = parseDecimalInput(input, asset.decimals, 24);
-	return "kind" in parsed ? parsed : {
-		currency: asset.currency,
-		value: parsed.value,
-		decimals: asset.decimals
-	};
-}
-/** Shared input grammar. Callers retain their own amount size limits. */
-function parseDecimalInput(input, decimals, maximumLength) {
-	if (!Number.isInteger(decimals) || decimals < 0) throw Errors.invalidInput("asset.decimals", "must be a non-negative integer");
-	const value = input.trim();
-	if (value.length === 0) return {
-		kind: "error",
-		reason: "required"
-	};
-	if (value.length > maximumLength) return {
-		kind: "error",
-		reason: "too-long"
-	};
-	const negative = value.startsWith("-");
-	const unsigned = negative ? value.slice(1) : value;
-	if (!AMOUNT_PATTERN.test(unsigned)) return {
-		kind: "error",
-		reason: "invalid-format"
+const destination = (state) => {
+	if (state.phase === "restoring") return null;
+	if (state.phase !== "authenticated") return { to: "home" };
+	if (!state.profileComplete) return { to: "selectUserType" };
+	if (state.account.at === "unknown") return null;
+	if (state.account.at !== "claimed") return {
+		to: "provisioning",
+		scope: "personal"
 	};
-	if (negative) return {
-		kind: "error",
-		reason: "non-positive"
-	};
-	const normalized = unsigned.replaceAll(",", "");
-	const fraction = normalized.split(".")[1];
-	if (fraction !== void 0 && fraction.length > decimals) return {
-		kind: "error",
-		reason: "too-many-decimals"
-	};
-	if (ZERO_PATTERN.test(normalized)) return {
-		kind: "error",
-		reason: "non-positive"
-	};
-	return { value: normalized };
-}
-//#endregion
-//#region src/domain/money/asset-amount.ts
-/** Exact scaling. This rejects excess precision instead of rounding it. */
-function toRaw(amount, asset) {
-	validateMetadata(asset);
-	if (amount.asset !== asset.assetId) throw Errors.invalidInput("amount.asset", "must match the selected asset on its chain");
-	return decimalToRaw(amount.value, asset.decimals);
-}
-function parseAssetAmount(input, asset) {
-	validateMetadata(asset);
-	const parsed = parseDecimalInput(input, asset.decimals, 100);
-	return "kind" in parsed ? parsed : {
-		asset: asset.assetId,
-		value: parsed.value.replace(/^0+(?=\d)/, "")
+	const org = state.account.org;
+	if (org === null) return { to: "dashboardPersonal" };
+	if (org.setup?.status === "ready" && org.observation === "connected" && org.orgId !== null) return {
+		to: "dashboardOrganization",
+		orgId: org.orgId
 	};
-}
-/** Display the full quantity. Only fiat formatting rounds for display. */
-function formatAssetAmount(amount) {
-	const asset = requireAsset(amount.asset);
-	const [integer = "0", fraction] = formatUnits(toRaw(amount, asset), asset.decimals).split(".");
-	return `${integer.replace(/\B(?=(\d{3})+(?!\d))/g, ",")}${fraction === void 0 ? "" : `.${fraction}`} ${asset.symbol}`;
-}
-function assetSymbolFor(asset) {
-	return requireAsset(asset).symbol;
-}
-function requireAsset(id) {
-	const asset = configuredMoneyAssetById(id);
-	if (asset === null) throw Errors.invalidInput("amount.asset", "is not a registered asset");
-	return asset;
-}
-function decimalToRaw(value, decimals) {
-	validatePrecision(decimals);
-	if (!/^\d+(?:\.\d+)?$/.test(value) || value.trim() !== value || value.length > 512) throw Errors.invalidInput("amount.value", "must be a non-negative decimal string of at most 512 characters");
-	const [integer = "0", fraction = ""] = value.split(".");
-	if (fraction.length > decimals) throw Errors.invalidInput("amount.value", "fraction exceeds asset precision");
-	return BigInt(integer) * 10n ** BigInt(decimals) + BigInt(fraction.padEnd(decimals, "0") || "0");
-}
-function validatePrecision(decimals) {
-	if (!Number.isInteger(decimals) || decimals < 0 || decimals > 255) throw Errors.invalidInput("decimals", "must be an integer from 0 to 255");
-}
-function validateMetadata(asset) {
-	validatePrecision(asset.decimals);
-	if (asset.assetId !== assetIdFor(asset.chainId, asset.tokenAddress)) throw Errors.invalidInput("amount.asset", "metadata must match its chain and token");
-}
-//#endregion
-//#region src/domain/money/valuation.ts
-const PEG_RATES = (source, into) => (typeof source === "string" ? source : source.peg) === into ? {
-	value: "1",
-	decimals: 0
-} : null;
-/** Sum exact fixed-point values. Missing rates never contribute zero. */
-function valueIn(amounts, displayCurrency, rates = PEG_RATES) {
-	const currency = toCurrencyCode(displayCurrency);
-	const counted = [];
-	const unrated = [];
-	let sum = 0n;
-	let scale = 0;
-	for (const amount of amounts) {
-		let source;
-		let raw;
-		let decimals;
-		if ("asset" in amount) {
-			source = requireAsset(amount.asset);
-			raw = toRaw(amount, source);
-			decimals = source.decimals;
-		} else {
-			source = toCurrencyCode(amount.currency);
-			raw = decimalToRaw(amount.value, amount.decimals);
-			decimals = amount.decimals;
-		}
-		const rate = rates(source, currency);
-		if (rate === null) {
-			unrated.push(amount);
-			continue;
-		}
-		validatePrecision(rate.decimals);
-		if (!/^\d+$/.test(rate.value) || rate.value.trim() !== rate.value || rate.value.length > 256 || BigInt(rate.value) <= 0n) throw Errors.invalidInput("rate.value", "must be a positive fixed-point integer");
-		const termScale = decimals + rate.decimals;
-		const nextScale = Math.max(scale, termScale);
-		sum = sum * 10n ** BigInt(nextScale - scale) + raw * BigInt(rate.value) * 10n ** BigInt(nextScale - termScale);
-		scale = nextScale;
-		counted.push(amount);
-	}
 	return {
-		total: counted.length === 0 ? null : {
-			currency,
-			value: formatUnits(sum, scale),
-			decimals: scale
-		},
-		counted,
-		unrated
+		to: "provisioning",
+		scope: "organization",
+		orgId: org.orgId
 	};
-}
+};
+/**
+* True while the machine has not settled enough to route or to gate on.
+*
+* Every phase is named, so a phase added to the type fails to compile here
+* until someone decides whether it holds or settles. A phase this build does
+* not know that still arrives at run time (a newer actor) holds: it must never
+* redirect a member who is in fact signed in, so the default arm does not
+* throw. Terminal for the account lane is `claimed | failed`.
+*
+* The org lane's own settledness (`ready | failed`) is the route gate's
+* question, not this one: every org lane sits under a CLAIMED account, and
+* `destination()` already names a real screen for each of its positions.
+*/
+const isRestoring = (state) => {
+	switch (state.phase) {
+		case "signed_out":
+		case "otp_sending":
+		case "otp_pending":
+		case "otp_verifying":
+		case "signing_out":
+		case "faulted": return false;
+		case "authenticated": return state.account.at !== "claimed" && state.account.at !== "failed";
+		case "restoring": return true;
+		default: return true;
+	}
+};
+/** The claimed-account gate as one function. The inlined consumers move onto
+* it in #1521; this ticket ships the selector they move onto. */
+const isClaimed = (state) => state.phase === "authenticated" && state.account.at === "claimed";
 //#endregion
-//#region src/domain/money/format-money.ts
+//#region src/money/format.ts
 function formatMoney(money, options = {}) {
 	if (!Number.isInteger(money.decimals) || money.decimals < 0) throw Errors.invalidInput("money.decimals", "must be a non-negative integer");
 	const symbol = currencySymbolFor(toCurrencyCode(money.currency));
@@ -242,10 +70,10 @@ function formatMoney(money, options = {}) {
 	const grouped = rounded.integer.replace(/\B(?=(\d{3})+(?!\d))/g, ",");
 	const signed = `${rounded.negative ? "-" : ""}${grouped}`;
 	if (options.grammar === "code") {
-		if (!rounded.hadFraction) return `${signed} ${String(money.currency)}`;
+		if (!rounded.hadFraction) return `${signed} ${money.currency}`;
 		let displayedFraction = rounded.fraction;
 		while (displayedFraction.length > 2 && displayedFraction.endsWith("0")) displayedFraction = displayedFraction.slice(0, -1);
-		return `${signed}.${displayedFraction} ${String(money.currency)}`;
+		return `${signed}.${displayedFraction} ${money.currency}`;
 	}
 	return `${symbol}${signed}.${rounded.fraction}`;
 }
@@ -267,7 +95,7 @@ function roundDecimal(value, decimals, maximumFractionDigits) {
 	};
 }
 //#endregion
-//#region src/surface/account-providers.ts
+//#region src/signing/account-providers.ts
 function localPrivateKeyAccountProvider(input) {
 	const account = privateKeyToAccount(input.privateKey);
 	const address = toAddress(account.address);
@@ -337,13 +165,13 @@ function firstAccount(value) {
 	return typeof first === "string" ? first : null;
 }
 //#endregion
-//#region src/surface/create-capxul-client-from-production.ts
+//#region src/platform/client/create.ts
 /** Consumer-facing factory — accepts only production-meaningful inputs (#326). */
 async function createCapxulClient(input) {
 	return createCapxulClient$1(input);
 }
 //#endregion
-//#region src/telemetry/stack-frame-parser.ts
+//#region src/observability/telemetry/stack-frame-parser.ts
 /**
 * Regex for V8/Chrome stack trace frame lines.
 * Matches:
@@ -425,7 +253,7 @@ function buildExceptionList(input) {
 	}];
 }
 //#endregion
-//#region src/telemetry/capture-exception.ts
+//#region src/observability/telemetry/capture-exception.ts
 /**
 * Capture an error as a `$exception` event through the telemetry port,
 * formatted for PostHog Error Tracking.
@@ -479,7 +307,7 @@ function captureException(telemetry, error, context) {
 			})
 		});
 		return telemetry.emit({
-			name: "$exception",
+			name: EXCEPTION_EVENT_NAME,
 			props
 		});
 	}).pipe(Effect.flatten), () => Effect.void);
@@ -496,4 +324,25 @@ function captureExceptionSync(telemetry, error, context) {
 	} catch {}
 }
 //#endregion
-export { CAPXUL_ERROR_CODES, CAPXUL_OPERATIONS, CAPXUL_PAYMENTS_V2_ADDRESS, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, CHAIN_UPSTREAMS, CapxulError, EVM_ADDRESS_RE, Errors, FAILURE_MODES, HANDLE_RE, PAYMENT_DIRECTIONS, PAYMENT_STATUSES, PEG_RATES, assetSymbolFor, captureException, captureExceptionSync, createCapxulClient, deriveDevPrivateKey, devPrivateKeySigner, eip1193AccountProvider, embeddedSigner, fingerprintPaymentIntent, formatAssetAmount, formatMoney, inboxPhase, injectedWalletSigner, isCapxulError, isCapxulOperation, isClaimed, isMoneyParseError, isRestoring, isSettingUpLifecycle, localPrivateKeyAccountProvider, normalizeCapxulOperation, openfortEmbeddedSigner, openfortEmbeddedSignerFromWallet, openfortEmbeddedWalletPort, parseAssetAmount, parseMoney, paymentPhase, postHogObservability, requestPhase, destination as resolveIdentityDestination, toCountryCode, toAddress as toEvmAddress, toHandle, toPartyId, valueIn };
+//#region ../protocol/src/requests/model.ts
+/** Build a reference URL. The consumer still reads authoritative terms from the backend. */
+function checkoutUrl(frontendOrigin, reference) {
+	const origin = new URL(frontendOrigin);
+	const loopback = [
+		"localhost",
+		"127.0.0.1",
+		"[::1]"
+	].includes(origin.hostname);
+	if (origin.protocol !== "https:" && !(origin.protocol === "http:" && loopback) || origin.username !== "" || origin.password !== "" || origin.pathname !== "/" || origin.search !== "" || origin.hash !== "") throw new TypeError("Provide an approved frontend origin");
+	const id = reference.kind === "offer" ? reference.offerId : reference.linkToken;
+	if (!/^[A-Za-z0-9_-]{1,128}$/u.test(id)) throw new TypeError("Invalid checkout reference");
+	const route = reference.kind === "offer" ? "offers" : reference.kind === "request" ? "requests" : "invoices";
+	const result = new URL(`/checkout/${route}/${encodeURIComponent(id)}`, origin);
+	if (reference.kind === "offer" && reference.quantity !== void 0) {
+		if (!Number.isSafeInteger(reference.quantity) || reference.quantity < 1) throw new TypeError("Invalid checkout quantity");
+		result.searchParams.set("quantity", String(reference.quantity));
+	}
+	return result.href;
+}
+//#endregion
+export { CAPXUL_ERROR_CODES, CAPXUL_OPERATIONS, CAPXUL_PAYMENTS_V2_ADDRESS, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, CHAIN_UPSTREAMS, CapxulError, EVM_ADDRESS_RE, EXPECTED_OPERATION_OUTCOMES, Errors, FAILURE_MODES, FixedOfferDraftSchema, HANDLE_RE, ORGANIZATION_SETUP_REASONS, PAYMENT_DIRECTIONS, PAYMENT_STATUSES, PaymentDocumentOptionsSchema, PayrollGroupIdSchema, PayrollGroupInputSchema, TOKENS, assetSymbolFor, captureException, captureExceptionSync, checkoutUrl, createCapxulClient, createOpenfortBrowserSigner, decodePayrollRunInput, decodePermissionIntent, deriveDevPrivateKey, devPrivateKeySigner, eip1193AccountProvider, embeddedSigner, fingerprintPaymentIntent, formatAssetAmount, formatMoney, inboxPhase, injectedWalletSigner, isCapxulError, isCapxulOperation, isCheckoutSettlementConsumed, isClaimed, isMoneyParseError, isRestoring, isSettingUpLifecycle, localPrivateKeyAccountProvider, normalizeCapxulOperation, openfortEmbeddedSignerFromWallet, openfortEmbeddedWalletPort, parseAssetAmount, parseMoney, paymentPhase, positionPeg, postHogObservability, requestPhase, requireAsset, destination as resolveIdentityDestination, toAccountId, toAssetId, toBudgetId, toCountryCode, toCurrencyCode, toAddress as toEvmAddress, toHandle, toOrgId, toPartyId, toPayrollGroupId, toPermissionAssignmentId, toPermissionId, toRaw, valueActivitySummary, valueIn };

package/dist/node/index.d.mts

@@ -1,9 +1,9 @@
-import { C as AuthCachePort, I as AuthSession, S as AuthCacheError, T as CachedJwt, i as CapxulSigner, n as oauthBearerAuthClient, t as OAuthBearerAuthClientInput, w as AuthCachePortTag } from "../OAuthBearerAuthClient-C-ip-z8M.mjs";
-import { Hex } from "viem";
+import { Ji as CapxulSigner, Yo as AuthSession, bo as AuthCachePortTag, fo as OAuthBearerAuthClientInput, po as oauthBearerAuthClient, vo as AuthCacheError, xo as CachedJwt, yo as AuthCachePort } from "../index-DidkO1aY.mjs";
 import { Effect, FileSystem, Layer, Path } from "effect";
-//#region src/adapters/auth-cache/FileSystemAuthCacheAdapter.d.ts
+import { Hex } from "viem";
+//#region src/access/auth-cache/file-system.d.ts
 type FileSystemRuntime = FileSystem.FileSystem | Path.Path;
-declare class FileSystemAuthCacheAdapter implements AuthCachePort {
+export declare class FileSystemAuthCacheAdapter implements AuthCachePort {
   private readonly path;
   private readonly runtime;
   readonly getSession: Effect.Effect<AuthSession | null, AuthCacheError>;
@@ -17,13 +17,13 @@ declare class FileSystemAuthCacheAdapter implements AuthCachePort {
   private write;
   private run;
 }
-declare function FileSystemAuthCacheLayer(input: {
+export declare function FileSystemAuthCacheLayer(input: {
   readonly path: string;
   readonly runtime?: Layer.Layer<FileSystemRuntime>;
 }): Layer.Layer<AuthCachePortTag, AuthCacheError>;
 //#endregion
 //#region src/node/index.d.ts
-interface DetectNodeAuthCacheAdapterOptions {
+export interface DetectNodeAuthCacheAdapterOptions {
   readonly authCachePath?: string;
   readonly resolveHomeDirectory?: () => string;
 }
@@ -32,7 +32,7 @@ interface DetectNodeAuthCacheAdapterOptions {
  * digest the backend returns for a prepared deployment UserOperation. The
  * The reference CLI builds this from `DEPLOYER_PRIVATE_KEY` for live tests.
  */
-declare function localPrivateKeySigner(input: {
+export declare function localPrivateKeySigner(input: {
   readonly privateKey: Hex;
 }): CapxulSigner;
 /**
@@ -45,6 +45,6 @@ declare function localPrivateKeySigner(input: {
  * Use this from a Node entrypoint and pass the result to
  * `createCapxulClient({ authCache })` for on-disk session persistence.
  */
-declare function detectNodeAuthCacheAdapter(options?: DetectNodeAuthCacheAdapterOptions): AuthCachePort;
+export declare function detectNodeAuthCacheAdapter(options?: DetectNodeAuthCacheAdapterOptions): AuthCachePort;
 //#endregion
-export { DetectNodeAuthCacheAdapterOptions, FileSystemAuthCacheAdapter, FileSystemAuthCacheLayer, type OAuthBearerAuthClientInput, detectNodeAuthCacheAdapter, localPrivateKeySigner, oauthBearerAuthClient };
+export { type OAuthBearerAuthClientInput, oauthBearerAuthClient };

package/dist/node/index.mjs

@@ -1,10 +1,10 @@
-import { I as toAddress, a as parseAuthSession, c as AuthCachePortTag, i as BrowserAuthCacheAdapter, o as parseCachedJwt, r as InMemoryAuthCacheAdapter, s as AuthCacheError, t as oauthBearerAuthClient } from "../OAuthBearerAuthClient-DWkofxdZ.mjs";
-import { Effect, FileSystem, Layer, Path } from "effect";
+import { Di as parseAuthSession, Ei as BrowserAuthCacheAdapter, Mr as toAddress, Oi as parseCachedJwt, Ti as InMemoryAuthCacheAdapter, Ui as AuthCacheError, Vi as isRecord, Wi as AuthCachePortTag, ni as oauthBearerAuthClient, wi as globalLocalStorage } from "../access-B-2qmxF_.mjs";
+import { Effect, FileSystem, Layer, Option, Path } from "effect";
 import { privateKeyToAccount } from "viem/accounts";
 import * as os from "node:os";
 import { join } from "node:path";
 import { NodeFileSystem, NodePath } from "@effect/platform-node";
-//#region src/adapters/auth-cache/FileSystemAuthCacheAdapter.ts
+//#region src/access/auth-cache/file-system.ts
 function emptyPayload() {
 	return {
 		session: null,
@@ -24,69 +24,60 @@ var FileSystemAuthCacheAdapter = class {
 	constructor(path, runtime = nodeFileSystemRuntime) {
 		this.path = path;
 		this.runtime = runtime;
-		const self = this;
 		this.getSession = this.run("getSession", this.read().pipe(Effect.map((payload) => payload.session)));
-		this.setSession = (session) => this.run("setSession", Effect.gen(function* () {
-			const cur = yield* self.read();
-			yield* self.write({
+		this.setSession = (session) => this.run("setSession", Effect.gen({ self: this }, function* () {
+			const cur = yield* this.read();
+			yield* this.write({
 				session,
 				jwt: cur.jwt
 			});
 		}));
-		this.clearSession = this.run("clearSession", Effect.gen(function* () {
-			const cur = yield* self.read();
-			yield* self.write({
+		this.clearSession = this.run("clearSession", Effect.gen({ self: this }, function* () {
+			const cur = yield* this.read();
+			yield* this.write({
 				session: null,
 				jwt: cur.jwt
 			});
 		}));
 		this.getJwt = this.run("getJwt", this.read().pipe(Effect.map((payload) => payload.jwt)));
-		this.setJwt = (jwt) => this.run("setJwt", Effect.gen(function* () {
-			const cur = yield* self.read();
-			yield* self.write({
+		this.setJwt = (jwt) => this.run("setJwt", Effect.gen({ self: this }, function* () {
+			const cur = yield* this.read();
+			yield* this.write({
 				session: cur.session,
 				jwt
 			});
 		}));
-		this.clearJwt = this.run("clearJwt", Effect.gen(function* () {
-			const cur = yield* self.read();
-			yield* self.write({
+		this.clearJwt = this.run("clearJwt", Effect.gen({ self: this }, function* () {
+			const cur = yield* this.read();
+			yield* this.write({
 				session: cur.session,
 				jwt: null
 			});
 		}));
 	}
 	read() {
-		const self = this;
-		return Effect.gen(function* () {
+		return Effect.gen({ self: this }, function* () {
 			const fs = yield* FileSystem.FileSystem;
-			if (!(yield* fs.exists(self.path))) return emptyPayload();
-			const raw = yield* fs.readFileString(self.path, "utf-8");
-			let parsed;
-			try {
-				parsed = JSON.parse(raw);
-			} catch {
-				return emptyPayload();
-			}
-			if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return emptyPayload();
-			const payload = parsed;
+			if (!(yield* fs.exists(this.path))) return emptyPayload();
+			const raw = yield* fs.readFileString(this.path, "utf-8");
+			const parsed = Option.getOrUndefined(yield* Effect.try(() => JSON.parse(raw)).pipe(Effect.option));
+			if (!isRecord(parsed)) return emptyPayload();
 			return {
-				session: parseAuthSession(payload.session),
-				jwt: parseCachedJwt(payload.jwt)
+				session: parseAuthSession(parsed.session),
+				jwt: parseCachedJwt(parsed.jwt)
 			};
 		});
 	}
 	write(payload) {
-		const self = this;
-		return Effect.gen(function* () {
+		return Effect.gen({ self: this }, function* () {
 			const fs = yield* FileSystem.FileSystem;
-			const dir = (yield* Path.Path).dirname(self.path);
+			const dir = (yield* Path.Path).dirname(this.path);
 			if (!(yield* fs.exists(dir))) yield* fs.makeDirectory(dir, {
 				recursive: true,
 				mode: 448
 			});
-			yield* fs.writeFileString(self.path, JSON.stringify(payload), { mode: 384 });
-			yield* fs.chmod(self.path, 384);
+			yield* fs.writeFileString(this.path, JSON.stringify(payload), { mode: 384 });
+			yield* fs.chmod(this.path, 384);
 		});
 	}
 	run(operation, effect) {
@@ -132,9 +123,9 @@ function localPrivateKeySigner(input) {
 * `createCapxulClient({ authCache })` for on-disk session persistence.
 */
 function detectNodeAuthCacheAdapter(options = {}) {
-	const globalAny = globalThis;
-	if (globalAny.window?.localStorage !== void 0) return new BrowserAuthCacheAdapter(globalAny.window.localStorage);
-	if (globalAny.process?.versions?.node !== void 0) {
+	const localStorage = globalLocalStorage();
+	if (localStorage !== void 0) return new BrowserAuthCacheAdapter(localStorage);
+	if (globalThis.process?.versions?.node !== void 0) {
 		const authCachePath = normalizeConfiguredAuthCachePath(options.authCachePath) ?? resolveDefaultAuthCachePath(options.resolveHomeDirectory ?? os.homedir);
 		if (authCachePath !== null) return new FileSystemAuthCacheAdapter(authCachePath);
 	}