@capxul/sdk 4.20.0-beta.7 → 4.20.0-beta.9

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import { $ as OrgId, A as Address, At as ChainCause, B as BudgetId, Ct as CapxulError, D as Account, E as CAPXUL_PAYMENTS_V2_ADDRESS, Et as Errors, F as AssetAmount, G as CurrencyCode, I as AssetId, J as EVM_ADDRESS_RE, L as AuthSession, Mt as FAILURE_MODES, Nt as FailureMode, O as AccountId, Ot as isCapxulError, Pt as RevertSummary, Q as Money, R as AuthUserId, St as CAPXUL_ERROR_CODES, Tt as CapxulErrorDetails, V as ChainId, W as CountryCode, Z as Handle, _ as Session, _t as toCountryCode, a as Eip1193RequestProvider, at as PermissionId, bt as toPartyId, c as injectedWalletSigner, ct as RoleKey, d as AccountRequirement, dt as TesterKind, et as PartyId, f as Eip1193Provider, g as Profile, gt as toBudgetId, h as CapxulResult, ht as toAddress, i as CapxulSigner, jt as ChainUpstream, kt as CHAIN_UPSTREAMS, l as AccountProvider, m as localPrivateKeyAccountProvider, mt as toAccountId, nt as PayrollGroupId, o as SignerStatus, p as eip1193AccountProvider, r as CapxulDigestSigner, rt as PayrollRunId, s as SignerStatusStore, u as AccountProviderSource, v as SmartAccount, vt as toHandle, wt as CapxulErrorCode, xt as toPermissionId, yt as toOrgId } from "./OAuthBearerAuthClient-DOPDDSPs.mjs";
-import { $ as PayrollRuns, $n as OrgSetupStep, $t as ActivityListParams, A as MemberStatus, An as PaymentDocumentsMethods, Ar as PAYMENT_STATUSES, At as PersonOnboarding, B as RoleView, Bn as TargetReference, Br as OrgLane, Bt as AddressBookAddInput, C as SystemHealth, Cn as OfframpQuoteInput, Cr as PaymentDocumentVerification, Ct as AccountsMethods, D as AssignmentProjection, Dn as PaymentDirection, Dr as SubmittedPermissionExecution, Dt as OrganizationOnboardingInput, E as CurrentUserMethods, En as PaymentActivityEvidence, Er as Permission, Et as OrganizationOnboarding, F as OrgView, Fn as PaymentsMethods, Ft as ActorProfileMethods, G as PayrollGroupInput, Gn as isSettingUpLifecycle, Gr as isRestoring, Gt as InboxItem, H as AuthorizeRunOptions, Hn as fingerprintPaymentIntent, Hr as StateLabel, Ht as AddressBookLabelInput, I as OrganizationAccess, In as PaymentsPayInput, Ir as TelemetryPort, It as ActorRelationshipMethods, J as PayrollMethods, Jn as SmartAccountMethods, Jt as ActivityAnnotationInput, K as PayrollGroupMember, Kn as CompleteProfileInput, Kr as IdentityTransition, Kt as InboxMethods, L as OrganizationAccount, Ln as RecipientResolution, Lr as Destination$1, Lt as ActorRequest, M as OrgMethods, Mn as PaymentStatus, Mr as RequestStatus, Mt as ReadyAccountLifecycle, N as OrgScopedMethods, Nn as PaymentTiming, Nt as AccountMethods, O as CreateOrgInput, On as PaymentDocumentKind, Or as InboxStatus, Ot as OrganizationOnboardingOptions, P as OrgTemplate, Pn as PaymentType, Pt as ActorProfile, Q as PayrollRunStatus, Qn as OrgLifecycle, Qt as ActivityKind, R as OrganizationAuditLogItem, Rn as Ref, Rr as IdentityEvent, Rt as ActorRequestIssueInput, S as SystemMethods, Sn as OfframpQuote, Sr as PaymentDocumentRender, St as OrgMeOptions, T as CurrentUserContext, Tn as Payment, Tr as CurrentHoldings, Tt as OnboardingMethods, U as PayrollEngagementTerms, Un as AccountLifecycle, Ur as destination, Ut as AddressBookMethods, V as AuthorizeRunInput, Vn as TargetsMethods, Vr as Readiness, Vt as AddressBookEntry, W as PayrollGroup, Wn as AccountSetupStep, Wr as isClaimed, Wt as InboxApproveInput, X as PayrollRun, Xn as AccountSetupPolicy, Xt as ActivityFilter, Y as PayrollOptions, Yn as AuthMethods, Yt as ActivityDetail, Z as PayrollRunItemInput, Zn as ClientRequests, Zt as ActivityItem, _ as CreateCapxulClientInput, _n as FinancialOpsMethods, _r as OfferedAuthority, _t as OrgInvitations, a as ObservationContext, an as ActivitySummaryParams, ar as GranteeRef, at as PermissionAssignInput, b as IdentityRuntimeSendResult, bn as MovementActivityEvidence, br as PaymentDocumentDownload, bt as OrgMe, c as HostObservability, cn as DepositInstructions, cr as InvitationPage, ct as PermissionMethods, d as postHogObservability, dn as DestinationKind, dr as InvitationRecovery, dt as PermissionRevokeInput, en as ActivityMethods, er as PayoutAddress, et as PayrollTermsUnit, f as OpenfortBrowserAuth, fn as DestinationListInput, fr as InvitationTarget, ft as PermissionReadResult, g as CapxulClient, gn as DestinationsMethods, gr as InvitePreview, gt as InvitePreviewInput, h as createOpenfortBrowserSigner, hn as DestinationRemoveInput, hr as InviteInput, ht as InvitePrepared, i as ObservationAdapter, in as ActivitySummary, ir as EndingReason, it as OrganizationPaymentsMethods, j as MemberView, jn as PaymentMoney, jr as PaymentStatus$1, jt as PersonOnboardingInput, k as MemberIdentityProjection, kn as PaymentDocumentRef, kr as PAYMENT_DIRECTIONS, kt as OrganizationOnboardingState, l as PostHogObservabilityClient, ln as Destination, lr as InvitationPageInput, lt as PermissionOptions, m as OpenfortBrowserSignerBootstrap, mn as DestinationRail, mr as InviteGrant, mt as InviteOptions, nn as ActivityRange, nr as BudgetIntent, nt as OrganizationPaymentInput, o as ObservationDelivery, on as ActivitySummaryTotal, or as InvitationAcceptInput, ot as PermissionChangeInput, p as OpenfortBrowserSigner, pn as DestinationPayload, pr as InvitationView, pt as InviteMethod, q as PayrollGroupsMethods, qn as IdentityMethods, qr as InvocationControls, qt as ActivityAnnotation, r as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, rn as ActivityReference, rr as CurrentPolicy, rt as OrganizationPaymentItemInput, s as SdkFailureObservation, sn as ActorReference, sr as InvitationId, st as PermissionCreateInput, t as CapxulClientInput, tn as ActivityPage, tr as AuthorityRef, tt as OrganizationPaymentBatchInput, u as PostHogObservabilityOptions, un as DestinationAddInput, ur as InvitationPhase, ut as PermissionReplaceInput, v as IdentityProfileDetails, vn as MeMethods, vr as SpendingScope, vt as OwnInvitationsMethod, w as MediaMethods, wn as OfframpStatus, wr as ActorRef, wt as CompletedPersonProfile, x as HoldingsMethods, xn as OfframpMethods, xr as PaymentDocumentReadRef, xt as OrgMeMethod, y as IdentityRuntime, yn as MeProfile, yr as ClientRequestView, yt as Budget, z as RoleDefinition, zn as ResolvedTarget, zr as IdentityState, zt as ActorRequestsMethods } from "./production-UMTDZSTH.mjs";
+import { $ as PayrollRuns, $n as OrgSetupStep, $t as ActivityListParams, A as MemberStatus, An as PaymentDocumentsMethods, Ar as PAYMENT_STATUSES, At as PersonOnboarding, B as RoleView, Bn as TargetReference, Br as OrgLane, Bt as AddressBookAddInput, C as SystemHealth, Cn as OfframpQuoteInput, Cr as PaymentDocumentVerification, Ct as AccountsMethods, D as AssignmentProjection, Dn as PaymentDirection, Dr as SubmittedPermissionExecution, Dt as OrganizationOnboardingInput, E as CurrentUserMethods, En as PaymentActivityEvidence, Er as Permission, Et as OrganizationOnboarding, F as OrgView, Fn as PaymentsMethods, Ft as ActorProfileMethods, G as PayrollGroupInput, Gn as isSettingUpLifecycle, Gr as isRestoring, Gt as InboxItem, H as AuthorizeRunOptions, Hn as fingerprintPaymentIntent, Hr as StateLabel, Ht as AddressBookLabelInput, I as OrganizationAccess, In as PaymentsPayInput, Ir as TelemetryPort, It as ActorRelationshipMethods, J as PayrollMethods, Jn as SmartAccountMethods, Jt as ActivityAnnotationInput, K as PayrollGroupMember, Kn as CompleteProfileInput, Kr as IdentityTransition, Kt as InboxMethods, L as OrganizationAccount, Ln as RecipientResolution, Lr as Destination$1, Lt as ActorRequest, M as OrgMethods, Mn as PaymentStatus, Mr as RequestStatus, Mt as ReadyAccountLifecycle, N as OrgScopedMethods, Nn as PaymentTiming, Nt as AccountMethods, O as CreateOrgInput, On as PaymentDocumentKind, Or as InboxStatus, Ot as OrganizationOnboardingOptions, P as OrgTemplate, Pn as PaymentType, Pt as ActorProfile, Q as PayrollRunStatus, Qn as OrgLifecycle, Qt as ActivityKind, R as OrganizationAuditLogItem, Rn as Ref, Rr as IdentityEvent, Rt as ActorRequestIssueInput, S as SystemMethods, Sn as OfframpQuote, Sr as PaymentDocumentRender, St as OrgMeOptions, T as CurrentUserContext, Tn as Payment, Tr as CurrentHoldings, Tt as OnboardingMethods, U as PayrollEngagementTerms, Un as AccountLifecycle, Ur as destination, Ut as AddressBookMethods, V as AuthorizeRunInput, Vn as TargetsMethods, Vr as Readiness, Vt as AddressBookEntry, W as PayrollGroup, Wn as AccountSetupStep, Wr as isClaimed, Wt as InboxApproveInput, X as PayrollRun, Xn as AccountSetupPolicy, Xt as ActivityFilter, Y as PayrollOptions, Yn as AuthMethods, Yt as ActivityDetail, Z as PayrollRunItemInput, Zn as ClientRequests, Zt as ActivityItem, _ as CreateCapxulClientInput, _n as FinancialOpsMethods, _r as OfferedAuthority, _t as OrgInvitations, a as ObservationContext, an as ActivitySummaryParams, ar as GranteeRef, at as PermissionAssignInput, b as IdentityRuntimeSendResult, bn as MovementActivityEvidence, br as PaymentDocumentDownload, bt as OrgMe, c as HostObservability, cn as DepositInstructions, cr as InvitationPage, ct as PermissionMethods, d as postHogObservability, dn as DestinationKind, dr as InvitationRecovery, dt as PermissionRevokeInput, en as ActivityMethods, er as PayoutAddress, et as PayrollTermsUnit, f as OpenfortBrowserAuth, fn as DestinationListInput, fr as InvitationTarget, ft as PermissionReadResult, g as CapxulClient, gn as DestinationsMethods, gr as InvitePreview, gt as InvitePreviewInput, h as createOpenfortBrowserSigner, hn as DestinationRemoveInput, hr as InviteInput, ht as InvitePrepared, i as ObservationAdapter, in as ActivitySummary, ir as EndingReason, it as OrganizationPaymentsMethods, j as MemberView, jn as PaymentMoney, jr as PaymentStatus$1, jt as PersonOnboardingInput, k as MemberIdentityProjection, kn as PaymentDocumentRef, kr as PAYMENT_DIRECTIONS, kt as OrganizationOnboardingState, l as PostHogObservabilityClient, ln as Destination, lr as InvitationPageInput, lt as PermissionOptions, m as OpenfortBrowserSignerBootstrap, mn as DestinationRail, mr as InviteGrant, mt as InviteOptions, nn as ActivityRange, nr as BudgetIntent, nt as OrganizationPaymentInput, o as ObservationDelivery, on as ActivitySummaryTotal, or as InvitationAcceptInput, ot as PermissionChangeInput, p as OpenfortBrowserSigner, pn as DestinationPayload, pr as InvitationView, pt as InviteMethod, q as PayrollGroupsMethods, qn as IdentityMethods, qr as InvocationControls, qt as ActivityAnnotation, r as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, rn as ActivityReference, rr as CurrentPolicy, rt as OrganizationPaymentItemInput, s as SdkFailureObservation, sn as ActorReference, sr as InvitationId, st as PermissionCreateInput, t as CapxulClientInput, tn as ActivityPage, tr as AuthorityRef, tt as OrganizationPaymentBatchInput, u as PostHogObservabilityOptions, un as DestinationAddInput, ur as InvitationPhase, ut as PermissionReplaceInput, v as IdentityProfileDetails, vn as MeMethods, vr as SpendingScope, vt as OwnInvitationsMethod, w as MediaMethods, wn as OfframpStatus, wr as ActorRef, wt as CompletedPersonProfile, x as HoldingsMethods, xn as OfframpMethods, xr as PaymentDocumentReadRef, xt as OrgMeMethod, y as IdentityRuntime, yn as MeProfile, yr as ClientRequestView, yt as Budget, z as RoleDefinition, zn as ResolvedTarget, zr as IdentityState, zt as ActorRequestsMethods } from "./production-CDJHj_pg.mjs";
 import { Hex } from "viem";
 import { Effect, Layer } from "effect";
 //#region ../errors/src/index.d.ts

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { A as resolveFailureMode, B as valueIn, C as normalizeExceptionErrorKind, D as isSettingUpLifecycle, E as safeExceptionLabel, F as isCapxulOperation, G as requireAsset, H as assetSymbolFor, I as normalizeCapxulOperation, J as parseMoney, K as toRaw, M as PAYMENT_STATUSES, O as injectedWalletSigner, P as CAPXUL_OPERATIONS, R as positionPeg, S as SDK_VERSION, T as projectSdkException, U as formatAssetAmount, W as parseAssetAmount, X as isClaimed, Y as destination, Z as isRestoring, _ as openfortEmbeddedWalletPort, b as failureDetail, d as deriveDevPrivateKey, f as devPrivateKeySigner, g as openfortEmbeddedSignerFromWallet, h as openfortEmbeddedSigner, j as PAYMENT_DIRECTIONS, k as signerFailure, m as embeddedSigner, p as createOpenfortBrowserSigner, q as isMoneyParseError, r as postHogObservability, t as createCapxulClient$1, v as fingerprintPaymentIntent, w as normalizeExceptionOperation, x as EXCEPTION_MESSAGE, y as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, z as valueActivitySummary } from "./production-B63Xm_fl.mjs";
+import { A as resolveFailureMode, B as valueIn, C as normalizeExceptionErrorKind, D as isSettingUpLifecycle, E as safeExceptionLabel, F as isCapxulOperation, G as requireAsset, H as assetSymbolFor, I as normalizeCapxulOperation, J as parseMoney, K as toRaw, M as PAYMENT_STATUSES, O as injectedWalletSigner, P as CAPXUL_OPERATIONS, R as positionPeg, S as SDK_VERSION, T as projectSdkException, U as formatAssetAmount, W as parseAssetAmount, X as isClaimed, Y as destination, Z as isRestoring, _ as openfortEmbeddedWalletPort, b as failureDetail, d as deriveDevPrivateKey, f as devPrivateKeySigner, g as openfortEmbeddedSignerFromWallet, h as openfortEmbeddedSigner, j as PAYMENT_DIRECTIONS, k as signerFailure, m as embeddedSigner, p as createOpenfortBrowserSigner, q as isMoneyParseError, r as postHogObservability, t as createCapxulClient$1, v as fingerprintPaymentIntent, w as normalizeExceptionOperation, x as EXCEPTION_MESSAGE, y as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, z as valueActivitySummary } from "./production-DNw0YqCj.mjs";
 import { G as toCountryCode, I as currencySymbolFor, K as toCurrencyCode, L as toAccountId, R as toAddress, U as toBudgetId, Z as toHandle, at as toPermissionId, bt as CHAIN_UPSTREAMS, et as toOrgId, gt as CapxulError, ht as CAPXUL_ERROR_CODES, j as EVM_ADDRESS_RE, m as CAPXUL_PAYMENTS_V2_ADDRESS, pt as HANDLE_RE, tt as toPartyId, vt as Errors, x as TOKENS, xt as FAILURE_MODES, yt as isCapxulError } from "./OAuthBearerAuthClient-DdKYPHE0.mjs";
 import { Effect } from "effect";
 import { privateKeyToAccount } from "viem/accounts";

package/dist/{production-UMTDZSTH.d.mts → production-CDJHj_pg.d.mts}

@@ -3839,6 +3839,8 @@ interface CapxulClientInput {
   readonly publishableKey: string;
   /** Public Capxul bootstrap origin; defaults remain unchanged when omitted. */
   readonly bootstrapBaseUrl?: string;
+  /** Show sanitized SDK, provider, and backend diagnostics on the host console. */
+  readonly localDiagnostics?: boolean;
   /**
    * One host-owned product/failure observability module around the host's
    * existing analytics client. Omit for zero host observation work.

package/dist/{production-B63Xm_fl.mjs → production-DNw0YqCj.mjs}

@@ -6219,6 +6219,18 @@ function withInvocationParentSpan(effect, controls) {
 	const parent = controls?.[INVOCATION_PARENT_SPAN];
 	return parent === void 0 ? effect : effect.pipe(Effect.withParentSpan(parent));
 }
+/**
+* The input field a refused request named.
+*
+* The surfaces that call the port directly already carry `details.field` for an
+* `INVALID_INPUT` refusal. The actor keeps that one allowlisted detail instead of
+* dropping it, so a caller sees the same refusal either way.
+*/
+const refusedInputField = (failure) => {
+	if (failure.code !== "INVALID_INPUT") return void 0;
+	const field = failure.error?.details?.field;
+	return typeof field === "string" && field.length > 0 ? { field } : void 0;
+};
 var ActorFailure = class extends Error {
 	reason;
 	machine;
@@ -6384,7 +6396,7 @@ const boot = (spec, options = {}) => Effect.gen(function* () {
 				const event = { _tag: env.origin.event };
 				const failedState = exit.failure === timeoutFailure || exit.failure === cancelledFailure ? yield* recoverFailure(state, env.origin, exit.failure) : state;
 				yield* emit(nonApplied(failedState, event, exit.failure.code, outcome, env, exit.failure));
-				const details = exit.failure === timeoutFailure ? { reason: "timeout" } : void 0;
+				const details = exit.failure === timeoutFailure ? { reason: "timeout" } : refusedInputField(exit.failure);
 				yield* failReply(held.reply, makeFailure(failedState, event, exit.failure.code, details, exit.failure.error ?? exit.failure));
 				return;
 			}
@@ -8098,7 +8110,7 @@ function subscribeActivity(deps, actor, controls, onChange) {
 }
 //#endregion
 //#region package.json
-var version = "4.20.0-beta.7";
+var version = "4.20.0-beta.9";
 //#endregion
 //#region src/telemetry/exception-projection.ts
 /** Fixed fallback for failures that have no safe message. */
@@ -11679,6 +11691,7 @@ function mapBetterAuthError(operation, body) {
 		const code = typeof errBody.code === "string" ? errBody.code : "";
 		if (code === "OTP_EXPIRED") return Errors.otpExpired();
 		if (code === "INVALID_OTP") return Errors.invalidInput("otp", errBody.message ?? "invalid OTP");
+		if (code === "TOO_MANY_ATTEMPTS") return Errors.rateLimited({ resource: "better-auth/verifyOtp" });
 		if (code === "VALIDATION_ERROR" || code === "INVALID_EMAIL") return Errors.invalidInput("email", errBody.message ?? "invalid email");
 	}
 	return Errors.providerError("better-auth", operation, new Error(String(body)));
@@ -12296,6 +12309,10 @@ var BetterAuthNodeAdapter = class {
 						ok: false,
 						error: Errors.invalidInput("otp", errBody.message ?? "invalid OTP")
 					};
+					if (errBody.code === "TOO_MANY_ATTEMPTS") return {
+						ok: false,
+						error: Errors.rateLimited({ resource: "better-auth/verifyOtp" })
+					};
 				}
 			}
 			return {
@@ -12855,6 +12872,12 @@ const stderrConvexLogger = {
 	error: writeConvexDiagnostic,
 	logVerbose: () => void 0
 };
+const silentConvexLogger = {
+	log: () => void 0,
+	warn: () => void 0,
+	error: () => void 0,
+	logVerbose: () => void 0
+};
 /** Exact floor-first allowlist; every additional handler must migrate its validator first. */
 const OBSERVED_CONVEX_ACTIONS = /* @__PURE__ */ new Set([
 	"system:healthObserved",
@@ -12943,7 +12966,7 @@ var ConvexCallAdapter = class {
 		const webSocketConstructor = this.#connectionMonitor.observedWebSocketConstructor();
 		this.#client = deps.client ?? new ConvexClient(deps.convexUrl, {
 			...webSocketConstructor === void 0 ? {} : { webSocketConstructor },
-			...deps.logToStderr === true ? { logger: stderrConvexLogger } : {}
+			logger: deps.localDiagnostics === true ? stderrConvexLogger : silentConvexLogger
 		});
 		this.#tokenProvider = deps.tokenProvider;
 		this.#applicationId = deps.applicationId;
@@ -18628,7 +18651,7 @@ function productionAuthCacheLayer(input) {
 function productionConvexCallLayer(input, refreshConvexAuthRef) {
 	return Layer.unwrap(Effect.map(AuthClientPortTag, (authClient) => ConvexCallLayer({
 		convexUrl: input.runtimeUrls.convexUrl,
-		logToStderr: input.runtime === "node",
+		localDiagnostics: input.localDiagnostics,
 		...input.applicationId === void 0 ? {} : { applicationId: input.applicationId },
 		...input.observation === void 0 ? {} : { observation: input.observation },
 		...input.convexClient === void 0 ? {} : { client: input.convexClient },
@@ -18667,6 +18690,7 @@ function resolveProductionObservability(input) {
 	};
 }
 async function createProductionAdapters(input) {
+	const localDiagnostics = productionLocalDiagnostics(input);
 	const { observation, telemetry, invocationObservation, invocationTelemetry } = resolveProductionObservability(input);
 	const resolvedInput = resolveInput(input);
 	if (!resolvedInput.ok) return resolvedInput;
@@ -18737,6 +18761,7 @@ async function createProductionAdapters(input) {
 		const portsLayer = mergeProductionAdapterLayers(makeProductionAdapterLayerEntries({
 			bootstrap,
 			runtime: resolvedInput.value.runtime,
+			localDiagnostics,
 			...resolvedInput.value.origin === void 0 ? {} : { origin: resolvedInput.value.origin },
 			runtimeUrls: runtimeUrls.value,
 			chainId: bootstrapResult.value.chainId,
@@ -18751,7 +18776,7 @@ async function createProductionAdapters(input) {
 			...input.signal === void 0 ? {} : { signal: input.signal },
 			...input.resetSignerSession === void 0 ? {} : { resetSignerSession: input.resetSignerSession }
 		}));
-		const applicationLayer = Layer.merge(portsLayer, optionalEngineeringTelemetryLayer(bootstrapResult.value.engineeringTelemetry, resolvedInput.value.runtime, hostEngineeringPolicy(input.observability))).pipe(Layer.provideMerge(resolvedInput.value.runtime === "node" ? Layer.succeed(Logger.LogToStderr, true) : Layer.empty));
+		const applicationLayer = Layer.merge(portsLayer, optionalEngineeringTelemetryLayer(bootstrapResult.value.engineeringTelemetry, resolvedInput.value.runtime, hostEngineeringPolicy(input.observability))).pipe(Layer.provideMerge(localDiagnosticsLayer(localDiagnostics, resolvedInput.value.runtime)));
 		const context = await Effect.runPromise(Layer.buildWithScope(applicationLayer, scope));
 		const collected = await Effect.runPromise(collectProductionFlowPorts.pipe(Effect.provide(context)));
 		const indexerUrl = input.indexerUrl ?? bootstrapResult.value.indexerUrl;
@@ -18815,6 +18840,13 @@ function optionalEngineeringTelemetryLayer(policy, runtime, hostPolicy) {
 		return Layer.empty;
 	}
 }
+function localDiagnosticsLayer(enabled, runtime) {
+	if (!enabled) return Logger.layer([]);
+	return runtime === "node" ? Layer.succeed(Logger.LogToStderr, true) : Layer.empty;
+}
+function productionLocalDiagnostics(input) {
+	return input.localDiagnostics !== false;
+}
 function refreshConvexAuthOnSession(authClient, refresh) {
 	return {
 		...authClient,
@@ -18879,7 +18911,7 @@ async function createCapxulClientWithSignerControls(input, controls) {
 			runtime,
 			authBaseUrl: resolvedAuthBaseUrl,
 			createBrowserSigner: createOpenfortBrowserSignerFromBootstrap,
-			diagnostic: new EffectLogDiagnosticAdapter(adapters.value.context, new ConsoleDiagnosticAdapter()),
+			diagnostic: new EffectLogDiagnosticAdapter(adapters.value.context, productionLocalDiagnostics(input) ? new ConsoleDiagnosticAdapter() : void 0),
 			signer: input.signer,
 			factory: input.openfortSignerFactory,
 			finalSign: controls.signUserOpHash,

package/dist/testing/index.d.mts

@@ -1,5 +1,5 @@
 import { h as CapxulResult } from "../OAuthBearerAuthClient-DOPDDSPs.mjs";
-import { Fr as TelemetryIdentifyInput, Kr as IdentityTransition, Nr as TelemetryEvent, Pr as TelemetryGroupInput, g as CapxulClient, i as ObservationAdapter, n as ProductionSignerControls, t as CapxulClientInput } from "../production-UMTDZSTH.mjs";
+import { Fr as TelemetryIdentifyInput, Kr as IdentityTransition, Nr as TelemetryEvent, Pr as TelemetryGroupInput, g as CapxulClient, i as ObservationAdapter, n as ProductionSignerControls, t as CapxulClientInput } from "../production-CDJHj_pg.mjs";
 import { Effect, Layer } from "effect";
 //#region src/testing/production-client.d.ts
 /** Create the one production client with per-client controls at its signing boundaries. */

package/dist/testing/index.mjs

@@ -1,4 +1,4 @@
-import { K as toRaw, L as accountFromAccountPositions, N as redactTelemetryEvent, V as assetAmountFromRaw, a as smartAccountErrorFromCapxul, c as identityErrorFromCapxul, i as assembleCapxulClient, l as convexCallErrorFromCapxul, n as createCapxulClientWithSignerControls, o as accountReadErrorFromCapxul, s as wireChainId, u as bootstrapErrorFromCapxul } from "../production-B63Xm_fl.mjs";
+import { K as toRaw, L as accountFromAccountPositions, N as redactTelemetryEvent, V as assetAmountFromRaw, a as smartAccountErrorFromCapxul, c as identityErrorFromCapxul, i as assembleCapxulClient, l as convexCallErrorFromCapxul, n as createCapxulClientWithSignerControls, o as accountReadErrorFromCapxul, s as wireChainId, u as bootstrapErrorFromCapxul } from "../production-DNw0YqCj.mjs";
 import { $ as toKycTier, B as toAppId, G as toCountryCode, H as toAuthUserId, J as toEmail, L as toAccountId, Q as toJwtToken, R as toAddress, W as toChainId, X as toEpochSeconds, Y as toEpochMs, Z as toHandle, ct as toSessionToken, d as authClientPortFromPromiseAdapter, dt as toWeiAmount, ft as validateHandle, gt as CapxulError, n as readClockNow, ot as toPublishableKey, q as toDurationMs, r as InMemoryAuthCacheAdapter, v as deriveCapxulSafeAddress, vt as Errors, y as CONFIGURED_MONEY_ASSETS, z as toAllowedOrigin } from "../OAuthBearerAuthClient-DdKYPHE0.mjs";
 import { keccak256 } from "viem";
 import { Effect, Result, Semaphore } from "effect";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/sdk",
-  "version": "4.20.0-beta.7",
+  "version": "4.20.0-beta.9",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Xelmar-tech/infrastructure.git",
@@ -50,11 +50,11 @@
     "vite-plus": "0.3.0",
     "vitest": "4.1.11",
     "@capxul/config": "0.4.0-beta.0",
-    "@capxul/errors": "0.3.0",
+    "@capxul/observability": "4.20.0-beta.9",
     "@capxul/types": "0.3.0",
+    "@capxul/wire": "0.8.0-beta.1",
     "@capxul/typescript-config": "0.0.0",
-    "@capxul/observability": "4.20.0-beta.7",
-    "@capxul/wire": "0.8.0-beta.1"
+    "@capxul/errors": "0.3.0"
   },
   "_permissionlessPinReason": "permissionless.toSafeSmartAccount is pinned to 0.3.4 for live Safe deployment E2E. Counterfactual address fixtures captured 2026-05-17 in packages/backend/convex/_shared/__tests__/counterfactual.test.ts and packages/config/tests/safe.test.ts must be re-verified before upgrading.",
   "scripts": {