@capxul/mcp 4.20.0-beta.24 → 4.20.0-beta.26

package/dist/main.mjs

@@ -206,12 +206,17 @@ const Errors = {
 	* a PERMISSION denial — explicitly NOT an `INSUFFICIENT_BALANCE` (the treasury
 	* held the funds; the role's authority is what bound). `reason` discriminates
 	* the violated condition (`over_cap` / `daily_cap` / `not_member` /
-	* `disallowed_recipient` / `condition_violation`); leak-safe — no on-chain
-	* identifiers ever enter the details.
+	* `disallowed_recipient` / `condition_violation` / `budget_exhausted`);
+	* no Safe, Roles module or role key enters the details.
+	* `budget_exhausted` carries what the Budget's allowance still holds and
+	* what the spend needs, as asset amounts in major units (#2297); the asset
+	* id names the public token contract.
 	*/
-	rolePermissionDenied: (details) => new CapxulError("ROLE_PERMISSION_DENIED", `Org role denied this spend on-chain (${details.reason}).`, { details: details.operation === void 0 ? { reason: details.reason } : {
+	rolePermissionDenied: (details) => new CapxulError("ROLE_PERMISSION_DENIED", `Org role denied this spend on-chain (${details.reason}).`, { details: {
 		reason: details.reason,
-		operation: details.operation
+		...details.operation === void 0 ? {} : { operation: details.operation },
+		...details.remaining === void 0 ? {} : { remaining: details.remaining },
+		...details.required === void 0 ? {} : { required: details.required }
 	} }),
 	/**
 	* A transaction (or sponsored UserOp) failed. `details.reason` discriminates
@@ -4257,7 +4262,7 @@ const ActivityItemSchema = Schema.Union([Schema.Struct({
 }), Schema.Struct({
 	kind: Schema.Literal("movement"),
 	id: Schema.String,
-	classification: Schema.Literal("movement_only_outflow"),
+	classification: Schema.Literals(["deposit", "movement_only_outflow"]),
 	amount: Amount,
 	direction: Direction,
 	counterpartyLabel: Schema.String,
@@ -9862,7 +9867,44 @@ const approvals = {
 		]
 	})
 };
+/**
+* The home screen in one read. A section whose read failed is null, so the
+* caller shows it as unavailable, never as empty.
+*/
+const HomeSchema = Schema.Struct({
+	email: Schema.String,
+	actingAs: Schema.Union([Schema.Struct({ kind: Schema.Literal("personal") }), Schema.Struct({
+		kind: Schema.Literal("organization"),
+		orgId: Schema.String
+	})]),
+	/** The acting Safe's position in each settlement asset of its chain. */
+	balances: Schema.NullOr(Schema.Array(AssetPositionSchema)),
+	/** The ids of what waits on the caller, newest first. */
+	needsYou: Schema.NullOr(Schema.Struct({
+		requestsToPay: Schema.Array(Schema.String),
+		payrollToApprove: Schema.Array(Schema.String),
+		paymentsToRetry: Schema.Array(Schema.String)
+	})),
+	/** The newest rows of the actor's activity. */
+	recentActivity: Schema.NullOr(Schema.Array(ActivityItemSchema))
+});
 const summaries = {
+	/**
+	* Where the caller acts, its balances, what needs it and its newest activity,
+	* for the person or for an Organization they take part in. One round trip.
+	*/
+	home: Operation.action("accounts.summaries.home", {
+		input: Schema.Struct({
+			chainId: ChainIdSchema$1,
+			orgId: Schema.optionalKey(Schema.NonEmptyString)
+		}),
+		output: HomeSchema,
+		errors: [
+			...CALL$10,
+			...DEFECTS,
+			"ROLE_PERMISSION_DENIED"
+		]
+	}),
 	/** The signed-in person: id, verified email and Profile display name. */
 	me: Operation.query("accounts.summaries.me", {
 		input: Schema.Struct({}),
@@ -11737,7 +11779,11 @@ const OrgId$2 = Schema.NonEmptyString;
 const CALL$4 = ["NOT_AUTHENTICATED", "INVALID_INPUT"];
 /** The caller's own Account and Safe, which a Payment is signed from. */
 const ACCOUNT$1 = ["SMART_ACCOUNT_MISSING", "ACCOUNT_NOT_FOUND"];
-/** Not a participant of the Organization, or no Budget in it that may pay for this. */
+/**
+* Not a participant of the Organization, no Budget in it that may pay for
+* this, or a Budget whose on-chain allowance holds less than the batch spends
+* (`budget_exhausted`, naming what is left).
+*/
 const DENIED$1 = ["ROLE_PERMISSION_DENIED"];
 /** The command, its Payment or its execution is not in a state this applies to. */
 const STATE$3 = ["WRONG_STATE"];
@@ -12048,7 +12094,9 @@ const OneOrganization = Schema.Struct({ orgId: OrgId$1 });
 const CALL$3 = ["NOT_AUTHENTICATED", "INVALID_INPUT"];
 /**
 * The caller does not take part in the Organization, or holds no Budget in it
-* that may pay for this. A caller outside the Organization learns nothing more.
+* that may pay for this, or the Budget's on-chain allowance holds less than the
+* run pays (`budget_exhausted`, naming what is left). A caller outside the
+* Organization learns nothing more.
 */
 const DENIED = ["ROLE_PERMISSION_DENIED"];
 /**
@@ -13751,7 +13799,9 @@ emitSaved: "activity.annotations.emitSaved" },
 			linkObservation: "payments.commands.linkObservation",
 			failPrepared: "payments.commands.failPrepared",
 			loadContext: "payments.commands.loadContext",
-			loadExecutionContext: "payments.commands.loadExecutionContext"
+			loadExecutionContext: "payments.commands.loadExecutionContext",
+			/** The capped Budget a prepared Organization command spends from, before its allowance is read on chain. */
+			loadBudgetAllowance: "payments.commands.loadBudgetAllowance"
 		},
 		lifecycles: { prepareIntent: "payments.lifecycles.prepareIntent" },
 		/** The stored UserOperation of every money command: Payment, Permission and configuration. */
@@ -15241,95 +15291,83 @@ Schema.Struct({
 });
 //#endregion
 //#region ../../packages/observability/src/catalog/cli.ts
-/** One completed online CLI diagnostic. No command input or provider text. */
+/** Every command path of the `capxul` tree, dot-separated, plus the root and `unknown`. */
 const CLI_COMMAND_NAMES = [
-	"status",
-	"request",
-	"request.list",
-	"request.get",
-	"request.cancel",
-	"offer",
-	"offer.create",
-	"offer.list",
-	"offer.get",
-	"offer.revise",
-	"offer.deactivate",
-	"org.offer",
-	"org.offer.create",
-	"org.offer.list",
-	"org.offer.get",
-	"org.offer.revise",
-	"org.offer.deactivate",
-	"request.issue",
-	"inbox",
-	CAPXUL_OPERATIONS.inbox.list,
-	"inbox.get",
-	"inbox.pay",
-	CAPXUL_OPERATIONS.inbox.decline,
-	"org.request",
-	"org.request.list",
-	"org.request.get",
-	"org.request.cancel",
-	"org.request.issue",
-	"org.inbox",
-	CAPXUL_OPERATIONS.org.inbox.list,
-	"org.inbox.get",
-	"org.inbox.pay",
-	CAPXUL_OPERATIONS.org.inbox.decline,
 	"capxul",
+	"home",
 	"whoami",
 	"use",
 	"use.personal",
 	"use.org",
 	"use.env",
-	"doctor",
-	"telemetry",
-	"telemetry.status",
-	"telemetry.enable",
-	"telemetry.disable",
 	"auth",
 	"auth.login",
-	"auth.signup",
-	"auth.send",
 	"auth.verify",
 	"auth.switch",
-	"auth.profile",
-	"auth.status",
 	"auth.logout",
 	"account",
-	CAPXUL_OPERATIONS.account.status,
-	CAPXUL_OPERATIONS.account.balance,
-	"account.deposit",
+	"account.show",
 	"account.retry",
-	"document",
-	"document.get",
-	"document.verify",
-	"document.render",
-	"document.export",
+	"balance",
+	"address",
 	"payment",
+	"payment.send",
 	"payment.list",
 	"payment.get",
 	"payment.wait",
-	"payment.send",
 	"payment.retry",
-	"activity",
-	"activity.list",
-	"activity.get",
-	"activity.summary",
-	"activity.annotate",
+	"inbox",
+	CAPXUL_OPERATIONS.inbox.list,
+	"inbox.get",
+	"inbox.pay",
+	CAPXUL_OPERATIONS.inbox.decline,
+	"request",
+	"request.issue",
+	"request.list",
+	"request.get",
+	"request.cancel",
+	"offer",
+	"offer.create",
+	"offer.list",
+	"offer.get",
+	"offer.revise",
+	"offer.deactivate",
 	"contact",
+	"contact.add",
 	"contact.list",
 	"contact.get",
-	"contact.add",
 	"contact.label",
 	"contact.hide",
 	"contact.unhide",
+	"document",
+	"document.get",
+	"document.render",
+	"document.export",
+	"document.verify",
+	"activity",
+	"activity.list",
+	"activity.get",
+	"activity.summary",
+	"activity.annotate",
+	"invite",
+	"invite.list",
+	"invite.accept",
+	"invite.decline",
 	"org",
 	CAPXUL_OPERATIONS.org.list,
-	"org.status",
+	CAPXUL_OPERATIONS.org.create,
+	"org.show",
 	CAPXUL_OPERATIONS.org.me,
-	"org.balance",
-	"org.deposit",
+	"org.wait",
+	CAPXUL_OPERATIONS.org.retry,
+	"org.member",
+	"org.member.list",
+	"org.member.get",
+	"org.member.invite",
+	CAPXUL_OPERATIONS.org.invite,
+	"org.invite.list",
+	"org.invite.cancel",
+	"org.invite.resend",
 	"org.permission",
 	"org.permission.list",
 	"org.permission.get",
@@ -15341,46 +15379,32 @@ const CLI_COMMAND_NAMES = [
 	"org.permission.command",
 	"org.permission.command.get",
 	"org.permission.command.wait",
-	CAPXUL_OPERATIONS.org.payment,
-	"org.payment.list",
-	"org.payment.get",
-	"org.payment.wait",
-	"org.payment.retry",
-	"org.payment.send",
 	"org.payroll",
+	"org.payroll.run",
+	"org.payroll.list",
+	"org.payroll.get",
+	"org.payroll.wait",
+	CAPXUL_OPERATIONS.org.payroll.terms,
 	"org.payroll.groups",
 	CAPXUL_OPERATIONS.org.payroll.groups.list,
 	CAPXUL_OPERATIONS.org.payroll.groups.save,
 	CAPXUL_OPERATIONS.org.payroll.groups.remove,
-	CAPXUL_OPERATIONS.org.payroll.terms,
-	"org.payroll.list",
-	"org.payroll.run",
-	"org.payroll.get",
-	"org.payroll.wait",
-	CAPXUL_OPERATIONS.org.members,
-	"org.member",
-	"org.member.get",
-	"org.member.invite",
-	"org.contact",
-	"org.contact.list",
-	"org.contact.get",
-	"org.contact.add",
-	"org.contact.label",
-	"org.contact.hide",
-	"org.contact.unhide",
-	CAPXUL_OPERATIONS.org.invite,
-	"org.invite.list",
+	"config",
+	"config.telemetry",
+	"config.telemetry.on",
+	"config.telemetry.off",
+	"config.telemetry.status",
+	"invite.get",
+	"invite.review",
+	"invite.wait",
 	"org.invite.get",
 	"org.invite.wait",
-	"org.invite.review",
-	"org.invite.accept",
-	"org.invite.decline",
-	"org.invite.cancel",
-	"org.invite.resend",
 	"org.invite.retry",
-	"org.wait",
-	CAPXUL_OPERATIONS.org.create,
-	CAPXUL_OPERATIONS.org.retry,
+	"schema",
+	"doctor",
+	"dev",
+	"dev.key",
+	"dev.fund",
 	"unknown"
 ];
 const CLI_CAPABILITIES = [
@@ -17074,7 +17098,7 @@ function mapAccountLifecycle(input) {
 }
 //#endregion
 //#region ../../packages/sdk/package.json
-var version$2 = "4.20.0-beta.24";
+var version$2 = "4.20.0-beta.26";
 //#endregion
 //#region ../../packages/sdk/src/observability/telemetry/exception-projection.ts
 /** Fixed fallback for failures that have no safe message. */
@@ -22808,63 +22832,6 @@ function makeOfframpMethods() {
 	};
 }
 //#endregion
-//#region ../../packages/sdk/src/payments/organization-payment-reads.ts
-const exactPaymentId = (value) => Schema.decodeEffect(PaymentIdSchema)(value).pipe(Effect.mapError(() => Errors.invalidInput("paymentId", "Provide one exact Payment ID")));
-/** Read the backend-authorized Organization wrapper before projecting any Payment. */
-function makeOrganizationPaymentReadMethods(deps, orgId) {
-	return {
-		previewRetry(paymentId, options) {
-			const controls = deps.invocationControls?.(options) ?? options;
-			return runCapxulEffect(Effect.gen(function* () {
-				const id = yield* exactPaymentId(paymentId);
-				const preview = yield* callOperation(deps.convexCall, lifecycles.previewRetry, copyInvocationObservation(controls, {
-					orgId,
-					paymentId: id
-				}));
-				if (preview.orgId !== orgId || !preview.paymentIds.includes(id) || new Set(preview.paymentIds).size !== preview.paymentIds.length || preview.payments.length !== preview.paymentIds.length || preview.payments.some((payment, index) => payment.id !== preview.paymentIds[index] || payment.direction !== "out")) return yield* Effect.fail(Errors.invalidInput("paymentId", "Invalid Organization retry preview"));
-				return {
-					...preview,
-					paymentIds: [...preview.paymentIds],
-					payments: preview.payments.map((payment) => normalizePaymentTiming(payment))
-				};
-			}), controls, lifecycles.previewRetry.name, deps.runPromise);
-		},
-		list(options) {
-			const controls = deps.invocationControls?.(options) ?? options;
-			return runCapxulEffect(callOperation(deps.convexCall, records.listForOrganization, copyInvocationObservation(controls, { orgId })).pipe(Effect.filterOrFail((result) => result.orgId === orgId, () => Errors.invalidInput("orgId", "Invalid Organization Payment list")), Effect.map((result) => mapPage(result, (payment) => normalizePaymentTiming(payment)))), controls, records.listForOrganization.name, deps.runPromise);
-		},
-		get(paymentId, options) {
-			const controls = deps.invocationControls?.(options) ?? options;
-			return runCapxulEffect(Effect.gen(function* () {
-				const id = yield* exactPaymentId(paymentId);
-				const response = yield* callOperation(deps.convexCall, records.getForOrganization, copyInvocationObservation(controls, {
-					orgId,
-					paymentId: id
-				}));
-				if (response.orgId !== orgId) return yield* Effect.fail(Errors.invalidInput("orgId", "Payment read scope does not match"));
-				const decoded = response.payment;
-				if (decoded === null) return null;
-				if (decoded.id !== id) return yield* Effect.fail(Errors.invalidInput("paymentId", "Invalid Organization Payment response"));
-				return normalizePaymentTiming(decoded);
-			}), controls, records.getForOrganization.name, deps.runPromise);
-		},
-		subscribe(paymentId, listener, options) {
-			const parsed = Schema.decodeResult(PaymentIdSchema)(paymentId);
-			if (parsed._tag === "Failure") return Promise.resolve({
-				ok: false,
-				error: Errors.invalidInput("paymentId", "Provide one exact Payment ID")
-			});
-			return subscribeOrganizationPayment({
-				actor: deps.actor,
-				convexCall: deps.convexCall,
-				getPayment: reference(records.getForOrganization),
-				runPromise: deps.runPromise,
-				invocationControls: deps.invocationControls
-			}, orgId, parsed.success, listener, options);
-		}
-	};
-}
-//#endregion
 //#region ../../packages/sdk/src/payments/organization-payment-requests.ts
 const organizationPaymentIntentSchema = Schema.Struct({
 	orgId: PrepareOrganizationPaymentExecutionInputSchema.fields.orgId,
@@ -22925,6 +22892,63 @@ async function organizationPaymentRequest(scope, actor, intent, providedKey) {
 	}
 }
 //#endregion
+//#region ../../packages/sdk/src/payments/organization-payment-reads.ts
+const exactPaymentId = (value) => Schema.decodeEffect(PaymentIdSchema)(value).pipe(Effect.mapError(() => Errors.invalidInput("paymentId", "Provide one exact Payment ID")));
+/** Read the backend-authorized Organization wrapper before projecting any Payment. */
+function makeOrganizationPaymentReadMethods(deps, orgId) {
+	return {
+		previewRetry(paymentId, options) {
+			const controls = deps.invocationControls?.(options) ?? options;
+			return runCapxulEffect(Effect.gen(function* () {
+				const id = yield* exactPaymentId(paymentId);
+				const preview = yield* callOperation(deps.convexCall, lifecycles.previewRetry, copyInvocationObservation(controls, {
+					orgId,
+					paymentId: id
+				}));
+				if (preview.orgId !== orgId || !preview.paymentIds.includes(id) || new Set(preview.paymentIds).size !== preview.paymentIds.length || preview.payments.length !== preview.paymentIds.length || preview.payments.some((payment, index) => payment.id !== preview.paymentIds[index] || payment.direction !== "out")) return yield* Effect.fail(Errors.invalidInput("paymentId", "Invalid Organization retry preview"));
+				return {
+					...preview,
+					paymentIds: [...preview.paymentIds],
+					payments: preview.payments.map((payment) => normalizePaymentTiming(payment))
+				};
+			}), controls, lifecycles.previewRetry.name, deps.runPromise);
+		},
+		list(options) {
+			const controls = deps.invocationControls?.(options) ?? options;
+			return runCapxulEffect(callOperation(deps.convexCall, records.listForOrganization, copyInvocationObservation(controls, { orgId })).pipe(Effect.filterOrFail((result) => result.orgId === orgId, () => Errors.invalidInput("orgId", "Invalid Organization Payment list")), Effect.map((result) => mapPage(result, (payment) => normalizePaymentTiming(payment)))), controls, records.listForOrganization.name, deps.runPromise);
+		},
+		get(paymentId, options) {
+			const controls = deps.invocationControls?.(options) ?? options;
+			return runCapxulEffect(Effect.gen(function* () {
+				const id = yield* exactPaymentId(paymentId);
+				const response = yield* callOperation(deps.convexCall, records.getForOrganization, copyInvocationObservation(controls, {
+					orgId,
+					paymentId: id
+				}));
+				if (response.orgId !== orgId) return yield* Effect.fail(Errors.invalidInput("orgId", "Payment read scope does not match"));
+				const decoded = response.payment;
+				if (decoded === null) return null;
+				if (decoded.id !== id) return yield* Effect.fail(Errors.invalidInput("paymentId", "Invalid Organization Payment response"));
+				return normalizePaymentTiming(decoded);
+			}), controls, records.getForOrganization.name, deps.runPromise);
+		},
+		subscribe(paymentId, listener, options) {
+			const parsed = Schema.decodeResult(PaymentIdSchema)(paymentId);
+			if (parsed._tag === "Failure") return Promise.resolve({
+				ok: false,
+				error: Errors.invalidInput("paymentId", "Provide one exact Payment ID")
+			});
+			return subscribeOrganizationPayment({
+				actor: deps.actor,
+				convexCall: deps.convexCall,
+				getPayment: reference(records.getForOrganization),
+				runPromise: deps.runPromise,
+				invocationControls: deps.invocationControls
+			}, orgId, parsed.success, listener, options);
+		}
+	};
+}
+//#endregion
 //#region ../../packages/sdk/src/payments/organization-flights.ts
 function executionDependencies$1(input) {
 	return input.actor === void 0 || input.chainId === void 0 || input.signer === void 0 ? null : {
@@ -23835,20 +23859,86 @@ function sleep(ms, signal) {
 	});
 }
 //#endregion
+//#region ../../packages/sdk/src/accounts/organization-approvals.ts
+/** The Organization Payment prepared for `signerAddress` and checked, before any approval. */
+async function prepareVerifiedOrganizationPayment(deps, input, signerAddress, signal) {
+	const { organizationId, permissionId, requestKey, lineage, ...item } = input;
+	const intent = organizationPaymentIntent(organizationId, {
+		permissionId,
+		items: [item],
+		...lineage === void 0 ? {} : { lineage },
+		...requestKey === void 0 ? {} : { requestKey }
+	});
+	if (!intent.ok) return intent;
+	const session = deps.actor?.authSession() ?? null;
+	if (session === null || deps.chainId === void 0) return {
+		ok: false,
+		error: Errors.notAuthenticated()
+	};
+	const expected = {
+		...intent.value,
+		requestKey: requestKey ?? `pay_${crypto.randomUUID()}`
+	};
+	const prepared = await runIfActive(signal, CAPXUL_OPERATIONS.organizationPayments.prepareExecution, () => callOperation(deps.convexCall, commands$1.prepareOrganization, {
+		...expected,
+		signerAddress
+	}).pipe(Effect.mapError((publicError) => ({ publicError }))), deps.runPromise);
+	if (!prepared.ok) return prepared;
+	const evidence = prepared.value;
+	return await matchesIntent(expected)(evidence.request, evidence) && await verifiedPreparedCommand(evidence, session.email, signerAddress, deps.chainId) ? {
+		ok: true,
+		value: evidence
+	} : abandonPrepared(deps, evidence.executionId, "prepared_mismatch", {
+		ok: false,
+		error: Errors.invalidInput("execution", "prepared Organization Payment mismatch")
+	});
+}
+/** One fresh Payment read: the caller's own, or one in the Organization's scope. */
+const readPayment = (deps, paymentId, organizationId, signal) => organizationId === void 0 ? runIfActive(signal, records.get.name, () => callOperation(deps.convexCall, records.get, { paymentId }, { fresh: true }).pipe(Effect.map((payment) => ({ payment })), Effect.mapError((publicError) => ({ publicError }))), deps.runPromise) : runIfActive(signal, records.getForOrganization.name, () => callOperation(deps.convexCall, records.getForOrganization, {
+	orgId: organizationId,
+	paymentId
+}, { fresh: true }).pipe(Effect.mapError((publicError) => ({ publicError }))), deps.runPromise);
+/**
+* The Payments an approval carries, as they stand. A personal read names only
+* the caller's own Account's Payments, so an Organization's is read with its
+* `organizationId`; one that cannot be read is refused, never taken as ended.
+*/
+async function readApprovalPayments(deps, paymentIds, organizationId, signal) {
+	const reads = await Promise.all(paymentIds.map((paymentId) => readPayment(deps, paymentId, organizationId, signal)));
+	const payments = [];
+	for (const [index, read] of reads.entries()) {
+		if (!read.ok) return read;
+		const { orgId, payment } = read.value;
+		if (payment === null && organizationId === void 0) return {
+			ok: false,
+			error: Errors.invalidInput("organizationId", "this approval pays from an Organization: wait with its organizationId")
+		};
+		if (payment === null || payment.id !== paymentIds[index] || orgId !== organizationId) return {
+			ok: false,
+			error: Errors.invalidInput("paymentId", "the approval's Payments are not this scope's")
+		};
+		payments.push(normalizePaymentTiming(payment));
+	}
+	return {
+		ok: true,
+		value: payments
+	};
+}
+//#endregion
 //#region ../../packages/sdk/src/accounts/approvals.ts
 function makeApprovalsMethods(deps) {
 	const call = (name, row, args, signal) => runIfActive(signal, name, () => callOperation(deps.convexCall, row, args, { fresh: true }).pipe(Effect.mapError((publicError) => ({ publicError }))), deps.runPromise);
 	const get = (approvalId) => call(approvals.get.name, approvals.get, { approvalId });
-	const prepare = async (input, options) => {
-		const signal = options?.signal;
-		const intent = paymentExecutionIntent(input);
-		if (!intent.ok) return intent;
-		const { actor, chainId } = deps;
-		if (actor === void 0 || chainId === void 0) return {
+	/**
+	* Prepare for the signer the backend recorded when the Safe was claimed (the
+	* person's own key signs later, on the approval page) and open the approval.
+	*/
+	const openApproval = async (signal, prepareFor) => {
+		const session = deps.actor?.authSession() ?? null;
+		if (deps.actor === void 0 || deps.chainId === void 0) return {
 			ok: false,
 			error: Errors.notImplemented("approvals", "prepareComposition")
 		};
-		const session = actor.authSession();
 		if (session === null) return {
 			ok: false,
 			error: Errors.notAuthenticated()
@@ -23867,18 +23957,33 @@ function makeApprovalsMethods(deps) {
 				validStates: ["claimed"]
 			})
 		};
-		const prepared = await prepareVerifiedPersonalPayment({
-			actor,
-			chainId,
-			convexCall: deps.convexCall,
-			runPromise: deps.runPromise
-		}, intent.value, safe.value.signerAddress, input.requestKey ?? `pay_${crypto.randomUUID()}`, signal);
+		const prepared = await prepareFor(safe.value.signerAddress);
 		if (!prepared.ok) return prepared;
-		await emitPreparedPaymentInitiated(deps, prepared.value);
 		const { executionId } = prepared.value;
 		const opened = await call(approvals.request.name, approvals.request, { executionId });
 		return opened.ok ? opened : abandonPrepared(deps, executionId, "cancelled", opened);
 	};
+	const prepare = async (input, options) => {
+		const signal = options?.signal;
+		if ("organizationId" in input) return openApproval(signal, (signerAddress) => prepareVerifiedOrganizationPayment(deps, input, signerAddress, signal));
+		const intent = paymentExecutionIntent(input);
+		if (!intent.ok) return intent;
+		const { actor, chainId } = deps;
+		return openApproval(signal, async (signerAddress) => {
+			if (actor === void 0 || chainId === void 0) return {
+				ok: false,
+				error: Errors.notImplemented("approvals", "prepareComposition")
+			};
+			const prepared = await prepareVerifiedPersonalPayment({
+				actor,
+				chainId,
+				convexCall: deps.convexCall,
+				runPromise: deps.runPromise
+			}, intent.value, signerAddress, input.requestKey ?? `pay_${crypto.randomUUID()}`, signal);
+			if (prepared.ok) await emitPreparedPaymentInitiated(deps, prepared.value);
+			return prepared;
+		});
+	};
 	const approve = async (approvalId) => {
 		const { signer } = deps;
 		if (signer === void 0) return {
@@ -23939,28 +24044,12 @@ function makeApprovalsMethods(deps) {
 			}
 		};
 	};
-	const readPayments = async (approval, signal) => {
-		const reads = await Promise.all(approval.operation.paymentIds.map((paymentId) => call(records.get.name, records.get, { paymentId }, signal)));
-		const payments = [];
-		for (const read of reads) {
-			if (!read.ok) return read;
-			if (read.value === null) return {
-				ok: false,
-				error: Errors.notImplemented("approvals", "wait.organizationPayment")
-			};
-			payments.push(normalizePaymentTiming(read.value));
-		}
-		return {
-			ok: true,
-			value: payments
-		};
-	};
 	/**
 	* One read of the approval: its outcome when it has ended, or null to read
 	* again. The Payments are read before anything is sent, so a send is never
 	* made for Payments this caller cannot follow.
 	*/
-	const step = async (approvalId, signal) => {
+	const step = async (approvalId, signal, organizationId) => {
 		const read = await call(approvals.get.name, approvals.get, { approvalId }, signal);
 		if (!read.ok) return read;
 		const approval = read.value;
@@ -23968,7 +24057,7 @@ function makeApprovalsMethods(deps) {
 			ok: true,
 			value: null
 		};
-		const payments = await readPayments(approval, signal);
+		const payments = await readApprovalPayments(deps, approval.operation.paymentIds, organizationId, signal);
 		if (!payments.ok) return payments;
 		if (unsent(approval, payments.value)) {
 			const sent = await submit(approvalId);
@@ -23989,7 +24078,7 @@ function makeApprovalsMethods(deps) {
 		const signal = options?.signal;
 		const intervalMs = options?.intervalMs ?? 2e3;
 		const poll = async () => {
-			const stepped = await step(approvalId, signal);
+			const stepped = await step(approvalId, signal, options?.organizationId);
 			if (!stepped.ok) return stepped;
 			if (stepped.value !== null) return {
 				ok: true,
@@ -25143,1656 +25232,1667 @@ function makeSmartAccountMethods(deps) {
 	};
 }
 //#endregion
-//#region ../../packages/sdk/src/accounts/summaries.ts
-function makeMeMethods(deps) {
-	return {
-		get: (options) => runIfActive(options?.signal, summaries.me.name, () => callOperation(deps.convexCall, summaries.me, {}).pipe(Effect.mapError((publicError) => ({ publicError }))), deps.runPromise),
-		depositInstructions: (options) => {
-			const controls = deps.invocationControls?.(options) ?? options;
-			return runPortEffect(callOperation(deps.convexCall, summaries.depositInstructions, copyInvocationObservation(controls, {})).pipe(Effect.mapError((publicError) => ({ publicError })), Effect.tap((instructions) => emitDepositInitiated(deps.telemetry, instructions, controls))), controls, summaries.depositInstructions.name, deps.runPromise);
-		}
-	};
+//#region ../../packages/sdk/src/activity/documents.ts
+/** A reply its row does not admit is refused without the document body its decode error would carry. */
+function withoutDocumentBody(error) {
+	return error.details?.step === "decodeOutput" ? Errors.invalidInput("documentHash", "invalid document read") : error;
 }
-//#endregion
-//#region ../../packages/sdk/src/access/identity/account-lane.ts
-const staleAccountFailure = {
-	code: "CANCELLED",
-	message: "Account authority changed"
-};
-const requireAccountAuthority = (isCurrent, send, step) => Effect.suspend(() => isCurrent() ? Effect.void : send({
-	_tag: "AccountFailed",
-	step,
-	failure: staleAccountFailure
-}).pipe(Effect.andThen(Effect.fail(staleAccountFailure))));
-const accountCall = (name, make, isCurrent) => Effect.suspend(() => isCurrent() ? call$1(name, make()) : Effect.fail(staleAccountFailure));
-const modelSession = (session) => ({
-	authUserId: String(session.authUserId),
-	email: String(session.email)
-});
-const claimAccount = (input, authUserId, signer, isCurrent) => {
-	const cancelled = smartAccountErrorFromCapxul("claim", Errors.cancelled({ operation: CAPXUL_OPERATIONS.smartAccount.claim }));
-	return call$1("smart-account.claim", Effect.tryPromise({
-		try: () => {
-			if (!isCurrent()) throw cancelled;
-			return signer.getAddress();
-		},
-		catch: (cause) => cause === cancelled ? cancelled : signerFailure(signer.source, "getAddress", cause)
-	}).pipe(Effect.flatMap((signerAddress) => Effect.suspend(() => isCurrent() ? input.ports.smartAccount.claim({
-		authUserId: toAuthUserId(authUserId),
-		chainId: toChainId(input.chainId),
-		signerAddress
-	}) : Effect.fail(cancelled)))));
-};
-const hasDurableClaim = (account) => account.deployedAt !== null && account.claimedAt !== null && account.signerAddress !== null;
-const profileComplete = (profile) => profile?.onboarded === true;
-const sessionProfile = (input, session) => {
-	if (session === null) return Effect.succeed({
-		session: null,
-		profileComplete: false
-	});
-	return call$1("identity.load-by-auth-user-id", input.ports.identity.loadByAuthUserId(session.authUserId)).pipe(Effect.map((profile) => ({
-		session: modelSession(session),
-		profileComplete: profileComplete(profile)
-	})));
-};
-const accountLane = (input, config, session, send, isCurrent) => Effect.gen(function* () {
-	let step = "wallet";
-	const failAt = (at, failure) => send({
-		_tag: "AccountFailed",
-		step: at,
-		failure
-	}).pipe(Effect.andThen(Effect.fail(failure)));
-	yield* requireAccountAuthority(isCurrent, send, step);
-	step = "identity";
-	yield* send({
-		_tag: "AccountAt",
-		step: "identity"
-	});
-	step = "provision";
-	yield* send({
-		_tag: "AccountAt",
-		step: "provision"
-	});
-	const existing = yield* Effect.result(accountCall("smart-account.load-by-auth-user-id", () => input.ports.smartAccount.loadByAuthUserId(toAuthUserId(session.authUserId)), isCurrent));
-	yield* requireAccountAuthority(isCurrent, send, step);
-	if (Result.isFailure(existing)) return yield* failAt("provision", existing.failure);
-	const provisioned = yield* Effect.result(existing.success === null ? accountCall("smart-account.provision", () => input.ports.smartAccount.provision({
-		authUserId: toAuthUserId(session.authUserId),
-		chainId: toChainId(input.chainId),
-		email: toEmail(session.email)
-	}), isCurrent) : Effect.succeed(existing.success));
-	yield* requireAccountAuthority(isCurrent, send, step);
-	if (Result.isFailure(provisioned)) return yield* failAt("provision", provisioned.failure);
-	const account = provisioned.success;
-	const address = String(account.smartAccountAddress);
-	yield* send({
-		_tag: "AccountDerived",
-		address
-	});
-	yield* requireAccountAuthority(isCurrent, send, step);
-	if (hasDurableClaim(account)) return yield* send({
-		_tag: "AccountClaimed",
-		address
-	});
-	if (config.requirement !== "deployed" || input.signer === void 0) return;
-	yield* requireAccountAuthority(isCurrent, send, step);
-	step = "deploy";
-	yield* send({ _tag: "AccountClaiming" });
-	const claimed = yield* Effect.result(claimAccount(input, session.authUserId, input.signer, isCurrent));
-	yield* requireAccountAuthority(isCurrent, send, step);
-	if (Result.isFailure(claimed)) return yield* failAt("deploy", claimed.failure);
-	return yield* send(hasDurableClaim(claimed.success) ? {
-		_tag: "AccountClaimed",
-		address: String(claimed.success.smartAccountAddress)
-	} : {
-		_tag: "AccountDerived",
-		address: String(claimed.success.smartAccountAddress)
-	});
-});
-//#endregion
-//#region ../../packages/sdk/src/access/identity/spec.ts
-const SETTLED_BY_TRANSITION_TAGS = /* @__PURE__ */ new Set([
-	"RestoreSession",
-	"ResumeOtpEntry",
-	"RestoreOtpEntry",
-	"Reset",
-	"SessionRestored",
-	"SessionAbsent",
-	"AttachOrganization",
-	"LeaveOrganization",
-	"ObserveOrganization"
-]);
-function isSettledByTransition(event) {
-	return SETTLED_BY_TRANSITION_TAGS.has(event._tag);
+/** Schema errors must not retain document bodies. */
+function decodeDocumentRead(schema, input) {
+	return Effect.fromOption(Schema.decodeUnknownOption(schema)(input)).pipe(Effect.mapError(() => ({ publicError: Errors.invalidInput("documentHash", "invalid document read") })));
 }
-const identitySpec = (input, sessionStore, authority) => {
-	const config = {
-		...DEFAULT_CONFIG,
-		requirement: input.requirement,
-		hasSigner: input.signer !== void 0,
-		...input.otpTtlMs === void 0 ? {} : { otpTtlMs: input.otpTtlMs }
+function makePaymentDocumentsMethods(deps) {
+	/**
+	* One document read by its row. The pair is decoded before anything is sent,
+	* and a reply the row does not admit is refused without the body it carried.
+	*/
+	const readDocument = (row, ref, options) => {
+		const controls = deps.invocationControls?.(options) ?? options;
+		return runPortEffect(Effect.gen(function* () {
+			const pair = yield* decodeDocumentRead(PaymentDocumentReadRefSchema, ref);
+			return yield* callOperation(deps.convexCall, row, copyInvocationObservation(controls, pair)).pipe(Effect.mapError((error) => ({ publicError: withoutDocumentBody(error) })));
+		}), controls, row.name, deps.runPromise);
 	};
 	return {
-		machine: "identity",
-		initial: RESTORING,
-		label,
-		slot: identitySlot,
-		transition: (state, event) => transition(state, event, config),
-		recoverFailure: recoverIdentityFailure,
-		invalidates: (event) => event._tag === "Reset" ? [
-			IDENTITY_SLOT.auth,
-			IDENTITY_SLOT.session,
-			IDENTITY_SLOT.account,
-			IDENTITY_SLOT.org
-		] : event._tag === "SignOut" ? [
-			IDENTITY_SLOT.session,
-			IDENTITY_SLOT.account,
-			IDENTITY_SLOT.org
-		] : event._tag === "LeaveOrganization" || event._tag === "AttachOrganization" ? [IDENTITY_SLOT.org] : [],
-		work: ({ state, event }) => {
-			const activeSession = state.phase === "authenticated" ? state.session : null;
-			const org = state.phase === "authenticated" && state.account.at === "claimed" ? state.account.org : null;
-			if (isSettledByTransition(event)) return void 0;
-			switch (event._tag) {
-				case "RequestOtp": return {
-					slot: IDENTITY_SLOT.auth,
-					port: "auth-client",
-					run: (send, controls) => call$1("auth-client.send-otp", input.ports.authClient.sendOtp(copyInvocationObservation(controls, { email: toEmail(event.email) }))).pipe(Effect.andThen(call$1("clock.now", input.ports.clock.now)), Effect.flatMap((at) => send({
-						_tag: "OtpSent",
-						at
-					})), Effect.tapError((failure) => send({
-						_tag: "OtpFailed",
-						failure
-					})))
-				};
-				case "VerifyOtp": return {
-					slot: IDENTITY_SLOT.auth,
-					port: "auth-client",
-					run: (send, controls) => call$1("auth-client.verify-otp", input.ports.authClient.verifyOtp(copyInvocationObservation(controls, {
-						email: toEmail(event.email),
-						otp: event.otp
-					}))).pipe(Effect.tap((session) => Effect.sync(() => {
-						authority.recordProviderSession(session);
-					})), Effect.flatMap((session) => sessionProfile(input, session).pipe(Effect.flatMap((loaded) => send({
-						_tag: "Verified",
-						session: loaded.session ?? modelSession(session),
-						profileComplete: loaded.profileComplete
-					})))), Effect.tapError((failure) => send({
-						_tag: "VerifyFailed",
-						failure
-					})))
-				};
-				case "ReadSession": return {
-					slot: IDENTITY_SLOT.session,
-					port: "auth-client",
-					run: (send, controls) => call$1("auth-client.get-session", input.ports.authClient.getSession(copyInvocationObservation(controls, {}))).pipe(Effect.tap((session) => Effect.sync(() => {
-						authority.recordProviderSession(session, activeSession?.authUserId);
-					})), Effect.flatMap((session) => sessionProfile(input, session)), Effect.flatMap((loaded) => send({
-						_tag: "SessionRead",
-						...loaded
-					})), Effect.tapError((failure) => Effect.sync(() => {
-						authority.recordProviderSession(null, failure.code === "NOT_AUTHENTICATED" ? activeSession?.authUserId : void 0);
-					}).pipe(Effect.andThen(activeSession !== null && failure.code === "NOT_AUTHENTICATED" ? Effect.void : send({
-						_tag: "SessionReadFailed",
-						failure
-					})))))
-				};
-				case "SignOut": return {
-					slot: IDENTITY_SLOT.auth,
-					port: "auth-client",
-					run: (send, controls) => call$1("auth-client.sign-out", input.ports.authClient.signOut(copyInvocationObservation(controls, {}))).pipe(Effect.andThen(send({ _tag: "SignedOut" })), Effect.tapError((failure) => send({
-						_tag: "SignOutFailed",
-						failure
-					})), Effect.ensuring(Effect.sync(() => {
-						authority.recordProviderSession(null);
-					})))
-				};
-				case "EnsureAccount":
-				case "RetryAccount": return activeSession === null ? void 0 : {
-					slot: IDENTITY_SLOT.account,
-					port: "smart-account",
-					run: (send) => {
-						const captured = authority.snapshot();
-						return accountLane(input, config, activeSession, send, () => authority.matches(captured, activeSession.authUserId));
-					}
-				};
-				case "ClaimAccount": {
-					const signer = input.signer;
-					const address = state.phase === "authenticated" && state.account.at === "claiming" ? state.account.address : null;
-					return address === null || activeSession === null || signer === void 0 ? void 0 : {
-						slot: IDENTITY_SLOT.account,
-						port: "smart-account",
-						run: (send) => {
-							const captured = authority.snapshot();
-							const isCurrent = () => authority.matches(captured, activeSession.authUserId);
-							return Effect.gen(function* () {
-								const claimed = yield* Effect.result(claimAccount(input, activeSession.authUserId, signer, isCurrent));
-								yield* requireAccountAuthority(isCurrent, send, "deploy");
-								yield* Result.isFailure(claimed) ? send({
-									_tag: "AccountFailed",
-									step: "deploy",
-									failure: claimed.failure
-								}).pipe(Effect.andThen(Effect.fail(claimed.failure))) : send(hasDurableClaim(claimed.success) ? {
-									_tag: "AccountClaimed",
-									address
-								} : {
-									_tag: "AccountDerived",
-									address
-								});
-							});
-						}
-					};
-				}
-				case "CreateOrganization": return input.organizationSetup === void 0 || org === null || org.orgId !== null ? void 0 : {
-					slot: IDENTITY_SLOT.org,
-					port: "organization-setup",
-					run: (send, controls) => beginOrganization$1(input.organizationSetup, event.draft, send, controls)
-				};
-				default: return absurd(event);
-			}
-		}
+		get: (ref, options) => readDocument(documents.get, ref, options),
+		verify: (ref, options) => readDocument(documents.verify, ref, options),
+		render: (ref, options) => readDocument(documents.render, ref, options)
 	};
-};
+}
 //#endregion
-//#region ../../packages/sdk/src/access/identity/authority.ts
-function createIdentityAuthorityTracker(sessionStore, onGenerationChange = () => void 0) {
-	const invalidationListeners = /* @__PURE__ */ new Set();
-	let generation = 0;
-	let authUserId = null;
-	let stopped = false;
-	let readState = initialIdentityState;
-	const advanceGeneration = () => {
-		generation += 1;
-		authUserId = null;
-		const listeners = [...invalidationListeners];
-		for (const listener of listeners) try {
-			listener();
-		} catch {}
-		try {
-			onGenerationChange();
-		} catch {}
-	};
-	const revoke = () => {
-		if (stopped) return;
-		advanceGeneration();
-		authUserId = null;
+//#region ../../packages/sdk/src/activity/stitching.ts
+/** Epoch milliseconds of the block that carried the row. */
+function blockMillis(row) {
+	return Number(row.timestamp) * 1e3;
+}
+/** `0x1234…abcd` — the counterparty of an unclaimed transfer is an address. */
+function shortAddressLabel(address) {
+	return address.length <= 12 ? address : `${address.slice(0, 6)}…${address.slice(-4)}`;
+}
+function directionFor(safe, transfer) {
+	const from = transfer.from.toLowerCase();
+	const to = transfer.to.toLowerCase();
+	if (from === safe && to === safe) return "self";
+	return to === safe ? "in" : "out";
+}
+function withAnnotation(item, annotation) {
+	return annotation?.counterpartyLabel === void 0 ? item : {
+		...item,
+		counterpartyLabel: annotation.counterpartyLabel
 	};
-	return {
-		snapshot: () => ({
-			generation,
-			authUserId
-		}),
-		subscribeInvalidation: (listener) => {
-			if (stopped) {
-				try {
-					listener();
-				} catch {}
-				return () => {};
-			}
-			invalidationListeners.add(listener);
-			return () => {
-				invalidationListeners.delete(listener);
-			};
-		},
-		bindState: (read) => {
-			readState = read;
-		},
-		recordProviderSession: (session, previousAuthUserId) => {
-			if (previousAuthUserId != null && String(session?.authUserId ?? "") !== previousAuthUserId) revoke();
-			sessionStore.current = session;
+}
+/**
+* An indexed settlement confirms the intent. A missing row can be outside
+* this page or still backfilling; only the correction owner can prove rollback.
+*/
+function confirmPayment(intent, chain, expected) {
+	if (chain !== void 0 && matchesPaymentFact(chain, expected)) return {
+		...intent,
+		status: "settled",
+		...intent.execution === void 0 ? {} : { execution: {
+			status: "settled",
+			retryRequired: false
+		} },
+		receipt: {
+			chainId: chain.chainId,
+			transactionHash: chain.txHash
 		},
-		observe: (state) => {
-			if (stopped) return;
-			const next = state.phase === "authenticated" ? state.session.authUserId : null;
-			if (authUserId !== null && next !== authUserId) advanceGeneration();
-			authUserId = next;
+		updatedAt: blockMillis(chain)
+	};
+	return intent;
+}
+function matchesPaymentFact(chain, expected) {
+	return chain !== void 0 && expected !== void 0 && chain.chainId === expected.chainId && chain.contract.toLowerCase() === expected.contract.toLowerCase() && chain.sender.toLowerCase() === expected.sender.toLowerCase() && chain.recipient.toLowerCase() === expected.recipient.toLowerCase() && chain.token.toLowerCase() === expected.token.toLowerCase() && chain.amount.toString() === expected.rawAmount && chain.documentHash.toLowerCase() === expected.documentHash.toLowerCase() && chain.kind === expected.kind;
+}
+/**
+* One unclaimed Transfer as an Activity row, or `null` when this SDK cannot
+* denominate its asset. The indexer serves only configured assets, so a row
+* the registry does not know means the SDK and that deployment disagree; it is
+* dropped rather than shown with a guessed currency.
+*/
+function isActivityVisible(item) {
+	return !(item.kind === "payment" && item.direction === "in" && item.execution?.notSent);
+}
+function transferItem(safe, transfer, annotation) {
+	const asset = configuredMoneyAssetById(transfer.assetId);
+	if (asset === null) return null;
+	const direction = directionFor(safe.toLowerCase(), transfer);
+	const counterparty = direction === "in" ? transfer.from : transfer.to;
+	const at = blockMillis(transfer);
+	return withAnnotation({
+		kind: "movement",
+		id: transfer.id,
+		classification: direction === "in" ? "deposit" : "movement_only_outflow",
+		amount: {
+			asset: asset.assetId,
+			value: formatUnits(transfer.amount, asset.decimals)
 		},
-		invalidate: () => {
-			if (stopped) return;
-			stopped = true;
-			advanceGeneration();
-			invalidationListeners.clear();
-			authUserId = null;
+		direction,
+		counterpartyLabel: shortAddressLabel(counterparty),
+		receipt: {
+			chainId: transfer.chainId,
+			transactionHash: transfer.txHash
 		},
-		matches: (captured, expectedAuthUserId) => {
-			if (stopped || generation !== captured.generation || authUserId !== expectedAuthUserId) return false;
-			const state = readState();
-			if (expectedAuthUserId === null) return state.phase !== "authenticated" && sessionStore.current === null;
-			return state.phase === "authenticated" && state.session.authUserId === expectedAuthUserId && String(sessionStore.current?.authUserId ?? "") === expectedAuthUserId;
-		}
-	};
+		createdAt: at,
+		updatedAt: at
+	}, annotation);
 }
-//#endregion
-//#region ../../packages/sdk/src/platform/actor/transitions.ts
 /**
-* Who hears an actor: the boot observer, transition and state subscribers, and
-* the defect reporter. An observer that throws is dropped and reported as a
-* defect; it never owns actor truth.
+* Money in, money out and the pending share, one bucket per exact asset.
 */
-const makeActorObservers = (options) => {
-	const stateObservers = /* @__PURE__ */ new Set();
-	const transitionObservers = /* @__PURE__ */ new Set();
-	let bootTransitionObserver = options.onTransition;
-	const defect = (cause) => {
-		try {
-			options.onDefect?.(cause);
-		} catch {}
-	};
-	const emit = (record) => Effect.sync(() => {
-		if (bootTransitionObserver !== void 0) try {
-			bootTransitionObserver(record);
-		} catch (cause) {
-			bootTransitionObserver = void 0;
-			defect(cause);
-		}
-		for (const observer of transitionObservers) try {
-			observer(record);
-		} catch (cause) {
-			transitionObservers.delete(observer);
-			defect(cause);
-		}
-	}).pipe(Effect.andThen(logIdentityTransition(record)));
-	const notify = (state) => {
-		for (const observer of stateObservers) try {
-			observer(state);
-		} catch (cause) {
-			stateObservers.delete(observer);
-			defect(cause);
-		}
-	};
-	return {
-		stateObservers,
-		transitionObservers,
-		defect,
-		emit,
-		notify
-	};
-};
-/** One machine's transition records and the failure a refused or failed reply carries. */
-const makeTransitionRecords = (spec, slotEpochs) => {
-	const makeFailure = (state, event, reason, details, cause) => new ActorFailure(reason, spec.machine, spec.label(state), event._tag, details, cause);
-	const nonApplied = (state, event, reason, outcome, env, failure) => {
-		const slot = env.origin === null ? spec.slot(env.event) : env.origin.slot;
-		const base = {
-			machine: spec.machine,
-			state: spec.label(state),
-			event: event._tag,
-			slot,
-			epoch: env.origin?.epoch ?? slotEpochs.get(slot) ?? 0,
-			duration_ms: duration(env.startedAt),
-			...withCarriage(env.invocation)
-		};
-		const record = outcome === "refused" ? {
-			...base,
-			outcome,
-			refusal_code: reason
-		} : {
-			...base,
-			outcome,
-			error_code: reason,
-			...failure === void 0 ? {} : { failure }
+function summarizeItems(items) {
+	const buckets = /* @__PURE__ */ new Map();
+	for (const item of items) {
+		const metadata = configuredMoneyAssetById(item.amount.asset);
+		if (metadata === null) continue;
+		const key = item.amount.asset;
+		const bucket = buckets.get(key) ?? {
+			asset: item.amount.asset,
+			in: 0n,
+			out: 0n,
+			pendingIn: 0n
 		};
-		return copyInvocationObservation(env.invocation, record);
-	};
-	const applied = (from, to, event, slot, epoch, env) => copyInvocationObservation(env.invocation, {
-		machine: spec.machine,
-		from: spec.label(from),
-		event: event._tag,
-		to: spec.label(to),
-		slot,
-		epoch,
-		outcome: "applied",
-		duration_ms: duration(env.startedAt),
-		...withCarriage(env.invocation)
-	});
-	return {
-		makeFailure,
-		nonApplied,
-		applied
-	};
-};
+		const raw = rawUnits(item.amount.value, metadata.decimals);
+		if (item.kind === "payment" && item.status !== "settled") {
+			if (item.direction === "in" && item.status !== "cancelled" && item.status !== "failed" && !item.execution?.notSent) bucket.pendingIn += raw;
+		} else if (item.direction === "in") bucket.in += raw;
+		else if (item.direction === "out") bucket.out += raw;
+		buckets.set(key, bucket);
+	}
+	return [...buckets.values()].map((bucket) => ({
+		asset: bucket.asset,
+		in: bucket.in.toString(),
+		out: bucket.out.toString(),
+		net: (bucket.in - bucket.out).toString(),
+		pendingIn: bucket.pendingIn.toString()
+	}));
+}
+/** The inverse of `formatUnits`, kept exact: `"1.25"` at 6 decimals is `1250000n`. */
+function rawUnits(value, decimals) {
+	const negative = value.startsWith("-");
+	const [whole = "0", fraction = ""] = (negative ? value.slice(1) : value).split(".");
+	const raw = BigInt(`${whole}${fraction.padEnd(decimals, "0").slice(0, decimals)}`);
+	return negative ? -raw : raw;
+}
 //#endregion
-//#region ../../packages/sdk/src/platform/actor/lane-exit.ts
-/**
-* How a work lane's exit settles its reply: finished, failed, cancelled, or
-* died. A timeout, cancellation or death first lets the machine recover its
-* own state through `spec.recoverFailure`.
-*/
-const makeLaneSettlement = (actor) => {
-	const { spec, cell, slots } = actor;
-	const { emit, notify, defect } = actor.observers;
-	const { makeFailure, nonApplied, applied } = actor.records;
-	const finish = (cursor, state) => {
-		const held = slots.get(cursor.slot);
-		if (held === void 0 || held.cursor !== cursor) return Effect.void;
-		slots.delete(cursor.slot);
-		return Effect.asVoid(Deferred.succeed(held.reply, state));
-	};
-	const recoverFailure = (state, cursor, failure) => {
-		const event = spec.recoverFailure?.(state, cursor.event, failure);
-		if (event === void 0) return Effect.succeed(state);
-		const outcome = spec.transition(state, event);
-		if ("refused" in outcome) return Effect.succeed(state);
-		return Ref.set(cell, outcome.next).pipe(Effect.tap(() => {
-			const record = applied(state, outcome.next, event, cursor.slot, cursor.epoch, {
-				invocation: cursor.invocation,
-				startedAt: cursor.startedAt
-			});
-			return emit(record).pipe(Effect.andThen(Effect.sync(() => {
-				notify(outcome.next);
-			})));
-		}), Effect.as(outcome.next));
+//#region ../../packages/sdk/src/activity/cursor.ts
+function actorKey(actor) {
+	return actor.kind === "account" ? `account:${actor.accountId}` : `organization:${actor.orgId}`;
+}
+function scopeKey(scope) {
+	return `${scope.principalAccountId}|${actorKey(scope.actor)}|${scope.safe?.toLowerCase() ?? "none"}`;
+}
+function selectionKey(params) {
+	const filter = params?.filter;
+	return JSON.stringify([
+		params?.range?.from ?? null,
+		params?.range?.to ?? null,
+		filter?.kind ?? null,
+		filter?.direction ?? null,
+		filter?.status === void 0 ? null : [...new Set(filter.status)].sort()
+	]);
+}
+function validString(value, max) {
+	return typeof value === "string" && value.length <= max;
+}
+function validPosition(position) {
+	return position === null || typeof position === "object" && "timestamp" in position && typeof position.timestamp === "number" && Number.isSafeInteger(position.timestamp) && position.timestamp >= 0 && "id" in position && typeof position.id === "string" && /^[1-9][0-9]{0,9}:0x[0-9a-f]{64}:[0-9]{1,10}$/.test(position.id);
+}
+function isActivityCursor(cursor, scope, selection) {
+	return typeof cursor === "object" && cursor !== null && cursorScopeMatches(cursor, scope, selection) && cursorProgressIsValid(cursor);
+}
+/** The cursor was issued for this scope and filter selection, at a valid checkpoint. */
+function cursorScopeMatches(cursor, scope, selection) {
+	return "version" in cursor && cursor.version === 1 && "scope" in cursor && cursor.scope === scope && "selection" in cursor && cursor.selection === selection && "checkpoint" in cursor && typeof cursor.checkpoint === "number" && Number.isSafeInteger(cursor.checkpoint) && cursor.checkpoint >= 0 && "source" in cursor && (cursor.source === "indexed" || cursor.source === "fallback");
+}
+/** Each source's progress is well-formed and bounded. */
+function cursorProgressIsValid(cursor) {
+	return "paymentCursor" in cursor && (cursor.paymentCursor === null || validString(cursor.paymentCursor, 2048)) && "paymentDone" in cursor && typeof cursor.paymentDone === "boolean" && "transferDone" in cursor && typeof cursor.transferDone === "boolean" && "degraded" in cursor && typeof cursor.degraded === "boolean" && "paymentPending" in cursor && Array.isArray(cursor.paymentPending) && cursor.paymentPending.length <= 100 && new Set(cursor.paymentPending).size === cursor.paymentPending.length && cursor.paymentPending.every((id) => validString(id, 256)) && "transferBefore" in cursor && validPosition(cursor.transferBefore);
+}
+function parseCursor(value, scope, selection) {
+	if (value === void 0) return null;
+	if (value.length > 4e4) throw Errors.invalidInput("cursor", "invalid Activity cursor");
+	const cursor = JSON.parse(value);
+	if (!isActivityCursor(cursor, scope, selection)) throw Errors.invalidInput("cursor", "Activity scope or filters changed; restart from the first page");
+	return cursor;
+}
+function requireParams(params) {
+	const limit = params?.limit ?? 25;
+	if (!Number.isSafeInteger(limit) || limit < 1 || limit > 100) throw Errors.invalidInput("limit", "must be an integer from 1 to 100");
+	for (const value of [params?.range?.from, params?.range?.to]) if (value !== void 0 && !Number.isSafeInteger(value)) throw Errors.invalidInput("range", "must contain integer epoch milliseconds");
+	const f = params?.filter;
+	if (f?.kind !== void 0 && f.kind !== "payment" && f.kind !== "movement" || f?.direction !== void 0 && ![
+		"in",
+		"out",
+		"self"
+	].includes(f.direction) || f?.status !== void 0 && (!Array.isArray(f.status) || !f.status.every((status) => PAYMENT_STATUSES.includes(status)))) throw Errors.invalidInput("filter", "invalid Activity filter");
+}
+function matchesFilter(item, filter) {
+	return (filter?.kind === void 0 || item.kind === filter.kind) && (filter?.direction === void 0 || item.direction === filter.direction) && (filter?.status === void 0 || item.kind === "payment" && filter.status.includes(item.status));
+}
+//#endregion
+//#region ../../packages/sdk/src/activity/indexed-pages.ts
+function chainRead(deps, table, input) {
+	return deps.indexer.read(table, input).pipe(Effect.catch((error) => {
+		if (error.publicError.details?.reason === "scope-refused" || ![
+			"NETWORK_ERROR",
+			"RATE_LIMITED",
+			"PROVIDER_ERROR",
+			"CAPABILITY_UNAVAILABLE",
+			"TIMEOUT"
+		].includes(error.publicCode)) return Effect.fail({ publicError: error.publicError });
+		return Effect.succeed(null);
+	}));
+}
+function boundedRange(range, checkpoint) {
+	return {
+		...range?.from === void 0 ? {} : { from: range.from },
+		to: Math.min(checkpoint, range?.to ?? checkpoint)
 	};
-	return (env, origin, exit, state) => Effect.gen(function* () {
-		const held = slots.get(origin.slot);
-		if (held === void 0 || held.cursor !== origin) return;
-		if (exit.defect !== void 0) {
-			slots.delete(origin.slot);
-			defect(exit.defect);
-			const event = { _tag: origin.event };
-			const died = {
-				code: "WORK_DIED",
-				message: exit.defect instanceof Error ? exit.defect.message : "Identity work died"
-			};
-			const failedState = yield* recoverFailure(state, origin, died);
-			yield* emit(nonApplied(failedState, event, "WORK_DIED", "failed", env, died));
-			yield* failReply(held.reply, makeFailure(failedState, event, "WORK_DIED", void 0, died));
-			return;
-		}
-		if (exit.failure !== void 0) {
-			slots.delete(origin.slot);
-			const outcome = exit.failure.code === "CANCELLED" ? "cancelled" : "failed";
-			const event = { _tag: origin.event };
-			const failedState = exit.failure === timeoutFailure || exit.failure === cancelledFailure ? yield* recoverFailure(state, origin, exit.failure) : state;
-			yield* emit(nonApplied(failedState, event, exit.failure.code, outcome, env, exit.failure));
-			const details = exit.failure === timeoutFailure ? { reason: "timeout" } : refusedInputField(exit.failure);
-			yield* failReply(held.reply, makeFailure(failedState, event, exit.failure.code, details, exit.failure.error ?? exit.failure));
-			return;
+}
+function unavailablePage(deps, scope, controls, params, state, first) {
+	if (first) return fallbackPage(deps, scope, controls, params, state, true);
+	return Effect.annotateCurrentSpan({
+		read_source: "indexer",
+		read_warning: "indexer-unavailable"
+	}).pipe(Effect.as({
+		items: [],
+		nextCursor: null,
+		checkpoint: state.checkpoint,
+		observedAt: Date.now(),
+		readWarning: "indexer-unavailable"
+	}));
+}
+function readTransfers(deps, safe, range, state, wanted, first) {
+	const from = Math.max(0, Math.ceil((range.from ?? 0) / 1e3));
+	const to = Math.floor(range.to / 1e3);
+	if (state.transferDone || from > to || !wanted && !first) return Effect.succeed([]);
+	return chainRead(deps, "transfer", {
+		safe: toAddress(safe),
+		limit: wanted ? 100 : 1,
+		timeline: {
+			from,
+			to,
+			...state.transferBefore === null ? {} : { before: state.transferBefore }
 		}
-		yield* finish(origin, state);
 	});
-};
-//#endregion
-//#region ../../packages/sdk/src/platform/actor/shell.ts
-const boot = (spec, options = {}) => Effect.gen(function* () {
-	const mailbox = yield* Queue.unbounded();
-	const cell = yield* Ref.make(spec.initial);
-	const slotEpochs = /* @__PURE__ */ new Map();
-	const slots = /* @__PURE__ */ new Map();
-	const { stateObservers, transitionObservers, defect, emit, notify } = makeActorObservers(options);
-	const { makeFailure, nonApplied, applied } = makeTransitionRecords(spec, slotEpochs);
-	let stopped = false;
-	const settleLaneExit = makeLaneSettlement({
-		spec,
-		cell,
-		slots,
-		observers: {
-			emit,
-			notify,
-			defect
-		},
-		records: {
-			makeFailure,
-			nonApplied,
-			applied
-		}
+}
+function readPayments(deps, scope, controls, range, state, wanted) {
+	const done = state.paymentDone || !wanted;
+	if (state.paymentPending.length > 0 || done) return Effect.succeed({
+		items: [],
+		pending: state.paymentPending,
+		cursor: state.paymentCursor,
+		done
 	});
-	const step = (env) => Effect.gen(function* () {
-		const state = yield* Ref.get(cell);
-		if (env.origin !== null && (slotEpochs.get(env.origin.slot) ?? 0) !== env.origin.epoch) {
-			const held = slots.get(env.origin.slot);
-			if (held === void 0 || held.cursor !== env.origin) return;
-			slots.delete(env.origin.slot);
-			const event = { _tag: env.origin.event };
-			yield* emit(nonApplied(state, event, "STALE_EPOCH", "refused", env));
-			yield* failReply(held.reply, makeFailure(state, event, "STALE_EPOCH"));
-			return;
-		}
-		if (isLaneExitEnvelope(env)) {
-			yield* settleLaneExit(env, env.origin, env.event, state);
-			return;
-		}
-		const outcome = spec.transition(state, env.event);
-		if ("refused" in outcome) {
-			yield* emit(nonApplied(state, env.event, outcome.refused, "refused", env));
-			yield* failReply(env.reply, makeFailure(state, env.event, outcome.refused));
-			return;
-		}
-		const next = outcome.next;
-		yield* Ref.set(cell, next);
-		const emitApplied = (slot, epoch) => emit(applied(state, next, env.event, slot, epoch, env));
-		if (env.origin !== null) {
-			yield* emitApplied(env.origin.slot, env.origin.epoch);
-			notify(next);
-			return;
-		}
-		for (const slot of spec.invalidates?.(env.event) ?? []) {
-			if (!slots.has(slot)) continue;
-			slotEpochs.set(slot, (slotEpochs.get(slot) ?? 0) + 1);
-		}
-		const work = env.reply === null ? void 0 : spec.work?.({
-			state: next,
-			event: env.event
-		});
-		if (work === void 0 || env.reply === null) {
-			const slot = spec.slot(env.event);
-			yield* emitApplied(slot, slotEpochs.get(slot) ?? 0);
-			notify(next);
-			if (env.reply !== null) yield* Deferred.succeed(env.reply, next).pipe(Effect.asVoid);
-			return;
-		}
-		const previous = slots.get(work.slot);
-		if (previous !== void 0) {
-			slots.delete(work.slot);
-			yield* Fiber.interrupt(previous.fiber);
-			const previousEvent = { _tag: previous.cursor.event };
-			const reason = previous.cursor.epoch === (slotEpochs.get(work.slot) ?? 0) ? "SUPERSEDED" : "STALE_EPOCH";
-			yield* emit(nonApplied(next, previousEvent, reason, "refused", {
-				origin: previous.cursor,
-				invocation: previous.cursor.invocation,
-				startedAt: previous.cursor.startedAt
-			}));
-			yield* failReply(previous.reply, makeFailure(next, previousEvent, reason));
-		}
-		const epoch = (slotEpochs.get(work.slot) ?? 0) + 1;
-		slotEpochs.set(work.slot, epoch);
-		const cursor = {
-			slot: work.slot,
-			epoch,
-			event: env.event._tag,
-			startedAt: env.startedAt,
-			invocation: env.invocation
+	return convexPage(deps, scope.actor, controls, {
+		limit: 100,
+		range,
+		filter: { kind: "payment" },
+		...state.paymentCursor === null ? {} : { cursor: state.paymentCursor }
+	}).pipe(Effect.map((page) => ({
+		items: page.items,
+		pending: page.items.map((item) => item.id),
+		cursor: page.nextCursor,
+		done: page.nextCursor === null
+	})));
+}
+function readPaymentFacts(deps, safe, settlements) {
+	const offsets = Array.from({ length: Math.ceil(settlements.length / 50) }, (_, i) => i * 50);
+	return Effect.forEach(offsets, (offset) => chainRead(deps, "payment", {
+		safe: toAddress(safe),
+		limit: 50,
+		settlements: settlements.slice(offset, offset + 50)
+	}), { concurrency: 2 }).pipe(Effect.map((pages) => pages.some((page) => page === null) ? null : pages.flatMap((page) => page ?? [])));
+}
+function indexedPage(deps, scope, controls, params, state, first) {
+	return Effect.gen(function* () {
+		const range = boundedRange(params?.range, state.checkpoint);
+		const wantsTransfers = params?.filter?.kind !== "payment" && params?.filter?.status === void 0;
+		const found = yield* readTransfers(deps, scope.safe, range, state, wantsTransfers, first);
+		if (found === null) return yield* unavailablePage(deps, scope, controls, params, state, first);
+		const transfers = wantsTransfers ? found : [];
+		const page = yield* readPayments(deps, scope, controls, range, state, params?.filter?.kind !== "movement");
+		const decoration = yield* decoratePage(deps, scope, controls, transfers, page, range);
+		if (decoration === null) return yield* unavailablePage(deps, scope, controls, params, state, first);
+		const { items, next } = mergePage(scope.safe, params?.filter, params?.limit ?? 25, state, page, decoration, transfers, wantsTransfers);
+		const cursor = next.paymentDone && next.paymentPending.length === 0 && next.transferDone ? null : JSON.stringify(next);
+		if (cursor !== null && cursor === params?.cursor) return yield* Effect.fail({ publicError: Errors.invalidInput("cursor", "Activity source did not advance") });
+		yield* Effect.annotateCurrentSpan({ read_source: "indexer" });
+		return {
+			items,
+			nextCursor: cursor,
+			checkpoint: state.checkpoint,
+			observedAt: Date.now()
 		};
-		yield* emitApplied(work.slot, epoch);
-		notify(next);
-		const send = (event) => Queue.offer(mailbox, {
-			event,
-			reply: null,
-			origin: cursor,
-			invocation: env.invocation,
-			startedAt: env.startedAt
-		}).pipe(Effect.asVoid);
-		const complete = (event) => Queue.offer(mailbox, {
-			event,
-			reply: null,
-			origin: cursor,
-			invocation: env.invocation,
-			startedAt: env.startedAt
-		}).pipe(Effect.asVoid);
-		const guarded = Effect.gen(function* () {
-			yield* Effect.annotateCurrentSpan({
-				slot: work.slot,
-				epoch,
-				port: work.port
-			});
-			return yield* control(work.run(send, env.invocation), env.invocation);
-		}).pipe(Effect.withSpan(`identity.work.${work.slot}`)).pipe(Effect.matchEffect({
-			onFailure: (failure) => complete(laneExit({ failure })),
-			onSuccess: () => complete(laneExit({}))
-		}), Effect.catchDefect((cause) => complete(laneExit({ defect: cause }))));
-		const fiber = yield* Effect.forkChild(guarded, { startImmediately: true });
-		slots.set(work.slot, {
-			fiber,
-			reply: env.reply,
-			cursor
+	});
+}
+//#endregion
+//#region ../../packages/sdk/src/activity/page-overlay.ts
+const MAX_OVERLAY_IDS = 200;
+function overlay(deps, actor, controls, input) {
+	const count = Math.max(input.references?.length ?? 0, input.settlementIds?.length ?? 0);
+	const offsets = Array.from({ length: Math.max(1, Math.ceil(count / MAX_OVERLAY_IDS)) }, (_, i) => i * MAX_OVERLAY_IDS);
+	return Effect.forEach(offsets, (offset) => callOperation(deps.convexCall, overlays.get, copyInvocationObservation(controls, {
+		...actor === void 0 ? {} : { actor },
+		...input.references === void 0 ? {} : { references: input.references.slice(offset, offset + MAX_OVERLAY_IDS) },
+		...input.settlementIds === void 0 ? {} : { settlementIds: input.settlementIds.slice(offset, offset + MAX_OVERLAY_IDS) }
+	})).pipe(Effect.mapError((publicError) => ({ publicError }))), { concurrency: 2 }).pipe(Effect.flatMap((pages) => {
+		const first = pages[0];
+		if (pages.some((page) => scopeKey(page) !== scopeKey(first))) return Effect.fail({ publicError: Errors.invalidInput("actor", "Activity scope changed during the read") });
+		return Effect.succeed({
+			...first,
+			links: pages.flatMap((page) => page.links),
+			annotations: pages.flatMap((page) => page.annotations),
+			payments: pages.flatMap((page) => page.payments)
+		});
+	}));
+}
+function decoratePage(deps, scope, controls, transfers, page, range) {
+	return Effect.gen(function* () {
+		const decoration = yield* overlay(deps, scope.actor, controls, {
+			references: [...page.pending.map((id) => ({
+				kind: "payment",
+				id
+			})), ...transfers.map((row) => ({
+				kind: "movement",
+				id: row.id
+			}))],
+			settlementIds: [...new Set(transfers.flatMap((row) => row.paymentSettlementId ? [row.paymentSettlementId] : []))]
 		});
+		if (scopeKey(decoration) !== scopeKey(scope)) return yield* Effect.fail({ publicError: Errors.invalidInput("actor", "Activity scope changed during the read") });
+		const byId = new Map([...page.items, ...decoration.payments].map((item) => [item.id, item]));
+		const settlements = [...new Set(decoration.links.map((link) => link.settlementId))];
+		const facts = yield* readPaymentFacts(deps, scope.safe, settlements);
+		if (facts === null) return null;
+		const bySettlement = new Map(facts.map((row) => [row.settlementId, row]));
+		const byPayment = new Map(decoration.links.map((link) => [link.paymentId, {
+			fact: bySettlement.get(link.settlementId),
+			expected: link.expected
+		}]));
+		const annotations = new Map(decoration.annotations.map((annotation) => [`${annotation.reference.kind}:${annotation.reference.id}`, annotation]));
+		return {
+			payments: page.pending.flatMap((id) => {
+				const item = byId.get(id);
+				if (item === void 0 || item.kind !== "payment" || item.createdAt > range.to || range.from !== void 0 && item.createdAt < range.from) return [];
+				const confirmed = withAnnotation(confirmPayment(item, byPayment.get(id)?.fact, byPayment.get(id)?.expected), annotations.get(`payment:${id}`));
+				return isActivityVisible(confirmed) ? [confirmed] : [];
+			}),
+			annotations,
+			linked: new Set(decoration.links.filter((link) => matchesPaymentFact(bySettlement.get(link.settlementId), link.expected)).map((link) => link.settlementId))
+		};
 	});
-	const loop = yield* Effect.forkScoped(Effect.forever(Queue.take(mailbox).pipe(Effect.flatMap((env) => withInvocationParentSpan(step(env), env.invocation)))));
-	yield* Effect.addFinalizer(() => Effect.gen(function* () {
-		stopped = true;
-		yield* Fiber.interrupt(loop);
-		const state = yield* Ref.get(cell);
-		const outstanding = [...slots.values()];
-		slots.clear();
-		for (const held of outstanding) {
-			yield* Fiber.interrupt(held.fiber);
-			const env = {
-				origin: held.cursor,
-				invocation: held.cursor.invocation,
-				startedAt: held.cursor.startedAt
+}
+function mergePage(safe, filter, limit, state, page, decoration, transfers, wantsTransfers) {
+	const { payments, annotations, linked } = decoration;
+	let pi = 0;
+	let ti = 0;
+	const items = [];
+	const transferEnd = !wantsTransfers || transfers.length < 100;
+	let transferBefore = state.transferBefore;
+	while (items.length < limit) {
+		if (pi === payments.length && !page.done || ti === transfers.length && !transferEnd) break;
+		const payment = payments[pi];
+		const row = transfers[ti];
+		if (payment === void 0 && row === void 0) break;
+		if (payment !== void 0 && (row === void 0 || payment.createdAt >= Number(row.timestamp) * 1e3)) {
+			pi += 1;
+			if (matchesFilter(payment, filter)) items.push(payment);
+		} else if (row !== void 0) {
+			ti += 1;
+			transferBefore = {
+				timestamp: Number(row.timestamp),
+				id: row.id
 			};
-			const event = { _tag: held.cursor.event };
-			yield* emit(nonApplied(state, event, "ACTOR_STOPPED", "refused", env));
-			yield* failReply(held.reply, makeFailure(state, event, "ACTOR_STOPPED"));
+			if (row.paymentSettlementId && linked.has(row.paymentSettlementId)) continue;
+			const item = transferItem(safe, row, annotations.get(`movement:${row.id}`));
+			if (item !== null && matchesFilter(item, filter)) items.push(item);
 		}
-		stateObservers.clear();
-		transitionObservers.clear();
-		yield* Queue.shutdown(mailbox);
-	}));
-	const offer = (event, reply, invocation) => {
-		const state = Ref.getUnsafe(cell);
-		if (stopped) return withInvocationParentSpan(emit(nonApplied(state, event, "ACTOR_STOPPED", "refused", {
-			origin: null,
-			event,
-			invocation,
-			startedAt: Date.now()
-		})).pipe(Effect.andThen(Effect.fail(makeFailure(state, event, "ACTOR_STOPPED")))), invocation);
-		const startedAt = Date.now();
-		return Queue.offer(mailbox, {
-			event,
-			reply,
-			origin: null,
-			invocation,
-			startedAt
-		}).pipe(Effect.asVoid);
-	};
+	}
 	return {
-		ask: (event, invocation = {}) => Effect.gen(function* () {
-			const reply = yield* Deferred.make();
-			yield* offer(event, reply, invocation);
-			return yield* Deferred.await(reply);
-		}),
-		tell: (event, invocation = {}) => offer(event, null, invocation),
-		snapshot: () => Ref.getUnsafe(cell),
-		subscribe: (observer) => {
-			stateObservers.add(observer);
-			return () => {
-				stateObservers.delete(observer);
-			};
-		},
-		subscribeTransitions: (observer) => {
-			transitionObservers.add(observer);
-			return () => {
-				transitionObservers.delete(observer);
-			};
+		items,
+		next: {
+			...state,
+			paymentCursor: page.cursor,
+			paymentDone: page.done,
+			paymentPending: payments.slice(pi).map((item) => item.id),
+			transferBefore,
+			transferDone: ti === transfers.length && transferEnd
 		}
 	};
-});
-//#endregion
-//#region ../../packages/sdk/src/access/identity/boot.ts
-const initialIdentityState = () => RESTORING;
-const bootIdentityFlow = (input, options = {}) => Effect.gen(function* () {
-	const sessionStore = { current: null };
-	let invalidateOrganizationSubscriptions = () => input.organizationSetup?.invalidateSubscriptions?.();
-	const authority = createIdentityAuthorityTracker(sessionStore, () => invalidateOrganizationSubscriptions());
-	const actor = yield* boot(identitySpec(input, sessionStore, authority), options);
-	authority.bindState(actor.snapshot);
-	const runPromise = input.runPromise ?? Effect.runPromise;
-	let selectedOrgId = null;
-	let stopRemote = null;
-	let selectionEpoch = 0;
-	invalidateOrganizationSubscriptions = () => {
-		selectionEpoch += 1;
-		const stop = stopRemote;
-		stopRemote = null;
-		try {
-			stop?.();
-		} finally {
-			input.organizationSetup?.invalidateSubscriptions?.();
-		}
-	};
-	const observe = (state) => {
-		authority.observe(state);
-		const nextOrgId = state.phase === "authenticated" && state.account.at === "claimed" ? state.account.org?.orgId ?? null : null;
-		if (nextOrgId === selectedOrgId) return;
-		selectedOrgId = nextOrgId;
-		selectionEpoch += 1;
-		const epoch = selectionEpoch;
-		stopRemote?.();
-		stopRemote = null;
-		if (nextOrgId === null || input.organizationSetup === void 0) return;
-		const capturedLifetime = authority.snapshot();
-		const expectedAuthUserId = state.phase === "authenticated" ? state.session.authUserId : null;
-		const emit = (snapshot) => {
-			if (epoch !== selectionEpoch || !authority.matches(capturedLifetime, expectedAuthUserId)) return;
-			runPromise(actor.tell({
-				_tag: "ObserveOrganization",
-				orgId: nextOrgId,
-				snapshot
-			})).catch(() => void 0);
+}
+function convexPage(deps, actor, controls, input) {
+	return callOperation(deps.convexCall, items.list, copyInvocationObservation(controls, {
+		...input,
+		actor
+	})).pipe(Effect.mapError((publicError) => ({ publicError })));
+}
+function fallbackPage(deps, scope, controls, params, state, degraded) {
+	return Effect.gen(function* () {
+		const page = yield* convexPage(deps, scope.actor, controls, {
+			limit: params?.limit ?? 25,
+			...state.paymentCursor === null ? {} : { cursor: state.paymentCursor },
+			range: {
+				...params?.range?.from === void 0 ? {} : { from: params.range.from },
+				to: Math.min(state.checkpoint, params?.range?.to ?? state.checkpoint)
+			},
+			...params?.filter === void 0 ? {} : { filter: params.filter }
+		});
+		const decoration = yield* overlay(deps, scope.actor, controls, { references: page.items.map((item) => ({
+			kind: item.kind,
+			id: item.id
+		})) });
+		if (scopeKey(decoration) !== scopeKey(scope)) return yield* Effect.fail({ publicError: Errors.invalidInput("actor", "Activity scope changed during fallback") });
+		const annotations = new Map(decoration.annotations.map((annotation) => [`${annotation.reference.kind}:${annotation.reference.id}`, annotation]));
+		yield* Effect.annotateCurrentSpan({
+			read_source: "convex",
+			...degraded ? { read_warning: "indexer-unavailable" } : {}
+		});
+		return {
+			...page,
+			items: page.items.filter(isActivityVisible).map((item) => withAnnotation(item, annotations.get(`${item.kind}:${item.id}`))),
+			checkpoint: state.checkpoint,
+			nextCursor: page.nextCursor === null ? null : JSON.stringify({
+				...state,
+				source: "fallback",
+				paymentCursor: page.nextCursor,
+				degraded
+			}),
+			...degraded ? { readWarning: "indexer-unavailable" } : {}
 		};
-		try {
-			const orgId = toOrgId(nextOrgId);
-			input.organizationSetup.subscribe(orgId, emit).then((result) => {
-				if (epoch !== selectionEpoch) {
-					if (result.ok) result.value();
-					return;
-				}
-				if (result.ok) stopRemote = result.value;
-				else emit({
-					status: "error",
-					error: result.error
-				});
-			}).catch((cause) => emit({
-				status: "error",
-				error: Errors.unknown(cause)
-			}));
-		} catch (cause) {
-			emit({
-				status: "error",
-				error: Errors.unknown(cause)
-			});
-		}
-	};
-	const unsubscribeAuthority = actor.subscribe(observe);
-	observe(actor.snapshot());
-	yield* Effect.addFinalizer(() => Effect.sync(() => {
-		authority.invalidate();
-		unsubscribeAuthority();
-	}));
-	return {
-		...actor,
-		authLifetime: authority.snapshot,
-		matchesAuthLifetime: authority.matches,
-		invalidateAuthLifetime: authority.invalidate,
-		subscribeAuthInvalidation: authority.subscribeInvalidation,
-		authSession: () => sessionStore.current,
-		ask: (event, controls) => actor.ask(event, controls).pipe(Effect.tap(() => event._tag === "Reset" ? Effect.sync(() => {
-			authority.recordProviderSession(null);
-		}) : Effect.void)),
-		restoreAuthSession: (session, controls) => actor.ask({
-			_tag: actor.snapshot().phase === "restoring" ? "SessionRestored" : "RestoreSession",
-			session: modelSession(session),
-			profileComplete: false
-		}, controls).pipe(Effect.tap(() => Effect.sync(() => {
-			authority.recordProviderSession(session);
-		})))
-	};
-});
-//#endregion
-//#region ../../packages/sdk/src/access/identity/restoration-observation.ts
-/** The correlation a transition carries onto its product event. */
-const linkage = (record) => ({
-	...record.correlation_id === void 0 ? {} : { correlation_id: record.correlation_id },
-	...record.journey_id === void 0 ? {} : { journey_id: record.journey_id }
-});
-/**
-* The label of the restore window every client boots into. A settled session
-* fact that left this label is the restoration result (#1962 R04); the same
-* facts from a signed-out or authenticated state are the routine session probe
-* that `getSession()` runs, and a probe is not a restoration attempt.
-*/
-const RESTORE_WINDOW = "restoring";
-/** The completions that settle the restore window by themselves, and what each says. */
-const SETTLING_EVENTS = {
-	SessionRestored: "restored",
-	SessionAbsent: "absent",
-	SessionReadFailed: "failed"
-};
-/**
-* Which result the window settled on. `SessionRestored` and `SessionAbsent` are
-* the cache door and say it themselves. `ReadSession` is also valid inside the
-* window — `getSession()` drives it on a cache miss and its `SessionRead`
-* completion settles the window — so that one event reports both halves and the
-* state it produced is what separates them.
-*/
-const restorationOutcome = (event, state) => {
-	if (event === "SessionRead") {
-		if (state.phase === "authenticated") return "restored";
-		return state.phase === "signed_out" ? "absent" : void 0;
-	}
-	return SETTLING_EVENTS[event];
-};
-/**
-* The restore window's one result, or nothing when this settled session fact
-* belongs to a probe rather than to the window.
-*/
-const restorationObservation = (record, event, state) => {
-	if (record.slot !== "identity:session" || record.from !== RESTORE_WINDOW) return null;
-	const outcome = restorationOutcome(event, state);
-	if (outcome === void 0) return null;
-	return {
-		name: "access_recovery_completed",
-		props: {
-			recovery: "session_restoration",
-			outcome,
-			...outcome === "failed" && state.phase === "faulted" ? { reason_code: state.failure.code } : {},
-			...linkage(record)
-		}
-	};
-};
-//#endregion
-//#region ../../packages/sdk/src/access/identity/events.ts
-const NONE = null;
-const IDENTITY_EVENT_TAG_SET = new Set(IDENTITY_EVENT_TAGS);
-const isIdentityEventTag = (event) => IDENTITY_EVENT_TAG_SET.has(event);
-const APPLIED_ACTION_BY_EVENT = {
-	RequestOtp: "none",
-	VerifyOtp: "none",
-	ReadSession: "none",
-	SignOut: "none",
-	RestoreSession: "none",
-	ResumeOtpEntry: "none",
-	RestoreOtpEntry: "none",
-	Reset: "none",
-	SessionRestored: "restoration",
-	SessionAbsent: "restoration",
-	EnsureAccount: "none",
-	ClaimAccount: "none",
-	RetryAccount: "none",
-	CreateOrganization: "none",
-	AttachOrganization: "none",
-	LeaveOrganization: "none",
-	ObserveOrganization: "none",
-	OtpSent: "otp-requested",
-	OtpFailed: "failed",
-	Verified: "verified",
-	VerifyFailed: "failed",
-	SessionRead: "restoration",
-	SessionReadFailed: "restoration",
-	SignedOut: "signed-out",
-	SignOutFailed: "failed",
-	AccountAt: "none",
-	AccountDerived: "none",
-	AccountClaiming: "none",
-	AccountClaimed: "none",
-	AccountFailed: "none",
-	OrgSelected: "none",
-	OrgSelectionFailed: "none"
-};
-const emailDomain = (email) => email.split("@")[1]?.toLowerCase() ?? "unknown";
-const authFailure = (record, reason, mode) => ({
-	name: "auth_failed",
-	props: {
-		auth_type: "otp",
-		reason,
-		...mode === void 0 ? {} : { failure_mode: mode },
-		...linkage(record)
-	}
-});
-const REFUSAL_EVENTS = /* @__PURE__ */ new Set([
-	"ClaimAccount",
-	"RetryAccount",
-	"CreateOrganization",
-	"AttachOrganization"
-]);
-function mapIdentityProductObservation(record, state) {
-	const event = record.event;
-	if (record.machine !== "identity" || !isIdentityEventTag(event)) return NONE;
-	if (record.outcome === "cancelled") return NONE;
-	if (record.slot === "identity:auth" && record.outcome === "refused") return authFailure(record, record.refusal_code, void 0);
-	if (record.slot === "identity:auth" && record.outcome === "failed") return authFailure(record, record.error_code, record.failure?.mode);
-	if (record.outcome === "refused" && REFUSAL_EVENTS.has(record.event)) return {
-		name: "identity_refused",
-		props: {
-			event: record.event,
-			refusal_code: record.refusal_code,
-			slot: record.slot,
-			state: record.state,
-			...linkage(record)
-		}
-	};
-	if (record.outcome !== "applied") return NONE;
-	const action = APPLIED_ACTION_BY_EVENT[event];
-	switch (action) {
-		case "none": return NONE;
-		case "failed": return state.phase !== "faulted" || state.failure.code === "CANCELLED" ? NONE : authFailure(record, state.failure.code, state.failure.mode);
-		case "otp-requested": return state.phase !== "otp_pending" ? NONE : {
-			name: "auth_otp_requested",
-			props: {
-				email_domain: emailDomain(state.email),
-				...linkage(record)
-			}
+	});
+}
+function readActivityPage(deps, actor, controls, params) {
+	return Effect.gen(function* () {
+		yield* Effect.try({
+			try: () => requireParams(params),
+			catch: (cause) => ({ publicError: asCapxulError(cause) })
+		});
+		const scope = yield* overlay(deps, actor, controls, {});
+		const selection = selectionKey(params);
+		const cursor = yield* Effect.try({
+			try: () => parseCursor(params?.cursor, scopeKey(scope), selection),
+			catch: () => ({ publicError: Errors.invalidInput("cursor", "invalid or obsolete Activity cursor; restart the read") })
+		});
+		const state = cursor ?? {
+			version: 1,
+			scope: scopeKey(scope),
+			selection,
+			checkpoint: Date.now(),
+			source: "indexed",
+			paymentCursor: null,
+			paymentDone: false,
+			paymentPending: [],
+			transferBefore: null,
+			transferDone: false,
+			degraded: false
 		};
-		case "verified": return state.phase !== "authenticated" ? NONE : {
-			name: "auth_verified",
-			props: {
-				auth_type: "otp",
-				...linkage(record)
-			}
+		const range = boundedRange(params?.range, state.checkpoint);
+		if (range.from !== void 0 && range.from > range.to) return {
+			items: [],
+			nextCursor: null,
+			checkpoint: state.checkpoint,
+			observedAt: Date.now()
 		};
-		case "signed-out": return state.phase !== "signed_out" ? NONE : {
-			name: "auth_signed_out",
-			props: linkage(record)
+		if (state.source === "fallback" || scope.safe === null) return yield* fallbackPage(deps, scope, controls, params, state, state.degraded);
+		return yield* indexedPage(deps, scope, controls, params, state, cursor === null);
+	});
+}
+function readActivitySummary(deps, actor, controls, params) {
+	return Effect.gen(function* () {
+		const totals = /* @__PURE__ */ new Map();
+		let cursor;
+		let count = 0;
+		let readWarning;
+		do {
+			const page = yield* readActivityPage(deps, actor, controls, {
+				limit: 100,
+				...cursor === void 0 ? {} : { cursor },
+				...params?.window === void 0 ? {} : { range: params.window }
+			});
+			count += page.items.length;
+			readWarning ??= page.readWarning;
+			for (const total of summarizeItems(page.items)) {
+				const key = total.asset;
+				const old = totals.get(key);
+				totals.set(key, old === void 0 ? total : {
+					...total,
+					in: String(BigInt(old.in) + BigInt(total.in)),
+					out: String(BigInt(old.out) + BigInt(total.out)),
+					net: String(BigInt(old.net) + BigInt(total.net)),
+					pendingIn: String(BigInt(old.pendingIn) + BigInt(total.pendingIn))
+				});
+			}
+			cursor = page.nextCursor ?? void 0;
+		} while (cursor !== void 0);
+		return {
+			window: {
+				from: params?.window?.from ?? null,
+				to: params?.window?.to ?? null
+			},
+			totals: [...totals.values()],
+			count,
+			observedAt: Date.now(),
+			...readWarning === void 0 ? {} : { readWarning }
 		};
-		case "restoration": return restorationObservation(record, event, state);
-		default: return absurd(action);
-	}
+	});
 }
-const ignoreTransportFailure = (operation, operationName, eventName) => Effect.suspend(operation).pipe(Effect.catchCause(() => Effect.logWarning("identity.product.telemetry.dropped").pipe(Effect.annotateLogs({
-	operation: operationName,
-	product_event: eventName
-}), Effect.ignoreCause)));
-function executeIdentityProductObservation(telemetry, record, state) {
-	const mapped = mapIdentityProductObservation(record, state);
-	if (mapped === null) return Effect.void;
-	copyInvocationObservation(record, mapped);
-	const invocationTelemetry = bindProductTelemetryInvocation(telemetry, mapped);
-	const after = () => state.phase === "authenticated" && (mapped.name === "auth_verified" || mapped.name === "access_recovery_completed") ? invocationTelemetry.identify({
-		distinctId: state.session.authUserId,
-		traits: { email_domain: emailDomain(state.session.email) }
-	}) : mapped.name === "auth_signed_out" ? invocationTelemetry.reset() : Effect.void;
-	return ignoreTransportFailure(() => invocationTelemetry.emit(mapped), "emit", mapped.name).pipe(Effect.andThen(ignoreTransportFailure(after, mapped.name === "auth_signed_out" ? "reset" : "identify", mapped.name)));
+function subscribeActivity(deps, actor, controls, onChange) {
+	return Effect.gen(function* () {
+		const scope = yield* overlay(deps, actor, controls, {});
+		if (scope.safe === null) return () => {};
+		let delivered = false;
+		return yield* deps.indexer.subscribe("transfer", {
+			safe: toAddress(scope.safe),
+			limit: 100
+		}, (snapshot) => {
+			if (snapshot.status === "ok") {
+				if (delivered) onChange();
+				delivered = true;
+			}
+			if (snapshot.status === "error") {
+				delivered = true;
+				onChange();
+			}
+		});
+	});
 }
 //#endregion
-//#region ../../packages/sdk/src/activity/documents.ts
-/** A reply its row does not admit is refused without the document body its decode error would carry. */
-function withoutDocumentBody(error) {
-	return error.details?.step === "decodeOutput" ? Errors.invalidInput("documentHash", "invalid document read") : error;
+//#region ../../packages/sdk/src/activity/movement-detail.ts
+/** An indexed Movement has no Convex materialization. Read its exact native row. */
+function readIndexedMovement(deps, actor, controls, eventId) {
+	return Effect.gen(function* () {
+		const scope = yield* overlay(deps, actor, controls, { references: [{
+			kind: "movement",
+			id: eventId
+		}] });
+		if (scope.safe === null) return null;
+		const safe = scope.safe.toLowerCase();
+		const row = (yield* deps.indexer.read("transfer", {
+			safe: toAddress(safe),
+			limit: 1,
+			eventId
+		}).pipe(Effect.mapError((error) => ({ publicError: error.publicError }))))[0];
+		if (row === void 0) return null;
+		const blockNumber = Number(row.blockNumber);
+		if (row.id !== eventId || row.from.toLowerCase() !== safe && row.to.toLowerCase() !== safe || !Number.isSafeInteger(blockNumber) || blockNumber < 0 || !Number.isSafeInteger(row.logIndex) || row.logIndex < 0) return yield* Effect.fail({ publicError: Errors.invalidInput("activity", "indexed Movement does not match the requested scope or evidence") });
+		yield* Effect.annotateCurrentSpan({ read_source: "indexer" });
+		const documentSet = scope.movementDocuments.find((set) => set.movementId === row.id);
+		return {
+			kind: "movement",
+			movementId: row.id,
+			documents: documentSet?.documents ?? [],
+			documentState: documentSet?.state ?? "pending",
+			viewer: scope.actor,
+			annotation: scope.annotations.find((annotation) => annotation.reference.kind === "movement" && annotation.reference.id === row.id) ?? null,
+			evidence: {
+				chainId: row.chainId,
+				contractAddress: row.token,
+				tokenAddress: row.token,
+				transactionHash: row.txHash,
+				blockNumber,
+				blockHash: row.blockHash,
+				inclusion: "included",
+				verification: "verified",
+				canonicalState: "finalized",
+				transferLogIndex: row.logIndex,
+				source: row.from,
+				destination: row.to,
+				rawAmount: row.amount.toString(),
+				link: {
+					movementId: row.id,
+					depositPaymentId: null
+				}
+			}
+		};
+	});
 }
-/** Schema errors must not retain document bodies. */
-function decodeDocumentRead(schema, input) {
-	return Effect.fromOption(Schema.decodeUnknownOption(schema)(input)).pipe(Effect.mapError(() => ({ publicError: Errors.invalidInput("documentHash", "invalid document read") })));
+//#endregion
+//#region ../../packages/sdk/src/activity/scope.ts
+/**
+* The activity backend gives its actor a different name than the other
+* financialOps functions: `{kind: "organization", orgId}`, and not
+* `{kind: "org", orgId}`. Thus it does not use `actorReferenceToBackend`.
+*
+* The `personal` case sends NO actor. This is correct, and it does not lose
+* data. `requireActivityActor` uses the signed-in Account when the actor is
+* absent, and `canReadActor` refuses all other account identifiers
+* (`packages/backend/convex/movement/activityAuth.ts`). Thus "personal" and
+* "absent" both name the one Account that an SDK caller can read. The SDK does
+* not hold an account identifier to send.
+*
+* The `switch` is exhaustive. A new `ActorReference` variant is a compile error
+* here. The conditional expression that this function replaced removed each
+* value that was not an organization.
+*/
+function activityActorField(actor) {
+	if (actor === void 0 || actor.kind === "personal") return {};
+	return { actor: {
+		kind: "organization",
+		orgId: actor.organizationId
+	} };
 }
-function makePaymentDocumentsMethods(deps) {
-	/**
-	* One document read by its row. The pair is decoded before anything is sent,
-	* and a reply the row does not admit is refused without the body it carried.
-	*/
-	const readDocument = (row, ref, options) => {
-		const controls = deps.invocationControls?.(options) ?? options;
-		return runPortEffect(Effect.gen(function* () {
-			const pair = yield* decodeDocumentRead(PaymentDocumentReadRefSchema, ref);
-			return yield* callOperation(deps.convexCall, row, copyInvocationObservation(controls, pair)).pipe(Effect.mapError((error) => ({ publicError: withoutDocumentBody(error) })));
-		}), controls, row.name, deps.runPromise);
-	};
-	return {
-		get: (ref, options) => readDocument(documents.get, ref, options),
-		verify: (ref, options) => readDocument(documents.verify, ref, options),
-		render: (ref, options) => readDocument(documents.render, ref, options)
-	};
+/** Capture scope now; let the observed result boundary handle a malformed caller value. */
+function captureActivityInput(prepare) {
+	try {
+		return prepare();
+	} catch (cause) {
+		return Effect.die(cause);
+	}
 }
-//#endregion
-//#region ../../packages/sdk/src/activity/stitching.ts
-/** Epoch milliseconds of the block that carried the row. */
-function blockMillis(row) {
-	return Number(row.timestamp) * 1e3;
+function observeActivityScope(actor) {
+	const organizationId = actor?.kind === "organization" || actor?.kind === "org" ? safeEngineeringIdentifier(actor.orgId) : void 0;
+	return Effect.annotateCurrentSpan({
+		scope_kind: actor?.kind === "organization" || actor?.kind === "org" ? "organization" : "account",
+		...organizationId === void 0 ? {} : { verified_organization_id: organizationId }
+	});
 }
-/** `0x1234…abcd` — the counterparty of an unclaimed transfer is an address. */
-function shortAddressLabel(address) {
-	return address.length <= 12 ? address : `${address.slice(0, 6)}…${address.slice(-4)}`;
+function decodeActivityViewer(value) {
+	const viewer = Option.getOrUndefined(Schema.decodeUnknownOption(ActorRefSchema)(value));
+	if (viewer === void 0) return void 0;
+	const id = viewer.kind === "organization" ? viewer.orgId : viewer.accountId;
+	return safeEngineeringIdentifier(id) === void 0 ? void 0 : viewer;
 }
-function directionFor(safe, transfer) {
-	const from = transfer.from.toLowerCase();
-	const to = transfer.to.toLowerCase();
-	if (from === safe && to === safe) return "self";
-	return to === safe ? "in" : "out";
+/** The detail without the scope it was read for, which the SDK reports as telemetry instead. */
+function normalizeActivityDetail(response) {
+	if (response === null) return null;
+	const { viewer: _viewer, ...detail } = response;
+	return detail;
 }
-function withAnnotation(item, annotation) {
-	return annotation?.counterpartyLabel === void 0 ? item : {
-		...item,
-		counterpartyLabel: annotation.counterpartyLabel
+//#endregion
+//#region ../../packages/sdk/src/activity/methods.ts
+function makeActivityMethods(deps) {
+	const indexerDeps = deps.indexerRead === void 0 ? void 0 : {
+		indexer: deps.indexerRead,
+		convexCall: deps.convexCall
 	};
-}
-/**
-* An indexed settlement confirms the intent. A missing row can be outside
-* this page or still backfilling; only the correction owner can prove rollback.
-*/
-function confirmPayment(intent, chain, expected) {
-	if (chain !== void 0 && matchesPaymentFact(chain, expected)) return {
-		...intent,
-		status: "settled",
-		...intent.execution === void 0 ? {} : { execution: {
-			status: "settled",
-			retryRequired: false
-		} },
-		receipt: {
-			chainId: chain.chainId,
-			transactionHash: chain.txHash
-		},
-		updatedAt: blockMillis(chain)
+	/** One public call for the caller's chosen actor, read once at call start. */
+	const forActor = (actorRef, options, operation, program) => {
+		const controls = deps.invocationControls?.(options) ?? options;
+		return runPortEffect(captureActivityInput(() => Effect.succeed(activityActorField(actorRef).actor)).pipe(Effect.flatMap((actor) => program(actor, controls))), controls, operation, deps.runPromise);
 	};
-	return intent;
-}
-function matchesPaymentFact(chain, expected) {
-	return chain !== void 0 && expected !== void 0 && chain.chainId === expected.chainId && chain.contract.toLowerCase() === expected.contract.toLowerCase() && chain.sender.toLowerCase() === expected.sender.toLowerCase() && chain.recipient.toLowerCase() === expected.recipient.toLowerCase() && chain.token.toLowerCase() === expected.token.toLowerCase() && chain.amount.toString() === expected.rawAmount && chain.documentHash.toLowerCase() === expected.documentHash.toLowerCase() && chain.kind === expected.kind;
-}
-/**
-* One unclaimed Transfer as an Activity row, or `null` when this SDK cannot
-* denominate its asset. The indexer serves only configured assets, so a row
-* the registry does not know means the SDK and that deployment disagree; it is
-* dropped rather than shown with a guessed currency.
-*/
-function isActivityVisible(item) {
-	return !(item.kind === "payment" && item.direction === "in" && item.execution?.notSent);
-}
-function transferItem(safe, transfer, annotation) {
-	const asset = configuredMoneyAssetById(transfer.assetId);
-	if (asset === null) return null;
-	const direction = directionFor(safe.toLowerCase(), transfer);
-	const counterparty = direction === "in" ? transfer.from : transfer.to;
-	const at = blockMillis(transfer);
-	return withAnnotation({
-		kind: "movement",
-		id: transfer.id,
-		classification: "movement_only_outflow",
-		amount: {
-			asset: asset.assetId,
-			value: formatUnits(transfer.amount, asset.decimals)
-		},
-		direction,
-		counterpartyLabel: shortAddressLabel(counterparty),
-		receipt: {
-			chainId: transfer.chainId,
-			transactionHash: transfer.txHash
+	return {
+		subscribe: (onChange, params, options) => forActor(params?.actor, options, CAPXUL_OPERATIONS.activity.subscribe, (actor, controls) => indexerDeps === void 0 ? Effect.succeed(() => {}) : Effect.suspend(() => subscribeActivity(indexerDeps, actor, controls, onChange)).pipe(Effect.tap(() => observeActivityScope(actor)))),
+		list: (params, options) => forActor(params?.actor, options, items.list.name, (actor, controls) => Effect.suspend(() => indexerDeps === void 0 ? callOperation(deps.convexCall, items.list, copyInvocationObservation(controls, {
+			...actor === void 0 ? {} : { actor },
+			...params?.cursor === void 0 ? {} : { cursor: params.cursor },
+			...params?.limit === void 0 ? {} : { limit: params.limit },
+			...params?.range === void 0 ? {} : { range: params.range },
+			...params?.filter === void 0 ? {} : { filter: params.filter }
+		})).pipe(Effect.mapError((publicError) => ({ publicError }))) : readActivityPage(indexerDeps, actor, controls, params)).pipe(Effect.map((page) => ({
+			...page,
+			items: page.items.filter(isActivityVisible)
+		})), Effect.tap(() => observeActivityScope(actor)))),
+		summary: (params, options) => forActor(params?.actor, options, items.summary.name, (actor, controls) => Effect.suspend(() => indexerDeps === void 0 ? callOperation(deps.convexCall, items.summary, copyInvocationObservation(controls, {
+			...actor === void 0 ? {} : { actor },
+			...params?.window === void 0 ? {} : { window: params.window }
+		})).pipe(Effect.mapError((publicError) => ({ publicError }))) : readActivitySummary(indexerDeps, actor, controls, params)).pipe(Effect.tap(() => observeActivityScope(actor)))),
+		get: (reference, options) => {
+			const controls = deps.invocationControls?.(options) ?? options;
+			const requestedActor = actorReferenceToBackend(options?.actor);
+			return runPortEffect(captureActivityInput(() => {
+				const scope = requestedActor === void 0 ? void 0 : requestedActor.kind === "org" ? {
+					kind: "org",
+					orgId: requestedActor.orgId
+				} : { kind: "account" };
+				return Effect.succeed({
+					actor: scope,
+					referenceActor: reference.kind === "payment" ? activityActorField(reference.actor).actor : void 0
+				});
+			}).pipe(Effect.flatMap(({ actor, referenceActor }) => Effect.suspend(() => indexerDeps !== void 0 && reference.kind === "movement" && /^[1-9][0-9]{0,9}:0x[0-9a-f]{64}:[0-9]{1,10}$/.test(reference.id) ? readIndexedMovement(indexerDeps, actor?.kind === "org" ? {
+				kind: "organization",
+				orgId: actor.orgId
+			} : void 0, controls, reference.id) : callOperation(deps.convexCall, items.get, copyInvocationObservation(controls, {
+				reference: {
+					kind: reference.kind,
+					id: reference.id,
+					...referenceActor === void 0 ? {} : { actor: referenceActor }
+				},
+				...actor === void 0 ? {} : { actor }
+			})).pipe(Effect.mapError((publicError) => ({ publicError })))).pipe(Effect.flatMap((response) => {
+				const detail = normalizeActivityDetail(response);
+				if (response === null) return Effect.succeed(detail);
+				const viewer = response.viewer === void 0 ? actor ?? referenceActor : decodeActivityViewer(response.viewer);
+				return viewer === void 0 ? Effect.succeed(detail) : observeActivityScope(viewer).pipe(Effect.as(detail));
+			})))), controls, items.get.name, deps.runPromise);
 		},
-		createdAt: at,
-		updatedAt: at
-	}, annotation);
-}
-/**
-* Money in, money out and the pending share, one bucket per exact asset.
-*/
-function summarizeItems(items) {
-	const buckets = /* @__PURE__ */ new Map();
-	for (const item of items) {
-		const metadata = configuredMoneyAssetById(item.amount.asset);
-		if (metadata === null) continue;
-		const key = item.amount.asset;
-		const bucket = buckets.get(key) ?? {
-			asset: item.amount.asset,
-			in: 0n,
-			out: 0n,
-			pendingIn: 0n
-		};
-		const raw = rawUnits(item.amount.value, metadata.decimals);
-		if (item.kind === "payment" && item.status !== "settled") {
-			if (item.direction === "in" && item.status !== "cancelled" && item.status !== "failed" && !item.execution?.notSent) bucket.pendingIn += raw;
-		} else if (item.direction === "in") bucket.in += raw;
-		else if (item.direction === "out") bucket.out += raw;
-		buckets.set(key, bucket);
-	}
-	return [...buckets.values()].map((bucket) => ({
-		asset: bucket.asset,
-		in: bucket.in.toString(),
-		out: bucket.out.toString(),
-		net: (bucket.in - bucket.out).toString(),
-		pendingIn: bucket.pendingIn.toString()
-	}));
-}
-/** The inverse of `formatUnits`, kept exact: `"1.25"` at 6 decimals is `1250000n`. */
-function rawUnits(value, decimals) {
-	const negative = value.startsWith("-");
-	const [whole = "0", fraction = ""] = (negative ? value.slice(1) : value).split(".");
-	const raw = BigInt(`${whole}${fraction.padEnd(decimals, "0").slice(0, decimals)}`);
-	return negative ? -raw : raw;
-}
-//#endregion
-//#region ../../packages/sdk/src/activity/cursor.ts
-function actorKey(actor) {
-	return actor.kind === "account" ? `account:${actor.accountId}` : `organization:${actor.orgId}`;
-}
-function scopeKey(scope) {
-	return `${scope.principalAccountId}|${actorKey(scope.actor)}|${scope.safe?.toLowerCase() ?? "none"}`;
-}
-function selectionKey(params) {
-	const filter = params?.filter;
-	return JSON.stringify([
-		params?.range?.from ?? null,
-		params?.range?.to ?? null,
-		filter?.kind ?? null,
-		filter?.direction ?? null,
-		filter?.status === void 0 ? null : [...new Set(filter.status)].sort()
-	]);
-}
-function validString(value, max) {
-	return typeof value === "string" && value.length <= max;
-}
-function validPosition(position) {
-	return position === null || typeof position === "object" && "timestamp" in position && typeof position.timestamp === "number" && Number.isSafeInteger(position.timestamp) && position.timestamp >= 0 && "id" in position && typeof position.id === "string" && /^[1-9][0-9]{0,9}:0x[0-9a-f]{64}:[0-9]{1,10}$/.test(position.id);
-}
-function isActivityCursor(cursor, scope, selection) {
-	return typeof cursor === "object" && cursor !== null && cursorScopeMatches(cursor, scope, selection) && cursorProgressIsValid(cursor);
-}
-/** The cursor was issued for this scope and filter selection, at a valid checkpoint. */
-function cursorScopeMatches(cursor, scope, selection) {
-	return "version" in cursor && cursor.version === 1 && "scope" in cursor && cursor.scope === scope && "selection" in cursor && cursor.selection === selection && "checkpoint" in cursor && typeof cursor.checkpoint === "number" && Number.isSafeInteger(cursor.checkpoint) && cursor.checkpoint >= 0 && "source" in cursor && (cursor.source === "indexed" || cursor.source === "fallback");
-}
-/** Each source's progress is well-formed and bounded. */
-function cursorProgressIsValid(cursor) {
-	return "paymentCursor" in cursor && (cursor.paymentCursor === null || validString(cursor.paymentCursor, 2048)) && "paymentDone" in cursor && typeof cursor.paymentDone === "boolean" && "transferDone" in cursor && typeof cursor.transferDone === "boolean" && "degraded" in cursor && typeof cursor.degraded === "boolean" && "paymentPending" in cursor && Array.isArray(cursor.paymentPending) && cursor.paymentPending.length <= 100 && new Set(cursor.paymentPending).size === cursor.paymentPending.length && cursor.paymentPending.every((id) => validString(id, 256)) && "transferBefore" in cursor && validPosition(cursor.transferBefore);
-}
-function parseCursor(value, scope, selection) {
-	if (value === void 0) return null;
-	if (value.length > 4e4) throw Errors.invalidInput("cursor", "invalid Activity cursor");
-	const cursor = JSON.parse(value);
-	if (!isActivityCursor(cursor, scope, selection)) throw Errors.invalidInput("cursor", "Activity scope or filters changed; restart from the first page");
-	return cursor;
-}
-function requireParams(params) {
-	const limit = params?.limit ?? 25;
-	if (!Number.isSafeInteger(limit) || limit < 1 || limit > 100) throw Errors.invalidInput("limit", "must be an integer from 1 to 100");
-	for (const value of [params?.range?.from, params?.range?.to]) if (value !== void 0 && !Number.isSafeInteger(value)) throw Errors.invalidInput("range", "must contain integer epoch milliseconds");
-	const f = params?.filter;
-	if (f?.kind !== void 0 && f.kind !== "payment" && f.kind !== "movement" || f?.direction !== void 0 && ![
-		"in",
-		"out",
-		"self"
-	].includes(f.direction) || f?.status !== void 0 && (!Array.isArray(f.status) || !f.status.every((status) => PAYMENT_STATUSES.includes(status)))) throw Errors.invalidInput("filter", "invalid Activity filter");
-}
-function matchesFilter(item, filter) {
-	return (filter?.kind === void 0 || item.kind === filter.kind) && (filter?.direction === void 0 || item.direction === filter.direction) && (filter?.status === void 0 || item.kind === "payment" && filter.status.includes(item.status));
+		annotate: (input, options) => {
+			const controls = deps.invocationControls?.(options) ?? options;
+			return runPortEffect(captureActivityInput(() => {
+				const actor = activityActorField(input.actor).actor;
+				if (input.actor !== void 0 && input.reference.kind === "payment" && input.reference.actor !== void 0 && !sameActor(input.actor, input.reference.actor)) return Effect.fail({ publicError: Errors.invalidInput("reference.actor", "must match the annotation actor") });
+				return Effect.succeed({
+					actor,
+					referenceActor: input.reference.kind === "payment" ? activityActorField(input.reference.actor).actor : void 0
+				});
+			}).pipe(Effect.flatMap(({ actor, referenceActor }) => Effect.suspend(() => callOperation(deps.convexCall, annotations.save, copyInvocationObservation(controls, {
+				...actor === void 0 ? {} : { actor },
+				reference: input.reference.kind === "payment" && referenceActor !== void 0 ? {
+					kind: "payment",
+					id: input.reference.id,
+					actor: referenceActor
+				} : {
+					kind: input.reference.kind,
+					id: input.reference.id
+				},
+				...input.counterpartyLabel === void 0 ? {} : { counterpartyLabel: input.counterpartyLabel },
+				...input.accountingCategory === void 0 ? {} : { accountingCategory: input.accountingCategory },
+				...input.memo === void 0 ? {} : { memo: input.memo }
+			})).pipe(Effect.mapError((publicError) => ({ publicError })))).pipe(Effect.tap((annotation) => {
+				const scope = decodeActivityViewer(annotation.actor);
+				return scope === void 0 ? Effect.void : observeActivityScope(scope);
+			})))), controls, annotations.save.name, deps.runPromise);
+		}
+	};
 }
+Object.freeze({
+	terminal: false,
+	outcome: null,
+	needsAction: false
+});
+Object.freeze({
+	terminal: false,
+	outcome: null,
+	needsAction: true
+});
+Object.freeze({
+	terminal: true,
+	outcome: "good",
+	needsAction: false
+});
+Object.freeze({
+	terminal: true,
+	outcome: "bad",
+	needsAction: false
+});
+Object.freeze({
+	terminal: true,
+	outcome: "neutral",
+	needsAction: false
+});
 //#endregion
-//#region ../../packages/sdk/src/activity/indexed-pages.ts
-function chainRead(deps, table, input) {
-	return deps.indexer.read(table, input).pipe(Effect.catch((error) => {
-		if (error.publicError.details?.reason === "scope-refused" || ![
-			"NETWORK_ERROR",
-			"RATE_LIMITED",
-			"PROVIDER_ERROR",
-			"CAPABILITY_UNAVAILABLE",
-			"TIMEOUT"
-		].includes(error.publicCode)) return Effect.fail({ publicError: error.publicError });
-		return Effect.succeed(null);
-	}));
-}
-function boundedRange(range, checkpoint) {
+//#region ../../packages/sdk/src/accounts/summaries.ts
+function makeMeMethods(deps) {
 	return {
-		...range?.from === void 0 ? {} : { from: range.from },
-		to: Math.min(checkpoint, range?.to ?? checkpoint)
-	};
-}
-function unavailablePage(deps, scope, controls, params, state, first) {
-	if (first) return fallbackPage(deps, scope, controls, params, state, true);
-	return Effect.annotateCurrentSpan({
-		read_source: "indexer",
-		read_warning: "indexer-unavailable"
-	}).pipe(Effect.as({
-		items: [],
-		nextCursor: null,
-		checkpoint: state.checkpoint,
-		observedAt: Date.now(),
-		readWarning: "indexer-unavailable"
-	}));
-}
-function readTransfers(deps, safe, range, state, wanted, first) {
-	const from = Math.max(0, Math.ceil((range.from ?? 0) / 1e3));
-	const to = Math.floor(range.to / 1e3);
-	if (state.transferDone || from > to || !wanted && !first) return Effect.succeed([]);
-	return chainRead(deps, "transfer", {
-		safe: toAddress(safe),
-		limit: wanted ? 100 : 1,
-		timeline: {
-			from,
-			to,
-			...state.transferBefore === null ? {} : { before: state.transferBefore }
+		get: (options) => runIfActive(options?.signal, summaries.me.name, () => callOperation(deps.convexCall, summaries.me, {}).pipe(Effect.mapError((publicError) => ({ publicError }))), deps.runPromise),
+		home: (options) => runIfActive(options?.signal, summaries.home.name, () => (deps.chainId === void 0 ? Effect.fail(Errors.notImplemented("accounts", "me.home")) : callOperation(deps.convexCall, summaries.home, {
+			chainId: deps.chainId,
+			...options?.orgId === void 0 ? {} : { orgId: options.orgId }
+		})).pipe(Effect.flatMap((wire) => Effect.try({
+			try: () => ({
+				...wire,
+				balances: wire.balances === null ? null : accountPositionsFromWire(wire.balances),
+				recentActivity: wire.recentActivity?.filter(isActivityVisible) ?? null
+			}),
+			catch: asCapxulError
+		})), Effect.mapError((publicError) => ({ publicError }))), deps.runPromise),
+		depositInstructions: (options) => {
+			const controls = deps.invocationControls?.(options) ?? options;
+			return runPortEffect(callOperation(deps.convexCall, summaries.depositInstructions, copyInvocationObservation(controls, {})).pipe(Effect.mapError((publicError) => ({ publicError })), Effect.tap((instructions) => emitDepositInitiated(deps.telemetry, instructions, controls))), controls, summaries.depositInstructions.name, deps.runPromise);
 		}
-	});
+	};
 }
-function readPayments(deps, scope, controls, range, state, wanted) {
-	const done = state.paymentDone || !wanted;
-	if (state.paymentPending.length > 0 || done) return Effect.succeed({
-		items: [],
-		pending: state.paymentPending,
-		cursor: state.paymentCursor,
-		done
+//#endregion
+//#region ../../packages/sdk/src/access/identity/account-lane.ts
+const staleAccountFailure = {
+	code: "CANCELLED",
+	message: "Account authority changed"
+};
+const requireAccountAuthority = (isCurrent, send, step) => Effect.suspend(() => isCurrent() ? Effect.void : send({
+	_tag: "AccountFailed",
+	step,
+	failure: staleAccountFailure
+}).pipe(Effect.andThen(Effect.fail(staleAccountFailure))));
+const accountCall = (name, make, isCurrent) => Effect.suspend(() => isCurrent() ? call$1(name, make()) : Effect.fail(staleAccountFailure));
+const modelSession = (session) => ({
+	authUserId: String(session.authUserId),
+	email: String(session.email)
+});
+const claimAccount = (input, authUserId, signer, isCurrent) => {
+	const cancelled = smartAccountErrorFromCapxul("claim", Errors.cancelled({ operation: CAPXUL_OPERATIONS.smartAccount.claim }));
+	return call$1("smart-account.claim", Effect.tryPromise({
+		try: () => {
+			if (!isCurrent()) throw cancelled;
+			return signer.getAddress();
+		},
+		catch: (cause) => cause === cancelled ? cancelled : signerFailure(signer.source, "getAddress", cause)
+	}).pipe(Effect.flatMap((signerAddress) => Effect.suspend(() => isCurrent() ? input.ports.smartAccount.claim({
+		authUserId: toAuthUserId(authUserId),
+		chainId: toChainId(input.chainId),
+		signerAddress
+	}) : Effect.fail(cancelled)))));
+};
+const hasDurableClaim = (account) => account.deployedAt !== null && account.claimedAt !== null && account.signerAddress !== null;
+const profileComplete = (profile) => profile?.onboarded === true;
+const sessionProfile = (input, session) => {
+	if (session === null) return Effect.succeed({
+		session: null,
+		profileComplete: false
 	});
-	return convexPage(deps, scope.actor, controls, {
-		limit: 100,
-		range,
-		filter: { kind: "payment" },
-		...state.paymentCursor === null ? {} : { cursor: state.paymentCursor }
-	}).pipe(Effect.map((page) => ({
-		items: page.items,
-		pending: page.items.map((item) => item.id),
-		cursor: page.nextCursor,
-		done: page.nextCursor === null
+	return call$1("identity.load-by-auth-user-id", input.ports.identity.loadByAuthUserId(session.authUserId)).pipe(Effect.map((profile) => ({
+		session: modelSession(session),
+		profileComplete: profileComplete(profile)
 	})));
-}
-function readPaymentFacts(deps, safe, settlements) {
-	const offsets = Array.from({ length: Math.ceil(settlements.length / 50) }, (_, i) => i * 50);
-	return Effect.forEach(offsets, (offset) => chainRead(deps, "payment", {
-		safe: toAddress(safe),
-		limit: 50,
-		settlements: settlements.slice(offset, offset + 50)
-	}), { concurrency: 2 }).pipe(Effect.map((pages) => pages.some((page) => page === null) ? null : pages.flatMap((page) => page ?? [])));
-}
-function indexedPage(deps, scope, controls, params, state, first) {
-	return Effect.gen(function* () {
-		const range = boundedRange(params?.range, state.checkpoint);
-		const wantsTransfers = params?.filter?.kind !== "payment" && params?.filter?.status === void 0;
-		const found = yield* readTransfers(deps, scope.safe, range, state, wantsTransfers, first);
-		if (found === null) return yield* unavailablePage(deps, scope, controls, params, state, first);
-		const transfers = wantsTransfers ? found : [];
-		const page = yield* readPayments(deps, scope, controls, range, state, params?.filter?.kind !== "movement");
-		const decoration = yield* decoratePage(deps, scope, controls, transfers, page, range);
-		if (decoration === null) return yield* unavailablePage(deps, scope, controls, params, state, first);
-		const { items, next } = mergePage(scope.safe, params?.filter, params?.limit ?? 25, state, page, decoration, transfers, wantsTransfers);
-		const cursor = next.paymentDone && next.paymentPending.length === 0 && next.transferDone ? null : JSON.stringify(next);
-		if (cursor !== null && cursor === params?.cursor) return yield* Effect.fail({ publicError: Errors.invalidInput("cursor", "Activity source did not advance") });
-		yield* Effect.annotateCurrentSpan({ read_source: "indexer" });
-		return {
-			items,
-			nextCursor: cursor,
-			checkpoint: state.checkpoint,
-			observedAt: Date.now()
-		};
+};
+const accountLane = (input, config, session, send, isCurrent) => Effect.gen(function* () {
+	let step = "wallet";
+	const failAt = (at, failure) => send({
+		_tag: "AccountFailed",
+		step: at,
+		failure
+	}).pipe(Effect.andThen(Effect.fail(failure)));
+	yield* requireAccountAuthority(isCurrent, send, step);
+	step = "identity";
+	yield* send({
+		_tag: "AccountAt",
+		step: "identity"
 	});
-}
-//#endregion
-//#region ../../packages/sdk/src/activity/page-overlay.ts
-const MAX_OVERLAY_IDS = 200;
-function overlay(deps, actor, controls, input) {
-	const count = Math.max(input.references?.length ?? 0, input.settlementIds?.length ?? 0);
-	const offsets = Array.from({ length: Math.max(1, Math.ceil(count / MAX_OVERLAY_IDS)) }, (_, i) => i * MAX_OVERLAY_IDS);
-	return Effect.forEach(offsets, (offset) => callOperation(deps.convexCall, overlays.get, copyInvocationObservation(controls, {
-		...actor === void 0 ? {} : { actor },
-		...input.references === void 0 ? {} : { references: input.references.slice(offset, offset + MAX_OVERLAY_IDS) },
-		...input.settlementIds === void 0 ? {} : { settlementIds: input.settlementIds.slice(offset, offset + MAX_OVERLAY_IDS) }
-	})).pipe(Effect.mapError((publicError) => ({ publicError }))), { concurrency: 2 }).pipe(Effect.flatMap((pages) => {
-		const first = pages[0];
-		if (pages.some((page) => scopeKey(page) !== scopeKey(first))) return Effect.fail({ publicError: Errors.invalidInput("actor", "Activity scope changed during the read") });
-		return Effect.succeed({
-			...first,
-			links: pages.flatMap((page) => page.links),
-			annotations: pages.flatMap((page) => page.annotations),
-			payments: pages.flatMap((page) => page.payments)
-		});
-	}));
-}
-function decoratePage(deps, scope, controls, transfers, page, range) {
-	return Effect.gen(function* () {
-		const decoration = yield* overlay(deps, scope.actor, controls, {
-			references: [...page.pending.map((id) => ({
-				kind: "payment",
-				id
-			})), ...transfers.map((row) => ({
-				kind: "movement",
-				id: row.id
-			}))],
-			settlementIds: [...new Set(transfers.flatMap((row) => row.paymentSettlementId ? [row.paymentSettlementId] : []))]
-		});
-		if (scopeKey(decoration) !== scopeKey(scope)) return yield* Effect.fail({ publicError: Errors.invalidInput("actor", "Activity scope changed during the read") });
-		const byId = new Map([...page.items, ...decoration.payments].map((item) => [item.id, item]));
-		const settlements = [...new Set(decoration.links.map((link) => link.settlementId))];
-		const facts = yield* readPaymentFacts(deps, scope.safe, settlements);
-		if (facts === null) return null;
-		const bySettlement = new Map(facts.map((row) => [row.settlementId, row]));
-		const byPayment = new Map(decoration.links.map((link) => [link.paymentId, {
-			fact: bySettlement.get(link.settlementId),
-			expected: link.expected
-		}]));
-		const annotations = new Map(decoration.annotations.map((annotation) => [`${annotation.reference.kind}:${annotation.reference.id}`, annotation]));
-		return {
-			payments: page.pending.flatMap((id) => {
-				const item = byId.get(id);
-				if (item === void 0 || item.kind !== "payment" || item.createdAt > range.to || range.from !== void 0 && item.createdAt < range.from) return [];
-				const confirmed = withAnnotation(confirmPayment(item, byPayment.get(id)?.fact, byPayment.get(id)?.expected), annotations.get(`payment:${id}`));
-				return isActivityVisible(confirmed) ? [confirmed] : [];
-			}),
-			annotations,
-			linked: new Set(decoration.links.filter((link) => matchesPaymentFact(bySettlement.get(link.settlementId), link.expected)).map((link) => link.settlementId))
-		};
+	step = "provision";
+	yield* send({
+		_tag: "AccountAt",
+		step: "provision"
+	});
+	const existing = yield* Effect.result(accountCall("smart-account.load-by-auth-user-id", () => input.ports.smartAccount.loadByAuthUserId(toAuthUserId(session.authUserId)), isCurrent));
+	yield* requireAccountAuthority(isCurrent, send, step);
+	if (Result.isFailure(existing)) return yield* failAt("provision", existing.failure);
+	const provisioned = yield* Effect.result(existing.success === null ? accountCall("smart-account.provision", () => input.ports.smartAccount.provision({
+		authUserId: toAuthUserId(session.authUserId),
+		chainId: toChainId(input.chainId),
+		email: toEmail(session.email)
+	}), isCurrent) : Effect.succeed(existing.success));
+	yield* requireAccountAuthority(isCurrent, send, step);
+	if (Result.isFailure(provisioned)) return yield* failAt("provision", provisioned.failure);
+	const account = provisioned.success;
+	const address = String(account.smartAccountAddress);
+	yield* send({
+		_tag: "AccountDerived",
+		address
+	});
+	yield* requireAccountAuthority(isCurrent, send, step);
+	if (hasDurableClaim(account)) return yield* send({
+		_tag: "AccountClaimed",
+		address
+	});
+	if (config.requirement !== "deployed" || input.signer === void 0) return;
+	yield* requireAccountAuthority(isCurrent, send, step);
+	step = "deploy";
+	yield* send({ _tag: "AccountClaiming" });
+	const claimed = yield* Effect.result(claimAccount(input, session.authUserId, input.signer, isCurrent));
+	yield* requireAccountAuthority(isCurrent, send, step);
+	if (Result.isFailure(claimed)) return yield* failAt("deploy", claimed.failure);
+	return yield* send(hasDurableClaim(claimed.success) ? {
+		_tag: "AccountClaimed",
+		address: String(claimed.success.smartAccountAddress)
+	} : {
+		_tag: "AccountDerived",
+		address: String(claimed.success.smartAccountAddress)
 	});
+});
+//#endregion
+//#region ../../packages/sdk/src/access/identity/spec.ts
+const SETTLED_BY_TRANSITION_TAGS = /* @__PURE__ */ new Set([
+	"RestoreSession",
+	"ResumeOtpEntry",
+	"RestoreOtpEntry",
+	"Reset",
+	"SessionRestored",
+	"SessionAbsent",
+	"AttachOrganization",
+	"LeaveOrganization",
+	"ObserveOrganization"
+]);
+function isSettledByTransition(event) {
+	return SETTLED_BY_TRANSITION_TAGS.has(event._tag);
 }
-function mergePage(safe, filter, limit, state, page, decoration, transfers, wantsTransfers) {
-	const { payments, annotations, linked } = decoration;
-	let pi = 0;
-	let ti = 0;
-	const items = [];
-	const transferEnd = !wantsTransfers || transfers.length < 100;
-	let transferBefore = state.transferBefore;
-	while (items.length < limit) {
-		if (pi === payments.length && !page.done || ti === transfers.length && !transferEnd) break;
-		const payment = payments[pi];
-		const row = transfers[ti];
-		if (payment === void 0 && row === void 0) break;
-		if (payment !== void 0 && (row === void 0 || payment.createdAt >= Number(row.timestamp) * 1e3)) {
-			pi += 1;
-			if (matchesFilter(payment, filter)) items.push(payment);
-		} else if (row !== void 0) {
-			ti += 1;
-			transferBefore = {
-				timestamp: Number(row.timestamp),
-				id: row.id
-			};
-			if (row.paymentSettlementId && linked.has(row.paymentSettlementId)) continue;
-			const item = transferItem(safe, row, annotations.get(`movement:${row.id}`));
-			if (item !== null && matchesFilter(item, filter)) items.push(item);
+const identitySpec = (input, sessionStore, authority) => {
+	const config = {
+		...DEFAULT_CONFIG,
+		requirement: input.requirement,
+		hasSigner: input.signer !== void 0,
+		...input.otpTtlMs === void 0 ? {} : { otpTtlMs: input.otpTtlMs }
+	};
+	return {
+		machine: "identity",
+		initial: RESTORING,
+		label,
+		slot: identitySlot,
+		transition: (state, event) => transition(state, event, config),
+		recoverFailure: recoverIdentityFailure,
+		invalidates: (event) => event._tag === "Reset" ? [
+			IDENTITY_SLOT.auth,
+			IDENTITY_SLOT.session,
+			IDENTITY_SLOT.account,
+			IDENTITY_SLOT.org
+		] : event._tag === "SignOut" ? [
+			IDENTITY_SLOT.session,
+			IDENTITY_SLOT.account,
+			IDENTITY_SLOT.org
+		] : event._tag === "LeaveOrganization" || event._tag === "AttachOrganization" ? [IDENTITY_SLOT.org] : [],
+		work: ({ state, event }) => {
+			const activeSession = state.phase === "authenticated" ? state.session : null;
+			const org = state.phase === "authenticated" && state.account.at === "claimed" ? state.account.org : null;
+			if (isSettledByTransition(event)) return void 0;
+			switch (event._tag) {
+				case "RequestOtp": return {
+					slot: IDENTITY_SLOT.auth,
+					port: "auth-client",
+					run: (send, controls) => call$1("auth-client.send-otp", input.ports.authClient.sendOtp(copyInvocationObservation(controls, { email: toEmail(event.email) }))).pipe(Effect.andThen(call$1("clock.now", input.ports.clock.now)), Effect.flatMap((at) => send({
+						_tag: "OtpSent",
+						at
+					})), Effect.tapError((failure) => send({
+						_tag: "OtpFailed",
+						failure
+					})))
+				};
+				case "VerifyOtp": return {
+					slot: IDENTITY_SLOT.auth,
+					port: "auth-client",
+					run: (send, controls) => call$1("auth-client.verify-otp", input.ports.authClient.verifyOtp(copyInvocationObservation(controls, {
+						email: toEmail(event.email),
+						otp: event.otp
+					}))).pipe(Effect.tap((session) => Effect.sync(() => {
+						authority.recordProviderSession(session);
+					})), Effect.flatMap((session) => sessionProfile(input, session).pipe(Effect.flatMap((loaded) => send({
+						_tag: "Verified",
+						session: loaded.session ?? modelSession(session),
+						profileComplete: loaded.profileComplete
+					})))), Effect.tapError((failure) => send({
+						_tag: "VerifyFailed",
+						failure
+					})))
+				};
+				case "ReadSession": return {
+					slot: IDENTITY_SLOT.session,
+					port: "auth-client",
+					run: (send, controls) => call$1("auth-client.get-session", input.ports.authClient.getSession(copyInvocationObservation(controls, {}))).pipe(Effect.tap((session) => Effect.sync(() => {
+						authority.recordProviderSession(session, activeSession?.authUserId);
+					})), Effect.flatMap((session) => sessionProfile(input, session)), Effect.flatMap((loaded) => send({
+						_tag: "SessionRead",
+						...loaded
+					})), Effect.tapError((failure) => Effect.sync(() => {
+						authority.recordProviderSession(null, failure.code === "NOT_AUTHENTICATED" ? activeSession?.authUserId : void 0);
+					}).pipe(Effect.andThen(activeSession !== null && failure.code === "NOT_AUTHENTICATED" ? Effect.void : send({
+						_tag: "SessionReadFailed",
+						failure
+					})))))
+				};
+				case "SignOut": return {
+					slot: IDENTITY_SLOT.auth,
+					port: "auth-client",
+					run: (send, controls) => call$1("auth-client.sign-out", input.ports.authClient.signOut(copyInvocationObservation(controls, {}))).pipe(Effect.andThen(send({ _tag: "SignedOut" })), Effect.tapError((failure) => send({
+						_tag: "SignOutFailed",
+						failure
+					})), Effect.ensuring(Effect.sync(() => {
+						authority.recordProviderSession(null);
+					})))
+				};
+				case "EnsureAccount":
+				case "RetryAccount": return activeSession === null ? void 0 : {
+					slot: IDENTITY_SLOT.account,
+					port: "smart-account",
+					run: (send) => {
+						const captured = authority.snapshot();
+						return accountLane(input, config, activeSession, send, () => authority.matches(captured, activeSession.authUserId));
+					}
+				};
+				case "ClaimAccount": {
+					const signer = input.signer;
+					const address = state.phase === "authenticated" && state.account.at === "claiming" ? state.account.address : null;
+					return address === null || activeSession === null || signer === void 0 ? void 0 : {
+						slot: IDENTITY_SLOT.account,
+						port: "smart-account",
+						run: (send) => {
+							const captured = authority.snapshot();
+							const isCurrent = () => authority.matches(captured, activeSession.authUserId);
+							return Effect.gen(function* () {
+								const claimed = yield* Effect.result(claimAccount(input, activeSession.authUserId, signer, isCurrent));
+								yield* requireAccountAuthority(isCurrent, send, "deploy");
+								yield* Result.isFailure(claimed) ? send({
+									_tag: "AccountFailed",
+									step: "deploy",
+									failure: claimed.failure
+								}).pipe(Effect.andThen(Effect.fail(claimed.failure))) : send(hasDurableClaim(claimed.success) ? {
+									_tag: "AccountClaimed",
+									address
+								} : {
+									_tag: "AccountDerived",
+									address
+								});
+							});
+						}
+					};
+				}
+				case "CreateOrganization": return input.organizationSetup === void 0 || org === null || org.orgId !== null ? void 0 : {
+					slot: IDENTITY_SLOT.org,
+					port: "organization-setup",
+					run: (send, controls) => beginOrganization$1(input.organizationSetup, event.draft, send, controls)
+				};
+				default: return absurd(event);
+			}
 		}
-	}
+	};
+};
+//#endregion
+//#region ../../packages/sdk/src/access/identity/authority.ts
+function createIdentityAuthorityTracker(sessionStore, onGenerationChange = () => void 0) {
+	const invalidationListeners = /* @__PURE__ */ new Set();
+	let generation = 0;
+	let authUserId = null;
+	let stopped = false;
+	let readState = initialIdentityState;
+	const advanceGeneration = () => {
+		generation += 1;
+		authUserId = null;
+		const listeners = [...invalidationListeners];
+		for (const listener of listeners) try {
+			listener();
+		} catch {}
+		try {
+			onGenerationChange();
+		} catch {}
+	};
+	const revoke = () => {
+		if (stopped) return;
+		advanceGeneration();
+		authUserId = null;
+	};
 	return {
-		items,
-		next: {
-			...state,
-			paymentCursor: page.cursor,
-			paymentDone: page.done,
-			paymentPending: payments.slice(pi).map((item) => item.id),
-			transferBefore,
-			transferDone: ti === transfers.length && transferEnd
+		snapshot: () => ({
+			generation,
+			authUserId
+		}),
+		subscribeInvalidation: (listener) => {
+			if (stopped) {
+				try {
+					listener();
+				} catch {}
+				return () => {};
+			}
+			invalidationListeners.add(listener);
+			return () => {
+				invalidationListeners.delete(listener);
+			};
+		},
+		bindState: (read) => {
+			readState = read;
+		},
+		recordProviderSession: (session, previousAuthUserId) => {
+			if (previousAuthUserId != null && String(session?.authUserId ?? "") !== previousAuthUserId) revoke();
+			sessionStore.current = session;
+		},
+		observe: (state) => {
+			if (stopped) return;
+			const next = state.phase === "authenticated" ? state.session.authUserId : null;
+			if (authUserId !== null && next !== authUserId) advanceGeneration();
+			authUserId = next;
+		},
+		invalidate: () => {
+			if (stopped) return;
+			stopped = true;
+			advanceGeneration();
+			invalidationListeners.clear();
+			authUserId = null;
+		},
+		matches: (captured, expectedAuthUserId) => {
+			if (stopped || generation !== captured.generation || authUserId !== expectedAuthUserId) return false;
+			const state = readState();
+			if (expectedAuthUserId === null) return state.phase !== "authenticated" && sessionStore.current === null;
+			return state.phase === "authenticated" && state.session.authUserId === expectedAuthUserId && String(sessionStore.current?.authUserId ?? "") === expectedAuthUserId;
 		}
 	};
 }
-function convexPage(deps, actor, controls, input) {
-	return callOperation(deps.convexCall, items.list, copyInvocationObservation(controls, {
-		...input,
-		actor
-	})).pipe(Effect.mapError((publicError) => ({ publicError })));
-}
-function fallbackPage(deps, scope, controls, params, state, degraded) {
-	return Effect.gen(function* () {
-		const page = yield* convexPage(deps, scope.actor, controls, {
-			limit: params?.limit ?? 25,
-			...state.paymentCursor === null ? {} : { cursor: state.paymentCursor },
-			range: {
-				...params?.range?.from === void 0 ? {} : { from: params.range.from },
-				to: Math.min(state.checkpoint, params?.range?.to ?? state.checkpoint)
-			},
-			...params?.filter === void 0 ? {} : { filter: params.filter }
-		});
-		const decoration = yield* overlay(deps, scope.actor, controls, { references: page.items.map((item) => ({
-			kind: item.kind,
-			id: item.id
-		})) });
-		if (scopeKey(decoration) !== scopeKey(scope)) return yield* Effect.fail({ publicError: Errors.invalidInput("actor", "Activity scope changed during fallback") });
-		const annotations = new Map(decoration.annotations.map((annotation) => [`${annotation.reference.kind}:${annotation.reference.id}`, annotation]));
-		yield* Effect.annotateCurrentSpan({
-			read_source: "convex",
-			...degraded ? { read_warning: "indexer-unavailable" } : {}
-		});
-		return {
-			...page,
-			items: page.items.filter(isActivityVisible).map((item) => withAnnotation(item, annotations.get(`${item.kind}:${item.id}`))),
-			checkpoint: state.checkpoint,
-			nextCursor: page.nextCursor === null ? null : JSON.stringify({
-				...state,
-				source: "fallback",
-				paymentCursor: page.nextCursor,
-				degraded
-			}),
-			...degraded ? { readWarning: "indexer-unavailable" } : {}
-		};
-	});
-}
-function readActivityPage(deps, actor, controls, params) {
-	return Effect.gen(function* () {
-		yield* Effect.try({
-			try: () => requireParams(params),
-			catch: (cause) => ({ publicError: asCapxulError(cause) })
-		});
-		const scope = yield* overlay(deps, actor, controls, {});
-		const selection = selectionKey(params);
-		const cursor = yield* Effect.try({
-			try: () => parseCursor(params?.cursor, scopeKey(scope), selection),
-			catch: () => ({ publicError: Errors.invalidInput("cursor", "invalid or obsolete Activity cursor; restart the read") })
-		});
-		const state = cursor ?? {
-			version: 1,
-			scope: scopeKey(scope),
-			selection,
-			checkpoint: Date.now(),
-			source: "indexed",
-			paymentCursor: null,
-			paymentDone: false,
-			paymentPending: [],
-			transferBefore: null,
-			transferDone: false,
-			degraded: false
+//#endregion
+//#region ../../packages/sdk/src/platform/actor/transitions.ts
+/**
+* Who hears an actor: the boot observer, transition and state subscribers, and
+* the defect reporter. An observer that throws is dropped and reported as a
+* defect; it never owns actor truth.
+*/
+const makeActorObservers = (options) => {
+	const stateObservers = /* @__PURE__ */ new Set();
+	const transitionObservers = /* @__PURE__ */ new Set();
+	let bootTransitionObserver = options.onTransition;
+	const defect = (cause) => {
+		try {
+			options.onDefect?.(cause);
+		} catch {}
+	};
+	const emit = (record) => Effect.sync(() => {
+		if (bootTransitionObserver !== void 0) try {
+			bootTransitionObserver(record);
+		} catch (cause) {
+			bootTransitionObserver = void 0;
+			defect(cause);
+		}
+		for (const observer of transitionObservers) try {
+			observer(record);
+		} catch (cause) {
+			transitionObservers.delete(observer);
+			defect(cause);
+		}
+	}).pipe(Effect.andThen(logIdentityTransition(record)));
+	const notify = (state) => {
+		for (const observer of stateObservers) try {
+			observer(state);
+		} catch (cause) {
+			stateObservers.delete(observer);
+			defect(cause);
+		}
+	};
+	return {
+		stateObservers,
+		transitionObservers,
+		defect,
+		emit,
+		notify
+	};
+};
+/** One machine's transition records and the failure a refused or failed reply carries. */
+const makeTransitionRecords = (spec, slotEpochs) => {
+	const makeFailure = (state, event, reason, details, cause) => new ActorFailure(reason, spec.machine, spec.label(state), event._tag, details, cause);
+	const nonApplied = (state, event, reason, outcome, env, failure) => {
+		const slot = env.origin === null ? spec.slot(env.event) : env.origin.slot;
+		const base = {
+			machine: spec.machine,
+			state: spec.label(state),
+			event: event._tag,
+			slot,
+			epoch: env.origin?.epoch ?? slotEpochs.get(slot) ?? 0,
+			duration_ms: duration(env.startedAt),
+			...withCarriage(env.invocation)
 		};
-		const range = boundedRange(params?.range, state.checkpoint);
-		if (range.from !== void 0 && range.from > range.to) return {
-			items: [],
-			nextCursor: null,
-			checkpoint: state.checkpoint,
-			observedAt: Date.now()
+		const record = outcome === "refused" ? {
+			...base,
+			outcome,
+			refusal_code: reason
+		} : {
+			...base,
+			outcome,
+			error_code: reason,
+			...failure === void 0 ? {} : { failure }
 		};
-		if (state.source === "fallback" || scope.safe === null) return yield* fallbackPage(deps, scope, controls, params, state, state.degraded);
-		return yield* indexedPage(deps, scope, controls, params, state, cursor === null);
+		return copyInvocationObservation(env.invocation, record);
+	};
+	const applied = (from, to, event, slot, epoch, env) => copyInvocationObservation(env.invocation, {
+		machine: spec.machine,
+		from: spec.label(from),
+		event: event._tag,
+		to: spec.label(to),
+		slot,
+		epoch,
+		outcome: "applied",
+		duration_ms: duration(env.startedAt),
+		...withCarriage(env.invocation)
 	});
-}
-function readActivitySummary(deps, actor, controls, params) {
-	return Effect.gen(function* () {
-		const totals = /* @__PURE__ */ new Map();
-		let cursor;
-		let count = 0;
-		let readWarning;
-		do {
-			const page = yield* readActivityPage(deps, actor, controls, {
-				limit: 100,
-				...cursor === void 0 ? {} : { cursor },
-				...params?.window === void 0 ? {} : { range: params.window }
+	return {
+		makeFailure,
+		nonApplied,
+		applied
+	};
+};
+//#endregion
+//#region ../../packages/sdk/src/platform/actor/lane-exit.ts
+/**
+* How a work lane's exit settles its reply: finished, failed, cancelled, or
+* died. A timeout, cancellation or death first lets the machine recover its
+* own state through `spec.recoverFailure`.
+*/
+const makeLaneSettlement = (actor) => {
+	const { spec, cell, slots } = actor;
+	const { emit, notify, defect } = actor.observers;
+	const { makeFailure, nonApplied, applied } = actor.records;
+	const finish = (cursor, state) => {
+		const held = slots.get(cursor.slot);
+		if (held === void 0 || held.cursor !== cursor) return Effect.void;
+		slots.delete(cursor.slot);
+		return Effect.asVoid(Deferred.succeed(held.reply, state));
+	};
+	const recoverFailure = (state, cursor, failure) => {
+		const event = spec.recoverFailure?.(state, cursor.event, failure);
+		if (event === void 0) return Effect.succeed(state);
+		const outcome = spec.transition(state, event);
+		if ("refused" in outcome) return Effect.succeed(state);
+		return Ref.set(cell, outcome.next).pipe(Effect.tap(() => {
+			const record = applied(state, outcome.next, event, cursor.slot, cursor.epoch, {
+				invocation: cursor.invocation,
+				startedAt: cursor.startedAt
 			});
-			count += page.items.length;
-			readWarning ??= page.readWarning;
-			for (const total of summarizeItems(page.items)) {
-				const key = total.asset;
-				const old = totals.get(key);
-				totals.set(key, old === void 0 ? total : {
-					...total,
-					in: String(BigInt(old.in) + BigInt(total.in)),
-					out: String(BigInt(old.out) + BigInt(total.out)),
-					net: String(BigInt(old.net) + BigInt(total.net)),
-					pendingIn: String(BigInt(old.pendingIn) + BigInt(total.pendingIn))
-				});
-			}
-			cursor = page.nextCursor ?? void 0;
-		} while (cursor !== void 0);
-		return {
-			window: {
-				from: params?.window?.from ?? null,
-				to: params?.window?.to ?? null
-			},
-			totals: [...totals.values()],
-			count,
-			observedAt: Date.now(),
-			...readWarning === void 0 ? {} : { readWarning }
-		};
-	});
-}
-function subscribeActivity(deps, actor, controls, onChange) {
-	return Effect.gen(function* () {
-		const scope = yield* overlay(deps, actor, controls, {});
-		if (scope.safe === null) return () => {};
-		let delivered = false;
-		return yield* deps.indexer.subscribe("transfer", {
-			safe: toAddress(scope.safe),
-			limit: 100
-		}, (snapshot) => {
-			if (snapshot.status === "ok") {
-				if (delivered) onChange();
-				delivered = true;
-			}
-			if (snapshot.status === "error") {
-				delivered = true;
-				onChange();
-			}
-		});
+			return emit(record).pipe(Effect.andThen(Effect.sync(() => {
+				notify(outcome.next);
+			})));
+		}), Effect.as(outcome.next));
+	};
+	return (env, origin, exit, state) => Effect.gen(function* () {
+		const held = slots.get(origin.slot);
+		if (held === void 0 || held.cursor !== origin) return;
+		if (exit.defect !== void 0) {
+			slots.delete(origin.slot);
+			defect(exit.defect);
+			const event = { _tag: origin.event };
+			const died = {
+				code: "WORK_DIED",
+				message: exit.defect instanceof Error ? exit.defect.message : "Identity work died"
+			};
+			const failedState = yield* recoverFailure(state, origin, died);
+			yield* emit(nonApplied(failedState, event, "WORK_DIED", "failed", env, died));
+			yield* failReply(held.reply, makeFailure(failedState, event, "WORK_DIED", void 0, died));
+			return;
+		}
+		if (exit.failure !== void 0) {
+			slots.delete(origin.slot);
+			const outcome = exit.failure.code === "CANCELLED" ? "cancelled" : "failed";
+			const event = { _tag: origin.event };
+			const failedState = exit.failure === timeoutFailure || exit.failure === cancelledFailure ? yield* recoverFailure(state, origin, exit.failure) : state;
+			yield* emit(nonApplied(failedState, event, exit.failure.code, outcome, env, exit.failure));
+			const details = exit.failure === timeoutFailure ? { reason: "timeout" } : refusedInputField(exit.failure);
+			yield* failReply(held.reply, makeFailure(failedState, event, exit.failure.code, details, exit.failure.error ?? exit.failure));
+			return;
+		}
+		yield* finish(origin, state);
 	});
-}
+};
 //#endregion
-//#region ../../packages/sdk/src/activity/movement-detail.ts
-/** An indexed Movement has no Convex materialization. Read its exact native row. */
-function readIndexedMovement(deps, actor, controls, eventId) {
-	return Effect.gen(function* () {
-		const scope = yield* overlay(deps, actor, controls, { references: [{
-			kind: "movement",
-			id: eventId
-		}] });
-		if (scope.safe === null) return null;
-		const safe = scope.safe.toLowerCase();
-		const row = (yield* deps.indexer.read("transfer", {
-			safe: toAddress(safe),
-			limit: 1,
-			eventId
-		}).pipe(Effect.mapError((error) => ({ publicError: error.publicError }))))[0];
-		if (row === void 0) return null;
-		const blockNumber = Number(row.blockNumber);
-		if (row.id !== eventId || row.from.toLowerCase() !== safe && row.to.toLowerCase() !== safe || !Number.isSafeInteger(blockNumber) || blockNumber < 0 || !Number.isSafeInteger(row.logIndex) || row.logIndex < 0) return yield* Effect.fail({ publicError: Errors.invalidInput("activity", "indexed Movement does not match the requested scope or evidence") });
-		yield* Effect.annotateCurrentSpan({ read_source: "indexer" });
-		const documentSet = scope.movementDocuments.find((set) => set.movementId === row.id);
-		return {
-			kind: "movement",
-			movementId: row.id,
-			documents: documentSet?.documents ?? [],
-			documentState: documentSet?.state ?? "pending",
-			viewer: scope.actor,
-			annotation: scope.annotations.find((annotation) => annotation.reference.kind === "movement" && annotation.reference.id === row.id) ?? null,
-			evidence: {
-				chainId: row.chainId,
-				contractAddress: row.token,
-				tokenAddress: row.token,
-				transactionHash: row.txHash,
-				blockNumber,
-				blockHash: row.blockHash,
-				inclusion: "included",
-				verification: "verified",
-				canonicalState: "finalized",
-				transferLogIndex: row.logIndex,
-				source: row.from,
-				destination: row.to,
-				rawAmount: row.amount.toString(),
-				link: {
-					movementId: row.id,
-					depositPaymentId: null
-				}
-			}
+//#region ../../packages/sdk/src/platform/actor/shell.ts
+const boot = (spec, options = {}) => Effect.gen(function* () {
+	const mailbox = yield* Queue.unbounded();
+	const cell = yield* Ref.make(spec.initial);
+	const slotEpochs = /* @__PURE__ */ new Map();
+	const slots = /* @__PURE__ */ new Map();
+	const { stateObservers, transitionObservers, defect, emit, notify } = makeActorObservers(options);
+	const { makeFailure, nonApplied, applied } = makeTransitionRecords(spec, slotEpochs);
+	let stopped = false;
+	const settleLaneExit = makeLaneSettlement({
+		spec,
+		cell,
+		slots,
+		observers: {
+			emit,
+			notify,
+			defect
+		},
+		records: {
+			makeFailure,
+			nonApplied,
+			applied
+		}
+	});
+	const step = (env) => Effect.gen(function* () {
+		const state = yield* Ref.get(cell);
+		if (env.origin !== null && (slotEpochs.get(env.origin.slot) ?? 0) !== env.origin.epoch) {
+			const held = slots.get(env.origin.slot);
+			if (held === void 0 || held.cursor !== env.origin) return;
+			slots.delete(env.origin.slot);
+			const event = { _tag: env.origin.event };
+			yield* emit(nonApplied(state, event, "STALE_EPOCH", "refused", env));
+			yield* failReply(held.reply, makeFailure(state, event, "STALE_EPOCH"));
+			return;
+		}
+		if (isLaneExitEnvelope(env)) {
+			yield* settleLaneExit(env, env.origin, env.event, state);
+			return;
+		}
+		const outcome = spec.transition(state, env.event);
+		if ("refused" in outcome) {
+			yield* emit(nonApplied(state, env.event, outcome.refused, "refused", env));
+			yield* failReply(env.reply, makeFailure(state, env.event, outcome.refused));
+			return;
+		}
+		const next = outcome.next;
+		yield* Ref.set(cell, next);
+		const emitApplied = (slot, epoch) => emit(applied(state, next, env.event, slot, epoch, env));
+		if (env.origin !== null) {
+			yield* emitApplied(env.origin.slot, env.origin.epoch);
+			notify(next);
+			return;
+		}
+		for (const slot of spec.invalidates?.(env.event) ?? []) {
+			if (!slots.has(slot)) continue;
+			slotEpochs.set(slot, (slotEpochs.get(slot) ?? 0) + 1);
+		}
+		const work = env.reply === null ? void 0 : spec.work?.({
+			state: next,
+			event: env.event
+		});
+		if (work === void 0 || env.reply === null) {
+			const slot = spec.slot(env.event);
+			yield* emitApplied(slot, slotEpochs.get(slot) ?? 0);
+			notify(next);
+			if (env.reply !== null) yield* Deferred.succeed(env.reply, next).pipe(Effect.asVoid);
+			return;
+		}
+		const previous = slots.get(work.slot);
+		if (previous !== void 0) {
+			slots.delete(work.slot);
+			yield* Fiber.interrupt(previous.fiber);
+			const previousEvent = { _tag: previous.cursor.event };
+			const reason = previous.cursor.epoch === (slotEpochs.get(work.slot) ?? 0) ? "SUPERSEDED" : "STALE_EPOCH";
+			yield* emit(nonApplied(next, previousEvent, reason, "refused", {
+				origin: previous.cursor,
+				invocation: previous.cursor.invocation,
+				startedAt: previous.cursor.startedAt
+			}));
+			yield* failReply(previous.reply, makeFailure(next, previousEvent, reason));
+		}
+		const epoch = (slotEpochs.get(work.slot) ?? 0) + 1;
+		slotEpochs.set(work.slot, epoch);
+		const cursor = {
+			slot: work.slot,
+			epoch,
+			event: env.event._tag,
+			startedAt: env.startedAt,
+			invocation: env.invocation
 		};
+		yield* emitApplied(work.slot, epoch);
+		notify(next);
+		const send = (event) => Queue.offer(mailbox, {
+			event,
+			reply: null,
+			origin: cursor,
+			invocation: env.invocation,
+			startedAt: env.startedAt
+		}).pipe(Effect.asVoid);
+		const complete = (event) => Queue.offer(mailbox, {
+			event,
+			reply: null,
+			origin: cursor,
+			invocation: env.invocation,
+			startedAt: env.startedAt
+		}).pipe(Effect.asVoid);
+		const guarded = Effect.gen(function* () {
+			yield* Effect.annotateCurrentSpan({
+				slot: work.slot,
+				epoch,
+				port: work.port
+			});
+			return yield* control(work.run(send, env.invocation), env.invocation);
+		}).pipe(Effect.withSpan(`identity.work.${work.slot}`)).pipe(Effect.matchEffect({
+			onFailure: (failure) => complete(laneExit({ failure })),
+			onSuccess: () => complete(laneExit({}))
+		}), Effect.catchDefect((cause) => complete(laneExit({ defect: cause }))));
+		const fiber = yield* Effect.forkChild(guarded, { startImmediately: true });
+		slots.set(work.slot, {
+			fiber,
+			reply: env.reply,
+			cursor
+		});
 	});
-}
-//#endregion
-//#region ../../packages/sdk/src/activity/scope.ts
-/**
-* The activity backend gives its actor a different name than the other
-* financialOps functions: `{kind: "organization", orgId}`, and not
-* `{kind: "org", orgId}`. Thus it does not use `actorReferenceToBackend`.
-*
-* The `personal` case sends NO actor. This is correct, and it does not lose
-* data. `requireActivityActor` uses the signed-in Account when the actor is
-* absent, and `canReadActor` refuses all other account identifiers
-* (`packages/backend/convex/movement/activityAuth.ts`). Thus "personal" and
-* "absent" both name the one Account that an SDK caller can read. The SDK does
-* not hold an account identifier to send.
-*
-* The `switch` is exhaustive. A new `ActorReference` variant is a compile error
-* here. The conditional expression that this function replaced removed each
-* value that was not an organization.
-*/
-function activityActorField(actor) {
-	if (actor === void 0 || actor.kind === "personal") return {};
-	return { actor: {
-		kind: "organization",
-		orgId: actor.organizationId
-	} };
-}
-/** Capture scope now; let the observed result boundary handle a malformed caller value. */
-function captureActivityInput(prepare) {
-	try {
-		return prepare();
-	} catch (cause) {
-		return Effect.die(cause);
-	}
-}
-function observeActivityScope(actor) {
-	const organizationId = actor?.kind === "organization" || actor?.kind === "org" ? safeEngineeringIdentifier(actor.orgId) : void 0;
-	return Effect.annotateCurrentSpan({
-		scope_kind: actor?.kind === "organization" || actor?.kind === "org" ? "organization" : "account",
-		...organizationId === void 0 ? {} : { verified_organization_id: organizationId }
-	});
-}
-function decodeActivityViewer(value) {
-	const viewer = Option.getOrUndefined(Schema.decodeUnknownOption(ActorRefSchema)(value));
-	if (viewer === void 0) return void 0;
-	const id = viewer.kind === "organization" ? viewer.orgId : viewer.accountId;
-	return safeEngineeringIdentifier(id) === void 0 ? void 0 : viewer;
-}
-/** The detail without the scope it was read for, which the SDK reports as telemetry instead. */
-function normalizeActivityDetail(response) {
-	if (response === null) return null;
-	const { viewer: _viewer, ...detail } = response;
-	return detail;
-}
-//#endregion
-//#region ../../packages/sdk/src/activity/methods.ts
-function makeActivityMethods(deps) {
-	const indexerDeps = deps.indexerRead === void 0 ? void 0 : {
-		indexer: deps.indexerRead,
-		convexCall: deps.convexCall
-	};
-	/** One public call for the caller's chosen actor, read once at call start. */
-	const forActor = (actorRef, options, operation, program) => {
-		const controls = deps.invocationControls?.(options) ?? options;
-		return runPortEffect(captureActivityInput(() => Effect.succeed(activityActorField(actorRef).actor)).pipe(Effect.flatMap((actor) => program(actor, controls))), controls, operation, deps.runPromise);
+	const loop = yield* Effect.forkScoped(Effect.forever(Queue.take(mailbox).pipe(Effect.flatMap((env) => withInvocationParentSpan(step(env), env.invocation)))));
+	yield* Effect.addFinalizer(() => Effect.gen(function* () {
+		stopped = true;
+		yield* Fiber.interrupt(loop);
+		const state = yield* Ref.get(cell);
+		const outstanding = [...slots.values()];
+		slots.clear();
+		for (const held of outstanding) {
+			yield* Fiber.interrupt(held.fiber);
+			const env = {
+				origin: held.cursor,
+				invocation: held.cursor.invocation,
+				startedAt: held.cursor.startedAt
+			};
+			const event = { _tag: held.cursor.event };
+			yield* emit(nonApplied(state, event, "ACTOR_STOPPED", "refused", env));
+			yield* failReply(held.reply, makeFailure(state, event, "ACTOR_STOPPED"));
+		}
+		stateObservers.clear();
+		transitionObservers.clear();
+		yield* Queue.shutdown(mailbox);
+	}));
+	const offer = (event, reply, invocation) => {
+		const state = Ref.getUnsafe(cell);
+		if (stopped) return withInvocationParentSpan(emit(nonApplied(state, event, "ACTOR_STOPPED", "refused", {
+			origin: null,
+			event,
+			invocation,
+			startedAt: Date.now()
+		})).pipe(Effect.andThen(Effect.fail(makeFailure(state, event, "ACTOR_STOPPED")))), invocation);
+		const startedAt = Date.now();
+		return Queue.offer(mailbox, {
+			event,
+			reply,
+			origin: null,
+			invocation,
+			startedAt
+		}).pipe(Effect.asVoid);
 	};
 	return {
-		subscribe: (onChange, params, options) => forActor(params?.actor, options, CAPXUL_OPERATIONS.activity.subscribe, (actor, controls) => indexerDeps === void 0 ? Effect.succeed(() => {}) : Effect.suspend(() => subscribeActivity(indexerDeps, actor, controls, onChange)).pipe(Effect.tap(() => observeActivityScope(actor)))),
-		list: (params, options) => forActor(params?.actor, options, items.list.name, (actor, controls) => Effect.suspend(() => indexerDeps === void 0 ? callOperation(deps.convexCall, items.list, copyInvocationObservation(controls, {
-			...actor === void 0 ? {} : { actor },
-			...params?.cursor === void 0 ? {} : { cursor: params.cursor },
-			...params?.limit === void 0 ? {} : { limit: params.limit },
-			...params?.range === void 0 ? {} : { range: params.range },
-			...params?.filter === void 0 ? {} : { filter: params.filter }
-		})).pipe(Effect.mapError((publicError) => ({ publicError }))) : readActivityPage(indexerDeps, actor, controls, params)).pipe(Effect.map((page) => ({
-			...page,
-			items: page.items.filter(isActivityVisible)
-		})), Effect.tap(() => observeActivityScope(actor)))),
-		summary: (params, options) => forActor(params?.actor, options, items.summary.name, (actor, controls) => Effect.suspend(() => indexerDeps === void 0 ? callOperation(deps.convexCall, items.summary, copyInvocationObservation(controls, {
-			...actor === void 0 ? {} : { actor },
-			...params?.window === void 0 ? {} : { window: params.window }
-		})).pipe(Effect.mapError((publicError) => ({ publicError }))) : readActivitySummary(indexerDeps, actor, controls, params)).pipe(Effect.tap(() => observeActivityScope(actor)))),
-		get: (reference, options) => {
-			const controls = deps.invocationControls?.(options) ?? options;
-			const requestedActor = actorReferenceToBackend(options?.actor);
-			return runPortEffect(captureActivityInput(() => {
-				const scope = requestedActor === void 0 ? void 0 : requestedActor.kind === "org" ? {
-					kind: "org",
-					orgId: requestedActor.orgId
-				} : { kind: "account" };
-				return Effect.succeed({
-					actor: scope,
-					referenceActor: reference.kind === "payment" ? activityActorField(reference.actor).actor : void 0
-				});
-			}).pipe(Effect.flatMap(({ actor, referenceActor }) => Effect.suspend(() => indexerDeps !== void 0 && reference.kind === "movement" && /^[1-9][0-9]{0,9}:0x[0-9a-f]{64}:[0-9]{1,10}$/.test(reference.id) ? readIndexedMovement(indexerDeps, actor?.kind === "org" ? {
-				kind: "organization",
-				orgId: actor.orgId
-			} : void 0, controls, reference.id) : callOperation(deps.convexCall, items.get, copyInvocationObservation(controls, {
-				reference: {
-					kind: reference.kind,
-					id: reference.id,
-					...referenceActor === void 0 ? {} : { actor: referenceActor }
-				},
-				...actor === void 0 ? {} : { actor }
-			})).pipe(Effect.mapError((publicError) => ({ publicError })))).pipe(Effect.flatMap((response) => {
-				const detail = normalizeActivityDetail(response);
-				if (response === null) return Effect.succeed(detail);
-				const viewer = response.viewer === void 0 ? actor ?? referenceActor : decodeActivityViewer(response.viewer);
-				return viewer === void 0 ? Effect.succeed(detail) : observeActivityScope(viewer).pipe(Effect.as(detail));
-			})))), controls, items.get.name, deps.runPromise);
+		ask: (event, invocation = {}) => Effect.gen(function* () {
+			const reply = yield* Deferred.make();
+			yield* offer(event, reply, invocation);
+			return yield* Deferred.await(reply);
+		}),
+		tell: (event, invocation = {}) => offer(event, null, invocation),
+		snapshot: () => Ref.getUnsafe(cell),
+		subscribe: (observer) => {
+			stateObservers.add(observer);
+			return () => {
+				stateObservers.delete(observer);
+			};
 		},
-		annotate: (input, options) => {
-			const controls = deps.invocationControls?.(options) ?? options;
-			return runPortEffect(captureActivityInput(() => {
-				const actor = activityActorField(input.actor).actor;
-				if (input.actor !== void 0 && input.reference.kind === "payment" && input.reference.actor !== void 0 && !sameActor(input.actor, input.reference.actor)) return Effect.fail({ publicError: Errors.invalidInput("reference.actor", "must match the annotation actor") });
-				return Effect.succeed({
-					actor,
-					referenceActor: input.reference.kind === "payment" ? activityActorField(input.reference.actor).actor : void 0
-				});
-			}).pipe(Effect.flatMap(({ actor, referenceActor }) => Effect.suspend(() => callOperation(deps.convexCall, annotations.save, copyInvocationObservation(controls, {
-				...actor === void 0 ? {} : { actor },
-				reference: input.reference.kind === "payment" && referenceActor !== void 0 ? {
-					kind: "payment",
-					id: input.reference.id,
-					actor: referenceActor
-				} : {
-					kind: input.reference.kind,
-					id: input.reference.id
-				},
-				...input.counterpartyLabel === void 0 ? {} : { counterpartyLabel: input.counterpartyLabel },
-				...input.accountingCategory === void 0 ? {} : { accountingCategory: input.accountingCategory },
-				...input.memo === void 0 ? {} : { memo: input.memo }
-			})).pipe(Effect.mapError((publicError) => ({ publicError })))).pipe(Effect.tap((annotation) => {
-				const scope = decodeActivityViewer(annotation.actor);
-				return scope === void 0 ? Effect.void : observeActivityScope(scope);
-			})))), controls, annotations.save.name, deps.runPromise);
+		subscribeTransitions: (observer) => {
+			transitionObservers.add(observer);
+			return () => {
+				transitionObservers.delete(observer);
+			};
 		}
 	};
-}
-Object.freeze({
-	terminal: false,
-	outcome: null,
-	needsAction: false
 });
-Object.freeze({
-	terminal: false,
-	outcome: null,
-	needsAction: true
-});
-Object.freeze({
-	terminal: true,
-	outcome: "good",
-	needsAction: false
+//#endregion
+//#region ../../packages/sdk/src/access/identity/boot.ts
+const initialIdentityState = () => RESTORING;
+const bootIdentityFlow = (input, options = {}) => Effect.gen(function* () {
+	const sessionStore = { current: null };
+	let invalidateOrganizationSubscriptions = () => input.organizationSetup?.invalidateSubscriptions?.();
+	const authority = createIdentityAuthorityTracker(sessionStore, () => invalidateOrganizationSubscriptions());
+	const actor = yield* boot(identitySpec(input, sessionStore, authority), options);
+	authority.bindState(actor.snapshot);
+	const runPromise = input.runPromise ?? Effect.runPromise;
+	let selectedOrgId = null;
+	let stopRemote = null;
+	let selectionEpoch = 0;
+	invalidateOrganizationSubscriptions = () => {
+		selectionEpoch += 1;
+		const stop = stopRemote;
+		stopRemote = null;
+		try {
+			stop?.();
+		} finally {
+			input.organizationSetup?.invalidateSubscriptions?.();
+		}
+	};
+	const observe = (state) => {
+		authority.observe(state);
+		const nextOrgId = state.phase === "authenticated" && state.account.at === "claimed" ? state.account.org?.orgId ?? null : null;
+		if (nextOrgId === selectedOrgId) return;
+		selectedOrgId = nextOrgId;
+		selectionEpoch += 1;
+		const epoch = selectionEpoch;
+		stopRemote?.();
+		stopRemote = null;
+		if (nextOrgId === null || input.organizationSetup === void 0) return;
+		const capturedLifetime = authority.snapshot();
+		const expectedAuthUserId = state.phase === "authenticated" ? state.session.authUserId : null;
+		const emit = (snapshot) => {
+			if (epoch !== selectionEpoch || !authority.matches(capturedLifetime, expectedAuthUserId)) return;
+			runPromise(actor.tell({
+				_tag: "ObserveOrganization",
+				orgId: nextOrgId,
+				snapshot
+			})).catch(() => void 0);
+		};
+		try {
+			const orgId = toOrgId(nextOrgId);
+			input.organizationSetup.subscribe(orgId, emit).then((result) => {
+				if (epoch !== selectionEpoch) {
+					if (result.ok) result.value();
+					return;
+				}
+				if (result.ok) stopRemote = result.value;
+				else emit({
+					status: "error",
+					error: result.error
+				});
+			}).catch((cause) => emit({
+				status: "error",
+				error: Errors.unknown(cause)
+			}));
+		} catch (cause) {
+			emit({
+				status: "error",
+				error: Errors.unknown(cause)
+			});
+		}
+	};
+	const unsubscribeAuthority = actor.subscribe(observe);
+	observe(actor.snapshot());
+	yield* Effect.addFinalizer(() => Effect.sync(() => {
+		authority.invalidate();
+		unsubscribeAuthority();
+	}));
+	return {
+		...actor,
+		authLifetime: authority.snapshot,
+		matchesAuthLifetime: authority.matches,
+		invalidateAuthLifetime: authority.invalidate,
+		subscribeAuthInvalidation: authority.subscribeInvalidation,
+		authSession: () => sessionStore.current,
+		ask: (event, controls) => actor.ask(event, controls).pipe(Effect.tap(() => event._tag === "Reset" ? Effect.sync(() => {
+			authority.recordProviderSession(null);
+		}) : Effect.void)),
+		restoreAuthSession: (session, controls) => actor.ask({
+			_tag: actor.snapshot().phase === "restoring" ? "SessionRestored" : "RestoreSession",
+			session: modelSession(session),
+			profileComplete: false
+		}, controls).pipe(Effect.tap(() => Effect.sync(() => {
+			authority.recordProviderSession(session);
+		})))
+	};
 });
-Object.freeze({
-	terminal: true,
-	outcome: "bad",
-	needsAction: false
+//#endregion
+//#region ../../packages/sdk/src/access/identity/restoration-observation.ts
+/** The correlation a transition carries onto its product event. */
+const linkage = (record) => ({
+	...record.correlation_id === void 0 ? {} : { correlation_id: record.correlation_id },
+	...record.journey_id === void 0 ? {} : { journey_id: record.journey_id }
 });
-Object.freeze({
-	terminal: true,
-	outcome: "neutral",
-	needsAction: false
+/**
+* The label of the restore window every client boots into. A settled session
+* fact that left this label is the restoration result (#1962 R04); the same
+* facts from a signed-out or authenticated state are the routine session probe
+* that `getSession()` runs, and a probe is not a restoration attempt.
+*/
+const RESTORE_WINDOW = "restoring";
+/** The completions that settle the restore window by themselves, and what each says. */
+const SETTLING_EVENTS = {
+	SessionRestored: "restored",
+	SessionAbsent: "absent",
+	SessionReadFailed: "failed"
+};
+/**
+* Which result the window settled on. `SessionRestored` and `SessionAbsent` are
+* the cache door and say it themselves. `ReadSession` is also valid inside the
+* window — `getSession()` drives it on a cache miss and its `SessionRead`
+* completion settles the window — so that one event reports both halves and the
+* state it produced is what separates them.
+*/
+const restorationOutcome = (event, state) => {
+	if (event === "SessionRead") {
+		if (state.phase === "authenticated") return "restored";
+		return state.phase === "signed_out" ? "absent" : void 0;
+	}
+	return SETTLING_EVENTS[event];
+};
+/**
+* The restore window's one result, or nothing when this settled session fact
+* belongs to a probe rather than to the window.
+*/
+const restorationObservation = (record, event, state) => {
+	if (record.slot !== "identity:session" || record.from !== RESTORE_WINDOW) return null;
+	const outcome = restorationOutcome(event, state);
+	if (outcome === void 0) return null;
+	return {
+		name: "access_recovery_completed",
+		props: {
+			recovery: "session_restoration",
+			outcome,
+			...outcome === "failed" && state.phase === "faulted" ? { reason_code: state.failure.code } : {},
+			...linkage(record)
+		}
+	};
+};
+//#endregion
+//#region ../../packages/sdk/src/access/identity/events.ts
+const NONE = null;
+const IDENTITY_EVENT_TAG_SET = new Set(IDENTITY_EVENT_TAGS);
+const isIdentityEventTag = (event) => IDENTITY_EVENT_TAG_SET.has(event);
+const APPLIED_ACTION_BY_EVENT = {
+	RequestOtp: "none",
+	VerifyOtp: "none",
+	ReadSession: "none",
+	SignOut: "none",
+	RestoreSession: "none",
+	ResumeOtpEntry: "none",
+	RestoreOtpEntry: "none",
+	Reset: "none",
+	SessionRestored: "restoration",
+	SessionAbsent: "restoration",
+	EnsureAccount: "none",
+	ClaimAccount: "none",
+	RetryAccount: "none",
+	CreateOrganization: "none",
+	AttachOrganization: "none",
+	LeaveOrganization: "none",
+	ObserveOrganization: "none",
+	OtpSent: "otp-requested",
+	OtpFailed: "failed",
+	Verified: "verified",
+	VerifyFailed: "failed",
+	SessionRead: "restoration",
+	SessionReadFailed: "restoration",
+	SignedOut: "signed-out",
+	SignOutFailed: "failed",
+	AccountAt: "none",
+	AccountDerived: "none",
+	AccountClaiming: "none",
+	AccountClaimed: "none",
+	AccountFailed: "none",
+	OrgSelected: "none",
+	OrgSelectionFailed: "none"
+};
+const emailDomain = (email) => email.split("@")[1]?.toLowerCase() ?? "unknown";
+const authFailure = (record, reason, mode) => ({
+	name: "auth_failed",
+	props: {
+		auth_type: "otp",
+		reason,
+		...mode === void 0 ? {} : { failure_mode: mode },
+		...linkage(record)
+	}
 });
+const REFUSAL_EVENTS = /* @__PURE__ */ new Set([
+	"ClaimAccount",
+	"RetryAccount",
+	"CreateOrganization",
+	"AttachOrganization"
+]);
+function mapIdentityProductObservation(record, state) {
+	const event = record.event;
+	if (record.machine !== "identity" || !isIdentityEventTag(event)) return NONE;
+	if (record.outcome === "cancelled") return NONE;
+	if (record.slot === "identity:auth" && record.outcome === "refused") return authFailure(record, record.refusal_code, void 0);
+	if (record.slot === "identity:auth" && record.outcome === "failed") return authFailure(record, record.error_code, record.failure?.mode);
+	if (record.outcome === "refused" && REFUSAL_EVENTS.has(record.event)) return {
+		name: "identity_refused",
+		props: {
+			event: record.event,
+			refusal_code: record.refusal_code,
+			slot: record.slot,
+			state: record.state,
+			...linkage(record)
+		}
+	};
+	if (record.outcome !== "applied") return NONE;
+	const action = APPLIED_ACTION_BY_EVENT[event];
+	switch (action) {
+		case "none": return NONE;
+		case "failed": return state.phase !== "faulted" || state.failure.code === "CANCELLED" ? NONE : authFailure(record, state.failure.code, state.failure.mode);
+		case "otp-requested": return state.phase !== "otp_pending" ? NONE : {
+			name: "auth_otp_requested",
+			props: {
+				email_domain: emailDomain(state.email),
+				...linkage(record)
+			}
+		};
+		case "verified": return state.phase !== "authenticated" ? NONE : {
+			name: "auth_verified",
+			props: {
+				auth_type: "otp",
+				...linkage(record)
+			}
+		};
+		case "signed-out": return state.phase !== "signed_out" ? NONE : {
+			name: "auth_signed_out",
+			props: linkage(record)
+		};
+		case "restoration": return restorationObservation(record, event, state);
+		default: return absurd(action);
+	}
+}
+const ignoreTransportFailure = (operation, operationName, eventName) => Effect.suspend(operation).pipe(Effect.catchCause(() => Effect.logWarning("identity.product.telemetry.dropped").pipe(Effect.annotateLogs({
+	operation: operationName,
+	product_event: eventName
+}), Effect.ignoreCause)));
+function executeIdentityProductObservation(telemetry, record, state) {
+	const mapped = mapIdentityProductObservation(record, state);
+	if (mapped === null) return Effect.void;
+	copyInvocationObservation(record, mapped);
+	const invocationTelemetry = bindProductTelemetryInvocation(telemetry, mapped);
+	const after = () => state.phase === "authenticated" && (mapped.name === "auth_verified" || mapped.name === "access_recovery_completed") ? invocationTelemetry.identify({
+		distinctId: state.session.authUserId,
+		traits: { email_domain: emailDomain(state.session.email) }
+	}) : mapped.name === "auth_signed_out" ? invocationTelemetry.reset() : Effect.void;
+	return ignoreTransportFailure(() => invocationTelemetry.emit(mapped), "emit", mapped.name).pipe(Effect.andThen(ignoreTransportFailure(after, mapped.name === "auth_signed_out" ? "reset" : "identify", mapped.name)));
+}
 //#endregion
 //#region ../../packages/protocol/src/payroll/model.ts
 function toPayrollRunId(raw) {
@@ -67840,6 +67940,11 @@ const OBSERVED_CONVEX_QUERIES = new Set(OPERATIONS.filter((row) => row.kind ===
 const OBSERVED_CONVEX_MUTATIONS = new Set(OPERATIONS.filter((row) => row.kind === "mutation").map((row) => row.path));
 //#endregion
 //#region ../../packages/sdk/src/platform/transport/convex-errors.ts
+/**
+* All a redacting backend says about an error it raised itself: its request
+* id. The WebSocket client wraps it as `[CONVEX Q(path)] … Called by client`.
+*/
+const REDACTED_ERROR = /^(?:\[CONVEX [QMA?]\([^)]*\)\] )?\[Request ID: ([^\]\s]+)\] Server Error(?:\s+Called by client)?$/u;
 function mapToCapxulError(operation, err, transport) {
 	const decoded = decodeConvexError(err);
 	if (decoded !== null) return decoded;
@@ -67864,9 +67969,26 @@ function mapToCapxulError(operation, err, transport) {
 * anything else (an uncaught "Server Error") is a backend defect. None is a
 * provider outage. The Convex request id rides in details, so the backend's
 * log line can be found.
+*
+* A deployed backend redacts these errors (`REDACT_LOGS_TO_CLIENT`, #2304):
+* the message is only the request id, and no structured cause exists, so the
+* message shape is the only discriminator. Neither case can be told apart, and
+* the reply says where to look instead. The text matches stay for a backend
+* that does not redact (development, local).
 */
 function backendFailure(operation, err) {
 	const text = err instanceof Error ? err.message : String(err);
+	const redacted = REDACTED_ERROR.exec(text.trim())?.[1];
+	if (redacted !== void 0) return new CapxulError("UNKNOWN", `The backend refused ${operation} and gave no detail. Find Convex request ${redacted} in the backend logs. If the backend can be newer than this client, update the CLI or SDK.`, {
+		cause: err,
+		layer: "convex",
+		details: {
+			operation,
+			provider: "convex",
+			requestId: redacted,
+			reason: "backend-error-redacted"
+		}
+	});
 	const requestId = /\[Request ID: ([^\]\s]+)\]/u.exec(text)?.[1];
 	const where = {
 		operation,
@@ -70946,7 +71068,7 @@ function stdioIdentity(env = process.env, options = {}) {
 }
 //#endregion
 //#region package.json
-var version = "4.20.0-beta.24";
+var version = "4.20.0-beta.26";
 //#endregion
 //#region src/deps.ts
 const NO_IDENTITY = async () => void 0;