@capxul/mcp 4.20.0-beta.34 → 4.20.0-beta.36

package/dist/{organizations-Cd8Dc62C.mjs → organizations-BOE0gw6K.mjs}

@@ -1,5 +1,5 @@
 import { r as __commonJSMin } from "./lib-DnmstTkB.mjs";
-import { a as anumber, h as u32$1, l as createHasher, m as toBytes$2, n as abytes, o as aoutput, p as swap32IfBE, r as aexists, s as clean, t as Hash$1 } from "./utils-CenTnkL6.mjs";
+import { c as clean, f as swap32IfBE, i as aexists, m as u32$1, n as Hash$1, o as anumber, p as toBytes$2, r as abytes, s as aoutput, t as sha256$2, u as createHasher } from "./sha2-D5rBHwg7.mjs";
 import { Cause, Clock, Context, Data, Deferred, Effect, Exit, Fiber, Layer, Option, Predicate, Queue, Ref, Result, Schema, SchemaAST, SchemaGetter, SchemaIssue, SchemaParser } from "effect";
 //#region ../../packages/protocol/src/errors/failure-modes.ts
 /**
@@ -139,6 +139,17 @@ const Errors = {
 			...opts?.chain === void 0 ? {} : { chain: opts.chain }
 		});
 	},
+	/**
+	* The provider answered, but its answer cannot be used: `field` names the
+	* part that is missing or malformed and `reason` says what is wrong with it.
+	* Distinct from `PROVIDER_ERROR`, where the call itself failed or was refused.
+	*/
+	providerResponseInvalid: (provider, operation, field, reason) => new CapxulError("PROVIDER_RESPONSE_INVALID", `${provider} ${operation} answered with an unusable ${field}: ${reason}`, { details: {
+		provider,
+		operation,
+		field,
+		reason
+	} }),
 	capabilityUnavailable: (provider, operation) => new CapxulError("CAPABILITY_UNAVAILABLE", "Provider capability is unavailable", { details: {
 		provider,
 		operation
@@ -2158,6 +2169,7 @@ const CAPXUL_ERROR_CODES = [
 	"ACCOUNT_NOT_FOUND",
 	"ACCOUNT_CLAIMED_BY_OTHER_SIGNER",
 	"PROVIDER_ERROR",
+	"PROVIDER_RESPONSE_INVALID",
 	"CAPABILITY_UNAVAILABLE",
 	"INVALID_INPUT",
 	"ENV_MISSING",
@@ -2179,6 +2191,15 @@ const CAPXUL_ERROR_CODES = [
 	"WORK_DIED",
 	"ACTOR_STOPPED"
 ];
+/** The existing Organization authority refusal vocabulary. */
+const ROLE_PERMISSION_DENIED_REASONS = [
+	"over_cap",
+	"daily_cap",
+	"not_member",
+	"disallowed_recipient",
+	"condition_violation",
+	"budget_exhausted"
+];
 const EXPECTED_OUTCOME_CODES = /* @__PURE__ */ new Set([
 	"INVALID_INPUT",
 	"NOT_AUTHENTICATED",
@@ -7278,7 +7299,7 @@ function publicKeyToAddress(publicKey) {
 //#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/signature/recoverPublicKey.js
 async function recoverPublicKey({ hash, signature }) {
 	const hashHex = isHex$1(hash) ? hash : toHex(hash);
-	const { secp256k1 } = await import("./secp256k1-BSimfttS.mjs");
+	const { secp256k1 } = await import("./secp256k1-CLeVBma1.mjs");
 	return `0x${(() => {
 		if (typeof signature === "object" && "r" in signature && "s" in signature) {
 			const { r, s, v, yParity } = signature;
@@ -7372,6 +7393,28 @@ function getSizeOfLength(length) {
 	throw new BaseError("Length is too large.");
 }
 //#endregion
+//#region ../../node_modules/.pnpm/@noble+hashes@1.8.0/node_modules/@noble/hashes/esm/sha256.js
+/**
+* SHA2-256 a.k.a. sha256. In JS, it is the fastest hash, even faster than Blake3.
+*
+* To break sha256 using birthday attack, attackers need to try 2^128 hashes.
+* BTC network is doing 2^70 hashes/sec (2^95 hashes/year) as per 2025.
+*
+* Check out [FIPS 180-4](https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.180-4.pdf).
+* @module
+* @deprecated
+*/
+/** @deprecated Use import from `noble/hashes/sha2` module */
+const sha256$1 = sha256$2;
+//#endregion
+//#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/hash/sha256.js
+function sha256(value, to_) {
+	const to = to_ || "hex";
+	const bytes = sha256$1(isHex$1(value, { strict: false }) ? toBytes$1(value) : value);
+	if (to === "bytes") return bytes;
+	return toHex(bytes);
+}
+//#endregion
 //#region ../../node_modules/.pnpm/viem@2.55.18_patch_hash=6dka2762lzcggf7at6h6xt4khq_@typescript+typescript6@6.0.2_zod@4.6.5/node_modules/viem/_esm/utils/abi/decodeFunctionData.js
 function decodeFunctionData(parameters) {
 	const { abi, data } = parameters;
@@ -7747,7 +7790,7 @@ function isQuantityHex(value) {
 function isBytes32(value) {
 	return typeof value === "string" && BYTES32_HEX.test(value);
 }
-function refused(field, shape, value) {
+function refused$1(field, shape, value) {
 	throw Errors.invalidInput(field, invalidValueReason(`must be ${shape}`, value));
 }
 /** Rebuilding the `0x` prefix keeps the result a `Hex`; lowercasing never changes the bytes. */
@@ -7756,19 +7799,19 @@ function lowered(value) {
 }
 /** Hex data exactly as given: case kept, for text another party compares or hashes as is. */
 function toExactHex(value, field = "value") {
-	return isHex(value) ? value : refused(field, "0x-prefixed hex", value);
+	return isHex(value) ? value : refused$1(field, "0x-prefixed hex", value);
 }
 /** Hex data, lowercased. */
 function toLowerHex(value, field = "value") {
-	return isHex(value) ? lowered(value) : refused(field, "0x-prefixed hex", value);
+	return isHex(value) ? lowered(value) : refused$1(field, "0x-prefixed hex", value);
 }
 /** A bytes32 value, lowercased. */
 function toLowerBytes32(value, field = "value") {
-	return isBytes32(value) ? lowered(value) : refused(field, "a 0x-prefixed bytes32 value", value);
+	return isBytes32(value) ? lowered(value) : refused$1(field, "a 0x-prefixed bytes32 value", value);
 }
 /** An address, lowercased: the form stored rows and digests compare. */
 function toLowerAddress(value, field = "address") {
-	return isAddress(value) ? lowered(value) : refused(field, "an EVM address", value);
+	return isAddress(value) ? lowered(value) : refused$1(field, "an EVM address", value);
 }
 //#endregion
 //#region ../../packages/protocol/src/evm/schema.ts
@@ -8321,16 +8364,19 @@ const PaymentCommandSchema = Schema.Union([
 	PaymentBirthCommandSchema,
 	Schema.Struct({
 		kind: Schema.Literal("claim_commitment"),
+		requestKey: Schema.optional(nonEmpty("requestKey")),
 		actor: AccountActorRefSchema,
 		paymentId: PaymentIdSchema
 	}),
 	Schema.Struct({
 		kind: Schema.Literal("cancel_commitment"),
+		requestKey: Schema.optional(nonEmpty("requestKey")),
 		actor: ActorRefSchema,
 		paymentId: PaymentIdSchema
 	}),
 	Schema.Struct({
 		kind: Schema.Literal("redirect_commitment"),
+		requestKey: Schema.optional(nonEmpty("requestKey")),
 		actor: ActorRefSchema,
 		paymentId: PaymentIdSchema,
 		recipient: ActorOrDestinationRefSchema
@@ -8355,8 +8401,10 @@ const PreparedMoneyItemSchema = Schema.Union([
 		tokenAddress: AddressSchema$1,
 		rawAmount: WeiAmountSchema$1,
 		kind: Uint16Schema,
-		documentHash: NonzeroDocumentHashSchema
-	}),
+		documentHash: NonzeroDocumentHashSchema,
+		jobNonce: Schema.optional(Bytes32Schema),
+		executor: Schema.optional(AddressSchema$1)
+	}).pipe(Schema.refine((item) => item.jobNonce === void 0 === (item.executor === void 0), { message: "Prepared V3 identity requires both jobNonce and executor" })),
 	Schema.Struct({
 		operation: Schema.Literal("create_commitment"),
 		paymentId: PaymentIdSchema,
@@ -8458,6 +8506,12 @@ const PersonalUnsignedUserOperationSchema = Schema.Struct({
 	entryPoint: Schema.optional(Schema.Never),
 	safe4337ModuleAddress: Schema.optional(Schema.Never)
 });
+const SubmittedPaymentExecutionSchema = Schema.Struct({
+	executionId: MoneyExecutionIdSchema,
+	commandId: PaymentCommandIdSchema,
+	userOpHash: Bytes32Schema,
+	payment: Payment
+});
 const PreparedPaymentExecutionSchema = Schema.Struct({
 	actorAccountId: AccountIdSchema$1,
 	item: PreparedMoneyItemSchema,
@@ -8475,7 +8529,8 @@ const PreparedPaymentExecutionSchema = Schema.Struct({
 	chainId: BaseSepoliaChainIdSchema,
 	signerAddress: AddressSchema$1,
 	userOpSenderSafe: SafeAddressSchema,
-	digest: Bytes32Schema
+	digest: Bytes32Schema,
+	settled: Schema.optional(SubmittedPaymentExecutionSchema)
 });
 const SubmitPaymentExecutionInputSchema = Schema.Struct({
 	executionId: MoneyExecutionIdSchema,
@@ -8489,12 +8544,6 @@ const AbandonPaymentExecutionInputSchema = Schema.Struct({
 		"prepared_mismatch"
 	])
 });
-const SubmittedPaymentExecutionSchema = Schema.Struct({
-	executionId: MoneyExecutionIdSchema,
-	commandId: PaymentCommandIdSchema,
-	userOpHash: Bytes32Schema,
-	payment: Payment
-});
 const SubmittedPaymentCommandExecutionSchema = Schema.Struct({
 	executionId: MoneyExecutionIdSchema,
 	commandId: PaymentCommandIdSchema,
@@ -8509,14 +8558,17 @@ const PaymentLifecycleExecutionIntentSchema = Schema.Union([
 	}),
 	Schema.Struct({
 		kind: Schema.Literal("claim"),
-		paymentId: PaymentIdSchema
+		paymentId: PaymentIdSchema,
+		requestKey: Schema.optional(nonEmpty("requestKey"))
 	}),
 	Schema.Struct({
 		kind: Schema.Literal("cancel"),
-		paymentId: PaymentIdSchema
+		paymentId: PaymentIdSchema,
+		requestKey: Schema.optional(nonEmpty("requestKey"))
 	}),
 	Schema.Struct({
 		kind: Schema.Literal("redirect"),
+		requestKey: Schema.optional(nonEmpty("requestKey")),
 		paymentId: PaymentIdSchema,
 		recipient: RedirectPaymentRef
 	})
@@ -8575,10 +8627,12 @@ const RequestPaymentConfirmationFields = {
 const RequestPaymentTermsSchema = Schema.Struct(RequestPaymentConfirmationFields);
 const RequestPaymentConfirmationSchema = Schema.Union([Schema.Struct({
 	...RequestPaymentConfirmationFields,
+	requestKey: Schema.optional(nonEmpty("requestKey")),
 	payer: Schema.Struct({ kind: Schema.Literal("account") }),
 	permissionId: Schema.optional(Schema.Never)
 }), Schema.Struct({
 	...RequestPaymentConfirmationFields,
+	requestKey: Schema.optional(nonEmpty("requestKey")),
 	payer: OrganizationActorRefSchema,
 	permissionId: PermissionIdSchema
 })]);
@@ -8638,13 +8692,14 @@ const PreparedPaymentCommandExecutionSchema = Schema.Struct({
 		commitmentId: Uint256StringSchema,
 		documentHash: NonzeroDocumentHashSchema
 	})),
-	documentBundles: Schema.optional(Schema.Array(PaymentDocumentBundleV3Schema))
+	documentBundles: Schema.optional(Schema.Array(PaymentDocumentBundleV3Schema)),
+	settled: Schema.optional(SubmittedPaymentCommandExecutionSchema)
 }).check(Schema.makeFilter((execution) => {
 	if (!("kind" in execution.request) || execution.request.kind !== "payment_request") return true;
 	const source = execution.sourceCommand;
 	const prepared = execution.preparedCommand;
 	if (source?.kind !== "birth" || prepared === void 0 || source.lineage?.kind !== "payment_request") return false;
-	if (source.lineage.requestId !== execution.request.confirmation.requestId || source.requestKey !== execution.request.requestKey || source.requestKey !== execution.request.confirmation.requestId || execution.userOperation === void 0) return false;
+	if (source.lineage.requestId !== execution.request.confirmation.requestId || source.requestKey !== execution.request.requestKey || source.requestKey !== (execution.request.confirmation.requestKey ?? execution.request.confirmation.requestId) || execution.userOperation === void 0) return false;
 	if ([
 		source.items.length,
 		execution.request.items.length,
@@ -8657,7 +8712,7 @@ const PreparedPaymentCommandExecutionSchema = Schema.Struct({
 		prepared.instructionDocuments?.length
 	].some((length) => length !== 1)) return false;
 	const item = prepared.items[0];
-	return "recipientSafe" in item && item.operation === source.items[0].operation && item.operation === execution.request.items[0].operation && item.paymentId === execution.paymentIds[0] && item.paymentId === execution.sourcePaymentIds?.[0] && item.recipientSafe === execution.sourceRecipientSafes?.[0];
+	return "recipientSafe" in item && item.operation === source.items[0].operation && item.operation === execution.request.items[0].operation && [item.paymentId, execution.sourcePaymentIds?.[0]].every((id) => id === execution.paymentIds[0]) && item.recipientSafe === execution.sourceRecipientSafes?.[0];
 }));
 //#endregion
 //#region ../../packages/protocol/src/accounts/approval-schema.ts
@@ -8725,6 +8780,7 @@ const ApprovalSummarySchema = Schema.Struct({
 /** The exact operation the signature covers: the digest is the one thing the key signs. */
 const ApprovalOperationSchema = Schema.Struct({
 	executionId: MoneyExecutionIdSchema,
+	commandId: Schema.optional(nonEmpty("commandId")),
 	digest: Bytes32Schema,
 	userOperation: PersonalUnsignedUserOperationSchema,
 	paymentIds: Schema.Array(PaymentIdSchema)
@@ -8917,6 +8973,21 @@ const approvals = {
 			...APPROVAL
 		]
 	}),
+	/** Read the signed operation's progress. Consumption alone does not prove completion. */
+	observe: Operation.query("accounts.approvals.observe", {
+		input: Schema.Struct({ approvalId: ApprovalIdSchema }),
+		output: Schema.Struct({
+			approval: ApprovalSchema,
+			completed: Schema.Boolean
+		}),
+		errors: [
+			...CALL$10,
+			...DEFECTS,
+			...APPROVAL,
+			"SUPERSEDED",
+			"TRANSACTION_FAILED"
+		]
+	}),
 	/** The person opened the approval page: stamp the first review of a pending approval. */
 	review: Operation.mutation("accounts.approvals.review", {
 		input: Schema.Struct({ approvalId: ApprovalIdSchema }),
@@ -9123,6 +9194,8 @@ const errors = [
 	...DEFECTS
 ];
 const writeErrors = [...errors, "WRONG_STATE"];
+/** Bank-details writes also read Bridge's answer back, which can be unusable. */
+const bridgeWriteErrors = [...writeErrors, "PROVIDER_RESPONSE_INVALID"];
 const bankDetails = {
 	list: Operation.query("banking.bankDetails.list", {
 		input: Schema.Struct({ actor: actor$3 }),
@@ -9137,7 +9210,7 @@ const bankDetails = {
 	open: Operation.action("banking.bankDetails.open", {
 		input: Schema.Struct(target),
 		output: BankDetailsSchema,
-		errors: writeErrors
+		errors: bridgeWriteErrors
 	}),
 	settle: Operation.action("banking.bankDetails.settle", {
 		input: Schema.Struct({
@@ -9145,17 +9218,17 @@ const bankDetails = {
 			token: SettlementTokenSchema
 		}),
 		output: BankDetailsSchema,
-		errors: writeErrors
+		errors: bridgeWriteErrors
 	}),
 	deactivate: Operation.action("banking.bankDetails.deactivate", {
 		input: Schema.Struct(target),
 		output: BankDetailsSchema,
-		errors: writeErrors
+		errors: bridgeWriteErrors
 	}),
 	reactivate: Operation.action("banking.bankDetails.reactivate", {
 		input: Schema.Struct(target),
 		output: BankDetailsSchema,
-		errors: writeErrors
+		errors: bridgeWriteErrors
 	})
 };
 const deposits = {
@@ -10042,6 +10115,12 @@ function toOrgId(raw) {
 //#endregion
 //#region ../../packages/protocol/src/errors/schema.ts
 const FailureModeSchema$1 = Schema.Literals(FAILURE_MODES$1);
+Schema.Struct({
+	reason: Schema.Literals(ROLE_PERMISSION_DENIED_REASONS),
+	operation: Schema.optionalKey(Schema.String),
+	remaining: Schema.optionalKey(AssetAmountSchema),
+	required: Schema.optionalKey(AssetAmountSchema)
+});
 const ChainUpstreamSchema$1 = Schema.Literals(CHAIN_UPSTREAMS);
 const ChainCauseSchema = Schema.Struct({
 	mode: FailureModeSchema$1,
@@ -12663,6 +12742,7 @@ const inboxes = {
 		input: Schema.Struct({
 			actor,
 			paymentRequestId: Schema.String,
+			requestKey: Schema.optionalKey(nonEmpty("requestKey")),
 			timing: Schema.optionalKey(PaymentTiming),
 			permissionId: Schema.optionalKey(Schema.String)
 		}),
@@ -13039,7 +13119,8 @@ const PEOPLE_OPERATIONS = {
 			expire: "accounts.approvals.expire",
 			recordApproval: "accounts.approvals.recordApproval",
 			recordExpiry: "accounts.approvals.recordExpiry",
-			sendApproved: "accounts.approvals.sendApproved"
+			sendApproved: "accounts.approvals.sendApproved",
+			rescheduleApproved: "accounts.approvals.rescheduleApproved"
 		},
 		balances: { readBinding: "accounts.balances.readBinding" },
 		claims: {
@@ -16831,7 +16912,7 @@ function mapAccountLifecycle(input) {
 }
 //#endregion
 //#region ../../packages/sdk/package.json
-var version$1 = "4.20.0-beta.34";
+var version$1 = "4.20.0-beta.36";
 //#endregion
 //#region ../../packages/sdk/src/observability/telemetry/exception-projection.ts
 /** Fixed fallback for failures that have no safe message. */
@@ -17394,6 +17475,126 @@ function mapOk(result, f) {
 	}
 }
 //#endregion
+//#region ../../packages/protocol/src/evm/test-assets.ts
+const SYNTHETIC_TEST_ASSET_SOURCE = "synthetic-test-liquidity";
+/**
+* Owned test assets, with metadata read from each creation receipt and contract.
+* Settlement admission lives in assets.ts. The fixed test exchange uses the
+* original five assets; bank EURC has its own deployment.
+*
+* `symbol` is the display string the owned contract returns. A
+* provider-supported USDC would be a different contract at a different
+* address returning the same symbol, which is why the resolvers below key on
+* `assetId`, or on chain plus address, and never on a symbol.
+*/
+const SYNTHETIC_TEST_ASSET_FIXTURES = {
+	usdc: {
+		assetId: assetIdFor(84532, "0x06ba8b863ca77490b0e7008427562bdbfcff730e"),
+		chainId: toChainId(84532),
+		tokenAddress: "0x06ba8b863ca77490b0e7008427562bdbfcff730e",
+		symbol: "USDC",
+		decimals: 6,
+		peg: toCurrencyCode("USD"),
+		deploymentStartBlock: 46690061,
+		deploymentTransaction: "0x2661b7af5f62b9e31c707a59746cda65b90ba4448852317ac1968162fb94ff52",
+		source: SYNTHETIC_TEST_ASSET_SOURCE
+	},
+	usdt: {
+		assetId: assetIdFor(84532, "0xcb5f361ae070e75d573941b8cd54995fa3876d75"),
+		chainId: toChainId(84532),
+		tokenAddress: "0xcb5f361ae070e75d573941b8cd54995fa3876d75",
+		symbol: "USDT",
+		decimals: 6,
+		peg: toCurrencyCode("USD"),
+		deploymentStartBlock: 46690061,
+		deploymentTransaction: "0x98e5303f97974a31eddb61ad030072d900ce7283ce8080bfe0b9e5ea6f297749",
+		source: SYNTHETIC_TEST_ASSET_SOURCE
+	},
+	weth: {
+		assetId: assetIdFor(84532, "0x85b7bd39ce3df9a85135e1e307225dd435f67e47"),
+		chainId: toChainId(84532),
+		tokenAddress: "0x85b7bd39ce3df9a85135e1e307225dd435f67e47",
+		symbol: "WETH",
+		decimals: 18,
+		peg: null,
+		deploymentStartBlock: 46690061,
+		deploymentTransaction: "0x48dfacc01c15adc34f6c629aec5c9ff7bb84176d448017da0d0d4fdaf8b5a68a",
+		source: SYNTHETIC_TEST_ASSET_SOURCE
+	},
+	wbtc: {
+		assetId: assetIdFor(84532, "0xcf433a81f507dcc88c2c404650ffafb40750b451"),
+		chainId: toChainId(84532),
+		tokenAddress: "0xcf433a81f507dcc88c2c404650ffafb40750b451",
+		symbol: "WBTC",
+		decimals: 8,
+		peg: null,
+		deploymentStartBlock: 46690061,
+		deploymentTransaction: "0xa975fcda0a67509742243bbfc386032d2e0d6ca78404c255fae2e4ffae1c7f4d",
+		source: SYNTHETIC_TEST_ASSET_SOURCE
+	},
+	cngn: {
+		assetId: assetIdFor(84532, "0xda515a7267e190710f0003f951c62bcfd70d6b2a"),
+		chainId: toChainId(84532),
+		tokenAddress: "0xda515a7267e190710f0003f951c62bcfd70d6b2a",
+		symbol: "cNGN",
+		decimals: 6,
+		peg: toCurrencyCode("NGN"),
+		deploymentStartBlock: 46690061,
+		deploymentTransaction: "0x6f6b0302448c7cd7db5c118a8250e548c6e72821df373e5a27550e5cdfa635a1",
+		source: SYNTHETIC_TEST_ASSET_SOURCE
+	},
+	eurc: {
+		assetId: assetIdFor(84532, "0x15055b4ed1d248c169b92705757cd9c3d985ad5f"),
+		chainId: toChainId(84532),
+		tokenAddress: "0x15055b4ed1d248c169b92705757cd9c3d985ad5f",
+		symbol: "EURC",
+		decimals: 6,
+		peg: toCurrencyCode("EUR"),
+		deploymentStartBlock: 47893251,
+		deploymentTransaction: "0x4e0ab412d980a672336487afd10da007d51f34f17876b19b13732c8125be90ca",
+		source: SYNTHETIC_TEST_ASSET_SOURCE
+	}
+};
+/** EURC is minted for bank deposits and has no admission to the fixed test exchange. */
+const SYNTHETIC_TEST_ASSETS = [...[
+	SYNTHETIC_TEST_ASSET_FIXTURES.usdc,
+	SYNTHETIC_TEST_ASSET_FIXTURES.usdt,
+	SYNTHETIC_TEST_ASSET_FIXTURES.weth,
+	SYNTHETIC_TEST_ASSET_FIXTURES.wbtc,
+	SYNTHETIC_TEST_ASSET_FIXTURES.cngn
+], SYNTHETIC_TEST_ASSET_FIXTURES.eurc];
+toChainId(84532);
+/**
+* The settlement tier: the owned test assets admitted to the exact-transfer
+* path and to the treasury reads. USDC, USDT, WETH and EURC are admitted assets.
+* There is no default token.
+*/
+const SETTLEMENT_ASSETS_BASE_SEPOLIA = Object.freeze({
+	CAPXUL_TEST_USDC: SYNTHETIC_TEST_ASSET_FIXTURES.usdc,
+	CAPXUL_TEST_USDT: SYNTHETIC_TEST_ASSET_FIXTURES.usdt,
+	CAPXUL_TEST_WETH: SYNTHETIC_TEST_ASSET_FIXTURES.weth,
+	CAPXUL_TEST_EURC: SYNTHETIC_TEST_ASSET_FIXTURES.eurc
+});
+const CONFIGURED_MONEY_ASSETS = Object.freeze(Object.values(SETTLEMENT_ASSETS_BASE_SEPOLIA));
+Object.freeze({ BASE_SEPOLIA: Object.freeze({
+	CAPXUL_TEST_USDC: SETTLEMENT_ASSETS_BASE_SEPOLIA.CAPXUL_TEST_USDC.assetId,
+	CAPXUL_TEST_USDT: SETTLEMENT_ASSETS_BASE_SEPOLIA.CAPXUL_TEST_USDT.assetId,
+	CAPXUL_TEST_WETH: SETTLEMENT_ASSETS_BASE_SEPOLIA.CAPXUL_TEST_WETH.assetId,
+	CAPXUL_TEST_EURC: SETTLEMENT_ASSETS_BASE_SEPOLIA.CAPXUL_TEST_EURC.assetId
+}) });
+/**
+* Every known asset in ONE identity space. The tiers above declare admission;
+* this is the only list an identity resolves against, so an asset is never
+* two different things depending on which list a caller happened to read.
+*/
+const MONEY_ASSET_REGISTRY = [...SYNTHETIC_TEST_ASSETS];
+CONFIGURED_MONEY_ASSETS.map((asset) => asset.tokenAddress.toLowerCase());
+/** The registry row for `assetId` across every tier, or `null`. */
+function configuredMoneyAssetById(assetId) {
+	const canonical = toAssetId(assetId);
+	return MONEY_ASSET_REGISTRY.find((asset) => asset.assetId === canonical) ?? null;
+}
+//#endregion
 //#region ../../packages/sdk/src/platform/transport/call-operation.ts
 function callOperation(port, row, args, options) {
 	const op = row;
@@ -18735,6 +18936,23 @@ async function verifyPaymentDocumentSignatureV3(input) {
 	})).toLowerCase() === envelope.signature.signer;
 }
 //#endregion
+//#region ../../packages/protocol/src/documents/identities.ts
+/** A caller handed this module a value its own types rule out: a defect, named. */
+function defect$1(step, message) {
+	return new CapxulError("UNKNOWN", message, { details: { step } });
+}
+function hashDocumentOriginIdV3(input) {
+	if (!Number.isSafeInteger(input.chainId) || input.chainId <= 0 || !Number.isSafeInteger(input.itemIndex) || input.itemIndex < 0 || input.actorKind !== "account" && input.actorKind !== "organization" || input.actorId.length === 0 || input.requestKey.length === 0) throw defect$1("hashDocumentOriginIdV3", "Invalid document origin input");
+	return keccak256$1(encodeAbiParameters$1(parseAbiParameters("string namespace, uint256 chainId, string actorKind, string actorId, string requestKey, uint256 itemIndex"), [
+		"capxul.document-origin.v3",
+		BigInt(input.chainId),
+		input.actorKind,
+		input.actorId,
+		input.requestKey,
+		BigInt(input.itemIndex)
+	]));
+}
+//#endregion
 //#region ../../packages/sdk/src/documents/birth-context.ts
 function sourcePurpose(source) {
 	if ("purposeKind" in source) return source.purposeKind;
@@ -18749,13 +18967,20 @@ function isBirthItem(item) {
 function requestRetryInstruction(input) {
 	const request = input.evidence.request;
 	const original = input.evidence.sourceCommand;
-	if (!("kind" in request) || request.kind !== "retry" || original?.kind !== "birth" || original.lineage?.kind !== "payment_request" && original.lineage?.kind !== "invoice_checkout" || original.lineage.requestId !== original.requestKey || !input.evidence.sourcePaymentIds?.includes(request.paymentId)) return void 0;
+	if (!("kind" in request) || request.kind !== "retry" || original?.kind !== "birth" || original.lineage?.kind !== "payment_request" && original.lineage?.kind !== "invoice_checkout" || !input.evidence.sourcePaymentIds?.includes(request.paymentId)) return void 0;
 	const document = original.items[input.index]?.document;
 	if (document?.kind !== "envelope") return void 0;
 	const bytes = decodeCanonicalBase64V3(document.bytesBase64);
 	const envelope = decodeSupportedPaymentDocumentEnvelope(bytes);
 	if (envelope.primaryType !== "Memo" && envelope.primaryType !== "Invoice") return void 0;
 	if (envelope.version === 5) return void 0;
+	if (original.lineage.requestId !== original.requestKey && (original.lineage.kind !== "payment_request" || envelope.primaryType !== "Invoice" || envelope.message.originId !== hashDocumentOriginIdV3({
+		chainId: input.evidence.chainId,
+		actorKind: original.actor.kind,
+		actorId: original.actor.kind === "account" ? original.actor.accountId : original.actor.orgId,
+		requestKey: original.lineage.requestId,
+		itemIndex: input.index
+	}))) return void 0;
 	return {
 		documentHash: hashSupportedPaymentDocument(envelope),
 		contentHash: hashPaymentDocumentContentV3(bytes),
@@ -18784,11 +19009,7 @@ function requestBirthContext(evidence) {
 	].some((items) => items?.length !== 1)) return null;
 	const item = command.items[0];
 	const instruction = command.instructionDocuments?.[0];
-	if (!isBirthItem(item) || instruction === void 0 || source.lineage?.kind !== "payment_request" || [
-		source.lineage.requestId,
-		source.requestKey,
-		request.requestKey
-	].some((key) => key !== request.confirmation.requestId) || documentJson(request.actor) !== documentJson(source.actor) || documentJson(request.items) !== documentJson(source.items) || evidence.sourcePaymentIds?.[0] !== evidence.paymentIds[0] || evidence.sourceRecipientSafes?.[0]?.toLowerCase() !== request.confirmation.issuerSafe.toLowerCase() || documentJson(evidence.documentBundles) !== documentJson(command.documentBundles) || !confirmedRequestFactsMatch(request.confirmation, source, item, instruction)) return null;
+	if (!isBirthItem(item) || instruction === void 0 || source.lineage?.kind !== "payment_request" || source.lineage.requestId !== request.confirmation.requestId || [source.requestKey, request.requestKey].some((key) => key !== (request.confirmation.requestKey ?? request.confirmation.requestId)) || documentJson(request.actor) !== documentJson(source.actor) || documentJson(request.items) !== documentJson(source.items) || evidence.sourcePaymentIds?.[0] !== evidence.paymentIds[0] || evidence.sourceRecipientSafes?.[0]?.toLowerCase() !== request.confirmation.issuerSafe.toLowerCase() || documentJson(evidence.documentBundles) !== documentJson(command.documentBundles) || !confirmedRequestFactsMatch(request.confirmation, source, item, instruction)) return null;
 	return {
 		source: source.items,
 		actorKind: source.actor.kind,
@@ -18814,126 +19035,6 @@ function retryBirthContext(evidence) {
 	};
 }
 //#endregion
-//#region ../../packages/protocol/src/evm/test-assets.ts
-const SYNTHETIC_TEST_ASSET_SOURCE = "synthetic-test-liquidity";
-/**
-* Owned test assets, with metadata read from each creation receipt and contract.
-* Settlement admission lives in assets.ts. The fixed test exchange uses the
-* original five assets; bank EURC has its own deployment.
-*
-* `symbol` is the display string the owned contract returns. A
-* provider-supported USDC would be a different contract at a different
-* address returning the same symbol, which is why the resolvers below key on
-* `assetId`, or on chain plus address, and never on a symbol.
-*/
-const SYNTHETIC_TEST_ASSET_FIXTURES = {
-	usdc: {
-		assetId: assetIdFor(84532, "0x06ba8b863ca77490b0e7008427562bdbfcff730e"),
-		chainId: toChainId(84532),
-		tokenAddress: "0x06ba8b863ca77490b0e7008427562bdbfcff730e",
-		symbol: "USDC",
-		decimals: 6,
-		peg: toCurrencyCode("USD"),
-		deploymentStartBlock: 46690061,
-		deploymentTransaction: "0x2661b7af5f62b9e31c707a59746cda65b90ba4448852317ac1968162fb94ff52",
-		source: SYNTHETIC_TEST_ASSET_SOURCE
-	},
-	usdt: {
-		assetId: assetIdFor(84532, "0xcb5f361ae070e75d573941b8cd54995fa3876d75"),
-		chainId: toChainId(84532),
-		tokenAddress: "0xcb5f361ae070e75d573941b8cd54995fa3876d75",
-		symbol: "USDT",
-		decimals: 6,
-		peg: toCurrencyCode("USD"),
-		deploymentStartBlock: 46690061,
-		deploymentTransaction: "0x98e5303f97974a31eddb61ad030072d900ce7283ce8080bfe0b9e5ea6f297749",
-		source: SYNTHETIC_TEST_ASSET_SOURCE
-	},
-	weth: {
-		assetId: assetIdFor(84532, "0x85b7bd39ce3df9a85135e1e307225dd435f67e47"),
-		chainId: toChainId(84532),
-		tokenAddress: "0x85b7bd39ce3df9a85135e1e307225dd435f67e47",
-		symbol: "WETH",
-		decimals: 18,
-		peg: null,
-		deploymentStartBlock: 46690061,
-		deploymentTransaction: "0x48dfacc01c15adc34f6c629aec5c9ff7bb84176d448017da0d0d4fdaf8b5a68a",
-		source: SYNTHETIC_TEST_ASSET_SOURCE
-	},
-	wbtc: {
-		assetId: assetIdFor(84532, "0xcf433a81f507dcc88c2c404650ffafb40750b451"),
-		chainId: toChainId(84532),
-		tokenAddress: "0xcf433a81f507dcc88c2c404650ffafb40750b451",
-		symbol: "WBTC",
-		decimals: 8,
-		peg: null,
-		deploymentStartBlock: 46690061,
-		deploymentTransaction: "0xa975fcda0a67509742243bbfc386032d2e0d6ca78404c255fae2e4ffae1c7f4d",
-		source: SYNTHETIC_TEST_ASSET_SOURCE
-	},
-	cngn: {
-		assetId: assetIdFor(84532, "0xda515a7267e190710f0003f951c62bcfd70d6b2a"),
-		chainId: toChainId(84532),
-		tokenAddress: "0xda515a7267e190710f0003f951c62bcfd70d6b2a",
-		symbol: "cNGN",
-		decimals: 6,
-		peg: toCurrencyCode("NGN"),
-		deploymentStartBlock: 46690061,
-		deploymentTransaction: "0x6f6b0302448c7cd7db5c118a8250e548c6e72821df373e5a27550e5cdfa635a1",
-		source: SYNTHETIC_TEST_ASSET_SOURCE
-	},
-	eurc: {
-		assetId: assetIdFor(84532, "0x15055b4ed1d248c169b92705757cd9c3d985ad5f"),
-		chainId: toChainId(84532),
-		tokenAddress: "0x15055b4ed1d248c169b92705757cd9c3d985ad5f",
-		symbol: "EURC",
-		decimals: 6,
-		peg: toCurrencyCode("EUR"),
-		deploymentStartBlock: 47893251,
-		deploymentTransaction: "0x4e0ab412d980a672336487afd10da007d51f34f17876b19b13732c8125be90ca",
-		source: SYNTHETIC_TEST_ASSET_SOURCE
-	}
-};
-/** EURC is minted for bank deposits and has no admission to the fixed test exchange. */
-const SYNTHETIC_TEST_ASSETS = [...[
-	SYNTHETIC_TEST_ASSET_FIXTURES.usdc,
-	SYNTHETIC_TEST_ASSET_FIXTURES.usdt,
-	SYNTHETIC_TEST_ASSET_FIXTURES.weth,
-	SYNTHETIC_TEST_ASSET_FIXTURES.wbtc,
-	SYNTHETIC_TEST_ASSET_FIXTURES.cngn
-], SYNTHETIC_TEST_ASSET_FIXTURES.eurc];
-toChainId(84532);
-/**
-* The settlement tier: the owned test assets admitted to the exact-transfer
-* path and to the treasury reads. USDC, USDT, WETH and EURC are admitted assets.
-* There is no default token.
-*/
-const SETTLEMENT_ASSETS_BASE_SEPOLIA = Object.freeze({
-	CAPXUL_TEST_USDC: SYNTHETIC_TEST_ASSET_FIXTURES.usdc,
-	CAPXUL_TEST_USDT: SYNTHETIC_TEST_ASSET_FIXTURES.usdt,
-	CAPXUL_TEST_WETH: SYNTHETIC_TEST_ASSET_FIXTURES.weth,
-	CAPXUL_TEST_EURC: SYNTHETIC_TEST_ASSET_FIXTURES.eurc
-});
-const CONFIGURED_MONEY_ASSETS = Object.freeze(Object.values(SETTLEMENT_ASSETS_BASE_SEPOLIA));
-Object.freeze({ BASE_SEPOLIA: Object.freeze({
-	CAPXUL_TEST_USDC: SETTLEMENT_ASSETS_BASE_SEPOLIA.CAPXUL_TEST_USDC.assetId,
-	CAPXUL_TEST_USDT: SETTLEMENT_ASSETS_BASE_SEPOLIA.CAPXUL_TEST_USDT.assetId,
-	CAPXUL_TEST_WETH: SETTLEMENT_ASSETS_BASE_SEPOLIA.CAPXUL_TEST_WETH.assetId,
-	CAPXUL_TEST_EURC: SETTLEMENT_ASSETS_BASE_SEPOLIA.CAPXUL_TEST_EURC.assetId
-}) });
-/**
-* Every known asset in ONE identity space. The tiers above declare admission;
-* this is the only list an identity resolves against, so an asset is never
-* two different things depending on which list a caller happened to read.
-*/
-const MONEY_ASSET_REGISTRY = [...SYNTHETIC_TEST_ASSETS];
-CONFIGURED_MONEY_ASSETS.map((asset) => asset.tokenAddress.toLowerCase());
-/** The registry row for `assetId` across every tier, or `null`. */
-function configuredMoneyAssetById(assetId) {
-	const canonical = toAssetId(assetId);
-	return MONEY_ASSET_REGISTRY.find((asset) => asset.assetId === canonical) ?? null;
-}
-//#endregion
 //#region ../../packages/protocol/src/documents/receipts.ts
 async function parseSupportingReceiptV3(input) {
 	const supporting = SchemaParser.decodeUnknownSync(SupportingReceiptInputSchema, { onExcessProperty: "error" })(input);
@@ -18964,23 +19065,6 @@ async function parseSupportingReceiptV3(input) {
 	};
 }
 //#endregion
-//#region ../../packages/protocol/src/documents/identities.ts
-/** A caller handed this module a value its own types rule out: a defect, named. */
-function defect$1(step, message) {
-	return new CapxulError("UNKNOWN", message, { details: { step } });
-}
-function hashDocumentOriginIdV3(input) {
-	if (!Number.isSafeInteger(input.chainId) || input.chainId <= 0 || !Number.isSafeInteger(input.itemIndex) || input.itemIndex < 0 || input.actorKind !== "account" && input.actorKind !== "organization" || input.actorId.length === 0 || input.requestKey.length === 0) throw defect$1("hashDocumentOriginIdV3", "Invalid document origin input");
-	return keccak256$1(encodeAbiParameters$1(parseAbiParameters("string namespace, uint256 chainId, string actorKind, string actorId, string requestKey, uint256 itemIndex"), [
-		"capxul.document-origin.v3",
-		BigInt(input.chainId),
-		input.actorKind,
-		input.actorId,
-		input.requestKey,
-		BigInt(input.itemIndex)
-	]));
-}
-//#endregion
 //#region ../../packages/protocol/src/documents/context.ts
 function sameAmount(left, right) {
 	return left.asset === right.asset && left.minorUnits === right.minorUnits && left.decimals === right.decimals;
@@ -19261,6 +19345,25 @@ function verifiesInvoiceCheckoutBirthEvidence(evidence, invoice, chainId, source
 	return "kind" in evidence.request && evidence.request.kind === "invoice_checkout" && evidence.request.linkToken === invoice.linkToken && evidence.preparedCommand?.items.length === 1 && item?.operation === "send" && evidence.preparedCommand.senderSafe.toLowerCase() === sourceWallet.toLowerCase() && evidence.preparedCommand.contractAddress.toLowerCase() === invoice.contractAddress.toLowerCase() && item.settlementId === invoice.settlementId && item.documentHash === invoice.documentHash && item.recipientSafe.toLowerCase() === invoice.recipientSafe.toLowerCase() && item.tokenAddress.toLowerCase() === invoice.tokenAddress.toLowerCase() && item.rawAmount === invoice.rawAmount && item.kind === (invoice.documentKind === "memo" ? 0 : 1) && invoice.chainId === chainId;
 }
 //#endregion
+//#region ../../packages/protocol/src/payments/execution-identity.ts
+/** A command and its exact signed operation have one durable execution identity. */
+function moneyExecutionId(commandId, digest) {
+	return `money_execution_${keccak256$1(encodeAbiParameters$1([
+		{ type: "string" },
+		{ type: "string" },
+		{ type: "bytes32" }
+	], [
+		"capxul.money-execution.v1",
+		commandId,
+		toLowerBytes32(digest)
+	])).slice(2)}`;
+}
+/** Existing stored executions keep their digest-derived identity. */
+function matchesMoneyExecutionId(executionId, digest, commandId) {
+	const exactDigest = toLowerBytes32(digest);
+	return executionId === `money_execution_${exactDigest.slice(2)}` || commandId !== void 0 && executionId === moneyExecutionId(commandId, exactDigest);
+}
+//#endregion
 //#region ../../packages/protocol/src/evm/payments-abi.ts
 /** The exact compiled CapxulPaymentsV2 ABI. */
 const CAPXUL_PAYMENTS_V2_ABI = [
@@ -19815,17 +19918,280 @@ const CAPXUL_PAYMENTS_V2_ABI = [
 	},
 	{
 		type: "error",
-		name: "AlreadyCancelled",
-		inputs: []
+		name: "AlreadyCancelled",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "AlreadyClaimed",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "DocumentHashMismatch",
+		inputs: [{
+			name: "expected",
+			type: "bytes32",
+			internalType: "bytes32"
+		}, {
+			name: "supplied",
+			type: "bytes32",
+			internalType: "bytes32"
+		}]
+	},
+	{
+		type: "error",
+		name: "InvalidTimeParams",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "NotCreator",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "NotRecipient",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "NothingToClaim",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "SettlementIdConsumed",
+		inputs: [{
+			name: "settlementId",
+			type: "bytes32",
+			internalType: "bytes32"
+		}]
+	},
+	{
+		type: "error",
+		name: "TokenCallReturnedFalse",
+		inputs: [{
+			name: "token",
+			type: "address",
+			internalType: "address"
+		}]
+	},
+	{
+		type: "error",
+		name: "TokenHasNoCode",
+		inputs: [{
+			name: "token",
+			type: "address",
+			internalType: "address"
+		}]
+	},
+	{
+		type: "error",
+		name: "ZeroAddress",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "ZeroAmount",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "ZeroDocumentHash",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "ZeroSettlementId",
+		inputs: []
+	}
+];
+/** Immutable CapxulPaymentsV2 deployment on Base Sepolia. */
+const CAPXUL_PAYMENTS_V2_ADDRESS = "0x7a5c25aB7ce91d7a475B71cd1ec33E230291f8a4";
+//#endregion
+//#region ../../packages/protocol/src/evm/payments-v3.ts
+const PAYMENT_ITEM_COMPONENTS = [
+	{
+		name: "settlementId",
+		type: "bytes32",
+		internalType: "bytes32"
+	},
+	{
+		name: "recipient",
+		type: "address",
+		internalType: "address"
+	},
+	{
+		name: "token",
+		type: "address",
+		internalType: "address"
+	},
+	{
+		name: "amount",
+		type: "uint256",
+		internalType: "uint256"
+	},
+	{
+		name: "kind",
+		type: "uint16",
+		internalType: "uint16"
+	},
+	{
+		name: "documentHash",
+		type: "bytes32",
+		internalType: "bytes32"
+	},
+	{
+		name: "jobNonce",
+		type: "bytes32",
+		internalType: "bytes32"
+	},
+	{
+		name: "executor",
+		type: "address",
+		internalType: "address"
+	}
+];
+const PAYMENT_ITEM_INPUT = {
+	name: "item",
+	type: "tuple",
+	internalType: "struct CapxulPaymentsV3.PaymentItem",
+	components: PAYMENT_ITEM_COMPONENTS
+};
+/** The exact compiled CapxulPaymentsV3 ABI. */
+const CAPXUL_PAYMENTS_V3_ABI = [
+	{
+		type: "function",
+		name: "paymentId",
+		inputs: [PAYMENT_ITEM_INPUT],
+		outputs: [{
+			name: "",
+			type: "bytes32",
+			internalType: "bytes32"
+		}],
+		stateMutability: "view"
+	},
+	{
+		type: "function",
+		name: "send",
+		inputs: [PAYMENT_ITEM_INPUT],
+		outputs: [],
+		stateMutability: "nonpayable"
+	},
+	{
+		type: "function",
+		name: "sendBatch",
+		inputs: [{
+			name: "items",
+			type: "tuple[]",
+			internalType: "struct CapxulPaymentsV3.PaymentItem[]",
+			components: PAYMENT_ITEM_COMPONENTS
+		}],
+		outputs: [],
+		stateMutability: "nonpayable"
+	},
+	{
+		type: "function",
+		name: "settled",
+		inputs: [{
+			name: "",
+			type: "bytes32",
+			internalType: "bytes32"
+		}],
+		outputs: [{
+			name: "",
+			type: "bool",
+			internalType: "bool"
+		}],
+		stateMutability: "view"
+	},
+	{
+		type: "event",
+		name: "PaymentSent",
+		inputs: [
+			{
+				name: "settlementId",
+				type: "bytes32",
+				indexed: true,
+				internalType: "bytes32"
+			},
+			{
+				name: "sender",
+				type: "address",
+				indexed: true,
+				internalType: "address"
+			},
+			{
+				name: "recipient",
+				type: "address",
+				indexed: true,
+				internalType: "address"
+			},
+			{
+				name: "token",
+				type: "address",
+				indexed: false,
+				internalType: "address"
+			},
+			{
+				name: "amount",
+				type: "uint256",
+				indexed: false,
+				internalType: "uint256"
+			},
+			{
+				name: "kind",
+				type: "uint16",
+				indexed: false,
+				internalType: "uint16"
+			},
+			{
+				name: "documentHash",
+				type: "bytes32",
+				indexed: false,
+				internalType: "bytes32"
+			}
+		],
+		anonymous: false
+	},
+	{
+		type: "error",
+		name: "InexactTransfer",
+		inputs: [
+			{
+				name: "token",
+				type: "address",
+				internalType: "address"
+			},
+			{
+				name: "expected",
+				type: "uint256",
+				internalType: "uint256"
+			},
+			{
+				name: "received",
+				type: "uint256",
+				internalType: "uint256"
+			}
+		]
 	},
 	{
 		type: "error",
-		name: "AlreadyClaimed",
-		inputs: []
+		name: "InvalidExecutor",
+		inputs: [{
+			name: "expected",
+			type: "address",
+			internalType: "address"
+		}, {
+			name: "supplied",
+			type: "address",
+			internalType: "address"
+		}]
 	},
 	{
 		type: "error",
-		name: "DocumentHashMismatch",
+		name: "PaymentIdMismatch",
 		inputs: [{
 			name: "expected",
 			type: "bytes32",
@@ -19838,22 +20204,7 @@ const CAPXUL_PAYMENTS_V2_ABI = [
 	},
 	{
 		type: "error",
-		name: "InvalidTimeParams",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "NotCreator",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "NotRecipient",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "NothingToClaim",
+		name: "ReentrantCall",
 		inputs: []
 	},
 	{
@@ -19898,14 +20249,73 @@ const CAPXUL_PAYMENTS_V2_ABI = [
 		name: "ZeroDocumentHash",
 		inputs: []
 	},
+	{
+		type: "error",
+		name: "ZeroJobNonce",
+		inputs: []
+	},
 	{
 		type: "error",
 		name: "ZeroSettlementId",
 		inputs: []
 	}
 ];
-/** Immutable CapxulPaymentsV2 deployment on Base Sepolia. */
-const CAPXUL_PAYMENTS_V2_ADDRESS = "0x7a5c25aB7ce91d7a475B71cd1ec33E230291f8a4";
+/** The fixed CREATE2 deployment on every admitted chain. */
+const CAPXUL_PAYMENTS_V3_ADDRESS = "0x46b28f455c8de7c1505e3185A3f8f87B07eaE1aE";
+//#endregion
+//#region ../../packages/protocol/src/evm/payments/encoding.ts
+const CAPXUL_PAYMENT_V3_TYPEHASH = keccak256$1(toBytes$1("CapxulPayment(uint256 chainId,address router,bytes32 jobNonce,address executor,address recipient,address token,uint256 amount,uint16 kind,bytes32 documentHash)"));
+function paymentJobNonce(commandId, itemIndex) {
+	if (!Number.isSafeInteger(itemIndex) || itemIndex < 0) throw Errors.invalidInput("itemIndex", "must be a non-negative safe integer");
+	return sha256(toBytes$1(`{"commandId":${JSON.stringify(commandId)},"index":${itemIndex},"version":1}`));
+}
+function capxulPaymentsV3PaymentId(chainId, router, item) {
+	return keccak256$1(encodeAbiParameters$1(parseAbiParameters("bytes32,uint256,address,bytes32,address,address,address,uint256,uint16,bytes32"), [
+		CAPXUL_PAYMENT_V3_TYPEHASH,
+		BigInt(chainId),
+		router,
+		item.jobNonce,
+		item.executor,
+		item.recipient,
+		item.token,
+		item.amount,
+		item.kind,
+		item.documentHash
+	]));
+}
+function encodeCapxulPaymentsV3Send(item) {
+	return encodeFunctionData({
+		abi: CAPXUL_PAYMENTS_V3_ABI,
+		functionName: "send",
+		args: [item]
+	});
+}
+function encodeCapxulPaymentsV3SendBatch(items) {
+	return encodeFunctionData({
+		abi: CAPXUL_PAYMENTS_V3_ABI,
+		functionName: "sendBatch",
+		args: [items]
+	});
+}
+function v3Item(command, item, itemIndex) {
+	const { commandId, chainId, senderSafe } = command;
+	if (commandId === void 0 || chainId === void 0 || senderSafe === void 0) throw Errors.invalidInput("command", "CapxulPaymentsV3 requires its command identity");
+	const terms = {
+		recipient: item.recipientSafe,
+		token: item.tokenAddress,
+		amount: BigInt(item.rawAmount),
+		kind: item.kind,
+		documentHash: item.documentHash,
+		jobNonce: item.jobNonce ?? paymentJobNonce(commandId, itemIndex),
+		executor: item.executor ?? senderSafe
+	};
+	const settlementId = capxulPaymentsV3PaymentId(chainId, command.contractAddress, terms);
+	if (settlementId.toLowerCase() !== item.settlementId.toLowerCase()) throw Errors.invalidInput("settlementId", "does not match CapxulPaymentsV3 terms");
+	return {
+		settlementId,
+		...terms
+	};
+}
 //#endregion
 //#region ../../packages/protocol/src/evm/zodiac-abi.ts
 const MODULE_PROXY_FACTORY_ABI = [{
@@ -20270,7 +20680,8 @@ function requiredByPaymentToken(items) {
 	}
 	return totals;
 }
-function birthCall(contract, item) {
+function birthCall(command, item, itemIndex) {
+	const contract = command.contractAddress;
 	const common = {
 		settlementId: item.settlementId,
 		recipient: item.recipientSafe,
@@ -20281,7 +20692,7 @@ function birthCall(contract, item) {
 	return {
 		to: contract,
 		value: 0n,
-		data: item.operation === "send" ? encodeCapxulPaymentsV2Send({
+		data: item.operation === "send" ? contract.toLowerCase() === "0x46b28f455c8de7c1505e3185A3f8f87B07eaE1aE".toLowerCase() ? encodeCapxulPaymentsV3Send(v3Item(command, item, itemIndex)) : encodeCapxulPaymentsV2Send({
 			...common,
 			amount: BigInt(item.rawAmount)
 		}) : encodeCapxulPaymentsV2CreateCommitment({
@@ -20293,7 +20704,8 @@ function birthCall(contract, item) {
 		})
 	};
 }
-function birthCalls(contract, items) {
+function birthCalls(command, items) {
+	const contract = command.contractAddress;
 	const approvals = [...requiredByPaymentToken(items).values()].map(({ token, total }) => ({
 		to: token,
 		value: 0n,
@@ -20307,7 +20719,7 @@ function birthCalls(contract, items) {
 	if (items.length > 1 && sends.length === items.length) return [...approvals, {
 		to: contract,
 		value: 0n,
-		data: encodeCapxulPaymentsV2SendBatch(sends.map((item) => ({
+		data: contract.toLowerCase() === "0x46b28f455c8de7c1505e3185A3f8f87B07eaE1aE".toLowerCase() ? encodeCapxulPaymentsV3SendBatch(sends.map((item, index) => v3Item(command, item, index))) : encodeCapxulPaymentsV2SendBatch(sends.map((item) => ({
 			settlementId: item.settlementId,
 			recipient: item.recipientSafe,
 			token: item.tokenAddress,
@@ -20316,7 +20728,7 @@ function birthCalls(contract, items) {
 			documentHash: item.documentHash
 		})))
 	}];
-	return [...approvals, ...items.map((item) => birthCall(contract, item))];
+	return [...approvals, ...items.map((item, index) => birthCall(command, item, index))];
 }
 function lifecycleData(item) {
 	switch (item.operation) {
@@ -20331,7 +20743,7 @@ function encodePreparedPaymentCallData(command) {
 	if (command.items.length === 0) throw Errors.invalidInput("items", "must not be empty");
 	const births = command.items.filter(isBirth);
 	if (births.length === command.items.length) {
-		const calls = birthCalls(command.contractAddress, births);
+		const calls = birthCalls(command, births);
 		return command.executionRoute.kind === "direct" ? safe4337MultiSendUserOpCallData({ calls }) : buildOrgRoleSpendPersonalCallData(buildOrgRoleMultiCall({
 			rolesModuleAddress: command.executionRoute.rolesModule,
 			roleKey: command.executionRoute.roleKey,
@@ -20394,15 +20806,16 @@ function verifiesMoneyOperation(evidence, expectedSafe, chainId, permissionId) {
 	try {
 		const command = evidence.preparedCommand;
 		const operation = evidence.userOperation;
-		if (command === void 0 || operation === void 0 || false) return false;
-		if (command.commandId !== evidence.commandId || command.chainId !== chainId || evidence.chainId !== chainId || command.contractAddress.toLowerCase() !== "0x7a5c25aB7ce91d7a475B71cd1ec33E230291f8a4".toLowerCase() || command.items.length !== evidence.paymentIds.length || command.items.some((item, index) => item.paymentId !== evidence.paymentIds[index]) || evidence.userOpSenderSafe.toLowerCase() !== expectedSafe.toLowerCase() || command.executionRoute.userOpSenderSafe.toLowerCase() !== expectedSafe.toLowerCase() || operation.sender.toLowerCase() !== expectedSafe.toLowerCase()) return false;
+		if (command === void 0 || operation === void 0) return false;
+		const knownRouter = command.contractAddress.toLowerCase() === "0x7a5c25aB7ce91d7a475B71cd1ec33E230291f8a4".toLowerCase() || command.contractAddress.toLowerCase() === "0x46b28f455c8de7c1505e3185A3f8f87B07eaE1aE".toLowerCase();
+		if (command.commandId !== evidence.commandId || command.chainId !== chainId || evidence.chainId !== chainId || !knownRouter || command.items.length !== evidence.paymentIds.length || command.items.some((item, index) => item.paymentId !== evidence.paymentIds[index]) || evidence.userOpSenderSafe.toLowerCase() !== expectedSafe.toLowerCase() || command.executionRoute.userOpSenderSafe.toLowerCase() !== expectedSafe.toLowerCase() || operation.sender.toLowerCase() !== expectedSafe.toLowerCase()) return false;
 		const route = command.executionRoute;
 		if (route.kind === "direct") {
 			if (permissionId !== void 0 || command.senderSafe.toLowerCase() !== expectedSafe.toLowerCase()) return false;
 		} else if ((permissionId === void 0 ? !isOwnerLifecycle(command) : route.roleKey.toLowerCase() !== roleKeyForPermission(permissionId).toLowerCase()) || command.senderSafe.toLowerCase() !== route.organizationSafe.toLowerCase()) return false;
 		if (operation.callData.toLowerCase() !== encodePreparedPaymentCallData(command).toLowerCase()) return false;
 		const digest = moneySafeOpDigest(operation, chainId);
-		return evidence.digest.toLowerCase() === digest.toLowerCase() && evidence.executionId === `money_execution_${digest.slice(2).toLowerCase()}`;
+		return evidence.digest.toLowerCase() === digest.toLowerCase() && matchesMoneyExecutionId(evidence.executionId, digest, evidence.commandId);
 	} catch {
 		return false;
 	}
@@ -20538,6 +20951,29 @@ function reportMoneyTelemetryFailure(kind, name, cause) {
 	}));
 }
 //#endregion
+//#region ../../packages/protocol/src/payments/request-finality.ts
+/** Add a proved request outcome without changing the original failure. */
+function withPaymentRequestFinality(error, paymentRequestFinality) {
+	const marked = new CapxulError(error.code, error.message, {
+		cause: error.cause,
+		details: {
+			...error.details,
+			paymentRequestFinality
+		},
+		...error.correlationId === void 0 ? {} : { correlationId: error.correlationId },
+		...error.layer === void 0 ? {} : { layer: error.layer },
+		...error.mode === void 0 ? {} : { mode: error.mode },
+		...error.chain === void 0 ? {} : { chain: error.chain }
+	});
+	marked.name = error.name;
+	if (error.stack !== void 0) marked.stack = error.stack;
+	return marked;
+}
+/** Only an authoritative failed-key response or confirmed durable closure resolves a key. */
+function isFinalPaymentRequestError(error) {
+	return error.details?.paymentRequestFinality === "closed" || error.code === "INVALID_INPUT" && error.details?.field === "requestKey" && error.details.paymentRequestFinality === "failed";
+}
+//#endregion
 //#region ../../packages/sdk/src/payments/prepared-execution.ts
 async function abandonPrepared(deps, executionId, reason, result, onPreparedClosed) {
 	const abandoned = await runIfActive(void 0, executions.abandon.name, () => callOperation(deps.convexCall, executions.abandon, {
@@ -20545,8 +20981,12 @@ async function abandonPrepared(deps, executionId, reason, result, onPreparedClos
 		reason
 	}).pipe(Effect.mapError((publicError) => ({ publicError }))), deps.runPromise);
 	if (!abandoned.ok) return abandoned;
-	if (abandoned.value) onPreparedClosed?.();
-	return result;
+	if (!abandoned.value) return result;
+	onPreparedClosed?.();
+	return result.ok ? result : {
+		ok: false,
+		error: withPaymentRequestFinality(result.error, "closed")
+	};
 }
 async function notifyVerifiedPaymentPrepared(onPrepared, paymentId) {
 	if (onPrepared === void 0) return {
@@ -20590,14 +21030,31 @@ async function abandonPreparedCommand(deps, executionId, closePayment, reason, r
 		reason
 	})).pipe(Effect.mapError((publicError) => ({ publicError })))), controls), deps.runPromise);
 	if (!abandoned.ok) return abandoned;
-	if (abandoned.value) onPreparedClosed?.();
-	return result;
+	if (!abandoned.value) return result;
+	onPreparedClosed?.();
+	return result.ok ? result : {
+		ok: false,
+		error: withPaymentRequestFinality(result.error, "closed")
+	};
 }
 //#endregion
 //#region ../../packages/sdk/src/payments/command-execution.ts
 function isAborted$3(signal) {
 	return signal?.aborted === true;
 }
+function settledPaymentsMatch(evidence) {
+	try {
+		return evidence.settled?.payments.every((payment, index) => {
+			const item = evidence.preparedCommand?.items[index];
+			const instructions = payment.documents.filter((document) => document.role === "instruction");
+			const amount = toExactAssetAmount(payment.amount, CONFIGURED_MONEY_ASSETS);
+			const asset = CONFIGURED_MONEY_ASSETS.find((row) => row.assetId === amount.asset);
+			return item?.operation === "send" && payment.status === "settled" && payment.direction === "out" && payment.receipt?.chainId === evidence.chainId && item.tokenAddress.toLowerCase() === asset?.tokenAddress.toLowerCase() && item.rawAmount === amount.minorUnits && instructions.length === 1 && canonicalJson(instructions[0]) === canonicalJson(evidence.preparedCommand?.instructionDocuments?.[index]);
+		}) === true;
+	} catch {
+		return false;
+	}
+}
 async function executePrepared(deps, prepare, isExpectedRequest, closePaymentOnExit, onPreparedClosed, signal, controls, onPrepared, readAcceptedReplay, checkout, sourceWallet) {
 	if (isAborted$3(signal)) return {
 		ok: false,
@@ -20630,7 +21087,7 @@ async function executePrepared(deps, prepare, isExpectedRequest, closePaymentOnE
 	const prepared = await prepare(signerAddress);
 	if (!current()) return cancelled;
 	if (!prepared.ok) return prepared;
-	const accepted = readAcceptedReplay?.();
+	const accepted = readAcceptedReplay?.() ?? prepared.value.settled;
 	const closePrepared = closePaymentOnExit && accepted === void 0;
 	const executionId = Schema.decodeUnknownResult(MoneyExecutionIdSchema)(readField(prepared.value, "executionId"));
 	if (executionId._tag === "Failure") return {
@@ -20656,12 +21113,12 @@ async function executePrepared(deps, prepare, isExpectedRequest, closePaymentOnE
 	if (!verified) return abandon("prepared_mismatch", Errors.invalidInput("execution", "prepared Money operation mismatch"));
 	if (accepted !== void 0) {
 		const decodedSubmission = Schema.decodeResult(SubmittedPaymentCommandExecutionSchema, { onExcessProperty: "error" })(accepted);
-		if (decodedSubmission._tag === "Failure" || !acceptedSubmissionMatches(evidence, decodedSubmission.success)) return {
+		if (decodedSubmission._tag === "Failure" || !acceptedSubmissionMatches(evidence, decodedSubmission.success) || evidence.settled !== void 0 && !settledPaymentsMatch(evidence)) return {
 			ok: false,
-			error: Errors.invalidInput("execution", "accepted Payroll replay evidence mismatch")
+			error: Errors.invalidInput("execution", "accepted Money replay evidence mismatch")
 		};
 		if (!current() || isAborted$3(signal)) return cancelled;
-		return {
+		if (evidence.settled === void 0) return {
 			ok: true,
 			value: decodedSubmission.success
 		};
@@ -20678,6 +21135,10 @@ async function executePrepared(deps, prepare, isExpectedRequest, closePaymentOnE
 	}
 	if (!current()) return cancelled;
 	if (isAborted$3(signal)) return abandon("cancelled", Errors.cancelled({ operation: "payments" }));
+	if (evidence.settled !== void 0) return {
+		ok: true,
+		value: evidence.settled
+	};
 	await emitPreparedInitiation(deps, evidence);
 	if (!current()) return cancelled;
 	if (isAborted$3(signal)) return abandon("cancelled", Errors.cancelled({ operation: "payments" }));
@@ -20728,10 +21189,10 @@ function itemMatches(prepared, amount) {
 	return item.paymentId === prepared.paymentId && Object.entries(PAYMENT_PURPOSE_KIND_CODES).some(([name, code]) => name === prepared.purposeKind && code === item.kind) && expectedPurpose === prepared.purposeKind && documentKind === "invoice" === (purpose === "invoice") && purpose !== "payroll" && item.tokenAddress.toLowerCase() === asset?.tokenAddress.toLowerCase() && (item.operation === "send" ? item.rawAmount : item.totalAmount) === amount.minorUnits && plannedCommitmentMatches(prepared) && recipientMatches(prepared, item.recipientSafe.toLowerCase());
 }
 /** The callData a personal Payment birth item must carry: approve, then send or commit. */
-function expectedPersonalCallData(prepared) {
+function expectedPersonalCallData(prepared, expectedSafe, chainId) {
 	const item = prepared.item;
 	if (item.operation !== "send" && item.operation !== "create_commitment") throw new Error("Expected personal Payment birth item");
-	const contract = CAPXUL_PAYMENTS_V2_ADDRESS;
+	const contract = toAddress(CAPXUL_PAYMENTS_V2_ADDRESS);
 	const { settlementId, recipientSafe, tokenAddress, documentHash } = item;
 	const amount = BigInt(item.operation === "send" ? item.rawAmount : item.totalAmount);
 	const paymentData = item.operation === "send" ? encodeCapxulPaymentsV2Send({
@@ -20752,26 +21213,61 @@ function expectedPersonalCallData(prepared) {
 		kind: item.kind,
 		documentHash
 	});
-	return safe4337MultiSendUserOpCallData({ calls: [{
+	const calls = (router, encodedPaymentData) => safe4337MultiSendUserOpCallData({ calls: [{
 		to: tokenAddress,
 		value: 0n,
 		data: encodeFunctionData({
 			abi: ERC20_APPROVE_ABI,
 			functionName: "approve",
-			args: [contract, amount]
+			args: [router, amount]
 		})
 	}, {
-		to: contract,
+		to: router,
 		value: 0n,
-		data: paymentData
+		data: encodedPaymentData
 	}] });
+	const v2 = calls(contract, paymentData);
+	if (item.operation !== "send") return [v2];
+	const terms = {
+		recipient: item.recipientSafe,
+		token: item.tokenAddress,
+		amount,
+		kind: item.kind,
+		documentHash,
+		jobNonce: paymentJobNonce(prepared.commandId, 0),
+		executor: toAddress(expectedSafe)
+	};
+	const v3Contract = toAddress(CAPXUL_PAYMENTS_V3_ADDRESS);
+	const v3SettlementId = capxulPaymentsV3PaymentId(chainId, v3Contract, terms);
+	if (v3SettlementId.toLowerCase() !== settlementId.toLowerCase()) return [v2];
+	return [calls(v3Contract, encodeCapxulPaymentsV3Send({
+		settlementId: v3SettlementId,
+		...terms
+	}))];
 }
 function verifiesPersonalOperation(prepared, expectedSafe, chainId) {
 	try {
 		const operation = prepared.userOperation;
-		if (operation.sender.toLowerCase() !== expectedSafe.toLowerCase() || operation.callData.toLowerCase() !== expectedPersonalCallData(prepared).toLowerCase()) return false;
+		if (operation.sender.toLowerCase() !== expectedSafe.toLowerCase() || !expectedPersonalCallData(prepared, expectedSafe, chainId).some((callData) => operation.callData.toLowerCase() === callData.toLowerCase())) return false;
 		const digest = moneySafeOpDigest(operation, chainId);
-		return prepared.digest.toLowerCase() === digest.toLowerCase() && prepared.executionId === `money_execution_${digest.slice(2).toLowerCase()}`;
+		return prepared.digest.toLowerCase() === digest.toLowerCase() && matchesMoneyExecutionId(prepared.executionId, digest, prepared.commandId);
+	} catch {
+		return false;
+	}
+}
+/** A settled reply retains the verified operation, quantity, instruction and receipt. */
+function verifiesSettledPersonalReplay(evidence) {
+	const settled = evidence.settled;
+	if (settled === void 0) return true;
+	try {
+		const instructions = settled.payment.documents.filter((document) => document.role === "instruction");
+		return acceptedSubmissionMatches({
+			...evidence,
+			paymentIds: [evidence.paymentId]
+		}, {
+			...settled,
+			payments: [settled.payment]
+		}) && settled.payment.status === "settled" && settled.payment.direction === "out" && settled.payment.receipt?.chainId === evidence.chainId && itemMatches(evidence, toExactAssetAmount(settled.payment.amount, CONFIGURED_MONEY_ASSETS)) && instructions.length === 1 && canonicalJson(instructions[0]) === canonicalJson(evidence.instructionDocument);
 	} catch {
 		return false;
 	}
@@ -20885,6 +21381,7 @@ async function preparedMismatch(chainId, evidence, payment, expected) {
 	if (evidence.userOpSenderSafe.toLowerCase() !== expected.expectedSafe.toLowerCase()) return mismatch$1("userOpSenderSafe", "prepared Payment execution uses another Account Safe");
 	if (!await verifiesPersonalDocument(evidence)) return mismatch$1("document", "prepared Payment document does not match the request");
 	if (!verifiesPersonalOperation(evidence, expected.expectedSafe, chainId)) return mismatch$1("execution", "prepared Payment operation does not match the request");
+	if (!verifiesSettledPersonalReplay(evidence)) return mismatch$1("execution", "settled Payment replay evidence mismatch");
 }
 /**
 * Prepare one personal Payment for this signer and check what the backend
@@ -20935,19 +21432,27 @@ async function emitPreparedPaymentInitiated(deps, evidence) {
 async function executePersonalPayment(deps, payment, signal, requestKey, onPreparedClosed, onPrepared) {
 	if (isAborted$2(signal)) return cancelled$1(CAPXUL_OPERATIONS.payments.pay);
 	if (deps.signer === void 0) return mismatch$1("signer", "payments.pay requires a configured CapxulSigner");
-	if (deps.actor.authSession() === null) return {
+	const session = deps.actor.authSession();
+	if (session === null) return {
 		ok: false,
 		error: Errors.notAuthenticated()
 	};
+	const lifetime = deps.actor.authLifetime();
+	const current = () => deps.actor.matchesAuthLifetime(lifetime, session.authUserId);
 	const signerAddress = await signerCall(deps.signer.source, "getAddress", () => deps.signer.getAddress());
 	if (!signerAddress.ok) return signerAddress;
 	const prepared = await prepareVerifiedPersonalPayment(deps, payment, signerAddress.value, requestKey ?? `pay_${crypto.randomUUID()}`, signal, onPreparedClosed);
 	if (!prepared.ok) return prepared;
 	const evidence = prepared.value;
+	if (evidence.settled !== void 0 && !current()) return cancelled$1(CAPXUL_OPERATIONS.payments.pay);
 	const digest = evidence.digest;
 	if (isAborted$2(signal)) return abandonPrepared(deps, evidence.executionId, "cancelled", cancelled$1(CAPXUL_OPERATIONS.payments.pay), onPreparedClosed);
 	const delivered = await notifyVerifiedPaymentPrepared(onPrepared, evidence.paymentId);
 	if (!delivered.ok) return delivered;
+	if (evidence.settled !== void 0) return current() ? {
+		ok: true,
+		value: evidence.settled
+	} : cancelled$1(CAPXUL_OPERATIONS.payments.pay);
 	if (isAborted$2(signal)) return abandonPrepared(deps, evidence.executionId, "cancelled", cancelled$1(CAPXUL_OPERATIONS.payments.pay), onPreparedClosed);
 	await emitPreparedPaymentInitiated(deps, evidence);
 	if (isAborted$2(signal)) return abandonPrepared(deps, evidence.executionId, "cancelled", cancelled$1(CAPXUL_OPERATIONS.payments.pay), onPreparedClosed);
@@ -21450,6 +21955,41 @@ function resolvedTargetFromResolution(resolution) {
 	};
 }
 //#endregion
+//#region ../../packages/sdk/src/requests/request-keys.ts
+/** Keep an Invoice attempt through uncertainty; renew an old failed default only before preparation. */
+async function withInvoiceRequestKey(actorId, intent, provided, run) {
+	let key;
+	let prepared = false;
+	try {
+		key = await paymentRequestKeyLifecycle(`invoice-request:${actorId}`, intent, provided);
+		let result = await run(key.key, () => {
+			prepared = true;
+		});
+		const renew = provided === void 0 && !prepared && !result.ok && isFinalPaymentRequestError(result.error) && result.error.details?.paymentRequestFinality === "failed";
+		let finished = true;
+		try {
+			await key.finish(!result.ok && isFinalPaymentRequestError(result.error));
+		} catch {
+			finished = false;
+		}
+		if (renew && finished) {
+			key = await paymentRequestKeyLifecycle(`invoice-request:${actorId}`, intent);
+			result = await run(key.key, () => {
+				prepared = true;
+			});
+			await key.finish(!result.ok && isFinalPaymentRequestError(result.error)).catch(() => void 0);
+		}
+		return result;
+	} catch (cause) {
+		return {
+			ok: false,
+			error: asCapxulError(cause)
+		};
+	} finally {
+		await key?.finish(false).catch(() => void 0);
+	}
+}
+//#endregion
 //#region ../../packages/sdk/src/requests/checkout-payments.ts
 const missing$1 = async () => ({
 	ok: false,
@@ -21639,72 +22179,96 @@ function makeCheckoutMethods(deps) {
 }
 //#endregion
 //#region ../../packages/sdk/src/requests/inbox-payments.ts
-function mapApprovedInboxPayment(command, input) {
+const refused = () => ({
+	ok: false,
+	error: Errors.providerError("convex", inboxes.approve.name, "approved Payment read does not match its command")
+});
+/** Read the approved command's actual Payment under the payer's existing scope. */
+async function readApprovedInboxPayment(calls, command, controls, current) {
 	const item = command.items[0];
-	if (item === void 0 || item.operation !== "send" && item.operation !== "create_commitment") return {
+	const cancelled = {
 		ok: false,
-		error: Errors.providerError("convex", inboxes.approve.name, "reply has no payment birth item")
+		error: Errors.cancelled({ operation: inboxes.approve.name })
 	};
-	try {
-		const asset = CONFIGURED_MONEY_ASSETS.find((candidate) => candidate.tokenAddress.toLowerCase() === item.tokenAddress.toLowerCase());
-		if (asset === void 0) return {
-			ok: false,
-			error: Errors.providerError("convex", inboxes.approve.name, "prepared payment asset is not configured")
-		};
-		const amount = {
-			asset: asset.assetId,
-			value: formatUnits(BigInt(item.operation === "send" ? item.rawAmount : item.totalAmount), asset.decimals)
-		};
-		const zero = {
-			...amount,
-			value: "0"
-		};
-		const timing = input.timing ?? { kind: "instant" };
-		return {
-			ok: true,
-			value: {
-				id: item.paymentId,
-				status: timing.kind === "instant" ? "pending" : timing.kind === "scheduled" ? "scheduled" : "streaming",
-				amount,
-				paymentType: "invoice",
-				direction: "out",
-				counterpartyLabel: item.recipientSafe,
-				receipt: null,
-				recipient: {
-					kind: "external_address",
-					label: item.recipientSafe
-				},
-				documents: [],
-				timing,
-				released: zero,
-				availableToClaim: zero,
-				createdAt: 0,
-				updatedAt: 0
-			}
-		};
-	} catch (cause) {
-		return {
-			ok: false,
-			error: Errors.unknown(cause)
-		};
-	}
+	if (command.items.length !== 1 || item === void 0 || item.operation !== "send" && item.operation !== "create_commitment") return refused();
+	if (!current()) return cancelled;
+	const check = (payment) => {
+		if (!current()) return cancelled;
+		if (payment === null || payment.id !== item.paymentId || payment.direction !== "out") return refused();
+		try {
+			const amount = toExactAssetAmount(payment.amount, CONFIGURED_MONEY_ASSETS);
+			const asset = CONFIGURED_MONEY_ASSETS.find((row) => row.assetId === amount.asset);
+			const instruction = payment.documents.find((document) => document.role === "instruction");
+			const expected = command.instructionDocuments?.[0];
+			if (asset?.tokenAddress.toLowerCase() !== item.tokenAddress.toLowerCase() || amount.minorUnits !== (item.operation === "send" ? item.rawAmount : item.totalAmount) || instruction?.documentHash !== item.documentHash || expected !== void 0 && (instruction.contentHash !== expected.contentHash || instruction.format !== expected.format) || payment.status === "settled" && payment.receipt?.chainId !== command.chainId) return refused();
+			return {
+				ok: true,
+				value: normalizePaymentTiming(payment)
+			};
+		} catch (cause) {
+			return {
+				ok: false,
+				error: Errors.unknown(cause)
+			};
+		}
+	};
+	const actor = calls.actor;
+	const result = actor.kind === "account" ? await calls.bookChecked(records.get, { paymentId: item.paymentId }, controls, check) : await calls.bookChecked(records.getForOrganization, {
+		orgId: actor.orgId,
+		paymentId: item.paymentId
+	}, controls, (response) => response.orgId === actor.orgId ? check(response.payment) : refused());
+	return current() ? result : cancelled;
 }
 //#endregion
 //#region ../../packages/sdk/src/requests/inboxes.ts
 function makeInboxMethods(calls) {
-	const { actor, convexCall, deps, observeContactScope, book, bookChecked } = calls;
+	const { actor, convexCall, deps, observeContactScope, book } = calls;
 	return {
 		paymentTerms: (requestId, options) => book(inboxes.paymentTerms, {
 			actor,
 			paymentRequestId: requestId
 		}, options, (terms) => terms),
 		list: (options) => book(inboxes.listCurrent, { actor }, options, (items) => mapPage(items, mapInboxItem)),
-		approve: (input, options) => bookChecked(inboxes.approve, {
-			actor,
-			paymentRequestId: input.requestId,
-			...input.timing === void 0 ? {} : { timing: input.timing },
-			...input.permissionId === void 0 ? {} : { permissionId: input.permissionId }
-		}, options, (prepared) => mapApprovedInboxPayment(prepared, input)),
+		approve: async (providedInput, options) => {
+			const input = structuredClone(providedInput);
+			const identity = deps.identityActor;
+			const lifetime = identity?.authLifetime();
+			const current = () => identity === void 0 || lifetime !== void 0 && identity.matchesAuthLifetime(lifetime, lifetime.authUserId);
+			const cancelled = {
+				ok: false,
+				error: Errors.cancelled({ operation: inboxes.approve.name })
+			};
+			const controls = deps.invocationControls?.(options) ?? options;
+			const approve = async (requestKey) => {
+				if (!current()) return cancelled;
+				const prepared = await book(inboxes.approve, {
+					actor,
+					paymentRequestId: input.requestId,
+					...requestKey === void 0 ? {} : { requestKey },
+					...input.timing === void 0 ? {} : { timing: input.timing },
+					...input.permissionId === void 0 ? {} : { permissionId: input.permissionId }
+				}, controls, (value) => value);
+				if (!current()) return cancelled;
+				if (!prepared.ok) return prepared;
+				return readApprovedInboxPayment(calls, prepared.value, controls, current);
+			};
+			const terms = await book(inboxes.paymentTerms, {
+				actor,
+				paymentRequestId: input.requestId
+			}, controls, (value) => value);
+			if (!current()) return cancelled;
+			if (!terms.ok) return terms;
+			if (terms.value.instruction.kind !== "invoice") return approve(input.requestKey);
+			return withInvoiceRequestKey(lifetime?.authUserId ?? "signed-out", {
+				...terms.value,
+				payer: actor.kind === "account" ? { kind: "account" } : {
+					kind: "organization",
+					orgId: actor.orgId
+				},
+				permissionId: input.permissionId,
+				release: input.timing ?? { kind: "instant" }
+			}, input.requestKey, (key) => approve(key));
+		},
 		fulfill: (input, options) => {
 			const onPrepared = options?.onPrepared;
 			const decoded = Schema.decodeResult(RequestPaymentConfirmationSchema, { onExcessProperty: "error" })(input);
@@ -21727,20 +22291,26 @@ function makeInboxMethods(calls) {
 			const controls = deps.invocationControls?.(options) ?? options;
 			return runCapxulEffect(Effect.gen(function* () {
 				const parent = yield* Effect.currentSpan.pipe(Effect.orDie);
-				return yield* awaitCapxulResult(() => executeRequestPayment({
+				const run = (named, prepared) => executeRequestPayment({
 					actor: identityActor,
 					chainId,
 					signer,
 					convexCall,
 					runPromise: deps.runPromise,
 					...deps.telemetry === void 0 ? {} : { telemetry: deps.telemetry }
-				}, confirmation, carryInvocationParentSpan(controls, parent), onPrepared === void 0 ? void 0 : async (paymentIds) => {
-					await onPrepared({ paymentIds });
+				}, named, carryInvocationParentSpan(controls, parent), async (paymentIds) => {
+					prepared();
+					await onPrepared?.({ paymentIds });
 					return {
 						ok: true,
 						value: void 0
 					};
-				}));
+				});
+				const { requestKey, ...intent } = confirmation;
+				return yield* awaitCapxulResult(() => confirmation.instruction.kind !== "invoice" ? run(confirmation, () => void 0) : withInvoiceRequestKey(identityActor.authSession()?.authUserId ?? "signed-out", intent, requestKey, (key, prepared) => run({
+					...confirmation,
+					requestKey: key
+				}, prepared)));
 			}).pipe(Effect.tap(() => observeContactScope)), controls, CAPXUL_OPERATIONS.inbox.fulfill, deps.runPromise);
 		},
 		decline: (requestId, options) => book(inboxes.decline, {
@@ -22666,7 +23236,7 @@ function makePersonalPay(deps) {
 			};
 		}
 		release(false);
-		await finishQuietly(requestKey, submitted.ok || flight.requestState.resolved);
+		await finishQuietly(requestKey, submitted.ok || flight.requestState.resolved || isFinalPaymentRequestError(submitted.error));
 		return mapOk(submitted, (value) => normalizePaymentTiming(value.payment));
 	};
 }
@@ -22743,6 +23313,7 @@ function makePaymentsMethods(deps) {
 		createCommitment: (input, options) => pay(input, options),
 		claim: (paymentId, options) => runLifecycle({
 			kind: "claim",
+			requestKey: options?.requestKey ?? `pay_${crypto.randomUUID()}`,
 			paymentId
 		}, deps.invocationControls?.(options) ?? options, CAPXUL_OPERATIONS.payments.claim),
 		list: (options) => {
@@ -22755,6 +23326,7 @@ function makePaymentsMethods(deps) {
 		},
 		cancel: (paymentId, options) => runLifecycle({
 			kind: "cancel",
+			requestKey: options?.requestKey ?? `pay_${crypto.randomUUID()}`,
 			paymentId
 		}, deps.invocationControls?.(options) ?? options, CAPXUL_OPERATIONS.payments.cancel),
 		redirect: async (input, options) => {
@@ -22763,6 +23335,7 @@ function makePaymentsMethods(deps) {
 			if (!recipient.ok) return runCapxulEffect(Effect.fail(recipient.error), observationOnlyControls(controls), CAPXUL_OPERATIONS.payments.redirect, deps.runPromise);
 			return runLifecycle({
 				kind: "redirect",
+				requestKey: options?.requestKey ?? `pay_${crypto.randomUUID()}`,
 				paymentId: input.paymentId,
 				recipient: recipient.value
 			}, controls, CAPXUL_OPERATIONS.payments.redirect);
@@ -23016,7 +23589,7 @@ async function executeOrganizationBatch(scope, input, signal, operation, control
 	}
 	release(false);
 	try {
-		await requestKey.finish(result.ok || flight.requestState.resolved);
+		await requestKey.finish(result.ok || flight.requestState.resolved || isFinalPaymentRequestError(result.error));
 	} catch {}
 	const normalized = mapOk(result, (value) => value.payments.map((payment) => normalizePaymentTiming(payment)));
 	if (!normalized.ok) return normalized;
@@ -23117,7 +23690,8 @@ function makeOrganizationPaymentsMethods(deps, orgId) {
 		},
 		cancel: (paymentId, options) => ownerLifecycle({
 			kind: "cancel",
-			paymentId
+			paymentId,
+			requestKey: options?.requestKey ?? `pay_${crypto.randomUUID()}`
 		}, deps.invocationControls?.(options) ?? options, CAPXUL_OPERATIONS.organizationPayments.cancel),
 		redirect: (input, options) => {
 			const controls = deps.invocationControls?.(options) ?? options;
@@ -23125,7 +23699,8 @@ function makeOrganizationPaymentsMethods(deps, orgId) {
 			return recipient.ok ? ownerLifecycle({
 				kind: "redirect",
 				paymentId: input.paymentId,
-				recipient: recipient.value
+				recipient: recipient.value,
+				requestKey: options?.requestKey ?? `pay_${crypto.randomUUID()}`
 			}, controls, CAPXUL_OPERATIONS.organizationPayments.redirect) : runCapxulEffect(Effect.fail(recipient.error), observationOnlyControls(controls), CAPXUL_OPERATIONS.organizationPayments.redirect, deps.runPromise);
 		},
 		payBatch: (input, options) => {
@@ -23745,6 +24320,46 @@ function makeAccountMethods(deps) {
 	};
 }
 //#endregion
+//#region ../../packages/sdk/src/accounts/approval-rules.ts
+const IN_FLIGHT = /* @__PURE__ */ new Set([
+	"pending",
+	"settling",
+	"in_transit"
+]);
+/** A Payment the chain has not decided yet. */
+function inFlight(payment) {
+	return IN_FLIGHT.has(payment.status);
+}
+/**
+* The operation the approval describes is the one its digest signs: the
+* SafeOp digest of its UserOperation on this client's chain, and the
+* execution that digest names. Anything else is refused before the key signs.
+*/
+function describedOperation(approval, chainId) {
+	const { operation, summary } = approval;
+	if (chainId !== void 0 && summary.network.chainId !== chainId) return Errors.invalidInput("approval", "the approval is for another chain");
+	try {
+		const digest = moneySafeOpDigest(operation.userOperation, summary.network.chainId);
+		if (digest.toLowerCase() === operation.digest.toLowerCase() && matchesMoneyExecutionId(operation.executionId, digest, operation.commandId)) return void 0;
+	} catch {}
+	return Errors.invalidInput("approval", "the operation does not match the digest it asks to sign");
+}
+/** Wait, unless the caller gives up first. False when aborted. */
+function sleep(ms, signal) {
+	if (signal?.aborted === true) return Promise.resolve(false);
+	return new Promise((resolve) => {
+		const timer = setTimeout(() => {
+			signal?.removeEventListener("abort", onAbort);
+			resolve(true);
+		}, ms);
+		const onAbort = () => {
+			clearTimeout(timer);
+			resolve(false);
+		};
+		signal?.addEventListener("abort", onAbort, { once: true });
+	});
+}
+//#endregion
 //#region ../../packages/sdk/src/accounts/organization-approvals.ts
 /** The Organization Payment prepared for `signerAddress` and checked, before any approval. */
 async function prepareVerifiedOrganizationPayment(deps, input, signerAddress, signal) {
@@ -23837,58 +24452,6 @@ async function checkedBankApproval(deps, input, opened) {
 	});
 }
 //#endregion
-//#region ../../packages/sdk/src/accounts/approval-rules.ts
-const IN_FLIGHT = /* @__PURE__ */ new Set([
-	"pending",
-	"settling",
-	"in_transit"
-]);
-/** A Payment the chain has not decided yet. */
-function inFlight(payment) {
-	return IN_FLIGHT.has(payment.status);
-}
-/**
-* The approved operation is not sent yet: the approval is approved, or it was
-* consumed but a Payment is still `pending` (a recorded send moves it to
-* `settling`), so the send did not land.
-*/
-function unsent(approval, payments) {
-	return approval.state === "approved" || approval.state === "consumed" && payments.some((payment) => payment.status === "pending");
-}
-/** The send was refused because another send of the same operation holds its claim. */
-function anotherSendInFlight(error) {
-	return error.code === "SUPERSEDED" && error.details?.reason === "unobservable-claim";
-}
-/**
-* The operation the approval describes is the one its digest signs: the
-* SafeOp digest of its UserOperation on this client's chain, and the
-* execution that digest names. Anything else is refused before the key signs.
-*/
-function describedOperation(approval, chainId) {
-	const { operation, summary } = approval;
-	if (chainId !== void 0 && summary.network.chainId !== chainId) return Errors.invalidInput("approval", "the approval is for another chain");
-	try {
-		const digest = moneySafeOpDigest(operation.userOperation, summary.network.chainId);
-		if (digest.toLowerCase() === operation.digest.toLowerCase() && operation.executionId === `money_execution_${digest.slice(2).toLowerCase()}`) return void 0;
-	} catch {}
-	return Errors.invalidInput("approval", "the operation does not match the digest it asks to sign");
-}
-/** Wait, unless the caller gives up first. False when aborted. */
-function sleep(ms, signal) {
-	if (signal?.aborted === true) return Promise.resolve(false);
-	return new Promise((resolve) => {
-		const timer = setTimeout(() => {
-			signal?.removeEventListener("abort", onAbort);
-			resolve(true);
-		}, ms);
-		const onAbort = () => {
-			clearTimeout(timer);
-			resolve(false);
-		};
-		signal?.addEventListener("abort", onAbort, { once: true });
-	});
-}
-//#endregion
 //#region ../../packages/protocol/src/payroll/model.ts
 function toPayrollRunId(raw) {
 	return toNonEmptyStringBrand(raw, "payrollRunId", (value) => isNonEmptyString(value));
@@ -24350,7 +24913,8 @@ function lifecycleIntent(input) {
 		ok: true,
 		value: {
 			kind: "cancel",
-			paymentId: input.cancel
+			paymentId: input.cancel,
+			requestKey: input.requestKey ?? `pay_${crypto.randomUUID()}`
 		}
 	};
 	const recipient = normalizeTargetForBackend(input.to, "to");
@@ -24359,7 +24923,8 @@ function lifecycleIntent(input) {
 		value: {
 			kind: "redirect",
 			paymentId: input.redirect,
-			recipient: recipient.value
+			recipient: recipient.value,
+			requestKey: input.requestKey ?? `pay_${crypto.randomUUID()}`
 		}
 	} : recipient;
 }
@@ -24391,10 +24956,19 @@ async function prepareVerifiedRequestPayment(deps, input, signerAddress, signal)
 		error: Errors.invalidInput("confirmation", "invalid request confirmation")
 	};
 	const confirmation = decoded.success;
-	return checked(deps, signerAddress, await runIfActive(signal, commands$1.prepareRequest.name, () => callOperation(deps.convexCall, commands$1.prepareRequest, {
-		confirmation,
-		signerAddress
-	}).pipe(Effect.mapError((publicError) => ({ publicError }))), deps.runPromise), requestPaymentCheck(confirmation), false);
+	const run = async (named, prepared) => {
+		const result = await runIfActive(signal, commands$1.prepareRequest.name, () => callOperation(deps.convexCall, commands$1.prepareRequest, {
+			confirmation: named,
+			signerAddress
+		}).pipe(Effect.mapError((publicError) => ({ publicError }))), deps.runPromise);
+		if (result.ok) prepared();
+		return checked(deps, signerAddress, result, requestPaymentCheck(named), false);
+	};
+	const { requestKey, ...intent } = confirmation;
+	return confirmation.instruction.kind !== "invoice" ? run(confirmation, () => void 0) : withInvoiceRequestKey(deps.actor?.authSession()?.authUserId ?? "signed-out", intent, requestKey, (key, prepared) => run({
+		...confirmation,
+		requestKey: key
+	}, prepared));
 }
 /** One payroll run: the run the backend writes and the batch that pays it, checked together. */
 async function prepareVerifiedPayrollRun(deps, input, signerAddress, signal) {
@@ -24489,7 +25063,7 @@ function makeApprovalsMethods(deps) {
 		const signal = options?.signal;
 		if (isCommandApproval(input)) return openApproval(signal, (signerAddress) => prepareVerifiedCommand(deps, input, signerAddress, signal));
 		if (isPermissionChange(input)) return openApproval(signal, async (signerAddress) => {
-			const { prepareVerifiedPermissionChange } = await import("./permission-approvals-CCCJ2aYL.mjs");
+			const { prepareVerifiedPermissionChange } = await import("./permission-approvals-DcF1OYMa.mjs");
 			return prepareVerifiedPermissionChange(deps, input, signerAddress, signal);
 		});
 		if ("organizationId" in input) return checkedBankApproval(deps, input, await openApproval(signal, (signerAddress) => prepareVerifiedOrganizationPayment(deps, input, signerAddress, signal)));
@@ -24586,43 +25160,33 @@ function makeApprovalsMethods(deps) {
 	};
 	/**
 	* One read of the approval: its outcome when it has ended, or null to read
-	* again. The Payments are read before anything is sent, so a send is never
-	* made for Payments this caller cannot follow.
+	* again. This path only reads. The backend owns submission and recovery.
 	*/
 	const step = async (approvalId, signal, organizationId) => {
-		const read = await call(approvals.get.name, approvals.get, { approvalId }, signal);
+		const read = await call(approvals.observe.name, approvals.observe, { approvalId }, signal);
 		if (!read.ok) return read;
-		const approval = read.value;
+		const { approval, completed } = read.value;
 		if (approval.state === "pending") return {
 			ok: true,
 			value: null
 		};
-		if (endsOnceSent(approval)) {
-			if (approval.state !== "approved" && approval.state !== "consumed") return {
-				ok: true,
-				value: {
-					approval,
-					payments: []
-				}
-			};
-			const sent = await submit(approvalId);
-			return sent.ok || !anotherSendInFlight(sent.error) ? sent : {
-				ok: true,
-				value: null
-			};
-		}
+		const closed = approval.state === "rejected" || approval.state === "expired";
+		if (!closed && !completed) return {
+			ok: true,
+			value: null
+		};
+		if (!movesMoney(approval)) return {
+			ok: true,
+			value: {
+				approval,
+				payments: []
+			}
+		};
 		const payments = await readApprovalPayments(deps, approval.operation.paymentIds, organizationId ?? (approval.actor.kind === "organization" ? approval.actor.orgId : void 0), signal);
 		if (!payments.ok) return payments;
-		if (unsent(approval, payments.value)) {
-			const sent = await submit(approvalId);
-			return sent.ok || anotherSendInFlight(sent.error) ? {
-				ok: true,
-				value: null
-			} : sent;
-		}
 		return {
 			ok: true,
-			value: approval.state !== "consumed" || !payments.value.some(inFlight) ? {
+			value: closed || endsOnceSent(approval) || !payments.value.some(inFlight) ? {
 				approval,
 				payments: payments.value
 			} : null
@@ -25251,7 +25815,7 @@ function decodeStatus(body) {
 */
 const HEADS = {
 	transfer: "select \"id\", \"chain_id\", \"tx_hash\", \"transaction_log_ordinal\", \"log_index\", \"block_number\", \"block_hash\", \"timestamp\", \"asset_id\", \"token\", \"from\", \"to\", \"amount\" from \"transfer\" where (\"transfer\".\"from\" = $1 or \"transfer\".\"to\" = $2) order by \"transfer\".\"block_number\" desc, \"transfer\".\"id\" desc",
-	payment: "select \"id\", \"chain_id\", \"tx_hash\", \"transaction_log_ordinal\", \"log_index\", \"block_number\", \"block_hash\", \"timestamp\", \"contract\", \"settlement_id\", \"sender\", \"recipient\", \"asset_id\", \"token\", \"amount\", \"kind\", \"document_hash\" from \"payment\" where (\"payment\".\"sender\" = $1 or \"payment\".\"recipient\" = $2) order by \"payment\".\"block_number\" desc, \"payment\".\"id\" desc",
+	payment: "select \"id\", \"chain_id\", \"tx_hash\", \"transaction_log_ordinal\", \"log_index\", \"block_number\", \"block_hash\", \"timestamp\", \"contract\", \"settlement_id\", \"sender\", \"recipient\", \"asset_id\", \"token\", \"amount\", \"kind\", \"document_hash\", \"job_nonce\", \"executor\" from \"payment\" where (\"payment\".\"sender\" = $1 or \"payment\".\"recipient\" = $2) order by \"payment\".\"block_number\" desc, \"payment\".\"id\" desc",
 	balance: "select \"chain_id\", \"asset_id\", \"to\", \"amount\" from \"balance\" where \"balance\".\"to\" = $1"
 };
 /** How many times the statement binds the Safe address. */
@@ -25294,7 +25858,7 @@ function ponderQuery(table, input) {
 			input.limit
 		];
 		return {
-			sql: `${HEADS.payment.slice(0, HEADS.payment.indexOf("where "))}where (("payment"."sender" = $1 or "payment"."recipient" = $2) and "payment"."settlement_id" in (${input.settlements.map((_, i) => `$${i + 3}`).join(", ")})) limit $${params.length}`,
+			sql: `${HEADS.payment.slice(0, HEADS.payment.indexOf("where ")).replace(" from \"payment\"", ", \"contract\" as \"router\" from \"payment\"")}where (("payment"."sender" = $1 or "payment"."recipient" = $2) and "payment"."settlement_id" in (${input.settlements.map((_, i) => `$${i + 3}`).join(", ")})) limit $${params.length}`,
 			params,
 			typings: params.map(() => "none")
 		};
@@ -38257,7 +38821,7 @@ function verifyPermissionExecution(raw, command, orgId, expectedSafe, signerAddr
 		const callData = direct.length === 1 ? safe4337ExecuteUserOpCallData(direct[0]) : safe4337MultiSendUserOpCallData({ calls: direct });
 		if (operation.callData.toLowerCase() !== callData.toLowerCase()) return mismatch("UserOperation call data mismatch");
 		const digest = moneySafeOpDigest(operation, chainId);
-		if (evidence.digest.toLowerCase() !== digest.toLowerCase() || evidence.executionId !== `money_execution_${digest.slice(2).toLowerCase()}`) return mismatch("Prepared digest or execution identity mismatch");
+		if (evidence.digest.toLowerCase() !== digest.toLowerCase() || !matchesMoneyExecutionId(evidence.executionId, digest, evidence.commandId)) return mismatch("Prepared digest or execution identity mismatch");
 		return {
 			ok: true,
 			value: {
@@ -40114,4 +40678,4 @@ var ConvexOrganizationSetupAdapter = class {
 	}
 };
 //#endregion
-export { isSignerNotReadySignal as $, ChainIdSchema$1 as $t, bindProductTelemetryInvocation as A, detectAuthCacheAdapter as An, publicKeyToAddress as At, BASE_SEPOLIA_CHAIN_ID as B, redactUrlSecrets as Bn, toBytes$1 as Bt, PonderIndexerAdapter as C, copyInvocationObservation as Cn, toOrgId as Ct, TelemetryPortTag as D, toPublishableKey as Dn, isBytes32 as Dt, AccountReadPortTag as E, toAllowedOrigin as En, images as Et, makeCheckoutMethods as F, AuthCachePortTag as Fn, concatHex as Ft, failureEvidenceProps as G, CapxulError as Gn, hexToBigInt as Gt, asCapxulError as H, isRecord as Hn, numberToHex as Ht, makeTargetsMethods as I, deserializeCapxulError as In, isAddress$1 as It, withCapturedAttemptContext as J, isFailureMode as Jn, BaseError as Jt, observeFailedResult as K, isCapxulError as Kn, hexToNumber as Kt, makeVerificationMethods as L, serializeCapxulError as Ln, InvalidAddressError as Lt, makeAccountMethods as M, toEpochMs as Mn, createCursor as Mt, makePaymentsMethods as N, toAuthUserId as Nn, slice as Nt, ConvexCallPortTag as O, AuthClientError as On, hashTypedData as Ot, makeDestinationsMethods as P, toEmail as Pn, concat$1 as Pt, isEcdsaSignatureHex as Q, EpochMsSchema$1 as Qt, abandonPrepared as R, decodeChainCause as Rn, keccak256$1 as Rt, makeHoldingsMethods as S, attachInvocationObservation as Sn, ORGANIZATION_SETUP_STATUSES as St, ConvexAccountLayer as T, sanitizeObservationContext as Tn, AppIdSchema$1 as Tt, toPublicError$1 as U, readField as Un, stringToHex as Ut, callOperation as V, isCredentialField as Vn, bytesToHex as Vt, failureDetail as W, Errors as Wn, toHex as Wt, UNOBSERVABLE_SIGNER_STATUS as X, isHex$1 as Xt, version$1 as Y, size as Yt, causeChain as Z, DurationMsSchema$1 as Zt, makeActivityMethods as _, SystemClockLayer as _n, OPERATIONS as _t, prepareConfiguration as a, askIdentity as an, toCountryCode as at, ConvexSmartAccountLayer as b, BetterAuthBrowserLayer as bn, setups as bt, OrgPortTag as c, runPortEffect as cn, toHandle as ct, verifiedPreparation as d, toCapxulResult as dn, CLI_CAPABILITIES as dt, isEvmAddress as en, openfortSignerNotReadyCode as et, buildCommand as f, formatTraceparent as fn, CLI_COMMAND_NAMES as ft, makeMeMethods as g, oauthBearerAuthClient as gn, normalizeCapxulOperation as gt, bootIdentityFlow as h, carryInvocationParentSpan as hn, isCapxulOperation as ht, authorInvitation as i, makeAuthMethods as in, makeClientRequestMethods as it, makeApprovalsMethods as j, globalLocalStorage as jn, formatGwei as jt, convexCallErrorFromCapxul as k, AuthClientPortTag as kn, toRlp as kt, preparePermission as l, sessionFromActor as ln, validateHandle as lt, executeIdentityProductObservation as m, ActorFailure as mn, CAPXUL_OPERATIONS as mt, makeOrgMethods as n, absurd as nn, signerFailure as nt, verifiedConfiguration as o, publicIdentityFailure as on, toKycTier as ot, validateReplacementInput as p, CAPXUL_ERROR_CODES as pn, CLI_INVOCATION_KINDS as pt, observeSdkClient as q, FAILURE_MODES$1 as qn, trim as qt, makeBankingMethods as r, getFunctionName as rn, makeCurrentUserMethods as rt, ConvexOrganizationAdapter as s, runIdentityFacade as sn, toTesterKind as st, ConvexOrganizationSetupAdapter as t, toAddress as tn, recoverRawDigestSigner as tt, preparedIdentity as u, runCapxulEffect as un, redactTelemetryProps as ut, makePaymentDocumentsMethods as v, ClockPortTag as vn, details as vt, makeAccountsMethods as w, readInvocationObservation as wn, diagnostics as wt, SmartAccountPortTag as x, observationRequestHeaders as xn, ORGANIZATION_SETUP_REASONS as xt, makeSmartAccountMethods as y, BetterAuthNodeLayer as yn, onboardings as yt, normalizeSafeSaltEmail as z, redactSecrets as zn, hexToBytes as zt };
+export { isSignerNotReadySignal as $, ChainIdSchema$1 as $t, bindProductTelemetryInvocation as A, detectAuthCacheAdapter as An, toRlp as At, BASE_SEPOLIA_CHAIN_ID as B, redactUrlSecrets as Bn, hexToBytes as Bt, PonderIndexerAdapter as C, copyInvocationObservation as Cn, toOrgId as Ct, TelemetryPortTag as D, toPublishableKey as Dn, isBytes32 as Dt, AccountReadPortTag as E, toAllowedOrigin as En, images as Et, makeCheckoutMethods as F, AuthCachePortTag as Fn, concat$1 as Ft, failureEvidenceProps as G, CapxulError as Gn, hexToBigInt as Gt, asCapxulError as H, isRecord as Hn, numberToHex as Ht, makeTargetsMethods as I, deserializeCapxulError as In, concatHex as It, withCapturedAttemptContext as J, isFailureMode as Jn, BaseError as Jt, observeFailedResult as K, isCapxulError as Kn, hexToNumber as Kt, makeVerificationMethods as L, serializeCapxulError as Ln, isAddress$1 as Lt, makeAccountMethods as M, toEpochMs as Mn, formatGwei as Mt, makePaymentsMethods as N, toAuthUserId as Nn, createCursor as Nt, ConvexCallPortTag as O, AuthClientError as On, hashTypedData as Ot, makeDestinationsMethods as P, toEmail as Pn, slice as Pt, isEcdsaSignatureHex as Q, EpochMsSchema$1 as Qt, abandonPrepared as R, decodeChainCause as Rn, InvalidAddressError as Rt, makeHoldingsMethods as S, attachInvocationObservation as Sn, ORGANIZATION_SETUP_STATUSES as St, ConvexAccountLayer as T, sanitizeObservationContext as Tn, AppIdSchema$1 as Tt, toPublicError$1 as U, readField as Un, stringToHex as Ut, callOperation as V, isCredentialField as Vn, bytesToHex as Vt, failureDetail as W, Errors as Wn, toHex as Wt, UNOBSERVABLE_SIGNER_STATUS as X, isHex$1 as Xt, version$1 as Y, size as Yt, causeChain as Z, DurationMsSchema$1 as Zt, makeActivityMethods as _, SystemClockLayer as _n, OPERATIONS as _t, prepareConfiguration as a, askIdentity as an, toCountryCode as at, ConvexSmartAccountLayer as b, BetterAuthBrowserLayer as bn, setups as bt, OrgPortTag as c, runPortEffect as cn, toHandle as ct, verifiedPreparation as d, toCapxulResult as dn, CLI_CAPABILITIES as dt, isEvmAddress as en, openfortSignerNotReadyCode as et, buildCommand as f, formatTraceparent as fn, CLI_COMMAND_NAMES as ft, makeMeMethods as g, oauthBearerAuthClient as gn, normalizeCapxulOperation as gt, bootIdentityFlow as h, carryInvocationParentSpan as hn, isCapxulOperation as ht, authorInvitation as i, makeAuthMethods as in, makeClientRequestMethods as it, makeApprovalsMethods as j, globalLocalStorage as jn, publicKeyToAddress as jt, convexCallErrorFromCapxul as k, AuthClientPortTag as kn, sha256 as kt, preparePermission as l, sessionFromActor as ln, validateHandle as lt, executeIdentityProductObservation as m, ActorFailure as mn, CAPXUL_OPERATIONS as mt, makeOrgMethods as n, absurd as nn, signerFailure as nt, verifiedConfiguration as o, publicIdentityFailure as on, toKycTier as ot, validateReplacementInput as p, CAPXUL_ERROR_CODES as pn, CLI_INVOCATION_KINDS as pt, observeSdkClient as q, FAILURE_MODES$1 as qn, trim as qt, makeBankingMethods as r, getFunctionName as rn, makeCurrentUserMethods as rt, ConvexOrganizationAdapter as s, runIdentityFacade as sn, toTesterKind as st, ConvexOrganizationSetupAdapter as t, toAddress as tn, recoverRawDigestSigner as tt, preparedIdentity as u, runCapxulEffect as un, redactTelemetryProps as ut, makePaymentDocumentsMethods as v, ClockPortTag as vn, details as vt, makeAccountsMethods as w, readInvocationObservation as wn, diagnostics as wt, SmartAccountPortTag as x, observationRequestHeaders as xn, ORGANIZATION_SETUP_REASONS as xt, makeSmartAccountMethods as y, BetterAuthNodeLayer as yn, onboardings as yt, normalizeSafeSaltEmail as z, redactSecrets as zn, keccak256$1 as zt };