@capxul/sdk-react 4.20.0-beta.10 → 4.20.0-beta.12

package/README.md

@@ -27,13 +27,13 @@ export function Providers({ children }: { children: React.ReactNode }) {
 - The provider restores Account readiness after a complete authenticated
   session. Account and Organization readiness transitions refresh active
   authenticated queries.
-- `CapxulAuthenticationController` and `CapxulOnboardingController` select
-  app-owned slots and render no SDK-owned DOM. The onboarding controller keeps
-  no Organization submission: after a reload the Core SDK reads the pending
-  Organization from the backend and attaches it, so the app re-submits nothing.
-  A claimed identity with no Organization and no app-held form step reports
-  `organizationProgress` with `{ at: "loading", orgId: null }` until that
-  attach lands.
+- CapxulAuthenticationController and CapxulOnboardingController select
+  app-owned slots and render no SDK-owned DOM. Organization create begins a
+  backend setup and returns its exact ID. The Core SDK actor subscribes to
+  that setup. Awaiting authorization, attention, and failure reach actionable
+  slots; processing and rechecking reach a finite progress slot.
+- CapxulDashboardAccess combines current setup with current org.me authority.
+  A historical ready setup does not grant access after authority is revoked.
 - Rich-data hooks such as `useCapxulProfile`, `useCapxulOrgs`, members, roles,
   treasury, and money hooks remain TanStack Query projections. Personal
   holdings and activity reads start only after the Account is claimed.

package/dist/{controllers-BWmKRFy6.d.mts → controllers-BMAU2kKH.d.mts}

@@ -106,14 +106,8 @@ type AccountProgress = Exclude<Readiness, {
 type AccountFailure = Extract<Readiness, {
   at: "failed";
 }>;
-type OrgProgress = Exclude<OrgLane, {
-  at: "failed";
-} | {
-  at: "ready";
-}>;
-type OrgFailure = Extract<OrgLane, {
-  at: "failed";
-}>;
+type OrgProgress = OrgLane;
+type OrgFailure = OrgLane;
 type ReadyDestination = Extract<IdentityDestination, {
   to: "dashboardPersonal" | "dashboardOrganization";
 }>;

package/dist/{controllers-L1UqwWS1.mjs → controllers-BV3e8WD3.mjs}

@@ -228,7 +228,7 @@ async function guarded(runtime, verb, options, run) {
 	}
 }
 function organizationFailure(reason, state) {
-	const stateFailure = state.phase === "faulted" ? state.failure : state.phase === "authenticated" && state.account.at === "failed" ? state.account.failure : state.phase === "authenticated" && state.account.at === "claimed" && state.account.org?.at === "failed" ? state.account.org.failure : void 0;
+	const stateFailure = state.phase === "faulted" ? state.failure : state.phase === "authenticated" && state.account.at === "failed" ? state.account.failure : state.phase === "authenticated" && state.account.at === "claimed" ? state.account.org?.failure : void 0;
 	if (stateFailure?.code === reason) return {
 		ok: false,
 		reason,
@@ -266,8 +266,7 @@ function normalizeOrganization(organization) {
 /** The Organization id when its lane is already running or finished, else null. */
 const runningOrganization = (state) => {
 	if (state.phase !== "authenticated" || state.account.at !== "claimed") return null;
-	const org = state.account.org;
-	return org !== null && (org.at === "loading" || org.at === "settingUp" || org.at === "ready") ? org.orgId : null;
+	return state.account.org?.orgId ?? null;
 };
 /** A superseded session read waits at most this long for the winning read. */
 const SESSION_SETTLE_LIMIT_MS = 3e4;
@@ -488,20 +487,6 @@ function createAuth(client, clearAuthenticatedQueries) {
 				ok: true,
 				orgId: running
 			};
-			if (current.phase === "authenticated" && current.account.at === "claimed") {
-				const org = current.account.org;
-				if (org?.at === "failed" && org.orgId !== null) {
-					if (!org.retryable) return {
-						ok: false,
-						reason: org.failure.code
-					};
-					const retried = await runtime.send({ _tag: "RetryOrganization" }, invocation);
-					return failure(retried) ?? {
-						ok: true,
-						orgId: org.orgId
-					};
-				}
-			}
 			const prepared = await prepareOrganization(submission, invocation);
 			if (!prepared.ok) return prepared;
 			const opened = runningOrganization(runtime.snapshot());
@@ -509,20 +494,24 @@ function createAuth(client, clearAuthenticatedQueries) {
 				ok: true,
 				orgId: opened
 			};
-			const created = await runtime.send({
-				_tag: "CreateOrganization",
-				draft: prepared.organization
-			}, invocation);
-			const refused = failure(created);
-			if (refused !== null) return refused;
-			const state = created.state;
-			const org = state.phase === "authenticated" && state.account.at === "claimed" ? state.account.org : null;
-			return org?.at === "ready" && org.orgId !== null ? {
-				ok: true,
-				orgId: org.orgId
-			} : {
+			const begun = await client.onboarding.beginOrganization(prepared.organization, invocation);
+			if (!begun.ok) return {
 				ok: false,
-				reason: "UNKNOWN"
+				reason: begun.error.code,
+				error: begun.error
+			};
+			const { orgId, setup } = begun.value;
+			if (setup.status === "awaitingAuthorization") {
+				const authorized = await client.org(orgId).setup.authorize(invocation);
+				if (!authorized.ok) return {
+					ok: false,
+					reason: authorized.error.code,
+					error: authorized.error
+				};
+			}
+			return {
+				ok: true,
+				orgId: String(orgId)
 			};
 		}).then((result) => {
 			if (result.ok) return result;
@@ -535,8 +524,21 @@ function createAuth(client, clearAuthenticatedQueries) {
 		}),
 		retry: (options) => guarded(runtime, "retry", options, async (invocation) => {
 			const state = runtime.snapshot();
-			const event = state.phase === "authenticated" && state.account.at === "claimed" ? { _tag: "RetryOrganization" } : { _tag: "RetryAccount" };
-			const result = await runtime.send(event, invocation);
+			const orgId = runningOrganization(state);
+			if (orgId !== null) {
+				const scoped = client.org(orgId);
+				const current = await scoped.setup.get(invocation);
+				if (!current.ok) return {
+					ok: false,
+					reason: current.error.code
+				};
+				const result = current.value.status === "awaitingAuthorization" ? await scoped.setup.authorize(invocation) : await scoped.setup.resume(invocation);
+				return result.ok ? { ok: true } : {
+					ok: false,
+					reason: result.error.code
+				};
+			}
+			const result = await runtime.send({ _tag: "RetryAccount" }, invocation);
 			return failure(result) ?? { ok: true };
 		}),
 		resumeSubmittedOrganization: (submission, options) => guarded(runtime, "createOrganization", options, async (invocation) => {
@@ -580,7 +582,7 @@ function CapxulIdentityProvider({ client, children }) {
 			const account = actingAccount(state);
 			const accountChanged = previousAccount !== void 0 && account !== void 0 && account !== previousAccount;
 			previousAccount = account;
-			if (record.outcome === "applied" && (record.from !== record.to || accountChanged) && (record.to === "authenticated:claimed" || record.to === "authenticated:claimed:ready")) queryClient.invalidateQueries({
+			if (record.outcome === "applied" && (record.from !== record.to || accountChanged) && (record.to === "authenticated:claimed" || record.to === "authenticated:claimed:organization")) queryClient.invalidateQueries({
 				queryKey: capxulKeys.root,
 				...accountChanged ? { refetchType: "none" } : {}
 			});
@@ -922,15 +924,15 @@ function CapxulOnboardingController(props) {
 	if (submission !== null && state.account.at === "claimed") {
 		const org = state.account.org;
 		if (org === null) return organizationForm(props, state, auth, submission);
-		if (org.at === "failed") {
-			const retry = org.retryable ? org.orgId === null ? (options) => auth.createOrganization(submission, options) : auth.retry : void 0;
+		if (org.observation === "error" || org.setup?.status === "failed" || org.setup?.status === "needsAttention" || org.setup?.status === "awaitingAuthorization") {
+			const retry = org.orgId === null ? (options) => auth.createOrganization(submission, options) : auth.retry;
 			return slots.organizationFailure({
 				state,
 				org,
-				...retry === void 0 ? {} : { retry }
+				retry
 			});
 		}
-		if (org.at !== "ready") return slots.organizationProgress({
+		if (org.setup?.status !== "ready" || org.observation !== "connected") return slots.organizationProgress({
 			state,
 			org
 		});

package/dist/index.d.mts

@@ -1,7 +1,7 @@
-import { A as entered, C as CreateOrganizationFailure, D as OrganizationDetails, E as InvocationOptions, F as useCapxulTransitions, M as useCapxulDestination, N as useCapxulIdentity, O as ProfileDetails, P as useCapxulSend, S as CapxulSend, T as Destination, _ as ReadyDestination, a as AuthenticationSlots, b as Slot, c as ControllerAction, d as OnboardingControllerProps, f as OrgFailure, g as ProfileSlotProps, h as PendingAuthState, i as AuthenticatedState, j as useCapxulAuth, k as SendResult, l as FaultedState, m as OtpPendingState, n as AccountProgress, o as CapxulAuthenticationController, p as OrgProgress, r as ActionResult, s as CapxulOnboardingController, t as AccountFailure, u as NavigationAction, v as RetryAction, w as CreateOrganizationSubmission, x as CapxulAuth, y as SignedOutState } from "./controllers-BWmKRFy6.mjs";
+import { A as entered, C as CreateOrganizationFailure, D as OrganizationDetails, E as InvocationOptions, F as useCapxulTransitions, M as useCapxulDestination, N as useCapxulIdentity, O as ProfileDetails, P as useCapxulSend, S as CapxulSend, T as Destination, _ as ReadyDestination, a as AuthenticationSlots, b as Slot, c as ControllerAction, d as OnboardingControllerProps, f as OrgFailure, g as ProfileSlotProps, h as PendingAuthState, i as AuthenticatedState, j as useCapxulAuth, k as SendResult, l as FaultedState, m as OtpPendingState, n as AccountProgress, o as CapxulAuthenticationController, p as OrgProgress, r as ActionResult, s as CapxulOnboardingController, t as AccountFailure, u as NavigationAction, v as RetryAction, w as CreateOrganizationSubmission, x as CapxulAuth, y as SignedOutState } from "./controllers-BMAU2kKH.mjs";
 import { ReactNode, RefCallback } from "react";
 import { QueryClient, UseMutationResult, UseQueryResult } from "@tanstack/react-query";
-import { Account, AccountRequirement, ActivityAnnotation, ActivityAnnotationInput, ActivityDetail, ActivityKind, ActivityListParams, ActivityPage, ActivityPhase, ActivityRange, ActivityReference, ActivitySummaryTotal, ActorReference, AddressBookEntry, AssetAmount, AssetId, BudgetId, CapxulClient, CapxulError, CapxulResult, CapxulSigner, CreateOrgInput, CurrentHoldings, HostObservability, IdentityDestination, IdentityState, MemberView, Money, MoneyParseErrorReason, OrgId, OrgView, OrganizationAccess, OrganizationPaymentBatchInput, OrganizationPaymentInput, PartyId, Payment, PaymentDirection, PaymentDocumentDownload, PaymentDocumentReadRef, PaymentDocumentRef, PaymentDocumentRender, PaymentStatus, PaymentTiming, PaymentType, PaymentsPayInput, PayrollGroupId, PayrollGroupInput, PayrollRunId, PayrollRunStatus, Permission, PermissionMethods, PermissionReadResult, Profile, RoleView, SubmittedPermissionExecution, isClaimed, isRestoring } from "@capxul/sdk";
+import { Account, AccountRequirement, ActivityAnnotation, ActivityAnnotationInput, ActivityDetail, ActivityKind, ActivityListParams, ActivityPage, ActivityPhase, ActivityRange, ActivityReference, ActivitySummaryTotal, ActorReference, AddressBookEntry, AssetAmount, AssetId, BudgetId, CapxulClient, CapxulError, CapxulResult, CapxulSigner, CurrentHoldings, HostObservability, IdentityDestination, IdentityState, MemberView, Money, MoneyParseErrorReason, OrgId, OrganizationAccess, OrganizationOnboarding, OrganizationOnboardingInput, OrganizationPaymentBatchInput, OrganizationPaymentInput, PartyId, Payment, PaymentDirection, PaymentDocumentDownload, PaymentDocumentReadRef, PaymentDocumentRef, PaymentDocumentRender, PaymentStatus, PaymentTiming, PaymentType, PaymentsPayInput, PayrollGroupId, PayrollGroupInput, PayrollRunId, PayrollRunStatus, Permission, PermissionMethods, PermissionReadResult, Profile, RoleView, SubmittedPermissionExecution, isClaimed, isRestoring } from "@capxul/sdk";
 //#region src/provider.d.ts
 type CapxulProviderSharedProps = {
   /** Bring your own QueryClient; otherwise the provider creates one. */
@@ -199,9 +199,9 @@ declare function useCapxulOrgTreasury(orgId: OrgId | undefined, options?: UseCap
 //#region src/hooks/use-capxul-create-org.d.ts
 /**
  * Create an Organization. Binds directly to the
- * `capxul.createOrg(input)` SDK method. On success, invalidates the org list.
+ * `onboarding.completeOrganization(input)` SDK method. On success, invalidates the org list.
  */
-type UseCapxulCreateOrgReturn = UseMutationResult<OrgView, CapxulError, CreateOrgInput>;
+type UseCapxulCreateOrgReturn = UseMutationResult<OrganizationOnboarding, CapxulError, OrganizationOnboardingInput>;
 declare function useCapxulCreateOrg(): UseCapxulCreateOrgReturn;
 //#endregion
 //#region src/headless/journey/journey-state.d.ts
@@ -840,14 +840,14 @@ type DashboardScope = {
 };
 type DashboardAccessPhase = "checking" | "error" | "redirect" | "granted";
 /**
- * Which of the three probes produced the error the screen is showing. The
+ * Which probe produced the error the screen is showing. The
  * error code alone cannot say: a provider failure reads the same whether the
  * session read, the membership list or the lifecycle read raised it, and a
  * consumer that reports a displayed gate error has to keep those apart
  * (#1963 R05-2). It names the SOURCE only; `retry` still re-runs every failed
  * probe, exactly as before.
  */
-type DashboardAccessProbe = "session" | "membership" | "lifecycle";
+type DashboardAccessProbe = "session" | "membership" | "lifecycle" | "authority";
 interface DashboardAccessErrorSlice {
   readonly error: CapxulError;
   /** The probe the surfaced error came from, in the frozen precedence order. */

package/dist/index.mjs

@@ -1,5 +1,5 @@
 "use client";
-import { _ as useCapxul, a as useCapxulAuth, c as useCapxulIdentityOrNull, d as toInvocationControls, f as toInvocationOptions, g as useCapxulClientOrNull, h as capxulKeys, i as entered, l as useCapxulSend, m as actingAccount, n as CapxulOnboardingController, o as useCapxulDestination, p as accountKey, r as CapxulProvider, s as useCapxulIdentity, t as CapxulAuthenticationController, u as useCapxulTransitions } from "./controllers-L1UqwWS1.mjs";
+import { _ as useCapxul, a as useCapxulAuth, c as useCapxulIdentityOrNull, d as toInvocationControls, f as toInvocationOptions, g as useCapxulClientOrNull, h as capxulKeys, i as entered, l as useCapxulSend, m as actingAccount, n as CapxulOnboardingController, o as useCapxulDestination, p as accountKey, r as CapxulProvider, s as useCapxulIdentity, t as CapxulAuthenticationController, u as useCapxulTransitions } from "./controllers-BV3e8WD3.mjs";
 import { createContext, useCallback, useContext, useEffect, useMemo, useRef, useState, useSyncExternalStore } from "react";
 import { useInfiniteQuery, useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
 import { CAPXUL_OPERATIONS, CapxulError, EVM_ADDRESS_RE, Errors, HANDLE_RE, PAYMENT_DIRECTIONS, PAYMENT_STATUSES, assetSymbolFor, fingerprintPaymentIntent, formatAssetAmount, formatMoney, isCapxulError, isClaimed, isClaimed as isClaimed$1, isMoneyParseError, isRestoring, isRestoring as isRestoring$1, parseAssetAmount, parseMoney, paymentPhase, requireAsset, resolveIdentityDestination, toEvmAddress, toPartyId, toRaw, valueActivitySummary } from "@capxul/sdk";
@@ -538,7 +538,7 @@ function useCapxulCreateOrg() {
 	const queryClient = useQueryClient();
 	return useMutation({
 		mutationFn: async (input) => {
-			return unwrapCapxulResult(await requireBootstrappedClient(client, "createOrg").createOrg(input));
+			return unwrapCapxulResult(await requireBootstrappedClient(client, CAPXUL_OPERATIONS.onboarding.completeOrganization).onboarding.completeOrganization(input));
 		},
 		onSuccess: async () => {
 			await queryClient.invalidateQueries({ queryKey: capxulKeys.orgs });
@@ -2342,18 +2342,14 @@ function isOrgLaneSettled(identity) {
 	if (identity.phase !== "authenticated" || identity.account.at !== "claimed") return true;
 	const org = identity.account.org;
 	if (org === null) return true;
-	switch (org.at) {
-		case "ready":
-		case "failed": return true;
-		default: return false;
-	}
+	return org.observation === "connected" && org.setup !== null;
 }
 /** Exactly the Organization asked for, and ready to be used. */
 function isExactOrgReady(lifecycle, orgId) {
 	return lifecycle?.status === "ready" && String(lifecycle.orgId) === orgId;
 }
 function isLifecycleSettled(lifecycle) {
-	return lifecycle?.status === "ready" || lifecycle?.status === "failed";
+	return lifecycle !== void 0;
 }
 function destinationOrNull(identity) {
 	return identity === null ? null : resolveIdentityDestination(identity);
@@ -2381,19 +2377,27 @@ function decidePhase(input) {
 * Which probe produced the surfaced error — the SAME precedence `error` itself
 * is chosen by, written once so the code and its source can never disagree.
 */
-function probeOf(session, membership, lifecycle) {
+function probeOf(session, membership, lifecycle, authority) {
 	if (session !== null) return "session";
 	if (membership !== null) return "membership";
 	if (lifecycle !== null) return "lifecycle";
+	if (authority !== null) return "authority";
 	return null;
 }
 /** The engine — all the logic. NOT exported from the package barrel. */
 function useDashboardAccess(scope) {
 	const client = useCapxulClientOrNull();
+	const queryClient = useQueryClient();
 	const identity = useCapxulIdentityOrNull();
 	const destination = useMemo(() => destinationOrNull(identity), [identity]);
 	const orgId = scope.kind === "organization" ? scope.orgId : void 0;
 	const claimed = isClaimedOrFalse(identity);
+	const scopeKey = `${orgId ?? ""}:${identity?.phase === "authenticated" ? identity.session.authUserId : ""}:${actingAccount(identity) ?? ""}`;
+	const [observation, setObservation] = useState({
+		scopeKey,
+		status: "loading"
+	});
+	const [subscriptionRetry, setSubscriptionRetry] = useState(0);
 	const sessionError = useMemo(() => identity?.phase === "faulted" ? identityError(identity) : null, [identity]);
 	const wantsMemberships = orgId !== void 0 && claimed;
 	const memberships = useCapxulOrgs({ enabled: wantsMemberships });
@@ -2401,33 +2405,125 @@ function useDashboardAccess(scope) {
 	const membershipsSettled = !wantsMemberships || memberships.data !== void 0 || membershipError !== null;
 	const hasMembership = orgId !== void 0 && (memberships.data ?? []).some((organization) => String(organization.id) === orgId);
 	const wantsLifecycle = wantsMemberships && membershipsSettled && hasMembership;
+	const setupKey = accountKey(capxulKeys.orgLifecycle(orgId), identity);
 	const lifecycle = useQuery({
-		queryKey: capxulKeys.orgLifecycle(orgId),
+		queryKey: setupKey,
 		queryFn: async () => {
-			return unwrapCapxulResult(await requireBootstrappedClient(client, CAPXUL_OPERATIONS.org.getLifecycle).org(orgId).getLifecycle());
+			return unwrapCapxulResult(await requireBootstrappedClient(client, CAPXUL_OPERATIONS.organization.setup).org(orgId).setup.get());
 		},
 		enabled: wantsLifecycle && client !== null
 	});
-	const lifecycleError = wantsLifecycle ? lifecycle.error : null;
-	const lifecycleSettled = !wantsLifecycle || lifecycleError !== null || isLifecycleSettled(lifecycle.data);
+	const meKey = capxulKeys.orgMe(orgId, actingAccount(identity));
+	useEffect(() => {
+		if (!wantsLifecycle || client === null || orgId === void 0) return;
+		const controller = new AbortController();
+		let closed = false;
+		let stop = null;
+		setObservation({
+			scopeKey,
+			status: "loading"
+		});
+		client.org(orgId).setup.subscribe((snapshot) => {
+			if (closed) return;
+			if (snapshot.status === "value") {
+				setObservation({
+					scopeKey,
+					status: "value",
+					value: snapshot.value
+				});
+				queryClient.setQueryData(setupKey, snapshot.value);
+			} else if (snapshot.status === "error") setObservation({
+				scopeKey,
+				status: "error",
+				error: snapshot.error
+			});
+		}, { signal: controller.signal }).then((result) => {
+			if (!result.ok) {
+				if (!closed) setObservation({
+					scopeKey,
+					status: "error",
+					error: result.error
+				});
+				return;
+			}
+			stop = result.value;
+			if (closed) stop();
+		}).catch(() => {
+			if (!closed) setObservation({
+				scopeKey,
+				status: "error",
+				error: new CapxulError("UNKNOWN", "Organization setup subscription failed")
+			});
+		});
+		return () => {
+			closed = true;
+			controller.abort();
+			stop?.();
+		};
+	}, [
+		client,
+		orgId,
+		wantsLifecycle,
+		queryClient,
+		scopeKey,
+		subscriptionRetry
+	]);
+	const currentSetup = observation.scopeKey === scopeKey && observation.status === "value" ? observation.value : void 0;
+	const wantsAuthority = wantsLifecycle && currentSetup?.status === "ready";
+	const authority = useQuery({
+		queryKey: meKey,
+		queryFn: async () => {
+			return unwrapCapxulResult(await requireBootstrappedClient(client, CAPXUL_OPERATIONS.org.me).org(orgId).me());
+		},
+		enabled: wantsAuthority && client !== null
+	});
+	const [checkedAuthority, setCheckedAuthority] = useState(null);
+	useEffect(() => {
+		if (!wantsAuthority || currentSetup === void 0) return;
+		let active = true;
+		authority.refetch().then((result) => {
+			if (active && result.isSuccess) setCheckedAuthority({
+				scopeKey,
+				setup: currentSetup
+			});
+		});
+		return () => {
+			active = false;
+		};
+	}, [
+		scopeKey,
+		currentSetup,
+		wantsAuthority,
+		authority.refetch
+	]);
+	const authorityCurrent = checkedAuthority?.scopeKey === scopeKey && checkedAuthority.setup === currentSetup && authority.data !== void 0;
+	const observationError = observation.scopeKey === scopeKey && observation.status === "error" ? observation.error : void 0;
+	const lifecycleError = wantsLifecycle ? observationError ?? lifecycle.error : null;
+	const authorityError = wantsAuthority ? authority.error : null;
+	const lifecycleSettled = !wantsLifecycle || lifecycleError !== null || authorityError !== null || isLifecycleSettled(currentSetup) && (!wantsAuthority || authorityCurrent);
 	const retry = useCallback(() => {
 		if (sessionError !== null && client !== null) client.auth.getSession();
 		if (membershipError !== null) memberships.refetch();
+		if (observationError !== void 0) setSubscriptionRetry((attempt) => attempt + 1);
 		if (lifecycleError !== null) lifecycle.refetch();
+		if (authorityError !== null) authority.refetch();
 	}, [
 		client,
 		sessionError,
 		membershipError,
+		observationError,
 		lifecycleError,
 		memberships.refetch,
-		lifecycle.refetch
+		lifecycle.refetch,
+		authorityError,
+		authority.refetch
 	]);
-	const error = sessionError ?? membershipError ?? lifecycleError;
-	const probe = probeOf(sessionError, membershipError, lifecycleError);
+	const error = sessionError ?? membershipError ?? lifecycleError ?? authorityError;
+	const probe = probeOf(sessionError, membershipError, lifecycleError, authorityError);
 	const phase = decidePhase({
 		error,
 		settled: client !== null && identity !== null && !isRestoring$1(identity) && membershipsSettled && lifecycleSettled,
-		granted: scope.kind === "personal" ? claimed : claimed && orgId !== void 0 && hasMembership && isExactOrgReady(lifecycle.data, orgId),
+		granted: scope.kind === "personal" ? claimed : claimed && orgId !== void 0 && hasMembership && isExactOrgReady(currentSetup, orgId) && authorityCurrent,
 		orgLaneSettled: identity !== null && isOrgLaneSettled(identity),
 		destination
 	});
@@ -2867,28 +2963,33 @@ function decodeDraft(value, scope) {
 		const to = record(item.to);
 		const amount = record(item.amount);
 		const partyId = toPartyId(identifier(item.partyId));
-		if (to.kind !== "party" || to.partyId !== partyId || item.gross !== item.net || typeof amount.asset !== "string" || typeof amount.value !== "string" || typeof item.currency !== "string" || typeof item.decimals !== "number" || !Number.isInteger(item.decimals) || !Array.isArray(item.adjustments) || item.adjustments.length !== 0) throw Errors.invalidInput("payrollDraft", "Invalid draft recipient");
+		if (to.kind !== "party" || to.partyId !== partyId || item.gross !== item.net || typeof amount.asset !== "string" || typeof amount.value !== "string" || "currency" in item || "decimals" in item || !Array.isArray(item.adjustments) || item.adjustments.length !== 0) throw Errors.invalidInput("payrollDraft", "Invalid draft recipient");
 		const net = minorAmount(item.net);
+		const selectedAsset = requireAsset(identifier(amount.asset));
+		const selectedAmount = {
+			asset: selectedAsset.assetId,
+			value: amount.value
+		};
+		try {
+			if (toRaw(selectedAmount, selectedAsset).toString() !== net) throw Errors.invalidInput("payrollDraft", "Draft payout units differ from net");
+		} catch {
+			throw Errors.invalidInput("payrollDraft", "Invalid draft payout amount");
+		}
 		return {
 			to: {
 				kind: "party",
 				partyId
 			},
 			partyId,
-			amount: {
-				asset: requireAsset(amount.asset).assetId,
-				value: amount.value
-			},
+			amount: selectedAmount,
 			gross: net,
 			net,
-			currency: item.currency,
-			decimals: item.decimals,
 			adjustments: []
 		};
 	});
 	if (new Set(items.map((item) => item.partyId)).size !== items.length) throw Errors.invalidInput("payrollDraft", "Duplicate draft recipient");
 	const exactAsset = requireAsset(identifier(asset.id));
-	if (items.some((item) => item.amount.asset !== exactAsset.assetId)) throw Errors.invalidInput("payrollDraft", "Draft item asset does not match the run asset");
+	if (input.asset !== exactAsset.assetId || items.some((item) => item.amount.asset !== exactAsset.assetId)) throw Errors.invalidInput("payrollDraft", "Draft item asset does not match the run asset");
 	return {
 		version: 1,
 		scope,
@@ -3133,6 +3234,7 @@ function freshRunItems(input) {
 		const amount = input.amounts[index];
 		const terms = input.compensationTerms.get(recipientId);
 		if (to === void 0 || amount === void 0 || terms === void 0) throw Errors.unknown();
+		const rawAmount = toRaw(amount, requireAsset(amount.asset)).toString();
 		items.push({
 			to: {
 				kind: "party",
@@ -3140,10 +3242,8 @@ function freshRunItems(input) {
 			},
 			partyId: recipientId,
 			amount,
-			gross: terms.rate,
-			net: terms.rate,
-			currency: terms.currency,
-			decimals: terms.decimals,
+			gross: rawAmount,
+			net: rawAmount,
 			adjustments: []
 		});
 	}

package/dist/testing/index.d.mts

@@ -1,4 +1,4 @@
-import { a as AuthenticationSlots, d as OnboardingControllerProps } from "../controllers-BWmKRFy6.mjs";
+import { a as AuthenticationSlots, d as OnboardingControllerProps } from "../controllers-BMAU2kKH.mjs";
 import * as React from "react";
 import { ReactNode } from "react";
 import { CapxulTestClient, CapxulTestClock, CapxulTestObservation, CreateCapxulTestClientOptions, SeedTestIdentityInput, createCapxulTestClient } from "@capxul/sdk/testing";

package/dist/testing/index.mjs

@@ -1,4 +1,4 @@
-import { n as CapxulOnboardingController, r as CapxulProvider, t as CapxulAuthenticationController } from "../controllers-L1UqwWS1.mjs";
+import { n as CapxulOnboardingController, r as CapxulProvider, t as CapxulAuthenticationController } from "../controllers-BV3e8WD3.mjs";
 import "react";
 import { jsx } from "react/jsx-runtime";
 import { createCapxulTestClient } from "@capxul/sdk/testing";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/sdk-react",
-  "version": "4.20.0-beta.10",
+  "version": "4.20.0-beta.12",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Xelmar-tech/infrastructure.git",
@@ -26,7 +26,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@capxul/sdk": "4.20.0-beta.10"
+    "@capxul/sdk": "4.20.0-beta.12"
   },
   "devDependencies": {
     "@tanstack/react-query": "^5.66.9",
@@ -43,7 +43,7 @@
     "vite": "npm:@voidzero-dev/vite-plus-core@0.3.0",
     "vite-plus": "0.3.0",
     "vitest": "4.1.11",
-    "@capxul/config": "0.4.0-beta.0",
+    "@capxul/config": "0.4.0-beta.1",
     "@capxul/errors": "0.3.0",
     "@capxul/types": "0.3.0",
     "@capxul/typescript-config": "0.0.0"