@capxul/sdk 4.2.0-rc.11 → 4.2.0-rc.13

package/dist/capxul-source.json

@@ -1,11 +1,11 @@
 {
   "source": {
-    "commit": "12a590f10914e8b056ce54732e6f484f36e060f3",
-    "tree": "90adc6656be3c1fb0a6e18170877d46081fa2538",
+    "commit": "887920e1ba54e17bd8465975fcbc6e1537dfb6b8",
+    "tree": "deed16dc942ed9d6b587ceead4dbf8b0b4174e2c",
     "branch": "codex/programme-rc",
     "repository": "https://github.com/Xelmar-tech/infrastructure",
     "lockfileSha256": "5870f53b72706d103220c1bcf733cb4fb71196aea32a9cfbdc277d73cc959264"
   },
   "name": "@capxul/sdk",
-  "version": "4.2.0-rc.11"
+  "version": "4.2.0-rc.13"
 }

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import { $ as PayrollGroupId, B as ChainId, Ct as ChainCause, D as Account, Dt as RevertSummary, E as CAPXUL_PAYMENTS_V2_ADDRESS, Et as FailureMode, F as AssetId, G as EVM_ADDRESS_RE, H as CurrencyCode, I as AuthSession, J as Handle, L as AuthUserId, O as AccountId, P as AssetAmount, St as CHAIN_UPSTREAMS, Tt as FAILURE_MODES, V as CountryCode, X as OrgId, Y as Money, Z as PartyId, _ as Session, _t as CapxulErrorCode, a as Eip1193RequestProvider, at as RoleKey, c as injectedWalletSigner, ct as TesterKind, d as AccountRequirement, dt as toAddress, et as PayrollRunId, f as Eip1193Provider, ft as toCountryCode, g as Profile, gt as CapxulError, h as CapxulResult, ht as CAPXUL_ERROR_CODES, i as CapxulSigner, k as Address, l as AccountProvider, m as localPrivateKeyAccountProvider, mt as toPartyId, o as SignerStatus, p as eip1193AccountProvider, pt as toHandle, r as CapxulDigestSigner, s as SignerStatusStore, u as AccountProviderSource, v as SmartAccount, vt as CapxulErrorDetails, wt as ChainUpstream, xt as isCapxulError, yt as Errors, z as BudgetId } from "./OAuthBearerAuthClient-C-ip-z8M.mjs";
-import { $ as OrganizationPaymentBatchInput, $n as RequestStatus, $t as Destination, A as OrgScopedMethods, An as Ref, At as AddressBookAddInput, B as AuthorizeRunOptions, Bn as SmartAccountMethods, Bt as ActivityFilter, C as CurrentUserMethods, Cn as PaymentMoney, Ct as AccountMethods, D as MemberStatus, Dn as PaymentsMethods, Dt as ActorRequest, E as InviteMemberInput, En as PaymentType, Et as ActorRelationshipMethods, F as ResendInviteTokenInput, Fn as AccountLifecycle, Ft as InboxItem, G as PayrollGroupsMethods, Gn as ActorRef, Gt as ActivityPage, H as PayrollGroup, Hn as OrgLifecycle, Ht as ActivityKind, I as RoleDefinition, In as AccountSetupStep, It as InboxMethods, J as PayrollRun, Jn as SubmittedPermissionExecution, Jt as ActivitySummary, K as PayrollMethods, Kn as CurrentHoldings, Kt as ActivityRange, L as RoleSpendCap, Ln as isSettingUpLifecycle, Lt as ActivityAnnotation, M as OrgView, Mn as TargetReference, Mt as AddressBookLabelInput, N as OrganizationAccount, Nn as TargetsMethods, Nt as AddressBookMethods, O as MemberView, On as PaymentsPayInput, Ot as ActorRequestIssueInput, P as OrganizationAuditLogItem, Pn as fingerprintPaymentIntent, Pt as InboxApproveInput, Q as PayrollTermsUnit, Qn as PaymentStatus$1, Qt as DepositInstructions, R as RoleView, Rn as CompleteProfileInput, Rt as ActivityAnnotationInput, S as CurrentUserContext, Sn as PaymentDocumentsMethods, St as ReadyAccountLifecycle, T as DetectPendingOrgInvitationsResult, Tn as PaymentTiming, Tt as ActorProfileMethods, U as PayrollGroupInput, Un as OrgSetupStep, Ut as ActivityListParams, V as PayrollEngagementTerms, Vn as AuthMethods, Vt as ActivityItem, W as PayrollGroupMember, Wn as PayoutAddress, Wt as ActivityMethods, X as PayrollRunStatus, Xn as PAYMENT_DIRECTIONS, Xt as ActivitySummaryTotal, Y as PayrollRunItemInput, Yn as InboxStatus, Yt as ActivitySummaryParams, Z as PayrollRuns, Zn as PAYMENT_STATUSES, Zt as ActorReference, _ as HoldingsMethods, _n as PaymentDirection, _t as OnboardingMethods, a as ObservationContext, an as DestinationRemoveInput, ar as IdentityEvent, at as PermissionCreateInput, b as SystemHealth, bn as PaymentDocumentRender, bt as PersonOnboarding, c as HostObservability, cn as MeMethods, cr as Readiness, ct as PermissionReplaceInput, d as postHogObservability, dn as OfframpMethods, dr as isClaimed, dt as Budget, en as DestinationAddInput, et as OrganizationPaymentInput, f as CapxulClient, fn as OfframpQuote, fr as isRestoring, ft as OrgMe, g as IdentityRuntimeSendResult, gn as PaymentActivityEvidence, gt as CompletedPersonProfile, h as IdentityRuntime, hn as Payment, ht as AccountsMethods, i as ObservationAdapter, in as DestinationRail, ir as Destination$1, it as PermissionChangeInput, j as OrgTemplate, jn as ResolvedTarget, jt as AddressBookEntry, k as OrgMethods, kn as RecipientResolution, kt as ActorRequestsMethods, l as PostHogObservabilityClient, ln as MeProfile, lr as StateLabel, lt as PermissionRevokeInput, m as IdentityProfileDetails, mn as OfframpStatus, mr as InvocationControls, mt as OrgMeOptions, nn as DestinationListInput, nt as OrganizationPaymentsMethods, o as ObservationDelivery, on as DestinationsMethods, or as IdentityState, ot as PermissionMethods, p as CreateCapxulClientInput, pn as OfframpQuoteInput, pr as IdentityTransition, pt as OrgMeMethod, q as PayrollOptions, qn as Permission, qt as ActivityReference, r as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, rn as DestinationPayload, rr as TelemetryPort, rt as PermissionAssignInput, s as SdkFailureObservation, sn as FinancialOpsMethods, sr as OrgLane, st as PermissionOptions, t as CapxulClientInput, tn as DestinationKind, tt as OrganizationPaymentItemInput, u as PostHogObservabilityOptions, un as MovementActivityEvidence, ur as destination, ut as PermissionReadResult, v as Holding, vn as PaymentDocumentKind, vt as OrganizationOnboarding, w as CreateOrgInput, wn as PaymentStatus, wt as ActorProfile, x as MediaMethods, xn as PaymentDocumentVerification, xt as PersonOnboardingInput, y as SystemMethods, yn as PaymentDocumentRef, yt as OrganizationOnboardingInput, z as AuthorizeRunInput, zn as IdentityMethods, zt as ActivityDetail } from "./production-A1zW1JPt.mjs";
+import { $ as OrganizationPaymentBatchInput, $n as RequestStatus, $t as Destination, A as OrgScopedMethods, An as Ref, At as AddressBookAddInput, B as AuthorizeRunOptions, Bn as SmartAccountMethods, Bt as ActivityFilter, C as CurrentUserMethods, Cn as PaymentMoney, Ct as AccountMethods, D as MemberStatus, Dn as PaymentsMethods, Dt as ActorRequest, E as InviteMemberInput, En as PaymentType, Et as ActorRelationshipMethods, F as ResendInviteTokenInput, Fn as AccountLifecycle, Ft as InboxItem, G as PayrollGroupsMethods, Gn as ActorRef, Gt as ActivityPage, H as PayrollGroup, Hn as OrgLifecycle, Ht as ActivityKind, I as RoleDefinition, In as AccountSetupStep, It as InboxMethods, J as PayrollRun, Jn as SubmittedPermissionExecution, Jt as ActivitySummary, K as PayrollMethods, Kn as CurrentHoldings, Kt as ActivityRange, L as RoleSpendCap, Ln as isSettingUpLifecycle, Lt as ActivityAnnotation, M as OrgView, Mn as TargetReference, Mt as AddressBookLabelInput, N as OrganizationAccount, Nn as TargetsMethods, Nt as AddressBookMethods, O as MemberView, On as PaymentsPayInput, Ot as ActorRequestIssueInput, P as OrganizationAuditLogItem, Pn as fingerprintPaymentIntent, Pt as InboxApproveInput, Q as PayrollTermsUnit, Qn as PaymentStatus$1, Qt as DepositInstructions, R as RoleView, Rn as CompleteProfileInput, Rt as ActivityAnnotationInput, S as CurrentUserContext, Sn as PaymentDocumentsMethods, St as ReadyAccountLifecycle, T as DetectPendingOrgInvitationsResult, Tn as PaymentTiming, Tt as ActorProfileMethods, U as PayrollGroupInput, Un as OrgSetupStep, Ut as ActivityListParams, V as PayrollEngagementTerms, Vn as AuthMethods, Vt as ActivityItem, W as PayrollGroupMember, Wn as PayoutAddress, Wt as ActivityMethods, X as PayrollRunStatus, Xn as PAYMENT_DIRECTIONS, Xt as ActivitySummaryTotal, Y as PayrollRunItemInput, Yn as InboxStatus, Yt as ActivitySummaryParams, Z as PayrollRuns, Zn as PAYMENT_STATUSES, Zt as ActorReference, _ as HoldingsMethods, _n as PaymentDirection, _t as OnboardingMethods, a as ObservationContext, an as DestinationRemoveInput, ar as IdentityEvent, at as PermissionCreateInput, b as SystemHealth, bn as PaymentDocumentRender, bt as PersonOnboarding, c as HostObservability, cn as MeMethods, cr as Readiness, ct as PermissionReplaceInput, d as postHogObservability, dn as OfframpMethods, dr as isClaimed, dt as Budget, en as DestinationAddInput, et as OrganizationPaymentInput, f as CapxulClient, fn as OfframpQuote, fr as isRestoring, ft as OrgMe, g as IdentityRuntimeSendResult, gn as PaymentActivityEvidence, gt as CompletedPersonProfile, h as IdentityRuntime, hn as Payment, ht as AccountsMethods, i as ObservationAdapter, in as DestinationRail, ir as Destination$1, it as PermissionChangeInput, j as OrgTemplate, jn as ResolvedTarget, jt as AddressBookEntry, k as OrgMethods, kn as RecipientResolution, kt as ActorRequestsMethods, l as PostHogObservabilityClient, ln as MeProfile, lr as StateLabel, lt as PermissionRevokeInput, m as IdentityProfileDetails, mn as OfframpStatus, mr as InvocationControls, mt as OrgMeOptions, nn as DestinationListInput, nt as OrganizationPaymentsMethods, o as ObservationDelivery, on as DestinationsMethods, or as IdentityState, ot as PermissionMethods, p as CreateCapxulClientInput, pn as OfframpQuoteInput, pr as IdentityTransition, pt as OrgMeMethod, q as PayrollOptions, qn as Permission, qt as ActivityReference, r as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, rn as DestinationPayload, rr as TelemetryPort, rt as PermissionAssignInput, s as SdkFailureObservation, sn as FinancialOpsMethods, sr as OrgLane, st as PermissionOptions, t as CapxulClientInput, tn as DestinationKind, tt as OrganizationPaymentItemInput, u as PostHogObservabilityOptions, un as MovementActivityEvidence, ur as destination, ut as PermissionReadResult, v as Holding, vn as PaymentDocumentKind, vt as OrganizationOnboarding, w as CreateOrgInput, wn as PaymentStatus, wt as ActorProfile, x as MediaMethods, xn as PaymentDocumentVerification, xt as PersonOnboardingInput, y as SystemMethods, yn as PaymentDocumentRef, yt as OrganizationOnboardingInput, z as AuthorizeRunInput, zn as IdentityMethods, zt as ActivityDetail } from "./production-Db4fBqSk.mjs";
 import { Hex } from "viem";
 import { Effect, Layer } from "effect";
 //#region ../errors/src/index.d.ts
@@ -339,6 +339,8 @@ declare const CAPXUL_OPERATIONS: {
   };
   readonly payroll: {
     readonly authorizeRun: "payroll.authorizeRun";
+    readonly emitGroupChanged: "payroll.emitGroupChanged";
+    readonly emitRunTransitioned: "payroll.emitRunTransitioned";
     readonly groups: {
       readonly access: "payroll.groups";
       readonly list: "payroll.groups.list";

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { A as signerFailure, B as isRestoring, C as normalizeExceptionErrorKind, E as safeExceptionLabel, F as CAPXUL_OPERATIONS, I as isCapxulOperation, L as normalizeCapxulOperation, M as PAYMENT_DIRECTIONS, N as PAYMENT_STATUSES, O as isSettingUpLifecycle, R as destination, S as SDK_VERSION, T as projectSdkException, _ as fingerprintPaymentIntent, b as failureDetail, d as embeddedSigner, f as openfortEmbeddedSigner, g as devPrivateKeySigner, h as deriveDevPrivateKey, j as resolveFailureMode, k as injectedWalletSigner, m as openfortEmbeddedWalletPort, p as openfortEmbeddedSignerFromWallet, r as postHogObservability, t as createCapxulClient$1, w as normalizeExceptionOperation, x as EXCEPTION_MESSAGE, y as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, z as isClaimed } from "./production-7jr-KUvX.mjs";
+import { A as signerFailure, B as isRestoring, C as normalizeExceptionErrorKind, E as safeExceptionLabel, F as CAPXUL_OPERATIONS, I as isCapxulOperation, L as normalizeCapxulOperation, M as PAYMENT_DIRECTIONS, N as PAYMENT_STATUSES, O as isSettingUpLifecycle, R as destination, S as SDK_VERSION, T as projectSdkException, _ as fingerprintPaymentIntent, b as failureDetail, d as embeddedSigner, f as openfortEmbeddedSigner, g as devPrivateKeySigner, h as deriveDevPrivateKey, j as resolveFailureMode, k as injectedWalletSigner, m as openfortEmbeddedWalletPort, p as openfortEmbeddedSignerFromWallet, r as postHogObservability, t as createCapxulClient$1, w as normalizeExceptionOperation, x as EXCEPTION_MESSAGE, y as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, z as isClaimed } from "./production-CrW_sxwv.mjs";
 import { A as currencySymbolFor, B as toCurrencyCode, G as toHandle, M as toAddress, T as EVM_ADDRESS_RE, Y as toPartyId, at as HANDLE_RE, b as configuredMoneyAssetById, ct as CapxulError, dt as isCapxulError, ft as CHAIN_UPSTREAMS, g as CAPXUL_PAYMENTS_V2_ADDRESS, k as assetIdFor, pt as FAILURE_MODES, st as CAPXUL_ERROR_CODES, ut as Errors, z as toCountryCode } from "./OAuthBearerAuthClient-CbU_W9Sp.mjs";
 import { formatUnits } from "viem";
 import { Effect } from "effect";

package/dist/{production-7jr-KUvX.mjs → production-CrW_sxwv.mjs}

@@ -695,6 +695,8 @@ const CAPXUL_OPERATIONS = {
 	recipient: { resolve: "recipient.resolve" },
 	payroll: {
 		authorizeRun: "payroll.authorizeRun",
+		emitGroupChanged: "payroll.emitGroupChanged",
+		emitRunTransitioned: "payroll.emitRunTransitioned",
 		groups: {
 			access: "payroll.groups",
 			list: "payroll.groups.list",
@@ -1929,6 +1931,12 @@ Schema.Struct({
 			"settled"
 		]),
 		run_id: Schema.String,
+		/**
+		* The `paymentCommands` row at `payrollRuns.batchRef` — the durable owner of
+		* this run's Payment membership. `payment_count` counts THAT command's
+		* `paymentIds`, so an unrelated Payment quoting the run id changes neither.
+		*/
+		command_id: OptionalString,
 		payment_count: Schema.optional(Schema.Number),
 		occurred_at: Schema.Number
 	})
@@ -3204,6 +3212,13 @@ Schema.Struct({
 	transfers: Schema.Array(TransferEvidenceSchema),
 	requestCount: nonNegativeInteger("requestCount")
 });
+/**
+* `chainId:txHash:transactionLogOrdinal` — the indexer's own row id. The
+* ordinal is the position in the transaction's receipt logs, never the
+* block-global index that `eventLogIndex` carries.
+*/
+const LOGICAL_EVENT_ID_RE = /^[1-9][0-9]{0,9}:0x[0-9a-f]{64}:(0|[1-9][0-9]{0,5})$/u;
+const LogicalEventIdSchema = Schema.String.pipe(Schema.refine((value) => LOGICAL_EVENT_ID_RE.test(value), { message: "must be chainId:txHash:transactionLogOrdinal" }));
 const VerifiedMoneyEvidenceCommonSchema = Schema.Struct({
 	chainId: BaseSepoliaChainIdSchema,
 	contractAddress: AddressSchema,
@@ -3212,7 +3227,17 @@ const VerifiedMoneyEvidenceCommonSchema = Schema.Struct({
 	blockNumber: BlockNumberSchema,
 	blockHash: Bytes32Schema,
 	blockTimestamp: Uint48Schema,
-	eventLogIndex: LogIndexSchema
+	/**
+	* The block-global log index of the settled event, as
+	* `eth_getTransactionReceipt` reports it. Both readers key on this value, and
+	* the ledger de-duplicates a settlement on `(txHash, eventLogIndex)`.
+	*/
+	eventLogIndex: LogIndexSchema,
+	/**
+	* The indexer row the fact was read from. Present only when the indexer
+	* answered; the receipt-backed reader reads no row and sets nothing.
+	*/
+	logicalEventId: Schema.optional(LogicalEventIdSchema)
 });
 const VerifiedPaymentEvidenceSchema = Schema.Struct({
 	...VerifiedMoneyEvidenceCommonSchema.fields,
@@ -6066,7 +6091,7 @@ function subscribeActivity(deps, actor, controls, onChange) {
 }
 //#endregion
 //#region package.json
-var version = "4.2.0-rc.11";
+var version = "4.2.0-rc.13";
 //#endregion
 //#region src/telemetry/exception-projection.ts
 /** Fixed fallback for failures that have no safe message. */
@@ -7528,10 +7553,12 @@ function makeFinancialOpsMethods(deps) {
 				return runPortEffect(Effect.suspend(() => deps.convexCall.query(fns.depositInstructions, copyInvocationObservation(controls, {}))).pipe(Effect.tap((instructions) => emitDepositInitiated(deps.telemetry, instructions, controls))), controls, CAPXUL_OPERATIONS.me.depositInstructions, deps.runPromise);
 			}
 		},
-		targets: { resolve: async (reference, options) => {
-			const recipient = normalizeTargetForBackend(reference, "reference");
-			if (!recipient.ok) return recipient;
-			return mapOk(await runIfActive(options?.signal, CAPXUL_OPERATIONS.recipient.resolve, () => deps.convexCall.query(fns.resolveRecipient, { recipient: recipient.value })), resolvedTargetFromResolution);
+		targets: { resolve: (reference, options) => {
+			const controls = deps.invocationControls?.(options) ?? options;
+			return runPortEffect(projectReply(Effect.suspend(() => {
+				const recipient = normalizeTargetForBackend(reference, "reference");
+				return recipient.ok ? deps.convexCall.query(fns.resolveRecipient, copyInvocationObservation(controls, { recipient: recipient.value })) : Effect.fail({ publicError: recipient.error });
+			}), resolvedTargetFromResolution), controls, CAPXUL_OPERATIONS.recipient.resolve, deps.runPromise);
 		} },
 		destinations: {
 			add: (input, options) => {
@@ -7594,8 +7621,14 @@ function makeFinancialOpsMethods(deps) {
 				kind: "claim",
 				paymentId
 			}, deps.invocationControls?.(options) ?? options, CAPXUL_OPERATIONS.payments.claim),
-			list: async (options) => mapOk(await runIfActive(options?.signal, CAPXUL_OPERATIONS.payments.list, () => deps.convexCall.query(fns.listPayments, {})), (payments) => payments.map(normalizePaymentTiming)),
-			get: async (paymentId, options) => mapOk(await runIfActive(options?.signal, CAPXUL_OPERATIONS.payments.get, () => deps.convexCall.query(fns.getPayment, { paymentId })), (payment) => payment === null ? null : normalizePaymentTiming(payment)),
+			list: (options) => {
+				const controls = deps.invocationControls?.(options) ?? options;
+				return runPortEffect(projectReply(Effect.suspend(() => deps.convexCall.query(fns.listPayments, copyInvocationObservation(controls, {}))), (payments) => payments.map(normalizePaymentTiming)), controls, CAPXUL_OPERATIONS.payments.list, deps.runPromise);
+			},
+			get: (paymentId, options) => {
+				const controls = deps.invocationControls?.(options) ?? options;
+				return runPortEffect(projectReply(Effect.suspend(() => deps.convexCall.query(fns.getPayment, copyInvocationObservation(controls, { paymentId }))), (payment) => payment === null ? null : normalizePaymentTiming(payment)), controls, CAPXUL_OPERATIONS.payments.get, deps.runPromise);
+			},
 			cancel: (paymentId, options) => runLifecycle({
 				kind: "cancel",
 				paymentId
@@ -7963,6 +7996,22 @@ function normalizePaymentTiming(payment) {
 		timing: payment.timing ?? payment.release ?? { kind: "instant" }
 	};
 }
+/**
+* `mapOk`, moved inside the observed Effect (R09 #1967).
+*
+* The projection can refuse — `toAddress` and `toPartyId` throw on a malformed
+* reply — and every verb on this surface returns a `CapxulResult`, so that
+* throw stays a value here (ADR-0023). The error identity is `mapOk`'s: a
+* `CapxulError` passes through, anything else becomes `Errors.unknown(cause)`.
+* Running it inside the runner is what puts the decode failure on the same
+* operation record as the read that produced the reply.
+*/
+function projectReply(program, project) {
+	return program.pipe(Effect.flatMap((value) => Effect.try({
+		try: () => project(value),
+		catch: (cause) => ({ publicError: cause instanceof CapxulError ? cause : Errors.unknown(cause) })
+	})));
+}
 function mapOk(result, f) {
 	if (!result.ok) return result;
 	try {
@@ -9453,6 +9502,8 @@ const OBSERVED_CONVEX_QUERIES = /* @__PURE__ */ new Set([
 	"movement/activity:summary",
 	"movement/activity:get",
 	"financialOps/queries:depositInstructions",
+	"financialOps/queries:listPayments",
+	"financialOps/queries:getPayment",
 	"financialOps/destinations:list",
 	"financialOps/queries:verifyPaymentDocument",
 	"financialOps/queries:renderStoredDocument",
@@ -14619,6 +14670,7 @@ function identity(row) {
 		chainId: toChainId(integer(row, "chain_id")),
 		txHash: toTxHash(hex(row, "tx_hash")),
 		transactionLogOrdinal: integer(row, "transaction_log_ordinal"),
+		logIndex: integer(row, "log_index"),
 		blockNumber: big(row, "block_number"),
 		blockHash: hex(row, "block_hash"),
 		timestamp: big(row, "timestamp")
@@ -14701,8 +14753,8 @@ function decodeStatus(body) {
 * that allowlist changes, this file changes with it or every read fails 403.
 */
 const HEADS = {
-	transfer: "select \"id\", \"chain_id\", \"tx_hash\", \"transaction_log_ordinal\", \"block_number\", \"block_hash\", \"timestamp\", \"asset_id\", \"token\", \"from\", \"to\", \"amount\" from \"transfer\" where (\"transfer\".\"from\" = $1 or \"transfer\".\"to\" = $2) order by \"transfer\".\"block_number\" desc, \"transfer\".\"id\" desc",
-	payment: "select \"id\", \"chain_id\", \"tx_hash\", \"transaction_log_ordinal\", \"block_number\", \"block_hash\", \"timestamp\", \"contract\", \"settlement_id\", \"sender\", \"recipient\", \"asset_id\", \"token\", \"amount\", \"kind\", \"document_hash\" from \"payment\" where (\"payment\".\"sender\" = $1 or \"payment\".\"recipient\" = $2) order by \"payment\".\"block_number\" desc, \"payment\".\"id\" desc",
+	transfer: "select \"id\", \"chain_id\", \"tx_hash\", \"transaction_log_ordinal\", \"log_index\", \"block_number\", \"block_hash\", \"timestamp\", \"asset_id\", \"token\", \"from\", \"to\", \"amount\" from \"transfer\" where (\"transfer\".\"from\" = $1 or \"transfer\".\"to\" = $2) order by \"transfer\".\"block_number\" desc, \"transfer\".\"id\" desc",
+	payment: "select \"id\", \"chain_id\", \"tx_hash\", \"transaction_log_ordinal\", \"log_index\", \"block_number\", \"block_hash\", \"timestamp\", \"contract\", \"settlement_id\", \"sender\", \"recipient\", \"asset_id\", \"token\", \"amount\", \"kind\", \"document_hash\" from \"payment\" where (\"payment\".\"sender\" = $1 or \"payment\".\"recipient\" = $2) order by \"payment\".\"block_number\" desc, \"payment\".\"id\" desc",
 	balance: "select \"chain_id\", \"asset_id\", \"to\", \"amount\" from \"balance\" where \"balance\".\"to\" = $1"
 };
 /** How many times the statement binds the Safe address. */

package/dist/{production-A1zW1JPt.d.mts → production-Db4fBqSk.d.mts}

@@ -938,6 +938,12 @@ interface IndexerEventIdentity {
   readonly chainId: ChainId;
   readonly txHash: TxHash;
   readonly transactionLogOrdinal: number;
+  /**
+   * The block-global log index of the same log, as the transaction receipt
+   * reports it. The ordinal above is the identity; this is the key Convex
+   * settles a Payment on (P12).
+   */
+  readonly logIndex: number;
   readonly blockNumber: bigint;
   readonly blockHash: string;
   /** Block timestamp in epoch seconds. */
@@ -1274,10 +1280,17 @@ interface ResolvedTarget {
     readonly canPayout: boolean;
   };
 }
+/**
+ * R09 (#1967): the declared option type is the `InvocationControls` the money
+ * surface already forwards to `deps.invocationControls`, named here exactly as
+ * R02 named it on the address book and R13 on payroll. A caller that captured
+ * one user attempt can hand the same `correlation_id`/`journey_id` to the read
+ * it starts, so the read joins that attempt instead of standing alone.
+ * `{ signal }` callers are unaffected.
+ */
+type PaymentReadOptions = InvocationControls;
 interface TargetsMethods {
-  resolve(reference: TargetReference, options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<ResolvedTarget>>;
+  resolve(reference: TargetReference, options?: PaymentReadOptions): Promise<CapxulResult<ResolvedTarget>>;
 }
 type Ref$1 = {
   readonly kind: "handle";
@@ -1763,12 +1776,8 @@ interface PaymentsMethods {
   claim(paymentId: string, options?: {
     readonly signal?: AbortSignal;
   }): Promise<CapxulResult<Payment>>;
-  list(options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<readonly Payment[]>>;
-  get(paymentId: string, options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<Payment | null>>;
+  list(options?: PaymentReadOptions): Promise<CapxulResult<readonly Payment[]>>;
+  get(paymentId: string, options?: PaymentReadOptions): Promise<CapxulResult<Payment | null>>;
   cancel(paymentId: string, options?: {
     readonly signal?: AbortSignal;
   }): Promise<CapxulResult<Payment>>;
@@ -2343,9 +2352,15 @@ interface AuthorizeRunInput {
    */
   readonly requestKey?: string;
 }
-type PayrollOptions = {
-  readonly signal?: AbortSignal;
-};
+/**
+ * R13 (#1968): the declared option type is the `InvocationControls` these
+ * methods have always forwarded to `deps.invocationControls` — the same naming
+ * R02 gave the address book. It lets a caller that captured one browser attempt
+ * hand that attempt's `correlation_id`/`journey_id` to the payroll operation it
+ * starts, so `ui_payroll_action_completed` and the durable group and run events
+ * share a correlation. `{ signal }` callers are unaffected.
+ */
+type PayrollOptions = InvocationControls;
 type AuthorizeRunOptions = PayrollOptions & {
   /** Persist this SDK-allocated key before the first backend write. Reject to prevent execution. */
   readonly onRequestKey?: (key: string) => void | Promise<void>;

package/dist/testing/index.d.mts

@@ -1,5 +1,5 @@
 import { h as CapxulResult } from "../OAuthBearerAuthClient-C-ip-z8M.mjs";
-import { er as TelemetryEvent, f as CapxulClient, i as ObservationAdapter, n as ProductionSignerControls, nr as TelemetryIdentifyInput, pr as IdentityTransition, t as CapxulClientInput, tr as TelemetryGroupInput } from "../production-A1zW1JPt.mjs";
+import { er as TelemetryEvent, f as CapxulClient, i as ObservationAdapter, n as ProductionSignerControls, nr as TelemetryIdentifyInput, pr as IdentityTransition, t as CapxulClientInput, tr as TelemetryGroupInput } from "../production-Db4fBqSk.mjs";
 import { Effect, Layer } from "effect";
 //#region src/testing/production-client.d.ts
 /** Create the one production client with per-client controls at its signing boundaries. */

package/dist/testing/index.mjs

@@ -1,4 +1,4 @@
-import { D as fromWei, P as redactTelemetryEvent, a as smartAccountErrorFromCapxul, c as identityErrorFromCapxul, i as assembleCapxulClient, l as convexCallErrorFromCapxul, n as createCapxulClientWithSignerControls, o as accountReadErrorFromCapxul, s as wireChainId, u as bootstrapErrorFromCapxul, v as toWei } from "../production-7jr-KUvX.mjs";
+import { D as fromWei, P as redactTelemetryEvent, a as smartAccountErrorFromCapxul, c as identityErrorFromCapxul, i as assembleCapxulClient, l as convexCallErrorFromCapxul, n as createCapxulClientWithSignerControls, o as accountReadErrorFromCapxul, s as wireChainId, u as bootstrapErrorFromCapxul, v as toWei } from "../production-CrW_sxwv.mjs";
 import { G as toHandle, H as toEmail, I as toAuthUserId, K as toJwtToken, M as toAddress, N as toAllowedOrigin, P as toAppId, Q as toPublishableKey, R as toChainId, U as toEpochMs, V as toDurationMs, W as toEpochSeconds, ct as CapxulError, d as authClientPortFromPromiseAdapter, et as toSessionToken, it as validateHandle, j as toAccountId, n as readClockNow, q as toKycTier, r as InMemoryAuthCacheAdapter, ut as Errors, y as deriveCapxulSafeAddress, z as toCountryCode } from "../OAuthBearerAuthClient-CbU_W9Sp.mjs";
 import { keccak256 } from "viem";
 import { Effect, Result, Semaphore } from "effect";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/sdk",
-  "version": "4.2.0-rc.11",
+  "version": "4.2.0-rc.13",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Xelmar-tech/infrastructure.git",
@@ -48,10 +48,10 @@
     "vite-plus": "0.3.0",
     "vitest": "4.1.11",
     "@capxul/config": "0.3.0",
-    "@capxul/observability": "4.2.0-rc.11",
+    "@capxul/errors": "0.3.0",
     "@capxul/types": "0.3.0",
+    "@capxul/observability": "4.2.0-rc.13",
     "@capxul/typescript-config": "0.0.0",
-    "@capxul/errors": "0.3.0",
     "@capxul/wire": "0.7.0"
   },
   "_permissionlessPinReason": "permissionless.toSafeSmartAccount is pinned to 0.3.4 for live Safe deployment E2E. Counterfactual address fixtures captured 2026-05-17 in packages/backend/convex/_shared/__tests__/counterfactual.test.ts and packages/config/tests/safe.test.ts must be re-verified before upgrading.",