@capxul/sdk 4.2.0-rc.13 → 4.2.0-rc.15

package/dist/capxul-source.json

@@ -1,11 +1,11 @@
 {
   "source": {
-    "commit": "887920e1ba54e17bd8465975fcbc6e1537dfb6b8",
-    "tree": "deed16dc942ed9d6b587ceead4dbf8b0b4174e2c",
+    "commit": "b2dff9052ea3f3a55dfca98530c02b4ac3bcfa96",
+    "tree": "9fc0a21bc2cb477c62dd9f5c44c4977d74548d94",
     "branch": "codex/programme-rc",
     "repository": "https://github.com/Xelmar-tech/infrastructure",
     "lockfileSha256": "5870f53b72706d103220c1bcf733cb4fb71196aea32a9cfbdc277d73cc959264"
   },
   "name": "@capxul/sdk",
-  "version": "4.2.0-rc.13"
+  "version": "4.2.0-rc.15"
 }

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import { $ as PayrollGroupId, B as ChainId, Ct as ChainCause, D as Account, Dt as RevertSummary, E as CAPXUL_PAYMENTS_V2_ADDRESS, Et as FailureMode, F as AssetId, G as EVM_ADDRESS_RE, H as CurrencyCode, I as AuthSession, J as Handle, L as AuthUserId, O as AccountId, P as AssetAmount, St as CHAIN_UPSTREAMS, Tt as FAILURE_MODES, V as CountryCode, X as OrgId, Y as Money, Z as PartyId, _ as Session, _t as CapxulErrorCode, a as Eip1193RequestProvider, at as RoleKey, c as injectedWalletSigner, ct as TesterKind, d as AccountRequirement, dt as toAddress, et as PayrollRunId, f as Eip1193Provider, ft as toCountryCode, g as Profile, gt as CapxulError, h as CapxulResult, ht as CAPXUL_ERROR_CODES, i as CapxulSigner, k as Address, l as AccountProvider, m as localPrivateKeyAccountProvider, mt as toPartyId, o as SignerStatus, p as eip1193AccountProvider, pt as toHandle, r as CapxulDigestSigner, s as SignerStatusStore, u as AccountProviderSource, v as SmartAccount, vt as CapxulErrorDetails, wt as ChainUpstream, xt as isCapxulError, yt as Errors, z as BudgetId } from "./OAuthBearerAuthClient-C-ip-z8M.mjs";
-import { $ as OrganizationPaymentBatchInput, $n as RequestStatus, $t as Destination, A as OrgScopedMethods, An as Ref, At as AddressBookAddInput, B as AuthorizeRunOptions, Bn as SmartAccountMethods, Bt as ActivityFilter, C as CurrentUserMethods, Cn as PaymentMoney, Ct as AccountMethods, D as MemberStatus, Dn as PaymentsMethods, Dt as ActorRequest, E as InviteMemberInput, En as PaymentType, Et as ActorRelationshipMethods, F as ResendInviteTokenInput, Fn as AccountLifecycle, Ft as InboxItem, G as PayrollGroupsMethods, Gn as ActorRef, Gt as ActivityPage, H as PayrollGroup, Hn as OrgLifecycle, Ht as ActivityKind, I as RoleDefinition, In as AccountSetupStep, It as InboxMethods, J as PayrollRun, Jn as SubmittedPermissionExecution, Jt as ActivitySummary, K as PayrollMethods, Kn as CurrentHoldings, Kt as ActivityRange, L as RoleSpendCap, Ln as isSettingUpLifecycle, Lt as ActivityAnnotation, M as OrgView, Mn as TargetReference, Mt as AddressBookLabelInput, N as OrganizationAccount, Nn as TargetsMethods, Nt as AddressBookMethods, O as MemberView, On as PaymentsPayInput, Ot as ActorRequestIssueInput, P as OrganizationAuditLogItem, Pn as fingerprintPaymentIntent, Pt as InboxApproveInput, Q as PayrollTermsUnit, Qn as PaymentStatus$1, Qt as DepositInstructions, R as RoleView, Rn as CompleteProfileInput, Rt as ActivityAnnotationInput, S as CurrentUserContext, Sn as PaymentDocumentsMethods, St as ReadyAccountLifecycle, T as DetectPendingOrgInvitationsResult, Tn as PaymentTiming, Tt as ActorProfileMethods, U as PayrollGroupInput, Un as OrgSetupStep, Ut as ActivityListParams, V as PayrollEngagementTerms, Vn as AuthMethods, Vt as ActivityItem, W as PayrollGroupMember, Wn as PayoutAddress, Wt as ActivityMethods, X as PayrollRunStatus, Xn as PAYMENT_DIRECTIONS, Xt as ActivitySummaryTotal, Y as PayrollRunItemInput, Yn as InboxStatus, Yt as ActivitySummaryParams, Z as PayrollRuns, Zn as PAYMENT_STATUSES, Zt as ActorReference, _ as HoldingsMethods, _n as PaymentDirection, _t as OnboardingMethods, a as ObservationContext, an as DestinationRemoveInput, ar as IdentityEvent, at as PermissionCreateInput, b as SystemHealth, bn as PaymentDocumentRender, bt as PersonOnboarding, c as HostObservability, cn as MeMethods, cr as Readiness, ct as PermissionReplaceInput, d as postHogObservability, dn as OfframpMethods, dr as isClaimed, dt as Budget, en as DestinationAddInput, et as OrganizationPaymentInput, f as CapxulClient, fn as OfframpQuote, fr as isRestoring, ft as OrgMe, g as IdentityRuntimeSendResult, gn as PaymentActivityEvidence, gt as CompletedPersonProfile, h as IdentityRuntime, hn as Payment, ht as AccountsMethods, i as ObservationAdapter, in as DestinationRail, ir as Destination$1, it as PermissionChangeInput, j as OrgTemplate, jn as ResolvedTarget, jt as AddressBookEntry, k as OrgMethods, kn as RecipientResolution, kt as ActorRequestsMethods, l as PostHogObservabilityClient, ln as MeProfile, lr as StateLabel, lt as PermissionRevokeInput, m as IdentityProfileDetails, mn as OfframpStatus, mr as InvocationControls, mt as OrgMeOptions, nn as DestinationListInput, nt as OrganizationPaymentsMethods, o as ObservationDelivery, on as DestinationsMethods, or as IdentityState, ot as PermissionMethods, p as CreateCapxulClientInput, pn as OfframpQuoteInput, pr as IdentityTransition, pt as OrgMeMethod, q as PayrollOptions, qn as Permission, qt as ActivityReference, r as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, rn as DestinationPayload, rr as TelemetryPort, rt as PermissionAssignInput, s as SdkFailureObservation, sn as FinancialOpsMethods, sr as OrgLane, st as PermissionOptions, t as CapxulClientInput, tn as DestinationKind, tt as OrganizationPaymentItemInput, u as PostHogObservabilityOptions, un as MovementActivityEvidence, ur as destination, ut as PermissionReadResult, v as Holding, vn as PaymentDocumentKind, vt as OrganizationOnboarding, w as CreateOrgInput, wn as PaymentStatus, wt as ActorProfile, x as MediaMethods, xn as PaymentDocumentVerification, xt as PersonOnboardingInput, y as SystemMethods, yn as PaymentDocumentRef, yt as OrganizationOnboardingInput, z as AuthorizeRunInput, zn as IdentityMethods, zt as ActivityDetail } from "./production-Db4fBqSk.mjs";
+import { $ as OrganizationPaymentBatchInput, $n as RequestStatus, $t as Destination, A as OrgScopedMethods, An as Ref, At as AddressBookAddInput, B as AuthorizeRunOptions, Bn as SmartAccountMethods, Bt as ActivityFilter, C as CurrentUserMethods, Cn as PaymentMoney, Ct as AccountMethods, D as MemberStatus, Dn as PaymentsMethods, Dt as ActorRequest, E as InviteMemberInput, En as PaymentType, Et as ActorRelationshipMethods, F as ResendInviteTokenInput, Fn as AccountLifecycle, Ft as InboxItem, G as PayrollGroupsMethods, Gn as ActorRef, Gt as ActivityPage, H as PayrollGroup, Hn as OrgLifecycle, Ht as ActivityKind, I as RoleDefinition, In as AccountSetupStep, It as InboxMethods, J as PayrollRun, Jn as SubmittedPermissionExecution, Jt as ActivitySummary, K as PayrollMethods, Kn as CurrentHoldings, Kt as ActivityRange, L as RoleSpendCap, Ln as isSettingUpLifecycle, Lt as ActivityAnnotation, M as OrgView, Mn as TargetReference, Mt as AddressBookLabelInput, N as OrganizationAccount, Nn as TargetsMethods, Nt as AddressBookMethods, O as MemberView, On as PaymentsPayInput, Ot as ActorRequestIssueInput, P as OrganizationAuditLogItem, Pn as fingerprintPaymentIntent, Pt as InboxApproveInput, Q as PayrollTermsUnit, Qn as PaymentStatus$1, Qt as DepositInstructions, R as RoleView, Rn as CompleteProfileInput, Rt as ActivityAnnotationInput, S as CurrentUserContext, Sn as PaymentDocumentsMethods, St as ReadyAccountLifecycle, T as DetectPendingOrgInvitationsResult, Tn as PaymentTiming, Tt as ActorProfileMethods, U as PayrollGroupInput, Un as OrgSetupStep, Ut as ActivityListParams, V as PayrollEngagementTerms, Vn as AuthMethods, Vt as ActivityItem, W as PayrollGroupMember, Wn as PayoutAddress, Wt as ActivityMethods, X as PayrollRunStatus, Xn as PAYMENT_DIRECTIONS, Xt as ActivitySummaryTotal, Y as PayrollRunItemInput, Yn as InboxStatus, Yt as ActivitySummaryParams, Z as PayrollRuns, Zn as PAYMENT_STATUSES, Zt as ActorReference, _ as HoldingsMethods, _n as PaymentDirection, _t as OnboardingMethods, a as ObservationContext, an as DestinationRemoveInput, ar as IdentityEvent, at as PermissionCreateInput, b as SystemHealth, bn as PaymentDocumentRender, bt as PersonOnboarding, c as HostObservability, cn as MeMethods, cr as Readiness, ct as PermissionReplaceInput, d as postHogObservability, dn as OfframpMethods, dr as isClaimed, dt as Budget, en as DestinationAddInput, et as OrganizationPaymentInput, f as CapxulClient, fn as OfframpQuote, fr as isRestoring, ft as OrgMe, g as IdentityRuntimeSendResult, gn as PaymentActivityEvidence, gt as CompletedPersonProfile, h as IdentityRuntime, hn as Payment, ht as AccountsMethods, i as ObservationAdapter, in as DestinationRail, ir as Destination$1, it as PermissionChangeInput, j as OrgTemplate, jn as ResolvedTarget, jt as AddressBookEntry, k as OrgMethods, kn as RecipientResolution, kt as ActorRequestsMethods, l as PostHogObservabilityClient, ln as MeProfile, lr as StateLabel, lt as PermissionRevokeInput, m as IdentityProfileDetails, mn as OfframpStatus, mr as InvocationControls, mt as OrgMeOptions, nn as DestinationListInput, nt as OrganizationPaymentsMethods, o as ObservationDelivery, on as DestinationsMethods, or as IdentityState, ot as PermissionMethods, p as CreateCapxulClientInput, pn as OfframpQuoteInput, pr as IdentityTransition, pt as OrgMeMethod, q as PayrollOptions, qn as Permission, qt as ActivityReference, r as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, rn as DestinationPayload, rr as TelemetryPort, rt as PermissionAssignInput, s as SdkFailureObservation, sn as FinancialOpsMethods, sr as OrgLane, st as PermissionOptions, t as CapxulClientInput, tn as DestinationKind, tt as OrganizationPaymentItemInput, u as PostHogObservabilityOptions, un as MovementActivityEvidence, ur as destination, ut as PermissionReadResult, v as Holding, vn as PaymentDocumentKind, vt as OrganizationOnboarding, w as CreateOrgInput, wn as PaymentStatus, wt as ActorProfile, x as MediaMethods, xn as PaymentDocumentVerification, xt as PersonOnboardingInput, y as SystemMethods, yn as PaymentDocumentRef, yt as OrganizationOnboardingInput, z as AuthorizeRunInput, zn as IdentityMethods, zt as ActivityDetail } from "./production-CJ42VSls.mjs";
 import { Hex } from "viem";
 import { Effect, Layer } from "effect";
 //#region ../errors/src/index.d.ts
@@ -125,6 +125,8 @@ declare const CAPXUL_OPERATIONS: {
     readonly cancelRequest: "financialOps.cancelRequest";
     readonly createPayee: "financialOps.createPayee";
     readonly declineRequest: "financialOps.declineRequest";
+    readonly emitInvoiceIssued: "financialOps.emitInvoiceIssued";
+    readonly emitInvoiceRequestTransitioned: "financialOps.emitInvoiceRequestTransitioned";
     readonly emitPaymentWriterTelemetry: "financialOps.emitPaymentWriterTelemetry";
     readonly issueRequest: "financialOps.issueRequest";
     readonly recoverSettlementVerification: "financialOps.recoverSettlementVerification";
@@ -135,6 +137,9 @@ declare const CAPXUL_OPERATIONS: {
     readonly current: "holdings.current";
     readonly primary: "holdings.primary";
   };
+  readonly indexer: {
+    readonly reconcile: "indexer.reconcile";
+  };
   readonly identity: {
     readonly accountAt: "identity.AccountAt";
     readonly accountClaimed: "identity.AccountClaimed";
@@ -226,6 +231,7 @@ declare const CAPXUL_OPERATIONS: {
     readonly createOrg: "org.createOrg";
     readonly create: "org.create";
     readonly detectAndAcceptPendingInvitations: "org.detectAndAcceptPendingInvitations";
+    readonly emitInviteProgressed: "org.emitInviteProgressed";
     readonly expireInvitations: "org.expireInvitations";
     readonly getLifecycle: "org.getLifecycle";
     readonly getProofReceipt: "org.getProofReceipt";

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { A as signerFailure, B as isRestoring, C as normalizeExceptionErrorKind, E as safeExceptionLabel, F as CAPXUL_OPERATIONS, I as isCapxulOperation, L as normalizeCapxulOperation, M as PAYMENT_DIRECTIONS, N as PAYMENT_STATUSES, O as isSettingUpLifecycle, R as destination, S as SDK_VERSION, T as projectSdkException, _ as fingerprintPaymentIntent, b as failureDetail, d as embeddedSigner, f as openfortEmbeddedSigner, g as devPrivateKeySigner, h as deriveDevPrivateKey, j as resolveFailureMode, k as injectedWalletSigner, m as openfortEmbeddedWalletPort, p as openfortEmbeddedSignerFromWallet, r as postHogObservability, t as createCapxulClient$1, w as normalizeExceptionOperation, x as EXCEPTION_MESSAGE, y as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, z as isClaimed } from "./production-CrW_sxwv.mjs";
+import { A as signerFailure, B as isRestoring, C as normalizeExceptionErrorKind, E as safeExceptionLabel, F as CAPXUL_OPERATIONS, I as isCapxulOperation, L as normalizeCapxulOperation, M as PAYMENT_DIRECTIONS, N as PAYMENT_STATUSES, O as isSettingUpLifecycle, R as destination, S as SDK_VERSION, T as projectSdkException, _ as fingerprintPaymentIntent, b as failureDetail, d as embeddedSigner, f as openfortEmbeddedSigner, g as devPrivateKeySigner, h as deriveDevPrivateKey, j as resolveFailureMode, k as injectedWalletSigner, m as openfortEmbeddedWalletPort, p as openfortEmbeddedSignerFromWallet, r as postHogObservability, t as createCapxulClient$1, w as normalizeExceptionOperation, x as EXCEPTION_MESSAGE, y as CAPXUL_SDK_EXPECTED_OUTCOME_EVENT, z as isClaimed } from "./production-Bw1sledP.mjs";
 import { A as currencySymbolFor, B as toCurrencyCode, G as toHandle, M as toAddress, T as EVM_ADDRESS_RE, Y as toPartyId, at as HANDLE_RE, b as configuredMoneyAssetById, ct as CapxulError, dt as isCapxulError, ft as CHAIN_UPSTREAMS, g as CAPXUL_PAYMENTS_V2_ADDRESS, k as assetIdFor, pt as FAILURE_MODES, st as CAPXUL_ERROR_CODES, ut as Errors, z as toCountryCode } from "./OAuthBearerAuthClient-CbU_W9Sp.mjs";
 import { formatUnits } from "viem";
 import { Effect } from "effect";

package/dist/{production-CrW_sxwv.mjs → production-Bw1sledP.mjs}

@@ -493,6 +493,8 @@ const CAPXUL_OPERATIONS = {
 		cancelRequest: "financialOps.cancelRequest",
 		createPayee: "financialOps.createPayee",
 		declineRequest: "financialOps.declineRequest",
+		emitInvoiceIssued: "financialOps.emitInvoiceIssued",
+		emitInvoiceRequestTransitioned: "financialOps.emitInvoiceRequestTransitioned",
 		emitPaymentWriterTelemetry: "financialOps.emitPaymentWriterTelemetry",
 		issueRequest: "financialOps.issueRequest",
 		recoverSettlementVerification: "financialOps.recoverSettlementVerification",
@@ -503,6 +505,7 @@ const CAPXUL_OPERATIONS = {
 		current: "holdings.current",
 		primary: "holdings.primary"
 	},
+	indexer: { reconcile: "indexer.reconcile" },
 	identity: {
 		accountAt: "identity.AccountAt",
 		accountClaimed: "identity.AccountClaimed",
@@ -592,6 +595,7 @@ const CAPXUL_OPERATIONS = {
 		createOrg: "org.createOrg",
 		create: "org.create",
 		detectAndAcceptPendingInvitations: "org.detectAndAcceptPendingInvitations",
+		emitInviteProgressed: "org.emitInviteProgressed",
 		expireInvitations: "org.expireInvitations",
 		getLifecycle: "org.getLifecycle",
 		getProofReceipt: "org.getProofReceipt",
@@ -828,6 +832,10 @@ const OptionalAccountId = Schema.optional(AccountIdSchema$1);
 const OptionalWeiAmount = Schema.optional(WeiAmountSchema$1);
 const OptionalCurrencyCode = Schema.optional(CurrencyCodeSchema$1);
 const OptionalBalanceBucket = Schema.optional(BalanceBucketSchema);
+/** Which Safe a money record is about. Declared here so the money-domain
+* props below can name it as well as the UI-step props further down. */
+const AccountKindSchema = Schema.Literals(["personalSafe", "orgTreasury"]);
+const OptionalAccountKind = Schema.optional(AccountKindSchema);
 const OptionalAddress = Schema.optional(AddressSchema$1);
 const OptionalAppId = Schema.optional(AppIdSchema$1);
 const OptionalBlockNumber = Schema.optional(BlockNumberSchema$1);
@@ -995,9 +1003,22 @@ const BootstrapFailedProps = Schema.Struct({
 	reason: OptionalString,
 	target_host: OptionalString
 });
+/**
+* R08 (#1966): which Safe was read, on which chain, of which token. `currency`
+* is the DISPLAY code the surface shows ("USD"); it never says which ERC-20 the
+* `balanceOf` actually hit, so a reader could not tell a treasury read from a
+* personal one, nor USDX from any other dollar-labelled token. The producer
+* takes each of these from the authority that already decided it — the verified
+* Organization row's chain, the configured token address — never from a label.
+* The verified `organization_id` and its group arrive from the backend
+* attribution, so they are not repeated here.
+*/
 const AccountBalanceReadProps = Schema.Struct({
 	...TelemetryEnvelopeProps,
 	account_id: OptionalAccountId,
+	account_kind: OptionalAccountKind,
+	chain_id: OptionalChainId,
+	token_address: OptionalAddress,
 	currency: OptionalCurrencyCode,
 	balance_bucket: OptionalBalanceBucket,
 	durationMs: OptionalDurationMs
@@ -1411,6 +1432,26 @@ const MovementScanIncidentProps = Schema.Struct({
 	incident_kind: Schema.String,
 	anchor_block_number: Schema.Number
 });
+/**
+* One durable row the reconciliation job corrected against Ponder (SPEC D9).
+*
+* Both block fields are optional and for the same reason: a correction INTO
+* drift (a Payment settled in Convex whose Ponder fact a reorg removed) has no
+* current block, and a correction that confirms a later fact has one.
+*
+* `projection_kind` is closed. A later ticket that reconciles a deploy, a
+* bootstrap or a grant outcome adds its kind here in the same change; an
+* unknown kind must not decode.
+*/
+const IndexerDriftCorrectedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	projection_kind: Schema.Literals(["member_authority", "payment_settlement"]),
+	previous_state: Schema.String,
+	current_state: Schema.String,
+	previous_block: Schema.optional(Schema.Number),
+	current_block: Schema.optional(Schema.Number),
+	logical_event_id: Schema.optional(Schema.String)
+});
 Schema.Struct({
 	name: Schema.Literal("auth_otp_requested"),
 	props: AuthOtpRequestedProps
@@ -1615,9 +1656,12 @@ Schema.Struct({
 	name: Schema.Literal("movement_scan_incident"),
 	props: MovementScanIncidentProps
 });
+Schema.Struct({
+	name: Schema.Literal("indexer_drift_corrected"),
+	props: IndexerDriftCorrectedProps
+});
 /** The one spelling of "whose scope did this happen in" across every surface. */
 const ScopeKindSchema = Schema.Literals(["account", "organization"]);
-const AccountKindSchema = Schema.Literals(["personalSafe", "orgTreasury"]);
 const OptionalReasonCode = Schema.optional(Schema.Literals(CAPXUL_ERROR_CODES));
 const ActivityReferenceProps = {
 	reference_kind: Schema.Literals(["payment", "movement"]),
@@ -5192,31 +5236,31 @@ function makeActorRelationshipMethods(deps) {
 					reference: input.reference,
 					...input.memo === void 0 ? {} : { memo: input.memo },
 					...input.expiresAt === void 0 ? {} : { expiresAt: input.expiresAt }
-				}))), (request) => mapActorRequest(request, input.payer)), controls, CAPXUL_OPERATIONS.requests.issue, deps.runPromise);
+				}))), (request) => mapActorRequest(request, input.payer)).pipe(Effect.tap(() => observeContactScope)), controls, CAPXUL_OPERATIONS.requests.issue, deps.runPromise);
 			},
 			list: (options) => {
 				const controls = deps.invocationControls?.(options) ?? options;
-				return runPortEffect(mapReply(CAPXUL_OPERATIONS.requests.list, Effect.suspend(() => convexCall.query(fns.requestsList, copyInvocationObservation(controls, { actor }))), (requests) => requests.map((request) => mapActorRequest(request))), controls, CAPXUL_OPERATIONS.requests.list, deps.runPromise);
+				return runPortEffect(mapReply(CAPXUL_OPERATIONS.requests.list, Effect.suspend(() => convexCall.query(fns.requestsList, copyInvocationObservation(controls, { actor }))), (requests) => requests.map((request) => mapActorRequest(request))).pipe(Effect.tap(() => observeContactScope)), controls, CAPXUL_OPERATIONS.requests.list, deps.runPromise);
 			},
 			get: (requestId, options) => {
 				const controls = deps.invocationControls?.(options) ?? options;
 				return runPortEffect(mapReply(CAPXUL_OPERATIONS.requests.get, Effect.suspend(() => convexCall.query(fns.requestsGet, copyInvocationObservation(controls, {
 					actor,
 					paymentRequestId: requestId
-				}))), (request) => request === null ? null : mapActorRequest(request)), controls, CAPXUL_OPERATIONS.requests.get, deps.runPromise);
+				}))), (request) => request === null ? null : mapActorRequest(request)).pipe(Effect.tap(() => observeContactScope)), controls, CAPXUL_OPERATIONS.requests.get, deps.runPromise);
 			},
 			cancel: (requestId, options) => {
 				const controls = deps.invocationControls?.(options) ?? options;
 				return runPortEffect(mapReply(CAPXUL_OPERATIONS.requests.cancel, Effect.suspend(() => convexCall.mutation(fns.requestsCancel, copyInvocationObservation(controls, {
 					actor,
 					paymentRequestId: requestId
-				}))), (request) => mapActorRequest(request)), controls, CAPXUL_OPERATIONS.requests.cancel, deps.runPromise);
+				}))), (request) => mapActorRequest(request)).pipe(Effect.tap(() => observeContactScope)), controls, CAPXUL_OPERATIONS.requests.cancel, deps.runPromise);
 			}
 		},
 		inbox: {
 			list: (options) => {
 				const controls = deps.invocationControls?.(options) ?? options;
-				return runPortEffect(mapReply(CAPXUL_OPERATIONS.inbox.list, Effect.suspend(() => convexCall.query(fns.inboxList, copyInvocationObservation(controls, { actor }))), (items) => items.map(mapInboxItem)), controls, CAPXUL_OPERATIONS.inbox.list, deps.runPromise);
+				return runPortEffect(mapReply(CAPXUL_OPERATIONS.inbox.list, Effect.suspend(() => convexCall.query(fns.inboxList, copyInvocationObservation(controls, { actor }))), (items) => items.map(mapInboxItem)).pipe(Effect.tap(() => observeContactScope)), controls, CAPXUL_OPERATIONS.inbox.list, deps.runPromise);
 			},
 			approve: (input, options) => {
 				const controls = deps.invocationControls?.(options) ?? options;
@@ -5228,14 +5272,14 @@ function makeActorRelationshipMethods(deps) {
 				}))).pipe(Effect.flatMap((prepared) => {
 					const result = mapApprovedInboxPayment(prepared, input);
 					return result.ok ? Effect.succeed(result.value) : Effect.fail({ publicError: result.error });
-				})), controls, CAPXUL_OPERATIONS.inbox.approve, deps.runPromise);
+				}), Effect.tap(() => observeContactScope)), controls, CAPXUL_OPERATIONS.inbox.approve, deps.runPromise);
 			},
 			decline: (requestId, options) => {
 				const controls = deps.invocationControls?.(options) ?? options;
 				return runPortEffect(mapReply(CAPXUL_OPERATIONS.inbox.decline, Effect.suspend(() => convexCall.mutation(fns.inboxDecline, copyInvocationObservation(controls, {
 					actor,
 					paymentRequestId: requestId
-				}))), mapInboxItem), controls, CAPXUL_OPERATIONS.inbox.decline, deps.runPromise);
+				}))), mapInboxItem).pipe(Effect.tap(() => observeContactScope)), controls, CAPXUL_OPERATIONS.inbox.decline, deps.runPromise);
 			}
 		},
 		profile: {
@@ -6091,7 +6135,7 @@ function subscribeActivity(deps, actor, controls, onChange) {
 }
 //#endregion
 //#region package.json
-var version = "4.2.0-rc.13";
+var version = "4.2.0-rc.15";
 //#endregion
 //#region src/telemetry/exception-projection.ts
 /** Fixed fallback for failures that have no safe message. */
@@ -10228,11 +10272,11 @@ var ConvexOrganizationAdapter = class {
 		return this.listMembers(input).pipe(Effect.map((members) => members.filter((member) => member.status === "pending" || member.status === "pending_safe" || member.status === "pending_grant")));
 	}
 	inviteMember(input) {
-		return this.#convex.action(this.#fns.inviteMember, {
+		return this.#convex.action(this.#fns.inviteMember, copyInvocationObservation(input, {
 			orgId: input.orgId,
 			email: input.input.email,
 			role: input.input.role
-		}).pipe(Effect.mapError((error) => orgErrorFromCapxul("inviteMember", error.publicError, error)), Effect.map(brandOrgMember), Effect.catchDefect((cause) => Effect.fail(toOrgError("inviteMember", cause))));
+		})).pipe(Effect.mapError((error) => orgErrorFromCapxul("inviteMember", error.publicError, error)), Effect.map(brandOrgMember), Effect.catchDefect((cause) => Effect.fail(toOrgError("inviteMember", cause))));
 	}
 	resendInviteToken(input) {
 		return this.#convex.mutation(this.#fns.resendInvite, {
@@ -13244,18 +13288,6 @@ function emitOrgCreateFailed(telemetry, error) {
 		}
 	});
 }
-function emitOrgInviteSent(telemetry, input) {
-	const domain = emailDomain$1(input.email);
-	return emitOrgTelemetry(telemetry, {
-		name: "org_invite_sent",
-		props: {
-			org_id: input.orgId,
-			...domain === void 0 ? {} : { email_domain: domain },
-			role: input.role,
-			status: input.status
-		}
-	});
-}
 function reportOrgTelemetryFailure(kind, name, cause) {
 	if (!isOrgTelemetryDebugEnabled()) return;
 	globalThis.console?.warn?.("[capxul] org telemetry dropped", {
@@ -13431,25 +13463,26 @@ function listMembersProgram(orgId) {
 		return [];
 	});
 }
+/**
+* R06 (#1964): the SDK no longer emits `org_invite_sent`. The backend action
+* that writes the invitation is its ONE producer, so a hermetic call — which
+* writes nothing — can no longer report an invitation that never happened, and
+* a live call is counted once instead of twice. The captured attempt rides the
+* port input, so the durable event carries the correlation this call ran under.
+*/
 function inviteMemberProgram(orgId, input) {
 	return Effect.gen(function* () {
 		const deps = yield* OrgDepsTag;
-		const member = deps.orgPort !== void 0 ? yield* deps.orgPort.inviteMember({
-			orgId,
-			input
-		}).pipe(Effect.mapError((error) => error.publicError)) : hermeticMember({
+		if (deps.orgPort === void 0) return hermeticMember({
 			orgId,
 			email: input.email,
 			role: input.role,
 			status: "pending"
 		});
-		yield* Effect.promise(() => emitOrgInviteSent(deps.telemetry, {
+		return yield* deps.orgPort.inviteMember(copyInvocationObservation(deps.invocationSource, {
 			orgId,
-			email: input.email,
-			role: member.role,
-			status: member.status
-		}));
-		return member;
+			input
+		})).pipe(Effect.mapError((error) => error.publicError));
 	});
 }
 function detectAndAcceptPendingInvitationsProgram() {
@@ -13674,32 +13707,27 @@ function makeOrgMethods(deps) {
 					});
 					return treasury(orgId, deps.invocationControls?.(options) ?? options);
 				},
-				account: { async get(options) {
-					if (options?.signal?.aborted) return {
-						ok: false,
-						error: Errors.cancelled({ operation: CAPXUL_OPERATIONS.org.account.get })
-					};
+				account: { get(options) {
 					const controls = deps.invocationControls?.(options) ?? options;
-					const treasuryResult = await treasury(orgId, controls);
-					if (!treasuryResult.ok) return {
+					if (controls?.signal?.aborted) return Promise.resolve({
 						ok: false,
-						error: treasuryResult.error
-					};
-					const orgList = await listOrganizations(controls);
-					if (!orgList.ok) return {
-						ok: false,
-						error: orgList.error
-					};
-					const org = orgList.value.find((candidate) => candidate.id === orgId);
-					return {
-						ok: true,
-						value: {
+						error: Errors.cancelled({ operation: CAPXUL_OPERATIONS.org.account.get })
+					});
+					return runCapxulEffect(Effect.gen(function* () {
+						const parent = yield* Effect.currentSpan.pipe(Effect.orDie);
+						const captured = carryInvocationParentSpan(controls, parent);
+						const treasuryResult = yield* Effect.promise(() => treasury(orgId, captured));
+						if (!treasuryResult.ok) return yield* Effect.fail(treasuryResult.error);
+						const orgList = yield* Effect.promise(() => listOrganizations(captured));
+						if (!orgList.ok) return yield* Effect.fail(orgList.error);
+						const org = orgList.value.find((candidate) => candidate.id === orgId);
+						return {
 							id: treasuryResult.value.id,
 							address: org?.safeAddress ?? null,
 							balance: treasuryResult.value.balance,
 							available: treasuryResult.value.available
-						}
-					};
+						};
+					}), observationOnlyControls(controls), CAPXUL_OPERATIONS.org.account.get, deps.runPromise);
 				} },
 				members(_options) {
 					if (_options?.signal?.aborted) return Promise.resolve({
@@ -13716,11 +13744,15 @@ function makeOrgMethods(deps) {
 					return toCapxulResult(listRolesProgram(orgId), layer);
 				},
 				invite(_input, _options) {
-					if (_options?.signal?.aborted) return Promise.resolve({
+					const controls = deps.invocationControls?.(_options) ?? _options;
+					if (controls?.signal?.aborted) return Promise.resolve({
 						ok: false,
 						error: Errors.cancelled({ operation: CAPXUL_OPERATIONS.org.invite })
 					});
-					return toCapxulResult(inviteMemberProgram(orgId, _input), layer);
+					return runCapxulEffect(inviteMemberProgram(orgId, _input).pipe(Effect.provide(orgDepsLayer({
+						...orgDeps,
+						...controls === void 0 ? {} : { invocationSource: controls }
+					}))), controls, CAPXUL_OPERATIONS.org.invite, deps.runPromise);
 				},
 				auditLog(_options) {
 					if (_options?.signal?.aborted) return Promise.resolve({

package/dist/{production-Db4fBqSk.d.mts → production-CJ42VSls.d.mts}

@@ -284,7 +284,7 @@ interface TelemetryPort {
 }
 //#endregion
 //#region ../observability/src/index.d.ts
-declare const TELEMETRY_EVENT_NAMES: readonly ["auth_otp_requested", "auth_otp_delivered", "auth_otp_expired", "auth_verified", "auth_failed", "identity_refused", "auth_signed_out", "onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "provisioning_safe_created", "provisioning_safe_confirmed", "bootstrap_resolved", "bootstrap_failed", "member_activation_started", "member_activation_ready", "member_activation_failed", "organization_creation_started", "organization_creation_ready", "organization_creation_failed", "chain_upstream_fallback", "bundler_error", "receipt_pending", "operation_retried", "account_balance_read", "account_balance_failed", "faucet_requested", "faucet_confirmed", "faucet_failed", "org_create_started", "org_safe_created", "org_safe_confirmed", "org_roles_seeded", "org_created", "org_create_failed", "org_invite_sent", "org_invite_accepted", "org_invite_expired", "payment_initiated", "payment_settled", "payment_failed", "payment_verification_retry", "payment_lifecycle_transition", "quick_pay_external_address_acknowledged", "deposit_initiated", "deposit_settled", "permission_mirror_verification", "movement_scan_window", "movement_scan_checkpoint", "movement_scan_incident", "activity_annotation_saved", "ui_activity_action_completed", "contact_relationship_changed", "ui_contact_action_completed", "access_recovery_completed", "ui_access_step_completed", "org_invite_progressed", "invoice_issued", "invoice_request_transitioned", "ui_invoice_step_completed", "ui_treasury_step_completed", "ui_receive_step_completed", "payroll_group_changed", "payroll_run_transitioned", "ui_payroll_action_completed"];
+declare const TELEMETRY_EVENT_NAMES: readonly ["auth_otp_requested", "auth_otp_delivered", "auth_otp_expired", "auth_verified", "auth_failed", "identity_refused", "auth_signed_out", "onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "provisioning_safe_created", "provisioning_safe_confirmed", "bootstrap_resolved", "bootstrap_failed", "member_activation_started", "member_activation_ready", "member_activation_failed", "organization_creation_started", "organization_creation_ready", "organization_creation_failed", "chain_upstream_fallback", "bundler_error", "receipt_pending", "operation_retried", "account_balance_read", "account_balance_failed", "faucet_requested", "faucet_confirmed", "faucet_failed", "org_create_started", "org_safe_created", "org_safe_confirmed", "org_roles_seeded", "org_created", "org_create_failed", "org_invite_sent", "org_invite_accepted", "org_invite_expired", "payment_initiated", "payment_settled", "payment_failed", "payment_verification_retry", "payment_lifecycle_transition", "quick_pay_external_address_acknowledged", "deposit_initiated", "deposit_settled", "permission_mirror_verification", "movement_scan_window", "movement_scan_checkpoint", "movement_scan_incident", "indexer_drift_corrected", "activity_annotation_saved", "ui_activity_action_completed", "contact_relationship_changed", "ui_contact_action_completed", "access_recovery_completed", "ui_access_step_completed", "org_invite_progressed", "invoice_issued", "invoice_request_transitioned", "ui_invoice_step_completed", "ui_treasury_step_completed", "ui_receive_step_completed", "payroll_group_changed", "payroll_run_transitioned", "ui_payroll_action_completed"];
 type TelemetryEventName = (typeof TELEMETRY_EVENT_NAMES)[number];
 type TelemetryProps = Record<string, unknown>;
 type TelemetryEvent = {
@@ -1337,9 +1337,8 @@ interface MeMethods {
   get(options?: {
     readonly signal?: AbortSignal;
   }): Promise<CapxulResult<MeProfile>>;
-  depositInstructions(options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<DepositInstructions>>;
+  /** R08 (#1966): accepts a captured attempt, exactly as the treasury read does. */
+  depositInstructions(options?: InvocationControls): Promise<CapxulResult<DepositInstructions>>;
 }
 interface PaymentMoney {
   readonly currency: string;
@@ -1887,19 +1886,17 @@ interface ActorRequestIssueInput {
   readonly memo?: string;
   readonly expiresAt?: number;
 }
+/**
+ * The issuer's own requests. The options are the address book's
+ * `InvocationControls` (R07 #1965), so a caller that captured one browser
+ * attempt hands it to the operation that attempt started; `{ signal }` callers
+ * are unaffected.
+ */
 interface ActorRequestsMethods {
-  issue(input: ActorRequestIssueInput, options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<ActorRequest>>;
-  list(options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<readonly ActorRequest[]>>;
-  get(requestId: string, options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<ActorRequest | null>>;
-  cancel(requestId: string, options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<ActorRequest>>;
+  issue(input: ActorRequestIssueInput, options?: InvocationControls): Promise<CapxulResult<ActorRequest>>;
+  list(options?: InvocationControls): Promise<CapxulResult<readonly ActorRequest[]>>;
+  get(requestId: string, options?: InvocationControls): Promise<CapxulResult<ActorRequest | null>>;
+  cancel(requestId: string, options?: InvocationControls): Promise<CapxulResult<ActorRequest>>;
 }
 interface InboxItem {
   readonly id: string;
@@ -1913,24 +1910,18 @@ interface InboxApproveInput {
   readonly timing?: PaymentTiming;
   readonly permissionId?: string;
 }
+/** The payer's own inbox. Its scope is the payer's, never the issuer's. */
 interface InboxMethods {
-  list(options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<readonly InboxItem[]>>;
-  approve(input: InboxApproveInput, options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<Payment>>;
-  decline(requestId: string, options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<InboxItem>>;
+  list(options?: InvocationControls): Promise<CapxulResult<readonly InboxItem[]>>;
+  approve(input: InboxApproveInput, options?: InvocationControls): Promise<CapxulResult<Payment>>;
+  decline(requestId: string, options?: InvocationControls): Promise<CapxulResult<InboxItem>>;
 }
 interface ActorProfileMethods {
   get(options?: {
     readonly signal?: AbortSignal;
   }): Promise<CapxulResult<ActorProfile>>;
-  depositInstructions(options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<DepositInstructions>>;
+  /** R08 (#1966): accepts a captured attempt, exactly as the treasury read does. */
+  depositInstructions(options?: InvocationControls): Promise<CapxulResult<DepositInstructions>>;
 }
 interface ActorRelationshipMethods {
   readonly addressBook: AddressBookMethods;
@@ -2091,6 +2082,12 @@ type ListOrgRolesInput = {
 type ListOrgMembersInput = {
   readonly orgId: OrgId;
 };
+/**
+ * R06 (#1964): the program attaches the caller's captured attempt to this
+ * record through `copyInvocationObservation`, so the adapter forwards one
+ * observation context to the backend action that owns `org_invite_sent`. The
+ * carrier is a non-enumerable symbol and never becomes a wire field.
+ */
 type InviteOrgMemberInput = {
   readonly orgId: OrgId;
   readonly input: InviteMemberInput;
@@ -2510,14 +2507,15 @@ interface OrgScopedMethods extends ActorRelationshipMethods {
   retrySetup(options?: {
     readonly signal?: AbortSignal;
   }): Promise<CapxulResult<OrgLifecycle>>;
-  /** The Organization treasury Account. */
-  treasury(options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<Account$1>>;
+  /**
+   * The Organization treasury Account. R08 (#1966): the declared option type is
+   * the `InvocationControls` this surface already forwards, so a screen that
+   * captured one user attempt can hand the same `correlation_id`/`journey_id`
+   * to the read it starts. `{ signal }` callers are unaffected.
+   */
+  treasury(options?: InvocationControls): Promise<CapxulResult<Account$1>>;
   readonly account: {
-    get(options?: {
-      readonly signal?: AbortSignal;
-    }): Promise<CapxulResult<OrganizationAccount>>;
+    get(options?: InvocationControls): Promise<CapxulResult<OrganizationAccount>>;
   };
   members(options?: {
     readonly signal?: AbortSignal;
@@ -2525,9 +2523,14 @@ interface OrgScopedMethods extends ActorRelationshipMethods {
   roles(options?: {
     readonly signal?: AbortSignal;
   }): Promise<CapxulResult<readonly RoleView[]>>;
-  invite(input: InviteMemberInput, options?: {
-    readonly signal?: AbortSignal;
-  }): Promise<CapxulResult<MemberView>>;
+  /**
+   * Invite a member by email. `options` is the browser attempt the caller
+   * captured before the person pressed the button (R06 #1964); it reaches the
+   * backend action unchanged, so the durable `org_invite_sent` and the later
+   * `org_invite_progressed` share the attempt's correlation. `{ signal }`
+   * callers are unaffected.
+   */
+  invite(input: InviteMemberInput, options?: InvocationControls): Promise<CapxulResult<MemberView>>;
   /**
    * Leak-safe Organization payment: execute through the payments engine with
    * the selected receipt-verified Budget Permission

package/dist/testing/index.d.mts

@@ -1,5 +1,5 @@
 import { h as CapxulResult } from "../OAuthBearerAuthClient-C-ip-z8M.mjs";
-import { er as TelemetryEvent, f as CapxulClient, i as ObservationAdapter, n as ProductionSignerControls, nr as TelemetryIdentifyInput, pr as IdentityTransition, t as CapxulClientInput, tr as TelemetryGroupInput } from "../production-Db4fBqSk.mjs";
+import { er as TelemetryEvent, f as CapxulClient, i as ObservationAdapter, n as ProductionSignerControls, nr as TelemetryIdentifyInput, pr as IdentityTransition, t as CapxulClientInput, tr as TelemetryGroupInput } from "../production-CJ42VSls.mjs";
 import { Effect, Layer } from "effect";
 //#region src/testing/production-client.d.ts
 /** Create the one production client with per-client controls at its signing boundaries. */

package/dist/testing/index.mjs

@@ -1,4 +1,4 @@
-import { D as fromWei, P as redactTelemetryEvent, a as smartAccountErrorFromCapxul, c as identityErrorFromCapxul, i as assembleCapxulClient, l as convexCallErrorFromCapxul, n as createCapxulClientWithSignerControls, o as accountReadErrorFromCapxul, s as wireChainId, u as bootstrapErrorFromCapxul, v as toWei } from "../production-CrW_sxwv.mjs";
+import { D as fromWei, P as redactTelemetryEvent, a as smartAccountErrorFromCapxul, c as identityErrorFromCapxul, i as assembleCapxulClient, l as convexCallErrorFromCapxul, n as createCapxulClientWithSignerControls, o as accountReadErrorFromCapxul, s as wireChainId, u as bootstrapErrorFromCapxul, v as toWei } from "../production-Bw1sledP.mjs";
 import { G as toHandle, H as toEmail, I as toAuthUserId, K as toJwtToken, M as toAddress, N as toAllowedOrigin, P as toAppId, Q as toPublishableKey, R as toChainId, U as toEpochMs, V as toDurationMs, W as toEpochSeconds, ct as CapxulError, d as authClientPortFromPromiseAdapter, et as toSessionToken, it as validateHandle, j as toAccountId, n as readClockNow, q as toKycTier, r as InMemoryAuthCacheAdapter, ut as Errors, y as deriveCapxulSafeAddress, z as toCountryCode } from "../OAuthBearerAuthClient-CbU_W9Sp.mjs";
 import { keccak256 } from "viem";
 import { Effect, Result, Semaphore } from "effect";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/sdk",
-  "version": "4.2.0-rc.13",
+  "version": "4.2.0-rc.15",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Xelmar-tech/infrastructure.git",
@@ -47,12 +47,12 @@
     "vite": "npm:@voidzero-dev/vite-plus-core@0.3.0",
     "vite-plus": "0.3.0",
     "vitest": "4.1.11",
-    "@capxul/config": "0.3.0",
     "@capxul/errors": "0.3.0",
-    "@capxul/types": "0.3.0",
-    "@capxul/observability": "4.2.0-rc.13",
+    "@capxul/config": "0.3.0",
+    "@capxul/observability": "4.2.0-rc.15",
+    "@capxul/wire": "0.7.0",
     "@capxul/typescript-config": "0.0.0",
-    "@capxul/wire": "0.7.0"
+    "@capxul/types": "0.3.0"
   },
   "_permissionlessPinReason": "permissionless.toSafeSmartAccount is pinned to 0.3.4 for live Safe deployment E2E. Counterfactual address fixtures captured 2026-05-17 in packages/backend/convex/_shared/__tests__/counterfactual.test.ts and packages/config/tests/safe.test.ts must be re-verified before upgrading.",
   "scripts": {