@capxul/sdk 4.20.0-beta.34 → 4.20.0-beta.36

package/dist/{access-DUmQPXVl.mjs → access-D5D77YLI.mjs}

@@ -1,6 +1,6 @@
 import { Cause, Clock, Context, Data, Deferred, Effect, Exit, Fiber, Layer, Option, Predicate, Queue, Ref, Result, Schema, SchemaAST, SchemaGetter, SchemaIssue, SchemaParser } from "effect";
 import { makeFunctionReference } from "convex/server";
-import { bytesToHex, concat, decodeErrorResult, encodeAbiParameters, encodeFunctionData, encodePacked, formatUnits, getContractAddress, hashTypedData, isAddress, isHex, keccak256, pad, padHex, parseAbiParameters, recoverAddress, recoverTypedDataAddress, toBytes, toFunctionSignature, toHex } from "viem";
+import { bytesToHex, concat, decodeErrorResult, encodeAbiParameters, encodeFunctionData, encodePacked, formatUnits, getContractAddress, hashTypedData, isAddress, isHex, keccak256, pad, padHex, parseAbiParameters, recoverAddress, recoverTypedDataAddress, sha256, toBytes, toFunctionSignature, toHex } from "viem";
 import { getUserOperationHash } from "viem/account-abstraction";
 //#region src/access/actor-references.ts
 function actorReferenceToBackend(actor) {
@@ -173,6 +173,17 @@ const Errors = {
 			...opts?.chain === void 0 ? {} : { chain: opts.chain }
 		});
 	},
+	/**
+	* The provider answered, but its answer cannot be used: `field` names the
+	* part that is missing or malformed and `reason` says what is wrong with it.
+	* Distinct from `PROVIDER_ERROR`, where the call itself failed or was refused.
+	*/
+	providerResponseInvalid: (provider, operation, field, reason) => new CapxulError("PROVIDER_RESPONSE_INVALID", `${provider} ${operation} answered with an unusable ${field}: ${reason}`, { details: {
+		provider,
+		operation,
+		field,
+		reason
+	} }),
 	capabilityUnavailable: (provider, operation) => new CapxulError("CAPABILITY_UNAVAILABLE", "Provider capability is unavailable", { details: {
 		provider,
 		operation
@@ -1945,6 +1956,7 @@ const CAPXUL_ERROR_CODES = [
 	"ACCOUNT_NOT_FOUND",
 	"ACCOUNT_CLAIMED_BY_OTHER_SIGNER",
 	"PROVIDER_ERROR",
+	"PROVIDER_RESPONSE_INVALID",
 	"CAPABILITY_UNAVAILABLE",
 	"INVALID_INPUT",
 	"ENV_MISSING",
@@ -1966,6 +1978,15 @@ const CAPXUL_ERROR_CODES = [
 	"WORK_DIED",
 	"ACTOR_STOPPED"
 ];
+/** The existing Organization authority refusal vocabulary. */
+const ROLE_PERMISSION_DENIED_REASONS = [
+	"over_cap",
+	"daily_cap",
+	"not_member",
+	"disallowed_recipient",
+	"condition_violation",
+	"budget_exhausted"
+];
 /**
 * The error codes that represent an expected product outcome rather than a
 * defect. The SDK and backend observation boundaries both classify failures
@@ -4307,7 +4328,7 @@ function isQuantityHex(value) {
 function isBytes32(value) {
 	return typeof value === "string" && BYTES32_HEX.test(value);
 }
-function refused(field, shape, value) {
+function refused$1(field, shape, value) {
 	throw Errors.invalidInput(field, invalidValueReason(`must be ${shape}`, value));
 }
 /** Rebuilding the `0x` prefix keeps the result a `Hex`; lowercasing never changes the bytes. */
@@ -4316,19 +4337,19 @@ function lowered(value) {
 }
 /** Hex data exactly as given: case kept, for text another party compares or hashes as is. */
 function toExactHex(value, field = "value") {
-	return isHex$1(value) ? value : refused(field, "0x-prefixed hex", value);
+	return isHex$1(value) ? value : refused$1(field, "0x-prefixed hex", value);
 }
 /** Hex data, lowercased. */
 function toLowerHex(value, field = "value") {
-	return isHex$1(value) ? lowered(value) : refused(field, "0x-prefixed hex", value);
+	return isHex$1(value) ? lowered(value) : refused$1(field, "0x-prefixed hex", value);
 }
 /** A bytes32 value, lowercased. */
 function toLowerBytes32(value, field = "value") {
-	return isBytes32(value) ? lowered(value) : refused(field, "a 0x-prefixed bytes32 value", value);
+	return isBytes32(value) ? lowered(value) : refused$1(field, "a 0x-prefixed bytes32 value", value);
 }
 /** An address, lowercased: the form stored rows and digests compare. */
 function toLowerAddress(value, field = "address") {
-	return isAddress$1(value) ? lowered(value) : refused(field, "an EVM address", value);
+	return isAddress$1(value) ? lowered(value) : refused$1(field, "an EVM address", value);
 }
 //#endregion
 //#region ../protocol/src/evm/schema.ts
@@ -4881,16 +4902,19 @@ const PaymentCommandSchema = Schema.Union([
 	PaymentBirthCommandSchema,
 	Schema.Struct({
 		kind: Schema.Literal("claim_commitment"),
+		requestKey: Schema.optional(nonEmpty("requestKey")),
 		actor: AccountActorRefSchema,
 		paymentId: PaymentIdSchema
 	}),
 	Schema.Struct({
 		kind: Schema.Literal("cancel_commitment"),
+		requestKey: Schema.optional(nonEmpty("requestKey")),
 		actor: ActorRefSchema,
 		paymentId: PaymentIdSchema
 	}),
 	Schema.Struct({
 		kind: Schema.Literal("redirect_commitment"),
+		requestKey: Schema.optional(nonEmpty("requestKey")),
 		actor: ActorRefSchema,
 		paymentId: PaymentIdSchema,
 		recipient: ActorOrDestinationRefSchema
@@ -4915,8 +4939,10 @@ const PreparedMoneyItemSchema = Schema.Union([
 		tokenAddress: AddressSchema$1,
 		rawAmount: WeiAmountSchema$1,
 		kind: Uint16Schema,
-		documentHash: NonzeroDocumentHashSchema
-	}),
+		documentHash: NonzeroDocumentHashSchema,
+		jobNonce: Schema.optional(Bytes32Schema),
+		executor: Schema.optional(AddressSchema$1)
+	}).pipe(Schema.refine((item) => item.jobNonce === void 0 === (item.executor === void 0), { message: "Prepared V3 identity requires both jobNonce and executor" })),
 	Schema.Struct({
 		operation: Schema.Literal("create_commitment"),
 		paymentId: PaymentIdSchema,
@@ -5018,6 +5044,12 @@ const PersonalUnsignedUserOperationSchema = Schema.Struct({
 	entryPoint: Schema.optional(Schema.Never),
 	safe4337ModuleAddress: Schema.optional(Schema.Never)
 });
+const SubmittedPaymentExecutionSchema = Schema.Struct({
+	executionId: MoneyExecutionIdSchema,
+	commandId: PaymentCommandIdSchema,
+	userOpHash: Bytes32Schema,
+	payment: Payment
+});
 const PreparedPaymentExecutionSchema = Schema.Struct({
 	actorAccountId: AccountIdSchema$1,
 	item: PreparedMoneyItemSchema,
@@ -5035,7 +5067,8 @@ const PreparedPaymentExecutionSchema = Schema.Struct({
 	chainId: BaseSepoliaChainIdSchema,
 	signerAddress: AddressSchema$1,
 	userOpSenderSafe: SafeAddressSchema,
-	digest: Bytes32Schema
+	digest: Bytes32Schema,
+	settled: Schema.optional(SubmittedPaymentExecutionSchema)
 });
 const SubmitPaymentExecutionInputSchema = Schema.Struct({
 	executionId: MoneyExecutionIdSchema,
@@ -5049,12 +5082,6 @@ const AbandonPaymentExecutionInputSchema = Schema.Struct({
 		"prepared_mismatch"
 	])
 });
-const SubmittedPaymentExecutionSchema = Schema.Struct({
-	executionId: MoneyExecutionIdSchema,
-	commandId: PaymentCommandIdSchema,
-	userOpHash: Bytes32Schema,
-	payment: Payment
-});
 const SubmittedPaymentCommandExecutionSchema = Schema.Struct({
 	executionId: MoneyExecutionIdSchema,
 	commandId: PaymentCommandIdSchema,
@@ -5069,14 +5096,17 @@ const PaymentLifecycleExecutionIntentSchema = Schema.Union([
 	}),
 	Schema.Struct({
 		kind: Schema.Literal("claim"),
-		paymentId: PaymentIdSchema
+		paymentId: PaymentIdSchema,
+		requestKey: Schema.optional(nonEmpty("requestKey"))
 	}),
 	Schema.Struct({
 		kind: Schema.Literal("cancel"),
-		paymentId: PaymentIdSchema
+		paymentId: PaymentIdSchema,
+		requestKey: Schema.optional(nonEmpty("requestKey"))
 	}),
 	Schema.Struct({
 		kind: Schema.Literal("redirect"),
+		requestKey: Schema.optional(nonEmpty("requestKey")),
 		paymentId: PaymentIdSchema,
 		recipient: RedirectPaymentRef
 	})
@@ -5135,10 +5165,12 @@ const RequestPaymentConfirmationFields = {
 const RequestPaymentTermsSchema = Schema.Struct(RequestPaymentConfirmationFields);
 const RequestPaymentConfirmationSchema = Schema.Union([Schema.Struct({
 	...RequestPaymentConfirmationFields,
+	requestKey: Schema.optional(nonEmpty("requestKey")),
 	payer: Schema.Struct({ kind: Schema.Literal("account") }),
 	permissionId: Schema.optional(Schema.Never)
 }), Schema.Struct({
 	...RequestPaymentConfirmationFields,
+	requestKey: Schema.optional(nonEmpty("requestKey")),
 	payer: OrganizationActorRefSchema,
 	permissionId: PermissionIdSchema
 })]);
@@ -5198,13 +5230,14 @@ const PreparedPaymentCommandExecutionSchema = Schema.Struct({
 		commitmentId: Uint256StringSchema,
 		documentHash: NonzeroDocumentHashSchema
 	})),
-	documentBundles: Schema.optional(Schema.Array(PaymentDocumentBundleV3Schema))
+	documentBundles: Schema.optional(Schema.Array(PaymentDocumentBundleV3Schema)),
+	settled: Schema.optional(SubmittedPaymentCommandExecutionSchema)
 }).check(Schema.makeFilter((execution) => {
 	if (!("kind" in execution.request) || execution.request.kind !== "payment_request") return true;
 	const source = execution.sourceCommand;
 	const prepared = execution.preparedCommand;
 	if (source?.kind !== "birth" || prepared === void 0 || source.lineage?.kind !== "payment_request") return false;
-	if (source.lineage.requestId !== execution.request.confirmation.requestId || source.requestKey !== execution.request.requestKey || source.requestKey !== execution.request.confirmation.requestId || execution.userOperation === void 0) return false;
+	if (source.lineage.requestId !== execution.request.confirmation.requestId || source.requestKey !== execution.request.requestKey || source.requestKey !== (execution.request.confirmation.requestKey ?? execution.request.confirmation.requestId) || execution.userOperation === void 0) return false;
 	if ([
 		source.items.length,
 		execution.request.items.length,
@@ -5217,7 +5250,7 @@ const PreparedPaymentCommandExecutionSchema = Schema.Struct({
 		prepared.instructionDocuments?.length
 	].some((length) => length !== 1)) return false;
 	const item = prepared.items[0];
-	return "recipientSafe" in item && item.operation === source.items[0].operation && item.operation === execution.request.items[0].operation && item.paymentId === execution.paymentIds[0] && item.paymentId === execution.sourcePaymentIds?.[0] && item.recipientSafe === execution.sourceRecipientSafes?.[0];
+	return "recipientSafe" in item && item.operation === source.items[0].operation && item.operation === execution.request.items[0].operation && [item.paymentId, execution.sourcePaymentIds?.[0]].every((id) => id === execution.paymentIds[0]) && item.recipientSafe === execution.sourceRecipientSafes?.[0];
 }));
 //#endregion
 //#region ../protocol/src/accounts/approval-schema.ts
@@ -5285,6 +5318,7 @@ const ApprovalSummarySchema = Schema.Struct({
 /** The exact operation the signature covers: the digest is the one thing the key signs. */
 const ApprovalOperationSchema = Schema.Struct({
 	executionId: MoneyExecutionIdSchema,
+	commandId: Schema.optional(nonEmpty("commandId")),
 	digest: Bytes32Schema,
 	userOperation: PersonalUnsignedUserOperationSchema,
 	paymentIds: Schema.Array(PaymentIdSchema)
@@ -5477,6 +5511,21 @@ const approvals = {
 			...APPROVAL
 		]
 	}),
+	/** Read the signed operation's progress. Consumption alone does not prove completion. */
+	observe: Operation.query("accounts.approvals.observe", {
+		input: Schema.Struct({ approvalId: ApprovalIdSchema }),
+		output: Schema.Struct({
+			approval: ApprovalSchema,
+			completed: Schema.Boolean
+		}),
+		errors: [
+			...CALL$10,
+			...DEFECTS,
+			...APPROVAL,
+			"SUPERSEDED",
+			"TRANSACTION_FAILED"
+		]
+	}),
 	/** The person opened the approval page: stamp the first review of a pending approval. */
 	review: Operation.mutation("accounts.approvals.review", {
 		input: Schema.Struct({ approvalId: ApprovalIdSchema }),
@@ -5683,6 +5732,8 @@ const errors = [
 	...DEFECTS
 ];
 const writeErrors = [...errors, "WRONG_STATE"];
+/** Bank-details writes also read Bridge's answer back, which can be unusable. */
+const bridgeWriteErrors = [...writeErrors, "PROVIDER_RESPONSE_INVALID"];
 const bankDetails = {
 	list: Operation.query("banking.bankDetails.list", {
 		input: Schema.Struct({ actor: actor$3 }),
@@ -5697,7 +5748,7 @@ const bankDetails = {
 	open: Operation.action("banking.bankDetails.open", {
 		input: Schema.Struct(target),
 		output: BankDetailsSchema,
-		errors: writeErrors
+		errors: bridgeWriteErrors
 	}),
 	settle: Operation.action("banking.bankDetails.settle", {
 		input: Schema.Struct({
@@ -5705,17 +5756,17 @@ const bankDetails = {
 			token: SettlementTokenSchema
 		}),
 		output: BankDetailsSchema,
-		errors: writeErrors
+		errors: bridgeWriteErrors
 	}),
 	deactivate: Operation.action("banking.bankDetails.deactivate", {
 		input: Schema.Struct(target),
 		output: BankDetailsSchema,
-		errors: writeErrors
+		errors: bridgeWriteErrors
 	}),
 	reactivate: Operation.action("banking.bankDetails.reactivate", {
 		input: Schema.Struct(target),
 		output: BankDetailsSchema,
-		errors: writeErrors
+		errors: bridgeWriteErrors
 	})
 };
 const deposits = {
@@ -6819,6 +6870,12 @@ function failureFingerprint(code, mode, operation) {
 //#endregion
 //#region ../protocol/src/errors/schema.ts
 const FailureModeSchema$1 = Schema.Literals(FAILURE_MODES$1);
+Schema.Struct({
+	reason: Schema.Literals(ROLE_PERMISSION_DENIED_REASONS),
+	operation: Schema.optionalKey(Schema.String),
+	remaining: Schema.optionalKey(AssetAmountSchema),
+	required: Schema.optionalKey(AssetAmountSchema)
+});
 const ChainUpstreamSchema$1 = Schema.Literals(CHAIN_UPSTREAMS);
 const ChainCauseSchema = Schema.Struct({
 	mode: FailureModeSchema$1,
@@ -9440,6 +9497,7 @@ const inboxes = {
 		input: Schema.Struct({
 			actor,
 			paymentRequestId: Schema.String,
+			requestKey: Schema.optionalKey(nonEmpty("requestKey")),
 			timing: Schema.optionalKey(PaymentTiming),
 			permissionId: Schema.optionalKey(Schema.String)
 		}),
@@ -9816,7 +9874,8 @@ const PEOPLE_OPERATIONS = {
 			expire: "accounts.approvals.expire",
 			recordApproval: "accounts.approvals.recordApproval",
 			recordExpiry: "accounts.approvals.recordExpiry",
-			sendApproved: "accounts.approvals.sendApproved"
+			sendApproved: "accounts.approvals.sendApproved",
+			rescheduleApproved: "accounts.approvals.rescheduleApproved"
 		},
 		balances: { readBinding: "accounts.balances.readBinding" },
 		claims: {
@@ -13703,7 +13762,7 @@ function mapAccountLifecycle(input) {
 }
 //#endregion
 //#region package.json
-var version = "4.20.0-beta.34";
+var version = "4.20.0-beta.36";
 //#endregion
 //#region src/observability/telemetry/exception-projection.ts
 /** Fixed fallback for failures that have no safe message. */
@@ -14476,6 +14535,127 @@ function mapOk(result, f) {
 	}
 }
 //#endregion
+//#region ../protocol/src/evm/test-assets.ts
+const SYNTHETIC_TEST_ASSET_SOURCE = "synthetic-test-liquidity";
+/**
+* Owned test assets, with metadata read from each creation receipt and contract.
+* Settlement admission lives in assets.ts. The fixed test exchange uses the
+* original five assets; bank EURC has its own deployment.
+*
+* `symbol` is the display string the owned contract returns. A
+* provider-supported USDC would be a different contract at a different
+* address returning the same symbol, which is why the resolvers below key on
+* `assetId`, or on chain plus address, and never on a symbol.
+*/
+const SYNTHETIC_TEST_ASSET_FIXTURES = {
+	usdc: {
+		assetId: assetIdFor(84532, "0x06ba8b863ca77490b0e7008427562bdbfcff730e"),
+		chainId: toChainId(84532),
+		tokenAddress: "0x06ba8b863ca77490b0e7008427562bdbfcff730e",
+		symbol: "USDC",
+		decimals: 6,
+		peg: toCurrencyCode("USD"),
+		deploymentStartBlock: 46690061,
+		deploymentTransaction: "0x2661b7af5f62b9e31c707a59746cda65b90ba4448852317ac1968162fb94ff52",
+		source: SYNTHETIC_TEST_ASSET_SOURCE
+	},
+	usdt: {
+		assetId: assetIdFor(84532, "0xcb5f361ae070e75d573941b8cd54995fa3876d75"),
+		chainId: toChainId(84532),
+		tokenAddress: "0xcb5f361ae070e75d573941b8cd54995fa3876d75",
+		symbol: "USDT",
+		decimals: 6,
+		peg: toCurrencyCode("USD"),
+		deploymentStartBlock: 46690061,
+		deploymentTransaction: "0x98e5303f97974a31eddb61ad030072d900ce7283ce8080bfe0b9e5ea6f297749",
+		source: SYNTHETIC_TEST_ASSET_SOURCE
+	},
+	weth: {
+		assetId: assetIdFor(84532, "0x85b7bd39ce3df9a85135e1e307225dd435f67e47"),
+		chainId: toChainId(84532),
+		tokenAddress: "0x85b7bd39ce3df9a85135e1e307225dd435f67e47",
+		symbol: "WETH",
+		decimals: 18,
+		peg: null,
+		deploymentStartBlock: 46690061,
+		deploymentTransaction: "0x48dfacc01c15adc34f6c629aec5c9ff7bb84176d448017da0d0d4fdaf8b5a68a",
+		source: SYNTHETIC_TEST_ASSET_SOURCE
+	},
+	wbtc: {
+		assetId: assetIdFor(84532, "0xcf433a81f507dcc88c2c404650ffafb40750b451"),
+		chainId: toChainId(84532),
+		tokenAddress: "0xcf433a81f507dcc88c2c404650ffafb40750b451",
+		symbol: "WBTC",
+		decimals: 8,
+		peg: null,
+		deploymentStartBlock: 46690061,
+		deploymentTransaction: "0xa975fcda0a67509742243bbfc386032d2e0d6ca78404c255fae2e4ffae1c7f4d",
+		source: SYNTHETIC_TEST_ASSET_SOURCE
+	},
+	cngn: {
+		assetId: assetIdFor(84532, "0xda515a7267e190710f0003f951c62bcfd70d6b2a"),
+		chainId: toChainId(84532),
+		tokenAddress: "0xda515a7267e190710f0003f951c62bcfd70d6b2a",
+		symbol: "cNGN",
+		decimals: 6,
+		peg: toCurrencyCode("NGN"),
+		deploymentStartBlock: 46690061,
+		deploymentTransaction: "0x6f6b0302448c7cd7db5c118a8250e548c6e72821df373e5a27550e5cdfa635a1",
+		source: SYNTHETIC_TEST_ASSET_SOURCE
+	},
+	eurc: {
+		assetId: assetIdFor(84532, "0x15055b4ed1d248c169b92705757cd9c3d985ad5f"),
+		chainId: toChainId(84532),
+		tokenAddress: "0x15055b4ed1d248c169b92705757cd9c3d985ad5f",
+		symbol: "EURC",
+		decimals: 6,
+		peg: toCurrencyCode("EUR"),
+		deploymentStartBlock: 47893251,
+		deploymentTransaction: "0x4e0ab412d980a672336487afd10da007d51f34f17876b19b13732c8125be90ca",
+		source: SYNTHETIC_TEST_ASSET_SOURCE
+	}
+};
+/** EURC is minted for bank deposits and has no admission to the fixed test exchange. */
+const SYNTHETIC_TEST_ASSETS = [...[
+	SYNTHETIC_TEST_ASSET_FIXTURES.usdc,
+	SYNTHETIC_TEST_ASSET_FIXTURES.usdt,
+	SYNTHETIC_TEST_ASSET_FIXTURES.weth,
+	SYNTHETIC_TEST_ASSET_FIXTURES.wbtc,
+	SYNTHETIC_TEST_ASSET_FIXTURES.cngn
+], SYNTHETIC_TEST_ASSET_FIXTURES.eurc];
+toChainId(84532);
+/**
+* The settlement tier: the owned test assets admitted to the exact-transfer
+* path and to the treasury reads. USDC, USDT, WETH and EURC are admitted assets.
+* There is no default token.
+*/
+const SETTLEMENT_ASSETS_BASE_SEPOLIA = Object.freeze({
+	CAPXUL_TEST_USDC: SYNTHETIC_TEST_ASSET_FIXTURES.usdc,
+	CAPXUL_TEST_USDT: SYNTHETIC_TEST_ASSET_FIXTURES.usdt,
+	CAPXUL_TEST_WETH: SYNTHETIC_TEST_ASSET_FIXTURES.weth,
+	CAPXUL_TEST_EURC: SYNTHETIC_TEST_ASSET_FIXTURES.eurc
+});
+const CONFIGURED_MONEY_ASSETS = Object.freeze(Object.values(SETTLEMENT_ASSETS_BASE_SEPOLIA));
+/** Public AssetIds for the admitted Base Sepolia test assets. */
+const TOKENS = Object.freeze({ BASE_SEPOLIA: Object.freeze({
+	CAPXUL_TEST_USDC: SETTLEMENT_ASSETS_BASE_SEPOLIA.CAPXUL_TEST_USDC.assetId,
+	CAPXUL_TEST_USDT: SETTLEMENT_ASSETS_BASE_SEPOLIA.CAPXUL_TEST_USDT.assetId,
+	CAPXUL_TEST_WETH: SETTLEMENT_ASSETS_BASE_SEPOLIA.CAPXUL_TEST_WETH.assetId,
+	CAPXUL_TEST_EURC: SETTLEMENT_ASSETS_BASE_SEPOLIA.CAPXUL_TEST_EURC.assetId
+}) });
+/**
+* Every known asset in ONE identity space. The tiers above declare admission;
+* this is the only list an identity resolves against, so an asset is never
+* two different things depending on which list a caller happened to read.
+*/
+const MONEY_ASSET_REGISTRY = [...SYNTHETIC_TEST_ASSETS];
+CONFIGURED_MONEY_ASSETS.map((asset) => asset.tokenAddress.toLowerCase());
+/** The registry row for `assetId` across every tier, or `null`. */
+function configuredMoneyAssetById(assetId) {
+	const canonical = toAssetId(assetId);
+	return MONEY_ASSET_REGISTRY.find((asset) => asset.assetId === canonical) ?? null;
+}
+//#endregion
 //#region src/platform/transport/call-operation.ts
 function callOperation(port, row, args, options) {
 	const op = row;
@@ -15649,6 +15829,23 @@ async function verifyPaymentDocumentSignatureV3(input) {
 	})).toLowerCase() === envelope.signature.signer;
 }
 //#endregion
+//#region ../protocol/src/documents/identities.ts
+/** A caller handed this module a value its own types rule out: a defect, named. */
+function defect$1(step, message) {
+	return new CapxulError("UNKNOWN", message, { details: { step } });
+}
+function hashDocumentOriginIdV3(input) {
+	if (!Number.isSafeInteger(input.chainId) || input.chainId <= 0 || !Number.isSafeInteger(input.itemIndex) || input.itemIndex < 0 || input.actorKind !== "account" && input.actorKind !== "organization" || input.actorId.length === 0 || input.requestKey.length === 0) throw defect$1("hashDocumentOriginIdV3", "Invalid document origin input");
+	return keccak256(encodeAbiParameters(parseAbiParameters("string namespace, uint256 chainId, string actorKind, string actorId, string requestKey, uint256 itemIndex"), [
+		"capxul.document-origin.v3",
+		BigInt(input.chainId),
+		input.actorKind,
+		input.actorId,
+		input.requestKey,
+		BigInt(input.itemIndex)
+	]));
+}
+//#endregion
 //#region src/documents/birth-context.ts
 function sourcePurpose(source) {
 	if ("purposeKind" in source) return source.purposeKind;
@@ -15663,13 +15860,20 @@ function isBirthItem(item) {
 function requestRetryInstruction(input) {
 	const request = input.evidence.request;
 	const original = input.evidence.sourceCommand;
-	if (!("kind" in request) || request.kind !== "retry" || original?.kind !== "birth" || original.lineage?.kind !== "payment_request" && original.lineage?.kind !== "invoice_checkout" || original.lineage.requestId !== original.requestKey || !input.evidence.sourcePaymentIds?.includes(request.paymentId)) return void 0;
+	if (!("kind" in request) || request.kind !== "retry" || original?.kind !== "birth" || original.lineage?.kind !== "payment_request" && original.lineage?.kind !== "invoice_checkout" || !input.evidence.sourcePaymentIds?.includes(request.paymentId)) return void 0;
 	const document = original.items[input.index]?.document;
 	if (document?.kind !== "envelope") return void 0;
 	const bytes = decodeCanonicalBase64V3(document.bytesBase64);
 	const envelope = decodeSupportedPaymentDocumentEnvelope(bytes);
 	if (envelope.primaryType !== "Memo" && envelope.primaryType !== "Invoice") return void 0;
 	if (envelope.version === 5) return void 0;
+	if (original.lineage.requestId !== original.requestKey && (original.lineage.kind !== "payment_request" || envelope.primaryType !== "Invoice" || envelope.message.originId !== hashDocumentOriginIdV3({
+		chainId: input.evidence.chainId,
+		actorKind: original.actor.kind,
+		actorId: original.actor.kind === "account" ? original.actor.accountId : original.actor.orgId,
+		requestKey: original.lineage.requestId,
+		itemIndex: input.index
+	}))) return void 0;
 	return {
 		documentHash: hashSupportedPaymentDocument(envelope),
 		contentHash: hashPaymentDocumentContentV3(bytes),
@@ -15698,11 +15902,7 @@ function requestBirthContext(evidence) {
 	].some((items) => items?.length !== 1)) return null;
 	const item = command.items[0];
 	const instruction = command.instructionDocuments?.[0];
-	if (!isBirthItem(item) || instruction === void 0 || source.lineage?.kind !== "payment_request" || [
-		source.lineage.requestId,
-		source.requestKey,
-		request.requestKey
-	].some((key) => key !== request.confirmation.requestId) || documentJson(request.actor) !== documentJson(source.actor) || documentJson(request.items) !== documentJson(source.items) || evidence.sourcePaymentIds?.[0] !== evidence.paymentIds[0] || evidence.sourceRecipientSafes?.[0]?.toLowerCase() !== request.confirmation.issuerSafe.toLowerCase() || documentJson(evidence.documentBundles) !== documentJson(command.documentBundles) || !confirmedRequestFactsMatch(request.confirmation, source, item, instruction)) return null;
+	if (!isBirthItem(item) || instruction === void 0 || source.lineage?.kind !== "payment_request" || source.lineage.requestId !== request.confirmation.requestId || [source.requestKey, request.requestKey].some((key) => key !== (request.confirmation.requestKey ?? request.confirmation.requestId)) || documentJson(request.actor) !== documentJson(source.actor) || documentJson(request.items) !== documentJson(source.items) || evidence.sourcePaymentIds?.[0] !== evidence.paymentIds[0] || evidence.sourceRecipientSafes?.[0]?.toLowerCase() !== request.confirmation.issuerSafe.toLowerCase() || documentJson(evidence.documentBundles) !== documentJson(command.documentBundles) || !confirmedRequestFactsMatch(request.confirmation, source, item, instruction)) return null;
 	return {
 		source: source.items,
 		actorKind: source.actor.kind,
@@ -15728,127 +15928,6 @@ function retryBirthContext(evidence) {
 	};
 }
 //#endregion
-//#region ../protocol/src/evm/test-assets.ts
-const SYNTHETIC_TEST_ASSET_SOURCE = "synthetic-test-liquidity";
-/**
-* Owned test assets, with metadata read from each creation receipt and contract.
-* Settlement admission lives in assets.ts. The fixed test exchange uses the
-* original five assets; bank EURC has its own deployment.
-*
-* `symbol` is the display string the owned contract returns. A
-* provider-supported USDC would be a different contract at a different
-* address returning the same symbol, which is why the resolvers below key on
-* `assetId`, or on chain plus address, and never on a symbol.
-*/
-const SYNTHETIC_TEST_ASSET_FIXTURES = {
-	usdc: {
-		assetId: assetIdFor(84532, "0x06ba8b863ca77490b0e7008427562bdbfcff730e"),
-		chainId: toChainId(84532),
-		tokenAddress: "0x06ba8b863ca77490b0e7008427562bdbfcff730e",
-		symbol: "USDC",
-		decimals: 6,
-		peg: toCurrencyCode("USD"),
-		deploymentStartBlock: 46690061,
-		deploymentTransaction: "0x2661b7af5f62b9e31c707a59746cda65b90ba4448852317ac1968162fb94ff52",
-		source: SYNTHETIC_TEST_ASSET_SOURCE
-	},
-	usdt: {
-		assetId: assetIdFor(84532, "0xcb5f361ae070e75d573941b8cd54995fa3876d75"),
-		chainId: toChainId(84532),
-		tokenAddress: "0xcb5f361ae070e75d573941b8cd54995fa3876d75",
-		symbol: "USDT",
-		decimals: 6,
-		peg: toCurrencyCode("USD"),
-		deploymentStartBlock: 46690061,
-		deploymentTransaction: "0x98e5303f97974a31eddb61ad030072d900ce7283ce8080bfe0b9e5ea6f297749",
-		source: SYNTHETIC_TEST_ASSET_SOURCE
-	},
-	weth: {
-		assetId: assetIdFor(84532, "0x85b7bd39ce3df9a85135e1e307225dd435f67e47"),
-		chainId: toChainId(84532),
-		tokenAddress: "0x85b7bd39ce3df9a85135e1e307225dd435f67e47",
-		symbol: "WETH",
-		decimals: 18,
-		peg: null,
-		deploymentStartBlock: 46690061,
-		deploymentTransaction: "0x48dfacc01c15adc34f6c629aec5c9ff7bb84176d448017da0d0d4fdaf8b5a68a",
-		source: SYNTHETIC_TEST_ASSET_SOURCE
-	},
-	wbtc: {
-		assetId: assetIdFor(84532, "0xcf433a81f507dcc88c2c404650ffafb40750b451"),
-		chainId: toChainId(84532),
-		tokenAddress: "0xcf433a81f507dcc88c2c404650ffafb40750b451",
-		symbol: "WBTC",
-		decimals: 8,
-		peg: null,
-		deploymentStartBlock: 46690061,
-		deploymentTransaction: "0xa975fcda0a67509742243bbfc386032d2e0d6ca78404c255fae2e4ffae1c7f4d",
-		source: SYNTHETIC_TEST_ASSET_SOURCE
-	},
-	cngn: {
-		assetId: assetIdFor(84532, "0xda515a7267e190710f0003f951c62bcfd70d6b2a"),
-		chainId: toChainId(84532),
-		tokenAddress: "0xda515a7267e190710f0003f951c62bcfd70d6b2a",
-		symbol: "cNGN",
-		decimals: 6,
-		peg: toCurrencyCode("NGN"),
-		deploymentStartBlock: 46690061,
-		deploymentTransaction: "0x6f6b0302448c7cd7db5c118a8250e548c6e72821df373e5a27550e5cdfa635a1",
-		source: SYNTHETIC_TEST_ASSET_SOURCE
-	},
-	eurc: {
-		assetId: assetIdFor(84532, "0x15055b4ed1d248c169b92705757cd9c3d985ad5f"),
-		chainId: toChainId(84532),
-		tokenAddress: "0x15055b4ed1d248c169b92705757cd9c3d985ad5f",
-		symbol: "EURC",
-		decimals: 6,
-		peg: toCurrencyCode("EUR"),
-		deploymentStartBlock: 47893251,
-		deploymentTransaction: "0x4e0ab412d980a672336487afd10da007d51f34f17876b19b13732c8125be90ca",
-		source: SYNTHETIC_TEST_ASSET_SOURCE
-	}
-};
-/** EURC is minted for bank deposits and has no admission to the fixed test exchange. */
-const SYNTHETIC_TEST_ASSETS = [...[
-	SYNTHETIC_TEST_ASSET_FIXTURES.usdc,
-	SYNTHETIC_TEST_ASSET_FIXTURES.usdt,
-	SYNTHETIC_TEST_ASSET_FIXTURES.weth,
-	SYNTHETIC_TEST_ASSET_FIXTURES.wbtc,
-	SYNTHETIC_TEST_ASSET_FIXTURES.cngn
-], SYNTHETIC_TEST_ASSET_FIXTURES.eurc];
-toChainId(84532);
-/**
-* The settlement tier: the owned test assets admitted to the exact-transfer
-* path and to the treasury reads. USDC, USDT, WETH and EURC are admitted assets.
-* There is no default token.
-*/
-const SETTLEMENT_ASSETS_BASE_SEPOLIA = Object.freeze({
-	CAPXUL_TEST_USDC: SYNTHETIC_TEST_ASSET_FIXTURES.usdc,
-	CAPXUL_TEST_USDT: SYNTHETIC_TEST_ASSET_FIXTURES.usdt,
-	CAPXUL_TEST_WETH: SYNTHETIC_TEST_ASSET_FIXTURES.weth,
-	CAPXUL_TEST_EURC: SYNTHETIC_TEST_ASSET_FIXTURES.eurc
-});
-const CONFIGURED_MONEY_ASSETS = Object.freeze(Object.values(SETTLEMENT_ASSETS_BASE_SEPOLIA));
-/** Public AssetIds for the admitted Base Sepolia test assets. */
-const TOKENS = Object.freeze({ BASE_SEPOLIA: Object.freeze({
-	CAPXUL_TEST_USDC: SETTLEMENT_ASSETS_BASE_SEPOLIA.CAPXUL_TEST_USDC.assetId,
-	CAPXUL_TEST_USDT: SETTLEMENT_ASSETS_BASE_SEPOLIA.CAPXUL_TEST_USDT.assetId,
-	CAPXUL_TEST_WETH: SETTLEMENT_ASSETS_BASE_SEPOLIA.CAPXUL_TEST_WETH.assetId,
-	CAPXUL_TEST_EURC: SETTLEMENT_ASSETS_BASE_SEPOLIA.CAPXUL_TEST_EURC.assetId
-}) });
-/**
-* Every known asset in ONE identity space. The tiers above declare admission;
-* this is the only list an identity resolves against, so an asset is never
-* two different things depending on which list a caller happened to read.
-*/
-const MONEY_ASSET_REGISTRY = [...SYNTHETIC_TEST_ASSETS];
-CONFIGURED_MONEY_ASSETS.map((asset) => asset.tokenAddress.toLowerCase());
-/** The registry row for `assetId` across every tier, or `null`. */
-function configuredMoneyAssetById(assetId) {
-	const canonical = toAssetId(assetId);
-	return MONEY_ASSET_REGISTRY.find((asset) => asset.assetId === canonical) ?? null;
-}
-//#endregion
 //#region ../protocol/src/documents/receipts.ts
 async function parseSupportingReceiptV3(input) {
 	const supporting = SchemaParser.decodeUnknownSync(SupportingReceiptInputSchema, { onExcessProperty: "error" })(input);
@@ -15879,23 +15958,6 @@ async function parseSupportingReceiptV3(input) {
 	};
 }
 //#endregion
-//#region ../protocol/src/documents/identities.ts
-/** A caller handed this module a value its own types rule out: a defect, named. */
-function defect$1(step, message) {
-	return new CapxulError("UNKNOWN", message, { details: { step } });
-}
-function hashDocumentOriginIdV3(input) {
-	if (!Number.isSafeInteger(input.chainId) || input.chainId <= 0 || !Number.isSafeInteger(input.itemIndex) || input.itemIndex < 0 || input.actorKind !== "account" && input.actorKind !== "organization" || input.actorId.length === 0 || input.requestKey.length === 0) throw defect$1("hashDocumentOriginIdV3", "Invalid document origin input");
-	return keccak256(encodeAbiParameters(parseAbiParameters("string namespace, uint256 chainId, string actorKind, string actorId, string requestKey, uint256 itemIndex"), [
-		"capxul.document-origin.v3",
-		BigInt(input.chainId),
-		input.actorKind,
-		input.actorId,
-		input.requestKey,
-		BigInt(input.itemIndex)
-	]));
-}
-//#endregion
 //#region ../protocol/src/documents/context.ts
 function sameAmount(left, right) {
 	return left.asset === right.asset && left.minorUnits === right.minorUnits && left.decimals === right.decimals;
@@ -16176,6 +16238,25 @@ function verifiesInvoiceCheckoutBirthEvidence(evidence, invoice, chainId, source
 	return "kind" in evidence.request && evidence.request.kind === "invoice_checkout" && evidence.request.linkToken === invoice.linkToken && evidence.preparedCommand?.items.length === 1 && item?.operation === "send" && evidence.preparedCommand.senderSafe.toLowerCase() === sourceWallet.toLowerCase() && evidence.preparedCommand.contractAddress.toLowerCase() === invoice.contractAddress.toLowerCase() && item.settlementId === invoice.settlementId && item.documentHash === invoice.documentHash && item.recipientSafe.toLowerCase() === invoice.recipientSafe.toLowerCase() && item.tokenAddress.toLowerCase() === invoice.tokenAddress.toLowerCase() && item.rawAmount === invoice.rawAmount && item.kind === (invoice.documentKind === "memo" ? 0 : 1) && invoice.chainId === chainId;
 }
 //#endregion
+//#region ../protocol/src/payments/execution-identity.ts
+/** A command and its exact signed operation have one durable execution identity. */
+function moneyExecutionId(commandId, digest) {
+	return `money_execution_${keccak256(encodeAbiParameters([
+		{ type: "string" },
+		{ type: "string" },
+		{ type: "bytes32" }
+	], [
+		"capxul.money-execution.v1",
+		commandId,
+		toLowerBytes32(digest)
+	])).slice(2)}`;
+}
+/** Existing stored executions keep their digest-derived identity. */
+function matchesMoneyExecutionId(executionId, digest, commandId) {
+	const exactDigest = toLowerBytes32(digest);
+	return executionId === `money_execution_${exactDigest.slice(2)}` || commandId !== void 0 && executionId === moneyExecutionId(commandId, exactDigest);
+}
+//#endregion
 //#region ../protocol/src/evm/payments-abi.ts
 /** The exact compiled CapxulPaymentsV2 ABI. */
 const CAPXUL_PAYMENTS_V2_ABI = [
@@ -16753,22 +16834,270 @@ const CAPXUL_PAYMENTS_V2_ABI = [
 	},
 	{
 		type: "error",
-		name: "InvalidTimeParams",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "NotCreator",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "NotRecipient",
-		inputs: []
-	},
-	{
-		type: "error",
-		name: "NothingToClaim",
+		name: "InvalidTimeParams",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "NotCreator",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "NotRecipient",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "NothingToClaim",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "SettlementIdConsumed",
+		inputs: [{
+			name: "settlementId",
+			type: "bytes32",
+			internalType: "bytes32"
+		}]
+	},
+	{
+		type: "error",
+		name: "TokenCallReturnedFalse",
+		inputs: [{
+			name: "token",
+			type: "address",
+			internalType: "address"
+		}]
+	},
+	{
+		type: "error",
+		name: "TokenHasNoCode",
+		inputs: [{
+			name: "token",
+			type: "address",
+			internalType: "address"
+		}]
+	},
+	{
+		type: "error",
+		name: "ZeroAddress",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "ZeroAmount",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "ZeroDocumentHash",
+		inputs: []
+	},
+	{
+		type: "error",
+		name: "ZeroSettlementId",
+		inputs: []
+	}
+];
+/** Immutable CapxulPaymentsV2 deployment on Base Sepolia. */
+const CAPXUL_PAYMENTS_V2_ADDRESS = "0x7a5c25aB7ce91d7a475B71cd1ec33E230291f8a4";
+//#endregion
+//#region ../protocol/src/evm/payments-v3.ts
+const PAYMENT_ITEM_COMPONENTS = [
+	{
+		name: "settlementId",
+		type: "bytes32",
+		internalType: "bytes32"
+	},
+	{
+		name: "recipient",
+		type: "address",
+		internalType: "address"
+	},
+	{
+		name: "token",
+		type: "address",
+		internalType: "address"
+	},
+	{
+		name: "amount",
+		type: "uint256",
+		internalType: "uint256"
+	},
+	{
+		name: "kind",
+		type: "uint16",
+		internalType: "uint16"
+	},
+	{
+		name: "documentHash",
+		type: "bytes32",
+		internalType: "bytes32"
+	},
+	{
+		name: "jobNonce",
+		type: "bytes32",
+		internalType: "bytes32"
+	},
+	{
+		name: "executor",
+		type: "address",
+		internalType: "address"
+	}
+];
+const PAYMENT_ITEM_INPUT = {
+	name: "item",
+	type: "tuple",
+	internalType: "struct CapxulPaymentsV3.PaymentItem",
+	components: PAYMENT_ITEM_COMPONENTS
+};
+/** The exact compiled CapxulPaymentsV3 ABI. */
+const CAPXUL_PAYMENTS_V3_ABI = [
+	{
+		type: "function",
+		name: "paymentId",
+		inputs: [PAYMENT_ITEM_INPUT],
+		outputs: [{
+			name: "",
+			type: "bytes32",
+			internalType: "bytes32"
+		}],
+		stateMutability: "view"
+	},
+	{
+		type: "function",
+		name: "send",
+		inputs: [PAYMENT_ITEM_INPUT],
+		outputs: [],
+		stateMutability: "nonpayable"
+	},
+	{
+		type: "function",
+		name: "sendBatch",
+		inputs: [{
+			name: "items",
+			type: "tuple[]",
+			internalType: "struct CapxulPaymentsV3.PaymentItem[]",
+			components: PAYMENT_ITEM_COMPONENTS
+		}],
+		outputs: [],
+		stateMutability: "nonpayable"
+	},
+	{
+		type: "function",
+		name: "settled",
+		inputs: [{
+			name: "",
+			type: "bytes32",
+			internalType: "bytes32"
+		}],
+		outputs: [{
+			name: "",
+			type: "bool",
+			internalType: "bool"
+		}],
+		stateMutability: "view"
+	},
+	{
+		type: "event",
+		name: "PaymentSent",
+		inputs: [
+			{
+				name: "settlementId",
+				type: "bytes32",
+				indexed: true,
+				internalType: "bytes32"
+			},
+			{
+				name: "sender",
+				type: "address",
+				indexed: true,
+				internalType: "address"
+			},
+			{
+				name: "recipient",
+				type: "address",
+				indexed: true,
+				internalType: "address"
+			},
+			{
+				name: "token",
+				type: "address",
+				indexed: false,
+				internalType: "address"
+			},
+			{
+				name: "amount",
+				type: "uint256",
+				indexed: false,
+				internalType: "uint256"
+			},
+			{
+				name: "kind",
+				type: "uint16",
+				indexed: false,
+				internalType: "uint16"
+			},
+			{
+				name: "documentHash",
+				type: "bytes32",
+				indexed: false,
+				internalType: "bytes32"
+			}
+		],
+		anonymous: false
+	},
+	{
+		type: "error",
+		name: "InexactTransfer",
+		inputs: [
+			{
+				name: "token",
+				type: "address",
+				internalType: "address"
+			},
+			{
+				name: "expected",
+				type: "uint256",
+				internalType: "uint256"
+			},
+			{
+				name: "received",
+				type: "uint256",
+				internalType: "uint256"
+			}
+		]
+	},
+	{
+		type: "error",
+		name: "InvalidExecutor",
+		inputs: [{
+			name: "expected",
+			type: "address",
+			internalType: "address"
+		}, {
+			name: "supplied",
+			type: "address",
+			internalType: "address"
+		}]
+	},
+	{
+		type: "error",
+		name: "PaymentIdMismatch",
+		inputs: [{
+			name: "expected",
+			type: "bytes32",
+			internalType: "bytes32"
+		}, {
+			name: "supplied",
+			type: "bytes32",
+			internalType: "bytes32"
+		}]
+	},
+	{
+		type: "error",
+		name: "ReentrantCall",
 		inputs: []
 	},
 	{
@@ -16813,14 +17142,73 @@ const CAPXUL_PAYMENTS_V2_ABI = [
 		name: "ZeroDocumentHash",
 		inputs: []
 	},
+	{
+		type: "error",
+		name: "ZeroJobNonce",
+		inputs: []
+	},
 	{
 		type: "error",
 		name: "ZeroSettlementId",
 		inputs: []
 	}
 ];
-/** Immutable CapxulPaymentsV2 deployment on Base Sepolia. */
-const CAPXUL_PAYMENTS_V2_ADDRESS = "0x7a5c25aB7ce91d7a475B71cd1ec33E230291f8a4";
+/** The fixed CREATE2 deployment on every admitted chain. */
+const CAPXUL_PAYMENTS_V3_ADDRESS = "0x46b28f455c8de7c1505e3185A3f8f87B07eaE1aE";
+//#endregion
+//#region ../protocol/src/evm/payments/encoding.ts
+const CAPXUL_PAYMENT_V3_TYPEHASH = keccak256(toBytes("CapxulPayment(uint256 chainId,address router,bytes32 jobNonce,address executor,address recipient,address token,uint256 amount,uint16 kind,bytes32 documentHash)"));
+function paymentJobNonce(commandId, itemIndex) {
+	if (!Number.isSafeInteger(itemIndex) || itemIndex < 0) throw Errors.invalidInput("itemIndex", "must be a non-negative safe integer");
+	return sha256(toBytes(`{"commandId":${JSON.stringify(commandId)},"index":${itemIndex},"version":1}`));
+}
+function capxulPaymentsV3PaymentId(chainId, router, item) {
+	return keccak256(encodeAbiParameters(parseAbiParameters("bytes32,uint256,address,bytes32,address,address,address,uint256,uint16,bytes32"), [
+		CAPXUL_PAYMENT_V3_TYPEHASH,
+		BigInt(chainId),
+		router,
+		item.jobNonce,
+		item.executor,
+		item.recipient,
+		item.token,
+		item.amount,
+		item.kind,
+		item.documentHash
+	]));
+}
+function encodeCapxulPaymentsV3Send(item) {
+	return encodeFunctionData({
+		abi: CAPXUL_PAYMENTS_V3_ABI,
+		functionName: "send",
+		args: [item]
+	});
+}
+function encodeCapxulPaymentsV3SendBatch(items) {
+	return encodeFunctionData({
+		abi: CAPXUL_PAYMENTS_V3_ABI,
+		functionName: "sendBatch",
+		args: [items]
+	});
+}
+function v3Item(command, item, itemIndex) {
+	const { commandId, chainId, senderSafe } = command;
+	if (commandId === void 0 || chainId === void 0 || senderSafe === void 0) throw Errors.invalidInput("command", "CapxulPaymentsV3 requires its command identity");
+	const terms = {
+		recipient: item.recipientSafe,
+		token: item.tokenAddress,
+		amount: BigInt(item.rawAmount),
+		kind: item.kind,
+		documentHash: item.documentHash,
+		jobNonce: item.jobNonce ?? paymentJobNonce(commandId, itemIndex),
+		executor: item.executor ?? senderSafe
+	};
+	const settlementId = capxulPaymentsV3PaymentId(chainId, command.contractAddress, terms);
+	if (settlementId.toLowerCase() !== item.settlementId.toLowerCase()) throw Errors.invalidInput("settlementId", "does not match CapxulPaymentsV3 terms");
+	return {
+		settlementId,
+		...terms
+	};
+}
 //#endregion
 //#region ../protocol/src/evm/zodiac-abi.ts
 const MODULE_PROXY_FACTORY_ABI = [{
@@ -17185,7 +17573,8 @@ function requiredByPaymentToken(items) {
 	}
 	return totals;
 }
-function birthCall(contract, item) {
+function birthCall(command, item, itemIndex) {
+	const contract = command.contractAddress;
 	const common = {
 		settlementId: item.settlementId,
 		recipient: item.recipientSafe,
@@ -17196,7 +17585,7 @@ function birthCall(contract, item) {
 	return {
 		to: contract,
 		value: 0n,
-		data: item.operation === "send" ? encodeCapxulPaymentsV2Send({
+		data: item.operation === "send" ? contract.toLowerCase() === "0x46b28f455c8de7c1505e3185A3f8f87B07eaE1aE".toLowerCase() ? encodeCapxulPaymentsV3Send(v3Item(command, item, itemIndex)) : encodeCapxulPaymentsV2Send({
 			...common,
 			amount: BigInt(item.rawAmount)
 		}) : encodeCapxulPaymentsV2CreateCommitment({
@@ -17208,7 +17597,8 @@ function birthCall(contract, item) {
 		})
 	};
 }
-function birthCalls(contract, items) {
+function birthCalls(command, items) {
+	const contract = command.contractAddress;
 	const approvals = [...requiredByPaymentToken(items).values()].map(({ token, total }) => ({
 		to: token,
 		value: 0n,
@@ -17222,7 +17612,7 @@ function birthCalls(contract, items) {
 	if (items.length > 1 && sends.length === items.length) return [...approvals, {
 		to: contract,
 		value: 0n,
-		data: encodeCapxulPaymentsV2SendBatch(sends.map((item) => ({
+		data: contract.toLowerCase() === "0x46b28f455c8de7c1505e3185A3f8f87B07eaE1aE".toLowerCase() ? encodeCapxulPaymentsV3SendBatch(sends.map((item, index) => v3Item(command, item, index))) : encodeCapxulPaymentsV2SendBatch(sends.map((item) => ({
 			settlementId: item.settlementId,
 			recipient: item.recipientSafe,
 			token: item.tokenAddress,
@@ -17231,7 +17621,7 @@ function birthCalls(contract, items) {
 			documentHash: item.documentHash
 		})))
 	}];
-	return [...approvals, ...items.map((item) => birthCall(contract, item))];
+	return [...approvals, ...items.map((item, index) => birthCall(command, item, index))];
 }
 function lifecycleData(item) {
 	switch (item.operation) {
@@ -17246,7 +17636,7 @@ function encodePreparedPaymentCallData(command) {
 	if (command.items.length === 0) throw Errors.invalidInput("items", "must not be empty");
 	const births = command.items.filter(isBirth);
 	if (births.length === command.items.length) {
-		const calls = birthCalls(command.contractAddress, births);
+		const calls = birthCalls(command, births);
 		return command.executionRoute.kind === "direct" ? safe4337MultiSendUserOpCallData({ calls }) : buildOrgRoleSpendPersonalCallData(buildOrgRoleMultiCall({
 			rolesModuleAddress: command.executionRoute.rolesModule,
 			roleKey: command.executionRoute.roleKey,
@@ -17309,15 +17699,16 @@ function verifiesMoneyOperation(evidence, expectedSafe, chainId, permissionId) {
 	try {
 		const command = evidence.preparedCommand;
 		const operation = evidence.userOperation;
-		if (command === void 0 || operation === void 0 || false) return false;
-		if (command.commandId !== evidence.commandId || command.chainId !== chainId || evidence.chainId !== chainId || command.contractAddress.toLowerCase() !== "0x7a5c25aB7ce91d7a475B71cd1ec33E230291f8a4".toLowerCase() || command.items.length !== evidence.paymentIds.length || command.items.some((item, index) => item.paymentId !== evidence.paymentIds[index]) || evidence.userOpSenderSafe.toLowerCase() !== expectedSafe.toLowerCase() || command.executionRoute.userOpSenderSafe.toLowerCase() !== expectedSafe.toLowerCase() || operation.sender.toLowerCase() !== expectedSafe.toLowerCase()) return false;
+		if (command === void 0 || operation === void 0) return false;
+		const knownRouter = command.contractAddress.toLowerCase() === "0x7a5c25aB7ce91d7a475B71cd1ec33E230291f8a4".toLowerCase() || command.contractAddress.toLowerCase() === "0x46b28f455c8de7c1505e3185A3f8f87B07eaE1aE".toLowerCase();
+		if (command.commandId !== evidence.commandId || command.chainId !== chainId || evidence.chainId !== chainId || !knownRouter || command.items.length !== evidence.paymentIds.length || command.items.some((item, index) => item.paymentId !== evidence.paymentIds[index]) || evidence.userOpSenderSafe.toLowerCase() !== expectedSafe.toLowerCase() || command.executionRoute.userOpSenderSafe.toLowerCase() !== expectedSafe.toLowerCase() || operation.sender.toLowerCase() !== expectedSafe.toLowerCase()) return false;
 		const route = command.executionRoute;
 		if (route.kind === "direct") {
 			if (permissionId !== void 0 || command.senderSafe.toLowerCase() !== expectedSafe.toLowerCase()) return false;
 		} else if ((permissionId === void 0 ? !isOwnerLifecycle(command) : route.roleKey.toLowerCase() !== roleKeyForPermission(permissionId).toLowerCase()) || command.senderSafe.toLowerCase() !== route.organizationSafe.toLowerCase()) return false;
 		if (operation.callData.toLowerCase() !== encodePreparedPaymentCallData(command).toLowerCase()) return false;
 		const digest = moneySafeOpDigest(operation, chainId);
-		return evidence.digest.toLowerCase() === digest.toLowerCase() && evidence.executionId === `money_execution_${digest.slice(2).toLowerCase()}`;
+		return evidence.digest.toLowerCase() === digest.toLowerCase() && matchesMoneyExecutionId(evidence.executionId, digest, evidence.commandId);
 	} catch {
 		return false;
 	}
@@ -17524,6 +17915,29 @@ function reportMoneyTelemetryFailure(kind, name, cause) {
 	}));
 }
 //#endregion
+//#region ../protocol/src/payments/request-finality.ts
+/** Add a proved request outcome without changing the original failure. */
+function withPaymentRequestFinality(error, paymentRequestFinality) {
+	const marked = new CapxulError(error.code, error.message, {
+		cause: error.cause,
+		details: {
+			...error.details,
+			paymentRequestFinality
+		},
+		...error.correlationId === void 0 ? {} : { correlationId: error.correlationId },
+		...error.layer === void 0 ? {} : { layer: error.layer },
+		...error.mode === void 0 ? {} : { mode: error.mode },
+		...error.chain === void 0 ? {} : { chain: error.chain }
+	});
+	marked.name = error.name;
+	if (error.stack !== void 0) marked.stack = error.stack;
+	return marked;
+}
+/** Only an authoritative failed-key response or confirmed durable closure resolves a key. */
+function isFinalPaymentRequestError(error) {
+	return error.details?.paymentRequestFinality === "closed" || error.code === "INVALID_INPUT" && error.details?.field === "requestKey" && error.details.paymentRequestFinality === "failed";
+}
+//#endregion
 //#region src/payments/prepared-execution.ts
 async function abandonPrepared(deps, executionId, reason, result, onPreparedClosed) {
 	const abandoned = await runIfActive(void 0, executions.abandon.name, () => callOperation(deps.convexCall, executions.abandon, {
@@ -17531,8 +17945,12 @@ async function abandonPrepared(deps, executionId, reason, result, onPreparedClos
 		reason
 	}).pipe(Effect.mapError((publicError) => ({ publicError }))), deps.runPromise);
 	if (!abandoned.ok) return abandoned;
-	if (abandoned.value) onPreparedClosed?.();
-	return result;
+	if (!abandoned.value) return result;
+	onPreparedClosed?.();
+	return result.ok ? result : {
+		ok: false,
+		error: withPaymentRequestFinality(result.error, "closed")
+	};
 }
 async function notifyVerifiedPaymentPrepared(onPrepared, paymentId) {
 	if (onPrepared === void 0) return {
@@ -17576,14 +17994,31 @@ async function abandonPreparedCommand(deps, executionId, closePayment, reason, r
 		reason
 	})).pipe(Effect.mapError((publicError) => ({ publicError })))), controls), deps.runPromise);
 	if (!abandoned.ok) return abandoned;
-	if (abandoned.value) onPreparedClosed?.();
-	return result;
+	if (!abandoned.value) return result;
+	onPreparedClosed?.();
+	return result.ok ? result : {
+		ok: false,
+		error: withPaymentRequestFinality(result.error, "closed")
+	};
 }
 //#endregion
 //#region src/payments/command-execution.ts
 function isAborted$1(signal) {
 	return signal?.aborted === true;
 }
+function settledPaymentsMatch(evidence) {
+	try {
+		return evidence.settled?.payments.every((payment, index) => {
+			const item = evidence.preparedCommand?.items[index];
+			const instructions = payment.documents.filter((document) => document.role === "instruction");
+			const amount = toExactAssetAmount(payment.amount, CONFIGURED_MONEY_ASSETS);
+			const asset = CONFIGURED_MONEY_ASSETS.find((row) => row.assetId === amount.asset);
+			return item?.operation === "send" && payment.status === "settled" && payment.direction === "out" && payment.receipt?.chainId === evidence.chainId && item.tokenAddress.toLowerCase() === asset?.tokenAddress.toLowerCase() && item.rawAmount === amount.minorUnits && instructions.length === 1 && canonicalJson(instructions[0]) === canonicalJson(evidence.preparedCommand?.instructionDocuments?.[index]);
+		}) === true;
+	} catch {
+		return false;
+	}
+}
 async function executePrepared(deps, prepare, isExpectedRequest, closePaymentOnExit, onPreparedClosed, signal, controls, onPrepared, readAcceptedReplay, checkout, sourceWallet) {
 	if (isAborted$1(signal)) return {
 		ok: false,
@@ -17616,7 +18051,7 @@ async function executePrepared(deps, prepare, isExpectedRequest, closePaymentOnE
 	const prepared = await prepare(signerAddress);
 	if (!current()) return cancelled;
 	if (!prepared.ok) return prepared;
-	const accepted = readAcceptedReplay?.();
+	const accepted = readAcceptedReplay?.() ?? prepared.value.settled;
 	const closePrepared = closePaymentOnExit && accepted === void 0;
 	const executionId = Schema.decodeUnknownResult(MoneyExecutionIdSchema)(readField(prepared.value, "executionId"));
 	if (executionId._tag === "Failure") return {
@@ -17642,12 +18077,12 @@ async function executePrepared(deps, prepare, isExpectedRequest, closePaymentOnE
 	if (!verified) return abandon("prepared_mismatch", Errors.invalidInput("execution", "prepared Money operation mismatch"));
 	if (accepted !== void 0) {
 		const decodedSubmission = Schema.decodeResult(SubmittedPaymentCommandExecutionSchema, { onExcessProperty: "error" })(accepted);
-		if (decodedSubmission._tag === "Failure" || !acceptedSubmissionMatches(evidence, decodedSubmission.success)) return {
+		if (decodedSubmission._tag === "Failure" || !acceptedSubmissionMatches(evidence, decodedSubmission.success) || evidence.settled !== void 0 && !settledPaymentsMatch(evidence)) return {
 			ok: false,
-			error: Errors.invalidInput("execution", "accepted Payroll replay evidence mismatch")
+			error: Errors.invalidInput("execution", "accepted Money replay evidence mismatch")
 		};
 		if (!current() || isAborted$1(signal)) return cancelled;
-		return {
+		if (evidence.settled === void 0) return {
 			ok: true,
 			value: decodedSubmission.success
 		};
@@ -17664,6 +18099,10 @@ async function executePrepared(deps, prepare, isExpectedRequest, closePaymentOnE
 	}
 	if (!current()) return cancelled;
 	if (isAborted$1(signal)) return abandon("cancelled", Errors.cancelled({ operation: "payments" }));
+	if (evidence.settled !== void 0) return {
+		ok: true,
+		value: evidence.settled
+	};
 	await emitPreparedInitiation(deps, evidence);
 	if (!current()) return cancelled;
 	if (isAborted$1(signal)) return abandon("cancelled", Errors.cancelled({ operation: "payments" }));
@@ -17714,10 +18153,10 @@ function itemMatches(prepared, amount) {
 	return item.paymentId === prepared.paymentId && Object.entries(PAYMENT_PURPOSE_KIND_CODES).some(([name, code]) => name === prepared.purposeKind && code === item.kind) && expectedPurpose === prepared.purposeKind && documentKind === "invoice" === (purpose === "invoice") && purpose !== "payroll" && item.tokenAddress.toLowerCase() === asset?.tokenAddress.toLowerCase() && (item.operation === "send" ? item.rawAmount : item.totalAmount) === amount.minorUnits && plannedCommitmentMatches(prepared) && recipientMatches(prepared, item.recipientSafe.toLowerCase());
 }
 /** The callData a personal Payment birth item must carry: approve, then send or commit. */
-function expectedPersonalCallData(prepared) {
+function expectedPersonalCallData(prepared, expectedSafe, chainId) {
 	const item = prepared.item;
 	if (item.operation !== "send" && item.operation !== "create_commitment") throw new Error("Expected personal Payment birth item");
-	const contract = CAPXUL_PAYMENTS_V2_ADDRESS;
+	const contract = toAddress(CAPXUL_PAYMENTS_V2_ADDRESS);
 	const { settlementId, recipientSafe, tokenAddress, documentHash } = item;
 	const amount = BigInt(item.operation === "send" ? item.rawAmount : item.totalAmount);
 	const paymentData = item.operation === "send" ? encodeCapxulPaymentsV2Send({
@@ -17738,26 +18177,61 @@ function expectedPersonalCallData(prepared) {
 		kind: item.kind,
 		documentHash
 	});
-	return safe4337MultiSendUserOpCallData({ calls: [{
+	const calls = (router, encodedPaymentData) => safe4337MultiSendUserOpCallData({ calls: [{
 		to: tokenAddress,
 		value: 0n,
 		data: encodeFunctionData({
 			abi: ERC20_APPROVE_ABI,
 			functionName: "approve",
-			args: [contract, amount]
+			args: [router, amount]
 		})
 	}, {
-		to: contract,
+		to: router,
 		value: 0n,
-		data: paymentData
+		data: encodedPaymentData
 	}] });
+	const v2 = calls(contract, paymentData);
+	if (item.operation !== "send") return [v2];
+	const terms = {
+		recipient: item.recipientSafe,
+		token: item.tokenAddress,
+		amount,
+		kind: item.kind,
+		documentHash,
+		jobNonce: paymentJobNonce(prepared.commandId, 0),
+		executor: toAddress(expectedSafe)
+	};
+	const v3Contract = toAddress(CAPXUL_PAYMENTS_V3_ADDRESS);
+	const v3SettlementId = capxulPaymentsV3PaymentId(chainId, v3Contract, terms);
+	if (v3SettlementId.toLowerCase() !== settlementId.toLowerCase()) return [v2];
+	return [calls(v3Contract, encodeCapxulPaymentsV3Send({
+		settlementId: v3SettlementId,
+		...terms
+	}))];
 }
 function verifiesPersonalOperation(prepared, expectedSafe, chainId) {
 	try {
 		const operation = prepared.userOperation;
-		if (operation.sender.toLowerCase() !== expectedSafe.toLowerCase() || operation.callData.toLowerCase() !== expectedPersonalCallData(prepared).toLowerCase()) return false;
+		if (operation.sender.toLowerCase() !== expectedSafe.toLowerCase() || !expectedPersonalCallData(prepared, expectedSafe, chainId).some((callData) => operation.callData.toLowerCase() === callData.toLowerCase())) return false;
 		const digest = moneySafeOpDigest(operation, chainId);
-		return prepared.digest.toLowerCase() === digest.toLowerCase() && prepared.executionId === `money_execution_${digest.slice(2).toLowerCase()}`;
+		return prepared.digest.toLowerCase() === digest.toLowerCase() && matchesMoneyExecutionId(prepared.executionId, digest, prepared.commandId);
+	} catch {
+		return false;
+	}
+}
+/** A settled reply retains the verified operation, quantity, instruction and receipt. */
+function verifiesSettledPersonalReplay(evidence) {
+	const settled = evidence.settled;
+	if (settled === void 0) return true;
+	try {
+		const instructions = settled.payment.documents.filter((document) => document.role === "instruction");
+		return acceptedSubmissionMatches({
+			...evidence,
+			paymentIds: [evidence.paymentId]
+		}, {
+			...settled,
+			payments: [settled.payment]
+		}) && settled.payment.status === "settled" && settled.payment.direction === "out" && settled.payment.receipt?.chainId === evidence.chainId && itemMatches(evidence, toExactAssetAmount(settled.payment.amount, CONFIGURED_MONEY_ASSETS)) && instructions.length === 1 && canonicalJson(instructions[0]) === canonicalJson(evidence.instructionDocument);
 	} catch {
 		return false;
 	}
@@ -17871,6 +18345,7 @@ async function preparedMismatch(chainId, evidence, payment, expected) {
 	if (evidence.userOpSenderSafe.toLowerCase() !== expected.expectedSafe.toLowerCase()) return mismatch("userOpSenderSafe", "prepared Payment execution uses another Account Safe");
 	if (!await verifiesPersonalDocument(evidence)) return mismatch("document", "prepared Payment document does not match the request");
 	if (!verifiesPersonalOperation(evidence, expected.expectedSafe, chainId)) return mismatch("execution", "prepared Payment operation does not match the request");
+	if (!verifiesSettledPersonalReplay(evidence)) return mismatch("execution", "settled Payment replay evidence mismatch");
 }
 /**
 * Prepare one personal Payment for this signer and check what the backend
@@ -17921,19 +18396,27 @@ async function emitPreparedPaymentInitiated(deps, evidence) {
 async function executePersonalPayment(deps, payment, signal, requestKey, onPreparedClosed, onPrepared) {
 	if (isAborted(signal)) return cancelled(CAPXUL_OPERATIONS.payments.pay);
 	if (deps.signer === void 0) return mismatch("signer", "payments.pay requires a configured CapxulSigner");
-	if (deps.actor.authSession() === null) return {
+	const session = deps.actor.authSession();
+	if (session === null) return {
 		ok: false,
 		error: Errors.notAuthenticated()
 	};
+	const lifetime = deps.actor.authLifetime();
+	const current = () => deps.actor.matchesAuthLifetime(lifetime, session.authUserId);
 	const signerAddress = await signerCall(deps.signer.source, "getAddress", () => deps.signer.getAddress());
 	if (!signerAddress.ok) return signerAddress;
 	const prepared = await prepareVerifiedPersonalPayment(deps, payment, signerAddress.value, requestKey ?? `pay_${crypto.randomUUID()}`, signal, onPreparedClosed);
 	if (!prepared.ok) return prepared;
 	const evidence = prepared.value;
+	if (evidence.settled !== void 0 && !current()) return cancelled(CAPXUL_OPERATIONS.payments.pay);
 	const digest = evidence.digest;
 	if (isAborted(signal)) return abandonPrepared(deps, evidence.executionId, "cancelled", cancelled(CAPXUL_OPERATIONS.payments.pay), onPreparedClosed);
 	const delivered = await notifyVerifiedPaymentPrepared(onPrepared, evidence.paymentId);
 	if (!delivered.ok) return delivered;
+	if (evidence.settled !== void 0) return current() ? {
+		ok: true,
+		value: evidence.settled
+	} : cancelled(CAPXUL_OPERATIONS.payments.pay);
 	if (isAborted(signal)) return abandonPrepared(deps, evidence.executionId, "cancelled", cancelled(CAPXUL_OPERATIONS.payments.pay), onPreparedClosed);
 	await emitPreparedPaymentInitiated(deps, evidence);
 	if (isAborted(signal)) return abandonPrepared(deps, evidence.executionId, "cancelled", cancelled(CAPXUL_OPERATIONS.payments.pay), onPreparedClosed);
@@ -18467,6 +18950,41 @@ function isCheckoutSettlementConsumed(error, settlementId) {
 	return false;
 }
 //#endregion
+//#region src/requests/request-keys.ts
+/** Keep an Invoice attempt through uncertainty; renew an old failed default only before preparation. */
+async function withInvoiceRequestKey(actorId, intent, provided, run) {
+	let key;
+	let prepared = false;
+	try {
+		key = await paymentRequestKeyLifecycle(`invoice-request:${actorId}`, intent, provided);
+		let result = await run(key.key, () => {
+			prepared = true;
+		});
+		const renew = provided === void 0 && !prepared && !result.ok && isFinalPaymentRequestError(result.error) && result.error.details?.paymentRequestFinality === "failed";
+		let finished = true;
+		try {
+			await key.finish(!result.ok && isFinalPaymentRequestError(result.error));
+		} catch {
+			finished = false;
+		}
+		if (renew && finished) {
+			key = await paymentRequestKeyLifecycle(`invoice-request:${actorId}`, intent);
+			result = await run(key.key, () => {
+				prepared = true;
+			});
+			await key.finish(!result.ok && isFinalPaymentRequestError(result.error)).catch(() => void 0);
+		}
+		return result;
+	} catch (cause) {
+		return {
+			ok: false,
+			error: asCapxulError(cause)
+		};
+	} finally {
+		await key?.finish(false).catch(() => void 0);
+	}
+}
+//#endregion
 //#region src/requests/checkout-payments.ts
 const missing$1 = async () => ({
 	ok: false,
@@ -18656,72 +19174,96 @@ function makeCheckoutMethods(deps) {
 }
 //#endregion
 //#region src/requests/inbox-payments.ts
-function mapApprovedInboxPayment(command, input) {
+const refused = () => ({
+	ok: false,
+	error: Errors.providerError("convex", inboxes.approve.name, "approved Payment read does not match its command")
+});
+/** Read the approved command's actual Payment under the payer's existing scope. */
+async function readApprovedInboxPayment(calls, command, controls, current) {
 	const item = command.items[0];
-	if (item === void 0 || item.operation !== "send" && item.operation !== "create_commitment") return {
+	const cancelled = {
 		ok: false,
-		error: Errors.providerError("convex", inboxes.approve.name, "reply has no payment birth item")
+		error: Errors.cancelled({ operation: inboxes.approve.name })
 	};
-	try {
-		const asset = CONFIGURED_MONEY_ASSETS.find((candidate) => candidate.tokenAddress.toLowerCase() === item.tokenAddress.toLowerCase());
-		if (asset === void 0) return {
-			ok: false,
-			error: Errors.providerError("convex", inboxes.approve.name, "prepared payment asset is not configured")
-		};
-		const amount = {
-			asset: asset.assetId,
-			value: formatUnits(BigInt(item.operation === "send" ? item.rawAmount : item.totalAmount), asset.decimals)
-		};
-		const zero = {
-			...amount,
-			value: "0"
-		};
-		const timing = input.timing ?? { kind: "instant" };
-		return {
-			ok: true,
-			value: {
-				id: item.paymentId,
-				status: timing.kind === "instant" ? "pending" : timing.kind === "scheduled" ? "scheduled" : "streaming",
-				amount,
-				paymentType: "invoice",
-				direction: "out",
-				counterpartyLabel: item.recipientSafe,
-				receipt: null,
-				recipient: {
-					kind: "external_address",
-					label: item.recipientSafe
-				},
-				documents: [],
-				timing,
-				released: zero,
-				availableToClaim: zero,
-				createdAt: 0,
-				updatedAt: 0
-			}
-		};
-	} catch (cause) {
-		return {
-			ok: false,
-			error: Errors.unknown(cause)
-		};
-	}
+	if (command.items.length !== 1 || item === void 0 || item.operation !== "send" && item.operation !== "create_commitment") return refused();
+	if (!current()) return cancelled;
+	const check = (payment) => {
+		if (!current()) return cancelled;
+		if (payment === null || payment.id !== item.paymentId || payment.direction !== "out") return refused();
+		try {
+			const amount = toExactAssetAmount(payment.amount, CONFIGURED_MONEY_ASSETS);
+			const asset = CONFIGURED_MONEY_ASSETS.find((row) => row.assetId === amount.asset);
+			const instruction = payment.documents.find((document) => document.role === "instruction");
+			const expected = command.instructionDocuments?.[0];
+			if (asset?.tokenAddress.toLowerCase() !== item.tokenAddress.toLowerCase() || amount.minorUnits !== (item.operation === "send" ? item.rawAmount : item.totalAmount) || instruction?.documentHash !== item.documentHash || expected !== void 0 && (instruction.contentHash !== expected.contentHash || instruction.format !== expected.format) || payment.status === "settled" && payment.receipt?.chainId !== command.chainId) return refused();
+			return {
+				ok: true,
+				value: normalizePaymentTiming(payment)
+			};
+		} catch (cause) {
+			return {
+				ok: false,
+				error: Errors.unknown(cause)
+			};
+		}
+	};
+	const actor = calls.actor;
+	const result = actor.kind === "account" ? await calls.bookChecked(records.get, { paymentId: item.paymentId }, controls, check) : await calls.bookChecked(records.getForOrganization, {
+		orgId: actor.orgId,
+		paymentId: item.paymentId
+	}, controls, (response) => response.orgId === actor.orgId ? check(response.payment) : refused());
+	return current() ? result : cancelled;
 }
 //#endregion
 //#region src/requests/inboxes.ts
 function makeInboxMethods(calls) {
-	const { actor, convexCall, deps, observeContactScope, book, bookChecked } = calls;
+	const { actor, convexCall, deps, observeContactScope, book } = calls;
 	return {
 		paymentTerms: (requestId, options) => book(inboxes.paymentTerms, {
 			actor,
 			paymentRequestId: requestId
 		}, options, (terms) => terms),
 		list: (options) => book(inboxes.listCurrent, { actor }, options, (items) => mapPage(items, mapInboxItem)),
-		approve: (input, options) => bookChecked(inboxes.approve, {
-			actor,
-			paymentRequestId: input.requestId,
-			...input.timing === void 0 ? {} : { timing: input.timing },
-			...input.permissionId === void 0 ? {} : { permissionId: input.permissionId }
-		}, options, (prepared) => mapApprovedInboxPayment(prepared, input)),
+		approve: async (providedInput, options) => {
+			const input = structuredClone(providedInput);
+			const identity = deps.identityActor;
+			const lifetime = identity?.authLifetime();
+			const current = () => identity === void 0 || lifetime !== void 0 && identity.matchesAuthLifetime(lifetime, lifetime.authUserId);
+			const cancelled = {
+				ok: false,
+				error: Errors.cancelled({ operation: inboxes.approve.name })
+			};
+			const controls = deps.invocationControls?.(options) ?? options;
+			const approve = async (requestKey) => {
+				if (!current()) return cancelled;
+				const prepared = await book(inboxes.approve, {
+					actor,
+					paymentRequestId: input.requestId,
+					...requestKey === void 0 ? {} : { requestKey },
+					...input.timing === void 0 ? {} : { timing: input.timing },
+					...input.permissionId === void 0 ? {} : { permissionId: input.permissionId }
+				}, controls, (value) => value);
+				if (!current()) return cancelled;
+				if (!prepared.ok) return prepared;
+				return readApprovedInboxPayment(calls, prepared.value, controls, current);
+			};
+			const terms = await book(inboxes.paymentTerms, {
+				actor,
+				paymentRequestId: input.requestId
+			}, controls, (value) => value);
+			if (!current()) return cancelled;
+			if (!terms.ok) return terms;
+			if (terms.value.instruction.kind !== "invoice") return approve(input.requestKey);
+			return withInvoiceRequestKey(lifetime?.authUserId ?? "signed-out", {
+				...terms.value,
+				payer: actor.kind === "account" ? { kind: "account" } : {
+					kind: "organization",
+					orgId: actor.orgId
+				},
+				permissionId: input.permissionId,
+				release: input.timing ?? { kind: "instant" }
+			}, input.requestKey, (key) => approve(key));
+		},
 		fulfill: (input, options) => {
 			const onPrepared = options?.onPrepared;
 			const decoded = Schema.decodeResult(RequestPaymentConfirmationSchema, { onExcessProperty: "error" })(input);
@@ -18744,20 +19286,26 @@ function makeInboxMethods(calls) {
 			const controls = deps.invocationControls?.(options) ?? options;
 			return runCapxulEffect(Effect.gen(function* () {
 				const parent = yield* Effect.currentSpan.pipe(Effect.orDie);
-				return yield* awaitCapxulResult(() => executeRequestPayment({
+				const run = (named, prepared) => executeRequestPayment({
 					actor: identityActor,
 					chainId,
 					signer,
 					convexCall,
 					runPromise: deps.runPromise,
 					...deps.telemetry === void 0 ? {} : { telemetry: deps.telemetry }
-				}, confirmation, carryInvocationParentSpan(controls, parent), onPrepared === void 0 ? void 0 : async (paymentIds) => {
-					await onPrepared({ paymentIds });
+				}, named, carryInvocationParentSpan(controls, parent), async (paymentIds) => {
+					prepared();
+					await onPrepared?.({ paymentIds });
 					return {
 						ok: true,
 						value: void 0
 					};
-				}));
+				});
+				const { requestKey, ...intent } = confirmation;
+				return yield* awaitCapxulResult(() => confirmation.instruction.kind !== "invoice" ? run(confirmation, () => void 0) : withInvoiceRequestKey(identityActor.authSession()?.authUserId ?? "signed-out", intent, requestKey, (key, prepared) => run({
+					...confirmation,
+					requestKey: key
+				}, prepared)));
 			}).pipe(Effect.tap(() => observeContactScope)), controls, CAPXUL_OPERATIONS.inbox.fulfill, deps.runPromise);
 		},
 		decline: (requestId, options) => book(inboxes.decline, {
@@ -19683,7 +20231,7 @@ function makePersonalPay(deps) {
 			};
 		}
 		release(false);
-		await finishQuietly(requestKey, submitted.ok || flight.requestState.resolved);
+		await finishQuietly(requestKey, submitted.ok || flight.requestState.resolved || isFinalPaymentRequestError(submitted.error));
 		return mapOk(submitted, (value) => normalizePaymentTiming(value.payment));
 	};
 }
@@ -19760,6 +20308,7 @@ function makePaymentsMethods(deps) {
 		createCommitment: (input, options) => pay(input, options),
 		claim: (paymentId, options) => runLifecycle({
 			kind: "claim",
+			requestKey: options?.requestKey ?? `pay_${crypto.randomUUID()}`,
 			paymentId
 		}, deps.invocationControls?.(options) ?? options, CAPXUL_OPERATIONS.payments.claim),
 		list: (options) => {
@@ -19772,6 +20321,7 @@ function makePaymentsMethods(deps) {
 		},
 		cancel: (paymentId, options) => runLifecycle({
 			kind: "cancel",
+			requestKey: options?.requestKey ?? `pay_${crypto.randomUUID()}`,
 			paymentId
 		}, deps.invocationControls?.(options) ?? options, CAPXUL_OPERATIONS.payments.cancel),
 		redirect: async (input, options) => {
@@ -19780,6 +20330,7 @@ function makePaymentsMethods(deps) {
 			if (!recipient.ok) return runCapxulEffect(Effect.fail(recipient.error), observationOnlyControls(controls), CAPXUL_OPERATIONS.payments.redirect, deps.runPromise);
 			return runLifecycle({
 				kind: "redirect",
+				requestKey: options?.requestKey ?? `pay_${crypto.randomUUID()}`,
 				paymentId: input.paymentId,
 				recipient: recipient.value
 			}, controls, CAPXUL_OPERATIONS.payments.redirect);
@@ -20033,7 +20584,7 @@ async function executeOrganizationBatch(scope, input, signal, operation, control
 	}
 	release(false);
 	try {
-		await requestKey.finish(result.ok || flight.requestState.resolved);
+		await requestKey.finish(result.ok || flight.requestState.resolved || isFinalPaymentRequestError(result.error));
 	} catch {}
 	const normalized = mapOk(result, (value) => value.payments.map((payment) => normalizePaymentTiming(payment)));
 	if (!normalized.ok) return normalized;
@@ -20134,7 +20685,8 @@ function makeOrganizationPaymentsMethods(deps, orgId) {
 		},
 		cancel: (paymentId, options) => ownerLifecycle({
 			kind: "cancel",
-			paymentId
+			paymentId,
+			requestKey: options?.requestKey ?? `pay_${crypto.randomUUID()}`
 		}, deps.invocationControls?.(options) ?? options, CAPXUL_OPERATIONS.organizationPayments.cancel),
 		redirect: (input, options) => {
 			const controls = deps.invocationControls?.(options) ?? options;
@@ -20142,7 +20694,8 @@ function makeOrganizationPaymentsMethods(deps, orgId) {
 			return recipient.ok ? ownerLifecycle({
 				kind: "redirect",
 				paymentId: input.paymentId,
-				recipient: recipient.value
+				recipient: recipient.value,
+				requestKey: options?.requestKey ?? `pay_${crypto.randomUUID()}`
 			}, controls, CAPXUL_OPERATIONS.organizationPayments.redirect) : runCapxulEffect(Effect.fail(recipient.error), observationOnlyControls(controls), CAPXUL_OPERATIONS.organizationPayments.redirect, deps.runPromise);
 		},
 		payBatch: (input, options) => {
@@ -20762,6 +21315,46 @@ function makeAccountMethods(deps) {
 	};
 }
 //#endregion
+//#region src/accounts/approval-rules.ts
+const IN_FLIGHT = /* @__PURE__ */ new Set([
+	"pending",
+	"settling",
+	"in_transit"
+]);
+/** A Payment the chain has not decided yet. */
+function inFlight(payment) {
+	return IN_FLIGHT.has(payment.status);
+}
+/**
+* The operation the approval describes is the one its digest signs: the
+* SafeOp digest of its UserOperation on this client's chain, and the
+* execution that digest names. Anything else is refused before the key signs.
+*/
+function describedOperation(approval, chainId) {
+	const { operation, summary } = approval;
+	if (chainId !== void 0 && summary.network.chainId !== chainId) return Errors.invalidInput("approval", "the approval is for another chain");
+	try {
+		const digest = moneySafeOpDigest(operation.userOperation, summary.network.chainId);
+		if (digest.toLowerCase() === operation.digest.toLowerCase() && matchesMoneyExecutionId(operation.executionId, digest, operation.commandId)) return void 0;
+	} catch {}
+	return Errors.invalidInput("approval", "the operation does not match the digest it asks to sign");
+}
+/** Wait, unless the caller gives up first. False when aborted. */
+function sleep(ms, signal) {
+	if (signal?.aborted === true) return Promise.resolve(false);
+	return new Promise((resolve) => {
+		const timer = setTimeout(() => {
+			signal?.removeEventListener("abort", onAbort);
+			resolve(true);
+		}, ms);
+		const onAbort = () => {
+			clearTimeout(timer);
+			resolve(false);
+		};
+		signal?.addEventListener("abort", onAbort, { once: true });
+	});
+}
+//#endregion
 //#region src/accounts/organization-approvals.ts
 /** The Organization Payment prepared for `signerAddress` and checked, before any approval. */
 async function prepareVerifiedOrganizationPayment(deps, input, signerAddress, signal) {
@@ -20854,58 +21447,6 @@ async function checkedBankApproval(deps, input, opened) {
 	});
 }
 //#endregion
-//#region src/accounts/approval-rules.ts
-const IN_FLIGHT = /* @__PURE__ */ new Set([
-	"pending",
-	"settling",
-	"in_transit"
-]);
-/** A Payment the chain has not decided yet. */
-function inFlight(payment) {
-	return IN_FLIGHT.has(payment.status);
-}
-/**
-* The approved operation is not sent yet: the approval is approved, or it was
-* consumed but a Payment is still `pending` (a recorded send moves it to
-* `settling`), so the send did not land.
-*/
-function unsent(approval, payments) {
-	return approval.state === "approved" || approval.state === "consumed" && payments.some((payment) => payment.status === "pending");
-}
-/** The send was refused because another send of the same operation holds its claim. */
-function anotherSendInFlight(error) {
-	return error.code === "SUPERSEDED" && error.details?.reason === "unobservable-claim";
-}
-/**
-* The operation the approval describes is the one its digest signs: the
-* SafeOp digest of its UserOperation on this client's chain, and the
-* execution that digest names. Anything else is refused before the key signs.
-*/
-function describedOperation(approval, chainId) {
-	const { operation, summary } = approval;
-	if (chainId !== void 0 && summary.network.chainId !== chainId) return Errors.invalidInput("approval", "the approval is for another chain");
-	try {
-		const digest = moneySafeOpDigest(operation.userOperation, summary.network.chainId);
-		if (digest.toLowerCase() === operation.digest.toLowerCase() && operation.executionId === `money_execution_${digest.slice(2).toLowerCase()}`) return void 0;
-	} catch {}
-	return Errors.invalidInput("approval", "the operation does not match the digest it asks to sign");
-}
-/** Wait, unless the caller gives up first. False when aborted. */
-function sleep(ms, signal) {
-	if (signal?.aborted === true) return Promise.resolve(false);
-	return new Promise((resolve) => {
-		const timer = setTimeout(() => {
-			signal?.removeEventListener("abort", onAbort);
-			resolve(true);
-		}, ms);
-		const onAbort = () => {
-			clearTimeout(timer);
-			resolve(false);
-		};
-		signal?.addEventListener("abort", onAbort, { once: true });
-	});
-}
-//#endregion
 //#region ../protocol/src/payroll/model.ts
 function toPayrollRunId(raw) {
 	return toNonEmptyStringBrand(raw, "payrollRunId", (value) => isNonEmptyString(value));
@@ -21367,7 +21908,8 @@ function lifecycleIntent(input) {
 		ok: true,
 		value: {
 			kind: "cancel",
-			paymentId: input.cancel
+			paymentId: input.cancel,
+			requestKey: input.requestKey ?? `pay_${crypto.randomUUID()}`
 		}
 	};
 	const recipient = normalizeTargetForBackend(input.to, "to");
@@ -21376,7 +21918,8 @@ function lifecycleIntent(input) {
 		value: {
 			kind: "redirect",
 			paymentId: input.redirect,
-			recipient: recipient.value
+			recipient: recipient.value,
+			requestKey: input.requestKey ?? `pay_${crypto.randomUUID()}`
 		}
 	} : recipient;
 }
@@ -21408,10 +21951,19 @@ async function prepareVerifiedRequestPayment(deps, input, signerAddress, signal)
 		error: Errors.invalidInput("confirmation", "invalid request confirmation")
 	};
 	const confirmation = decoded.success;
-	return checked(deps, signerAddress, await runIfActive(signal, commands$1.prepareRequest.name, () => callOperation(deps.convexCall, commands$1.prepareRequest, {
-		confirmation,
-		signerAddress
-	}).pipe(Effect.mapError((publicError) => ({ publicError }))), deps.runPromise), requestPaymentCheck(confirmation), false);
+	const run = async (named, prepared) => {
+		const result = await runIfActive(signal, commands$1.prepareRequest.name, () => callOperation(deps.convexCall, commands$1.prepareRequest, {
+			confirmation: named,
+			signerAddress
+		}).pipe(Effect.mapError((publicError) => ({ publicError }))), deps.runPromise);
+		if (result.ok) prepared();
+		return checked(deps, signerAddress, result, requestPaymentCheck(named), false);
+	};
+	const { requestKey, ...intent } = confirmation;
+	return confirmation.instruction.kind !== "invoice" ? run(confirmation, () => void 0) : withInvoiceRequestKey(deps.actor?.authSession()?.authUserId ?? "signed-out", intent, requestKey, (key, prepared) => run({
+		...confirmation,
+		requestKey: key
+	}, prepared));
 }
 /** One payroll run: the run the backend writes and the batch that pays it, checked together. */
 async function prepareVerifiedPayrollRun(deps, input, signerAddress, signal) {
@@ -21506,7 +22058,7 @@ function makeApprovalsMethods(deps) {
 		const signal = options?.signal;
 		if (isCommandApproval(input)) return openApproval(signal, (signerAddress) => prepareVerifiedCommand(deps, input, signerAddress, signal));
 		if (isPermissionChange(input)) return openApproval(signal, async (signerAddress) => {
-			const { prepareVerifiedPermissionChange } = await import("./permission-approvals-tXIk7kNA.mjs");
+			const { prepareVerifiedPermissionChange } = await import("./permission-approvals-B2LrXyRx.mjs");
 			return prepareVerifiedPermissionChange(deps, input, signerAddress, signal);
 		});
 		if ("organizationId" in input) return checkedBankApproval(deps, input, await openApproval(signal, (signerAddress) => prepareVerifiedOrganizationPayment(deps, input, signerAddress, signal)));
@@ -21603,43 +22155,33 @@ function makeApprovalsMethods(deps) {
 	};
 	/**
 	* One read of the approval: its outcome when it has ended, or null to read
-	* again. The Payments are read before anything is sent, so a send is never
-	* made for Payments this caller cannot follow.
+	* again. This path only reads. The backend owns submission and recovery.
 	*/
 	const step = async (approvalId, signal, organizationId) => {
-		const read = await call(approvals.get.name, approvals.get, { approvalId }, signal);
+		const read = await call(approvals.observe.name, approvals.observe, { approvalId }, signal);
 		if (!read.ok) return read;
-		const approval = read.value;
+		const { approval, completed } = read.value;
 		if (approval.state === "pending") return {
 			ok: true,
 			value: null
 		};
-		if (endsOnceSent(approval)) {
-			if (approval.state !== "approved" && approval.state !== "consumed") return {
-				ok: true,
-				value: {
-					approval,
-					payments: []
-				}
-			};
-			const sent = await submit(approvalId);
-			return sent.ok || !anotherSendInFlight(sent.error) ? sent : {
-				ok: true,
-				value: null
-			};
-		}
+		const closed = approval.state === "rejected" || approval.state === "expired";
+		if (!closed && !completed) return {
+			ok: true,
+			value: null
+		};
+		if (!movesMoney(approval)) return {
+			ok: true,
+			value: {
+				approval,
+				payments: []
+			}
+		};
 		const payments = await readApprovalPayments(deps, approval.operation.paymentIds, organizationId ?? (approval.actor.kind === "organization" ? approval.actor.orgId : void 0), signal);
 		if (!payments.ok) return payments;
-		if (unsent(approval, payments.value)) {
-			const sent = await submit(approvalId);
-			return sent.ok || anotherSendInFlight(sent.error) ? {
-				ok: true,
-				value: null
-			} : sent;
-		}
 		return {
 			ok: true,
-			value: approval.state !== "consumed" || !payments.value.some(inFlight) ? {
+			value: closed || endsOnceSent(approval) || !payments.value.some(inFlight) ? {
 				approval,
 				payments: payments.value
 			} : null
@@ -22317,7 +22859,7 @@ function decodeStatus(body) {
 */
 const HEADS = {
 	transfer: "select \"id\", \"chain_id\", \"tx_hash\", \"transaction_log_ordinal\", \"log_index\", \"block_number\", \"block_hash\", \"timestamp\", \"asset_id\", \"token\", \"from\", \"to\", \"amount\" from \"transfer\" where (\"transfer\".\"from\" = $1 or \"transfer\".\"to\" = $2) order by \"transfer\".\"block_number\" desc, \"transfer\".\"id\" desc",
-	payment: "select \"id\", \"chain_id\", \"tx_hash\", \"transaction_log_ordinal\", \"log_index\", \"block_number\", \"block_hash\", \"timestamp\", \"contract\", \"settlement_id\", \"sender\", \"recipient\", \"asset_id\", \"token\", \"amount\", \"kind\", \"document_hash\" from \"payment\" where (\"payment\".\"sender\" = $1 or \"payment\".\"recipient\" = $2) order by \"payment\".\"block_number\" desc, \"payment\".\"id\" desc",
+	payment: "select \"id\", \"chain_id\", \"tx_hash\", \"transaction_log_ordinal\", \"log_index\", \"block_number\", \"block_hash\", \"timestamp\", \"contract\", \"settlement_id\", \"sender\", \"recipient\", \"asset_id\", \"token\", \"amount\", \"kind\", \"document_hash\", \"job_nonce\", \"executor\" from \"payment\" where (\"payment\".\"sender\" = $1 or \"payment\".\"recipient\" = $2) order by \"payment\".\"block_number\" desc, \"payment\".\"id\" desc",
 	balance: "select \"chain_id\", \"asset_id\", \"to\", \"amount\" from \"balance\" where \"balance\".\"to\" = $1"
 };
 /** How many times the statement binds the Safe address. */
@@ -22360,7 +22902,7 @@ function ponderQuery(table, input) {
 			input.limit
 		];
 		return {
-			sql: `${HEADS.payment.slice(0, HEADS.payment.indexOf("where "))}where (("payment"."sender" = $1 or "payment"."recipient" = $2) and "payment"."settlement_id" in (${input.settlements.map((_, i) => `$${i + 3}`).join(", ")})) limit $${params.length}`,
+			sql: `${HEADS.payment.slice(0, HEADS.payment.indexOf("where ")).replace(" from \"payment\"", ", \"contract\" as \"router\" from \"payment\"")}where (("payment"."sender" = $1 or "payment"."recipient" = $2) and "payment"."settlement_id" in (${input.settlements.map((_, i) => `$${i + 3}`).join(", ")})) limit $${params.length}`,
 			params,
 			typings: params.map(() => "none")
 		};
@@ -24558,4 +25100,4 @@ function executeIdentityProductObservation(telemetry, record, state) {
 	return ignoreTransportFailure(() => invocationTelemetry.emit(mapped), "emit", mapped.name).pipe(Effect.andThen(ignoreTransportFailure(after, mapped.name === "auth_signed_out" ? "reset" : "identify", mapped.name)));
 }
 //#endregion
-export { parseAssetAmount as $, hashPermissionReplacementPreview as $n, EXPECTED_OPERATION_OUTCOMES as $r, isSettingUpLifecycle as $t, registerProductTelemetryInvocation as A, toDurationMs as Ai, onboardings as An, toExactAssetAmount as Ar, safe4337MultiSendUserOpCallData as At, makePaymentsMethods as B, FAILURE_MODES$1 as Bi, invitations as Bn, publicIdentityFailure as Br, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT as Bt, AccountReadPortTag as C, AuthClientPortTag as Ci, EXCEPTION_EVENT_NAME as Cn, toPermissionAssignmentId as Cr, SEND_SIGNATURE as Ct, convexCallErrorFromCapxul as D, BrowserAuthCacheAdapter as Di, normalizeCapxulOperation as Dn, currencySymbolFor as Dr, deriveCapxulSafeAddress as Dt, ConvexCallPortTag as E, InMemoryAuthCacheAdapter as Ei, isCapxulOperation as En, ChainIdSchema$1 as Er, TOKENS as Et, decodePayrollRunInput as F, toJwtToken as Fi, PreparedPermissionExecutionSchema as Fn, toWeiAmount as Fr, callOperation as Ft, isCheckoutSettlementConsumed as G, AuthCachePortTag as Gi, workspaces as Gn, runCapxulEffect as Gr, withCapturedAttemptContext as Gt, makeDestinationsMethods as H, isRecord as Hi, roles as Hn, runPortEffect as Hr, observeFailedResult as Ht, toPayrollGroupId as I, toSessionToken as Ii, PermissionCommandViewSchema as In, absurd as Ir, asCapxulError as It, subscribeFreshQuery as J, ORGANIZATION_SETUP_STATUSES as Jn, defectAsCapxulError as Jr, normalizeExceptionErrorKind as Jt, makeTargetsMethods as K, OrganizationSetupSchema as Kn, withVerifiedOrganizationScope as Kr, EXCEPTION_MESSAGE as Kt, makeAccountMethods as L, Errors as Li, PayrollGroupIdSchema as Ln, reference as Lr, toPublicError$1 as Lt, makeApprovalsMethods as M, toEpochSeconds as Mi, commands as Mn, isEvmAddress as Mr, BASE_SEPOLIA_CHAIN_ID as Mt, makePayrollMethods as N, toAuthUserId as Ni, configurations as Nn, toAddress as Nr, MULTI_SEND_CALL_ONLY as Nt, retryIdempotentRead as O, parseAuthSession as Oi, OPERATIONS as On, toAssetId as Or, normalizeSafeSaltEmail as Ot, makeUnavailablePayrollMethods as P, toEmail as Pi, replacements as Pn, toChainId as Pr, SAFE_SENTINEL_OWNERS as Pt, formatAssetAmount as Q, InvitationViewSchema as Qn, CAPXUL_ERROR_CODES as Qr, version as Qt, annotateDepositInstructions as R, CapxulError as Ri, PayrollGroupInputSchema as Rn, makeAuthMethods as Rr, failureDetail as Rt, valueIn as S, AuthClientError as Si, CLI_INVOCATION_KINDS as Sn, toBudgetId as Sr, SEND_BATCH_SIGNATURE as St, TelemetryPortTag as T, globalLocalStorage as Ti, CAPXUL_OPERATIONS as Tn, toRoleKey as Tr, CONFIGURED_MONEY_ASSETS as Tt, makeActorRelationshipMethods as U, readField as Ui, setups as Un, sessionFromActor as Ur, observeSdkClient as Ut, waitForPaymentSubmission as V, isFailureMode as Vi, members as Vn, runIdentityFacade as Vr, postHogFailureObservation as Vt, makeCheckoutMethods as W, AuthCacheError as Wi, treasuries as Wn, observationOnlyControls as Wr, observationContextProps as Wt, assetAmountFromRaw as X, decodeChainCause as Xn, toCapxulResult as Xr, projectSdkException as Xt, abandonPrepared as Y, CHAIN_UPSTREAMS as Yn, runIfActive as Yr, normalizeExceptionOperation as Yt, assetSymbolFor as Z, toOrgId as Zn, formatTraceparent as Zr, safeExceptionLabel as Zt, accountFromAccountPositions as _, isCredentialField as _i, validateHandle as _n, toLowerHex as _r, ROLES_SET_ALLOWANCE_ABI as _t, paymentPhase as a, ClockError as ai, openfortSignerNotReadyCode as an, roleKeyForPermission as ar, fingerprintPaymentIntent as at, MONEY_READ_RATES as b, toPublishableKey as bi, CLI_CAPABILITIES as bn, DurationMsSchema$1 as br, ROLE_MANAGEMENT_SIGNATURES as bt, makePaymentDocumentsMethods as c, BetterAuthNodeLayer as ci, resolveFailureMode as cn, images as cr, resolveOrgPermissionIdentity as ct, SmartAccountPortTag as d, attachInvocationObservation as di, toCountryCode as dn, toAccountId as dr, MULTI_SEND_SELECTOR as dt, ActorFailure as ei, UNOBSERVABLE_SIGNER_STATUS as en, decodePermissionIntent as er, requireAsset as et, smartAccountErrorFromCapxul as f, copyInvocationObservation as fi, toKycTier as fn, PaymentDocumentOptionsSchema as fr, OPERATOR as ft, ConvexAccountLayer as g, redactUrlSecrets as gi, toPartyId as gn, toLowerBytes32 as gr, ROLES_EXEC_TRANSACTION_WITH_ROLE_ABI as gt, makeAccountsMethods as h, redactSecrets as hi, toHandle as hn, toLowerAddress as hr, ROLES_ASSIGN_ROLES_ABI as ht, inboxPhase as i, SystemClockLayer as ii, isSignerNotReadySignal as in, ORG_BUDGET_ACTIONS as ir, canonicalJson as it, wireChainId as j, toEpochMs as ji, authorities as jn, EVM_ADDRESS_RE$1 as jr, buildSafeMultiSendExecTransactionCall as jt, bindProductTelemetryInvocation as k, parseCachedJwt as ki, details as kn, toCurrencyCode as kr, safe4337ExecuteUserOpCallData as kt, makeSmartAccountMethods as l, BetterAuthBrowserLayer as li, makeCurrentUserMethods as ln, bankDetails as lr, CREATE_COMMITMENT_SIGNATURE as lt, PonderIndexerAdapter as m, sanitizeObservationContext as mi, HANDLE_RE as mn, toExactHex as mr, PARAMETER_TYPE as mt, bootIdentityFlow as n, withInvocationParentSpan as ni, injectedWalletSigner as nn, CurrentPolicySchema as nr, isMoneyParseError as nt, requestPhase as o, ClockPortTag as oi, recoverRawDigestSigner as on, diagnostics as or, moneySafeOpDigest as ot, makeHoldingsMethods as p, readInvocationObservation as pi, toTesterKind as pn, isBytes32 as pr, OWNER_COMMITMENT_SIGNATURES as pt, makeVerificationMethods as q, ORGANIZATION_SETUP_REASONS as qn, awaitCapxulResult as qr, SDK_VERSION as qt, makeMeMethods as r, oauthBearerAuthClient as ri, isEcdsaSignatureHex as rn, MONTHLY_REFILL_PERIOD_SECONDS as rr, parseMoney as rt, makeActivityMethods as s, readClockNow as si, signerFailure as sn, AppIdSchema$1 as sr, ZODIAC_MODULE_PROXY_FACTORY as st, executeIdentityProductObservation as t, carryInvocationParentSpan as ti, causeChain as tn, keepRefillOnChange as tr, toRaw as tt, ConvexSmartAccountLayer as u, observationRequestHeaders as ui, makeClientRequestMethods as un, deposits as ur, MODULE_PROXY_FACTORY_ABI as ut, accountPositionsFromWire as v, toAllowedOrigin as vi, redactTelemetryEvent as vn, PAYMENT_DIRECTIONS as vr, ROLES_SET_TRANSACTION_UNWRAPPER_ABI as vt, accountReadErrorFromCapxul as w, detectAuthCacheAdapter as wi, stampTelemetryEnvelope as wn, toPermissionId as wr, CAPXUL_PAYMENTS_V2_ADDRESS as wt, valueActivitySummary as x, authClientPortFromPromiseAdapter as xi, CLI_COMMAND_NAMES as xn, EpochMsSchema$1 as xr, SAFE_ENABLE_MODULE_ABI as xt, positionPeg as y, toAppId as yi, redactTelemetryProps as yn, PAYMENT_STATUSES as yr, ROLES_SET_UP_ABI as yt, makeOrganizationPaymentsMethods as z, isCapxulError as zi, FixedOfferDraftSchema as zn, askIdentity as zr, failureEvidenceProps as zt };
+export { parseAssetAmount as $, InvitationViewSchema as $n, CAPXUL_ERROR_CODES as $r, version as $t, registerProductTelemetryInvocation as A, parseCachedJwt as Ai, details as An, toCurrencyCode as Ar, buildSafeMultiSendExecTransactionCall as At, makePaymentsMethods as B, isCapxulError as Bi, FixedOfferDraftSchema as Bn, askIdentity as Br, failureEvidenceProps as Bt, AccountReadPortTag as C, AuthClientError as Ci, CLI_INVOCATION_KINDS as Cn, toBudgetId as Cr, SEND_SIGNATURE as Ct, convexCallErrorFromCapxul as D, InMemoryAuthCacheAdapter as Di, isCapxulOperation as Dn, ChainIdSchema$1 as Dr, normalizeSafeSaltEmail as Dt, ConvexCallPortTag as E, globalLocalStorage as Ei, CAPXUL_OPERATIONS as En, toRoleKey as Er, deriveCapxulSafeAddress as Et, decodePayrollRunInput as F, toEmail as Fi, replacements as Fn, toChainId as Fr, CONFIGURED_MONEY_ASSETS as Ft, isCheckoutSettlementConsumed as G, AuthCacheError as Gi, treasuries as Gn, observationOnlyControls as Gr, observationContextProps as Gt, makeDestinationsMethods as H, isFailureMode as Hi, members as Hn, runIdentityFacade as Hr, postHogFailureObservation as Ht, toPayrollGroupId as I, toJwtToken as Ii, PreparedPermissionExecutionSchema as In, toWeiAmount as Ir, TOKENS as It, subscribeFreshQuery as J, ORGANIZATION_SETUP_REASONS as Jn, awaitCapxulResult as Jr, SDK_VERSION as Jt, makeTargetsMethods as K, AuthCachePortTag as Ki, workspaces as Kn, runCapxulEffect as Kr, withCapturedAttemptContext as Kt, makeAccountMethods as L, toSessionToken as Li, PermissionCommandViewSchema as Ln, absurd as Lr, asCapxulError as Lt, makeApprovalsMethods as M, toEpochMs as Mi, authorities as Mn, EVM_ADDRESS_RE$1 as Mr, MULTI_SEND_CALL_ONLY as Mt, makePayrollMethods as N, toEpochSeconds as Ni, commands as Nn, isEvmAddress as Nr, SAFE_SENTINEL_OWNERS as Nt, retryIdempotentRead as O, BrowserAuthCacheAdapter as Oi, normalizeCapxulOperation as On, currencySymbolFor as Or, safe4337ExecuteUserOpCallData as Ot, makeUnavailablePayrollMethods as P, toAuthUserId as Pi, configurations as Pn, toAddress as Pr, callOperation as Pt, formatAssetAmount as Q, toOrgId as Qn, formatTraceparent as Qr, safeExceptionLabel as Qt, annotateDepositInstructions as R, Errors as Ri, PayrollGroupIdSchema as Rn, reference as Rr, toPublicError$1 as Rt, valueIn as S, authClientPortFromPromiseAdapter as Si, CLI_COMMAND_NAMES as Sn, EpochMsSchema$1 as Sr, SEND_BATCH_SIGNATURE as St, TelemetryPortTag as T, detectAuthCacheAdapter as Ti, stampTelemetryEnvelope as Tn, toPermissionId as Tr, matchesMoneyExecutionId as Tt, makeActorRelationshipMethods as U, isRecord as Ui, roles as Un, runPortEffect as Ur, observeFailedResult as Ut, waitForPaymentSubmission as V, FAILURE_MODES$1 as Vi, invitations as Vn, publicIdentityFailure as Vr, CAPXUL_SDK_EXPECTED_OUTCOME_EVENT as Vt, makeCheckoutMethods as W, readField as Wi, setups as Wn, sessionFromActor as Wr, observeSdkClient as Wt, assetAmountFromRaw as X, CHAIN_UPSTREAMS as Xn, runIfActive as Xr, normalizeExceptionOperation as Xt, abandonPrepared as Y, ORGANIZATION_SETUP_STATUSES as Yn, defectAsCapxulError as Yr, normalizeExceptionErrorKind as Yt, assetSymbolFor as Z, decodeChainCause as Zn, toCapxulResult as Zr, projectSdkException as Zt, accountFromAccountPositions as _, redactUrlSecrets as _i, toPartyId as _n, toLowerBytes32 as _r, ROLES_SET_ALLOWANCE_ABI as _t, paymentPhase as a, SystemClockLayer as ai, isSignerNotReadySignal as an, ORG_BUDGET_ACTIONS as ar, fingerprintPaymentIntent as at, MONEY_READ_RATES as b, toAppId as bi, redactTelemetryProps as bn, PAYMENT_STATUSES as br, ROLE_MANAGEMENT_SIGNATURES as bt, makePaymentDocumentsMethods as c, readClockNow as ci, signerFailure as cn, AppIdSchema$1 as cr, resolveOrgPermissionIdentity as ct, SmartAccountPortTag as d, observationRequestHeaders as di, makeClientRequestMethods as dn, deposits as dr, MULTI_SEND_SELECTOR as dt, EXPECTED_OPERATION_OUTCOMES as ei, isSettingUpLifecycle as en, hashPermissionReplacementPreview as er, requireAsset as et, smartAccountErrorFromCapxul as f, attachInvocationObservation as fi, toCountryCode as fn, toAccountId as fr, OPERATOR as ft, ConvexAccountLayer as g, redactSecrets as gi, toHandle as gn, toLowerAddress as gr, ROLES_EXEC_TRANSACTION_WITH_ROLE_ABI as gt, makeAccountsMethods as h, sanitizeObservationContext as hi, HANDLE_RE as hn, toExactHex as hr, ROLES_ASSIGN_ROLES_ABI as ht, inboxPhase as i, oauthBearerAuthClient as ii, isEcdsaSignatureHex as in, MONTHLY_REFILL_PERIOD_SECONDS as ir, canonicalJson as it, wireChainId as j, toDurationMs as ji, onboardings as jn, toExactAssetAmount as jr, BASE_SEPOLIA_CHAIN_ID as jt, bindProductTelemetryInvocation as k, parseAuthSession as ki, OPERATIONS as kn, toAssetId as kr, safe4337MultiSendUserOpCallData as kt, makeSmartAccountMethods as l, BetterAuthNodeLayer as li, resolveFailureMode as ln, images as lr, CREATE_COMMITMENT_SIGNATURE as lt, PonderIndexerAdapter as m, readInvocationObservation as mi, toTesterKind as mn, isBytes32 as mr, PARAMETER_TYPE as mt, bootIdentityFlow as n, carryInvocationParentSpan as ni, causeChain as nn, keepRefillOnChange as nr, isMoneyParseError as nt, requestPhase as o, ClockError as oi, openfortSignerNotReadyCode as on, roleKeyForPermission as or, moneySafeOpDigest as ot, makeHoldingsMethods as p, copyInvocationObservation as pi, toKycTier as pn, PaymentDocumentOptionsSchema as pr, OWNER_COMMITMENT_SIGNATURES as pt, makeVerificationMethods as q, OrganizationSetupSchema as qn, withVerifiedOrganizationScope as qr, EXCEPTION_MESSAGE as qt, makeMeMethods as r, withInvocationParentSpan as ri, injectedWalletSigner as rn, CurrentPolicySchema as rr, parseMoney as rt, makeActivityMethods as s, ClockPortTag as si, recoverRawDigestSigner as sn, diagnostics as sr, ZODIAC_MODULE_PROXY_FACTORY as st, executeIdentityProductObservation as t, ActorFailure as ti, UNOBSERVABLE_SIGNER_STATUS as tn, decodePermissionIntent as tr, toRaw as tt, ConvexSmartAccountLayer as u, BetterAuthBrowserLayer as ui, makeCurrentUserMethods as un, bankDetails as ur, MODULE_PROXY_FACTORY_ABI as ut, accountPositionsFromWire as v, isCredentialField as vi, validateHandle as vn, toLowerHex as vr, ROLES_SET_TRANSACTION_UNWRAPPER_ABI as vt, accountReadErrorFromCapxul as w, AuthClientPortTag as wi, EXCEPTION_EVENT_NAME as wn, toPermissionAssignmentId as wr, CAPXUL_PAYMENTS_V2_ADDRESS as wt, valueActivitySummary as x, toPublishableKey as xi, CLI_CAPABILITIES as xn, DurationMsSchema$1 as xr, SAFE_ENABLE_MODULE_ABI as xt, positionPeg as y, toAllowedOrigin as yi, redactTelemetryEvent as yn, PAYMENT_DIRECTIONS as yr, ROLES_SET_UP_ABI as yt, makeOrganizationPaymentsMethods as z, CapxulError as zi, PayrollGroupInputSchema as zn, makeAuthMethods as zr, failureDetail as zt };