@capxul/cli 4.20.0-beta.24 → 4.20.0-beta.27

package/dist/browser/signer.js

@@ -12974,12 +12974,17 @@
 		* a PERMISSION denial — explicitly NOT an `INSUFFICIENT_BALANCE` (the treasury
 		* held the funds; the role's authority is what bound). `reason` discriminates
 		* the violated condition (`over_cap` / `daily_cap` / `not_member` /
-		* `disallowed_recipient` / `condition_violation`); leak-safe — no on-chain
-		* identifiers ever enter the details.
+		* `disallowed_recipient` / `condition_violation` / `budget_exhausted`);
+		* no Safe, Roles module or role key enters the details.
+		* `budget_exhausted` carries what the Budget's allowance still holds and
+		* what the spend needs, as asset amounts in major units (#2297); the asset
+		* id names the public token contract.
 		*/
-		rolePermissionDenied: (details) => new CapxulError("ROLE_PERMISSION_DENIED", `Org role denied this spend on-chain (${details.reason}).`, { details: details.operation === void 0 ? { reason: details.reason } : {
+		rolePermissionDenied: (details) => new CapxulError("ROLE_PERMISSION_DENIED", `Org role denied this spend on-chain (${details.reason}).`, { details: {
 			reason: details.reason,
-			operation: details.operation
+			...details.operation === void 0 ? {} : { operation: details.operation },
+			...details.remaining === void 0 ? {} : { remaining: details.remaining },
+			...details.required === void 0 ? {} : { required: details.required }
 		} }),
 		/**
 		* A transaction (or sponsored UserOp) failed. `details.reason` discriminates
@@ -14503,7 +14508,7 @@
 	}), Struct({
 		kind: Literal("movement"),
 		id: String$1,
-		classification: Literal("movement_only_outflow"),
+		classification: Literals(["deposit", "movement_only_outflow"]),
 		amount: Amount,
 		direction: Direction,
 		counterpartyLabel: String$1,
@@ -19636,10 +19641,19 @@ get: Operation.query("activity.overlays.get", {
 		name: String$1,
 		explorerUrl: String$1
 	});
+	/**
+	* Whose money the operation moves: the person's own, or an Organization's,
+	* which a reader follows through that Organization's scope.
+	*/
+	const ApprovalActorSchema = Union([Struct({ kind: Literal("personal") }), Struct({
+		kind: Literal("organization"),
+		orgId: NonEmptyString
+	})]);
 	/** What the person reads before they sign. */
 	const ApprovalSummarySchema = Struct({
 		title: String$1,
 		from: Struct({
+			kind: Literals(["personal", "organization"]),
 			label: String$1,
 			address: AddressSchema$1
 		}),
@@ -19661,6 +19675,7 @@ get: Operation.query("activity.overlays.get", {
 		url: String$1,
 		kind: Literals(APPROVAL_KINDS),
 		state: Literals(APPROVAL_STATES),
+		actor: ApprovalActorSchema,
 		summary: ApprovalSummarySchema,
 		operation: ApprovalOperationSchema,
 		/** Who must sign: the owner key of the paying Safe. */
@@ -19893,7 +19908,44 @@ faucetMint: Operation.action("accounts.grants.faucetMint", {
 			]
 		})
 	};
+	/**
+	* The home screen in one read. A section whose read failed is null, so the
+	* caller shows it as unavailable, never as empty.
+	*/
+	const HomeSchema = Struct({
+		email: String$1,
+		actingAs: Union([Struct({ kind: Literal("personal") }), Struct({
+			kind: Literal("organization"),
+			orgId: String$1
+		})]),
+		/** The acting Safe's position in each settlement asset of its chain. */
+		balances: NullOr(ArraySchema(AssetPositionSchema)),
+		/** The ids of what waits on the caller, newest first. */
+		needsYou: NullOr(Struct({
+			requestsToPay: ArraySchema(String$1),
+			payrollToApprove: ArraySchema(String$1),
+			paymentsToRetry: ArraySchema(String$1)
+		})),
+		/** The newest rows of the actor's activity. */
+		recentActivity: NullOr(ArraySchema(ActivityItemSchema))
+	});
 	const summaries = {
+		/**
+		* Where the caller acts, its balances, what needs it and its newest activity,
+		* for the person or for an Organization they take part in. One round trip.
+		*/
+		home: Operation.action("accounts.summaries.home", {
+			input: Struct({
+				chainId: ChainIdSchema$1,
+				orgId: optionalKey(NonEmptyString)
+			}),
+			output: HomeSchema,
+			errors: [
+				...CALL$10,
+				...DEFECTS,
+				"ROLE_PERMISSION_DENIED"
+			]
+		}),
 		/** The signed-in person: id, verified email and Profile display name. */
 		me: Operation.query("accounts.summaries.me", {
 			input: Struct({}),
@@ -21885,7 +21937,11 @@ read: Operation.action("organizations.treasuries.read", {
 	const CALL$4 = ["NOT_AUTHENTICATED", "INVALID_INPUT"];
 	/** The caller's own Account and Safe, which a Payment is signed from. */
 	const ACCOUNT$1 = ["SMART_ACCOUNT_MISSING", "ACCOUNT_NOT_FOUND"];
-	/** Not a participant of the Organization, or no Budget in it that may pay for this. */
+	/**
+	* Not a participant of the Organization, no Budget in it that may pay for
+	* this, or a Budget whose on-chain allowance holds less than the batch spends
+	* (`budget_exhausted`, naming what is left).
+	*/
 	const DENIED$1 = ["ROLE_PERMISSION_DENIED"];
 	/** The command, its Payment or its execution is not in a state this applies to. */
 	const STATE$3 = ["WRONG_STATE"];
@@ -22194,7 +22250,9 @@ read: Operation.action("organizations.treasuries.read", {
 	const CALL$3 = ["NOT_AUTHENTICATED", "INVALID_INPUT"];
 	/**
 	* The caller does not take part in the Organization, or holds no Budget in it
-	* that may pay for this. A caller outside the Organization learns nothing more.
+	* that may pay for this, or the Budget's on-chain allowance holds less than the
+	* run pays (`budget_exhausted`, naming what is left). A caller outside the
+	* Organization learns nothing more.
 	*/
 	const DENIED = ["ROLE_PERMISSION_DENIED"];
 	/**
@@ -23802,7 +23860,11 @@ complete: Operation.mutation("profiles.onboardings.complete", {
 				seedNativeReadiness: "operator.fixtures.seedNativeReadiness",
 				seedPrerequisites: "operator.fixtures.seedPrerequisites"
 			},
-			identities: { purgeByEmail: "operator.identities.purgeByEmail" }
+			identities: {
+				purgeByEmail: "operator.identities.purgeByEmail",
+				/** One Account and every row that refers to it, unless it has Payments or an Organization tie. */
+				purgeAccount: "operator.identities.purgeAccount"
+			}
 		},
 		/** Organizations' internal functions; its public rows join from `OPERATIONS`. */
 		organizations: {
@@ -23896,7 +23958,9 @@ emitSaved: "activity.annotations.emitSaved" },
 				linkObservation: "payments.commands.linkObservation",
 				failPrepared: "payments.commands.failPrepared",
 				loadContext: "payments.commands.loadContext",
-				loadExecutionContext: "payments.commands.loadExecutionContext"
+				loadExecutionContext: "payments.commands.loadExecutionContext",
+				/** The capped Budget a prepared Organization command spends from, before its allowance is read on chain. */
+				loadBudgetAllowance: "payments.commands.loadBudgetAllowance"
 			},
 			lifecycles: { prepareIntent: "payments.lifecycles.prepareIntent" },
 			/** The stored UserOperation of every money command: Payment, Permission and configuration. */
@@ -24050,7 +24114,11 @@ emitChanged: "payroll.groups.emitChanged" }
 				recordUse: "applications.bootstraps.recordUse",
 				resolve: "applications.bootstraps.resolve"
 			},
-			keys: { issue: "applications.keys.issue" },
+			keys: {
+				issue: "applications.keys.issue",
+				/** Operator-only: revoke one key by its id, whoever owns it. */
+				revokeById: "applications.keys.revokeById"
+			},
 			quickstarts: {
 				claim: "applications.quickstarts.claim",
 				mint: "applications.quickstarts.mint"
@@ -25380,95 +25448,83 @@ emitChanged: "payroll.groups.emitChanged" }
 	});
 	//#endregion
 	//#region ../../packages/observability/src/catalog/cli.ts
-	/** One completed online CLI diagnostic. No command input or provider text. */
+	/** Every command path of the `capxul` tree, dot-separated, plus the root and `unknown`. */
 	const CLI_COMMAND_NAMES = [
-		"status",
-		"request",
-		"request.list",
-		"request.get",
-		"request.cancel",
-		"offer",
-		"offer.create",
-		"offer.list",
-		"offer.get",
-		"offer.revise",
-		"offer.deactivate",
-		"org.offer",
-		"org.offer.create",
-		"org.offer.list",
-		"org.offer.get",
-		"org.offer.revise",
-		"org.offer.deactivate",
-		"request.issue",
-		"inbox",
-		CAPXUL_OPERATIONS.inbox.list,
-		"inbox.get",
-		"inbox.pay",
-		CAPXUL_OPERATIONS.inbox.decline,
-		"org.request",
-		"org.request.list",
-		"org.request.get",
-		"org.request.cancel",
-		"org.request.issue",
-		"org.inbox",
-		CAPXUL_OPERATIONS.org.inbox.list,
-		"org.inbox.get",
-		"org.inbox.pay",
-		CAPXUL_OPERATIONS.org.inbox.decline,
 		"capxul",
+		"home",
 		"whoami",
 		"use",
 		"use.personal",
 		"use.org",
 		"use.env",
-		"doctor",
-		"telemetry",
-		"telemetry.status",
-		"telemetry.enable",
-		"telemetry.disable",
 		"auth",
 		"auth.login",
-		"auth.signup",
-		"auth.send",
 		"auth.verify",
 		"auth.switch",
-		"auth.profile",
-		"auth.status",
 		"auth.logout",
 		"account",
-		CAPXUL_OPERATIONS.account.status,
-		CAPXUL_OPERATIONS.account.balance,
-		"account.deposit",
+		"account.show",
 		"account.retry",
-		"document",
-		"document.get",
-		"document.verify",
-		"document.render",
-		"document.export",
+		"balance",
+		"address",
 		"payment",
+		"payment.send",
 		"payment.list",
 		"payment.get",
 		"payment.wait",
-		"payment.send",
 		"payment.retry",
-		"activity",
-		"activity.list",
-		"activity.get",
-		"activity.summary",
-		"activity.annotate",
+		"inbox",
+		CAPXUL_OPERATIONS.inbox.list,
+		"inbox.get",
+		"inbox.pay",
+		CAPXUL_OPERATIONS.inbox.decline,
+		"request",
+		"request.issue",
+		"request.list",
+		"request.get",
+		"request.cancel",
+		"offer",
+		"offer.create",
+		"offer.list",
+		"offer.get",
+		"offer.revise",
+		"offer.deactivate",
 		"contact",
+		"contact.add",
 		"contact.list",
 		"contact.get",
-		"contact.add",
 		"contact.label",
 		"contact.hide",
 		"contact.unhide",
+		"document",
+		"document.get",
+		"document.render",
+		"document.export",
+		"document.verify",
+		"activity",
+		"activity.list",
+		"activity.get",
+		"activity.summary",
+		"activity.annotate",
+		"invite",
+		"invite.list",
+		"invite.accept",
+		"invite.decline",
 		"org",
 		CAPXUL_OPERATIONS.org.list,
-		"org.status",
+		CAPXUL_OPERATIONS.org.create,
+		"org.show",
 		CAPXUL_OPERATIONS.org.me,
-		"org.balance",
-		"org.deposit",
+		"org.wait",
+		CAPXUL_OPERATIONS.org.retry,
+		"org.member",
+		"org.member.list",
+		"org.member.get",
+		"org.member.invite",
+		CAPXUL_OPERATIONS.org.invite,
+		"org.invite.list",
+		"org.invite.cancel",
+		"org.invite.resend",
 		"org.permission",
 		"org.permission.list",
 		"org.permission.get",
@@ -25480,46 +25536,32 @@ emitChanged: "payroll.groups.emitChanged" }
 		"org.permission.command",
 		"org.permission.command.get",
 		"org.permission.command.wait",
-		CAPXUL_OPERATIONS.org.payment,
-		"org.payment.list",
-		"org.payment.get",
-		"org.payment.wait",
-		"org.payment.retry",
-		"org.payment.send",
 		"org.payroll",
+		"org.payroll.run",
+		"org.payroll.list",
+		"org.payroll.get",
+		"org.payroll.wait",
+		CAPXUL_OPERATIONS.org.payroll.terms,
 		"org.payroll.groups",
 		CAPXUL_OPERATIONS.org.payroll.groups.list,
 		CAPXUL_OPERATIONS.org.payroll.groups.save,
 		CAPXUL_OPERATIONS.org.payroll.groups.remove,
-		CAPXUL_OPERATIONS.org.payroll.terms,
-		"org.payroll.list",
-		"org.payroll.run",
-		"org.payroll.get",
-		"org.payroll.wait",
-		CAPXUL_OPERATIONS.org.members,
-		"org.member",
-		"org.member.get",
-		"org.member.invite",
-		"org.contact",
-		"org.contact.list",
-		"org.contact.get",
-		"org.contact.add",
-		"org.contact.label",
-		"org.contact.hide",
-		"org.contact.unhide",
-		CAPXUL_OPERATIONS.org.invite,
-		"org.invite.list",
+		"config",
+		"config.telemetry",
+		"config.telemetry.on",
+		"config.telemetry.off",
+		"config.telemetry.status",
+		"invite.get",
+		"invite.review",
+		"invite.wait",
 		"org.invite.get",
 		"org.invite.wait",
-		"org.invite.review",
-		"org.invite.accept",
-		"org.invite.decline",
-		"org.invite.cancel",
-		"org.invite.resend",
 		"org.invite.retry",
-		"org.wait",
-		CAPXUL_OPERATIONS.org.create,
-		CAPXUL_OPERATIONS.org.retry,
+		"schema",
+		"doctor",
+		"dev",
+		"dev.key",
+		"dev.fund",
 		"unknown"
 	];
 	const CLI_CAPABILITIES = [
@@ -27637,6 +27679,14 @@ emitChanged: "payroll.groups.emitChanged" }
 			}
 		};
 	}
+	Struct({
+		permissionId: AuthorizePayrollRunExecutionInputSchema.fields.permissionId,
+		asset: AuthorizePayrollRunExecutionInputSchema.fields.asset,
+		period: AuthorizePayrollRunExecutionInputSchema.fields.period,
+		items: AuthorizePayrollRunExecutionInputSchema.fields.items,
+		requestKey: optional(AuthorizePayrollRunExecutionInputSchema.fields.requestKey)
+	});
+	runs.authorize.name;
 	//#endregion
 	//#region ../../packages/sdk/src/platform/transport/wire.ts
 	/**
@@ -27863,7 +27913,6 @@ emitChanged: "payroll.groups.emitChanged" }
 		yield* promise(() => emitProvisioningTelemetry(deps.telemetry, provisioned, deps.runPromise));
 		return provisioned;
 	});
-	new Set(IDENTITY_EVENT_TAGS);
 	Object.freeze({
 		terminal: false,
 		outcome: null,
@@ -27889,6 +27938,7 @@ emitChanged: "payroll.groups.emitChanged" }
 		outcome: "neutral",
 		needsAction: false
 	});
+	new Set(IDENTITY_EVENT_TAGS);
 	//#endregion
 	//#region ../../node_modules/.pnpm/zodiac-roles-deployments@2.5.0/node_modules/zodiac-roles-deployments/build/esm/types.js
 	var ExecutionOptions;
@@ -36268,14 +36318,6 @@ query Role($id: String, $block: Int) {
 	init_toFunctionSelector();
 	toFunctionSelector("setTransactionUnwrapper(address,bytes4,address)");
 	toFunctionSelector("assignRoles(address,bytes32[],bool[])");
-	Struct({
-		permissionId: AuthorizePayrollRunExecutionInputSchema.fields.permissionId,
-		asset: AuthorizePayrollRunExecutionInputSchema.fields.asset,
-		period: AuthorizePayrollRunExecutionInputSchema.fields.period,
-		items: AuthorizePayrollRunExecutionInputSchema.fields.items,
-		requestKey: optional(AuthorizePayrollRunExecutionInputSchema.fields.requestKey)
-	});
-	runs.authorize.name;
 	//#endregion
 	//#region ../../node_modules/.pnpm/axios@1.17.0/node_modules/axios/lib/helpers/bind.js
 	/**