@capxul/cli 4.20.0-beta.26 → 4.20.0-beta.28

package/dist/browser/signer.js

@@ -8883,28 +8883,28 @@
 	* @since 4.0.0
 	*/
 	function makeFormatterDefault() {
-		return (issue) => formatIssue(issue, "");
+		return (issue) => formatIssue$1(issue, "");
 	}
 	/** @internal */
 	const defaultFormatter$1 = /*#__PURE__*/ makeFormatterDefault();
-	function formatIssue(issue, path) {
+	function formatIssue$1(issue, path) {
 		let message;
 		switch (issue._tag) {
 			case "Filter": {
 				const annotated = defaultCheckHook(issue);
 				if (annotated !== void 0) message = annotated;
 				else {
-					if (issue.issue._tag !== "InvalidValue") return formatIssue(issue.issue, path);
+					if (issue.issue._tag !== "InvalidValue") return formatIssue$1(issue.issue, path);
 					const expected = findExpected(issue.issue);
 					message = expected === void 0 ? getExpectedMessage(formatCheck(issue.filter), issue) : getExpectedMessage(expected, issue.issue);
 				}
 				break;
 			}
-			case "Encoding": return formatIssue(issue.issue, path);
-			case "Pointer": return formatIssue(issue.issue, path + formatPath(issue.path));
+			case "Encoding": return formatIssue$1(issue.issue, path);
+			case "Pointer": return formatIssue$1(issue.issue, path + formatPath(issue.path));
 			case "Composite":
 			case "AnyOf":
-				if (issue._tag === "Composite" || issue.issues.length > 0) return issue.issues.map((issue) => formatIssue(issue, path)).join("\n");
+				if (issue._tag === "Composite" || issue.issues.length > 0) return issue.issues.map((issue) => formatIssue$1(issue, path)).join("\n");
 				message = findMessage(issue) ?? getExpectedMessage(getExpected(issue.ast), issue);
 				break;
 			default: message = defaultLeafHook(issue);
@@ -13427,7 +13427,7 @@
 		},
 		anonymousId: {
 			maxLength: 128,
-			pattern: /^anon_[A-Za-z0-9-]+$/u
+			pattern: /^(?:anon_[A-Za-z0-9-]+|[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})$/u
 		},
 		traceparent: {
 			maxLength: 55,
@@ -19641,10 +19641,19 @@ get: Operation.query("activity.overlays.get", {
 		name: String$1,
 		explorerUrl: String$1
 	});
+	/**
+	* Whose money the operation moves: the person's own, or an Organization's,
+	* which a reader follows through that Organization's scope.
+	*/
+	const ApprovalActorSchema = Union([Struct({ kind: Literal("personal") }), Struct({
+		kind: Literal("organization"),
+		orgId: NonEmptyString
+	})]);
 	/** What the person reads before they sign. */
 	const ApprovalSummarySchema = Struct({
 		title: String$1,
 		from: Struct({
+			kind: Literals(["personal", "organization"]),
 			label: String$1,
 			address: AddressSchema$1
 		}),
@@ -19666,6 +19675,7 @@ get: Operation.query("activity.overlays.get", {
 		url: String$1,
 		kind: Literals(APPROVAL_KINDS),
 		state: Literals(APPROVAL_STATES),
+		actor: ApprovalActorSchema,
 		summary: ApprovalSummarySchema,
 		operation: ApprovalOperationSchema,
 		/** Who must sign: the owner key of the paying Safe. */
@@ -20333,6 +20343,15 @@ ensure: Operation.action("documents.memos.ensure", {
 		})
 	};
 	//#endregion
+	//#region ../../packages/protocol/src/evm/role-dsl.ts
+	/**
+	* How a capped Budget's allowance refills (#2298). `monthly` refills the
+	* allowance to its cap every 30 days. Roles v2 counts fixed periods from the
+	* moment the allowance is set; it has no calendar month. Absent means `none`:
+	* the cap is one pot that spending drains for good.
+	*/
+	const ORG_BUDGET_REFILLS = ["monthly", "none"];
+	//#endregion
 	//#region ../../packages/protocol/src/permissions/permission-schema.ts
 	/**
 	* One stored `setAllowance` call inside a command's expected authority set.
@@ -20371,12 +20390,19 @@ ensure: Operation.action("documents.memos.ensure", {
 		})]),
 		actions: NonEmptyArray(Literals(["pay", "commitments"]))
 	}).pipe(refine((scope) => new Set(scope.actions).size === scope.actions.length && (scope.recipients.type === "anyone" || scope.recipients.accounts.length >= 1 && scope.recipients.accounts.length <= 32 && new Set(scope.recipients.accounts).size === scope.recipients.accounts.length), { message: "Budget scope requires unique actions and one to 32 unique allowed Accounts" }));
+	/**
+	* How a capped Budget refills (#2298): `monthly` tops the cap back up every 30
+	* days (a fixed Roles v2 period, not a calendar month); `none` never refills.
+	* Absent means `none`, and writers store only `monthly`.
+	*/
+	const BudgetRefillSchema = Literals(ORG_BUDGET_REFILLS);
 	/** The accepted product policy stored with one Permission revision. */
 	const CurrentPolicySchema = Union([Struct({
 		type: Literal("budget"),
 		asset: AssetIdSchema,
 		limit: NullOr(String$1),
-		scope: BudgetScopeSchema
+		scope: BudgetScopeSchema,
+		refill: optional(BudgetRefillSchema)
 	}), Struct({ type: Literal("managePeople") })]);
 	const BudgetIntentSchema = CurrentPolicySchema.pipe(refine((value) => {
 		if (value.type !== "budget") return false;
@@ -20441,7 +20467,8 @@ ensure: Operation.action("documents.memos.ensure", {
 			"send",
 			"sendBatch",
 			"createCommitment"
-		]))
+		])),
+		refill: optional(BudgetRefillSchema)
 	});
 	const PermissionRecipientBindingSchema = Struct({
 		accountId: AccountIdSchema$1,
@@ -20453,14 +20480,16 @@ ensure: Operation.action("documents.memos.ensure", {
 		type: Literal("budget"),
 		asset: AssetIdSchema,
 		limit: NullOr(AssetAmountSchema),
-		scope: optional(BudgetScopeSchema)
+		scope: optional(BudgetScopeSchema),
+		refill: optional(BudgetRefillSchema)
 	}).pipe(refine((intent) => intent.limit === null || intent.limit.asset === intent.asset, { message: "Budget limit must use the Budget asset" })), Struct({ type: Literal("managePeople") })]);
 	/** Writes state every granted right and use a finite positive AssetAmount cap. */
 	const PermissionIntentSchema = Union([Struct({
 		type: Literal("budget"),
 		asset: AssetIdSchema,
 		limit: AssetAmountSchema,
-		scope: BudgetScopeSchema
+		scope: BudgetScopeSchema,
+		refill: optional(BudgetRefillSchema)
 	}).pipe(refine((intent) => intent.limit.asset === intent.asset && /[1-9]/u.test(intent.limit.value), { message: "Budget cap must be positive and use the Budget asset" })), Struct({ type: Literal("managePeople") })]);
 	//#endregion
 	//#region ../../packages/protocol/src/permissions/replacement-schema.ts
@@ -20661,7 +20690,7 @@ ensure: Operation.action("documents.memos.ensure", {
 			Struct({
 				type: Literal("new_budget"),
 				label: String$1.pipe(refine((value) => value.trim().length >= 1 && value.trim().length <= 128)),
-				intent: BudgetIntentSchema
+				intent: BudgetIntentSchema.pipe(refine((intent) => intent.refill !== "monthly", { message: "An invitation's new Budget cannot refill; change it once granted" }))
 			})
 		])).pipe(refine((grants) => {
 			if (grants.length < 1 || grants.length > 16) return false;
@@ -23669,7 +23698,9 @@ complete: Operation.mutation("profiles.onboardings.complete", {
 				emitSafeConfirmed: "accounts.safes.emitSafeConfirmed",
 				readSafe: "accounts.safes.readSafe",
 				recordDeployment: "accounts.safes.recordDeployment"
-			}
+			},
+			/** The home's requests to pay and Payments to retry, read in one query. */
+			summaries: { loadNeedsYou: "accounts.summaries.loadNeedsYou" }
 		},
 		/** The host observer's names for `client.approvals.*`. */
 		approvals: {
@@ -23850,7 +23881,11 @@ complete: Operation.mutation("profiles.onboardings.complete", {
 				seedNativeReadiness: "operator.fixtures.seedNativeReadiness",
 				seedPrerequisites: "operator.fixtures.seedPrerequisites"
 			},
-			identities: { purgeByEmail: "operator.identities.purgeByEmail" }
+			identities: {
+				purgeByEmail: "operator.identities.purgeByEmail",
+				/** One Account and every row that refers to it, unless it has Payments or an Organization tie. */
+				purgeAccount: "operator.identities.purgeAccount"
+			}
 		},
 		/** Organizations' internal functions; its public rows join from `OPERATIONS`. */
 		organizations: {
@@ -23924,7 +23959,9 @@ emitSaved: "activity.annotations.emitSaved" },
 			pay: "organizationPayments.pay",
 			payBatch: "organizationPayments.payBatch",
 			prepareExecution: "organizationPayments.prepareExecution",
-			retry: "organizationPayments.retry"
+			retry: "organizationPayments.retry",
+			cancel: "organizationPayments.cancel",
+			redirect: "organizationPayments.redirect"
 		},
 		/**
 		* Payments' internal functions and the client's own method names; its public
@@ -23946,7 +23983,9 @@ emitSaved: "activity.annotations.emitSaved" },
 				loadContext: "payments.commands.loadContext",
 				loadExecutionContext: "payments.commands.loadExecutionContext",
 				/** The capped Budget a prepared Organization command spends from, before its allowance is read on chain. */
-				loadBudgetAllowance: "payments.commands.loadBudgetAllowance"
+				loadBudgetAllowance: "payments.commands.loadBudgetAllowance",
+				/** What a new Payment command would spend and from which Safe, read before it is born. */
+				loadBirthFunding: "payments.commands.loadBirthFunding"
 			},
 			lifecycles: { prepareIntent: "payments.lifecycles.prepareIntent" },
 			/** The stored UserOperation of every money command: Payment, Permission and configuration. */
@@ -24100,7 +24139,11 @@ emitChanged: "payroll.groups.emitChanged" }
 				recordUse: "applications.bootstraps.recordUse",
 				resolve: "applications.bootstraps.resolve"
 			},
-			keys: { issue: "applications.keys.issue" },
+			keys: {
+				issue: "applications.keys.issue",
+				/** Operator-only: revoke one key by its id, whoever owns it. */
+				revokeById: "applications.keys.revokeById"
+			},
 			quickstarts: {
 				claim: "applications.quickstarts.claim",
 				mint: "applications.quickstarts.mint"
@@ -24373,6 +24416,42 @@ emitChanged: "payroll.groups.emitChanged" }
 		organization_id: OptionalOrgId,
 		reason_code: OptionalReasonCode
 	};
+	/**
+	* A journey's variants (`JOURNEYS`): the way a person came into a journey, or
+	* the way they took through it. A variant is a property of the journey's step
+	* events, never a journey of its own, so each journey funnel breaks down by
+	* it. A step event takes only the variants that a journey contract names on
+	* it, picked one by one; the analytics plan test checks both directions.
+	* `pay_path` and `funding_source` have no carrier until their Phase 2 events.
+	* `payment_*` events already carry `recipient_is_capxul_account`, and
+	* `invoice_issued` carries `issuer_scope_kind`; neither is repeated here.
+	*/
+	const JourneyVariantProps = {
+		/** How a person came to Get started: by themselves, an invite, money that waited, or an invoice. */
+		entry_path: optional(Literals([
+			"signup",
+			"invite",
+			"claim",
+			"invoice"
+		])),
+		/** Where the person acted. `agent` is an AI agent driving the CLI. */
+		surface: optional(Literals([
+			"web",
+			"cli",
+			"agent"
+		])),
+		/** Who pays: a person from their own account, or an Organization from a Budget. */
+		payer_kind: optional(Literals(["person", "organization"])),
+		/** How a request was paid: from the payer's inbox, or by its link at checkout. */
+		pay_path: optional(Literals(["inbox", "link"])),
+		/** Where an account's first money came from. `bank` is the planned on-ramp. */
+		funding_source: optional(Literals([
+			"deposit",
+			"payment",
+			"claim",
+			"bank"
+		]))
+	};
 	//#endregion
 	//#region ../../packages/observability/src/events/money.ts
 	/**
@@ -24462,6 +24541,8 @@ emitChanged: "payroll.groups.emitChanged" }
 		execution_id: OptionalString,
 		payment_lifecycle_id: OptionalString,
 		...TelemetryEnvelopeProps,
+		payer_kind: JourneyVariantProps.payer_kind,
+		surface: JourneyVariantProps.surface,
 		...RecipientTelemetryProps,
 		kind: String$1,
 		payment_id: String$1
@@ -24477,6 +24558,8 @@ emitChanged: "payroll.groups.emitChanged" }
 	const PaymentSettledL2Props = Struct({
 		...PaymentLifecycleProps,
 		...TelemetryEnvelopeProps,
+		payer_kind: JourneyVariantProps.payer_kind,
+		surface: JourneyVariantProps.surface,
 		...RecipientTelemetryProps,
 		kind: String$1,
 		chain_id: Finite,
@@ -24684,6 +24767,7 @@ emitChanged: "payroll.groups.emitChanged" }
 	});
 	const OrganizationCreationReadyProps = Struct({
 		...TelemetryEnvelopeProps,
+		surface: JourneyVariantProps.surface,
 		$insert_id: String$1,
 		organization_id: OrgIdTelemetrySchema,
 		attempt_number: AttemptNumberSchema,
@@ -24708,45 +24792,6 @@ emitChanged: "payroll.groups.emitChanged" }
 			...ORGANIZATION_SETUP_REASONS
 		]))
 	});
-	const OrgCreateStartedProps = Struct({
-		...TelemetryEnvelopeProps,
-		org_id: OptionalOrgId,
-		email_domain: OptionalString,
-		template: OptionalString
-	});
-	const OrgSafeCreatedProps = Struct({
-		...TelemetryEnvelopeProps,
-		org_id: OptionalOrgId,
-		chainId: OptionalChainId,
-		safe_address: OptionalAddress
-	});
-	const OrgSafeConfirmedProps = Struct({
-		...TelemetryEnvelopeProps,
-		org_id: OptionalOrgId,
-		chainId: OptionalChainId,
-		safe_address: OptionalAddress,
-		durationMs: OptionalDurationMs
-	});
-	const OrgRolesSeededProps = Struct({
-		...TelemetryEnvelopeProps,
-		org_id: OptionalOrgId,
-		chainId: OptionalChainId,
-		role: OptionalString,
-		txHash: OptionalTxHash
-	});
-	const OrgCreatedProps = Struct({
-		...TelemetryEnvelopeProps,
-		org_id: OptionalOrgId,
-		chainId: OptionalChainId,
-		safe_address: OptionalAddress,
-		durationMs: OptionalDurationMs
-	});
-	const OrgCreateFailedProps = Struct({
-		...TelemetryEnvelopeProps,
-		...ChainCauseTelemetryProps,
-		org_id: OptionalOrgId,
-		reason: OptionalString
-	});
 	const OrgInviteSentProps = Struct({
 		...TelemetryEnvelopeProps,
 		org_id: OptionalOrgId,
@@ -24791,30 +24836,6 @@ emitChanged: "payroll.groups.emitChanged" }
 		name: Literal("organization_creation_failed"),
 		props: OrganizationCreationFailedProps
 	});
-	Struct({
-		name: Literal("org_create_started"),
-		props: OrgCreateStartedProps
-	});
-	Struct({
-		name: Literal("org_safe_created"),
-		props: OrgSafeCreatedProps
-	});
-	Struct({
-		name: Literal("org_safe_confirmed"),
-		props: OrgSafeConfirmedProps
-	});
-	Struct({
-		name: Literal("org_roles_seeded"),
-		props: OrgRolesSeededProps
-	});
-	Struct({
-		name: Literal("org_created"),
-		props: OrgCreatedProps
-	});
-	Struct({
-		name: Literal("org_create_failed"),
-		props: OrgCreateFailedProps
-	});
 	Struct({
 		name: Literal("org_invite_sent"),
 		props: OrgInviteSentProps
@@ -25688,10 +25709,14 @@ emitChanged: "payroll.groups.emitChanged" }
 	});
 	const MemberActivationStartedProps = Struct({
 		...TelemetryEnvelopeProps,
+		entry_path: JourneyVariantProps.entry_path,
+		surface: JourneyVariantProps.surface,
 		$insert_id: String$1
 	});
 	const MemberActivationReadyProps = Struct({
 		...TelemetryEnvelopeProps,
+		entry_path: JourneyVariantProps.entry_path,
+		surface: JourneyVariantProps.surface,
 		$insert_id: String$1,
 		duration_ms: DurationMsSchema
 	});
@@ -27513,6 +27538,7 @@ emitChanged: "payroll.groups.emitChanged" }
 	paymentsV2Signature("send");
 	paymentsV2Signature("sendBatch");
 	paymentsV2Signature("createCommitment");
+	paymentsV2Signature("cancel"), paymentsV2Signature("redirect");
 	//#endregion
 	//#region ../../packages/protocol/src/evm/organization-payments.ts
 	/** Supported Organization permission identities, newest first. */
@@ -27661,6 +27687,14 @@ emitChanged: "payroll.groups.emitChanged" }
 			}
 		};
 	}
+	Struct({
+		permissionId: AuthorizePayrollRunExecutionInputSchema.fields.permissionId,
+		asset: AuthorizePayrollRunExecutionInputSchema.fields.asset,
+		period: AuthorizePayrollRunExecutionInputSchema.fields.period,
+		items: AuthorizePayrollRunExecutionInputSchema.fields.items,
+		requestKey: optional(AuthorizePayrollRunExecutionInputSchema.fields.requestKey)
+	});
+	runs.authorize.name;
 	//#endregion
 	//#region ../../packages/sdk/src/platform/transport/wire.ts
 	/**
@@ -36292,14 +36326,6 @@ query Role($id: String, $block: Int) {
 	init_toFunctionSelector();
 	toFunctionSelector("setTransactionUnwrapper(address,bytes4,address)");
 	toFunctionSelector("assignRoles(address,bytes32[],bool[])");
-	Struct({
-		permissionId: AuthorizePayrollRunExecutionInputSchema.fields.permissionId,
-		asset: AuthorizePayrollRunExecutionInputSchema.fields.asset,
-		period: AuthorizePayrollRunExecutionInputSchema.fields.period,
-		items: AuthorizePayrollRunExecutionInputSchema.fields.items,
-		requestKey: optional(AuthorizePayrollRunExecutionInputSchema.fields.requestKey)
-	});
-	runs.authorize.name;
 	//#endregion
 	//#region ../../node_modules/.pnpm/axios@1.17.0/node_modules/axios/lib/helpers/bind.js
 	/**