@capxul/cli 4.20.0-beta.27 → 4.20.0-beta.28

package/README.md

@@ -184,7 +184,9 @@ An agent gives the person the link and runs `next.argv`. `payment wait
 APPROVAL_ID` follows the approval: once it is approved it sends it (unless the
 page already did; only one send can claim it) and waits for the payment to
 settle. Its result is the SDK's `{ approval, payments }`. An Organization
-payment's wait carries `--org`.
+payment's wait carries `--org`. Without `--timeout-seconds`, `payment wait` follows
+until the approval lapses and the payment settles, as `send` does; with it, the wait
+stops after that many seconds (1 to 3600) with exit 5 and the same command to run again.
 
 ## Personal Payments
 
@@ -192,11 +194,13 @@ payment's wait carries `--org`.
 capxul payment retry PAYMENT_ID --json
 capxul payment list --json
 capxul payment get PAYMENT_ID --json
+capxul payment wait PAYMENT_ID --json
 capxul payment wait PAYMENT_ID --timeout-seconds 120 --json
 ```
 
 These commands use the current authenticated session. Add `--email EMAIL` to
 select a saved session. In a terminal, omit the required Payment ID to enter it.
+`wait` follows a Payment until it ends unless `--timeout-seconds` bounds it.
 `get` refuses when the Payment is absent or unavailable to the session. Human
 output shows the full ID, status, amount, counterparty and available receipt.
 
@@ -297,7 +301,9 @@ Issue accepts a basic payment request or an Invoice request JSON object from
 `--input FILE` or `--input -`. Both require `payer` and an exact positive
 `amount`. A basic request requires an explicit `reference` and accepts an
 optional private `memo`. An Invoice request also supplies `invoice`.
-Issue saves available document PDFs in the common directory by default.
+Issue saves no file. Its human output names the `document render` command for
+each document, and its JSON result is `{ scope, direction, item }`: the issued
+request with its document references, with no document output.
 Human and JSON output include `checkoutUrl` for an Invoice or Memo request
 instruction with a link token. Invoice requests keep `/checkout/invoices/`.
 Basic requests use `/checkout/requests/`. Movement documents do not create
@@ -307,9 +313,8 @@ For a custom deployment, set `CAPXUL_CHECKOUT_FRONTEND_ORIGIN` in both the CLI
 and backend environments. Use the same frontend origin for both.
 Offer create, get, list, revise, and deactivate output also include `checkoutUrl`.
 The checkout page reads current terms and status when the link opens.
-Use `--output-dir DIRECTORY` to change that location. A PDF failure retains the
-issued request and its document references. Do not issue it again to retry PDF
-output; use the printed document render command.
+Save a PDF with the printed `document render` command. Do not issue the request
+again to get a PDF.
 
 ```json
 {
@@ -361,7 +366,6 @@ CLI signer and the SDK fulfillment API. Organization payment requires the
 selected Permission; the backend checks Budget and spending authority. The
 command publishes prepared Payment IDs before signing. A submitted Payment
 is not a settled Payment. Use the printed get/wait commands to inspect its state.
-Returned documents use the same default PDF directory.
 
 A lost reply or timeout gives exact readback in the same session and scope.
 Pay refuses an already prepared Invoice unless you explicitly use `--resume`
@@ -393,12 +397,14 @@ file metadata. Each render uses a new private directory and preserves earlier
 files. `export` writes the original bytes to a new file.
 It refuses an existing output file.
 
-Reads never write files. Payment `get`, `wait` and `list`, Activity detail and
-Payroll `get` and `wait` name each document with the `document render` command
-that saves it. Payment `send` and `retry`, Payroll `run` and Inbox `pay` still
-save available documents as PDFs in the same directory and report them in their
-result. Pending or unavailable documents retain that state. A document failure
-does not change the Payment result or start another Payment.
+Only `document render` and `document export` write files. Reads name each
+document with the `document render` command that saves it: Payment `get`, `wait`
+and `list`, Activity detail, Payroll `get` and `wait`. Writes save nothing either.
+Payment `send` and `retry`, Payroll `run` and Inbox `pay` end with
+`Save the receipt: capxul document render …` once the receipt exists, and
+`request issue` prints that command for each document it issued. No write
+result carries document output. A document that is still pending is named by
+`payment get`.
 
 ## Contact commands
 
@@ -560,11 +566,16 @@ Every Budget write supplies the complete policy:
   "scope": {
     "recipients": { "type": "allowlist", "accounts": ["account_alice"] },
     "actions": ["pay"]
-  }
+  },
+  "refill": "monthly"
 }
 ```
 
 Use an exact admitted AssetId for `A`. The cap must be positive and finite.
+`refill` is `monthly`, which refills the cap every 30 days (a fixed period from
+the block that sets it, not a calendar month), or `none`. A create without
+`refill` means `none`. A change without `refill` keeps the Budget's current
+refill; write `"refill": "none"` to turn a refill off.
 Recipients are `anyone` or 1 to 32 unique Account IDs. Actions are `pay`,
 `commitments`, or both. `pay` covers single and batch Payments. Missing scope,
 duplicate recipients/actions, unknown fields, and an asset mismatch refuse.
@@ -580,7 +591,14 @@ and printed before the first write. Scripted runs require `--request-key` and
 `--confirm`.
 
 Success means submitted and pending application. It does not prove active
-rights. After an interruption or uncertain result, retain the original input,
+rights. Add `--wait` to `create`, `change`, `assign`, `revoke` or `replace` to
+follow the submitted command to its end, as `org permission command wait` does:
+it stops when the command is applied, failed or needs action. The result then
+also holds `command`, the command's view (`status` is `applied`, `failed` or
+`actionable`), and exits 0 in each case, as `command wait` does; read `status`.
+`--timeout-seconds` bounds the signing and, separately, the wait. A wait that
+runs out of time fails with exit 5 and prints the exact `command get` and
+`command wait` lines. After an interruption or uncertain result, retain the original input,
 Organization ID, key, command ID, and execution ID. The key alone cannot restore
 wizard/stdin input.
 
@@ -803,7 +821,14 @@ SDK's own value for the command, with no CLI wrapper. A list is the SDK page,
 `{ items, nextCursor }`; pass `nextCursor` back as `--after` where the command
 takes one. `--fields a,b` keeps only those fields of `data` (`amount.value`
 reaches inside an object; a list keeps `nextCursor` and picks from each item).
-`--fields` without `--json` refuses.
+`--fields` without `--json` refuses, and so does a typo: a name the result lacks that is a
+letter or two off a name it has (exit 2, `field: "fields"`); the message names it, the
+closest real field and the fields in this result. Any other name the result lacks, such as
+an optional `execution` on a Payment that has none, is left out, as `jq` would.
+The four commands that move money (`payment send`, `payment retry`, `inbox pay`,
+`org payroll run`) check the names against the result they declare before they
+run, so a typo never costs an approval: `status`, `approvalId`, `approvalUrl`,
+`paymentIds`, `expiresAt` and `next`.
 
 A failure contains `error`:
 
@@ -825,13 +850,21 @@ not grant authority or bypass current checks. `error.details.recovery` keeps
 its `kind` (`read` or `retry`) next to the same `argv`.
 
 A person sees one red line for what happened and one for what fixes it (on the
-same line when both fit in 80 columns):
+same line when both fit in 80 columns), then a dim last line, `ref <id>`, for
+support:
 
 ```text
 ✗ Unknown command "paymnt". Did you mean: capxul payment list
 ✗ Not signed in. Try: capxul auth login
+ref 6a0e10d1-06fb-4eed-9c2a-1f6f0c2b7d11
 ```
 
+The `ref` is the backend's request ID when the error carries one, else its
+correlation ID, else this run's `invocationId`. A mistyped command has none,
+because no command started. An error that already quotes its request ID in its
+sentence (a redacted backend error) has no `ref` line. JSON output has no `ref`
+line and is unchanged: read `error.details.requestId` or `invocationId`.
+
 A wallet failure
 also includes its known `error.mode` and allowed `error.details`: wallet stage,
 operation, provider, provider code, and HTTP status. An unknown browser failure
@@ -918,7 +951,7 @@ sign-in; it sets `NEXT_PUBLIC_CAPXUL_PUBLISHABLE_KEY` and `CAPXUL_SITE_URL` in
 journeys with the built CLI against the local DevNet: sign in, `dev fund`, the home
 screen, a payment (refused with its fix while the wallet setup is unfinished, as
 it is on a DevNet with no wallet provider), requests, offers, Inbox, Organizations,
-the account, `schema`, a typo's fix and `dev key`. The `capxul dev journeys` job in
+the account, `schema`, a typo's fix and `dev key`. The `cli-journeys` job in
 `.github/workflows/devnet-integration.yml` starts the DevNet and runs it.
 
 ## Development commands
@@ -1042,7 +1075,7 @@ a concurrent logout from being undone by a delayed credential save. The backend
 owns expiry and revocation. A failed remote logout is reported as `unconfirmed`;
 local sign-out remains in effect.
 
-`auth profile` returns a backend-read Profile and account lifecycle without opening
+`account show` returns a backend-read Profile and account lifecycle without opening
 the browser. Successful email authentication can return `setupState: "setup-required"`.
 `account retry` returns `setupState: "ready"` only after Core reads a ready Account.
 After logout, profile reads refuse with `NOT_AUTHENTICATED` and exit 3. An invalid
@@ -1057,7 +1090,7 @@ capxul account retry --email you@example.com --wizard
 
 The terminal shows the verified session, Account ID and current lifecycle before
 confirmation. A ready Account starts no wallet work. Missing Account or Profile
-state directs to `account retry`. A deadline stops waiting; check `account status`
+state directs to `account retry`. A deadline stops waiting; check `account show`
 for the same session before retrying.
 
 Read an Organization treasury or deposit target:
@@ -1117,7 +1150,7 @@ capxul offer deactivate OFFER_ID --expected-revision 2 --confirm
 capxul offer list --org ORG_ID
 ```
 
-Use `org offer` and `--org ORG_ID` for each Organization command. Use `--email`
+Add `--org ORG_ID` to run any of these as an Organization. Use `--email`
 to select a saved session. Scripts must supply `--confirm` for each write.
 A terminal shows the proposed change and asks for confirmation. Use `--json`
 for structured output. Lists and reads create no PDF.
@@ -1153,16 +1186,16 @@ reference. Separate purchasers receive separate checkout and settlement IDs.
 ## Request and document flow
 
 Alice issues a basic request or an Invoice to Bob with `request issue`. For an Organization issuer,
-Alice uses `org request issue --org ORGANIZATION_ID`. Issuance saves Alice's PDF
-by default and returns the request ID, document references, and checkout URL.
+Alice uses `request issue --org ORGANIZATION_ID`. Issuance returns the request ID,
+document references, and checkout URL. Alice saves her PDF with the printed
+`document render` command.
 Bob runs `inbox list`, then `inbox get REQUEST_ID`. An Organization
-payer uses the equivalent `org inbox` commands with its explicit Organization.
+payer uses the same `inbox` commands with `--org`.
 
-Bob's Inbox contains the request and document references. It does not receive a
-local PDF automatically. Bob uses the printed `document render` command to save
-his copy. Both participants read the same verified document. Their files can
-have different local paths. `status` shows available request and document counts;
-it does not download documents.
+Bob's Inbox contains the request and document references. Bob uses the printed
+`document render` command to save his copy. Both participants read the same verified document. Their files can
+have different local paths. The home screen (`capxul`) shows how many requests wait
+for you; it does not download documents.
 
 A direct Payment uses the existing Payment and Activity commands. Alice inspects
 her outgoing records. Bob inspects his incoming records after the backend observes
@@ -1176,10 +1209,10 @@ access remains available through the saved document and content hashes. Keep
 those references when retaining a cancelled Invoice.
 
 The shared document directory is `documents` next to the CLI settings directory.
-`CAPXUL_CLI_HOME` selects a separate CLI settings directory. `--output-dir` changes
-the document output location for supported document and payment commands. Each
-render preserves previous files. A failed PDF render does not repeat issuance or
-payment. Retry `document render` with the existing document references.
+`CAPXUL_CLI_HOME` selects a separate CLI settings directory. `document render
+--output-dir` changes the document output location. Each render preserves
+previous files. A failed PDF render does not repeat issuance or payment. Retry
+`document render` with the existing document references.
 
 ## Checkout links
 

package/dist/browser/signer.js

@@ -8883,28 +8883,28 @@
 	* @since 4.0.0
 	*/
 	function makeFormatterDefault() {
-		return (issue) => formatIssue(issue, "");
+		return (issue) => formatIssue$1(issue, "");
 	}
 	/** @internal */
 	const defaultFormatter$1 = /*#__PURE__*/ makeFormatterDefault();
-	function formatIssue(issue, path) {
+	function formatIssue$1(issue, path) {
 		let message;
 		switch (issue._tag) {
 			case "Filter": {
 				const annotated = defaultCheckHook(issue);
 				if (annotated !== void 0) message = annotated;
 				else {
-					if (issue.issue._tag !== "InvalidValue") return formatIssue(issue.issue, path);
+					if (issue.issue._tag !== "InvalidValue") return formatIssue$1(issue.issue, path);
 					const expected = findExpected(issue.issue);
 					message = expected === void 0 ? getExpectedMessage(formatCheck(issue.filter), issue) : getExpectedMessage(expected, issue.issue);
 				}
 				break;
 			}
-			case "Encoding": return formatIssue(issue.issue, path);
-			case "Pointer": return formatIssue(issue.issue, path + formatPath(issue.path));
+			case "Encoding": return formatIssue$1(issue.issue, path);
+			case "Pointer": return formatIssue$1(issue.issue, path + formatPath(issue.path));
 			case "Composite":
 			case "AnyOf":
-				if (issue._tag === "Composite" || issue.issues.length > 0) return issue.issues.map((issue) => formatIssue(issue, path)).join("\n");
+				if (issue._tag === "Composite" || issue.issues.length > 0) return issue.issues.map((issue) => formatIssue$1(issue, path)).join("\n");
 				message = findMessage(issue) ?? getExpectedMessage(getExpected(issue.ast), issue);
 				break;
 			default: message = defaultLeafHook(issue);
@@ -13427,7 +13427,7 @@
 		},
 		anonymousId: {
 			maxLength: 128,
-			pattern: /^anon_[A-Za-z0-9-]+$/u
+			pattern: /^(?:anon_[A-Za-z0-9-]+|[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})$/u
 		},
 		traceparent: {
 			maxLength: 55,
@@ -20343,6 +20343,15 @@ ensure: Operation.action("documents.memos.ensure", {
 		})
 	};
 	//#endregion
+	//#region ../../packages/protocol/src/evm/role-dsl.ts
+	/**
+	* How a capped Budget's allowance refills (#2298). `monthly` refills the
+	* allowance to its cap every 30 days. Roles v2 counts fixed periods from the
+	* moment the allowance is set; it has no calendar month. Absent means `none`:
+	* the cap is one pot that spending drains for good.
+	*/
+	const ORG_BUDGET_REFILLS = ["monthly", "none"];
+	//#endregion
 	//#region ../../packages/protocol/src/permissions/permission-schema.ts
 	/**
 	* One stored `setAllowance` call inside a command's expected authority set.
@@ -20381,12 +20390,19 @@ ensure: Operation.action("documents.memos.ensure", {
 		})]),
 		actions: NonEmptyArray(Literals(["pay", "commitments"]))
 	}).pipe(refine((scope) => new Set(scope.actions).size === scope.actions.length && (scope.recipients.type === "anyone" || scope.recipients.accounts.length >= 1 && scope.recipients.accounts.length <= 32 && new Set(scope.recipients.accounts).size === scope.recipients.accounts.length), { message: "Budget scope requires unique actions and one to 32 unique allowed Accounts" }));
+	/**
+	* How a capped Budget refills (#2298): `monthly` tops the cap back up every 30
+	* days (a fixed Roles v2 period, not a calendar month); `none` never refills.
+	* Absent means `none`, and writers store only `monthly`.
+	*/
+	const BudgetRefillSchema = Literals(ORG_BUDGET_REFILLS);
 	/** The accepted product policy stored with one Permission revision. */
 	const CurrentPolicySchema = Union([Struct({
 		type: Literal("budget"),
 		asset: AssetIdSchema,
 		limit: NullOr(String$1),
-		scope: BudgetScopeSchema
+		scope: BudgetScopeSchema,
+		refill: optional(BudgetRefillSchema)
 	}), Struct({ type: Literal("managePeople") })]);
 	const BudgetIntentSchema = CurrentPolicySchema.pipe(refine((value) => {
 		if (value.type !== "budget") return false;
@@ -20451,7 +20467,8 @@ ensure: Operation.action("documents.memos.ensure", {
 			"send",
 			"sendBatch",
 			"createCommitment"
-		]))
+		])),
+		refill: optional(BudgetRefillSchema)
 	});
 	const PermissionRecipientBindingSchema = Struct({
 		accountId: AccountIdSchema$1,
@@ -20463,14 +20480,16 @@ ensure: Operation.action("documents.memos.ensure", {
 		type: Literal("budget"),
 		asset: AssetIdSchema,
 		limit: NullOr(AssetAmountSchema),
-		scope: optional(BudgetScopeSchema)
+		scope: optional(BudgetScopeSchema),
+		refill: optional(BudgetRefillSchema)
 	}).pipe(refine((intent) => intent.limit === null || intent.limit.asset === intent.asset, { message: "Budget limit must use the Budget asset" })), Struct({ type: Literal("managePeople") })]);
 	/** Writes state every granted right and use a finite positive AssetAmount cap. */
 	const PermissionIntentSchema = Union([Struct({
 		type: Literal("budget"),
 		asset: AssetIdSchema,
 		limit: AssetAmountSchema,
-		scope: BudgetScopeSchema
+		scope: BudgetScopeSchema,
+		refill: optional(BudgetRefillSchema)
 	}).pipe(refine((intent) => intent.limit.asset === intent.asset && /[1-9]/u.test(intent.limit.value), { message: "Budget cap must be positive and use the Budget asset" })), Struct({ type: Literal("managePeople") })]);
 	//#endregion
 	//#region ../../packages/protocol/src/permissions/replacement-schema.ts
@@ -20671,7 +20690,7 @@ ensure: Operation.action("documents.memos.ensure", {
 			Struct({
 				type: Literal("new_budget"),
 				label: String$1.pipe(refine((value) => value.trim().length >= 1 && value.trim().length <= 128)),
-				intent: BudgetIntentSchema
+				intent: BudgetIntentSchema.pipe(refine((intent) => intent.refill !== "monthly", { message: "An invitation's new Budget cannot refill; change it once granted" }))
 			})
 		])).pipe(refine((grants) => {
 			if (grants.length < 1 || grants.length > 16) return false;
@@ -23679,7 +23698,9 @@ complete: Operation.mutation("profiles.onboardings.complete", {
 				emitSafeConfirmed: "accounts.safes.emitSafeConfirmed",
 				readSafe: "accounts.safes.readSafe",
 				recordDeployment: "accounts.safes.recordDeployment"
-			}
+			},
+			/** The home's requests to pay and Payments to retry, read in one query. */
+			summaries: { loadNeedsYou: "accounts.summaries.loadNeedsYou" }
 		},
 		/** The host observer's names for `client.approvals.*`. */
 		approvals: {
@@ -23938,7 +23959,9 @@ emitSaved: "activity.annotations.emitSaved" },
 			pay: "organizationPayments.pay",
 			payBatch: "organizationPayments.payBatch",
 			prepareExecution: "organizationPayments.prepareExecution",
-			retry: "organizationPayments.retry"
+			retry: "organizationPayments.retry",
+			cancel: "organizationPayments.cancel",
+			redirect: "organizationPayments.redirect"
 		},
 		/**
 		* Payments' internal functions and the client's own method names; its public
@@ -23960,7 +23983,9 @@ emitSaved: "activity.annotations.emitSaved" },
 				loadContext: "payments.commands.loadContext",
 				loadExecutionContext: "payments.commands.loadExecutionContext",
 				/** The capped Budget a prepared Organization command spends from, before its allowance is read on chain. */
-				loadBudgetAllowance: "payments.commands.loadBudgetAllowance"
+				loadBudgetAllowance: "payments.commands.loadBudgetAllowance",
+				/** What a new Payment command would spend and from which Safe, read before it is born. */
+				loadBirthFunding: "payments.commands.loadBirthFunding"
 			},
 			lifecycles: { prepareIntent: "payments.lifecycles.prepareIntent" },
 			/** The stored UserOperation of every money command: Payment, Permission and configuration. */
@@ -24391,6 +24416,42 @@ emitChanged: "payroll.groups.emitChanged" }
 		organization_id: OptionalOrgId,
 		reason_code: OptionalReasonCode
 	};
+	/**
+	* A journey's variants (`JOURNEYS`): the way a person came into a journey, or
+	* the way they took through it. A variant is a property of the journey's step
+	* events, never a journey of its own, so each journey funnel breaks down by
+	* it. A step event takes only the variants that a journey contract names on
+	* it, picked one by one; the analytics plan test checks both directions.
+	* `pay_path` and `funding_source` have no carrier until their Phase 2 events.
+	* `payment_*` events already carry `recipient_is_capxul_account`, and
+	* `invoice_issued` carries `issuer_scope_kind`; neither is repeated here.
+	*/
+	const JourneyVariantProps = {
+		/** How a person came to Get started: by themselves, an invite, money that waited, or an invoice. */
+		entry_path: optional(Literals([
+			"signup",
+			"invite",
+			"claim",
+			"invoice"
+		])),
+		/** Where the person acted. `agent` is an AI agent driving the CLI. */
+		surface: optional(Literals([
+			"web",
+			"cli",
+			"agent"
+		])),
+		/** Who pays: a person from their own account, or an Organization from a Budget. */
+		payer_kind: optional(Literals(["person", "organization"])),
+		/** How a request was paid: from the payer's inbox, or by its link at checkout. */
+		pay_path: optional(Literals(["inbox", "link"])),
+		/** Where an account's first money came from. `bank` is the planned on-ramp. */
+		funding_source: optional(Literals([
+			"deposit",
+			"payment",
+			"claim",
+			"bank"
+		]))
+	};
 	//#endregion
 	//#region ../../packages/observability/src/events/money.ts
 	/**
@@ -24480,6 +24541,8 @@ emitChanged: "payroll.groups.emitChanged" }
 		execution_id: OptionalString,
 		payment_lifecycle_id: OptionalString,
 		...TelemetryEnvelopeProps,
+		payer_kind: JourneyVariantProps.payer_kind,
+		surface: JourneyVariantProps.surface,
 		...RecipientTelemetryProps,
 		kind: String$1,
 		payment_id: String$1
@@ -24495,6 +24558,8 @@ emitChanged: "payroll.groups.emitChanged" }
 	const PaymentSettledL2Props = Struct({
 		...PaymentLifecycleProps,
 		...TelemetryEnvelopeProps,
+		payer_kind: JourneyVariantProps.payer_kind,
+		surface: JourneyVariantProps.surface,
 		...RecipientTelemetryProps,
 		kind: String$1,
 		chain_id: Finite,
@@ -24702,6 +24767,7 @@ emitChanged: "payroll.groups.emitChanged" }
 	});
 	const OrganizationCreationReadyProps = Struct({
 		...TelemetryEnvelopeProps,
+		surface: JourneyVariantProps.surface,
 		$insert_id: String$1,
 		organization_id: OrgIdTelemetrySchema,
 		attempt_number: AttemptNumberSchema,
@@ -24726,45 +24792,6 @@ emitChanged: "payroll.groups.emitChanged" }
 			...ORGANIZATION_SETUP_REASONS
 		]))
 	});
-	const OrgCreateStartedProps = Struct({
-		...TelemetryEnvelopeProps,
-		org_id: OptionalOrgId,
-		email_domain: OptionalString,
-		template: OptionalString
-	});
-	const OrgSafeCreatedProps = Struct({
-		...TelemetryEnvelopeProps,
-		org_id: OptionalOrgId,
-		chainId: OptionalChainId,
-		safe_address: OptionalAddress
-	});
-	const OrgSafeConfirmedProps = Struct({
-		...TelemetryEnvelopeProps,
-		org_id: OptionalOrgId,
-		chainId: OptionalChainId,
-		safe_address: OptionalAddress,
-		durationMs: OptionalDurationMs
-	});
-	const OrgRolesSeededProps = Struct({
-		...TelemetryEnvelopeProps,
-		org_id: OptionalOrgId,
-		chainId: OptionalChainId,
-		role: OptionalString,
-		txHash: OptionalTxHash
-	});
-	const OrgCreatedProps = Struct({
-		...TelemetryEnvelopeProps,
-		org_id: OptionalOrgId,
-		chainId: OptionalChainId,
-		safe_address: OptionalAddress,
-		durationMs: OptionalDurationMs
-	});
-	const OrgCreateFailedProps = Struct({
-		...TelemetryEnvelopeProps,
-		...ChainCauseTelemetryProps,
-		org_id: OptionalOrgId,
-		reason: OptionalString
-	});
 	const OrgInviteSentProps = Struct({
 		...TelemetryEnvelopeProps,
 		org_id: OptionalOrgId,
@@ -24809,30 +24836,6 @@ emitChanged: "payroll.groups.emitChanged" }
 		name: Literal("organization_creation_failed"),
 		props: OrganizationCreationFailedProps
 	});
-	Struct({
-		name: Literal("org_create_started"),
-		props: OrgCreateStartedProps
-	});
-	Struct({
-		name: Literal("org_safe_created"),
-		props: OrgSafeCreatedProps
-	});
-	Struct({
-		name: Literal("org_safe_confirmed"),
-		props: OrgSafeConfirmedProps
-	});
-	Struct({
-		name: Literal("org_roles_seeded"),
-		props: OrgRolesSeededProps
-	});
-	Struct({
-		name: Literal("org_created"),
-		props: OrgCreatedProps
-	});
-	Struct({
-		name: Literal("org_create_failed"),
-		props: OrgCreateFailedProps
-	});
 	Struct({
 		name: Literal("org_invite_sent"),
 		props: OrgInviteSentProps
@@ -25706,10 +25709,14 @@ emitChanged: "payroll.groups.emitChanged" }
 	});
 	const MemberActivationStartedProps = Struct({
 		...TelemetryEnvelopeProps,
+		entry_path: JourneyVariantProps.entry_path,
+		surface: JourneyVariantProps.surface,
 		$insert_id: String$1
 	});
 	const MemberActivationReadyProps = Struct({
 		...TelemetryEnvelopeProps,
+		entry_path: JourneyVariantProps.entry_path,
+		surface: JourneyVariantProps.surface,
 		$insert_id: String$1,
 		duration_ms: DurationMsSchema
 	});
@@ -27531,6 +27538,7 @@ emitChanged: "payroll.groups.emitChanged" }
 	paymentsV2Signature("send");
 	paymentsV2Signature("sendBatch");
 	paymentsV2Signature("createCommitment");
+	paymentsV2Signature("cancel"), paymentsV2Signature("redirect");
 	//#endregion
 	//#region ../../packages/protocol/src/evm/organization-payments.ts
 	/** Supported Organization permission identities, newest first. */