@capxul/observability 1.1.0

package/dist/index.mjs

@@ -0,0 +1,1514 @@
+import { Effect, Schema, SchemaGetter } from "effect";
+new Set([
+	"NOT_AUTHENTICATED",
+	"EMAIL_DELIVERY_FAILED",
+	"PROFILE_NOT_FOUND",
+	"SMART_ACCOUNT_MISSING",
+	"PLAYER_NOT_FOUND",
+	"ACCOUNT_NOT_FOUND",
+	"PROVIDER_ERROR",
+	"INVALID_INPUT",
+	"ENV_MISSING",
+	"NOT_IMPLEMENTED",
+	"VERIFICATION_REQUIRED",
+	"INSUFFICIENT_BALANCE",
+	"INVALID_RECIPIENT",
+	"ROLE_PERMISSION_DENIED",
+	"TRANSACTION_FAILED",
+	"RATE_LIMITED",
+	"NETWORK_ERROR",
+	"UNKNOWN",
+	"OTP_EXPIRED",
+	"SIGNER_REJECTED",
+	"CANCELLED",
+	"WRONG_STATE",
+	"STALE_EPOCH",
+	"SUPERSEDED",
+	"WORK_DIED",
+	"ACTOR_STOPPED"
+]);
+//#endregion
+//#region ../types/src/index.ts
+const EVM_ADDRESS_RE = /^0x[0-9a-f]{40}$/i;
+const BYTES32_RE = /^0x[0-9a-f]{64}$/i;
+const SUPPORTED_CURRENCIES = [
+	{
+		code: "USD",
+		symbol: "$",
+		name: "US Dollar"
+	},
+	{
+		code: "NGN",
+		symbol: "NGN",
+		name: "Nigerian Naira"
+	},
+	{
+		code: "GHS",
+		symbol: "GHS",
+		name: "Ghanaian Cedi"
+	},
+	{
+		code: "KES",
+		symbol: "KSh",
+		name: "Kenyan Shilling"
+	},
+	{
+		code: "UGX",
+		symbol: "USh",
+		name: "Ugandan Shilling"
+	}
+];
+SUPPORTED_CURRENCIES.map((currency) => currency.code);
+Object.fromEntries(SUPPORTED_CURRENCIES.map((currency) => [currency.code, currency.symbol]));
+const APP_ID_RE = /^app_[0-7][0-9A-HJKMNP-TV-Z]{25}$/;
+Math.floor(Number.MAX_SAFE_INTEGER / 1e3);
+//#endregion
+//#region src/index.ts
+const TELEMETRY_EVENT_NAMES = [
+	"auth_otp_requested",
+	"auth_otp_delivered",
+	"auth_otp_expired",
+	"auth_verified",
+	"auth_failed",
+	"auth_signed_out",
+	"provisioning_safe_created",
+	"provisioning_safe_confirmed",
+	"bootstrap_resolved",
+	"bootstrap_failed",
+	"member_activation_started",
+	"member_activation_ready",
+	"member_activation_failed",
+	"organization_creation_started",
+	"organization_creation_ready",
+	"organization_creation_failed",
+	"account_balance_read",
+	"account_balance_failed",
+	"faucet_requested",
+	"faucet_confirmed",
+	"faucet_failed",
+	"subaccount_created",
+	"subaccount_renamed",
+	"subaccount_deleted",
+	"subaccount_op_failed",
+	"transfer_requested",
+	"transfer_backend_received",
+	"transfer_confirmed",
+	"transfer_failed",
+	"org_create_started",
+	"org_safe_created",
+	"org_safe_confirmed",
+	"org_roles_seeded",
+	"org_created",
+	"org_create_failed",
+	"org_invite_sent",
+	"org_invite_accepted",
+	"org_role_granted",
+	"org_member_active",
+	"org_member_removed",
+	"org_invite_expired",
+	"org_role_grant_failed",
+	"payment_requested",
+	"payment_resolved",
+	"payment_document_attached",
+	"payment_submitted",
+	"payment_settled",
+	"payment_claimed",
+	"payment_cancelled",
+	"payment_redirected",
+	"payment_failed",
+	"stream_created",
+	"stream_claimed",
+	"stream_cancelled",
+	"stream_completed",
+	"stream_failed",
+	"withdrawal_requested",
+	"withdrawal_submitted",
+	"withdrawal_settled",
+	"withdrawal_failed"
+];
+const TELEMETRY_JOURNEYS = {
+	returning_user_login: {
+		type: "funnel",
+		steps: [
+			"auth_otp_requested",
+			"auth_otp_delivered",
+			"auth_verified"
+		],
+		drops_on: ["auth_otp_expired", "auth_failed"]
+	},
+	new_user_first_signin: {
+		type: "funnel",
+		steps: [
+			"auth_otp_requested",
+			"auth_otp_delivered",
+			"auth_verified",
+			"provisioning_safe_created",
+			"provisioning_safe_confirmed"
+		],
+		drops_on: ["auth_otp_expired", "auth_failed"]
+	},
+	sign_out_session_close: {
+		type: "point_event",
+		point_event: "auth_signed_out"
+	},
+	member_activation: {
+		type: "funnel",
+		steps: ["member_activation_started", "member_activation_ready"],
+		drops_on: ["member_activation_failed"]
+	},
+	organization_creation_lifecycle: {
+		type: "funnel",
+		steps: ["organization_creation_started", "organization_creation_ready"],
+		drops_on: ["organization_creation_failed"]
+	},
+	money_on_screen: {
+		type: "point_event",
+		point_event: "account_balance_read"
+	},
+	fund_account: {
+		type: "funnel",
+		steps: ["faucet_requested", "faucet_confirmed"],
+		drops_on: ["faucet_failed"]
+	},
+	first_value_movement: {
+		type: "funnel",
+		steps: [
+			"account_balance_read",
+			"transfer_requested",
+			"transfer_confirmed"
+		],
+		drops_on: ["transfer_failed"]
+	},
+	subaccount_lifecycle: {
+		type: "point_event",
+		point_event: "subaccount_created"
+	},
+	org_creation: {
+		type: "funnel",
+		steps: [
+			"org_create_started",
+			"org_safe_created",
+			"org_safe_confirmed",
+			"org_roles_seeded",
+			"org_created"
+		],
+		drops_on: ["org_create_failed"]
+	},
+	org_member_onboarding: {
+		type: "funnel",
+		steps: [
+			"org_invite_sent",
+			"org_invite_accepted",
+			"org_role_granted",
+			"org_member_active"
+		],
+		drops_on: ["org_invite_expired", "org_role_grant_failed"]
+	},
+	direct_payment: {
+		type: "funnel",
+		steps: [
+			"payment_requested",
+			"payment_resolved",
+			"payment_document_attached",
+			"payment_submitted",
+			"payment_settled"
+		],
+		drops_on: ["payment_failed"]
+	},
+	commitment_claim: {
+		type: "funnel",
+		steps: ["payment_submitted", "payment_claimed"],
+		drops_on: ["payment_cancelled"]
+	},
+	commitment_redirect: {
+		type: "point_event",
+		point_event: "payment_redirected"
+	},
+	salary_stream: {
+		type: "funnel",
+		steps: [
+			"stream_created",
+			"stream_claimed",
+			"stream_completed"
+		],
+		drops_on: ["stream_cancelled", "stream_failed"]
+	},
+	cash_out: {
+		type: "funnel",
+		steps: [
+			"withdrawal_requested",
+			"withdrawal_submitted",
+			"withdrawal_settled"
+		],
+		drops_on: ["withdrawal_failed"]
+	}
+};
+const PII = Schema.String.pipe(Schema.brand("PII"));
+const OptionalString = Schema.optional(Schema.String);
+const AddressSchema = Schema.String.pipe(Schema.decodeTo(Schema.String, {
+	decode: SchemaGetter.transform((value) => value.toLowerCase()),
+	encode: SchemaGetter.transform((value) => value)
+}), Schema.refine((value) => EVM_ADDRESS_RE.test(value), { message: "must be 0x + 40 hex chars" }));
+const AppIdSchema = Schema.String.pipe(Schema.refine((value) => APP_ID_RE.test(value), { message: "must be app_ plus a ULID" }));
+const BlockNumberSchema = Schema.Number.pipe(Schema.refine((value) => Number.isSafeInteger(value) && value >= 0, { message: "must be a non-negative safe integer" }));
+const ChainIdSchema = Schema.Number.pipe(Schema.refine((value) => Number.isSafeInteger(value) && value > 0, { message: "must be a positive safe integer" }));
+const DurationMsSchema = Schema.Number.pipe(Schema.refine((value) => Number.isSafeInteger(value) && value >= 0, { message: "must be a non-negative safe integer" }));
+const EpochMsSchema = Schema.Number.pipe(Schema.refine((value) => Number.isSafeInteger(value) && value >= 0, { message: "must be a non-negative safe integer" }));
+const PublishableKeyIdSchema = Schema.String.pipe(Schema.refine((value) => value.length > 0, { message: "must be a non-empty string" }));
+const TxHashSchema = Schema.String.pipe(Schema.refine((value) => BYTES32_RE.test(value), { message: "must be 0x + 64 hex chars" }));
+const ACCOUNT_ID_TELEMETRY_RE = /^account_[0-9A-Za-z]+$/;
+const SUBACCOUNT_ID_TELEMETRY_RE = /^subaccount_[0-9A-Za-z]+$/;
+const WEI_AMOUNT_TELEMETRY_RE = /^[0-9]+$/;
+const AccountIdSchema = Schema.String.pipe(Schema.refine((value) => ACCOUNT_ID_TELEMETRY_RE.test(value), { message: "must be account_ plus an alphanumeric id" }));
+const SubAccountIdSchema = Schema.String.pipe(Schema.refine((value) => SUBACCOUNT_ID_TELEMETRY_RE.test(value), { message: "must be subaccount_ plus an alphanumeric id" }));
+const WeiAmountSchema = Schema.String.pipe(Schema.refine((value) => WEI_AMOUNT_TELEMETRY_RE.test(value), { message: "must be a non-negative integer string" }));
+const CurrencyCodeSchema = Schema.String.pipe(Schema.refine((value) => value.length > 0, { message: "must be a non-empty currency code" }));
+const BalanceBucketSchema = Schema.Literals(["zero", "nonzero"]);
+const TransferDirectionSchema = Schema.Literals([
+	"add",
+	"out",
+	"between"
+]);
+const SubAccountOpSchema = Schema.Literals([
+	"create",
+	"rename",
+	"delete"
+]);
+const OptionalAccountId = Schema.optional(AccountIdSchema);
+const OptionalSubAccountId = Schema.optional(SubAccountIdSchema);
+const OptionalWeiAmount = Schema.optional(WeiAmountSchema);
+const OptionalCurrencyCode = Schema.optional(CurrencyCodeSchema);
+const OptionalBalanceBucket = Schema.optional(BalanceBucketSchema);
+const OptionalTransferDirection = Schema.optional(TransferDirectionSchema);
+const OptionalSubAccountOp = Schema.optional(SubAccountOpSchema);
+const OptionalTrue = Schema.optional(Schema.Literal(true));
+const OptionalAddress = Schema.optional(AddressSchema);
+const OptionalAppId = Schema.optional(AppIdSchema);
+const OptionalBlockNumber = Schema.optional(BlockNumberSchema);
+const OptionalChainId = Schema.optional(ChainIdSchema);
+const OptionalDurationMs = Schema.optional(DurationMsSchema);
+const OptionalEpochMs = Schema.optional(EpochMsSchema);
+const OptionalPublishableKeyId = Schema.optional(PublishableKeyIdSchema);
+const OptionalTxHash = Schema.optional(TxHashSchema);
+const PAYMENT_ID_TELEMETRY_RE = /^payment_[0-9A-Za-z]+$/;
+const PAYEE_ID_TELEMETRY_RE = /^payee_[0-9A-Za-z]+$/;
+const PaymentIdTelemetrySchema = Schema.String.pipe(Schema.refine((value) => PAYMENT_ID_TELEMETRY_RE.test(value), { message: "must be payment_ plus an alphanumeric id" }));
+const PayeeIdTelemetrySchema = Schema.String.pipe(Schema.refine((value) => PAYEE_ID_TELEMETRY_RE.test(value), { message: "must be payee_ plus an alphanumeric id" }));
+const DocumentHashSchema = Schema.String.pipe(Schema.refine((value) => BYTES32_RE.test(value), { message: "must be 0x + 64 hex chars" }));
+/**
+* Environment discriminator (ADR-0020 A1 amendment, 2026-08-07). PostHog
+* project 368736 is the SINGLE sink for every environment, so `capxul_env` —
+* not project isolation — is what keeps a production surface from reading dev
+* traffic. It is REQUIRED on every catalog event and every synced artifact
+* filters on it.
+*
+* `unknown` is a defect marker, not an environment: it means a producer
+* reached the transport without declaring where it runs. It is in the union so
+* the property is never ABSENT (an absent property is invisible to a filter,
+* a present `unknown` is loud), and sync v2 never synthesizes an artifact for
+* it.
+*/
+const CAPXUL_ENVS = [
+	"development",
+	"e2e",
+	"staging",
+	"production",
+	"unknown"
+];
+/** Environments a synced product surface may be built for (`unknown` cannot). */
+const SYNCABLE_CAPXUL_ENVS = [
+	"development",
+	"e2e",
+	"staging",
+	"production"
+];
+/**
+* Which half of the system emitted the event. REQUIRED alongside `capxul_env`
+* so a name that two halves can produce (settlement, auth) stays attributable.
+*/
+const TELEMETRY_PRODUCERS = [
+	"server",
+	"browser",
+	"sdk",
+	"mcp",
+	"e2e"
+];
+/**
+* The canonical envelope (ADR-0020 A4): snake_case ONLY. `capxul_env` and
+* `producer` are REQUIRED — a boundary that forgets to stamp them fails schema
+* decode instead of silently shipping an unattributable event. Call sites do
+* not pass them: `stampTelemetryEnvelope` injects them at the emit boundary,
+* which is the only place that knows where the process runs.
+*/
+const TelemetryEnvelopeProps = {
+	capxul_env: Schema.Literals(CAPXUL_ENVS),
+	producer: Schema.Literals(TELEMETRY_PRODUCERS),
+	capxul_e2e_run_id: OptionalString,
+	journey_id: OptionalString,
+	correlation_id: OptionalString,
+	sdk_version: OptionalString
+};
+/**
+* Stamp the required envelope onto an event at its emit boundary. Call-site
+* props win on conflict: a relay that already knows the true producer (the
+* browser-failure relay stamps `browser` while running on the server) must not
+* be overwritten by the transport's own default.
+*/
+function stampTelemetryEnvelope(event, defaults) {
+	return {
+		name: event.name,
+		props: {
+			...defaults,
+			...event.props
+		}
+	};
+}
+const AuthOtpRequestedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	email: Schema.optional(PII),
+	email_domain: OptionalString
+});
+const AuthOtpDeliveredProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	durationMs: OptionalDurationMs,
+	email: Schema.optional(PII),
+	email_domain: OptionalString,
+	resendMessageId: OptionalString
+});
+const AuthOtpExpiredProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	email: Schema.optional(PII),
+	email_domain: OptionalString
+});
+const AuthVerifiedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	auth_type: OptionalString
+});
+const AuthFailedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	email: Schema.optional(PII),
+	auth_type: OptionalString,
+	reason: OptionalString
+});
+const AuthSignedOutProps = Schema.Struct(TelemetryEnvelopeProps);
+const ProvisioningSafeCreatedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	safe_address: OptionalAddress
+});
+const ProvisioningSafeConfirmedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	chainId: OptionalChainId,
+	deployedAt: OptionalEpochMs,
+	deployedAtBlock: OptionalBlockNumber,
+	deployTxHash: OptionalTxHash,
+	durationMs: OptionalDurationMs,
+	safe_address: OptionalAddress,
+	userOpHash: OptionalTxHash
+});
+const BootstrapResolvedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	applicationId: OptionalAppId,
+	durationMs: OptionalDurationMs,
+	env: OptionalString,
+	keyId: OptionalPublishableKeyId,
+	origin: OptionalString
+});
+const BootstrapFailedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	applicationId: OptionalAppId,
+	durationMs: OptionalDurationMs,
+	origin: OptionalString,
+	reason: OptionalString
+});
+const AccountBalanceReadProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	account_id: OptionalAccountId,
+	currency: OptionalCurrencyCode,
+	balance_bucket: OptionalBalanceBucket,
+	durationMs: OptionalDurationMs
+});
+const AccountBalanceFailedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	reason: OptionalString
+});
+const FaucetRequestedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	amount: OptionalWeiAmount,
+	chainId: OptionalChainId
+});
+const FaucetConfirmedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	amount: OptionalWeiAmount,
+	chainId: OptionalChainId,
+	txHash: OptionalTxHash,
+	durationMs: OptionalDurationMs
+});
+const FaucetFailedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	reason: OptionalString
+});
+const SubaccountCreatedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	sub_account_id: OptionalSubAccountId,
+	durationMs: OptionalDurationMs
+});
+const SubaccountRenamedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	sub_account_id: OptionalSubAccountId
+});
+const SubaccountDeletedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	sub_account_id: OptionalSubAccountId
+});
+const SubaccountOpFailedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	op: OptionalSubAccountOp,
+	reason: OptionalString
+});
+const TransferRequestedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	amount: OptionalWeiAmount,
+	direction: OptionalTransferDirection
+});
+const TransferBackendReceivedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	direction: OptionalTransferDirection
+});
+const TransferConfirmedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	amount: OptionalWeiAmount,
+	direction: OptionalTransferDirection,
+	available_bucket: OptionalBalanceBucket,
+	txless: OptionalTrue,
+	durationMs: OptionalDurationMs
+});
+const TransferFailedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	reason: OptionalString
+});
+const ORG_ID_TELEMETRY_RE = /^org_[0-9A-Za-z]+$/;
+const OrgIdTelemetrySchema = Schema.String.pipe(Schema.refine((value) => ORG_ID_TELEMETRY_RE.test(value), { message: "must be org_ plus an alphanumeric id" }));
+const OptionalOrgId = Schema.optional(OrgIdTelemetrySchema);
+const AttemptNumberSchema = Schema.Number.pipe(Schema.refine((value) => Number.isSafeInteger(value) && value > 0, { message: "must be a positive safe integer" }));
+const OnboardingStageSchema = Schema.Literals([
+	"profile",
+	"accountProvisioning",
+	"accountClaim",
+	"preparingFounderAccount",
+	"awaitingFounderAuthorization",
+	"submittingBootstrap",
+	"confirmingBootstrap"
+]);
+const MemberActivationStartedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	$insert_id: Schema.String
+});
+const MemberActivationReadyProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	$insert_id: Schema.String,
+	duration_ms: DurationMsSchema
+});
+const MemberActivationFailedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	$insert_id: Schema.String,
+	stage: OnboardingStageSchema,
+	error_code: Schema.String,
+	retryable: Schema.Boolean
+});
+const OrganizationCreationStartedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	$insert_id: Schema.String,
+	organization_id: OrgIdTelemetrySchema,
+	attempt_number: AttemptNumberSchema
+});
+const OrganizationCreationReadyProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	$insert_id: Schema.String,
+	organization_id: OrgIdTelemetrySchema,
+	attempt_number: AttemptNumberSchema,
+	duration_ms: DurationMsSchema
+});
+const OrganizationCreationFailedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	$insert_id: Schema.String,
+	organization_id: OrgIdTelemetrySchema,
+	attempt_number: AttemptNumberSchema,
+	stage: OnboardingStageSchema,
+	error_code: Schema.String,
+	retryable: Schema.Boolean
+});
+const OrgCreateStartedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	org_id: OptionalOrgId,
+	email_domain: OptionalString,
+	template: OptionalString
+});
+const OrgSafeCreatedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	org_id: OptionalOrgId,
+	chainId: OptionalChainId,
+	safe_address: OptionalAddress
+});
+const OrgSafeConfirmedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	org_id: OptionalOrgId,
+	chainId: OptionalChainId,
+	safe_address: OptionalAddress,
+	durationMs: OptionalDurationMs
+});
+const OrgRolesSeededProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	org_id: OptionalOrgId,
+	chainId: OptionalChainId,
+	role: OptionalString,
+	txHash: OptionalTxHash
+});
+const OrgCreatedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	org_id: OptionalOrgId,
+	chainId: OptionalChainId,
+	safe_address: OptionalAddress,
+	durationMs: OptionalDurationMs
+});
+const OrgCreateFailedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	org_id: OptionalOrgId,
+	reason: OptionalString
+});
+const OrgInviteSentProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	org_id: OptionalOrgId,
+	email_domain: OptionalString,
+	role: OptionalString,
+	status: OptionalString
+});
+const OrgInviteAcceptedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	org_id: OptionalOrgId,
+	role: OptionalString,
+	status: OptionalString
+});
+const OrgRoleGrantedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	org_id: OptionalOrgId,
+	role: OptionalString,
+	status: OptionalString,
+	txHash: OptionalTxHash
+});
+const OrgMemberActiveProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	org_id: OptionalOrgId,
+	role: OptionalString,
+	status: OptionalString,
+	durationMs: OptionalDurationMs
+});
+const OrgMemberRemovedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	org_id: OptionalOrgId,
+	role: OptionalString,
+	status: OptionalString,
+	txHash: OptionalTxHash
+});
+const OrgInviteExpiredProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	org_id: OptionalOrgId,
+	email_domain: OptionalString,
+	reason: OptionalString,
+	role: OptionalString,
+	status: OptionalString
+});
+const OrgRoleGrantFailedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	org_id: OptionalOrgId,
+	reason: OptionalString,
+	role: OptionalString
+});
+const OptionalPaymentId = Schema.optional(PaymentIdTelemetrySchema);
+const OptionalPayeeId = Schema.optional(PayeeIdTelemetrySchema);
+const OptionalDocumentHash = Schema.optional(DocumentHashSchema);
+const PaymentTargetTelemetryProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	payment_id: OptionalPaymentId,
+	payee_id: OptionalPayeeId,
+	document_hash: OptionalDocumentHash,
+	amount: OptionalWeiAmount,
+	currency: OptionalCurrencyCode,
+	status: OptionalString,
+	reason: OptionalString,
+	durationMs: OptionalDurationMs
+});
+const StreamTargetTelemetryProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	payment_id: OptionalPaymentId,
+	document_hash: OptionalDocumentHash,
+	amount: OptionalWeiAmount,
+	currency: OptionalCurrencyCode,
+	status: OptionalString,
+	available_bucket: OptionalBalanceBucket,
+	reason: OptionalString,
+	durationMs: OptionalDurationMs
+});
+const WithdrawalTargetTelemetryProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	payment_id: OptionalPaymentId,
+	document_hash: OptionalDocumentHash,
+	amount: OptionalWeiAmount,
+	currency: OptionalCurrencyCode,
+	status: OptionalString,
+	reason: OptionalString,
+	durationMs: OptionalDurationMs
+});
+const AuthOtpRequestedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("auth_otp_requested"),
+	props: AuthOtpRequestedProps
+});
+const AuthOtpDeliveredTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("auth_otp_delivered"),
+	props: AuthOtpDeliveredProps
+});
+const AuthOtpExpiredTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("auth_otp_expired"),
+	props: AuthOtpExpiredProps
+});
+const AuthVerifiedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("auth_verified"),
+	props: AuthVerifiedProps
+});
+const AuthFailedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("auth_failed"),
+	props: AuthFailedProps
+});
+const AuthSignedOutTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("auth_signed_out"),
+	props: AuthSignedOutProps
+});
+const ProvisioningSafeCreatedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("provisioning_safe_created"),
+	props: ProvisioningSafeCreatedProps
+});
+const ProvisioningSafeConfirmedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("provisioning_safe_confirmed"),
+	props: ProvisioningSafeConfirmedProps
+});
+const BootstrapResolvedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("bootstrap_resolved"),
+	props: BootstrapResolvedProps
+});
+const BootstrapFailedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("bootstrap_failed"),
+	props: BootstrapFailedProps
+});
+const MemberActivationStartedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("member_activation_started"),
+	props: MemberActivationStartedProps
+});
+const MemberActivationReadyTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("member_activation_ready"),
+	props: MemberActivationReadyProps
+});
+const MemberActivationFailedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("member_activation_failed"),
+	props: MemberActivationFailedProps
+});
+const OrganizationCreationStartedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("organization_creation_started"),
+	props: OrganizationCreationStartedProps
+});
+const OrganizationCreationReadyTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("organization_creation_ready"),
+	props: OrganizationCreationReadyProps
+});
+const OrganizationCreationFailedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("organization_creation_failed"),
+	props: OrganizationCreationFailedProps
+});
+const AccountBalanceReadTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("account_balance_read"),
+	props: AccountBalanceReadProps
+});
+const AccountBalanceFailedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("account_balance_failed"),
+	props: AccountBalanceFailedProps
+});
+const FaucetRequestedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("faucet_requested"),
+	props: FaucetRequestedProps
+});
+const FaucetConfirmedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("faucet_confirmed"),
+	props: FaucetConfirmedProps
+});
+const FaucetFailedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("faucet_failed"),
+	props: FaucetFailedProps
+});
+const SubaccountCreatedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("subaccount_created"),
+	props: SubaccountCreatedProps
+});
+const SubaccountRenamedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("subaccount_renamed"),
+	props: SubaccountRenamedProps
+});
+const SubaccountDeletedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("subaccount_deleted"),
+	props: SubaccountDeletedProps
+});
+const SubaccountOpFailedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("subaccount_op_failed"),
+	props: SubaccountOpFailedProps
+});
+const TransferRequestedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("transfer_requested"),
+	props: TransferRequestedProps
+});
+const TransferBackendReceivedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("transfer_backend_received"),
+	props: TransferBackendReceivedProps
+});
+const TransferConfirmedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("transfer_confirmed"),
+	props: TransferConfirmedProps
+});
+const TransferFailedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("transfer_failed"),
+	props: TransferFailedProps
+});
+const OrgCreateStartedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("org_create_started"),
+	props: OrgCreateStartedProps
+});
+const OrgSafeCreatedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("org_safe_created"),
+	props: OrgSafeCreatedProps
+});
+const OrgSafeConfirmedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("org_safe_confirmed"),
+	props: OrgSafeConfirmedProps
+});
+const OrgRolesSeededTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("org_roles_seeded"),
+	props: OrgRolesSeededProps
+});
+const OrgCreatedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("org_created"),
+	props: OrgCreatedProps
+});
+const OrgCreateFailedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("org_create_failed"),
+	props: OrgCreateFailedProps
+});
+const OrgInviteSentTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("org_invite_sent"),
+	props: OrgInviteSentProps
+});
+const OrgInviteAcceptedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("org_invite_accepted"),
+	props: OrgInviteAcceptedProps
+});
+const OrgRoleGrantedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("org_role_granted"),
+	props: OrgRoleGrantedProps
+});
+const OrgMemberActiveTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("org_member_active"),
+	props: OrgMemberActiveProps
+});
+const OrgMemberRemovedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("org_member_removed"),
+	props: OrgMemberRemovedProps
+});
+const OrgInviteExpiredTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("org_invite_expired"),
+	props: OrgInviteExpiredProps
+});
+const OrgRoleGrantFailedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("org_role_grant_failed"),
+	props: OrgRoleGrantFailedProps
+});
+const PaymentRequestedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("payment_requested"),
+	props: PaymentTargetTelemetryProps
+});
+const PaymentResolvedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("payment_resolved"),
+	props: PaymentTargetTelemetryProps
+});
+const PaymentDocumentAttachedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("payment_document_attached"),
+	props: PaymentTargetTelemetryProps
+});
+const PaymentSubmittedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("payment_submitted"),
+	props: PaymentTargetTelemetryProps
+});
+const PaymentSettledTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("payment_settled"),
+	props: PaymentTargetTelemetryProps
+});
+const PaymentClaimedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("payment_claimed"),
+	props: PaymentTargetTelemetryProps
+});
+const PaymentCancelledTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("payment_cancelled"),
+	props: PaymentTargetTelemetryProps
+});
+const PaymentRedirectedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("payment_redirected"),
+	props: PaymentTargetTelemetryProps
+});
+const PaymentFailedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("payment_failed"),
+	props: PaymentTargetTelemetryProps
+});
+const StreamCreatedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("stream_created"),
+	props: StreamTargetTelemetryProps
+});
+const StreamClaimedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("stream_claimed"),
+	props: StreamTargetTelemetryProps
+});
+const StreamCancelledTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("stream_cancelled"),
+	props: StreamTargetTelemetryProps
+});
+const StreamCompletedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("stream_completed"),
+	props: StreamTargetTelemetryProps
+});
+const StreamFailedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("stream_failed"),
+	props: StreamTargetTelemetryProps
+});
+const WithdrawalRequestedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("withdrawal_requested"),
+	props: WithdrawalTargetTelemetryProps
+});
+const WithdrawalSubmittedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("withdrawal_submitted"),
+	props: WithdrawalTargetTelemetryProps
+});
+const WithdrawalSettledTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("withdrawal_settled"),
+	props: WithdrawalTargetTelemetryProps
+});
+const WithdrawalFailedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("withdrawal_failed"),
+	props: WithdrawalTargetTelemetryProps
+});
+const TELEMETRY_EVENT_SCHEMAS = {
+	auth_otp_requested: AuthOtpRequestedTelemetryEventSchema,
+	auth_otp_delivered: AuthOtpDeliveredTelemetryEventSchema,
+	auth_otp_expired: AuthOtpExpiredTelemetryEventSchema,
+	auth_verified: AuthVerifiedTelemetryEventSchema,
+	auth_failed: AuthFailedTelemetryEventSchema,
+	auth_signed_out: AuthSignedOutTelemetryEventSchema,
+	provisioning_safe_created: ProvisioningSafeCreatedTelemetryEventSchema,
+	provisioning_safe_confirmed: ProvisioningSafeConfirmedTelemetryEventSchema,
+	bootstrap_resolved: BootstrapResolvedTelemetryEventSchema,
+	bootstrap_failed: BootstrapFailedTelemetryEventSchema,
+	member_activation_started: MemberActivationStartedTelemetryEventSchema,
+	member_activation_ready: MemberActivationReadyTelemetryEventSchema,
+	member_activation_failed: MemberActivationFailedTelemetryEventSchema,
+	organization_creation_started: OrganizationCreationStartedTelemetryEventSchema,
+	organization_creation_ready: OrganizationCreationReadyTelemetryEventSchema,
+	organization_creation_failed: OrganizationCreationFailedTelemetryEventSchema,
+	account_balance_read: AccountBalanceReadTelemetryEventSchema,
+	account_balance_failed: AccountBalanceFailedTelemetryEventSchema,
+	faucet_requested: FaucetRequestedTelemetryEventSchema,
+	faucet_confirmed: FaucetConfirmedTelemetryEventSchema,
+	faucet_failed: FaucetFailedTelemetryEventSchema,
+	subaccount_created: SubaccountCreatedTelemetryEventSchema,
+	subaccount_renamed: SubaccountRenamedTelemetryEventSchema,
+	subaccount_deleted: SubaccountDeletedTelemetryEventSchema,
+	subaccount_op_failed: SubaccountOpFailedTelemetryEventSchema,
+	transfer_requested: TransferRequestedTelemetryEventSchema,
+	transfer_backend_received: TransferBackendReceivedTelemetryEventSchema,
+	transfer_confirmed: TransferConfirmedTelemetryEventSchema,
+	transfer_failed: TransferFailedTelemetryEventSchema,
+	org_create_started: OrgCreateStartedTelemetryEventSchema,
+	org_safe_created: OrgSafeCreatedTelemetryEventSchema,
+	org_safe_confirmed: OrgSafeConfirmedTelemetryEventSchema,
+	org_roles_seeded: OrgRolesSeededTelemetryEventSchema,
+	org_created: OrgCreatedTelemetryEventSchema,
+	org_create_failed: OrgCreateFailedTelemetryEventSchema,
+	org_invite_sent: OrgInviteSentTelemetryEventSchema,
+	org_invite_accepted: OrgInviteAcceptedTelemetryEventSchema,
+	org_role_granted: OrgRoleGrantedTelemetryEventSchema,
+	org_member_active: OrgMemberActiveTelemetryEventSchema,
+	org_member_removed: OrgMemberRemovedTelemetryEventSchema,
+	org_invite_expired: OrgInviteExpiredTelemetryEventSchema,
+	org_role_grant_failed: OrgRoleGrantFailedTelemetryEventSchema,
+	payment_requested: PaymentRequestedTelemetryEventSchema,
+	payment_resolved: PaymentResolvedTelemetryEventSchema,
+	payment_document_attached: PaymentDocumentAttachedTelemetryEventSchema,
+	payment_submitted: PaymentSubmittedTelemetryEventSchema,
+	payment_settled: PaymentSettledTelemetryEventSchema,
+	payment_claimed: PaymentClaimedTelemetryEventSchema,
+	payment_cancelled: PaymentCancelledTelemetryEventSchema,
+	payment_redirected: PaymentRedirectedTelemetryEventSchema,
+	payment_failed: PaymentFailedTelemetryEventSchema,
+	stream_created: StreamCreatedTelemetryEventSchema,
+	stream_claimed: StreamClaimedTelemetryEventSchema,
+	stream_cancelled: StreamCancelledTelemetryEventSchema,
+	stream_completed: StreamCompletedTelemetryEventSchema,
+	stream_failed: StreamFailedTelemetryEventSchema,
+	withdrawal_requested: WithdrawalRequestedTelemetryEventSchema,
+	withdrawal_submitted: WithdrawalSubmittedTelemetryEventSchema,
+	withdrawal_settled: WithdrawalSettledTelemetryEventSchema,
+	withdrawal_failed: WithdrawalFailedTelemetryEventSchema
+};
+const FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS = [
+	{
+		eventName: "payment_requested",
+		ownerIssue: 410,
+		producer: "sdk-target"
+	},
+	{
+		eventName: "payment_resolved",
+		ownerIssue: 410,
+		producer: "sdk-target"
+	},
+	{
+		eventName: "payment_document_attached",
+		ownerIssue: 486,
+		producer: "sdk-target"
+	},
+	{
+		eventName: "payment_submitted",
+		ownerIssue: 410,
+		producer: "sdk-target"
+	},
+	{
+		eventName: "payment_failed",
+		ownerIssue: 410,
+		producer: "sdk-target"
+	},
+	{
+		eventName: "stream_created",
+		ownerIssue: 411,
+		producer: "sdk-target"
+	},
+	{
+		eventName: "stream_failed",
+		ownerIssue: 411,
+		producer: "sdk-target"
+	},
+	{
+		eventName: "withdrawal_requested",
+		ownerIssue: 410,
+		producer: "sdk-target"
+	},
+	{
+		eventName: "withdrawal_submitted",
+		ownerIssue: 410,
+		producer: "sdk-target"
+	},
+	{
+		eventName: "withdrawal_failed",
+		ownerIssue: 410,
+		producer: "sdk-target"
+	}
+];
+/**
+* Catalog events whose product mapper remains gated on the #1150 frontend
+* adoption. L1 S1 removes their retired SDK-flow producers without inventing
+* replacements inside the identity actor. The telemetry-spine gate enforces
+* planned-XOR-wired: a name must leave this list in the same change that adds
+* its real product-boundary producer.
+*/
+const PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS = [
+	"auth_otp_requested",
+	"auth_otp_expired",
+	"auth_verified",
+	"auth_failed",
+	"auth_signed_out"
+];
+let trackHandler = () => {};
+function setTrackHandler(handler) {
+	const previous = trackHandler;
+	trackHandler = handler;
+	return previous;
+}
+function getTrackHandler() {
+	return trackHandler;
+}
+function track(name, props) {
+	trackHandler(name, props);
+}
+function redactTelemetryEvent(event, options = {}) {
+	const props = redactTelemetryProps(event.name, event.props, options);
+	return props === void 0 ? { name: event.name } : {
+		name: event.name,
+		props
+	};
+}
+function redactTelemetryProps(name, props, options = {}) {
+	if (props === void 0) return void 0;
+	const clone = cloneProps(props);
+	if (options.rawMode === true) return clone;
+	for (const key of PII_PROP_KEYS_BY_EVENT[name] ?? []) redactProperty(clone, key);
+	return clone;
+}
+/**
+* Remove query strings and fragments from every PostHog URL/referrer/path
+* property before transport. Browser applications may carry emails, draft ids,
+* or other capabilities in the URL; those values must never leave the origin.
+*
+* The callback mutates and returns the supplied event, matching PostHog's
+* `before_send` contract while preserving the event's full structural type.
+*/
+function sanitizePostHogBrowserEvent(event) {
+	if (event === null) return event;
+	const seen = /* @__PURE__ */ new WeakSet();
+	sanitizePostHogBrowserValue(event.properties, seen);
+	if (event.$set !== void 0) sanitizePostHogBrowserValue(event.$set, seen);
+	if (event.$set_once !== void 0) sanitizePostHogBrowserValue(event.$set_once, seen);
+	return event;
+}
+/**
+* Sanitize AND stamp. Every browser event leaves with `capxul_env` and
+* `producer: "browser"` on it, because the browser half has no transport of
+* its own to stamp at — `before_send` is the one funnel every capture,
+* pageview, exception and replay-meta event passes through. Forgetting to
+* register a super-property is therefore not a failure mode.
+*/
+function createCapxulBeforeSend(capxulEnv) {
+	return (event) => {
+		const sanitized = sanitizePostHogBrowserEvent(event);
+		if (sanitized === null) return sanitized;
+		sanitized.properties.capxul_env = capxulEnv;
+		sanitized.properties.producer ??= "browser";
+		return sanitized;
+	};
+}
+function utilityAppAnalytics(input) {
+	return {
+		api_host: input.host,
+		defaults: "2026-01-30",
+		autocapture: false,
+		capture_pageview: false,
+		capture_pageleave: true,
+		disable_session_recording: true,
+		disable_persistence: true,
+		capture_heatmaps: false,
+		capture_exceptions: false,
+		capture_performance: false,
+		disable_surveys: true,
+		disable_web_experiments: true,
+		disable_product_tours: true,
+		disable_conversations: true,
+		disable_external_dependency_loading: true,
+		person_profiles: "identified_only",
+		advanced_disable_flags: true,
+		save_campaign_params: false,
+		save_referrer: false,
+		before_send: createCapxulBeforeSend(input.capxulEnv)
+	};
+}
+function productAppAnalytics(input) {
+	const replay = input.capxulEnv === "production";
+	return {
+		api_host: input.host,
+		defaults: "2026-01-30",
+		autocapture: false,
+		capture_pageview: false,
+		capture_pageleave: true,
+		disable_session_recording: !replay,
+		disable_persistence: false,
+		capture_heatmaps: false,
+		capture_exceptions: true,
+		capture_performance: false,
+		disable_surveys: true,
+		disable_web_experiments: true,
+		disable_product_tours: true,
+		disable_conversations: true,
+		disable_external_dependency_loading: !replay,
+		person_profiles: "identified_only",
+		advanced_disable_flags: true,
+		save_campaign_params: false,
+		save_referrer: false,
+		session_recording: {
+			maskAllInputs: true,
+			maskTextSelector: "*",
+			captureCanvas: { recordCanvas: false },
+			recordHeaders: false,
+			recordBody: false
+		},
+		before_send: createCapxulBeforeSend(input.capxulEnv)
+	};
+}
+/**
+* Apply a named privacy profile before an application-owned PostHog client
+* initializes. Hosts still own the vendor client and lifecycle; this helper
+* centralizes the security-relevant options and the missing-key opt-out (no
+* key ⇒ no client ⇒ no network call).
+*/
+function initializeCapxulBrowserAnalytics(profile, input, initialize) {
+	const key = input.key?.trim();
+	if (key === void 0 || key.length === 0) return void 0;
+	try {
+		return initialize(key, profile(input));
+	} catch {
+		return;
+	}
+}
+/** The utility profile, pre-bound — the shape ADR-0016's consumers already use. */
+function initializePostHogBrowserAnalytics(input, initialize) {
+	return initializeCapxulBrowserAnalytics(utilityAppAnalytics, input, initialize);
+}
+/**
+* Build an explicit SPA pageview sink for toolbar-free PostHog clients. The
+* pathname-only input avoids query capabilities, repeated pathnames are
+* deduplicated, and vendor failures remain best-effort.
+*/
+function createPostHogBrowserPageviewTracker(client) {
+	let previousPathname;
+	return (pathname) => {
+		if (client === null || client === void 0) return;
+		const safePathname = stripUrlQueryAndFragment(pathname);
+		if (safePathname === previousPathname) return;
+		try {
+			Promise.resolve(client.capture("$pageview", { $pathname: safePathname })).catch(() => {});
+			previousPathname = safePathname;
+		} catch {}
+	};
+}
+function sanitizePostHogBrowserValue(value, seen) {
+	if (typeof value !== "object" || value === null || seen.has(value)) return;
+	seen.add(value);
+	if (Array.isArray(value)) {
+		for (const item of value) sanitizePostHogBrowserValue(item, seen);
+		return;
+	}
+	const properties = value;
+	for (const [key, nestedValue] of Object.entries(properties)) {
+		if (isPostHogQueryDerivedProperty(key)) {
+			delete properties[key];
+			continue;
+		}
+		if (typeof nestedValue === "string" && isPostHogUrlProperty(key)) {
+			properties[key] = stripUrlQueryAndFragment(nestedValue);
+			continue;
+		}
+		sanitizePostHogBrowserValue(nestedValue, seen);
+	}
+}
+const POSTHOG_QUERY_DERIVED_PROPERTY_NAMES = [
+	"utm_source",
+	"utm_medium",
+	"utm_campaign",
+	"utm_content",
+	"utm_term",
+	"gad_source",
+	"mc_cid",
+	"gclid",
+	"gclsrc",
+	"dclid",
+	"gbraid",
+	"wbraid",
+	"fbclid",
+	"msclkid",
+	"twclid",
+	"li_fat_id",
+	"igshid",
+	"ttclid",
+	"rdt_cid",
+	"epik",
+	"qclid",
+	"sccid",
+	"irclid",
+	"_kx",
+	"ph_keyword"
+];
+function isPostHogQueryDerivedProperty(key) {
+	const normalized = key.toLowerCase();
+	return POSTHOG_QUERY_DERIVED_PROPERTY_NAMES.some((propertyName) => normalized === propertyName || normalized.endsWith(`_${propertyName}`) || normalized.endsWith(`$${propertyName}`));
+}
+function isPostHogUrlProperty(key) {
+	const normalized = key.toLowerCase();
+	return normalized.includes("url") || normalized.includes("referrer") || normalized.includes("path") || normalized.includes("filename");
+}
+function stripUrlQueryAndFragment(value) {
+	const queryIndex = value.indexOf("?");
+	const fragmentIndex = value.indexOf("#");
+	if (queryIndex === -1 && fragmentIndex === -1) return value;
+	if (queryIndex === -1) return value.slice(0, fragmentIndex);
+	if (fragmentIndex === -1) return value.slice(0, queryIndex);
+	return value.slice(0, Math.min(queryIndex, fragmentIndex));
+}
+var RecordingTelemetryAdapter = class {
+	#events = [];
+	#rawMode;
+	constructor(options = {}) {
+		this.#rawMode = options.rawMode === true;
+	}
+	get events() {
+		return this.#events.map((event) => cloneEvent(event));
+	}
+	emit(event) {
+		return Effect.sync(() => {
+			this.#events.push(redactTelemetryEvent(event, { rawMode: this.#rawMode }));
+		});
+	}
+	identify(_input) {
+		return Effect.void;
+	}
+	group(_input) {
+		return Effect.void;
+	}
+	reset() {
+		return Effect.void;
+	}
+	reportHandledError(_error, _context) {
+		return Effect.void;
+	}
+	clear() {
+		this.#events.length = 0;
+	}
+};
+var PostHogTelemetryAdapter = class {
+	#capture;
+	constructor(deps) {
+		this.#capture = deps.capture;
+	}
+	emit(event) {
+		return Effect.sync(() => {
+			try {
+				Promise.resolve(this.#capture(event.name, redactTelemetryProps(event.name, event.props))).catch(() => {});
+			} catch {}
+		});
+	}
+	identify(_input) {
+		return Effect.void;
+	}
+	group(_input) {
+		return Effect.void;
+	}
+	reset() {
+		return Effect.void;
+	}
+	reportHandledError(_error, _context) {
+		return Effect.void;
+	}
+};
+var InMemoryTelemetryBusAdapter = class {
+	#subscribers = /* @__PURE__ */ new Set();
+	#rawMode;
+	constructor(options = {}) {
+		this.#rawMode = options.rawMode === true;
+	}
+	subscribe(handler) {
+		this.#subscribers.add(handler);
+		return () => {
+			this.#subscribers.delete(handler);
+		};
+	}
+	emit(event) {
+		return Effect.sync(() => {
+			const delivered = redactTelemetryEvent(event, { rawMode: this.#rawMode });
+			for (const handler of this.#subscribers) try {
+				handler(cloneEvent(delivered));
+			} catch {}
+		});
+	}
+	identify(_input) {
+		return Effect.void;
+	}
+	group(_input) {
+		return Effect.void;
+	}
+	reset() {
+		return Effect.void;
+	}
+	reportHandledError(_error, _context) {
+		return Effect.void;
+	}
+};
+const PII_PROP_KEYS_BY_EVENT = {
+	auth_otp_requested: ["email"],
+	auth_otp_delivered: ["email"],
+	auth_otp_expired: ["email"],
+	auth_failed: ["email"]
+};
+function redactProperty(props, key) {
+	const value = props[key];
+	if (typeof value === "string") props[key] = sha256Hex(value).slice(0, 12);
+}
+function cloneEvent(event) {
+	if (event.props === void 0) return { name: event.name };
+	return {
+		name: event.name,
+		props: cloneProps(event.props)
+	};
+}
+function cloneProps(props) {
+	const cloned = {};
+	for (const [key, value] of Object.entries(props)) cloned[key] = cloneTelemetryValue(value);
+	return cloned;
+}
+function cloneTelemetryValue(value) {
+	if (Array.isArray(value)) return value.map(cloneTelemetryValue);
+	if (value === null || typeof value !== "object") return value;
+	if (Object.getPrototypeOf(value) !== Object.prototype) return value;
+	const cloned = {};
+	for (const [key, nested] of Object.entries(value)) cloned[key] = cloneTelemetryValue(nested);
+	return cloned;
+}
+const SHA256_INITIAL_HASH = [
+	1779033703,
+	3144134277,
+	1013904242,
+	2773480762,
+	1359893119,
+	2600822924,
+	528734635,
+	1541459225
+];
+const SHA256_K = [
+	1116352408,
+	1899447441,
+	3049323471,
+	3921009573,
+	961987163,
+	1508970993,
+	2453635748,
+	2870763221,
+	3624381080,
+	310598401,
+	607225278,
+	1426881987,
+	1925078388,
+	2162078206,
+	2614888103,
+	3248222580,
+	3835390401,
+	4022224774,
+	264347078,
+	604807628,
+	770255983,
+	1249150122,
+	1555081692,
+	1996064986,
+	2554220882,
+	2821834349,
+	2952996808,
+	3210313671,
+	3336571891,
+	3584528711,
+	113926993,
+	338241895,
+	666307205,
+	773529912,
+	1294757372,
+	1396182291,
+	1695183700,
+	1986661051,
+	2177026350,
+	2456956037,
+	2730485921,
+	2820302411,
+	3259730800,
+	3345764771,
+	3516065817,
+	3600352804,
+	4094571909,
+	275423344,
+	430227734,
+	506948616,
+	659060556,
+	883997877,
+	958139571,
+	1322822218,
+	1537002063,
+	1747873779,
+	1955562222,
+	2024104815,
+	2227730452,
+	2361852424,
+	2428436474,
+	2756734187,
+	3204031479,
+	3329325298
+];
+function sha256Hex(input) {
+	const padded = padSha256Message(new TextEncoder().encode(input));
+	const view = new DataView(padded.buffer, padded.byteOffset, padded.byteLength);
+	const words = new Uint32Array(64);
+	let h0 = SHA256_INITIAL_HASH[0];
+	let h1 = SHA256_INITIAL_HASH[1];
+	let h2 = SHA256_INITIAL_HASH[2];
+	let h3 = SHA256_INITIAL_HASH[3];
+	let h4 = SHA256_INITIAL_HASH[4];
+	let h5 = SHA256_INITIAL_HASH[5];
+	let h6 = SHA256_INITIAL_HASH[6];
+	let h7 = SHA256_INITIAL_HASH[7];
+	for (let offset = 0; offset < padded.byteLength; offset += 64) {
+		for (let i = 0; i < 16; i++) words[i] = view.getUint32(offset + i * 4);
+		for (let i = 16; i < 64; i++) {
+			const s0 = rotr(words[i - 15], 7) ^ rotr(words[i - 15], 18) ^ words[i - 15] >>> 3;
+			const s1 = rotr(words[i - 2], 17) ^ rotr(words[i - 2], 19) ^ words[i - 2] >>> 10;
+			words[i] = words[i - 16] + s0 + words[i - 7] + s1 >>> 0;
+		}
+		let a = h0;
+		let b = h1;
+		let c = h2;
+		let d = h3;
+		let e = h4;
+		let f = h5;
+		let g = h6;
+		let h = h7;
+		for (let i = 0; i < 64; i++) {
+			const s1 = rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25);
+			const ch = e & f ^ ~e & g;
+			const temp1 = h + s1 + ch + SHA256_K[i] + words[i] >>> 0;
+			const temp2 = (rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22)) + (a & b ^ a & c ^ b & c) >>> 0;
+			h = g;
+			g = f;
+			f = e;
+			e = d + temp1 >>> 0;
+			d = c;
+			c = b;
+			b = a;
+			a = temp1 + temp2 >>> 0;
+		}
+		h0 = h0 + a >>> 0;
+		h1 = h1 + b >>> 0;
+		h2 = h2 + c >>> 0;
+		h3 = h3 + d >>> 0;
+		h4 = h4 + e >>> 0;
+		h5 = h5 + f >>> 0;
+		h6 = h6 + g >>> 0;
+		h7 = h7 + h >>> 0;
+	}
+	return [
+		h0,
+		h1,
+		h2,
+		h3,
+		h4,
+		h5,
+		h6,
+		h7
+	].map((word) => word.toString(16).padStart(8, "0")).join("");
+}
+function padSha256Message(bytes) {
+	const bitLength = bytes.byteLength * 8;
+	const zeroPadLength = (64 - (bytes.byteLength + 1 + 8) % 64) % 64;
+	const output = new Uint8Array(bytes.byteLength + 1 + zeroPadLength + 8);
+	output.set(bytes);
+	output[bytes.byteLength] = 128;
+	const view = new DataView(output.buffer);
+	view.setUint32(output.byteLength - 8, Math.floor(bitLength / 4294967296));
+	view.setUint32(output.byteLength - 4, bitLength >>> 0);
+	return output;
+}
+function rotr(value, bits) {
+	return value >>> bits | value << 32 - bits;
+}
+//#endregion
+export { AccountBalanceFailedTelemetryEventSchema, AccountBalanceReadTelemetryEventSchema, AuthFailedTelemetryEventSchema, AuthOtpDeliveredTelemetryEventSchema, AuthOtpExpiredTelemetryEventSchema, AuthOtpRequestedTelemetryEventSchema, AuthSignedOutTelemetryEventSchema, AuthVerifiedTelemetryEventSchema, BootstrapFailedTelemetryEventSchema, BootstrapResolvedTelemetryEventSchema, CAPXUL_ENVS, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS, FaucetConfirmedTelemetryEventSchema, FaucetFailedTelemetryEventSchema, FaucetRequestedTelemetryEventSchema, InMemoryTelemetryBusAdapter, MemberActivationFailedTelemetryEventSchema, MemberActivationReadyTelemetryEventSchema, MemberActivationStartedTelemetryEventSchema, OrgCreateFailedTelemetryEventSchema, OrgCreateStartedTelemetryEventSchema, OrgCreatedTelemetryEventSchema, OrgInviteAcceptedTelemetryEventSchema, OrgInviteExpiredTelemetryEventSchema, OrgInviteSentTelemetryEventSchema, OrgMemberActiveTelemetryEventSchema, OrgMemberRemovedTelemetryEventSchema, OrgRoleGrantFailedTelemetryEventSchema, OrgRoleGrantedTelemetryEventSchema, OrgRolesSeededTelemetryEventSchema, OrgSafeConfirmedTelemetryEventSchema, OrgSafeCreatedTelemetryEventSchema, OrganizationCreationFailedTelemetryEventSchema, OrganizationCreationReadyTelemetryEventSchema, OrganizationCreationStartedTelemetryEventSchema, PII, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS, PaymentCancelledTelemetryEventSchema, PaymentClaimedTelemetryEventSchema, PaymentDocumentAttachedTelemetryEventSchema, PaymentFailedTelemetryEventSchema, PaymentRedirectedTelemetryEventSchema, PaymentRequestedTelemetryEventSchema, PaymentResolvedTelemetryEventSchema, PaymentSettledTelemetryEventSchema, PaymentSubmittedTelemetryEventSchema, PostHogTelemetryAdapter, ProvisioningSafeConfirmedTelemetryEventSchema, ProvisioningSafeCreatedTelemetryEventSchema, RecordingTelemetryAdapter, SYNCABLE_CAPXUL_ENVS, StreamCancelledTelemetryEventSchema, StreamClaimedTelemetryEventSchema, StreamCompletedTelemetryEventSchema, StreamCreatedTelemetryEventSchema, StreamFailedTelemetryEventSchema, SubaccountCreatedTelemetryEventSchema, SubaccountDeletedTelemetryEventSchema, SubaccountOpFailedTelemetryEventSchema, SubaccountRenamedTelemetryEventSchema, TELEMETRY_EVENT_NAMES, TELEMETRY_EVENT_SCHEMAS, TELEMETRY_JOURNEYS, TELEMETRY_PRODUCERS, TransferBackendReceivedTelemetryEventSchema, TransferConfirmedTelemetryEventSchema, TransferFailedTelemetryEventSchema, TransferRequestedTelemetryEventSchema, WithdrawalFailedTelemetryEventSchema, WithdrawalRequestedTelemetryEventSchema, WithdrawalSettledTelemetryEventSchema, WithdrawalSubmittedTelemetryEventSchema, createCapxulBeforeSend, createPostHogBrowserPageviewTracker, getTrackHandler, initializeCapxulBrowserAnalytics, initializePostHogBrowserAnalytics, productAppAnalytics, redactTelemetryEvent, redactTelemetryProps, sanitizePostHogBrowserEvent, setTrackHandler, stampTelemetryEnvelope, track, utilityAppAnalytics };
+
+//# sourceMappingURL=index.mjs.map