@capxul/observability 4.1.4 → 4.2.0-rc.10

package/dist/index.d.mts

@@ -199,6 +199,8 @@ declare const CAPXUL_OPERATIONS: {
     readonly emitAnnotationSaved: "activity.emitAnnotationSaved";
     readonly get: "activity.get";
     readonly list: "activity.list";
+    /** The SDK's live Activity read over the indexer's SSE stream. */
+    readonly subscribe: "activity.subscribe";
     readonly summary: "activity.summary";
   };
   readonly addressBook: {
@@ -600,7 +602,7 @@ interface TelemetryPort {
 }
 //#endregion
 //#region src/index.d.ts
-declare const TELEMETRY_EVENT_NAMES: readonly ["auth_otp_requested", "auth_otp_delivered", "auth_otp_expired", "auth_verified", "auth_failed", "auth_signed_out", "onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "provisioning_safe_created", "provisioning_safe_confirmed", "bootstrap_resolved", "bootstrap_failed", "member_activation_started", "member_activation_ready", "member_activation_failed", "organization_creation_started", "organization_creation_ready", "organization_creation_failed", "chain_upstream_fallback", "bundler_error", "receipt_pending", "operation_retried", "account_balance_read", "account_balance_failed", "faucet_requested", "faucet_confirmed", "faucet_failed", "org_create_started", "org_safe_created", "org_safe_confirmed", "org_roles_seeded", "org_created", "org_create_failed", "org_invite_sent", "org_invite_accepted", "org_invite_expired", "payment_initiated", "payment_settled", "payment_failed", "payment_verification_retry", "payment_lifecycle_transition", "quick_pay_external_address_acknowledged", "deposit_initiated", "deposit_settled", "permission_mirror_verification", "movement_scan_window", "movement_scan_checkpoint", "movement_scan_incident", "activity_annotation_saved", "ui_activity_action_completed", "contact_relationship_changed", "ui_contact_action_completed"];
+declare const TELEMETRY_EVENT_NAMES: readonly ["auth_otp_requested", "auth_otp_delivered", "auth_otp_expired", "auth_verified", "auth_failed", "identity_refused", "auth_signed_out", "onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "provisioning_safe_created", "provisioning_safe_confirmed", "bootstrap_resolved", "bootstrap_failed", "member_activation_started", "member_activation_ready", "member_activation_failed", "organization_creation_started", "organization_creation_ready", "organization_creation_failed", "chain_upstream_fallback", "bundler_error", "receipt_pending", "operation_retried", "account_balance_read", "account_balance_failed", "faucet_requested", "faucet_confirmed", "faucet_failed", "org_create_started", "org_safe_created", "org_safe_confirmed", "org_roles_seeded", "org_created", "org_create_failed", "org_invite_sent", "org_invite_accepted", "org_invite_expired", "payment_initiated", "payment_settled", "payment_failed", "payment_verification_retry", "payment_lifecycle_transition", "quick_pay_external_address_acknowledged", "deposit_initiated", "deposit_settled", "permission_mirror_verification", "movement_scan_window", "movement_scan_checkpoint", "movement_scan_incident", "activity_annotation_saved", "ui_activity_action_completed", "contact_relationship_changed", "ui_contact_action_completed", "access_recovery_completed", "ui_access_step_completed", "org_invite_progressed", "invoice_issued", "invoice_request_transitioned", "ui_invoice_step_completed", "ui_treasury_step_completed", "ui_receive_step_completed", "payroll_group_changed", "payroll_run_transitioned", "ui_payroll_action_completed"];
 type TelemetryEventName = (typeof TELEMETRY_EVENT_NAMES)[number];
 type NonEmptyTelemetryEventNames = readonly [TelemetryEventName, ...TelemetryEventName[]];
 type FunnelStepPropertyFilter = {
@@ -919,6 +921,24 @@ declare const AuthFailedTelemetryEventSchema: Schema.Struct<{
     readonly reason: Schema.optional<Schema.String>;
   }>;
 }>;
+declare const IdentityRefusedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"identity_refused">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    /** The refused identity event tag, for example CreateOrganization. */
+    readonly event: Schema.optional<Schema.String>;
+    /** The machine's refusal code: WRONG_STATE, SUPERSEDED or STALE_EPOCH. */
+    readonly refusal_code: Schema.optional<Schema.String>;
+    /** The machine slot the request targeted, for example identity:org. */
+    readonly slot: Schema.optional<Schema.String>;
+    /** The machine state at refusal, for example authenticated:claiming. */
+    readonly state: Schema.optional<Schema.String>;
+  }>;
+}>;
 declare const AuthSignedOutTelemetryEventSchema: Schema.Struct<{
   readonly name: Schema.Literal<"auth_signed_out">;
   readonly props: Schema.Struct<{
@@ -1779,10 +1799,19 @@ declare const PermissionMirrorVerificationTelemetryEventSchema: Schema.Struct<{
     readonly journey_id: Schema.optional<Schema.String>;
     readonly correlation_id: Schema.optional<Schema.String>;
     readonly sdk_version: Schema.optional<Schema.String>;
+    /** The RECEIPT verification outcome. What the mirror then did is separate. */
     readonly outcome: Schema.String;
     readonly reason: Schema.String;
     readonly chain_id: Schema.Number;
     readonly retry_count: Schema.Number;
+    /**
+     * #1960 R02, consumed by R03. A verified receipt is not an applied Permission:
+     * these two optional fields let the producer say what the applying mutation
+     * actually returned, and which command it was, without either fact rewriting
+     * the receipt outcome above. Absent when application has not happened yet.
+     */
+    readonly application_result: Schema.optional<Schema.Literals<readonly ["applied", "replayed", "conflicting_replay", "revision_mismatch"]>>;
+    readonly command_id: Schema.optional<Schema.String>;
   }>;
 }>;
 declare const MovementScanWindowTelemetryEventSchema: Schema.Struct<{
@@ -1976,6 +2005,182 @@ declare const UiActivityActionCompletedTelemetryEventSchema: Schema.Struct<{
     readonly truncated: Schema.optional<Schema.Boolean>;
   }>]>;
 }>;
+declare const AccessRecoveryCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"access_recovery_completed">;
+  readonly props: Schema.Union<readonly [Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly recovery: Schema.Literal<"session_restoration">;
+    readonly outcome: Schema.Literals<readonly ["restored", "absent", "failed"]>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+  }>, Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly recovery: Schema.Literal<"signer_readiness">;
+    readonly outcome: Schema.Literals<readonly ["ready", "unavailable"]>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+  }>]>;
+}>;
+declare const UiAccessStepCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"ui_access_step_completed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly step: Schema.Literals<readonly ["dashboard_granted", "redirect_completed", "gate_error_displayed", "retry_selected", "capability_refusal_displayed", "signer_refusal_displayed"]>;
+    readonly capability: Schema.optional<Schema.Literals<readonly ["spend", "managePeople"]>>;
+    readonly probe: Schema.optional<Schema.Literals<readonly ["session", "membership", "lifecycle"]>>;
+    readonly reason: Schema.optional<Schema.Literals<readonly ["loading", "no-permission", "org-unavailable"]>>;
+  }>;
+}>;
+declare const OrgInviteProgressedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"org_invite_progressed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly organization_id: Schema.Codec<string, string, never, never>;
+    readonly progress: Schema.Literals<readonly ["account_ready", "permission_applied", "membership_activated", "revoked"]>;
+    /** The invited Party. The initiating actor stays on the envelope's identity. */
+    readonly member_party_id: Schema.String;
+    readonly occurred_at: Schema.Number;
+  }>;
+}>;
+declare const InvoiceIssuedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"invoice_issued">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly request_id: Schema.String;
+    readonly issuer_scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly issuer_scope_id: Schema.String;
+    readonly payer_party_id: Schema.optional<Schema.String>;
+    readonly occurred_at: Schema.Number;
+  }>;
+}>;
+declare const InvoiceRequestTransitionedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"invoice_request_transitioned">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly request_id: Schema.String;
+    readonly transition: Schema.Literals<readonly ["approval_prepared", "declined", "cancelled"]>;
+    readonly actor_scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly actor_scope_id: Schema.String;
+    readonly occurred_at: Schema.Number;
+  }>;
+}>;
+declare const UiInvoiceStepCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"ui_invoice_step_completed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly step: Schema.Literals<readonly ["opened", "previewed", "dismissed", "submitted", "result_displayed", "refusal_displayed", "retry_selected"]>;
+    readonly request_id: Schema.optional<Schema.String>;
+  }>;
+}>;
+declare const UiTreasuryStepCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"ui_treasury_step_completed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly step: Schema.Literals<readonly ["balance_displayed", "read_refusal_displayed", "retry_selected", "recovery_completed"]>;
+    readonly account_kind: Schema.optional<Schema.Literals<readonly ["personalSafe", "orgTreasury"]>>;
+  }>;
+}>;
+declare const UiReceiveStepCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"ui_receive_step_completed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly step: Schema.Literals<readonly ["instructions_displayed", "address_copied", "copy_failed", "refusal_displayed", "retry_selected"]>;
+    readonly account_kind: Schema.optional<Schema.Literals<readonly ["personalSafe", "orgTreasury"]>>;
+  }>;
+}>;
+declare const PayrollGroupChangedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"payroll_group_changed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly organization_id: Schema.Codec<string, string, never, never>;
+    readonly change: Schema.Literals<readonly ["created", "updated", "deleted"]>;
+    readonly group_id: Schema.String;
+    readonly member_count: Schema.Number;
+    readonly occurred_at: Schema.Number;
+  }>;
+}>;
+declare const PayrollRunTransitionedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"payroll_run_transitioned">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly organization_id: Schema.Codec<string, string, never, never>;
+    readonly transition: Schema.Literals<readonly ["prepared", "authorized", "settled"]>;
+    readonly run_id: Schema.String;
+    readonly payment_count: Schema.optional<Schema.Number>;
+    readonly occurred_at: Schema.Number;
+  }>;
+}>;
+declare const UiPayrollActionCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"ui_payroll_action_completed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly action: Schema.Literals<readonly ["opened", "refusal_displayed", "recovery_completed", "cancelled", "submitted_displayed"]>;
+    readonly run_id: Schema.optional<Schema.String>;
+  }>;
+}>;
 declare const TELEMETRY_EVENT_SCHEMAS: {
   readonly contact_relationship_changed: Schema.Struct<{
     readonly name: Schema.Literal<"contact_relationship_changed">;
@@ -1995,6 +2200,182 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly operation: Schema.Literals<readonly ["addressBook.add", "addressBook.label", "addressBook.hide", "addressBook.unhide"]>;
     }>;
   }>;
+  readonly access_recovery_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"access_recovery_completed">;
+    readonly props: Schema.Union<readonly [Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly recovery: Schema.Literal<"session_restoration">;
+      readonly outcome: Schema.Literals<readonly ["restored", "absent", "failed"]>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    }>, Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly recovery: Schema.Literal<"signer_readiness">;
+      readonly outcome: Schema.Literals<readonly ["ready", "unavailable"]>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    }>]>;
+  }>;
+  readonly ui_access_step_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"ui_access_step_completed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly step: Schema.Literals<readonly ["dashboard_granted", "redirect_completed", "gate_error_displayed", "retry_selected", "capability_refusal_displayed", "signer_refusal_displayed"]>;
+      readonly capability: Schema.optional<Schema.Literals<readonly ["spend", "managePeople"]>>;
+      readonly probe: Schema.optional<Schema.Literals<readonly ["session", "membership", "lifecycle"]>>;
+      readonly reason: Schema.optional<Schema.Literals<readonly ["loading", "no-permission", "org-unavailable"]>>;
+    }>;
+  }>;
+  readonly org_invite_progressed: Schema.Struct<{
+    readonly name: Schema.Literal<"org_invite_progressed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly organization_id: Schema.Codec<string, string, never, never>;
+      readonly progress: Schema.Literals<readonly ["account_ready", "permission_applied", "membership_activated", "revoked"]>;
+      /** The invited Party. The initiating actor stays on the envelope's identity. */
+      readonly member_party_id: Schema.String;
+      readonly occurred_at: Schema.Number;
+    }>;
+  }>;
+  readonly invoice_issued: Schema.Struct<{
+    readonly name: Schema.Literal<"invoice_issued">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly request_id: Schema.String;
+      readonly issuer_scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly issuer_scope_id: Schema.String;
+      readonly payer_party_id: Schema.optional<Schema.String>;
+      readonly occurred_at: Schema.Number;
+    }>;
+  }>;
+  readonly invoice_request_transitioned: Schema.Struct<{
+    readonly name: Schema.Literal<"invoice_request_transitioned">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly request_id: Schema.String;
+      readonly transition: Schema.Literals<readonly ["approval_prepared", "declined", "cancelled"]>;
+      readonly actor_scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly actor_scope_id: Schema.String;
+      readonly occurred_at: Schema.Number;
+    }>;
+  }>;
+  readonly ui_invoice_step_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"ui_invoice_step_completed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly step: Schema.Literals<readonly ["opened", "previewed", "dismissed", "submitted", "result_displayed", "refusal_displayed", "retry_selected"]>;
+      readonly request_id: Schema.optional<Schema.String>;
+    }>;
+  }>;
+  readonly ui_treasury_step_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"ui_treasury_step_completed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly step: Schema.Literals<readonly ["balance_displayed", "read_refusal_displayed", "retry_selected", "recovery_completed"]>;
+      readonly account_kind: Schema.optional<Schema.Literals<readonly ["personalSafe", "orgTreasury"]>>;
+    }>;
+  }>;
+  readonly ui_receive_step_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"ui_receive_step_completed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly step: Schema.Literals<readonly ["instructions_displayed", "address_copied", "copy_failed", "refusal_displayed", "retry_selected"]>;
+      readonly account_kind: Schema.optional<Schema.Literals<readonly ["personalSafe", "orgTreasury"]>>;
+    }>;
+  }>;
+  readonly payroll_group_changed: Schema.Struct<{
+    readonly name: Schema.Literal<"payroll_group_changed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly organization_id: Schema.Codec<string, string, never, never>;
+      readonly change: Schema.Literals<readonly ["created", "updated", "deleted"]>;
+      readonly group_id: Schema.String;
+      readonly member_count: Schema.Number;
+      readonly occurred_at: Schema.Number;
+    }>;
+  }>;
+  readonly payroll_run_transitioned: Schema.Struct<{
+    readonly name: Schema.Literal<"payroll_run_transitioned">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly organization_id: Schema.Codec<string, string, never, never>;
+      readonly transition: Schema.Literals<readonly ["prepared", "authorized", "settled"]>;
+      readonly run_id: Schema.String;
+      readonly payment_count: Schema.optional<Schema.Number>;
+      readonly occurred_at: Schema.Number;
+    }>;
+  }>;
+  readonly ui_payroll_action_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"ui_payroll_action_completed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly action: Schema.Literals<readonly ["opened", "refusal_displayed", "recovery_completed", "cancelled", "submitted_displayed"]>;
+      readonly run_id: Schema.optional<Schema.String>;
+    }>;
+  }>;
   readonly ui_contact_action_completed: Schema.Struct<{
     readonly name: Schema.Literal<"ui_contact_action_completed">;
     readonly props: Schema.Union<readonly [Schema.Struct<{
@@ -2212,6 +2593,24 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly reason: Schema.optional<Schema.String>;
     }>;
   }>;
+  readonly identity_refused: Schema.Struct<{
+    readonly name: Schema.Literal<"identity_refused">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      /** The refused identity event tag, for example CreateOrganization. */
+      readonly event: Schema.optional<Schema.String>;
+      /** The machine's refusal code: WRONG_STATE, SUPERSEDED or STALE_EPOCH. */
+      readonly refusal_code: Schema.optional<Schema.String>;
+      /** The machine slot the request targeted, for example identity:org. */
+      readonly slot: Schema.optional<Schema.String>;
+      /** The machine state at refusal, for example authenticated:claiming. */
+      readonly state: Schema.optional<Schema.String>;
+    }>;
+  }>;
   readonly auth_signed_out: Schema.Struct<{
     readonly name: Schema.Literal<"auth_signed_out">;
     readonly props: Schema.Struct<{
@@ -3072,10 +3471,19 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly journey_id: Schema.optional<Schema.String>;
       readonly correlation_id: Schema.optional<Schema.String>;
       readonly sdk_version: Schema.optional<Schema.String>;
+      /** The RECEIPT verification outcome. What the mirror then did is separate. */
       readonly outcome: Schema.String;
       readonly reason: Schema.String;
       readonly chain_id: Schema.Number;
       readonly retry_count: Schema.Number;
+      /**
+       * #1960 R02, consumed by R03. A verified receipt is not an applied Permission:
+       * these two optional fields let the producer say what the applying mutation
+       * actually returned, and which command it was, without either fact rewriting
+       * the receipt outcome above. Absent when application has not happened yet.
+       */
+      readonly application_result: Schema.optional<Schema.Literals<readonly ["applied", "replayed", "conflicting_replay", "revision_mismatch"]>>;
+      readonly command_id: Schema.optional<Schema.String>;
     }>;
   }>;
   readonly movement_scan_window: Schema.Struct<{
@@ -3131,7 +3539,7 @@ declare const FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS: readonly [];
  * A domain node removes its entry when it adds the producer. The telemetry
  * gate rejects an entry that has a producer.
  */
-declare const CONTRACT_FIRST_TELEMETRY_EVENTS: readonly [];
+declare const CONTRACT_FIRST_TELEMETRY_EVENTS: readonly ["access_recovery_completed", "org_invite_progressed", "invoice_issued", "invoice_request_transitioned", "payroll_group_changed", "payroll_run_transitioned"];
 /**
  * Catalog events whose product mapper remains gated on the #1150 frontend
  * adoption. L1 S1 removes their retired SDK-flow producers without inventing
@@ -3141,7 +3549,7 @@ declare const CONTRACT_FIRST_TELEMETRY_EVENTS: readonly [];
  */
 declare const PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS: readonly ["auth_otp_expired"];
 /** Catalogued browser observations whose producers remain owned by app adoption. */
-declare const BROWSER_GATED_TELEMETRY_EVENTS: readonly ["onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "ui_activity_action_completed", "ui_contact_action_completed"];
+declare const BROWSER_GATED_TELEMETRY_EVENTS: readonly ["onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "ui_activity_action_completed", "ui_contact_action_completed", "ui_access_step_completed", "ui_invoice_step_completed", "ui_treasury_step_completed", "ui_receive_step_completed", "ui_payroll_action_completed"];
 interface TelemetryIdentifyInput {
   readonly distinctId: string;
   readonly anonDistinctId?: AnonymousDistinctId;
@@ -3181,12 +3589,12 @@ interface PostHogBrowserCapture {
  * The callback mutates and returns the supplied event, matching PostHog's
  * `before_send` contract while preserving the event's full structural type.
  */
-declare function sanitizePostHogBrowserEvent<T extends PostHogBrowserCapture | null>(event: T): T;
+declare function sanitizePostHogBrowserEvent<T extends PostHogBrowserCapture | null>(event: T, urlPolicy?: "path-only" | "diagnostic"): T;
 /**
  * Drop local events before transport. Sanitize and stamp every other browser
  * event with `capxul_env` and `producer: "browser"`.
  */
-declare function createCapxulBeforeSend(capxulEnv: CapxulEnv): <T extends PostHogBrowserCapture | null>(event: T) => T | null;
+declare function createCapxulBeforeSend(capxulEnv: CapxulEnv, urlPolicy?: "path-only" | "diagnostic"): <T extends PostHogBrowserCapture | null>(event: T) => T | null;
 type PostHogBeforeSend = ReturnType<typeof createCapxulBeforeSend>;
 /**
  * ADR-0016 posture, unchanged: capability-URL utility apps (approval links,
@@ -3227,7 +3635,7 @@ type PostHogBrowserOptions = PostHogUtilityAppOptions;
  *    funnel lies.
  *  - identify-driven person profiles (ADR-0020 A2 wires the calls at L1).
  *  - session replay in EVERY environment. Ordinary text and input values remain
- *    visible. Inputs with `autocomplete="one-time-code"` are masked. Network
+ *    visible. Password, OTP, and credential controls are masked. Network
  *    timing plus request/response headers and bodies are recorded, so a failed
  *    call shows its status and body in the replay. Canvas stays off. The
  *    recorder script loads from PostHog, so external dependency loading is on.
@@ -3298,17 +3706,14 @@ declare function utilityAppAnalytics(input: CapxulBrowserAnalyticsInput): PostHo
  * generic over the real request type and returns the same type it was given.
  */
 interface CapturedNetworkRequestLike {
+  readonly name?: string | undefined;
+  readonly url?: string | undefined;
   readonly requestHeaders?: Record<string, string> | undefined;
   readonly responseHeaders?: Record<string, string> | undefined;
   readonly requestBody?: unknown;
   readonly responseBody?: unknown;
 }
-/**
- * Replay keeps the request line, status, timing, headers, and bodies, so a
- * failed call carries its evidence. Credential headers and secret material
- * never leave the browser: bearer tokens, cookies, API keys, and the OTP a
- * user just typed are masked before the recording is sent.
- */
+/** Keep request evidence while masking credential values at the browser boundary. */
 declare function maskCapturedNetworkRequest<T extends CapturedNetworkRequestLike>(request: T): T;
 declare function productAppAnalytics(input: CapxulBrowserAnalyticsInput): PostHogProductAppOptions;
 type PostHogBrowserInitialize<Options, T> = (key: string, options: Options) => T;
@@ -3363,4 +3768,4 @@ declare class InMemoryTelemetryBusAdapter implements TelemetryPort {
   reportHandledError(_error: CapxulError, _context?: HandledErrorReportContext): Effect.Effect<void, never>;
 }
 //#endregion
-export { AccountBalanceFailedTelemetryEventSchema, AccountBalanceReadTelemetryEventSchema, ActivityAnnotationSavedTelemetryEventSchema, AuthFailedTelemetryEventSchema, AuthOtpDeliveredTelemetryEventSchema, AuthOtpExpiredTelemetryEventSchema, AuthOtpRequestedTelemetryEventSchema, AuthSignedOutTelemetryEventSchema, AuthVerifiedTelemetryEventSchema, BROWSER_GATED_TELEMETRY_EVENTS, BootstrapFailedTelemetryEventSchema, BootstrapResolvedTelemetryEventSchema, BundlerErrorTelemetryEventSchema, CAPXUL_ENVS, CAPXUL_OPERATIONS, CONTRACT_FIRST_TELEMETRY_EVENTS, CapturedNetworkRequestLike, CapxulBrowserAnalyticsInput, CapxulEnv, type CapxulOperation, ChainAttemptSchema, ChainUpstreamFallbackTelemetryEventSchema, ChainUpstreamSchema, ContactRelationshipChangedTelemetryEventSchema, DepositInitiatedTelemetryEventSchema, DepositSettledTelemetryEventSchema, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS, FailureModeSchema, FaucetConfirmedTelemetryEventSchema, FaucetFailedTelemetryEventSchema, FaucetRequestedTelemetryEventSchema, FunnelJourney, FunnelStepPropertyFilter, type HandledErrorReportContext, InMemoryTelemetryBusAdapter, InitializePostHogBrowserAnalyticsInput, Journey, MemberActivationFailedTelemetryEventSchema, MemberActivationReadyTelemetryEventSchema, MemberActivationStartedTelemetryEventSchema, MovementScanCheckpointTelemetryEventSchema, MovementScanIncidentTelemetryEventSchema, MovementScanWindowTelemetryEventSchema, NonEmptyTelemetryEventNames, type NormalizedCapxulOperation, OnboardingDashboardReachedTelemetryEventSchema, OnboardingIntentSelectedTelemetryEventSchema, OnboardingOrganizationSubmittedTelemetryEventSchema, OnboardingProfileSubmittedTelemetryEventSchema, OperationRetriedTelemetryEventSchema, OrgCreateFailedTelemetryEventSchema, OrgCreateStartedTelemetryEventSchema, OrgCreatedTelemetryEventSchema, OrgInviteAcceptedTelemetryEventSchema, OrgInviteExpiredTelemetryEventSchema, OrgInviteSentTelemetryEventSchema, OrgRolesSeededTelemetryEventSchema, OrgSafeConfirmedTelemetryEventSchema, OrgSafeCreatedTelemetryEventSchema, OrganizationCreationFailedTelemetryEventSchema, OrganizationCreationReadyTelemetryEventSchema, OrganizationCreationStartedTelemetryEventSchema, PII, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS, PaymentFailedTelemetryEventSchema, PaymentInitiatedTelemetryEventSchema, PaymentLifecycleTransitionTelemetryEventSchema, PaymentSettledTelemetryEventSchema, PaymentVerificationRetryTelemetryEventSchema, PermissionMirrorVerificationTelemetryEventSchema, PointEventJourney, PostHogBeforeSend, PostHogBrowserCapture, PostHogBrowserInitialize, PostHogBrowserOptions, PostHogBrowserPageviewClient, PostHogProductAppOptions, PostHogTelemetryAdapter, PostHogUtilityAppOptions, ProvisioningSafeConfirmedTelemetryEventSchema, ProvisioningSafeCreatedTelemetryEventSchema, QuickPayExternalAddressAcknowledgedTelemetryEventSchema, ReceiptPendingTelemetryEventSchema, RecordingTelemetryAdapter, ResponseHeadersSchema, SYNCABLE_CAPXUL_ENVS, TELEMETRY_EVENT_NAMES, TELEMETRY_EVENT_SCHEMAS, TELEMETRY_JOURNEYS, TELEMETRY_PRODUCERS, TelemetryEnvelopeDefaults, TelemetryEvent, TelemetryEventName, TelemetryGroupInput, TelemetryIdentifyInput, type TelemetryPort, TelemetryProducer, TelemetryProps, TelemetryRedactionOptions, TrackHandler, UiActivityActionCompletedTelemetryEventSchema, UiContactActionCompletedTelemetryEventSchema, createCapxulBeforeSend, createPostHogBrowserPageviewTracker, getTrackHandler, initializeCapxulBrowserAnalytics, initializePostHogBrowserAnalytics, isCapxulOperation, maskCapturedNetworkRequest, normalizeCapxulOperation, productAppAnalytics, redactTelemetryEvent, redactTelemetryProps, sanitizePostHogBrowserEvent, setTrackHandler, stampTelemetryEnvelope, track, utilityAppAnalytics };
+export { AccessRecoveryCompletedTelemetryEventSchema, AccountBalanceFailedTelemetryEventSchema, AccountBalanceReadTelemetryEventSchema, ActivityAnnotationSavedTelemetryEventSchema, AuthFailedTelemetryEventSchema, AuthOtpDeliveredTelemetryEventSchema, AuthOtpExpiredTelemetryEventSchema, AuthOtpRequestedTelemetryEventSchema, AuthSignedOutTelemetryEventSchema, AuthVerifiedTelemetryEventSchema, BROWSER_GATED_TELEMETRY_EVENTS, BootstrapFailedTelemetryEventSchema, BootstrapResolvedTelemetryEventSchema, BundlerErrorTelemetryEventSchema, CAPXUL_ENVS, CAPXUL_OPERATIONS, CONTRACT_FIRST_TELEMETRY_EVENTS, CapturedNetworkRequestLike, CapxulBrowserAnalyticsInput, CapxulEnv, type CapxulOperation, ChainAttemptSchema, ChainUpstreamFallbackTelemetryEventSchema, ChainUpstreamSchema, ContactRelationshipChangedTelemetryEventSchema, DepositInitiatedTelemetryEventSchema, DepositSettledTelemetryEventSchema, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS, FailureModeSchema, FaucetConfirmedTelemetryEventSchema, FaucetFailedTelemetryEventSchema, FaucetRequestedTelemetryEventSchema, FunnelJourney, FunnelStepPropertyFilter, type HandledErrorReportContext, IdentityRefusedTelemetryEventSchema, InMemoryTelemetryBusAdapter, InitializePostHogBrowserAnalyticsInput, InvoiceIssuedTelemetryEventSchema, InvoiceRequestTransitionedTelemetryEventSchema, Journey, MemberActivationFailedTelemetryEventSchema, MemberActivationReadyTelemetryEventSchema, MemberActivationStartedTelemetryEventSchema, MovementScanCheckpointTelemetryEventSchema, MovementScanIncidentTelemetryEventSchema, MovementScanWindowTelemetryEventSchema, NonEmptyTelemetryEventNames, type NormalizedCapxulOperation, OnboardingDashboardReachedTelemetryEventSchema, OnboardingIntentSelectedTelemetryEventSchema, OnboardingOrganizationSubmittedTelemetryEventSchema, OnboardingProfileSubmittedTelemetryEventSchema, OperationRetriedTelemetryEventSchema, OrgCreateFailedTelemetryEventSchema, OrgCreateStartedTelemetryEventSchema, OrgCreatedTelemetryEventSchema, OrgInviteAcceptedTelemetryEventSchema, OrgInviteExpiredTelemetryEventSchema, OrgInviteProgressedTelemetryEventSchema, OrgInviteSentTelemetryEventSchema, OrgRolesSeededTelemetryEventSchema, OrgSafeConfirmedTelemetryEventSchema, OrgSafeCreatedTelemetryEventSchema, OrganizationCreationFailedTelemetryEventSchema, OrganizationCreationReadyTelemetryEventSchema, OrganizationCreationStartedTelemetryEventSchema, PII, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS, PaymentFailedTelemetryEventSchema, PaymentInitiatedTelemetryEventSchema, PaymentLifecycleTransitionTelemetryEventSchema, PaymentSettledTelemetryEventSchema, PaymentVerificationRetryTelemetryEventSchema, PayrollGroupChangedTelemetryEventSchema, PayrollRunTransitionedTelemetryEventSchema, PermissionMirrorVerificationTelemetryEventSchema, PointEventJourney, PostHogBeforeSend, PostHogBrowserCapture, PostHogBrowserInitialize, PostHogBrowserOptions, PostHogBrowserPageviewClient, PostHogProductAppOptions, PostHogTelemetryAdapter, PostHogUtilityAppOptions, ProvisioningSafeConfirmedTelemetryEventSchema, ProvisioningSafeCreatedTelemetryEventSchema, QuickPayExternalAddressAcknowledgedTelemetryEventSchema, ReceiptPendingTelemetryEventSchema, RecordingTelemetryAdapter, ResponseHeadersSchema, SYNCABLE_CAPXUL_ENVS, TELEMETRY_EVENT_NAMES, TELEMETRY_EVENT_SCHEMAS, TELEMETRY_JOURNEYS, TELEMETRY_PRODUCERS, TelemetryEnvelopeDefaults, TelemetryEvent, TelemetryEventName, TelemetryGroupInput, TelemetryIdentifyInput, type TelemetryPort, TelemetryProducer, TelemetryProps, TelemetryRedactionOptions, TrackHandler, UiAccessStepCompletedTelemetryEventSchema, UiActivityActionCompletedTelemetryEventSchema, UiContactActionCompletedTelemetryEventSchema, UiInvoiceStepCompletedTelemetryEventSchema, UiPayrollActionCompletedTelemetryEventSchema, UiReceiveStepCompletedTelemetryEventSchema, UiTreasuryStepCompletedTelemetryEventSchema, createCapxulBeforeSend, createPostHogBrowserPageviewTracker, getTrackHandler, initializeCapxulBrowserAnalytics, initializePostHogBrowserAnalytics, isCapxulOperation, maskCapturedNetworkRequest, normalizeCapxulOperation, productAppAnalytics, redactTelemetryEvent, redactTelemetryProps, sanitizePostHogBrowserEvent, setTrackHandler, stampTelemetryEnvelope, track, utilityAppAnalytics };