@capxul/observability 4.2.0-rc.1 → 4.2.0-rc.11

package/dist/capxul-source.json

@@ -1,11 +1,11 @@
 {
   "source": {
-    "commit": "efa1ae30674425e4db92020bfad513fb6cf36011",
-    "tree": "91f805524a7c7b53e6c28cf484b549b0c1dbd9dd",
+    "commit": "12a590f10914e8b056ce54732e6f484f36e060f3",
+    "tree": "90adc6656be3c1fb0a6e18170877d46081fa2538",
     "branch": "codex/programme-rc",
     "repository": "https://github.com/Xelmar-tech/infrastructure",
     "lockfileSha256": "5870f53b72706d103220c1bcf733cb4fb71196aea32a9cfbdc277d73cc959264"
   },
   "name": "@capxul/observability",
-  "version": "4.2.0-rc.1"
+  "version": "4.2.0-rc.11"
 }

package/dist/index.d.mts

@@ -199,6 +199,8 @@ declare const CAPXUL_OPERATIONS: {
     readonly emitAnnotationSaved: "activity.emitAnnotationSaved";
     readonly get: "activity.get";
     readonly list: "activity.list";
+    /** The SDK's live Activity read over the indexer's SSE stream. */
+    readonly subscribe: "activity.subscribe";
     readonly summary: "activity.summary";
   };
   readonly addressBook: {
@@ -600,7 +602,7 @@ interface TelemetryPort {
 }
 //#endregion
 //#region src/index.d.ts
-declare const TELEMETRY_EVENT_NAMES: readonly ["auth_otp_requested", "auth_otp_delivered", "auth_otp_expired", "auth_verified", "auth_failed", "auth_signed_out", "onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "provisioning_safe_created", "provisioning_safe_confirmed", "bootstrap_resolved", "bootstrap_failed", "member_activation_started", "member_activation_ready", "member_activation_failed", "organization_creation_started", "organization_creation_ready", "organization_creation_failed", "chain_upstream_fallback", "bundler_error", "receipt_pending", "operation_retried", "account_balance_read", "account_balance_failed", "faucet_requested", "faucet_confirmed", "faucet_failed", "org_create_started", "org_safe_created", "org_safe_confirmed", "org_roles_seeded", "org_created", "org_create_failed", "org_invite_sent", "org_invite_accepted", "org_invite_expired", "payment_initiated", "payment_settled", "payment_failed", "payment_verification_retry", "payment_lifecycle_transition", "quick_pay_external_address_acknowledged", "deposit_initiated", "deposit_settled", "permission_mirror_verification", "movement_scan_window", "movement_scan_checkpoint", "movement_scan_incident", "activity_annotation_saved", "ui_activity_action_completed", "contact_relationship_changed", "ui_contact_action_completed"];
+declare const TELEMETRY_EVENT_NAMES: readonly ["auth_otp_requested", "auth_otp_delivered", "auth_otp_expired", "auth_verified", "auth_failed", "identity_refused", "auth_signed_out", "onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "provisioning_safe_created", "provisioning_safe_confirmed", "bootstrap_resolved", "bootstrap_failed", "member_activation_started", "member_activation_ready", "member_activation_failed", "organization_creation_started", "organization_creation_ready", "organization_creation_failed", "chain_upstream_fallback", "bundler_error", "receipt_pending", "operation_retried", "account_balance_read", "account_balance_failed", "faucet_requested", "faucet_confirmed", "faucet_failed", "org_create_started", "org_safe_created", "org_safe_confirmed", "org_roles_seeded", "org_created", "org_create_failed", "org_invite_sent", "org_invite_accepted", "org_invite_expired", "payment_initiated", "payment_settled", "payment_failed", "payment_verification_retry", "payment_lifecycle_transition", "quick_pay_external_address_acknowledged", "deposit_initiated", "deposit_settled", "permission_mirror_verification", "movement_scan_window", "movement_scan_checkpoint", "movement_scan_incident", "activity_annotation_saved", "ui_activity_action_completed", "contact_relationship_changed", "ui_contact_action_completed", "access_recovery_completed", "ui_access_step_completed", "org_invite_progressed", "invoice_issued", "invoice_request_transitioned", "ui_invoice_step_completed", "ui_treasury_step_completed", "ui_receive_step_completed", "payroll_group_changed", "payroll_run_transitioned", "ui_payroll_action_completed"];
 type TelemetryEventName = (typeof TELEMETRY_EVENT_NAMES)[number];
 type NonEmptyTelemetryEventNames = readonly [TelemetryEventName, ...TelemetryEventName[]];
 type FunnelStepPropertyFilter = {
@@ -919,6 +921,24 @@ declare const AuthFailedTelemetryEventSchema: Schema.Struct<{
     readonly reason: Schema.optional<Schema.String>;
   }>;
 }>;
+declare const IdentityRefusedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"identity_refused">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    /** The refused identity event tag, for example CreateOrganization. */
+    readonly event: Schema.optional<Schema.String>;
+    /** The machine's refusal code: WRONG_STATE, SUPERSEDED or STALE_EPOCH. */
+    readonly refusal_code: Schema.optional<Schema.String>;
+    /** The machine slot the request targeted, for example identity:org. */
+    readonly slot: Schema.optional<Schema.String>;
+    /** The machine state at refusal, for example authenticated:claiming. */
+    readonly state: Schema.optional<Schema.String>;
+  }>;
+}>;
 declare const AuthSignedOutTelemetryEventSchema: Schema.Struct<{
   readonly name: Schema.Literal<"auth_signed_out">;
   readonly props: Schema.Struct<{
@@ -1779,10 +1799,33 @@ declare const PermissionMirrorVerificationTelemetryEventSchema: Schema.Struct<{
     readonly journey_id: Schema.optional<Schema.String>;
     readonly correlation_id: Schema.optional<Schema.String>;
     readonly sdk_version: Schema.optional<Schema.String>;
+    /** The RECEIPT verification outcome. What the mirror then did is separate. */
     readonly outcome: Schema.String;
     readonly reason: Schema.String;
     readonly chain_id: Schema.Number;
     readonly retry_count: Schema.Number;
+    /**
+     * #1960 R02, consumed by R03. A verified receipt is not an applied Permission:
+     * these two optional fields let the producer say what the applying mutation
+     * actually returned, and which command it was, without either fact rewriting
+     * the receipt outcome above. Absent when application has not happened yet.
+     */
+    readonly application_result: Schema.optional<Schema.Literals<readonly ["applied", "replayed", "conflicting_replay", "revision_mismatch"]>>;
+    readonly command_id: Schema.optional<Schema.String>;
+    /**
+     * #1961 R03. The authorized stored row names the Permission it changed; the
+     * verified receipt names the chain facts that prove it. Every field is
+     * optional because a pending or provider-failed verification has neither an
+     * application result nor a receipt to report.
+     */
+    readonly permission_id: Schema.optional<Schema.String>;
+    readonly permission_assignment_id: Schema.optional<Schema.String>;
+    readonly permission_operation: Schema.optional<Schema.Literals<readonly ["create", "change", "assign", "revoke", "replace"]>>;
+    readonly revision: Schema.optional<Schema.Number>;
+    readonly user_op_hash: Schema.optional<Schema.String>;
+    readonly transaction_hash: Schema.optional<Schema.String>;
+    readonly block_number: Schema.optional<Schema.Number>;
+    readonly log_index: Schema.optional<Schema.Number>;
   }>;
 }>;
 declare const MovementScanWindowTelemetryEventSchema: Schema.Struct<{
@@ -1976,6 +2019,182 @@ declare const UiActivityActionCompletedTelemetryEventSchema: Schema.Struct<{
     readonly truncated: Schema.optional<Schema.Boolean>;
   }>]>;
 }>;
+declare const AccessRecoveryCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"access_recovery_completed">;
+  readonly props: Schema.Union<readonly [Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly recovery: Schema.Literal<"session_restoration">;
+    readonly outcome: Schema.Literals<readonly ["restored", "absent", "failed"]>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+  }>, Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly recovery: Schema.Literal<"signer_readiness">;
+    readonly outcome: Schema.Literals<readonly ["ready", "unavailable"]>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+  }>]>;
+}>;
+declare const UiAccessStepCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"ui_access_step_completed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly step: Schema.Literals<readonly ["dashboard_granted", "redirect_completed", "gate_error_displayed", "retry_selected", "capability_refusal_displayed", "signer_refusal_displayed"]>;
+    readonly capability: Schema.optional<Schema.Literals<readonly ["spend", "managePeople"]>>;
+    readonly probe: Schema.optional<Schema.Literals<readonly ["session", "membership", "lifecycle"]>>;
+    readonly reason: Schema.optional<Schema.Literals<readonly ["loading", "no-permission", "org-unavailable"]>>;
+  }>;
+}>;
+declare const OrgInviteProgressedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"org_invite_progressed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly organization_id: Schema.Codec<string, string, never, never>;
+    readonly progress: Schema.Literals<readonly ["account_ready", "permission_applied", "membership_activated", "revoked"]>;
+    /** The invited Party. The initiating actor stays on the envelope's identity. */
+    readonly member_party_id: Schema.String;
+    readonly occurred_at: Schema.Number;
+  }>;
+}>;
+declare const InvoiceIssuedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"invoice_issued">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly request_id: Schema.String;
+    readonly issuer_scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly issuer_scope_id: Schema.String;
+    readonly payer_party_id: Schema.optional<Schema.String>;
+    readonly occurred_at: Schema.Number;
+  }>;
+}>;
+declare const InvoiceRequestTransitionedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"invoice_request_transitioned">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly request_id: Schema.String;
+    readonly transition: Schema.Literals<readonly ["approval_prepared", "declined", "cancelled"]>;
+    readonly actor_scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly actor_scope_id: Schema.String;
+    readonly occurred_at: Schema.Number;
+  }>;
+}>;
+declare const UiInvoiceStepCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"ui_invoice_step_completed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly step: Schema.Literals<readonly ["opened", "previewed", "dismissed", "submitted", "result_displayed", "refusal_displayed", "retry_selected"]>;
+    readonly request_id: Schema.optional<Schema.String>;
+  }>;
+}>;
+declare const UiTreasuryStepCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"ui_treasury_step_completed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly step: Schema.Literals<readonly ["balance_displayed", "read_refusal_displayed", "retry_selected", "recovery_completed"]>;
+    readonly account_kind: Schema.optional<Schema.Literals<readonly ["personalSafe", "orgTreasury"]>>;
+  }>;
+}>;
+declare const UiReceiveStepCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"ui_receive_step_completed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly step: Schema.Literals<readonly ["instructions_displayed", "address_copied", "copy_failed", "refusal_displayed", "retry_selected"]>;
+    readonly account_kind: Schema.optional<Schema.Literals<readonly ["personalSafe", "orgTreasury"]>>;
+  }>;
+}>;
+declare const PayrollGroupChangedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"payroll_group_changed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly organization_id: Schema.Codec<string, string, never, never>;
+    readonly change: Schema.Literals<readonly ["created", "updated", "deleted"]>;
+    readonly group_id: Schema.String;
+    readonly member_count: Schema.Number;
+    readonly occurred_at: Schema.Number;
+  }>;
+}>;
+declare const PayrollRunTransitionedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"payroll_run_transitioned">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly organization_id: Schema.Codec<string, string, never, never>;
+    readonly transition: Schema.Literals<readonly ["prepared", "authorized", "settled"]>;
+    readonly run_id: Schema.String;
+    readonly payment_count: Schema.optional<Schema.Number>;
+    readonly occurred_at: Schema.Number;
+  }>;
+}>;
+declare const UiPayrollActionCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"ui_payroll_action_completed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly action: Schema.Literals<readonly ["opened", "refusal_displayed", "recovery_completed", "cancelled", "submitted_displayed"]>;
+    readonly run_id: Schema.optional<Schema.String>;
+  }>;
+}>;
 declare const TELEMETRY_EVENT_SCHEMAS: {
   readonly contact_relationship_changed: Schema.Struct<{
     readonly name: Schema.Literal<"contact_relationship_changed">;
@@ -1995,6 +2214,182 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly operation: Schema.Literals<readonly ["addressBook.add", "addressBook.label", "addressBook.hide", "addressBook.unhide"]>;
     }>;
   }>;
+  readonly access_recovery_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"access_recovery_completed">;
+    readonly props: Schema.Union<readonly [Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly recovery: Schema.Literal<"session_restoration">;
+      readonly outcome: Schema.Literals<readonly ["restored", "absent", "failed"]>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    }>, Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly recovery: Schema.Literal<"signer_readiness">;
+      readonly outcome: Schema.Literals<readonly ["ready", "unavailable"]>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    }>]>;
+  }>;
+  readonly ui_access_step_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"ui_access_step_completed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly step: Schema.Literals<readonly ["dashboard_granted", "redirect_completed", "gate_error_displayed", "retry_selected", "capability_refusal_displayed", "signer_refusal_displayed"]>;
+      readonly capability: Schema.optional<Schema.Literals<readonly ["spend", "managePeople"]>>;
+      readonly probe: Schema.optional<Schema.Literals<readonly ["session", "membership", "lifecycle"]>>;
+      readonly reason: Schema.optional<Schema.Literals<readonly ["loading", "no-permission", "org-unavailable"]>>;
+    }>;
+  }>;
+  readonly org_invite_progressed: Schema.Struct<{
+    readonly name: Schema.Literal<"org_invite_progressed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly organization_id: Schema.Codec<string, string, never, never>;
+      readonly progress: Schema.Literals<readonly ["account_ready", "permission_applied", "membership_activated", "revoked"]>;
+      /** The invited Party. The initiating actor stays on the envelope's identity. */
+      readonly member_party_id: Schema.String;
+      readonly occurred_at: Schema.Number;
+    }>;
+  }>;
+  readonly invoice_issued: Schema.Struct<{
+    readonly name: Schema.Literal<"invoice_issued">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly request_id: Schema.String;
+      readonly issuer_scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly issuer_scope_id: Schema.String;
+      readonly payer_party_id: Schema.optional<Schema.String>;
+      readonly occurred_at: Schema.Number;
+    }>;
+  }>;
+  readonly invoice_request_transitioned: Schema.Struct<{
+    readonly name: Schema.Literal<"invoice_request_transitioned">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly request_id: Schema.String;
+      readonly transition: Schema.Literals<readonly ["approval_prepared", "declined", "cancelled"]>;
+      readonly actor_scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly actor_scope_id: Schema.String;
+      readonly occurred_at: Schema.Number;
+    }>;
+  }>;
+  readonly ui_invoice_step_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"ui_invoice_step_completed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly step: Schema.Literals<readonly ["opened", "previewed", "dismissed", "submitted", "result_displayed", "refusal_displayed", "retry_selected"]>;
+      readonly request_id: Schema.optional<Schema.String>;
+    }>;
+  }>;
+  readonly ui_treasury_step_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"ui_treasury_step_completed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly step: Schema.Literals<readonly ["balance_displayed", "read_refusal_displayed", "retry_selected", "recovery_completed"]>;
+      readonly account_kind: Schema.optional<Schema.Literals<readonly ["personalSafe", "orgTreasury"]>>;
+    }>;
+  }>;
+  readonly ui_receive_step_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"ui_receive_step_completed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly step: Schema.Literals<readonly ["instructions_displayed", "address_copied", "copy_failed", "refusal_displayed", "retry_selected"]>;
+      readonly account_kind: Schema.optional<Schema.Literals<readonly ["personalSafe", "orgTreasury"]>>;
+    }>;
+  }>;
+  readonly payroll_group_changed: Schema.Struct<{
+    readonly name: Schema.Literal<"payroll_group_changed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly organization_id: Schema.Codec<string, string, never, never>;
+      readonly change: Schema.Literals<readonly ["created", "updated", "deleted"]>;
+      readonly group_id: Schema.String;
+      readonly member_count: Schema.Number;
+      readonly occurred_at: Schema.Number;
+    }>;
+  }>;
+  readonly payroll_run_transitioned: Schema.Struct<{
+    readonly name: Schema.Literal<"payroll_run_transitioned">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly organization_id: Schema.Codec<string, string, never, never>;
+      readonly transition: Schema.Literals<readonly ["prepared", "authorized", "settled"]>;
+      readonly run_id: Schema.String;
+      readonly payment_count: Schema.optional<Schema.Number>;
+      readonly occurred_at: Schema.Number;
+    }>;
+  }>;
+  readonly ui_payroll_action_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"ui_payroll_action_completed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly action: Schema.Literals<readonly ["opened", "refusal_displayed", "recovery_completed", "cancelled", "submitted_displayed"]>;
+      readonly run_id: Schema.optional<Schema.String>;
+    }>;
+  }>;
   readonly ui_contact_action_completed: Schema.Struct<{
     readonly name: Schema.Literal<"ui_contact_action_completed">;
     readonly props: Schema.Union<readonly [Schema.Struct<{
@@ -2212,6 +2607,24 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly reason: Schema.optional<Schema.String>;
     }>;
   }>;
+  readonly identity_refused: Schema.Struct<{
+    readonly name: Schema.Literal<"identity_refused">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      /** The refused identity event tag, for example CreateOrganization. */
+      readonly event: Schema.optional<Schema.String>;
+      /** The machine's refusal code: WRONG_STATE, SUPERSEDED or STALE_EPOCH. */
+      readonly refusal_code: Schema.optional<Schema.String>;
+      /** The machine slot the request targeted, for example identity:org. */
+      readonly slot: Schema.optional<Schema.String>;
+      /** The machine state at refusal, for example authenticated:claiming. */
+      readonly state: Schema.optional<Schema.String>;
+    }>;
+  }>;
   readonly auth_signed_out: Schema.Struct<{
     readonly name: Schema.Literal<"auth_signed_out">;
     readonly props: Schema.Struct<{
@@ -3072,10 +3485,33 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly journey_id: Schema.optional<Schema.String>;
       readonly correlation_id: Schema.optional<Schema.String>;
       readonly sdk_version: Schema.optional<Schema.String>;
+      /** The RECEIPT verification outcome. What the mirror then did is separate. */
       readonly outcome: Schema.String;
       readonly reason: Schema.String;
       readonly chain_id: Schema.Number;
       readonly retry_count: Schema.Number;
+      /**
+       * #1960 R02, consumed by R03. A verified receipt is not an applied Permission:
+       * these two optional fields let the producer say what the applying mutation
+       * actually returned, and which command it was, without either fact rewriting
+       * the receipt outcome above. Absent when application has not happened yet.
+       */
+      readonly application_result: Schema.optional<Schema.Literals<readonly ["applied", "replayed", "conflicting_replay", "revision_mismatch"]>>;
+      readonly command_id: Schema.optional<Schema.String>;
+      /**
+       * #1961 R03. The authorized stored row names the Permission it changed; the
+       * verified receipt names the chain facts that prove it. Every field is
+       * optional because a pending or provider-failed verification has neither an
+       * application result nor a receipt to report.
+       */
+      readonly permission_id: Schema.optional<Schema.String>;
+      readonly permission_assignment_id: Schema.optional<Schema.String>;
+      readonly permission_operation: Schema.optional<Schema.Literals<readonly ["create", "change", "assign", "revoke", "replace"]>>;
+      readonly revision: Schema.optional<Schema.Number>;
+      readonly user_op_hash: Schema.optional<Schema.String>;
+      readonly transaction_hash: Schema.optional<Schema.String>;
+      readonly block_number: Schema.optional<Schema.Number>;
+      readonly log_index: Schema.optional<Schema.Number>;
     }>;
   }>;
   readonly movement_scan_window: Schema.Struct<{
@@ -3131,7 +3567,7 @@ declare const FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS: readonly [];
  * A domain node removes its entry when it adds the producer. The telemetry
  * gate rejects an entry that has a producer.
  */
-declare const CONTRACT_FIRST_TELEMETRY_EVENTS: readonly [];
+declare const CONTRACT_FIRST_TELEMETRY_EVENTS: readonly ["org_invite_progressed", "invoice_issued", "invoice_request_transitioned", "payroll_group_changed", "payroll_run_transitioned"];
 /**
  * Catalog events whose product mapper remains gated on the #1150 frontend
  * adoption. L1 S1 removes their retired SDK-flow producers without inventing
@@ -3141,7 +3577,7 @@ declare const CONTRACT_FIRST_TELEMETRY_EVENTS: readonly [];
  */
 declare const PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS: readonly ["auth_otp_expired"];
 /** Catalogued browser observations whose producers remain owned by app adoption. */
-declare const BROWSER_GATED_TELEMETRY_EVENTS: readonly ["onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "ui_activity_action_completed", "ui_contact_action_completed"];
+declare const BROWSER_GATED_TELEMETRY_EVENTS: readonly ["onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "ui_activity_action_completed", "ui_contact_action_completed", "ui_access_step_completed", "ui_invoice_step_completed", "ui_treasury_step_completed", "ui_receive_step_completed", "ui_payroll_action_completed"];
 interface TelemetryIdentifyInput {
   readonly distinctId: string;
   readonly anonDistinctId?: AnonymousDistinctId;
@@ -3360,4 +3796,4 @@ declare class InMemoryTelemetryBusAdapter implements TelemetryPort {
   reportHandledError(_error: CapxulError, _context?: HandledErrorReportContext): Effect.Effect<void, never>;
 }
 //#endregion
-export { AccountBalanceFailedTelemetryEventSchema, AccountBalanceReadTelemetryEventSchema, ActivityAnnotationSavedTelemetryEventSchema, AuthFailedTelemetryEventSchema, AuthOtpDeliveredTelemetryEventSchema, AuthOtpExpiredTelemetryEventSchema, AuthOtpRequestedTelemetryEventSchema, AuthSignedOutTelemetryEventSchema, AuthVerifiedTelemetryEventSchema, BROWSER_GATED_TELEMETRY_EVENTS, BootstrapFailedTelemetryEventSchema, BootstrapResolvedTelemetryEventSchema, BundlerErrorTelemetryEventSchema, CAPXUL_ENVS, CAPXUL_OPERATIONS, CONTRACT_FIRST_TELEMETRY_EVENTS, CapturedNetworkRequestLike, CapxulBrowserAnalyticsInput, CapxulEnv, type CapxulOperation, ChainAttemptSchema, ChainUpstreamFallbackTelemetryEventSchema, ChainUpstreamSchema, ContactRelationshipChangedTelemetryEventSchema, DepositInitiatedTelemetryEventSchema, DepositSettledTelemetryEventSchema, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS, FailureModeSchema, FaucetConfirmedTelemetryEventSchema, FaucetFailedTelemetryEventSchema, FaucetRequestedTelemetryEventSchema, FunnelJourney, FunnelStepPropertyFilter, type HandledErrorReportContext, InMemoryTelemetryBusAdapter, InitializePostHogBrowserAnalyticsInput, Journey, MemberActivationFailedTelemetryEventSchema, MemberActivationReadyTelemetryEventSchema, MemberActivationStartedTelemetryEventSchema, MovementScanCheckpointTelemetryEventSchema, MovementScanIncidentTelemetryEventSchema, MovementScanWindowTelemetryEventSchema, NonEmptyTelemetryEventNames, type NormalizedCapxulOperation, OnboardingDashboardReachedTelemetryEventSchema, OnboardingIntentSelectedTelemetryEventSchema, OnboardingOrganizationSubmittedTelemetryEventSchema, OnboardingProfileSubmittedTelemetryEventSchema, OperationRetriedTelemetryEventSchema, OrgCreateFailedTelemetryEventSchema, OrgCreateStartedTelemetryEventSchema, OrgCreatedTelemetryEventSchema, OrgInviteAcceptedTelemetryEventSchema, OrgInviteExpiredTelemetryEventSchema, OrgInviteSentTelemetryEventSchema, OrgRolesSeededTelemetryEventSchema, OrgSafeConfirmedTelemetryEventSchema, OrgSafeCreatedTelemetryEventSchema, OrganizationCreationFailedTelemetryEventSchema, OrganizationCreationReadyTelemetryEventSchema, OrganizationCreationStartedTelemetryEventSchema, PII, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS, PaymentFailedTelemetryEventSchema, PaymentInitiatedTelemetryEventSchema, PaymentLifecycleTransitionTelemetryEventSchema, PaymentSettledTelemetryEventSchema, PaymentVerificationRetryTelemetryEventSchema, PermissionMirrorVerificationTelemetryEventSchema, PointEventJourney, PostHogBeforeSend, PostHogBrowserCapture, PostHogBrowserInitialize, PostHogBrowserOptions, PostHogBrowserPageviewClient, PostHogProductAppOptions, PostHogTelemetryAdapter, PostHogUtilityAppOptions, ProvisioningSafeConfirmedTelemetryEventSchema, ProvisioningSafeCreatedTelemetryEventSchema, QuickPayExternalAddressAcknowledgedTelemetryEventSchema, ReceiptPendingTelemetryEventSchema, RecordingTelemetryAdapter, ResponseHeadersSchema, SYNCABLE_CAPXUL_ENVS, TELEMETRY_EVENT_NAMES, TELEMETRY_EVENT_SCHEMAS, TELEMETRY_JOURNEYS, TELEMETRY_PRODUCERS, TelemetryEnvelopeDefaults, TelemetryEvent, TelemetryEventName, TelemetryGroupInput, TelemetryIdentifyInput, type TelemetryPort, TelemetryProducer, TelemetryProps, TelemetryRedactionOptions, TrackHandler, UiActivityActionCompletedTelemetryEventSchema, UiContactActionCompletedTelemetryEventSchema, createCapxulBeforeSend, createPostHogBrowserPageviewTracker, getTrackHandler, initializeCapxulBrowserAnalytics, initializePostHogBrowserAnalytics, isCapxulOperation, maskCapturedNetworkRequest, normalizeCapxulOperation, productAppAnalytics, redactTelemetryEvent, redactTelemetryProps, sanitizePostHogBrowserEvent, setTrackHandler, stampTelemetryEnvelope, track, utilityAppAnalytics };
+export { AccessRecoveryCompletedTelemetryEventSchema, AccountBalanceFailedTelemetryEventSchema, AccountBalanceReadTelemetryEventSchema, ActivityAnnotationSavedTelemetryEventSchema, AuthFailedTelemetryEventSchema, AuthOtpDeliveredTelemetryEventSchema, AuthOtpExpiredTelemetryEventSchema, AuthOtpRequestedTelemetryEventSchema, AuthSignedOutTelemetryEventSchema, AuthVerifiedTelemetryEventSchema, BROWSER_GATED_TELEMETRY_EVENTS, BootstrapFailedTelemetryEventSchema, BootstrapResolvedTelemetryEventSchema, BundlerErrorTelemetryEventSchema, CAPXUL_ENVS, CAPXUL_OPERATIONS, CONTRACT_FIRST_TELEMETRY_EVENTS, CapturedNetworkRequestLike, CapxulBrowserAnalyticsInput, CapxulEnv, type CapxulOperation, ChainAttemptSchema, ChainUpstreamFallbackTelemetryEventSchema, ChainUpstreamSchema, ContactRelationshipChangedTelemetryEventSchema, DepositInitiatedTelemetryEventSchema, DepositSettledTelemetryEventSchema, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS, FailureModeSchema, FaucetConfirmedTelemetryEventSchema, FaucetFailedTelemetryEventSchema, FaucetRequestedTelemetryEventSchema, FunnelJourney, FunnelStepPropertyFilter, type HandledErrorReportContext, IdentityRefusedTelemetryEventSchema, InMemoryTelemetryBusAdapter, InitializePostHogBrowserAnalyticsInput, InvoiceIssuedTelemetryEventSchema, InvoiceRequestTransitionedTelemetryEventSchema, Journey, MemberActivationFailedTelemetryEventSchema, MemberActivationReadyTelemetryEventSchema, MemberActivationStartedTelemetryEventSchema, MovementScanCheckpointTelemetryEventSchema, MovementScanIncidentTelemetryEventSchema, MovementScanWindowTelemetryEventSchema, NonEmptyTelemetryEventNames, type NormalizedCapxulOperation, OnboardingDashboardReachedTelemetryEventSchema, OnboardingIntentSelectedTelemetryEventSchema, OnboardingOrganizationSubmittedTelemetryEventSchema, OnboardingProfileSubmittedTelemetryEventSchema, OperationRetriedTelemetryEventSchema, OrgCreateFailedTelemetryEventSchema, OrgCreateStartedTelemetryEventSchema, OrgCreatedTelemetryEventSchema, OrgInviteAcceptedTelemetryEventSchema, OrgInviteExpiredTelemetryEventSchema, OrgInviteProgressedTelemetryEventSchema, OrgInviteSentTelemetryEventSchema, OrgRolesSeededTelemetryEventSchema, OrgSafeConfirmedTelemetryEventSchema, OrgSafeCreatedTelemetryEventSchema, OrganizationCreationFailedTelemetryEventSchema, OrganizationCreationReadyTelemetryEventSchema, OrganizationCreationStartedTelemetryEventSchema, PII, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS, PaymentFailedTelemetryEventSchema, PaymentInitiatedTelemetryEventSchema, PaymentLifecycleTransitionTelemetryEventSchema, PaymentSettledTelemetryEventSchema, PaymentVerificationRetryTelemetryEventSchema, PayrollGroupChangedTelemetryEventSchema, PayrollRunTransitionedTelemetryEventSchema, PermissionMirrorVerificationTelemetryEventSchema, PointEventJourney, PostHogBeforeSend, PostHogBrowserCapture, PostHogBrowserInitialize, PostHogBrowserOptions, PostHogBrowserPageviewClient, PostHogProductAppOptions, PostHogTelemetryAdapter, PostHogUtilityAppOptions, ProvisioningSafeConfirmedTelemetryEventSchema, ProvisioningSafeCreatedTelemetryEventSchema, QuickPayExternalAddressAcknowledgedTelemetryEventSchema, ReceiptPendingTelemetryEventSchema, RecordingTelemetryAdapter, ResponseHeadersSchema, SYNCABLE_CAPXUL_ENVS, TELEMETRY_EVENT_NAMES, TELEMETRY_EVENT_SCHEMAS, TELEMETRY_JOURNEYS, TELEMETRY_PRODUCERS, TelemetryEnvelopeDefaults, TelemetryEvent, TelemetryEventName, TelemetryGroupInput, TelemetryIdentifyInput, type TelemetryPort, TelemetryProducer, TelemetryProps, TelemetryRedactionOptions, TrackHandler, UiAccessStepCompletedTelemetryEventSchema, UiActivityActionCompletedTelemetryEventSchema, UiContactActionCompletedTelemetryEventSchema, UiInvoiceStepCompletedTelemetryEventSchema, UiPayrollActionCompletedTelemetryEventSchema, UiReceiveStepCompletedTelemetryEventSchema, UiTreasuryStepCompletedTelemetryEventSchema, createCapxulBeforeSend, createPostHogBrowserPageviewTracker, getTrackHandler, initializeCapxulBrowserAnalytics, initializePostHogBrowserAnalytics, isCapxulOperation, maskCapturedNetworkRequest, normalizeCapxulOperation, productAppAnalytics, redactTelemetryEvent, redactTelemetryProps, sanitizePostHogBrowserEvent, setTrackHandler, stampTelemetryEnvelope, track, utilityAppAnalytics };

package/dist/index.mjs

@@ -114,6 +114,8 @@ const CAPXUL_OPERATIONS = {
 		emitAnnotationSaved: "activity.emitAnnotationSaved",
 		get: "activity.get",
 		list: "activity.list",
+		/** The SDK's live Activity read over the indexer's SSE stream. */
+		subscribe: "activity.subscribe",
 		summary: "activity.summary"
 	},
 	addressBook: {
@@ -473,6 +475,7 @@ const TELEMETRY_EVENT_NAMES = [
 	"auth_otp_expired",
 	"auth_verified",
 	"auth_failed",
+	"identity_refused",
 	"auth_signed_out",
 	"onboarding_intent_selected",
 	"onboarding_profile_submitted",
@@ -521,7 +524,18 @@ const TELEMETRY_EVENT_NAMES = [
 	"activity_annotation_saved",
 	"ui_activity_action_completed",
 	"contact_relationship_changed",
-	"ui_contact_action_completed"
+	"ui_contact_action_completed",
+	"access_recovery_completed",
+	"ui_access_step_completed",
+	"org_invite_progressed",
+	"invoice_issued",
+	"invoice_request_transitioned",
+	"ui_invoice_step_completed",
+	"ui_treasury_step_completed",
+	"ui_receive_step_completed",
+	"payroll_group_changed",
+	"payroll_run_transitioned",
+	"ui_payroll_action_completed"
 ];
 const TELEMETRY_JOURNEYS = {
 	returning_user_login: {
@@ -869,6 +883,17 @@ const AuthFailedProps = Schema.Struct({
 	auth_type: OptionalString,
 	reason: OptionalString
 });
+const IdentityRefusedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	/** The refused identity event tag, for example CreateOrganization. */
+	event: OptionalString,
+	/** The machine's refusal code: WRONG_STATE, SUPERSEDED or STALE_EPOCH. */
+	refusal_code: OptionalString,
+	/** The machine slot the request targeted, for example identity:org. */
+	slot: OptionalString,
+	/** The machine state at refusal, for example authenticated:claiming. */
+	state: OptionalString
+});
 const AuthSignedOutProps = Schema.Struct(TelemetryEnvelopeProps);
 const ProvisioningSafeCreatedProps = Schema.Struct({
 	...TelemetryEnvelopeProps,
@@ -1256,10 +1281,44 @@ const DepositSettledProps = Schema.Struct({
 });
 const PermissionMirrorVerificationProps = Schema.Struct({
 	...TelemetryEnvelopeProps,
+	/** The RECEIPT verification outcome. What the mirror then did is separate. */
 	outcome: Schema.String,
 	reason: Schema.String,
 	chain_id: Schema.Number,
-	retry_count: Schema.Number
+	retry_count: Schema.Number,
+	/**
+	* #1960 R02, consumed by R03. A verified receipt is not an applied Permission:
+	* these two optional fields let the producer say what the applying mutation
+	* actually returned, and which command it was, without either fact rewriting
+	* the receipt outcome above. Absent when application has not happened yet.
+	*/
+	application_result: Schema.optional(Schema.Literals([
+		"applied",
+		"replayed",
+		"conflicting_replay",
+		"revision_mismatch"
+	])),
+	command_id: OptionalString,
+	/**
+	* #1961 R03. The authorized stored row names the Permission it changed; the
+	* verified receipt names the chain facts that prove it. Every field is
+	* optional because a pending or provider-failed verification has neither an
+	* application result nor a receipt to report.
+	*/
+	permission_id: OptionalString,
+	permission_assignment_id: OptionalString,
+	permission_operation: Schema.optional(Schema.Literals([
+		"create",
+		"change",
+		"assign",
+		"revoke",
+		"replace"
+	])),
+	revision: Schema.optional(Schema.Number),
+	user_op_hash: OptionalString,
+	transaction_hash: OptionalString,
+	block_number: Schema.optional(Schema.Number),
+	log_index: Schema.optional(Schema.Number)
 });
 const MovementScanWindowProps = Schema.Struct({
 	...TelemetryEnvelopeProps,
@@ -1305,6 +1364,10 @@ const AuthFailedTelemetryEventSchema = Schema.Struct({
 	name: Schema.Literal("auth_failed"),
 	props: AuthFailedProps
 });
+const IdentityRefusedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("identity_refused"),
+	props: IdentityRefusedProps
+});
 const AuthSignedOutTelemetryEventSchema = Schema.Struct({
 	name: Schema.Literal("auth_signed_out"),
 	props: AuthSignedOutProps
@@ -1485,6 +1548,10 @@ const MovementScanIncidentTelemetryEventSchema = Schema.Struct({
 	name: Schema.Literal("movement_scan_incident"),
 	props: MovementScanIncidentProps
 });
+/** The one spelling of "whose scope did this happen in" across every surface. */
+const ScopeKindSchema = Schema.Literals(["account", "organization"]);
+const AccountKindSchema = Schema.Literals(["personalSafe", "orgTreasury"]);
+const OptionalReasonCode = Schema.optional(Schema.Literals(CAPXUL_ERROR_CODES));
 const ActivityReferenceProps = {
 	reference_kind: Schema.Literals(["payment", "movement"]),
 	reference_id: Schema.String
@@ -1515,8 +1582,8 @@ const ActivityFilterProps = {
 };
 const ActivityActionProps = {
 	...TelemetryEnvelopeProps,
-	scope_kind: Schema.Literals(["account", "organization"]),
-	reason_code: Schema.optional(Schema.Literals(CAPXUL_ERROR_CODES))
+	scope_kind: ScopeKindSchema,
+	reason_code: OptionalReasonCode
 };
 const ContactRelationshipChangedTelemetryEventSchema = Schema.Struct({
 	name: Schema.Literal("contact_relationship_changed"),
@@ -1528,7 +1595,7 @@ const ContactRelationshipChangedTelemetryEventSchema = Schema.Struct({
 			"hidden",
 			"restored"
 		]),
-		scope_kind: Schema.Literals(["account", "organization"]),
+		scope_kind: ScopeKindSchema,
 		scope_id: Schema.String,
 		owner_party_id: Schema.String,
 		party_id: Schema.String,
@@ -1544,9 +1611,9 @@ const ContactRelationshipChangedTelemetryEventSchema = Schema.Struct({
 });
 const ContactActionProps = {
 	...TelemetryEnvelopeProps,
-	scope_kind: Schema.Literals(["account", "organization"]),
+	scope_kind: ScopeKindSchema,
 	party_id: OptionalString,
-	reason_code: Schema.optional(Schema.Literals(CAPXUL_ERROR_CODES))
+	reason_code: OptionalReasonCode
 };
 const UiContactActionCompletedTelemetryEventSchema = Schema.Struct({
 	name: Schema.Literal("ui_contact_action_completed"),
@@ -1573,7 +1640,7 @@ const ActivityAnnotationSavedTelemetryEventSchema = Schema.Struct({
 	props: Schema.Struct({
 		...TelemetryEnvelopeProps,
 		...ActivityReferenceProps,
-		scope_kind: Schema.Literals(["account", "organization"]),
+		scope_kind: ScopeKindSchema,
 		scope_id: Schema.String,
 		occurred_at: Schema.Number
 	})
@@ -1628,8 +1695,206 @@ const UiActivityActionCompletedTelemetryEventSchema = Schema.Struct({
 		})
 	])
 });
+/**
+* Reliability closeout (#1960 R02) — the shape every explicit UI observation
+* below shares. `scope_kind` says whose surface the person was looking at,
+* `organization_id` is the verified Organization the producer resolved (absent
+* on a personal action), and `reason_code` is a catalog error code, never copy.
+*/
+const UiStepProps = {
+	...TelemetryEnvelopeProps,
+	scope_kind: ScopeKindSchema,
+	organization_id: OptionalOrgId,
+	reason_code: OptionalReasonCode
+};
+const AccessRecoveryCompletedProps = Schema.Union([Schema.Struct({
+	...TelemetryEnvelopeProps,
+	recovery: Schema.Literal("session_restoration"),
+	outcome: Schema.Literals([
+		"restored",
+		"absent",
+		"failed"
+	]),
+	reason_code: OptionalReasonCode,
+	organization_id: OptionalOrgId
+}), Schema.Struct({
+	...TelemetryEnvelopeProps,
+	recovery: Schema.Literal("signer_readiness"),
+	outcome: Schema.Literals(["ready", "unavailable"]),
+	reason_code: OptionalReasonCode,
+	organization_id: OptionalOrgId
+})]);
+const AccessRecoveryCompletedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("access_recovery_completed"),
+	props: AccessRecoveryCompletedProps
+});
+const UiAccessStepCompletedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("ui_access_step_completed"),
+	props: Schema.Struct({
+		...UiStepProps,
+		step: Schema.Literals([
+			"dashboard_granted",
+			"redirect_completed",
+			"gate_error_displayed",
+			"retry_selected",
+			"capability_refusal_displayed",
+			"signer_refusal_displayed"
+		]),
+		capability: Schema.optional(Schema.Literals(["spend", "managePeople"])),
+		probe: Schema.optional(Schema.Literals([
+			"session",
+			"membership",
+			"lifecycle"
+		])),
+		reason: Schema.optional(Schema.Literals([
+			"loading",
+			"no-permission",
+			"org-unavailable"
+		]))
+	})
+});
+const OrgInviteProgressedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("org_invite_progressed"),
+	props: Schema.Struct({
+		...TelemetryEnvelopeProps,
+		organization_id: OrgIdTelemetrySchema,
+		progress: Schema.Literals([
+			"account_ready",
+			"permission_applied",
+			"membership_activated",
+			"revoked"
+		]),
+		/** The invited Party. The initiating actor stays on the envelope's identity. */
+		member_party_id: Schema.String,
+		occurred_at: Schema.Number
+	})
+});
+const InvoiceIssuedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("invoice_issued"),
+	props: Schema.Struct({
+		...TelemetryEnvelopeProps,
+		request_id: Schema.String,
+		issuer_scope_kind: ScopeKindSchema,
+		issuer_scope_id: Schema.String,
+		payer_party_id: OptionalString,
+		occurred_at: Schema.Number
+	})
+});
+const InvoiceRequestTransitionedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("invoice_request_transitioned"),
+	props: Schema.Struct({
+		...TelemetryEnvelopeProps,
+		request_id: Schema.String,
+		transition: Schema.Literals([
+			"approval_prepared",
+			"declined",
+			"cancelled"
+		]),
+		actor_scope_kind: ScopeKindSchema,
+		actor_scope_id: Schema.String,
+		occurred_at: Schema.Number
+	})
+});
+const UiInvoiceStepCompletedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("ui_invoice_step_completed"),
+	props: Schema.Struct({
+		...UiStepProps,
+		step: Schema.Literals([
+			"opened",
+			"previewed",
+			"dismissed",
+			"submitted",
+			"result_displayed",
+			"refusal_displayed",
+			"retry_selected"
+		]),
+		request_id: OptionalString
+	})
+});
+const UiTreasuryStepCompletedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("ui_treasury_step_completed"),
+	props: Schema.Struct({
+		...UiStepProps,
+		step: Schema.Literals([
+			"balance_displayed",
+			"read_refusal_displayed",
+			"retry_selected",
+			"recovery_completed"
+		]),
+		account_kind: Schema.optional(AccountKindSchema)
+	})
+});
+const UiReceiveStepCompletedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("ui_receive_step_completed"),
+	props: Schema.Struct({
+		...UiStepProps,
+		step: Schema.Literals([
+			"instructions_displayed",
+			"address_copied",
+			"copy_failed",
+			"refusal_displayed",
+			"retry_selected"
+		]),
+		account_kind: Schema.optional(AccountKindSchema)
+	})
+});
+const PayrollGroupChangedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("payroll_group_changed"),
+	props: Schema.Struct({
+		...TelemetryEnvelopeProps,
+		organization_id: OrgIdTelemetrySchema,
+		change: Schema.Literals([
+			"created",
+			"updated",
+			"deleted"
+		]),
+		group_id: Schema.String,
+		member_count: Schema.Number,
+		occurred_at: Schema.Number
+	})
+});
+const PayrollRunTransitionedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("payroll_run_transitioned"),
+	props: Schema.Struct({
+		...TelemetryEnvelopeProps,
+		organization_id: OrgIdTelemetrySchema,
+		transition: Schema.Literals([
+			"prepared",
+			"authorized",
+			"settled"
+		]),
+		run_id: Schema.String,
+		payment_count: Schema.optional(Schema.Number),
+		occurred_at: Schema.Number
+	})
+});
+const UiPayrollActionCompletedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("ui_payroll_action_completed"),
+	props: Schema.Struct({
+		...UiStepProps,
+		action: Schema.Literals([
+			"opened",
+			"refusal_displayed",
+			"recovery_completed",
+			"cancelled",
+			"submitted_displayed"
+		]),
+		run_id: OptionalString
+	})
+});
 const TELEMETRY_EVENT_SCHEMAS = {
 	contact_relationship_changed: ContactRelationshipChangedTelemetryEventSchema,
+	access_recovery_completed: AccessRecoveryCompletedTelemetryEventSchema,
+	ui_access_step_completed: UiAccessStepCompletedTelemetryEventSchema,
+	org_invite_progressed: OrgInviteProgressedTelemetryEventSchema,
+	invoice_issued: InvoiceIssuedTelemetryEventSchema,
+	invoice_request_transitioned: InvoiceRequestTransitionedTelemetryEventSchema,
+	ui_invoice_step_completed: UiInvoiceStepCompletedTelemetryEventSchema,
+	ui_treasury_step_completed: UiTreasuryStepCompletedTelemetryEventSchema,
+	ui_receive_step_completed: UiReceiveStepCompletedTelemetryEventSchema,
+	payroll_group_changed: PayrollGroupChangedTelemetryEventSchema,
+	payroll_run_transitioned: PayrollRunTransitionedTelemetryEventSchema,
+	ui_payroll_action_completed: UiPayrollActionCompletedTelemetryEventSchema,
 	ui_contact_action_completed: UiContactActionCompletedTelemetryEventSchema,
 	activity_annotation_saved: ActivityAnnotationSavedTelemetryEventSchema,
 	ui_activity_action_completed: UiActivityActionCompletedTelemetryEventSchema,
@@ -1638,6 +1903,7 @@ const TELEMETRY_EVENT_SCHEMAS = {
 	auth_otp_expired: AuthOtpExpiredTelemetryEventSchema,
 	auth_verified: AuthVerifiedTelemetryEventSchema,
 	auth_failed: AuthFailedTelemetryEventSchema,
+	identity_refused: IdentityRefusedTelemetryEventSchema,
 	auth_signed_out: AuthSignedOutTelemetryEventSchema,
 	onboarding_intent_selected: OnboardingIntentSelectedTelemetryEventSchema,
 	onboarding_profile_submitted: OnboardingProfileSubmittedTelemetryEventSchema,
@@ -1691,7 +1957,13 @@ const FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS = [];
 * A domain node removes its entry when it adds the producer. The telemetry
 * gate rejects an entry that has a producer.
 */
-const CONTRACT_FIRST_TELEMETRY_EVENTS = [];
+const CONTRACT_FIRST_TELEMETRY_EVENTS = [
+	"org_invite_progressed",
+	"invoice_issued",
+	"invoice_request_transitioned",
+	"payroll_group_changed",
+	"payroll_run_transitioned"
+];
 /**
 * Catalog events whose product mapper remains gated on the #1150 frontend
 * adoption. L1 S1 removes their retired SDK-flow producers without inventing
@@ -1707,7 +1979,12 @@ const BROWSER_GATED_TELEMETRY_EVENTS = [
 	"onboarding_organization_submitted",
 	"onboarding_dashboard_reached",
 	"ui_activity_action_completed",
-	"ui_contact_action_completed"
+	"ui_contact_action_completed",
+	"ui_access_step_completed",
+	"ui_invoice_step_completed",
+	"ui_treasury_step_completed",
+	"ui_receive_step_completed",
+	"ui_payroll_action_completed"
 ];
 let trackHandler = () => {};
 function setTrackHandler(handler) {
@@ -2289,4 +2566,4 @@ function rotr(value, bits) {
 	return value >>> bits | value << 32 - bits;
 }
 //#endregion
-export { AccountBalanceFailedTelemetryEventSchema, AccountBalanceReadTelemetryEventSchema, ActivityAnnotationSavedTelemetryEventSchema, AuthFailedTelemetryEventSchema, AuthOtpDeliveredTelemetryEventSchema, AuthOtpExpiredTelemetryEventSchema, AuthOtpRequestedTelemetryEventSchema, AuthSignedOutTelemetryEventSchema, AuthVerifiedTelemetryEventSchema, BROWSER_GATED_TELEMETRY_EVENTS, BootstrapFailedTelemetryEventSchema, BootstrapResolvedTelemetryEventSchema, BundlerErrorTelemetryEventSchema, CAPXUL_ENVS, CAPXUL_OPERATIONS, CONTRACT_FIRST_TELEMETRY_EVENTS, ChainAttemptSchema, ChainUpstreamFallbackTelemetryEventSchema, ChainUpstreamSchema, ContactRelationshipChangedTelemetryEventSchema, DepositInitiatedTelemetryEventSchema, DepositSettledTelemetryEventSchema, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS, FailureModeSchema, FaucetConfirmedTelemetryEventSchema, FaucetFailedTelemetryEventSchema, FaucetRequestedTelemetryEventSchema, InMemoryTelemetryBusAdapter, MemberActivationFailedTelemetryEventSchema, MemberActivationReadyTelemetryEventSchema, MemberActivationStartedTelemetryEventSchema, MovementScanCheckpointTelemetryEventSchema, MovementScanIncidentTelemetryEventSchema, MovementScanWindowTelemetryEventSchema, OnboardingDashboardReachedTelemetryEventSchema, OnboardingIntentSelectedTelemetryEventSchema, OnboardingOrganizationSubmittedTelemetryEventSchema, OnboardingProfileSubmittedTelemetryEventSchema, OperationRetriedTelemetryEventSchema, OrgCreateFailedTelemetryEventSchema, OrgCreateStartedTelemetryEventSchema, OrgCreatedTelemetryEventSchema, OrgInviteAcceptedTelemetryEventSchema, OrgInviteExpiredTelemetryEventSchema, OrgInviteSentTelemetryEventSchema, OrgRolesSeededTelemetryEventSchema, OrgSafeConfirmedTelemetryEventSchema, OrgSafeCreatedTelemetryEventSchema, OrganizationCreationFailedTelemetryEventSchema, OrganizationCreationReadyTelemetryEventSchema, OrganizationCreationStartedTelemetryEventSchema, PII, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS, PaymentFailedTelemetryEventSchema, PaymentInitiatedTelemetryEventSchema, PaymentLifecycleTransitionTelemetryEventSchema, PaymentSettledTelemetryEventSchema, PaymentVerificationRetryTelemetryEventSchema, PermissionMirrorVerificationTelemetryEventSchema, PostHogTelemetryAdapter, ProvisioningSafeConfirmedTelemetryEventSchema, ProvisioningSafeCreatedTelemetryEventSchema, QuickPayExternalAddressAcknowledgedTelemetryEventSchema, ReceiptPendingTelemetryEventSchema, RecordingTelemetryAdapter, ResponseHeadersSchema, SYNCABLE_CAPXUL_ENVS, TELEMETRY_EVENT_NAMES, TELEMETRY_EVENT_SCHEMAS, TELEMETRY_JOURNEYS, TELEMETRY_PRODUCERS, UiActivityActionCompletedTelemetryEventSchema, UiContactActionCompletedTelemetryEventSchema, createCapxulBeforeSend, createPostHogBrowserPageviewTracker, getTrackHandler, initializeCapxulBrowserAnalytics, initializePostHogBrowserAnalytics, isCapxulOperation, maskCapturedNetworkRequest, normalizeCapxulOperation, productAppAnalytics, redactTelemetryEvent, redactTelemetryProps, sanitizePostHogBrowserEvent, setTrackHandler, stampTelemetryEnvelope, track, utilityAppAnalytics };
+export { AccessRecoveryCompletedTelemetryEventSchema, AccountBalanceFailedTelemetryEventSchema, AccountBalanceReadTelemetryEventSchema, ActivityAnnotationSavedTelemetryEventSchema, AuthFailedTelemetryEventSchema, AuthOtpDeliveredTelemetryEventSchema, AuthOtpExpiredTelemetryEventSchema, AuthOtpRequestedTelemetryEventSchema, AuthSignedOutTelemetryEventSchema, AuthVerifiedTelemetryEventSchema, BROWSER_GATED_TELEMETRY_EVENTS, BootstrapFailedTelemetryEventSchema, BootstrapResolvedTelemetryEventSchema, BundlerErrorTelemetryEventSchema, CAPXUL_ENVS, CAPXUL_OPERATIONS, CONTRACT_FIRST_TELEMETRY_EVENTS, ChainAttemptSchema, ChainUpstreamFallbackTelemetryEventSchema, ChainUpstreamSchema, ContactRelationshipChangedTelemetryEventSchema, DepositInitiatedTelemetryEventSchema, DepositSettledTelemetryEventSchema, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS, FailureModeSchema, FaucetConfirmedTelemetryEventSchema, FaucetFailedTelemetryEventSchema, FaucetRequestedTelemetryEventSchema, IdentityRefusedTelemetryEventSchema, InMemoryTelemetryBusAdapter, InvoiceIssuedTelemetryEventSchema, InvoiceRequestTransitionedTelemetryEventSchema, MemberActivationFailedTelemetryEventSchema, MemberActivationReadyTelemetryEventSchema, MemberActivationStartedTelemetryEventSchema, MovementScanCheckpointTelemetryEventSchema, MovementScanIncidentTelemetryEventSchema, MovementScanWindowTelemetryEventSchema, OnboardingDashboardReachedTelemetryEventSchema, OnboardingIntentSelectedTelemetryEventSchema, OnboardingOrganizationSubmittedTelemetryEventSchema, OnboardingProfileSubmittedTelemetryEventSchema, OperationRetriedTelemetryEventSchema, OrgCreateFailedTelemetryEventSchema, OrgCreateStartedTelemetryEventSchema, OrgCreatedTelemetryEventSchema, OrgInviteAcceptedTelemetryEventSchema, OrgInviteExpiredTelemetryEventSchema, OrgInviteProgressedTelemetryEventSchema, OrgInviteSentTelemetryEventSchema, OrgRolesSeededTelemetryEventSchema, OrgSafeConfirmedTelemetryEventSchema, OrgSafeCreatedTelemetryEventSchema, OrganizationCreationFailedTelemetryEventSchema, OrganizationCreationReadyTelemetryEventSchema, OrganizationCreationStartedTelemetryEventSchema, PII, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS, PaymentFailedTelemetryEventSchema, PaymentInitiatedTelemetryEventSchema, PaymentLifecycleTransitionTelemetryEventSchema, PaymentSettledTelemetryEventSchema, PaymentVerificationRetryTelemetryEventSchema, PayrollGroupChangedTelemetryEventSchema, PayrollRunTransitionedTelemetryEventSchema, PermissionMirrorVerificationTelemetryEventSchema, PostHogTelemetryAdapter, ProvisioningSafeConfirmedTelemetryEventSchema, ProvisioningSafeCreatedTelemetryEventSchema, QuickPayExternalAddressAcknowledgedTelemetryEventSchema, ReceiptPendingTelemetryEventSchema, RecordingTelemetryAdapter, ResponseHeadersSchema, SYNCABLE_CAPXUL_ENVS, TELEMETRY_EVENT_NAMES, TELEMETRY_EVENT_SCHEMAS, TELEMETRY_JOURNEYS, TELEMETRY_PRODUCERS, UiAccessStepCompletedTelemetryEventSchema, UiActivityActionCompletedTelemetryEventSchema, UiContactActionCompletedTelemetryEventSchema, UiInvoiceStepCompletedTelemetryEventSchema, UiPayrollActionCompletedTelemetryEventSchema, UiReceiveStepCompletedTelemetryEventSchema, UiTreasuryStepCompletedTelemetryEventSchema, createCapxulBeforeSend, createPostHogBrowserPageviewTracker, getTrackHandler, initializeCapxulBrowserAnalytics, initializePostHogBrowserAnalytics, isCapxulOperation, maskCapturedNetworkRequest, normalizeCapxulOperation, productAppAnalytics, redactTelemetryEvent, redactTelemetryProps, sanitizePostHogBrowserEvent, setTrackHandler, stampTelemetryEnvelope, track, utilityAppAnalytics };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/observability",
-  "version": "4.2.0-rc.1",
+  "version": "4.2.0-rc.11",
   "private": false,
   "repository": {
     "type": "git",