@capxul/observability 4.2.0-rc.9 → 4.20.0-beta.1

package/dist/index.d.mts

@@ -254,8 +254,12 @@ declare const CAPXUL_OPERATIONS: {
     readonly cancelRequest: "financialOps.cancelRequest";
     readonly createPayee: "financialOps.createPayee";
     readonly declineRequest: "financialOps.declineRequest";
+    readonly emitInvoiceIssued: "financialOps.emitInvoiceIssued";
+    readonly emitInvoiceRequestTransitioned: "financialOps.emitInvoiceRequestTransitioned";
     readonly emitPaymentWriterTelemetry: "financialOps.emitPaymentWriterTelemetry";
     readonly issueRequest: "financialOps.issueRequest";
+    readonly migrateEvidenceIdentity: "financialOps.migrateEvidenceIdentity";
+    readonly planEvidenceIdentity: "financialOps.planEvidenceIdentity";
     readonly recoverSettlementVerification: "financialOps.recoverSettlementVerification";
     readonly removeDestination: "financialOps.removeDestination";
     readonly verifySettlement: "financialOps.verifySettlement";
@@ -264,6 +268,9 @@ declare const CAPXUL_OPERATIONS: {
     readonly current: "holdings.current";
     readonly primary: "holdings.primary";
   };
+  readonly indexer: {
+    readonly reconcile: "indexer.reconcile";
+  };
   readonly identity: {
     readonly accountAt: "identity.AccountAt";
     readonly accountClaimed: "identity.AccountClaimed";
@@ -355,6 +362,7 @@ declare const CAPXUL_OPERATIONS: {
     readonly createOrg: "org.createOrg";
     readonly create: "org.create";
     readonly detectAndAcceptPendingInvitations: "org.detectAndAcceptPendingInvitations";
+    readonly emitInviteProgressed: "org.emitInviteProgressed";
     readonly expireInvitations: "org.expireInvitations";
     readonly getLifecycle: "org.getLifecycle";
     readonly getProofReceipt: "org.getProofReceipt";
@@ -468,6 +476,8 @@ declare const CAPXUL_OPERATIONS: {
   };
   readonly payroll: {
     readonly authorizeRun: "payroll.authorizeRun";
+    readonly emitGroupChanged: "payroll.emitGroupChanged";
+    readonly emitRunTransitioned: "payroll.emitRunTransitioned";
     readonly groups: {
       readonly access: "payroll.groups";
       readonly list: "payroll.groups.list";
@@ -602,7 +612,7 @@ interface TelemetryPort {
 }
 //#endregion
 //#region src/index.d.ts
-declare const TELEMETRY_EVENT_NAMES: readonly ["auth_otp_requested", "auth_otp_delivered", "auth_otp_expired", "auth_verified", "auth_failed", "identity_refused", "auth_signed_out", "onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "provisioning_safe_created", "provisioning_safe_confirmed", "bootstrap_resolved", "bootstrap_failed", "member_activation_started", "member_activation_ready", "member_activation_failed", "organization_creation_started", "organization_creation_ready", "organization_creation_failed", "chain_upstream_fallback", "bundler_error", "receipt_pending", "operation_retried", "account_balance_read", "account_balance_failed", "faucet_requested", "faucet_confirmed", "faucet_failed", "org_create_started", "org_safe_created", "org_safe_confirmed", "org_roles_seeded", "org_created", "org_create_failed", "org_invite_sent", "org_invite_accepted", "org_invite_expired", "payment_initiated", "payment_settled", "payment_failed", "payment_verification_retry", "payment_lifecycle_transition", "quick_pay_external_address_acknowledged", "deposit_initiated", "deposit_settled", "permission_mirror_verification", "movement_scan_window", "movement_scan_checkpoint", "movement_scan_incident", "activity_annotation_saved", "ui_activity_action_completed", "contact_relationship_changed", "ui_contact_action_completed", "access_recovery_completed", "ui_access_step_completed", "org_invite_progressed", "invoice_issued", "invoice_request_transitioned", "ui_invoice_step_completed", "ui_treasury_step_completed", "ui_receive_step_completed", "payroll_group_changed", "payroll_run_transitioned", "ui_payroll_action_completed"];
+declare const TELEMETRY_EVENT_NAMES: readonly ["auth_otp_requested", "auth_otp_delivered", "auth_otp_expired", "auth_verified", "auth_failed", "identity_refused", "auth_signed_out", "onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "provisioning_safe_created", "provisioning_safe_confirmed", "bootstrap_resolved", "bootstrap_failed", "member_activation_started", "member_activation_ready", "member_activation_failed", "organization_creation_started", "organization_creation_ready", "organization_creation_failed", "chain_upstream_fallback", "bundler_error", "receipt_pending", "operation_retried", "account_balance_read", "account_balance_failed", "faucet_requested", "faucet_confirmed", "faucet_failed", "org_create_started", "org_safe_created", "org_safe_confirmed", "org_roles_seeded", "org_created", "org_create_failed", "org_invite_sent", "org_invite_accepted", "org_invite_expired", "payment_initiated", "payment_settled", "payment_failed", "payment_verification_retry", "payment_lifecycle_transition", "quick_pay_external_address_acknowledged", "deposit_initiated", "deposit_settled", "permission_mirror_verification", "movement_scan_window", "movement_scan_checkpoint", "movement_scan_incident", "indexer_drift_corrected", "activity_annotation_saved", "ui_activity_action_completed", "contact_relationship_changed", "ui_contact_action_completed", "access_recovery_completed", "ui_access_step_completed", "org_invite_progressed", "invoice_issued", "invoice_request_transitioned", "ui_invoice_step_completed", "ui_treasury_step_completed", "ui_receive_step_completed", "payroll_group_changed", "payroll_run_transitioned", "ui_payroll_action_completed", "cli_diagnostic_completed"];
 type TelemetryEventName = (typeof TELEMETRY_EVENT_NAMES)[number];
 type NonEmptyTelemetryEventNames = readonly [TelemetryEventName, ...TelemetryEventName[]];
 type FunnelStepPropertyFilter = {
@@ -1227,6 +1237,9 @@ declare const AccountBalanceReadTelemetryEventSchema: Schema.Struct<{
     readonly correlation_id: Schema.optional<Schema.String>;
     readonly sdk_version: Schema.optional<Schema.String>;
     readonly account_id: Schema.optional<Schema.Codec<AccountId, string, never, never>>;
+    readonly account_kind: Schema.optional<Schema.Literals<readonly ["personalSafe", "orgTreasury"]>>;
+    readonly chain_id: Schema.optional<Schema.Codec<ChainId, number, never, never>>;
+    readonly token_address: Schema.optional<Schema.Codec<Address, string, never, never>>;
     readonly currency: Schema.optional<Schema.Codec<CurrencyCode, string, never, never>>;
     readonly balance_bucket: Schema.optional<Schema.Literals<readonly ["zero", "nonzero"]>>;
     readonly durationMs: Schema.optional<Schema.Codec<DurationMs, number, never, never>>;
@@ -1812,6 +1825,20 @@ declare const PermissionMirrorVerificationTelemetryEventSchema: Schema.Struct<{
      */
     readonly application_result: Schema.optional<Schema.Literals<readonly ["applied", "replayed", "conflicting_replay", "revision_mismatch"]>>;
     readonly command_id: Schema.optional<Schema.String>;
+    /**
+     * #1961 R03. The authorized stored row names the Permission it changed; the
+     * verified receipt names the chain facts that prove it. Every field is
+     * optional because a pending or provider-failed verification has neither an
+     * application result nor a receipt to report.
+     */
+    readonly permission_id: Schema.optional<Schema.String>;
+    readonly permission_assignment_id: Schema.optional<Schema.String>;
+    readonly permission_operation: Schema.optional<Schema.Literals<readonly ["create", "change", "assign", "revoke", "replace"]>>;
+    readonly revision: Schema.optional<Schema.Number>;
+    readonly user_op_hash: Schema.optional<Schema.String>;
+    readonly transaction_hash: Schema.optional<Schema.String>;
+    readonly block_number: Schema.optional<Schema.Number>;
+    readonly log_index: Schema.optional<Schema.Number>;
   }>;
 }>;
 declare const MovementScanWindowTelemetryEventSchema: Schema.Struct<{
@@ -1859,6 +1886,25 @@ declare const MovementScanIncidentTelemetryEventSchema: Schema.Struct<{
     readonly anchor_block_number: Schema.Number;
   }>;
 }>;
+declare const IndexerDriftCorrectedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"indexer_drift_corrected">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly projection_kind: Schema.Literals<readonly ["member_authority", "payment_settlement", "permission_assignment"]>;
+    readonly previous_state: Schema.String;
+    readonly current_state: Schema.String;
+    readonly previous_block: Schema.optional<Schema.Number>;
+    readonly current_block: Schema.optional<Schema.Number>;
+    readonly logical_event_id: Schema.optional<Schema.String>;
+    readonly scope_kind: Schema.optional<Schema.Literals<readonly ["account", "organization"]>>;
+    readonly account_id: Schema.optional<Schema.Codec<AccountId, string, never, never>>;
+    readonly reference_id: Schema.optional<Schema.String>;
+  }>;
+}>;
 declare const ContactRelationshipChangedTelemetryEventSchema: Schema.Struct<{
   readonly name: Schema.Literal<"contact_relationship_changed">;
   readonly props: Schema.Struct<{
@@ -1877,6 +1923,20 @@ declare const ContactRelationshipChangedTelemetryEventSchema: Schema.Struct<{
     readonly operation: Schema.Literals<readonly ["addressBook.add", "addressBook.label", "addressBook.hide", "addressBook.unhide"]>;
   }>;
 }>;
+/** One completed online CLI diagnostic. No command input or provider text. */
+declare const CliDiagnosticCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"cli_diagnostic_completed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly outcome: Schema.Literals<readonly ["succeeded", "refused", "failed", "cancelled"]>;
+    readonly invocation_id: Schema.String;
+    readonly cli_version: Schema.String;
+  }>;
+}>;
 declare const UiContactActionCompletedTelemetryEventSchema: Schema.Struct<{
   readonly name: Schema.Literal<"ui_contact_action_completed">;
   readonly props: Schema.Union<readonly [Schema.Struct<{
@@ -1932,6 +1992,17 @@ declare const ActivityAnnotationSavedTelemetryEventSchema: Schema.Struct<{
 declare const UiActivityActionCompletedTelemetryEventSchema: Schema.Struct<{
   readonly name: Schema.Literal<"ui_activity_action_completed">;
   readonly props: Schema.Union<readonly [Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly action: Schema.Literal<"read">;
+    readonly outcome: Schema.Literals<readonly ["partial_displayed", "recovered"]>;
+    readonly surface: Schema.Literals<readonly ["transactions", "recent", "summary"]>;
+  }>, Schema.Struct<{
     readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
     readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
     readonly journey_id: Schema.optional<Schema.String>;
@@ -2029,6 +2100,18 @@ declare const AccessRecoveryCompletedTelemetryEventSchema: Schema.Struct<{
     readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
   }>]>;
 }>;
+/**
+ * R05 (#1963) wired three of these steps at the app's dashboard Access
+ * boundary: `dashboard_granted` on the commit of the granted content,
+ * `gate_error_displayed` on the mounted error surface, and `retry_selected` on
+ * the actual selection. `redirect_completed` stays RESERVED and unproduced —
+ * asking for a navigation is not arriving, and the destination page's own
+ * normalized pageview already carries the arrival on the same journey, so a
+ * second event would add no fact. `capability_refusal_displayed` and
+ * `signer_refusal_displayed` belong to the screens that draw those refusals
+ * (Recipients, Invoice, Payroll, Quick Pay); Access publishes the contract and
+ * the `CanReason` those owners report, and produces neither itself.
+ */
 declare const UiAccessStepCompletedTelemetryEventSchema: Schema.Struct<{
   readonly name: Schema.Literal<"ui_access_step_completed">;
   readonly props: Schema.Struct<{
@@ -2046,6 +2129,17 @@ declare const UiAccessStepCompletedTelemetryEventSchema: Schema.Struct<{
     readonly reason: Schema.optional<Schema.Literals<readonly ["loading", "no-permission", "org-unavailable"]>>;
   }>;
 }>;
+/**
+ * R06 (#1964) wired three of the four progress words to the durable writer that
+ * commits each one. `account_ready` comes from `org/memberLifecycle.ts`, for
+ * every membership row a claimed personal Account actually advanced.
+ * `permission_applied` and `membership_activated` come from
+ * `permission/mirror.ts`: the first only when the mirror wrote a NEW Permission
+ * state, the second only when that call flipped a `pending_grant` row to
+ * `active`. A replay of an applied command writes neither, so it reports
+ * neither. `revoked` stays RESERVED and unproduced — no writer revokes a
+ * membership yet, and #1459 owns that ceremony.
+ */
 declare const OrgInviteProgressedTelemetryEventSchema: Schema.Struct<{
   readonly name: Schema.Literal<"org_invite_progressed">;
   readonly props: Schema.Struct<{
@@ -2162,6 +2256,12 @@ declare const PayrollRunTransitionedTelemetryEventSchema: Schema.Struct<{
     readonly organization_id: Schema.Codec<string, string, never, never>;
     readonly transition: Schema.Literals<readonly ["prepared", "authorized", "settled"]>;
     readonly run_id: Schema.String;
+    /**
+     * The `paymentCommands` row at `payrollRuns.batchRef` — the durable owner of
+     * this run's Payment membership. `payment_count` counts THAT command's
+     * `paymentIds`, so an unrelated Payment quoting the run id changes neither.
+     */
+    readonly command_id: Schema.optional<Schema.String>;
     readonly payment_count: Schema.optional<Schema.Number>;
     readonly occurred_at: Schema.Number;
   }>;
@@ -2357,6 +2457,12 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly organization_id: Schema.Codec<string, string, never, never>;
       readonly transition: Schema.Literals<readonly ["prepared", "authorized", "settled"]>;
       readonly run_id: Schema.String;
+      /**
+       * The `paymentCommands` row at `payrollRuns.batchRef` — the durable owner of
+       * this run's Payment membership. `payment_count` counts THAT command's
+       * `paymentIds`, so an unrelated Payment quoting the run id changes neither.
+       */
+      readonly command_id: Schema.optional<Schema.String>;
       readonly payment_count: Schema.optional<Schema.Number>;
       readonly occurred_at: Schema.Number;
     }>;
@@ -2413,6 +2519,19 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly outcome: Schema.Literal<"requested">;
     }>]>;
   }>;
+  readonly cli_diagnostic_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"cli_diagnostic_completed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly outcome: Schema.Literals<readonly ["succeeded", "refused", "failed", "cancelled"]>;
+      readonly invocation_id: Schema.String;
+      readonly cli_version: Schema.String;
+    }>;
+  }>;
   readonly activity_annotation_saved: Schema.Struct<{
     readonly name: Schema.Literal<"activity_annotation_saved">;
     readonly props: Schema.Struct<{
@@ -2431,6 +2550,17 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
   readonly ui_activity_action_completed: Schema.Struct<{
     readonly name: Schema.Literal<"ui_activity_action_completed">;
     readonly props: Schema.Union<readonly [Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly action: Schema.Literal<"read">;
+      readonly outcome: Schema.Literals<readonly ["partial_displayed", "recovered"]>;
+      readonly surface: Schema.Literals<readonly ["transactions", "recent", "summary"]>;
+    }>, Schema.Struct<{
       readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
       readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
       readonly journey_id: Schema.optional<Schema.String>;
@@ -2899,6 +3029,9 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly correlation_id: Schema.optional<Schema.String>;
       readonly sdk_version: Schema.optional<Schema.String>;
       readonly account_id: Schema.optional<Schema.Codec<AccountId, string, never, never>>;
+      readonly account_kind: Schema.optional<Schema.Literals<readonly ["personalSafe", "orgTreasury"]>>;
+      readonly chain_id: Schema.optional<Schema.Codec<ChainId, number, never, never>>;
+      readonly token_address: Schema.optional<Schema.Codec<Address, string, never, never>>;
       readonly currency: Schema.optional<Schema.Codec<CurrencyCode, string, never, never>>;
       readonly balance_bucket: Schema.optional<Schema.Literals<readonly ["zero", "nonzero"]>>;
       readonly durationMs: Schema.optional<Schema.Codec<DurationMs, number, never, never>>;
@@ -3484,6 +3617,20 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
        */
       readonly application_result: Schema.optional<Schema.Literals<readonly ["applied", "replayed", "conflicting_replay", "revision_mismatch"]>>;
       readonly command_id: Schema.optional<Schema.String>;
+      /**
+       * #1961 R03. The authorized stored row names the Permission it changed; the
+       * verified receipt names the chain facts that prove it. Every field is
+       * optional because a pending or provider-failed verification has neither an
+       * application result nor a receipt to report.
+       */
+      readonly permission_id: Schema.optional<Schema.String>;
+      readonly permission_assignment_id: Schema.optional<Schema.String>;
+      readonly permission_operation: Schema.optional<Schema.Literals<readonly ["create", "change", "assign", "revoke", "replace"]>>;
+      readonly revision: Schema.optional<Schema.Number>;
+      readonly user_op_hash: Schema.optional<Schema.String>;
+      readonly transaction_hash: Schema.optional<Schema.String>;
+      readonly block_number: Schema.optional<Schema.Number>;
+      readonly log_index: Schema.optional<Schema.Number>;
     }>;
   }>;
   readonly movement_scan_window: Schema.Struct<{
@@ -3531,6 +3678,25 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly anchor_block_number: Schema.Number;
     }>;
   }>;
+  readonly indexer_drift_corrected: Schema.Struct<{
+    readonly name: Schema.Literal<"indexer_drift_corrected">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly projection_kind: Schema.Literals<readonly ["member_authority", "payment_settlement", "permission_assignment"]>;
+      readonly previous_state: Schema.String;
+      readonly current_state: Schema.String;
+      readonly previous_block: Schema.optional<Schema.Number>;
+      readonly current_block: Schema.optional<Schema.Number>;
+      readonly logical_event_id: Schema.optional<Schema.String>;
+      readonly scope_kind: Schema.optional<Schema.Literals<readonly ["account", "organization"]>>;
+      readonly account_id: Schema.optional<Schema.Codec<AccountId, string, never, never>>;
+      readonly reference_id: Schema.optional<Schema.String>;
+    }>;
+  }>;
 };
 declare const FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS: readonly [];
 /**
@@ -3539,7 +3705,7 @@ declare const FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS: readonly [];
  * A domain node removes its entry when it adds the producer. The telemetry
  * gate rejects an entry that has a producer.
  */
-declare const CONTRACT_FIRST_TELEMETRY_EVENTS: readonly ["access_recovery_completed", "org_invite_progressed", "invoice_issued", "invoice_request_transitioned", "payroll_group_changed", "payroll_run_transitioned"];
+declare const CONTRACT_FIRST_TELEMETRY_EVENTS: readonly [];
 /**
  * Catalog events whose product mapper remains gated on the #1150 frontend
  * adoption. L1 S1 removes their retired SDK-flow producers without inventing
@@ -3586,8 +3752,8 @@ interface PostHogBrowserCapture {
  * property before transport. Browser applications may carry emails, draft ids,
  * or other capabilities in the URL; those values must never leave the origin.
  *
- * The callback mutates and returns the supplied event, matching PostHog's
- * `before_send` contract while preserving the event's full structural type.
+ * The callback replaces the event's data with a sanitized copy. Nested values
+ * can refer to live clients or configuration; observation must never mutate them.
  */
 declare function sanitizePostHogBrowserEvent<T extends PostHogBrowserCapture | null>(event: T, urlPolicy?: "path-only" | "diagnostic"): T;
 /**
@@ -3768,4 +3934,4 @@ declare class InMemoryTelemetryBusAdapter implements TelemetryPort {
   reportHandledError(_error: CapxulError, _context?: HandledErrorReportContext): Effect.Effect<void, never>;
 }
 //#endregion
-export { AccessRecoveryCompletedTelemetryEventSchema, AccountBalanceFailedTelemetryEventSchema, AccountBalanceReadTelemetryEventSchema, ActivityAnnotationSavedTelemetryEventSchema, AuthFailedTelemetryEventSchema, AuthOtpDeliveredTelemetryEventSchema, AuthOtpExpiredTelemetryEventSchema, AuthOtpRequestedTelemetryEventSchema, AuthSignedOutTelemetryEventSchema, AuthVerifiedTelemetryEventSchema, BROWSER_GATED_TELEMETRY_EVENTS, BootstrapFailedTelemetryEventSchema, BootstrapResolvedTelemetryEventSchema, BundlerErrorTelemetryEventSchema, CAPXUL_ENVS, CAPXUL_OPERATIONS, CONTRACT_FIRST_TELEMETRY_EVENTS, CapturedNetworkRequestLike, CapxulBrowserAnalyticsInput, CapxulEnv, type CapxulOperation, ChainAttemptSchema, ChainUpstreamFallbackTelemetryEventSchema, ChainUpstreamSchema, ContactRelationshipChangedTelemetryEventSchema, DepositInitiatedTelemetryEventSchema, DepositSettledTelemetryEventSchema, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS, FailureModeSchema, FaucetConfirmedTelemetryEventSchema, FaucetFailedTelemetryEventSchema, FaucetRequestedTelemetryEventSchema, FunnelJourney, FunnelStepPropertyFilter, type HandledErrorReportContext, IdentityRefusedTelemetryEventSchema, InMemoryTelemetryBusAdapter, InitializePostHogBrowserAnalyticsInput, InvoiceIssuedTelemetryEventSchema, InvoiceRequestTransitionedTelemetryEventSchema, Journey, MemberActivationFailedTelemetryEventSchema, MemberActivationReadyTelemetryEventSchema, MemberActivationStartedTelemetryEventSchema, MovementScanCheckpointTelemetryEventSchema, MovementScanIncidentTelemetryEventSchema, MovementScanWindowTelemetryEventSchema, NonEmptyTelemetryEventNames, type NormalizedCapxulOperation, OnboardingDashboardReachedTelemetryEventSchema, OnboardingIntentSelectedTelemetryEventSchema, OnboardingOrganizationSubmittedTelemetryEventSchema, OnboardingProfileSubmittedTelemetryEventSchema, OperationRetriedTelemetryEventSchema, OrgCreateFailedTelemetryEventSchema, OrgCreateStartedTelemetryEventSchema, OrgCreatedTelemetryEventSchema, OrgInviteAcceptedTelemetryEventSchema, OrgInviteExpiredTelemetryEventSchema, OrgInviteProgressedTelemetryEventSchema, OrgInviteSentTelemetryEventSchema, OrgRolesSeededTelemetryEventSchema, OrgSafeConfirmedTelemetryEventSchema, OrgSafeCreatedTelemetryEventSchema, OrganizationCreationFailedTelemetryEventSchema, OrganizationCreationReadyTelemetryEventSchema, OrganizationCreationStartedTelemetryEventSchema, PII, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS, PaymentFailedTelemetryEventSchema, PaymentInitiatedTelemetryEventSchema, PaymentLifecycleTransitionTelemetryEventSchema, PaymentSettledTelemetryEventSchema, PaymentVerificationRetryTelemetryEventSchema, PayrollGroupChangedTelemetryEventSchema, PayrollRunTransitionedTelemetryEventSchema, PermissionMirrorVerificationTelemetryEventSchema, PointEventJourney, PostHogBeforeSend, PostHogBrowserCapture, PostHogBrowserInitialize, PostHogBrowserOptions, PostHogBrowserPageviewClient, PostHogProductAppOptions, PostHogTelemetryAdapter, PostHogUtilityAppOptions, ProvisioningSafeConfirmedTelemetryEventSchema, ProvisioningSafeCreatedTelemetryEventSchema, QuickPayExternalAddressAcknowledgedTelemetryEventSchema, ReceiptPendingTelemetryEventSchema, RecordingTelemetryAdapter, ResponseHeadersSchema, SYNCABLE_CAPXUL_ENVS, TELEMETRY_EVENT_NAMES, TELEMETRY_EVENT_SCHEMAS, TELEMETRY_JOURNEYS, TELEMETRY_PRODUCERS, TelemetryEnvelopeDefaults, TelemetryEvent, TelemetryEventName, TelemetryGroupInput, TelemetryIdentifyInput, type TelemetryPort, TelemetryProducer, TelemetryProps, TelemetryRedactionOptions, TrackHandler, UiAccessStepCompletedTelemetryEventSchema, UiActivityActionCompletedTelemetryEventSchema, UiContactActionCompletedTelemetryEventSchema, UiInvoiceStepCompletedTelemetryEventSchema, UiPayrollActionCompletedTelemetryEventSchema, UiReceiveStepCompletedTelemetryEventSchema, UiTreasuryStepCompletedTelemetryEventSchema, createCapxulBeforeSend, createPostHogBrowserPageviewTracker, getTrackHandler, initializeCapxulBrowserAnalytics, initializePostHogBrowserAnalytics, isCapxulOperation, maskCapturedNetworkRequest, normalizeCapxulOperation, productAppAnalytics, redactTelemetryEvent, redactTelemetryProps, sanitizePostHogBrowserEvent, setTrackHandler, stampTelemetryEnvelope, track, utilityAppAnalytics };
+export { AccessRecoveryCompletedTelemetryEventSchema, AccountBalanceFailedTelemetryEventSchema, AccountBalanceReadTelemetryEventSchema, ActivityAnnotationSavedTelemetryEventSchema, AuthFailedTelemetryEventSchema, AuthOtpDeliveredTelemetryEventSchema, AuthOtpExpiredTelemetryEventSchema, AuthOtpRequestedTelemetryEventSchema, AuthSignedOutTelemetryEventSchema, AuthVerifiedTelemetryEventSchema, BROWSER_GATED_TELEMETRY_EVENTS, BootstrapFailedTelemetryEventSchema, BootstrapResolvedTelemetryEventSchema, BundlerErrorTelemetryEventSchema, CAPXUL_ENVS, CAPXUL_OPERATIONS, CONTRACT_FIRST_TELEMETRY_EVENTS, CapturedNetworkRequestLike, CapxulBrowserAnalyticsInput, CapxulEnv, type CapxulOperation, ChainAttemptSchema, ChainUpstreamFallbackTelemetryEventSchema, ChainUpstreamSchema, CliDiagnosticCompletedTelemetryEventSchema, ContactRelationshipChangedTelemetryEventSchema, DepositInitiatedTelemetryEventSchema, DepositSettledTelemetryEventSchema, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS, FailureModeSchema, FaucetConfirmedTelemetryEventSchema, FaucetFailedTelemetryEventSchema, FaucetRequestedTelemetryEventSchema, FunnelJourney, FunnelStepPropertyFilter, type HandledErrorReportContext, IdentityRefusedTelemetryEventSchema, InMemoryTelemetryBusAdapter, IndexerDriftCorrectedTelemetryEventSchema, InitializePostHogBrowserAnalyticsInput, InvoiceIssuedTelemetryEventSchema, InvoiceRequestTransitionedTelemetryEventSchema, Journey, MemberActivationFailedTelemetryEventSchema, MemberActivationReadyTelemetryEventSchema, MemberActivationStartedTelemetryEventSchema, MovementScanCheckpointTelemetryEventSchema, MovementScanIncidentTelemetryEventSchema, MovementScanWindowTelemetryEventSchema, NonEmptyTelemetryEventNames, type NormalizedCapxulOperation, OnboardingDashboardReachedTelemetryEventSchema, OnboardingIntentSelectedTelemetryEventSchema, OnboardingOrganizationSubmittedTelemetryEventSchema, OnboardingProfileSubmittedTelemetryEventSchema, OperationRetriedTelemetryEventSchema, OrgCreateFailedTelemetryEventSchema, OrgCreateStartedTelemetryEventSchema, OrgCreatedTelemetryEventSchema, OrgInviteAcceptedTelemetryEventSchema, OrgInviteExpiredTelemetryEventSchema, OrgInviteProgressedTelemetryEventSchema, OrgInviteSentTelemetryEventSchema, OrgRolesSeededTelemetryEventSchema, OrgSafeConfirmedTelemetryEventSchema, OrgSafeCreatedTelemetryEventSchema, OrganizationCreationFailedTelemetryEventSchema, OrganizationCreationReadyTelemetryEventSchema, OrganizationCreationStartedTelemetryEventSchema, PII, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS, PaymentFailedTelemetryEventSchema, PaymentInitiatedTelemetryEventSchema, PaymentLifecycleTransitionTelemetryEventSchema, PaymentSettledTelemetryEventSchema, PaymentVerificationRetryTelemetryEventSchema, PayrollGroupChangedTelemetryEventSchema, PayrollRunTransitionedTelemetryEventSchema, PermissionMirrorVerificationTelemetryEventSchema, PointEventJourney, PostHogBeforeSend, PostHogBrowserCapture, PostHogBrowserInitialize, PostHogBrowserOptions, PostHogBrowserPageviewClient, PostHogProductAppOptions, PostHogTelemetryAdapter, PostHogUtilityAppOptions, ProvisioningSafeConfirmedTelemetryEventSchema, ProvisioningSafeCreatedTelemetryEventSchema, QuickPayExternalAddressAcknowledgedTelemetryEventSchema, ReceiptPendingTelemetryEventSchema, RecordingTelemetryAdapter, ResponseHeadersSchema, SYNCABLE_CAPXUL_ENVS, TELEMETRY_EVENT_NAMES, TELEMETRY_EVENT_SCHEMAS, TELEMETRY_JOURNEYS, TELEMETRY_PRODUCERS, TelemetryEnvelopeDefaults, TelemetryEvent, TelemetryEventName, TelemetryGroupInput, TelemetryIdentifyInput, type TelemetryPort, TelemetryProducer, TelemetryProps, TelemetryRedactionOptions, TrackHandler, UiAccessStepCompletedTelemetryEventSchema, UiActivityActionCompletedTelemetryEventSchema, UiContactActionCompletedTelemetryEventSchema, UiInvoiceStepCompletedTelemetryEventSchema, UiPayrollActionCompletedTelemetryEventSchema, UiReceiveStepCompletedTelemetryEventSchema, UiTreasuryStepCompletedTelemetryEventSchema, createCapxulBeforeSend, createPostHogBrowserPageviewTracker, getTrackHandler, initializeCapxulBrowserAnalytics, initializePostHogBrowserAnalytics, isCapxulOperation, maskCapturedNetworkRequest, normalizeCapxulOperation, productAppAnalytics, redactTelemetryEvent, redactTelemetryProps, sanitizePostHogBrowserEvent, setTrackHandler, stampTelemetryEnvelope, track, utilityAppAnalytics };