@capxul/observability 4.2.0-rc.9 → 4.20.0-beta.1

package/dist/index.mjs

@@ -1,41 +1,5 @@
-import { i as redactUrlSecrets, n as isCredentialField, r as redactSecrets, t as CAPXUL_ERROR_CODES } from "./src-CWfRYsBI.mjs";
+import { a as CHAIN_UPSTREAMS, c as redactSecrets, i as CAPXUL_ERROR_CODES, l as redactUrlSecrets, n as isCapxulOperation, o as FAILURE_MODES, r as normalizeCapxulOperation, s as isCredentialField, t as CAPXUL_OPERATIONS } from "./operations-sJPrehYY.mjs";
 import { Effect, Schema, SchemaGetter } from "effect";
-//#region ../errors/src/chain-cause.ts
-/**
-* Why an operation failed — the one flat vocabulary. The first four are the
-* auth/provider diagnoses that predate this file. The rest name the chain
-* path. `FailureMode` is derived from this list so a runtime membership check
-* (the SDK's `$exception` projection, the observability schema) and the type
-* can never drift apart.
-*/
-const FAILURE_MODES = [
-	"auth-origin-mismatch",
-	"stale-openfort-cache",
-	"app-env-allowlist",
-	"no-secure-context",
-	"signer-not-ready",
-	"rate-limited",
-	"timeout",
-	"upstream-down",
-	"revert",
-	"insufficient-balance",
-	"insufficient-allowance",
-	"rejected",
-	"unauthorized",
-	"forbidden",
-	"bad-request",
-	"method-unsupported",
-	"unknown"
-];
-/** Who answered. `alto` is the bundler; `gateway` is the AA gateway's own logic. */
-const CHAIN_UPSTREAMS = [
-	"alchemy",
-	"infura",
-	"public",
-	"alto",
-	"gateway"
-];
-//#endregion
 //#region ../types/src/index.ts
 const EVM_ADDRESS_RE = /^0x[0-9a-f]{40}$/i;
 const BYTES32_RE = /^0x[0-9a-f]{64}$/i;
@@ -72,402 +36,6 @@ Object.fromEntries(SUPPORTED_CURRENCIES.map((currency) => [currency.code, curren
 const APP_ID_RE = /^app_[0-7][0-9A-HJKMNP-TV-Z]{25}$/;
 Math.floor(Number.MAX_SAFE_INTEGER / 1e3);
 //#endregion
-//#region src/operations.ts
-const CAPXUL_OPERATIONS = {
-	account: {
-		addressBook: {
-			add: "account.addressBook.add",
-			get: "account.addressBook.get",
-			hide: "account.addressBook.hide",
-			label: "account.addressBook.label",
-			list: "account.addressBook.list",
-			unhide: "account.addressBook.unhide"
-		},
-		balance: "account.balance",
-		faucetMint: "account.faucetMint",
-		getLifecycle: "account.getLifecycle",
-		readBalance: "account.readBalance",
-		retrySetup: "account.retrySetup",
-		status: "account.status",
-		profile: {
-			depositInstructions: "account.profile.depositInstructions",
-			get: "account.profile.get"
-		},
-		inbox: {
-			approve: "account.inbox.approve",
-			decline: "account.inbox.decline",
-			list: "account.inbox.list"
-		},
-		requests: {
-			cancel: "account.requests.cancel",
-			get: "account.requests.get",
-			issue: "account.requests.issue",
-			list: "account.requests.list"
-		}
-	},
-	accounts: {
-		fund: "accounts.fund",
-		read: "accounts.read"
-	},
-	activity: {
-		annotate: "activity.annotate",
-		emitAnnotationSaved: "activity.emitAnnotationSaved",
-		get: "activity.get",
-		list: "activity.list",
-		/** The SDK's live Activity read over the indexer's SSE stream. */
-		subscribe: "activity.subscribe",
-		summary: "activity.summary"
-	},
-	addressBook: {
-		add: "addressBook.add",
-		emitRelationshipChanged: "addressBook.emitRelationshipChanged",
-		get: "addressBook.get",
-		hide: "addressBook.hide",
-		label: "addressBook.label",
-		list: "addressBook.list",
-		unhide: "addressBook.unhide"
-	},
-	applications: { create: "applications.create" },
-	auth: {
-		canSendOtp: "auth.canSendOtp",
-		getSession: "auth.getSession",
-		signIn: "auth.signIn",
-		signOut: "auth.signOut",
-		sendVerificationOtp: "auth.sendVerificationOTP",
-		verifyOtp: "auth.verifyOtp"
-	},
-	client: {
-		createOrg: "createOrg",
-		orgs: "orgs"
-	},
-	credentials: {
-		bootstrapClient: "credentials.bootstrapClient",
-		mintQuickstartKey: "credentials.mintQuickstartKey"
-	},
-	currentUser: { get: "currentUser.get" },
-	devIdentity: { seedFinancialOpsOrg: "devIdentity.seedFinancialOpsOrg" },
-	dev: { browserSeed: "dev.browserSeed" },
-	destinations: {
-		add: "destinations.add",
-		list: "destinations.list",
-		remove: "destinations.remove"
-	},
-	faucetSafe: { deploy: "FaucetSafe.deploy" },
-	financialOps: {
-		addDestination: "financialOps.addDestination",
-		approveRequest: "financialOps.approveRequest",
-		cancelRequest: "financialOps.cancelRequest",
-		createPayee: "financialOps.createPayee",
-		declineRequest: "financialOps.declineRequest",
-		emitPaymentWriterTelemetry: "financialOps.emitPaymentWriterTelemetry",
-		issueRequest: "financialOps.issueRequest",
-		recoverSettlementVerification: "financialOps.recoverSettlementVerification",
-		removeDestination: "financialOps.removeDestination",
-		verifySettlement: "financialOps.verifySettlement"
-	},
-	holdings: {
-		current: "holdings.current",
-		primary: "holdings.primary"
-	},
-	identity: {
-		accountAt: "identity.AccountAt",
-		accountClaimed: "identity.AccountClaimed",
-		accountClaiming: "identity.AccountClaiming",
-		accountDerived: "identity.AccountDerived",
-		accountFailed: "identity.AccountFailed",
-		attachOrganization: "identity.AttachOrganization",
-		claimAccount: "identity.ClaimAccount",
-		completeOnboarding: "identity.completeOnboarding",
-		completeProfile: "identity.completeProfile",
-		create: "identity.create",
-		createOrganization: "identity.CreateOrganization",
-		ensureAccount: "identity.EnsureAccount",
-		leaveOrganization: "identity.LeaveOrganization",
-		loadByAuthUserId: "identity.loadByAuthUserId",
-		loadCurrent: "identity.loadCurrent",
-		orgAt: "identity.OrgAt",
-		orgFailed: "identity.OrgFailed",
-		orgReady: "identity.OrgReady",
-		otpFailed: "identity.OtpFailed",
-		otpSent: "identity.OtpSent",
-		readSession: "identity.ReadSession",
-		requestOtp: "identity.RequestOtp",
-		reset: "identity.Reset",
-		restoreSession: "identity.RestoreSession",
-		resumeOtpEntry: "identity.ResumeOtpEntry",
-		retryAccount: "identity.RetryAccount",
-		retryOrganization: "identity.RetryOrganization",
-		sessionAbsent: "identity.SessionAbsent",
-		sessionRead: "identity.SessionRead",
-		sessionReadFailed: "identity.SessionReadFailed",
-		sessionRestored: "identity.SessionRestored",
-		signedOut: "identity.SignedOut",
-		signOut: "identity.SignOut",
-		signOutFailed: "identity.SignOutFailed",
-		update: "identity.update",
-		handleAvailable: "identity.handleAvailable",
-		verified: "identity.Verified",
-		verifyFailed: "identity.VerifyFailed",
-		verifyOtp: "identity.VerifyOtp"
-	},
-	media: {
-		generateUploadUrl: "media.generateUploadUrl",
-		setOrgLogo: "media.setOrgLogo",
-		setProfileImage: "media.setProfileImage",
-		uploadImage: "media.uploadImage"
-	},
-	me: {
-		depositInstructions: "me.depositInstructions",
-		get: "me.get"
-	},
-	moneyExecution: {
-		abandonPaymentExecution: "moneyExecution.abandonPaymentExecution",
-		prepareOrganizationPaymentExecution: "moneyExecution.prepareOrganizationPaymentExecution",
-		preparePaymentExecution: "moneyExecution.preparePaymentExecution",
-		preparePaymentLifecycleExecution: "moneyExecution.preparePaymentLifecycleExecution",
-		preparePermissionExecution: "moneyExecution.preparePermissionExecution",
-		recoverSubmissionClaims: "moneyExecution.recoverSubmissionClaims",
-		submit: "moneyExecution.submit",
-		submitPaymentCommandExecution: "moneyExecution.submitPaymentCommandExecution",
-		submitPaymentExecution: "moneyExecution.submitPaymentExecution",
-		submitPermissionExecution: "moneyExecution.submitPermissionExecution"
-	},
-	movement: {
-		emitDepositSettled: "movement.emitDepositSettled",
-		scan: "movement.scan"
-	},
-	inbox: {
-		approve: "inbox.approve",
-		decline: "inbox.decline",
-		list: "inbox.list"
-	},
-	offramp: {
-		quote: "offramp.quote",
-		status: "offramp.status"
-	},
-	onboarding: {
-		completeOrganization: "onboarding.completeOrganization",
-		completePerson: "onboarding.completePerson"
-	},
-	org: {
-		acceptInvitations: "org.acceptInvitations",
-		account: { get: "org.account.get" },
-		activateMember: "org.activateMember",
-		auditLog: "org.auditLog",
-		confirmBootstrap: "org.confirmBootstrap",
-		createOrg: "org.createOrg",
-		create: "org.create",
-		detectAndAcceptPendingInvitations: "org.detectAndAcceptPendingInvitations",
-		expireInvitations: "org.expireInvitations",
-		getLifecycle: "org.getLifecycle",
-		getProofReceipt: "org.getProofReceipt",
-		invite: "org.invite",
-		inviteMember: "org.inviteMember",
-		list: "org.list",
-		load: "org.load",
-		me: "org.me",
-		members: "org.members",
-		orgs: "org.orgs",
-		payment: "org.payment",
-		permissions: {
-			assign: "org.permissions.assign",
-			change: "org.permissions.change",
-			create: "org.permissions.create",
-			get: "org.permissions.get",
-			list: "org.permissions.list",
-			replace: "org.permissions.replace",
-			revoke: "org.permissions.revoke"
-		},
-		payments: {
-			pay: "org.payments.pay",
-			payBatch: "org.payments.payBatch"
-		},
-		payroll: {
-			authorizeRun: "org.payroll.authorizeRun",
-			groups: {
-				list: "org.payroll.groups.list",
-				remove: "org.payroll.groups.remove",
-				save: "org.payroll.groups.save"
-			},
-			runs: "org.payroll.runs",
-			terms: "org.payroll.terms"
-		},
-		addressBook: {
-			add: "org.addressBook.add",
-			get: "org.addressBook.get",
-			hide: "org.addressBook.hide",
-			label: "org.addressBook.label",
-			list: "org.addressBook.list",
-			unhide: "org.addressBook.unhide"
-		},
-		inbox: {
-			approve: "org.inbox.approve",
-			decline: "org.inbox.decline",
-			list: "org.inbox.list"
-		},
-		lifecycle: { startOrResume: "org.lifecycle.startOrResume" },
-		prepareBootstrap: "org.prepareBootstrap",
-		prepareFounderAccount: "org.prepareFounderAccount",
-		profile: {
-			depositInstructions: "org.profile.depositInstructions",
-			get: "org.profile.get"
-		},
-		readTreasury: "org.readTreasury",
-		requests: {
-			cancel: "org.requests.cancel",
-			get: "org.requests.get",
-			issue: "org.requests.issue",
-			list: "org.requests.list"
-		},
-		recordFailure: "org.recordFailure",
-		recordProgress: "org.recordProgress",
-		resendInviteToken: "org.resendInviteToken",
-		resumeBootstrapSubmission: "org.resumeBootstrapSubmission",
-		retry: "org.retry",
-		retrySetup: "org.retrySetup",
-		roles: "org.roles",
-		startOrResume: "org.startOrResume",
-		submitBootstrap: "org.submitBootstrap",
-		treasury: "org.treasury"
-	},
-	organization: { setup: "organization.setup" },
-	organizationPayments: {
-		pay: "organizationPayments.pay",
-		payBatch: "organizationPayments.payBatch",
-		prepareExecution: "organizationPayments.prepareExecution",
-		retry: "organizationPayments.retry"
-	},
-	organizationSetup: { getProofReceipt: "organizationSetup.getProofReceipt" },
-	organizations: { detectAndAcceptPendingInvitations: "orgs.detectAndAcceptPendingInvitations" },
-	payments: {
-		cancel: "payments.cancel",
-		claim: "payments.claim",
-		createCommitment: "payments.createCommitment",
-		get: "payments.get",
-		ledger: "payments",
-		list: "payments.list",
-		pay: "payments.pay",
-		prepareExecution: "payments.prepareExecution",
-		prepareLifecycleExecution: "payments.prepareLifecycleExecution",
-		redirect: "payments.redirect",
-		retry: "payments.retry",
-		submitCommandExecution: "payments.submitCommandExecution",
-		submitExecution: "payments.submitExecution"
-	},
-	paymentDocuments: {
-		render: "paymentDocuments.render",
-		verify: "paymentDocuments.verify"
-	},
-	recipient: { resolve: "recipient.resolve" },
-	payroll: {
-		authorizeRun: "payroll.authorizeRun",
-		groups: {
-			access: "payroll.groups",
-			list: "payroll.groups.list",
-			remove: "payroll.groups.remove",
-			save: "payroll.groups.save"
-		},
-		removeGroup: "payroll.removeGroup",
-		runs: "payroll.runs",
-		saveGroup: "payroll.saveGroup",
-		terms: "payroll.terms"
-	},
-	permission: {
-		command: "permission.command",
-		retryVerification: "permission.retryVerification",
-		verify: "permission.verify",
-		verifySubmitted: "permission.verifySubmitted"
-	},
-	permissions: {
-		assign: "permissions.assign",
-		change: "permissions.change",
-		create: "permissions.create",
-		get: "permissions.get",
-		list: "permissions.list",
-		prepareExecution: "permissions.prepareExecution",
-		replace: "permissions.replace",
-		revoke: "permissions.revoke",
-		submitExecution: "permissions.submitExecution"
-	},
-	publishableKeys: {
-		mint: "publishableKeys.mint",
-		revoke: "publishableKeys.revoke",
-		rotate: "publishableKeys.rotate"
-	},
-	requests: {
-		cancel: "requests.cancel",
-		get: "requests.get",
-		issue: "requests.issue",
-		list: "requests.list"
-	},
-	runtime: {
-		assign: "assign",
-		canSendOtp: "canSendOtp",
-		cancelCommitment: "cancel_commitment",
-		change: "change",
-		claimCommitment: "claim_commitment",
-		create: "create",
-		createCapxulClient: "createCapxulClient",
-		createCapxulClientWithOrgDeploymentSeams: "createCapxulClientWithOrgDeploymentSeams",
-		createCommitment: "create_commitment",
-		getConvexJwt: "getConvexJwt",
-		getSession: "getSession",
-		initialize: "initialize",
-		mutation: "mutation",
-		now: "now",
-		port: "port",
-		query: "query",
-		redirectCommitment: "redirect_commitment",
-		replace: "replace",
-		resolve: "resolve",
-		revoke: "revoke",
-		send: "send",
-		sendOtp: "sendOtp",
-		signIn: "signIn",
-		signOut: "signOut",
-		sleep: "sleep",
-		verifyOtp: "verifyOtp",
-		wallet: "wallet"
-	},
-	smartAccount: {
-		claim: "smartAccount.claim",
-		confirmDeployment: "smartAccount.confirmDeployment",
-		loadByAuthUserId: "smartAccount.loadByAuthUserId",
-		loadCurrent: "smartAccount.loadCurrent",
-		provision: "smartAccount.provision"
-	},
-	system: {
-		health: "system.health",
-		ping: "system.ping",
-		runtimeChain: "system.runtimeChain"
-	},
-	testUsdc: { mint: "TestUSDC.mint" },
-	_internal: {
-		accounts: { fund: "_internal.accounts.fund" },
-		close: "_internal.close",
-		identity: {
-			completeProfile: "_internal.identity.completeProfile",
-			runFacade: "_internal.identity.runFacade",
-			send: "_internal.identity.send"
-		},
-		organizationSetup: { getProofReceipt: "_internal.organizationSetup.getProofReceipt" }
-	},
-	tenancy: {
-		revokeBackendTenancyConsent: "tenancy.revokeBackendTenancyConsent",
-		seedBackendTenancy: "tenancy.seedBackendTenancy"
-	}
-};
-function collectOperations(tree) {
-	return Object.values(tree).flatMap((value) => typeof value === "string" ? [value] : collectOperations(value));
-}
-const operations = new Set(collectOperations(CAPXUL_OPERATIONS));
-function isCapxulOperation(value) {
-	return typeof value === "string" && operations.has(value);
-}
-function normalizeCapxulOperation(value) {
-	return isCapxulOperation(value) ? value : "unknown";
-}
-//#endregion
 //#region src/index.ts
 const TELEMETRY_EVENT_NAMES = [
 	"auth_otp_requested",
@@ -521,6 +89,7 @@ const TELEMETRY_EVENT_NAMES = [
 	"movement_scan_window",
 	"movement_scan_checkpoint",
 	"movement_scan_incident",
+	"indexer_drift_corrected",
 	"activity_annotation_saved",
 	"ui_activity_action_completed",
 	"contact_relationship_changed",
@@ -535,7 +104,8 @@ const TELEMETRY_EVENT_NAMES = [
 	"ui_receive_step_completed",
 	"payroll_group_changed",
 	"payroll_run_transitioned",
-	"ui_payroll_action_completed"
+	"ui_payroll_action_completed",
+	"cli_diagnostic_completed"
 ];
 const TELEMETRY_JOURNEYS = {
 	returning_user_login: {
@@ -733,6 +303,10 @@ const OptionalAccountId = Schema.optional(AccountIdSchema);
 const OptionalWeiAmount = Schema.optional(WeiAmountSchema);
 const OptionalCurrencyCode = Schema.optional(CurrencyCodeSchema);
 const OptionalBalanceBucket = Schema.optional(BalanceBucketSchema);
+/** Which Safe a money record is about. Declared here so the money-domain
+* props below can name it as well as the UI-step props further down. */
+const AccountKindSchema = Schema.Literals(["personalSafe", "orgTreasury"]);
+const OptionalAccountKind = Schema.optional(AccountKindSchema);
 const OptionalAddress = Schema.optional(AddressSchema);
 const OptionalAppId = Schema.optional(AppIdSchema);
 const OptionalBlockNumber = Schema.optional(BlockNumberSchema);
@@ -928,9 +502,22 @@ const BootstrapFailedProps = Schema.Struct({
 	reason: OptionalString,
 	target_host: OptionalString
 });
+/**
+* R08 (#1966): which Safe was read, on which chain, of which token. `currency`
+* is the DISPLAY code the surface shows ("USD"); it never says which ERC-20 the
+* `balanceOf` actually hit, so a reader could not tell a treasury read from a
+* personal one, nor USDX from any other dollar-labelled token. The producer
+* takes each of these from the authority that already decided it — the verified
+* Organization row's chain, the configured token address — never from a label.
+* The verified `organization_id` and its group arrive from the backend
+* attribution, so they are not repeated here.
+*/
 const AccountBalanceReadProps = Schema.Struct({
 	...TelemetryEnvelopeProps,
 	account_id: OptionalAccountId,
+	account_kind: OptionalAccountKind,
+	chain_id: OptionalChainId,
+	token_address: OptionalAddress,
 	currency: OptionalCurrencyCode,
 	balance_bucket: OptionalBalanceBucket,
 	durationMs: OptionalDurationMs
@@ -1298,7 +885,27 @@ const PermissionMirrorVerificationProps = Schema.Struct({
 		"conflicting_replay",
 		"revision_mismatch"
 	])),
-	command_id: OptionalString
+	command_id: OptionalString,
+	/**
+	* #1961 R03. The authorized stored row names the Permission it changed; the
+	* verified receipt names the chain facts that prove it. Every field is
+	* optional because a pending or provider-failed verification has neither an
+	* application result nor a receipt to report.
+	*/
+	permission_id: OptionalString,
+	permission_assignment_id: OptionalString,
+	permission_operation: Schema.optional(Schema.Literals([
+		"create",
+		"change",
+		"assign",
+		"revoke",
+		"replace"
+	])),
+	revision: Schema.optional(Schema.Number),
+	user_op_hash: OptionalString,
+	transaction_hash: OptionalString,
+	block_number: Schema.optional(Schema.Number),
+	log_index: Schema.optional(Schema.Number)
 });
 const MovementScanWindowProps = Schema.Struct({
 	...TelemetryEnvelopeProps,
@@ -1324,6 +931,33 @@ const MovementScanIncidentProps = Schema.Struct({
 	incident_kind: Schema.String,
 	anchor_block_number: Schema.Number
 });
+/**
+* One durable row the reconciliation job corrected against Ponder (SPEC D9).
+*
+* Both block fields are optional and for the same reason: a correction INTO
+* drift (a Payment settled in Convex whose Ponder fact a reorg removed) has no
+* current block, and a correction that confirms a later fact has one.
+*
+* `projection_kind` is closed. A later ticket that reconciles a deploy, a
+* bootstrap or a grant outcome adds its kind here in the same change; an
+* unknown kind must not decode.
+*/
+const IndexerDriftCorrectedProps = Schema.Struct({
+	...TelemetryEnvelopeProps,
+	projection_kind: Schema.Literals([
+		"member_authority",
+		"payment_settlement",
+		"permission_assignment"
+	]),
+	previous_state: Schema.String,
+	current_state: Schema.String,
+	previous_block: Schema.optional(Schema.Number),
+	current_block: Schema.optional(Schema.Number),
+	logical_event_id: Schema.optional(Schema.String),
+	scope_kind: Schema.optional(Schema.Literals(["account", "organization"])),
+	account_id: OptionalAccountId,
+	reference_id: OptionalString
+});
 const AuthOtpRequestedTelemetryEventSchema = Schema.Struct({
 	name: Schema.Literal("auth_otp_requested"),
 	props: AuthOtpRequestedProps
@@ -1528,9 +1162,12 @@ const MovementScanIncidentTelemetryEventSchema = Schema.Struct({
 	name: Schema.Literal("movement_scan_incident"),
 	props: MovementScanIncidentProps
 });
+const IndexerDriftCorrectedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("indexer_drift_corrected"),
+	props: IndexerDriftCorrectedProps
+});
 /** The one spelling of "whose scope did this happen in" across every surface. */
 const ScopeKindSchema = Schema.Literals(["account", "organization"]);
-const AccountKindSchema = Schema.Literals(["personalSafe", "orgTreasury"]);
 const OptionalReasonCode = Schema.optional(Schema.Literals(CAPXUL_ERROR_CODES));
 const ActivityReferenceProps = {
 	reference_kind: Schema.Literals(["payment", "movement"]),
@@ -1595,6 +1232,21 @@ const ContactActionProps = {
 	party_id: OptionalString,
 	reason_code: OptionalReasonCode
 };
+/** One completed online CLI diagnostic. No command input or provider text. */
+const CliDiagnosticCompletedTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("cli_diagnostic_completed"),
+	props: Schema.Struct({
+		...TelemetryEnvelopeProps,
+		outcome: Schema.Literals([
+			"succeeded",
+			"refused",
+			"failed",
+			"cancelled"
+		]),
+		invocation_id: Schema.String.check(Schema.isPattern(/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/u)),
+		cli_version: Schema.String.check(Schema.isPattern(/^[A-Za-z0-9][A-Za-z0-9._+-]{0,127}$/u))
+	})
+});
 const UiContactActionCompletedTelemetryEventSchema = Schema.Struct({
 	name: Schema.Literal("ui_contact_action_completed"),
 	props: Schema.Union([
@@ -1628,6 +1280,16 @@ const ActivityAnnotationSavedTelemetryEventSchema = Schema.Struct({
 const UiActivityActionCompletedTelemetryEventSchema = Schema.Struct({
 	name: Schema.Literal("ui_activity_action_completed"),
 	props: Schema.Union([
+		Schema.Struct({
+			...ActivityActionProps,
+			action: Schema.Literal("read"),
+			outcome: Schema.Literals(["partial_displayed", "recovered"]),
+			surface: Schema.Literals([
+				"transactions",
+				"recent",
+				"summary"
+			])
+		}),
 		Schema.Struct({
 			...ActivityActionProps,
 			...ActivityFilterProps,
@@ -1708,6 +1370,18 @@ const AccessRecoveryCompletedTelemetryEventSchema = Schema.Struct({
 	name: Schema.Literal("access_recovery_completed"),
 	props: AccessRecoveryCompletedProps
 });
+/**
+* R05 (#1963) wired three of these steps at the app's dashboard Access
+* boundary: `dashboard_granted` on the commit of the granted content,
+* `gate_error_displayed` on the mounted error surface, and `retry_selected` on
+* the actual selection. `redirect_completed` stays RESERVED and unproduced —
+* asking for a navigation is not arriving, and the destination page's own
+* normalized pageview already carries the arrival on the same journey, so a
+* second event would add no fact. `capability_refusal_displayed` and
+* `signer_refusal_displayed` belong to the screens that draw those refusals
+* (Recipients, Invoice, Payroll, Quick Pay); Access publishes the contract and
+* the `CanReason` those owners report, and produces neither itself.
+*/
 const UiAccessStepCompletedTelemetryEventSchema = Schema.Struct({
 	name: Schema.Literal("ui_access_step_completed"),
 	props: Schema.Struct({
@@ -1733,6 +1407,17 @@ const UiAccessStepCompletedTelemetryEventSchema = Schema.Struct({
 		]))
 	})
 });
+/**
+* R06 (#1964) wired three of the four progress words to the durable writer that
+* commits each one. `account_ready` comes from `org/memberLifecycle.ts`, for
+* every membership row a claimed personal Account actually advanced.
+* `permission_applied` and `membership_activated` come from
+* `permission/mirror.ts`: the first only when the mirror wrote a NEW Permission
+* state, the second only when that call flipped a `pending_grant` row to
+* `active`. A replay of an applied command writes neither, so it reports
+* neither. `revoked` stays RESERVED and unproduced — no writer revokes a
+* membership yet, and #1459 owns that ceremony.
+*/
 const OrgInviteProgressedTelemetryEventSchema = Schema.Struct({
 	name: Schema.Literal("org_invite_progressed"),
 	props: Schema.Struct({
@@ -1844,6 +1529,12 @@ const PayrollRunTransitionedTelemetryEventSchema = Schema.Struct({
 			"settled"
 		]),
 		run_id: Schema.String,
+		/**
+		* The `paymentCommands` row at `payrollRuns.batchRef` — the durable owner of
+		* this run's Payment membership. `payment_count` counts THAT command's
+		* `paymentIds`, so an unrelated Payment quoting the run id changes neither.
+		*/
+		command_id: OptionalString,
 		payment_count: Schema.optional(Schema.Number),
 		occurred_at: Schema.Number
 	})
@@ -1876,6 +1567,7 @@ const TELEMETRY_EVENT_SCHEMAS = {
 	payroll_run_transitioned: PayrollRunTransitionedTelemetryEventSchema,
 	ui_payroll_action_completed: UiPayrollActionCompletedTelemetryEventSchema,
 	ui_contact_action_completed: UiContactActionCompletedTelemetryEventSchema,
+	cli_diagnostic_completed: CliDiagnosticCompletedTelemetryEventSchema,
 	activity_annotation_saved: ActivityAnnotationSavedTelemetryEventSchema,
 	ui_activity_action_completed: UiActivityActionCompletedTelemetryEventSchema,
 	auth_otp_requested: AuthOtpRequestedTelemetryEventSchema,
@@ -1928,7 +1620,8 @@ const TELEMETRY_EVENT_SCHEMAS = {
 	permission_mirror_verification: PermissionMirrorVerificationTelemetryEventSchema,
 	movement_scan_window: MovementScanWindowTelemetryEventSchema,
 	movement_scan_checkpoint: MovementScanCheckpointTelemetryEventSchema,
-	movement_scan_incident: MovementScanIncidentTelemetryEventSchema
+	movement_scan_incident: MovementScanIncidentTelemetryEventSchema,
+	indexer_drift_corrected: IndexerDriftCorrectedTelemetryEventSchema
 };
 const FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS = [];
 /**
@@ -1937,14 +1630,7 @@ const FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS = [];
 * A domain node removes its entry when it adds the producer. The telemetry
 * gate rejects an entry that has a producer.
 */
-const CONTRACT_FIRST_TELEMETRY_EVENTS = [
-	"access_recovery_completed",
-	"org_invite_progressed",
-	"invoice_issued",
-	"invoice_request_transitioned",
-	"payroll_group_changed",
-	"payroll_run_transitioned"
-];
+const CONTRACT_FIRST_TELEMETRY_EVENTS = [];
 /**
 * Catalog events whose product mapper remains gated on the #1150 frontend
 * adoption. L1 S1 removes their retired SDK-flow producers without inventing
@@ -1998,17 +1684,17 @@ function redactTelemetryProps(name, props, options = {}) {
 * property before transport. Browser applications may carry emails, draft ids,
 * or other capabilities in the URL; those values must never leave the origin.
 *
-* The callback mutates and returns the supplied event, matching PostHog's
-* `before_send` contract while preserving the event's full structural type.
+* The callback replaces the event's data with a sanitized copy. Nested values
+* can refer to live clients or configuration; observation must never mutate them.
 */
 function sanitizePostHogBrowserEvent(event, urlPolicy = "path-only") {
 	if (event === null) return event;
 	const transportToken = event.properties.token;
-	const seen = /* @__PURE__ */ new WeakSet();
-	sanitizePostHogBrowserValue(event.properties, seen, urlPolicy);
+	const seen = /* @__PURE__ */ new WeakMap();
+	event.properties = sanitizePostHogBrowserValue(event.properties, seen, urlPolicy);
 	if (transportToken !== void 0) event.properties.token = transportToken;
-	if (event.$set !== void 0) sanitizePostHogBrowserValue(event.$set, seen, urlPolicy);
-	if (event.$set_once !== void 0) sanitizePostHogBrowserValue(event.$set_once, seen, urlPolicy);
+	if (event.$set !== void 0) event.$set = sanitizePostHogBrowserValue(event.$set, seen, urlPolicy);
+	if (event.$set_once !== void 0) event.$set_once = sanitizePostHogBrowserValue(event.$set_once, seen, urlPolicy);
 	return event;
 }
 /**
@@ -2207,22 +1893,21 @@ function createPostHogBrowserPageviewTracker(client) {
 	};
 }
 function sanitizePostHogBrowserValue(value, seen, urlPolicy) {
-	if (typeof value !== "object" || value === null || seen.has(value)) return;
-	seen.add(value);
+	if (typeof value !== "object" || value === null || value instanceof Date) return value;
+	if (seen.has(value)) return seen.get(value);
 	if (Array.isArray(value)) {
+		const copy = [];
+		seen.set(value, copy);
 		for (let index = 0; index < value.length; index++) {
 			const item = value[index];
-			if (typeof item === "string") value[index] = maskNetworkText(item);
-			else sanitizePostHogBrowserValue(item, seen, urlPolicy);
+			copy[index] = typeof item === "string" ? maskNetworkText(item) : sanitizePostHogBrowserValue(item, seen, urlPolicy);
 		}
-		return;
+		return copy;
 	}
-	const properties = value;
-	for (const [key, nestedValue] of Object.entries(properties)) {
-		if (isPostHogQueryDerivedProperty(key)) {
-			delete properties[key];
-			continue;
-		}
+	const properties = Object.create(null);
+	seen.set(value, properties);
+	for (const [key, nestedValue] of Object.entries(value)) {
+		if (isPostHogQueryDerivedProperty(key)) continue;
 		if (isCredentialField(key)) {
 			properties[key] = "[REDACTED]";
 			continue;
@@ -2231,8 +1916,9 @@ function sanitizePostHogBrowserValue(value, seen, urlPolicy) {
 			properties[key] = isPostHogUrlProperty(key) ? urlPolicy === "path-only" ? stripUrlQueryAndFragment(nestedValue) : redactUrlSecrets(nestedValue) : maskNetworkText(nestedValue);
 			continue;
 		}
-		sanitizePostHogBrowserValue(nestedValue, seen, urlPolicy);
+		properties[key] = sanitizePostHogBrowserValue(nestedValue, seen, urlPolicy);
 	}
+	return properties;
 }
 const POSTHOG_QUERY_DERIVED_PROPERTY_NAMES = [
 	"utm_source",
@@ -2547,4 +2233,4 @@ function rotr(value, bits) {
 	return value >>> bits | value << 32 - bits;
 }
 //#endregion
-export { AccessRecoveryCompletedTelemetryEventSchema, AccountBalanceFailedTelemetryEventSchema, AccountBalanceReadTelemetryEventSchema, ActivityAnnotationSavedTelemetryEventSchema, AuthFailedTelemetryEventSchema, AuthOtpDeliveredTelemetryEventSchema, AuthOtpExpiredTelemetryEventSchema, AuthOtpRequestedTelemetryEventSchema, AuthSignedOutTelemetryEventSchema, AuthVerifiedTelemetryEventSchema, BROWSER_GATED_TELEMETRY_EVENTS, BootstrapFailedTelemetryEventSchema, BootstrapResolvedTelemetryEventSchema, BundlerErrorTelemetryEventSchema, CAPXUL_ENVS, CAPXUL_OPERATIONS, CONTRACT_FIRST_TELEMETRY_EVENTS, ChainAttemptSchema, ChainUpstreamFallbackTelemetryEventSchema, ChainUpstreamSchema, ContactRelationshipChangedTelemetryEventSchema, DepositInitiatedTelemetryEventSchema, DepositSettledTelemetryEventSchema, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS, FailureModeSchema, FaucetConfirmedTelemetryEventSchema, FaucetFailedTelemetryEventSchema, FaucetRequestedTelemetryEventSchema, IdentityRefusedTelemetryEventSchema, InMemoryTelemetryBusAdapter, InvoiceIssuedTelemetryEventSchema, InvoiceRequestTransitionedTelemetryEventSchema, MemberActivationFailedTelemetryEventSchema, MemberActivationReadyTelemetryEventSchema, MemberActivationStartedTelemetryEventSchema, MovementScanCheckpointTelemetryEventSchema, MovementScanIncidentTelemetryEventSchema, MovementScanWindowTelemetryEventSchema, OnboardingDashboardReachedTelemetryEventSchema, OnboardingIntentSelectedTelemetryEventSchema, OnboardingOrganizationSubmittedTelemetryEventSchema, OnboardingProfileSubmittedTelemetryEventSchema, OperationRetriedTelemetryEventSchema, OrgCreateFailedTelemetryEventSchema, OrgCreateStartedTelemetryEventSchema, OrgCreatedTelemetryEventSchema, OrgInviteAcceptedTelemetryEventSchema, OrgInviteExpiredTelemetryEventSchema, OrgInviteProgressedTelemetryEventSchema, OrgInviteSentTelemetryEventSchema, OrgRolesSeededTelemetryEventSchema, OrgSafeConfirmedTelemetryEventSchema, OrgSafeCreatedTelemetryEventSchema, OrganizationCreationFailedTelemetryEventSchema, OrganizationCreationReadyTelemetryEventSchema, OrganizationCreationStartedTelemetryEventSchema, PII, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS, PaymentFailedTelemetryEventSchema, PaymentInitiatedTelemetryEventSchema, PaymentLifecycleTransitionTelemetryEventSchema, PaymentSettledTelemetryEventSchema, PaymentVerificationRetryTelemetryEventSchema, PayrollGroupChangedTelemetryEventSchema, PayrollRunTransitionedTelemetryEventSchema, PermissionMirrorVerificationTelemetryEventSchema, PostHogTelemetryAdapter, ProvisioningSafeConfirmedTelemetryEventSchema, ProvisioningSafeCreatedTelemetryEventSchema, QuickPayExternalAddressAcknowledgedTelemetryEventSchema, ReceiptPendingTelemetryEventSchema, RecordingTelemetryAdapter, ResponseHeadersSchema, SYNCABLE_CAPXUL_ENVS, TELEMETRY_EVENT_NAMES, TELEMETRY_EVENT_SCHEMAS, TELEMETRY_JOURNEYS, TELEMETRY_PRODUCERS, UiAccessStepCompletedTelemetryEventSchema, UiActivityActionCompletedTelemetryEventSchema, UiContactActionCompletedTelemetryEventSchema, UiInvoiceStepCompletedTelemetryEventSchema, UiPayrollActionCompletedTelemetryEventSchema, UiReceiveStepCompletedTelemetryEventSchema, UiTreasuryStepCompletedTelemetryEventSchema, createCapxulBeforeSend, createPostHogBrowserPageviewTracker, getTrackHandler, initializeCapxulBrowserAnalytics, initializePostHogBrowserAnalytics, isCapxulOperation, maskCapturedNetworkRequest, normalizeCapxulOperation, productAppAnalytics, redactTelemetryEvent, redactTelemetryProps, sanitizePostHogBrowserEvent, setTrackHandler, stampTelemetryEnvelope, track, utilityAppAnalytics };
+export { AccessRecoveryCompletedTelemetryEventSchema, AccountBalanceFailedTelemetryEventSchema, AccountBalanceReadTelemetryEventSchema, ActivityAnnotationSavedTelemetryEventSchema, AuthFailedTelemetryEventSchema, AuthOtpDeliveredTelemetryEventSchema, AuthOtpExpiredTelemetryEventSchema, AuthOtpRequestedTelemetryEventSchema, AuthSignedOutTelemetryEventSchema, AuthVerifiedTelemetryEventSchema, BROWSER_GATED_TELEMETRY_EVENTS, BootstrapFailedTelemetryEventSchema, BootstrapResolvedTelemetryEventSchema, BundlerErrorTelemetryEventSchema, CAPXUL_ENVS, CAPXUL_OPERATIONS, CONTRACT_FIRST_TELEMETRY_EVENTS, ChainAttemptSchema, ChainUpstreamFallbackTelemetryEventSchema, ChainUpstreamSchema, CliDiagnosticCompletedTelemetryEventSchema, ContactRelationshipChangedTelemetryEventSchema, DepositInitiatedTelemetryEventSchema, DepositSettledTelemetryEventSchema, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS, FailureModeSchema, FaucetConfirmedTelemetryEventSchema, FaucetFailedTelemetryEventSchema, FaucetRequestedTelemetryEventSchema, IdentityRefusedTelemetryEventSchema, InMemoryTelemetryBusAdapter, IndexerDriftCorrectedTelemetryEventSchema, InvoiceIssuedTelemetryEventSchema, InvoiceRequestTransitionedTelemetryEventSchema, MemberActivationFailedTelemetryEventSchema, MemberActivationReadyTelemetryEventSchema, MemberActivationStartedTelemetryEventSchema, MovementScanCheckpointTelemetryEventSchema, MovementScanIncidentTelemetryEventSchema, MovementScanWindowTelemetryEventSchema, OnboardingDashboardReachedTelemetryEventSchema, OnboardingIntentSelectedTelemetryEventSchema, OnboardingOrganizationSubmittedTelemetryEventSchema, OnboardingProfileSubmittedTelemetryEventSchema, OperationRetriedTelemetryEventSchema, OrgCreateFailedTelemetryEventSchema, OrgCreateStartedTelemetryEventSchema, OrgCreatedTelemetryEventSchema, OrgInviteAcceptedTelemetryEventSchema, OrgInviteExpiredTelemetryEventSchema, OrgInviteProgressedTelemetryEventSchema, OrgInviteSentTelemetryEventSchema, OrgRolesSeededTelemetryEventSchema, OrgSafeConfirmedTelemetryEventSchema, OrgSafeCreatedTelemetryEventSchema, OrganizationCreationFailedTelemetryEventSchema, OrganizationCreationReadyTelemetryEventSchema, OrganizationCreationStartedTelemetryEventSchema, PII, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS, PaymentFailedTelemetryEventSchema, PaymentInitiatedTelemetryEventSchema, PaymentLifecycleTransitionTelemetryEventSchema, PaymentSettledTelemetryEventSchema, PaymentVerificationRetryTelemetryEventSchema, PayrollGroupChangedTelemetryEventSchema, PayrollRunTransitionedTelemetryEventSchema, PermissionMirrorVerificationTelemetryEventSchema, PostHogTelemetryAdapter, ProvisioningSafeConfirmedTelemetryEventSchema, ProvisioningSafeCreatedTelemetryEventSchema, QuickPayExternalAddressAcknowledgedTelemetryEventSchema, ReceiptPendingTelemetryEventSchema, RecordingTelemetryAdapter, ResponseHeadersSchema, SYNCABLE_CAPXUL_ENVS, TELEMETRY_EVENT_NAMES, TELEMETRY_EVENT_SCHEMAS, TELEMETRY_JOURNEYS, TELEMETRY_PRODUCERS, UiAccessStepCompletedTelemetryEventSchema, UiActivityActionCompletedTelemetryEventSchema, UiContactActionCompletedTelemetryEventSchema, UiInvoiceStepCompletedTelemetryEventSchema, UiPayrollActionCompletedTelemetryEventSchema, UiReceiveStepCompletedTelemetryEventSchema, UiTreasuryStepCompletedTelemetryEventSchema, createCapxulBeforeSend, createPostHogBrowserPageviewTracker, getTrackHandler, initializeCapxulBrowserAnalytics, initializePostHogBrowserAnalytics, isCapxulOperation, maskCapturedNetworkRequest, normalizeCapxulOperation, productAppAnalytics, redactTelemetryEvent, redactTelemetryProps, sanitizePostHogBrowserEvent, setTrackHandler, stampTelemetryEnvelope, track, utilityAppAnalytics };