@capxul/observability 4.2.0 → 4.20.0-beta.10

package/dist/index.d.mts

@@ -199,6 +199,8 @@ declare const CAPXUL_OPERATIONS: {
     readonly emitAnnotationSaved: "activity.emitAnnotationSaved";
     readonly get: "activity.get";
     readonly list: "activity.list";
+    /** The SDK's live Activity read over the indexer's SSE stream. */
+    readonly subscribe: "activity.subscribe";
     readonly summary: "activity.summary";
   };
   readonly addressBook: {
@@ -225,6 +227,26 @@ declare const CAPXUL_OPERATIONS: {
     readonly createOrg: "createOrg";
     readonly orgs: "orgs";
   };
+  /** AUTH A3 (#2073): the SDK facade over the native continuation endpoints. */
+  readonly clientRequests: {
+    readonly decide: "clientRequests.decide";
+    readonly read: "clientRequests.read";
+  };
+  /** AUTH A2 (#2072): the native client authorization issuer and its browser
+   * continuation. One name per durable transition the endpoints can fail on. */
+  readonly clientAuthorization: {
+    readonly acceptRequest: "clientAuthorization.acceptRequest";
+    readonly cancelRequest: "clientAuthorization.cancelRequest";
+    readonly consumeRequest: "clientAuthorization.consumeRequest";
+    readonly denyRequest: "clientAuthorization.denyRequest";
+    readonly invalidateContext: "clientAuthorization.invalidateContext";
+    readonly markConsented: "clientAuthorization.markConsented";
+    readonly readMetadata: "clientAuthorization.readMetadata";
+    readonly revokeGrant: "clientAuthorization.revokeGrant";
+    readonly rotateGrant: "clientAuthorization.rotateGrant";
+    readonly startRequest: "clientAuthorization.startRequest";
+    readonly sweepExpired: "clientAuthorization.sweepExpired";
+  };
   readonly credentials: {
     readonly bootstrapClient: "credentials.bootstrapClient";
     readonly mintQuickstartKey: "credentials.mintQuickstartKey";
@@ -252,15 +274,21 @@ declare const CAPXUL_OPERATIONS: {
     readonly cancelRequest: "financialOps.cancelRequest";
     readonly createPayee: "financialOps.createPayee";
     readonly declineRequest: "financialOps.declineRequest";
+    readonly emitInvoiceIssued: "financialOps.emitInvoiceIssued";
+    readonly emitInvoiceRequestTransitioned: "financialOps.emitInvoiceRequestTransitioned";
     readonly emitPaymentWriterTelemetry: "financialOps.emitPaymentWriterTelemetry";
     readonly issueRequest: "financialOps.issueRequest";
+    readonly migrateEvidenceIdentity: "financialOps.migrateEvidenceIdentity";
+    readonly planEvidenceIdentity: "financialOps.planEvidenceIdentity";
     readonly recoverSettlementVerification: "financialOps.recoverSettlementVerification";
     readonly removeDestination: "financialOps.removeDestination";
     readonly verifySettlement: "financialOps.verifySettlement";
   };
   readonly holdings: {
     readonly current: "holdings.current";
-    readonly primary: "holdings.primary";
+  };
+  readonly indexer: {
+    readonly reconcile: "indexer.reconcile";
   };
   readonly identity: {
     readonly accountAt: "identity.AccountAt";
@@ -318,10 +346,12 @@ declare const CAPXUL_OPERATIONS: {
     readonly prepareOrganizationPaymentExecution: "moneyExecution.prepareOrganizationPaymentExecution";
     readonly preparePaymentExecution: "moneyExecution.preparePaymentExecution";
     readonly preparePaymentLifecycleExecution: "moneyExecution.preparePaymentLifecycleExecution";
+    readonly prepareInvitationConfiguration: "moneyExecution.prepareInvitationConfiguration";
     readonly preparePermissionExecution: "moneyExecution.preparePermissionExecution";
     readonly recoverSubmissionClaims: "moneyExecution.recoverSubmissionClaims";
     readonly submit: "moneyExecution.submit";
     readonly submitPaymentCommandExecution: "moneyExecution.submitPaymentCommandExecution";
+    readonly submitInvitationConfigurationExecution: "moneyExecution.submitInvitationConfigurationExecution";
     readonly submitPaymentExecution: "moneyExecution.submitPaymentExecution";
     readonly submitPermissionExecution: "moneyExecution.submitPermissionExecution";
   };
@@ -343,21 +373,54 @@ declare const CAPXUL_OPERATIONS: {
     readonly completePerson: "onboarding.completePerson";
   };
   readonly org: {
-    readonly acceptInvitations: "org.acceptInvitations";
     readonly account: {
       readonly get: "org.account.get";
     };
-    readonly activateMember: "org.activateMember";
     readonly auditLog: "org.auditLog";
     readonly confirmBootstrap: "org.confirmBootstrap";
     readonly createOrg: "org.createOrg";
     readonly create: "org.create";
-    readonly detectAndAcceptPendingInvitations: "org.detectAndAcceptPendingInvitations";
+    /**
+     * §11: the consent mutation reports `org_invite_accepted` through its own
+     * scheduled emitter. It is named for the emit, not the acceptance, because
+     * the interactive acceptance itself owns `org.invitations.accept`.
+     */
+    readonly emitInviteAccepted: "org.emitInviteAccepted";
+    readonly emitInviteProgressed: "org.emitInviteProgressed";
     readonly expireInvitations: "org.expireInvitations";
     readonly getLifecycle: "org.getLifecycle";
     readonly getProofReceipt: "org.getProofReceipt";
     readonly invite: "org.invite";
-    readonly inviteMember: "org.inviteMember";
+    /** D8 invitation lifecycle: preview, own list, read, and the four transitions. */
+    readonly invitations: {
+      /** The exact grantee's consent commit (§8): one accepted digest, once. */
+      readonly accept: "org.invitations.accept";
+      /**
+       * The authoring write. It is named `authorize`, not `invite`, because the
+       * backend already uses `org.invitations.invite` as a refusal label and
+       * `lint:telemetry-spine` refuses a label that collides with an operation.
+       */
+      readonly authorize: "org.invitations.authorize";
+      readonly cancel: "org.invitations.cancel";
+      readonly decline: "org.invitations.decline";
+      readonly get: "org.invitations.get";
+      readonly list: "org.invitations.list";
+      /**
+       * The Admin-scoped Organization list. It is named `listScoped`, not
+       * `list`, because the own-offer list already owns `org.invitations.list`.
+       */
+      readonly listScoped: "org.invitations.listScoped";
+      /**
+       * The authoring write's inner hops: the SDK drives the backend's existing
+       * prepare/submit pair, and these names label the two Convex calls. The
+       * owning `capxul_sdk_operation` record stays `org.invitations.authorize`.
+       */
+      readonly prepareConfiguration: "org.invitations.prepareConfiguration";
+      readonly preview: "org.invitations.preview";
+      readonly resend: "org.invitations.resend";
+      readonly retry: "org.invitations.retry";
+      readonly submitConfiguration: "org.invitations.submitConfiguration";
+    };
     readonly list: "org.list";
     readonly load: "org.load";
     readonly me: "org.me";
@@ -418,7 +481,6 @@ declare const CAPXUL_OPERATIONS: {
     };
     readonly recordFailure: "org.recordFailure";
     readonly recordProgress: "org.recordProgress";
-    readonly resendInviteToken: "org.resendInviteToken";
     readonly resumeBootstrapSubmission: "org.resumeBootstrapSubmission";
     readonly retry: "org.retry";
     readonly retrySetup: "org.retrySetup";
@@ -439,9 +501,6 @@ declare const CAPXUL_OPERATIONS: {
   readonly organizationSetup: {
     readonly getProofReceipt: "organizationSetup.getProofReceipt";
   };
-  readonly organizations: {
-    readonly detectAndAcceptPendingInvitations: "orgs.detectAndAcceptPendingInvitations";
-  };
   readonly payments: {
     readonly cancel: "payments.cancel";
     readonly claim: "payments.claim";
@@ -458,6 +517,7 @@ declare const CAPXUL_OPERATIONS: {
     readonly submitExecution: "payments.submitExecution";
   };
   readonly paymentDocuments: {
+    readonly get: "paymentDocuments.get";
     readonly render: "paymentDocuments.render";
     readonly verify: "paymentDocuments.verify";
   };
@@ -466,6 +526,8 @@ declare const CAPXUL_OPERATIONS: {
   };
   readonly payroll: {
     readonly authorizeRun: "payroll.authorizeRun";
+    readonly emitGroupChanged: "payroll.emitGroupChanged";
+    readonly emitRunTransitioned: "payroll.emitRunTransitioned";
     readonly groups: {
       readonly access: "payroll.groups";
       readonly list: "payroll.groups.list";
@@ -478,6 +540,7 @@ declare const CAPXUL_OPERATIONS: {
     readonly terms: "payroll.terms";
   };
   readonly permission: {
+    readonly verifyInvitationConfiguration: "permission.verifyInvitationConfiguration";
     readonly command: "permission.command";
     readonly retryVerification: "permission.retryVerification";
     readonly verify: "permission.verify";
@@ -600,7 +663,7 @@ interface TelemetryPort {
 }
 //#endregion
 //#region src/index.d.ts
-declare const TELEMETRY_EVENT_NAMES: readonly ["auth_otp_requested", "auth_otp_delivered", "auth_otp_expired", "auth_verified", "auth_failed", "auth_signed_out", "onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "provisioning_safe_created", "provisioning_safe_confirmed", "bootstrap_resolved", "bootstrap_failed", "member_activation_started", "member_activation_ready", "member_activation_failed", "organization_creation_started", "organization_creation_ready", "organization_creation_failed", "chain_upstream_fallback", "bundler_error", "receipt_pending", "operation_retried", "account_balance_read", "account_balance_failed", "faucet_requested", "faucet_confirmed", "faucet_failed", "org_create_started", "org_safe_created", "org_safe_confirmed", "org_roles_seeded", "org_created", "org_create_failed", "org_invite_sent", "org_invite_accepted", "org_invite_expired", "payment_initiated", "payment_settled", "payment_failed", "payment_verification_retry", "payment_lifecycle_transition", "quick_pay_external_address_acknowledged", "deposit_initiated", "deposit_settled", "permission_mirror_verification", "movement_scan_window", "movement_scan_checkpoint", "movement_scan_incident", "activity_annotation_saved", "ui_activity_action_completed", "contact_relationship_changed", "ui_contact_action_completed"];
+declare const TELEMETRY_EVENT_NAMES: readonly ["auth_otp_requested", "auth_otp_delivered", "auth_otp_expired", "auth_verified", "auth_failed", "identity_refused", "auth_signed_out", "native_authorization_started", "native_authorization_reviewed", "native_authorization_accepted", "native_authorization_denied", "native_authorization_connected", "native_authorization_failed", "onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "provisioning_safe_created", "provisioning_safe_confirmed", "bootstrap_resolved", "bootstrap_failed", "member_activation_started", "member_activation_ready", "member_activation_failed", "organization_creation_started", "organization_creation_ready", "organization_creation_failed", "chain_upstream_fallback", "bundler_error", "receipt_pending", "operation_retried", "account_balance_read", "account_balance_failed", "faucet_requested", "faucet_confirmed", "faucet_failed", "org_create_started", "org_safe_created", "org_safe_confirmed", "org_roles_seeded", "org_created", "org_create_failed", "org_invite_sent", "org_invite_accepted", "org_invite_expired", "payment_initiated", "payment_settled", "payment_failed", "payment_verification_retry", "payment_lifecycle_transition", "quick_pay_external_address_acknowledged", "deposit_initiated", "deposit_settled", "permission_mirror_verification", "movement_scan_window", "movement_scan_checkpoint", "movement_scan_incident", "indexer_drift_corrected", "activity_annotation_saved", "ui_activity_action_completed", "contact_relationship_changed", "ui_contact_action_completed", "access_recovery_completed", "ui_access_step_completed", "org_invite_progressed", "invoice_issued", "invoice_request_transitioned", "ui_invoice_step_completed", "ui_treasury_step_completed", "ui_receive_step_completed", "payroll_group_changed", "payroll_run_transitioned", "ui_payroll_action_completed", "cli_diagnostic_completed", "cli_first_used", "cli_command_started", "cli_command_completed"];
 type TelemetryEventName = (typeof TELEMETRY_EVENT_NAMES)[number];
 type NonEmptyTelemetryEventNames = readonly [TelemetryEventName, ...TelemetryEventName[]];
 type FunnelStepPropertyFilter = {
@@ -919,6 +982,24 @@ declare const AuthFailedTelemetryEventSchema: Schema.Struct<{
     readonly reason: Schema.optional<Schema.String>;
   }>;
 }>;
+declare const IdentityRefusedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"identity_refused">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    /** The refused identity event tag, for example CreateOrganization. */
+    readonly event: Schema.optional<Schema.String>;
+    /** The machine's refusal code: WRONG_STATE, SUPERSEDED or STALE_EPOCH. */
+    readonly refusal_code: Schema.optional<Schema.String>;
+    /** The machine slot the request targeted, for example identity:org. */
+    readonly slot: Schema.optional<Schema.String>;
+    /** The machine state at refusal, for example authenticated:claiming. */
+    readonly state: Schema.optional<Schema.String>;
+  }>;
+}>;
 declare const AuthSignedOutTelemetryEventSchema: Schema.Struct<{
   readonly name: Schema.Literal<"auth_signed_out">;
   readonly props: Schema.Struct<{
@@ -929,6 +1010,81 @@ declare const AuthSignedOutTelemetryEventSchema: Schema.Struct<{
     sdk_version: Schema.optional<Schema.String>;
   }>;
 }>;
+declare const NativeAuthorizationStartedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"native_authorization_started">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly mode: Schema.Literals<readonly ["login", "signup"]>;
+  }>;
+}>;
+declare const NativeAuthorizationReviewedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"native_authorization_reviewed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly mode: Schema.Literals<readonly ["login", "signup"]>;
+  }>;
+}>;
+declare const NativeAuthorizationAcceptedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"native_authorization_accepted">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly mode: Schema.Literals<readonly ["login", "signup"]>;
+    /** Whether consent also had to finish account setup first. */
+    readonly setup_state: Schema.optional<Schema.Literals<readonly ["not_required", "new", "resumable"]>>;
+  }>;
+}>;
+declare const NativeAuthorizationDeniedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"native_authorization_denied">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly mode: Schema.Literals<readonly ["login", "signup"]>;
+  }>;
+}>;
+declare const NativeAuthorizationConnectedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"native_authorization_connected">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly mode: Schema.Literals<readonly ["login", "signup"]>;
+  }>;
+}>;
+declare const NativeAuthorizationFailedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"native_authorization_failed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly mode: Schema.optional<Schema.Literals<readonly ["login", "signup"]>>;
+    /** The refusal word the store returned, for example `identity_mismatch` or
+     * `request_expired`. These are the closed `CLIENT_AUTHORIZATION_REFUSALS` from
+     * `@capxul/wire` plus the store-internal `fresh_session_required` (ruling R3),
+     * which the continuation maps to `identity_mismatch` on the wire but reports
+     * truthfully here. Kept as `OptionalString` rather than an imported literal
+     * set: this package must not depend on the transport contract. */
+    readonly reason: Schema.optional<Schema.String>;
+  }>;
+}>;
 declare const OnboardingIntentSelectedTelemetryEventSchema: Schema.Struct<{
   readonly name: Schema.Literal<"onboarding_intent_selected">;
   readonly props: Schema.Struct<{
@@ -1207,6 +1363,10 @@ declare const AccountBalanceReadTelemetryEventSchema: Schema.Struct<{
     readonly correlation_id: Schema.optional<Schema.String>;
     readonly sdk_version: Schema.optional<Schema.String>;
     readonly account_id: Schema.optional<Schema.Codec<AccountId, string, never, never>>;
+    readonly account_kind: Schema.optional<Schema.Literals<readonly ["personalSafe", "orgTreasury"]>>;
+    readonly chain_id: Schema.optional<Schema.Codec<ChainId, number, never, never>>;
+    readonly token_address: Schema.optional<Schema.Codec<Address, string, never, never>>;
+    readonly asset_id: Schema.optional<Schema.String>;
     readonly currency: Schema.optional<Schema.Codec<CurrencyCode, string, never, never>>;
     readonly balance_bucket: Schema.optional<Schema.Literals<readonly ["zero", "nonzero"]>>;
     readonly durationMs: Schema.optional<Schema.Codec<DurationMs, number, never, never>>;
@@ -1260,6 +1420,7 @@ declare const FaucetRequestedTelemetryEventSchema: Schema.Struct<{
     readonly sdk_version: Schema.optional<Schema.String>;
     readonly amount: Schema.optional<Schema.Codec<WeiAmount, string, never, never>>;
     readonly chainId: Schema.optional<Schema.Codec<ChainId, number, never, never>>;
+    readonly asset_id: Schema.optional<Schema.String>;
   }>;
 }>;
 declare const FaucetConfirmedTelemetryEventSchema: Schema.Struct<{
@@ -1273,6 +1434,8 @@ declare const FaucetConfirmedTelemetryEventSchema: Schema.Struct<{
     readonly amount: Schema.optional<Schema.Codec<WeiAmount, string, never, never>>;
     readonly chainId: Schema.optional<Schema.Codec<ChainId, number, never, never>>;
     readonly txHash: Schema.optional<Schema.Codec<TxHash, string, never, never>>;
+    readonly asset_id: Schema.optional<Schema.String>;
+    readonly token_address: Schema.optional<Schema.Codec<Address, string, never, never>>;
     readonly durationMs: Schema.optional<Schema.Codec<DurationMs, number, never, never>>;
   }>;
 }>;
@@ -1312,6 +1475,10 @@ declare const FaucetFailedTelemetryEventSchema: Schema.Struct<{
       readonly server: Schema.optional<Schema.String>;
     }>>;
     readonly reason: Schema.optional<Schema.String>;
+    readonly amount: Schema.optional<Schema.Codec<WeiAmount, string, never, never>>;
+    readonly chainId: Schema.optional<Schema.Codec<ChainId, number, never, never>>;
+    readonly asset_id: Schema.optional<Schema.String>;
+    readonly token_address: Schema.optional<Schema.Codec<Address, string, never, never>>;
   }>;
 }>;
 declare const ChainUpstreamFallbackTelemetryEventSchema: Schema.Struct<{
@@ -1507,6 +1674,11 @@ declare const OrgInviteSentTelemetryEventSchema: Schema.Struct<{
     readonly correlation_id: Schema.optional<Schema.String>;
     readonly sdk_version: Schema.optional<Schema.String>;
     readonly org_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    readonly invitation_id: Schema.optional<Schema.String>;
+    readonly generation: Schema.optional<Schema.String>;
+    readonly command_id: Schema.optional<Schema.String>;
+    readonly subject_party_id: Schema.optional<Schema.String>;
+    readonly persisted_at: Schema.optional<Schema.Codec<EpochMs, number, never, never>>;
     readonly email_domain: Schema.optional<Schema.String>;
     readonly role: Schema.optional<Schema.String>;
     readonly status: Schema.optional<Schema.String>;
@@ -1521,6 +1693,11 @@ declare const OrgInviteAcceptedTelemetryEventSchema: Schema.Struct<{
     readonly correlation_id: Schema.optional<Schema.String>;
     readonly sdk_version: Schema.optional<Schema.String>;
     readonly org_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    readonly invitation_id: Schema.optional<Schema.String>;
+    readonly accepted_at: Schema.optional<Schema.Codec<EpochMs, number, never, never>>;
+    readonly generation: Schema.optional<Schema.String>;
+    readonly command_id: Schema.optional<Schema.String>;
+    readonly subject_party_id: Schema.optional<Schema.String>;
     readonly role: Schema.optional<Schema.String>;
     readonly status: Schema.optional<Schema.String>;
   }>;
@@ -1535,6 +1712,7 @@ declare const OrgInviteExpiredTelemetryEventSchema: Schema.Struct<{
     readonly sdk_version: Schema.optional<Schema.String>;
     readonly org_id: Schema.optional<Schema.Codec<string, string, never, never>>;
     readonly email_domain: Schema.optional<Schema.String>;
+    readonly invitation_id: Schema.optional<Schema.String>;
     readonly reason: Schema.optional<Schema.String>;
     readonly role: Schema.optional<Schema.String>;
     readonly status: Schema.optional<Schema.String>;
@@ -1779,10 +1957,38 @@ declare const PermissionMirrorVerificationTelemetryEventSchema: Schema.Struct<{
     readonly journey_id: Schema.optional<Schema.String>;
     readonly correlation_id: Schema.optional<Schema.String>;
     readonly sdk_version: Schema.optional<Schema.String>;
+    /** The RECEIPT verification outcome. What the mirror then did is separate. */
     readonly outcome: Schema.String;
     readonly reason: Schema.String;
     readonly chain_id: Schema.Number;
     readonly retry_count: Schema.Number;
+    /**
+     * #1960 R02, consumed by R03. A verified receipt is not an applied Permission:
+     * these two optional fields let the producer say what the applying mutation
+     * actually returned, and which command it was, without either fact rewriting
+     * the receipt outcome above. Absent when application has not happened yet.
+     */
+    readonly application_result: Schema.optional<Schema.Literals<readonly ["applied", "replayed", "conflicting_replay", "revision_mismatch", "cleanup_required", "not_applied", "application_failure", "mismatch", "refused"]>>;
+    readonly command_kind: Schema.optional<Schema.Literals<readonly ["invitation_configuration", "invitation_eoa"]>>;
+    readonly command_id: Schema.optional<Schema.String>;
+    readonly invitation_id: Schema.optional<Schema.String>;
+    readonly generation: Schema.optional<Schema.String>;
+    readonly purpose: Schema.optional<Schema.Literals<readonly ["configure", "grant", "disable", "compensate"]>>;
+    readonly $insert_id: Schema.optional<Schema.String>;
+    /**
+     * #1961 R03. The authorized stored row names the Permission it changed; the
+     * verified receipt names the chain facts that prove it. Every field is
+     * optional because a pending or provider-failed verification has neither an
+     * application result nor a receipt to report.
+     */
+    readonly permission_id: Schema.optional<Schema.String>;
+    readonly permission_assignment_id: Schema.optional<Schema.String>;
+    readonly permission_operation: Schema.optional<Schema.Literals<readonly ["create", "change", "assign", "revoke", "replace"]>>;
+    readonly revision: Schema.optional<Schema.Number>;
+    readonly user_op_hash: Schema.optional<Schema.String>;
+    readonly transaction_hash: Schema.optional<Schema.String>;
+    readonly block_number: Schema.optional<Schema.Number>;
+    readonly log_index: Schema.optional<Schema.Number>;
   }>;
 }>;
 declare const MovementScanWindowTelemetryEventSchema: Schema.Struct<{
@@ -1830,6 +2036,25 @@ declare const MovementScanIncidentTelemetryEventSchema: Schema.Struct<{
     readonly anchor_block_number: Schema.Number;
   }>;
 }>;
+declare const IndexerDriftCorrectedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"indexer_drift_corrected">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly projection_kind: Schema.Literals<readonly ["member_authority", "payment_settlement", "permission_assignment"]>;
+    readonly previous_state: Schema.String;
+    readonly current_state: Schema.String;
+    readonly previous_block: Schema.optional<Schema.Number>;
+    readonly current_block: Schema.optional<Schema.Number>;
+    readonly logical_event_id: Schema.optional<Schema.String>;
+    readonly scope_kind: Schema.optional<Schema.Literals<readonly ["account", "organization"]>>;
+    readonly account_id: Schema.optional<Schema.Codec<AccountId, string, never, never>>;
+    readonly reference_id: Schema.optional<Schema.String>;
+  }>;
+}>;
 declare const ContactRelationshipChangedTelemetryEventSchema: Schema.Struct<{
   readonly name: Schema.Literal<"contact_relationship_changed">;
   readonly props: Schema.Struct<{
@@ -1848,6 +2073,107 @@ declare const ContactRelationshipChangedTelemetryEventSchema: Schema.Struct<{
     readonly operation: Schema.Literals<readonly ["addressBook.add", "addressBook.label", "addressBook.hide", "addressBook.unhide"]>;
   }>;
 }>;
+/** One completed online CLI diagnostic. No command input or provider text. */
+declare const CLI_COMMAND_NAMES: readonly ["capxul", "doctor", "telemetry", "telemetry.status", "telemetry.enable", "telemetry.disable", "auth", "auth.login", "auth.signup", "auth.send", "auth.verify", "auth.profile", "auth.status", "auth.logout", "contact", "contact.list", "contact.get", "contact.add", "contact.label", "contact.hide", "contact.unhide", "org", "org.list", "org.use", "org.status", "org.me", "org.members", "org.member", "org.member.get", "org.member.invite", "org.contact", "org.contact.list", "org.contact.get", "org.contact.add", "org.contact.label", "org.contact.hide", "org.contact.unhide", "org.invite", "org.invite.list", "org.invite.get", "org.invite.wait", "org.invite.review", "org.invite.accept", "org.invite.decline", "org.invite.cancel", "org.invite.resend", "org.invite.retry", "org.wait", "org.create", "org.retry", "unknown"];
+declare const CLI_CAPABILITIES: readonly ["cli", "diagnostics", "collection", "authentication", "organization", "contacts"];
+declare const CLI_INVOCATION_KINDS: readonly ["command", "help", "version", "completion", "parse_refusal", "collection_control"];
+type CliCommandName = (typeof CLI_COMMAND_NAMES)[number];
+type CliCapability = (typeof CLI_CAPABILITIES)[number];
+type CliInvocationKind = (typeof CLI_INVOCATION_KINDS)[number];
+declare const CliFirstUsedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"cli_first_used">;
+  readonly props: Schema.Struct<{
+    capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    journey_id: Schema.optional<Schema.String>;
+    correlation_id: Schema.optional<Schema.String>;
+    schema_version: Schema.Literal<1>;
+    command: Schema.Literals<readonly ["capxul", "doctor", "telemetry", "telemetry.status", "telemetry.enable", "telemetry.disable", "auth", "auth.login", "auth.signup", "auth.send", "auth.verify", "auth.profile", "auth.status", "auth.logout", "contact", "contact.list", "contact.get", "contact.add", "contact.label", "contact.hide", "contact.unhide", "org", "org.list", "org.use", "org.status", "org.me", "org.members", "org.member", "org.member.get", "org.member.invite", "org.contact", "org.contact.list", "org.contact.get", "org.contact.add", "org.contact.label", "org.contact.hide", "org.contact.unhide", "org.invite", "org.invite.list", "org.invite.get", "org.invite.wait", "org.invite.review", "org.invite.accept", "org.invite.decline", "org.invite.cancel", "org.invite.resend", "org.invite.retry", "org.wait", "org.create", "org.retry", "unknown"]>;
+    capability: Schema.Literals<readonly ["cli", "diagnostics", "collection", "authentication", "organization", "contacts"]>;
+    invocation_kind: Schema.Literals<readonly ["command", "help", "version", "completion", "parse_refusal", "collection_control"]>;
+    invocation_id: Schema.String;
+    cli_identity_kind: Schema.optional<Schema.Literals<readonly ["anonymous", "identified"]>>;
+    anonymous_id: Schema.optional<Schema.String>;
+    auth_user_id: Schema.optional<Schema.String>;
+    occurred_at: Schema.Number;
+    cli_version: Schema.String;
+    sdk_version: Schema.String;
+    release: Schema.String;
+    platform: Schema.Literals<readonly ["darwin", "linux", "unknown"]>;
+    architecture: Schema.Literals<readonly ["arm64", "x64", "unknown"]>;
+    ci: Schema.Boolean;
+    tty: Schema.Boolean;
+    output_mode: Schema.Literals<readonly ["human", "json"]>;
+  }>;
+}>;
+declare const CliCommandStartedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"cli_command_started">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly schema_version: Schema.Literal<1>;
+    readonly command: Schema.Literals<readonly ["capxul", "doctor", "telemetry", "telemetry.status", "telemetry.enable", "telemetry.disable", "auth", "auth.login", "auth.signup", "auth.send", "auth.verify", "auth.profile", "auth.status", "auth.logout", "contact", "contact.list", "contact.get", "contact.add", "contact.label", "contact.hide", "contact.unhide", "org", "org.list", "org.use", "org.status", "org.me", "org.members", "org.member", "org.member.get", "org.member.invite", "org.contact", "org.contact.list", "org.contact.get", "org.contact.add", "org.contact.label", "org.contact.hide", "org.contact.unhide", "org.invite", "org.invite.list", "org.invite.get", "org.invite.wait", "org.invite.review", "org.invite.accept", "org.invite.decline", "org.invite.cancel", "org.invite.resend", "org.invite.retry", "org.wait", "org.create", "org.retry", "unknown"]>;
+    readonly capability: Schema.Literals<readonly ["cli", "diagnostics", "collection", "authentication", "organization", "contacts"]>;
+    readonly invocation_id: Schema.String;
+    readonly cli_identity_kind: Schema.optional<Schema.Literals<readonly ["anonymous", "identified"]>>;
+    readonly anonymous_id: Schema.optional<Schema.String>;
+    readonly auth_user_id: Schema.optional<Schema.String>;
+    readonly occurred_at: Schema.Number;
+    readonly cli_version: Schema.String;
+    readonly sdk_version: Schema.String;
+    readonly release: Schema.String;
+    readonly platform: Schema.Literals<readonly ["darwin", "linux", "unknown"]>;
+    readonly architecture: Schema.Literals<readonly ["arm64", "x64", "unknown"]>;
+    readonly ci: Schema.Boolean;
+    readonly tty: Schema.Boolean;
+    readonly output_mode: Schema.Literals<readonly ["human", "json"]>;
+    readonly invocation_kind: Schema.Literals<readonly ["command", "help", "version"]>;
+  }>;
+}>;
+declare const CliCommandCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"cli_command_completed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly schema_version: Schema.Literal<1>;
+    readonly command: Schema.Literals<readonly ["capxul", "doctor", "telemetry", "telemetry.status", "telemetry.enable", "telemetry.disable", "auth", "auth.login", "auth.signup", "auth.send", "auth.verify", "auth.profile", "auth.status", "auth.logout", "contact", "contact.list", "contact.get", "contact.add", "contact.label", "contact.hide", "contact.unhide", "org", "org.list", "org.use", "org.status", "org.me", "org.members", "org.member", "org.member.get", "org.member.invite", "org.contact", "org.contact.list", "org.contact.get", "org.contact.add", "org.contact.label", "org.contact.hide", "org.contact.unhide", "org.invite", "org.invite.list", "org.invite.get", "org.invite.wait", "org.invite.review", "org.invite.accept", "org.invite.decline", "org.invite.cancel", "org.invite.resend", "org.invite.retry", "org.wait", "org.create", "org.retry", "unknown"]>;
+    readonly capability: Schema.Literals<readonly ["cli", "diagnostics", "collection", "authentication", "organization", "contacts"]>;
+    readonly invocation_kind: Schema.Literals<readonly ["command", "help", "version", "completion", "parse_refusal", "collection_control"]>;
+    readonly invocation_id: Schema.String;
+    readonly cli_identity_kind: Schema.optional<Schema.Literals<readonly ["anonymous", "identified"]>>;
+    readonly anonymous_id: Schema.optional<Schema.String>;
+    readonly auth_user_id: Schema.optional<Schema.String>;
+    readonly occurred_at: Schema.Number;
+    readonly cli_version: Schema.String;
+    readonly sdk_version: Schema.String;
+    readonly release: Schema.String;
+    readonly platform: Schema.Literals<readonly ["darwin", "linux", "unknown"]>;
+    readonly architecture: Schema.Literals<readonly ["arm64", "x64", "unknown"]>;
+    readonly ci: Schema.Boolean;
+    readonly tty: Schema.Boolean;
+    readonly output_mode: Schema.Literals<readonly ["human", "json"]>;
+    readonly outcome: Schema.Literals<readonly ["succeeded", "refused", "failed", "cancelled"]>;
+    readonly duration_ms: Schema.Number;
+    readonly error_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED", "CLI_USAGE", "CLI_CONFIG", "CLI_STORAGE", "CLI_DEFECT"]>>;
+  }>;
+}>;
+declare const CliDiagnosticCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"cli_diagnostic_completed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly outcome: Schema.Literals<readonly ["succeeded", "refused", "failed", "cancelled"]>;
+    readonly invocation_id: Schema.String;
+    readonly cli_version: Schema.String;
+  }>;
+}>;
 declare const UiContactActionCompletedTelemetryEventSchema: Schema.Struct<{
   readonly name: Schema.Literal<"ui_contact_action_completed">;
   readonly props: Schema.Union<readonly [Schema.Struct<{
@@ -1903,6 +2229,17 @@ declare const ActivityAnnotationSavedTelemetryEventSchema: Schema.Struct<{
 declare const UiActivityActionCompletedTelemetryEventSchema: Schema.Struct<{
   readonly name: Schema.Literal<"ui_activity_action_completed">;
   readonly props: Schema.Union<readonly [Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly action: Schema.Literal<"read">;
+    readonly outcome: Schema.Literals<readonly ["partial_displayed", "recovered"]>;
+    readonly surface: Schema.Literals<readonly ["transactions", "recent", "summary"]>;
+  }>, Schema.Struct<{
     readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
     readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
     readonly journey_id: Schema.optional<Schema.String>;
@@ -1976,6 +2313,214 @@ declare const UiActivityActionCompletedTelemetryEventSchema: Schema.Struct<{
     readonly truncated: Schema.optional<Schema.Boolean>;
   }>]>;
 }>;
+declare const AccessRecoveryCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"access_recovery_completed">;
+  readonly props: Schema.Union<readonly [Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly recovery: Schema.Literal<"session_restoration">;
+    readonly outcome: Schema.Literals<readonly ["restored", "absent", "failed"]>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+  }>, Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly recovery: Schema.Literal<"signer_readiness">;
+    readonly outcome: Schema.Literals<readonly ["ready", "unavailable"]>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+  }>]>;
+}>;
+/**
+ * R05 (#1963) wired three of these steps at the app's dashboard Access
+ * boundary: `dashboard_granted` on the commit of the granted content,
+ * `gate_error_displayed` on the mounted error surface, and `retry_selected` on
+ * the actual selection. `redirect_completed` stays RESERVED and unproduced —
+ * asking for a navigation is not arriving, and the destination page's own
+ * normalized pageview already carries the arrival on the same journey, so a
+ * second event would add no fact. `capability_refusal_displayed` and
+ * `signer_refusal_displayed` belong to the screens that draw those refusals
+ * (Recipients, Invoice, Payroll, Quick Pay); Access publishes the contract and
+ * the `CanReason` those owners report, and produces neither itself.
+ */
+declare const UiAccessStepCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"ui_access_step_completed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly step: Schema.Literals<readonly ["dashboard_granted", "redirect_completed", "gate_error_displayed", "retry_selected", "capability_refusal_displayed", "signer_refusal_displayed"]>;
+    readonly capability: Schema.optional<Schema.Literals<readonly ["spend", "managePeople"]>>;
+    readonly probe: Schema.optional<Schema.Literals<readonly ["session", "membership", "lifecycle"]>>;
+    readonly reason: Schema.optional<Schema.Literals<readonly ["loading", "no-permission", "org-unavailable"]>>;
+  }>;
+}>;
+/**
+ * R06 (#1964) wired three of the four progress words to the durable writer that
+ * commits each one. `account_ready` comes from `org/memberLifecycle.ts`, for
+ * every membership row a claimed personal Account actually advanced.
+ * `permission_applied` and `membership_activated` come from
+ * `permission/mirror.ts`: the first only when the mirror wrote a NEW Permission
+ * state, the second only when that call flipped a `pending_grant` row to
+ * `active`. A replay of an applied command writes neither, so it reports
+ * neither. `revoked` stays RESERVED and unproduced — no writer revokes a
+ * membership yet, and #1459 owns that ceremony.
+ */
+declare const OrgInviteProgressedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"org_invite_progressed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly organization_id: Schema.Codec<string, string, never, never>;
+    readonly progress: Schema.Literals<readonly ["configuration_authorized", "account_ready", "permission_applied", "membership_activated", "revoked"]>;
+    /** The invited Party. The initiating actor stays on the envelope's identity. */
+    readonly member_party_id: Schema.String;
+    readonly invitation_id: Schema.optional<Schema.String>;
+    readonly generation: Schema.optional<Schema.String>;
+    readonly command_id: Schema.optional<Schema.String>;
+    readonly occurred_at: Schema.Number;
+  }>;
+}>;
+declare const InvoiceIssuedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"invoice_issued">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly request_id: Schema.String;
+    readonly issuer_scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly issuer_scope_id: Schema.String;
+    readonly payer_party_id: Schema.optional<Schema.String>;
+    readonly occurred_at: Schema.Number;
+  }>;
+}>;
+declare const InvoiceRequestTransitionedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"invoice_request_transitioned">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly request_id: Schema.String;
+    readonly transition: Schema.Literals<readonly ["approval_prepared", "declined", "cancelled"]>;
+    readonly actor_scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly actor_scope_id: Schema.String;
+    readonly occurred_at: Schema.Number;
+  }>;
+}>;
+declare const UiInvoiceStepCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"ui_invoice_step_completed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly step: Schema.Literals<readonly ["opened", "previewed", "dismissed", "submitted", "result_displayed", "refusal_displayed", "retry_selected"]>;
+    readonly request_id: Schema.optional<Schema.String>;
+  }>;
+}>;
+declare const UiTreasuryStepCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"ui_treasury_step_completed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly step: Schema.Literals<readonly ["balance_displayed", "read_refusal_displayed", "retry_selected", "recovery_completed"]>;
+    readonly account_kind: Schema.optional<Schema.Literals<readonly ["personalSafe", "orgTreasury"]>>;
+  }>;
+}>;
+declare const UiReceiveStepCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"ui_receive_step_completed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly step: Schema.Literals<readonly ["instructions_displayed", "address_copied", "copy_failed", "refusal_displayed", "retry_selected"]>;
+    readonly account_kind: Schema.optional<Schema.Literals<readonly ["personalSafe", "orgTreasury"]>>;
+  }>;
+}>;
+declare const PayrollGroupChangedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"payroll_group_changed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly organization_id: Schema.Codec<string, string, never, never>;
+    readonly change: Schema.Literals<readonly ["created", "updated", "deleted"]>;
+    readonly group_id: Schema.String;
+    readonly member_count: Schema.Number;
+    readonly occurred_at: Schema.Number;
+  }>;
+}>;
+declare const PayrollRunTransitionedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"payroll_run_transitioned">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly organization_id: Schema.Codec<string, string, never, never>;
+    readonly transition: Schema.Literals<readonly ["prepared", "authorized", "settled"]>;
+    readonly run_id: Schema.String;
+    /**
+     * The `paymentCommands` row at `payrollRuns.batchRef` — the durable owner of
+     * this run's Payment membership. `payment_count` counts THAT command's
+     * `paymentIds`, so an unrelated Payment quoting the run id changes neither.
+     */
+    readonly command_id: Schema.optional<Schema.String>;
+    readonly payment_count: Schema.optional<Schema.Number>;
+    readonly occurred_at: Schema.Number;
+  }>;
+}>;
+declare const UiPayrollActionCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"ui_payroll_action_completed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+    readonly action: Schema.Literals<readonly ["opened", "refusal_displayed", "recovery_completed", "cancelled", "submitted_displayed"]>;
+    readonly run_id: Schema.optional<Schema.String>;
+  }>;
+}>;
 declare const TELEMETRY_EVENT_SCHEMAS: {
   readonly contact_relationship_changed: Schema.Struct<{
     readonly name: Schema.Literal<"contact_relationship_changed">;
@@ -1995,6 +2540,191 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly operation: Schema.Literals<readonly ["addressBook.add", "addressBook.label", "addressBook.hide", "addressBook.unhide"]>;
     }>;
   }>;
+  readonly access_recovery_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"access_recovery_completed">;
+    readonly props: Schema.Union<readonly [Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly recovery: Schema.Literal<"session_restoration">;
+      readonly outcome: Schema.Literals<readonly ["restored", "absent", "failed"]>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    }>, Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly recovery: Schema.Literal<"signer_readiness">;
+      readonly outcome: Schema.Literals<readonly ["ready", "unavailable"]>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    }>]>;
+  }>;
+  readonly ui_access_step_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"ui_access_step_completed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly step: Schema.Literals<readonly ["dashboard_granted", "redirect_completed", "gate_error_displayed", "retry_selected", "capability_refusal_displayed", "signer_refusal_displayed"]>;
+      readonly capability: Schema.optional<Schema.Literals<readonly ["spend", "managePeople"]>>;
+      readonly probe: Schema.optional<Schema.Literals<readonly ["session", "membership", "lifecycle"]>>;
+      readonly reason: Schema.optional<Schema.Literals<readonly ["loading", "no-permission", "org-unavailable"]>>;
+    }>;
+  }>;
+  readonly org_invite_progressed: Schema.Struct<{
+    readonly name: Schema.Literal<"org_invite_progressed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly organization_id: Schema.Codec<string, string, never, never>;
+      readonly progress: Schema.Literals<readonly ["configuration_authorized", "account_ready", "permission_applied", "membership_activated", "revoked"]>;
+      /** The invited Party. The initiating actor stays on the envelope's identity. */
+      readonly member_party_id: Schema.String;
+      readonly invitation_id: Schema.optional<Schema.String>;
+      readonly generation: Schema.optional<Schema.String>;
+      readonly command_id: Schema.optional<Schema.String>;
+      readonly occurred_at: Schema.Number;
+    }>;
+  }>;
+  readonly invoice_issued: Schema.Struct<{
+    readonly name: Schema.Literal<"invoice_issued">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly request_id: Schema.String;
+      readonly issuer_scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly issuer_scope_id: Schema.String;
+      readonly payer_party_id: Schema.optional<Schema.String>;
+      readonly occurred_at: Schema.Number;
+    }>;
+  }>;
+  readonly invoice_request_transitioned: Schema.Struct<{
+    readonly name: Schema.Literal<"invoice_request_transitioned">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly request_id: Schema.String;
+      readonly transition: Schema.Literals<readonly ["approval_prepared", "declined", "cancelled"]>;
+      readonly actor_scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly actor_scope_id: Schema.String;
+      readonly occurred_at: Schema.Number;
+    }>;
+  }>;
+  readonly ui_invoice_step_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"ui_invoice_step_completed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly step: Schema.Literals<readonly ["opened", "previewed", "dismissed", "submitted", "result_displayed", "refusal_displayed", "retry_selected"]>;
+      readonly request_id: Schema.optional<Schema.String>;
+    }>;
+  }>;
+  readonly ui_treasury_step_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"ui_treasury_step_completed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly step: Schema.Literals<readonly ["balance_displayed", "read_refusal_displayed", "retry_selected", "recovery_completed"]>;
+      readonly account_kind: Schema.optional<Schema.Literals<readonly ["personalSafe", "orgTreasury"]>>;
+    }>;
+  }>;
+  readonly ui_receive_step_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"ui_receive_step_completed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly step: Schema.Literals<readonly ["instructions_displayed", "address_copied", "copy_failed", "refusal_displayed", "retry_selected"]>;
+      readonly account_kind: Schema.optional<Schema.Literals<readonly ["personalSafe", "orgTreasury"]>>;
+    }>;
+  }>;
+  readonly payroll_group_changed: Schema.Struct<{
+    readonly name: Schema.Literal<"payroll_group_changed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly organization_id: Schema.Codec<string, string, never, never>;
+      readonly change: Schema.Literals<readonly ["created", "updated", "deleted"]>;
+      readonly group_id: Schema.String;
+      readonly member_count: Schema.Number;
+      readonly occurred_at: Schema.Number;
+    }>;
+  }>;
+  readonly payroll_run_transitioned: Schema.Struct<{
+    readonly name: Schema.Literal<"payroll_run_transitioned">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly organization_id: Schema.Codec<string, string, never, never>;
+      readonly transition: Schema.Literals<readonly ["prepared", "authorized", "settled"]>;
+      readonly run_id: Schema.String;
+      /**
+       * The `paymentCommands` row at `payrollRuns.batchRef` — the durable owner of
+       * this run's Payment membership. `payment_count` counts THAT command's
+       * `paymentIds`, so an unrelated Payment quoting the run id changes neither.
+       */
+      readonly command_id: Schema.optional<Schema.String>;
+      readonly payment_count: Schema.optional<Schema.Number>;
+      readonly occurred_at: Schema.Number;
+    }>;
+  }>;
+  readonly ui_payroll_action_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"ui_payroll_action_completed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly action: Schema.Literals<readonly ["opened", "refusal_displayed", "recovery_completed", "cancelled", "submitted_displayed"]>;
+      readonly run_id: Schema.optional<Schema.String>;
+    }>;
+  }>;
   readonly ui_contact_action_completed: Schema.Struct<{
     readonly name: Schema.Literal<"ui_contact_action_completed">;
     readonly props: Schema.Union<readonly [Schema.Struct<{
@@ -2032,6 +2762,100 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly outcome: Schema.Literal<"requested">;
     }>]>;
   }>;
+  readonly cli_diagnostic_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"cli_diagnostic_completed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly outcome: Schema.Literals<readonly ["succeeded", "refused", "failed", "cancelled"]>;
+      readonly invocation_id: Schema.String;
+      readonly cli_version: Schema.String;
+    }>;
+  }>;
+  readonly cli_first_used: Schema.Struct<{
+    readonly name: Schema.Literal<"cli_first_used">;
+    readonly props: Schema.Struct<{
+      capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      journey_id: Schema.optional<Schema.String>;
+      correlation_id: Schema.optional<Schema.String>;
+      schema_version: Schema.Literal<1>;
+      command: Schema.Literals<readonly ["capxul", "doctor", "telemetry", "telemetry.status", "telemetry.enable", "telemetry.disable", "auth", "auth.login", "auth.signup", "auth.send", "auth.verify", "auth.profile", "auth.status", "auth.logout", "contact", "contact.list", "contact.get", "contact.add", "contact.label", "contact.hide", "contact.unhide", "org", "org.list", "org.use", "org.status", "org.me", "org.members", "org.member", "org.member.get", "org.member.invite", "org.contact", "org.contact.list", "org.contact.get", "org.contact.add", "org.contact.label", "org.contact.hide", "org.contact.unhide", "org.invite", "org.invite.list", "org.invite.get", "org.invite.wait", "org.invite.review", "org.invite.accept", "org.invite.decline", "org.invite.cancel", "org.invite.resend", "org.invite.retry", "org.wait", "org.create", "org.retry", "unknown"]>;
+      capability: Schema.Literals<readonly ["cli", "diagnostics", "collection", "authentication", "organization", "contacts"]>;
+      invocation_kind: Schema.Literals<readonly ["command", "help", "version", "completion", "parse_refusal", "collection_control"]>;
+      invocation_id: Schema.String;
+      cli_identity_kind: Schema.optional<Schema.Literals<readonly ["anonymous", "identified"]>>;
+      anonymous_id: Schema.optional<Schema.String>;
+      auth_user_id: Schema.optional<Schema.String>;
+      occurred_at: Schema.Number;
+      cli_version: Schema.String;
+      sdk_version: Schema.String;
+      release: Schema.String;
+      platform: Schema.Literals<readonly ["darwin", "linux", "unknown"]>;
+      architecture: Schema.Literals<readonly ["arm64", "x64", "unknown"]>;
+      ci: Schema.Boolean;
+      tty: Schema.Boolean;
+      output_mode: Schema.Literals<readonly ["human", "json"]>;
+    }>;
+  }>;
+  readonly cli_command_started: Schema.Struct<{
+    readonly name: Schema.Literal<"cli_command_started">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly schema_version: Schema.Literal<1>;
+      readonly command: Schema.Literals<readonly ["capxul", "doctor", "telemetry", "telemetry.status", "telemetry.enable", "telemetry.disable", "auth", "auth.login", "auth.signup", "auth.send", "auth.verify", "auth.profile", "auth.status", "auth.logout", "contact", "contact.list", "contact.get", "contact.add", "contact.label", "contact.hide", "contact.unhide", "org", "org.list", "org.use", "org.status", "org.me", "org.members", "org.member", "org.member.get", "org.member.invite", "org.contact", "org.contact.list", "org.contact.get", "org.contact.add", "org.contact.label", "org.contact.hide", "org.contact.unhide", "org.invite", "org.invite.list", "org.invite.get", "org.invite.wait", "org.invite.review", "org.invite.accept", "org.invite.decline", "org.invite.cancel", "org.invite.resend", "org.invite.retry", "org.wait", "org.create", "org.retry", "unknown"]>;
+      readonly capability: Schema.Literals<readonly ["cli", "diagnostics", "collection", "authentication", "organization", "contacts"]>;
+      readonly invocation_id: Schema.String;
+      readonly cli_identity_kind: Schema.optional<Schema.Literals<readonly ["anonymous", "identified"]>>;
+      readonly anonymous_id: Schema.optional<Schema.String>;
+      readonly auth_user_id: Schema.optional<Schema.String>;
+      readonly occurred_at: Schema.Number;
+      readonly cli_version: Schema.String;
+      readonly sdk_version: Schema.String;
+      readonly release: Schema.String;
+      readonly platform: Schema.Literals<readonly ["darwin", "linux", "unknown"]>;
+      readonly architecture: Schema.Literals<readonly ["arm64", "x64", "unknown"]>;
+      readonly ci: Schema.Boolean;
+      readonly tty: Schema.Boolean;
+      readonly output_mode: Schema.Literals<readonly ["human", "json"]>;
+      readonly invocation_kind: Schema.Literals<readonly ["command", "help", "version"]>;
+    }>;
+  }>;
+  readonly cli_command_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"cli_command_completed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly schema_version: Schema.Literal<1>;
+      readonly command: Schema.Literals<readonly ["capxul", "doctor", "telemetry", "telemetry.status", "telemetry.enable", "telemetry.disable", "auth", "auth.login", "auth.signup", "auth.send", "auth.verify", "auth.profile", "auth.status", "auth.logout", "contact", "contact.list", "contact.get", "contact.add", "contact.label", "contact.hide", "contact.unhide", "org", "org.list", "org.use", "org.status", "org.me", "org.members", "org.member", "org.member.get", "org.member.invite", "org.contact", "org.contact.list", "org.contact.get", "org.contact.add", "org.contact.label", "org.contact.hide", "org.contact.unhide", "org.invite", "org.invite.list", "org.invite.get", "org.invite.wait", "org.invite.review", "org.invite.accept", "org.invite.decline", "org.invite.cancel", "org.invite.resend", "org.invite.retry", "org.wait", "org.create", "org.retry", "unknown"]>;
+      readonly capability: Schema.Literals<readonly ["cli", "diagnostics", "collection", "authentication", "organization", "contacts"]>;
+      readonly invocation_kind: Schema.Literals<readonly ["command", "help", "version", "completion", "parse_refusal", "collection_control"]>;
+      readonly invocation_id: Schema.String;
+      readonly cli_identity_kind: Schema.optional<Schema.Literals<readonly ["anonymous", "identified"]>>;
+      readonly anonymous_id: Schema.optional<Schema.String>;
+      readonly auth_user_id: Schema.optional<Schema.String>;
+      readonly occurred_at: Schema.Number;
+      readonly cli_version: Schema.String;
+      readonly sdk_version: Schema.String;
+      readonly release: Schema.String;
+      readonly platform: Schema.Literals<readonly ["darwin", "linux", "unknown"]>;
+      readonly architecture: Schema.Literals<readonly ["arm64", "x64", "unknown"]>;
+      readonly ci: Schema.Boolean;
+      readonly tty: Schema.Boolean;
+      readonly output_mode: Schema.Literals<readonly ["human", "json"]>;
+      readonly outcome: Schema.Literals<readonly ["succeeded", "refused", "failed", "cancelled"]>;
+      readonly duration_ms: Schema.Number;
+      readonly error_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED", "CLI_USAGE", "CLI_CONFIG", "CLI_STORAGE", "CLI_DEFECT"]>>;
+    }>;
+  }>;
   readonly activity_annotation_saved: Schema.Struct<{
     readonly name: Schema.Literal<"activity_annotation_saved">;
     readonly props: Schema.Struct<{
@@ -2050,6 +2874,17 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
   readonly ui_activity_action_completed: Schema.Struct<{
     readonly name: Schema.Literal<"ui_activity_action_completed">;
     readonly props: Schema.Union<readonly [Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly scope_kind: Schema.Literals<readonly ["account", "organization"]>;
+      readonly reason_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED"]>>;
+      readonly action: Schema.Literal<"read">;
+      readonly outcome: Schema.Literals<readonly ["partial_displayed", "recovered"]>;
+      readonly surface: Schema.Literals<readonly ["transactions", "recent", "summary"]>;
+    }>, Schema.Struct<{
       readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
       readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
       readonly journey_id: Schema.optional<Schema.String>;
@@ -2212,6 +3047,24 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly reason: Schema.optional<Schema.String>;
     }>;
   }>;
+  readonly identity_refused: Schema.Struct<{
+    readonly name: Schema.Literal<"identity_refused">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      /** The refused identity event tag, for example CreateOrganization. */
+      readonly event: Schema.optional<Schema.String>;
+      /** The machine's refusal code: WRONG_STATE, SUPERSEDED or STALE_EPOCH. */
+      readonly refusal_code: Schema.optional<Schema.String>;
+      /** The machine slot the request targeted, for example identity:org. */
+      readonly slot: Schema.optional<Schema.String>;
+      /** The machine state at refusal, for example authenticated:claiming. */
+      readonly state: Schema.optional<Schema.String>;
+    }>;
+  }>;
   readonly auth_signed_out: Schema.Struct<{
     readonly name: Schema.Literal<"auth_signed_out">;
     readonly props: Schema.Struct<{
@@ -2222,6 +3075,81 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       sdk_version: Schema.optional<Schema.String>;
     }>;
   }>;
+  readonly native_authorization_started: Schema.Struct<{
+    readonly name: Schema.Literal<"native_authorization_started">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly mode: Schema.Literals<readonly ["login", "signup"]>;
+    }>;
+  }>;
+  readonly native_authorization_reviewed: Schema.Struct<{
+    readonly name: Schema.Literal<"native_authorization_reviewed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly mode: Schema.Literals<readonly ["login", "signup"]>;
+    }>;
+  }>;
+  readonly native_authorization_accepted: Schema.Struct<{
+    readonly name: Schema.Literal<"native_authorization_accepted">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly mode: Schema.Literals<readonly ["login", "signup"]>;
+      /** Whether consent also had to finish account setup first. */
+      readonly setup_state: Schema.optional<Schema.Literals<readonly ["not_required", "new", "resumable"]>>;
+    }>;
+  }>;
+  readonly native_authorization_denied: Schema.Struct<{
+    readonly name: Schema.Literal<"native_authorization_denied">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly mode: Schema.Literals<readonly ["login", "signup"]>;
+    }>;
+  }>;
+  readonly native_authorization_connected: Schema.Struct<{
+    readonly name: Schema.Literal<"native_authorization_connected">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly mode: Schema.Literals<readonly ["login", "signup"]>;
+    }>;
+  }>;
+  readonly native_authorization_failed: Schema.Struct<{
+    readonly name: Schema.Literal<"native_authorization_failed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly mode: Schema.optional<Schema.Literals<readonly ["login", "signup"]>>;
+      /** The refusal word the store returned, for example `identity_mismatch` or
+       * `request_expired`. These are the closed `CLIENT_AUTHORIZATION_REFUSALS` from
+       * `@capxul/wire` plus the store-internal `fresh_session_required` (ruling R3),
+       * which the continuation maps to `identity_mismatch` on the wire but reports
+       * truthfully here. Kept as `OptionalString` rather than an imported literal
+       * set: this package must not depend on the transport contract. */
+      readonly reason: Schema.optional<Schema.String>;
+    }>;
+  }>;
   readonly onboarding_intent_selected: Schema.Struct<{
     readonly name: Schema.Literal<"onboarding_intent_selected">;
     readonly props: Schema.Struct<{
@@ -2500,6 +3428,10 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly correlation_id: Schema.optional<Schema.String>;
       readonly sdk_version: Schema.optional<Schema.String>;
       readonly account_id: Schema.optional<Schema.Codec<AccountId, string, never, never>>;
+      readonly account_kind: Schema.optional<Schema.Literals<readonly ["personalSafe", "orgTreasury"]>>;
+      readonly chain_id: Schema.optional<Schema.Codec<ChainId, number, never, never>>;
+      readonly token_address: Schema.optional<Schema.Codec<Address, string, never, never>>;
+      readonly asset_id: Schema.optional<Schema.String>;
       readonly currency: Schema.optional<Schema.Codec<CurrencyCode, string, never, never>>;
       readonly balance_bucket: Schema.optional<Schema.Literals<readonly ["zero", "nonzero"]>>;
       readonly durationMs: Schema.optional<Schema.Codec<DurationMs, number, never, never>>;
@@ -2553,6 +3485,7 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly sdk_version: Schema.optional<Schema.String>;
       readonly amount: Schema.optional<Schema.Codec<WeiAmount, string, never, never>>;
       readonly chainId: Schema.optional<Schema.Codec<ChainId, number, never, never>>;
+      readonly asset_id: Schema.optional<Schema.String>;
     }>;
   }>;
   readonly faucet_confirmed: Schema.Struct<{
@@ -2566,6 +3499,8 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly amount: Schema.optional<Schema.Codec<WeiAmount, string, never, never>>;
       readonly chainId: Schema.optional<Schema.Codec<ChainId, number, never, never>>;
       readonly txHash: Schema.optional<Schema.Codec<TxHash, string, never, never>>;
+      readonly asset_id: Schema.optional<Schema.String>;
+      readonly token_address: Schema.optional<Schema.Codec<Address, string, never, never>>;
       readonly durationMs: Schema.optional<Schema.Codec<DurationMs, number, never, never>>;
     }>;
   }>;
@@ -2605,6 +3540,10 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
         readonly server: Schema.optional<Schema.String>;
       }>>;
       readonly reason: Schema.optional<Schema.String>;
+      readonly amount: Schema.optional<Schema.Codec<WeiAmount, string, never, never>>;
+      readonly chainId: Schema.optional<Schema.Codec<ChainId, number, never, never>>;
+      readonly asset_id: Schema.optional<Schema.String>;
+      readonly token_address: Schema.optional<Schema.Codec<Address, string, never, never>>;
     }>;
   }>;
   readonly chain_upstream_fallback: Schema.Struct<{
@@ -2800,6 +3739,11 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly correlation_id: Schema.optional<Schema.String>;
       readonly sdk_version: Schema.optional<Schema.String>;
       readonly org_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+      readonly invitation_id: Schema.optional<Schema.String>;
+      readonly generation: Schema.optional<Schema.String>;
+      readonly command_id: Schema.optional<Schema.String>;
+      readonly subject_party_id: Schema.optional<Schema.String>;
+      readonly persisted_at: Schema.optional<Schema.Codec<EpochMs, number, never, never>>;
       readonly email_domain: Schema.optional<Schema.String>;
       readonly role: Schema.optional<Schema.String>;
       readonly status: Schema.optional<Schema.String>;
@@ -2814,6 +3758,11 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly correlation_id: Schema.optional<Schema.String>;
       readonly sdk_version: Schema.optional<Schema.String>;
       readonly org_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+      readonly invitation_id: Schema.optional<Schema.String>;
+      readonly accepted_at: Schema.optional<Schema.Codec<EpochMs, number, never, never>>;
+      readonly generation: Schema.optional<Schema.String>;
+      readonly command_id: Schema.optional<Schema.String>;
+      readonly subject_party_id: Schema.optional<Schema.String>;
       readonly role: Schema.optional<Schema.String>;
       readonly status: Schema.optional<Schema.String>;
     }>;
@@ -2828,6 +3777,7 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly sdk_version: Schema.optional<Schema.String>;
       readonly org_id: Schema.optional<Schema.Codec<string, string, never, never>>;
       readonly email_domain: Schema.optional<Schema.String>;
+      readonly invitation_id: Schema.optional<Schema.String>;
       readonly reason: Schema.optional<Schema.String>;
       readonly role: Schema.optional<Schema.String>;
       readonly status: Schema.optional<Schema.String>;
@@ -3072,10 +4022,38 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly journey_id: Schema.optional<Schema.String>;
       readonly correlation_id: Schema.optional<Schema.String>;
       readonly sdk_version: Schema.optional<Schema.String>;
+      /** The RECEIPT verification outcome. What the mirror then did is separate. */
       readonly outcome: Schema.String;
       readonly reason: Schema.String;
       readonly chain_id: Schema.Number;
       readonly retry_count: Schema.Number;
+      /**
+       * #1960 R02, consumed by R03. A verified receipt is not an applied Permission:
+       * these two optional fields let the producer say what the applying mutation
+       * actually returned, and which command it was, without either fact rewriting
+       * the receipt outcome above. Absent when application has not happened yet.
+       */
+      readonly application_result: Schema.optional<Schema.Literals<readonly ["applied", "replayed", "conflicting_replay", "revision_mismatch", "cleanup_required", "not_applied", "application_failure", "mismatch", "refused"]>>;
+      readonly command_kind: Schema.optional<Schema.Literals<readonly ["invitation_configuration", "invitation_eoa"]>>;
+      readonly command_id: Schema.optional<Schema.String>;
+      readonly invitation_id: Schema.optional<Schema.String>;
+      readonly generation: Schema.optional<Schema.String>;
+      readonly purpose: Schema.optional<Schema.Literals<readonly ["configure", "grant", "disable", "compensate"]>>;
+      readonly $insert_id: Schema.optional<Schema.String>;
+      /**
+       * #1961 R03. The authorized stored row names the Permission it changed; the
+       * verified receipt names the chain facts that prove it. Every field is
+       * optional because a pending or provider-failed verification has neither an
+       * application result nor a receipt to report.
+       */
+      readonly permission_id: Schema.optional<Schema.String>;
+      readonly permission_assignment_id: Schema.optional<Schema.String>;
+      readonly permission_operation: Schema.optional<Schema.Literals<readonly ["create", "change", "assign", "revoke", "replace"]>>;
+      readonly revision: Schema.optional<Schema.Number>;
+      readonly user_op_hash: Schema.optional<Schema.String>;
+      readonly transaction_hash: Schema.optional<Schema.String>;
+      readonly block_number: Schema.optional<Schema.Number>;
+      readonly log_index: Schema.optional<Schema.Number>;
     }>;
   }>;
   readonly movement_scan_window: Schema.Struct<{
@@ -3123,6 +4101,25 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly anchor_block_number: Schema.Number;
     }>;
   }>;
+  readonly indexer_drift_corrected: Schema.Struct<{
+    readonly name: Schema.Literal<"indexer_drift_corrected">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly projection_kind: Schema.Literals<readonly ["member_authority", "payment_settlement", "permission_assignment"]>;
+      readonly previous_state: Schema.String;
+      readonly current_state: Schema.String;
+      readonly previous_block: Schema.optional<Schema.Number>;
+      readonly current_block: Schema.optional<Schema.Number>;
+      readonly logical_event_id: Schema.optional<Schema.String>;
+      readonly scope_kind: Schema.optional<Schema.Literals<readonly ["account", "organization"]>>;
+      readonly account_id: Schema.optional<Schema.Codec<AccountId, string, never, never>>;
+      readonly reference_id: Schema.optional<Schema.String>;
+    }>;
+  }>;
 };
 declare const FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS: readonly [];
 /**
@@ -3141,7 +4138,7 @@ declare const CONTRACT_FIRST_TELEMETRY_EVENTS: readonly [];
  */
 declare const PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS: readonly ["auth_otp_expired"];
 /** Catalogued browser observations whose producers remain owned by app adoption. */
-declare const BROWSER_GATED_TELEMETRY_EVENTS: readonly ["onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "ui_activity_action_completed", "ui_contact_action_completed"];
+declare const BROWSER_GATED_TELEMETRY_EVENTS: readonly ["onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "ui_activity_action_completed", "ui_contact_action_completed", "ui_access_step_completed", "ui_invoice_step_completed", "ui_treasury_step_completed", "ui_receive_step_completed", "ui_payroll_action_completed"];
 interface TelemetryIdentifyInput {
   readonly distinctId: string;
   readonly anonDistinctId?: AnonymousDistinctId;
@@ -3178,8 +4175,8 @@ interface PostHogBrowserCapture {
  * property before transport. Browser applications may carry emails, draft ids,
  * or other capabilities in the URL; those values must never leave the origin.
  *
- * The callback mutates and returns the supplied event, matching PostHog's
- * `before_send` contract while preserving the event's full structural type.
+ * The callback replaces the event's data with a sanitized copy. Nested values
+ * can refer to live clients or configuration; observation must never mutate them.
  */
 declare function sanitizePostHogBrowserEvent<T extends PostHogBrowserCapture | null>(event: T, urlPolicy?: "path-only" | "diagnostic"): T;
 /**
@@ -3360,4 +4357,4 @@ declare class InMemoryTelemetryBusAdapter implements TelemetryPort {
   reportHandledError(_error: CapxulError, _context?: HandledErrorReportContext): Effect.Effect<void, never>;
 }
 //#endregion
-export { AccountBalanceFailedTelemetryEventSchema, AccountBalanceReadTelemetryEventSchema, ActivityAnnotationSavedTelemetryEventSchema, AuthFailedTelemetryEventSchema, AuthOtpDeliveredTelemetryEventSchema, AuthOtpExpiredTelemetryEventSchema, AuthOtpRequestedTelemetryEventSchema, AuthSignedOutTelemetryEventSchema, AuthVerifiedTelemetryEventSchema, BROWSER_GATED_TELEMETRY_EVENTS, BootstrapFailedTelemetryEventSchema, BootstrapResolvedTelemetryEventSchema, BundlerErrorTelemetryEventSchema, CAPXUL_ENVS, CAPXUL_OPERATIONS, CONTRACT_FIRST_TELEMETRY_EVENTS, CapturedNetworkRequestLike, CapxulBrowserAnalyticsInput, CapxulEnv, type CapxulOperation, ChainAttemptSchema, ChainUpstreamFallbackTelemetryEventSchema, ChainUpstreamSchema, ContactRelationshipChangedTelemetryEventSchema, DepositInitiatedTelemetryEventSchema, DepositSettledTelemetryEventSchema, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS, FailureModeSchema, FaucetConfirmedTelemetryEventSchema, FaucetFailedTelemetryEventSchema, FaucetRequestedTelemetryEventSchema, FunnelJourney, FunnelStepPropertyFilter, type HandledErrorReportContext, InMemoryTelemetryBusAdapter, InitializePostHogBrowserAnalyticsInput, Journey, MemberActivationFailedTelemetryEventSchema, MemberActivationReadyTelemetryEventSchema, MemberActivationStartedTelemetryEventSchema, MovementScanCheckpointTelemetryEventSchema, MovementScanIncidentTelemetryEventSchema, MovementScanWindowTelemetryEventSchema, NonEmptyTelemetryEventNames, type NormalizedCapxulOperation, OnboardingDashboardReachedTelemetryEventSchema, OnboardingIntentSelectedTelemetryEventSchema, OnboardingOrganizationSubmittedTelemetryEventSchema, OnboardingProfileSubmittedTelemetryEventSchema, OperationRetriedTelemetryEventSchema, OrgCreateFailedTelemetryEventSchema, OrgCreateStartedTelemetryEventSchema, OrgCreatedTelemetryEventSchema, OrgInviteAcceptedTelemetryEventSchema, OrgInviteExpiredTelemetryEventSchema, OrgInviteSentTelemetryEventSchema, OrgRolesSeededTelemetryEventSchema, OrgSafeConfirmedTelemetryEventSchema, OrgSafeCreatedTelemetryEventSchema, OrganizationCreationFailedTelemetryEventSchema, OrganizationCreationReadyTelemetryEventSchema, OrganizationCreationStartedTelemetryEventSchema, PII, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS, PaymentFailedTelemetryEventSchema, PaymentInitiatedTelemetryEventSchema, PaymentLifecycleTransitionTelemetryEventSchema, PaymentSettledTelemetryEventSchema, PaymentVerificationRetryTelemetryEventSchema, PermissionMirrorVerificationTelemetryEventSchema, PointEventJourney, PostHogBeforeSend, PostHogBrowserCapture, PostHogBrowserInitialize, PostHogBrowserOptions, PostHogBrowserPageviewClient, PostHogProductAppOptions, PostHogTelemetryAdapter, PostHogUtilityAppOptions, ProvisioningSafeConfirmedTelemetryEventSchema, ProvisioningSafeCreatedTelemetryEventSchema, QuickPayExternalAddressAcknowledgedTelemetryEventSchema, ReceiptPendingTelemetryEventSchema, RecordingTelemetryAdapter, ResponseHeadersSchema, SYNCABLE_CAPXUL_ENVS, TELEMETRY_EVENT_NAMES, TELEMETRY_EVENT_SCHEMAS, TELEMETRY_JOURNEYS, TELEMETRY_PRODUCERS, TelemetryEnvelopeDefaults, TelemetryEvent, TelemetryEventName, TelemetryGroupInput, TelemetryIdentifyInput, type TelemetryPort, TelemetryProducer, TelemetryProps, TelemetryRedactionOptions, TrackHandler, UiActivityActionCompletedTelemetryEventSchema, UiContactActionCompletedTelemetryEventSchema, createCapxulBeforeSend, createPostHogBrowserPageviewTracker, getTrackHandler, initializeCapxulBrowserAnalytics, initializePostHogBrowserAnalytics, isCapxulOperation, maskCapturedNetworkRequest, normalizeCapxulOperation, productAppAnalytics, redactTelemetryEvent, redactTelemetryProps, sanitizePostHogBrowserEvent, setTrackHandler, stampTelemetryEnvelope, track, utilityAppAnalytics };
+export { AccessRecoveryCompletedTelemetryEventSchema, AccountBalanceFailedTelemetryEventSchema, AccountBalanceReadTelemetryEventSchema, ActivityAnnotationSavedTelemetryEventSchema, AuthFailedTelemetryEventSchema, AuthOtpDeliveredTelemetryEventSchema, AuthOtpExpiredTelemetryEventSchema, AuthOtpRequestedTelemetryEventSchema, AuthSignedOutTelemetryEventSchema, AuthVerifiedTelemetryEventSchema, BROWSER_GATED_TELEMETRY_EVENTS, BootstrapFailedTelemetryEventSchema, BootstrapResolvedTelemetryEventSchema, BundlerErrorTelemetryEventSchema, CAPXUL_ENVS, CAPXUL_OPERATIONS, CLI_CAPABILITIES, CLI_COMMAND_NAMES, CLI_INVOCATION_KINDS, CONTRACT_FIRST_TELEMETRY_EVENTS, CapturedNetworkRequestLike, CapxulBrowserAnalyticsInput, CapxulEnv, type CapxulOperation, ChainAttemptSchema, ChainUpstreamFallbackTelemetryEventSchema, ChainUpstreamSchema, CliCapability, CliCommandCompletedTelemetryEventSchema, CliCommandName, CliCommandStartedTelemetryEventSchema, CliDiagnosticCompletedTelemetryEventSchema, CliFirstUsedTelemetryEventSchema, CliInvocationKind, ContactRelationshipChangedTelemetryEventSchema, DepositInitiatedTelemetryEventSchema, DepositSettledTelemetryEventSchema, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS, FailureModeSchema, FaucetConfirmedTelemetryEventSchema, FaucetFailedTelemetryEventSchema, FaucetRequestedTelemetryEventSchema, FunnelJourney, FunnelStepPropertyFilter, type HandledErrorReportContext, IdentityRefusedTelemetryEventSchema, InMemoryTelemetryBusAdapter, IndexerDriftCorrectedTelemetryEventSchema, InitializePostHogBrowserAnalyticsInput, InvoiceIssuedTelemetryEventSchema, InvoiceRequestTransitionedTelemetryEventSchema, Journey, MemberActivationFailedTelemetryEventSchema, MemberActivationReadyTelemetryEventSchema, MemberActivationStartedTelemetryEventSchema, MovementScanCheckpointTelemetryEventSchema, MovementScanIncidentTelemetryEventSchema, MovementScanWindowTelemetryEventSchema, NativeAuthorizationAcceptedTelemetryEventSchema, NativeAuthorizationConnectedTelemetryEventSchema, NativeAuthorizationDeniedTelemetryEventSchema, NativeAuthorizationFailedTelemetryEventSchema, NativeAuthorizationReviewedTelemetryEventSchema, NativeAuthorizationStartedTelemetryEventSchema, NonEmptyTelemetryEventNames, type NormalizedCapxulOperation, OnboardingDashboardReachedTelemetryEventSchema, OnboardingIntentSelectedTelemetryEventSchema, OnboardingOrganizationSubmittedTelemetryEventSchema, OnboardingProfileSubmittedTelemetryEventSchema, OperationRetriedTelemetryEventSchema, OrgCreateFailedTelemetryEventSchema, OrgCreateStartedTelemetryEventSchema, OrgCreatedTelemetryEventSchema, OrgInviteAcceptedTelemetryEventSchema, OrgInviteExpiredTelemetryEventSchema, OrgInviteProgressedTelemetryEventSchema, OrgInviteSentTelemetryEventSchema, OrgRolesSeededTelemetryEventSchema, OrgSafeConfirmedTelemetryEventSchema, OrgSafeCreatedTelemetryEventSchema, OrganizationCreationFailedTelemetryEventSchema, OrganizationCreationReadyTelemetryEventSchema, OrganizationCreationStartedTelemetryEventSchema, PII, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS, PaymentFailedTelemetryEventSchema, PaymentInitiatedTelemetryEventSchema, PaymentLifecycleTransitionTelemetryEventSchema, PaymentSettledTelemetryEventSchema, PaymentVerificationRetryTelemetryEventSchema, PayrollGroupChangedTelemetryEventSchema, PayrollRunTransitionedTelemetryEventSchema, PermissionMirrorVerificationTelemetryEventSchema, PointEventJourney, PostHogBeforeSend, PostHogBrowserCapture, PostHogBrowserInitialize, PostHogBrowserOptions, PostHogBrowserPageviewClient, PostHogProductAppOptions, PostHogTelemetryAdapter, PostHogUtilityAppOptions, ProvisioningSafeConfirmedTelemetryEventSchema, ProvisioningSafeCreatedTelemetryEventSchema, QuickPayExternalAddressAcknowledgedTelemetryEventSchema, ReceiptPendingTelemetryEventSchema, RecordingTelemetryAdapter, ResponseHeadersSchema, SYNCABLE_CAPXUL_ENVS, TELEMETRY_EVENT_NAMES, TELEMETRY_EVENT_SCHEMAS, TELEMETRY_JOURNEYS, TELEMETRY_PRODUCERS, TelemetryEnvelopeDefaults, TelemetryEvent, TelemetryEventName, TelemetryGroupInput, TelemetryIdentifyInput, type TelemetryPort, TelemetryProducer, TelemetryProps, TelemetryRedactionOptions, TrackHandler, UiAccessStepCompletedTelemetryEventSchema, UiActivityActionCompletedTelemetryEventSchema, UiContactActionCompletedTelemetryEventSchema, UiInvoiceStepCompletedTelemetryEventSchema, UiPayrollActionCompletedTelemetryEventSchema, UiReceiveStepCompletedTelemetryEventSchema, UiTreasuryStepCompletedTelemetryEventSchema, createCapxulBeforeSend, createPostHogBrowserPageviewTracker, getTrackHandler, initializeCapxulBrowserAnalytics, initializePostHogBrowserAnalytics, isCapxulOperation, maskCapturedNetworkRequest, normalizeCapxulOperation, productAppAnalytics, redactTelemetryEvent, redactTelemetryProps, sanitizePostHogBrowserEvent, setTrackHandler, stampTelemetryEnvelope, track, utilityAppAnalytics };