@capxul/observability 4.20.0-beta.1 → 4.20.0-beta.11

package/dist/index.d.mts

@@ -227,6 +227,26 @@ declare const CAPXUL_OPERATIONS: {
     readonly createOrg: "createOrg";
     readonly orgs: "orgs";
   };
+  /** AUTH A3 (#2073): the SDK facade over the native continuation endpoints. */
+  readonly clientRequests: {
+    readonly decide: "clientRequests.decide";
+    readonly read: "clientRequests.read";
+  };
+  /** AUTH A2 (#2072): the native client authorization issuer and its browser
+   * continuation. One name per durable transition the endpoints can fail on. */
+  readonly clientAuthorization: {
+    readonly acceptRequest: "clientAuthorization.acceptRequest";
+    readonly cancelRequest: "clientAuthorization.cancelRequest";
+    readonly consumeRequest: "clientAuthorization.consumeRequest";
+    readonly denyRequest: "clientAuthorization.denyRequest";
+    readonly invalidateContext: "clientAuthorization.invalidateContext";
+    readonly markConsented: "clientAuthorization.markConsented";
+    readonly readMetadata: "clientAuthorization.readMetadata";
+    readonly revokeGrant: "clientAuthorization.revokeGrant";
+    readonly rotateGrant: "clientAuthorization.rotateGrant";
+    readonly startRequest: "clientAuthorization.startRequest";
+    readonly sweepExpired: "clientAuthorization.sweepExpired";
+  };
   readonly credentials: {
     readonly bootstrapClient: "credentials.bootstrapClient";
     readonly mintQuickstartKey: "credentials.mintQuickstartKey";
@@ -266,7 +286,6 @@ declare const CAPXUL_OPERATIONS: {
   };
   readonly holdings: {
     readonly current: "holdings.current";
-    readonly primary: "holdings.primary";
   };
   readonly indexer: {
     readonly reconcile: "indexer.reconcile";
@@ -327,10 +346,12 @@ declare const CAPXUL_OPERATIONS: {
     readonly prepareOrganizationPaymentExecution: "moneyExecution.prepareOrganizationPaymentExecution";
     readonly preparePaymentExecution: "moneyExecution.preparePaymentExecution";
     readonly preparePaymentLifecycleExecution: "moneyExecution.preparePaymentLifecycleExecution";
+    readonly prepareInvitationConfiguration: "moneyExecution.prepareInvitationConfiguration";
     readonly preparePermissionExecution: "moneyExecution.preparePermissionExecution";
     readonly recoverSubmissionClaims: "moneyExecution.recoverSubmissionClaims";
     readonly submit: "moneyExecution.submit";
     readonly submitPaymentCommandExecution: "moneyExecution.submitPaymentCommandExecution";
+    readonly submitInvitationConfigurationExecution: "moneyExecution.submitInvitationConfigurationExecution";
     readonly submitPaymentExecution: "moneyExecution.submitPaymentExecution";
     readonly submitPermissionExecution: "moneyExecution.submitPermissionExecution";
   };
@@ -352,22 +373,54 @@ declare const CAPXUL_OPERATIONS: {
     readonly completePerson: "onboarding.completePerson";
   };
   readonly org: {
-    readonly acceptInvitations: "org.acceptInvitations";
     readonly account: {
       readonly get: "org.account.get";
     };
-    readonly activateMember: "org.activateMember";
     readonly auditLog: "org.auditLog";
     readonly confirmBootstrap: "org.confirmBootstrap";
     readonly createOrg: "org.createOrg";
     readonly create: "org.create";
-    readonly detectAndAcceptPendingInvitations: "org.detectAndAcceptPendingInvitations";
+    /**
+     * §11: the consent mutation reports `org_invite_accepted` through its own
+     * scheduled emitter. It is named for the emit, not the acceptance, because
+     * the interactive acceptance itself owns `org.invitations.accept`.
+     */
+    readonly emitInviteAccepted: "org.emitInviteAccepted";
     readonly emitInviteProgressed: "org.emitInviteProgressed";
     readonly expireInvitations: "org.expireInvitations";
     readonly getLifecycle: "org.getLifecycle";
     readonly getProofReceipt: "org.getProofReceipt";
     readonly invite: "org.invite";
-    readonly inviteMember: "org.inviteMember";
+    /** D8 invitation lifecycle: preview, own list, read, and the four transitions. */
+    readonly invitations: {
+      /** The exact grantee's consent commit (§8): one accepted digest, once. */
+      readonly accept: "org.invitations.accept";
+      /**
+       * The authoring write. It is named `authorize`, not `invite`, because the
+       * backend already uses `org.invitations.invite` as a refusal label and
+       * `lint:telemetry-spine` refuses a label that collides with an operation.
+       */
+      readonly authorize: "org.invitations.authorize";
+      readonly cancel: "org.invitations.cancel";
+      readonly decline: "org.invitations.decline";
+      readonly get: "org.invitations.get";
+      readonly list: "org.invitations.list";
+      /**
+       * The Admin-scoped Organization list. It is named `listScoped`, not
+       * `list`, because the own-offer list already owns `org.invitations.list`.
+       */
+      readonly listScoped: "org.invitations.listScoped";
+      /**
+       * The authoring write's inner hops: the SDK drives the backend's existing
+       * prepare/submit pair, and these names label the two Convex calls. The
+       * owning `capxul_sdk_operation` record stays `org.invitations.authorize`.
+       */
+      readonly prepareConfiguration: "org.invitations.prepareConfiguration";
+      readonly preview: "org.invitations.preview";
+      readonly resend: "org.invitations.resend";
+      readonly retry: "org.invitations.retry";
+      readonly submitConfiguration: "org.invitations.submitConfiguration";
+    };
     readonly list: "org.list";
     readonly load: "org.load";
     readonly me: "org.me";
@@ -428,7 +481,6 @@ declare const CAPXUL_OPERATIONS: {
     };
     readonly recordFailure: "org.recordFailure";
     readonly recordProgress: "org.recordProgress";
-    readonly resendInviteToken: "org.resendInviteToken";
     readonly resumeBootstrapSubmission: "org.resumeBootstrapSubmission";
     readonly retry: "org.retry";
     readonly retrySetup: "org.retrySetup";
@@ -449,9 +501,6 @@ declare const CAPXUL_OPERATIONS: {
   readonly organizationSetup: {
     readonly getProofReceipt: "organizationSetup.getProofReceipt";
   };
-  readonly organizations: {
-    readonly detectAndAcceptPendingInvitations: "orgs.detectAndAcceptPendingInvitations";
-  };
   readonly payments: {
     readonly cancel: "payments.cancel";
     readonly claim: "payments.claim";
@@ -468,6 +517,7 @@ declare const CAPXUL_OPERATIONS: {
     readonly submitExecution: "payments.submitExecution";
   };
   readonly paymentDocuments: {
+    readonly get: "paymentDocuments.get";
     readonly render: "paymentDocuments.render";
     readonly verify: "paymentDocuments.verify";
   };
@@ -490,6 +540,7 @@ declare const CAPXUL_OPERATIONS: {
     readonly terms: "payroll.terms";
   };
   readonly permission: {
+    readonly verifyInvitationConfiguration: "permission.verifyInvitationConfiguration";
     readonly command: "permission.command";
     readonly retryVerification: "permission.retryVerification";
     readonly verify: "permission.verify";
@@ -612,7 +663,7 @@ interface TelemetryPort {
 }
 //#endregion
 //#region src/index.d.ts
-declare const TELEMETRY_EVENT_NAMES: readonly ["auth_otp_requested", "auth_otp_delivered", "auth_otp_expired", "auth_verified", "auth_failed", "identity_refused", "auth_signed_out", "onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "provisioning_safe_created", "provisioning_safe_confirmed", "bootstrap_resolved", "bootstrap_failed", "member_activation_started", "member_activation_ready", "member_activation_failed", "organization_creation_started", "organization_creation_ready", "organization_creation_failed", "chain_upstream_fallback", "bundler_error", "receipt_pending", "operation_retried", "account_balance_read", "account_balance_failed", "faucet_requested", "faucet_confirmed", "faucet_failed", "org_create_started", "org_safe_created", "org_safe_confirmed", "org_roles_seeded", "org_created", "org_create_failed", "org_invite_sent", "org_invite_accepted", "org_invite_expired", "payment_initiated", "payment_settled", "payment_failed", "payment_verification_retry", "payment_lifecycle_transition", "quick_pay_external_address_acknowledged", "deposit_initiated", "deposit_settled", "permission_mirror_verification", "movement_scan_window", "movement_scan_checkpoint", "movement_scan_incident", "indexer_drift_corrected", "activity_annotation_saved", "ui_activity_action_completed", "contact_relationship_changed", "ui_contact_action_completed", "access_recovery_completed", "ui_access_step_completed", "org_invite_progressed", "invoice_issued", "invoice_request_transitioned", "ui_invoice_step_completed", "ui_treasury_step_completed", "ui_receive_step_completed", "payroll_group_changed", "payroll_run_transitioned", "ui_payroll_action_completed", "cli_diagnostic_completed"];
+declare const TELEMETRY_EVENT_NAMES: readonly ["auth_otp_requested", "auth_otp_delivered", "auth_otp_expired", "auth_verified", "auth_failed", "identity_refused", "auth_signed_out", "native_authorization_started", "native_authorization_reviewed", "native_authorization_accepted", "native_authorization_denied", "native_authorization_connected", "native_authorization_failed", "onboarding_intent_selected", "onboarding_profile_submitted", "onboarding_organization_submitted", "onboarding_dashboard_reached", "provisioning_safe_created", "provisioning_safe_confirmed", "bootstrap_resolved", "bootstrap_failed", "member_activation_started", "member_activation_ready", "member_activation_failed", "organization_creation_started", "organization_creation_ready", "organization_creation_failed", "chain_upstream_fallback", "bundler_error", "receipt_pending", "operation_retried", "account_balance_read", "account_balance_failed", "faucet_requested", "faucet_confirmed", "faucet_failed", "org_create_started", "org_safe_created", "org_safe_confirmed", "org_roles_seeded", "org_created", "org_create_failed", "org_invite_sent", "org_invite_accepted", "org_invite_expired", "payment_initiated", "payment_settled", "payment_failed", "payment_verification_retry", "payment_lifecycle_transition", "quick_pay_external_address_acknowledged", "deposit_initiated", "deposit_settled", "permission_mirror_verification", "movement_scan_window", "movement_scan_checkpoint", "movement_scan_incident", "indexer_drift_corrected", "activity_annotation_saved", "ui_activity_action_completed", "contact_relationship_changed", "ui_contact_action_completed", "access_recovery_completed", "ui_access_step_completed", "org_invite_progressed", "invoice_issued", "invoice_request_transitioned", "ui_invoice_step_completed", "ui_treasury_step_completed", "ui_receive_step_completed", "payroll_group_changed", "payroll_run_transitioned", "ui_payroll_action_completed", "cli_diagnostic_completed", "cli_first_used", "cli_command_started", "cli_command_completed"];
 type TelemetryEventName = (typeof TELEMETRY_EVENT_NAMES)[number];
 type NonEmptyTelemetryEventNames = readonly [TelemetryEventName, ...TelemetryEventName[]];
 type FunnelStepPropertyFilter = {
@@ -959,6 +1010,81 @@ declare const AuthSignedOutTelemetryEventSchema: Schema.Struct<{
     sdk_version: Schema.optional<Schema.String>;
   }>;
 }>;
+declare const NativeAuthorizationStartedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"native_authorization_started">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly mode: Schema.Literals<readonly ["login", "signup"]>;
+  }>;
+}>;
+declare const NativeAuthorizationReviewedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"native_authorization_reviewed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly mode: Schema.Literals<readonly ["login", "signup"]>;
+  }>;
+}>;
+declare const NativeAuthorizationAcceptedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"native_authorization_accepted">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly mode: Schema.Literals<readonly ["login", "signup"]>;
+    /** Whether consent also had to finish account setup first. */
+    readonly setup_state: Schema.optional<Schema.Literals<readonly ["not_required", "new", "resumable"]>>;
+  }>;
+}>;
+declare const NativeAuthorizationDeniedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"native_authorization_denied">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly mode: Schema.Literals<readonly ["login", "signup"]>;
+  }>;
+}>;
+declare const NativeAuthorizationConnectedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"native_authorization_connected">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly mode: Schema.Literals<readonly ["login", "signup"]>;
+  }>;
+}>;
+declare const NativeAuthorizationFailedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"native_authorization_failed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly sdk_version: Schema.optional<Schema.String>;
+    readonly mode: Schema.optional<Schema.Literals<readonly ["login", "signup"]>>;
+    /** The refusal word the store returned, for example `identity_mismatch` or
+     * `request_expired`. These are the closed `CLIENT_AUTHORIZATION_REFUSALS` from
+     * `@capxul/wire` plus the store-internal `fresh_session_required` (ruling R3),
+     * which the continuation maps to `identity_mismatch` on the wire but reports
+     * truthfully here. Kept as `OptionalString` rather than an imported literal
+     * set: this package must not depend on the transport contract. */
+    readonly reason: Schema.optional<Schema.String>;
+  }>;
+}>;
 declare const OnboardingIntentSelectedTelemetryEventSchema: Schema.Struct<{
   readonly name: Schema.Literal<"onboarding_intent_selected">;
   readonly props: Schema.Struct<{
@@ -1166,6 +1292,7 @@ declare const OrganizationCreationStartedTelemetryEventSchema: Schema.Struct<{
     readonly $insert_id: Schema.String;
     readonly organization_id: Schema.Codec<string, string, never, never>;
     readonly attempt_number: Schema.refine<number, Schema.Number>;
+    readonly release: Schema.optional<Schema.String>;
   }>;
 }>;
 declare const OrganizationCreationReadyTelemetryEventSchema: Schema.Struct<{
@@ -1180,6 +1307,7 @@ declare const OrganizationCreationReadyTelemetryEventSchema: Schema.Struct<{
     readonly organization_id: Schema.Codec<string, string, never, never>;
     readonly attempt_number: Schema.refine<number, Schema.Number>;
     readonly duration_ms: Schema.Codec<DurationMs, number, never, never>;
+    readonly release: Schema.optional<Schema.String>;
   }>;
 }>;
 declare const OrganizationCreationFailedTelemetryEventSchema: Schema.Struct<{
@@ -1223,9 +1351,10 @@ declare const OrganizationCreationFailedTelemetryEventSchema: Schema.Struct<{
     readonly stage: Schema.Literals<readonly ["profile", "accountProvisioning", "accountClaim", "preparingFounderAccount", "awaitingFounderAuthorization", "submittingBootstrap", "confirmingBootstrap"]>;
     readonly error_code: Schema.String;
     readonly retryable: Schema.Boolean;
+    readonly release: Schema.optional<Schema.String>;
     /** #1655: the SDK's backoff before this attempt. Absent on the first attempt. */
     readonly backoff_ms: Schema.optional<Schema.Codec<DurationMs, number, never, never>>;
-    readonly failure_reason: Schema.optional<Schema.Literals<readonly ["deterministic_address_mismatch", "receipt_provider_unavailable", "receipt_mismatch", "block_provider_unavailable", "authority_event_mismatch", "allowance_timestamp_mismatch", "receipt_identity_unavailable", "receipt_identity_mismatch", "contract_code_unavailable", "contract_state_mismatch", "permission_projection_mismatch"]>>;
+    readonly failure_reason: Schema.optional<Schema.Literals<readonly ["receipt_provider_unavailable", "block_provider_unavailable", "submission_unknown", "receipt_unresolved", "provider_unavailable", "receipt_reverted", "deterministic_address_mismatch", "receipt_mismatch", "block_identity_changed", "authority_event_mismatch", "allowance_timestamp_mismatch", "receipt_identity_unavailable", "receipt_identity_mismatch", "contract_code_unavailable", "contract_state_mismatch", "permission_projection_mismatch", "bootstrap_reorg", "dependent_authority_unresolved", "historical_evidence_missing", "worker_failed"]>>;
   }>;
 }>;
 declare const AccountBalanceReadTelemetryEventSchema: Schema.Struct<{
@@ -1240,6 +1369,7 @@ declare const AccountBalanceReadTelemetryEventSchema: Schema.Struct<{
     readonly account_kind: Schema.optional<Schema.Literals<readonly ["personalSafe", "orgTreasury"]>>;
     readonly chain_id: Schema.optional<Schema.Codec<ChainId, number, never, never>>;
     readonly token_address: Schema.optional<Schema.Codec<Address, string, never, never>>;
+    readonly asset_id: Schema.optional<Schema.String>;
     readonly currency: Schema.optional<Schema.Codec<CurrencyCode, string, never, never>>;
     readonly balance_bucket: Schema.optional<Schema.Literals<readonly ["zero", "nonzero"]>>;
     readonly durationMs: Schema.optional<Schema.Codec<DurationMs, number, never, never>>;
@@ -1293,6 +1423,7 @@ declare const FaucetRequestedTelemetryEventSchema: Schema.Struct<{
     readonly sdk_version: Schema.optional<Schema.String>;
     readonly amount: Schema.optional<Schema.Codec<WeiAmount, string, never, never>>;
     readonly chainId: Schema.optional<Schema.Codec<ChainId, number, never, never>>;
+    readonly asset_id: Schema.optional<Schema.String>;
   }>;
 }>;
 declare const FaucetConfirmedTelemetryEventSchema: Schema.Struct<{
@@ -1306,6 +1437,8 @@ declare const FaucetConfirmedTelemetryEventSchema: Schema.Struct<{
     readonly amount: Schema.optional<Schema.Codec<WeiAmount, string, never, never>>;
     readonly chainId: Schema.optional<Schema.Codec<ChainId, number, never, never>>;
     readonly txHash: Schema.optional<Schema.Codec<TxHash, string, never, never>>;
+    readonly asset_id: Schema.optional<Schema.String>;
+    readonly token_address: Schema.optional<Schema.Codec<Address, string, never, never>>;
     readonly durationMs: Schema.optional<Schema.Codec<DurationMs, number, never, never>>;
   }>;
 }>;
@@ -1345,6 +1478,10 @@ declare const FaucetFailedTelemetryEventSchema: Schema.Struct<{
       readonly server: Schema.optional<Schema.String>;
     }>>;
     readonly reason: Schema.optional<Schema.String>;
+    readonly amount: Schema.optional<Schema.Codec<WeiAmount, string, never, never>>;
+    readonly chainId: Schema.optional<Schema.Codec<ChainId, number, never, never>>;
+    readonly asset_id: Schema.optional<Schema.String>;
+    readonly token_address: Schema.optional<Schema.Codec<Address, string, never, never>>;
   }>;
 }>;
 declare const ChainUpstreamFallbackTelemetryEventSchema: Schema.Struct<{
@@ -1540,6 +1677,11 @@ declare const OrgInviteSentTelemetryEventSchema: Schema.Struct<{
     readonly correlation_id: Schema.optional<Schema.String>;
     readonly sdk_version: Schema.optional<Schema.String>;
     readonly org_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    readonly invitation_id: Schema.optional<Schema.String>;
+    readonly generation: Schema.optional<Schema.String>;
+    readonly command_id: Schema.optional<Schema.String>;
+    readonly subject_party_id: Schema.optional<Schema.String>;
+    readonly persisted_at: Schema.optional<Schema.Codec<EpochMs, number, never, never>>;
     readonly email_domain: Schema.optional<Schema.String>;
     readonly role: Schema.optional<Schema.String>;
     readonly status: Schema.optional<Schema.String>;
@@ -1554,6 +1696,11 @@ declare const OrgInviteAcceptedTelemetryEventSchema: Schema.Struct<{
     readonly correlation_id: Schema.optional<Schema.String>;
     readonly sdk_version: Schema.optional<Schema.String>;
     readonly org_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    readonly invitation_id: Schema.optional<Schema.String>;
+    readonly accepted_at: Schema.optional<Schema.Codec<EpochMs, number, never, never>>;
+    readonly generation: Schema.optional<Schema.String>;
+    readonly command_id: Schema.optional<Schema.String>;
+    readonly subject_party_id: Schema.optional<Schema.String>;
     readonly role: Schema.optional<Schema.String>;
     readonly status: Schema.optional<Schema.String>;
   }>;
@@ -1568,6 +1715,7 @@ declare const OrgInviteExpiredTelemetryEventSchema: Schema.Struct<{
     readonly sdk_version: Schema.optional<Schema.String>;
     readonly org_id: Schema.optional<Schema.Codec<string, string, never, never>>;
     readonly email_domain: Schema.optional<Schema.String>;
+    readonly invitation_id: Schema.optional<Schema.String>;
     readonly reason: Schema.optional<Schema.String>;
     readonly role: Schema.optional<Schema.String>;
     readonly status: Schema.optional<Schema.String>;
@@ -1823,8 +1971,13 @@ declare const PermissionMirrorVerificationTelemetryEventSchema: Schema.Struct<{
      * actually returned, and which command it was, without either fact rewriting
      * the receipt outcome above. Absent when application has not happened yet.
      */
-    readonly application_result: Schema.optional<Schema.Literals<readonly ["applied", "replayed", "conflicting_replay", "revision_mismatch"]>>;
+    readonly application_result: Schema.optional<Schema.Literals<readonly ["applied", "replayed", "conflicting_replay", "revision_mismatch", "cleanup_required", "not_applied", "application_failure", "mismatch", "refused"]>>;
+    readonly command_kind: Schema.optional<Schema.Literals<readonly ["invitation_configuration", "invitation_eoa"]>>;
     readonly command_id: Schema.optional<Schema.String>;
+    readonly invitation_id: Schema.optional<Schema.String>;
+    readonly generation: Schema.optional<Schema.String>;
+    readonly purpose: Schema.optional<Schema.Literals<readonly ["configure", "grant", "disable", "compensate"]>>;
+    readonly $insert_id: Schema.optional<Schema.String>;
     /**
      * #1961 R03. The authorized stored row names the Permission it changed; the
      * verified receipt names the chain facts that prove it. Every field is
@@ -1924,6 +2077,99 @@ declare const ContactRelationshipChangedTelemetryEventSchema: Schema.Struct<{
   }>;
 }>;
 /** One completed online CLI diagnostic. No command input or provider text. */
+declare const CLI_COMMAND_NAMES: readonly ["capxul", "doctor", "telemetry", "telemetry.status", "telemetry.enable", "telemetry.disable", "auth", "auth.login", "auth.signup", "auth.send", "auth.verify", "auth.profile", "auth.status", "auth.logout", "contact", "contact.list", "contact.get", "contact.add", "contact.label", "contact.hide", "contact.unhide", "org", "org.list", "org.use", "org.status", "org.me", "org.members", "org.member", "org.member.get", "org.member.invite", "org.contact", "org.contact.list", "org.contact.get", "org.contact.add", "org.contact.label", "org.contact.hide", "org.contact.unhide", "org.invite", "org.invite.list", "org.invite.get", "org.invite.wait", "org.invite.review", "org.invite.accept", "org.invite.decline", "org.invite.cancel", "org.invite.resend", "org.invite.retry", "org.wait", "org.create", "org.retry", "unknown"];
+declare const CLI_CAPABILITIES: readonly ["cli", "diagnostics", "collection", "authentication", "organization", "contacts"];
+declare const CLI_INVOCATION_KINDS: readonly ["command", "help", "version", "completion", "parse_refusal", "collection_control"];
+type CliCommandName = (typeof CLI_COMMAND_NAMES)[number];
+type CliCapability = (typeof CLI_CAPABILITIES)[number];
+type CliInvocationKind = (typeof CLI_INVOCATION_KINDS)[number];
+declare const CliFirstUsedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"cli_first_used">;
+  readonly props: Schema.Struct<{
+    capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    journey_id: Schema.optional<Schema.String>;
+    correlation_id: Schema.optional<Schema.String>;
+    schema_version: Schema.Literal<1>;
+    command: Schema.Literals<readonly ["capxul", "doctor", "telemetry", "telemetry.status", "telemetry.enable", "telemetry.disable", "auth", "auth.login", "auth.signup", "auth.send", "auth.verify", "auth.profile", "auth.status", "auth.logout", "contact", "contact.list", "contact.get", "contact.add", "contact.label", "contact.hide", "contact.unhide", "org", "org.list", "org.use", "org.status", "org.me", "org.members", "org.member", "org.member.get", "org.member.invite", "org.contact", "org.contact.list", "org.contact.get", "org.contact.add", "org.contact.label", "org.contact.hide", "org.contact.unhide", "org.invite", "org.invite.list", "org.invite.get", "org.invite.wait", "org.invite.review", "org.invite.accept", "org.invite.decline", "org.invite.cancel", "org.invite.resend", "org.invite.retry", "org.wait", "org.create", "org.retry", "unknown"]>;
+    capability: Schema.Literals<readonly ["cli", "diagnostics", "collection", "authentication", "organization", "contacts"]>;
+    invocation_kind: Schema.Literals<readonly ["command", "help", "version", "completion", "parse_refusal", "collection_control"]>;
+    invocation_id: Schema.String;
+    cli_identity_kind: Schema.optional<Schema.Literals<readonly ["anonymous", "identified"]>>;
+    anonymous_id: Schema.optional<Schema.String>;
+    auth_user_id: Schema.optional<Schema.String>;
+    occurred_at: Schema.Number;
+    cli_version: Schema.String;
+    sdk_version: Schema.String;
+    release: Schema.String;
+    platform: Schema.Literals<readonly ["darwin", "linux", "unknown"]>;
+    architecture: Schema.Literals<readonly ["arm64", "x64", "unknown"]>;
+    ci: Schema.Boolean;
+    tty: Schema.Boolean;
+    output_mode: Schema.Literals<readonly ["human", "json"]>;
+  }>;
+}>;
+declare const CliCommandStartedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"cli_command_started">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly schema_version: Schema.Literal<1>;
+    readonly command: Schema.Literals<readonly ["capxul", "doctor", "telemetry", "telemetry.status", "telemetry.enable", "telemetry.disable", "auth", "auth.login", "auth.signup", "auth.send", "auth.verify", "auth.profile", "auth.status", "auth.logout", "contact", "contact.list", "contact.get", "contact.add", "contact.label", "contact.hide", "contact.unhide", "org", "org.list", "org.use", "org.status", "org.me", "org.members", "org.member", "org.member.get", "org.member.invite", "org.contact", "org.contact.list", "org.contact.get", "org.contact.add", "org.contact.label", "org.contact.hide", "org.contact.unhide", "org.invite", "org.invite.list", "org.invite.get", "org.invite.wait", "org.invite.review", "org.invite.accept", "org.invite.decline", "org.invite.cancel", "org.invite.resend", "org.invite.retry", "org.wait", "org.create", "org.retry", "unknown"]>;
+    readonly capability: Schema.Literals<readonly ["cli", "diagnostics", "collection", "authentication", "organization", "contacts"]>;
+    readonly invocation_id: Schema.String;
+    readonly cli_identity_kind: Schema.optional<Schema.Literals<readonly ["anonymous", "identified"]>>;
+    readonly anonymous_id: Schema.optional<Schema.String>;
+    readonly auth_user_id: Schema.optional<Schema.String>;
+    readonly occurred_at: Schema.Number;
+    readonly cli_version: Schema.String;
+    readonly sdk_version: Schema.String;
+    readonly release: Schema.String;
+    readonly platform: Schema.Literals<readonly ["darwin", "linux", "unknown"]>;
+    readonly architecture: Schema.Literals<readonly ["arm64", "x64", "unknown"]>;
+    readonly ci: Schema.Boolean;
+    readonly tty: Schema.Boolean;
+    readonly output_mode: Schema.Literals<readonly ["human", "json"]>;
+    readonly invocation_kind: Schema.Literals<readonly ["command", "help", "version"]>;
+  }>;
+}>;
+declare const CliCommandCompletedTelemetryEventSchema: Schema.Struct<{
+  readonly name: Schema.Literal<"cli_command_completed">;
+  readonly props: Schema.Struct<{
+    readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+    readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+    readonly journey_id: Schema.optional<Schema.String>;
+    readonly correlation_id: Schema.optional<Schema.String>;
+    readonly schema_version: Schema.Literal<1>;
+    readonly command: Schema.Literals<readonly ["capxul", "doctor", "telemetry", "telemetry.status", "telemetry.enable", "telemetry.disable", "auth", "auth.login", "auth.signup", "auth.send", "auth.verify", "auth.profile", "auth.status", "auth.logout", "contact", "contact.list", "contact.get", "contact.add", "contact.label", "contact.hide", "contact.unhide", "org", "org.list", "org.use", "org.status", "org.me", "org.members", "org.member", "org.member.get", "org.member.invite", "org.contact", "org.contact.list", "org.contact.get", "org.contact.add", "org.contact.label", "org.contact.hide", "org.contact.unhide", "org.invite", "org.invite.list", "org.invite.get", "org.invite.wait", "org.invite.review", "org.invite.accept", "org.invite.decline", "org.invite.cancel", "org.invite.resend", "org.invite.retry", "org.wait", "org.create", "org.retry", "unknown"]>;
+    readonly capability: Schema.Literals<readonly ["cli", "diagnostics", "collection", "authentication", "organization", "contacts"]>;
+    readonly invocation_kind: Schema.Literals<readonly ["command", "help", "version", "completion", "parse_refusal", "collection_control"]>;
+    readonly invocation_id: Schema.String;
+    readonly cli_identity_kind: Schema.optional<Schema.Literals<readonly ["anonymous", "identified"]>>;
+    readonly anonymous_id: Schema.optional<Schema.String>;
+    readonly auth_user_id: Schema.optional<Schema.String>;
+    readonly occurred_at: Schema.Number;
+    readonly cli_version: Schema.String;
+    readonly sdk_version: Schema.String;
+    readonly release: Schema.String;
+    readonly platform: Schema.Literals<readonly ["darwin", "linux", "unknown"]>;
+    readonly architecture: Schema.Literals<readonly ["arm64", "x64", "unknown"]>;
+    readonly ci: Schema.Boolean;
+    readonly tty: Schema.Boolean;
+    readonly output_mode: Schema.Literals<readonly ["human", "json"]>;
+    readonly outcome: Schema.Literals<readonly ["succeeded", "refused", "failed", "cancelled"]>;
+    readonly duration_ms: Schema.Number;
+    readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+    readonly setup_status: Schema.optional<Schema.Literals<readonly ["awaitingAuthorization", "processing", "needsAttention", "ready", "rechecking", "failed"]>>;
+    readonly setup_reason: Schema.optional<Schema.Literals<readonly ["submission_unknown", "receipt_unresolved", "provider_unavailable", "receipt_reverted", "deterministic_address_mismatch", "receipt_mismatch", "block_identity_changed", "authority_event_mismatch", "allowance_timestamp_mismatch", "receipt_identity_unavailable", "receipt_identity_mismatch", "contract_code_unavailable", "contract_state_mismatch", "permission_projection_mismatch", "bootstrap_reorg", "dependent_authority_unresolved", "historical_evidence_missing", "worker_failed"]>>;
+    readonly $groups: Schema.optional<Schema.Struct<{
+      readonly organization: Schema.Codec<string, string, never, never>;
+    }>>;
+    readonly error_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED", "CLI_USAGE", "CLI_CONFIG", "CLI_STORAGE", "CLI_DEFECT", "CLI_DEADLINE"]>>;
+  }>;
+}>;
 declare const CliDiagnosticCompletedTelemetryEventSchema: Schema.Struct<{
   readonly name: Schema.Literal<"cli_diagnostic_completed">;
   readonly props: Schema.Struct<{
@@ -2149,9 +2395,12 @@ declare const OrgInviteProgressedTelemetryEventSchema: Schema.Struct<{
     readonly correlation_id: Schema.optional<Schema.String>;
     readonly sdk_version: Schema.optional<Schema.String>;
     readonly organization_id: Schema.Codec<string, string, never, never>;
-    readonly progress: Schema.Literals<readonly ["account_ready", "permission_applied", "membership_activated", "revoked"]>;
+    readonly progress: Schema.Literals<readonly ["configuration_authorized", "account_ready", "permission_applied", "membership_activated", "revoked"]>;
     /** The invited Party. The initiating actor stays on the envelope's identity. */
     readonly member_party_id: Schema.String;
+    readonly invitation_id: Schema.optional<Schema.String>;
+    readonly generation: Schema.optional<Schema.String>;
+    readonly command_id: Schema.optional<Schema.String>;
     readonly occurred_at: Schema.Number;
   }>;
 }>;
@@ -2350,9 +2599,12 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly correlation_id: Schema.optional<Schema.String>;
       readonly sdk_version: Schema.optional<Schema.String>;
       readonly organization_id: Schema.Codec<string, string, never, never>;
-      readonly progress: Schema.Literals<readonly ["account_ready", "permission_applied", "membership_activated", "revoked"]>;
+      readonly progress: Schema.Literals<readonly ["configuration_authorized", "account_ready", "permission_applied", "membership_activated", "revoked"]>;
       /** The invited Party. The initiating actor stays on the envelope's identity. */
       readonly member_party_id: Schema.String;
+      readonly invitation_id: Schema.optional<Schema.String>;
+      readonly generation: Schema.optional<Schema.String>;
+      readonly command_id: Schema.optional<Schema.String>;
       readonly occurred_at: Schema.Number;
     }>;
   }>;
@@ -2532,6 +2784,93 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly cli_version: Schema.String;
     }>;
   }>;
+  readonly cli_first_used: Schema.Struct<{
+    readonly name: Schema.Literal<"cli_first_used">;
+    readonly props: Schema.Struct<{
+      capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      journey_id: Schema.optional<Schema.String>;
+      correlation_id: Schema.optional<Schema.String>;
+      schema_version: Schema.Literal<1>;
+      command: Schema.Literals<readonly ["capxul", "doctor", "telemetry", "telemetry.status", "telemetry.enable", "telemetry.disable", "auth", "auth.login", "auth.signup", "auth.send", "auth.verify", "auth.profile", "auth.status", "auth.logout", "contact", "contact.list", "contact.get", "contact.add", "contact.label", "contact.hide", "contact.unhide", "org", "org.list", "org.use", "org.status", "org.me", "org.members", "org.member", "org.member.get", "org.member.invite", "org.contact", "org.contact.list", "org.contact.get", "org.contact.add", "org.contact.label", "org.contact.hide", "org.contact.unhide", "org.invite", "org.invite.list", "org.invite.get", "org.invite.wait", "org.invite.review", "org.invite.accept", "org.invite.decline", "org.invite.cancel", "org.invite.resend", "org.invite.retry", "org.wait", "org.create", "org.retry", "unknown"]>;
+      capability: Schema.Literals<readonly ["cli", "diagnostics", "collection", "authentication", "organization", "contacts"]>;
+      invocation_kind: Schema.Literals<readonly ["command", "help", "version", "completion", "parse_refusal", "collection_control"]>;
+      invocation_id: Schema.String;
+      cli_identity_kind: Schema.optional<Schema.Literals<readonly ["anonymous", "identified"]>>;
+      anonymous_id: Schema.optional<Schema.String>;
+      auth_user_id: Schema.optional<Schema.String>;
+      occurred_at: Schema.Number;
+      cli_version: Schema.String;
+      sdk_version: Schema.String;
+      release: Schema.String;
+      platform: Schema.Literals<readonly ["darwin", "linux", "unknown"]>;
+      architecture: Schema.Literals<readonly ["arm64", "x64", "unknown"]>;
+      ci: Schema.Boolean;
+      tty: Schema.Boolean;
+      output_mode: Schema.Literals<readonly ["human", "json"]>;
+    }>;
+  }>;
+  readonly cli_command_started: Schema.Struct<{
+    readonly name: Schema.Literal<"cli_command_started">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly schema_version: Schema.Literal<1>;
+      readonly command: Schema.Literals<readonly ["capxul", "doctor", "telemetry", "telemetry.status", "telemetry.enable", "telemetry.disable", "auth", "auth.login", "auth.signup", "auth.send", "auth.verify", "auth.profile", "auth.status", "auth.logout", "contact", "contact.list", "contact.get", "contact.add", "contact.label", "contact.hide", "contact.unhide", "org", "org.list", "org.use", "org.status", "org.me", "org.members", "org.member", "org.member.get", "org.member.invite", "org.contact", "org.contact.list", "org.contact.get", "org.contact.add", "org.contact.label", "org.contact.hide", "org.contact.unhide", "org.invite", "org.invite.list", "org.invite.get", "org.invite.wait", "org.invite.review", "org.invite.accept", "org.invite.decline", "org.invite.cancel", "org.invite.resend", "org.invite.retry", "org.wait", "org.create", "org.retry", "unknown"]>;
+      readonly capability: Schema.Literals<readonly ["cli", "diagnostics", "collection", "authentication", "organization", "contacts"]>;
+      readonly invocation_id: Schema.String;
+      readonly cli_identity_kind: Schema.optional<Schema.Literals<readonly ["anonymous", "identified"]>>;
+      readonly anonymous_id: Schema.optional<Schema.String>;
+      readonly auth_user_id: Schema.optional<Schema.String>;
+      readonly occurred_at: Schema.Number;
+      readonly cli_version: Schema.String;
+      readonly sdk_version: Schema.String;
+      readonly release: Schema.String;
+      readonly platform: Schema.Literals<readonly ["darwin", "linux", "unknown"]>;
+      readonly architecture: Schema.Literals<readonly ["arm64", "x64", "unknown"]>;
+      readonly ci: Schema.Boolean;
+      readonly tty: Schema.Boolean;
+      readonly output_mode: Schema.Literals<readonly ["human", "json"]>;
+      readonly invocation_kind: Schema.Literals<readonly ["command", "help", "version"]>;
+    }>;
+  }>;
+  readonly cli_command_completed: Schema.Struct<{
+    readonly name: Schema.Literal<"cli_command_completed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly schema_version: Schema.Literal<1>;
+      readonly command: Schema.Literals<readonly ["capxul", "doctor", "telemetry", "telemetry.status", "telemetry.enable", "telemetry.disable", "auth", "auth.login", "auth.signup", "auth.send", "auth.verify", "auth.profile", "auth.status", "auth.logout", "contact", "contact.list", "contact.get", "contact.add", "contact.label", "contact.hide", "contact.unhide", "org", "org.list", "org.use", "org.status", "org.me", "org.members", "org.member", "org.member.get", "org.member.invite", "org.contact", "org.contact.list", "org.contact.get", "org.contact.add", "org.contact.label", "org.contact.hide", "org.contact.unhide", "org.invite", "org.invite.list", "org.invite.get", "org.invite.wait", "org.invite.review", "org.invite.accept", "org.invite.decline", "org.invite.cancel", "org.invite.resend", "org.invite.retry", "org.wait", "org.create", "org.retry", "unknown"]>;
+      readonly capability: Schema.Literals<readonly ["cli", "diagnostics", "collection", "authentication", "organization", "contacts"]>;
+      readonly invocation_kind: Schema.Literals<readonly ["command", "help", "version", "completion", "parse_refusal", "collection_control"]>;
+      readonly invocation_id: Schema.String;
+      readonly cli_identity_kind: Schema.optional<Schema.Literals<readonly ["anonymous", "identified"]>>;
+      readonly anonymous_id: Schema.optional<Schema.String>;
+      readonly auth_user_id: Schema.optional<Schema.String>;
+      readonly occurred_at: Schema.Number;
+      readonly cli_version: Schema.String;
+      readonly sdk_version: Schema.String;
+      readonly release: Schema.String;
+      readonly platform: Schema.Literals<readonly ["darwin", "linux", "unknown"]>;
+      readonly architecture: Schema.Literals<readonly ["arm64", "x64", "unknown"]>;
+      readonly ci: Schema.Boolean;
+      readonly tty: Schema.Boolean;
+      readonly output_mode: Schema.Literals<readonly ["human", "json"]>;
+      readonly outcome: Schema.Literals<readonly ["succeeded", "refused", "failed", "cancelled"]>;
+      readonly duration_ms: Schema.Number;
+      readonly organization_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+      readonly setup_status: Schema.optional<Schema.Literals<readonly ["awaitingAuthorization", "processing", "needsAttention", "ready", "rechecking", "failed"]>>;
+      readonly setup_reason: Schema.optional<Schema.Literals<readonly ["submission_unknown", "receipt_unresolved", "provider_unavailable", "receipt_reverted", "deterministic_address_mismatch", "receipt_mismatch", "block_identity_changed", "authority_event_mismatch", "allowance_timestamp_mismatch", "receipt_identity_unavailable", "receipt_identity_mismatch", "contract_code_unavailable", "contract_state_mismatch", "permission_projection_mismatch", "bootstrap_reorg", "dependent_authority_unresolved", "historical_evidence_missing", "worker_failed"]>>;
+      readonly $groups: Schema.optional<Schema.Struct<{
+        readonly organization: Schema.Codec<string, string, never, never>;
+      }>>;
+      readonly error_code: Schema.optional<Schema.Literals<readonly ["NOT_AUTHENTICATED", "EMAIL_DELIVERY_FAILED", "PROFILE_NOT_FOUND", "SMART_ACCOUNT_MISSING", "PLAYER_NOT_FOUND", "ACCOUNT_NOT_FOUND", "ACCOUNT_CLAIMED_BY_OTHER_SIGNER", "PROVIDER_ERROR", "CAPABILITY_UNAVAILABLE", "INVALID_INPUT", "ENV_MISSING", "NOT_IMPLEMENTED", "VERIFICATION_REQUIRED", "INSUFFICIENT_BALANCE", "INVALID_RECIPIENT", "ROLE_PERMISSION_DENIED", "TRANSACTION_FAILED", "RATE_LIMITED", "NETWORK_ERROR", "UNKNOWN", "OTP_EXPIRED", "SIGNER_REJECTED", "CANCELLED", "WRONG_STATE", "STALE_EPOCH", "SUPERSEDED", "WORK_DIED", "ACTOR_STOPPED", "CLI_USAGE", "CLI_CONFIG", "CLI_STORAGE", "CLI_DEFECT", "CLI_DEADLINE"]>>;
+    }>;
+  }>;
   readonly activity_annotation_saved: Schema.Struct<{
     readonly name: Schema.Literal<"activity_annotation_saved">;
     readonly props: Schema.Struct<{
@@ -2751,6 +3090,81 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       sdk_version: Schema.optional<Schema.String>;
     }>;
   }>;
+  readonly native_authorization_started: Schema.Struct<{
+    readonly name: Schema.Literal<"native_authorization_started">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly mode: Schema.Literals<readonly ["login", "signup"]>;
+    }>;
+  }>;
+  readonly native_authorization_reviewed: Schema.Struct<{
+    readonly name: Schema.Literal<"native_authorization_reviewed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly mode: Schema.Literals<readonly ["login", "signup"]>;
+    }>;
+  }>;
+  readonly native_authorization_accepted: Schema.Struct<{
+    readonly name: Schema.Literal<"native_authorization_accepted">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly mode: Schema.Literals<readonly ["login", "signup"]>;
+      /** Whether consent also had to finish account setup first. */
+      readonly setup_state: Schema.optional<Schema.Literals<readonly ["not_required", "new", "resumable"]>>;
+    }>;
+  }>;
+  readonly native_authorization_denied: Schema.Struct<{
+    readonly name: Schema.Literal<"native_authorization_denied">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly mode: Schema.Literals<readonly ["login", "signup"]>;
+    }>;
+  }>;
+  readonly native_authorization_connected: Schema.Struct<{
+    readonly name: Schema.Literal<"native_authorization_connected">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly mode: Schema.Literals<readonly ["login", "signup"]>;
+    }>;
+  }>;
+  readonly native_authorization_failed: Schema.Struct<{
+    readonly name: Schema.Literal<"native_authorization_failed">;
+    readonly props: Schema.Struct<{
+      readonly capxul_env: Schema.Literals<readonly ["development", "staging", "production", "unknown", "local"]>;
+      readonly producer: Schema.Literals<readonly ["server", "browser", "sdk", "mcp", "e2e"]>;
+      readonly journey_id: Schema.optional<Schema.String>;
+      readonly correlation_id: Schema.optional<Schema.String>;
+      readonly sdk_version: Schema.optional<Schema.String>;
+      readonly mode: Schema.optional<Schema.Literals<readonly ["login", "signup"]>>;
+      /** The refusal word the store returned, for example `identity_mismatch` or
+       * `request_expired`. These are the closed `CLIENT_AUTHORIZATION_REFUSALS` from
+       * `@capxul/wire` plus the store-internal `fresh_session_required` (ruling R3),
+       * which the continuation maps to `identity_mismatch` on the wire but reports
+       * truthfully here. Kept as `OptionalString` rather than an imported literal
+       * set: this package must not depend on the transport contract. */
+      readonly reason: Schema.optional<Schema.String>;
+    }>;
+  }>;
   readonly onboarding_intent_selected: Schema.Struct<{
     readonly name: Schema.Literal<"onboarding_intent_selected">;
     readonly props: Schema.Struct<{
@@ -2958,6 +3372,7 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly $insert_id: Schema.String;
       readonly organization_id: Schema.Codec<string, string, never, never>;
       readonly attempt_number: Schema.refine<number, Schema.Number>;
+      readonly release: Schema.optional<Schema.String>;
     }>;
   }>;
   readonly organization_creation_ready: Schema.Struct<{
@@ -2972,6 +3387,7 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly organization_id: Schema.Codec<string, string, never, never>;
       readonly attempt_number: Schema.refine<number, Schema.Number>;
       readonly duration_ms: Schema.Codec<DurationMs, number, never, never>;
+      readonly release: Schema.optional<Schema.String>;
     }>;
   }>;
   readonly organization_creation_failed: Schema.Struct<{
@@ -3015,9 +3431,10 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly stage: Schema.Literals<readonly ["profile", "accountProvisioning", "accountClaim", "preparingFounderAccount", "awaitingFounderAuthorization", "submittingBootstrap", "confirmingBootstrap"]>;
       readonly error_code: Schema.String;
       readonly retryable: Schema.Boolean;
+      readonly release: Schema.optional<Schema.String>;
       /** #1655: the SDK's backoff before this attempt. Absent on the first attempt. */
       readonly backoff_ms: Schema.optional<Schema.Codec<DurationMs, number, never, never>>;
-      readonly failure_reason: Schema.optional<Schema.Literals<readonly ["deterministic_address_mismatch", "receipt_provider_unavailable", "receipt_mismatch", "block_provider_unavailable", "authority_event_mismatch", "allowance_timestamp_mismatch", "receipt_identity_unavailable", "receipt_identity_mismatch", "contract_code_unavailable", "contract_state_mismatch", "permission_projection_mismatch"]>>;
+      readonly failure_reason: Schema.optional<Schema.Literals<readonly ["receipt_provider_unavailable", "block_provider_unavailable", "submission_unknown", "receipt_unresolved", "provider_unavailable", "receipt_reverted", "deterministic_address_mismatch", "receipt_mismatch", "block_identity_changed", "authority_event_mismatch", "allowance_timestamp_mismatch", "receipt_identity_unavailable", "receipt_identity_mismatch", "contract_code_unavailable", "contract_state_mismatch", "permission_projection_mismatch", "bootstrap_reorg", "dependent_authority_unresolved", "historical_evidence_missing", "worker_failed"]>>;
     }>;
   }>;
   readonly account_balance_read: Schema.Struct<{
@@ -3032,6 +3449,7 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly account_kind: Schema.optional<Schema.Literals<readonly ["personalSafe", "orgTreasury"]>>;
       readonly chain_id: Schema.optional<Schema.Codec<ChainId, number, never, never>>;
       readonly token_address: Schema.optional<Schema.Codec<Address, string, never, never>>;
+      readonly asset_id: Schema.optional<Schema.String>;
       readonly currency: Schema.optional<Schema.Codec<CurrencyCode, string, never, never>>;
       readonly balance_bucket: Schema.optional<Schema.Literals<readonly ["zero", "nonzero"]>>;
       readonly durationMs: Schema.optional<Schema.Codec<DurationMs, number, never, never>>;
@@ -3085,6 +3503,7 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly sdk_version: Schema.optional<Schema.String>;
       readonly amount: Schema.optional<Schema.Codec<WeiAmount, string, never, never>>;
       readonly chainId: Schema.optional<Schema.Codec<ChainId, number, never, never>>;
+      readonly asset_id: Schema.optional<Schema.String>;
     }>;
   }>;
   readonly faucet_confirmed: Schema.Struct<{
@@ -3098,6 +3517,8 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly amount: Schema.optional<Schema.Codec<WeiAmount, string, never, never>>;
       readonly chainId: Schema.optional<Schema.Codec<ChainId, number, never, never>>;
       readonly txHash: Schema.optional<Schema.Codec<TxHash, string, never, never>>;
+      readonly asset_id: Schema.optional<Schema.String>;
+      readonly token_address: Schema.optional<Schema.Codec<Address, string, never, never>>;
       readonly durationMs: Schema.optional<Schema.Codec<DurationMs, number, never, never>>;
     }>;
   }>;
@@ -3137,6 +3558,10 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
         readonly server: Schema.optional<Schema.String>;
       }>>;
       readonly reason: Schema.optional<Schema.String>;
+      readonly amount: Schema.optional<Schema.Codec<WeiAmount, string, never, never>>;
+      readonly chainId: Schema.optional<Schema.Codec<ChainId, number, never, never>>;
+      readonly asset_id: Schema.optional<Schema.String>;
+      readonly token_address: Schema.optional<Schema.Codec<Address, string, never, never>>;
     }>;
   }>;
   readonly chain_upstream_fallback: Schema.Struct<{
@@ -3332,6 +3757,11 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly correlation_id: Schema.optional<Schema.String>;
       readonly sdk_version: Schema.optional<Schema.String>;
       readonly org_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+      readonly invitation_id: Schema.optional<Schema.String>;
+      readonly generation: Schema.optional<Schema.String>;
+      readonly command_id: Schema.optional<Schema.String>;
+      readonly subject_party_id: Schema.optional<Schema.String>;
+      readonly persisted_at: Schema.optional<Schema.Codec<EpochMs, number, never, never>>;
       readonly email_domain: Schema.optional<Schema.String>;
       readonly role: Schema.optional<Schema.String>;
       readonly status: Schema.optional<Schema.String>;
@@ -3346,6 +3776,11 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly correlation_id: Schema.optional<Schema.String>;
       readonly sdk_version: Schema.optional<Schema.String>;
       readonly org_id: Schema.optional<Schema.Codec<string, string, never, never>>;
+      readonly invitation_id: Schema.optional<Schema.String>;
+      readonly accepted_at: Schema.optional<Schema.Codec<EpochMs, number, never, never>>;
+      readonly generation: Schema.optional<Schema.String>;
+      readonly command_id: Schema.optional<Schema.String>;
+      readonly subject_party_id: Schema.optional<Schema.String>;
       readonly role: Schema.optional<Schema.String>;
       readonly status: Schema.optional<Schema.String>;
     }>;
@@ -3360,6 +3795,7 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
       readonly sdk_version: Schema.optional<Schema.String>;
       readonly org_id: Schema.optional<Schema.Codec<string, string, never, never>>;
       readonly email_domain: Schema.optional<Schema.String>;
+      readonly invitation_id: Schema.optional<Schema.String>;
       readonly reason: Schema.optional<Schema.String>;
       readonly role: Schema.optional<Schema.String>;
       readonly status: Schema.optional<Schema.String>;
@@ -3615,8 +4051,13 @@ declare const TELEMETRY_EVENT_SCHEMAS: {
        * actually returned, and which command it was, without either fact rewriting
        * the receipt outcome above. Absent when application has not happened yet.
        */
-      readonly application_result: Schema.optional<Schema.Literals<readonly ["applied", "replayed", "conflicting_replay", "revision_mismatch"]>>;
+      readonly application_result: Schema.optional<Schema.Literals<readonly ["applied", "replayed", "conflicting_replay", "revision_mismatch", "cleanup_required", "not_applied", "application_failure", "mismatch", "refused"]>>;
+      readonly command_kind: Schema.optional<Schema.Literals<readonly ["invitation_configuration", "invitation_eoa"]>>;
       readonly command_id: Schema.optional<Schema.String>;
+      readonly invitation_id: Schema.optional<Schema.String>;
+      readonly generation: Schema.optional<Schema.String>;
+      readonly purpose: Schema.optional<Schema.Literals<readonly ["configure", "grant", "disable", "compensate"]>>;
+      readonly $insert_id: Schema.optional<Schema.String>;
       /**
        * #1961 R03. The authorized stored row names the Permission it changed; the
        * verified receipt names the chain facts that prove it. Every field is
@@ -3934,4 +4375,4 @@ declare class InMemoryTelemetryBusAdapter implements TelemetryPort {
   reportHandledError(_error: CapxulError, _context?: HandledErrorReportContext): Effect.Effect<void, never>;
 }
 //#endregion
-export { AccessRecoveryCompletedTelemetryEventSchema, AccountBalanceFailedTelemetryEventSchema, AccountBalanceReadTelemetryEventSchema, ActivityAnnotationSavedTelemetryEventSchema, AuthFailedTelemetryEventSchema, AuthOtpDeliveredTelemetryEventSchema, AuthOtpExpiredTelemetryEventSchema, AuthOtpRequestedTelemetryEventSchema, AuthSignedOutTelemetryEventSchema, AuthVerifiedTelemetryEventSchema, BROWSER_GATED_TELEMETRY_EVENTS, BootstrapFailedTelemetryEventSchema, BootstrapResolvedTelemetryEventSchema, BundlerErrorTelemetryEventSchema, CAPXUL_ENVS, CAPXUL_OPERATIONS, CONTRACT_FIRST_TELEMETRY_EVENTS, CapturedNetworkRequestLike, CapxulBrowserAnalyticsInput, CapxulEnv, type CapxulOperation, ChainAttemptSchema, ChainUpstreamFallbackTelemetryEventSchema, ChainUpstreamSchema, CliDiagnosticCompletedTelemetryEventSchema, ContactRelationshipChangedTelemetryEventSchema, DepositInitiatedTelemetryEventSchema, DepositSettledTelemetryEventSchema, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS, FailureModeSchema, FaucetConfirmedTelemetryEventSchema, FaucetFailedTelemetryEventSchema, FaucetRequestedTelemetryEventSchema, FunnelJourney, FunnelStepPropertyFilter, type HandledErrorReportContext, IdentityRefusedTelemetryEventSchema, InMemoryTelemetryBusAdapter, IndexerDriftCorrectedTelemetryEventSchema, InitializePostHogBrowserAnalyticsInput, InvoiceIssuedTelemetryEventSchema, InvoiceRequestTransitionedTelemetryEventSchema, Journey, MemberActivationFailedTelemetryEventSchema, MemberActivationReadyTelemetryEventSchema, MemberActivationStartedTelemetryEventSchema, MovementScanCheckpointTelemetryEventSchema, MovementScanIncidentTelemetryEventSchema, MovementScanWindowTelemetryEventSchema, NonEmptyTelemetryEventNames, type NormalizedCapxulOperation, OnboardingDashboardReachedTelemetryEventSchema, OnboardingIntentSelectedTelemetryEventSchema, OnboardingOrganizationSubmittedTelemetryEventSchema, OnboardingProfileSubmittedTelemetryEventSchema, OperationRetriedTelemetryEventSchema, OrgCreateFailedTelemetryEventSchema, OrgCreateStartedTelemetryEventSchema, OrgCreatedTelemetryEventSchema, OrgInviteAcceptedTelemetryEventSchema, OrgInviteExpiredTelemetryEventSchema, OrgInviteProgressedTelemetryEventSchema, OrgInviteSentTelemetryEventSchema, OrgRolesSeededTelemetryEventSchema, OrgSafeConfirmedTelemetryEventSchema, OrgSafeCreatedTelemetryEventSchema, OrganizationCreationFailedTelemetryEventSchema, OrganizationCreationReadyTelemetryEventSchema, OrganizationCreationStartedTelemetryEventSchema, PII, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS, PaymentFailedTelemetryEventSchema, PaymentInitiatedTelemetryEventSchema, PaymentLifecycleTransitionTelemetryEventSchema, PaymentSettledTelemetryEventSchema, PaymentVerificationRetryTelemetryEventSchema, PayrollGroupChangedTelemetryEventSchema, PayrollRunTransitionedTelemetryEventSchema, PermissionMirrorVerificationTelemetryEventSchema, PointEventJourney, PostHogBeforeSend, PostHogBrowserCapture, PostHogBrowserInitialize, PostHogBrowserOptions, PostHogBrowserPageviewClient, PostHogProductAppOptions, PostHogTelemetryAdapter, PostHogUtilityAppOptions, ProvisioningSafeConfirmedTelemetryEventSchema, ProvisioningSafeCreatedTelemetryEventSchema, QuickPayExternalAddressAcknowledgedTelemetryEventSchema, ReceiptPendingTelemetryEventSchema, RecordingTelemetryAdapter, ResponseHeadersSchema, SYNCABLE_CAPXUL_ENVS, TELEMETRY_EVENT_NAMES, TELEMETRY_EVENT_SCHEMAS, TELEMETRY_JOURNEYS, TELEMETRY_PRODUCERS, TelemetryEnvelopeDefaults, TelemetryEvent, TelemetryEventName, TelemetryGroupInput, TelemetryIdentifyInput, type TelemetryPort, TelemetryProducer, TelemetryProps, TelemetryRedactionOptions, TrackHandler, UiAccessStepCompletedTelemetryEventSchema, UiActivityActionCompletedTelemetryEventSchema, UiContactActionCompletedTelemetryEventSchema, UiInvoiceStepCompletedTelemetryEventSchema, UiPayrollActionCompletedTelemetryEventSchema, UiReceiveStepCompletedTelemetryEventSchema, UiTreasuryStepCompletedTelemetryEventSchema, createCapxulBeforeSend, createPostHogBrowserPageviewTracker, getTrackHandler, initializeCapxulBrowserAnalytics, initializePostHogBrowserAnalytics, isCapxulOperation, maskCapturedNetworkRequest, normalizeCapxulOperation, productAppAnalytics, redactTelemetryEvent, redactTelemetryProps, sanitizePostHogBrowserEvent, setTrackHandler, stampTelemetryEnvelope, track, utilityAppAnalytics };
+export { AccessRecoveryCompletedTelemetryEventSchema, AccountBalanceFailedTelemetryEventSchema, AccountBalanceReadTelemetryEventSchema, ActivityAnnotationSavedTelemetryEventSchema, AuthFailedTelemetryEventSchema, AuthOtpDeliveredTelemetryEventSchema, AuthOtpExpiredTelemetryEventSchema, AuthOtpRequestedTelemetryEventSchema, AuthSignedOutTelemetryEventSchema, AuthVerifiedTelemetryEventSchema, BROWSER_GATED_TELEMETRY_EVENTS, BootstrapFailedTelemetryEventSchema, BootstrapResolvedTelemetryEventSchema, BundlerErrorTelemetryEventSchema, CAPXUL_ENVS, CAPXUL_OPERATIONS, CLI_CAPABILITIES, CLI_COMMAND_NAMES, CLI_INVOCATION_KINDS, CONTRACT_FIRST_TELEMETRY_EVENTS, CapturedNetworkRequestLike, CapxulBrowserAnalyticsInput, CapxulEnv, type CapxulOperation, ChainAttemptSchema, ChainUpstreamFallbackTelemetryEventSchema, ChainUpstreamSchema, CliCapability, CliCommandCompletedTelemetryEventSchema, CliCommandName, CliCommandStartedTelemetryEventSchema, CliDiagnosticCompletedTelemetryEventSchema, CliFirstUsedTelemetryEventSchema, CliInvocationKind, ContactRelationshipChangedTelemetryEventSchema, DepositInitiatedTelemetryEventSchema, DepositSettledTelemetryEventSchema, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS, FailureModeSchema, FaucetConfirmedTelemetryEventSchema, FaucetFailedTelemetryEventSchema, FaucetRequestedTelemetryEventSchema, FunnelJourney, FunnelStepPropertyFilter, type HandledErrorReportContext, IdentityRefusedTelemetryEventSchema, InMemoryTelemetryBusAdapter, IndexerDriftCorrectedTelemetryEventSchema, InitializePostHogBrowserAnalyticsInput, InvoiceIssuedTelemetryEventSchema, InvoiceRequestTransitionedTelemetryEventSchema, Journey, MemberActivationFailedTelemetryEventSchema, MemberActivationReadyTelemetryEventSchema, MemberActivationStartedTelemetryEventSchema, MovementScanCheckpointTelemetryEventSchema, MovementScanIncidentTelemetryEventSchema, MovementScanWindowTelemetryEventSchema, NativeAuthorizationAcceptedTelemetryEventSchema, NativeAuthorizationConnectedTelemetryEventSchema, NativeAuthorizationDeniedTelemetryEventSchema, NativeAuthorizationFailedTelemetryEventSchema, NativeAuthorizationReviewedTelemetryEventSchema, NativeAuthorizationStartedTelemetryEventSchema, NonEmptyTelemetryEventNames, type NormalizedCapxulOperation, OnboardingDashboardReachedTelemetryEventSchema, OnboardingIntentSelectedTelemetryEventSchema, OnboardingOrganizationSubmittedTelemetryEventSchema, OnboardingProfileSubmittedTelemetryEventSchema, OperationRetriedTelemetryEventSchema, OrgCreateFailedTelemetryEventSchema, OrgCreateStartedTelemetryEventSchema, OrgCreatedTelemetryEventSchema, OrgInviteAcceptedTelemetryEventSchema, OrgInviteExpiredTelemetryEventSchema, OrgInviteProgressedTelemetryEventSchema, OrgInviteSentTelemetryEventSchema, OrgRolesSeededTelemetryEventSchema, OrgSafeConfirmedTelemetryEventSchema, OrgSafeCreatedTelemetryEventSchema, OrganizationCreationFailedTelemetryEventSchema, OrganizationCreationReadyTelemetryEventSchema, OrganizationCreationStartedTelemetryEventSchema, PII, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS, PaymentFailedTelemetryEventSchema, PaymentInitiatedTelemetryEventSchema, PaymentLifecycleTransitionTelemetryEventSchema, PaymentSettledTelemetryEventSchema, PaymentVerificationRetryTelemetryEventSchema, PayrollGroupChangedTelemetryEventSchema, PayrollRunTransitionedTelemetryEventSchema, PermissionMirrorVerificationTelemetryEventSchema, PointEventJourney, PostHogBeforeSend, PostHogBrowserCapture, PostHogBrowserInitialize, PostHogBrowserOptions, PostHogBrowserPageviewClient, PostHogProductAppOptions, PostHogTelemetryAdapter, PostHogUtilityAppOptions, ProvisioningSafeConfirmedTelemetryEventSchema, ProvisioningSafeCreatedTelemetryEventSchema, QuickPayExternalAddressAcknowledgedTelemetryEventSchema, ReceiptPendingTelemetryEventSchema, RecordingTelemetryAdapter, ResponseHeadersSchema, SYNCABLE_CAPXUL_ENVS, TELEMETRY_EVENT_NAMES, TELEMETRY_EVENT_SCHEMAS, TELEMETRY_JOURNEYS, TELEMETRY_PRODUCERS, TelemetryEnvelopeDefaults, TelemetryEvent, TelemetryEventName, TelemetryGroupInput, TelemetryIdentifyInput, type TelemetryPort, TelemetryProducer, TelemetryProps, TelemetryRedactionOptions, TrackHandler, UiAccessStepCompletedTelemetryEventSchema, UiActivityActionCompletedTelemetryEventSchema, UiContactActionCompletedTelemetryEventSchema, UiInvoiceStepCompletedTelemetryEventSchema, UiPayrollActionCompletedTelemetryEventSchema, UiReceiveStepCompletedTelemetryEventSchema, UiTreasuryStepCompletedTelemetryEventSchema, createCapxulBeforeSend, createPostHogBrowserPageviewTracker, getTrackHandler, initializeCapxulBrowserAnalytics, initializePostHogBrowserAnalytics, isCapxulOperation, maskCapturedNetworkRequest, normalizeCapxulOperation, productAppAnalytics, redactTelemetryEvent, redactTelemetryProps, sanitizePostHogBrowserEvent, setTrackHandler, stampTelemetryEnvelope, track, utilityAppAnalytics };