@capxul/observability 4.20.0-beta.27 → 4.20.0-beta.29

package/dist/{src-BBVEFkzq.mjs → src-CAQEATmQ.mjs}

@@ -2047,7 +2047,9 @@ const OrganizationPaymentExecutionItemSchema = Schema.Struct({
 		"invoice",
 		"payroll",
 		"reimbursement"
-	]))
+	])),
+	/** When the recipient gets it: instant (the default), or held until a date or over a period. */
+	timing: Schema.optional(PaymentTiming)
 }).check(Schema.makeFilter((value) => Schema.is(PaymentDocumentOptionsSchema)(value)));
 const PrepareOrganizationPaymentExecutionInputSchema = Schema.Struct({
 	orgId: nonEmpty("orgId"),
@@ -2157,11 +2159,20 @@ const PreparedPaymentCommandExecutionSchema = Schema.Struct({
 //#region ../protocol/src/accounts/approval-schema.ts
 const APPROVAL_ID_RE = /^approval_[0-9A-HJKMNP-TV-Z]{26}$/u;
 const ApprovalIdSchema = Schema.String.pipe(Schema.refine((value) => APPROVAL_ID_RE.test(value), { message: "must be approval_ plus a ULID" }));
-/** What is being approved. */
+/**
+* What is being approved. A `permission_change` creates, changes, assigns,
+* revokes or replaces an Organization's Permissions; an `invitation` sets up
+* the rights an invitation offers. Neither moves money. A `payment_cancel`
+* returns a held Payment to whoever funded it; a `payment_redirect` sends it
+* to someone else.
+*/
 const APPROVAL_KINDS = [
 	"payment",
 	"payroll_run",
+	"payment_cancel",
+	"payment_redirect",
 	"permission_change",
+	"invitation",
 	"bank_payout"
 ];
 /**
@@ -2385,8 +2396,7 @@ const approvals = {
 		errors: [
 			...CALL$10,
 			...DEFECTS,
-			"WRONG_STATE",
-			"NOT_IMPLEMENTED"
+			"WRONG_STATE"
 		]
 	}),
 	/** The approval as the person reads it, with its state judged against its expiry. */
@@ -2887,6 +2897,15 @@ const probes = {
 	})
 };
 //#endregion
+//#region ../protocol/src/evm/role-dsl.ts
+/**
+* How a capped Budget's allowance refills (#2298). `monthly` refills the
+* allowance to its cap every 30 days. Roles v2 counts fixed periods from the
+* moment the allowance is set; it has no calendar month. Absent means `none`:
+* the cap is one pot that spending drains for good.
+*/
+const ORG_BUDGET_REFILLS = ["monthly", "none"];
+//#endregion
 //#region ../protocol/src/permissions/permission-schema.ts
 /**
 * One stored `setAllowance` call inside a command's expected authority set.
@@ -2925,12 +2944,19 @@ const BudgetScopeSchema = Schema.Struct({
 	})]),
 	actions: Schema.NonEmptyArray(Schema.Literals(["pay", "commitments"]))
 }).pipe(Schema.refine((scope) => new Set(scope.actions).size === scope.actions.length && (scope.recipients.type === "anyone" || scope.recipients.accounts.length >= 1 && scope.recipients.accounts.length <= 32 && new Set(scope.recipients.accounts).size === scope.recipients.accounts.length), { message: "Budget scope requires unique actions and one to 32 unique allowed Accounts" }));
+/**
+* How a capped Budget refills (#2298): `monthly` tops the cap back up every 30
+* days (a fixed Roles v2 period, not a calendar month); `none` never refills.
+* Absent means `none`, and writers store only `monthly`.
+*/
+const BudgetRefillSchema = Schema.Literals(ORG_BUDGET_REFILLS);
 /** The accepted product policy stored with one Permission revision. */
 const CurrentPolicySchema = Schema.Union([Schema.Struct({
 	type: Schema.Literal("budget"),
 	asset: AssetIdSchema,
 	limit: Schema.NullOr(Schema.String),
-	scope: BudgetScopeSchema
+	scope: BudgetScopeSchema,
+	refill: Schema.optional(BudgetRefillSchema)
 }), Schema.Struct({ type: Schema.Literal("managePeople") })]);
 const BudgetIntentSchema = CurrentPolicySchema.pipe(Schema.refine((value) => {
 	if (value.type !== "budget") return false;
@@ -2952,6 +2978,15 @@ const PermissionSchema = Schema.Struct({
 	limitRaw: Schema.optional(WeiAmountSchema$1),
 	allowanceKey: Schema.optional(AllowanceKeySchema)
 });
+/**
+* A refilling Budget's refill (#2439): how much each one adds, every how many
+* days, and when the next one is due.
+*/
+const BudgetNextRefillSchema = Schema.Struct({
+	amount: AssetAmountSchema,
+	everyDays: Schema.Finite,
+	nextAt: EpochMsSchema$1
+});
 const PermissionAssignmentSchema = Schema.Struct({
 	permissionAssignmentId: PermissionAssignmentIdSchema,
 	permissionId: PermissionIdSchema,
@@ -2995,7 +3030,8 @@ const ResolvedPermissionBudgetPolicySchema = Schema.Struct({
 		"send",
 		"sendBatch",
 		"createCommitment"
-	]))
+	])),
+	refill: Schema.optional(BudgetRefillSchema)
 });
 const PermissionRecipientBindingSchema = Schema.Struct({
 	accountId: AccountIdSchema$1,
@@ -3007,14 +3043,16 @@ const StoredPermissionIntentSchema = Schema.Union([Schema.Struct({
 	type: Schema.Literal("budget"),
 	asset: AssetIdSchema,
 	limit: Schema.NullOr(AssetAmountSchema),
-	scope: Schema.optional(BudgetScopeSchema)
+	scope: Schema.optional(BudgetScopeSchema),
+	refill: Schema.optional(BudgetRefillSchema)
 }).pipe(Schema.refine((intent) => intent.limit === null || intent.limit.asset === intent.asset, { message: "Budget limit must use the Budget asset" })), Schema.Struct({ type: Schema.Literal("managePeople") })]);
 /** Writes state every granted right and use a finite positive AssetAmount cap. */
 const PermissionIntentSchema = Schema.Union([Schema.Struct({
 	type: Schema.Literal("budget"),
 	asset: AssetIdSchema,
 	limit: AssetAmountSchema,
-	scope: BudgetScopeSchema
+	scope: BudgetScopeSchema,
+	refill: Schema.optional(BudgetRefillSchema)
 }).pipe(Schema.refine((intent) => intent.limit.asset === intent.asset && /[1-9]/u.test(intent.limit.value), { message: "Budget cap must be positive and use the Budget asset" })), Schema.Struct({ type: Schema.Literal("managePeople") })]);
 //#endregion
 //#region ../protocol/src/permissions/replacement-schema.ts
@@ -3216,7 +3254,7 @@ const InviteGrantsSchema = Schema.Array(Schema.Union([
 	Schema.Struct({
 		type: Schema.Literal("new_budget"),
 		label: Schema.String.pipe(Schema.refine((value) => value.trim().length >= 1 && value.trim().length <= 128)),
-		intent: BudgetIntentSchema
+		intent: BudgetIntentSchema.pipe(Schema.refine((intent) => intent.refill !== "monthly", { message: "An invitation's new Budget cannot refill; change it once granted" }))
 	})
 ])).pipe(Schema.refine((grants) => {
 	if (grants.length < 1 || grants.length > 16) return false;
@@ -5638,6 +5676,30 @@ const authorities = {
 			"ROLE_PERMISSION_DENIED"
 		]
 	}),
+	/**
+	* What one active Budget can still spend now: its Roles allowance, read on
+	* chain at the latest block as the payment gate reads it. `left` is null for
+	* a Budget with no allowance (no cap). `refill` names a refilling Budget's
+	* refill and when the next one is due; null for a one-off or uncapped Budget
+	* (#2439). For a participant of the Organization.
+	*/
+	budgetLeft: Operation.action("permissions.authorities.budgetLeft", {
+		input: Schema.Struct({
+			orgId: OrgId,
+			budgetId: PermissionIdSchema
+		}),
+		output: Schema.Struct({
+			budgetId: PermissionIdSchema,
+			left: Schema.NullOr(AssetAmountSchema),
+			refill: Schema.optionalKey(Schema.NullOr(BudgetNextRefillSchema))
+		}),
+		errors: [
+			...CALL$2,
+			...DEFECTS,
+			...CHAIN$1,
+			"ROLE_PERMISSION_DENIED"
+		]
+	}),
 	/** Whether the caller's Account may spend this amount from this Budget right now. */
 	authorize: Operation.query("permissions.authorities.authorize", {
 		input: MoneyAuthorizationRequestSchema,
@@ -6412,7 +6474,9 @@ const PEOPLE_OPERATIONS = {
 			emitSafeConfirmed: "accounts.safes.emitSafeConfirmed",
 			readSafe: "accounts.safes.readSafe",
 			recordDeployment: "accounts.safes.recordDeployment"
-		}
+		},
+		/** The home's requests to pay and Payments to retry, read in one query. */
+		summaries: { loadNeedsYou: "accounts.summaries.loadNeedsYou" }
 	},
 	/** The host observer's names for `client.approvals.*`. */
 	approvals: {
@@ -6526,6 +6590,7 @@ const ORGANIZATION_OPERATIONS = {
 		payment: "org.payment",
 		permissions: {
 			assign: "org.permissions.assign",
+			budgetLeft: "org.permissions.budgetLeft",
 			change: "org.permissions.change",
 			create: "org.permissions.create",
 			get: "org.permissions.get",
@@ -6671,7 +6736,9 @@ emitSaved: "activity.annotations.emitSaved" },
 		pay: "organizationPayments.pay",
 		payBatch: "organizationPayments.payBatch",
 		prepareExecution: "organizationPayments.prepareExecution",
-		retry: "organizationPayments.retry"
+		retry: "organizationPayments.retry",
+		cancel: "organizationPayments.cancel",
+		redirect: "organizationPayments.redirect"
 	},
 	/**
 	* Payments' internal functions and the client's own method names; its public
@@ -6693,7 +6760,9 @@ emitSaved: "activity.annotations.emitSaved" },
 			loadContext: "payments.commands.loadContext",
 			loadExecutionContext: "payments.commands.loadExecutionContext",
 			/** The capped Budget a prepared Organization command spends from, before its allowance is read on chain. */
-			loadBudgetAllowance: "payments.commands.loadBudgetAllowance"
+			loadBudgetAllowance: "payments.commands.loadBudgetAllowance",
+			/** What a new Payment command would spend and from which Safe, read before it is born. */
+			loadBirthFunding: "payments.commands.loadBirthFunding"
 		},
 		lifecycles: { prepareIntent: "payments.lifecycles.prepareIntent" },
 		/** The stored UserOperation of every money command: Payment, Permission and configuration. */
@@ -6768,6 +6837,9 @@ emitChanged: "payroll.groups.emitChanged" }
 	},
 	/** Permissions' internal functions; its public rows join from `OPERATIONS`. */
 	permissions: {
+		authorities: { 
+		/** The Budget-left read's participant check and the Budget's stored allowance. */
+loadBudgetLeft: "permissions.authorities.loadBudgetLeft" },
 		commands: {
 			/** The prepare action's transaction: authorize, plan and save the command. */
 			prepareIntent: "permissions.commands.prepareIntent",
@@ -7031,12 +7103,6 @@ const TELEMETRY_EVENT_NAMES = [
 	"faucet_requested",
 	"faucet_confirmed",
 	"faucet_failed",
-	"org_create_started",
-	"org_safe_created",
-	"org_safe_confirmed",
-	"org_roles_seeded",
-	"org_created",
-	"org_create_failed",
 	"org_invite_sent",
 	"org_invite_accepted",
 	"org_invite_expired",
@@ -7068,187 +7134,13 @@ const TELEMETRY_EVENT_NAMES = [
 	"payroll_group_changed",
 	"payroll_run_transitioned",
 	"ui_payroll_action_completed",
+	"ui_approval_sign_in_required",
 	"cli_diagnostic_completed",
 	"cli_first_used",
 	"cli_command_started",
 	"cli_command_completed"
 ];
 //#endregion
-//#region src/catalog/journeys.ts
-const TELEMETRY_JOURNEYS = {
-	returning_user_login: {
-		type: "funnel",
-		steps: [
-			"auth_otp_requested",
-			"auth_otp_delivered",
-			"auth_verified"
-		],
-		drops_on: ["auth_otp_expired", "auth_failed"]
-	},
-	new_user_first_signin: {
-		type: "funnel",
-		steps: [
-			"auth_otp_requested",
-			"auth_otp_delivered",
-			"auth_verified",
-			"provisioning_safe_created",
-			"provisioning_safe_confirmed"
-		],
-		drops_on: ["auth_otp_expired", "auth_failed"]
-	},
-	sign_out_session_close: {
-		type: "point_event",
-		point_event: "auth_signed_out"
-	},
-	member_activation: {
-		type: "funnel",
-		steps: ["member_activation_started", "member_activation_ready"],
-		drops_on: ["member_activation_failed"]
-	},
-	organization_creation_lifecycle: {
-		type: "funnel",
-		steps: ["organization_creation_started", "organization_creation_ready"],
-		drops_on: ["organization_creation_failed"]
-	},
-	new_member_personal_dashboard: {
-		type: "funnel",
-		steps: [
-			"auth_verified",
-			"onboarding_intent_selected",
-			"onboarding_profile_submitted",
-			"member_activation_ready",
-			"onboarding_dashboard_reached"
-		],
-		step_filters: {
-			onboarding_intent_selected: [{
-				key: "intent",
-				value: ["personal"],
-				operator: "exact",
-				type: "event"
-			}, {
-				key: "entry_point",
-				value: ["signup"],
-				operator: "exact",
-				type: "event"
-			}],
-			onboarding_profile_submitted: [{
-				key: "intent",
-				value: ["personal"],
-				operator: "exact",
-				type: "event"
-			}],
-			onboarding_dashboard_reached: [{
-				key: "intent",
-				value: ["personal"],
-				operator: "exact",
-				type: "event"
-			}]
-		}
-	},
-	new_member_organization_dashboard: {
-		type: "funnel",
-		steps: [
-			"auth_verified",
-			"onboarding_intent_selected",
-			"onboarding_profile_submitted",
-			"onboarding_organization_submitted",
-			"member_activation_started",
-			"member_activation_ready",
-			"organization_creation_started",
-			"organization_creation_ready",
-			"onboarding_dashboard_reached"
-		],
-		step_filters: {
-			onboarding_intent_selected: [{
-				key: "intent",
-				value: ["organization"],
-				operator: "exact",
-				type: "event"
-			}, {
-				key: "entry_point",
-				value: ["signup"],
-				operator: "exact",
-				type: "event"
-			}],
-			onboarding_profile_submitted: [{
-				key: "intent",
-				value: ["organization"],
-				operator: "exact",
-				type: "event"
-			}],
-			onboarding_dashboard_reached: [{
-				key: "intent",
-				value: ["organization"],
-				operator: "exact",
-				type: "event"
-			}]
-		}
-	},
-	existing_member_organization_dashboard: {
-		type: "funnel",
-		steps: [
-			"onboarding_intent_selected",
-			"onboarding_organization_submitted",
-			"organization_creation_started",
-			"organization_creation_ready",
-			"onboarding_dashboard_reached"
-		],
-		step_filters: {
-			onboarding_intent_selected: [{
-				key: "intent",
-				value: ["organization"],
-				operator: "exact",
-				type: "event"
-			}, {
-				key: "entry_point",
-				value: ["dashboard"],
-				operator: "exact",
-				type: "event"
-			}],
-			onboarding_dashboard_reached: [{
-				key: "intent",
-				value: ["organization"],
-				operator: "exact",
-				type: "event"
-			}]
-		}
-	},
-	money_on_screen: {
-		type: "point_event",
-		point_event: "account_balance_read"
-	},
-	fund_account: {
-		type: "funnel",
-		steps: ["faucet_requested", "faucet_confirmed"],
-		drops_on: ["faucet_failed"]
-	},
-	org_creation: {
-		type: "funnel",
-		steps: [
-			"org_create_started",
-			"org_safe_created",
-			"org_safe_confirmed",
-			"org_roles_seeded",
-			"org_created"
-		],
-		drops_on: ["org_create_failed"]
-	},
-	org_member_onboarding: {
-		type: "funnel",
-		steps: ["org_invite_sent", "org_invite_accepted"],
-		drops_on: ["org_invite_expired"]
-	},
-	direct_payment: {
-		type: "funnel",
-		steps: ["payment_initiated", "payment_settled"],
-		drops_on: ["payment_failed"]
-	},
-	deposit: {
-		type: "funnel",
-		steps: ["deposit_initiated", "deposit_settled"]
-	}
-};
-//#endregion
 //#region src/catalog/values.ts
 const OptionalString = Schema.optional(Schema.String);
 const AddressSchema = Schema.String.pipe(Schema.decodeTo(Schema.String, {
@@ -7317,6 +7209,13 @@ const EXCEPTION_EVENT_NAME = "$exception";
 * and classes only, not this evidence.
 */
 const EXPECTED_OUTCOME_EVENT_NAME = "capxul_backend_expected_outcome";
+/**
+* The SDK's twin of `capxul_backend_expected_outcome`: an expected outcome the
+* SDK's failure projection captures through the host's PostHog client. Like
+* the backend's, its properties are the error evidence, so no catalog schema
+* validates it.
+*/
+const SDK_EXPECTED_OUTCOME_EVENT_NAME = "capxul_sdk_expected_outcome";
 const PII = Schema.String.pipe(Schema.brand("PII"));
 /**
 * Environment discriminator (ADR-0020 A1 amendment, 2026-08-07). PostHog
@@ -7444,6 +7343,239 @@ const UiStepProps = {
 	organization_id: OptionalOrgId,
 	reason_code: OptionalReasonCode
 };
+/**
+* A journey's variants (`JOURNEYS`): the way a person came into a journey, or
+* the way they took through it. A variant is a property of the journey's step
+* events, never a journey of its own, so each journey funnel breaks down by
+* it. A step event takes only the variants that a journey contract names on
+* it, picked one by one; the analytics plan test checks both directions.
+* `pay_path` and `funding_source` have no carrier until their Phase 2 events.
+* `payment_*` events already carry `recipient_is_capxul_account`, and
+* `invoice_issued` carries `issuer_scope_kind`; neither is repeated here.
+*/
+const JourneyVariantProps = {
+	/** How a person came to Get started: by themselves, an invite, money that waited, or an invoice. */
+	entry_path: Schema.optional(Schema.Literals([
+		"signup",
+		"invite",
+		"claim",
+		"invoice"
+	])),
+	/** Where the person acted. `agent` is an AI agent driving the CLI. */
+	surface: Schema.optional(Schema.Literals([
+		"web",
+		"cli",
+		"agent"
+	])),
+	/** Who pays: a person from their own account, or an Organization from a Budget. */
+	payer_kind: Schema.optional(Schema.Literals(["person", "organization"])),
+	/** How a request was paid: from the payer's inbox, or by its link at checkout. */
+	pay_path: Schema.optional(Schema.Literals(["inbox", "link"])),
+	/** Where an account's first money came from. `bank` is the planned on-ramp. */
+	funding_source: Schema.optional(Schema.Literals([
+		"deposit",
+		"payment",
+		"claim",
+		"bank"
+	]))
+};
+//#endregion
+//#region src/catalog/journeys.ts
+/**
+* The launch journeys (decision pack P0, 2026-10-07). Sign-in, approvals,
+* Budgets and contacts are steps or properties inside them, and a planned
+* feature joins one as a variant or a step when it is built. Every key needs a
+* journey contract in `packages/tools` `analytics`, or that package fails to
+* compile.
+*/
+const JOURNEYS = {
+	get_started: {
+		title: "Get started",
+		finish: "The account is ready: the person's Safe is live",
+		variants: ["entry_path", "surface"]
+	},
+	money_in: {
+		title: "Money in",
+		finish: "The first balance above 0",
+		variants: ["funding_source"]
+	},
+	pay_someone: {
+		title: "Pay someone",
+		finish: "The payment settles, or the recipient claims it when they had no account",
+		variants: [
+			"recipient_is_capxul_account",
+			"payer_kind",
+			"surface"
+		]
+	},
+	get_paid: {
+		title: "Get paid",
+		finish: "The invoice or request is paid",
+		variants: ["issuer_scope_kind", "pay_path"]
+	},
+	run_company: {
+		title: "Run a company",
+		finish: "A payroll run settles",
+		variants: ["surface"]
+	}
+};
+const TELEMETRY_JOURNEYS = {
+	returning_user_login: {
+		type: "funnel",
+		steps: [
+			"auth_otp_requested",
+			"auth_otp_delivered",
+			"auth_verified"
+		],
+		drops_on: ["auth_otp_expired", "auth_failed"]
+	},
+	new_user_first_signin: {
+		type: "funnel",
+		steps: [
+			"auth_otp_requested",
+			"auth_otp_delivered",
+			"auth_verified",
+			"provisioning_safe_created",
+			"provisioning_safe_confirmed"
+		],
+		drops_on: ["auth_otp_expired", "auth_failed"]
+	},
+	sign_out_session_close: {
+		type: "point_event",
+		point_event: "auth_signed_out"
+	},
+	member_activation: {
+		type: "funnel",
+		steps: ["member_activation_started", "member_activation_ready"],
+		drops_on: ["member_activation_failed"]
+	},
+	organization_creation_lifecycle: {
+		type: "funnel",
+		steps: ["organization_creation_started", "organization_creation_ready"],
+		drops_on: ["organization_creation_failed"]
+	},
+	new_member_personal_dashboard: {
+		type: "funnel",
+		steps: [
+			"auth_verified",
+			"onboarding_intent_selected",
+			"onboarding_profile_submitted",
+			"member_activation_ready",
+			"onboarding_dashboard_reached"
+		],
+		step_filters: {
+			onboarding_intent_selected: [{
+				key: "intent",
+				value: ["personal"],
+				operator: "exact",
+				type: "event"
+			}, {
+				key: "entry_point",
+				value: ["signup"],
+				operator: "exact",
+				type: "event"
+			}],
+			onboarding_profile_submitted: [{
+				key: "intent",
+				value: ["personal"],
+				operator: "exact",
+				type: "event"
+			}],
+			onboarding_dashboard_reached: [{
+				key: "intent",
+				value: ["personal"],
+				operator: "exact",
+				type: "event"
+			}]
+		}
+	},
+	new_member_organization_dashboard: {
+		type: "funnel",
+		steps: [
+			"auth_verified",
+			"onboarding_intent_selected",
+			"onboarding_profile_submitted",
+			"onboarding_organization_submitted",
+			"member_activation_started",
+			"member_activation_ready",
+			"organization_creation_started",
+			"organization_creation_ready",
+			"onboarding_dashboard_reached"
+		],
+		step_filters: {
+			onboarding_intent_selected: [{
+				key: "intent",
+				value: ["organization"],
+				operator: "exact",
+				type: "event"
+			}, {
+				key: "entry_point",
+				value: ["signup"],
+				operator: "exact",
+				type: "event"
+			}],
+			onboarding_profile_submitted: [{
+				key: "intent",
+				value: ["organization"],
+				operator: "exact",
+				type: "event"
+			}],
+			onboarding_dashboard_reached: [{
+				key: "intent",
+				value: ["organization"],
+				operator: "exact",
+				type: "event"
+			}]
+		}
+	},
+	existing_member_organization_dashboard: {
+		type: "funnel",
+		steps: [
+			"onboarding_intent_selected",
+			"onboarding_organization_submitted",
+			"organization_creation_started",
+			"organization_creation_ready",
+			"onboarding_dashboard_reached"
+		],
+		step_filters: {
+			onboarding_intent_selected: [{
+				key: "intent",
+				value: ["organization"],
+				operator: "exact",
+				type: "event"
+			}, {
+				key: "entry_point",
+				value: ["dashboard"],
+				operator: "exact",
+				type: "event"
+			}],
+			onboarding_dashboard_reached: [{
+				key: "intent",
+				value: ["organization"],
+				operator: "exact",
+				type: "event"
+			}]
+		}
+	},
+	money_on_screen: {
+		type: "point_event",
+		point_event: "account_balance_read"
+	},
+	fund_account: {
+		type: "point_event",
+		point_event: "faucet_confirmed"
+	},
+	org_member_onboarding: {
+		type: "funnel",
+		steps: ["org_invite_sent", "org_invite_accepted"],
+		drops_on: ["org_invite_expired"]
+	},
+	direct_payment: {
+		type: "funnel",
+		steps: ["payment_initiated", "payment_settled"],
+		drops_on: ["payment_failed"]
+	}
+};
 //#endregion
 //#region src/events/money.ts
 /**
@@ -7533,6 +7665,8 @@ const PaymentInitiatedProps = Schema.Struct({
 	execution_id: OptionalString,
 	payment_lifecycle_id: OptionalString,
 	...TelemetryEnvelopeProps,
+	payer_kind: JourneyVariantProps.payer_kind,
+	surface: JourneyVariantProps.surface,
 	...RecipientTelemetryProps,
 	kind: Schema.String,
 	payment_id: Schema.String
@@ -7548,6 +7682,8 @@ const PaymentLifecycleProps = {
 const PaymentSettledL2Props = Schema.Struct({
 	...PaymentLifecycleProps,
 	...TelemetryEnvelopeProps,
+	payer_kind: JourneyVariantProps.payer_kind,
+	surface: JourneyVariantProps.surface,
 	...RecipientTelemetryProps,
 	kind: Schema.String,
 	chain_id: Schema.Finite,
@@ -7755,6 +7891,7 @@ const OrganizationCreationStartedProps = Schema.Struct({
 });
 const OrganizationCreationReadyProps = Schema.Struct({
 	...TelemetryEnvelopeProps,
+	surface: JourneyVariantProps.surface,
 	$insert_id: Schema.String,
 	organization_id: OrgIdTelemetrySchema,
 	attempt_number: AttemptNumberSchema,
@@ -7779,45 +7916,6 @@ const OrganizationCreationFailedProps = Schema.Struct({
 		...ORGANIZATION_SETUP_REASONS
 	]))
 });
-const OrgCreateStartedProps = Schema.Struct({
-	...TelemetryEnvelopeProps,
-	org_id: OptionalOrgId,
-	email_domain: OptionalString,
-	template: OptionalString
-});
-const OrgSafeCreatedProps = Schema.Struct({
-	...TelemetryEnvelopeProps,
-	org_id: OptionalOrgId,
-	chainId: OptionalChainId,
-	safe_address: OptionalAddress
-});
-const OrgSafeConfirmedProps = Schema.Struct({
-	...TelemetryEnvelopeProps,
-	org_id: OptionalOrgId,
-	chainId: OptionalChainId,
-	safe_address: OptionalAddress,
-	durationMs: OptionalDurationMs
-});
-const OrgRolesSeededProps = Schema.Struct({
-	...TelemetryEnvelopeProps,
-	org_id: OptionalOrgId,
-	chainId: OptionalChainId,
-	role: OptionalString,
-	txHash: OptionalTxHash
-});
-const OrgCreatedProps = Schema.Struct({
-	...TelemetryEnvelopeProps,
-	org_id: OptionalOrgId,
-	chainId: OptionalChainId,
-	safe_address: OptionalAddress,
-	durationMs: OptionalDurationMs
-});
-const OrgCreateFailedProps = Schema.Struct({
-	...TelemetryEnvelopeProps,
-	...ChainCauseTelemetryProps,
-	org_id: OptionalOrgId,
-	reason: OptionalString
-});
 const OrgInviteSentProps = Schema.Struct({
 	...TelemetryEnvelopeProps,
 	org_id: OptionalOrgId,
@@ -7862,30 +7960,6 @@ const OrganizationCreationFailedTelemetryEventSchema = Schema.Struct({
 	name: Schema.Literal("organization_creation_failed"),
 	props: OrganizationCreationFailedProps
 });
-const OrgCreateStartedTelemetryEventSchema = Schema.Struct({
-	name: Schema.Literal("org_create_started"),
-	props: OrgCreateStartedProps
-});
-const OrgSafeCreatedTelemetryEventSchema = Schema.Struct({
-	name: Schema.Literal("org_safe_created"),
-	props: OrgSafeCreatedProps
-});
-const OrgSafeConfirmedTelemetryEventSchema = Schema.Struct({
-	name: Schema.Literal("org_safe_confirmed"),
-	props: OrgSafeConfirmedProps
-});
-const OrgRolesSeededTelemetryEventSchema = Schema.Struct({
-	name: Schema.Literal("org_roles_seeded"),
-	props: OrgRolesSeededProps
-});
-const OrgCreatedTelemetryEventSchema = Schema.Struct({
-	name: Schema.Literal("org_created"),
-	props: OrgCreatedProps
-});
-const OrgCreateFailedTelemetryEventSchema = Schema.Struct({
-	name: Schema.Literal("org_create_failed"),
-	props: OrgCreateFailedProps
-});
 const OrgInviteSentTelemetryEventSchema = Schema.Struct({
 	name: Schema.Literal("org_invite_sent"),
 	props: OrgInviteSentProps
@@ -8284,6 +8358,21 @@ const UiReceiveStepCompletedTelemetryEventSchema = Schema.Struct({
 		account_kind: Schema.optional(AccountKindSchema)
 	})
 });
+/**
+* The approval page (`/approve/<id>`) had to ask for sign-in before the person
+* could review: the browser had no session (`signed_out`), or held a different
+* account than the one that must sign (`wrong_account`). The browser's session
+* is separate from the CLI's, so this is the cost of the hand-off. It carries no
+* email or account of either side.
+*/
+const UiApprovalSignInRequiredTelemetryEventSchema = Schema.Struct({
+	name: Schema.Literal("ui_approval_sign_in_required"),
+	props: Schema.Struct({
+		...TelemetryEnvelopeProps,
+		approval_id: Schema.String,
+		reason: Schema.Literals(["signed_out", "wrong_account"])
+	})
+});
 const PayrollGroupChangedTelemetryEventSchema = Schema.Struct({
 	name: Schema.Literal("payroll_group_changed"),
 	props: Schema.Struct({
@@ -8551,6 +8640,8 @@ const CLI_COMMAND_NAMES = [
 	"payment.get",
 	"payment.wait",
 	"payment.retry",
+	"payment.cancel",
+	"payment.redirect",
 	"inbox",
 	CAPXUL_OPERATIONS.inbox.list,
 	"inbox.get",
@@ -8784,10 +8875,14 @@ const BootstrapFailedProps = Schema.Struct({
 });
 const MemberActivationStartedProps = Schema.Struct({
 	...TelemetryEnvelopeProps,
+	entry_path: JourneyVariantProps.entry_path,
+	surface: JourneyVariantProps.surface,
 	$insert_id: Schema.String
 });
 const MemberActivationReadyProps = Schema.Struct({
 	...TelemetryEnvelopeProps,
+	entry_path: JourneyVariantProps.entry_path,
+	surface: JourneyVariantProps.surface,
 	$insert_id: Schema.String,
 	duration_ms: DurationMsSchema
 });
@@ -8880,6 +8975,7 @@ const TELEMETRY_EVENT_SCHEMAS = {
 	payroll_group_changed: PayrollGroupChangedTelemetryEventSchema,
 	payroll_run_transitioned: PayrollRunTransitionedTelemetryEventSchema,
 	ui_payroll_action_completed: UiPayrollActionCompletedTelemetryEventSchema,
+	ui_approval_sign_in_required: UiApprovalSignInRequiredTelemetryEventSchema,
 	ui_contact_action_completed: UiContactActionCompletedTelemetryEventSchema,
 	cli_diagnostic_completed: CliDiagnosticCompletedTelemetryEventSchema,
 	cli_first_used: CliFirstUsedTelemetryEventSchema,
@@ -8923,12 +9019,6 @@ const TELEMETRY_EVENT_SCHEMAS = {
 	bundler_error: BundlerErrorTelemetryEventSchema,
 	receipt_pending: ReceiptPendingTelemetryEventSchema,
 	operation_retried: OperationRetriedTelemetryEventSchema,
-	org_create_started: OrgCreateStartedTelemetryEventSchema,
-	org_safe_created: OrgSafeCreatedTelemetryEventSchema,
-	org_safe_confirmed: OrgSafeConfirmedTelemetryEventSchema,
-	org_roles_seeded: OrgRolesSeededTelemetryEventSchema,
-	org_created: OrgCreatedTelemetryEventSchema,
-	org_create_failed: OrgCreateFailedTelemetryEventSchema,
 	org_invite_sent: OrgInviteSentTelemetryEventSchema,
 	org_invite_accepted: OrgInviteAcceptedTelemetryEventSchema,
 	org_invite_expired: OrgInviteExpiredTelemetryEventSchema,
@@ -8953,14 +9043,7 @@ const FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS = [];
 * A domain node removes its entry when it adds the producer. The telemetry
 * gate rejects an entry that has a producer.
 */
-const CONTRACT_FIRST_TELEMETRY_EVENTS = [
-	"org_create_started",
-	"org_safe_created",
-	"org_safe_confirmed",
-	"org_roles_seeded",
-	"org_created",
-	"org_create_failed"
-];
+const CONTRACT_FIRST_TELEMETRY_EVENTS = [];
 /**
 * Catalog events whose product mapper remains gated on the #1150 frontend
 * adoption. L1 S1 removes their retired SDK-flow producers without inventing
@@ -8981,7 +9064,8 @@ const BROWSER_GATED_TELEMETRY_EVENTS = [
 	"ui_invoice_step_completed",
 	"ui_treasury_step_completed",
 	"ui_receive_step_completed",
-	"ui_payroll_action_completed"
+	"ui_payroll_action_completed",
+	"ui_approval_sign_in_required"
 ];
 //#endregion
 //#region src/telemetry/track.ts
@@ -9541,4 +9625,4 @@ var InMemoryTelemetryBusAdapter = class extends EventOnlyPort {
 	}
 };
 //#endregion
-export { UiAccessStepCompletedTelemetryEventSchema as $, PII as $t, ProvisioningSafeConfirmedTelemetryEventSchema as A, BundlerErrorTelemetryEventSchema as At, AuthFailedTelemetryEventSchema as B, FaucetRequestedTelemetryEventSchema as Bt, MemberActivationFailedTelemetryEventSchema as C, OrgRolesSeededTelemetryEventSchema as Ct, OnboardingIntentSelectedTelemetryEventSchema as D, OrganizationCreationReadyTelemetryEventSchema as Dt, OnboardingDashboardReachedTelemetryEventSchema as E, OrganizationCreationFailedTelemetryEventSchema as Et, CliFirstUsedTelemetryEventSchema as F, AccountBalanceReadTelemetryEventSchema as Ft, AuthVerifiedTelemetryEventSchema as G, PaymentVerificationRetryTelemetryEventSchema as Gt, AuthOtpExpiredTelemetryEventSchema as H, PaymentInitiatedTelemetryEventSchema as Ht, CLI_CAPABILITIES as I, DepositInitiatedTelemetryEventSchema as It, NativeAuthorizationConnectedTelemetryEventSchema as J, ChainAttemptSchema as Jt, IdentityRefusedTelemetryEventSchema as K, QuickPayExternalAddressAcknowledgedTelemetryEventSchema as Kt, CLI_COMMAND_NAMES as L, DepositSettledTelemetryEventSchema as Lt, CliCommandCompletedTelemetryEventSchema as M, OperationRetriedTelemetryEventSchema as Mt, CliCommandStartedTelemetryEventSchema as N, ReceiptPendingTelemetryEventSchema as Nt, OnboardingOrganizationSubmittedTelemetryEventSchema as O, OrganizationCreationStartedTelemetryEventSchema as Ot, CliDiagnosticCompletedTelemetryEventSchema as P, AccountBalanceFailedTelemetryEventSchema as Pt, NativeAuthorizationStartedTelemetryEventSchema as Q, FailureModeSchema as Qt, CLI_INVOCATION_KINDS as R, FaucetConfirmedTelemetryEventSchema as Rt, BootstrapResolvedTelemetryEventSchema as S, OrgInviteSentTelemetryEventSchema as St, MemberActivationStartedTelemetryEventSchema as T, OrgSafeCreatedTelemetryEventSchema as Tt, AuthOtpRequestedTelemetryEventSchema as U, PaymentLifecycleTransitionTelemetryEventSchema as Ut, AuthOtpDeliveredTelemetryEventSchema as V, PaymentFailedTelemetryEventSchema as Vt, AuthSignedOutTelemetryEventSchema as W, PaymentSettledTelemetryEventSchema as Wt, NativeAuthorizationFailedTelemetryEventSchema as X, EXCEPTION_EVENT_NAME as Xt, NativeAuthorizationDeniedTelemetryEventSchema as Y, ChainUpstreamSchema as Yt, NativeAuthorizationReviewedTelemetryEventSchema as Z, EXPECTED_OUTCOME_EVENT_NAME as Zt, CONTRACT_FIRST_TELEMETRY_EVENTS as _, OrgCreateStartedTelemetryEventSchema as _t, initializeCapxulBrowserAnalytics as a, TELEMETRY_EVENT_NAMES as an, UiPayrollActionCompletedTelemetryEventSchema as at, TELEMETRY_EVENT_SCHEMAS as b, OrgInviteExpiredTelemetryEventSchema as bt, utilityAppAnalytics as c, normalizeCapxulOperation as cn, ActivityAnnotationSavedTelemetryEventSchema as ct, redactTelemetryEvent as d, redactSecrets as dn, MovementScanCheckpointTelemetryEventSchema as dt, ResponseHeadersSchema as en, InvoiceIssuedTelemetryEventSchema as et, redactTelemetryProps as f, redactUrlSecrets as fn, MovementScanIncidentTelemetryEventSchema as ft, BROWSER_GATED_TELEMETRY_EVENTS as g, OrgCreateFailedTelemetryEventSchema as gt, track as h, FAILURE_MODES as hn, ContactRelationshipChangedTelemetryEventSchema as ht, createPostHogBrowserPageviewTracker as i, TELEMETRY_JOURNEYS as in, UiInvoiceStepCompletedTelemetryEventSchema as it, ProvisioningSafeCreatedTelemetryEventSchema as j, ChainUpstreamFallbackTelemetryEventSchema as jt, OnboardingProfileSubmittedTelemetryEventSchema as k, UiContactActionCompletedTelemetryEventSchema as kt, sanitizePostHogBrowserEvent as l, ORGANIZATION_SETUP_REASONS as ln, UiActivityActionCompletedTelemetryEventSchema as lt, setTrackHandler as m, CAPXUL_ERROR_CODES as mn, PermissionMirrorVerificationTelemetryEventSchema as mt, RecordingTelemetryAdapter as n, TELEMETRY_PRODUCERS as nn, PayrollGroupChangedTelemetryEventSchema as nt, initializePostHogBrowserAnalytics as o, CAPXUL_OPERATIONS as on, UiReceiveStepCompletedTelemetryEventSchema as ot, getTrackHandler as p, isCredentialField as pn, MovementScanWindowTelemetryEventSchema as pt, NativeAuthorizationAcceptedTelemetryEventSchema as q, CAPXUL_ENVS as qt, createCapxulBeforeSend as r, stampTelemetryEnvelope as rn, PayrollRunTransitionedTelemetryEventSchema as rt, productAppAnalytics as s, isCapxulOperation as sn, UiTreasuryStepCompletedTelemetryEventSchema as st, InMemoryTelemetryBusAdapter as t, SYNCABLE_CAPXUL_ENVS as tn, InvoiceRequestTransitionedTelemetryEventSchema as tt, maskCapturedNetworkRequest as u, ORGANIZATION_SETUP_STATUSES as un, IndexerDriftCorrectedTelemetryEventSchema as ut, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS as v, OrgCreatedTelemetryEventSchema as vt, MemberActivationReadyTelemetryEventSchema as w, OrgSafeConfirmedTelemetryEventSchema as wt, BootstrapFailedTelemetryEventSchema as x, OrgInviteProgressedTelemetryEventSchema as xt, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS as y, OrgInviteAcceptedTelemetryEventSchema as yt, AccessRecoveryCompletedTelemetryEventSchema as z, FaucetFailedTelemetryEventSchema as zt };
+export { UiAccessStepCompletedTelemetryEventSchema as $, SDK_EXPECTED_OUTCOME_EVENT_NAME as $t, ProvisioningSafeConfirmedTelemetryEventSchema as A, AccountBalanceReadTelemetryEventSchema as At, AuthFailedTelemetryEventSchema as B, PaymentVerificationRetryTelemetryEventSchema as Bt, MemberActivationFailedTelemetryEventSchema as C, OrganizationCreationStartedTelemetryEventSchema as Ct, OnboardingIntentSelectedTelemetryEventSchema as D, OperationRetriedTelemetryEventSchema as Dt, OnboardingDashboardReachedTelemetryEventSchema as E, ChainUpstreamFallbackTelemetryEventSchema as Et, CliFirstUsedTelemetryEventSchema as F, FaucetRequestedTelemetryEventSchema as Ft, AuthVerifiedTelemetryEventSchema as G, ChainAttemptSchema as Gt, AuthOtpExpiredTelemetryEventSchema as H, JOURNEYS as Ht, CLI_CAPABILITIES as I, PaymentFailedTelemetryEventSchema as It, NativeAuthorizationConnectedTelemetryEventSchema as J, EXPECTED_OUTCOME_EVENT_NAME as Jt, IdentityRefusedTelemetryEventSchema as K, ChainUpstreamSchema as Kt, CLI_COMMAND_NAMES as L, PaymentInitiatedTelemetryEventSchema as Lt, CliCommandCompletedTelemetryEventSchema as M, DepositSettledTelemetryEventSchema as Mt, CliCommandStartedTelemetryEventSchema as N, FaucetConfirmedTelemetryEventSchema as Nt, OnboardingOrganizationSubmittedTelemetryEventSchema as O, ReceiptPendingTelemetryEventSchema as Ot, CliDiagnosticCompletedTelemetryEventSchema as P, FaucetFailedTelemetryEventSchema as Pt, NativeAuthorizationStartedTelemetryEventSchema as Q, ResponseHeadersSchema as Qt, CLI_INVOCATION_KINDS as R, PaymentLifecycleTransitionTelemetryEventSchema as Rt, BootstrapResolvedTelemetryEventSchema as S, OrganizationCreationReadyTelemetryEventSchema as St, MemberActivationStartedTelemetryEventSchema as T, BundlerErrorTelemetryEventSchema as Tt, AuthOtpRequestedTelemetryEventSchema as U, TELEMETRY_JOURNEYS as Ut, AuthOtpDeliveredTelemetryEventSchema as V, QuickPayExternalAddressAcknowledgedTelemetryEventSchema as Vt, AuthSignedOutTelemetryEventSchema as W, CAPXUL_ENVS as Wt, NativeAuthorizationFailedTelemetryEventSchema as X, JourneyVariantProps as Xt, NativeAuthorizationDeniedTelemetryEventSchema as Y, FailureModeSchema as Yt, NativeAuthorizationReviewedTelemetryEventSchema as Z, PII as Zt, CONTRACT_FIRST_TELEMETRY_EVENTS as _, OrgInviteAcceptedTelemetryEventSchema as _t, initializeCapxulBrowserAnalytics as a, isCapxulOperation as an, UiInvoiceStepCompletedTelemetryEventSchema as at, TELEMETRY_EVENT_SCHEMAS as b, OrgInviteSentTelemetryEventSchema as bt, utilityAppAnalytics as c, ORGANIZATION_SETUP_STATUSES as cn, UiTreasuryStepCompletedTelemetryEventSchema as ct, redactTelemetryEvent as d, isCredentialField as dn, IndexerDriftCorrectedTelemetryEventSchema as dt, SYNCABLE_CAPXUL_ENVS as en, InvoiceIssuedTelemetryEventSchema as et, redactTelemetryProps as f, CAPXUL_ERROR_CODES as fn, MovementScanCheckpointTelemetryEventSchema as ft, BROWSER_GATED_TELEMETRY_EVENTS as g, ContactRelationshipChangedTelemetryEventSchema as gt, track as h, PermissionMirrorVerificationTelemetryEventSchema as ht, createPostHogBrowserPageviewTracker as i, CAPXUL_OPERATIONS as in, UiApprovalSignInRequiredTelemetryEventSchema as it, ProvisioningSafeCreatedTelemetryEventSchema as j, DepositInitiatedTelemetryEventSchema as jt, OnboardingProfileSubmittedTelemetryEventSchema as k, AccountBalanceFailedTelemetryEventSchema as kt, sanitizePostHogBrowserEvent as l, redactSecrets as ln, ActivityAnnotationSavedTelemetryEventSchema as lt, setTrackHandler as m, MovementScanWindowTelemetryEventSchema as mt, RecordingTelemetryAdapter as n, stampTelemetryEnvelope as nn, PayrollGroupChangedTelemetryEventSchema as nt, initializePostHogBrowserAnalytics as o, normalizeCapxulOperation as on, UiPayrollActionCompletedTelemetryEventSchema as ot, getTrackHandler as p, FAILURE_MODES as pn, MovementScanIncidentTelemetryEventSchema as pt, NativeAuthorizationAcceptedTelemetryEventSchema as q, EXCEPTION_EVENT_NAME as qt, createCapxulBeforeSend as r, TELEMETRY_EVENT_NAMES as rn, PayrollRunTransitionedTelemetryEventSchema as rt, productAppAnalytics as s, ORGANIZATION_SETUP_REASONS as sn, UiReceiveStepCompletedTelemetryEventSchema as st, InMemoryTelemetryBusAdapter as t, TELEMETRY_PRODUCERS as tn, InvoiceRequestTransitionedTelemetryEventSchema as tt, maskCapturedNetworkRequest as u, redactUrlSecrets as un, UiActivityActionCompletedTelemetryEventSchema as ut, FINANCIAL_OPS_TARGET_TELEMETRY_PRODUCERS as v, OrgInviteExpiredTelemetryEventSchema as vt, MemberActivationReadyTelemetryEventSchema as w, UiContactActionCompletedTelemetryEventSchema as wt, BootstrapFailedTelemetryEventSchema as x, OrganizationCreationFailedTelemetryEventSchema as xt, PRODUCT_MAPPER_GATED_TELEMETRY_EVENTS as y, OrgInviteProgressedTelemetryEventSchema as yt, AccessRecoveryCompletedTelemetryEventSchema as z, PaymentSettledTelemetryEventSchema as zt };