@capxul/sandbox 4.20.0-beta.24 → 4.20.0-beta.27

package/dist/main.mjs

@@ -12940,12 +12940,17 @@ const Errors = {
 	* a PERMISSION denial — explicitly NOT an `INSUFFICIENT_BALANCE` (the treasury
 	* held the funds; the role's authority is what bound). `reason` discriminates
 	* the violated condition (`over_cap` / `daily_cap` / `not_member` /
-	* `disallowed_recipient` / `condition_violation`); leak-safe — no on-chain
-	* identifiers ever enter the details.
+	* `disallowed_recipient` / `condition_violation` / `budget_exhausted`);
+	* no Safe, Roles module or role key enters the details.
+	* `budget_exhausted` carries what the Budget's allowance still holds and
+	* what the spend needs, as asset amounts in major units (#2297); the asset
+	* id names the public token contract.
 	*/
-	rolePermissionDenied: (details) => new CapxulError("ROLE_PERMISSION_DENIED", `Org role denied this spend on-chain (${details.reason}).`, { details: details.operation === void 0 ? { reason: details.reason } : {
+	rolePermissionDenied: (details) => new CapxulError("ROLE_PERMISSION_DENIED", `Org role denied this spend on-chain (${details.reason}).`, { details: {
 		reason: details.reason,
-		operation: details.operation
+		...details.operation === void 0 ? {} : { operation: details.operation },
+		...details.remaining === void 0 ? {} : { remaining: details.remaining },
+		...details.required === void 0 ? {} : { required: details.required }
 	} }),
 	/**
 	* A transaction (or sponsored UserOp) failed. `details.reason` discriminates
@@ -13877,7 +13882,7 @@ const ActivityItemSchema = Union([Struct({
 }), Struct({
 	kind: Literal("movement"),
 	id: String$1,
-	classification: Literal("movement_only_outflow"),
+	classification: Literals(["deposit", "movement_only_outflow"]),
 	amount: Amount,
 	direction: Direction,
 	counterpartyLabel: String$1,
@@ -16216,10 +16221,19 @@ const ApprovalNetworkSchema = Struct({
 	name: String$1,
 	explorerUrl: String$1
 });
+/**
+* Whose money the operation moves: the person's own, or an Organization's,
+* which a reader follows through that Organization's scope.
+*/
+const ApprovalActorSchema = Union([Struct({ kind: Literal("personal") }), Struct({
+	kind: Literal("organization"),
+	orgId: NonEmptyString
+})]);
 /** What the person reads before they sign. */
 const ApprovalSummarySchema = Struct({
 	title: String$1,
 	from: Struct({
+		kind: Literals(["personal", "organization"]),
 		label: String$1,
 		address: AddressSchema$1
 	}),
@@ -16241,6 +16255,7 @@ const ApprovalSchema = Struct({
 	url: String$1,
 	kind: Literals(APPROVAL_KINDS),
 	state: Literals(APPROVAL_STATES),
+	actor: ApprovalActorSchema,
 	summary: ApprovalSummarySchema,
 	operation: ApprovalOperationSchema,
 	/** Who must sign: the owner key of the paying Safe. */
@@ -16473,7 +16488,44 @@ const approvals = {
 		]
 	})
 };
+/**
+* The home screen in one read. A section whose read failed is null, so the
+* caller shows it as unavailable, never as empty.
+*/
+const HomeSchema = Struct({
+	email: String$1,
+	actingAs: Union([Struct({ kind: Literal("personal") }), Struct({
+		kind: Literal("organization"),
+		orgId: String$1
+	})]),
+	/** The acting Safe's position in each settlement asset of its chain. */
+	balances: NullOr(ArraySchema(AssetPositionSchema)),
+	/** The ids of what waits on the caller, newest first. */
+	needsYou: NullOr(Struct({
+		requestsToPay: ArraySchema(String$1),
+		payrollToApprove: ArraySchema(String$1),
+		paymentsToRetry: ArraySchema(String$1)
+	})),
+	/** The newest rows of the actor's activity. */
+	recentActivity: NullOr(ArraySchema(ActivityItemSchema))
+});
 const summaries = {
+	/**
+	* Where the caller acts, its balances, what needs it and its newest activity,
+	* for the person or for an Organization they take part in. One round trip.
+	*/
+	home: Operation.action("accounts.summaries.home", {
+		input: Struct({
+			chainId: ChainIdSchema$1,
+			orgId: optionalKey(NonEmptyString)
+		}),
+		output: HomeSchema,
+		errors: [
+			...CALL$10,
+			...DEFECTS,
+			"ROLE_PERMISSION_DENIED"
+		]
+	}),
 	/** The signed-in person: id, verified email and Profile display name. */
 	me: Operation.query("accounts.summaries.me", {
 		input: Struct({}),
@@ -18793,7 +18845,11 @@ const OrgId$2 = NonEmptyString;
 const CALL$4 = ["NOT_AUTHENTICATED", "INVALID_INPUT"];
 /** The caller's own Account and Safe, which a Payment is signed from. */
 const ACCOUNT$1 = ["SMART_ACCOUNT_MISSING", "ACCOUNT_NOT_FOUND"];
-/** Not a participant of the Organization, or no Budget in it that may pay for this. */
+/**
+* Not a participant of the Organization, no Budget in it that may pay for
+* this, or a Budget whose on-chain allowance holds less than the batch spends
+* (`budget_exhausted`, naming what is left).
+*/
 const DENIED$1 = ["ROLE_PERMISSION_DENIED"];
 /** The command, its Payment or its execution is not in a state this applies to. */
 const STATE$3 = ["WRONG_STATE"];
@@ -19102,7 +19158,9 @@ const OneOrganization = Struct({ orgId: OrgId$1 });
 const CALL$3 = ["NOT_AUTHENTICATED", "INVALID_INPUT"];
 /**
 * The caller does not take part in the Organization, or holds no Budget in it
-* that may pay for this. A caller outside the Organization learns nothing more.
+* that may pay for this, or the Budget's on-chain allowance holds less than the
+* run pays (`budget_exhausted`, naming what is left). A caller outside the
+* Organization learns nothing more.
 */
 const DENIED = ["ROLE_PERMISSION_DENIED"];
 /**
@@ -20710,7 +20768,11 @@ const ORGANIZATION_OPERATIONS = {
 			seedNativeReadiness: "operator.fixtures.seedNativeReadiness",
 			seedPrerequisites: "operator.fixtures.seedPrerequisites"
 		},
-		identities: { purgeByEmail: "operator.identities.purgeByEmail" }
+		identities: {
+			purgeByEmail: "operator.identities.purgeByEmail",
+			/** One Account and every row that refers to it, unless it has Payments or an Organization tie. */
+			purgeAccount: "operator.identities.purgeAccount"
+		}
 	},
 	/** Organizations' internal functions; its public rows join from `OPERATIONS`. */
 	organizations: {
@@ -20804,7 +20866,9 @@ emitSaved: "activity.annotations.emitSaved" },
 			linkObservation: "payments.commands.linkObservation",
 			failPrepared: "payments.commands.failPrepared",
 			loadContext: "payments.commands.loadContext",
-			loadExecutionContext: "payments.commands.loadExecutionContext"
+			loadExecutionContext: "payments.commands.loadExecutionContext",
+			/** The capped Budget a prepared Organization command spends from, before its allowance is read on chain. */
+			loadBudgetAllowance: "payments.commands.loadBudgetAllowance"
 		},
 		lifecycles: { prepareIntent: "payments.lifecycles.prepareIntent" },
 		/** The stored UserOperation of every money command: Payment, Permission and configuration. */
@@ -20958,7 +21022,11 @@ const PLATFORM_OPERATIONS = {
 			recordUse: "applications.bootstraps.recordUse",
 			resolve: "applications.bootstraps.resolve"
 		},
-		keys: { issue: "applications.keys.issue" },
+		keys: {
+			issue: "applications.keys.issue",
+			/** Operator-only: revoke one key by its id, whoever owns it. */
+			revokeById: "applications.keys.revokeById"
+		},
 		quickstarts: {
 			claim: "applications.quickstarts.claim",
 			mint: "applications.quickstarts.mint"
@@ -22288,95 +22356,83 @@ Struct({
 });
 //#endregion
 //#region ../../packages/observability/src/catalog/cli.ts
-/** One completed online CLI diagnostic. No command input or provider text. */
+/** Every command path of the `capxul` tree, dot-separated, plus the root and `unknown`. */
 const CLI_COMMAND_NAMES = [
-	"status",
-	"request",
-	"request.list",
-	"request.get",
-	"request.cancel",
-	"offer",
-	"offer.create",
-	"offer.list",
-	"offer.get",
-	"offer.revise",
-	"offer.deactivate",
-	"org.offer",
-	"org.offer.create",
-	"org.offer.list",
-	"org.offer.get",
-	"org.offer.revise",
-	"org.offer.deactivate",
-	"request.issue",
-	"inbox",
-	CAPXUL_OPERATIONS.inbox.list,
-	"inbox.get",
-	"inbox.pay",
-	CAPXUL_OPERATIONS.inbox.decline,
-	"org.request",
-	"org.request.list",
-	"org.request.get",
-	"org.request.cancel",
-	"org.request.issue",
-	"org.inbox",
-	CAPXUL_OPERATIONS.org.inbox.list,
-	"org.inbox.get",
-	"org.inbox.pay",
-	CAPXUL_OPERATIONS.org.inbox.decline,
 	"capxul",
+	"home",
 	"whoami",
 	"use",
 	"use.personal",
 	"use.org",
 	"use.env",
-	"doctor",
-	"telemetry",
-	"telemetry.status",
-	"telemetry.enable",
-	"telemetry.disable",
 	"auth",
 	"auth.login",
-	"auth.signup",
-	"auth.send",
 	"auth.verify",
 	"auth.switch",
-	"auth.profile",
-	"auth.status",
 	"auth.logout",
 	"account",
-	CAPXUL_OPERATIONS.account.status,
-	CAPXUL_OPERATIONS.account.balance,
-	"account.deposit",
+	"account.show",
 	"account.retry",
-	"document",
-	"document.get",
-	"document.verify",
-	"document.render",
-	"document.export",
+	"balance",
+	"address",
 	"payment",
+	"payment.send",
 	"payment.list",
 	"payment.get",
 	"payment.wait",
-	"payment.send",
 	"payment.retry",
-	"activity",
-	"activity.list",
-	"activity.get",
-	"activity.summary",
-	"activity.annotate",
+	"inbox",
+	CAPXUL_OPERATIONS.inbox.list,
+	"inbox.get",
+	"inbox.pay",
+	CAPXUL_OPERATIONS.inbox.decline,
+	"request",
+	"request.issue",
+	"request.list",
+	"request.get",
+	"request.cancel",
+	"offer",
+	"offer.create",
+	"offer.list",
+	"offer.get",
+	"offer.revise",
+	"offer.deactivate",
 	"contact",
+	"contact.add",
 	"contact.list",
 	"contact.get",
-	"contact.add",
 	"contact.label",
 	"contact.hide",
 	"contact.unhide",
+	"document",
+	"document.get",
+	"document.render",
+	"document.export",
+	"document.verify",
+	"activity",
+	"activity.list",
+	"activity.get",
+	"activity.summary",
+	"activity.annotate",
+	"invite",
+	"invite.list",
+	"invite.accept",
+	"invite.decline",
 	"org",
 	CAPXUL_OPERATIONS.org.list,
-	"org.status",
+	CAPXUL_OPERATIONS.org.create,
+	"org.show",
 	CAPXUL_OPERATIONS.org.me,
-	"org.balance",
-	"org.deposit",
+	"org.wait",
+	CAPXUL_OPERATIONS.org.retry,
+	"org.member",
+	"org.member.list",
+	"org.member.get",
+	"org.member.invite",
+	CAPXUL_OPERATIONS.org.invite,
+	"org.invite.list",
+	"org.invite.cancel",
+	"org.invite.resend",
 	"org.permission",
 	"org.permission.list",
 	"org.permission.get",
@@ -22388,46 +22444,32 @@ const CLI_COMMAND_NAMES = [
 	"org.permission.command",
 	"org.permission.command.get",
 	"org.permission.command.wait",
-	CAPXUL_OPERATIONS.org.payment,
-	"org.payment.list",
-	"org.payment.get",
-	"org.payment.wait",
-	"org.payment.retry",
-	"org.payment.send",
 	"org.payroll",
+	"org.payroll.run",
+	"org.payroll.list",
+	"org.payroll.get",
+	"org.payroll.wait",
+	CAPXUL_OPERATIONS.org.payroll.terms,
 	"org.payroll.groups",
 	CAPXUL_OPERATIONS.org.payroll.groups.list,
 	CAPXUL_OPERATIONS.org.payroll.groups.save,
 	CAPXUL_OPERATIONS.org.payroll.groups.remove,
-	CAPXUL_OPERATIONS.org.payroll.terms,
-	"org.payroll.list",
-	"org.payroll.run",
-	"org.payroll.get",
-	"org.payroll.wait",
-	CAPXUL_OPERATIONS.org.members,
-	"org.member",
-	"org.member.get",
-	"org.member.invite",
-	"org.contact",
-	"org.contact.list",
-	"org.contact.get",
-	"org.contact.add",
-	"org.contact.label",
-	"org.contact.hide",
-	"org.contact.unhide",
-	CAPXUL_OPERATIONS.org.invite,
-	"org.invite.list",
+	"config",
+	"config.telemetry",
+	"config.telemetry.on",
+	"config.telemetry.off",
+	"config.telemetry.status",
+	"invite.get",
+	"invite.review",
+	"invite.wait",
 	"org.invite.get",
 	"org.invite.wait",
-	"org.invite.review",
-	"org.invite.accept",
-	"org.invite.decline",
-	"org.invite.cancel",
-	"org.invite.resend",
 	"org.invite.retry",
-	"org.wait",
-	CAPXUL_OPERATIONS.org.create,
-	CAPXUL_OPERATIONS.org.retry,
+	"schema",
+	"doctor",
+	"dev",
+	"dev.key",
+	"dev.fund",
 	"unknown"
 ];
 const CLI_CAPABILITIES = [
@@ -24643,6 +24685,14 @@ function statusFromAccount(account, requirement) {
 		}
 	};
 }
+Struct({
+	permissionId: AuthorizePayrollRunExecutionInputSchema.fields.permissionId,
+	asset: AuthorizePayrollRunExecutionInputSchema.fields.asset,
+	period: AuthorizePayrollRunExecutionInputSchema.fields.period,
+	items: AuthorizePayrollRunExecutionInputSchema.fields.items,
+	requestKey: optional(AuthorizePayrollRunExecutionInputSchema.fields.requestKey)
+});
+runs.authorize.name;
 //#endregion
 //#region ../../packages/sdk/src/platform/transport/wire.ts
 /**
@@ -24869,7 +24919,6 @@ gen$2(function* () {
 	yield* promise(() => emitProvisioningTelemetry(deps.telemetry, provisioned, deps.runPromise));
 	return provisioned;
 });
-new Set(IDENTITY_EVENT_TAGS);
 Object.freeze({
 	terminal: false,
 	outcome: null,
@@ -24895,6 +24944,7 @@ Object.freeze({
 	outcome: "neutral",
 	needsAction: false
 });
+new Set(IDENTITY_EVENT_TAGS);
 //#endregion
 //#region ../../node_modules/.pnpm/zodiac-roles-deployments@2.5.0/node_modules/zodiac-roles-deployments/build/cjs/chains.js
 var require_chains = /* @__PURE__ */ __commonJSMin(((exports) => {
@@ -33552,14 +33602,6 @@ Roles__factory.createInterface();
 toFunctionSelector("setAllowance(bytes32,uint128,uint128,uint128,uint64,uint64)");
 toFunctionSelector("setTransactionUnwrapper(address,bytes4,address)");
 toFunctionSelector("assignRoles(address,bytes32[],bool[])");
-Struct({
-	permissionId: AuthorizePayrollRunExecutionInputSchema.fields.permissionId,
-	asset: AuthorizePayrollRunExecutionInputSchema.fields.asset,
-	period: AuthorizePayrollRunExecutionInputSchema.fields.period,
-	items: AuthorizePayrollRunExecutionInputSchema.fields.items,
-	requestKey: optional(AuthorizePayrollRunExecutionInputSchema.fields.requestKey)
-});
-runs.authorize.name;
 Struct({
 	token: optional(NullOr(String$1)),
 	session: optional(NullOr(Struct({ token: optional(NullOr(String$1)) })))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/sandbox",
-  "version": "4.20.0-beta.24",
+  "version": "4.20.0-beta.27",
   "private": false,
   "description": "Capxul sandbox CLI for canonical quickstart keys and testnet faucet funds.",
   "keywords": [
@@ -42,9 +42,9 @@
     "typescript": "npm:@typescript/typescript6@6.0.2",
     "vite": "npm:@voidzero-dev/vite-plus-core@1.0.0",
     "vite-plus": "1.0.0",
-    "@capxul/observability": "4.20.0-beta.24",
-    "@capxul/protocol": "0.2.0-beta.0",
-    "@capxul/sdk": "4.20.0-beta.24",
+    "@capxul/observability": "4.20.0-beta.27",
+    "@capxul/protocol": "0.2.0-beta.1",
+    "@capxul/sdk": "4.20.0-beta.27",
     "@capxul/typescript-config": "0.0.0"
   },
   "scripts": {