@capxul/sandbox 4.20.0-beta.26 → 4.20.0-beta.28

package/dist/main.mjs

@@ -8853,28 +8853,28 @@ function formatCheck(check) {
 * @since 4.0.0
 */
 function makeFormatterDefault() {
-	return (issue) => formatIssue(issue, "");
+	return (issue) => formatIssue$1(issue, "");
 }
 /** @internal */
 const defaultFormatter = /*#__PURE__*/ makeFormatterDefault();
-function formatIssue(issue, path) {
+function formatIssue$1(issue, path) {
 	let message;
 	switch (issue._tag) {
 		case "Filter": {
 			const annotated = defaultCheckHook(issue);
 			if (annotated !== void 0) message = annotated;
 			else {
-				if (issue.issue._tag !== "InvalidValue") return formatIssue(issue.issue, path);
+				if (issue.issue._tag !== "InvalidValue") return formatIssue$1(issue.issue, path);
 				const expected = findExpected(issue.issue);
 				message = expected === void 0 ? getExpectedMessage(formatCheck(issue.filter), issue) : getExpectedMessage(expected, issue.issue);
 			}
 			break;
 		}
-		case "Encoding": return formatIssue(issue.issue, path);
-		case "Pointer": return formatIssue(issue.issue, path + formatPath(issue.path));
+		case "Encoding": return formatIssue$1(issue.issue, path);
+		case "Pointer": return formatIssue$1(issue.issue, path + formatPath(issue.path));
 		case "Composite":
 		case "AnyOf":
-			if (issue._tag === "Composite" || issue.issues.length > 0) return issue.issues.map((issue) => formatIssue(issue, path)).join("\n");
+			if (issue._tag === "Composite" || issue.issues.length > 0) return issue.issues.map((issue) => formatIssue$1(issue, path)).join("\n");
 			message = findMessage(issue) ?? getExpectedMessage(getExpected(issue.ast), issue);
 			break;
 		default: message = defaultLeafHook(issue);
@@ -16221,10 +16221,19 @@ const ApprovalNetworkSchema = Struct({
 	name: String$1,
 	explorerUrl: String$1
 });
+/**
+* Whose money the operation moves: the person's own, or an Organization's,
+* which a reader follows through that Organization's scope.
+*/
+const ApprovalActorSchema = Union([Struct({ kind: Literal("personal") }), Struct({
+	kind: Literal("organization"),
+	orgId: NonEmptyString
+})]);
 /** What the person reads before they sign. */
 const ApprovalSummarySchema = Struct({
 	title: String$1,
 	from: Struct({
+		kind: Literals(["personal", "organization"]),
 		label: String$1,
 		address: AddressSchema$1
 	}),
@@ -16246,6 +16255,7 @@ const ApprovalSchema = Struct({
 	url: String$1,
 	kind: Literals(APPROVAL_KINDS),
 	state: Literals(APPROVAL_STATES),
+	actor: ApprovalActorSchema,
 	summary: ApprovalSummarySchema,
 	operation: ApprovalOperationSchema,
 	/** Who must sign: the owner key of the paying Safe. */
@@ -16916,6 +16926,15 @@ const probes = {
 	})
 };
 //#endregion
+//#region ../../packages/protocol/src/evm/role-dsl.ts
+/**
+* How a capped Budget's allowance refills (#2298). `monthly` refills the
+* allowance to its cap every 30 days. Roles v2 counts fixed periods from the
+* moment the allowance is set; it has no calendar month. Absent means `none`:
+* the cap is one pot that spending drains for good.
+*/
+const ORG_BUDGET_REFILLS = ["monthly", "none"];
+//#endregion
 //#region ../../packages/protocol/src/permissions/permission-schema.ts
 /**
 * One stored `setAllowance` call inside a command's expected authority set.
@@ -16954,12 +16973,19 @@ const BudgetScopeSchema = Struct({
 	})]),
 	actions: NonEmptyArray(Literals(["pay", "commitments"]))
 }).pipe(refine((scope) => new Set(scope.actions).size === scope.actions.length && (scope.recipients.type === "anyone" || scope.recipients.accounts.length >= 1 && scope.recipients.accounts.length <= 32 && new Set(scope.recipients.accounts).size === scope.recipients.accounts.length), { message: "Budget scope requires unique actions and one to 32 unique allowed Accounts" }));
+/**
+* How a capped Budget refills (#2298): `monthly` tops the cap back up every 30
+* days (a fixed Roles v2 period, not a calendar month); `none` never refills.
+* Absent means `none`, and writers store only `monthly`.
+*/
+const BudgetRefillSchema = Literals(ORG_BUDGET_REFILLS);
 /** The accepted product policy stored with one Permission revision. */
 const CurrentPolicySchema = Union([Struct({
 	type: Literal("budget"),
 	asset: AssetIdSchema,
 	limit: NullOr(String$1),
-	scope: BudgetScopeSchema
+	scope: BudgetScopeSchema,
+	refill: optional(BudgetRefillSchema)
 }), Struct({ type: Literal("managePeople") })]);
 const BudgetIntentSchema = CurrentPolicySchema.pipe(refine((value) => {
 	if (value.type !== "budget") return false;
@@ -17024,7 +17050,8 @@ const ResolvedPermissionBudgetPolicySchema = Struct({
 		"send",
 		"sendBatch",
 		"createCommitment"
-	]))
+	])),
+	refill: optional(BudgetRefillSchema)
 });
 const PermissionRecipientBindingSchema = Struct({
 	accountId: AccountIdSchema$1,
@@ -17036,14 +17063,16 @@ const StoredPermissionIntentSchema = Union([Struct({
 	type: Literal("budget"),
 	asset: AssetIdSchema,
 	limit: NullOr(AssetAmountSchema),
-	scope: optional(BudgetScopeSchema)
+	scope: optional(BudgetScopeSchema),
+	refill: optional(BudgetRefillSchema)
 }).pipe(refine((intent) => intent.limit === null || intent.limit.asset === intent.asset, { message: "Budget limit must use the Budget asset" })), Struct({ type: Literal("managePeople") })]);
 /** Writes state every granted right and use a finite positive AssetAmount cap. */
 const PermissionIntentSchema = Union([Struct({
 	type: Literal("budget"),
 	asset: AssetIdSchema,
 	limit: AssetAmountSchema,
-	scope: BudgetScopeSchema
+	scope: BudgetScopeSchema,
+	refill: optional(BudgetRefillSchema)
 }).pipe(refine((intent) => intent.limit.asset === intent.asset && /[1-9]/u.test(intent.limit.value), { message: "Budget cap must be positive and use the Budget asset" })), Struct({ type: Literal("managePeople") })]);
 //#endregion
 //#region ../../packages/protocol/src/permissions/replacement-schema.ts
@@ -17244,7 +17273,7 @@ const InvitePreviewRequestSchema = Struct({
 		Struct({
 			type: Literal("new_budget"),
 			label: String$1.pipe(refine((value) => value.trim().length >= 1 && value.trim().length <= 128)),
-			intent: BudgetIntentSchema
+			intent: BudgetIntentSchema.pipe(refine((intent) => intent.refill !== "monthly", { message: "An invitation's new Budget cannot refill; change it once granted" }))
 		})
 	])).pipe(refine((grants) => {
 		if (grants.length < 1 || grants.length > 16) return false;
@@ -20577,7 +20606,9 @@ const PEOPLE_OPERATIONS = {
 			emitSafeConfirmed: "accounts.safes.emitSafeConfirmed",
 			readSafe: "accounts.safes.readSafe",
 			recordDeployment: "accounts.safes.recordDeployment"
-		}
+		},
+		/** The home's requests to pay and Payments to retry, read in one query. */
+		summaries: { loadNeedsYou: "accounts.summaries.loadNeedsYou" }
 	},
 	/** The host observer's names for `client.approvals.*`. */
 	approvals: {
@@ -20758,7 +20789,11 @@ const ORGANIZATION_OPERATIONS = {
 			seedNativeReadiness: "operator.fixtures.seedNativeReadiness",
 			seedPrerequisites: "operator.fixtures.seedPrerequisites"
 		},
-		identities: { purgeByEmail: "operator.identities.purgeByEmail" }
+		identities: {
+			purgeByEmail: "operator.identities.purgeByEmail",
+			/** One Account and every row that refers to it, unless it has Payments or an Organization tie. */
+			purgeAccount: "operator.identities.purgeAccount"
+		}
 	},
 	/** Organizations' internal functions; its public rows join from `OPERATIONS`. */
 	organizations: {
@@ -20832,7 +20867,9 @@ emitSaved: "activity.annotations.emitSaved" },
 		pay: "organizationPayments.pay",
 		payBatch: "organizationPayments.payBatch",
 		prepareExecution: "organizationPayments.prepareExecution",
-		retry: "organizationPayments.retry"
+		retry: "organizationPayments.retry",
+		cancel: "organizationPayments.cancel",
+		redirect: "organizationPayments.redirect"
 	},
 	/**
 	* Payments' internal functions and the client's own method names; its public
@@ -20854,7 +20891,9 @@ emitSaved: "activity.annotations.emitSaved" },
 			loadContext: "payments.commands.loadContext",
 			loadExecutionContext: "payments.commands.loadExecutionContext",
 			/** The capped Budget a prepared Organization command spends from, before its allowance is read on chain. */
-			loadBudgetAllowance: "payments.commands.loadBudgetAllowance"
+			loadBudgetAllowance: "payments.commands.loadBudgetAllowance",
+			/** What a new Payment command would spend and from which Safe, read before it is born. */
+			loadBirthFunding: "payments.commands.loadBirthFunding"
 		},
 		lifecycles: { prepareIntent: "payments.lifecycles.prepareIntent" },
 		/** The stored UserOperation of every money command: Payment, Permission and configuration. */
@@ -21008,7 +21047,11 @@ const PLATFORM_OPERATIONS = {
 			recordUse: "applications.bootstraps.recordUse",
 			resolve: "applications.bootstraps.resolve"
 		},
-		keys: { issue: "applications.keys.issue" },
+		keys: {
+			issue: "applications.keys.issue",
+			/** Operator-only: revoke one key by its id, whoever owns it. */
+			revokeById: "applications.keys.revokeById"
+		},
 		quickstarts: {
 			claim: "applications.quickstarts.claim",
 			mint: "applications.quickstarts.mint"
@@ -21281,6 +21324,42 @@ const UiStepProps = {
 	organization_id: OptionalOrgId,
 	reason_code: OptionalReasonCode
 };
+/**
+* A journey's variants (`JOURNEYS`): the way a person came into a journey, or
+* the way they took through it. A variant is a property of the journey's step
+* events, never a journey of its own, so each journey funnel breaks down by
+* it. A step event takes only the variants that a journey contract names on
+* it, picked one by one; the analytics plan test checks both directions.
+* `pay_path` and `funding_source` have no carrier until their Phase 2 events.
+* `payment_*` events already carry `recipient_is_capxul_account`, and
+* `invoice_issued` carries `issuer_scope_kind`; neither is repeated here.
+*/
+const JourneyVariantProps = {
+	/** How a person came to Get started: by themselves, an invite, money that waited, or an invoice. */
+	entry_path: optional(Literals([
+		"signup",
+		"invite",
+		"claim",
+		"invoice"
+	])),
+	/** Where the person acted. `agent` is an AI agent driving the CLI. */
+	surface: optional(Literals([
+		"web",
+		"cli",
+		"agent"
+	])),
+	/** Who pays: a person from their own account, or an Organization from a Budget. */
+	payer_kind: optional(Literals(["person", "organization"])),
+	/** How a request was paid: from the payer's inbox, or by its link at checkout. */
+	pay_path: optional(Literals(["inbox", "link"])),
+	/** Where an account's first money came from. `bank` is the planned on-ramp. */
+	funding_source: optional(Literals([
+		"deposit",
+		"payment",
+		"claim",
+		"bank"
+	]))
+};
 //#endregion
 //#region ../../packages/observability/src/events/money.ts
 /**
@@ -21370,6 +21449,8 @@ const PaymentInitiatedProps = Struct({
 	execution_id: OptionalString,
 	payment_lifecycle_id: OptionalString,
 	...TelemetryEnvelopeProps,
+	payer_kind: JourneyVariantProps.payer_kind,
+	surface: JourneyVariantProps.surface,
 	...RecipientTelemetryProps,
 	kind: String$1,
 	payment_id: String$1
@@ -21385,6 +21466,8 @@ const PaymentLifecycleProps = {
 const PaymentSettledL2Props = Struct({
 	...PaymentLifecycleProps,
 	...TelemetryEnvelopeProps,
+	payer_kind: JourneyVariantProps.payer_kind,
+	surface: JourneyVariantProps.surface,
 	...RecipientTelemetryProps,
 	kind: String$1,
 	chain_id: Finite,
@@ -21592,6 +21675,7 @@ const OrganizationCreationStartedProps = Struct({
 });
 const OrganizationCreationReadyProps = Struct({
 	...TelemetryEnvelopeProps,
+	surface: JourneyVariantProps.surface,
 	$insert_id: String$1,
 	organization_id: OrgIdTelemetrySchema,
 	attempt_number: AttemptNumberSchema,
@@ -21616,45 +21700,6 @@ const OrganizationCreationFailedProps = Struct({
 		...ORGANIZATION_SETUP_REASONS
 	]))
 });
-const OrgCreateStartedProps = Struct({
-	...TelemetryEnvelopeProps,
-	org_id: OptionalOrgId,
-	email_domain: OptionalString,
-	template: OptionalString
-});
-const OrgSafeCreatedProps = Struct({
-	...TelemetryEnvelopeProps,
-	org_id: OptionalOrgId,
-	chainId: OptionalChainId,
-	safe_address: OptionalAddress
-});
-const OrgSafeConfirmedProps = Struct({
-	...TelemetryEnvelopeProps,
-	org_id: OptionalOrgId,
-	chainId: OptionalChainId,
-	safe_address: OptionalAddress,
-	durationMs: OptionalDurationMs
-});
-const OrgRolesSeededProps = Struct({
-	...TelemetryEnvelopeProps,
-	org_id: OptionalOrgId,
-	chainId: OptionalChainId,
-	role: OptionalString,
-	txHash: OptionalTxHash
-});
-const OrgCreatedProps = Struct({
-	...TelemetryEnvelopeProps,
-	org_id: OptionalOrgId,
-	chainId: OptionalChainId,
-	safe_address: OptionalAddress,
-	durationMs: OptionalDurationMs
-});
-const OrgCreateFailedProps = Struct({
-	...TelemetryEnvelopeProps,
-	...ChainCauseTelemetryProps,
-	org_id: OptionalOrgId,
-	reason: OptionalString
-});
 const OrgInviteSentProps = Struct({
 	...TelemetryEnvelopeProps,
 	org_id: OptionalOrgId,
@@ -21699,30 +21744,6 @@ Struct({
 	name: Literal("organization_creation_failed"),
 	props: OrganizationCreationFailedProps
 });
-Struct({
-	name: Literal("org_create_started"),
-	props: OrgCreateStartedProps
-});
-Struct({
-	name: Literal("org_safe_created"),
-	props: OrgSafeCreatedProps
-});
-Struct({
-	name: Literal("org_safe_confirmed"),
-	props: OrgSafeConfirmedProps
-});
-Struct({
-	name: Literal("org_roles_seeded"),
-	props: OrgRolesSeededProps
-});
-Struct({
-	name: Literal("org_created"),
-	props: OrgCreatedProps
-});
-Struct({
-	name: Literal("org_create_failed"),
-	props: OrgCreateFailedProps
-});
 Struct({
 	name: Literal("org_invite_sent"),
 	props: OrgInviteSentProps
@@ -22596,10 +22617,14 @@ const BootstrapFailedProps = Struct({
 });
 const MemberActivationStartedProps = Struct({
 	...TelemetryEnvelopeProps,
+	entry_path: JourneyVariantProps.entry_path,
+	surface: JourneyVariantProps.surface,
 	$insert_id: String$1
 });
 const MemberActivationReadyProps = Struct({
 	...TelemetryEnvelopeProps,
+	entry_path: JourneyVariantProps.entry_path,
+	surface: JourneyVariantProps.surface,
 	$insert_id: String$1,
 	duration_ms: DurationMsSchema
 });
@@ -22757,7 +22782,7 @@ const FIELD_RULES = {
 	},
 	anonymousId: {
 		maxLength: 128,
-		pattern: /^anon_[A-Za-z0-9-]+$/u
+		pattern: /^(?:anon_[A-Za-z0-9-]+|[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})$/u
 	},
 	traceparent: {
 		maxLength: 55,
@@ -24512,6 +24537,7 @@ function paymentsV2Signature(name) {
 paymentsV2Signature("send");
 paymentsV2Signature("sendBatch");
 paymentsV2Signature("createCommitment");
+paymentsV2Signature("cancel"), paymentsV2Signature("redirect");
 //#endregion
 //#region ../../packages/protocol/src/evm/organization-payments.ts
 /** Supported Organization permission identities, newest first. */
@@ -24667,6 +24693,14 @@ function statusFromAccount(account, requirement) {
 		}
 	};
 }
+Struct({
+	permissionId: AuthorizePayrollRunExecutionInputSchema.fields.permissionId,
+	asset: AuthorizePayrollRunExecutionInputSchema.fields.asset,
+	period: AuthorizePayrollRunExecutionInputSchema.fields.period,
+	items: AuthorizePayrollRunExecutionInputSchema.fields.items,
+	requestKey: optional(AuthorizePayrollRunExecutionInputSchema.fields.requestKey)
+});
+runs.authorize.name;
 //#endregion
 //#region ../../packages/sdk/src/platform/transport/wire.ts
 /**
@@ -33576,14 +33610,6 @@ Roles__factory.createInterface();
 toFunctionSelector("setAllowance(bytes32,uint128,uint128,uint128,uint64,uint64)");
 toFunctionSelector("setTransactionUnwrapper(address,bytes4,address)");
 toFunctionSelector("assignRoles(address,bytes32[],bool[])");
-Struct({
-	permissionId: AuthorizePayrollRunExecutionInputSchema.fields.permissionId,
-	asset: AuthorizePayrollRunExecutionInputSchema.fields.asset,
-	period: AuthorizePayrollRunExecutionInputSchema.fields.period,
-	items: AuthorizePayrollRunExecutionInputSchema.fields.items,
-	requestKey: optional(AuthorizePayrollRunExecutionInputSchema.fields.requestKey)
-});
-runs.authorize.name;
 Struct({
 	token: optional(NullOr(String$1)),
 	session: optional(NullOr(Struct({ token: optional(NullOr(String$1)) })))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/sandbox",
-  "version": "4.20.0-beta.26",
+  "version": "4.20.0-beta.28",
   "private": false,
   "description": "Capxul sandbox CLI for canonical quickstart keys and testnet faucet funds.",
   "keywords": [
@@ -42,9 +42,9 @@
     "typescript": "npm:@typescript/typescript6@6.0.2",
     "vite": "npm:@voidzero-dev/vite-plus-core@1.0.0",
     "vite-plus": "1.0.0",
-    "@capxul/observability": "4.20.0-beta.26",
-    "@capxul/protocol": "0.2.0-beta.0",
-    "@capxul/sdk": "4.20.0-beta.26",
+    "@capxul/observability": "4.20.0-beta.28",
+    "@capxul/protocol": "0.2.0-beta.2",
+    "@capxul/sdk": "4.20.0-beta.28",
     "@capxul/typescript-config": "0.0.0"
   },
   "scripts": {