@capxul/sandbox 4.20.0-beta.27 → 4.20.0-beta.29

package/dist/main.mjs

@@ -8853,28 +8853,28 @@ function formatCheck(check) {
 * @since 4.0.0
 */
 function makeFormatterDefault() {
-	return (issue) => formatIssue(issue, "");
+	return (issue) => formatIssue$1(issue, "");
 }
 /** @internal */
 const defaultFormatter = /*#__PURE__*/ makeFormatterDefault();
-function formatIssue(issue, path) {
+function formatIssue$1(issue, path) {
 	let message;
 	switch (issue._tag) {
 		case "Filter": {
 			const annotated = defaultCheckHook(issue);
 			if (annotated !== void 0) message = annotated;
 			else {
-				if (issue.issue._tag !== "InvalidValue") return formatIssue(issue.issue, path);
+				if (issue.issue._tag !== "InvalidValue") return formatIssue$1(issue.issue, path);
 				const expected = findExpected(issue.issue);
 				message = expected === void 0 ? getExpectedMessage(formatCheck(issue.filter), issue) : getExpectedMessage(expected, issue.issue);
 			}
 			break;
 		}
-		case "Encoding": return formatIssue(issue.issue, path);
-		case "Pointer": return formatIssue(issue.issue, path + formatPath(issue.path));
+		case "Encoding": return formatIssue$1(issue.issue, path);
+		case "Pointer": return formatIssue$1(issue.issue, path + formatPath(issue.path));
 		case "Composite":
 		case "AnyOf":
-			if (issue._tag === "Composite" || issue.issues.length > 0) return issue.issues.map((issue) => formatIssue(issue, path)).join("\n");
+			if (issue._tag === "Composite" || issue.issues.length > 0) return issue.issues.map((issue) => formatIssue$1(issue, path)).join("\n");
 			message = findMessage(issue) ?? getExpectedMessage(getExpected(issue.ast), issue);
 			break;
 		default: message = defaultLeafHook(issue);
@@ -16086,7 +16086,9 @@ const OrganizationPaymentExecutionItemSchema = Struct({
 		"invoice",
 		"payroll",
 		"reimbursement"
-	]))
+	])),
+	/** When the recipient gets it: instant (the default), or held until a date or over a period. */
+	timing: optional(PaymentTiming)
 }).check(makeFilter((value) => is(PaymentDocumentOptionsSchema)(value)));
 const PrepareOrganizationPaymentExecutionInputSchema = Struct({
 	orgId: nonEmpty("orgId"),
@@ -16196,11 +16198,20 @@ const PreparedPaymentCommandExecutionSchema = Struct({
 //#region ../../packages/protocol/src/accounts/approval-schema.ts
 const APPROVAL_ID_RE = /^approval_[0-9A-HJKMNP-TV-Z]{26}$/u;
 const ApprovalIdSchema = String$1.pipe(refine((value) => APPROVAL_ID_RE.test(value), { message: "must be approval_ plus a ULID" }));
-/** What is being approved. */
+/**
+* What is being approved. A `permission_change` creates, changes, assigns,
+* revokes or replaces an Organization's Permissions; an `invitation` sets up
+* the rights an invitation offers. Neither moves money. A `payment_cancel`
+* returns a held Payment to whoever funded it; a `payment_redirect` sends it
+* to someone else.
+*/
 const APPROVAL_KINDS = [
 	"payment",
 	"payroll_run",
+	"payment_cancel",
+	"payment_redirect",
 	"permission_change",
+	"invitation",
 	"bank_payout"
 ];
 /**
@@ -16424,8 +16435,7 @@ const approvals = {
 		errors: [
 			...CALL$10,
 			...DEFECTS,
-			"WRONG_STATE",
-			"NOT_IMPLEMENTED"
+			"WRONG_STATE"
 		]
 	}),
 	/** The approval as the person reads it, with its state judged against its expiry. */
@@ -16926,6 +16936,15 @@ const probes = {
 	})
 };
 //#endregion
+//#region ../../packages/protocol/src/evm/role-dsl.ts
+/**
+* How a capped Budget's allowance refills (#2298). `monthly` refills the
+* allowance to its cap every 30 days. Roles v2 counts fixed periods from the
+* moment the allowance is set; it has no calendar month. Absent means `none`:
+* the cap is one pot that spending drains for good.
+*/
+const ORG_BUDGET_REFILLS = ["monthly", "none"];
+//#endregion
 //#region ../../packages/protocol/src/permissions/permission-schema.ts
 /**
 * One stored `setAllowance` call inside a command's expected authority set.
@@ -16964,12 +16983,19 @@ const BudgetScopeSchema = Struct({
 	})]),
 	actions: NonEmptyArray(Literals(["pay", "commitments"]))
 }).pipe(refine((scope) => new Set(scope.actions).size === scope.actions.length && (scope.recipients.type === "anyone" || scope.recipients.accounts.length >= 1 && scope.recipients.accounts.length <= 32 && new Set(scope.recipients.accounts).size === scope.recipients.accounts.length), { message: "Budget scope requires unique actions and one to 32 unique allowed Accounts" }));
+/**
+* How a capped Budget refills (#2298): `monthly` tops the cap back up every 30
+* days (a fixed Roles v2 period, not a calendar month); `none` never refills.
+* Absent means `none`, and writers store only `monthly`.
+*/
+const BudgetRefillSchema = Literals(ORG_BUDGET_REFILLS);
 /** The accepted product policy stored with one Permission revision. */
 const CurrentPolicySchema = Union([Struct({
 	type: Literal("budget"),
 	asset: AssetIdSchema,
 	limit: NullOr(String$1),
-	scope: BudgetScopeSchema
+	scope: BudgetScopeSchema,
+	refill: optional(BudgetRefillSchema)
 }), Struct({ type: Literal("managePeople") })]);
 const BudgetIntentSchema = CurrentPolicySchema.pipe(refine((value) => {
 	if (value.type !== "budget") return false;
@@ -16991,6 +17017,15 @@ const PermissionSchema = Struct({
 	limitRaw: optional(WeiAmountSchema$1),
 	allowanceKey: optional(AllowanceKeySchema)
 });
+/**
+* A refilling Budget's refill (#2439): how much each one adds, every how many
+* days, and when the next one is due.
+*/
+const BudgetNextRefillSchema = Struct({
+	amount: AssetAmountSchema,
+	everyDays: Finite,
+	nextAt: EpochMsSchema$1
+});
 const PermissionAssignmentSchema = Struct({
 	permissionAssignmentId: PermissionAssignmentIdSchema,
 	permissionId: PermissionIdSchema,
@@ -17034,7 +17069,8 @@ const ResolvedPermissionBudgetPolicySchema = Struct({
 		"send",
 		"sendBatch",
 		"createCommitment"
-	]))
+	])),
+	refill: optional(BudgetRefillSchema)
 });
 const PermissionRecipientBindingSchema = Struct({
 	accountId: AccountIdSchema$1,
@@ -17046,14 +17082,16 @@ const StoredPermissionIntentSchema = Union([Struct({
 	type: Literal("budget"),
 	asset: AssetIdSchema,
 	limit: NullOr(AssetAmountSchema),
-	scope: optional(BudgetScopeSchema)
+	scope: optional(BudgetScopeSchema),
+	refill: optional(BudgetRefillSchema)
 }).pipe(refine((intent) => intent.limit === null || intent.limit.asset === intent.asset, { message: "Budget limit must use the Budget asset" })), Struct({ type: Literal("managePeople") })]);
 /** Writes state every granted right and use a finite positive AssetAmount cap. */
 const PermissionIntentSchema = Union([Struct({
 	type: Literal("budget"),
 	asset: AssetIdSchema,
 	limit: AssetAmountSchema,
-	scope: BudgetScopeSchema
+	scope: BudgetScopeSchema,
+	refill: optional(BudgetRefillSchema)
 }).pipe(refine((intent) => intent.limit.asset === intent.asset && /[1-9]/u.test(intent.limit.value), { message: "Budget cap must be positive and use the Budget asset" })), Struct({ type: Literal("managePeople") })]);
 //#endregion
 //#region ../../packages/protocol/src/permissions/replacement-schema.ts
@@ -17254,7 +17292,7 @@ const InvitePreviewRequestSchema = Struct({
 		Struct({
 			type: Literal("new_budget"),
 			label: String$1.pipe(refine((value) => value.trim().length >= 1 && value.trim().length <= 128)),
-			intent: BudgetIntentSchema
+			intent: BudgetIntentSchema.pipe(refine((intent) => intent.refill !== "monthly", { message: "An invitation's new Budget cannot refill; change it once granted" }))
 		})
 	])).pipe(refine((grants) => {
 		if (grants.length < 1 || grants.length > 16) return false;
@@ -19813,6 +19851,30 @@ const authorities = {
 			"ROLE_PERMISSION_DENIED"
 		]
 	}),
+	/**
+	* What one active Budget can still spend now: its Roles allowance, read on
+	* chain at the latest block as the payment gate reads it. `left` is null for
+	* a Budget with no allowance (no cap). `refill` names a refilling Budget's
+	* refill and when the next one is due; null for a one-off or uncapped Budget
+	* (#2439). For a participant of the Organization.
+	*/
+	budgetLeft: Operation.action("permissions.authorities.budgetLeft", {
+		input: Struct({
+			orgId: OrgId,
+			budgetId: PermissionIdSchema
+		}),
+		output: Struct({
+			budgetId: PermissionIdSchema,
+			left: NullOr(AssetAmountSchema),
+			refill: optionalKey(NullOr(BudgetNextRefillSchema))
+		}),
+		errors: [
+			...CALL$2,
+			...DEFECTS,
+			...CHAIN$1,
+			"ROLE_PERMISSION_DENIED"
+		]
+	}),
 	/** Whether the caller's Account may spend this amount from this Budget right now. */
 	authorize: Operation.query("permissions.authorities.authorize", {
 		input: MoneyAuthorizationRequestSchema,
@@ -20587,7 +20649,9 @@ const PEOPLE_OPERATIONS = {
 			emitSafeConfirmed: "accounts.safes.emitSafeConfirmed",
 			readSafe: "accounts.safes.readSafe",
 			recordDeployment: "accounts.safes.recordDeployment"
-		}
+		},
+		/** The home's requests to pay and Payments to retry, read in one query. */
+		summaries: { loadNeedsYou: "accounts.summaries.loadNeedsYou" }
 	},
 	/** The host observer's names for `client.approvals.*`. */
 	approvals: {
@@ -20701,6 +20765,7 @@ const ORGANIZATION_OPERATIONS = {
 		payment: "org.payment",
 		permissions: {
 			assign: "org.permissions.assign",
+			budgetLeft: "org.permissions.budgetLeft",
 			change: "org.permissions.change",
 			create: "org.permissions.create",
 			get: "org.permissions.get",
@@ -20846,7 +20911,9 @@ emitSaved: "activity.annotations.emitSaved" },
 		pay: "organizationPayments.pay",
 		payBatch: "organizationPayments.payBatch",
 		prepareExecution: "organizationPayments.prepareExecution",
-		retry: "organizationPayments.retry"
+		retry: "organizationPayments.retry",
+		cancel: "organizationPayments.cancel",
+		redirect: "organizationPayments.redirect"
 	},
 	/**
 	* Payments' internal functions and the client's own method names; its public
@@ -20868,7 +20935,9 @@ emitSaved: "activity.annotations.emitSaved" },
 			loadContext: "payments.commands.loadContext",
 			loadExecutionContext: "payments.commands.loadExecutionContext",
 			/** The capped Budget a prepared Organization command spends from, before its allowance is read on chain. */
-			loadBudgetAllowance: "payments.commands.loadBudgetAllowance"
+			loadBudgetAllowance: "payments.commands.loadBudgetAllowance",
+			/** What a new Payment command would spend and from which Safe, read before it is born. */
+			loadBirthFunding: "payments.commands.loadBirthFunding"
 		},
 		lifecycles: { prepareIntent: "payments.lifecycles.prepareIntent" },
 		/** The stored UserOperation of every money command: Payment, Permission and configuration. */
@@ -20943,6 +21012,9 @@ emitChanged: "payroll.groups.emitChanged" }
 	},
 	/** Permissions' internal functions; its public rows join from `OPERATIONS`. */
 	permissions: {
+		authorities: { 
+		/** The Budget-left read's participant check and the Budget's stored allowance. */
+loadBudgetLeft: "permissions.authorities.loadBudgetLeft" },
 		commands: {
 			/** The prepare action's transaction: authorize, plan and save the command. */
 			prepareIntent: "permissions.commands.prepareIntent",
@@ -21299,6 +21371,42 @@ const UiStepProps = {
 	organization_id: OptionalOrgId,
 	reason_code: OptionalReasonCode
 };
+/**
+* A journey's variants (`JOURNEYS`): the way a person came into a journey, or
+* the way they took through it. A variant is a property of the journey's step
+* events, never a journey of its own, so each journey funnel breaks down by
+* it. A step event takes only the variants that a journey contract names on
+* it, picked one by one; the analytics plan test checks both directions.
+* `pay_path` and `funding_source` have no carrier until their Phase 2 events.
+* `payment_*` events already carry `recipient_is_capxul_account`, and
+* `invoice_issued` carries `issuer_scope_kind`; neither is repeated here.
+*/
+const JourneyVariantProps = {
+	/** How a person came to Get started: by themselves, an invite, money that waited, or an invoice. */
+	entry_path: optional(Literals([
+		"signup",
+		"invite",
+		"claim",
+		"invoice"
+	])),
+	/** Where the person acted. `agent` is an AI agent driving the CLI. */
+	surface: optional(Literals([
+		"web",
+		"cli",
+		"agent"
+	])),
+	/** Who pays: a person from their own account, or an Organization from a Budget. */
+	payer_kind: optional(Literals(["person", "organization"])),
+	/** How a request was paid: from the payer's inbox, or by its link at checkout. */
+	pay_path: optional(Literals(["inbox", "link"])),
+	/** Where an account's first money came from. `bank` is the planned on-ramp. */
+	funding_source: optional(Literals([
+		"deposit",
+		"payment",
+		"claim",
+		"bank"
+	]))
+};
 //#endregion
 //#region ../../packages/observability/src/events/money.ts
 /**
@@ -21388,6 +21496,8 @@ const PaymentInitiatedProps = Struct({
 	execution_id: OptionalString,
 	payment_lifecycle_id: OptionalString,
 	...TelemetryEnvelopeProps,
+	payer_kind: JourneyVariantProps.payer_kind,
+	surface: JourneyVariantProps.surface,
 	...RecipientTelemetryProps,
 	kind: String$1,
 	payment_id: String$1
@@ -21403,6 +21513,8 @@ const PaymentLifecycleProps = {
 const PaymentSettledL2Props = Struct({
 	...PaymentLifecycleProps,
 	...TelemetryEnvelopeProps,
+	payer_kind: JourneyVariantProps.payer_kind,
+	surface: JourneyVariantProps.surface,
 	...RecipientTelemetryProps,
 	kind: String$1,
 	chain_id: Finite,
@@ -21610,6 +21722,7 @@ const OrganizationCreationStartedProps = Struct({
 });
 const OrganizationCreationReadyProps = Struct({
 	...TelemetryEnvelopeProps,
+	surface: JourneyVariantProps.surface,
 	$insert_id: String$1,
 	organization_id: OrgIdTelemetrySchema,
 	attempt_number: AttemptNumberSchema,
@@ -21634,45 +21747,6 @@ const OrganizationCreationFailedProps = Struct({
 		...ORGANIZATION_SETUP_REASONS
 	]))
 });
-const OrgCreateStartedProps = Struct({
-	...TelemetryEnvelopeProps,
-	org_id: OptionalOrgId,
-	email_domain: OptionalString,
-	template: OptionalString
-});
-const OrgSafeCreatedProps = Struct({
-	...TelemetryEnvelopeProps,
-	org_id: OptionalOrgId,
-	chainId: OptionalChainId,
-	safe_address: OptionalAddress
-});
-const OrgSafeConfirmedProps = Struct({
-	...TelemetryEnvelopeProps,
-	org_id: OptionalOrgId,
-	chainId: OptionalChainId,
-	safe_address: OptionalAddress,
-	durationMs: OptionalDurationMs
-});
-const OrgRolesSeededProps = Struct({
-	...TelemetryEnvelopeProps,
-	org_id: OptionalOrgId,
-	chainId: OptionalChainId,
-	role: OptionalString,
-	txHash: OptionalTxHash
-});
-const OrgCreatedProps = Struct({
-	...TelemetryEnvelopeProps,
-	org_id: OptionalOrgId,
-	chainId: OptionalChainId,
-	safe_address: OptionalAddress,
-	durationMs: OptionalDurationMs
-});
-const OrgCreateFailedProps = Struct({
-	...TelemetryEnvelopeProps,
-	...ChainCauseTelemetryProps,
-	org_id: OptionalOrgId,
-	reason: OptionalString
-});
 const OrgInviteSentProps = Struct({
 	...TelemetryEnvelopeProps,
 	org_id: OptionalOrgId,
@@ -21717,30 +21791,6 @@ Struct({
 	name: Literal("organization_creation_failed"),
 	props: OrganizationCreationFailedProps
 });
-Struct({
-	name: Literal("org_create_started"),
-	props: OrgCreateStartedProps
-});
-Struct({
-	name: Literal("org_safe_created"),
-	props: OrgSafeCreatedProps
-});
-Struct({
-	name: Literal("org_safe_confirmed"),
-	props: OrgSafeConfirmedProps
-});
-Struct({
-	name: Literal("org_roles_seeded"),
-	props: OrgRolesSeededProps
-});
-Struct({
-	name: Literal("org_created"),
-	props: OrgCreatedProps
-});
-Struct({
-	name: Literal("org_create_failed"),
-	props: OrgCreateFailedProps
-});
 Struct({
 	name: Literal("org_invite_sent"),
 	props: OrgInviteSentProps
@@ -22126,6 +22176,14 @@ Struct({
 		account_kind: optional(AccountKindSchema)
 	})
 });
+Struct({
+	name: Literal("ui_approval_sign_in_required"),
+	props: Struct({
+		...TelemetryEnvelopeProps,
+		approval_id: String$1,
+		reason: Literals(["signed_out", "wrong_account"])
+	})
+});
 Struct({
 	name: Literal("payroll_group_changed"),
 	props: Struct({
@@ -22381,6 +22439,8 @@ const CLI_COMMAND_NAMES = [
 	"payment.get",
 	"payment.wait",
 	"payment.retry",
+	"payment.cancel",
+	"payment.redirect",
 	"inbox",
 	CAPXUL_OPERATIONS.inbox.list,
 	"inbox.get",
@@ -22614,10 +22674,14 @@ const BootstrapFailedProps = Struct({
 });
 const MemberActivationStartedProps = Struct({
 	...TelemetryEnvelopeProps,
+	entry_path: JourneyVariantProps.entry_path,
+	surface: JourneyVariantProps.surface,
 	$insert_id: String$1
 });
 const MemberActivationReadyProps = Struct({
 	...TelemetryEnvelopeProps,
+	entry_path: JourneyVariantProps.entry_path,
+	surface: JourneyVariantProps.surface,
 	$insert_id: String$1,
 	duration_ms: DurationMsSchema
 });
@@ -22775,7 +22839,7 @@ const FIELD_RULES = {
 	},
 	anonymousId: {
 		maxLength: 128,
-		pattern: /^anon_[A-Za-z0-9-]+$/u
+		pattern: /^(?:anon_[A-Za-z0-9-]+|[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})$/u
 	},
 	traceparent: {
 		maxLength: 55,
@@ -24530,6 +24594,7 @@ function paymentsV2Signature(name) {
 paymentsV2Signature("send");
 paymentsV2Signature("sendBatch");
 paymentsV2Signature("createCommitment");
+paymentsV2Signature("cancel"), paymentsV2Signature("redirect");
 //#endregion
 //#region ../../packages/protocol/src/evm/organization-payments.ts
 /** Supported Organization permission identities, newest first. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@capxul/sandbox",
-  "version": "4.20.0-beta.27",
+  "version": "4.20.0-beta.29",
   "private": false,
   "description": "Capxul sandbox CLI for canonical quickstart keys and testnet faucet funds.",
   "keywords": [
@@ -42,9 +42,9 @@
     "typescript": "npm:@typescript/typescript6@6.0.2",
     "vite": "npm:@voidzero-dev/vite-plus-core@1.0.0",
     "vite-plus": "1.0.0",
-    "@capxul/observability": "4.20.0-beta.27",
-    "@capxul/protocol": "0.2.0-beta.1",
-    "@capxul/sdk": "4.20.0-beta.27",
+    "@capxul/observability": "4.20.0-beta.29",
+    "@capxul/protocol": "0.2.0-beta.3",
+    "@capxul/sdk": "4.20.0-beta.29",
     "@capxul/typescript-config": "0.0.0"
   },
   "scripts": {