@delopay/sdk 0.103.0 → 0.105.0

package/dist/index.d.ts

@@ -2057,6 +2057,90 @@ interface RoutingConfigUpdateRequest {
     /** Replacement rule. Validated against the shop exactly as at create. */
     algorithm?: StaticRoutingAlgorithm | Record<string, unknown> | null;
 }
+/** What kind of rule a routing configuration holds. */
+type RoutingAlgorithmKind = 'single' | 'priority' | 'volume_split' | 'advanced' | 'dynamic' | 'three_ds_decision_rule';
+/**
+ * One content window of a routing configuration — the rule as it stood between
+ * `valid_from` and `valid_until`.
+ *
+ * A config's rule can be edited in place, so the rule that decided a past
+ * payment is only recoverable because every earlier version is kept.
+ */
+interface RoutingConfigVersion {
+    /** 1-based position in the configuration's timeline, oldest first. */
+    version: number;
+    /** Name the configuration had during this window. */
+    name: string;
+    /** Description it had during this window. */
+    description: string;
+    kind: RoutingAlgorithmKind;
+    /** The rule itself, exactly as it was during this window. */
+    algorithm: StaticRoutingAlgorithm | Record<string, unknown>;
+    /** When this content took effect. Seconds since epoch — not milliseconds. */
+    valid_from: number;
+    /** When it was replaced, or absent while it is still the live rule. */
+    valid_until?: number | null;
+}
+/** Query for `GET /routing/{id}/history`. */
+interface RoutingHistoryParams {
+    /**
+     * Maximum entries to return, **counting the live one**. `0` is treated as `1`.
+     */
+    limit?: number | null;
+    /** Entries to skip, counting from the oldest. Advance it by `limit`. */
+    offset?: number | null;
+}
+/**
+ * One page of a routing configuration's timeline, oldest first.
+ *
+ * Paging runs over the whole timeline with the live window as its last element,
+ * so `versions` never holds more than `limit` entries and the live window — the
+ * only one without a `valid_until` — appears on exactly one page and not on the
+ * pages before or after it. A page past the end of the timeline is empty. A
+ * configuration nobody has edited returns a single entry, the live one.
+ */
+interface RoutingConfigHistoryResponse {
+    id: string;
+    profile_id: string;
+    versions: RoutingConfigVersion[];
+    /**
+     * How long the whole timeline is: every closed window plus the live one.
+     *
+     * Lets you compute the last page directly rather than paging until a response
+     * comes back empty.
+     */
+    total_count: number;
+}
+/**
+ * A lifetime cap on one connector account: it may take at most `limit`
+ * successful payments for this shop, ever.
+ *
+ * `1` is the acquirer-onboarding case — a new account takes the single live
+ * transaction its review needs, then routing stops selecting it and traffic
+ * returns to the account that was there before. This is a one-time gate, **not**
+ * a recurring budget: nothing resets it.
+ */
+interface RoutingConnectorCap {
+    /**
+     * The connector *account*, not the acquirer. A shop with two Stripe accounts
+     * has two of these, and a cap on one is not spent by the other.
+     */
+    merchant_connector_id: string;
+    /** Successful payments this account may take for this shop, ever. `0` means never route here. */
+    limit: number;
+    /** How many it has taken. Present on reads only; ignored in a write. */
+    used?: number | null;
+}
+/** A shop's connector caps. */
+interface RoutingConnectorCaps {
+    /** The shop. Ignored in a request body — the path names the shop. */
+    profile_id?: string | null;
+    /**
+     * Every capped connector account. This list *is* the complete set: sending an
+     * empty one removes every cap, which is how onboarding finishes.
+     */
+    caps: RoutingConnectorCap[];
+}
 /** Body for `POST /routing/{id}/activate`. */
 interface RoutingActivatePayload {
     transaction_type?: TransactionType | null;
@@ -3129,7 +3213,17 @@ interface ConnectorUpdateRequest {
     metadata?: Record<string, unknown> | null;
     test_mode?: boolean | null;
     disabled?: boolean | null;
+    /**
+     * Whole-value replacement, not a patch. Send it only when an operator typed
+     * a new secret; omitting it leaves the stored one alone, which is the only
+     * safe default now that `retrieve` returns `null` here.
+     */
     connector_webhook_details?: Record<string, unknown> | null;
+    /** Whole-value replacement — same rule as `connector_webhook_details`. */
+    connector_wallets_details?: Record<string, unknown> | null;
+    /** Whole-value replacement — same rule as `connector_webhook_details`. */
+    pm_auth_config?: Record<string, unknown> | null;
+    /** Whole-value replacement — same rule as `connector_webhook_details`. */
     additional_merchant_data?: Record<string, unknown> | null;
 }
 interface ConnectorCloneRequest {
@@ -3158,7 +3252,19 @@ interface ConnectorResponse {
     metadata?: Record<string, unknown> | null;
     test_mode?: boolean | null;
     disabled?: boolean | null;
+    /**
+     * Credential-bearing, and **`null` on `retrieve()`** whatever is stored —
+     * see that method. `create`, `update` and `clone` return a live value:
+     * clone's is the copied secret, which the caller never sent. Do not log
+     * these four.
+     */
     connector_webhook_details?: Record<string, unknown> | null;
+    /** Credential-bearing — same handling as `connector_webhook_details`. */
+    connector_wallets_details?: Record<string, unknown> | null;
+    /** Credential-bearing — same handling as `connector_webhook_details`. */
+    pm_auth_config?: Record<string, unknown> | null;
+    /** Credential-bearing — same handling as `connector_webhook_details`. */
+    additional_merchant_data?: Record<string, unknown> | null;
     created_at?: string | null;
 }
 interface ConnectorListResponse {
@@ -4579,12 +4685,42 @@ interface DrillPayment {
     status: string;
     amount_minor?: number | null;
     currency?: string | null;
-    /** RFC 3339 UTC. */
+    /**
+     * When the buyer was **observed** — the timestamp of the canonical
+     * client-context row, not of the payment. This is the value the window
+     * filters on, so it always falls inside the requested range.
+     *
+     * Named `created_at` since the endpoint shipped, and kept for
+     * compatibility. Read `payment_created_at` for the payment's own age: the
+     * two can be days apart on a long-lived payment link, and reading this one
+     * as the payment's creation time is what makes a drill list look like it is
+     * ignoring its own window. RFC 3339 UTC.
+     */
     created_at: string;
+    /**
+     * When the **payment** was created, RFC 3339 UTC. Unlike `created_at` this
+     * need not fall inside the requested window: a payment created weeks ago
+     * can be observed today.
+     */
+    payment_created_at: string;
     /** IP-claimed country of the canonical observation. */
     country?: string | null;
     /** IP-resolved city, when GeoLite2 had one. */
     city?: string | null;
+    /**
+     * Subscription this row belongs to. Set only by the subscription drill; its
+     * presence is what tells a client to link the row at the subscription
+     * rather than at the payment.
+     */
+    subscription_id?: string | null;
+    /** Invoice (billing cycle) this row is. Subscription drill only. */
+    invoice_id?: string | null;
+    /**
+     * The invoice's own status, which is not the payment's: a cycle can be
+     * `PaymentFailed` while no payment row exists at all. Subscription drill
+     * only.
+     */
+    invoice_status?: string | null;
 }
 /** The geo drill-through list. */
 interface DrillResponse {
@@ -4595,6 +4731,334 @@ interface DrillResponse {
     /** Full match count (may exceed payments.length). */
     total: number;
 }
+/** Query for the subscription-analytics endpoint. */
+interface SubscriptionAnalyticsRequest {
+    /** Trailing days for a rolling window ending now. Default 7, capped at 92. */
+    days?: number | null;
+    /** Naive ISO 8601 datetime for the window start (custom range; span ≤ 92 days). */
+    start_date?: string | null;
+    /** Naive ISO 8601 datetime for the inclusive last day. Defaults to now. */
+    end_date?: string | null;
+    /** Scope to a single merchant. Ignored (server-pinned) on the merchant route. */
+    merchant_id?: string | null;
+    /** Scope to one project's shops. */
+    project_id?: string | null;
+    /** Scope to a single shop; wins over project_id. */
+    shop_id?: string | null;
+    /** `false` = live only, `true` = test only. Omit for both. */
+    test_mode?: boolean | null;
+    /**
+     * Day only. Any other value is rejected rather than downgraded: a billing
+     * cycle carries day resolution at best, so an hourly series over `invoice`
+     * would chart when a scheduler ran.
+     */
+    granularity?: 'day' | null;
+    /**
+     * Comma-separated blocks to compute; omit for all. Tokens: `totals`,
+     * `series`, `movement`, `processors`, `plans`, `outcomes`, `children`,
+     * `previous`. A block you did not ask for comes back empty, zeroed or
+     * `null` — never stale — so a single card placed on another page can load
+     * itself without paying for the whole dashboard.
+     */
+    sections?: string | null;
+    /**
+     * Restrict to subscriptions charged from one country (ISO alpha-2). Narrows
+     * the population to subscriptions with at least one matching invoice in the
+     * window — see `FilterNarrowsToChargedSubscriptions`.
+     */
+    country?: string | null;
+    /** Which country claim the filter matches: `"ip"` (default) or `"billing"`. */
+    country_source?: string | null;
+    /** `phone` | `tablet` | `desktop` | `unknown`. */
+    device_class?: string | null;
+}
+/** Known ways a figure in the subscription response is not the whole truth. */
+type SubscriptionCaveat = 
+/** An active subscription has one invoice, so no cadence could be read from
+ * its own history. Excluded from every estimate rather than guessed at. */
+'CadenceUnknownExcluded'
+/**
+ * At least one cycle was recorded at zero and left out of volume, of
+ * revenue-per-subscription and of cadence inference.
+ *
+ * Named for what was observed, not why: a zero is written both by a
+ * processor-hosted origination and by a genuinely free renewal, and nothing
+ * stored tells them apart.
+ */
+ | 'ZeroAmountCyclesExcluded'
+/** An invoice had no usable reporting rate for its own day and was left out,
+ * so the converted totals are a lower bound. */
+ | 'FxIncomplete'
+/** There is no subscription status history, so churn is timed from the last
+ * accepted processor status event. */
+ | 'ChurnTimingFromConnectorEvent'
+/** A country/device filter can only match cycles that reached a payment
+ * carrying a client-context observation. */
+ | 'FilterRequiresClientContext'
+/** Under a filter the subscription counts describe subscriptions with a
+ * matching invoice in this window — a narrower population than "active". */
+ | 'FilterNarrowsToChargedSubscriptions'
+/** The filter reads fraud-collected signals, which the purpose gate forbids.
+ * It was refused and the response is unfiltered. */
+ | 'FilterRefusedOptimisationUseDisabled'
+/** The window contains no subscription activity at all. */
+ | 'NoSubscriptionsInWindow';
+/** Echo of the filters actually applied. */
+interface SubscriptionFilters {
+    country?: string | null;
+    country_source?: string | null;
+    device_class?: string | null;
+}
+/**
+ * Headline figures. Volumes are USD major units; counts are exact.
+ *
+ * **Stocks** (`est_*`, `active`, `trial`, `paused`, `unpaid_subscriptions`,
+ * `arpa_usd`) are as at the end of the window. **Flows** are sums over it.
+ */
+interface SubscriptionTotals {
+    /** Stock. Estimated recurring volume per month for the scope. */
+    est_monthly_volume_usd: number;
+    /** Stock. `est_monthly_volume_usd × 12`, carried so every client agrees. */
+    est_annual_volume_usd: number;
+    /** Stock. */
+    active: number;
+    /** Stock. */
+    trial: number;
+    /** Stock. */
+    paused: number;
+    /** Stock. */
+    unpaid_subscriptions: number;
+    /** Flow. Gross settled invoice volume in the window. */
+    billed_volume_usd: number;
+    /** Flow. Reported beside the gross, never subtracted from it. */
+    refunded_usd: number;
+    /** Flow. */
+    invoices_raised: number;
+    /** Flow. Settled, first attempt or later. */
+    invoices_paid: number;
+    /** Flow. Entered retry, settled or not. */
+    invoices_retried: number;
+    /** Flow. Failed at least once and settled afterwards. */
+    invoices_recovered: number;
+    /** Flow. Still unpaid at window end. */
+    invoices_unpaid: number;
+    /** 0–100. `null` when nothing was raised — a rate over no invoices is not zero. */
+    renewal_success_rate?: number | null;
+    /** Flow. */
+    new_subscriptions: number;
+    /** Flow. */
+    cancelled_subscriptions: number;
+    /** 0–100. `null` when nothing was active to churn. */
+    churn_rate?: number | null;
+    /** Stock. `est_monthly_volume_usd / active`. */
+    arpa_usd?: number | null;
+}
+/** One bucket of the series — always a calendar day. */
+interface SubscriptionBucket {
+    /** `YYYY-MM-DD`. */
+    bucket: string;
+    /** Stock as at the end of this bucket. */
+    est_monthly_volume_usd: number;
+    /** Stock as at the end of this bucket. */
+    active: number;
+    /** Flow within this bucket. */
+    billed_volume_usd: number;
+    /** Flow. Cycles that settled for a subscription that already had one. */
+    renewed: number;
+    /** Flow. */
+    new_subscriptions: number;
+    /** Flow. */
+    failed: number;
+    /** Flow. */
+    cancelled: number;
+}
+/**
+ * What moved recurring volume between the previous window and this one.
+ * `opening + new + expansion − contraction − churn = closing`.
+ */
+interface SubscriptionMovement {
+    opening_usd: number;
+    closing_usd: number;
+    net_usd: number;
+    /** A subscription's first ever invoice. */
+    new_usd: number;
+    new_count: number;
+    /** A renewal billed above the same subscription's previous cycle. */
+    expansion_usd: number;
+    expansion_count: number;
+    /** A renewal billed below the same subscription's previous cycle. */
+    contraction_usd: number;
+    contraction_count: number;
+    churn_usd: number;
+    churn_count: number;
+    /** 0–100. `null` when opening was zero. */
+    nrr?: number | null;
+    /** 0–100. `null` when opening was zero. */
+    grr?: number | null;
+}
+/** One processor's share, on either axis. */
+interface ProcessorSlice {
+    /** Connector token as stored (`stripebilling`, `creem`, `paypal`, …). */
+    key: string;
+    /** Stock. */
+    est_monthly_volume_usd: number;
+    /** Flow. */
+    billed_volume_usd: number;
+    /** Stock. */
+    subscriptions: number;
+}
+/**
+ * The two processor axes. They diverge exactly where the billing connector
+ * cannot take money itself: a Recurly subscription charged through Stripe
+ * appears under Recurly in `billing` and Stripe in `charging`.
+ */
+interface SubscriptionProcessors {
+    /** Grouped by `subscription.billing_processor`. */
+    billing: ProcessorSlice[];
+    /** Grouped by the connector on the payment attempt behind each invoice. */
+    charging: ProcessorSlice[];
+}
+/** One plan's share. Annual cadences are divided down to a monthly figure. */
+interface PlanSlice {
+    key: string;
+    /** Stock. */
+    est_monthly_volume_usd: number;
+    /** Stock. */
+    subscriptions: number;
+    /** Stock. */
+    arpa_usd?: number | null;
+}
+/** The invoice funnel. `paid_first_attempt + recovered + unpaid = raised`. */
+interface InvoiceOutcomes {
+    raised: number;
+    paid_first_attempt: number;
+    retried: number;
+    recovered: number;
+    unpaid: number;
+    /** `recovered / retried`, 0–100. `null` when nothing was retried. */
+    recovery_rate?: number | null;
+}
+/** One breakdown row, one drill level below the current scope. */
+interface SubscriptionChild {
+    /** `merchant` | `project` | `shop`. */
+    kind: string;
+    id: string;
+    /** Display name, when resolvable; falls back to the id. */
+    name?: string | null;
+    /** Shops directly under this row (projects only). */
+    shop_count?: number | null;
+    /** Stock. */
+    est_monthly_volume_usd: number;
+    /** Stock. */
+    active: number;
+    /** Flow. */
+    billed_volume_usd: number;
+    renewal_success_rate?: number | null;
+    churn_rate?: number | null;
+}
+/** One drill level of the subscription-analytics dashboard. */
+interface SubscriptionAnalyticsResponse {
+    /** Always `true` today; kept so the shape matches the device/geo responses. */
+    enabled: boolean;
+    /** `root` | `merchant` | `project` | `shop`. */
+    level: string;
+    days: number;
+    /** `YYYY-MM-DD` of the window's last day. */
+    end_date: string;
+    /** Always `"day"`. */
+    granularity: string;
+    /** Always `null`; the field exists for shape parity with the other pages. */
+    bucket_start?: string | null;
+    totals: SubscriptionTotals;
+    series: SubscriptionBucket[];
+    movement?: SubscriptionMovement | null;
+    processors: SubscriptionProcessors;
+    plans: PlanSlice[];
+    outcomes?: InvoiceOutcomes | null;
+    children: SubscriptionChild[];
+    caveats: SubscriptionCaveat[];
+    filters: SubscriptionFilters;
+    /** The previous window's totals, when `sections` includes `previous`. */
+    previous_totals?: SubscriptionTotals | null;
+}
+/** The window, scope and chip filters every drill call carries. */
+interface SubscriptionDrillBase {
+    days?: number | null;
+    start_date?: string | null;
+    end_date?: string | null;
+    merchant_id?: string | null;
+    project_id?: string | null;
+    shop_id?: string | null;
+    test_mode?: boolean | null;
+    /** Active chip filters, so the drill lists what the charts counted. */
+    country?: string | null;
+    country_source?: string | null;
+    device_class?: string | null;
+    /**
+     * Clicked series bucket (`YYYY-MM-DD`). Narrows whichever target is set to
+     * that one day, so it combines with any of them rather than replacing them.
+     */
+    target_bucket?: string | null;
+    /** Offset into the newest-first list (page size 50). */
+    offset?: number | null;
+}
+/**
+ * The clicked target. **Exactly one**, encoded as a discriminated union rather
+ * than a bag of optional fields: the endpoint rejects an ambiguous target, so
+ * `{}` and `{ target_outcome: 'unpaid', target_plan: 'x' }` should be type
+ * errors rather than runtime ones.
+ *
+ * Each member marks the other targets `?: never`. Without that TypeScript
+ * accepts any property present in *some* member of the union, so a second
+ * target compiles happily — the exclusions are what make "exactly one" real.
+ *
+ * `target_child` and `target_child_kind` travel together as one member: a
+ * child id with no kind cannot be resolved to anything, and the server matches
+ * nothing rather than everything when the kind is missing.
+ */
+type SubscriptionDrillTarget = (SubscriptionOutcomeTarget & NotOther<'target_outcome'>) | (SubscriptionBillingProcessorTarget & NotOther<'target_billing_processor'>) | (SubscriptionChargingConnectorTarget & NotOther<'target_charging_connector'>) | (SubscriptionPlanTarget & NotOther<'target_plan'>) | (SubscriptionStatusTarget & NotOther<'target_status'>) | (SubscriptionMovementTarget & NotOther<'target_movement'>) | (SubscriptionChildTarget & NotOther<'target_child' | 'target_child_kind'>) | (SubscriptionBucketOnlyTarget & NotOther<never>);
+interface SubscriptionOutcomeTarget {
+    /** Clicked slice of the invoice funnel. */
+    target_outcome: 'paid_first' | 'retried' | 'recovered' | 'unpaid';
+}
+interface SubscriptionBillingProcessorTarget {
+    /** Clicked slice of the "bills it" ring. */
+    target_billing_processor: string;
+}
+interface SubscriptionChargingConnectorTarget {
+    /** Clicked slice of the "charges the card" ring. */
+    target_charging_connector: string;
+}
+interface SubscriptionPlanTarget {
+    /** Clicked plan row. */
+    target_plan: string;
+}
+interface SubscriptionStatusTarget {
+    /** Clicked subscription status. */
+    target_status: string;
+}
+interface SubscriptionMovementTarget {
+    /** Clicked movement component. */
+    target_movement: 'new' | 'expansion' | 'contraction' | 'churn';
+}
+interface SubscriptionChildTarget {
+    /** Clicked breakdown row, with the kind needed to resolve it. */
+    target_child: string;
+    target_child_kind: 'merchant' | 'project' | 'shop';
+}
+/**
+ * A clicked day with no further target: every cycle raised that day. The one
+ * member whose key lives on the base, so it is `required` here — without that
+ * `{}` would satisfy the union and an untargeted drill would list the whole
+ * window, which no click means.
+ */
+interface SubscriptionBucketOnlyTarget {
+    target_bucket: string;
+}
+/** Every target key this member does not itself set, forbidden. */
+type NotOther<Set extends TargetKey> = Partial<Record<Exclude<TargetKey, Set>, never>>;
+type TargetKey = 'target_outcome' | 'target_billing_processor' | 'target_charging_connector' | 'target_plan' | 'target_status' | 'target_movement' | 'target_child' | 'target_child_kind';
+type SubscriptionDrillRequest = SubscriptionDrillBase & SubscriptionDrillTarget;
 /** Payout progress of a settlement statement. */
 type SettlementPayoutStatus = 'unpaid' | 'partial' | 'paid';
 /**
@@ -5109,15 +5573,38 @@ interface ShopVisibilityResponse {
     profile_id: string;
     visible_to_shop: boolean;
 }
-/** Operations that can carry limit rules. Only refunds today. */
-type LimitedOperation = 'refund';
+/**
+ * Operations that can carry limit rules.
+ *
+ * Which *dimensions* a rule may then set is per-operation, and the server
+ * rejects an upsert that names one the operation cannot honour rather than
+ * saving a rule that renders as configured and enforces nothing:
+ *
+ * - `refund` — every dimension.
+ * - `settlement_adjustment` — amount dimensions only. There is no payment
+ *   behind an adjustment, so `max_payment_age_days` means nothing, and an
+ *   adjustment is hard-deleted with no tombstone, so a count read back from
+ *   live rows counts positions standing rather than adds performed.
+ * - `settlement_payout` — `max_amount_per_operation` only. Recording a payout
+ *   mutates one statement row, so the row cannot say how many times anyone
+ *   acted, and its date is caller-supplied — neither window is enforceable.
+ */
+type LimitedOperation = 'refund' | 'settlement_adjustment' | 'settlement_payout';
 /** Rule target: the merchant default, one role, or one user. */
 type OperationLimitScope = 'merchant' | 'role' | 'user';
 /**
- * What happens when an operation would exceed its limit. v1 ships `block`
- * only; `require_approval` (four-eyes) arrives in a later release.
+ * What happens when an operation would exceed its limit.
+ *
+ * `block` refuses it outright (`DE_01`). `require_approval` parks it as a
+ * request a second person decides on: the call fails with HTTP 409 `DE_06`
+ * carrying `PendingApprovalErrorDetails`, and the operation executes only
+ * once somebody approves it. Nothing was created either way — the difference
+ * is that `require_approval` names a request that can still succeed.
+ *
+ * `require_approval` is accepted on refund rules alone; the settlement
+ * members of `UpsertOperationLimitRuleRequest` take `block` only.
  */
-type OperationLimitOnExceeded = 'block';
+type OperationLimitOnExceeded = 'block' | 'require_approval';
 /** How the usage window is anchored. Rolling is the default. */
 type OperationLimitWindowMode = 'rolling' | 'calendar';
 /**
@@ -5146,26 +5633,83 @@ interface OperationLimitRule {
     created_at: string;
     modified_at: string;
 }
-/**
- * Body for `PUT /operation-limits/rules` — a full-replace upsert for one
- * target. Absent limit fields mean "this rule does not constrain that
- * dimension"; a request with no limit at all is rejected (delete the rule
- * instead). Amounts are minor units in `currency`.
- */
-interface UpsertOperationLimitRuleRequest {
-    operation: LimitedOperation;
+/** What every limit rule names, whatever it constrains. */
+interface UpsertOperationLimitRuleBase {
     scope: OperationLimitScope;
     /** Required for `role`/`user` scopes; must be absent for `merchant`. */
     scope_id?: string;
-    max_amount_per_operation?: number;
-    max_total_amount_per_window?: number;
-    max_count_per_window?: number;
-    max_payment_age_days?: number;
     /** Window length in hours (rolling mode). Defaults to 24; 1–720. */
     window_hours?: number;
     /** Currency of the amount fields. Defaults to USD. */
     currency?: Currency;
 }
+/**
+ * A refund rule — the only operation that takes every dimension, and the only
+ * one that can be sent for approval.
+ */
+interface UpsertRefundLimitRuleRequest extends UpsertOperationLimitRuleBase {
+    operation: 'refund';
+    max_amount_per_operation?: number;
+    max_total_amount_per_window?: number;
+    max_count_per_window?: number;
+    /** How old the payment being refunded may be. */
+    max_payment_age_days?: number;
+    /**
+     * What an over-limit refund does. Defaults to `block`, so a rule written by
+     * a client that predates four-eyes keeps refusing rather than silently
+     * becoming approvable.
+     */
+    on_exceeded?: OperationLimitOnExceeded;
+}
+/**
+ * A settlement-adjustment rule: amount dimensions only.
+ *
+ * There is no payment behind an adjustment, so an age limit means nothing,
+ * and an adjustment is hard-deleted with no tombstone, so a count read back
+ * from live rows counts positions standing rather than adds performed. The
+ * server refuses either field rather than saving a rule nothing enforces.
+ */
+interface UpsertSettlementAdjustmentLimitRuleRequest extends UpsertOperationLimitRuleBase {
+    operation: 'settlement_adjustment';
+    max_amount_per_operation?: number;
+    max_total_amount_per_window?: number;
+    max_count_per_window?: never;
+    max_payment_age_days?: never;
+    /**
+     * `block` only. Approval needs an executor that can run the operation once
+     * somebody says yes, and only refunds have one — the server refuses
+     * `require_approval` here rather than storing it and quietly blocking.
+     */
+    on_exceeded?: 'block';
+}
+/**
+ * A payout-recording rule: a per-operation ceiling and nothing else.
+ *
+ * Recording a payout mutates one statement row, so the row cannot say how
+ * many times anyone acted, and its window would rest on a caller-supplied
+ * business date. Neither window is enforceable, so neither is accepted.
+ */
+interface UpsertSettlementPayoutLimitRuleRequest extends UpsertOperationLimitRuleBase {
+    operation: 'settlement_payout';
+    max_amount_per_operation?: number;
+    max_total_amount_per_window?: never;
+    max_count_per_window?: never;
+    max_payment_age_days?: never;
+    /** `block` only — see `UpsertSettlementAdjustmentLimitRuleRequest`. */
+    on_exceeded?: 'block';
+}
+/**
+ * Body for `PUT /operation-limits/rules` — a full-replace upsert for one
+ * target. Absent limit fields mean "this rule does not constrain that
+ * dimension"; a request with no limit at all is rejected (delete the rule
+ * instead). Amounts are minor units in `currency`.
+ *
+ * Which dimensions a rule may set depends on the operation, and the union
+ * says so: the server rejects a rule naming one its operation cannot honour,
+ * because a rule that saves, lists and renders while no hook can read it is
+ * worse than a refused one.
+ */
+type UpsertOperationLimitRuleRequest = UpsertRefundLimitRuleRequest | UpsertSettlementAdjustmentLimitRuleRequest | UpsertSettlementPayoutLimitRuleRequest;
 interface OperationLimitRuleListParams {
     /** Without `operation`, every rule of the caller's merchant is returned. */
     operation?: LimitedOperation;
@@ -5188,6 +5732,105 @@ interface UpdateOperationLimitSettingsRequest {
     window_mode?: OperationLimitWindowMode;
     admins_exempt?: boolean;
 }
+/**
+ * Lifecycle of an over-limit request.
+ *
+ * There is no `executed` state: approving and executing are two facts, so an
+ * approved request that failed to execute stays `approved` and carries
+ * `execution_error`. Read `executed_at` and `result_entity_id` to tell an
+ * approval that ran from one that has not.
+ */
+type PendingOperationStatus = 'pending' | 'approved' | 'rejected' | 'expired';
+/** Which limit the operation ran into, and by how much. */
+interface PendingOperationLimitContext {
+    /** The dimension that tripped, e.g. `max_amount_per_operation`. */
+    limit_type: string;
+    /** The configured ceiling, in minor units of `currency` where it is an amount. */
+    limit?: number | null;
+    /** What the operation asked for, on the same scale as `limit`. */
+    attempted?: number | null;
+    /** For `max_payment_age_days`: how old the payment being refunded is. */
+    attempted_age_seconds?: number | null;
+    currency?: string | null;
+}
+/** What the request is about, in the words of the operation that parked it. */
+interface PendingOperationSummary {
+    payment_id: string;
+    /** Minor units of `currency`. */
+    amount?: number | null;
+    currency?: string | null;
+    reason?: string | null;
+}
+/** One over-limit request in the approvals inbox. */
+interface PendingOperation {
+    id: string;
+    merchant_id: string;
+    profile_id?: string | null;
+    operation: LimitedOperation;
+    status: PendingOperationStatus;
+    summary?: PendingOperationSummary | null;
+    idempotency_key?: string | null;
+    /** The rule that diverted it, when it is still around. */
+    rule_id?: string | null;
+    limit_context?: PendingOperationLimitContext | null;
+    /** The user who asked. The server refuses to let them decide their own request. */
+    requested_by: string;
+    requested_by_role_id?: string | null;
+    request_reason?: string | null;
+    decided_by?: string | null;
+    decided_by_role_id?: string | null;
+    decision_note?: string | null;
+    /** RFC 3339 UTC; absent while `pending`. */
+    decided_at?: string | null;
+    /** RFC 3339 UTC. Past this, the request expires and can no longer be approved. */
+    expires_at: string;
+    /** RFC 3339 UTC. Set when the approved operation actually ran. */
+    executed_at?: string | null;
+    /** The id the executed operation produced — a refund id, for a refund. */
+    result_entity_id?: string | null;
+    /** Why an approved operation failed to execute. `approved` with this set is a real state. */
+    execution_error?: string | null;
+    created_at: string;
+}
+interface PendingOperationListParams {
+    /**
+     * Which operation's requests to list. **Defaults to `refund`** — the list
+     * is one operation at a time, not all of them, so a view that covers more
+     * than refunds must ask per operation.
+     */
+    operation?: LimitedOperation;
+    /**
+     * **Defaults to `pending`.** Omitting this filters to what is still
+     * awaiting a decision, not to everything: approved, rejected and expired
+     * requests are reachable only by asking for that status explicitly.
+     */
+    status?: PendingOperationStatus;
+    /** Defaults to 100, clamped to 1–500. */
+    limit?: number;
+}
+interface PendingOperationListResponse {
+    requests: PendingOperation[];
+}
+/** Body for approve/reject. The note is recorded on the request. */
+interface DecidePendingOperationRequest {
+    note?: string;
+}
+/**
+ * `DelopayError.data` on the 409 `DE_06` a refund gets when a
+ * `require_approval` rule parks it. Refunds are the only operation that can
+ * be parked, so this is the only call that raises `DE_06`.
+ *
+ * A non-2xx deliberately: nothing was created, so a 2xx envelope would be
+ * decoded as a refund that does not exist. Distinct from `DE_01`, which says
+ * the operation will not happen at all — this one names a request a second
+ * person can still approve, and until when.
+ */
+interface PendingApprovalErrorDetails {
+    pending_operation_id: string;
+    /** RFC 3339 UTC. */
+    expires_at: string;
+    limit_context?: PendingOperationLimitContext | null;
+}
 /** Half-open amount range filter; minor units. `null` bounds are open. */
 interface AmountFilter {
     start_amount?: number | null;
@@ -5533,6 +6176,112 @@ interface EpayoutsCatalogResponse {
     countries_probed?: number | null;
     countries_ok?: number | null;
 }
+/**
+ * One connector's stored risk index for a shop.
+ *
+ * Read-only snapshots — neither endpoint scores anything on demand, so
+ * `computed_at` is the age of the answer and can be older than the request.
+ */
+interface ConnectorRisk {
+    connector: string;
+    /** Coarse bucket the index falls in, e.g. `low` / `elevated` / `high`. */
+    band: string;
+    /** The index itself, when the snapshot carries one. */
+    index?: number | null;
+    /** Direction against the previous snapshot, when there is one to compare. */
+    trend?: string | null;
+    /** Which scoring model produced it. Bands are not comparable across versions. */
+    model_version: number;
+    /** RFC 3339 UTC — when the snapshot was computed, not when it was read. */
+    computed_at: string;
+    /**
+     * Per-signal contributions behind the index.
+     *
+     * Any JSON value: the backend passes the stored blob through verbatim and
+     * its shape is the scoring model's business, so it is versioned by
+     * `model_version` rather than by this type — an object today, an array in
+     * the backend's own fixture. Narrow it against the model you support;
+     * do not assume it is keyed.
+     */
+    components: unknown;
+}
+/** One shop's stored risk, per connector. */
+interface ShopRisk {
+    shop_id: string;
+    /** Newest `computed_at` across `connectors`; absent when the shop has none. */
+    computed_at?: string | null;
+    connectors: ConnectorRisk[];
+}
+/**
+ * The merchant-wide roll-up.
+ *
+ * A shop-scoped caller — a JWT with a profile-scoped role, or an API key
+ * pinned to one shop — gets its own shop and no sibling's, from this endpoint
+ * as much as from the per-shop one.
+ */
+interface MerchantRisk {
+    merchant_id: string;
+    /** Worst band across every shop; absent when nothing has been scored. */
+    worst_band?: string | null;
+    shops: ShopRisk[];
+}
+/** How far along a connector's integration is. */
+type ConnectorIntegrationStatus = 'live' | 'sandbox' | 'beta' | 'alpha';
+/** What kind of processor a connector is. */
+type DelopayConnectorCategory = 'payment_gateway' | 'alternative_payment_method' | 'bank_acquirer' | 'payout_processor' | 'authentication_provider' | 'fraud_and_risk_management_provider' | 'tax_calculation_provider' | 'revenue_growth_management_platform' | 'vault_provider';
+/** Whether one feature is available on a connector's payment method. */
+type FeatureStatus = 'supported' | 'not_supported';
+/** Card-only additions to a supported payment method. */
+interface CardSpecificFeatures {
+    three_ds: FeatureStatus;
+    no_three_ds: FeatureStatus;
+    /** Card network names, as the connector reports them. */
+    supported_card_networks: string[];
+}
+/** One payment method type a connector supports, and what it supports on it. */
+interface SupportedPaymentMethod extends Partial<CardSpecificFeatures> {
+    payment_method: PaymentMethod;
+    payment_method_type: PaymentMethodType;
+    payment_method_type_display_name: string;
+    mandates: FeatureStatus;
+    refunds: FeatureStatus;
+    supported_capture_methods: CaptureMethod[];
+    /** ISO 3166-1 alpha-3 codes. */
+    supported_countries?: string[] | null;
+    supported_currencies?: Currency[] | null;
+}
+/** One connector's entry in the feature matrix. */
+interface ConnectorFeatureMatrixEntry {
+    name: string;
+    display_name: string;
+    description: string;
+    base_url?: string | null;
+    category: DelopayConnectorCategory;
+    integration_status: ConnectorIntegrationStatus;
+    supported_payment_methods?: SupportedPaymentMethod[] | null;
+    supported_webhook_flows?: EventClass[] | null;
+    /**
+     * Whether the connector rejects an incoming webhook it cannot verify,
+     * rather than processing it unverified.
+     *
+     * A statement about failure, not about setup. `true` means an event that
+     * does not verify is dropped at the door; `false` means a failed
+     * verification is not by itself a reason to discard the event.
+     *
+     * It does **not** say the merchant must supply a credential, and must not
+     * be read that way: some connectors verify a signature against a value
+     * stored on the connector account, others check the request's source IP and
+     * fall back to the vendor's documented egress address — fail-closed either
+     * way, with nothing to enter. Read it as "an unverified event will not be
+     * acted on". Which field, if any, the setup flow must then collect is a
+     * separate question the connector's own config answers.
+     */
+    webhook_source_verification_mandatory: boolean;
+}
+interface FeatureMatrixResponse {
+    connector_count: number;
+    connectors: ConnectorFeatureMatrixEntry[];
+}
 
 /** Create and manage API keys for a merchant account. */
 declare class ApiKeys {
@@ -5791,7 +6540,32 @@ declare class Connectors {
     private readonly request;
     constructor(request: RequestFn);
     create(accountId: string, params: ConnectorCreateRequest): Promise<ConnectorResponse>;
+    /**
+     * One connector account.
+     *
+     * The credential-bearing fields come back `null` here, whatever is stored:
+     * `connector_webhook_details`, `connector_wallets_details`,
+     * `pm_auth_config` and `additional_merchant_data`. They are dropped rather
+     * than masked, because an editor that prefills from this response and
+     * PATCHes the field back would otherwise save a mask over a live signing
+     * secret. Send those fields only when the operator has typed a new value,
+     * and omit them entirely otherwise — an omitted field leaves the stored one
+     * alone.
+     *
+     * This is the retrieve path alone. `create` and `update` echo back what the
+     * caller sent, and `clone` returns the *copied* secrets — see that method.
+     *
+     * `GET /account/{accountId}/connectors/{connectorId}`
+     */
     retrieve(accountId: string, connectorId: string): Promise<ConnectorResponse>;
+    /**
+     * The merchant's connector accounts.
+     *
+     * Never wider than the caller: an API key pinned to one shop lists that
+     * shop's connectors only, not every sibling shop's.
+     *
+     * `GET /account/{accountId}/connectors`
+     */
     list(accountId: string): Promise<ConnectorResponse[]>;
     /**
      * The profile-scoped connector list. The merchant-wide `list()` is
@@ -5815,15 +6589,30 @@ declare class Connectors {
      */
     syncEpayoutsCatalog(accountId: string, connectorId: string): Promise<EpayoutsCatalogResponse>;
     update(accountId: string, connectorId: string, params: ConnectorUpdateRequest): Promise<ConnectorResponse>;
+    /**
+     * Remove a connector account.
+     *
+     * A shop-scoped role may remove a connector of its own shop — the shop is
+     * re-checked server-side — so creating processors and removing them are the
+     * same rung of access rather than two.
+     *
+     * `DELETE /account/{accountId}/connectors/{connectorId}`
+     */
     delete(accountId: string, connectorId: string): Promise<ConnectorResponse>;
     /**
      * Clone a connector into another shop (business profile) of the same
      * merchant. `POST /account/{accountId}/connectors/{connectorId}/clone`
      *
      * Credentials are copied server-side, re-encrypted under the same merchant
-     * key — the caller never handles them (list/retrieve mask credentials, so a
-     * client-side copy is impossible). Returns the newly created connector in
-     * the target shop.
+     * key, so the caller never has to *supply* them — `retrieve` returns `null`
+     * for the credential fields, which is what makes a client-side copy
+     * impossible in the first place.
+     *
+     * The response, however, is the unredacted connector: `connector_account_details`
+     * is masked, but `connector_webhook_details`, `connector_wallets_details`,
+     * `pm_auth_config` and `additional_merchant_data` come back with the copied
+     * secrets in them — values this caller never sent. Do not log or echo the
+     * response; read `merchant_connector_id` and discard the rest.
      */
     clone(accountId: string, connectorId: string, params: ConnectorCloneRequest): Promise<ConnectorResponse>;
     /**
@@ -6095,6 +6884,11 @@ declare class Disputes {
  * Ephemeral keys grant a mobile or browser client temporary access to a
  * specific customer's data (e.g. to display saved payment methods) without
  * exposing your secret API key.
+ *
+ * The key is confined to the customer it was minted for, and that is
+ * enforced on every customer and payment-method route: a request for another
+ * customer — or for a payment method belonging to one — is refused rather
+ * than served. Mint one key per customer; do not reuse a key across them.
  */
 declare class EphemeralKeys {
     private readonly request;
@@ -6453,6 +7247,13 @@ declare class Payments {
      *   test_mode: process.env.NODE_ENV !== 'production',
      * });
      * ```
+     *
+     * A payment that pins one connector through `routing` (the `single` form)
+     * is now checked against `test_mode` here rather than at confirm: if that
+     * connector has no credentials for the environment asked for, create fails
+     * instead of handing back a payment whose checkout the buyer cannot
+     * complete. `priority` and `volume_split` name several accounts and are
+     * still resolved at confirm.
      */
     create(params: PaymentCreateRequest, options?: RequestExtras): Promise<PaymentResponse>;
     /**
@@ -6848,6 +7649,14 @@ declare class Refunds {
     /**
      * Create a refund for a payment.
      *
+     * Dashboard-initiated refunds are subject to the caller's operation-limit
+     * rule, resolved against the role the request authenticated with. An
+     * over-limit refund either fails with `DE_01` (the rule blocks) or with
+     * HTTP 409 `DE_06` — the rule requires approval, and `DelopayError.data`
+     * carries `PendingApprovalErrorDetails`. No refund exists in either case;
+     * `DE_06` names one that a second approver can still let through, via
+     * `operationLimits.approve()`.
+     *
      * @param params - Refund parameters, including the required `payment_id` and optional amount.
      * @returns The created refund.
      *
@@ -7020,6 +7829,45 @@ declare class Routing {
      * @returns The updated routing configuration including the algorithm body.
      */
     update(algorithmId: string, params: RoutingConfigUpdateRequest): Promise<MerchantRoutingAlgorithm>;
+    /**
+     * Every content window a routing configuration has had, oldest first.
+     *
+     * A configuration's rule can be edited in place, so this is what makes "which
+     * rule decided this payment" answerable after the fact. Each entry is the rule
+     * as it stood between `valid_from` and `valid_until`; the windows of one
+     * config abut exactly, with no gap.
+     *
+     * Paging covers the whole timeline including the live window, so a page never
+     * holds more than `limit` entries and the live one — the only entry without a
+     * `valid_until` — comes back on exactly one page. Advance `offset` by `limit`;
+     * a page past the end is empty, and `total_count` says where that end is
+     * without probing for it.
+     *
+     * `GET /routing/{algorithmId}/history`
+     *
+     * @param algorithmId - The routing algorithm to read the history of.
+     * @param params - Optional paging.
+     */
+    history(algorithmId: string, params?: RoutingHistoryParams): Promise<RoutingConfigHistoryResponse>;
+    /**
+     * A shop's lifetime per-connector payment caps, each with how much of it is
+     * already spent.
+     *
+     * `GET /routing/connector-caps/{profileId}`
+     */
+    connectorCaps(profileId: string): Promise<RoutingConnectorCaps>;
+    /**
+     * Replace a shop's per-connector payment caps.
+     *
+     * Whole-set replacement, not a patch: the list sent becomes the complete set
+     * of capped connectors, and an empty list clears them all — which is how
+     * acquirer onboarding finishes, the new account ceasing to be a special case.
+     *
+     * Every account named must belong to this shop; one that does not is refused.
+     *
+     * `PUT /routing/connector-caps/{profileId}`
+     */
+    setConnectorCaps(profileId: string, params: RoutingConnectorCaps): Promise<RoutingConnectorCaps>;
     /**
      * List all routing algorithms for the current merchant.
      *
@@ -7731,7 +8579,15 @@ declare class Users {
     getAuthUrl(): Promise<Record<string, unknown>>;
     /** Select auth method. `POST /user/auth/select` */
     selectAuth(params: Record<string, unknown>): Promise<Record<string, unknown>>;
-    /** List users in lineage. `GET /user/employees/list` */
+    /**
+     * List users in lineage.
+     *
+     * Needs the Users *view* grant now — the response carries colleagues' email
+     * addresses, so a role without it is refused rather than handed a roster.
+     * A shop-scoped role keeps reading its own shop's members.
+     *
+     * `GET /user/employees/list`
+     */
     listUsersInLineage(params?: ListUsersInLineageParams): Promise<UserInLineage[]>;
     /** Resend invite. `POST /user/resend-invite` */
     resendInvite(params: Record<string, unknown>): Promise<Record<string, unknown>>;
@@ -7859,6 +8715,33 @@ declare class Analytics {
      * `GET /analytics/devices/transactions`
      */
     deviceTransactions(params: DeviceDrillRequest): Promise<DrillResponse>;
+    /**
+     * Subscription analytics over `subscription` and `invoice`: estimated
+     * recurring volume, the invoice funnel, movement (new / expansion /
+     * contraction / churn), both processor axes, plan mix and the breakdown one
+     * level below the scope. Pinned server-side to your own merchant and
+     * drillable via `project_id` / `shop_id` exactly like `scope`.
+     *
+     * Half the figures are **stocks** — a snapshot at the window's end rather
+     * than a sum over it — so `est_monthly_volume_usd` and `active` can match
+     * across a 7-day and a 30-day window while `billed_volume_usd` does not.
+     * Day granularity only. `GET /analytics/subscriptions`
+     */
+    subscriptions(params?: SubscriptionAnalyticsRequest): Promise<SubscriptionAnalyticsResponse>;
+    /**
+     * The billing cycles behind one clicked element of the subscription
+     * dashboard: an invoice outcome, a processor slice on either axis, a plan
+     * row, a subscription status, a movement component, a series bucket or a
+     * breakdown row. Same window/scope/filter contract as `subscriptions`; 50
+     * rows per page (`offset` for the next), newest first, with the full match
+     * count alongside.
+     *
+     * A cycle that never reached a payment is listed too — that is what "still
+     * unpaid" means — and carries its invoice id as `payment_id` with
+     * `invoice_id` set to the same value, so you can always tell which you got.
+     * `GET /analytics/subscriptions/list`
+     */
+    subscriptionsList(params: SubscriptionDrillRequest): Promise<DrillResponse>;
     /** Global search. `POST /analytics/search` */
     search(params: Record<string, unknown>): Promise<Record<string, unknown>>;
     /** Domain-specific search. `POST /analytics/search/{domain}` */
@@ -7904,18 +8787,22 @@ declare class Export {
     transactions(params: Record<string, unknown>): Promise<Record<string, unknown>>;
 }
 
+/**
+ * What each connector can do: payment methods, capture methods, webhook
+ * flows, and whether an unverified webhook is acted on.
+ */
 declare class FeatureMatrix {
     private readonly request;
     constructor(request: RequestFn);
     /** Retrieve the feature matrix. `GET /feature-matrix` */
-    retrieve(): Promise<Record<string, unknown>>;
+    retrieve(): Promise<FeatureMatrixResponse>;
     /**
      * Retrieve the feature matrix scoped to a merchant. Beta connectors
      * are filtered against the merchant's allowlist so the dashboard only
      * surfaces connectors the merchant can actually attach.
      * `GET /feature-matrix/{merchantId}`
      */
-    retrieveForMerchant(merchantId: string): Promise<Record<string, unknown>>;
+    retrieveForMerchant(merchantId: string): Promise<FeatureMatrixResponse>;
 }
 
 declare class Files {
@@ -8185,6 +9072,12 @@ declare class Settlement {
     /**
      * Record payout progress on a statement (`unpaid` / `partial` / `paid`).
      *
+     * Subject to the caller's `settlement_payout` operation limit, which can
+     * only be a per-operation ceiling: an over-limit call fails with `DE_01`
+     * and nothing is recorded. There is no approval route out of it — four-eyes
+     * needs an executor that can run the operation once somebody says yes, and
+     * only refunds have one, so a settlement rule can only block.
+     *
      * `POST /settlement/statements/{statementId}/payout`
      */
     updateStatementPayout(statementId: string, params: StatementPayoutUpdateRequest, options?: RequestExtras): Promise<FeeStatementDetail>;
@@ -8240,6 +9133,11 @@ declare class Settlement {
      * Add a manual adjustment to a statement. Positive `amount_usd` charges
      * the shop (reducing their payout); negative credits them.
      *
+     * Subject to the caller's `settlement_adjustment` operation limit (amount
+     * dimensions only): an over-limit call fails with `DE_01` and no adjustment
+     * is added. A settlement rule can only block — approval is refund-only, for
+     * the reason given on `updateStatementPayout()`.
+     *
      * `POST /settlement/statements/{statementId}/adjustments`
      */
     createStatementAdjustment(statementId: string, params: StatementAdjustmentCreateRequest, options?: RequestExtras): Promise<StatementAdjustment>;
@@ -8252,9 +9150,20 @@ declare class Settlement {
 }
 
 /**
- * Per-operation spending limits (refunds today): rules scoped to the
- * merchant, a role or a user, plus the merchant-level enforcement settings.
+ * Per-operation spending limits: rules scoped to the merchant, a role or a
+ * user, the merchant-level enforcement settings, and the approvals inbox.
  * Enforcement resolves the most specific rule: user > role > merchant.
+ *
+ * A rule set to `require_approval` does not refuse an over-limit operation —
+ * it parks it. The original call fails with HTTP 409 `DE_06` carrying
+ * `PendingApprovalErrorDetails`, and the operation runs only once a second
+ * person approves the request through this inbox.
+ *
+ * **Refunds only.** Approval needs an executor that can run the operation
+ * after the decision, and only refunds have one; the settlement operations
+ * take `block` alone, which the request type enforces. So every request in
+ * this inbox is a refund, and `DE_06` never comes back from a settlement
+ * call — an over-limit settlement adjustment or payout fails with `DE_01`.
  */
 declare class OperationLimits {
     private readonly request;
@@ -8291,6 +9200,69 @@ declare class OperationLimits {
      * `PUT /operation-limits/settings`
      */
     updateSettings(params: UpdateOperationLimitSettingsRequest, options?: RequestExtras): Promise<OperationLimitSettings>;
+    /**
+     * The approvals inbox: over-limit operations waiting on a second person.
+     *
+     * Both filters default rather than widen. With no `status` the list holds
+     * **pending requests only** — approved, rejected and expired ones are
+     * reachable only by asking for that status, so a history view must pass one
+     * per status. With no `operation` it lists **refunds only**; the list is one
+     * operation at a time. `limit` defaults to 100 and is clamped to 1–500.
+     *
+     * Requests past their `expires_at` are expired before the list is read, so
+     * nothing here is shown as actionable when it is not.
+     *
+     * `GET /operation-limits/approvals`
+     */
+    listApprovals(params?: PendingOperationListParams, options?: RequestExtras): Promise<PendingOperationListResponse>;
+    /**
+     * Approve a parked operation and execute it.
+     *
+     * Refused for the user who requested it, and for an approver whose own
+     * limit would not have covered the operation — the permission is necessary
+     * and not sufficient.
+     *
+     * Approval and execution are two facts. A request that was approved but
+     * whose operation then failed comes back `approved` with `execution_error`
+     * set and no `result_entity_id`; that is a real outcome, not a partial read.
+     *
+     * `POST /operation-limits/approvals/{id}/approve`
+     */
+    approve(id: string, params?: DecidePendingOperationRequest, options?: RequestExtras): Promise<PendingOperation>;
+    /**
+     * Reject a parked operation. Nothing is executed and the request is closed.
+     *
+     * `POST /operation-limits/approvals/{id}/reject`
+     */
+    reject(id: string, params?: DecidePendingOperationRequest, options?: RequestExtras): Promise<PendingOperation>;
+}
+
+/**
+ * Stored shop risk indexes, per connector.
+ *
+ * Both reads return snapshots and never score on demand, so `computed_at` is
+ * the age of the answer rather than the time of the call.
+ *
+ * The caller's own scope is what bounds the answer, and it is enforced
+ * server-side: a profile-scoped role, or an API key pinned to one shop, gets
+ * that shop from both endpoints and cannot read or enumerate a sibling's.
+ */
+declare class Risk {
+    private readonly request;
+    constructor(request: RequestFn);
+    /**
+     * Every shop's stored risk for the caller's merchant, with the worst band
+     * across them.
+     *
+     * `GET /risk`
+     */
+    retrieve(options?: RequestExtras): Promise<MerchantRisk>;
+    /**
+     * One shop's stored risk index per connector.
+     *
+     * `GET /risk/shops/{profileId}`
+     */
+    retrieveShop(profileId: string, options?: RequestExtras): Promise<ShopRisk>;
 }
 
 /**
@@ -8422,6 +9394,7 @@ declare class Delopay {
     readonly threeDsRules: ThreeDsRules;
     readonly settlement: Settlement;
     readonly operationLimits: OperationLimits;
+    readonly risk: Risk;
     readonly subscriptions: Subscriptions;
     readonly files: Files;
     readonly export: Export;
@@ -9519,4 +10492,4 @@ declare function focusedCheckoutUrl(params: FocusedCheckoutUrlParams): string;
 declare const CHECKOUT_EVENT_KINDS: readonly ["native_pane_selected", "native_pane_tab_opened", "native_pane_tab_blocked", "native_pane_abandoned", "native_pane_returned"];
 type CheckoutEventKind = (typeof CHECKOUT_EVENT_KINDS)[number];
 
-export { ALL_CUSTOM_FIELD_CONDITION_SOURCES, ALL_CUSTOM_FIELD_OPERATORS, ALL_CUSTOM_FIELD_TYPES, type AddUserRequest, type AddUserResponse, type Address, type AddressDetails, type AllocationListResponse, type AllocationResponse, type AllocationTransferRequest, type AllocationTransferResponse, type AmountFilter, type AmountRange, Analytics, type AnalyticsChild, type AnalyticsConnectorDay, type AnalyticsConnectorSeries, AnalyticsDashboard, type AnalyticsDayBucket, type AnalyticsMethodSlice, type AnalyticsScopeRequest, type AnalyticsScopeResponse, type ApiKeyCreateRequest, type ApiKeyCreateResponse, type ApiKeyExpiration, type ApiKeyListConstraints, type ApiKeyResponse, type ApiKeyRevokeResponse, type ApiKeyUpdateRequest, type ApplePayVerificationRequest, type ApplePayVerificationResponse, type ApplePayVerifiedDomainsResponse, type AttemptStatus, type AuthResponse, type AuthenticationCreateRequest, type AuthenticationResponse, type AuthenticationStatus, type AuthenticationType, type AutoRechargeConfig, type AutoRechargeUpdateRequest, type AvailabilityOverrideCreateRequest, type AvailabilityOverrideResponse, AvailabilityOverrides, type AvailabilityPreviewMethod, type AvailabilityPreviewParams, type AvailabilityPreviewResponse, BRANDING_EXPORT_FORMAT, BRANDING_EXPORT_VERSION, type BankCodeResponse, type BankDebitTypes, type BankTransferTypes, type BillingCompleteSetupRequest, type BillingProfileResponse, type BillingSetupRequest, type BillingSetupResponse, type BlockedAttempt, type BlockedAttemptListParams, type BlockedAttemptListResponse, type BlocklistAddRequest, type BlocklistDataKind, type BlocklistResponse, type BrandingExport, type BrandingSource, type BuiltInRegionGroupResponse, type BusinessPaymentLinkConfig, CHECKBOX_CHECKED, CHECKBOX_UNCHECKED, CHECKOUT_EVENT_KINDS, CUSTOM_CSS_MAX_LENGTH, CUSTOM_FIELDS_MAX, CUSTOM_FIELD_CONDITIONS_MAX, CUSTOM_FIELD_KEY_PATTERN, CUSTOM_FIELD_OPERATORS_BY_SOURCE, CUSTOM_FIELD_VALUELESS_OPERATORS, type CancelSubscriptionRequest, type CancelSubscriptionResponse, type CaptureMethod, type CardDetail, type CardDetailFromLocker, type CardNetworkTypes, Cards, type ChangePasswordRequest, type CheckoutBranding, type CheckoutBrandingUpdate, type CheckoutCustomField, type CheckoutEventKind, CheckoutSession, type CheckoutSessionOptions, type CheckoutThemeComparisonSide, type CheckoutThemeConversionCaveat, type CheckoutThemeConversionCell, type CheckoutThemeConversionComparison, type CheckoutThemeConversionQuery, type CheckoutThemeConversionResponse, type CheckoutThemeConversionSegment, type CheckoutThemeDenominatorBasis, type CheckoutThemeDimension, type CheckoutThemeOutput, type CheckoutThemeProgram, type CheckoutThemeProgramRequest, type CheckoutThemeProgramResponse, type CheckoutThemeRule, type CheckoutThemeSampleVerdict, type ClientAnalyticsCaveat, type ClientAnalyticsFilters, type ClientAnalyticsRequest, type ConditionNode, type ConfirmSubscriptionPaymentDetails, type ConfirmSubscriptionRequest, type ConfirmSubscriptionResponse, type Connector, type ConnectorCloneRequest, type ConnectorCreateRequest, type ConnectorListResponse, type ConnectorOwnership, type ConnectorResponse, type ConnectorSelection, type ConnectorType, type ConnectorUpdateRequest, type ConnectorVolumeSplit, type ConnectorWebhookEntry, type ConnectorWebhookEventType, type ConnectorWebhookListResponse, type ConnectorWebhookRegisterRequest, type ConnectorWebhookRegisterResponse, type ConnectorWebhookSyncResponse, type ConnectorWebhookSyncResult, type CornerRadius, type CreateAndConfirmSubscriptionRequest, type CreateSubscriptionPaymentDetails, type CreateSubscriptionRequest, type Currency, type CurrencyRevenue, type CustomFieldCondition, type CustomFieldConditionSource, type CustomFieldContext, type CustomFieldOperator, type CustomFieldOption, type CustomFieldTranslations, type CustomFieldType, type CustomFieldVisibility, type CustomerCreateRequest, type CustomerListParams, type CustomerPaymentMethodsListParams, type CustomerPaymentMethodsListResponse, type CustomerResponse, type CustomerUpdateRequest, DEFAULT_BADGES, DEFAULT_BADGES_DARK, DEFAULT_BRANDING, DEFAULT_BRANDING_DARK, type DeleteAccountRequest, type DeleteUserRoleRequest, Delopay, DelopayAuthenticationError, DelopayError, type DelopayLogger, type DelopayOptions, type DeviceAnalyticsChild, type DeviceAnalyticsTotals, type DeviceBrowserSlice, type DeviceChannelBucket, type DeviceClassSlice, type DeviceDrillRequest, type DeviceModelSlice, type DevicePlatformSlice, type DeviceSessionBucket, type DevicesAnalyticsResponse, type DisputeEvidenceBlock, type DisputeEvidenceRequest, type DisputeEvidenceType, type DisputeListParams, type DisputeResponse, type DisputeStage, type DisputeStatus, type DrillPayment, type DrillResponse, type EncodedBranding, type EntityType, type EpayoutsCatalogEntry, type EpayoutsCatalogResponse, type EpayoutsLocality, type EpayoutsMethod, type EpayoutsMethodsResponse, type EpayoutsRail, type EphemeralKeyCreateRequest, type EphemeralKeyCreateResponse, type EuclidComparison, type EuclidComparisonType, type EuclidIfStatement, type EuclidValue, type EventClass, type EventDeliveryAttemptResponse, type EventDetailResponse, type EventListParams, type EventListResponse, type EventResponse, type EventType, Export, FeatureMatrix, type FeeOwner, FeeProgramBuilder, type FeeRuleConditions, type FeeRuleDefaultPrecedence, type FeeRuleInput, type FeeRulePreviewRequest, type FeeRulePreviewResponse, type FeeScheduleCreateRequest, type FeeScheduleResponse, type FeeScheduleUpdateRequest, type FeeSpecInput, type FeeStatementDetail, type FeeStatementSummary, type FeeType, Files, type FocusedCheckoutUrlParams, type FontFamily, type FontWeight, Forex, type ForgotPasswordRequest, type FromEmailRequest, type FutureUsage, type GatewayConnectRequest, type GatewayResponse, type GeoAnalyticsChild, type GeoAnalyticsResponse, type GeoAnalyticsTotals, type GeoCitySlice, type GeoCountrySlice, type GeoDrillRequest, type GeoLanguageSlice, type GetSubscriptionItemsParams, type GetSubscriptionItemsResponse, type GlobalSearchRequest, type GroupNode, type ImpersonateEmployeeRequest, type IntentStatus, type InviteUsersRequest, type InviteUsersResponse, type InvoiceStatus, type LabelStyle, type LayoutStyle, type LeafNode, type LedgerEntry, type LedgerListParams, type LedgerResponse, type LimitedOperation, type LinkedRoutingConfigRetrieveResponse, type ListInvitableRolesParams, type ListUsersInLineageParams, type LoginHistoryEntry, type LoginHistoryParams, type LoginHistoryResponse, type LogoShape, type LogoSize, type MandateListParams, type MandateResponse, type MandateRevokedResponse, type MandateStatus, type MandateType, type MarginQuality, type MerchantAccountCreateRequest, type MerchantAccountResponse, type MerchantAccountType, type MerchantAccountUpdateRequest, type MerchantOverviewResponse, type MerchantOverviewStat, type MerchantRoutingAlgorithm, type MethodSurcharge, type MinimalRoleInfo, NATIVE_PANES_MAX, NATIVE_PANE_CATEGORY_KEYS, NATIVE_PANE_ICON_KEYS, type NativePaneMethodInfo, type NativePaneOpenTarget, type NativePaneRail, type NativePaneView, type NativePaneVisibility, type NonPillRadius, type OperationLimitOnExceeded, type OperationLimitRule, type OperationLimitRuleDeleteResponse, type OperationLimitRuleListParams, type OperationLimitScope, type OperationLimitSettings, type OperationLimitWindowMode, OperationLimits, type OverrideAction, type OverrideScope, type ParentGroup, type ParentGroupInfo, type PauseSubscriptionRequest, type PauseSubscriptionResponse, type PaymentAttemptResponse, type PaymentAttemptsListResponse, type PaymentCancelRequest, type PaymentCaptureRequest, type PaymentClientContextEntry, type PaymentClientContextListResponse, type PaymentConfirmRequest, type PaymentCreateRequest, type PaymentErrorDetails, type PaymentExperience, type PaymentExperienceTypes, type PaymentIdFormatConfig, type PaymentIdStyle, type PaymentIntentStateMetadata, type PaymentLayout, type PaymentLinkBackgroundImageConfig, type PaymentLinkConfigRequest, type PaymentLinkListParams, type PaymentLinkListResponse, type PaymentLinkResponse, type PaymentLinkTransactionDetails, type PaymentListFilterConstraints, type PaymentListFilteredResponse, type PaymentListOrder, type PaymentListParams, type PaymentListResponse, type PaymentMethod, type PaymentMethodAmountLimits, type PaymentMethodCreateRequest, type PaymentMethodDeleteResponse, type PaymentMethodDisplayInfo, type PaymentMethodListInstallmentAmountDetails, type PaymentMethodListInstallmentOption, type PaymentMethodListInstallmentPlan, type PaymentMethodListIntentData, type PaymentMethodListParams, type PaymentMethodListResponse, type PaymentMethodResponse, type PaymentMethodType, type PaymentMethodUpdateRequest, type PaymentResponse, type PaymentRetrieveOptions, type PaymentStatusHistoryEntityType, type PaymentStatusHistoryEvent, type PaymentStatusHistoryResponse, type PaymentUpdateRequest, type PaymentsDeletePolicyResponse, type PaymentsDeleteResponse, type PayoutCreateRequest, type PayoutListParams, type PayoutListResponse, type PayoutResponse, type PayoutStatus, type PayoutType, type PayoutUpdateRequest, type PayseproMethod, type PayseproMethodsResponse, type PerMethodSurchargeItem, type PermissionScope, type PhoneDetails, type PhoneOtpRequest, type PhoneOtpResponse, type PhoneOtpVerifyRequest, type PhoneOtpVerifyResponse, type PlatformFeeKind, type PlatformFeeOutput, type PlatformFeeProgram, type PlatformFeeRule, type PlatformFeeRuleInput, type PlatformFeeRuleOutput, type PlatformFeeRuleRecord, type PlatformFeeRuleRequest, type PollStatus, type PollStatusResponse, type ProcessorCostBasis, type ProcessorCostBucket, type ProcessorCostSource, type ProfileAcquirerCreateRequest, type ProfileAcquirerResponse, type ProfileAcquirerUpdateRequest, type ProfileCreateRequest, type ProfileDefaultRoutingConfig, type ProfileDeniedConnectorsResponse, type ProfileLogoUploadResponse, type ProfileResponse, type ProfileUpdateRequest, type ProgramConnectorSelection, type ProjectCreateRequest, type ProjectResponse, type ProjectStats, type ProjectStatsResponse, type ProjectUpdateRequest, type PublishableKey, type RecordCheckoutEventRequest, type RecordCheckoutEventResponse, type RecoveryCodesResponse, type RefundAggregateResponse, type RefundCreateRequest, type RefundListParams, type RefundListResponse, type RefundResponse, type RefundStatus, type RefundType, type RefundUpdateRequest, type RegionCountriesResponse, type RegionCreateRequest, type RegionResponse, type RegionSetCountriesRequest, type RegionUpdateRequest, Regions, type RelayRequest, type RelayResponse, type RelayStatus, type RelayType, type RequestExtras, type RequestFn, type RequestOptions, type RequiredFieldInfo, type ResetPasswordRequest, type ResponsePaymentMethodTypes, type ResponsePaymentMethodsEnabled, type ResumeSubscriptionRequest, type ResumeSubscriptionResponse, type RoleConnectorGrant, type RoleConnectorGrantEntry, type RoutableConnectorChoice, type RoutingActivatePayload, type RoutingConfigCreateRequest, type RoutingConfigResponse, type RoutingConfigUpdateRequest, type RoutingDeactivateRequest, type RoutingDictionary, type RoutingDictionaryRecord, type RuleConnectorSelection, STRIPE_NATIVE_PANE_METHODS, Search, type SearchGroupResponse, type SearchIndex, type SearchStatus, type SearchTimeRange, Settlement, type SettlementBackfillRequest, type SettlementBackfillResponse, type SettlementBucket, type SettlementCostParams, type SettlementCostPeriod, type SettlementCostResponse, type SettlementCurrentParams, type SettlementCurrentResponse, type SettlementLine, type SettlementLineBase, type SettlementLineListParams, type SettlementLineListResponse, type SettlementLineWithProcessorCost, type SettlementLineWithoutProcessorCost, type SettlementOverviewParams, type SettlementOverviewResponse, type SettlementPayoutStatus, type SettlementStatementListParams, type SettlementStatementListResponse, type ShopCreateRequest, type ShopFeeConfigEntry, type ShopFeeConfigParams, type ShopFeeConfigResponse, type ShopResponse, type ShopSettlementOverview, type ShopStats, type ShopStatsResponse, type ShopUpdateRequest, type ShopVisibilityResponse, type ShopVisibilityUpdateRequest, type SignInRequest, type SignUpRequest, type SignUpWithMerchantIdRequest, type SignUpWithMerchantRequest, type SizeScale, type SpacingScale, type StatementAdjustment, type StatementAdjustmentCreateRequest, type StatementAdjustmentListResponse, type StatementGenerateRequest, type StatementPayoutUpdateRequest, type StatementPdfParams, type StaticRoutingAlgorithm, type StatsPeriod, type StripeConnectAccountRequest, type StripeConnectAccountResponse, type StripeConnectLinkRequest, type StripeConnectLinkResponse, type StripeNativePane, type StripePaymentMethodDomainResult, type StripePaymentMethodDomainStatus, type StripePaymentMethodDomainsRegisterRequest, type StripePaymentMethodDomainsRegisterResponse, type SubscriptionBillingProcessorResponse, type SubscriptionEstimateParams, type SubscriptionEstimateResponse, type SubscriptionInvoice, type SubscriptionInvoiceListParams, type SubscriptionInvoiceListResponse, type SubscriptionItem, type SubscriptionItemPrice, type SubscriptionItemType, type SubscriptionLineItem, type SubscriptionListParams, type SubscriptionPaymentData, type SubscriptionPaymentDetails, type SubscriptionPaymentLink, type SubscriptionPaymentLookupRequest, type SubscriptionPaymentLookupResponse, type SubscriptionPeriodUnit, type SubscriptionResponse, type SubscriptionStatus, Subscriptions, type SummaryPosition, type SurchargeDetailsResponse, type SurchargeResponse, type SurchargeRuleRequest, type SurchargeRuleResponse, type SurfaceStyle, type SwitchMerchantRequest, type SwitchProfileRequest, type Terminate2faQueryParams, type ThemeBrowserLanguage, type ThemeCheckoutChannel, type ThemeChoice, type ThemeCondition, type ThemeDeviceClass, type ThemeEnumCondition, type ThemeIfStatement, type ThemeMetadataCondition, type ThemeNumberCondition, type ThemeTrafficSource, type ThreeDSDecision, type ThreeDsRuleExecuteRequest, type ThreeDsRuleResponse, type TierSummary, type TimeToPayBucket, type TimeToPayStats, type TokenPurpose, type TokenResponse, type TopupRequest, type TopupResponse, type TotpResponse, type TransactionType, type TrustBadge, type UpdateMetadataRequest, type UpdateOperationLimitSettingsRequest, type UpdateRoleConnectorGrantParams, type UpdateSubscriptionRequest, type UpdateUserDetailsRequest, type UpdateUserRoleRequest, type UpsertOperationLimitRuleRequest, type UserInLineage, type UserResponse, type UserSessionEntry, type UserSessionListResponse, type UserSessionRevokeResponse, type VaultCheck, type VaultCheckId, type VaultCheckStatus, type VaultCollectSessionResponse, type VaultEnvironment, type VaultPaymentMethodRequest, type VaultPaymentMethodResponse, type VaultRouteApplyVerification, type VaultRouteChange, type VaultRouteChangeKind, type VaultRouteFieldChange, type VaultRouteIds, type VaultRoutePurpose, type VaultRouteWarning, type VaultRouteWarningCode, type VaultRoutesApplyRequest, type VaultRoutesApplyResponse, type VaultRoutesFingerprint, type VaultRoutesPreviewRequest, type VaultRoutesPreviewResponse, type VaultVerificationResponse, type VaultVerifyRequest, type VerifyTotpRequest, type WebhookDeliveryAttempt, type WebhookDeliveryTerminalReason, type WebhookDetails, type WebhookEvent, type WebhookRefundStatus, type WebhookRegistrationEnvironment, Webhooks, allOf, anyOf, applyBrandingVariables, buildBrandingExport, buttonPadValue, cloneBranding, cloneCustomField, cloneNativePane, customFieldContextFromMetadata, customFieldIsTextLike, customFieldOperatorTakesValue, customFieldOptionLabel, customFieldText, decodeBadges, decodeBranding, decodeCustomFields, decodeNativePanes, defaultBranding, defaultCustomFieldVisibility, defaultNativePane, defaultOperatorForSource, encodeBadges, encodeBranding, encodeCustomFields, encodeNativePanes, evaluateCustomFieldCondition, evaluateCustomFieldVisibility, feeProgram, focusedCheckoutUrl, fontStack, fontWeightValue, inputPadValue, isCheckboxChecked, isDarkSurface, isHexColor, leaf, logoDimensions, nativePaneMethodInfo, parseCustomFieldsLoose, parseImportedBranding, programToTree, radiusValue, ruleMatchToTree, sanitizeCustomCss, shadowFor, surfacePadValue, verticalGapValue, visibleCustomFields };
+export { ALL_CUSTOM_FIELD_CONDITION_SOURCES, ALL_CUSTOM_FIELD_OPERATORS, ALL_CUSTOM_FIELD_TYPES, type AddUserRequest, type AddUserResponse, type Address, type AddressDetails, type AllocationListResponse, type AllocationResponse, type AllocationTransferRequest, type AllocationTransferResponse, type AmountFilter, type AmountRange, Analytics, type AnalyticsChild, type AnalyticsConnectorDay, type AnalyticsConnectorSeries, AnalyticsDashboard, type AnalyticsDayBucket, type AnalyticsMethodSlice, type AnalyticsScopeRequest, type AnalyticsScopeResponse, type ApiKeyCreateRequest, type ApiKeyCreateResponse, type ApiKeyExpiration, type ApiKeyListConstraints, type ApiKeyResponse, type ApiKeyRevokeResponse, type ApiKeyUpdateRequest, type ApplePayVerificationRequest, type ApplePayVerificationResponse, type ApplePayVerifiedDomainsResponse, type AttemptStatus, type AuthResponse, type AuthenticationCreateRequest, type AuthenticationResponse, type AuthenticationStatus, type AuthenticationType, type AutoRechargeConfig, type AutoRechargeUpdateRequest, type AvailabilityOverrideCreateRequest, type AvailabilityOverrideResponse, AvailabilityOverrides, type AvailabilityPreviewMethod, type AvailabilityPreviewParams, type AvailabilityPreviewResponse, BRANDING_EXPORT_FORMAT, BRANDING_EXPORT_VERSION, type BankCodeResponse, type BankDebitTypes, type BankTransferTypes, type BillingCompleteSetupRequest, type BillingProfileResponse, type BillingSetupRequest, type BillingSetupResponse, type BlockedAttempt, type BlockedAttemptListParams, type BlockedAttemptListResponse, type BlocklistAddRequest, type BlocklistDataKind, type BlocklistResponse, type BrandingExport, type BrandingSource, type BuiltInRegionGroupResponse, type BusinessPaymentLinkConfig, CHECKBOX_CHECKED, CHECKBOX_UNCHECKED, CHECKOUT_EVENT_KINDS, CUSTOM_CSS_MAX_LENGTH, CUSTOM_FIELDS_MAX, CUSTOM_FIELD_CONDITIONS_MAX, CUSTOM_FIELD_KEY_PATTERN, CUSTOM_FIELD_OPERATORS_BY_SOURCE, CUSTOM_FIELD_VALUELESS_OPERATORS, type CancelSubscriptionRequest, type CancelSubscriptionResponse, type CaptureMethod, type CardDetail, type CardDetailFromLocker, type CardNetworkTypes, type CardSpecificFeatures, Cards, type ChangePasswordRequest, type CheckoutBranding, type CheckoutBrandingUpdate, type CheckoutCustomField, type CheckoutEventKind, CheckoutSession, type CheckoutSessionOptions, type CheckoutThemeComparisonSide, type CheckoutThemeConversionCaveat, type CheckoutThemeConversionCell, type CheckoutThemeConversionComparison, type CheckoutThemeConversionQuery, type CheckoutThemeConversionResponse, type CheckoutThemeConversionSegment, type CheckoutThemeDenominatorBasis, type CheckoutThemeDimension, type CheckoutThemeOutput, type CheckoutThemeProgram, type CheckoutThemeProgramRequest, type CheckoutThemeProgramResponse, type CheckoutThemeRule, type CheckoutThemeSampleVerdict, type ClientAnalyticsCaveat, type ClientAnalyticsFilters, type ClientAnalyticsRequest, type ConditionNode, type ConfirmSubscriptionPaymentDetails, type ConfirmSubscriptionRequest, type ConfirmSubscriptionResponse, type Connector, type ConnectorCloneRequest, type ConnectorCreateRequest, type ConnectorFeatureMatrixEntry, type ConnectorIntegrationStatus, type ConnectorListResponse, type ConnectorOwnership, type ConnectorResponse, type ConnectorRisk, type ConnectorSelection, type ConnectorType, type ConnectorUpdateRequest, type ConnectorVolumeSplit, type ConnectorWebhookEntry, type ConnectorWebhookEventType, type ConnectorWebhookListResponse, type ConnectorWebhookRegisterRequest, type ConnectorWebhookRegisterResponse, type ConnectorWebhookSyncResponse, type ConnectorWebhookSyncResult, type CornerRadius, type CreateAndConfirmSubscriptionRequest, type CreateSubscriptionPaymentDetails, type CreateSubscriptionRequest, type Currency, type CurrencyRevenue, type CustomFieldCondition, type CustomFieldConditionSource, type CustomFieldContext, type CustomFieldOperator, type CustomFieldOption, type CustomFieldTranslations, type CustomFieldType, type CustomFieldVisibility, type CustomerCreateRequest, type CustomerListParams, type CustomerPaymentMethodsListParams, type CustomerPaymentMethodsListResponse, type CustomerResponse, type CustomerUpdateRequest, DEFAULT_BADGES, DEFAULT_BADGES_DARK, DEFAULT_BRANDING, DEFAULT_BRANDING_DARK, type DecidePendingOperationRequest, type DeleteAccountRequest, type DeleteUserRoleRequest, Delopay, DelopayAuthenticationError, type DelopayConnectorCategory, DelopayError, type DelopayLogger, type DelopayOptions, type DeviceAnalyticsChild, type DeviceAnalyticsTotals, type DeviceBrowserSlice, type DeviceChannelBucket, type DeviceClassSlice, type DeviceDrillRequest, type DeviceModelSlice, type DevicePlatformSlice, type DeviceSessionBucket, type DevicesAnalyticsResponse, type DisputeEvidenceBlock, type DisputeEvidenceRequest, type DisputeEvidenceType, type DisputeListParams, type DisputeResponse, type DisputeStage, type DisputeStatus, type DrillPayment, type DrillResponse, type EncodedBranding, type EntityType, type EpayoutsCatalogEntry, type EpayoutsCatalogResponse, type EpayoutsLocality, type EpayoutsMethod, type EpayoutsMethodsResponse, type EpayoutsRail, type EphemeralKeyCreateRequest, type EphemeralKeyCreateResponse, type EuclidComparison, type EuclidComparisonType, type EuclidIfStatement, type EuclidValue, type EventClass, type EventDeliveryAttemptResponse, type EventDetailResponse, type EventListParams, type EventListResponse, type EventResponse, type EventType, Export, FeatureMatrix, type FeatureMatrixResponse, type FeatureStatus, type FeeOwner, FeeProgramBuilder, type FeeRuleConditions, type FeeRuleDefaultPrecedence, type FeeRuleInput, type FeeRulePreviewRequest, type FeeRulePreviewResponse, type FeeScheduleCreateRequest, type FeeScheduleResponse, type FeeScheduleUpdateRequest, type FeeSpecInput, type FeeStatementDetail, type FeeStatementSummary, type FeeType, Files, type FocusedCheckoutUrlParams, type FontFamily, type FontWeight, Forex, type ForgotPasswordRequest, type FromEmailRequest, type FutureUsage, type GatewayConnectRequest, type GatewayResponse, type GeoAnalyticsChild, type GeoAnalyticsResponse, type GeoAnalyticsTotals, type GeoCitySlice, type GeoCountrySlice, type GeoDrillRequest, type GeoLanguageSlice, type GetSubscriptionItemsParams, type GetSubscriptionItemsResponse, type GlobalSearchRequest, type GroupNode, type ImpersonateEmployeeRequest, type IntentStatus, type InviteUsersRequest, type InviteUsersResponse, type InvoiceOutcomes, type InvoiceStatus, type LabelStyle, type LayoutStyle, type LeafNode, type LedgerEntry, type LedgerListParams, type LedgerResponse, type LimitedOperation, type LinkedRoutingConfigRetrieveResponse, type ListInvitableRolesParams, type ListUsersInLineageParams, type LoginHistoryEntry, type LoginHistoryParams, type LoginHistoryResponse, type LogoShape, type LogoSize, type MandateListParams, type MandateResponse, type MandateRevokedResponse, type MandateStatus, type MandateType, type MarginQuality, type MerchantAccountCreateRequest, type MerchantAccountResponse, type MerchantAccountType, type MerchantAccountUpdateRequest, type MerchantOverviewResponse, type MerchantOverviewStat, type MerchantRisk, type MerchantRoutingAlgorithm, type MethodSurcharge, type MinimalRoleInfo, NATIVE_PANES_MAX, NATIVE_PANE_CATEGORY_KEYS, NATIVE_PANE_ICON_KEYS, type NativePaneMethodInfo, type NativePaneOpenTarget, type NativePaneRail, type NativePaneView, type NativePaneVisibility, type NonPillRadius, type OperationLimitOnExceeded, type OperationLimitRule, type OperationLimitRuleDeleteResponse, type OperationLimitRuleListParams, type OperationLimitScope, type OperationLimitSettings, type OperationLimitWindowMode, OperationLimits, type OverrideAction, type OverrideScope, type ParentGroup, type ParentGroupInfo, type PauseSubscriptionRequest, type PauseSubscriptionResponse, type PaymentAttemptResponse, type PaymentAttemptsListResponse, type PaymentCancelRequest, type PaymentCaptureRequest, type PaymentClientContextEntry, type PaymentClientContextListResponse, type PaymentConfirmRequest, type PaymentCreateRequest, type PaymentErrorDetails, type PaymentExperience, type PaymentExperienceTypes, type PaymentIdFormatConfig, type PaymentIdStyle, type PaymentIntentStateMetadata, type PaymentLayout, type PaymentLinkBackgroundImageConfig, type PaymentLinkConfigRequest, type PaymentLinkListParams, type PaymentLinkListResponse, type PaymentLinkResponse, type PaymentLinkTransactionDetails, type PaymentListFilterConstraints, type PaymentListFilteredResponse, type PaymentListOrder, type PaymentListParams, type PaymentListResponse, type PaymentMethod, type PaymentMethodAmountLimits, type PaymentMethodCreateRequest, type PaymentMethodDeleteResponse, type PaymentMethodDisplayInfo, type PaymentMethodListInstallmentAmountDetails, type PaymentMethodListInstallmentOption, type PaymentMethodListInstallmentPlan, type PaymentMethodListIntentData, type PaymentMethodListParams, type PaymentMethodListResponse, type PaymentMethodResponse, type PaymentMethodType, type PaymentMethodUpdateRequest, type PaymentResponse, type PaymentRetrieveOptions, type PaymentStatusHistoryEntityType, type PaymentStatusHistoryEvent, type PaymentStatusHistoryResponse, type PaymentUpdateRequest, type PaymentsDeletePolicyResponse, type PaymentsDeleteResponse, type PayoutCreateRequest, type PayoutListParams, type PayoutListResponse, type PayoutResponse, type PayoutStatus, type PayoutType, type PayoutUpdateRequest, type PayseproMethod, type PayseproMethodsResponse, type PendingApprovalErrorDetails, type PendingOperation, type PendingOperationLimitContext, type PendingOperationListParams, type PendingOperationListResponse, type PendingOperationStatus, type PendingOperationSummary, type PerMethodSurchargeItem, type PermissionScope, type PhoneDetails, type PhoneOtpRequest, type PhoneOtpResponse, type PhoneOtpVerifyRequest, type PhoneOtpVerifyResponse, type PlanSlice, type PlatformFeeKind, type PlatformFeeOutput, type PlatformFeeProgram, type PlatformFeeRule, type PlatformFeeRuleInput, type PlatformFeeRuleOutput, type PlatformFeeRuleRecord, type PlatformFeeRuleRequest, type PollStatus, type PollStatusResponse, type ProcessorCostBasis, type ProcessorCostBucket, type ProcessorCostSource, type ProcessorSlice, type ProfileAcquirerCreateRequest, type ProfileAcquirerResponse, type ProfileAcquirerUpdateRequest, type ProfileCreateRequest, type ProfileDefaultRoutingConfig, type ProfileDeniedConnectorsResponse, type ProfileLogoUploadResponse, type ProfileResponse, type ProfileUpdateRequest, type ProgramConnectorSelection, type ProjectCreateRequest, type ProjectResponse, type ProjectStats, type ProjectStatsResponse, type ProjectUpdateRequest, type PublishableKey, type RecordCheckoutEventRequest, type RecordCheckoutEventResponse, type RecoveryCodesResponse, type RefundAggregateResponse, type RefundCreateRequest, type RefundListParams, type RefundListResponse, type RefundResponse, type RefundStatus, type RefundType, type RefundUpdateRequest, type RegionCountriesResponse, type RegionCreateRequest, type RegionResponse, type RegionSetCountriesRequest, type RegionUpdateRequest, Regions, type RelayRequest, type RelayResponse, type RelayStatus, type RelayType, type RequestExtras, type RequestFn, type RequestOptions, type RequiredFieldInfo, type ResetPasswordRequest, type ResponsePaymentMethodTypes, type ResponsePaymentMethodsEnabled, type ResumeSubscriptionRequest, type ResumeSubscriptionResponse, Risk, type RoleConnectorGrant, type RoleConnectorGrantEntry, type RoutableConnectorChoice, type RoutingActivatePayload, type RoutingAlgorithmKind, type RoutingConfigCreateRequest, type RoutingConfigHistoryResponse, type RoutingConfigResponse, type RoutingConfigUpdateRequest, type RoutingConfigVersion, type RoutingConnectorCap, type RoutingConnectorCaps, type RoutingDeactivateRequest, type RoutingDictionary, type RoutingDictionaryRecord, type RoutingHistoryParams, type RuleConnectorSelection, STRIPE_NATIVE_PANE_METHODS, Search, type SearchGroupResponse, type SearchIndex, type SearchStatus, type SearchTimeRange, Settlement, type SettlementBackfillRequest, type SettlementBackfillResponse, type SettlementBucket, type SettlementCostParams, type SettlementCostPeriod, type SettlementCostResponse, type SettlementCurrentParams, type SettlementCurrentResponse, type SettlementLine, type SettlementLineBase, type SettlementLineListParams, type SettlementLineListResponse, type SettlementLineWithProcessorCost, type SettlementLineWithoutProcessorCost, type SettlementOverviewParams, type SettlementOverviewResponse, type SettlementPayoutStatus, type SettlementStatementListParams, type SettlementStatementListResponse, type ShopCreateRequest, type ShopFeeConfigEntry, type ShopFeeConfigParams, type ShopFeeConfigResponse, type ShopResponse, type ShopRisk, type ShopSettlementOverview, type ShopStats, type ShopStatsResponse, type ShopUpdateRequest, type ShopVisibilityResponse, type ShopVisibilityUpdateRequest, type SignInRequest, type SignUpRequest, type SignUpWithMerchantIdRequest, type SignUpWithMerchantRequest, type SizeScale, type SpacingScale, type StatementAdjustment, type StatementAdjustmentCreateRequest, type StatementAdjustmentListResponse, type StatementGenerateRequest, type StatementPayoutUpdateRequest, type StatementPdfParams, type StaticRoutingAlgorithm, type StatsPeriod, type StripeConnectAccountRequest, type StripeConnectAccountResponse, type StripeConnectLinkRequest, type StripeConnectLinkResponse, type StripeNativePane, type StripePaymentMethodDomainResult, type StripePaymentMethodDomainStatus, type StripePaymentMethodDomainsRegisterRequest, type StripePaymentMethodDomainsRegisterResponse, type SubscriptionAnalyticsRequest, type SubscriptionAnalyticsResponse, type SubscriptionBillingProcessorResponse, type SubscriptionBucket, type SubscriptionCaveat, type SubscriptionChild, type SubscriptionDrillBase, type SubscriptionDrillRequest, type SubscriptionDrillTarget, type SubscriptionEstimateParams, type SubscriptionEstimateResponse, type SubscriptionFilters, type SubscriptionInvoice, type SubscriptionInvoiceListParams, type SubscriptionInvoiceListResponse, type SubscriptionItem, type SubscriptionItemPrice, type SubscriptionItemType, type SubscriptionLineItem, type SubscriptionListParams, type SubscriptionMovement, type SubscriptionPaymentData, type SubscriptionPaymentDetails, type SubscriptionPaymentLink, type SubscriptionPaymentLookupRequest, type SubscriptionPaymentLookupResponse, type SubscriptionPeriodUnit, type SubscriptionProcessors, type SubscriptionResponse, type SubscriptionStatus, type SubscriptionTotals, Subscriptions, type SummaryPosition, type SupportedPaymentMethod, type SurchargeDetailsResponse, type SurchargeResponse, type SurchargeRuleRequest, type SurchargeRuleResponse, type SurfaceStyle, type SwitchMerchantRequest, type SwitchProfileRequest, type Terminate2faQueryParams, type ThemeBrowserLanguage, type ThemeCheckoutChannel, type ThemeChoice, type ThemeCondition, type ThemeDeviceClass, type ThemeEnumCondition, type ThemeIfStatement, type ThemeMetadataCondition, type ThemeNumberCondition, type ThemeTrafficSource, type ThreeDSDecision, type ThreeDsRuleExecuteRequest, type ThreeDsRuleResponse, type TierSummary, type TimeToPayBucket, type TimeToPayStats, type TokenPurpose, type TokenResponse, type TopupRequest, type TopupResponse, type TotpResponse, type TransactionType, type TrustBadge, type UpdateMetadataRequest, type UpdateOperationLimitSettingsRequest, type UpdateRoleConnectorGrantParams, type UpdateSubscriptionRequest, type UpdateUserDetailsRequest, type UpdateUserRoleRequest, type UpsertOperationLimitRuleRequest, type UpsertRefundLimitRuleRequest, type UpsertSettlementAdjustmentLimitRuleRequest, type UpsertSettlementPayoutLimitRuleRequest, type UserInLineage, type UserResponse, type UserSessionEntry, type UserSessionListResponse, type UserSessionRevokeResponse, type VaultCheck, type VaultCheckId, type VaultCheckStatus, type VaultCollectSessionResponse, type VaultEnvironment, type VaultPaymentMethodRequest, type VaultPaymentMethodResponse, type VaultRouteApplyVerification, type VaultRouteChange, type VaultRouteChangeKind, type VaultRouteFieldChange, type VaultRouteIds, type VaultRoutePurpose, type VaultRouteWarning, type VaultRouteWarningCode, type VaultRoutesApplyRequest, type VaultRoutesApplyResponse, type VaultRoutesFingerprint, type VaultRoutesPreviewRequest, type VaultRoutesPreviewResponse, type VaultVerificationResponse, type VaultVerifyRequest, type VerifyTotpRequest, type WebhookDeliveryAttempt, type WebhookDeliveryTerminalReason, type WebhookDetails, type WebhookEvent, type WebhookRefundStatus, type WebhookRegistrationEnvironment, Webhooks, allOf, anyOf, applyBrandingVariables, buildBrandingExport, buttonPadValue, cloneBranding, cloneCustomField, cloneNativePane, customFieldContextFromMetadata, customFieldIsTextLike, customFieldOperatorTakesValue, customFieldOptionLabel, customFieldText, decodeBadges, decodeBranding, decodeCustomFields, decodeNativePanes, defaultBranding, defaultCustomFieldVisibility, defaultNativePane, defaultOperatorForSource, encodeBadges, encodeBranding, encodeCustomFields, encodeNativePanes, evaluateCustomFieldCondition, evaluateCustomFieldVisibility, feeProgram, focusedCheckoutUrl, fontStack, fontWeightValue, inputPadValue, isCheckboxChecked, isDarkSurface, isHexColor, leaf, logoDimensions, nativePaneMethodInfo, parseCustomFieldsLoose, parseImportedBranding, programToTree, radiusValue, ruleMatchToTree, sanitizeCustomCss, shadowFor, surfacePadValue, verticalGapValue, visibleCustomFields };