@klappay/types 1.0.8 → 1.1.0

package/dist/index.mjs

@@ -117,8 +117,8 @@ var TOKEN_ADDRESSES = {
 
 // src/charges.ts
 import { z as z6 } from "zod";
-var ChargeStatusSchema = z6.enum(["pending", "partially_paid", "confirmed", "expired", "underpaid"]).describe(
-  "Payment progress, from the payer side. `pending`: created, nothing received yet. `partially_paid`: some funds received, less than `amount`. `confirmed`: full amount received (or more \u2014 see `isOverpaid`). `expired`: `expiresAt` passed with zero funds received. `underpaid`: `expiresAt` passed while `partially_paid`. This never reflects whether funds actually reached the merchant \u2014 see `settlementStatus` for that."
+var ChargeStatusSchema = z6.enum(["pending", "partially_paid", "confirmed", "expired", "underpaid", "canceled"]).describe(
+  "Payment progress, from the payer side. `pending`: created, nothing received yet. `partially_paid`: some funds received, less than `amount`. `confirmed`: full amount received (or more \u2014 see `isOverpaid`). `expired`: `expiresAt` passed with zero funds received. `underpaid`: `expiresAt` passed while `partially_paid`. `canceled`: the merchant explicitly canceled it via `POST /v1/charges/{id}/cancel` before it resolved on its own \u2014 unlike every other terminal status, this one is never reached automatically. This never reflects whether funds actually reached the merchant \u2014 see `settlementStatus` for that."
 );
 var SettlementStatusSchema = z6.enum(["pending", "completed", "failed"]).describe(
   "Progress of the payout to the merchant's wallet, a separate step from `status` \u2014 `status: confirmed` only means the payment was detected on-chain, not that the merchant has been paid yet. `pending`: payment detected, payout not yet attempted. `completed`: the merchant's wallet has the funds. `failed`: the payout attempt failed and retries were exhausted (rare; contact support). `null` on the parent `Charge` means no payout has been attempted yet \u2014 nothing has been received, or the charge is still in progress."
@@ -233,6 +233,9 @@ var ChargeSchema = z6.object({
   ),
   pausedAt: z6.string().datetime().nullable().describe(
     "Only ever set for a charge with no `expiresAt`: `null` means Klappay is actively watching this address in real time (the normal case). A timestamp means no contribution arrived for longer than the inactivity window (90 days for a charge with a goal `amount`, 365 days for one without), so real-time watching was stopped \u2014 the charge itself is never closed, a transfer can still arrive and land, just detected on a much slower fallback poll instead of instantly. Clears automatically (and real-time watching resumes) the moment that happens."
+  ),
+  canceledAt: z6.string().datetime().nullable().describe(
+    "When `POST /v1/charges/{id}/cancel` was called. `null` unless `status` is `canceled`. Unlike `pausedAt`, this never clears automatically \u2014 real-time watching is stopped the same way, but a transfer landing afterward doesn't revert the charge to `pending`; it fires `charge.paid_after_cancel` instead, since resuming silently would contradict the merchant's explicit cancellation."
   )
 });
 var ListChargesSchema = z6.object({
@@ -250,65 +253,102 @@ var ListChargesSchema = z6.object({
   isOverpaid: z6.enum(["true", "false"]).transform((v) => v === "true").optional()
 }).extend(PaginationQuerySchema.shape);
 var PaginatedChargesSchema = paginatedSchema(ChargeSchema);
-var ChargeStatusEventSchema = z6.object({
-  id: z6.string(),
+var GetChargeQrCodeQuerySchema = z6.object({
+  token: TokenSchema.optional().describe(
+    "Which accepted `(token, network)` pair to encode in the QR \u2014 required if `acceptedPayments` has more than one pair, since there is no single unambiguous default to fall back to. Ignored (and unnecessary) when the charge accepts exactly one pair."
+  ),
+  network: NetworkSchema.optional()
+});
+
+// src/public-charges.ts
+import { z as z7 } from "zod";
+var PublicChargeSchema = z7.object({
+  id: z7.string(),
+  mode: ChargeModeSchema,
   status: ChargeStatusSchema,
   settlementStatus: SettlementStatusSchema.nullable(),
-  amount: z6.number().nullable(),
-  amountReceived: z6.number().nullable(),
-  paidWith: z6.array(AcceptedPaymentSchema)
+  amount: z7.number().nullable(),
+  amountReceived: z7.number().nullable(),
+  isOverpaid: z7.boolean(),
+  currency: z7.string(),
+  acceptedPayments: z7.array(AcceptedPaymentSchema),
+  paidWith: z7.array(AcceptedPaymentSchema),
+  address: z7.string(),
+  environment: EnvironmentSchema,
+  txHash: z7.string().nullable(),
+  metadata: z7.record(z7.unknown()).nullable().describe(
+    "Redacted \u2014 everything the merchant put in `Charge.metadata` is stripped except the reserved `klappay` key (for Klappay-internal product integrations, e.g. this endpoint's own checkout consumer), if present. `null` if there's no `klappay` key, even when the merchant's own metadata is otherwise non-empty."
+  ),
+  createdAt: z7.string().datetime(),
+  expiresAt: z7.string().datetime().nullable(),
+  confirmedAt: z7.string().datetime().nullable(),
+  settledAt: z7.string().datetime().nullable(),
+  lastActivityAt: z7.string().datetime(),
+  pausedAt: z7.string().datetime().nullable(),
+  canceledAt: z7.string().datetime().nullable()
+});
+var GetPublicChargeQuerySchema = z7.object({
+  environment: EnvironmentSchema.describe(
+    "Which environment this charge is expected to be in. Required, not inferred \u2014 there's no API key here to derive it from, and stating it explicitly catches an integration bug (e.g. a `test` chargeId reaching a `live` checkout flow) instead of silently trusting whatever environment the id happens to belong to. A mismatch is indistinguishable from the charge not existing at all (`404`), same anti-enumeration posture as every other case below."
+  )
 });
 
 // src/distributions.ts
-import { z as z7 } from "zod";
-var SplitDistributionStatusSchema = z7.enum(["pending", "processing", "completed", "failed"]).describe(
+import { z as z8 } from "zod";
+var SplitDistributionStatusSchema = z8.enum(["pending", "processing", "completed", "failed"]).describe(
   "Status of one payout attempt to the merchant, for a single `(token, network)` pair \u2014 a charge that settles across more than one pair has one of these per pair. `pending`: queued, not yet claimed by a distributor. `processing`: a distributor (Klappay's own worker, or anyone racing to call `distribute()` first, see `PendingDistributionSchema`) has claimed it and is submitting the on-chain transaction. `completed`: the merchant's wallet has the funds. `failed`: every automatic retry was exhausted."
 );
-var PendingDistributionRecipientSchema = z7.object({
-  address: z7.string().describe("On-chain recipient address."),
-  percentAllocation: z7.number().describe("This recipient's share of the split, as a percentage (e.g. `99.0991` = 99.0991%).")
+var PendingDistributionRecipientSchema = z8.object({
+  address: z8.string().describe("On-chain recipient address."),
+  percentAllocation: z8.number().describe("This recipient's share of the split, as a percentage (e.g. `99.0991` = 99.0991%).")
 });
-var PendingDistributionSchema = z7.object({
-  splitAddress: z7.string().describe("The on-chain 0xSplits address to call `distribute()` on."),
+var PendingDistributionSchema = z8.object({
+  splitAddress: z8.string().describe("The on-chain 0xSplits address to call `distribute()` on."),
   network: NetworkSchema,
   token: TokenSchema,
-  recipients: z7.array(PendingDistributionRecipientSchema).describe(
+  recipients: z8.array(PendingDistributionRecipientSchema).describe(
     "The exact recipient list to pass to `distribute()` \u2014 the split contract only stores a hash of this config, so the caller must supply the identical array to prove it matches. Always present, never reconstructed from partial data."
   ),
-  distributorFeePercent: z7.number().describe(
+  distributorFeePercent: z8.number().describe(
     "Percentage of the split balance paid to whoever calls `distribute()` first (e.g. `0.1` = 0.1%). Frozen at charge creation, same for every distribution today."
   ),
-  estimatedRewardAmount: z7.number().describe(
+  estimatedRewardAmount: z8.number().describe(
     "Estimate only, in the charge's `currency` units, based on the amount Klappay detected on-chain \u2014 not a live read of the split's current balance. Read the balance yourself before submitting a transaction; a stale estimate is harmless (see the docs), never a reason to skip that check."
   ),
-  availableSince: z7.string().datetime().describe("When this distribution entered its grace period."),
-  graceEndsAt: z7.string().datetime().describe(
+  availableSince: z8.string().datetime().describe("When this distribution entered its grace period."),
+  graceEndsAt: z8.string().datetime().describe(
     "When Klappay's own worker may claim this distribution. Racing to call `distribute()` after this timestamp is possible but increasingly likely to lose to the worker."
   )
 });
-var PendingDistributionEventSchema = z7.discriminatedUnion("type", [
-  z7.object({
-    type: z7.literal("distribution.available"),
+var PaginatedPendingDistributionsSchema = paginatedSchema(PendingDistributionSchema);
+var ListenPendingDistributionsQuerySchema = z8.object({
+  limit: z8.coerce.number().int().min(0).max(PAGINATION_LIMIT_MAX).default(0).describe(
+    "How many currently-claimable distributions to emit as an initial snapshot right after connecting \u2014 each as a synthetic `distribution.available` event \u2014 before continuing with real-time deltas. `0` (the default, same as omitting it) sends no snapshot at all, matching this endpoint's original behavior: connect first, then call `GET /v1/distributions/pending` yourself to bootstrap. Not a page \u2014 there is no cursor for this snapshot, so if more than `limit` are claimable at connect time, the excess is simply not sent; call `GET /v1/distributions/pending` directly for a complete, paginated listing."
+  )
+});
+var PendingDistributionEventSchema = z8.discriminatedUnion("type", [
+  z8.object({
+    type: z8.literal("distribution.available"),
     distribution: PendingDistributionSchema
   }),
-  z7.object({
-    type: z7.literal("distribution.claimed"),
-    splitAddress: z7.string().describe("No longer claimable \u2014 either settled by someone, or picked up by the worker.")
+  z8.object({
+    type: z8.literal("distribution.claimed"),
+    splitAddress: z8.string().describe("No longer claimable \u2014 either settled by someone, or picked up by the worker.")
   })
 ]);
 
 // src/metrics.ts
-import { z as z8 } from "zod";
-var MetricsResourceSchema = z8.enum(["charges", "transactions", "distributions"]).describe(
+import { z as z9 } from "zod";
+var MetricsResourceSchema = z9.enum(["charges", "transactions", "distributions"]).describe(
   "Which underlying dataset to query. `charges`: one row per charge. `transactions`: one row per detected on-chain transfer \u2014 a charge paid in installments has more than one. `distributions`: one row per payout attempt to the merchant, one per `(token, network)` pair a charge settled across."
 );
-var MetricsAggregationSchema = z8.enum(["count", "sum", "avg", "min", "max"]).describe(
+var MetricsAggregationSchema = z9.enum(["count", "sum", "avg", "min", "max"]).describe(
   "`count` counts matching rows and never takes `field`. `sum`/`avg`/`min`/`max` require `field` to be set to one of the resource\u2019s numeric fields."
 );
-var MetricsFilterOperatorSchema = z8.enum(["eq", "neq", "in", "gt", "gte", "lt", "lte"]).describe(
+var MetricsFilterOperatorSchema = z9.enum(["eq", "neq", "in", "gt", "gte", "lt", "lte"]).describe(
   "`in` expects an array value (max 50 entries); every other operator expects a single scalar."
 );
-var MetricsDateGranularitySchema = z8.enum(["day", "week", "month"]).describe(
+var MetricsDateGranularitySchema = z9.enum(["day", "week", "month"]).describe(
   "Bucket width for a `date_bucket` `groupBy` entry \u2014 Postgres `date_trunc` semantics (UTC)."
 );
 var metricsQueryEnvironmentSchema = EnvironmentSchema.describe(
@@ -321,151 +361,151 @@ var METRICS_QUERY_MAX_GROUP_BY = 3;
 var METRICS_QUERY_MAX_FILTERS = 20;
 var METRICS_QUERY_MAX_METRICS = 10;
 var METRIC_ALIAS_PATTERN = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
-var metricAliasSchema = z8.string().min(1).max(64).regex(
+var metricAliasSchema = z9.string().min(1).max(64).regex(
   METRIC_ALIAS_PATTERN,
   "Must start with a letter or underscore, and contain only letters, digits, and underscores \u2014 this becomes a SQL column alias."
 ).optional();
-var MetricsFilterValueSchema = z8.union([
-  z8.string().max(255),
-  z8.number(),
-  z8.boolean(),
-  z8.array(z8.union([z8.string().max(255), z8.number()])).min(1).max(50)
+var MetricsFilterValueSchema = z9.union([
+  z9.string().max(255),
+  z9.number(),
+  z9.boolean(),
+  z9.array(z9.union([z9.string().max(255), z9.number()])).min(1).max(50)
 ]);
-var orderBySchema = z8.object({
-  key: z8.string().min(1).max(64).regex(
+var orderBySchema = z9.object({
+  key: z9.string().min(1).max(64).regex(
     METRIC_ALIAS_PATTERN,
     "Must start with a letter or underscore, and contain only letters, digits, and underscores \u2014 every valid output column name already looks like this."
   ).describe(
     "An output column name from this same query \u2014 either a `groupBy` field name, or a metric\u2019s `alias` (or its default name: `${aggregation}` for `count`, `${aggregation}_${field}` otherwise, e.g. `sum_amount`). Must match `^[a-zA-Z_][a-zA-Z0-9_]*$` \u2014 every real output column name already does, so this only ever rejects a value that could never have been one."
   ),
-  direction: z8.enum(["asc", "desc"])
+  direction: z9.enum(["asc", "desc"])
 }).describe(
   "Sort the result rows by any output column \u2014 including the bucket field itself for a `date_bucket` query (e.g. `createdAt`). Omit to get ascending-by-bucket order for a date-bucketed query, or implementation-defined (not guaranteed stable) order otherwise."
 );
-var limitSchema = z8.number().int().min(1).max(METRICS_QUERY_MAX_ROW_LIMIT).default(METRICS_QUERY_DEFAULT_ROW_LIMIT).describe(
+var limitSchema = z9.number().int().min(1).max(METRICS_QUERY_MAX_ROW_LIMIT).default(METRICS_QUERY_DEFAULT_ROW_LIMIT).describe(
   `Max rows to return, ${1}\u2013${METRICS_QUERY_MAX_ROW_LIMIT}, default ${METRICS_QUERY_DEFAULT_ROW_LIMIT}. If more rows matched, \`meta.truncated\` is \`true\` on the response \u2014 narrow the query instead of just raising this.`
 );
-var ChargesQueryFieldSchema = z8.enum(["status", "mode", "source", "apiKeyId", "currency", "isOverpaid", "externalRef"]).describe(
+var ChargesQueryFieldSchema = z9.enum(["status", "mode", "source", "apiKeyId", "currency", "isOverpaid", "externalRef"]).describe(
   "A `Charge` field to filter or group by \u2014 see `ChargeStatusSchema`/`ChargeModeSchema` for `status`/`mode`'s own possible values (charges.md). `source`/`externalRef` are free-form strings your own integration set at creation, not a fixed enum."
 );
-var ChargesMetricFieldSchema = z8.enum(["amount", "amountReceived", "feePercent"]).describe(
+var ChargesMetricFieldSchema = z9.enum(["amount", "amountReceived", "feePercent"]).describe(
   "A `Charge` numeric field to aggregate. `amount`/`amountReceived` are decimal currency amounts (requested vs. actually received \u2014 see `charges.md`). `feePercent` is the platform fee frozen on the charge at creation, e.g. `1.5` means 1.5%."
 );
-var ChargesDateFieldSchema = z8.enum(["createdAt", "confirmedAt", "lastActivityAt"]).describe(
+var ChargesDateFieldSchema = z9.enum(["createdAt", "confirmedAt", "lastActivityAt"]).describe(
   "A `Charge` timestamp to filter/bucket by. `confirmedAt` is `null` until the charge reaches `confirmed` \u2014 a `dateRange`/`date_bucket` on it implicitly excludes every charge that never confirmed."
 );
-var ChargesFilterSchema = z8.object({
+var ChargesFilterSchema = z9.object({
   field: ChargesQueryFieldSchema,
   operator: MetricsFilterOperatorSchema,
   value: MetricsFilterValueSchema
 });
-var ChargesGroupBySchema = z8.union([
-  z8.object({ type: z8.literal("field"), field: ChargesQueryFieldSchema }),
-  z8.object({
-    type: z8.literal("date_bucket"),
+var ChargesGroupBySchema = z9.union([
+  z9.object({ type: z9.literal("field"), field: ChargesQueryFieldSchema }),
+  z9.object({
+    type: z9.literal("date_bucket"),
     field: ChargesDateFieldSchema,
     granularity: MetricsDateGranularitySchema
   })
 ]);
-var ChargesMetricSchema = z8.object({
+var ChargesMetricSchema = z9.object({
   aggregation: MetricsAggregationSchema,
   field: ChargesMetricFieldSchema.optional(),
   alias: metricAliasSchema
 });
-var ChargesMetricsQuerySchema = z8.object({
-  resource: z8.literal("charges"),
+var ChargesMetricsQuerySchema = z9.object({
+  resource: z9.literal("charges"),
   environment: metricsQueryEnvironmentSchema,
-  dateRange: z8.object({
+  dateRange: z9.object({
     field: ChargesDateFieldSchema,
-    from: z8.string().max(64).datetime(),
-    to: z8.string().max(64).datetime()
+    from: z9.string().max(64).datetime(),
+    to: z9.string().max(64).datetime()
   }),
-  groupBy: z8.array(ChargesGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
-  metrics: z8.array(ChargesMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
-  filters: z8.array(ChargesFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
+  groupBy: z9.array(ChargesGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
+  metrics: z9.array(ChargesMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
+  filters: z9.array(ChargesFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
   orderBy: orderBySchema.optional(),
   limit: limitSchema
 });
-var TransactionsQueryFieldSchema = z8.enum(["network", "token", "source", "causedTransition"]).describe(
+var TransactionsQueryFieldSchema = z9.enum(["network", "token", "source", "causedTransition"]).describe(
   "A `Transaction` field to filter or group by \u2014 see `NetworkSchema`/`TokenSchema`/`TransactionSourceSchema` for their possible values. `causedTransition` is `true` only for the transfer(s) that actually flipped the charge's `status` \u2014 a charge paid in installments can have more than one; filtering/grouping on it excludes no-op duplicate transfers (see `TimelineEvent.causedTransition` in charges.md for the full explanation)."
 );
-var TransactionsMetricFieldSchema = z8.enum(["amount"]).describe("The transfer amount, in the charge's `currency` units.");
-var TransactionsDateFieldSchema = z8.enum(["detectedAt"]).describe("When Klappay detected this transfer on-chain (not when it was mined).");
-var TransactionsFilterSchema = z8.object({
+var TransactionsMetricFieldSchema = z9.enum(["amount"]).describe("The transfer amount, in the charge's `currency` units.");
+var TransactionsDateFieldSchema = z9.enum(["detectedAt"]).describe("When Klappay detected this transfer on-chain (not when it was mined).");
+var TransactionsFilterSchema = z9.object({
   field: TransactionsQueryFieldSchema,
   operator: MetricsFilterOperatorSchema,
   value: MetricsFilterValueSchema
 });
-var TransactionsGroupBySchema = z8.union([
-  z8.object({ type: z8.literal("field"), field: TransactionsQueryFieldSchema }),
-  z8.object({
-    type: z8.literal("date_bucket"),
+var TransactionsGroupBySchema = z9.union([
+  z9.object({ type: z9.literal("field"), field: TransactionsQueryFieldSchema }),
+  z9.object({
+    type: z9.literal("date_bucket"),
     field: TransactionsDateFieldSchema,
     granularity: MetricsDateGranularitySchema
   })
 ]);
-var TransactionsMetricSchema = z8.object({
+var TransactionsMetricSchema = z9.object({
   aggregation: MetricsAggregationSchema,
   field: TransactionsMetricFieldSchema.optional(),
   alias: metricAliasSchema
 });
-var TransactionsMetricsQuerySchema = z8.object({
-  resource: z8.literal("transactions"),
+var TransactionsMetricsQuerySchema = z9.object({
+  resource: z9.literal("transactions"),
   environment: metricsQueryEnvironmentSchema,
-  dateRange: z8.object({
+  dateRange: z9.object({
     field: TransactionsDateFieldSchema,
-    from: z8.string().max(64).datetime(),
-    to: z8.string().max(64).datetime()
+    from: z9.string().max(64).datetime(),
+    to: z9.string().max(64).datetime()
   }),
-  groupBy: z8.array(TransactionsGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
-  metrics: z8.array(TransactionsMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
-  filters: z8.array(TransactionsFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
+  groupBy: z9.array(TransactionsGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
+  metrics: z9.array(TransactionsMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
+  filters: z9.array(TransactionsFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
   orderBy: orderBySchema.optional(),
   limit: limitSchema
 });
-var DistributionsQueryFieldSchema = z8.enum(["status", "network", "token"]).describe(
+var DistributionsQueryFieldSchema = z9.enum(["status", "network", "token"]).describe(
   "A `SplitDistribution` field to filter or group by \u2014 see `SplitDistributionStatusSchema`/`NetworkSchema`/`TokenSchema` for their possible values."
 );
-var DistributionsMetricFieldSchema = z8.enum(["attempts"]).describe(
+var DistributionsMetricFieldSchema = z9.enum(["attempts"]).describe(
   "How many times a payout was attempted for this settlement so far \u2014 incremented on every attempt, whether it succeeded or is being retried after failing. A high `attempts` alongside `status: 'failed'` means every automatic retry was exhausted."
 );
-var DistributionsDateFieldSchema = z8.enum(["createdAt", "completedAt"]).describe(
+var DistributionsDateFieldSchema = z9.enum(["createdAt", "completedAt"]).describe(
   "`createdAt`: when this settlement was queued. `completedAt`: when it actually paid out \u2014 `null` until `status` reaches `completed`, so a `dateRange`/`date_bucket` on it implicitly excludes every distribution still pending/processing/failed."
 );
-var DistributionsFilterSchema = z8.object({
+var DistributionsFilterSchema = z9.object({
   field: DistributionsQueryFieldSchema,
   operator: MetricsFilterOperatorSchema,
   value: MetricsFilterValueSchema
 });
-var DistributionsGroupBySchema = z8.union([
-  z8.object({ type: z8.literal("field"), field: DistributionsQueryFieldSchema }),
-  z8.object({
-    type: z8.literal("date_bucket"),
+var DistributionsGroupBySchema = z9.union([
+  z9.object({ type: z9.literal("field"), field: DistributionsQueryFieldSchema }),
+  z9.object({
+    type: z9.literal("date_bucket"),
     field: DistributionsDateFieldSchema,
     granularity: MetricsDateGranularitySchema
   })
 ]);
-var DistributionsMetricSchema = z8.object({
+var DistributionsMetricSchema = z9.object({
   aggregation: MetricsAggregationSchema,
   field: DistributionsMetricFieldSchema.optional(),
   alias: metricAliasSchema
 });
-var DistributionsMetricsQuerySchema = z8.object({
-  resource: z8.literal("distributions"),
+var DistributionsMetricsQuerySchema = z9.object({
+  resource: z9.literal("distributions"),
   environment: metricsQueryEnvironmentSchema,
-  dateRange: z8.object({
+  dateRange: z9.object({
     field: DistributionsDateFieldSchema,
-    from: z8.string().max(64).datetime(),
-    to: z8.string().max(64).datetime()
+    from: z9.string().max(64).datetime(),
+    to: z9.string().max(64).datetime()
   }),
-  groupBy: z8.array(DistributionsGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
-  metrics: z8.array(DistributionsMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
-  filters: z8.array(DistributionsFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
+  groupBy: z9.array(DistributionsGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
+  metrics: z9.array(DistributionsMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
+  filters: z9.array(DistributionsFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
   orderBy: orderBySchema.optional(),
   limit: limitSchema
 });
 var ONE_DAY_MS = 24 * 60 * 60 * 1e3;
-var MetricsQuerySchema = z8.discriminatedUnion("resource", [
+var MetricsQuerySchema = z9.discriminatedUnion("resource", [
   ChargesMetricsQuerySchema,
   TransactionsMetricsQuerySchema,
   DistributionsMetricsQuerySchema
@@ -474,7 +514,7 @@ var MetricsQuerySchema = z8.discriminatedUnion("resource", [
   const to = new Date(input.dateRange.to);
   if (from >= to) {
     ctx.addIssue({
-      code: z8.ZodIssueCode.custom,
+      code: z9.ZodIssueCode.custom,
       message: "`dateRange.from` must be before `dateRange.to`.",
       path: ["dateRange", "from"]
     });
@@ -482,7 +522,7 @@ var MetricsQuerySchema = z8.discriminatedUnion("resource", [
   const spanDays = (to.getTime() - from.getTime()) / ONE_DAY_MS;
   if (spanDays > MAX_METRICS_QUERY_DATE_RANGE_DAYS) {
     ctx.addIssue({
-      code: z8.ZodIssueCode.custom,
+      code: z9.ZodIssueCode.custom,
       message: `\`dateRange\` cannot span more than ${MAX_METRICS_QUERY_DATE_RANGE_DAYS} days.`,
       path: ["dateRange", "to"]
     });
@@ -490,7 +530,7 @@ var MetricsQuerySchema = z8.discriminatedUnion("resource", [
   const dateBucketCount = input.groupBy.filter((entry) => entry.type === "date_bucket").length;
   if (dateBucketCount > 1) {
     ctx.addIssue({
-      code: z8.ZodIssueCode.custom,
+      code: z9.ZodIssueCode.custom,
       message: "At most one `date_bucket` entry is allowed in `groupBy`.",
       path: ["groupBy"]
     });
@@ -498,7 +538,7 @@ var MetricsQuerySchema = z8.discriminatedUnion("resource", [
   input.metrics.forEach((metric, index) => {
     if (metric.aggregation !== "count" && metric.field === void 0) {
       ctx.addIssue({
-        code: z8.ZodIssueCode.custom,
+        code: z9.ZodIssueCode.custom,
         message: "`field` is required unless `aggregation` is `count`.",
         path: ["metrics", index, "field"]
       });
@@ -507,7 +547,7 @@ var MetricsQuerySchema = z8.discriminatedUnion("resource", [
   const aliases = input.metrics.map((metric) => metric.alias).filter((alias) => alias !== void 0);
   if (new Set(aliases).size !== aliases.length) {
     ctx.addIssue({
-      code: z8.ZodIssueCode.custom,
+      code: z9.ZodIssueCode.custom,
       message: "Every `metrics[].alias` must be unique.",
       path: ["metrics"]
     });
@@ -516,36 +556,36 @@ var MetricsQuerySchema = z8.discriminatedUnion("resource", [
   input.metrics.forEach((metric, index) => {
     if (metric.alias !== void 0 && reservedNames.has(metric.alias)) {
       ctx.addIssue({
-        code: z8.ZodIssueCode.custom,
+        code: z9.ZodIssueCode.custom,
         message: `\`alias\` "${metric.alias}" collides with a \`groupBy\` field name (or the reserved word "bucket") \u2014 choose a different alias.`,
         path: ["metrics", index, "alias"]
       });
     }
   });
 });
-var MetricsQueryResultRowSchema = z8.record(
-  z8.string(),
-  z8.union([z8.string(), z8.number(), z8.boolean(), z8.null()])
+var MetricsQueryResultRowSchema = z9.record(
+  z9.string(),
+  z9.union([z9.string(), z9.number(), z9.boolean(), z9.null()])
 );
-var MetricsQueryScopeSchema = z8.enum(["owner_admin", "member"]).describe(
+var MetricsQueryScopeSchema = z9.enum(["owner_admin", "member"]).describe(
   "`member`: results were automatically restricted to data tied to API keys you personally created \u2014 rows with no resolvable creator were excluded, not counted, and not surfaced any other way. `owner_admin`: the full organization\u2019s data was queried, no restriction applied."
 );
-var MetricsQueryResultSchema = z8.object({
-  data: z8.array(MetricsQueryResultRowSchema),
-  meta: z8.object({
+var MetricsQueryResultSchema = z9.object({
+  data: z9.array(MetricsQueryResultRowSchema),
+  meta: z9.object({
     resource: MetricsResourceSchema,
     environment: EnvironmentSchema,
     scope: MetricsQueryScopeSchema,
-    rowCount: z8.number().int().describe("Number of rows in `data`."),
-    truncated: z8.boolean().describe(
+    rowCount: z9.number().int().describe("Number of rows in `data`."),
+    truncated: z9.boolean().describe(
       "`true` if more rows matched than `limit` allowed \u2014 `data` holds only the first `limit`."
     )
   })
 });
 
 // src/webhook-events.ts
-import { z as z9 } from "zod";
-var ChargeWebhookEventTypeSchema = z9.enum([
+import { z as z10 } from "zod";
+var ChargeWebhookEventTypeSchema = z10.enum([
   "charge.created",
   "charge.partially_paid",
   "charge.confirmed",
@@ -557,11 +597,13 @@ var ChargeWebhookEventTypeSchema = z9.enum([
   "charge.paused",
   "charge.reactivated",
   "charge.contribution_received",
-  "charge.contribution_settled"
+  "charge.contribution_settled",
+  "charge.canceled",
+  "charge.paid_after_cancel"
 ]).describe(
-  'Note the distinction between `charge.confirmed` and `charge.settled`: `confirmed` means the payment was detected on-chain; `settled` means the merchant\'s wallet actually received the funds \u2014 a separate, later step. Subscribe to `confirmed` if you only need "will I get paid," or `settled` if you need "has the money actually arrived." `charge.overpaid` fires alongside `charge.confirmed`/`charge.partially_paid` whenever the cumulative amount received ends up above `amount` (see `Charge.isOverpaid`). Every event in this category carries the full `Charge` object as `data`, except `charge.paused`/`charge.reactivated`/`charge.contribution_received`/`charge.contribution_settled` (see below). `charge.paused` fires when a charge with no `expiresAt` has had no contribution for longer than its inactivity window (90 days for a charge with a goal `amount`, 365 days for one without) \u2014 Klappay stops watching its address in real time, but the charge itself is never closed; `charge.reactivated` fires the moment a transfer lands on a paused charge, detected by the same fallback poller used for missed webhooks (so with much higher latency than normal \u2014 pausing trades that away deliberately, see `docs/payments.md`). `charge.contribution_received`/`charge.contribution_settled` are exclusive to `mode: continuous` charges (see `Charge.mode`) \u2014 a continuous charge never fires `charge.confirmed`/`charge.settled` at all, since `status` never leaves `pending`; instead every individual transfer fires `contribution_received` on detection and `contribution_settled` once its payout completes, one pair-scoped event per contribution instead of one event for the whole charge. `data` for `charge.paused`: `{ chargeId, lastActivityAt, pausedAt }`; for `charge.reactivated`: `{ chargeId, reactivatedAt }`; for `charge.contribution_received`: `{ chargeId, token, network, amount, txHash, payerAddress }`; for `charge.contribution_settled`: `{ chargeId, token, network, amount, txHash, distributorAddress }`.'
+  'Note the distinction between `charge.confirmed` and `charge.settled`: `confirmed` means the payment was detected on-chain; `settled` means the merchant\'s wallet actually received the funds \u2014 a separate, later step. Subscribe to `confirmed` if you only need "will I get paid," or `settled` if you need "has the money actually arrived." `charge.overpaid` fires alongside `charge.confirmed`/`charge.partially_paid` whenever the cumulative amount received ends up above `amount` (see `Charge.isOverpaid`). Every event in this category carries the full `Charge` object as `data`, except `charge.paused`/`charge.reactivated`/`charge.contribution_received`/`charge.contribution_settled`/`charge.paid_after_cancel` (see below). `charge.paused` fires when a charge with no `expiresAt` has had no contribution for longer than its inactivity window (90 days for a charge with a goal `amount`, 365 days for one without) \u2014 Klappay stops watching its address in real time, but the charge itself is never closed; `charge.reactivated` fires the moment a transfer lands on a paused charge, detected by the same fallback poller used for missed webhooks (so with much higher latency than normal \u2014 pausing trades that away deliberately, see `docs/payments.md`). `charge.contribution_received`/`charge.contribution_settled` are exclusive to `mode: continuous` charges (see `Charge.mode`) \u2014 a continuous charge never fires `charge.confirmed`/`charge.settled` at all, since `status` never leaves `pending`; instead every individual transfer fires `contribution_received` on detection and `contribution_settled` once its payout completes, one pair-scoped event per contribution instead of one event for the whole charge. `charge.canceled` fires when a merchant explicitly cancels a `pending`/`partially_paid` charge via `POST /v1/charges/{id}/cancel` \u2014 unlike every other terminal status, this one is never reached automatically. `charge.paid_after_cancel` is an anomaly signal: a transfer still landed on a canceled charge\'s address (nothing on-chain can prevent that) \u2014 `status` stays `canceled`, it is never silently resumed, and this event is your cue to manually refund the payer or honor the charge anyway. `data` for `charge.paused`: `{ chargeId, lastActivityAt, pausedAt }`; for `charge.reactivated`: `{ chargeId, reactivatedAt }`; for `charge.contribution_received`: `{ chargeId, token, network, amount, txHash, payerAddress }`; for `charge.contribution_settled`: `{ chargeId, token, network, amount, txHash, distributorAddress }`; for `charge.paid_after_cancel`: `{ chargeId, token, network, amount, txHash, payerAddress }`.'
 );
-var AccountWebhookEventTypeSchema = z9.enum([
+var AccountWebhookEventTypeSchema = z10.enum([
   "payout_address.changed",
   "api_key.created",
   "api_key.revoked",
@@ -575,10 +617,10 @@ var AccountWebhookEventTypeSchema = z9.enum([
 ]).describe(
   "Account and configuration changes \u2014 not tied to any single charge. `data` per event: `payout_address.changed`: `{ organizationId, from, to }` (`from` nullable); `api_key.created`/`api_key.revoked`: `{ apiKeyId, name, environment, hint }`; `webhook.created`/`webhook.deleted`/`webhook.secret_rotated`: `{ webhookId, url }`; `fee_tier.updated`: `{ organizationId, previousFeePercent, newFeePercent }`; `member.removed`: `{ userId, email, role }`; `member.role_changed`: `{ userId, email, role, previousRole }`; `member.invited`: `{ organizationId, email, role, invitedByUserId }`."
 );
-var WebhookDeliveryEventTypeSchema = z9.enum(["webhook.delivery_failed", "webhook.delivery_recovered", "webhook.endpoint_unhealthy"]).describe(
+var WebhookDeliveryEventTypeSchema = z10.enum(["webhook.delivery_failed", "webhook.delivery_recovered", "webhook.endpoint_unhealthy"]).describe(
   "Meta-events about the health of your own webhook endpoints \u2014 useful for monitoring without polling `GET /v1/webhooks/{id}/deliveries`. `webhook.endpoint_unhealthy` fires once when a webhook's failure rate over the trailing 24h crosses 20%, and `webhook.delivery_recovered` fires once when a delivery to that webhook next succeeds. `data` for every event in this category: `{ webhookId, url, failureRatio? }` (`failureRatio` only present on `webhook.endpoint_unhealthy`)."
 );
-var SecurityWebhookEventTypeSchema = z9.enum([
+var SecurityWebhookEventTypeSchema = z10.enum([
   "auth.login",
   "auth.login_failed",
   "auth.suspicious_activity",
@@ -591,13 +633,13 @@ var SecurityWebhookEventTypeSchema = z9.enum([
 ]).describe(
   "Account security signals. `auth.suspicious_activity` is a soft heuristic (login from an IP not seen on this account before), not a block \u2014 evaluate it, not enforce against it. `auth.password_reset_requested` only ever dispatches when the requested email actually matches an account (there is nowhere to notify otherwise) \u2014 `POST /v1/auth/forgot-password` itself always returns the same generic response either way, so this event never becomes a second channel for the same enumeration question the endpoint response deliberately avoids answering. `auth.password_changed` is the self-service counterpart to `auth.password_reset_completed` \u2014 fires from `POST /v1/auth/change-password` (requires the current password) instead of the unauthenticated forgot-password flow. `auth.email_change_requested`/`auth.email_changed` are the request/complete pair for `POST /v1/auth/change-email` \u2192 `POST /v1/auth/confirm-email-change` \u2014 the change only takes effect, and `email_changed` only fires, once the confirmation link sent to the *current* address is used. `data` per event: `auth.login`: `{ userId, ipAddress }`; `auth.login_failed`: `{ email, ipAddress }`; `auth.suspicious_activity`: `{ userId, ipAddress, previousIpAddress }`; `auth.email_verified`/`auth.password_reset_requested`/`auth.password_reset_completed`/`auth.password_changed`: `{ userId, email }`; `auth.email_change_requested`: `{ userId, email, newEmail }`; `auth.email_changed`: `{ userId, previousEmail, newEmail }`."
 );
-var WebhookEventTypeSchema = z9.union([
+var WebhookEventTypeSchema = z10.union([
   ChargeWebhookEventTypeSchema,
   AccountWebhookEventTypeSchema,
   WebhookDeliveryEventTypeSchema,
   SecurityWebhookEventTypeSchema
 ]);
-var WebhookCategorySchema = z9.enum(["payments", "account", "webhooks", "security"]).describe(
+var WebhookCategorySchema = z10.enum(["payments", "account", "webhooks", "security"]).describe(
   "Subscribe to every event in a category via `eventCategories` instead of listing events one by one \u2014 new events added to a category later arrive automatically, no subscription update needed."
 );
 function buildCategoryMap() {
@@ -620,108 +662,110 @@ var TriggerableChargeEventSchema = ChargeWebhookEventTypeSchema.exclude([
   "charge.paused",
   "charge.reactivated",
   "charge.contribution_received",
-  "charge.contribution_settled"
+  "charge.contribution_settled",
+  "charge.canceled",
+  "charge.paid_after_cancel"
 ]).describe(
-  "Every charge event that represents a payment-progress state transition a sandbox charge can be pushed into \u2014 everything except `charge.created` (a charge already exists by the time you have an id to trigger against), `charge.paused`/`charge.reactivated` (driven by a background worker on real inactivity, not a payment state \u2014 nothing meaningful to simulate or wait for on a fresh sandbox charge), and `charge.contribution_received`/`charge.contribution_settled` (exclusive to `mode: continuous` charges, which this trigger endpoint does not support simulating today \u2014 see `POST /v1/charges/{id}/trigger`'s own description)."
+  "Every charge event that represents a payment-progress state transition a sandbox charge can be pushed into \u2014 everything except `charge.created` (a charge already exists by the time you have an id to trigger against), `charge.paused`/`charge.reactivated` (driven by a background worker on real inactivity, not a payment state \u2014 nothing meaningful to simulate or wait for on a fresh sandbox charge), `charge.contribution_received`/`charge.contribution_settled` (exclusive to `mode: continuous` charges, which this trigger endpoint does not support simulating today \u2014 see `POST /v1/charges/{id}/trigger`'s own description), and `charge.canceled` (already a real, immediate action in `test` mode via `POST /v1/charges/{id}/cancel` itself \u2014 nothing to simulate) along with `charge.paid_after_cancel` (not simulatable without a real transfer to an already-canceled charge)."
 );
-var NonChargeTriggerableEventSchema = z9.union([
+var NonChargeTriggerableEventSchema = z10.union([
   AccountWebhookEventTypeSchema,
   WebhookDeliveryEventTypeSchema,
   SecurityWebhookEventTypeSchema
 ]);
 
 // src/webhooks.ts
-import { z as z10 } from "zod";
+import { z as z11 } from "zod";
 var WEBHOOK_EVENTS_WILDCARD = "*";
-var CreateWebhookSchema = z10.object({
-  url: z10.string().max(2048).url().describe(
+var CreateWebhookSchema = z11.object({
+  url: z11.string().max(2048).url().describe(
     "Must be HTTPS and resolve to a public address \u2014 private/internal IPs are rejected."
   ),
-  events: z10.array(z10.union([WebhookEventTypeSchema, z10.literal(WEBHOOK_EVENTS_WILDCARD)])).max(Object.keys(EVENT_CATEGORY_MAP).length + 1).default([]).describe(
+  events: z11.array(z11.union([WebhookEventTypeSchema, z11.literal(WEBHOOK_EVENTS_WILDCARD)])).max(Object.keys(EVENT_CATEGORY_MAP).length + 1).default([]).describe(
     'Individual event types to receive, or `"*"` for every event (combine with `excludeEvents` to opt back out of specific ones). Omit in favor of `eventCategories` if you want whole categories instead.'
   ),
-  eventCategories: z10.array(WebhookCategorySchema).max(WebhookCategorySchema.options.length).default([]).describe(
+  eventCategories: z11.array(WebhookCategorySchema).max(WebhookCategorySchema.options.length).default([]).describe(
     "Subscribe to every event in these categories. At least one of `events` or `eventCategories` is required."
   ),
-  excludeEvents: z10.array(WebhookEventTypeSchema).max(Object.keys(EVENT_CATEGORY_MAP).length).default([]).describe(
+  excludeEvents: z11.array(WebhookEventTypeSchema).max(Object.keys(EVENT_CATEGORY_MAP).length).default([]).describe(
     'Event types to exclude even if selected via `events: ["*"]` or `eventCategories`.'
   )
 }).refine((v) => v.events.length > 0 || v.eventCategories.length > 0, {
   message: "must select at least one event via `events` or `eventCategories`",
   path: ["events"]
 });
-var WebhookSchema = z10.object({
-  id: z10.string(),
+var WebhookSchema = z11.object({
+  id: z11.string(),
   environment: EnvironmentSchema.nullable().describe(
     "Which environment's API key created this webhook \u2014 `live` or `test`. Charge/webhook-delivery-health events are only ever delivered to a webhook whose `environment` matches the event's own (or to a webhook with `environment: null`, which receives every environment \u2014 the case for every webhook created before this field existed). Account/security events (`payout_address.changed`, `member.*`, `auth.*`, `fee_tier.updated`) have no environment concept and are delivered regardless."
   ),
-  url: z10.string(),
-  events: z10.array(WebhookEventTypeSchema),
-  eventCategories: z10.array(WebhookCategorySchema),
-  excludeEvents: z10.array(WebhookEventTypeSchema),
-  isWildcard: z10.boolean(),
-  secret: z10.string().describe(
+  url: z11.string(),
+  events: z11.array(WebhookEventTypeSchema),
+  eventCategories: z11.array(WebhookCategorySchema),
+  excludeEvents: z11.array(WebhookEventTypeSchema),
+  isWildcard: z11.boolean(),
+  secret: z11.string().describe(
     "The signing secret, used to verify the `X-Klappay-Signature` header on every delivery. Returned in full only this once \u2014 store it now, it is not recoverable afterward. Header format: `t=<unix-seconds>,v1=<hex-encoded HMAC-SHA256>`. Compute the expected signature as `HMAC-SHA256(secret, \"${t}.${raw request body}\")` (hex-encoded) and compare it to `v1` using a constant-time comparison; as a replay-protection measure, also reject if `t` is too far from the current time \u2014 Klappay does not enforce or check any particular tolerance server-side, so the exact threshold is entirely the receiver's own policy call. An official SDK's `constructEvent()`/`verifySignature()` do this for you, defaulting to a 300-second tolerance, overridable via `constructEvent`'s `toleranceSeconds` option \u2014 see github.com/klappay for available SDKs."
   ),
-  createdAt: z10.string().datetime()
+  createdAt: z11.string().datetime()
 });
 var WebhookListItemSchema = WebhookSchema.omit({ secret: true }).extend({
-  hint: z10.string().describe("A truncated, safe-to-display form of the secret (e.g. `whsec_...ab12`).")
+  hint: z11.string().describe("A truncated, safe-to-display form of the secret (e.g. `whsec_...ab12`).")
 });
-var WebhookPayloadSchema = z10.object({
-  id: z10.string().describe(
+var WebhookPayloadSchema = z11.object({
+  id: z11.string().describe(
     "Unique id for this specific delivery \u2014 also sent as the `X-Klappay-Delivery` header."
   ),
   event: WebhookEventTypeSchema,
-  createdAt: z10.string().datetime(),
-  data: z10.unknown().describe(
+  createdAt: z11.string().datetime(),
+  data: z11.unknown().describe(
     "Event-specific data. Charge events (`charge.*`) carry the full `Charge` object; account/security/webhook-delivery events carry a smaller, event-specific object \u2014 see `WebhookEventDataMap`/`TypedWebhookPayload` for the exact shape per event, or docs/webhooks.md."
   )
 });
-var WebhookDeliveryStatusSchema = z10.enum(["pending", "delivered", "failed"]);
-var WebhookDeliverySchema = z10.object({
-  id: z10.string(),
-  webhookId: z10.string(),
+var WebhookDeliveryStatusSchema = z11.enum(["pending", "delivered", "failed"]);
+var WebhookDeliverySchema = z11.object({
+  id: z11.string(),
+  webhookId: z11.string(),
   event: WebhookEventTypeSchema,
   status: WebhookDeliveryStatusSchema.describe(
     "`pending`: still retrying. `delivered`: got a 2xx response. `failed`: retries exhausted (5 attempts over ~24h) \u2014 use `POST /v1/webhooks/{id}/deliveries/{deliveryId}/retry` to try again manually."
   ),
-  attempts: z10.number(),
-  responseCode: z10.number().nullable().describe(
+  attempts: z11.number(),
+  responseCode: z11.number().nullable().describe(
     "HTTP status your endpoint returned on the most recent attempt. `null` if every attempt failed to connect at all."
   ),
-  nextRetryAt: z10.string().datetime().nullable(),
-  deliveredAt: z10.string().datetime().nullable(),
-  createdAt: z10.string().datetime()
+  nextRetryAt: z11.string().datetime().nullable(),
+  deliveredAt: z11.string().datetime().nullable(),
+  createdAt: z11.string().datetime()
 });
 var ListWebhookDeliveriesSchema = PaginationQuerySchema;
 var PaginatedWebhookDeliveriesSchema = paginatedSchema(WebhookDeliverySchema);
 
 // src/api-keys.ts
-import { z as z11 } from "zod";
-var CreateApiKeySchema = z11.object({
-  name: z11.string().min(1).max(64).describe(
+import { z as z12 } from "zod";
+var CreateApiKeySchema = z12.object({
+  name: z12.string().min(1).max(64).describe(
     'A label to help you tell keys apart (e.g. `"production backend"`). Not used for anything functional.'
   ),
   environment: EnvironmentSchema.describe(
     "`live` keys move real funds on Base mainnet; `test` keys settle on Base Sepolia (a real testnet, no real money) and additionally unlock `POST /v1/sandbox/*` for simulating events with zero on-chain activity at all."
   )
 });
-var ApiKeySchema = z11.object({
-  id: z11.string(),
-  name: z11.string(),
+var ApiKeySchema = z12.object({
+  id: z12.string(),
+  name: z12.string(),
   environment: EnvironmentSchema.describe(
     "`live` keys authenticate real charges on Base mainnet; `test` keys authenticate the same charge lifecycle on Base Sepolia (a real testnet) and additionally unlock `/v1/sandbox/*` for synthetic event simulation."
   ),
-  key: z11.string().optional().describe(
+  key: z12.string().optional().describe(
     "The full secret key (`klap_live_...` / `klap_test_...`), used as the `Authorization: Bearer` value on `/v1/charges`, `/v1/webhooks`, and `/v1/sandbox` requests. Present only in the response to `POST /v1/api-keys` \u2014 never returned again afterward, so store it immediately."
   ),
-  hint: z11.string().describe(
+  hint: z12.string().describe(
     "A truncated, always-safe-to-display form of the key (e.g. `klap_live_...ab12`), returned everywhere the full key isn't."
   ),
-  createdAt: z11.string().datetime(),
-  lastUsedAt: z11.string().datetime().nullable().describe("Updated on every successful authenticated request. `null` if never used."),
-  createdByUserId: z11.string().nullable().describe(
+  createdAt: z12.string().datetime(),
+  lastUsedAt: z12.string().datetime().nullable().describe("Updated on every successful authenticated request. `null` if never used."),
+  createdByUserId: z12.string().nullable().describe(
     "Which member of the organization created this key. `null` for a key created before this field existed."
   )
 });
@@ -729,93 +773,93 @@ var ListApiKeysSchema = PaginationQuerySchema;
 var PaginatedApiKeysSchema = paginatedSchema(ApiKeySchema);
 
 // src/users.ts
-import { z as z12 } from "zod";
-var UserRoleSchema = z12.enum(["owner", "admin", "member"]).describe(
+import { z as z13 } from "zod";
+var UserRoleSchema = z13.enum(["owner", "admin", "member"]).describe(
   "`owner`: full access, and the organization must always keep at least one. `admin`: can manage `member`s but not other `admin`s. `member`: no management permissions. You can only manage a member with a strictly lower role than your own, unless you're an `owner`."
 );
-var UpdateUserRoleSchema = z12.object({
+var UpdateUserRoleSchema = z13.object({
   role: UserRoleSchema
 });
-var UserSchema = z12.object({
-  id: z12.string(),
-  email: z12.string(),
-  name: z12.string().nullable(),
+var UserSchema = z13.object({
+  id: z13.string(),
+  email: z13.string(),
+  name: z13.string().nullable(),
   role: UserRoleSchema.describe("Your role within the organization this user was fetched from."),
-  emailVerifiedAt: z12.string().datetime().nullable().describe(
+  emailVerifiedAt: z13.string().datetime().nullable().describe(
     "When this address was confirmed via the emailed verification link. `null` until then. Required (non-null) for two specific actions: creating a `live` API key (`POST /v1/api-keys`) and changing `Organization.payoutAddress` (`PATCH /v1/organization`) \u2014 everything else works regardless of verification status."
   ),
-  createdAt: z12.string().datetime()
+  createdAt: z13.string().datetime()
 });
 var ListUsersSchema = PaginationQuerySchema;
 var PaginatedUsersSchema = paginatedSchema(UserSchema);
 
 // src/auth.ts
-import { z as z13 } from "zod";
-var NormalizedEmailSchema = z13.string().trim().max(255).toLowerCase().email().transform((email) => email.normalize("NFC")).describe(
+import { z as z14 } from "zod";
+var NormalizedEmailSchema = z14.string().trim().max(255).toLowerCase().email().transform((email) => email.normalize("NFC")).describe(
   "Trimmed, lowercased, and NFC-normalized server-side before use \u2014 case/whitespace don't matter."
 );
-var SignupSchema = z13.object({
+var SignupSchema = z14.object({
   email: NormalizedEmailSchema,
-  password: z13.string().min(8).max(128).describe("8-128 characters. No other complexity rule.")
+  password: z14.string().min(8).max(128).describe("8-128 characters. No other complexity rule.")
 });
-var LoginSchema = z13.object({
+var LoginSchema = z14.object({
   email: NormalizedEmailSchema,
-  password: z13.string().min(1).max(128)
+  password: z14.string().min(1).max(128)
 });
-var VerifyEmailSchema = z13.object({
-  token: z13.string().min(1).describe("The token from the verification email \u2014 passed as-is, not the account email.")
+var VerifyEmailSchema = z14.object({
+  token: z14.string().min(1).describe("The token from the verification email \u2014 passed as-is, not the account email.")
 });
-var ForgotPasswordSchema = z13.object({
+var ForgotPasswordSchema = z14.object({
   email: NormalizedEmailSchema
 });
-var ResetPasswordSchema = z13.object({
-  token: z13.string().min(1).describe("The token from the password reset email."),
-  newPassword: z13.string().min(8).max(128)
+var ResetPasswordSchema = z14.object({
+  token: z14.string().min(1).describe("The token from the password reset email."),
+  newPassword: z14.string().min(8).max(128)
 });
-var MessageResponseSchema = z13.object({
-  message: z13.string().describe("Human-readable confirmation, safe to show a user directly.")
+var MessageResponseSchema = z14.object({
+  message: z14.string().describe("Human-readable confirmation, safe to show a user directly.")
 });
 var SelfUserSchema = UserSchema.omit({ createdAt: true, role: true });
-var AuthResponseSchema = z13.object({
-  token: z13.string().describe(
+var AuthResponseSchema = z14.object({
+  token: z14.string().describe(
     "Session JWT, valid 7 days \u2014 use as `Authorization: Bearer <token>` on every `/v1/organizations/*` request (which nests API keys, members, and invitations \u2014 see `GET /v1/organizations`). This token identifies only you; it carries no organization or role \u2014 every `/v1/organizations/{id}/*` request is authorized fresh against your actual membership in that specific organization. This is a separate credential from an API key: it authenticates a human/dashboard session, not payment operations. Create an API key with it before you can create charges."
   ),
   user: SelfUserSchema
 });
-var ChangeNameSchema = z13.object({
-  name: z13.string().min(1).max(255).describe("Your display name.")
+var ChangeNameSchema = z14.object({
+  name: z14.string().min(1).max(255).describe("Your display name.")
 });
-var ChangePasswordSchema = z13.object({
-  currentPassword: z13.string().min(1).max(128),
-  newPassword: z13.string().min(8).max(128)
+var ChangePasswordSchema = z14.object({
+  currentPassword: z14.string().min(1).max(128),
+  newPassword: z14.string().min(8).max(128)
 });
-var ChangeEmailSchema = z13.object({
-  currentPassword: z13.string().min(1).max(128),
+var ChangeEmailSchema = z14.object({
+  currentPassword: z14.string().min(1).max(128),
   newEmail: NormalizedEmailSchema
 });
-var ConfirmEmailChangeSchema = z13.object({
-  token: z13.string().min(1).describe("The token from the confirmation email sent to your current address.")
+var ConfirmEmailChangeSchema = z14.object({
+  token: z14.string().min(1).describe("The token from the confirmation email sent to your current address.")
 });
 
 // src/organization.ts
-import { z as z14 } from "zod";
-var UpdateOrganizationSchema = z14.object({
-  name: z14.string().min(1).max(255).optional().describe("The organization's display name."),
-  payoutAddress: z14.string().regex(/^0x[a-fA-F0-9]{40}$/, "must be a valid EVM address").optional().describe(
+import { z as z15 } from "zod";
+var UpdateOrganizationSchema = z15.object({
+  name: z15.string().min(1).max(255).optional().describe("The organization's display name."),
+  payoutAddress: z15.string().regex(/^0x[a-fA-F0-9]{40}$/, "must be a valid EVM address").optional().describe(
     "The wallet that receives the merchant's share of every future charge. Changing this only affects charges created after the change \u2014 an already-created charge's payout split is frozen from creation and is never retroactively affected. Required before you can create any charge. Any casing is accepted \u2014 EIP-55 checksum casing is not required or verified."
   )
 });
-var OrganizationSchema = z14.object({
-  id: z14.string(),
-  name: z14.string(),
-  payoutAddress: z14.string().nullable().describe("`null` until configured \u2014 `POST /v1/charges` fails until this is set."),
-  currentFeePercent: z14.number().describe(
+var OrganizationSchema = z15.object({
+  id: z15.string(),
+  name: z15.string(),
+  payoutAddress: z15.string().nullable().describe("`null` until configured \u2014 `POST /v1/charges` fails until this is set."),
+  currentFeePercent: z15.number().describe(
     "Your current platform fee percentage \u2014 `1.5` means 1.5%, not a 0\u20131 fraction. Funds the infrastructure Klappay runs on your behalf (on-chain monitoring, settlement, webhook delivery, support) the same way any payment processor's fee does; this is not optional or removable. Dynamic, not fixed: it's based on your trailing monthly volume, with lower volume paying a higher percentage \u2014 higher-volume organizations, or ones with a specific negotiated arrangement, can be assigned a different rate at Klappay's discretion. Frozen onto each charge at creation, so a rate change never retroactively affects a charge already created; see `feeUpdatedAt` for when it last changed. Contact Klappay if you'd like your rate reviewed."
   ),
-  feeUpdatedAt: z14.string().datetime().nullable().describe(
+  feeUpdatedAt: z15.string().datetime().nullable().describe(
     "When `currentFeePercent` last changed. `null` if it has never changed since this organization signed up."
   ),
-  createdAt: z14.string().datetime()
+  createdAt: z15.string().datetime()
 });
 var OrganizationWithRoleSchema = OrganizationSchema.extend({
   role: UserRoleSchema.describe("Your own role within this specific organization.")
@@ -824,50 +868,51 @@ var PaginatedOrganizationsSchema = paginatedSchema(OrganizationWithRoleSchema);
 var ListOrganizationsSchema = PaginationQuerySchema;
 
 // src/invitations.ts
-import { z as z15 } from "zod";
-var InviteUserSchema = z15.object({
+import { z as z16 } from "zod";
+var InviteUserSchema = z16.object({
   email: NormalizedEmailSchema,
   role: UserRoleSchema.default("member").describe(
     "The role the invitee will hold once they accept \u2014 subject to the same management-hierarchy rule as `PATCH /v1/organizations/{id}/users/{userId}`: an `admin` inviter cannot invite an `admin` or `owner`."
   )
 });
-var AcceptInvitationSchema = z15.object({
-  token: z15.string().min(1).describe("The token from the invitation email."),
-  password: z15.string().min(8).max(128).optional().describe(
+var AcceptInvitationSchema = z16.object({
+  token: z16.string().min(1).describe("The token from the invitation email."),
+  password: z16.string().min(8).max(128).optional().describe(
     "Required only if the invited email has no existing Klappay account \u2014 a new account is created along with the membership. Ignored if the account already exists."
   )
 });
-var InvitationSchema = z15.object({
-  id: z15.string(),
-  organizationId: z15.string(),
-  email: z15.string(),
+var InvitationSchema = z16.object({
+  id: z16.string(),
+  organizationId: z16.string(),
+  email: z16.string(),
   role: UserRoleSchema,
-  invitedByUserId: z15.string().describe("Which member of the organization sent this invitation."),
-  expiresAt: z15.string().datetime(),
-  createdAt: z15.string().datetime()
+  invitedByUserId: z16.string().describe("Which member of the organization sent this invitation."),
+  expiresAt: z16.string().datetime(),
+  createdAt: z16.string().datetime()
 });
 
 // src/timeline.ts
-import { z as z16 } from "zod";
-var TransactionSourceSchema = z16.enum(["moralis_webhook", "reconciliation_job", "sandbox"]).describe(
+import { z as z17 } from "zod";
+var TransactionSourceSchema = z17.enum(["moralis_webhook", "reconciliation_job", "sandbox"]).describe(
   "How this transfer was detected: `moralis_webhook` (the normal path), `reconciliation_job` (a fallback poller caught it after the webhook was missed or delayed), or `sandbox` (simulated via `POST /v1/sandbox/charges/{id}/trigger`, no real on-chain transfer)."
 );
-var TimelineEventTypeSchema = z16.enum([
+var TimelineEventTypeSchema = z17.enum([
   "charge.created",
   "charge.expired",
+  "charge.canceled",
   "transaction.detected",
   "split.distributed",
   "webhook.dispatched",
   "webhook.delivered",
   "webhook.failed"
 ]).describe(
-  "`charge.created`: the charge was created. `charge.expired`: `expiresAt` passed with no full payment. `transaction.detected`: a raw on-chain transfer was seen (see the `event`-shaped fields below for details \u2014 a charge can have more than one, e.g. a partial payment followed by the rest). `split.distributed`: a payout to the merchant completed on-chain, for one contributing `(token, network)` pair \u2014 a charge settled across more than one pair emits one of these per pair (see the `token`/`network` fields below). `webhook.dispatched`/`webhook.delivered`/`webhook.failed`: one specific delivery *attempt* for one webhook subscription \u2014 `failed` here means this single attempt failed, not that all retries were exhausted (see `WebhookDeliveryStatusSchema` for the exhausted-all-retries state)."
+  "`charge.created`: the charge was created. `charge.expired`: `expiresAt` passed with no full payment. `charge.canceled`: the merchant explicitly canceled it via `POST /v1/charges/{id}/cancel`. `transaction.detected`: a raw on-chain transfer was seen (see the `event`-shaped fields below for details \u2014 a charge can have more than one, e.g. a partial payment followed by the rest). `split.distributed`: a payout to the merchant completed on-chain, for one contributing `(token, network)` pair \u2014 a charge settled across more than one pair emits one of these per pair (see the `token`/`network` fields below). `webhook.dispatched`/`webhook.delivered`/`webhook.failed`: one specific delivery *attempt* for one webhook subscription \u2014 `failed` here means this single attempt failed, not that all retries were exhausted (see `WebhookDeliveryStatusSchema` for the exhausted-all-retries state)."
 );
-var TimelineEventSchema = z16.object({
+var TimelineEventSchema = z17.object({
   type: TimelineEventTypeSchema,
-  at: z16.string().datetime(),
-  txHash: z16.string().optional().describe("Present for `transaction.detected` and `split.distributed` events only."),
-  amount: z16.number().optional().describe(
+  at: z17.string().datetime(),
+  txHash: z17.string().optional().describe("Present for `transaction.detected` and `split.distributed` events only."),
+  amount: z17.number().optional().describe(
     "Present for `transaction.detected` events only \u2014 the amount that specific transfer carried."
   ),
   source: TransactionSourceSchema.optional().describe(
@@ -879,66 +924,20 @@ var TimelineEventSchema = z16.object({
   network: NetworkSchema.optional().describe(
     "Present for `transaction.detected` and `split.distributed` events \u2014 which network this specific transfer, or settlement, used."
   ),
-  causedTransition: z16.boolean().optional().describe(
+  causedTransition: z17.boolean().optional().describe(
     "Present for `transaction.detected` events only. `true` if this specific transfer changed the charge's status (e.g. PENDING\u2192CONFIRMED) \u2014 a charge paid in installments can have more than one such event."
   ),
   event: WebhookEventTypeSchema.optional().describe(
     "Present for `webhook.*` events only \u2014 which event type this delivery was for."
   ),
-  responseCode: z16.number().nullable().optional().describe(
+  responseCode: z17.number().nullable().optional().describe(
     "Present for `webhook.*` events only \u2014 HTTP status your endpoint returned, or `null` if the request never connected."
   ),
-  attempts: z16.number().optional().describe(
+  attempts: z17.number().optional().describe(
     "Present for `webhook.*` events only \u2014 how many delivery attempts have been made so far."
   )
 });
 
-// src/verify.ts
-import { z as z17 } from "zod";
-var SplitRecipientRoleSchema = z17.enum(["merchant", "klap_fee", "distributor_incentive"]).describe(
-  "`merchant`: the payout recipient. `klap_fee`: the platform fee. `distributor_incentive`: the (usually small) reward paid to whoever triggered the on-chain settlement \u2014 may be Klappay or a third party, see `address`."
-);
-var VerifySplitEntrySchema = z17.object({
-  role: SplitRecipientRoleSchema,
-  address: z17.string().nullable().describe(
-    "On-chain recipient address for this share. For `distributor_incentive`, this is `null` until settlement actually happens \u2014 there is no fixed address, it goes to whoever calls the settlement transaction."
-  ),
-  percentAllocation: z17.number().describe("This entry's share of `amountReceived`, as a percentage (e.g. `99` = 99%)."),
-  amountUSD: z17.number()
-});
-var VerifyPaymentSchema = z17.object({
-  token: TokenSchema,
-  network: NetworkSchema,
-  amountReceived: z17.number().describe("Cumulative amount received on this specific `(token, network)` pair."),
-  txHash: z17.string().describe("The on-chain transaction hash of the most recent transfer on this pair."),
-  explorerTxUrl: z17.string().describe("Direct link to `txHash` on the relevant block explorer."),
-  split: z17.array(VerifySplitEntrySchema).describe(
-    "The exact breakdown of where this pair's payment went \u2014 merchant's share, Klappay's fee, and (once settled) the settlement incentive."
-  ),
-  splitTxHash: z17.string().nullable().describe(
-    "Transaction hash of the payout to the merchant for this pair, once settlement has happened. `null` until then."
-  ),
-  settledAt: z17.string().datetime().nullable().describe(
-    "When settlement completed for this pair \u2014 the merchant's wallet actually has the funds. `null` until then."
-  )
-});
-var VerifyChargeSchema = z17.object({
-  id: z17.string(),
-  amount: z17.number().nullable().describe("The amount originally requested. `null` if the charge accepted any amount."),
-  amountReceived: z17.number().describe(
-    "The actual cumulative amount received across every contributing pair \u2014 can exceed `amount` on an overpayment."
-  ),
-  confirmedAt: z17.string().datetime().nullable().describe(
-    "When the charge reached `confirmed`. `null` for a `mode: continuous` charge \u2014 it never reaches a single confirmed moment (`status` stays `pending` for its whole life, see `Charge.mode`); use each entry in `payments[].settledAt` for per-contribution timing instead."
-  ),
-  splitAddress: z17.string().describe(
-    "The on-chain address the payment was sent to \u2014 identical across every accepted network."
-  ),
-  payments: z17.array(VerifyPaymentSchema).describe(
-    "One entry per `(token, network)` pair that actually contributed funds \u2014 a charge accepting several pairs can be confirmed by a combination of them, each proven and settled independently."
-  )
-});
-
 // src/health.ts
 import { z as z18 } from "zod";
 var HealthSchema = z18.object({
@@ -992,7 +991,6 @@ export {
   ChangePasswordSchema,
   ChargeModeSchema,
   ChargeSchema,
-  ChargeStatusEventSchema,
   ChargeStatusSchema,
   ChargeWebhookEventTypeSchema,
   ChargesDateFieldSchema,
@@ -1010,6 +1008,8 @@ export {
   EnvironmentSchema,
   ErrorPayloadSchema,
   ForgotPasswordSchema,
+  GetChargeQrCodeQuerySchema,
+  GetPublicChargeQuerySchema,
   HealthSchema,
   InvitationSchema,
   InviteUserSchema,
@@ -1018,6 +1018,7 @@ export {
   ListOrganizationsSchema,
   ListUsersSchema,
   ListWebhookDeliveriesSchema,
+  ListenPendingDistributionsQuerySchema,
   LoginSchema,
   MAX_METRICS_QUERY_DATE_RANGE_DAYS,
   METRICS_QUERY_DEFAULT_ROW_LIMIT,
@@ -1048,12 +1049,14 @@ export {
   PaginatedApiKeysSchema,
   PaginatedChargesSchema,
   PaginatedOrganizationsSchema,
+  PaginatedPendingDistributionsSchema,
   PaginatedUsersSchema,
   PaginatedWebhookDeliveriesSchema,
   PaginationQuerySchema,
   PendingDistributionEventSchema,
   PendingDistributionRecipientSchema,
   PendingDistributionSchema,
+  PublicChargeSchema,
   ResetPasswordSchema,
   SandboxEventTriggerSchema,
   SandboxTriggerSchema,
@@ -1062,7 +1065,6 @@ export {
   SettlementStatusSchema,
   SignupSchema,
   SplitDistributionStatusSchema,
-  SplitRecipientRoleSchema,
   TOKEN_ADDRESSES,
   TOKEN_DECIMALS,
   TimelineEventSchema,
@@ -1077,10 +1079,7 @@ export {
   UpdateUserRoleSchema,
   UserRoleSchema,
   UserSchema,
-  VerifyChargeSchema,
   VerifyEmailSchema,
-  VerifyPaymentSchema,
-  VerifySplitEntrySchema,
   WEBHOOK_EVENTS_WILDCARD,
   WEBHOOK_EVENT_CATEGORIES,
   WebhookCategorySchema,