@klappay/types 3.2.0 → 3.4.0

package/dist/index.mjs

@@ -116,7 +116,7 @@ function listSwapAlternatives(networks) {
 }
 
 // src/charges.ts
-import { z as z9 } from "zod";
+import { z as z10 } from "zod";
 
 // src/checkout-metadata.ts
 import { z as z8 } from "zod";
@@ -139,27 +139,40 @@ var MetadataWithKlappaySchema = z8.object({ klappay: KlappayCheckoutMetadataSche
   "Arbitrary key/value data, returned as-is on every read. Put whatever you want in here \u2014 none of it is validated, except the `klappay` key, which is reserved for Klappay: if present, it must match `KlappayCheckoutMetadataSchema` exactly, or the whole request is rejected with `400 validation_error`."
 );
 
+// src/escrow.ts
+import { z as z9 } from "zod";
+var EscrowConfigSchema = z9.object({
+  releaserAddress: z9.string().regex(/^0x[0-9a-fA-F]{40}$/, "must be a 20-byte hex address").optional().describe(
+    "The only address ever authorized to release this charge's escrowed funds \u2014 set once at creation, immutable after. Klappay never holds a key with any release authority of its own; every release requires a signature from this address, verified on-chain, never taken on faith. Omit to default to the API key's own `payoutAddress` \u2014 the common case where the merchant releasing their own charge is the same wallet they already get paid to. Pass an explicit address only when the releaser is a different party (e.g. an operational key distinct from the payout wallet). Not validated against anything else \u2014 any well-formed address is accepted, since Klappay never custodies these funds."
+  )
+});
+var ReleaseEscrowRequestSchema = z9.object({
+  signature: z9.string().regex(/^0x[0-9a-fA-F]+$/, "must be hex-encoded signature bytes").describe(
+    "The Safe transaction signature authorizing this release, produced by signing the escrow's predetermined release transaction (destination and amount are fixed at escrow creation, never client-supplied here) with the private key behind this charge's `escrowReleaserAddress` \u2014 never anything Klappay can produce itself. Independently verified on-chain before anything moves; a mismatched, malformed, or missing signature is rejected, never trusted at face value."
+  )
+});
+
 // src/charges.ts
-var ChargeStatusSchema = z9.enum(["pending", "partially_paid", "confirmed", "expired", "underpaid"]).describe(
+var ChargeStatusSchema = z10.enum(["pending", "partially_paid", "confirmed", "expired", "underpaid"]).describe(
   "Payment progress, from the payer side. `pending`: created, nothing received yet. `partially_paid`: some funds received, less than `amount`. `confirmed`: full amount received (or more \u2014 see `isOverpaid`). `expired`: `expiresAt` passed with zero funds received. `underpaid`: `expiresAt` passed while `partially_paid`. Every status is reached automatically, on its own timeline \u2014 there is no merchant-initiated cancellation. This never reflects whether funds actually reached the merchant \u2014 see `settlementStatus` for that."
 );
-var SettlementStatusSchema = z9.enum(["pending", "completed", "failed"]).describe(
+var SettlementStatusSchema = z10.enum(["pending", "completed", "failed"]).describe(
   "Progress of the payout to the merchant's wallet, a separate step from `status` \u2014 `status: confirmed` only means the payment was detected on-chain, not that the merchant has been paid yet. `pending`: payment detected, payout not yet attempted. `completed`: the merchant's wallet has the funds. `failed`: the payout attempt failed and retries were exhausted (rare; contact support). `null` on the parent `Charge` means no payout has been attempted yet \u2014 nothing has been received, or the charge is still in progress."
 );
 var CHARGE_EXPIRES_IN_MIN_SECONDS = 60;
 var CHARGE_EXPIRES_IN_MAX_SECONDS = 3600;
 var CHARGE_ACCEPTED_PAYMENTS_MAX = 14;
-var AcceptedPaymentSchema = z9.object({
+var AcceptedPaymentSchema = z10.object({
   token: TokenSchema,
   network: NetworkSchema
 });
-var AcceptedPaymentsSchema = z9.array(AcceptedPaymentSchema).min(1, "At least one accepted payment is required.").max(CHARGE_ACCEPTED_PAYMENTS_MAX).superRefine((pairs, ctx) => {
+var AcceptedPaymentsSchema = z10.array(AcceptedPaymentSchema).min(1, "At least one accepted payment is required.").max(CHARGE_ACCEPTED_PAYMENTS_MAX).superRefine((pairs, ctx) => {
   const seen = /* @__PURE__ */ new Set();
   pairs.forEach((pair, index) => {
     const key = `${pair.token}:${pair.network}`;
     if (seen.has(key)) {
       ctx.addIssue({
-        code: z9.ZodIssueCode.custom,
+        code: z10.ZodIssueCode.custom,
         message: `Duplicate accepted payment: ${pair.token} on ${pair.network}.`,
         path: [index]
       });
@@ -167,7 +180,7 @@ var AcceptedPaymentsSchema = z9.array(AcceptedPaymentSchema).min(1, "At least on
     seen.add(key);
     if (!OPERATIONAL_NETWORKS.includes(pair.network)) {
       ctx.addIssue({
-        code: z9.ZodIssueCode.custom,
+        code: z10.ZodIssueCode.custom,
         message: `Network "${pair.network}" isn't live yet \u2014 only ${OPERATIONAL_NETWORKS.join(", ")} today.`,
         path: [index, "network"]
       });
@@ -177,32 +190,32 @@ var AcceptedPaymentsSchema = z9.array(AcceptedPaymentSchema).min(1, "At least on
   `Every \`(token, network)\` pair the payer is allowed to pay with \u2014 at least one, up to ${CHARGE_ACCEPTED_PAYMENTS_MAX}. This list is also the only restriction knob: the payer can use any combination of the pairs listed here, and every transfer on one of them is credited and sums toward the charge total (see \`paidWith\`) \u2014 e.g. a charge accepting USDC and USDT can be confirmed by $9 in USDC plus $1 in USDT, or by USDC arriving on two different accepted networks. To require payment in one specific token on one specific network, list only that single pair \u2014 a transfer on any pair not in this list is still recorded (for audit) but never credited. Each network must be live (see \`GET /v1/networks\` for the current matrix) \u2014 an unconfigured \`(token, network)\` combination for your environment is rejected with \`422 token_not_supported\`.`
 );
 var CHARGE_SPLIT_RECIPIENTS_MAX = 5;
-var SplitRecipientSchema = z9.object({
-  address: z9.string().regex(/^0x[0-9a-fA-F]{40}$/, "must be a 20-byte hex address").describe("EVM address to send a slice of this charge to."),
-  percent: z9.number().positive().max(100).describe(
+var SplitRecipientSchema = z10.object({
+  address: z10.string().regex(/^0x[0-9a-fA-F]{40}$/, "must be a 20-byte hex address").describe("EVM address to send a slice of this charge to."),
+  percent: z10.number().positive().max(100).describe(
     "Percent of *your own* net share (i.e. of `100 - feePercent`, not of the charge's gross `amount`) to route to this address instead of your own payout wallet. Klappay's fee is computed on the gross amount first and is never diluted by how you choose to split what's left \u2014 see `docs/payments.md`'s \"Settling the payout\" section for the exact math."
   ),
-  label: z9.string().min(1).max(64).optional().describe(
+  label: z10.string().min(1).max(64).optional().describe(
     'Free-form label for your own bookkeeping (e.g. `"supplier"`, `"sales rep"`) \u2014 echoed back unchanged, never interpreted by Klappay.'
   )
 });
-var SplitRecipientInputSchema = z9.object({
-  recipientId: z9.string().describe(
+var SplitRecipientInputSchema = z10.object({
+  recipientId: z10.string().describe(
     "id of a `Recipient` you already registered via `POST /v1/recipients` (not a raw address) \u2014 see `recipients:write`/`charges:split_write` scopes. A leaked `charges:write`-only key can never redirect payout to a brand new address this way, only reference one already trusted."
   ),
-  percent: z9.number().positive().max(100).describe(
+  percent: z10.number().positive().max(100).describe(
     "Percent of *your own* net share (i.e. of `100 - feePercent`, not of the charge's gross `amount`) to route to this recipient instead of your own payout wallet. Klappay's fee is computed on the gross amount first and is never diluted by how you choose to split what's left \u2014 see `docs/payments.md`'s \"Settling the payout\" section for the exact math."
   ),
-  label: z9.string().min(1).max(64).optional().describe(
+  label: z10.string().min(1).max(64).optional().describe(
     'Free-form label for your own bookkeeping (e.g. `"supplier"`, `"sales rep"`) \u2014 echoed back unchanged, never interpreted by Klappay. Independent of the label the recipient was registered with.'
   )
 });
-var SplitRecipientsInputSchema = z9.array(SplitRecipientInputSchema).max(CHARGE_SPLIT_RECIPIENTS_MAX).superRefine((recipients, ctx) => {
+var SplitRecipientsInputSchema = z10.array(SplitRecipientInputSchema).max(CHARGE_SPLIT_RECIPIENTS_MAX).superRefine((recipients, ctx) => {
   const seen = /* @__PURE__ */ new Set();
   recipients.forEach((recipient, index) => {
     if (seen.has(recipient.recipientId)) {
       ctx.addIssue({
-        code: z9.ZodIssueCode.custom,
+        code: z10.ZodIssueCode.custom,
         message: `Duplicate split recipientId: ${recipient.recipientId}.`,
         path: [index, "recipientId"]
       });
@@ -213,82 +226,91 @@ var SplitRecipientsInputSchema = z9.array(SplitRecipientInputSchema).max(CHARGE_
   `Optional extra recipients for this charge's split \u2014 e.g. a supplier or the sales rep who closed the deal \u2014 up to ${CHARGE_SPLIT_RECIPIENTS_MAX}, each referenced by \`recipientId\` (see \`POST /v1/recipients\`), never a raw address. Requires the \`charges:split_write\` scope in addition to \`charges:write\`. Frozen at creation exactly like everything else that shapes the split address; cannot be changed afterward. The sum of every \`percent\` here must fit within \`100 - feePercent\` (your own net share) \u2014 a request that doesn't is rejected with \`422 split_recipients_exceed_available_percent\`.`
 );
 var CHARGE_AMOUNT_MAX = 999999999999;
-var CreateChargeSchema = z9.object({
-  amount: z9.number().positive().max(CHARGE_AMOUNT_MAX).describe(
+var CreateChargeSchema = z10.object({
+  amount: z10.number().positive().max(CHARGE_AMOUNT_MAX).describe(
     "Amount to charge, in `currency` units (e.g. `49.9` = $49.90) \u2014 up to 6 decimal places; anything more precise is silently truncated. Required \u2014 every charge has a target amount, the first credited transfer that reaches it confirms the charge."
   ),
-  currency: z9.literal("USD").default("USD").describe("Always `USD` today \u2014 the only supported currency."),
+  currency: z10.literal("USD").default("USD").describe("Always `USD` today \u2014 the only supported currency."),
   acceptedPayments: AcceptedPaymentsSchema,
-  expiresIn: z9.number().int().min(CHARGE_EXPIRES_IN_MIN_SECONDS).max(CHARGE_EXPIRES_IN_MAX_SECONDS).describe(
+  expiresIn: z10.number().int().min(CHARGE_EXPIRES_IN_MIN_SECONDS).max(CHARGE_EXPIRES_IN_MAX_SECONDS).describe(
     "Seconds, not minutes or milliseconds \u2014 how long the charge stays open before it expires. Required, min 60, max 3600 (60 minutes) \u2014 sized off the slowest chain Klappay supports today (Ethereum mainnet, where a safely-confirmed transfer takes up to ~15 minutes), leaving real margin for payer-side delay (gas spikes, wallet friction) on top of that. Cannot be extended or shortened after creation."
   ),
-  idempotencyKey: z9.string().min(1).max(255).optional().describe(
+  idempotencyKey: z10.string().min(1).max(255).optional().describe(
     "Scoped to your tenant. Replaying the same key returns the original charge unchanged instead of creating a duplicate \u2014 safe to retry a request after a timeout without double-charging."
   ),
-  externalRef: z9.string().min(1).max(255).optional().describe(
+  externalRef: z10.string().min(1).max(255).optional().describe(
     "An opaque correlation id from your own system (e.g. an order id) \u2014 echoed back on the charge and in every webhook payload. Not interpreted or validated by Klappay."
   ),
-  source: z9.string().min(1).max(64).optional().describe(
+  source: z10.string().min(1).max(64).optional().describe(
     'Free-form label for what created this charge (e.g. `"checkout"`, `"invoice"`) \u2014 useful if you create charges from more than one flow and want to tell them apart later. Not a fixed enum; use whatever values make sense to you.'
   ),
   metadata: MetadataWithKlappaySchema.optional(),
-  redirectUrl: z9.string().url().refine((value) => /^https?:\/\//.test(value), "must use http or https").optional().describe(
+  redirectUrl: z10.string().url().refine((value) => /^https?:\/\//.test(value), "must use http or https").optional().describe(
     "Where to send the payer once this charge resolves, if you use Klappay's hosted checkout page (see `checkoutUrl` on the read shape) \u2014 ignored otherwise. Must be `http(s)` \u2014 a browser will navigate here, so `javascript:`/`data:` and other non-navigational schemes are rejected. Otherwise not validated beyond being well-formed; what happens at that destination is yours to build."
   ),
-  splitRecipients: SplitRecipientsInputSchema.optional()
+  splitRecipients: SplitRecipientsInputSchema.optional(),
+  escrow: EscrowConfigSchema.optional().describe(
+    "Configure this charge as an escrow instead of a normal payment. Funds land in a dedicated, non-custodial Safe (not the usual split address) and only `releaserAddress` (or, if omitted, your API key's own `payoutAddress`) can ever release them \u2014 via `POST /v1/charges/{id}/release`, signed on their end, never something Klappay can trigger or redirect. Omit this field entirely for a normal charge."
+  )
 });
-var ChargeSchema = z9.object({
-  id: z9.string().describe("Klappay-generated id, e.g. `ch_...`. Use this to look up the charge later."),
-  amount: z9.number().describe("The amount originally requested, in `currency` units (up to 6 decimal places)."),
-  amountReceived: z9.number().nullable().describe(
+var ChargeSchema = z10.object({
+  id: z10.string().describe("Klappay-generated id, e.g. `ch_...`. Use this to look up the charge later."),
+  amount: z10.number().describe("The amount originally requested, in `currency` units (up to 6 decimal places)."),
+  amountReceived: z10.number().nullable().describe(
     "Cumulative amount actually received on-chain so far, in `currency` units (up to 6 decimal places). `null` until the first transfer arrives. Can exceed `amount` \u2014 see `isOverpaid`."
   ),
-  isOverpaid: z9.boolean().describe(
+  isOverpaid: z10.boolean().describe(
     "`true` if `amountReceived` ended up greater than `amount`. Klappay never refunds the difference automatically \u2014 see the docs for why."
   ),
-  currency: z9.string().describe("Always `USD` today \u2014 the only supported currency."),
-  acceptedPayments: z9.array(AcceptedPaymentSchema).describe(
+  currency: z10.string().describe("Always `USD` today \u2014 the only supported currency."),
+  acceptedPayments: z10.array(AcceptedPaymentSchema).describe(
     "Every `(token, network)` pair this charge was configured to accept, unchanged after creation."
   ),
-  paidWith: z9.array(AcceptedPaymentSchema).describe(
+  paidWith: z10.array(AcceptedPaymentSchema).describe(
     "Every distinct `(token, network)` pair that has actually contributed a credited transfer so far \u2014 empty until the first one arrives. Can hold more than one entry: a charge accepting several pairs can be paid across a combination of them, and every entry here sums toward `amountReceived`."
   ),
-  swapAlternatives: z9.array(SwapAlternativeSchema).describe(
+  swapAlternatives: z10.array(SwapAlternativeSchema).describe(
     "Every `(token, network)` pair the payer can pay with instead, via `POST /v1/charges/{id}/quote` \u2014 derived from the networks in `acceptedPayments` (e.g. a charge accepting USDC on both Base and Optimism lists `ETH` on Base and `ETH` on Optimism separately, since they're different networks the payer has to choose between, not one merged option). Pass an entry's `token`/`network` straight through as `inputToken`/`inputNetwork`. Recomputed on every read against Klappay's current trusted list, not frozen at creation \u2014 empty if this charge's networks have no trusted alt-token, if swap-to-pay isn't configured on this deployment, or if `environment` is `test` (0x, who powers the swap, has no testnet support at all \u2014 `POST /v1/charges/{id}/quote` always rejects a test-environment charge with `422 swap_test_environment_unsupported`)."
   ),
-  address: z9.string().describe(
+  address: z10.string().describe(
     "The on-chain address the payer must send funds to \u2014 identical across every accepted network (0xSplits addresses are chain-agnostic). Unique per charge, predicted at creation time \u2014 funds sent here go directly to the merchant, Klappay never custodies them."
   ),
   status: ChargeStatusSchema,
   settlementStatus: SettlementStatusSchema.nullable(),
   environment: EnvironmentSchema,
-  apiKeyId: z9.string().nullable().describe(
+  apiKeyId: z10.string().nullable().describe(
     "Which of your API keys created this charge. `null` for a charge created before this field existed."
   ),
-  txHash: z9.string().nullable().describe(
+  txHash: z10.string().nullable().describe(
     "Transaction hash of the most recent transfer detected for this charge. `null` until a payment is detected."
   ),
-  externalRef: z9.string().nullable(),
-  source: z9.string().nullable(),
+  externalRef: z10.string().nullable(),
+  source: z10.string().nullable(),
   metadata: MetadataWithKlappaySchema.nullable(),
-  redirectUrl: z9.string().nullable().describe("Echoes the `redirectUrl` set at creation, if any. `null` if none was set."),
-  checkoutUrl: z9.string().nullable().describe(
+  redirectUrl: z10.string().nullable().describe("Echoes the `redirectUrl` set at creation, if any. `null` if none was set."),
+  checkoutUrl: z10.string().nullable().describe(
     "Link to Klappay's hosted checkout page for this charge. `null` if this deployment has no hosted checkout configured \u2014 build your own payment UI from `address`/`acceptedPayments` instead."
   ),
-  splitRecipients: z9.array(SplitRecipientSchema).describe("Echoes whatever extra split recipients were set at creation \u2014 empty array if none."),
-  createdAt: z9.string().datetime(),
-  expiresAt: z9.string().datetime().describe(
+  splitRecipients: z10.array(SplitRecipientSchema).describe("Echoes whatever extra split recipients were set at creation \u2014 empty array if none."),
+  createdAt: z10.string().datetime(),
+  expiresAt: z10.string().datetime().describe(
     "When this charge stops accepting payment, if still `pending`/`partially_paid` by then."
   ),
-  confirmedAt: z9.string().datetime().nullable().describe("When `status` first reached `confirmed`. `null` until then."),
-  settledAt: z9.string().datetime().nullable().describe(
+  confirmedAt: z10.string().datetime().nullable().describe("When `status` first reached `confirmed`. `null` until then."),
+  settledAt: z10.string().datetime().nullable().describe(
     "When `settlementStatus` first reached `completed` \u2014 the merchant's wallet actually has the funds. `null` until then, including while `settlementStatus` is `pending`/`failed`."
   ),
-  lastActivityAt: z9.string().datetime().describe(
+  lastActivityAt: z10.string().datetime().describe(
     "When a transfer was last credited toward this charge, or `createdAt` if none has arrived yet."
+  ),
+  escrow: z10.object({
+    releaserAddress: z10.string().describe("The only address that can ever release this escrow \u2014 never Klappay."),
+    releasedAt: z10.string().datetime().nullable().describe("When the release actually executed on-chain. `null` until then.")
+  }).nullable().describe(
+    "Present only when this charge was created as an escrow (see `escrow` on the create request) \u2014 `null` for a normal charge."
   )
 });
-var ListChargesSchema = z9.object({
+var ListChargesSchema = z10.object({
   status: ChargeStatusSchema.optional(),
   token: TokenSchema.optional().describe(
     "Filters on `paidWith.token` \u2014 the pair actually paid, not accepted."
@@ -297,13 +319,13 @@ var ListChargesSchema = z9.object({
     "Filters on `paidWith.network` \u2014 the pair actually paid, not accepted."
   ),
   environment: EnvironmentSchema.optional(),
-  since: z9.string().datetime().optional().describe(
+  since: z10.string().datetime().optional().describe(
     "Only return charges created at or after this timestamp (filters on `createdAt`, not on when the status last changed). If polling as a fallback for missed webhooks, use a window at least as wide as the longest `expiresIn` your charges use, or you can miss a long-lived charge that changed status outside a narrower window."
   ),
-  isOverpaid: z9.enum(["true", "false"]).transform((v) => v === "true").optional()
+  isOverpaid: z10.enum(["true", "false"]).transform((v) => v === "true").optional()
 }).extend(PaginationQuerySchema.shape);
 var PaginatedChargesSchema = paginatedSchema(ChargeSchema);
-var GetChargeQrCodeQuerySchema = z9.object({
+var GetChargeQrCodeQuerySchema = z10.object({
   token: TokenSchema.optional().describe(
     "Which accepted `(token, network)` pair to encode in the QR \u2014 required if `acceptedPayments` has more than one pair, since there is no single unambiguous default to fall back to. Ignored (and unnecessary) when the charge accepts exactly one pair."
   ),
@@ -311,9 +333,9 @@ var GetChargeQrCodeQuerySchema = z9.object({
 });
 
 // src/charge-check.ts
-import { z as z10 } from "zod";
-var CheckChargeRequestSchema = z10.object({
-  txHash: z10.string().regex(/^0x[0-9a-fA-F]{64}$/, "must be a 32-byte transaction hash").optional().describe(
+import { z as z11 } from "zod";
+var CheckChargeRequestSchema = z11.object({
+  txHash: z11.string().regex(/^0x[0-9a-fA-F]{64}$/, "must be a 32-byte transaction hash").optional().describe(
     "The on-chain transaction hash to verify directly, if you already have it \u2014 e.g. right after a swap-to-pay or wallet-connect transaction is sent. Costs a single RPC call instead of scanning a block range, so the check resolves faster and cheaper. Omit to fall back to scanning recent transfers to this charge's address, the same lookup the background reconciliation pass runs. Never trusted at face value \u2014 whatever this transaction actually contains on-chain is what gets credited, regardless of any amount/token implied elsewhere."
   ),
   network: NetworkSchema.optional().describe(
@@ -324,61 +346,61 @@ var CheckChargeRequestSchema = z10.object({
 });
 
 // src/distributions.ts
-import { z as z11 } from "zod";
-var SplitDistributionStatusSchema = z11.enum(["pending", "processing", "completed", "failed"]).describe(
+import { z as z12 } from "zod";
+var SplitDistributionStatusSchema = z12.enum(["pending", "processing", "completed", "failed"]).describe(
   "Status of one payout attempt to the merchant, for a single `(token, network)` pair \u2014 a charge that settles across more than one pair has one of these per pair. `pending`: queued, not yet claimed by a distributor. `processing`: a distributor (Klappay's own worker, or anyone racing to call `distribute()` first, see `PendingDistributionSchema`) has claimed it and is submitting the on-chain transaction. `completed`: the merchant's wallet has the funds. `failed`: every automatic retry was exhausted."
 );
-var PendingDistributionRecipientSchema = z11.object({
-  address: z11.string().describe("On-chain recipient address."),
-  percentAllocation: z11.number().describe("This recipient's share of the split, as a percentage (e.g. `99.0991` = 99.0991%).")
+var PendingDistributionRecipientSchema = z12.object({
+  address: z12.string().describe("On-chain recipient address."),
+  percentAllocation: z12.number().describe("This recipient's share of the split, as a percentage (e.g. `99.0991` = 99.0991%).")
 });
-var PendingDistributionSchema = z11.object({
-  splitAddress: z11.string().describe("The on-chain 0xSplits address to call `distribute()` on."),
+var PendingDistributionSchema = z12.object({
+  splitAddress: z12.string().describe("The on-chain 0xSplits address to call `distribute()` on."),
   network: NetworkSchema,
   token: TokenSchema,
-  recipients: z11.array(PendingDistributionRecipientSchema).describe(
+  recipients: z12.array(PendingDistributionRecipientSchema).describe(
     "The exact recipient list to pass to `distribute()` \u2014 the split contract only stores a hash of this config, so the caller must supply the identical array to prove it matches. Always present, never reconstructed from partial data."
   ),
-  distributorFeePercent: z11.number().describe(
+  distributorFeePercent: z12.number().describe(
     "Percentage of the split balance paid to whoever calls `distribute()` first (e.g. `0.1` = 0.1%). Frozen at charge creation, same for every distribution today."
   ),
-  estimatedRewardAmount: z11.number().describe(
+  estimatedRewardAmount: z12.number().describe(
     "Estimate only, in the charge's `currency` units, based on the amount Klappay detected on-chain \u2014 not a live read of the split's current balance. Read the balance yourself before submitting a transaction; a stale estimate is harmless (see the docs), never a reason to skip that check."
   ),
-  availableSince: z11.string().datetime().describe("When this distribution entered its grace period."),
-  graceEndsAt: z11.string().datetime().describe(
+  availableSince: z12.string().datetime().describe("When this distribution entered its grace period."),
+  graceEndsAt: z12.string().datetime().describe(
     "When Klappay's own worker may claim this distribution. Racing to call `distribute()` after this timestamp is possible but increasingly likely to lose to the worker."
   )
 });
 var PaginatedPendingDistributionsSchema = paginatedSchema(PendingDistributionSchema);
-var ListenPendingDistributionsQuerySchema = z11.object({
-  limit: z11.coerce.number().int().min(0).max(PAGINATION_LIMIT_MAX).default(0).describe(
+var ListenPendingDistributionsQuerySchema = z12.object({
+  limit: z12.coerce.number().int().min(0).max(PAGINATION_LIMIT_MAX).default(0).describe(
     "How many currently-claimable distributions to emit as an initial snapshot right after connecting \u2014 each as a synthetic `distribution.available` event \u2014 before continuing with real-time deltas. `0` (the default, same as omitting it) sends no snapshot at all, matching this endpoint's original behavior: connect first, then call `GET /v1/distributions/pending` yourself to bootstrap. Not a page \u2014 there is no cursor for this snapshot, so if more than `limit` are claimable at connect time, the excess is simply not sent; call `GET /v1/distributions/pending` directly for a complete, paginated listing."
   )
 });
-var PendingDistributionEventSchema = z11.discriminatedUnion("type", [
-  z11.object({
-    type: z11.literal("distribution.available"),
+var PendingDistributionEventSchema = z12.discriminatedUnion("type", [
+  z12.object({
+    type: z12.literal("distribution.available"),
     distribution: PendingDistributionSchema
   }),
-  z11.object({
-    type: z11.literal("distribution.claimed"),
-    splitAddress: z11.string().describe("No longer claimable \u2014 either settled by someone, or picked up by the worker.")
+  z12.object({
+    type: z12.literal("distribution.claimed"),
+    splitAddress: z12.string().describe("No longer claimable \u2014 either settled by someone, or picked up by the worker.")
   })
 ]);
 
 // src/metrics.ts
-import { z as z12 } from "zod";
-var MetricsResourceSchema = z12.enum(["charges", "transactions", "distributions"]).describe(
+import { z as z13 } from "zod";
+var MetricsResourceSchema = z13.enum(["charges", "transactions", "distributions"]).describe(
   "Which underlying dataset to query. `charges`: one row per charge. `transactions`: one row per detected on-chain transfer \u2014 a charge paid in installments has more than one. `distributions`: one row per payout attempt to the merchant, one per `(token, network)` pair a charge settled across."
 );
-var MetricsAggregationSchema = z12.enum(["count", "sum", "avg", "min", "max"]).describe(
+var MetricsAggregationSchema = z13.enum(["count", "sum", "avg", "min", "max"]).describe(
   "`count` counts matching rows and never takes `field`. `sum`/`avg`/`min`/`max` require `field` to be set to one of the resource\u2019s numeric fields."
 );
-var MetricsFilterOperatorSchema = z12.enum(["eq", "neq", "in", "gt", "gte", "lt", "lte"]).describe(
+var MetricsFilterOperatorSchema = z13.enum(["eq", "neq", "in", "gt", "gte", "lt", "lte"]).describe(
   "`in` expects an array value (max 50 entries); every other operator expects a single scalar."
 );
-var MetricsDateGranularitySchema = z12.enum(["day", "week", "month", "year"]).describe(
+var MetricsDateGranularitySchema = z13.enum(["day", "week", "month", "year"]).describe(
   "Bucket width for a `date_bucket` `groupBy` entry \u2014 Postgres `date_trunc` semantics (UTC)."
 );
 var metricsQueryEnvironmentSchema = EnvironmentSchema.describe(
@@ -391,151 +413,159 @@ var METRICS_QUERY_MAX_GROUP_BY = 3;
 var METRICS_QUERY_MAX_FILTERS = 20;
 var METRICS_QUERY_MAX_METRICS = 10;
 var METRIC_ALIAS_PATTERN = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
-var metricAliasSchema = z12.string().min(1).max(64).regex(
+var metricAliasSchema = z13.string().min(1).max(64).regex(
   METRIC_ALIAS_PATTERN,
   "Must start with a letter or underscore, and contain only letters, digits, and underscores \u2014 this becomes a SQL column alias."
 ).optional();
-var MetricsFilterValueSchema = z12.union([
-  z12.string().max(255),
-  z12.number(),
-  z12.boolean(),
-  z12.array(z12.union([z12.string().max(255), z12.number()])).min(1).max(50)
+var MetricsFilterValueSchema = z13.union([
+  z13.string().max(255),
+  z13.number(),
+  z13.boolean(),
+  z13.array(z13.union([z13.string().max(255), z13.number()])).min(1).max(50)
 ]);
-var orderBySchema = z12.object({
-  key: z12.string().min(1).max(64).regex(
+var orderBySchema = z13.object({
+  key: z13.string().min(1).max(64).regex(
     METRIC_ALIAS_PATTERN,
     "Must start with a letter or underscore, and contain only letters, digits, and underscores \u2014 every valid output column name already looks like this."
   ).describe(
     "An output column name from this same query \u2014 either a `groupBy` field name, or a metric\u2019s `alias` (or its default name: `${aggregation}` for `count`, `${aggregation}_${field}` otherwise, e.g. `sum_amount`). Must match `^[a-zA-Z_][a-zA-Z0-9_]*$` \u2014 every real output column name already does, so this only ever rejects a value that could never have been one."
   ),
-  direction: z12.enum(["asc", "desc"])
+  direction: z13.enum(["asc", "desc"])
 }).describe(
   "Sort the result rows by any output column \u2014 including the bucket field itself for a `date_bucket` query (e.g. `createdAt`). Omit to get ascending-by-bucket order for a date-bucketed query, or implementation-defined (not guaranteed stable) order otherwise."
 );
-var limitSchema = z12.number().int().min(1).max(METRICS_QUERY_MAX_ROW_LIMIT).default(METRICS_QUERY_DEFAULT_ROW_LIMIT).describe(
+var limitSchema = z13.number().int().min(1).max(METRICS_QUERY_MAX_ROW_LIMIT).default(METRICS_QUERY_DEFAULT_ROW_LIMIT).describe(
   `Max rows to return, ${1}\u2013${METRICS_QUERY_MAX_ROW_LIMIT}, default ${METRICS_QUERY_DEFAULT_ROW_LIMIT}. If more rows matched, \`meta.truncated\` is \`true\` on the response \u2014 narrow the query instead of just raising this.`
 );
-var ChargesQueryFieldSchema = z12.enum(["status", "source", "apiKeyId", "currency", "isOverpaid", "externalRef"]).describe(
-  "A `Charge` field to filter or group by \u2014 see `ChargeStatusSchema` for `status`'s own possible values (charges.md). `source`/`externalRef` are free-form strings your own integration set at creation, not a fixed enum."
+var ChargesQueryFieldSchema = z13.enum([
+  "status",
+  "source",
+  "apiKeyId",
+  "currency",
+  "isOverpaid",
+  "externalRef",
+  "escrowReleaserAddress"
+]).describe(
+  "A `Charge` field to filter or group by \u2014 see `ChargeStatusSchema` for `status`'s own possible values (charges.md). `source`/`externalRef` are free-form strings your own integration set at creation, not a fixed enum. `escrowReleaserAddress` is `null` for a normal charge \u2014 filter `escrowReleaserAddress` with operator `neq`/value `null` to isolate escrow-configured charges (see `escrow` in charges.md)."
 );
-var ChargesMetricFieldSchema = z12.enum(["amount", "amountReceived", "feePercent"]).describe(
-  "A `Charge` numeric field to aggregate. `amount`/`amountReceived` are decimal currency amounts (requested vs. actually received \u2014 see `charges.md`). `feePercent` is the platform fee frozen on the charge at creation, e.g. `1.5` means 1.5%."
+var ChargesMetricFieldSchema = z13.enum(["amount", "amountReceived", "feePercent", "escrowFeePercent"]).describe(
+  "A `Charge` numeric field to aggregate. `amount`/`amountReceived` are decimal currency amounts (requested vs. actually received \u2014 see `charges.md`). `feePercent` is the platform fee frozen on the charge at creation, e.g. `1.5` means 1.5%. `escrowFeePercent` is the additional escrow-specific fee component, only present on escrow-configured charges \u2014 see `docs/payments.md`."
 );
-var ChargesDateFieldSchema = z12.enum(["createdAt", "confirmedAt", "lastActivityAt", "expiresAt"]).describe(
-  "A `Charge` timestamp to filter/bucket by. `confirmedAt` is `null` until the charge reaches `confirmed` \u2014 a `dateRange`/`date_bucket` on it implicitly excludes every charge that never confirmed. `expiresAt` is always present (set at creation), useful for e.g. finding charges expiring soon or measuring how close to expiry charges typically resolve."
+var ChargesDateFieldSchema = z13.enum(["createdAt", "confirmedAt", "lastActivityAt", "expiresAt", "escrowReleasedAt"]).describe(
+  "A `Charge` timestamp to filter/bucket by. `confirmedAt` is `null` until the charge reaches `confirmed` \u2014 a `dateRange`/`date_bucket` on it implicitly excludes every charge that never confirmed. `expiresAt` is always present (set at creation), useful for e.g. finding charges expiring soon or measuring how close to expiry charges typically resolve. `escrowReleasedAt` is `null` until an escrow-configured charge is actually released \u2014 same implicit-exclusion behavior as `confirmedAt`, scoped to escrow charges only."
 );
-var ChargesFilterSchema = z12.object({
+var ChargesFilterSchema = z13.object({
   field: ChargesQueryFieldSchema,
   operator: MetricsFilterOperatorSchema,
   value: MetricsFilterValueSchema
 });
-var ChargesGroupBySchema = z12.union([
-  z12.object({ type: z12.literal("field"), field: ChargesQueryFieldSchema }),
-  z12.object({
-    type: z12.literal("date_bucket"),
+var ChargesGroupBySchema = z13.union([
+  z13.object({ type: z13.literal("field"), field: ChargesQueryFieldSchema }),
+  z13.object({
+    type: z13.literal("date_bucket"),
     field: ChargesDateFieldSchema,
     granularity: MetricsDateGranularitySchema
   })
 ]);
-var ChargesMetricSchema = z12.object({
+var ChargesMetricSchema = z13.object({
   aggregation: MetricsAggregationSchema,
   field: ChargesMetricFieldSchema.optional(),
   alias: metricAliasSchema
 });
-var ChargesMetricsQuerySchema = z12.object({
-  resource: z12.literal("charges"),
+var ChargesMetricsQuerySchema = z13.object({
+  resource: z13.literal("charges"),
   environment: metricsQueryEnvironmentSchema,
-  dateRange: z12.object({
+  dateRange: z13.object({
     field: ChargesDateFieldSchema,
-    from: z12.string().max(64).datetime(),
-    to: z12.string().max(64).datetime()
+    from: z13.string().max(64).datetime(),
+    to: z13.string().max(64).datetime()
   }),
-  groupBy: z12.array(ChargesGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
-  metrics: z12.array(ChargesMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
-  filters: z12.array(ChargesFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
+  groupBy: z13.array(ChargesGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
+  metrics: z13.array(ChargesMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
+  filters: z13.array(ChargesFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
   orderBy: orderBySchema.optional(),
   limit: limitSchema
 });
-var TransactionsQueryFieldSchema = z12.enum(["network", "token", "source", "causedTransition"]).describe(
+var TransactionsQueryFieldSchema = z13.enum(["network", "token", "source", "causedTransition"]).describe(
   "A `Transaction` field to filter or group by \u2014 see `NetworkSchema`/`TokenSchema`/`TransactionSourceSchema` for their possible values. `causedTransition` is `true` only for the transfer(s) that actually flipped the charge's `status` \u2014 a charge paid in installments can have more than one; filtering/grouping on it excludes no-op duplicate transfers (see `TimelineEvent.causedTransition` in charges.md for the full explanation)."
 );
-var TransactionsMetricFieldSchema = z12.enum(["amount"]).describe("The transfer amount, in the charge's `currency` units.");
-var TransactionsDateFieldSchema = z12.enum(["detectedAt"]).describe("When Klappay detected this transfer on-chain (not when it was mined).");
-var TransactionsFilterSchema = z12.object({
+var TransactionsMetricFieldSchema = z13.enum(["amount"]).describe("The transfer amount, in the charge's `currency` units.");
+var TransactionsDateFieldSchema = z13.enum(["detectedAt"]).describe("When Klappay detected this transfer on-chain (not when it was mined).");
+var TransactionsFilterSchema = z13.object({
   field: TransactionsQueryFieldSchema,
   operator: MetricsFilterOperatorSchema,
   value: MetricsFilterValueSchema
 });
-var TransactionsGroupBySchema = z12.union([
-  z12.object({ type: z12.literal("field"), field: TransactionsQueryFieldSchema }),
-  z12.object({
-    type: z12.literal("date_bucket"),
+var TransactionsGroupBySchema = z13.union([
+  z13.object({ type: z13.literal("field"), field: TransactionsQueryFieldSchema }),
+  z13.object({
+    type: z13.literal("date_bucket"),
     field: TransactionsDateFieldSchema,
     granularity: MetricsDateGranularitySchema
   })
 ]);
-var TransactionsMetricSchema = z12.object({
+var TransactionsMetricSchema = z13.object({
   aggregation: MetricsAggregationSchema,
   field: TransactionsMetricFieldSchema.optional(),
   alias: metricAliasSchema
 });
-var TransactionsMetricsQuerySchema = z12.object({
-  resource: z12.literal("transactions"),
+var TransactionsMetricsQuerySchema = z13.object({
+  resource: z13.literal("transactions"),
   environment: metricsQueryEnvironmentSchema,
-  dateRange: z12.object({
+  dateRange: z13.object({
     field: TransactionsDateFieldSchema,
-    from: z12.string().max(64).datetime(),
-    to: z12.string().max(64).datetime()
+    from: z13.string().max(64).datetime(),
+    to: z13.string().max(64).datetime()
   }),
-  groupBy: z12.array(TransactionsGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
-  metrics: z12.array(TransactionsMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
-  filters: z12.array(TransactionsFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
+  groupBy: z13.array(TransactionsGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
+  metrics: z13.array(TransactionsMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
+  filters: z13.array(TransactionsFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
   orderBy: orderBySchema.optional(),
   limit: limitSchema
 });
-var DistributionsQueryFieldSchema = z12.enum(["status", "network", "token", "distributorAddress"]).describe(
+var DistributionsQueryFieldSchema = z13.enum(["status", "network", "token", "distributorAddress"]).describe(
   "A `SplitDistribution` field to filter or group by \u2014 see `SplitDistributionStatusSchema`/`NetworkSchema`/`TokenSchema` for their possible values. `distributorAddress` is the public on-chain address that actually called `distribute()` for a `completed` distribution \u2014 Klappay's own operator address if settled by Klappay's own worker, a community keeper's address if settled externally (or `null` on the rare case that lookup failed), `null` for every non-`completed` status."
 );
-var DistributionsMetricFieldSchema = z12.enum(["attempts"]).describe(
+var DistributionsMetricFieldSchema = z13.enum(["attempts"]).describe(
   "How many times a payout was attempted for this settlement so far \u2014 incremented on every attempt, whether it succeeded or is being retried after failing. A high `attempts` alongside `status: 'failed'` means every automatic retry was exhausted."
 );
-var DistributionsDateFieldSchema = z12.enum(["createdAt", "processingStartedAt", "completedAt"]).describe(
+var DistributionsDateFieldSchema = z13.enum(["createdAt", "processingStartedAt", "completedAt"]).describe(
   "`createdAt`: when this settlement was queued. `processingStartedAt`: when a worker began its most recent attempt at the payout \u2014 `null` until the first attempt, then overwritten on every subsequent retry, so it reflects the *latest* attempt's start, not the first. `completedAt`: when it actually paid out \u2014 `null` until `status` reaches `completed`, so a `dateRange`/`date_bucket` on it implicitly excludes every distribution still pending/processing/failed."
 );
-var DistributionsFilterSchema = z12.object({
+var DistributionsFilterSchema = z13.object({
   field: DistributionsQueryFieldSchema,
   operator: MetricsFilterOperatorSchema,
   value: MetricsFilterValueSchema
 });
-var DistributionsGroupBySchema = z12.union([
-  z12.object({ type: z12.literal("field"), field: DistributionsQueryFieldSchema }),
-  z12.object({
-    type: z12.literal("date_bucket"),
+var DistributionsGroupBySchema = z13.union([
+  z13.object({ type: z13.literal("field"), field: DistributionsQueryFieldSchema }),
+  z13.object({
+    type: z13.literal("date_bucket"),
     field: DistributionsDateFieldSchema,
     granularity: MetricsDateGranularitySchema
   })
 ]);
-var DistributionsMetricSchema = z12.object({
+var DistributionsMetricSchema = z13.object({
   aggregation: MetricsAggregationSchema,
   field: DistributionsMetricFieldSchema.optional(),
   alias: metricAliasSchema
 });
-var DistributionsMetricsQuerySchema = z12.object({
-  resource: z12.literal("distributions"),
+var DistributionsMetricsQuerySchema = z13.object({
+  resource: z13.literal("distributions"),
   environment: metricsQueryEnvironmentSchema,
-  dateRange: z12.object({
+  dateRange: z13.object({
     field: DistributionsDateFieldSchema,
-    from: z12.string().max(64).datetime(),
-    to: z12.string().max(64).datetime()
+    from: z13.string().max(64).datetime(),
+    to: z13.string().max(64).datetime()
   }),
-  groupBy: z12.array(DistributionsGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
-  metrics: z12.array(DistributionsMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
-  filters: z12.array(DistributionsFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
+  groupBy: z13.array(DistributionsGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
+  metrics: z13.array(DistributionsMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
+  filters: z13.array(DistributionsFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
   orderBy: orderBySchema.optional(),
   limit: limitSchema
 });
 var ONE_DAY_MS = 24 * 60 * 60 * 1e3;
-var MetricsQuerySchema = z12.discriminatedUnion("resource", [
+var MetricsQuerySchema = z13.discriminatedUnion("resource", [
   ChargesMetricsQuerySchema,
   TransactionsMetricsQuerySchema,
   DistributionsMetricsQuerySchema
@@ -544,7 +574,7 @@ var MetricsQuerySchema = z12.discriminatedUnion("resource", [
   const to = new Date(input.dateRange.to);
   if (from >= to) {
     ctx.addIssue({
-      code: z12.ZodIssueCode.custom,
+      code: z13.ZodIssueCode.custom,
       message: "`dateRange.from` must be before `dateRange.to`.",
       path: ["dateRange", "from"]
     });
@@ -552,7 +582,7 @@ var MetricsQuerySchema = z12.discriminatedUnion("resource", [
   const spanDays = (to.getTime() - from.getTime()) / ONE_DAY_MS;
   if (spanDays > MAX_METRICS_QUERY_DATE_RANGE_DAYS) {
     ctx.addIssue({
-      code: z12.ZodIssueCode.custom,
+      code: z13.ZodIssueCode.custom,
       message: `\`dateRange\` cannot span more than ${MAX_METRICS_QUERY_DATE_RANGE_DAYS} days.`,
       path: ["dateRange", "to"]
     });
@@ -560,7 +590,7 @@ var MetricsQuerySchema = z12.discriminatedUnion("resource", [
   const dateBucketCount = input.groupBy.filter((entry) => entry.type === "date_bucket").length;
   if (dateBucketCount > 1) {
     ctx.addIssue({
-      code: z12.ZodIssueCode.custom,
+      code: z13.ZodIssueCode.custom,
       message: "At most one `date_bucket` entry is allowed in `groupBy`.",
       path: ["groupBy"]
     });
@@ -568,7 +598,7 @@ var MetricsQuerySchema = z12.discriminatedUnion("resource", [
   input.metrics.forEach((metric, index) => {
     if (metric.aggregation !== "count" && metric.field === void 0) {
       ctx.addIssue({
-        code: z12.ZodIssueCode.custom,
+        code: z13.ZodIssueCode.custom,
         message: "`field` is required unless `aggregation` is `count`.",
         path: ["metrics", index, "field"]
       });
@@ -577,7 +607,7 @@ var MetricsQuerySchema = z12.discriminatedUnion("resource", [
   const aliases = input.metrics.map((metric) => metric.alias).filter((alias) => alias !== void 0);
   if (new Set(aliases).size !== aliases.length) {
     ctx.addIssue({
-      code: z12.ZodIssueCode.custom,
+      code: z13.ZodIssueCode.custom,
       message: "Every `metrics[].alias` must be unique.",
       path: ["metrics"]
     });
@@ -586,32 +616,32 @@ var MetricsQuerySchema = z12.discriminatedUnion("resource", [
   input.metrics.forEach((metric, index) => {
     if (metric.alias !== void 0 && reservedNames.has(metric.alias)) {
       ctx.addIssue({
-        code: z12.ZodIssueCode.custom,
+        code: z13.ZodIssueCode.custom,
         message: `\`alias\` "${metric.alias}" collides with a \`groupBy\` field name (or the reserved word "bucket") \u2014 choose a different alias.`,
         path: ["metrics", index, "alias"]
       });
     }
   });
 });
-var MetricsQueryResultRowSchema = z12.record(
-  z12.string(),
-  z12.union([z12.string(), z12.number(), z12.boolean(), z12.null()])
+var MetricsQueryResultRowSchema = z13.record(
+  z13.string(),
+  z13.union([z13.string(), z13.number(), z13.boolean(), z13.null()])
 );
-var MetricsQueryResultSchema = z12.object({
-  data: z12.array(MetricsQueryResultRowSchema),
-  meta: z12.object({
+var MetricsQueryResultSchema = z13.object({
+  data: z13.array(MetricsQueryResultRowSchema),
+  meta: z13.object({
     resource: MetricsResourceSchema,
     environment: EnvironmentSchema,
-    rowCount: z12.number().int().describe("Number of rows in `data`."),
-    truncated: z12.boolean().describe(
+    rowCount: z13.number().int().describe("Number of rows in `data`."),
+    truncated: z13.boolean().describe(
       "`true` if more rows matched than `limit` allowed \u2014 `data` holds only the first `limit`."
     )
   })
 });
 
 // src/webhook-events.ts
-import { z as z13 } from "zod";
-var ChargeWebhookEventTypeSchema = z13.enum([
+import { z as z14 } from "zod";
+var ChargeWebhookEventTypeSchema = z14.enum([
   "charge.created",
   "charge.partially_paid",
   "charge.confirmed",
@@ -623,14 +653,14 @@ var ChargeWebhookEventTypeSchema = z13.enum([
 ]).describe(
   'Note the distinction between `charge.confirmed` and `charge.settled`: `confirmed` means the payment was detected on-chain; `settled` means the merchant\'s wallet actually received the funds \u2014 a separate, later step. Subscribe to `confirmed` if you only need "will I get paid," or `settled` if you need "has the money actually arrived." `charge.overpaid` fires alongside `charge.confirmed`/`charge.partially_paid` whenever the cumulative amount received ends up above `amount` (see `Charge.isOverpaid`). Every event in this category carries the full `Charge` object as `data`.'
 );
-var WebhookDeliveryEventTypeSchema = z13.enum(["webhook.delivery_failed", "webhook.delivery_recovered", "webhook.endpoint_unhealthy"]).describe(
+var WebhookDeliveryEventTypeSchema = z14.enum(["webhook.delivery_failed", "webhook.delivery_recovered", "webhook.endpoint_unhealthy"]).describe(
   "Meta-events about the health of your own webhook endpoints \u2014 useful for monitoring without polling `GET /v1/webhooks/{id}/deliveries`. `webhook.endpoint_unhealthy` fires once when a webhook's failure rate over the trailing 24h crosses 20%, and `webhook.delivery_recovered` fires once when a delivery to that webhook next succeeds. `data` for every event in this category: `{ webhookId, url, failureRatio? }` (`failureRatio` only present on `webhook.endpoint_unhealthy`)."
 );
-var WebhookEventTypeSchema = z13.union([
+var WebhookEventTypeSchema = z14.union([
   ChargeWebhookEventTypeSchema,
   WebhookDeliveryEventTypeSchema
 ]);
-var WebhookCategorySchema = z13.enum(["payments", "webhooks"]).describe(
+var WebhookCategorySchema = z14.enum(["payments", "webhooks"]).describe(
   "Subscribe to every event in a category via `eventCategories` instead of listing events one by one \u2014 new events added to a category later arrive automatically, no subscription update needed."
 );
 function buildCategoryMap() {
@@ -658,101 +688,101 @@ var TriggerableChargeEventSchema = ChargeWebhookEventTypeSchema.exclude([
 );
 
 // src/webhooks.ts
-import { z as z14 } from "zod";
+import { z as z15 } from "zod";
 var WEBHOOK_EVENTS_WILDCARD = "*";
-var CreateWebhookSchema = z14.object({
-  url: z14.string().max(2048).url().describe(
+var CreateWebhookSchema = z15.object({
+  url: z15.string().max(2048).url().describe(
     "Must be HTTPS and resolve to a public address \u2014 private/internal IPs are rejected."
   ),
-  events: z14.array(z14.union([WebhookEventTypeSchema, z14.literal(WEBHOOK_EVENTS_WILDCARD)])).max(Object.keys(EVENT_CATEGORY_MAP).length + 1).default([]).describe(
+  events: z15.array(z15.union([WebhookEventTypeSchema, z15.literal(WEBHOOK_EVENTS_WILDCARD)])).max(Object.keys(EVENT_CATEGORY_MAP).length + 1).default([]).describe(
     'Individual event types to receive, or `"*"` for every event (combine with `excludeEvents` to opt back out of specific ones). Omit in favor of `eventCategories` if you want whole categories instead.'
   ),
-  eventCategories: z14.array(WebhookCategorySchema).max(WebhookCategorySchema.options.length).default([]).describe(
+  eventCategories: z15.array(WebhookCategorySchema).max(WebhookCategorySchema.options.length).default([]).describe(
     "Subscribe to every event in these categories. At least one of `events` or `eventCategories` is required."
   ),
-  excludeEvents: z14.array(WebhookEventTypeSchema).max(Object.keys(EVENT_CATEGORY_MAP).length).default([]).describe(
+  excludeEvents: z15.array(WebhookEventTypeSchema).max(Object.keys(EVENT_CATEGORY_MAP).length).default([]).describe(
     'Event types to exclude even if selected via `events: ["*"]` or `eventCategories`.'
   )
 }).refine((v) => v.events.length > 0 || v.eventCategories.length > 0, {
   message: "must select at least one event via `events` or `eventCategories`",
   path: ["events"]
 });
-var WebhookSchema = z14.object({
-  id: z14.string(),
+var WebhookSchema = z15.object({
+  id: z15.string(),
   environment: EnvironmentSchema.nullable().describe(
     "Which environment's API key created this webhook \u2014 `live` or `test`. Every event is only ever delivered to a webhook whose `environment` matches the event's own (or to a webhook with `environment: null`, which receives every environment \u2014 the case for every webhook created before this field existed)."
   ),
-  url: z14.string(),
-  events: z14.array(WebhookEventTypeSchema),
-  eventCategories: z14.array(WebhookCategorySchema),
-  excludeEvents: z14.array(WebhookEventTypeSchema),
-  isWildcard: z14.boolean(),
-  secret: z14.string().describe(
+  url: z15.string(),
+  events: z15.array(WebhookEventTypeSchema),
+  eventCategories: z15.array(WebhookCategorySchema),
+  excludeEvents: z15.array(WebhookEventTypeSchema),
+  isWildcard: z15.boolean(),
+  secret: z15.string().describe(
     "The signing secret, used to verify the `X-Klappay-Signature` header on every delivery. Returned in full only this once \u2014 store it now, it is not recoverable afterward. Header format: `t=<unix-seconds>,v1=<hex-encoded HMAC-SHA256>`. Compute the expected signature as `HMAC-SHA256(secret, \"${t}.${raw request body}\")` (hex-encoded) and compare it to `v1` using a constant-time comparison; as a replay-protection measure, also reject if `t` is too far from the current time \u2014 Klappay does not enforce or check any particular tolerance server-side, so the exact threshold is entirely the receiver's own policy call. An official SDK's `constructEvent()`/`verifySignature()` do this for you, defaulting to a 300-second tolerance, overridable via `constructEvent`'s `toleranceSeconds` option \u2014 see github.com/klappay for available SDKs."
   ),
-  createdAt: z14.string().datetime()
+  createdAt: z15.string().datetime()
 });
 var WebhookListItemSchema = WebhookSchema.omit({ secret: true }).extend({
-  hint: z14.string().describe("A truncated, safe-to-display form of the secret (e.g. `whsec_...ab12`).")
+  hint: z15.string().describe("A truncated, safe-to-display form of the secret (e.g. `whsec_...ab12`).")
 });
-var WebhookPayloadSchema = z14.object({
-  id: z14.string().describe(
+var WebhookPayloadSchema = z15.object({
+  id: z15.string().describe(
     "Unique id for this specific delivery \u2014 also sent as the `X-Klappay-Delivery` header."
   ),
   event: WebhookEventTypeSchema,
-  createdAt: z14.string().datetime(),
-  data: z14.unknown().describe(
+  createdAt: z15.string().datetime(),
+  data: z15.unknown().describe(
     "Event-specific data. Charge events (`charge.*`) carry the full `Charge` object; webhook-delivery events carry a smaller, event-specific object \u2014 see `WebhookEventDataMap`/`TypedWebhookPayload` for the exact shape per event, or docs/webhooks.md."
   )
 });
-var WebhookDeliveryStatusSchema = z14.enum(["pending", "delivered", "failed"]);
-var WebhookDeliverySchema = z14.object({
-  id: z14.string(),
-  webhookId: z14.string(),
+var WebhookDeliveryStatusSchema = z15.enum(["pending", "delivered", "failed"]);
+var WebhookDeliverySchema = z15.object({
+  id: z15.string(),
+  webhookId: z15.string(),
   event: WebhookEventTypeSchema,
   status: WebhookDeliveryStatusSchema.describe(
     "`pending`: still retrying. `delivered`: got a 2xx response. `failed`: retries exhausted (5 attempts over ~24h) \u2014 use `POST /v1/webhooks/{id}/deliveries/{deliveryId}/retry` to try again manually."
   ),
-  attempts: z14.number(),
-  responseCode: z14.number().nullable().describe(
+  attempts: z15.number(),
+  responseCode: z15.number().nullable().describe(
     "HTTP status your endpoint returned on the most recent attempt. `null` if every attempt failed to connect at all."
   ),
-  nextRetryAt: z14.string().datetime().nullable(),
-  deliveredAt: z14.string().datetime().nullable(),
-  createdAt: z14.string().datetime()
+  nextRetryAt: z15.string().datetime().nullable(),
+  deliveredAt: z15.string().datetime().nullable(),
+  createdAt: z15.string().datetime()
 });
 var ListWebhookDeliveriesSchema = PaginationQuerySchema;
 var PaginatedWebhookDeliveriesSchema = paginatedSchema(WebhookDeliverySchema);
 
 // src/recipients.ts
-import { z as z15 } from "zod";
+import { z as z16 } from "zod";
 var EVM_ADDRESS_REGEX = /^0x[0-9a-fA-F]{40}$/;
-var CreateRecipientSchema = z15.object({
-  address: z15.string().regex(EVM_ADDRESS_REGEX, "must be a 20-byte hex address").describe("EVM address to register as a trusted split recipient for your organization."),
-  label: z15.string().min(1).max(64).optional().describe('Free-form label for your own bookkeeping (e.g. `"supplier"`) \u2014 never interpreted.')
+var CreateRecipientSchema = z16.object({
+  address: z16.string().regex(EVM_ADDRESS_REGEX, "must be a 20-byte hex address").describe("EVM address to register as a trusted split recipient for your organization."),
+  label: z16.string().min(1).max(64).optional().describe('Free-form label for your own bookkeeping (e.g. `"supplier"`) \u2014 never interpreted.')
 });
-var RecipientSchema = z15.object({
-  id: z15.string().describe(
+var RecipientSchema = z16.object({
+  id: z16.string().describe(
     "Klappay-generated id, e.g. `rc_...` \u2014 this, not the raw address, is what a charge's `splitRecipients[].recipientId` references."
   ),
   environment: EnvironmentSchema,
-  address: z15.string(),
-  label: z15.string().nullable(),
-  payout: z15.boolean().describe(
+  address: z16.string(),
+  label: z16.string().nullable(),
+  payout: z16.boolean().describe(
     "Whether this recipient is eligible to be used as an API key's `payoutAddress` (in addition to being referenceable in a split, which every non-revoked recipient already is). Set via `PATCH /v1/recipients/{id}` \u2014 requires the `recipients:manage_payout` scope, deliberately separate from `recipients:write`."
   ),
-  createdAt: z15.string().datetime()
+  createdAt: z16.string().datetime()
 });
-var SetRecipientPayoutSchema = z15.object({
-  payout: z15.boolean().describe("New payout-eligibility value for this recipient.")
+var SetRecipientPayoutSchema = z16.object({
+  payout: z16.boolean().describe("New payout-eligibility value for this recipient.")
 });
 
 // src/timeline.ts
-import { z as z16 } from "zod";
-var TransactionSourceSchema = z16.enum(["moralis_webhook", "reconciliation_job", "sandbox"]).describe(
+import { z as z17 } from "zod";
+var TransactionSourceSchema = z17.enum(["moralis_webhook", "reconciliation_job", "sandbox"]).describe(
   "How this transfer was detected: `moralis_webhook` (the normal path), `reconciliation_job` (a fallback poller caught it after the webhook was missed or delayed), or `sandbox` (simulated via `POST /v1/sandbox/charges/{id}/trigger`, no real on-chain transfer)."
 );
-var TimelineEventTypeSchema = z16.enum([
+var TimelineEventTypeSchema = z17.enum([
   "charge.created",
   "charge.expired",
   "transaction.detected",
@@ -763,11 +793,11 @@ var TimelineEventTypeSchema = z16.enum([
 ]).describe(
   "`charge.created`: the charge was created. `charge.expired`: `expiresAt` passed with no full payment. `transaction.detected`: a raw on-chain transfer was seen (see the `event`-shaped fields below for details \u2014 a charge can have more than one, e.g. a partial payment followed by the rest). `split.distributed`: a payout to the merchant completed on-chain, for one contributing `(token, network)` pair \u2014 a charge settled across more than one pair emits one of these per pair (see the `token`/`network` fields below). `webhook.dispatched`/`webhook.delivered`/`webhook.failed`: one specific delivery *attempt* for one webhook subscription \u2014 `failed` here means this single attempt failed, not that all retries were exhausted (see `WebhookDeliveryStatusSchema` for the exhausted-all-retries state)."
 );
-var TimelineEventSchema = z16.object({
+var TimelineEventSchema = z17.object({
   type: TimelineEventTypeSchema,
-  at: z16.string().datetime(),
-  txHash: z16.string().optional().describe("Present for `transaction.detected` and `split.distributed` events only."),
-  amount: z16.number().optional().describe(
+  at: z17.string().datetime(),
+  txHash: z17.string().optional().describe("Present for `transaction.detected` and `split.distributed` events only."),
+  amount: z17.number().optional().describe(
     "Present for `transaction.detected` events only \u2014 the amount that specific transfer carried."
   ),
   source: TransactionSourceSchema.optional().describe(
@@ -779,102 +809,102 @@ var TimelineEventSchema = z16.object({
   network: NetworkSchema.optional().describe(
     "Present for `transaction.detected` and `split.distributed` events \u2014 which network this specific transfer, or settlement, used."
   ),
-  causedTransition: z16.boolean().optional().describe(
+  causedTransition: z17.boolean().optional().describe(
     "Present for `transaction.detected` events only. `true` if this specific transfer changed the charge's status (e.g. PENDING\u2192CONFIRMED) \u2014 a charge paid in installments can have more than one such event."
   ),
   event: WebhookEventTypeSchema.optional().describe(
     "Present for `webhook.*` events only \u2014 which event type this delivery was for."
   ),
-  responseCode: z16.number().nullable().optional().describe(
+  responseCode: z17.number().nullable().optional().describe(
     "Present for `webhook.*` events only \u2014 HTTP status your endpoint returned, or `null` if the request never connected."
   ),
-  attempts: z16.number().optional().describe(
+  attempts: z17.number().optional().describe(
     "Present for `webhook.*` events only \u2014 how many delivery attempts have been made so far."
   )
 });
 
 // src/health.ts
-import { z as z17 } from "zod";
-var HealthSchema = z17.object({
-  status: z17.enum(["ok", "error"]).describe(
+import { z as z18 } from "zod";
+var HealthSchema = z18.object({
+  status: z18.enum(["ok", "error"]).describe(
     "`error` when the database connectivity check fails \u2014 the HTTP status code mirrors this (503 instead of 200), so a plain uptime check (not just a JSON-aware one) still catches a DB outage."
   ),
-  version: z17.string(),
-  timestamp: z17.string().datetime(),
-  db: z17.enum(["ok", "error"]).describe("Result of a real database connectivity check, not just a process-alive check."),
-  pendingWebhooks: z17.number().describe("Count of webhook deliveries still awaiting a successful attempt."),
-  oldestPendingChargeAgeSeconds: z17.number().nullable().describe("Age of the oldest still-unpaid charge, in seconds. `null` if there are none."),
-  lastMoralisEventAgeSeconds: z17.number().nullable().describe(
+  version: z18.string(),
+  timestamp: z18.string().datetime(),
+  db: z18.enum(["ok", "error"]).describe("Result of a real database connectivity check, not just a process-alive check."),
+  pendingWebhooks: z18.number().describe("Count of webhook deliveries still awaiting a successful attempt."),
+  oldestPendingChargeAgeSeconds: z18.number().nullable().describe("Age of the oldest still-unpaid charge, in seconds. `null` if there are none."),
+  lastMoralisEventAgeSeconds: z18.number().nullable().describe(
     "Seconds since the last on-chain payment notification was received \u2014 a cheap signal for whether payment detection is currently working. `null` if none have ever been received."
   )
 });
 
 // src/sandbox.ts
-import { z as z18 } from "zod";
-var SandboxTriggerSchema = z18.object({
+import { z as z19 } from "zod";
+var SandboxTriggerSchema = z19.object({
   event: TriggerableChargeEventSchema,
-  amount: z18.number().positive().max(CHARGE_AMOUNT_MAX).optional().describe(
+  amount: z19.number().positive().max(CHARGE_AMOUNT_MAX).optional().describe(
     "Used with `charge.partially_paid` (amount to simulate as received so far \u2014 must be less than the charge amount, defaults to half of it if omitted) and with `charge.overpaid` (amount received \u2014 must be greater than the charge amount, defaults to 1.5x it if omitted). Ignored for every other event."
   )
 });
 
 // src/capabilities.ts
-import { z as z19 } from "zod";
-var CapabilitiesSchema = z19.object({
-  acceptedPayments: z19.array(AcceptedPaymentSchema).describe(
+import { z as z20 } from "zod";
+var CapabilitiesSchema = z20.object({
+  acceptedPayments: z20.array(AcceptedPaymentSchema).describe(
     "Every `(token, network)` pair actually configured for your environment right now \u2014 read straight from the same lookup `POST /v1/charges` validates `acceptedPayments` against, so it can never list a pair that charge creation would then reject. Use this to build a picker UI instead of hardcoding the matrix client-side."
   )
 });
 
 // src/swap.ts
-import { z as z20 } from "zod";
-var CreateSwapQuoteSchema = z20.object({
+import { z as z21 } from "zod";
+var CreateSwapQuoteSchema = z21.object({
   inputToken: AltTokenSchema.describe(
     "Which alt-cryptocurrency the payer wants to send \u2014 must be one of this charge's `swapAlternatives`, or `422 token_not_supported`."
   ),
   inputNetwork: NetworkSchema.describe(
     "Which network the payer will send `inputToken` on. Also picks which of this charge's `acceptedPayments` pairs the swap resolves to \u2014 a charge accepting USDC on both Base and Optimism resolves to whichever `inputNetwork` you pass. If the charge accepts more than one token on that same network, Klappay breaks the tie using its own trust ranking for that network (e.g. USDT over USDC on BNB Chain, where \"USDC\" is a third-party Binance-Peg token, not Circle's) \u2014 never a token the charge doesn't actually accept."
   ),
-  takerAddress: z20.string().regex(/^0x[0-9a-fA-F]{40}$/, "must be a 20-byte hex address").describe(
+  takerAddress: z21.string().regex(/^0x[0-9a-fA-F]{40}$/, "must be a 20-byte hex address").describe(
     "The payer's own wallet address \u2014 the account that will sign and submit the swap transaction. Not validated against anything else; any well-formed address is accepted, since Klappay never custodies these funds."
   )
 });
-var SwapQuoteSchema = z20.object({
+var SwapQuoteSchema = z21.object({
   inputToken: AltTokenSchema,
   inputNetwork: NetworkSchema,
-  inputAmount: z20.number().describe(
+  inputAmount: z21.number().describe(
     "The ceiling of `inputToken` the payer needs available to sign for, in whole units (not wei/base units) \u2014 not necessarily the exact final cost. Any `inputToken` beyond what the swap actually needs (price moved favorably, less slippage than budgeted) is swapped back and refunded to the payer automatically, in the same transaction \u2014 never a separate step or a Klappay-side refund."
   ),
   outputToken: TokenSchema.describe(
     "Which of this charge's `acceptedPayments` tokens the swap resolves to."
   ),
   outputNetwork: NetworkSchema,
-  outputAmount: z20.number().describe(
+  outputAmount: z21.number().describe(
     "The exact remaining amount owed on this charge (`amount - amountReceived`), in `currency` units \u2014 always what the merchant's split address receives, regardless of `inputAmount`."
   ),
-  fees: z20.object({
-    klappayFee: z20.number().describe(
+  fees: z21.object({
+    klappayFee: z21.number().describe(
       "Klappay's own swap fee (1% today), in `outputToken` units \u2014 paid by the payer, on top of `inputAmount`, separate from the merchant's own `feePercent`. Never subtracted from `outputAmount`."
     ),
-    zeroExFee: z20.number().nullable().describe(
+    zeroExFee: z21.number().nullable().describe(
       "0x's own protocol fee for this specific token pair, in `outputToken` units, or `null` when this pair isn't currently one 0x charges on. Also paid by the payer on top of `inputAmount`, also never subtracted from `outputAmount` \u2014 Klappay never sees this fee, it goes straight to 0x."
     )
   }).describe(
     "Every fee the payer is charged for using swap-to-pay, broken out by who collects it \u2014 both already reflected in `inputAmount`, shown here separately for transparency. Neither ever reduces `outputAmount`."
   ),
-  expiresAt: z20.string().datetime().describe(
+  expiresAt: z21.string().datetime().describe(
     "When this quote's price is no longer safely valid \u2014 a rough guide for the payer's UI countdown only. The actual price guarantee is enforced on-chain by the swap transaction itself (a signed Permit2 deadline, or a minimum-output check for a native-currency sell), not by this timestamp \u2014 submitting after it expires either reverts on-chain or simply gets re-quoted at the current price, never silently executes at a stale rate."
   ),
-  transaction: z20.object({
-    to: z20.string().describe("Contract address the payer's wallet must send this transaction to."),
-    data: z20.string().describe("Calldata \u2014 opaque, must be sent unmodified."),
-    value: z20.string().describe(
+  transaction: z21.object({
+    to: z21.string().describe("Contract address the payer's wallet must send this transaction to."),
+    data: z21.string().describe("Calldata \u2014 opaque, must be sent unmodified."),
+    value: z21.string().describe(
       "Native currency (ETH/BNB/MATIC/AVAX) to attach, in wei \u2014 `\"0\"` when `inputToken` isn't this network's native currency."
     )
   }).describe(
     "Pass this directly to the payer's wallet (e.g. viem/ethers `sendTransaction`) \u2014 Klappay never touches the payer's private key or submits anything on their behalf. If `permit2` is present on this response, sign that first and append the signature to this `data` before sending; if `permit2` is absent, send `transaction` as-is with no extra step."
   ),
-  permit2: z20.object({ eip712: z20.record(z20.unknown()) }).nullish().describe(
+  permit2: z21.object({ eip712: z21.record(z21.unknown()) }).nullish().describe(
     "Present only when `inputToken` is an ERC-20 (today, only `BTC`) \u2014 the payer's wallet must sign this EIP-712 message and append the signature to `transaction.data` before sending, since an ERC-20 sell needs a Permit2 allowance signature that a native-currency sell doesn't. `null` (never omitted, in a genuine 0x-backed quote) when `inputToken` is a network's own native currency (ETH/BNB/MATIC/AVAX) \u2014 `transaction` is then ready to sign and send directly, no extra step."
   )
 });
@@ -913,6 +943,7 @@ export {
   EVM_NETWORKS,
   EnvironmentSchema,
   ErrorPayloadSchema,
+  EscrowConfigSchema,
   GetChargeQrCodeQuerySchema,
   HealthSchema,
   KlappayCheckoutMetadataSchema,
@@ -948,6 +979,7 @@ export {
   PendingDistributionRecipientSchema,
   PendingDistributionSchema,
   RecipientSchema,
+  ReleaseEscrowRequestSchema,
   SandboxTriggerSchema,
   SetRecipientPayoutSchema,
   SettlementStatusSchema,