@klappay/types 3.6.0 → 3.8.0

package/dist/index.js

@@ -35,6 +35,7 @@ __export(index_exports, {
   CHECKOUT_PRODUCTS_MAX: () => CHECKOUT_PRODUCTS_MAX,
   CONFLICTING_SCOPE_PAIRS: () => CONFLICTING_SCOPE_PAIRS,
   CapabilitiesSchema: () => CapabilitiesSchema,
+  ChargeFeePayerSchema: () => ChargeFeePayerSchema,
   ChargeSchema: () => ChargeSchema,
   ChargeStatusSchema: () => ChargeStatusSchema,
   ChargeWebhookEventTypeSchema: () => ChargeWebhookEventTypeSchema,
@@ -44,6 +45,7 @@ __export(index_exports, {
   CheckChargeRequestSchema: () => CheckChargeRequestSchema,
   CheckChargeResponseSchema: () => CheckChargeResponseSchema,
   CheckoutProductSchema: () => CheckoutProductSchema,
+  ConfirmationProgressSchema: () => ConfirmationProgressSchema,
   CreateChargeSchema: () => CreateChargeSchema,
   CreateRecipientSchema: () => CreateRecipientSchema,
   CreateSwapQuoteSchema: () => CreateSwapQuoteSchema,
@@ -91,6 +93,7 @@ __export(index_exports, {
   PendingDistributionRecipientSchema: () => PendingDistributionRecipientSchema,
   PendingDistributionSchema: () => PendingDistributionSchema,
   RecipientSchema: () => RecipientSchema,
+  RefundEscrowRequestSchema: () => RefundEscrowRequestSchema,
   ReleaseEscrowRequestSchema: () => ReleaseEscrowRequestSchema,
   SandboxTriggerSchema: () => SandboxTriggerSchema,
   SetRecipientPayoutSchema: () => SetRecipientPayoutSchema,
@@ -370,6 +373,11 @@ var ReleaseEscrowRequestSchema = import_zod9.z.object({
     "The Safe transaction signature authorizing this release, produced by signing a transfer of the escrow's entire current token balance to the charge's already-frozen split address (the same split that would have received the payment on a normal, non-escrow charge) with the private key behind this charge's `escrowReleaserAddress` \u2014 never anything Klappay can produce itself. The destination is fixed by the charge's `splitConfig` (frozen at creation); the amount is read live on-chain at release time, not fixed in advance, so it always matches whatever actually arrived \u2014 reconstruct the exact transaction server-side computes (ERC-20 `transfer(splitAddress, balance)` from the escrow Safe, nonce 0) before signing. Independently verified on-chain before anything moves \u2014 the Safe contract itself rejects a signature that isn't from `escrowReleaserAddress`, never trusted at face value by Klappay."
   )
 });
+var RefundEscrowRequestSchema = import_zod9.z.object({
+  signature: import_zod9.z.string().regex(/^0x[0-9a-fA-F]+$/, "must be hex-encoded signature bytes").describe(
+    "The Safe transaction signature authorizing this refund, produced by signing a transfer of the escrow's entire current token balance back to the address that funded this charge (`Charge.payerAddress`, captured from the credited transfer) with the private key behind this charge's `escrowReleaserAddress` \u2014 never anything Klappay can produce itself. The amount is read live on-chain at refund time, not fixed in advance, so it always matches whatever actually arrived \u2014 reconstruct the exact transaction Klappay computes server-side (ERC-20 `transfer(payerAddress, balance)` from the escrow Safe, nonce 0) before signing. Independently verified on-chain before anything moves \u2014 the Safe contract itself rejects a signature that isn't from `escrowReleaserAddress`, never trusted at face value by Klappay."
+  )
+});
 
 // src/charges.ts
 var ChargeStatusSchema = import_zod10.z.enum(["pending", "partially_paid", "confirmed", "expired", "underpaid"]).describe(
@@ -378,6 +386,9 @@ var ChargeStatusSchema = import_zod10.z.enum(["pending", "partially_paid", "conf
 var SettlementStatusSchema = import_zod10.z.enum(["pending", "completed", "failed"]).describe(
   "Progress of the payout to the merchant's wallet, a separate step from `status` \u2014 `status: confirmed` only means the payment was detected on-chain, not that the merchant has been paid yet. `pending`: payment detected, payout not yet attempted. `completed`: the merchant's wallet has the funds. `failed`: the payout attempt failed and retries were exhausted (rare; contact support). `null` on the parent `Charge` means no payout has been attempted yet \u2014 nothing has been received, or the charge is still in progress."
 );
+var ChargeFeePayerSchema = import_zod10.z.enum(["merchant", "payer"]).describe(
+  "Who ends up covering Klappay's `feePercent`. `merchant` (default): `amount` is exactly what you asked for, and Klappay's fee is deducted from your own payout \u2014 you net `amount * (1 - feePercent / 100)`. `payer` : `amount` is grossed up at creation time so that, after the same fee deduction, you still net the amount you originally requested \u2014 the payer sees and sends the larger, fee-inclusive total. Frozen at creation like every other fee input; does not change how `feeAmount`/`merchantAmount` are computed on read, only what `amount` was set to in the first place."
+);
 var CHARGE_EXPIRES_IN_MIN_SECONDS = 60;
 var CHARGE_EXPIRES_IN_MAX_SECONDS = 3600;
 var CHARGE_ACCEPTED_PAYMENTS_MAX = 14;
@@ -447,8 +458,9 @@ var SplitRecipientsInputSchema = import_zod10.z.array(SplitRecipientInputSchema)
 var CHARGE_AMOUNT_MAX = 999999999999;
 var CreateChargeSchema = import_zod10.z.object({
   amount: import_zod10.z.number().positive().max(CHARGE_AMOUNT_MAX).describe(
-    "Amount to charge, in `currency` units (e.g. `49.9` = $49.90) \u2014 up to 6 decimal places; anything more precise is silently truncated. Required \u2014 every charge has a target amount, the first credited transfer that reaches it confirms the charge."
+    "Amount to charge, in `currency` units (e.g. `49.9` = $49.90) \u2014 up to 6 decimal places; anything more precise is silently truncated. Required \u2014 every charge has a target amount, the first credited transfer that reaches it confirms the charge. With `feePayer: 'payer'` (see below), this is your own desired net amount, not the total the payer ends up sending \u2014 the response's `amount` is grossed up to cover `feePercent`, while `merchantAmount` on the response echoes back this exact value."
   ),
+  feePayer: ChargeFeePayerSchema.optional().default("merchant"),
   currency: import_zod10.z.literal("USD").default("USD").describe("Always `USD` today \u2014 the only supported currency."),
   acceptedPayments: AcceptedPaymentsSchema,
   expiresIn: import_zod10.z.number().int().min(CHARGE_EXPIRES_IN_MIN_SECONDS).max(CHARGE_EXPIRES_IN_MAX_SECONDS).describe(
@@ -474,7 +486,17 @@ var CreateChargeSchema = import_zod10.z.object({
 });
 var ChargeSchema = import_zod10.z.object({
   id: import_zod10.z.string().describe("Klappay-generated id, e.g. `ch_...`. Use this to look up the charge later."),
-  amount: import_zod10.z.number().describe("The amount originally requested, in `currency` units (up to 6 decimal places)."),
+  amount: import_zod10.z.number().describe(
+    "The exact total the payer must send, in `currency` units (up to 6 decimal places). With `feePayer: 'merchant'` (the default) this is exactly what you requested at creation. With `feePayer: 'payer'` this is grossed up to cover `feePercent` \u2014 see `merchantAmount` for what you requested/will actually net."
+  ),
+  feePayer: ChargeFeePayerSchema,
+  feePercent: import_zod10.z.number().describe(
+    "Klappay's fee for this charge, as a percent of `amount` (e.g. `2` = 2%) \u2014 includes any escrow surcharge if this charge is an escrow. Frozen at creation; see `feeAmount`/`merchantAmount` for the actual amounts this works out to."
+  ),
+  feeAmount: import_zod10.z.number().describe("`amount * feePercent / 100`, in `currency` units \u2014 Klappay's cut of this charge."),
+  merchantAmount: import_zod10.z.number().describe(
+    "`amount - feeAmount`, in `currency` units \u2014 what you actually net once the payout settles, regardless of `feePayer` (this is always what the split delivers to you; `feePayer` only affects what `amount` was set to at creation)."
+  ),
   amountReceived: import_zod10.z.number().nullable().describe(
     "Cumulative amount actually received on-chain so far, in `currency` units (up to 6 decimal places). `null` until the first transfer arrives. Can exceed `amount` \u2014 see `isOverpaid`."
   ),
@@ -524,7 +546,10 @@ var ChargeSchema = import_zod10.z.object({
   ),
   escrow: import_zod10.z.object({
     releaserAddress: import_zod10.z.string().describe("The only address that can ever release this escrow \u2014 never Klappay."),
-    releasedAt: import_zod10.z.string().datetime().nullable().describe("When the release actually executed on-chain. `null` until then.")
+    releasedAt: import_zod10.z.string().datetime().nullable().describe("When the release actually executed on-chain. `null` until then."),
+    refundedAt: import_zod10.z.string().datetime().nullable().describe(
+      "When the refund actually executed on-chain. `null` until then. Mutually exclusive with `releasedAt` \u2014 an escrow can only ever be released or refunded once, never both."
+    )
   }).nullable().describe(
     "Present only when this charge was created as an escrow (see `escrow` on the create request) \u2014 `null` for a normal charge."
   )
@@ -552,9 +577,28 @@ var GetChargeQrCodeQuerySchema = import_zod10.z.object({
 });
 
 // src/charge-check.ts
+var import_zod12 = require("zod");
+
+// src/confirmation-progress.ts
 var import_zod11 = require("zod");
-var CheckChargeRequestSchema = import_zod11.z.object({
-  txHash: import_zod11.z.string().regex(/^0x[0-9a-fA-F]{64}$/, "must be a 32-byte transaction hash").optional().describe(
+var ConfirmationProgressSchema = import_zod11.z.object({
+  network: NetworkSchema.describe("Which network the transfer was seen on."),
+  blocksSeen: import_zod11.z.number().int().min(0).describe(
+    "How many blocks have passed since the transfer's own block, as of this update \u2014 a raw block count, not seconds. Grows toward `blocksRequired` as the network's blocks keep arriving."
+  ),
+  blocksRequired: import_zod11.z.number().int().min(1).describe(
+    "This network's minimum confirmation depth (a fixed, per-network constant) \u2014 the transfer is only credited once `blocksSeen` reaches this value."
+  ),
+  percent: import_zod11.z.number().int().min(0).max(99).describe(
+    '`blocksSeen`/`blocksRequired` as a rounded-down 0-99 percentage, for a progress bar. Never reaches 100 by construction \u2014 once a transfer is deep enough it is credited immediately and this stops being reported at all (the charge event itself is the "done" signal).'
+  )
+}).describe(
+  "How close an already-detected transfer is to being trusted as final and credited, before its network's minimum confirmation depth is reached (see `docs/payments.md`'s \"Confirmation depth\" section). Only ever present for a transfer that's been seen on-chain but isn't deep enough yet \u2014 absent/null once it's credited (the charge's own status change is what signals that) or if nothing has been detected at all."
+);
+
+// src/charge-check.ts
+var CheckChargeRequestSchema = import_zod12.z.object({
+  txHash: import_zod12.z.string().regex(/^0x[0-9a-fA-F]{64}$/, "must be a 32-byte transaction hash").optional().describe(
     "The on-chain transaction hash to verify directly, if you already have it \u2014 e.g. right after a swap-to-pay or wallet-connect transaction is sent. Costs a single RPC call instead of scanning a block range, so the check resolves faster and cheaper. Omit to fall back to scanning recent transfers to this charge's address, the same lookup the background reconciliation pass runs. Never trusted at face value \u2014 whatever this transaction actually contains on-chain is what gets credited, regardless of any amount/token implied elsewhere."
   ),
   network: NetworkSchema.optional().describe(
@@ -564,67 +608,70 @@ var CheckChargeRequestSchema = import_zod11.z.object({
   message: "`txHash` and `network` must be provided together, or both omitted"
 });
 var CheckChargeResponseSchema = ChargeSchema.extend({
-  transactionSender: import_zod11.z.string().nullable().describe(
+  transactionSender: import_zod12.z.string().nullable().describe(
     "The `txHash` transaction's own sender (`from`) \u2014 who actually signed and submitted it on-chain, which stays the payer's own wallet even when the transaction swaps through a router/aggregator on the way to paying, unlike the credited transfer's `from` (which can be the router/pool contract, not the payer). `null` unless `txHash`/`network` was passed in the request and a successful receipt was found for it \u2014 a hint-less background scan, an unaccepted network, or a not-found/reverted transaction all leave this `null`."
+  ),
+  confirmationProgress: ConfirmationProgressSchema.nullable().describe(
+    "Present when this check found a real matching transfer on-chain that has not yet reached its network's required confirmation depth \u2014 use it to render a progress bar while waiting. `null` when nothing new was found, when the charge is already terminal (this check short-circuits with no RPC call), or once the transfer is deep enough to have already been credited (the charge's own `status` field is the signal for that, not this one)."
   )
 });
 
 // src/distributions.ts
-var import_zod12 = require("zod");
-var SplitDistributionStatusSchema = import_zod12.z.enum(["pending", "processing", "completed", "failed"]).describe(
+var import_zod13 = require("zod");
+var SplitDistributionStatusSchema = import_zod13.z.enum(["pending", "processing", "completed", "failed"]).describe(
   "Status of one payout attempt to the merchant, for a single `(token, network)` pair \u2014 a charge that settles across more than one pair has one of these per pair. `pending`: queued, not yet claimed by a distributor. `processing`: a distributor (Klappay's own worker, or anyone racing to call `distribute()` first, see `PendingDistributionSchema`) has claimed it and is submitting the on-chain transaction. `completed`: the merchant's wallet has the funds. `failed`: every automatic retry was exhausted."
 );
-var PendingDistributionRecipientSchema = import_zod12.z.object({
-  address: import_zod12.z.string().describe("On-chain recipient address."),
-  percentAllocation: import_zod12.z.number().describe("This recipient's share of the split, as a percentage (e.g. `99.0991` = 99.0991%).")
+var PendingDistributionRecipientSchema = import_zod13.z.object({
+  address: import_zod13.z.string().describe("On-chain recipient address."),
+  percentAllocation: import_zod13.z.number().describe("This recipient's share of the split, as a percentage (e.g. `99.0991` = 99.0991%).")
 });
-var PendingDistributionSchema = import_zod12.z.object({
-  splitAddress: import_zod12.z.string().describe("The on-chain 0xSplits address to call `distribute()` on."),
+var PendingDistributionSchema = import_zod13.z.object({
+  splitAddress: import_zod13.z.string().describe("The on-chain 0xSplits address to call `distribute()` on."),
   network: NetworkSchema,
   token: TokenSchema,
-  recipients: import_zod12.z.array(PendingDistributionRecipientSchema).describe(
+  recipients: import_zod13.z.array(PendingDistributionRecipientSchema).describe(
     "The exact recipient list to pass to `distribute()` \u2014 the split contract only stores a hash of this config, so the caller must supply the identical array to prove it matches. Always present, never reconstructed from partial data."
   ),
-  distributorFeePercent: import_zod12.z.number().describe(
+  distributorFeePercent: import_zod13.z.number().describe(
     "Percentage of the split balance paid to whoever calls `distribute()` first (e.g. `0.1` = 0.1%). Frozen at charge creation, same for every distribution today."
   ),
-  estimatedRewardAmount: import_zod12.z.number().describe(
+  estimatedRewardAmount: import_zod13.z.number().describe(
     "Estimate only, in the charge's `currency` units, based on the amount Klappay detected on-chain \u2014 not a live read of the split's current balance. Read the balance yourself before submitting a transaction; a stale estimate is harmless (see the docs), never a reason to skip that check."
   ),
-  availableSince: import_zod12.z.string().datetime().describe("When this distribution entered its grace period."),
-  graceEndsAt: import_zod12.z.string().datetime().describe(
+  availableSince: import_zod13.z.string().datetime().describe("When this distribution entered its grace period."),
+  graceEndsAt: import_zod13.z.string().datetime().describe(
     "When Klappay's own worker may claim this distribution. Racing to call `distribute()` after this timestamp is possible but increasingly likely to lose to the worker."
   )
 });
 var PaginatedPendingDistributionsSchema = paginatedSchema(PendingDistributionSchema);
-var ListenPendingDistributionsQuerySchema = import_zod12.z.object({
-  limit: import_zod12.z.coerce.number().int().min(0).max(PAGINATION_LIMIT_MAX).default(0).describe(
+var ListenPendingDistributionsQuerySchema = import_zod13.z.object({
+  limit: import_zod13.z.coerce.number().int().min(0).max(PAGINATION_LIMIT_MAX).default(0).describe(
     "How many currently-claimable distributions to emit as an initial snapshot right after connecting \u2014 each as a synthetic `distribution.available` event \u2014 before continuing with real-time deltas. `0` (the default, same as omitting it) sends no snapshot at all, matching this endpoint's original behavior: connect first, then call `GET /v1/distributions/pending` yourself to bootstrap. Not a page \u2014 there is no cursor for this snapshot, so if more than `limit` are claimable at connect time, the excess is simply not sent; call `GET /v1/distributions/pending` directly for a complete, paginated listing."
   )
 });
-var PendingDistributionEventSchema = import_zod12.z.discriminatedUnion("type", [
-  import_zod12.z.object({
-    type: import_zod12.z.literal("distribution.available"),
+var PendingDistributionEventSchema = import_zod13.z.discriminatedUnion("type", [
+  import_zod13.z.object({
+    type: import_zod13.z.literal("distribution.available"),
     distribution: PendingDistributionSchema
   }),
-  import_zod12.z.object({
-    type: import_zod12.z.literal("distribution.claimed"),
-    splitAddress: import_zod12.z.string().describe("No longer claimable \u2014 either settled by someone, or picked up by the worker.")
+  import_zod13.z.object({
+    type: import_zod13.z.literal("distribution.claimed"),
+    splitAddress: import_zod13.z.string().describe("No longer claimable \u2014 either settled by someone, or picked up by the worker.")
   })
 ]);
 
 // src/metrics.ts
-var import_zod13 = require("zod");
-var MetricsResourceSchema = import_zod13.z.enum(["charges", "transactions", "distributions"]).describe(
+var import_zod14 = require("zod");
+var MetricsResourceSchema = import_zod14.z.enum(["charges", "transactions", "distributions"]).describe(
   "Which underlying dataset to query. `charges`: one row per charge. `transactions`: one row per detected on-chain transfer \u2014 a charge paid in installments has more than one. `distributions`: one row per payout attempt to the merchant, one per `(token, network)` pair a charge settled across."
 );
-var MetricsAggregationSchema = import_zod13.z.enum(["count", "sum", "avg", "min", "max"]).describe(
+var MetricsAggregationSchema = import_zod14.z.enum(["count", "sum", "avg", "min", "max"]).describe(
   "`count` counts matching rows and never takes `field`. `sum`/`avg`/`min`/`max` require `field` to be set to one of the resource\u2019s numeric fields."
 );
-var MetricsFilterOperatorSchema = import_zod13.z.enum(["eq", "neq", "in", "gt", "gte", "lt", "lte"]).describe(
+var MetricsFilterOperatorSchema = import_zod14.z.enum(["eq", "neq", "in", "gt", "gte", "lt", "lte"]).describe(
   "`in` expects an array value (max 50 entries); every other operator expects a single scalar."
 );
-var MetricsDateGranularitySchema = import_zod13.z.enum(["day", "week", "month", "year"]).describe(
+var MetricsDateGranularitySchema = import_zod14.z.enum(["day", "week", "month", "year"]).describe(
   "Bucket width for a `date_bucket` `groupBy` entry \u2014 Postgres `date_trunc` semantics (UTC)."
 );
 var metricsQueryEnvironmentSchema = EnvironmentSchema.describe(
@@ -637,31 +684,31 @@ var METRICS_QUERY_MAX_GROUP_BY = 3;
 var METRICS_QUERY_MAX_FILTERS = 20;
 var METRICS_QUERY_MAX_METRICS = 10;
 var METRIC_ALIAS_PATTERN = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
-var metricAliasSchema = import_zod13.z.string().min(1).max(64).regex(
+var metricAliasSchema = import_zod14.z.string().min(1).max(64).regex(
   METRIC_ALIAS_PATTERN,
   "Must start with a letter or underscore, and contain only letters, digits, and underscores \u2014 this becomes a SQL column alias."
 ).optional();
-var MetricsFilterValueSchema = import_zod13.z.union([
-  import_zod13.z.string().max(255),
-  import_zod13.z.number(),
-  import_zod13.z.boolean(),
-  import_zod13.z.array(import_zod13.z.union([import_zod13.z.string().max(255), import_zod13.z.number()])).min(1).max(50)
+var MetricsFilterValueSchema = import_zod14.z.union([
+  import_zod14.z.string().max(255),
+  import_zod14.z.number(),
+  import_zod14.z.boolean(),
+  import_zod14.z.array(import_zod14.z.union([import_zod14.z.string().max(255), import_zod14.z.number()])).min(1).max(50)
 ]);
-var orderBySchema = import_zod13.z.object({
-  key: import_zod13.z.string().min(1).max(64).regex(
+var orderBySchema = import_zod14.z.object({
+  key: import_zod14.z.string().min(1).max(64).regex(
     METRIC_ALIAS_PATTERN,
     "Must start with a letter or underscore, and contain only letters, digits, and underscores \u2014 every valid output column name already looks like this."
   ).describe(
     "An output column name from this same query \u2014 either a `groupBy` field name, or a metric\u2019s `alias` (or its default name: `${aggregation}` for `count`, `${aggregation}_${field}` otherwise, e.g. `sum_amount`). Must match `^[a-zA-Z_][a-zA-Z0-9_]*$` \u2014 every real output column name already does, so this only ever rejects a value that could never have been one."
   ),
-  direction: import_zod13.z.enum(["asc", "desc"])
+  direction: import_zod14.z.enum(["asc", "desc"])
 }).describe(
   "Sort the result rows by any output column \u2014 including the bucket field itself for a `date_bucket` query (e.g. `createdAt`). Omit to get ascending-by-bucket order for a date-bucketed query, or implementation-defined (not guaranteed stable) order otherwise."
 );
-var limitSchema = import_zod13.z.number().int().min(1).max(METRICS_QUERY_MAX_ROW_LIMIT).default(METRICS_QUERY_DEFAULT_ROW_LIMIT).describe(
+var limitSchema = import_zod14.z.number().int().min(1).max(METRICS_QUERY_MAX_ROW_LIMIT).default(METRICS_QUERY_DEFAULT_ROW_LIMIT).describe(
   `Max rows to return, ${1}\u2013${METRICS_QUERY_MAX_ROW_LIMIT}, default ${METRICS_QUERY_DEFAULT_ROW_LIMIT}. If more rows matched, \`meta.truncated\` is \`true\` on the response \u2014 narrow the query instead of just raising this.`
 );
-var ChargesQueryFieldSchema = import_zod13.z.enum([
+var ChargesQueryFieldSchema = import_zod14.z.enum([
   "status",
   "source",
   "apiKeyId",
@@ -672,124 +719,124 @@ var ChargesQueryFieldSchema = import_zod13.z.enum([
 ]).describe(
   "A `Charge` field to filter or group by \u2014 see `ChargeStatusSchema` for `status`'s own possible values (charges.md). `source`/`externalRef` are free-form strings your own integration set at creation, not a fixed enum. `escrowReleaserAddress` is `null` for a normal charge \u2014 filter `escrowReleaserAddress` with operator `neq`/value `null` to isolate escrow-configured charges (see `escrow` in charges.md)."
 );
-var ChargesMetricFieldSchema = import_zod13.z.enum(["amount", "amountReceived", "feePercent", "escrowFeePercent"]).describe(
+var ChargesMetricFieldSchema = import_zod14.z.enum(["amount", "amountReceived", "feePercent", "escrowFeePercent"]).describe(
   "A `Charge` numeric field to aggregate. `amount`/`amountReceived` are decimal currency amounts (requested vs. actually received \u2014 see `charges.md`). `feePercent` is the platform fee frozen on the charge at creation, e.g. `1.5` means 1.5%. `escrowFeePercent` is the additional escrow-specific fee component, only present on escrow-configured charges \u2014 see `docs/payments.md`."
 );
-var ChargesDateFieldSchema = import_zod13.z.enum(["createdAt", "confirmedAt", "lastActivityAt", "expiresAt", "escrowReleasedAt"]).describe(
+var ChargesDateFieldSchema = import_zod14.z.enum(["createdAt", "confirmedAt", "lastActivityAt", "expiresAt", "escrowReleasedAt"]).describe(
   "A `Charge` timestamp to filter/bucket by. `confirmedAt` is `null` until the charge reaches `confirmed` \u2014 a `dateRange`/`date_bucket` on it implicitly excludes every charge that never confirmed. `expiresAt` is always present (set at creation), useful for e.g. finding charges expiring soon or measuring how close to expiry charges typically resolve. `escrowReleasedAt` is `null` until an escrow-configured charge is actually released \u2014 same implicit-exclusion behavior as `confirmedAt`, scoped to escrow charges only."
 );
-var ChargesFilterSchema = import_zod13.z.object({
+var ChargesFilterSchema = import_zod14.z.object({
   field: ChargesQueryFieldSchema,
   operator: MetricsFilterOperatorSchema,
   value: MetricsFilterValueSchema
 });
-var ChargesGroupBySchema = import_zod13.z.union([
-  import_zod13.z.object({ type: import_zod13.z.literal("field"), field: ChargesQueryFieldSchema }),
-  import_zod13.z.object({
-    type: import_zod13.z.literal("date_bucket"),
+var ChargesGroupBySchema = import_zod14.z.union([
+  import_zod14.z.object({ type: import_zod14.z.literal("field"), field: ChargesQueryFieldSchema }),
+  import_zod14.z.object({
+    type: import_zod14.z.literal("date_bucket"),
     field: ChargesDateFieldSchema,
     granularity: MetricsDateGranularitySchema
   })
 ]);
-var ChargesMetricSchema = import_zod13.z.object({
+var ChargesMetricSchema = import_zod14.z.object({
   aggregation: MetricsAggregationSchema,
   field: ChargesMetricFieldSchema.optional(),
   alias: metricAliasSchema
 });
-var ChargesMetricsQuerySchema = import_zod13.z.object({
-  resource: import_zod13.z.literal("charges"),
+var ChargesMetricsQuerySchema = import_zod14.z.object({
+  resource: import_zod14.z.literal("charges"),
   environment: metricsQueryEnvironmentSchema,
-  dateRange: import_zod13.z.object({
+  dateRange: import_zod14.z.object({
     field: ChargesDateFieldSchema,
-    from: import_zod13.z.string().max(64).datetime(),
-    to: import_zod13.z.string().max(64).datetime()
+    from: import_zod14.z.string().max(64).datetime(),
+    to: import_zod14.z.string().max(64).datetime()
   }),
-  groupBy: import_zod13.z.array(ChargesGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
-  metrics: import_zod13.z.array(ChargesMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
-  filters: import_zod13.z.array(ChargesFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
+  groupBy: import_zod14.z.array(ChargesGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
+  metrics: import_zod14.z.array(ChargesMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
+  filters: import_zod14.z.array(ChargesFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
   orderBy: orderBySchema.optional(),
   limit: limitSchema
 });
-var TransactionsQueryFieldSchema = import_zod13.z.enum(["network", "token", "source", "causedTransition"]).describe(
+var TransactionsQueryFieldSchema = import_zod14.z.enum(["network", "token", "source", "causedTransition"]).describe(
   "A `Transaction` field to filter or group by \u2014 see `NetworkSchema`/`TokenSchema`/`TransactionSourceSchema` for their possible values. `causedTransition` is `true` only for the transfer(s) that actually flipped the charge's `status` \u2014 a charge paid in installments can have more than one; filtering/grouping on it excludes no-op duplicate transfers (see `TimelineEvent.causedTransition` in charges.md for the full explanation)."
 );
-var TransactionsMetricFieldSchema = import_zod13.z.enum(["amount"]).describe("The transfer amount, in the charge's `currency` units.");
-var TransactionsDateFieldSchema = import_zod13.z.enum(["detectedAt"]).describe("When Klappay detected this transfer on-chain (not when it was mined).");
-var TransactionsFilterSchema = import_zod13.z.object({
+var TransactionsMetricFieldSchema = import_zod14.z.enum(["amount"]).describe("The transfer amount, in the charge's `currency` units.");
+var TransactionsDateFieldSchema = import_zod14.z.enum(["detectedAt"]).describe("When Klappay detected this transfer on-chain (not when it was mined).");
+var TransactionsFilterSchema = import_zod14.z.object({
   field: TransactionsQueryFieldSchema,
   operator: MetricsFilterOperatorSchema,
   value: MetricsFilterValueSchema
 });
-var TransactionsGroupBySchema = import_zod13.z.union([
-  import_zod13.z.object({ type: import_zod13.z.literal("field"), field: TransactionsQueryFieldSchema }),
-  import_zod13.z.object({
-    type: import_zod13.z.literal("date_bucket"),
+var TransactionsGroupBySchema = import_zod14.z.union([
+  import_zod14.z.object({ type: import_zod14.z.literal("field"), field: TransactionsQueryFieldSchema }),
+  import_zod14.z.object({
+    type: import_zod14.z.literal("date_bucket"),
     field: TransactionsDateFieldSchema,
     granularity: MetricsDateGranularitySchema
   })
 ]);
-var TransactionsMetricSchema = import_zod13.z.object({
+var TransactionsMetricSchema = import_zod14.z.object({
   aggregation: MetricsAggregationSchema,
   field: TransactionsMetricFieldSchema.optional(),
   alias: metricAliasSchema
 });
-var TransactionsMetricsQuerySchema = import_zod13.z.object({
-  resource: import_zod13.z.literal("transactions"),
+var TransactionsMetricsQuerySchema = import_zod14.z.object({
+  resource: import_zod14.z.literal("transactions"),
   environment: metricsQueryEnvironmentSchema,
-  dateRange: import_zod13.z.object({
+  dateRange: import_zod14.z.object({
     field: TransactionsDateFieldSchema,
-    from: import_zod13.z.string().max(64).datetime(),
-    to: import_zod13.z.string().max(64).datetime()
+    from: import_zod14.z.string().max(64).datetime(),
+    to: import_zod14.z.string().max(64).datetime()
   }),
-  groupBy: import_zod13.z.array(TransactionsGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
-  metrics: import_zod13.z.array(TransactionsMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
-  filters: import_zod13.z.array(TransactionsFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
+  groupBy: import_zod14.z.array(TransactionsGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
+  metrics: import_zod14.z.array(TransactionsMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
+  filters: import_zod14.z.array(TransactionsFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
   orderBy: orderBySchema.optional(),
   limit: limitSchema
 });
-var DistributionsQueryFieldSchema = import_zod13.z.enum(["status", "network", "token", "distributorAddress"]).describe(
+var DistributionsQueryFieldSchema = import_zod14.z.enum(["status", "network", "token", "distributorAddress"]).describe(
   "A `SplitDistribution` field to filter or group by \u2014 see `SplitDistributionStatusSchema`/`NetworkSchema`/`TokenSchema` for their possible values. `distributorAddress` is the public on-chain address that actually called `distribute()` for a `completed` distribution \u2014 Klappay's own operator address if settled by Klappay's own worker, a community keeper's address if settled externally (or `null` on the rare case that lookup failed), `null` for every non-`completed` status."
 );
-var DistributionsMetricFieldSchema = import_zod13.z.enum(["attempts"]).describe(
+var DistributionsMetricFieldSchema = import_zod14.z.enum(["attempts"]).describe(
   "How many times a payout was attempted for this settlement so far \u2014 incremented on every attempt, whether it succeeded or is being retried after failing. A high `attempts` alongside `status: 'failed'` means every automatic retry was exhausted."
 );
-var DistributionsDateFieldSchema = import_zod13.z.enum(["createdAt", "processingStartedAt", "completedAt"]).describe(
+var DistributionsDateFieldSchema = import_zod14.z.enum(["createdAt", "processingStartedAt", "completedAt"]).describe(
   "`createdAt`: when this settlement was queued. `processingStartedAt`: when a worker began its most recent attempt at the payout \u2014 `null` until the first attempt, then overwritten on every subsequent retry, so it reflects the *latest* attempt's start, not the first. `completedAt`: when it actually paid out \u2014 `null` until `status` reaches `completed`, so a `dateRange`/`date_bucket` on it implicitly excludes every distribution still pending/processing/failed."
 );
-var DistributionsFilterSchema = import_zod13.z.object({
+var DistributionsFilterSchema = import_zod14.z.object({
   field: DistributionsQueryFieldSchema,
   operator: MetricsFilterOperatorSchema,
   value: MetricsFilterValueSchema
 });
-var DistributionsGroupBySchema = import_zod13.z.union([
-  import_zod13.z.object({ type: import_zod13.z.literal("field"), field: DistributionsQueryFieldSchema }),
-  import_zod13.z.object({
-    type: import_zod13.z.literal("date_bucket"),
+var DistributionsGroupBySchema = import_zod14.z.union([
+  import_zod14.z.object({ type: import_zod14.z.literal("field"), field: DistributionsQueryFieldSchema }),
+  import_zod14.z.object({
+    type: import_zod14.z.literal("date_bucket"),
     field: DistributionsDateFieldSchema,
     granularity: MetricsDateGranularitySchema
   })
 ]);
-var DistributionsMetricSchema = import_zod13.z.object({
+var DistributionsMetricSchema = import_zod14.z.object({
   aggregation: MetricsAggregationSchema,
   field: DistributionsMetricFieldSchema.optional(),
   alias: metricAliasSchema
 });
-var DistributionsMetricsQuerySchema = import_zod13.z.object({
-  resource: import_zod13.z.literal("distributions"),
+var DistributionsMetricsQuerySchema = import_zod14.z.object({
+  resource: import_zod14.z.literal("distributions"),
   environment: metricsQueryEnvironmentSchema,
-  dateRange: import_zod13.z.object({
+  dateRange: import_zod14.z.object({
     field: DistributionsDateFieldSchema,
-    from: import_zod13.z.string().max(64).datetime(),
-    to: import_zod13.z.string().max(64).datetime()
+    from: import_zod14.z.string().max(64).datetime(),
+    to: import_zod14.z.string().max(64).datetime()
   }),
-  groupBy: import_zod13.z.array(DistributionsGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
-  metrics: import_zod13.z.array(DistributionsMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
-  filters: import_zod13.z.array(DistributionsFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
+  groupBy: import_zod14.z.array(DistributionsGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
+  metrics: import_zod14.z.array(DistributionsMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
+  filters: import_zod14.z.array(DistributionsFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
   orderBy: orderBySchema.optional(),
   limit: limitSchema
 });
 var ONE_DAY_MS = 24 * 60 * 60 * 1e3;
-var MetricsQuerySchema = import_zod13.z.discriminatedUnion("resource", [
+var MetricsQuerySchema = import_zod14.z.discriminatedUnion("resource", [
   ChargesMetricsQuerySchema,
   TransactionsMetricsQuerySchema,
   DistributionsMetricsQuerySchema
@@ -798,7 +845,7 @@ var MetricsQuerySchema = import_zod13.z.discriminatedUnion("resource", [
   const to = new Date(input.dateRange.to);
   if (from >= to) {
     ctx.addIssue({
-      code: import_zod13.z.ZodIssueCode.custom,
+      code: import_zod14.z.ZodIssueCode.custom,
       message: "`dateRange.from` must be before `dateRange.to`.",
       path: ["dateRange", "from"]
     });
@@ -806,7 +853,7 @@ var MetricsQuerySchema = import_zod13.z.discriminatedUnion("resource", [
   const spanDays = (to.getTime() - from.getTime()) / ONE_DAY_MS;
   if (spanDays > MAX_METRICS_QUERY_DATE_RANGE_DAYS) {
     ctx.addIssue({
-      code: import_zod13.z.ZodIssueCode.custom,
+      code: import_zod14.z.ZodIssueCode.custom,
       message: `\`dateRange\` cannot span more than ${MAX_METRICS_QUERY_DATE_RANGE_DAYS} days.`,
       path: ["dateRange", "to"]
     });
@@ -814,7 +861,7 @@ var MetricsQuerySchema = import_zod13.z.discriminatedUnion("resource", [
   const dateBucketCount = input.groupBy.filter((entry) => entry.type === "date_bucket").length;
   if (dateBucketCount > 1) {
     ctx.addIssue({
-      code: import_zod13.z.ZodIssueCode.custom,
+      code: import_zod14.z.ZodIssueCode.custom,
       message: "At most one `date_bucket` entry is allowed in `groupBy`.",
       path: ["groupBy"]
     });
@@ -822,7 +869,7 @@ var MetricsQuerySchema = import_zod13.z.discriminatedUnion("resource", [
   input.metrics.forEach((metric, index) => {
     if (metric.aggregation !== "count" && metric.field === void 0) {
       ctx.addIssue({
-        code: import_zod13.z.ZodIssueCode.custom,
+        code: import_zod14.z.ZodIssueCode.custom,
         message: "`field` is required unless `aggregation` is `count`.",
         path: ["metrics", index, "field"]
       });
@@ -831,7 +878,7 @@ var MetricsQuerySchema = import_zod13.z.discriminatedUnion("resource", [
   const aliases = input.metrics.map((metric) => metric.alias).filter((alias) => alias !== void 0);
   if (new Set(aliases).size !== aliases.length) {
     ctx.addIssue({
-      code: import_zod13.z.ZodIssueCode.custom,
+      code: import_zod14.z.ZodIssueCode.custom,
       message: "Every `metrics[].alias` must be unique.",
       path: ["metrics"]
     });
@@ -840,32 +887,32 @@ var MetricsQuerySchema = import_zod13.z.discriminatedUnion("resource", [
   input.metrics.forEach((metric, index) => {
     if (metric.alias !== void 0 && reservedNames.has(metric.alias)) {
       ctx.addIssue({
-        code: import_zod13.z.ZodIssueCode.custom,
+        code: import_zod14.z.ZodIssueCode.custom,
         message: `\`alias\` "${metric.alias}" collides with a \`groupBy\` field name (or the reserved word "bucket") \u2014 choose a different alias.`,
         path: ["metrics", index, "alias"]
       });
     }
   });
 });
-var MetricsQueryResultRowSchema = import_zod13.z.record(
-  import_zod13.z.string(),
-  import_zod13.z.union([import_zod13.z.string(), import_zod13.z.number(), import_zod13.z.boolean(), import_zod13.z.null()])
+var MetricsQueryResultRowSchema = import_zod14.z.record(
+  import_zod14.z.string(),
+  import_zod14.z.union([import_zod14.z.string(), import_zod14.z.number(), import_zod14.z.boolean(), import_zod14.z.null()])
 );
-var MetricsQueryResultSchema = import_zod13.z.object({
-  data: import_zod13.z.array(MetricsQueryResultRowSchema),
-  meta: import_zod13.z.object({
+var MetricsQueryResultSchema = import_zod14.z.object({
+  data: import_zod14.z.array(MetricsQueryResultRowSchema),
+  meta: import_zod14.z.object({
     resource: MetricsResourceSchema,
     environment: EnvironmentSchema,
-    rowCount: import_zod13.z.number().int().describe("Number of rows in `data`."),
-    truncated: import_zod13.z.boolean().describe(
+    rowCount: import_zod14.z.number().int().describe("Number of rows in `data`."),
+    truncated: import_zod14.z.boolean().describe(
       "`true` if more rows matched than `limit` allowed \u2014 `data` holds only the first `limit`."
     )
   })
 });
 
 // src/webhook-events.ts
-var import_zod14 = require("zod");
-var ChargeWebhookEventTypeSchema = import_zod14.z.enum([
+var import_zod15 = require("zod");
+var ChargeWebhookEventTypeSchema = import_zod15.z.enum([
   "charge.created",
   "charge.partially_paid",
   "charge.confirmed",
@@ -874,18 +921,19 @@ var ChargeWebhookEventTypeSchema = import_zod14.z.enum([
   "charge.settled",
   "charge.settlement_failed",
   "charge.overpaid",
-  "charge.escrow_released"
+  "charge.escrow_released",
+  "charge.escrow_refunded"
 ]).describe(
-  'Note the distinction between `charge.confirmed` and `charge.settled`: `confirmed` means the payment was detected on-chain; `settled` means the merchant\'s wallet actually received the funds \u2014 a separate, later step. Subscribe to `confirmed` if you only need "will I get paid," or `settled` if you need "has the money actually arrived." `charge.overpaid` fires alongside `charge.confirmed`/`charge.partially_paid` whenever the cumulative amount received ends up above `amount` (see `Charge.isOverpaid`). `charge.escrow_released` fires once an escrow-configured charge\'s funds have been moved out of its Safe to the split address by `POST /v1/charges/{id}/release` \u2014 a normal `charge.settled` still follows once the split itself finishes distributing. Every event in this category carries the full `Charge` object as `data`.'
+  'Note the distinction between `charge.confirmed` and `charge.settled`: `confirmed` means the payment was detected on-chain; `settled` means the merchant\'s wallet actually received the funds \u2014 a separate, later step. Subscribe to `confirmed` if you only need "will I get paid," or `settled` if you need "has the money actually arrived." `charge.overpaid` fires alongside `charge.confirmed`/`charge.partially_paid` whenever the cumulative amount received ends up above `amount` (see `Charge.isOverpaid`). `charge.escrow_released` fires once an escrow-configured charge\'s funds have been moved out of its Safe to the split address by `POST /v1/charges/{id}/release` \u2014 a normal `charge.settled` still follows once the split itself finishes distributing. `charge.escrow_refunded` fires once an escrow-configured charge\'s funds have been moved out of its Safe back to the payer by `POST /v1/charges/{id}/refund` \u2014 mutually exclusive with `charge.escrow_released`, an escrow charge only ever emits one of the two. Every event in this category carries the full `Charge` object as `data`.'
 );
-var WebhookDeliveryEventTypeSchema = import_zod14.z.enum(["webhook.delivery_failed", "webhook.delivery_recovered", "webhook.endpoint_unhealthy"]).describe(
+var WebhookDeliveryEventTypeSchema = import_zod15.z.enum(["webhook.delivery_failed", "webhook.delivery_recovered", "webhook.endpoint_unhealthy"]).describe(
   "Meta-events about the health of your own webhook endpoints \u2014 useful for monitoring without polling `GET /v1/webhooks/{id}/deliveries`. `webhook.endpoint_unhealthy` fires once when a webhook's failure rate over the trailing 24h crosses 20%, and `webhook.delivery_recovered` fires once when a delivery to that webhook next succeeds. `data` for every event in this category: `{ webhookId, url, failureRatio? }` (`failureRatio` only present on `webhook.endpoint_unhealthy`)."
 );
-var WebhookEventTypeSchema = import_zod14.z.union([
+var WebhookEventTypeSchema = import_zod15.z.union([
   ChargeWebhookEventTypeSchema,
   WebhookDeliveryEventTypeSchema
 ]);
-var WebhookCategorySchema = import_zod14.z.enum(["payments", "webhooks"]).describe(
+var WebhookCategorySchema = import_zod15.z.enum(["payments", "webhooks"]).describe(
   "Subscribe to every event in a category via `eventCategories` instead of listing events one by one \u2014 new events added to a category later arrive automatically, no subscription update needed."
 );
 function buildCategoryMap() {
@@ -907,122 +955,127 @@ var WEBHOOK_EVENT_CATEGORIES = {
   webhooks: WebhookDeliveryEventTypeSchema.options
 };
 var TriggerableChargeEventSchema = ChargeWebhookEventTypeSchema.exclude([
-  "charge.created"
+  "charge.created",
+  "charge.escrow_released",
+  "charge.escrow_refunded"
 ]).describe(
-  "Every charge event that represents a payment-progress state transition a sandbox charge can be pushed into \u2014 everything except `charge.created` (a charge already exists by the time you have an id to trigger against)."
+  "Every charge event that represents a payment-progress state transition a sandbox charge can be pushed into \u2014 everything except `charge.created` (a charge already exists by the time you have an id to trigger against) and the two escrow-terminal events, which are reached by actually calling `POST /v1/charges/{id}/release` or `POST /v1/charges/{id}/refund` on a test-environment escrow charge (a real Safe transaction on that network's testnet), not this generic trigger."
 );
 
 // src/webhooks.ts
-var import_zod15 = require("zod");
+var import_zod16 = require("zod");
 var WEBHOOK_EVENTS_WILDCARD = "*";
-var CreateWebhookSchema = import_zod15.z.object({
-  url: import_zod15.z.string().max(2048).url().describe(
+var CreateWebhookSchema = import_zod16.z.object({
+  url: import_zod16.z.string().max(2048).url().describe(
     "Must be HTTPS and resolve to a public address \u2014 private/internal IPs are rejected."
   ),
-  events: import_zod15.z.array(import_zod15.z.union([WebhookEventTypeSchema, import_zod15.z.literal(WEBHOOK_EVENTS_WILDCARD)])).max(Object.keys(EVENT_CATEGORY_MAP).length + 1).default([]).describe(
+  events: import_zod16.z.array(import_zod16.z.union([WebhookEventTypeSchema, import_zod16.z.literal(WEBHOOK_EVENTS_WILDCARD)])).max(Object.keys(EVENT_CATEGORY_MAP).length + 1).default([]).describe(
     'Individual event types to receive, or `"*"` for every event (combine with `excludeEvents` to opt back out of specific ones). Omit in favor of `eventCategories` if you want whole categories instead.'
   ),
-  eventCategories: import_zod15.z.array(WebhookCategorySchema).max(WebhookCategorySchema.options.length).default([]).describe(
+  eventCategories: import_zod16.z.array(WebhookCategorySchema).max(WebhookCategorySchema.options.length).default([]).describe(
     "Subscribe to every event in these categories. At least one of `events` or `eventCategories` is required."
   ),
-  excludeEvents: import_zod15.z.array(WebhookEventTypeSchema).max(Object.keys(EVENT_CATEGORY_MAP).length).default([]).describe(
+  excludeEvents: import_zod16.z.array(WebhookEventTypeSchema).max(Object.keys(EVENT_CATEGORY_MAP).length).default([]).describe(
     'Event types to exclude even if selected via `events: ["*"]` or `eventCategories`.'
   )
 }).refine((v) => v.events.length > 0 || v.eventCategories.length > 0, {
   message: "must select at least one event via `events` or `eventCategories`",
   path: ["events"]
 });
-var WebhookSchema = import_zod15.z.object({
-  id: import_zod15.z.string(),
+var WebhookSchema = import_zod16.z.object({
+  id: import_zod16.z.string(),
   environment: EnvironmentSchema.nullable().describe(
     "Which environment's API key created this webhook \u2014 `live` or `test`. Every event is only ever delivered to a webhook whose `environment` matches the event's own (or to a webhook with `environment: null`, which receives every environment \u2014 the case for every webhook created before this field existed)."
   ),
-  url: import_zod15.z.string(),
-  events: import_zod15.z.array(WebhookEventTypeSchema),
-  eventCategories: import_zod15.z.array(WebhookCategorySchema),
-  excludeEvents: import_zod15.z.array(WebhookEventTypeSchema),
-  isWildcard: import_zod15.z.boolean(),
-  secret: import_zod15.z.string().describe(
+  url: import_zod16.z.string(),
+  events: import_zod16.z.array(WebhookEventTypeSchema),
+  eventCategories: import_zod16.z.array(WebhookCategorySchema),
+  excludeEvents: import_zod16.z.array(WebhookEventTypeSchema),
+  isWildcard: import_zod16.z.boolean(),
+  secret: import_zod16.z.string().describe(
     "The signing secret, used to verify the `X-Klappay-Signature` header on every delivery. Returned in full only this once \u2014 store it now, it is not recoverable afterward. Header format: `t=<unix-seconds>,v1=<hex-encoded HMAC-SHA256>`. Compute the expected signature as `HMAC-SHA256(secret, \"${t}.${raw request body}\")` (hex-encoded) and compare it to `v1` using a constant-time comparison; as a replay-protection measure, also reject if `t` is too far from the current time \u2014 Klappay does not enforce or check any particular tolerance server-side, so the exact threshold is entirely the receiver's own policy call. An official SDK's `constructEvent()`/`verifySignature()` do this for you, defaulting to a 300-second tolerance, overridable via `constructEvent`'s `toleranceSeconds` option \u2014 see github.com/klappay for available SDKs."
   ),
-  createdAt: import_zod15.z.string().datetime()
+  createdAt: import_zod16.z.string().datetime()
 });
 var WebhookListItemSchema = WebhookSchema.omit({ secret: true }).extend({
-  hint: import_zod15.z.string().describe("A truncated, safe-to-display form of the secret (e.g. `whsec_...ab12`).")
+  hint: import_zod16.z.string().describe("A truncated, safe-to-display form of the secret (e.g. `whsec_...ab12`).")
 });
-var WebhookPayloadSchema = import_zod15.z.object({
-  id: import_zod15.z.string().describe(
+var WebhookPayloadSchema = import_zod16.z.object({
+  id: import_zod16.z.string().describe(
     "Unique id for this specific delivery \u2014 also sent as the `X-Klappay-Delivery` header."
   ),
   event: WebhookEventTypeSchema,
-  createdAt: import_zod15.z.string().datetime(),
-  data: import_zod15.z.unknown().describe(
+  createdAt: import_zod16.z.string().datetime(),
+  data: import_zod16.z.unknown().describe(
     "Event-specific data. Charge events (`charge.*`) carry the full `Charge` object; webhook-delivery events carry a smaller, event-specific object \u2014 see `WebhookEventDataMap`/`TypedWebhookPayload` for the exact shape per event, or docs/webhooks.md."
   )
 });
-var WebhookDeliveryStatusSchema = import_zod15.z.enum(["pending", "delivered", "failed"]);
-var WebhookDeliverySchema = import_zod15.z.object({
-  id: import_zod15.z.string(),
-  webhookId: import_zod15.z.string(),
+var WebhookDeliveryStatusSchema = import_zod16.z.enum(["pending", "delivered", "failed"]);
+var WebhookDeliverySchema = import_zod16.z.object({
+  id: import_zod16.z.string(),
+  webhookId: import_zod16.z.string(),
   event: WebhookEventTypeSchema,
   status: WebhookDeliveryStatusSchema.describe(
     "`pending`: still retrying. `delivered`: got a 2xx response. `failed`: retries exhausted (5 attempts over ~24h) \u2014 use `POST /v1/webhooks/{id}/deliveries/{deliveryId}/retry` to try again manually."
   ),
-  attempts: import_zod15.z.number(),
-  responseCode: import_zod15.z.number().nullable().describe(
+  attempts: import_zod16.z.number(),
+  responseCode: import_zod16.z.number().nullable().describe(
     "HTTP status your endpoint returned on the most recent attempt. `null` if every attempt failed to connect at all."
   ),
-  nextRetryAt: import_zod15.z.string().datetime().nullable(),
-  deliveredAt: import_zod15.z.string().datetime().nullable(),
-  createdAt: import_zod15.z.string().datetime()
+  nextRetryAt: import_zod16.z.string().datetime().nullable(),
+  deliveredAt: import_zod16.z.string().datetime().nullable(),
+  createdAt: import_zod16.z.string().datetime()
 });
 var ListWebhookDeliveriesSchema = PaginationQuerySchema;
 var PaginatedWebhookDeliveriesSchema = paginatedSchema(WebhookDeliverySchema);
 
 // src/recipients.ts
-var import_zod16 = require("zod");
+var import_zod17 = require("zod");
 var EVM_ADDRESS_REGEX = /^0x[0-9a-fA-F]{40}$/;
-var CreateRecipientSchema = import_zod16.z.object({
-  address: import_zod16.z.string().regex(EVM_ADDRESS_REGEX, "must be a 20-byte hex address").describe("EVM address to register as a trusted split recipient for your organization."),
-  label: import_zod16.z.string().min(1).max(64).optional().describe('Free-form label for your own bookkeeping (e.g. `"supplier"`) \u2014 never interpreted.')
+var CreateRecipientSchema = import_zod17.z.object({
+  address: import_zod17.z.string().regex(EVM_ADDRESS_REGEX, "must be a 20-byte hex address").describe("EVM address to register as a trusted split recipient for your organization."),
+  label: import_zod17.z.string().min(1).max(64).optional().describe('Free-form label for your own bookkeeping (e.g. `"supplier"`) \u2014 never interpreted.')
 });
-var RecipientSchema = import_zod16.z.object({
-  id: import_zod16.z.string().describe(
+var RecipientSchema = import_zod17.z.object({
+  id: import_zod17.z.string().describe(
     "Klappay-generated id, e.g. `rc_...` \u2014 this, not the raw address, is what a charge's `splitRecipients[].recipientId` references."
   ),
   environment: EnvironmentSchema,
-  address: import_zod16.z.string(),
-  label: import_zod16.z.string().nullable(),
-  payout: import_zod16.z.boolean().describe(
+  address: import_zod17.z.string(),
+  label: import_zod17.z.string().nullable(),
+  payout: import_zod17.z.boolean().describe(
     "Whether this recipient is eligible to be used as an API key's `payoutAddress` (in addition to being referenceable in a split, which every non-revoked recipient already is). Set via `PATCH /v1/recipients/{id}` \u2014 requires the `recipients:manage_payout` scope, deliberately separate from `recipients:write`."
   ),
-  createdAt: import_zod16.z.string().datetime()
+  createdAt: import_zod17.z.string().datetime()
 });
-var SetRecipientPayoutSchema = import_zod16.z.object({
-  payout: import_zod16.z.boolean().describe("New payout-eligibility value for this recipient.")
+var SetRecipientPayoutSchema = import_zod17.z.object({
+  payout: import_zod17.z.boolean().describe("New payout-eligibility value for this recipient.")
 });
 
 // src/timeline.ts
-var import_zod17 = require("zod");
-var TransactionSourceSchema = import_zod17.z.enum(["moralis_webhook", "reconciliation_job", "sandbox"]).describe(
+var import_zod18 = require("zod");
+var TransactionSourceSchema = import_zod18.z.enum(["moralis_webhook", "reconciliation_job", "sandbox"]).describe(
   "How this transfer was detected: `moralis_webhook` (the normal path), `reconciliation_job` (a fallback poller caught it after the webhook was missed or delayed), or `sandbox` (simulated via `POST /v1/sandbox/charges/{id}/trigger`, no real on-chain transfer)."
 );
-var TimelineEventTypeSchema = import_zod17.z.enum([
+var TimelineEventTypeSchema = import_zod18.z.enum([
   "charge.created",
   "charge.expired",
   "transaction.detected",
   "split.distributed",
   "webhook.dispatched",
   "webhook.delivered",
-  "webhook.failed"
+  "webhook.failed",
+  "transfer.reclaimed"
 ]).describe(
-  "`charge.created`: the charge was created. `charge.expired`: `expiresAt` passed with no full payment. `transaction.detected`: a raw on-chain transfer was seen (see the `event`-shaped fields below for details \u2014 a charge can have more than one, e.g. a partial payment followed by the rest). `split.distributed`: a payout to the merchant completed on-chain, for one contributing `(token, network)` pair \u2014 a charge settled across more than one pair emits one of these per pair (see the `token`/`network` fields below). `webhook.dispatched`/`webhook.delivered`/`webhook.failed`: one specific delivery *attempt* for one webhook subscription \u2014 `failed` here means this single attempt failed, not that all retries were exhausted (see `WebhookDeliveryStatusSchema` for the exhausted-all-retries state)."
+  "`charge.created`: the charge was created. `charge.expired`: `expiresAt` passed with no full payment. `transaction.detected`: a raw on-chain transfer was seen (see the `event`-shaped fields below for details \u2014 a charge can have more than one, e.g. a partial payment followed by the rest). `split.distributed`: a payout to the merchant completed on-chain, for one contributing `(token, network)` pair \u2014 a charge settled across more than one pair emits one of these per pair (see the `token`/`network` fields below). `webhook.dispatched`/`webhook.delivered`/`webhook.failed`: one specific delivery *attempt* for one webhook subscription \u2014 `failed` here means this single attempt failed, not that all retries were exhausted (see `WebhookDeliveryStatusSchema` for the exhausted-all-retries state). `transfer.reclaimed`: an on-chain transfer was detected but never reached its network's required confirmation depth before vanishing (reverted, or dropped from the canonical chain) \u2014 see `txHash` below for which transfer."
 );
-var TimelineEventSchema = import_zod17.z.object({
+var TimelineEventSchema = import_zod18.z.object({
   type: TimelineEventTypeSchema,
-  at: import_zod17.z.string().datetime(),
-  txHash: import_zod17.z.string().optional().describe("Present for `transaction.detected` and `split.distributed` events only."),
-  amount: import_zod17.z.number().optional().describe(
+  at: import_zod18.z.string().datetime(),
+  txHash: import_zod18.z.string().optional().describe(
+    "Present for `transaction.detected`, `split.distributed`, and `transfer.reclaimed` events only."
+  ),
+  amount: import_zod18.z.number().optional().describe(
     "Present for `transaction.detected` events only \u2014 the amount that specific transfer carried."
   ),
   source: TransactionSourceSchema.optional().describe(
@@ -1034,102 +1087,102 @@ var TimelineEventSchema = import_zod17.z.object({
   network: NetworkSchema.optional().describe(
     "Present for `transaction.detected` and `split.distributed` events \u2014 which network this specific transfer, or settlement, used."
   ),
-  causedTransition: import_zod17.z.boolean().optional().describe(
+  causedTransition: import_zod18.z.boolean().optional().describe(
     "Present for `transaction.detected` events only. `true` if this specific transfer changed the charge's status (e.g. PENDING\u2192CONFIRMED) \u2014 a charge paid in installments can have more than one such event."
   ),
   event: WebhookEventTypeSchema.optional().describe(
     "Present for `webhook.*` events only \u2014 which event type this delivery was for."
   ),
-  responseCode: import_zod17.z.number().nullable().optional().describe(
+  responseCode: import_zod18.z.number().nullable().optional().describe(
     "Present for `webhook.*` events only \u2014 HTTP status your endpoint returned, or `null` if the request never connected."
   ),
-  attempts: import_zod17.z.number().optional().describe(
+  attempts: import_zod18.z.number().optional().describe(
     "Present for `webhook.*` events only \u2014 how many delivery attempts have been made so far."
   )
 });
 
 // src/health.ts
-var import_zod18 = require("zod");
-var HealthSchema = import_zod18.z.object({
-  status: import_zod18.z.enum(["ok", "error"]).describe(
+var import_zod19 = require("zod");
+var HealthSchema = import_zod19.z.object({
+  status: import_zod19.z.enum(["ok", "error"]).describe(
     "`error` when the database connectivity check fails \u2014 the HTTP status code mirrors this (503 instead of 200), so a plain uptime check (not just a JSON-aware one) still catches a DB outage."
   ),
-  version: import_zod18.z.string(),
-  timestamp: import_zod18.z.string().datetime(),
-  db: import_zod18.z.enum(["ok", "error"]).describe("Result of a real database connectivity check, not just a process-alive check."),
-  pendingWebhooks: import_zod18.z.number().describe("Count of webhook deliveries still awaiting a successful attempt."),
-  oldestPendingChargeAgeSeconds: import_zod18.z.number().nullable().describe("Age of the oldest still-unpaid charge, in seconds. `null` if there are none."),
-  lastMoralisEventAgeSeconds: import_zod18.z.number().nullable().describe(
+  version: import_zod19.z.string(),
+  timestamp: import_zod19.z.string().datetime(),
+  db: import_zod19.z.enum(["ok", "error"]).describe("Result of a real database connectivity check, not just a process-alive check."),
+  pendingWebhooks: import_zod19.z.number().describe("Count of webhook deliveries still awaiting a successful attempt."),
+  oldestPendingChargeAgeSeconds: import_zod19.z.number().nullable().describe("Age of the oldest still-unpaid charge, in seconds. `null` if there are none."),
+  lastMoralisEventAgeSeconds: import_zod19.z.number().nullable().describe(
     "Seconds since the last on-chain payment notification was received \u2014 a cheap signal for whether payment detection is currently working. `null` if none have ever been received."
   )
 });
 
 // src/sandbox.ts
-var import_zod19 = require("zod");
-var SandboxTriggerSchema = import_zod19.z.object({
+var import_zod20 = require("zod");
+var SandboxTriggerSchema = import_zod20.z.object({
   event: TriggerableChargeEventSchema,
-  amount: import_zod19.z.number().positive().max(CHARGE_AMOUNT_MAX).optional().describe(
+  amount: import_zod20.z.number().positive().max(CHARGE_AMOUNT_MAX).optional().describe(
     "Used with `charge.partially_paid` (amount to simulate as received so far \u2014 must be less than the charge amount, defaults to half of it if omitted) and with `charge.overpaid` (amount received \u2014 must be greater than the charge amount, defaults to 1.5x it if omitted). Ignored for every other event."
   )
 });
 
 // src/capabilities.ts
-var import_zod20 = require("zod");
-var CapabilitiesSchema = import_zod20.z.object({
-  acceptedPayments: import_zod20.z.array(AcceptedPaymentSchema).describe(
+var import_zod21 = require("zod");
+var CapabilitiesSchema = import_zod21.z.object({
+  acceptedPayments: import_zod21.z.array(AcceptedPaymentSchema).describe(
     "Every `(token, network)` pair actually configured for your environment right now \u2014 read straight from the same lookup `POST /v1/charges` validates `acceptedPayments` against, so it can never list a pair that charge creation would then reject. Use this to build a picker UI instead of hardcoding the matrix client-side."
   )
 });
 
 // src/swap.ts
-var import_zod21 = require("zod");
-var CreateSwapQuoteSchema = import_zod21.z.object({
+var import_zod22 = require("zod");
+var CreateSwapQuoteSchema = import_zod22.z.object({
   inputToken: AltTokenSchema.describe(
     "Which alt-cryptocurrency the payer wants to send \u2014 must be one of this charge's `swapAlternatives`, or `422 token_not_supported`."
   ),
   inputNetwork: NetworkSchema.describe(
     "Which network the payer will send `inputToken` on. Also picks which of this charge's `acceptedPayments` pairs the swap resolves to \u2014 a charge accepting USDC on both Base and Optimism resolves to whichever `inputNetwork` you pass. If the charge accepts more than one token on that same network, Klappay breaks the tie using its own trust ranking for that network (e.g. USDT over USDC on BNB Chain, where \"USDC\" is a third-party Binance-Peg token, not Circle's) \u2014 never a token the charge doesn't actually accept."
   ),
-  takerAddress: import_zod21.z.string().regex(/^0x[0-9a-fA-F]{40}$/, "must be a 20-byte hex address").describe(
+  takerAddress: import_zod22.z.string().regex(/^0x[0-9a-fA-F]{40}$/, "must be a 20-byte hex address").describe(
     "The payer's own wallet address \u2014 the account that will sign and submit the swap transaction. Not validated against anything else; any well-formed address is accepted, since Klappay never custodies these funds."
   )
 });
-var SwapQuoteSchema = import_zod21.z.object({
+var SwapQuoteSchema = import_zod22.z.object({
   inputToken: AltTokenSchema,
   inputNetwork: NetworkSchema,
-  inputAmount: import_zod21.z.number().describe(
+  inputAmount: import_zod22.z.number().describe(
     "The ceiling of `inputToken` the payer needs available to sign for, in whole units (not wei/base units) \u2014 not necessarily the exact final cost. Any `inputToken` beyond what the swap actually needs (price moved favorably, less slippage than budgeted) is swapped back and refunded to the payer automatically, in the same transaction \u2014 never a separate step or a Klappay-side refund."
   ),
   outputToken: TokenSchema.describe(
     "Which of this charge's `acceptedPayments` tokens the swap resolves to."
   ),
   outputNetwork: NetworkSchema,
-  outputAmount: import_zod21.z.number().describe(
+  outputAmount: import_zod22.z.number().describe(
     "The exact remaining amount owed on this charge (`amount - amountReceived`), in `currency` units \u2014 always what the merchant's split address receives, regardless of `inputAmount`."
   ),
-  fees: import_zod21.z.object({
-    klappayFee: import_zod21.z.number().describe(
+  fees: import_zod22.z.object({
+    klappayFee: import_zod22.z.number().describe(
       "Klappay's own swap fee (1% today), in `outputToken` units \u2014 paid by the payer, on top of `inputAmount`, separate from the merchant's own `feePercent`. Never subtracted from `outputAmount`."
     ),
-    zeroExFee: import_zod21.z.number().nullable().describe(
+    zeroExFee: import_zod22.z.number().nullable().describe(
       "0x's own protocol fee for this specific token pair, in `outputToken` units, or `null` when this pair isn't currently one 0x charges on. Also paid by the payer on top of `inputAmount`, also never subtracted from `outputAmount` \u2014 Klappay never sees this fee, it goes straight to 0x."
     )
   }).describe(
     "Every fee the payer is charged for using swap-to-pay, broken out by who collects it \u2014 both already reflected in `inputAmount`, shown here separately for transparency. Neither ever reduces `outputAmount`."
   ),
-  expiresAt: import_zod21.z.string().datetime().describe(
+  expiresAt: import_zod22.z.string().datetime().describe(
     "When this quote's price is no longer safely valid \u2014 a rough guide for the payer's UI countdown only. The actual price guarantee is enforced on-chain by the swap transaction itself (a signed Permit2 deadline, or a minimum-output check for a native-currency sell), not by this timestamp \u2014 submitting after it expires either reverts on-chain or simply gets re-quoted at the current price, never silently executes at a stale rate."
   ),
-  transaction: import_zod21.z.object({
-    to: import_zod21.z.string().describe("Contract address the payer's wallet must send this transaction to."),
-    data: import_zod21.z.string().describe("Calldata \u2014 opaque, must be sent unmodified."),
-    value: import_zod21.z.string().describe(
+  transaction: import_zod22.z.object({
+    to: import_zod22.z.string().describe("Contract address the payer's wallet must send this transaction to."),
+    data: import_zod22.z.string().describe("Calldata \u2014 opaque, must be sent unmodified."),
+    value: import_zod22.z.string().describe(
       "Native currency (ETH/BNB/MATIC/AVAX) to attach, in wei \u2014 `\"0\"` when `inputToken` isn't this network's native currency."
     )
   }).describe(
     "Pass this directly to the payer's wallet (e.g. viem/ethers `sendTransaction`) \u2014 Klappay never touches the payer's private key or submits anything on their behalf. If `permit2` is present on this response, sign that first and append the signature to this `data` before sending; if `permit2` is absent, send `transaction` as-is with no extra step."
   ),
-  permit2: import_zod21.z.object({ eip712: import_zod21.z.record(import_zod21.z.unknown()) }).nullish().describe(
+  permit2: import_zod22.z.object({ eip712: import_zod22.z.record(import_zod22.z.unknown()) }).nullish().describe(
     "Present only when `inputToken` is an ERC-20 (today, only `BTC`) \u2014 the payer's wallet must sign this EIP-712 message and append the signature to `transaction.data` before sending, since an ERC-20 sell needs a Permit2 allowance signature that a native-currency sell doesn't. `null` (never omitted, in a genuine 0x-backed quote) when `inputToken` is a network's own native currency (ETH/BNB/MATIC/AVAX) \u2014 `transaction` is then ready to sign and send directly, no extra step."
   )
 });
@@ -1150,6 +1203,7 @@ var SwapQuoteSchema = import_zod21.z.object({
   CHECKOUT_PRODUCTS_MAX,
   CONFLICTING_SCOPE_PAIRS,
   CapabilitiesSchema,
+  ChargeFeePayerSchema,
   ChargeSchema,
   ChargeStatusSchema,
   ChargeWebhookEventTypeSchema,
@@ -1159,6 +1213,7 @@ var SwapQuoteSchema = import_zod21.z.object({
   CheckChargeRequestSchema,
   CheckChargeResponseSchema,
   CheckoutProductSchema,
+  ConfirmationProgressSchema,
   CreateChargeSchema,
   CreateRecipientSchema,
   CreateSwapQuoteSchema,
@@ -1206,6 +1261,7 @@ var SwapQuoteSchema = import_zod21.z.object({
   PendingDistributionRecipientSchema,
   PendingDistributionSchema,
   RecipientSchema,
+  RefundEscrowRequestSchema,
   ReleaseEscrowRequestSchema,
   SandboxTriggerSchema,
   SetRecipientPayoutSchema,