@klappay/types 5.0.0 → 5.1.1

package/dist/index.mjs

@@ -4,38 +4,48 @@ import {
   CHAIN_IDS,
   EVM_NETWORKS,
   NETWORK_EXPLORERS,
+  NETWORK_FAMILIES,
   NETWORK_LABELS,
   OPERATIONAL_NETWORKS,
   TOKEN_ADDRESSES,
   TOKEN_DECIMALS,
   TOKEN_DEPLOYMENTS,
+  addressesEqual,
   getTokenDeployment,
-  isPaymentDeploymentEnabled
-} from "./chunk-VTX32VJN.mjs";
+  isEvmAddress,
+  isPaymentDeploymentEnabled,
+  isSplitAddress,
+  isTronAddress,
+  tronAddress
+} from "./chunk-VL7W6KNP.mjs";
 
-// src/errors.ts
+// src/addresses.ts
 import { z } from "zod";
-var ErrorPayloadSchema = z.object({
-  error: z.object({
-    code: z.string().describe(
+var SplitAddressSchema = z.string().refine(isSplitAddress, "must be a valid EVM (0x...) or TRON (T...) address");
+
+// src/errors.ts
+import { z as z2 } from "zod";
+var ErrorPayloadSchema = z2.object({
+  error: z2.object({
+    code: z2.string().describe(
       "A stable, machine-readable error identifier (e.g. `validation_error`, `charge_not_found`)."
     ),
-    message: z.string().describe(
+    message: z2.string().describe(
       "Human-readable explanation, safe to log or show a developer \u2014 not meant for end users."
     ),
-    param: z.string().optional().describe("Which request field the error refers to, when applicable.")
+    param: z2.string().optional().describe("Which request field the error refers to, when applicable.")
   })
 });
 
 // src/environment.ts
-import { z as z2 } from "zod";
-var EnvironmentSchema = z2.enum(["live", "test"]).describe(
+import { z as z3 } from "zod";
+var EnvironmentSchema = z3.enum(["live", "test"]).describe(
   "`live` or `test`, matching the `klap_live_.../klap_test_...` prefix of the API key that created or is scoped to this resource. `live` uses the selected network's mainnet with real funds; `test` uses its separately configured testnet. Token contracts and availability are resolved per network/environment; a missing test deployment never falls back to live."
 );
 
 // src/api-key-scopes.ts
-import { z as z3 } from "zod";
-var ApiKeyScopeSchema = z3.enum([
+import { z as z4 } from "zod";
+var ApiKeyScopeSchema = z4.enum([
   "charges:read",
   "charges:write",
   "webhooks:read",
@@ -67,42 +77,42 @@ function findConflictingScopes(scopes) {
 }
 
 // src/networks.ts
-import { z as z4 } from "zod";
-var NetworkSchema = z4.enum(["base", "optimism", "polygon", "ethereum", "arbitrum", "avalanche", "bnb"]).describe("The blockchain a charge/payment is on.");
+import { z as z5 } from "zod";
+var NetworkSchema = z5.enum(["base", "optimism", "polygon", "ethereum", "arbitrum", "avalanche", "bnb", "tron", "arc"]).describe("The blockchain a charge/payment is on.");
 
 // src/pagination.ts
-import { z as z5 } from "zod";
+import { z as z6 } from "zod";
 var PAGINATION_LIMIT_MIN = 1;
 var PAGINATION_LIMIT_MAX = 100;
 var PAGINATION_LIMIT_DEFAULT = 20;
-var PaginationQuerySchema = z5.object({
-  limit: z5.coerce.number().min(PAGINATION_LIMIT_MIN).max(PAGINATION_LIMIT_MAX).default(PAGINATION_LIMIT_DEFAULT).describe(
+var PaginationQuerySchema = z6.object({
+  limit: z6.coerce.number().min(PAGINATION_LIMIT_MIN).max(PAGINATION_LIMIT_MAX).default(PAGINATION_LIMIT_DEFAULT).describe(
     `Max items to return per page (${PAGINATION_LIMIT_MIN}\u2013${PAGINATION_LIMIT_MAX}, default ${PAGINATION_LIMIT_DEFAULT}).`
   ),
-  cursor: z5.string().max(500).optional().describe(
+  cursor: z6.string().max(500).optional().describe(
     "Opaque \u2014 pass the previous response's `nextCursor` verbatim to fetch the next page. Never construct or parse this value yourself; its shape is not part of the public contract and may change."
   )
 });
 function paginatedSchema(itemSchema) {
-  return z5.object({
-    data: z5.array(itemSchema),
-    nextCursor: z5.string().nullable().describe("Pass as `cursor` to fetch the next page. `null` when there are no more results."),
-    hasMore: z5.boolean()
+  return z6.object({
+    data: z6.array(itemSchema),
+    nextCursor: z6.string().nullable().describe("Pass as `cursor` to fetch the next page. `null` when there are no more results."),
+    hasMore: z6.boolean()
   });
 }
 
 // src/tokens.ts
-import { z as z6 } from "zod";
-var TokenSchema = z6.enum(["USDC", "USDT"]).describe(
+import { z as z7 } from "zod";
+var TokenSchema = z7.enum(["USDC", "USDT"]).describe(
   "Which stablecoin the payer will send. Availability depends on `network` and `environment`; check `GET /v1/networks` before creating a charge. Unconfigured or disabled pairs are rejected with `422 token_not_supported`. Base, Optimism, and Ethereum have USDC test deployments; no test USDT is configured. The catalog includes both BNB Chain tokens for historical interpretation, but payments with either are currently disabled. Both configured BNB contracts are Binance-Peg tokens with 18 decimals; the other configured deployments use 6. Binance-Peg tokens carry Binance custody/backing risk and must not be represented as direct Circle/Tether issuance. Resolve address and decimals together with `getTokenDeployment`; a catalog entry alone does not imply payment availability."
 );
 
 // src/alt-tokens.ts
-import { z as z7 } from "zod";
-var AltTokenSchema = z7.enum(["ETH", "BNB", "POL", "AVAX", "BTC", "LINK", "ARB", "OP", "CBETH"]).describe(
+import { z as z8 } from "zod";
+var AltTokenSchema = z8.enum(["ETH", "BNB", "POL", "AVAX", "BTC", "LINK", "ARB", "OP", "CBETH"]).describe(
   "A non-stablecoin cryptocurrency Klappay trusts as swap input for a charge, via the 0x Swap API \u2014 swapped to one of the charge's `acceptedPayments` tokens before it ever reaches the merchant, so the merchant always receives USDC/USDT regardless of what the payer sent. Trusted on a given network only when it has deep, reputably-issued/custodied liquidity there: each network's own native currency, `BTC` (wrapped) on the networks with a trusted deployment, `LINK` (Chainlink's own official per-chain deployment, except Avalanche's bridged `LINK.e`), and a small set of chain-specific blue chips (`ARB` on Arbitrum, `OP` on Optimism, `CBETH` on Base) \u2014 see `ALT_TOKEN_ADDRESSES` for the authoritative per-network list, never assume every value here is available on every network. `POL` replaced `MATIC` as Polygon's native currency name (Polygon's own token migration, 2024) \u2014 this schema tracks the network's current native asset, not the deprecated ticker."
 );
-var SwapAlternativeSchema = z7.object({
+var SwapAlternativeSchema = z8.object({
   token: AltTokenSchema,
   network: NetworkSchema.describe(
     "Which network to send `token` on \u2014 pass both as `inputToken`/`inputNetwork` to `POST /v1/charges/{id}/quote`. The same token can appear more than once here, once per network that trusts it and that this charge accepts payment on."
@@ -119,77 +129,77 @@ function listSwapAlternatives(networks) {
 }
 
 // src/charges.ts
-import { z as z11 } from "zod";
+import { z as z12 } from "zod";
 
 // src/checkout-metadata.ts
-import { z as z8 } from "zod";
+import { z as z9 } from "zod";
 var CHECKOUT_PRODUCTS_MAX = 20;
-var CheckoutProductSchema = z8.object({
-  name: z8.string().min(1).max(200).describe("What the payer is buying, shown as-is on the hosted checkout page."),
-  quantity: z8.number().int().positive().max(9999).optional().describe("How many of this item. Omit for a single, unquantified item."),
-  imageUrl: z8.string().url().max(2048).refine((value) => /^https?:\/\//.test(value), "must use http or https").optional().describe(
+var CheckoutProductSchema = z9.object({
+  name: z9.string().min(1).max(200).describe("What the payer is buying, shown as-is on the hosted checkout page."),
+  quantity: z9.number().int().positive().max(9999).optional().describe("How many of this item. Omit for a single, unquantified item."),
+  imageUrl: z9.string().url().max(2048).refine((value) => /^https?:\/\//.test(value), "must use http or https").optional().describe(
     "Product image, fetched only by the payer's own browser \u2014 Klappay never fetches it server-side. Must be `http(s)`."
   )
 });
-var KlappayCheckoutMetadataSchema = z8.object({
-  products: z8.array(CheckoutProductSchema).max(CHECKOUT_PRODUCTS_MAX).optional().describe(
+var KlappayCheckoutMetadataSchema = z9.object({
+  products: z9.array(CheckoutProductSchema).max(CHECKOUT_PRODUCTS_MAX).optional().describe(
     `What the payer is buying, shown on the hosted checkout page \u2014 up to ${CHECKOUT_PRODUCTS_MAX} items. Purely informational: never validated against \`amount\`, never used by any payment or distribution logic.`
   )
 }).describe(
   "Reserved for Klappay \u2014 the one namespace inside `metadata` whose format is defined and enforced by Klappay, not by you. A `metadata.klappay` that does not match this shape is rejected outright (`400 validation_error`), unlike every other key in `metadata`, which accepts absolutely anything and never fails validation."
 );
-var MetadataWithKlappaySchema = z8.object({ klappay: KlappayCheckoutMetadataSchema.optional() }).catchall(z8.unknown()).describe(
+var MetadataWithKlappaySchema = z9.object({ klappay: KlappayCheckoutMetadataSchema.optional() }).catchall(z9.unknown()).describe(
   "Arbitrary key/value data, returned as-is on every read. Put whatever you want in here \u2014 none of it is validated, except the `klappay` key, which is reserved for Klappay: if present, it must match `KlappayCheckoutMetadataSchema` exactly, or the whole request is rejected with `400 validation_error`."
 );
 
 // src/escrow.ts
-import { z as z9 } from "zod";
-var EscrowConfigSchema = z9.object({
-  releaserAddress: z9.string().regex(/^0x[0-9a-fA-F]{40}$/, "must be a 20-byte hex address").optional().describe(
+import { z as z10 } from "zod";
+var EscrowConfigSchema = z10.object({
+  releaserAddress: z10.string().regex(/^0x[0-9a-fA-F]{40}$/, "must be a 20-byte hex address").optional().describe(
     "The only address ever authorized to release this charge's escrowed funds \u2014 set once at creation, immutable after. Klappay never holds a key with any release authority of its own; every release requires a signature from this address, verified on-chain, never taken on faith. Omit to default to the API key's own `payoutAddress` \u2014 the common case where the merchant releasing their own charge is the same wallet they already get paid to. Pass an explicit address only when the releaser is a different party (e.g. an operational key distinct from the payout wallet). Not validated against anything else \u2014 any well-formed address is accepted, since Klappay never custodies these funds."
   )
 });
-var ReleaseEscrowRequestSchema = z9.object({
-  signature: z9.string().regex(/^0x[0-9a-fA-F]+$/, "must be hex-encoded signature bytes").describe(
+var ReleaseEscrowRequestSchema = z10.object({
+  signature: z10.string().regex(/^0x[0-9a-fA-F]+$/, "must be hex-encoded signature bytes").describe(
     "The Safe transaction signature authorizing this release, produced by signing a transfer of the escrow's entire current token balance to the charge's already-frozen split address (the same split that would have received the payment on a normal, non-escrow charge) with the private key behind this charge's `escrowReleaserAddress` \u2014 never anything Klappay can produce itself. The destination is fixed by the charge's `splitConfig` (frozen at creation); the amount is read live on-chain at release time, not fixed in advance, so it always matches whatever actually arrived \u2014 reconstruct the exact transaction server-side computes (ERC-20 `transfer(splitAddress, balance)` from the escrow Safe, nonce 0) before signing. Independently verified on-chain before anything moves \u2014 the Safe contract itself rejects a signature that isn't from `escrowReleaserAddress`, never trusted at face value by Klappay."
   )
 });
-var RefundEscrowRequestSchema = z9.object({
-  signature: z9.string().regex(/^0x[0-9a-fA-F]+$/, "must be hex-encoded signature bytes").describe(
+var RefundEscrowRequestSchema = z10.object({
+  signature: z10.string().regex(/^0x[0-9a-fA-F]+$/, "must be hex-encoded signature bytes").describe(
     "The Safe transaction signature authorizing this refund, produced by signing a transfer of the escrow's entire current token balance back to the address that funded this charge (`Charge.payerAddress`, captured from the credited transfer) with the private key behind this charge's `escrowReleaserAddress` \u2014 never anything Klappay can produce itself. The amount is read live on-chain at refund time, not fixed in advance, so it always matches whatever actually arrived \u2014 reconstruct the exact transaction Klappay computes server-side (ERC-20 `transfer(payerAddress, balance)` from the escrow Safe, nonce 0) before signing. Independently verified on-chain before anything moves \u2014 the Safe contract itself rejects a signature that isn't from `escrowReleaserAddress`, never trusted at face value by Klappay."
   )
 });
 
 // src/exact-amount.ts
-import { z as z10 } from "zod";
-var ExactAmountSchema = z10.string().regex(/^(0|[1-9]\d*)(?:\.\d{1,18})?$(?!\s)/).describe(
+import { z as z11 } from "zod";
+var ExactAmountSchema = z11.string().regex(/^(0|[1-9]\d*)(?:\.\d{1,18})?$(?!\s)/).describe(
   "Nonnegative amount in whole currency/token units, as a decimal string with at most 18 fractional digits and no scientific notation."
 );
 
 // src/charges.ts
-var ChargeStatusSchema = z11.enum(["pending", "partially_paid", "confirmed", "expired", "underpaid"]).describe(
+var ChargeStatusSchema = z12.enum(["pending", "partially_paid", "confirmed", "expired", "underpaid"]).describe(
   "Payment progress, from the payer side. `pending`: created, nothing received yet. `partially_paid`: some funds received, less than `amount`. `confirmed`: full amount received (or more \u2014 see `isOverpaid`). `expired`: `expiresAt` passed with zero funds received. `underpaid`: `expiresAt` passed while `partially_paid`. Every status is reached automatically, on its own timeline \u2014 there is no merchant-initiated cancellation. This never reflects whether funds actually reached the merchant \u2014 see `settlementStatus` for that."
 );
-var SettlementStatusSchema = z11.enum(["pending", "completed", "failed"]).describe(
+var SettlementStatusSchema = z12.enum(["pending", "completed", "failed"]).describe(
   "Progress of the payout to the merchant's wallet, a separate step from `status` \u2014 `status: confirmed` only means the payment was detected on-chain, not that the merchant has been paid yet. `pending`: payment detected, payout not yet attempted. `completed`: the merchant's wallet has the funds. `failed`: the payout attempt failed and retries were exhausted (rare; contact support). `null` on the parent `Charge` means no payout has been attempted yet \u2014 nothing has been received, or the charge is still in progress."
 );
-var ChargeFeePayerSchema = z11.enum(["merchant", "payer"]).describe(
+var ChargeFeePayerSchema = z12.enum(["merchant", "payer"]).describe(
   "Who ends up covering Klappay's `feePercent`. `merchant` (default): `amount` is exactly what you asked for, and Klappay's fee is deducted from your own payout \u2014 you net `amount * (1 - feePercent / 100)`. `payer` : `amount` is grossed up at creation time so that, after the same fee deduction, you still net the amount you originally requested \u2014 the payer sees and sends the larger, fee-inclusive total. Frozen at creation like every other fee input; does not change how `feeAmount`/`merchantAmount` are computed on read, only what `amount` was set to in the first place."
 );
 var CHARGE_EXPIRES_IN_MIN_SECONDS = 60;
 var CHARGE_EXPIRES_IN_MAX_SECONDS = 3600;
-var CHARGE_ACCEPTED_PAYMENTS_MAX = 14;
-var AcceptedPaymentSchema = z11.object({
+var CHARGE_ACCEPTED_PAYMENTS_MAX = 18;
+var AcceptedPaymentSchema = z12.object({
   token: TokenSchema,
   network: NetworkSchema
 });
-var AcceptedPaymentsSchema = z11.array(AcceptedPaymentSchema).min(1, "At least one accepted payment is required.").max(CHARGE_ACCEPTED_PAYMENTS_MAX).superRefine((pairs, ctx) => {
+var AcceptedPaymentsSchema = z12.array(AcceptedPaymentSchema).min(1, "At least one accepted payment is required.").max(CHARGE_ACCEPTED_PAYMENTS_MAX).superRefine((pairs, ctx) => {
   const seen = /* @__PURE__ */ new Set();
   pairs.forEach((pair, index) => {
     const key = `${pair.token}:${pair.network}`;
     if (seen.has(key)) {
       ctx.addIssue({
-        code: z11.ZodIssueCode.custom,
+        code: z12.ZodIssueCode.custom,
         message: `Duplicate accepted payment: ${pair.token} on ${pair.network}.`,
         path: [index]
       });
@@ -197,42 +207,51 @@ var AcceptedPaymentsSchema = z11.array(AcceptedPaymentSchema).min(1, "At least o
     seen.add(key);
     if (!OPERATIONAL_NETWORKS.some((network) => network === pair.network)) {
       ctx.addIssue({
-        code: z11.ZodIssueCode.custom,
+        code: z12.ZodIssueCode.custom,
         message: `Network "${pair.network}" isn't live yet \u2014 only ${OPERATIONAL_NETWORKS.join(", ")} today.`,
         path: [index, "network"]
       });
     }
   });
+  const families = new Set(pairs.map((pair) => NETWORK_FAMILIES[pair.network]));
+  if (families.size > 1) {
+    ctx.addIssue({
+      code: z12.ZodIssueCode.custom,
+      message: `acceptedPayments mixes networks from different split families (${[...families].sort().join(", ")}) \u2014 every network in this list must share the same underlying split factory, so a charge can only ever accept networks from one family at a time.`
+    });
+  }
 }).describe(
-  `Every \`(token, network)\` pair the payer is allowed to pay with \u2014 at least one, up to ${CHARGE_ACCEPTED_PAYMENTS_MAX}. This list is also the only restriction knob: the payer can use any combination of the pairs listed here, and every transfer on one of them is credited and sums toward the charge total (see \`paidWith\`) \u2014 e.g. a charge accepting USDC and USDT can be confirmed by $9 in USDC plus $1 in USDT, or by USDC arriving on two different accepted networks. To require payment in one specific token on one specific network, list only that single pair \u2014 a transfer on any pair not in this list is still recorded (for audit) but never credited. Each network must be live (see \`GET /v1/networks\` for the current matrix) \u2014 an unconfigured \`(token, network)\` combination for your environment is rejected with \`422 token_not_supported\`.`
+  `Every \`(token, network)\` pair the payer is allowed to pay with \u2014 at least one, up to ${CHARGE_ACCEPTED_PAYMENTS_MAX}. This list is also the only restriction knob: the payer can use any combination of the pairs listed here, and every transfer on one of them is credited and sums toward the charge total (see \`paidWith\`) \u2014 e.g. a charge accepting USDC and USDT can be confirmed by $9 in USDC plus $1 in USDT, or by USDC arriving on two different accepted networks. To require payment in one specific token on one specific network, list only that single pair \u2014 a transfer on any pair not in this list is still recorded (for audit) but never credited. Each network must be live (see \`GET /v1/networks\` for the current matrix) \u2014 an unconfigured \`(token, network)\` combination for your environment is rejected with \`422 token_not_supported\`. Every network listed must also share the same split family (which networks are grouped together is an implementation detail, not part of this API's contract) \u2014 a charge predicts one split address up front and reuses it across every accepted network, which is only safe within one family; mixing families is rejected with \`400 validation_error\`.`
 );
 var CHARGE_SPLIT_RECIPIENTS_MAX = 5;
-var SplitRecipientSchema = z11.object({
-  address: z11.string().regex(/^0x[0-9a-fA-F]{40}$/, "must be a 20-byte hex address").describe("EVM address to send a slice of this charge to."),
-  percent: z11.number().positive().max(100).describe(
+var SplitRecipientSchema = z12.object({
+  address: SplitAddressSchema.describe(
+    "Address to send a slice of this charge to \u2014 an EVM 0x... address or a TRON T... address, matching whichever network family the charge accepts (acceptedPayments can only ever list networks from one split family at a time, so this always matches that same family)."
+  ),
+  percent: z12.number().positive().max(100).describe(
     "Percent of *your own* net share (i.e. of `100 - feePercent`, not of the charge's gross `amount`) to route to this address instead of your own payout wallet. Klappay's fee is computed on the gross amount first and is never diluted by how you choose to split what's left \u2014 see `docs/payments.md`'s \"Settling the payout\" section for the exact math."
   ),
-  label: z11.string().min(1).max(64).optional().describe(
+  label: z12.string().min(1).max(64).optional().describe(
     'Free-form label for your own bookkeeping (e.g. `"supplier"`, `"sales rep"`) \u2014 echoed back unchanged, never interpreted by Klappay.'
   )
 });
-var SplitRecipientInputSchema = z11.object({
-  recipientId: z11.string().describe(
+var SplitRecipientInputSchema = z12.object({
+  recipientId: z12.string().describe(
     "id of a `Recipient` you already registered via `POST /v1/recipients` (not a raw address) \u2014 see `recipients:write`/`charges:split_write` scopes. A leaked `charges:write`-only key can never redirect payout to a brand new address this way, only reference one already trusted."
   ),
-  percent: z11.number().positive().max(100).describe(
+  percent: z12.number().positive().max(100).describe(
     "Percent of *your own* net share (i.e. of `100 - feePercent`, not of the charge's gross `amount`) to route to this recipient instead of your own payout wallet. Klappay's fee is computed on the gross amount first and is never diluted by how you choose to split what's left \u2014 see `docs/payments.md`'s \"Settling the payout\" section for the exact math."
   ),
-  label: z11.string().min(1).max(64).optional().describe(
+  label: z12.string().min(1).max(64).optional().describe(
     'Free-form label for your own bookkeeping (e.g. `"supplier"`, `"sales rep"`) \u2014 echoed back unchanged, never interpreted by Klappay. Independent of the label the recipient was registered with.'
   )
 });
-var SplitRecipientsInputSchema = z11.array(SplitRecipientInputSchema).max(CHARGE_SPLIT_RECIPIENTS_MAX).superRefine((recipients, ctx) => {
+var SplitRecipientsInputSchema = z12.array(SplitRecipientInputSchema).max(CHARGE_SPLIT_RECIPIENTS_MAX).superRefine((recipients, ctx) => {
   const seen = /* @__PURE__ */ new Set();
   recipients.forEach((recipient, index) => {
     if (seen.has(recipient.recipientId)) {
       ctx.addIssue({
-        code: z11.ZodIssueCode.custom,
+        code: z12.ZodIssueCode.custom,
         message: `Duplicate split recipientId: ${recipient.recipientId}.`,
         path: [index, "recipientId"]
       });
@@ -243,114 +262,127 @@ var SplitRecipientsInputSchema = z11.array(SplitRecipientInputSchema).max(CHARGE
   `Optional extra recipients for this charge's split \u2014 e.g. a supplier or the sales rep who closed the deal \u2014 up to ${CHARGE_SPLIT_RECIPIENTS_MAX}, each referenced by \`recipientId\` (see \`POST /v1/recipients\`), never a raw address. Requires the \`charges:split_write\` scope in addition to \`charges:write\`. Frozen at creation exactly like everything else that shapes the split address; cannot be changed afterward. The sum of every \`percent\` here must fit within \`100 - feePercent\` (your own net share) \u2014 a request that doesn't is rejected with \`422 split_recipients_exceed_available_percent\`.`
 );
 var CHARGE_AMOUNT_MAX = 999999999999;
-var CreateChargeSchema = z11.object({
-  amount: z11.number().positive().max(CHARGE_AMOUNT_MAX).describe(
+var CreateChargeSchema = z12.object({
+  amount: z12.number().positive().max(CHARGE_AMOUNT_MAX).describe(
     "Amount to charge, in `currency` units (e.g. `49.9` = $49.90) \u2014 up to 6 decimal places; anything more precise is silently truncated. Required \u2014 every charge has a target amount, the first credited transfer that reaches it confirms the charge. With `feePayer: 'payer'` (see below), this is your own desired net amount, not the total the payer ends up sending \u2014 the response's `amount` is grossed up to cover `feePercent`, while `merchantAmount` on the response echoes back this exact value."
   ),
   feePayer: ChargeFeePayerSchema.optional().default("merchant"),
-  currency: z11.literal("USD").default("USD").describe("Always `USD` today \u2014 the only supported currency."),
+  currency: z12.literal("USD").default("USD").describe("Always `USD` today \u2014 the only supported currency."),
   acceptedPayments: AcceptedPaymentsSchema,
-  expiresIn: z11.number().int().min(CHARGE_EXPIRES_IN_MIN_SECONDS).max(CHARGE_EXPIRES_IN_MAX_SECONDS).describe(
+  expiresIn: z12.number().int().min(CHARGE_EXPIRES_IN_MIN_SECONDS).max(CHARGE_EXPIRES_IN_MAX_SECONDS).describe(
     "Seconds, not minutes or milliseconds \u2014 how long the charge stays open before it expires. Required, min 60, max 3600 (60 minutes) \u2014 sized off the slowest chain Klappay supports today (Ethereum mainnet, where a safely-confirmed transfer takes up to ~15 minutes), leaving real margin for payer-side delay (gas spikes, wallet friction) on top of that. Cannot be extended or shortened after creation."
   ),
-  idempotencyKey: z11.string().min(1).max(255).optional().describe(
+  idempotencyKey: z12.string().min(1).max(255).optional().describe(
     "Scoped to your tenant. Replaying the same key with the exact same request body returns the original charge unchanged instead of creating a duplicate \u2014 safe to retry a request after a timeout without double-charging. Reusing the same key with a different body (including a different `escrow` config) is rejected with `409 idempotency_key_reused`, never silently returned as the original charge."
   ),
-  externalRef: z11.string().min(1).max(255).optional().describe(
+  externalRef: z12.string().min(1).max(255).optional().describe(
     "An opaque correlation id from your own system (e.g. an order id) \u2014 echoed back on the charge and in every webhook payload. Not interpreted or validated by Klappay."
   ),
-  source: z11.string().min(1).max(64).optional().describe(
+  source: z12.string().min(1).max(64).optional().describe(
     'Free-form label for what created this charge (e.g. `"checkout"`, `"invoice"`) \u2014 useful if you create charges from more than one flow and want to tell them apart later. Not a fixed enum; use whatever values make sense to you.'
   ),
   metadata: MetadataWithKlappaySchema.optional(),
-  redirectUrl: z11.string().url().refine((value) => /^https?:\/\//.test(value), "must use http or https").optional().describe(
+  redirectUrl: z12.string().url().refine((value) => /^https?:\/\//.test(value), "must use http or https").optional().describe(
     "Where to send the payer once this charge resolves, if you use Klappay's hosted checkout page (see `checkoutUrl` on the read shape) \u2014 ignored otherwise. Must be `http(s)` \u2014 a browser will navigate here, so `javascript:`/`data:` and other non-navigational schemes are rejected. Otherwise not validated beyond being well-formed; what happens at that destination is yours to build."
   ),
   splitRecipients: SplitRecipientsInputSchema.optional(),
   escrow: EscrowConfigSchema.optional().describe(
-    "Configure this charge as an escrow instead of a normal payment. Funds land in a dedicated, non-custodial Safe (not the usual split address) and only `releaserAddress` (or, if omitted, your API key's own `payoutAddress`) can ever release them \u2014 via `POST /v1/charges/{id}/release`, signed on their end, never something Klappay can trigger or redirect. Omit this field entirely for a normal charge."
+    "Configure this charge as an escrow instead of a normal payment. Funds land in a dedicated, non-custodial Safe (not the usual split address) and only `releaserAddress` (or, if omitted, your API key's own `payoutAddress`) can ever release them \u2014 via `POST /v1/charges/{id}/release`, signed on their end, never something Klappay can trigger or redirect. Omit this field entirely for a normal charge. **Requires every accepted network to be EVM** (Safe \u2014 the underlying custody contract \u2014 isn't deployed on Tron, and can never be; it's not an EVM chain) \u2014 rejected with `400 validation_error` otherwise."
   )
+}).superRefine((data, ctx) => {
+  if (!data.escrow) return;
+  const evmNetworks = EVM_NETWORKS;
+  const hasUnsupportedNetwork = data.acceptedPayments.some(
+    (pair) => !evmNetworks.includes(pair.network)
+  );
+  if (hasUnsupportedNetwork) {
+    ctx.addIssue({
+      code: z12.ZodIssueCode.custom,
+      message: "Escrow is not supported for this charge's network \u2014 Safe (the underlying custody contract) isn't an EVM chain there. Remove `escrow`, or accept payment on an EVM network instead.",
+      path: ["escrow"]
+    });
+  }
 });
-var ChargeSchema = z11.object({
-  id: z11.string().describe("Klappay-generated id, e.g. `ch_...`. Use this to look up the charge later."),
-  amount: z11.number().describe(
+var ChargeSchema = z12.object({
+  id: z12.string().describe("Klappay-generated id, e.g. `ch_...`. Use this to look up the charge later."),
+  amount: z12.number().describe(
     "The total the payer must send, in `currency` units (up to 6 decimal places). This legacy JSON number can lose precision; use `amountExact` for calculations and payment preparation. With `feePayer: 'merchant'` (the default) this is what you requested at creation. With `feePayer: 'payer'` this is grossed up to cover `feePercent` \u2014 see `merchantAmount` for what you requested/will actually net."
   ),
   amountExact: ExactAmountSchema.regex(/^(0|[1-9]\d*)(?:\.\d{1,6})?$/).optional().describe(
     'Exact total the payer must send, in `currency` units, as a nonnegative decimal string with at most 6 fractional digits and no scientific notation (e.g. `"100.000001"`). Use this instead of `amount` for arithmetic. Optional for compatibility with older API responses.'
   ),
   feePayer: ChargeFeePayerSchema,
-  feePercent: z11.number().describe(
+  feePercent: z12.number().describe(
     "Klappay's fee for this charge, as a percent of `amount` (e.g. `2` = 2%) \u2014 includes any escrow surcharge if this charge is an escrow. Frozen at creation; see `feeAmount`/`merchantAmount` for the actual amounts this works out to."
   ),
-  feeAmount: z11.number().describe("`amount * feePercent / 100`, in `currency` units \u2014 Klappay's cut of this charge."),
-  merchantAmount: z11.number().describe(
+  feeAmount: z12.number().describe("`amount * feePercent / 100`, in `currency` units \u2014 Klappay's cut of this charge."),
+  merchantAmount: z12.number().describe(
     "`amount - feeAmount`, in `currency` units \u2014 what you actually net once the payout settles, regardless of `feePayer` (this is always what the split delivers to you; `feePayer` only affects what `amount` was set to at creation)."
   ),
-  amountReceived: z11.number().nullable().describe(
+  amountReceived: z12.number().nullable().describe(
     "Cumulative amount received on-chain so far, in `currency` units. This legacy JSON number can lose precision; use `amountReceivedExact` for arithmetic with up to 18 fractional digits. `null` until the first transfer arrives. Can exceed `amount` \u2014 see `isOverpaid`."
   ),
   amountReceivedExact: ExactAmountSchema.nullable().optional().describe(
     'Exact cumulative amount received on-chain, in `currency` units, as a nonnegative decimal string with at most 18 fractional digits and no scientific notation (e.g. `"0.0000000001"`). `null` until the first transfer arrives. Can exceed `amountExact`. Optional for compatibility with older API responses.'
   ),
-  paymentUnavailable: z11.boolean().optional().describe(
+  paymentUnavailable: z12.boolean().optional().describe(
     "When `true`, payment processing for this charge is temporarily unavailable. Do not offer payment instructions, request another transfer, or fulfill from its monetary/status fields until availability is restored. The charge retains its existing business status. Optional for compatibility with older API responses."
   ),
-  isOverpaid: z11.boolean().describe(
+  isOverpaid: z12.boolean().describe(
     "`true` if `amountReceived` ended up greater than `amount`. Klappay never refunds the difference automatically \u2014 see the docs for why."
   ),
-  currency: z11.string().describe("Always `USD` today \u2014 the only supported currency."),
-  acceptedPayments: z11.array(AcceptedPaymentSchema).describe(
+  currency: z12.string().describe("Always `USD` today \u2014 the only supported currency."),
+  acceptedPayments: z12.array(AcceptedPaymentSchema).describe(
     "Every `(token, network)` pair this charge was configured to accept, unchanged after creation."
   ),
-  paidWith: z11.array(AcceptedPaymentSchema).describe(
+  paidWith: z12.array(AcceptedPaymentSchema).describe(
     "Every distinct `(token, network)` pair that has actually contributed a credited transfer so far \u2014 empty until the first one arrives. Can hold more than one entry: a charge accepting several pairs can be paid across a combination of them, and every entry here sums toward `amountReceived`."
   ),
-  swapAlternatives: z11.array(SwapAlternativeSchema).describe(
+  swapAlternatives: z12.array(SwapAlternativeSchema).describe(
     "Every `(token, network)` pair the payer can pay with instead, via `POST /v1/charges/{id}/quote` \u2014 derived from the networks in `acceptedPayments` (e.g. a charge accepting USDC on both Base and Optimism lists `ETH` on Base and `ETH` on Optimism separately, since they're different networks the payer has to choose between, not one merged option). Pass an entry's `token`/`network` straight through as `inputToken`/`inputNetwork`. Recomputed on every read against Klappay's current trusted list, not frozen at creation \u2014 empty if this charge's networks have no trusted alt-token, if swap-to-pay isn't configured on this deployment, or if `environment` is `test` (0x, who powers the swap, has no testnet support at all \u2014 `POST /v1/charges/{id}/quote` always rejects a test-environment charge with `422 swap_test_environment_unsupported`)."
   ),
-  address: z11.string().describe(
+  address: z12.string().describe(
     "The on-chain address the payer must send funds to \u2014 identical across every accepted network (0xSplits addresses are chain-agnostic). Unique per charge, predicted at creation time \u2014 funds sent here go directly to the merchant, Klappay never custodies them."
   ),
   status: ChargeStatusSchema,
   settlementStatus: SettlementStatusSchema.nullable(),
   environment: EnvironmentSchema,
-  apiKeyId: z11.string().nullable().describe(
+  apiKeyId: z12.string().nullable().describe(
     "Which of your API keys created this charge. `null` for a charge created before this field existed."
   ),
-  txHash: z11.string().nullable().describe(
+  txHash: z12.string().nullable().describe(
     "Transaction hash of the most recent transfer detected for this charge. `null` until a payment is detected."
   ),
-  externalRef: z11.string().nullable(),
-  source: z11.string().nullable(),
+  externalRef: z12.string().nullable(),
+  source: z12.string().nullable(),
   metadata: MetadataWithKlappaySchema.nullable(),
-  redirectUrl: z11.string().nullable().describe("Echoes the `redirectUrl` set at creation, if any. `null` if none was set."),
-  checkoutUrl: z11.string().nullable().describe(
+  redirectUrl: z12.string().nullable().describe("Echoes the `redirectUrl` set at creation, if any. `null` if none was set."),
+  checkoutUrl: z12.string().nullable().describe(
     "Link to Klappay's hosted checkout page for this charge. `null` if this deployment has no hosted checkout configured \u2014 build your own payment UI from `address`/`acceptedPayments` instead."
   ),
-  splitRecipients: z11.array(SplitRecipientSchema).describe("Echoes whatever extra split recipients were set at creation \u2014 empty array if none."),
-  createdAt: z11.string().datetime(),
-  expiresAt: z11.string().datetime().describe(
+  splitRecipients: z12.array(SplitRecipientSchema).describe("Echoes whatever extra split recipients were set at creation \u2014 empty array if none."),
+  createdAt: z12.string().datetime(),
+  expiresAt: z12.string().datetime().describe(
     "When this charge stops accepting payment, if still `pending`/`partially_paid` by then."
   ),
-  confirmedAt: z11.string().datetime().nullable().describe("When `status` first reached `confirmed`. `null` until then."),
-  settledAt: z11.string().datetime().nullable().describe(
+  confirmedAt: z12.string().datetime().nullable().describe("When `status` first reached `confirmed`. `null` until then."),
+  settledAt: z12.string().datetime().nullable().describe(
     "When `settlementStatus` first reached `completed` \u2014 the merchant's wallet actually has the funds. `null` until then, including while `settlementStatus` is `pending`/`failed`."
   ),
-  lastActivityAt: z11.string().datetime().describe(
+  lastActivityAt: z12.string().datetime().describe(
     "When a transfer was last credited toward this charge, or `createdAt` if none has arrived yet."
   ),
-  escrow: z11.object({
-    releaserAddress: z11.string().describe("The only address that can ever release this escrow \u2014 never Klappay."),
-    releasedAt: z11.string().datetime().nullable().describe("When the release actually executed on-chain. `null` until then."),
-    refundedAt: z11.string().datetime().nullable().describe(
+  escrow: z12.object({
+    releaserAddress: z12.string().describe("The only address that can ever release this escrow \u2014 never Klappay."),
+    releasedAt: z12.string().datetime().nullable().describe("When the release actually executed on-chain. `null` until then."),
+    refundedAt: z12.string().datetime().nullable().describe(
       "When the refund actually executed on-chain. `null` until then. Mutually exclusive with `releasedAt` \u2014 an escrow can only ever be released or refunded once, never both."
     )
   }).nullable().describe(
     "Present only when this charge was created as an escrow (see `escrow` on the create request) \u2014 `null` for a normal charge."
   )
 });
-var ListChargesSchema = z11.object({
+var ListChargesSchema = z12.object({
   status: ChargeStatusSchema.optional(),
   token: TokenSchema.optional().describe(
     "Filters on `paidWith.token` \u2014 the pair actually paid, not accepted."
@@ -359,13 +391,13 @@ var ListChargesSchema = z11.object({
     "Filters on `paidWith.network` \u2014 the pair actually paid, not accepted."
   ),
   environment: EnvironmentSchema.optional(),
-  since: z11.string().datetime().optional().describe(
+  since: z12.string().datetime().optional().describe(
     "Only return charges created at or after this timestamp (filters on `createdAt`, not on when the status last changed). If polling as a fallback for missed webhooks, use a window at least as wide as the longest `expiresIn` your charges use, or you can miss a long-lived charge that changed status outside a narrower window."
   ),
-  isOverpaid: z11.enum(["true", "false"]).transform((v) => v === "true").optional()
+  isOverpaid: z12.enum(["true", "false"]).transform((v) => v === "true").optional()
 }).extend(PaginationQuerySchema.shape);
 var PaginatedChargesSchema = paginatedSchema(ChargeSchema);
-var GetChargeQrCodeQuerySchema = z11.object({
+var GetChargeQrCodeQuerySchema = z12.object({
   token: TokenSchema.optional().describe(
     "Which accepted `(token, network)` pair to encode in the QR \u2014 required if `acceptedPayments` has more than one pair, since there is no single unambiguous default to fall back to. Ignored (and unnecessary) when the charge accepts exactly one pair."
   ),
@@ -373,19 +405,19 @@ var GetChargeQrCodeQuerySchema = z11.object({
 });
 
 // src/charge-check.ts
-import { z as z13 } from "zod";
+import { z as z14 } from "zod";
 
 // src/confirmation-progress.ts
-import { z as z12 } from "zod";
-var ConfirmationProgressSchema = z12.object({
+import { z as z13 } from "zod";
+var ConfirmationProgressSchema = z13.object({
   network: NetworkSchema.describe("Which network the transfer was seen on."),
-  blocksSeen: z12.number().int().min(0).describe(
+  blocksSeen: z13.number().int().min(0).describe(
     "How many blocks have passed since the transfer's own block, as of this update \u2014 a raw block count, not seconds. Grows toward `blocksRequired` as the network's blocks keep arriving."
   ),
-  blocksRequired: z12.number().int().min(1).describe(
+  blocksRequired: z13.number().int().min(1).describe(
     "This network's minimum confirmation depth (a fixed, per-network constant) \u2014 the transfer is only credited once `blocksSeen` reaches this value."
   ),
-  percent: z12.number().int().min(0).max(99).describe(
+  percent: z13.number().int().min(0).max(99).describe(
     '`blocksSeen`/`blocksRequired` as a rounded-down 0-99 percentage, for a progress bar. Never reaches 100 by construction \u2014 once a transfer is deep enough it is credited immediately and this stops being reported at all (the charge event itself is the "done" signal).'
   )
 }).describe(
@@ -393,8 +425,8 @@ var ConfirmationProgressSchema = z12.object({
 );
 
 // src/charge-check.ts
-var CheckChargeRequestSchema = z13.object({
-  txHash: z13.string().regex(/^0x[0-9a-fA-F]{64}$/, "must be a 32-byte transaction hash").optional().describe(
+var CheckChargeRequestSchema = z14.object({
+  txHash: z14.string().regex(/^0x[0-9a-fA-F]{64}$/, "must be a 32-byte transaction hash").optional().describe(
     "The on-chain transaction hash to verify directly, if you already have it \u2014 e.g. right after a swap-to-pay or wallet-connect transaction is sent. Costs a single RPC call instead of scanning a block range, so the check resolves faster and cheaper. Omit to fall back to scanning recent transfers to this charge's address, the same lookup the background reconciliation pass runs. Never trusted at face value \u2014 whatever this transaction actually contains on-chain is what gets credited, regardless of any amount/token implied elsewhere."
   ),
   network: NetworkSchema.optional().describe(
@@ -404,7 +436,7 @@ var CheckChargeRequestSchema = z13.object({
   message: "`txHash` and `network` must be provided together, or both omitted"
 });
 var CheckChargeResponseSchema = ChargeSchema.extend({
-  transactionSender: z13.string().nullable().describe(
+  transactionSender: z14.string().nullable().describe(
     "The `txHash` transaction's own sender (`from`) \u2014 who actually signed and submitted it on-chain, which stays the payer's own wallet even when the transaction swaps through a router/aggregator on the way to paying, unlike the credited transfer's `from` (which can be the router/pool contract, not the payer). `null` unless `txHash`/`network` was passed in the request and a successful receipt was found for it \u2014 a hint-less background scan, an unaccepted network, or a not-found/reverted transaction all leave this `null`."
   ),
   confirmationProgress: ConfirmationProgressSchema.nullable().describe(
@@ -413,61 +445,61 @@ var CheckChargeResponseSchema = ChargeSchema.extend({
 });
 
 // src/distributions.ts
-import { z as z14 } from "zod";
-var SplitDistributionStatusSchema = z14.enum(["pending", "processing", "completed", "failed"]).describe(
+import { z as z15 } from "zod";
+var SplitDistributionStatusSchema = z15.enum(["pending", "processing", "completed", "failed"]).describe(
   "Status of one payout attempt to the merchant, for a single `(token, network)` pair \u2014 a charge that settles across more than one pair has one of these per pair. `pending`: queued, not yet claimed by a distributor. `processing`: a distributor (Klappay's own worker, or anyone racing to call `distribute()` first, see `PendingDistributionSchema`) has claimed it and is submitting the on-chain transaction. `completed`: the merchant's wallet has the funds. `failed`: every automatic retry was exhausted."
 );
-var PendingDistributionRecipientSchema = z14.object({
-  address: z14.string().describe("On-chain recipient address."),
-  percentAllocation: z14.number().describe("This recipient's share of the split, as a percentage (e.g. `99.0991` = 99.0991%).")
+var PendingDistributionRecipientSchema = z15.object({
+  address: z15.string().describe("On-chain recipient address."),
+  percentAllocation: z15.number().describe("This recipient's share of the split, as a percentage (e.g. `99.0991` = 99.0991%).")
 });
-var PendingDistributionSchema = z14.object({
-  splitAddress: z14.string().describe("The on-chain 0xSplits address to call `distribute()` on."),
+var PendingDistributionSchema = z15.object({
+  splitAddress: z15.string().describe("The on-chain 0xSplits address to call `distribute()` on."),
   network: NetworkSchema,
   token: TokenSchema,
-  recipients: z14.array(PendingDistributionRecipientSchema).describe(
+  recipients: z15.array(PendingDistributionRecipientSchema).describe(
     "The exact recipient list to pass to `distribute()` \u2014 the split contract only stores a hash of this config, so the caller must supply the identical array to prove it matches. Always present, never reconstructed from partial data."
   ),
-  distributorFeePercent: z14.number().describe(
+  distributorFeePercent: z15.number().describe(
     "Percentage of the split balance paid to whoever calls `distribute()` first (e.g. `0.1` = 0.1%). Frozen at charge creation, same for every distribution today."
   ),
-  estimatedRewardAmount: z14.number().describe(
+  estimatedRewardAmount: z15.number().describe(
     "Estimate only, in the charge's `currency` units, based on the amount Klappay detected on-chain \u2014 not a live read of the split's current balance. Read the balance yourself before submitting a transaction; a stale estimate is harmless (see the docs), never a reason to skip that check."
   ),
-  availableSince: z14.string().datetime().describe("When this distribution entered its grace period."),
-  graceEndsAt: z14.string().datetime().describe(
+  availableSince: z15.string().datetime().describe("When this distribution entered its grace period."),
+  graceEndsAt: z15.string().datetime().describe(
     "When Klappay's own worker may claim this distribution. Racing to call `distribute()` after this timestamp is possible but increasingly likely to lose to the worker."
   )
 });
 var PaginatedPendingDistributionsSchema = paginatedSchema(PendingDistributionSchema);
-var ListenPendingDistributionsQuerySchema = z14.object({
-  limit: z14.coerce.number().int().min(0).max(PAGINATION_LIMIT_MAX).default(0).describe(
+var ListenPendingDistributionsQuerySchema = z15.object({
+  limit: z15.coerce.number().int().min(0).max(PAGINATION_LIMIT_MAX).default(0).describe(
     "How many currently-claimable distributions to emit as an initial snapshot right after connecting \u2014 each as a synthetic `distribution.available` event \u2014 before continuing with real-time deltas. `0` (the default, same as omitting it) sends no snapshot at all, matching this endpoint's original behavior: connect first, then call `GET /v1/distributions/pending` yourself to bootstrap. Not a page \u2014 there is no cursor for this snapshot, so if more than `limit` are claimable at connect time, the excess is simply not sent; call `GET /v1/distributions/pending` directly for a complete, paginated listing."
   )
 });
-var PendingDistributionEventSchema = z14.discriminatedUnion("type", [
-  z14.object({
-    type: z14.literal("distribution.available"),
+var PendingDistributionEventSchema = z15.discriminatedUnion("type", [
+  z15.object({
+    type: z15.literal("distribution.available"),
     distribution: PendingDistributionSchema
   }),
-  z14.object({
-    type: z14.literal("distribution.claimed"),
-    splitAddress: z14.string().describe("No longer claimable \u2014 either settled by someone, or picked up by the worker.")
+  z15.object({
+    type: z15.literal("distribution.claimed"),
+    splitAddress: z15.string().describe("No longer claimable \u2014 either settled by someone, or picked up by the worker.")
   })
 ]);
 
 // src/metrics.ts
-import { z as z15 } from "zod";
-var MetricsResourceSchema = z15.enum(["charges", "transactions", "distributions"]).describe(
+import { z as z16 } from "zod";
+var MetricsResourceSchema = z16.enum(["charges", "transactions", "distributions"]).describe(
   "Which underlying dataset to query. `charges`: one row per charge. `transactions`: one row per detected on-chain transfer \u2014 a charge paid in installments has more than one. `distributions`: one row per payout attempt to the merchant, one per `(token, network)` pair a charge settled across."
 );
-var MetricsAggregationSchema = z15.enum(["count", "sum", "avg", "min", "max"]).describe(
+var MetricsAggregationSchema = z16.enum(["count", "sum", "avg", "min", "max"]).describe(
   "`count` counts matching rows and never takes `field`. `sum`/`avg`/`min`/`max` require `field` to be set to one of the resource\u2019s numeric fields."
 );
-var MetricsFilterOperatorSchema = z15.enum(["eq", "neq", "in", "gt", "gte", "lt", "lte"]).describe(
+var MetricsFilterOperatorSchema = z16.enum(["eq", "neq", "in", "gt", "gte", "lt", "lte"]).describe(
   "`in` expects an array value (max 50 entries); every other operator expects a single scalar."
 );
-var MetricsDateGranularitySchema = z15.enum(["day", "week", "month", "year"]).describe(
+var MetricsDateGranularitySchema = z16.enum(["day", "week", "month", "year"]).describe(
   "Bucket width for a `date_bucket` `groupBy` entry \u2014 Postgres `date_trunc` semantics (UTC)."
 );
 var metricsQueryEnvironmentSchema = EnvironmentSchema.describe(
@@ -480,31 +512,32 @@ var METRICS_QUERY_MAX_GROUP_BY = 3;
 var METRICS_QUERY_MAX_FILTERS = 20;
 var METRICS_QUERY_MAX_METRICS = 10;
 var METRIC_ALIAS_PATTERN = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
-var metricAliasSchema = z15.string().min(1).max(64).regex(
+var metricAliasSchema = z16.string().min(1).max(64).regex(
   METRIC_ALIAS_PATTERN,
   "Must start with a letter or underscore, and contain only letters, digits, and underscores \u2014 this becomes a SQL column alias."
 ).optional();
-var MetricsFilterValueSchema = z15.union([
-  z15.string().max(255),
-  z15.number(),
-  z15.boolean(),
-  z15.array(z15.union([z15.string().max(255), z15.number()])).min(1).max(50)
+var MetricsFilterValueSchema = z16.union([
+  z16.string().max(255),
+  z16.number(),
+  z16.boolean(),
+  z16.null(),
+  z16.array(z16.union([z16.string().max(255), z16.number()])).min(1).max(50)
 ]);
-var orderBySchema = z15.object({
-  key: z15.string().min(1).max(64).regex(
+var orderBySchema = z16.object({
+  key: z16.string().min(1).max(64).regex(
     METRIC_ALIAS_PATTERN,
     "Must start with a letter or underscore, and contain only letters, digits, and underscores \u2014 every valid output column name already looks like this."
   ).describe(
     "An output column name from this same query \u2014 either a `groupBy` field name, or a metric\u2019s `alias` (or its default name: `${aggregation}` for `count`, `${aggregation}_${field}` otherwise, e.g. `sum_amount`). Must match `^[a-zA-Z_][a-zA-Z0-9_]*$` \u2014 every real output column name already does, so this only ever rejects a value that could never have been one."
   ),
-  direction: z15.enum(["asc", "desc"])
+  direction: z16.enum(["asc", "desc"])
 }).describe(
   "Sort the result rows by any output column \u2014 including the bucket field itself for a `date_bucket` query (e.g. `createdAt`). Omit to get ascending-by-bucket order for a date-bucketed query, or implementation-defined (not guaranteed stable) order otherwise."
 );
-var limitSchema = z15.number().int().min(1).max(METRICS_QUERY_MAX_ROW_LIMIT).default(METRICS_QUERY_DEFAULT_ROW_LIMIT).describe(
+var limitSchema = z16.number().int().min(1).max(METRICS_QUERY_MAX_ROW_LIMIT).default(METRICS_QUERY_DEFAULT_ROW_LIMIT).describe(
   `Max rows to return, ${1}\u2013${METRICS_QUERY_MAX_ROW_LIMIT}, default ${METRICS_QUERY_DEFAULT_ROW_LIMIT}. If more rows matched, \`meta.truncated\` is \`true\` on the response \u2014 narrow the query instead of just raising this.`
 );
-var ChargesQueryFieldSchema = z15.enum([
+var ChargesQueryFieldSchema = z16.enum([
   "status",
   "source",
   "apiKeyId",
@@ -515,124 +548,124 @@ var ChargesQueryFieldSchema = z15.enum([
 ]).describe(
   "A `Charge` field to filter or group by \u2014 see `ChargeStatusSchema` for `status`'s own possible values (charges.md). `source`/`externalRef` are free-form strings your own integration set at creation, not a fixed enum. `escrowReleaserAddress` is `null` for a normal charge \u2014 filter `escrowReleaserAddress` with operator `neq`/value `null` to isolate escrow-configured charges (see `escrow` in charges.md)."
 );
-var ChargesMetricFieldSchema = z15.enum(["amount", "amountReceived", "feePercent", "escrowFeePercent"]).describe(
+var ChargesMetricFieldSchema = z16.enum(["amount", "amountReceived", "feePercent", "escrowFeePercent"]).describe(
   "A `Charge` numeric field to aggregate. `amount`/`amountReceived` are decimal currency amounts (requested vs. actually received \u2014 see `charges.md`). `feePercent` is the platform fee frozen on the charge at creation, e.g. `1.5` means 1.5%. `escrowFeePercent` is the additional escrow-specific fee component, only present on escrow-configured charges \u2014 see `docs/payments.md`."
 );
-var ChargesDateFieldSchema = z15.enum(["createdAt", "confirmedAt", "lastActivityAt", "expiresAt", "escrowReleasedAt"]).describe(
+var ChargesDateFieldSchema = z16.enum(["createdAt", "confirmedAt", "lastActivityAt", "expiresAt", "escrowReleasedAt"]).describe(
   "A `Charge` timestamp to filter/bucket by. `confirmedAt` is `null` until the charge reaches `confirmed` \u2014 a `dateRange`/`date_bucket` on it implicitly excludes every charge that never confirmed. `expiresAt` is always present (set at creation), useful for e.g. finding charges expiring soon or measuring how close to expiry charges typically resolve. `escrowReleasedAt` is `null` until an escrow-configured charge is actually released \u2014 same implicit-exclusion behavior as `confirmedAt`, scoped to escrow charges only."
 );
-var ChargesFilterSchema = z15.object({
+var ChargesFilterSchema = z16.object({
   field: ChargesQueryFieldSchema,
   operator: MetricsFilterOperatorSchema,
   value: MetricsFilterValueSchema
 });
-var ChargesGroupBySchema = z15.union([
-  z15.object({ type: z15.literal("field"), field: ChargesQueryFieldSchema }),
-  z15.object({
-    type: z15.literal("date_bucket"),
+var ChargesGroupBySchema = z16.union([
+  z16.object({ type: z16.literal("field"), field: ChargesQueryFieldSchema }),
+  z16.object({
+    type: z16.literal("date_bucket"),
     field: ChargesDateFieldSchema,
     granularity: MetricsDateGranularitySchema
   })
 ]);
-var ChargesMetricSchema = z15.object({
+var ChargesMetricSchema = z16.object({
   aggregation: MetricsAggregationSchema,
   field: ChargesMetricFieldSchema.optional(),
   alias: metricAliasSchema
 });
-var ChargesMetricsQuerySchema = z15.object({
-  resource: z15.literal("charges"),
+var ChargesMetricsQuerySchema = z16.object({
+  resource: z16.literal("charges"),
   environment: metricsQueryEnvironmentSchema,
-  dateRange: z15.object({
+  dateRange: z16.object({
     field: ChargesDateFieldSchema,
-    from: z15.string().max(64).datetime(),
-    to: z15.string().max(64).datetime()
+    from: z16.string().max(64).datetime(),
+    to: z16.string().max(64).datetime()
   }),
-  groupBy: z15.array(ChargesGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
-  metrics: z15.array(ChargesMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
-  filters: z15.array(ChargesFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
+  groupBy: z16.array(ChargesGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
+  metrics: z16.array(ChargesMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
+  filters: z16.array(ChargesFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
   orderBy: orderBySchema.optional(),
   limit: limitSchema
 });
-var TransactionsQueryFieldSchema = z15.enum(["network", "token", "source", "causedTransition"]).describe(
+var TransactionsQueryFieldSchema = z16.enum(["network", "token", "source", "causedTransition"]).describe(
   "A `Transaction` field to filter or group by \u2014 see `NetworkSchema`/`TokenSchema`/`TransactionSourceSchema` for their possible values. `causedTransition` is `true` only for the transfer(s) that actually flipped the charge's `status` \u2014 a charge paid in installments can have more than one; filtering/grouping on it excludes no-op duplicate transfers (see `TimelineEvent.causedTransition` in charges.md for the full explanation)."
 );
-var TransactionsMetricFieldSchema = z15.enum(["amount"]).describe("The transfer amount, in the charge's `currency` units.");
-var TransactionsDateFieldSchema = z15.enum(["detectedAt"]).describe("When Klappay detected this transfer on-chain (not when it was mined).");
-var TransactionsFilterSchema = z15.object({
+var TransactionsMetricFieldSchema = z16.enum(["amount"]).describe("The transfer amount, in the charge's `currency` units.");
+var TransactionsDateFieldSchema = z16.enum(["detectedAt"]).describe("When Klappay detected this transfer on-chain (not when it was mined).");
+var TransactionsFilterSchema = z16.object({
   field: TransactionsQueryFieldSchema,
   operator: MetricsFilterOperatorSchema,
   value: MetricsFilterValueSchema
 });
-var TransactionsGroupBySchema = z15.union([
-  z15.object({ type: z15.literal("field"), field: TransactionsQueryFieldSchema }),
-  z15.object({
-    type: z15.literal("date_bucket"),
+var TransactionsGroupBySchema = z16.union([
+  z16.object({ type: z16.literal("field"), field: TransactionsQueryFieldSchema }),
+  z16.object({
+    type: z16.literal("date_bucket"),
     field: TransactionsDateFieldSchema,
     granularity: MetricsDateGranularitySchema
   })
 ]);
-var TransactionsMetricSchema = z15.object({
+var TransactionsMetricSchema = z16.object({
   aggregation: MetricsAggregationSchema,
   field: TransactionsMetricFieldSchema.optional(),
   alias: metricAliasSchema
 });
-var TransactionsMetricsQuerySchema = z15.object({
-  resource: z15.literal("transactions"),
+var TransactionsMetricsQuerySchema = z16.object({
+  resource: z16.literal("transactions"),
   environment: metricsQueryEnvironmentSchema,
-  dateRange: z15.object({
+  dateRange: z16.object({
     field: TransactionsDateFieldSchema,
-    from: z15.string().max(64).datetime(),
-    to: z15.string().max(64).datetime()
+    from: z16.string().max(64).datetime(),
+    to: z16.string().max(64).datetime()
   }),
-  groupBy: z15.array(TransactionsGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
-  metrics: z15.array(TransactionsMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
-  filters: z15.array(TransactionsFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
+  groupBy: z16.array(TransactionsGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
+  metrics: z16.array(TransactionsMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
+  filters: z16.array(TransactionsFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
   orderBy: orderBySchema.optional(),
   limit: limitSchema
 });
-var DistributionsQueryFieldSchema = z15.enum(["status", "network", "token", "distributorAddress"]).describe(
+var DistributionsQueryFieldSchema = z16.enum(["status", "network", "token", "distributorAddress"]).describe(
   "A `SplitDistribution` field to filter or group by \u2014 see `SplitDistributionStatusSchema`/`NetworkSchema`/`TokenSchema` for their possible values. `distributorAddress` is the public on-chain address that actually called `distribute()` for a `completed` distribution \u2014 Klappay's own operator address if settled by Klappay's own worker, a community keeper's address if settled externally (or `null` on the rare case that lookup failed), `null` for every non-`completed` status."
 );
-var DistributionsMetricFieldSchema = z15.enum(["attempts"]).describe(
+var DistributionsMetricFieldSchema = z16.enum(["attempts"]).describe(
   "How many times a payout was attempted for this settlement so far \u2014 incremented on every attempt, whether it succeeded or is being retried after failing. A high `attempts` alongside `status: 'failed'` means every automatic retry was exhausted."
 );
-var DistributionsDateFieldSchema = z15.enum(["createdAt", "processingStartedAt", "completedAt"]).describe(
+var DistributionsDateFieldSchema = z16.enum(["createdAt", "processingStartedAt", "completedAt"]).describe(
   "`createdAt`: when this settlement was queued. `processingStartedAt`: when a worker began its most recent attempt at the payout \u2014 `null` until the first attempt, then overwritten on every subsequent retry, so it reflects the *latest* attempt's start, not the first. `completedAt`: when it actually paid out \u2014 `null` until `status` reaches `completed`, so a `dateRange`/`date_bucket` on it implicitly excludes every distribution still pending/processing/failed."
 );
-var DistributionsFilterSchema = z15.object({
+var DistributionsFilterSchema = z16.object({
   field: DistributionsQueryFieldSchema,
   operator: MetricsFilterOperatorSchema,
   value: MetricsFilterValueSchema
 });
-var DistributionsGroupBySchema = z15.union([
-  z15.object({ type: z15.literal("field"), field: DistributionsQueryFieldSchema }),
-  z15.object({
-    type: z15.literal("date_bucket"),
+var DistributionsGroupBySchema = z16.union([
+  z16.object({ type: z16.literal("field"), field: DistributionsQueryFieldSchema }),
+  z16.object({
+    type: z16.literal("date_bucket"),
     field: DistributionsDateFieldSchema,
     granularity: MetricsDateGranularitySchema
   })
 ]);
-var DistributionsMetricSchema = z15.object({
+var DistributionsMetricSchema = z16.object({
   aggregation: MetricsAggregationSchema,
   field: DistributionsMetricFieldSchema.optional(),
   alias: metricAliasSchema
 });
-var DistributionsMetricsQuerySchema = z15.object({
-  resource: z15.literal("distributions"),
+var DistributionsMetricsQuerySchema = z16.object({
+  resource: z16.literal("distributions"),
   environment: metricsQueryEnvironmentSchema,
-  dateRange: z15.object({
+  dateRange: z16.object({
     field: DistributionsDateFieldSchema,
-    from: z15.string().max(64).datetime(),
-    to: z15.string().max(64).datetime()
+    from: z16.string().max(64).datetime(),
+    to: z16.string().max(64).datetime()
   }),
-  groupBy: z15.array(DistributionsGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
-  metrics: z15.array(DistributionsMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
-  filters: z15.array(DistributionsFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
+  groupBy: z16.array(DistributionsGroupBySchema).max(METRICS_QUERY_MAX_GROUP_BY).default([]),
+  metrics: z16.array(DistributionsMetricSchema).min(1).max(METRICS_QUERY_MAX_METRICS),
+  filters: z16.array(DistributionsFilterSchema).max(METRICS_QUERY_MAX_FILTERS).default([]),
   orderBy: orderBySchema.optional(),
   limit: limitSchema
 });
 var ONE_DAY_MS = 24 * 60 * 60 * 1e3;
-var MetricsQuerySchema = z15.discriminatedUnion("resource", [
+var MetricsQuerySchema = z16.discriminatedUnion("resource", [
   ChargesMetricsQuerySchema,
   TransactionsMetricsQuerySchema,
   DistributionsMetricsQuerySchema
@@ -641,7 +674,7 @@ var MetricsQuerySchema = z15.discriminatedUnion("resource", [
   const to = new Date(input.dateRange.to);
   if (from >= to) {
     ctx.addIssue({
-      code: z15.ZodIssueCode.custom,
+      code: z16.ZodIssueCode.custom,
       message: "`dateRange.from` must be before `dateRange.to`.",
       path: ["dateRange", "from"]
     });
@@ -649,7 +682,7 @@ var MetricsQuerySchema = z15.discriminatedUnion("resource", [
   const spanDays = (to.getTime() - from.getTime()) / ONE_DAY_MS;
   if (spanDays > MAX_METRICS_QUERY_DATE_RANGE_DAYS) {
     ctx.addIssue({
-      code: z15.ZodIssueCode.custom,
+      code: z16.ZodIssueCode.custom,
       message: `\`dateRange\` cannot span more than ${MAX_METRICS_QUERY_DATE_RANGE_DAYS} days.`,
       path: ["dateRange", "to"]
     });
@@ -657,7 +690,7 @@ var MetricsQuerySchema = z15.discriminatedUnion("resource", [
   const dateBucketCount = input.groupBy.filter((entry) => entry.type === "date_bucket").length;
   if (dateBucketCount > 1) {
     ctx.addIssue({
-      code: z15.ZodIssueCode.custom,
+      code: z16.ZodIssueCode.custom,
       message: "At most one `date_bucket` entry is allowed in `groupBy`.",
       path: ["groupBy"]
     });
@@ -665,7 +698,7 @@ var MetricsQuerySchema = z15.discriminatedUnion("resource", [
   input.metrics.forEach((metric, index) => {
     if (metric.aggregation !== "count" && metric.field === void 0) {
       ctx.addIssue({
-        code: z15.ZodIssueCode.custom,
+        code: z16.ZodIssueCode.custom,
         message: "`field` is required unless `aggregation` is `count`.",
         path: ["metrics", index, "field"]
       });
@@ -674,7 +707,7 @@ var MetricsQuerySchema = z15.discriminatedUnion("resource", [
   const aliases = input.metrics.map((metric) => metric.alias).filter((alias) => alias !== void 0);
   if (new Set(aliases).size !== aliases.length) {
     ctx.addIssue({
-      code: z15.ZodIssueCode.custom,
+      code: z16.ZodIssueCode.custom,
       message: "Every `metrics[].alias` must be unique.",
       path: ["metrics"]
     });
@@ -683,32 +716,32 @@ var MetricsQuerySchema = z15.discriminatedUnion("resource", [
   input.metrics.forEach((metric, index) => {
     if (metric.alias !== void 0 && reservedNames.has(metric.alias)) {
       ctx.addIssue({
-        code: z15.ZodIssueCode.custom,
+        code: z16.ZodIssueCode.custom,
         message: `\`alias\` "${metric.alias}" collides with a \`groupBy\` field name (or the reserved word "bucket") \u2014 choose a different alias.`,
         path: ["metrics", index, "alias"]
       });
     }
   });
 });
-var MetricsQueryResultRowSchema = z15.record(
-  z15.string(),
-  z15.union([z15.string(), z15.number(), z15.boolean(), z15.null()])
+var MetricsQueryResultRowSchema = z16.record(
+  z16.string(),
+  z16.union([z16.string(), z16.number(), z16.boolean(), z16.null()])
 );
-var MetricsQueryResultSchema = z15.object({
-  data: z15.array(MetricsQueryResultRowSchema),
-  meta: z15.object({
+var MetricsQueryResultSchema = z16.object({
+  data: z16.array(MetricsQueryResultRowSchema),
+  meta: z16.object({
     resource: MetricsResourceSchema,
     environment: EnvironmentSchema,
-    rowCount: z15.number().int().describe("Number of rows in `data`."),
-    truncated: z15.boolean().describe(
+    rowCount: z16.number().int().describe("Number of rows in `data`."),
+    truncated: z16.boolean().describe(
       "`true` if more rows matched than `limit` allowed \u2014 `data` holds only the first `limit`."
     )
   })
 });
 
 // src/webhook-events.ts
-import { z as z16 } from "zod";
-var ChargeWebhookEventTypeSchema = z16.enum([
+import { z as z17 } from "zod";
+var ChargeWebhookEventTypeSchema = z17.enum([
   "charge.created",
   "charge.partially_paid",
   "charge.confirmed",
@@ -722,14 +755,14 @@ var ChargeWebhookEventTypeSchema = z16.enum([
 ]).describe(
   'Note the distinction between `charge.confirmed` and `charge.settled`: `confirmed` means the payment was detected on-chain; `settled` means the merchant\'s wallet actually received the funds \u2014 a separate, later step. Subscribe to `confirmed` if you only need "will I get paid," or `settled` if you need "has the money actually arrived." `charge.overpaid` fires alongside `charge.confirmed`/`charge.partially_paid` whenever the cumulative amount received ends up above `amount` (see `Charge.isOverpaid`). `charge.escrow_released` fires once an escrow-configured charge\'s funds have been moved out of its Safe to the split address by `POST /v1/charges/{id}/release` \u2014 a normal `charge.settled` still follows once the split itself finishes distributing. `charge.escrow_refunded` fires once an escrow-configured charge\'s funds have been moved out of its Safe back to the payer by `POST /v1/charges/{id}/refund` \u2014 mutually exclusive with `charge.escrow_released`, an escrow charge only ever emits one of the two. Every event in this category carries the full `Charge` object as `data`.'
 );
-var WebhookDeliveryEventTypeSchema = z16.enum(["webhook.delivery_failed", "webhook.delivery_recovered", "webhook.endpoint_unhealthy"]).describe(
+var WebhookDeliveryEventTypeSchema = z17.enum(["webhook.delivery_failed", "webhook.delivery_recovered", "webhook.endpoint_unhealthy"]).describe(
   "Meta-events about the health of your own webhook endpoints \u2014 useful for monitoring without polling `GET /v1/webhooks/{id}/deliveries`. `webhook.endpoint_unhealthy` fires once when a webhook's failure rate over the trailing 24h crosses 20%, and `webhook.delivery_recovered` fires once when a delivery to that webhook next succeeds. `data` for every event in this category: `{ webhookId, url, failureRatio? }` (`failureRatio` only present on `webhook.endpoint_unhealthy`)."
 );
-var WebhookEventTypeSchema = z16.union([
+var WebhookEventTypeSchema = z17.union([
   ChargeWebhookEventTypeSchema,
   WebhookDeliveryEventTypeSchema
 ]);
-var WebhookCategorySchema = z16.enum(["payments", "webhooks"]).describe(
+var WebhookCategorySchema = z17.enum(["payments", "webhooks"]).describe(
   "Subscribe to every event in a category via `eventCategories` instead of listing events one by one \u2014 new events added to a category later arrive automatically, no subscription update needed."
 );
 function buildCategoryMap() {
@@ -759,101 +792,103 @@ var TriggerableChargeEventSchema = ChargeWebhookEventTypeSchema.exclude([
 );
 
 // src/webhooks.ts
-import { z as z17 } from "zod";
+import { z as z18 } from "zod";
 var WEBHOOK_EVENTS_WILDCARD = "*";
-var CreateWebhookSchema = z17.object({
-  url: z17.string().max(2048).url().describe(
+var CreateWebhookSchema = z18.object({
+  url: z18.string().max(2048).url().describe(
     "Must be HTTPS and resolve to a public address \u2014 private/internal IPs are rejected."
   ),
-  events: z17.array(z17.union([WebhookEventTypeSchema, z17.literal(WEBHOOK_EVENTS_WILDCARD)])).max(Object.keys(EVENT_CATEGORY_MAP).length + 1).default([]).describe(
+  events: z18.array(z18.union([WebhookEventTypeSchema, z18.literal(WEBHOOK_EVENTS_WILDCARD)])).max(Object.keys(EVENT_CATEGORY_MAP).length + 1).default([]).describe(
     'Individual event types to receive, or `"*"` for every event (combine with `excludeEvents` to opt back out of specific ones). Omit in favor of `eventCategories` if you want whole categories instead.'
   ),
-  eventCategories: z17.array(WebhookCategorySchema).max(WebhookCategorySchema.options.length).default([]).describe(
+  eventCategories: z18.array(WebhookCategorySchema).max(WebhookCategorySchema.options.length).default([]).describe(
     "Subscribe to every event in these categories. At least one of `events` or `eventCategories` is required."
   ),
-  excludeEvents: z17.array(WebhookEventTypeSchema).max(Object.keys(EVENT_CATEGORY_MAP).length).default([]).describe(
+  excludeEvents: z18.array(WebhookEventTypeSchema).max(Object.keys(EVENT_CATEGORY_MAP).length).default([]).describe(
     'Event types to exclude even if selected via `events: ["*"]` or `eventCategories`.'
   )
 }).refine((v) => v.events.length > 0 || v.eventCategories.length > 0, {
   message: "must select at least one event via `events` or `eventCategories`",
   path: ["events"]
 });
-var WebhookSchema = z17.object({
-  id: z17.string(),
+var WebhookSchema = z18.object({
+  id: z18.string(),
   environment: EnvironmentSchema.nullable().describe(
     "Which environment's API key created this webhook \u2014 `live` or `test`. Every event is only ever delivered to a webhook whose `environment` matches the event's own (or to a webhook with `environment: null`, which receives every environment \u2014 the case for every webhook created before this field existed)."
   ),
-  url: z17.string(),
-  events: z17.array(WebhookEventTypeSchema),
-  eventCategories: z17.array(WebhookCategorySchema),
-  excludeEvents: z17.array(WebhookEventTypeSchema),
-  isWildcard: z17.boolean(),
-  secret: z17.string().describe(
+  url: z18.string(),
+  events: z18.array(WebhookEventTypeSchema),
+  eventCategories: z18.array(WebhookCategorySchema),
+  excludeEvents: z18.array(WebhookEventTypeSchema),
+  isWildcard: z18.boolean(),
+  secret: z18.string().describe(
     "The signing secret, used to verify the `X-Klappay-Signature` header on every delivery. Returned in full only this once \u2014 store it now, it is not recoverable afterward. Header format: `t=<unix-seconds>,v1=<hex-encoded HMAC-SHA256>`. Compute the expected signature as `HMAC-SHA256(secret, \"${t}.${raw request body}\")` (hex-encoded) and compare it to `v1` using a constant-time comparison; as a replay-protection measure, also reject if `t` is too far from the current time \u2014 Klappay does not enforce or check any particular tolerance server-side, so the exact threshold is entirely the receiver's own policy call. An official SDK's `constructEvent()`/`verifySignature()` do this for you, defaulting to a 300-second tolerance, overridable via `constructEvent`'s `toleranceSeconds` option \u2014 see github.com/klappay for available SDKs."
   ),
-  createdAt: z17.string().datetime()
+  createdAt: z18.string().datetime()
 });
 var WebhookListItemSchema = WebhookSchema.omit({ secret: true }).extend({
-  hint: z17.string().describe("A truncated, safe-to-display form of the secret (e.g. `whsec_...ab12`).")
+  hint: z18.string().describe("A truncated, safe-to-display form of the secret (e.g. `whsec_...ab12`).")
 });
-var WebhookPayloadSchema = z17.object({
-  id: z17.string().describe(
+var WebhookPayloadSchema = z18.object({
+  id: z18.string().describe(
     "Unique id for this specific delivery \u2014 also sent as the `X-Klappay-Delivery` header."
   ),
   event: WebhookEventTypeSchema,
-  createdAt: z17.string().datetime(),
-  data: z17.unknown().describe(
+  createdAt: z18.string().datetime(),
+  data: z18.unknown().describe(
     "Event-specific data. Charge events (`charge.*`) carry the full `Charge` object; webhook-delivery events carry a smaller, event-specific object \u2014 see `WebhookEventDataMap`/`TypedWebhookPayload` for the exact shape per event, or docs/webhooks.md."
   )
 });
-var WebhookDeliveryStatusSchema = z17.enum(["pending", "delivered", "failed"]);
-var WebhookDeliverySchema = z17.object({
-  id: z17.string(),
-  webhookId: z17.string(),
+var WebhookDeliveryStatusSchema = z18.enum(["pending", "delivered", "failed"]);
+var WebhookDeliverySchema = z18.object({
+  id: z18.string(),
+  webhookId: z18.string(),
   event: WebhookEventTypeSchema,
   status: WebhookDeliveryStatusSchema.describe(
     "`pending`: still retrying. `delivered`: got a 2xx response. `failed`: retries exhausted (5 attempts over ~24h) \u2014 use `POST /v1/webhooks/{id}/deliveries/{deliveryId}/retry` to try again manually."
   ),
-  attempts: z17.number(),
-  responseCode: z17.number().nullable().describe(
+  attempts: z18.number(),
+  responseCode: z18.number().nullable().describe(
     "HTTP status your endpoint returned on the most recent attempt. `null` if every attempt failed to connect at all."
   ),
-  nextRetryAt: z17.string().datetime().nullable(),
-  deliveredAt: z17.string().datetime().nullable(),
-  createdAt: z17.string().datetime()
+  nextRetryAt: z18.string().datetime().nullable(),
+  deliveredAt: z18.string().datetime().nullable(),
+  createdAt: z18.string().datetime()
 });
 var ListWebhookDeliveriesSchema = PaginationQuerySchema;
 var PaginatedWebhookDeliveriesSchema = paginatedSchema(WebhookDeliverySchema);
 
 // src/recipients.ts
-import { z as z18 } from "zod";
-var EVM_ADDRESS_REGEX = /^0x[0-9a-fA-F]{40}$/;
-var CreateRecipientSchema = z18.object({
-  address: z18.string().regex(EVM_ADDRESS_REGEX, "must be a 20-byte hex address").describe("EVM address to register as a trusted split recipient for your organization."),
-  label: z18.string().min(1).max(64).optional().describe('Free-form label for your own bookkeeping (e.g. `"supplier"`) \u2014 never interpreted.')
+import { z as z19 } from "zod";
+var CreateRecipientSchema = z19.object({
+  address: SplitAddressSchema.describe(
+    "Address to register as a trusted split recipient for your organization \u2014 an EVM 0x... address or a TRON T... address."
+  ),
+  label: z19.string().min(1).max(64).optional().describe('Free-form label for your own bookkeeping (e.g. `"supplier"`) \u2014 never interpreted.')
 });
-var RecipientSchema = z18.object({
-  id: z18.string().describe(
+var RecipientSchema = z19.object({
+  id: z19.string().describe(
     "Klappay-generated id, e.g. `rc_...` \u2014 this, not the raw address, is what a charge's `splitRecipients[].recipientId` references."
   ),
   environment: EnvironmentSchema,
-  address: z18.string(),
-  label: z18.string().nullable(),
-  payout: z18.boolean().describe(
+  address: z19.string(),
+  label: z19.string().nullable(),
+  payout: z19.boolean().describe(
     "Whether this recipient is eligible to be used as an API key's `payoutAddress` (in addition to being referenceable in a split, which every non-revoked recipient already is). Set via `PATCH /v1/recipients/{id}` \u2014 requires the `recipients:manage_payout` scope, deliberately separate from `recipients:write`."
   ),
-  createdAt: z18.string().datetime()
+  createdAt: z19.string().datetime()
 });
-var SetRecipientPayoutSchema = z18.object({
-  payout: z18.boolean().describe("New payout-eligibility value for this recipient.")
+var PaginatedRecipientsSchema = paginatedSchema(RecipientSchema);
+var SetRecipientPayoutSchema = z19.object({
+  payout: z19.boolean().describe("New payout-eligibility value for this recipient.")
 });
 
 // src/timeline.ts
-import { z as z19 } from "zod";
-var TransactionSourceSchema = z19.enum(["contract_watcher", "reconciliation_job", "sandbox"]).describe(
-  "How this transfer was detected: `contract_watcher` (the normal path \u2014 a real-time on-chain event subscription), `reconciliation_job` (a fallback poller caught it after the watcher missed or delayed it), or `sandbox` (simulated via `POST /v1/sandbox/charges/{id}/trigger`, no real on-chain transfer)."
+import { z as z20 } from "zod";
+var TransactionSourceSchema = z20.enum(["contract_watcher", "reconciliation_job", "sandbox", "tron_watcher"]).describe(
+  "How this transfer was detected: `contract_watcher` (the normal path for EVM networks \u2014 a real-time WebSocket log subscription), `tron_watcher` (the TRON equivalent \u2014 a real-time ZeroMQ event subscription against a self-hosted node, a different underlying mechanism since TRON has no WebSocket log subscription), `reconciliation_job` (a fallback poller caught it after the watcher missed or delayed it), or `sandbox` (simulated via `POST /v1/sandbox/charges/{id}/trigger`, no real on-chain transfer)."
 );
-var TimelineEventTypeSchema = z19.enum([
+var TimelineEventTypeSchema = z20.enum([
   "charge.created",
   "charge.expired",
   "transaction.detected",
@@ -865,13 +900,13 @@ var TimelineEventTypeSchema = z19.enum([
 ]).describe(
   "`charge.created`: the charge was created. `charge.expired`: `expiresAt` passed with no full payment. `transaction.detected`: a raw on-chain transfer was seen (see the `event`-shaped fields below for details \u2014 a charge can have more than one, e.g. a partial payment followed by the rest). `split.distributed`: a payout to the merchant completed on-chain, for one contributing `(token, network)` pair \u2014 a charge settled across more than one pair emits one of these per pair (see the `token`/`network` fields below). `webhook.dispatched`/`webhook.delivered`/`webhook.failed`: one specific delivery *attempt* for one webhook subscription \u2014 `failed` here means this single attempt failed, not that all retries were exhausted (see `WebhookDeliveryStatusSchema` for the exhausted-all-retries state). `transfer.reclaimed`: an on-chain transfer was detected but never reached its network's required confirmation depth before vanishing (reverted, or dropped from the canonical chain) \u2014 see `txHash` below for which transfer."
 );
-var TimelineEventSchema = z19.object({
+var TimelineEventSchema = z20.object({
   type: TimelineEventTypeSchema,
-  at: z19.string().datetime(),
-  txHash: z19.string().optional().describe(
+  at: z20.string().datetime(),
+  txHash: z20.string().optional().describe(
     "Present for `transaction.detected`, `split.distributed`, and `transfer.reclaimed` events only."
   ),
-  amount: z19.number().optional().describe(
+  amount: z20.number().optional().describe(
     "Present for `transaction.detected` events only \u2014 the amount that specific transfer carried."
   ),
   source: TransactionSourceSchema.optional().describe(
@@ -883,70 +918,70 @@ var TimelineEventSchema = z19.object({
   network: NetworkSchema.optional().describe(
     "Present for `transaction.detected` and `split.distributed` events \u2014 which network this specific transfer, or settlement, used."
   ),
-  causedTransition: z19.boolean().optional().describe(
+  causedTransition: z20.boolean().optional().describe(
     "Present for `transaction.detected` events only. `true` if this specific transfer changed the charge's status (e.g. PENDING\u2192CONFIRMED) \u2014 a charge paid in installments can have more than one such event."
   ),
   event: WebhookEventTypeSchema.optional().describe(
     "Present for `webhook.*` events only \u2014 which event type this delivery was for."
   ),
-  responseCode: z19.number().nullable().optional().describe(
+  responseCode: z20.number().nullable().optional().describe(
     "Present for `webhook.*` events only \u2014 HTTP status your endpoint returned, or `null` if the request never connected."
   ),
-  attempts: z19.number().optional().describe(
+  attempts: z20.number().optional().describe(
     "Present for `webhook.*` events only \u2014 how many delivery attempts have been made so far."
   )
 });
 
 // src/health.ts
-import { z as z20 } from "zod";
-var HealthSchema = z20.object({
-  status: z20.enum(["ok", "error"]).describe(
+import { z as z21 } from "zod";
+var HealthSchema = z21.object({
+  status: z21.enum(["ok", "error"]).describe(
     "`error` when the database connectivity check fails \u2014 the HTTP status code mirrors this (503 instead of 200), so a plain uptime check (not just a JSON-aware one) still catches a DB outage."
   ),
-  version: z20.string(),
-  timestamp: z20.string().datetime(),
-  db: z20.enum(["ok", "error"]).describe("Result of a real database connectivity check, not just a process-alive check."),
-  pendingWebhooks: z20.number().describe("Count of webhook deliveries still awaiting a successful attempt."),
-  oldestPendingChargeAgeSeconds: z20.number().nullable().describe("Age of the oldest still-unpaid charge, in seconds. `null` if there are none."),
-  lastContractWatcherEventAgeSeconds: z20.number().nullable().describe(
+  version: z21.string(),
+  timestamp: z21.string().datetime(),
+  db: z21.enum(["ok", "error"]).describe("Result of a real database connectivity check, not just a process-alive check."),
+  pendingWebhooks: z21.number().describe("Count of webhook deliveries still awaiting a successful attempt."),
+  oldestPendingChargeAgeSeconds: z21.number().nullable().describe("Age of the oldest still-unpaid charge, in seconds. `null` if there are none."),
+  lastContractWatcherEventAgeSeconds: z21.number().nullable().describe(
     "Seconds since the last on-chain payment notification was received \u2014 a cheap signal for whether payment detection is currently working. `null` if none have ever been received."
   )
 });
 
 // src/sandbox.ts
-import { z as z21 } from "zod";
-var SandboxTriggerSchema = z21.object({
+import { z as z22 } from "zod";
+var SandboxTriggerSchema = z22.object({
   event: TriggerableChargeEventSchema,
-  amount: z21.number().positive().max(CHARGE_AMOUNT_MAX).optional().describe(
+  amount: z22.number().positive().max(CHARGE_AMOUNT_MAX).optional().describe(
     "Used with `charge.partially_paid` (amount to simulate as received so far \u2014 must be less than the charge amount, defaults to half of it if omitted) and with `charge.overpaid` (amount received \u2014 must be greater than the charge amount, defaults to 1.5x it if omitted). Ignored for every other event."
   )
 });
 
 // src/capabilities.ts
-import { z as z22 } from "zod";
-var CapabilitiesSchema = z22.object({
-  acceptedPayments: z22.array(AcceptedPaymentSchema).describe(
+import { z as z23 } from "zod";
+var CapabilitiesSchema = z23.object({
+  acceptedPayments: z23.array(AcceptedPaymentSchema).describe(
     "Every `(token, network)` pair enabled for your environment right now, using the same deployment metadata and availability policy as `POST /v1/charges`. Cataloged but disabled pairs are omitted. Availability can change between requests, so handle `422 token_not_supported` when creating a charge. Use this to build a picker UI instead of hardcoding the matrix client-side."
   )
 });
 
 // src/swap.ts
-import { z as z23 } from "zod";
-var CreateSwapQuoteSchema = z23.object({
+import { z as z24 } from "zod";
+var CreateSwapQuoteSchema = z24.object({
   inputToken: AltTokenSchema.describe(
     "Which alt-cryptocurrency the payer wants to send \u2014 must be one of this charge's `swapAlternatives`, or `422 token_not_supported`."
   ),
   inputNetwork: NetworkSchema.describe(
     "Which network the payer will send `inputToken` on. Also picks which of this charge's `acceptedPayments` pairs the swap resolves to \u2014 a charge accepting USDC on both Base and Optimism resolves to whichever `inputNetwork` you pass. If the charge accepts more than one token on that same network, Klappay applies its token preference among enabled pairs the charge accepts. BNB Chain payments are currently disabled for both cataloged Binance-Peg tokens."
   ),
-  takerAddress: z23.string().regex(/^0x[0-9a-fA-F]{40}$/, "must be a 20-byte hex address").describe(
+  takerAddress: z24.string().regex(/^0x[0-9a-fA-F]{40}$/, "must be a 20-byte hex address").describe(
     "The payer's own wallet address \u2014 the account that will sign and submit the swap transaction. Not validated against anything else; any well-formed address is accepted, since Klappay never custodies these funds."
   )
 });
-var SwapQuoteSchema = z23.object({
+var SwapQuoteSchema = z24.object({
   inputToken: AltTokenSchema,
   inputNetwork: NetworkSchema,
-  inputAmount: z23.number().describe(
+  inputAmount: z24.number().describe(
     "The ceiling of `inputToken` the payer needs available to sign for, in whole units (not wei/base units) \u2014 not necessarily the exact final cost. Any `inputToken` beyond what the swap actually needs (price moved favorably, less slippage than budgeted) is swapped back and refunded to the payer automatically, in the same transaction \u2014 never a separate step or a Klappay-side refund."
   ),
   inputAmountExact: ExactAmountSchema.optional().describe(
@@ -956,20 +991,20 @@ var SwapQuoteSchema = z23.object({
     "Which of this charge's `acceptedPayments` tokens the swap resolves to."
   ),
   outputNetwork: NetworkSchema,
-  outputAmount: z23.number().describe(
+  outputAmount: z24.number().describe(
     "The stablecoin amount requested by this quote, in whole `outputToken` units. Covers the remaining balance, rounded up only if the selected token cannot represent it exactly. This legacy JSON number can lose precision; use `outputAmountExact` for arithmetic. The actual transfer is verified on-chain before crediting the charge."
   ),
   outputAmountExact: ExactAmountSchema.optional().describe(
     "Exact stablecoin amount requested by this quote, in whole `outputToken` units as a nonnegative decimal string with no scientific notation. Covers the remaining charge balance and rounds upward only to the smallest representable token unit when needed. Optional for compatibility with older API responses."
   ),
-  fees: z23.object({
-    klappayFee: z23.number().describe(
+  fees: z24.object({
+    klappayFee: z24.number().describe(
       "Klappay's own swap fee (1% today), in `outputToken` units \u2014 paid by the payer and already reflected in `inputAmount`, separate from the merchant's own `feePercent`. Never subtracted from `outputAmount`."
     ),
     klappayFeeExact: ExactAmountSchema.optional().describe(
       "Exact Klappay swap fee in whole `outputToken` units as a nonnegative decimal string with at most 18 fractional digits and no scientific notation. Already reflected in the input ceiling. Optional for compatibility with older API responses."
     ),
-    zeroExFee: z23.number().nullable().describe(
+    zeroExFee: z24.number().nullable().describe(
       "0x's own protocol fee for this specific token pair, in `outputToken` units, or `null` when this pair isn't currently one 0x charges on. Paid by the payer and already reflected in `inputAmount`, never subtracted from `outputAmount` \u2014 Klappay never sees this fee, it goes straight to 0x."
     ),
     zeroExFeeExact: ExactAmountSchema.nullable().optional().describe(
@@ -978,19 +1013,19 @@ var SwapQuoteSchema = z23.object({
   }).describe(
     "Every fee the payer is charged for using swap-to-pay, broken out by who collects it \u2014 both already reflected in `inputAmount`, shown here separately for transparency. Neither ever reduces `outputAmount`."
   ),
-  expiresAt: z23.string().datetime().describe(
+  expiresAt: z24.string().datetime().describe(
     "When this quote's price is no longer safely valid \u2014 a rough guide for the payer's UI countdown only. The actual price guarantee is enforced on-chain by the swap transaction itself (a signed Permit2 deadline, or a minimum-output check for a native-currency sell), not by this timestamp \u2014 submitting after it expires either reverts on-chain or simply gets re-quoted at the current price, never silently executes at a stale rate."
   ),
-  transaction: z23.object({
-    to: z23.string().describe("Contract address the payer's wallet must send this transaction to."),
-    data: z23.string().describe("Calldata \u2014 opaque, must be sent unmodified."),
-    value: z23.string().describe(
+  transaction: z24.object({
+    to: z24.string().describe("Contract address the payer's wallet must send this transaction to."),
+    data: z24.string().describe("Calldata \u2014 opaque, must be sent unmodified."),
+    value: z24.string().describe(
       "Native currency (ETH/BNB/POL/AVAX) to attach, in wei \u2014 `\"0\"` when `inputToken` isn't this network's native currency."
     )
   }).describe(
     "Pass this directly to the payer's wallet (e.g. viem/ethers `sendTransaction`) \u2014 Klappay never touches the payer's private key or submits anything on their behalf. If `permit2` is present on this response, sign that first and append the signature to this `data` before sending; if `permit2` is absent, send `transaction` as-is with no extra step."
   ),
-  permit2: z23.object({ eip712: z23.record(z23.unknown()) }).nullish().describe(
+  permit2: z24.object({ eip712: z24.record(z24.unknown()) }).nullish().describe(
     "Present only when `inputToken` is an ERC-20 (BTC, LINK, or a chain-specific blue chip like ARB/OP/CBETH) \u2014 the payer's wallet must sign this EIP-712 message and append the signature to `transaction.data` before sending, since an ERC-20 sell needs a Permit2 allowance signature that a native-currency sell doesn't. `null` (never omitted, in a genuine 0x-backed quote) when `inputToken` is a network's own native currency (ETH/BNB/POL/AVAX) \u2014 `transaction` is then ready to sign and send directly, no extra step."
   )
 });
@@ -1054,6 +1089,7 @@ export {
   MetricsQuerySchema,
   MetricsResourceSchema,
   NETWORK_EXPLORERS,
+  NETWORK_FAMILIES,
   NETWORK_LABELS,
   NetworkSchema,
   OPERATIONAL_NETWORKS,
@@ -1062,6 +1098,7 @@ export {
   PAGINATION_LIMIT_MIN,
   PaginatedChargesSchema,
   PaginatedPendingDistributionsSchema,
+  PaginatedRecipientsSchema,
   PaginatedWebhookDeliveriesSchema,
   PaginationQuerySchema,
   PendingDistributionEventSchema,
@@ -1073,6 +1110,7 @@ export {
   SandboxTriggerSchema,
   SetRecipientPayoutSchema,
   SettlementStatusSchema,
+  SplitAddressSchema,
   SplitDistributionStatusSchema,
   SplitRecipientInputSchema,
   SplitRecipientSchema,
@@ -1099,10 +1137,15 @@ export {
   WebhookListItemSchema,
   WebhookPayloadSchema,
   WebhookSchema,
+  addressesEqual,
   findConflictingScopes,
   getTokenDeployment,
+  isEvmAddress,
   isPaymentDeploymentEnabled,
+  isSplitAddress,
+  isTronAddress,
   listSwapAlternatives,
-  paginatedSchema
+  paginatedSchema,
+  tronAddress
 };
 //# sourceMappingURL=index.mjs.map