@cdx-forge/di-typescript-sdk 0.1.0-beta.1 → 1.0.0

package/dist/src/auth.js

@@ -5,6 +5,24 @@
  * Supports client_credentials, password, refresh_token, and static token flows.
  */
 import { CandescentError, errorForStatus } from "./errors.js";
+function assertCandescentBaseUrl(baseUrl) {
+    const normalized = baseUrl.replace(/\/$/, "");
+    let parsed;
+    try {
+        parsed = new URL(normalized);
+    }
+    catch {
+        throw new CandescentError("Invalid API base URL");
+    }
+    if (parsed.protocol !== "https:") {
+        throw new CandescentError("API base URL must use HTTPS");
+    }
+    const host = parsed.hostname.toLowerCase();
+    if (host !== "api.candescent.com" && !host.endsWith(".candescent.com")) {
+        throw new CandescentError(`Disallowed API base URL host: ${parsed.hostname}`);
+    }
+    return normalized;
+}
 export var TokenEndpoint;
 (function (TokenEndpoint) {
     TokenEndpoint["V1_LEGACY"] = "/v1/oauth/token";
@@ -14,16 +32,16 @@ export class ClientCredentialsProvider {
     clientId;
     clientSecret;
     institutionId;
-    baseUrl;
     cached = null;
     refreshing = null;
     endpoint;
+    baseUrl;
     constructor(clientId, clientSecret, institutionId, baseUrl, endpoint) {
         this.clientId = clientId;
         this.clientSecret = clientSecret;
         this.institutionId = institutionId;
-        this.baseUrl = baseUrl;
         this.endpoint = endpoint ?? TokenEndpoint.V2_CURRENT;
+        this.baseUrl = assertCandescentBaseUrl(baseUrl);
     }
     async getToken() {
         if (this.cached && Date.now() < this.cached.expiresAt - 30_000) {
@@ -46,8 +64,9 @@ export class ClientCredentialsProvider {
     async revokeToken() {
         if (!this.cached || this.endpoint !== TokenEndpoint.V2_CURRENT)
             return;
+        const safeBase = assertCandescentBaseUrl(this.baseUrl);
         try {
-            await fetch(`${this.baseUrl}/oauth2/v1/revoke`, {
+            await fetch(`${safeBase}/oauth2/v1/revoke`, {
                 method: "DELETE",
                 headers: {
                     Authorization: this.basicAuth(),
@@ -67,7 +86,8 @@ export class ClientCredentialsProvider {
         return this.endpoint === TokenEndpoint.V1_LEGACY ? "di_fiid" : "institutionId";
     }
     async fetchToken(body) {
-        const url = `${this.baseUrl}${this.endpoint}`;
+        const safeBase = assertCandescentBaseUrl(this.baseUrl);
+        const url = `${safeBase}${this.endpoint}`;
         const tidHeader = this.endpoint === TokenEndpoint.V1_LEGACY ? "di_tid" : "transactionid";
         const headers = {
             Authorization: this.basicAuth(),
@@ -85,7 +105,7 @@ export class ClientCredentialsProvider {
             if (resp.status === 401 || resp.status === 403) {
                 throw errorForStatus(resp.status, resp.headers, text, resp);
             }
-            throw new CandescentError(`Token request failed (${resp.status}): ${text}`);
+            throw new CandescentError(`Token request failed (HTTP ${resp.status})`);
         }
         const text = await resp.text();
         const contentType = resp.headers.get("content-type") ?? "";
@@ -97,10 +117,10 @@ export class ClientCredentialsProvider {
             data = JSON.parse(text);
         }
         catch {
-            throw new CandescentError(`Token response is not valid JSON: ${text.slice(0, 300)}`);
+            throw new CandescentError("Token response is not valid JSON");
         }
         if (!data.access_token) {
-            throw new CandescentError(`Token response missing access_token: ${text.slice(0, 300)}`);
+            throw new CandescentError("Token response missing access_token");
         }
         return {
             token: data.access_token,
@@ -112,14 +132,22 @@ export class ClientCredentialsProvider {
     }
     parseXmlToken(xml) {
         const extract = (tag) => {
-            const re = new RegExp(`<${tag}>([^<]*)</${tag}>`);
-            return re.exec(xml)?.[1] || undefined;
+            const open = `<${tag}>`;
+            const close = `</${tag}>`;
+            const start = xml.indexOf(open);
+            if (start === -1)
+                return undefined;
+            const valueStart = start + open.length;
+            const end = xml.indexOf(close, valueStart);
+            if (end === -1)
+                return undefined;
+            return xml.slice(valueStart, end);
         };
         const token = extract("access_token");
         if (!token) {
-            throw new CandescentError(`V1 token response missing <access_token>: ${xml.slice(0, 300)}`);
+            throw new CandescentError("V1 token response missing <access_token>");
         }
-        const expiresIn = parseInt(extract("expires_in") ?? "1800", 10);
+        const expiresIn = Number.parseInt(extract("expires_in") ?? "1800", 10);
         return {
             token,
             expiresAt: Date.now() + expiresIn * 1000,
@@ -127,7 +155,8 @@ export class ClientCredentialsProvider {
         };
     }
     basicAuth() {
-        return "Basic " + btoa(`${this.clientId}:${this.clientSecret}`);
+        return ("Basic " +
+            Buffer.from(this.clientId + ":" + this.clientSecret, "utf8").toString("base64"));
     }
 }
 /**
@@ -187,8 +216,9 @@ export class PasswordGrantProvider extends ClientCredentialsProvider {
             this.pwRefreshing = null;
             return;
         }
+        const safeBase = assertCandescentBaseUrl(this.baseUrl);
         try {
-            await fetch(`${this.baseUrl}/oauth2/v1/revoke`, {
+            await fetch(`${safeBase}/oauth2/v1/revoke`, {
                 method: "DELETE",
                 headers: {
                     Authorization: this.basicAuth(),
@@ -224,3 +254,4 @@ export class StaticTokenProvider {
         return this.token;
     }
 }
+//# sourceMappingURL=auth.js.map

package/dist/src/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/auth.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE9D,SAAS,uBAAuB,CAAC,OAAe;IAC9C,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9C,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,eAAe,CAAC,sBAAsB,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,eAAe,CAAC,6BAA6B,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,IAAI,KAAK,oBAAoB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,eAAe,CAAC,iCAAiC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,CAAN,IAAY,aAGX;AAHD,WAAY,aAAa;IACvB,8CAA6B,CAAA;IAC7B,gDAA+B,CAAA;AACjC,CAAC,EAHW,aAAa,KAAb,aAAa,QAGxB;AAiBD,MAAM,OAAO,yBAAyB;IAOjB;IACA;IACE;IARb,MAAM,GAAuB,IAAI,CAAC;IAClC,UAAU,GAAgC,IAAI,CAAC;IAC9C,QAAQ,CAAgB;IACd,OAAO,CAAS;IAEnC,YACmB,QAAgB,EAChB,YAAoB,EAClB,aAAqB,EACxC,OAAe,EACf,QAAwB;QAJP,aAAQ,GAAR,QAAQ,CAAQ;QAChB,iBAAY,GAAZ,YAAY,CAAQ;QAClB,kBAAa,GAAb,aAAa,CAAQ;QAIxC,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,aAAa,CAAC,UAAU,CAAC;QACrD,IAAI,CAAC,OAAO,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,GAAG,MAAM,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QAC5C,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,+BAA+B,CAAC,CAAC;QACnE,IAAI,CAAC;YACH,IAAI,CAAC,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACpC,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACzB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,KAAK,aAAa,CAAC,UAAU;YAAE,OAAO;QACvE,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,GAAG,QAAQ,mBAAmB,EAAE;gBAC1C,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE;oBACP,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE;oBAC/B,cAAc,EAAE,mCAAmC;oBACnD,aAAa,EAAE,IAAI,CAAC,aAAa;oBACjC,aAAa,EAAE,MAAM,CAAC,UAAU,EAAE;iBACnC;gBACD,IAAI,EAAE,SAAS,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aACvD,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAES,QAAQ;QAChB,OAAO,IAAI,CAAC,QAAQ,KAAK,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC;IACjF,CAAC;IAES,KAAK,CAAC,UAAU,CAAC,IAAY;QACrC,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,GAAG,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,KAAK,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC;QACzF,MAAM,OAAO,GAA2B;YACtC,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE;YAC/B,cAAc,EAAE,mCAAmC;YACnD,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,EAAE,IAAI,CAAC,aAAa;YACrC,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,UAAU,EAAE;SACjC,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC5B,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI;SACL,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC/C,MAAM,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,IAAI,eAAe,CAAC,8BAA8B,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAE3D,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,aAAa,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACnH,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAED,IAAI,IAAS,CAAC;QACd,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,eAAe,CAAC,kCAAkC,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,eAAe,CAAC,qCAAqC,CAAC,CAAC;QACnE,CAAC;QACD,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,YAAY;YACxB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,IAAI;YAChE,SAAS,EAAE,IAAI,CAAC,UAAU,IAAI,QAAQ;YACtC,YAAY,EAAE,IAAI,CAAC,aAAa;YAChC,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,GAAW;QAC/B,MAAM,OAAO,GAAG,CAAC,GAAW,EAAsB,EAAE;YAClD,MAAM,IAAI,GAAG,IAAI,GAAG,GAAG,CAAC;YACxB,MAAM,KAAK,GAAG,KAAK,GAAG,GAAG,CAAC;YAC1B,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,KAAK,KAAK,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAC;YACnC,MAAM,UAAU,GAAG,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;YACvC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAC3C,IAAI,GAAG,KAAK,CAAC,CAAC;gBAAE,OAAO,SAAS,CAAC;YACjC,OAAO,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QACpC,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,eAAe,CAAC,0CAA0C,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,MAAM,EAAE,EAAE,CAAC,CAAC;QACvE,OAAO;YACL,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI;YACxC,SAAS,EAAE,QAAQ;SACpB,CAAC;IACJ,CAAC;IAES,SAAS;QACjB,OAAO,CACL,QAAQ;YACR,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,GAAG,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAChF,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,qBAAsB,SAAQ,yBAAyB;IAO/C;IACA;IAPX,QAAQ,GAAuB,IAAI,CAAC;IACpC,YAAY,GAAgC,IAAI,CAAC;IAEzD,YACE,QAAgB,EAChB,YAAoB,EACH,QAAgB,EAChB,QAAgB,EACjC,aAAqB,EACrB,OAAe,EACf,QAAwB;QAExB,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAN/C,aAAQ,GAAR,QAAQ,CAAQ;QAChB,aAAQ,GAAR,QAAQ,CAAQ;IAMnC,CAAC;IAEQ,KAAK,CAAC,QAAQ;QACrB,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,MAAM,EAAE,CAAC;YACnE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACvB,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,EAAE,CAAC;IAC7B,CAAC;IAEQ,KAAK,CAAC,YAAY;QACzB,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC;QAChD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,IAAI,CAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC;YACxC,OAAO,IAAI,CAAC,QAAQ,CAAC;QACvB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,IAAI,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,CAAC,UAAU,CAC1B,0CAA0C,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAC3F,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,iCAAiC;YACnC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CACpB,gCAAgC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAClH,CAAC;IACJ,CAAC;IAEQ,KAAK,CAAC,WAAW;QACxB,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,aAAa,CAAC,UAAU,EAAE,CAAC;YACjE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,OAAO;QACT,CAAC;QACD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,GAAG,QAAQ,mBAAmB,EAAE;gBAC1C,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE;oBACP,aAAa,EAAE,IAAI,CAAC,SAAS,EAAE;oBAC/B,cAAc,EAAE,mCAAmC;oBACnD,aAAa,EAAE,IAAI,CAAC,aAAa;oBACjC,aAAa,EAAE,MAAM,CAAC,UAAU,EAAE;iBACnC;gBACD,IAAI,EAAE,SAAS,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE;aACzD,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;IAC3B,CAAC;CACF;AAED,6EAA6E;AAC7E,MAAM,OAAO,mBAAmB;IACrB,QAAQ,GAAG,aAAa,CAAC,UAAU,CAAC;IAC5B,KAAK,CAAc;IAEpC,YAAY,WAAmB;QAC7B,IAAI,CAAC,KAAK,GAAG;YACX,KAAK,EAAE,WAAW;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU;YAClC,SAAS,EAAE,QAAQ;SACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IACD,KAAK,CAAC,YAAY;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;CACF"}

package/dist/src/client.d.ts

@@ -7,17 +7,17 @@
  *
  * @example Client credentials (server-to-server)
  * ```ts
- * import { CandescentClient, Environment } from "@candescent/di-typescript-sdk";
+ * import { CandescentClient, Environment } from "@cdx-forge/di-typescript-sdk";
  *
  * const client = new CandescentClient({
  *   clientId: "my-id",
  *   clientSecret: "my-secret",
  *   institutionId: "12345",
- *   environment: Environment.Stage,
+ *   environment: Environment.Stage,  // https://api.stage.candescent.com
  * });
  *
  * // Register a customer with typed models
- * const result = await client.customerManagement.register({
+ * const result = await client.registrationAndAccess.register({
  *   diFiid: "05523",
  *   fICustomer: { fiId: { value: "05523" }, memberNumber: "123456789", ... },
  * });
@@ -34,11 +34,12 @@
  * ```
  */
 import { type TokenProvider } from "./auth.js";
-import { AccountsApi, AlertConfigurationApi, AlertDeliveryApi, AlertPreferencesApi, AuthenticationApi, BusinessBankingApi, CustomerCampaignsApi, CustomerManagementApi, DocumentsAndPreferencesApi, MoneyMovementApi, MXApi, NotificationChannelsApi } from "../generated/src/apis/index.js";
+import { AccountsApi, AudienceApi, BankingActivitiesApi, ContactInfoApi, DataApi, ElectronicStatementsApi, EntitlementsApi, ExperienceGroupsApi, HistoryAndEventsApi, ImagesApi, InstitutionAlertsApi, InstitutionDisclosuresApi, InstitutionPreferencesApi, JobsApi, NotificationChannelsApi, OAuthV1Api, OAuthV2Api, PaymentsApi, ProfileApi, ProfileAndStatusApi, PromotionsSuiteApi, RecipientsApi, RegistrationApi, RegistrationAndAccessApi, SystemAlertsApi, TemplatesApi, TransactionsApi, TransfersApi, UserDisclosuresApi, UserPreferencesApi, UsersApi, WidgetsApi } from "../generated/src/apis/index.js";
 export { type RequestOptions } from "./transport.js";
 export declare enum Environment {
-    Stage = "https://api.candescent.com/digitalbanking/stage",
-    Production = "https://api.candescent.com/digitalbanking"
+    Sandbox = "https://api.sandbox.candescent.com",
+    Stage = "https://api.stage.candescent.com",
+    Production = "https://api.candescent.com"
 }
 export interface ClientConfig {
     clientId?: string;
@@ -57,17 +58,37 @@ export declare class CandescentClient {
     private readonly v2TokenProvider;
     private readonly v1TokenProvider;
     readonly accounts: AccountsApi;
-    readonly alertConfiguration: AlertConfigurationApi;
-    readonly alertDelivery: AlertDeliveryApi;
-    readonly alertPreferences: AlertPreferencesApi;
-    readonly authentication: AuthenticationApi;
-    readonly businessBanking: BusinessBankingApi;
-    readonly customerCampaigns: CustomerCampaignsApi;
-    readonly customerManagement: CustomerManagementApi;
-    readonly documents: DocumentsAndPreferencesApi;
-    readonly moneyMovement: MoneyMovementApi;
-    readonly mx: MXApi;
+    readonly audience: AudienceApi;
+    readonly bankingActivities: BankingActivitiesApi;
+    readonly contactInfo: ContactInfoApi;
+    readonly data: DataApi;
+    readonly electronicStatements: ElectronicStatementsApi;
+    readonly entitlements: EntitlementsApi;
+    readonly experienceGroups: ExperienceGroupsApi;
+    readonly historyAndEvents: HistoryAndEventsApi;
+    readonly images: ImagesApi;
+    readonly institutionAlerts: InstitutionAlertsApi;
+    readonly institutionDisclosures: InstitutionDisclosuresApi;
+    readonly institutionPreferences: InstitutionPreferencesApi;
+    readonly jobs: JobsApi;
     readonly notificationChannels: NotificationChannelsApi;
+    readonly oAuthV1: OAuthV1Api;
+    readonly oAuthV2: OAuthV2Api;
+    readonly payments: PaymentsApi;
+    readonly profile: ProfileApi;
+    readonly profileAndStatus: ProfileAndStatusApi;
+    readonly promotionsSuite: PromotionsSuiteApi;
+    readonly recipients: RecipientsApi;
+    readonly registration: RegistrationApi;
+    readonly registrationAndAccess: RegistrationAndAccessApi;
+    readonly systemAlerts: SystemAlertsApi;
+    readonly templates: TemplatesApi;
+    readonly transactions: TransactionsApi;
+    readonly transfers: TransfersApi;
+    readonly userDisclosures: UserDisclosuresApi;
+    readonly userPreferences: UserPreferencesApi;
+    readonly users: UsersApi;
+    readonly widgets: WidgetsApi;
     constructor(config: ClientConfig);
     close(): Promise<void>;
     /**
@@ -78,7 +99,7 @@ export declare class CandescentClient {
      * - `CANDESCENT_CLIENT_SECRET`
      * - `CANDESCENT_INSTITUTION_ID`
      * - `CANDESCENT_BEARER_TOKEN` (skip OAuth entirely)
-     * - `CANDESCENT_ENVIRONMENT` ("stage" | "production")
+     * - `CANDESCENT_ENVIRONMENT` ("sandbox" | "stage" | "production"; defaults to stage)
      * - `CANDESCENT_USERNAME` (optional, for password grant)
      * - `CANDESCENT_PASSWORD` (optional, for password grant)
      */

package/dist/src/client.js

@@ -7,17 +7,17 @@
  *
  * @example Client credentials (server-to-server)
  * ```ts
- * import { CandescentClient, Environment } from "@candescent/di-typescript-sdk";
+ * import { CandescentClient, Environment } from "@cdx-forge/di-typescript-sdk";
  *
  * const client = new CandescentClient({
  *   clientId: "my-id",
  *   clientSecret: "my-secret",
  *   institutionId: "12345",
- *   environment: Environment.Stage,
+ *   environment: Environment.Stage,  // https://api.stage.candescent.com
  * });
  *
  * // Register a customer with typed models
- * const result = await client.customerManagement.register({
+ * const result = await client.registrationAndAccess.register({
  *   diFiid: "05523",
  *   fICustomer: { fiId: { value: "05523" }, memberNumber: "123456789", ... },
  * });
@@ -38,22 +38,23 @@ import { CandescentError, errorForStatus } from "./errors.js";
 import { validateUrlParams } from "./validate.js";
 import { DEFAULT_RETRY, withRetry } from "./retry.js";
 import { Configuration, } from "../generated/src/runtime.js";
-import { AccountsApi, AlertConfigurationApi, AlertDeliveryApi, AlertPreferencesApi, AuthenticationApi, BusinessBankingApi, CustomerCampaignsApi, CustomerManagementApi, DocumentsAndPreferencesApi, MoneyMovementApi, MXApi, NotificationChannelsApi, } from "../generated/src/apis/index.js";
+import { AccountsApi, AudienceApi, BankingActivitiesApi, ContactInfoApi, DataApi, ElectronicStatementsApi, EntitlementsApi, ExperienceGroupsApi, HistoryAndEventsApi, ImagesApi, InstitutionAlertsApi, InstitutionDisclosuresApi, InstitutionPreferencesApi, JobsApi, NotificationChannelsApi, OAuthV1Api, OAuthV2Api, PaymentsApi, ProfileApi, ProfileAndStatusApi, PromotionsSuiteApi, RecipientsApi, RegistrationApi, RegistrationAndAccessApi, SystemAlertsApi, TemplatesApi, TransactionsApi, TransfersApi, UserDisclosuresApi, UserPreferencesApi, UsersApi, WidgetsApi, } from "../generated/src/apis/index.js";
 export var Environment;
 (function (Environment) {
-    Environment["Stage"] = "https://api.candescent.com/digitalbanking/stage";
-    Environment["Production"] = "https://api.candescent.com/digitalbanking";
+    Environment["Sandbox"] = "https://api.sandbox.candescent.com";
+    Environment["Stage"] = "https://api.stage.candescent.com";
+    Environment["Production"] = "https://api.candescent.com";
 })(Environment || (Environment = {}));
 /**
  * URL path segments that require a V1 (legacy) OAuth token.
+ * In spec 1.6.0, all V1 legacy paths contain `/fis/` (subscriptions,
+ * notifications, registration, get-FI-customer, legacy accounts).
+ * The V1 OAuth token endpoint path is also explicitly listed.
  * All other paths use V2 (current) tokens.
  */
 const V1_PATH_SEGMENTS = [
-    "/bankingservices/",
-    "/registration/",
-    "/destinations/",
-    "/subscriptions/",
-    "/send-event/",
+    "/fis/",
+    "/v1/oauth/token",
 ];
 function isV1Path(url) {
     return V1_PATH_SEGMENTS.some((seg) => url.includes(seg));
@@ -77,7 +78,45 @@ function decodeXmlEntities(s) {
         .replace(/&#x([0-9a-fA-F]+);/g, (_, h) => String.fromCodePoint(parseInt(h, 16)));
 }
 function stripCdata(s) {
-    return s.replace(/<!\[CDATA\[([\s\S]*?)]]>/g, (_, content) => content);
+    let result = "";
+    let i = 0;
+    while (i < s.length) {
+        if (s.startsWith("<![CDATA[", i)) {
+            const start = i + 9;
+            const end = s.indexOf("]]>", start);
+            if (end === -1)
+                break;
+            result += s.slice(start, end);
+            i = end + 3;
+            continue;
+        }
+        result += s[i++];
+    }
+    return result;
+}
+function stripXmlComments(s) {
+    let result = "";
+    let i = 0;
+    while (i < s.length) {
+        if (s.startsWith("<!--", i)) {
+            const end = s.indexOf("-->", i + 4);
+            i = end === -1 ? s.length : end + 3;
+            continue;
+        }
+        result += s[i++];
+    }
+    return result;
+}
+function stripXmlDeclaration(s) {
+    if (!s.startsWith("<?xml"))
+        return s;
+    const end = s.indexOf("?>");
+    if (end === -1)
+        return s;
+    let i = end + 2;
+    while (i < s.length && /\s/.test(s[i]))
+        i++;
+    return s.slice(i);
 }
 /**
  * Check if a parent element name is the plural/collection form of a
@@ -108,68 +147,105 @@ function normalizeArrays(obj, parentKey) {
     }
     return result;
 }
+function localXmlTagName(tag) {
+    return tag.includes(":") ? tag.split(":").pop() : tag;
+}
+function setChildValue(parent, key, value) {
+    if (key in parent.children) {
+        const existing = parent.children[key];
+        parent.children[key] = Array.isArray(existing)
+            ? [...existing, value]
+            : [existing, value];
+    }
+    else {
+        parent.children[key] = value;
+    }
+}
+function handleXmlText(state, text) {
+    if (state.current) {
+        state.current.text += decodeXmlEntities(text.trim());
+    }
+}
+function handleXmlCloseTag(state) {
+    if (!state.current)
+        return;
+    const key = localXmlTagName(state.current.tag);
+    const hasChildren = Object.keys(state.current.children).length > 0;
+    const value = hasChildren ? state.current.children : (state.current.text || null);
+    const parent = state.stack.pop();
+    if (parent) {
+        setChildValue(parent, key, value);
+        state.current = parent;
+    }
+    else {
+        state.root[key] = value;
+        state.current = null;
+    }
+}
+function handleXmlOpenTag(state, tag) {
+    const node = { tag, children: {}, text: "" };
+    if (state.current)
+        state.stack.push(state.current);
+    state.current = node;
+}
+function handleXmlSelfClosingTag(state, tag) {
+    const key = localXmlTagName(tag);
+    if (state.current) {
+        state.current.children[key] = null;
+    }
+    else {
+        state.root[key] = null;
+    }
+}
+function parseXmlTagName(tag) {
+    const nameStart = tag.startsWith("</") ? 2 : 1;
+    let i = nameStart;
+    while (i < tag.length && tag[i] !== " " && tag[i] !== ">" && tag[i] !== "/")
+        i++;
+    const name = tag.slice(nameStart, i);
+    return name.length > 0 ? name : undefined;
+}
+function readXmlTag(processed, start) {
+    const close = processed.indexOf(">", start + 1);
+    if (close === -1)
+        return null;
+    return { end: close + 1, full: processed.slice(start, close + 1) };
+}
+function processXmlTagToken(state, full) {
+    if (full.startsWith("<!--") || full.startsWith("<!["))
+        return;
+    const tagName = parseXmlTagName(full);
+    if (!tagName)
+        return;
+    if (full.startsWith("</")) {
+        handleXmlCloseTag(state);
+    }
+    else if (full.endsWith("/>")) {
+        handleXmlSelfClosingTag(state, tagName);
+    }
+    else {
+        handleXmlOpenTag(state, tagName);
+    }
+}
 function parseXmlToJson(xml) {
-    const processed = stripCdata(xml).replace(/<\?xml[^?]*\?>\s*/, "");
-    const stack = [];
-    let root = {};
-    let current = null;
-    const tagRe = /<!--[\s\S]*?-->|<!\[CDATA\[[\s\S]*?]]>|<\/?([^\s>\/]+)[^>]*>|([^<]+)/g;
-    let match;
-    while ((match = tagRe.exec(processed)) !== null) {
-        const full = match[0];
-        const text = match[2];
-        // Skip comments and any residual CDATA markers
-        if (full.startsWith("<!--") || full.startsWith("<!["))
-            continue;
-        if (text !== undefined) {
-            if (current)
-                current.text += decodeXmlEntities(text.trim());
+    const processed = stripXmlDeclaration(stripXmlComments(stripCdata(xml)));
+    const state = { stack: [], root: {}, current: null };
+    let i = 0;
+    while (i < processed.length) {
+        if (processed[i] === "<") {
+            const tag = readXmlTag(processed, i);
+            if (!tag)
+                break;
+            i = tag.end;
+            processXmlTagToken(state, tag.full);
             continue;
         }
-        if (full.startsWith("</")) {
-            if (!current)
-                continue;
-            const rawTag = current.tag;
-            const key = rawTag.includes(":") ? rawTag.split(":").pop() : rawTag;
-            const hasChildren = Object.keys(current.children).length > 0;
-            const value = hasChildren ? current.children : (current.text || null);
-            const parent = stack.pop();
-            if (parent) {
-                if (key in parent.children) {
-                    const existing = parent.children[key];
-                    parent.children[key] = Array.isArray(existing)
-                        ? [...existing, value]
-                        : [existing, value];
-                }
-                else {
-                    parent.children[key] = value;
-                }
-                current = parent;
-            }
-            else {
-                root[key] = value;
-                current = null;
-            }
-        }
-        else if (!full.endsWith("/>")) {
-            const tag = match[1];
-            const node = { tag, children: {}, text: "" };
-            if (current)
-                stack.push(current);
-            current = node;
-        }
-        else {
-            const tag = match[1];
-            const key = tag.includes(":") ? tag.split(":").pop() : tag;
-            if (current) {
-                current.children[key] = null;
-            }
-            else {
-                root[key] = null;
-            }
-        }
+        const nextTag = processed.indexOf("<", i);
+        const textEnd = nextTag === -1 ? processed.length : nextTag;
+        handleXmlText(state, processed.slice(i, textEnd));
+        i = textEnd;
     }
-    return normalizeArrays(root);
+    return normalizeArrays(state.root);
 }
 /**
  * Middleware that converts XML responses into JSON transparently.
@@ -251,17 +327,37 @@ export class CandescentClient {
     v2TokenProvider;
     v1TokenProvider;
     accounts;
-    alertConfiguration;
-    alertDelivery;
-    alertPreferences;
-    authentication;
-    businessBanking;
-    customerCampaigns;
-    customerManagement;
-    documents;
-    moneyMovement;
-    mx;
+    audience;
+    bankingActivities;
+    contactInfo;
+    data;
+    electronicStatements;
+    entitlements;
+    experienceGroups;
+    historyAndEvents;
+    images;
+    institutionAlerts;
+    institutionDisclosures;
+    institutionPreferences;
+    jobs;
     notificationChannels;
+    oAuthV1;
+    oAuthV2;
+    payments;
+    profile;
+    profileAndStatus;
+    promotionsSuite;
+    recipients;
+    registration;
+    registrationAndAccess;
+    systemAlerts;
+    templates;
+    transactions;
+    transfers;
+    userDisclosures;
+    userPreferences;
+    users;
+    widgets;
     constructor(config) {
         const baseUrl = config.baseUrl ?? config.environment ?? Environment.Stage;
         const institutionId = config.institutionId;
@@ -336,17 +432,37 @@ export class CandescentClient {
             ],
         });
         this.accounts = new AccountsApi(generatedConfig);
-        this.alertConfiguration = new AlertConfigurationApi(generatedConfig);
-        this.alertDelivery = new AlertDeliveryApi(generatedConfig);
-        this.alertPreferences = new AlertPreferencesApi(generatedConfig);
-        this.authentication = new AuthenticationApi(generatedConfig);
-        this.businessBanking = new BusinessBankingApi(generatedConfig);
-        this.customerCampaigns = new CustomerCampaignsApi(generatedConfig);
-        this.customerManagement = new CustomerManagementApi(generatedConfig);
-        this.documents = new DocumentsAndPreferencesApi(generatedConfig);
-        this.moneyMovement = new MoneyMovementApi(generatedConfig);
-        this.mx = new MXApi(generatedConfig);
+        this.audience = new AudienceApi(generatedConfig);
+        this.bankingActivities = new BankingActivitiesApi(generatedConfig);
+        this.contactInfo = new ContactInfoApi(generatedConfig);
+        this.data = new DataApi(generatedConfig);
+        this.electronicStatements = new ElectronicStatementsApi(generatedConfig);
+        this.entitlements = new EntitlementsApi(generatedConfig);
+        this.experienceGroups = new ExperienceGroupsApi(generatedConfig);
+        this.historyAndEvents = new HistoryAndEventsApi(generatedConfig);
+        this.images = new ImagesApi(generatedConfig);
+        this.institutionAlerts = new InstitutionAlertsApi(generatedConfig);
+        this.institutionDisclosures = new InstitutionDisclosuresApi(generatedConfig);
+        this.institutionPreferences = new InstitutionPreferencesApi(generatedConfig);
+        this.jobs = new JobsApi(generatedConfig);
         this.notificationChannels = new NotificationChannelsApi(generatedConfig);
+        this.oAuthV1 = new OAuthV1Api(generatedConfig);
+        this.oAuthV2 = new OAuthV2Api(generatedConfig);
+        this.payments = new PaymentsApi(generatedConfig);
+        this.profile = new ProfileApi(generatedConfig);
+        this.profileAndStatus = new ProfileAndStatusApi(generatedConfig);
+        this.promotionsSuite = new PromotionsSuiteApi(generatedConfig);
+        this.recipients = new RecipientsApi(generatedConfig);
+        this.registration = new RegistrationApi(generatedConfig);
+        this.registrationAndAccess = new RegistrationAndAccessApi(generatedConfig);
+        this.systemAlerts = new SystemAlertsApi(generatedConfig);
+        this.templates = new TemplatesApi(generatedConfig);
+        this.transactions = new TransactionsApi(generatedConfig);
+        this.transfers = new TransfersApi(generatedConfig);
+        this.userDisclosures = new UserDisclosuresApi(generatedConfig);
+        this.userPreferences = new UserPreferencesApi(generatedConfig);
+        this.users = new UsersApi(generatedConfig);
+        this.widgets = new WidgetsApi(generatedConfig);
     }
     async close() {
         for (const tp of [this.v2TokenProvider, this.v1TokenProvider]) {
@@ -366,7 +482,7 @@ export class CandescentClient {
      * - `CANDESCENT_CLIENT_SECRET`
      * - `CANDESCENT_INSTITUTION_ID`
      * - `CANDESCENT_BEARER_TOKEN` (skip OAuth entirely)
-     * - `CANDESCENT_ENVIRONMENT` ("stage" | "production")
+     * - `CANDESCENT_ENVIRONMENT` ("sandbox" | "stage" | "production"; defaults to stage)
      * - `CANDESCENT_USERNAME` (optional, for password grant)
      * - `CANDESCENT_PASSWORD` (optional, for password grant)
      */
@@ -385,7 +501,11 @@ export class CandescentClient {
         if (!bearerToken && !(clientId && clientSecret)) {
             throw new CandescentError("Set CANDESCENT_BEARER_TOKEN or both CANDESCENT_CLIENT_ID and CANDESCENT_CLIENT_SECRET");
         }
-        const environment = envName === "production" ? Environment.Production : Environment.Stage;
+        const environment = envName === "production"
+            ? Environment.Production
+            : envName === "sandbox"
+                ? Environment.Sandbox
+                : Environment.Stage;
         return new CandescentClient({
             clientId,
             clientSecret,
@@ -397,3 +517,4 @@ export class CandescentClient {
         });
     }
 }
+//# sourceMappingURL=client.js.map