@edge-markets/connect-node 1.10.1 → 1.11.0

package/dist/index.d.mts

@@ -1,6 +1,6 @@
 import * as node_https from 'node:https';
 import { EdgeEnvironment, TransferCategory, Transfer, VerificationSession, TransferType, TransferStatus, User, VerifyIdentityOptions, VerifyIdentityResult, Balance, ListTransfersParams, TransferList, CreateVerificationSessionRequest, VerificationSessionStatusResponse, EdgeTokens, EdgeWebhookEvent, EdgeWebhookEventType } from '@edge-markets/connect';
-export { ACTIVE_EDGE_SCOPES, Balance, BaseWebhookEvent, ConsentRevokedEventData, CreateVerificationSessionRequest, EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE, EDGE_WEBHOOK_EVENT_TYPES, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, EdgeEnvironment, EdgeError, EdgeFeatureUnavailableError, EdgeIdentityVerificationError, EdgeInsufficientScopeError, EdgeNetworkError, EdgeNotFoundError, EdgeTokenExchangeError, EdgeTokens, EdgeValidationError, EdgeWebhookEvent, EdgeWebhookEventType, ListTransfersParams, SdkGeolocation, TRANSFER_CATEGORIES, Transfer, TransferCategory, TransferCompletedEventData, TransferExpiredEventData, TransferFailedEventData, TransferList, TransferListItem, TransferProcessingEventData, TransferStatus, TransferType, User, UserAddress, VerificationSession, VerificationSessionStatus, VerificationSessionStatusResponse, VerifyIdentityAddress, VerifyIdentityOptions, VerifyIdentityResult, VerifyIdentityScores, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isFeatureUnavailableError, isIdentityVerificationError, isNetworkError, isProductionEnvironment } from '@edge-markets/connect';
+export { ACTIVE_EDGE_SCOPES, ALL_EDGE_SCOPES, Balance, BaseWebhookEvent, ConsentRevokedEventData, CreateVerificationSessionRequest, EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE, EDGE_SCOPES, EDGE_WEBHOOK_EVENT_TYPES, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, EdgeEnvironment, EdgeError, EdgeFeatureUnavailableError, EdgeIdentityVerificationError, EdgeInsufficientScopeError, EdgeNetworkError, EdgeNotFoundError, EdgeTokenExchangeError, EdgeTokens, EdgeValidationError, EdgeWebhookEvent, EdgeWebhookEventType, ListTransfersParams, RESERVED_EDGE_SCOPES, SdkGeolocation, TRANSFER_CATEGORIES, Transfer, TransferCategory, TransferCompletedEventData, TransferExpiredEventData, TransferFailedEventData, TransferList, TransferListItem, TransferProcessingEventData, TransferStatus, TransferType, User, UserAddress, VerificationSession, VerificationSessionStatus, VerificationSessionStatusResponse, VerifyIdentityAddress, VerifyIdentityOptions, VerifyIdentityResult, VerifyIdentityScores, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isFeatureUnavailableError, isIdentityVerificationError, isNetworkError, isProductionEnvironment } from '@edge-markets/connect';
 
 type RequestEndpoint = 'connect_api' | 'oauth_token' | 'partner_webhook_sync';
 interface RequestInfo {

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import * as node_https from 'node:https';
 import { EdgeEnvironment, TransferCategory, Transfer, VerificationSession, TransferType, TransferStatus, User, VerifyIdentityOptions, VerifyIdentityResult, Balance, ListTransfersParams, TransferList, CreateVerificationSessionRequest, VerificationSessionStatusResponse, EdgeTokens, EdgeWebhookEvent, EdgeWebhookEventType } from '@edge-markets/connect';
-export { ACTIVE_EDGE_SCOPES, Balance, BaseWebhookEvent, ConsentRevokedEventData, CreateVerificationSessionRequest, EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE, EDGE_WEBHOOK_EVENT_TYPES, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, EdgeEnvironment, EdgeError, EdgeFeatureUnavailableError, EdgeIdentityVerificationError, EdgeInsufficientScopeError, EdgeNetworkError, EdgeNotFoundError, EdgeTokenExchangeError, EdgeTokens, EdgeValidationError, EdgeWebhookEvent, EdgeWebhookEventType, ListTransfersParams, SdkGeolocation, TRANSFER_CATEGORIES, Transfer, TransferCategory, TransferCompletedEventData, TransferExpiredEventData, TransferFailedEventData, TransferList, TransferListItem, TransferProcessingEventData, TransferStatus, TransferType, User, UserAddress, VerificationSession, VerificationSessionStatus, VerificationSessionStatusResponse, VerifyIdentityAddress, VerifyIdentityOptions, VerifyIdentityResult, VerifyIdentityScores, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isFeatureUnavailableError, isIdentityVerificationError, isNetworkError, isProductionEnvironment } from '@edge-markets/connect';
+export { ACTIVE_EDGE_SCOPES, ALL_EDGE_SCOPES, Balance, BaseWebhookEvent, ConsentRevokedEventData, CreateVerificationSessionRequest, EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE, EDGE_SCOPES, EDGE_WEBHOOK_EVENT_TYPES, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, EdgeEnvironment, EdgeError, EdgeFeatureUnavailableError, EdgeIdentityVerificationError, EdgeInsufficientScopeError, EdgeNetworkError, EdgeNotFoundError, EdgeTokenExchangeError, EdgeTokens, EdgeValidationError, EdgeWebhookEvent, EdgeWebhookEventType, ListTransfersParams, RESERVED_EDGE_SCOPES, SdkGeolocation, TRANSFER_CATEGORIES, Transfer, TransferCategory, TransferCompletedEventData, TransferExpiredEventData, TransferFailedEventData, TransferList, TransferListItem, TransferProcessingEventData, TransferStatus, TransferType, User, UserAddress, VerificationSession, VerificationSessionStatus, VerificationSessionStatusResponse, VerifyIdentityAddress, VerifyIdentityOptions, VerifyIdentityResult, VerifyIdentityScores, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isFeatureUnavailableError, isIdentityVerificationError, isNetworkError, isProductionEnvironment } from '@edge-markets/connect';
 
 type RequestEndpoint = 'connect_api' | 'oauth_token' | 'partner_webhook_sync';
 interface RequestInfo {

package/dist/index.js

@@ -31,8 +31,10 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var index_exports = {};
 __export(index_exports, {
   ACTIVE_EDGE_SCOPES: () => import_connect16.ACTIVE_EDGE_SCOPES,
+  ALL_EDGE_SCOPES: () => import_connect16.ALL_EDGE_SCOPES,
   CONNECT_TRANSFER_DIRECTIONS: () => CONNECT_TRANSFER_DIRECTIONS,
   EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE: () => import_connect15.EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE,
+  EDGE_SCOPES: () => import_connect16.EDGE_SCOPES,
   EDGE_WEBHOOK_EVENT_TYPES: () => import_connect16.EDGE_WEBHOOK_EVENT_TYPES,
   EdgeApiError: () => import_connect15.EdgeApiError,
   EdgeAuthenticationError: () => import_connect15.EdgeAuthenticationError,
@@ -51,6 +53,7 @@ __export(index_exports, {
   EdgeValidationError: () => import_connect15.EdgeValidationError,
   EdgeWebhookInbox: () => EdgeWebhookInbox,
   EdgeWebhookReconciler: () => EdgeWebhookReconciler,
+  RESERVED_EDGE_SCOPES: () => import_connect16.RESERVED_EDGE_SCOPES,
   TRANSFER_CATEGORIES: () => import_connect16.TRANSFER_CATEGORIES,
   assertSameTransferIntent: () => assertSameTransferIntent,
   assertTransferEventMatchesIntent: () => assertTransferEventMatchesIntent,
@@ -856,7 +859,15 @@ function getInstanceKey(config) {
     config.partnerClientId || ""
   ]);
 }
-var MTLS_ENFORCED_HOSTS = /* @__PURE__ */ new Set(["connect-staging.edgeboost.io", "connect.edgeboost.io"]);
+var MTLS_ENFORCED_HOSTS = /* @__PURE__ */ new Set([
+  "sandbox.connect.staging.edgeboost.io",
+  "connect-staging.edgeboost.io",
+  "connect.edgeboost.io"
+]);
+var CONNECT_INGRESS_REQUIRED_MESSAGE = "Edge Connect API requests must go through the mTLS Connect gateway. Set EDGE_API_BASE_URL and EDGE_OAUTH_BASE_URL to the Connect gateway for this environment and configure EDGE_MTLS_CERT and EDGE_MTLS_KEY.";
+var MTLS_REQUIRED_MESSAGE = "Edge Connect rejected this request because no trusted partner mTLS client certificate was presented. Configure the issued EDGE_MTLS_CERT and EDGE_MTLS_KEY and retry through the Connect gateway.";
+var MTLS_CLIENT_UNREGISTERED_MESSAGE = "Edge Connect accepted the client certificate at the gateway, but the certificate is not registered for this partner. Contact EDGE DevRel to bind the certificate fingerprint to your OAuth client ID.";
+var MTLS_CLIENT_MISMATCH_MESSAGE = "Edge Connect accepted the client certificate at the gateway, but it is not bound to the OAuth client ID used by this request. Use the certificate issued for this client ID or contact EDGE DevRel.";
 function isMtlsEnforcedHost(host) {
   if (MTLS_ENFORCED_HOSTS.has(host)) {
     return true;
@@ -869,7 +880,7 @@ function isMtlsEnforcedHost(host) {
   return false;
 }
 function environmentRequiresMtls(environment, apiBaseUrl) {
-  if (environment === "staging" || environment === "production") {
+  if (environment === "sandbox" || environment === "staging" || environment === "production") {
     return true;
   }
   try {
@@ -1487,18 +1498,31 @@ var EdgeConnectServer = class _EdgeConnectServer {
     });
   }
   async handleApiErrorFromBody(error, status, path) {
+    const errorCode = error.error || error.code;
     if (status === 401) {
       return new import_connect5.EdgeAuthenticationError(error.message || "Access token is invalid or expired", error);
     }
     if (status === 403) {
-      if (error.error === "consent_required") {
+      if (errorCode === "connect_ingress_required") {
+        return new import_connect5.EdgeApiError("connect_ingress_required", CONNECT_INGRESS_REQUIRED_MESSAGE, status, error);
+      }
+      if (errorCode === "mtls_required") {
+        return new import_connect5.EdgeApiError("mtls_required", MTLS_REQUIRED_MESSAGE, status, error);
+      }
+      if (errorCode === "mtls_client_unregistered") {
+        return new import_connect5.EdgeApiError("mtls_client_unregistered", MTLS_CLIENT_UNREGISTERED_MESSAGE, status, error);
+      }
+      if (errorCode === "mtls_client_mismatch") {
+        return new import_connect5.EdgeApiError("mtls_client_mismatch", MTLS_CLIENT_MISMATCH_MESSAGE, status, error);
+      }
+      if (errorCode === "consent_required") {
         return new import_connect5.EdgeConsentRequiredError(
           this.config.clientId,
           error.consentUrl,
           error.message
         );
       }
-      if (error.error === "insufficient_scope" || error.error === "insufficient_consent") {
+      if (errorCode === "insufficient_scope" || errorCode === "insufficient_consent") {
         return new import_connect5.EdgeInsufficientScopeError(
           error.missing_scopes || error.missingScopes || [],
           error.message
@@ -1642,11 +1666,11 @@ function buildMtlsConfig(env, requireMtls, warnings) {
   };
 }
 function inferMtlsRequirement(environment, apiBaseUrl) {
-  if (environment === "staging" || environment === "production") return true;
+  if (environment === "sandbox" || environment === "staging" || environment === "production") return true;
   const resolvedApiBaseUrl = apiBaseUrl || (0, import_connect6.getEnvironmentConfig)(environment).apiBaseUrl;
   try {
     const host = new URL(resolvedApiBaseUrl).host;
-    return host === "connect-staging.edgeboost.io" || host === "connect.edgeboost.io";
+    return host === "sandbox.connect.staging.edgeboost.io" || host === "connect-staging.edgeboost.io" || host === "connect.edgeboost.io";
   } catch {
     return false;
   }
@@ -1657,7 +1681,7 @@ function createEdgeConnectServerFromEnv(options = {}) {
   const environment = readEnvironment(env);
   const apiBaseUrl = readEnv(env, "EDGE_API_BASE_URL");
   const mtlsRequiredByTarget = inferMtlsRequirement(environment, apiBaseUrl);
-  const requireMtls = options.requireMtls ?? readBooleanEnv(env, "EDGE_REQUIRE_MTLS") ?? false;
+  const requireMtls = options.requireMtls ?? readBooleanEnv(env, "EDGE_REQUIRE_MTLS") ?? mtlsRequiredByTarget;
   const mtls = buildMtlsConfig(env, requireMtls, warnings);
   const timeout = readTimeout(env, options.timeout);
   const clientId = readFirstEnv(env, ["EDGE_CLIENT_ID", "EDGE_CONNECT_CLIENT_ID"]) || "";
@@ -2658,8 +2682,10 @@ var import_connect16 = require("@edge-markets/connect");
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ACTIVE_EDGE_SCOPES,
+  ALL_EDGE_SCOPES,
   CONNECT_TRANSFER_DIRECTIONS,
   EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE,
+  EDGE_SCOPES,
   EDGE_WEBHOOK_EVENT_TYPES,
   EdgeApiError,
   EdgeAuthenticationError,
@@ -2678,6 +2704,7 @@ var import_connect16 = require("@edge-markets/connect");
   EdgeValidationError,
   EdgeWebhookInbox,
   EdgeWebhookReconciler,
+  RESERVED_EDGE_SCOPES,
   TRANSFER_CATEGORIES,
   assertSameTransferIntent,
   assertTransferEventMatchesIntent,

package/dist/index.mjs

@@ -769,7 +769,15 @@ function getInstanceKey(config) {
     config.partnerClientId || ""
   ]);
 }
-var MTLS_ENFORCED_HOSTS = /* @__PURE__ */ new Set(["connect-staging.edgeboost.io", "connect.edgeboost.io"]);
+var MTLS_ENFORCED_HOSTS = /* @__PURE__ */ new Set([
+  "sandbox.connect.staging.edgeboost.io",
+  "connect-staging.edgeboost.io",
+  "connect.edgeboost.io"
+]);
+var CONNECT_INGRESS_REQUIRED_MESSAGE = "Edge Connect API requests must go through the mTLS Connect gateway. Set EDGE_API_BASE_URL and EDGE_OAUTH_BASE_URL to the Connect gateway for this environment and configure EDGE_MTLS_CERT and EDGE_MTLS_KEY.";
+var MTLS_REQUIRED_MESSAGE = "Edge Connect rejected this request because no trusted partner mTLS client certificate was presented. Configure the issued EDGE_MTLS_CERT and EDGE_MTLS_KEY and retry through the Connect gateway.";
+var MTLS_CLIENT_UNREGISTERED_MESSAGE = "Edge Connect accepted the client certificate at the gateway, but the certificate is not registered for this partner. Contact EDGE DevRel to bind the certificate fingerprint to your OAuth client ID.";
+var MTLS_CLIENT_MISMATCH_MESSAGE = "Edge Connect accepted the client certificate at the gateway, but it is not bound to the OAuth client ID used by this request. Use the certificate issued for this client ID or contact EDGE DevRel.";
 function isMtlsEnforcedHost(host) {
   if (MTLS_ENFORCED_HOSTS.has(host)) {
     return true;
@@ -782,7 +790,7 @@ function isMtlsEnforcedHost(host) {
   return false;
 }
 function environmentRequiresMtls(environment, apiBaseUrl) {
-  if (environment === "staging" || environment === "production") {
+  if (environment === "sandbox" || environment === "staging" || environment === "production") {
     return true;
   }
   try {
@@ -1400,18 +1408,31 @@ var EdgeConnectServer = class _EdgeConnectServer {
     });
   }
   async handleApiErrorFromBody(error, status, path) {
+    const errorCode = error.error || error.code;
     if (status === 401) {
       return new EdgeAuthenticationError2(error.message || "Access token is invalid or expired", error);
     }
     if (status === 403) {
-      if (error.error === "consent_required") {
+      if (errorCode === "connect_ingress_required") {
+        return new EdgeApiError("connect_ingress_required", CONNECT_INGRESS_REQUIRED_MESSAGE, status, error);
+      }
+      if (errorCode === "mtls_required") {
+        return new EdgeApiError("mtls_required", MTLS_REQUIRED_MESSAGE, status, error);
+      }
+      if (errorCode === "mtls_client_unregistered") {
+        return new EdgeApiError("mtls_client_unregistered", MTLS_CLIENT_UNREGISTERED_MESSAGE, status, error);
+      }
+      if (errorCode === "mtls_client_mismatch") {
+        return new EdgeApiError("mtls_client_mismatch", MTLS_CLIENT_MISMATCH_MESSAGE, status, error);
+      }
+      if (errorCode === "consent_required") {
         return new EdgeConsentRequiredError(
           this.config.clientId,
           error.consentUrl,
           error.message
         );
       }
-      if (error.error === "insufficient_scope" || error.error === "insufficient_consent") {
+      if (errorCode === "insufficient_scope" || errorCode === "insufficient_consent") {
         return new EdgeInsufficientScopeError(
           error.missing_scopes || error.missingScopes || [],
           error.message
@@ -1555,11 +1576,11 @@ function buildMtlsConfig(env, requireMtls, warnings) {
   };
 }
 function inferMtlsRequirement(environment, apiBaseUrl) {
-  if (environment === "staging" || environment === "production") return true;
+  if (environment === "sandbox" || environment === "staging" || environment === "production") return true;
   const resolvedApiBaseUrl = apiBaseUrl || getEnvironmentConfig2(environment).apiBaseUrl;
   try {
     const host = new URL(resolvedApiBaseUrl).host;
-    return host === "connect-staging.edgeboost.io" || host === "connect.edgeboost.io";
+    return host === "sandbox.connect.staging.edgeboost.io" || host === "connect-staging.edgeboost.io" || host === "connect.edgeboost.io";
   } catch {
     return false;
   }
@@ -1570,7 +1591,7 @@ function createEdgeConnectServerFromEnv(options = {}) {
   const environment = readEnvironment(env);
   const apiBaseUrl = readEnv(env, "EDGE_API_BASE_URL");
   const mtlsRequiredByTarget = inferMtlsRequirement(environment, apiBaseUrl);
-  const requireMtls = options.requireMtls ?? readBooleanEnv(env, "EDGE_REQUIRE_MTLS") ?? false;
+  const requireMtls = options.requireMtls ?? readBooleanEnv(env, "EDGE_REQUIRE_MTLS") ?? mtlsRequiredByTarget;
   const mtls = buildMtlsConfig(env, requireMtls, warnings);
   const timeout = readTimeout(env, options.timeout);
   const clientId = readFirstEnv(env, ["EDGE_CLIENT_ID", "EDGE_CONNECT_CLIENT_ID"]) || "";
@@ -2600,6 +2621,9 @@ import {
 } from "@edge-markets/connect";
 import {
   ACTIVE_EDGE_SCOPES,
+  ALL_EDGE_SCOPES,
+  EDGE_SCOPES,
+  RESERVED_EDGE_SCOPES,
   EDGE_WEBHOOK_EVENT_TYPES as EDGE_WEBHOOK_EVENT_TYPES2,
   TRANSFER_CATEGORIES,
   getEnvironmentConfig as getEnvironmentConfig3,
@@ -2607,8 +2631,10 @@ import {
 } from "@edge-markets/connect";
 export {
   ACTIVE_EDGE_SCOPES,
+  ALL_EDGE_SCOPES,
   CONNECT_TRANSFER_DIRECTIONS,
   EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE,
+  EDGE_SCOPES,
   EDGE_WEBHOOK_EVENT_TYPES2 as EDGE_WEBHOOK_EVENT_TYPES,
   EdgeApiError2 as EdgeApiError,
   EdgeAuthenticationError4 as EdgeAuthenticationError,
@@ -2627,6 +2653,7 @@ export {
   EdgeValidationError13 as EdgeValidationError,
   EdgeWebhookInbox,
   EdgeWebhookReconciler,
+  RESERVED_EDGE_SCOPES,
   TRANSFER_CATEGORIES,
   assertSameTransferIntent,
   assertTransferEventMatchesIntent,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edge-markets/connect-node",
-  "version": "1.10.1",
+  "version": "1.11.0",
   "description": "Server SDK for EDGE Connect token exchange and API calls",
   "author": "Edge Markets",
   "license": "MIT",
@@ -22,7 +22,7 @@
   },
   "dependencies": {
     "undici": "^5.29.0",
-    "@edge-markets/connect": "^1.8.0"
+    "@edge-markets/connect": "^1.9.0"
   },
   "devDependencies": {
     "tsup": "^8.0.0",