@edge-markets/connect-node 1.10.1 → 1.11.1

package/README.md

@@ -84,7 +84,7 @@ Supported environment variables:
 |----------|-------------|
 | `EDGE_CLIENT_ID` | User-facing OAuth client ID |
 | `EDGE_CLIENT_SECRET` | User-facing OAuth client secret |
-| `EDGE_ENVIRONMENT` | `production`, `staging`, `sandbox`, or `development` |
+| `EDGE_ENVIRONMENT` | `production` or `sandbox` |
 | `EDGE_API_BASE_URL` | Optional Connect API override |
 | `EDGE_OAUTH_BASE_URL` | Optional OAuth/token URL override |
 | `EDGE_PARTNER_API_BASE_URL` | Optional partner dashboard API override |
@@ -106,7 +106,7 @@ the inline value wins and the helper returns a warning.
 interface EdgeConnectServerConfig {
   clientId: string              // Your user-facing OAuth client ID
   clientSecret: string          // Your user-facing OAuth client secret (keep secret!)
-  environment: EdgeEnvironment  // 'production' | 'staging' | 'sandbox'
+  environment: EdgeEnvironment  // 'production' | 'sandbox'
 
   // Optional
   apiBaseUrl?: string           // Custom API URL (dev only)
@@ -126,8 +126,8 @@ interface EdgeConnectServerConfig {
 
   // By default the SDK derives partnerApiBaseUrl from apiBaseUrl by replacing
   // /connect/v1 with /v1. For example:
-  // https://connect-staging.edgeboost.io/connect/v1
-  // -> https://connect-staging.edgeboost.io/v1
+  // https://sandbox.connect.staging.edgeboost.io/connect/v1
+  // -> https://sandbox.connect.staging.edgeboost.io/v1
 
   // Optional: Message Level Encryption (Connect endpoints only)
   mle?: {
@@ -155,7 +155,7 @@ interface EdgeConnectServerConfig {
 const edge = new EdgeConnectServer({
   clientId: process.env.EDGE_CLIENT_ID!,
   clientSecret: process.env.EDGE_CLIENT_SECRET!,
-  environment: 'staging',
+  environment: 'sandbox',
   mle: {
     enabled: true,
     edgePublicKey: process.env.EDGE_MLE_EDGE_PUBLIC_KEY!,
@@ -176,7 +176,7 @@ Use `mtls` when EDGE has issued your partner backend a client certificate and ke
 const edge = new EdgeConnectServer({
   clientId: process.env.EDGE_CLIENT_ID!,
   clientSecret: process.env.EDGE_CLIENT_SECRET!,
-  environment: 'staging',
+  environment: 'sandbox',
   mtls: {
     enabled: true,
     cert: process.env.EDGE_MTLS_CERT!,
@@ -189,7 +189,7 @@ const edge = new EdgeConnectServer({
 authentication material and must stay on your server.
 
 `ca` is optional server trust material. Public EDGE Connect gateways such as
-`https://connect.edgeboost.io` and `https://connect-staging.edgeboost.io` use
+`https://connect.edgeboost.io` and `https://sandbox.connect.staging.edgeboost.io` use
 public certificates, so most partners should omit `ca`. If EDGE provides a
 private server CA for a non-public endpoint, pass it as `ca`; the SDK appends it
 to Node's default public trust roots instead of replacing them.
@@ -748,7 +748,7 @@ export class EdgeService {
     this.edge = new EdgeConnectServer({
       clientId: this.config.getOrThrow('EDGE_CLIENT_ID'),
       clientSecret: this.config.getOrThrow('EDGE_CLIENT_SECRET'),
-      environment: this.config.get('EDGE_ENVIRONMENT', 'staging'),
+      environment: this.config.get('EDGE_ENVIRONMENT', 'sandbox'),
     })
   }
 
@@ -781,7 +781,7 @@ import { EdgeConnectServer, isEdgeError } from '@edge-markets/connect-node'
 const edge = new EdgeConnectServer({
   clientId: process.env.EDGE_CLIENT_ID!,
   clientSecret: process.env.EDGE_CLIENT_SECRET!,
-  environment: 'staging',
+  environment: 'sandbox',
 })
 
 const app = express()

package/dist/index.d.mts

@@ -1,6 +1,6 @@
 import * as node_https from 'node:https';
 import { EdgeEnvironment, TransferCategory, Transfer, VerificationSession, TransferType, TransferStatus, User, VerifyIdentityOptions, VerifyIdentityResult, Balance, ListTransfersParams, TransferList, CreateVerificationSessionRequest, VerificationSessionStatusResponse, EdgeTokens, EdgeWebhookEvent, EdgeWebhookEventType } from '@edge-markets/connect';
-export { ACTIVE_EDGE_SCOPES, Balance, BaseWebhookEvent, ConsentRevokedEventData, CreateVerificationSessionRequest, EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE, EDGE_WEBHOOK_EVENT_TYPES, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, EdgeEnvironment, EdgeError, EdgeFeatureUnavailableError, EdgeIdentityVerificationError, EdgeInsufficientScopeError, EdgeNetworkError, EdgeNotFoundError, EdgeTokenExchangeError, EdgeTokens, EdgeValidationError, EdgeWebhookEvent, EdgeWebhookEventType, ListTransfersParams, SdkGeolocation, TRANSFER_CATEGORIES, Transfer, TransferCategory, TransferCompletedEventData, TransferExpiredEventData, TransferFailedEventData, TransferList, TransferListItem, TransferProcessingEventData, TransferStatus, TransferType, User, UserAddress, VerificationSession, VerificationSessionStatus, VerificationSessionStatusResponse, VerifyIdentityAddress, VerifyIdentityOptions, VerifyIdentityResult, VerifyIdentityScores, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isFeatureUnavailableError, isIdentityVerificationError, isNetworkError, isProductionEnvironment } from '@edge-markets/connect';
+export { ACTIVE_EDGE_SCOPES, ALL_EDGE_SCOPES, Balance, BaseWebhookEvent, ConsentRevokedEventData, CreateVerificationSessionRequest, EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE, EDGE_SCOPES, EDGE_WEBHOOK_EVENT_TYPES, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, EdgeEnvironment, EdgeError, EdgeFeatureUnavailableError, EdgeIdentityVerificationError, EdgeInsufficientScopeError, EdgeNetworkError, EdgeNotFoundError, EdgeTokenExchangeError, EdgeTokens, EdgeValidationError, EdgeWebhookEvent, EdgeWebhookEventType, ListTransfersParams, RESERVED_EDGE_SCOPES, SdkGeolocation, TRANSFER_CATEGORIES, Transfer, TransferCategory, TransferCompletedEventData, TransferExpiredEventData, TransferFailedEventData, TransferList, TransferListItem, TransferProcessingEventData, TransferStatus, TransferType, User, UserAddress, VerificationSession, VerificationSessionStatus, VerificationSessionStatusResponse, VerifyIdentityAddress, VerifyIdentityOptions, VerifyIdentityResult, VerifyIdentityScores, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isFeatureUnavailableError, isIdentityVerificationError, isNetworkError, isProductionEnvironment } from '@edge-markets/connect';
 
 type RequestEndpoint = 'connect_api' | 'oauth_token' | 'partner_webhook_sync';
 interface RequestInfo {
@@ -37,8 +37,8 @@ interface EdgeConnectServerConfig {
      * from `apiBaseUrl` by replacing `/connect/v1` with `/v1`, matching the
      * EDGE Connect gateway layout:
      *
-     * - user-scoped API: `https://connect-staging.edgeboost.io/connect/v1`
-     * - partner dashboard API: `https://connect-staging.edgeboost.io/v1`
+     * - user-scoped API: `https://connect.edgeboost.io/connect/v1`
+     * - partner dashboard API: `https://connect.edgeboost.io/v1`
      */
     partnerApiBaseUrl?: string;
     oauthBaseUrl?: string;

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 import * as node_https from 'node:https';
 import { EdgeEnvironment, TransferCategory, Transfer, VerificationSession, TransferType, TransferStatus, User, VerifyIdentityOptions, VerifyIdentityResult, Balance, ListTransfersParams, TransferList, CreateVerificationSessionRequest, VerificationSessionStatusResponse, EdgeTokens, EdgeWebhookEvent, EdgeWebhookEventType } from '@edge-markets/connect';
-export { ACTIVE_EDGE_SCOPES, Balance, BaseWebhookEvent, ConsentRevokedEventData, CreateVerificationSessionRequest, EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE, EDGE_WEBHOOK_EVENT_TYPES, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, EdgeEnvironment, EdgeError, EdgeFeatureUnavailableError, EdgeIdentityVerificationError, EdgeInsufficientScopeError, EdgeNetworkError, EdgeNotFoundError, EdgeTokenExchangeError, EdgeTokens, EdgeValidationError, EdgeWebhookEvent, EdgeWebhookEventType, ListTransfersParams, SdkGeolocation, TRANSFER_CATEGORIES, Transfer, TransferCategory, TransferCompletedEventData, TransferExpiredEventData, TransferFailedEventData, TransferList, TransferListItem, TransferProcessingEventData, TransferStatus, TransferType, User, UserAddress, VerificationSession, VerificationSessionStatus, VerificationSessionStatusResponse, VerifyIdentityAddress, VerifyIdentityOptions, VerifyIdentityResult, VerifyIdentityScores, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isFeatureUnavailableError, isIdentityVerificationError, isNetworkError, isProductionEnvironment } from '@edge-markets/connect';
+export { ACTIVE_EDGE_SCOPES, ALL_EDGE_SCOPES, Balance, BaseWebhookEvent, ConsentRevokedEventData, CreateVerificationSessionRequest, EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE, EDGE_SCOPES, EDGE_WEBHOOK_EVENT_TYPES, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, EdgeEnvironment, EdgeError, EdgeFeatureUnavailableError, EdgeIdentityVerificationError, EdgeInsufficientScopeError, EdgeNetworkError, EdgeNotFoundError, EdgeTokenExchangeError, EdgeTokens, EdgeValidationError, EdgeWebhookEvent, EdgeWebhookEventType, ListTransfersParams, RESERVED_EDGE_SCOPES, SdkGeolocation, TRANSFER_CATEGORIES, Transfer, TransferCategory, TransferCompletedEventData, TransferExpiredEventData, TransferFailedEventData, TransferList, TransferListItem, TransferProcessingEventData, TransferStatus, TransferType, User, UserAddress, VerificationSession, VerificationSessionStatus, VerificationSessionStatusResponse, VerifyIdentityAddress, VerifyIdentityOptions, VerifyIdentityResult, VerifyIdentityScores, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isFeatureUnavailableError, isIdentityVerificationError, isNetworkError, isProductionEnvironment } from '@edge-markets/connect';
 
 type RequestEndpoint = 'connect_api' | 'oauth_token' | 'partner_webhook_sync';
 interface RequestInfo {
@@ -37,8 +37,8 @@ interface EdgeConnectServerConfig {
      * from `apiBaseUrl` by replacing `/connect/v1` with `/v1`, matching the
      * EDGE Connect gateway layout:
      *
-     * - user-scoped API: `https://connect-staging.edgeboost.io/connect/v1`
-     * - partner dashboard API: `https://connect-staging.edgeboost.io/v1`
+     * - user-scoped API: `https://connect.edgeboost.io/connect/v1`
+     * - partner dashboard API: `https://connect.edgeboost.io/v1`
      */
     partnerApiBaseUrl?: string;
     oauthBaseUrl?: string;

package/dist/index.js

@@ -31,8 +31,10 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var index_exports = {};
 __export(index_exports, {
   ACTIVE_EDGE_SCOPES: () => import_connect16.ACTIVE_EDGE_SCOPES,
+  ALL_EDGE_SCOPES: () => import_connect16.ALL_EDGE_SCOPES,
   CONNECT_TRANSFER_DIRECTIONS: () => CONNECT_TRANSFER_DIRECTIONS,
   EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE: () => import_connect15.EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE,
+  EDGE_SCOPES: () => import_connect16.EDGE_SCOPES,
   EDGE_WEBHOOK_EVENT_TYPES: () => import_connect16.EDGE_WEBHOOK_EVENT_TYPES,
   EdgeApiError: () => import_connect15.EdgeApiError,
   EdgeAuthenticationError: () => import_connect15.EdgeAuthenticationError,
@@ -51,6 +53,7 @@ __export(index_exports, {
   EdgeValidationError: () => import_connect15.EdgeValidationError,
   EdgeWebhookInbox: () => EdgeWebhookInbox,
   EdgeWebhookReconciler: () => EdgeWebhookReconciler,
+  RESERVED_EDGE_SCOPES: () => import_connect16.RESERVED_EDGE_SCOPES,
   TRANSFER_CATEGORIES: () => import_connect16.TRANSFER_CATEGORIES,
   assertSameTransferIntent: () => assertSameTransferIntent,
   assertTransferEventMatchesIntent: () => assertTransferEventMatchesIntent,
@@ -856,7 +859,11 @@ function getInstanceKey(config) {
     config.partnerClientId || ""
   ]);
 }
-var MTLS_ENFORCED_HOSTS = /* @__PURE__ */ new Set(["connect-staging.edgeboost.io", "connect.edgeboost.io"]);
+var MTLS_ENFORCED_HOSTS = /* @__PURE__ */ new Set(["sandbox.connect.staging.edgeboost.io", "connect.edgeboost.io"]);
+var CONNECT_INGRESS_REQUIRED_MESSAGE = "Edge Connect API requests must go through the mTLS Connect gateway. Set EDGE_API_BASE_URL and EDGE_OAUTH_BASE_URL to the Connect gateway for this environment and configure EDGE_MTLS_CERT and EDGE_MTLS_KEY.";
+var MTLS_REQUIRED_MESSAGE = "Edge Connect rejected this request because no trusted partner mTLS client certificate was presented. Configure the issued EDGE_MTLS_CERT and EDGE_MTLS_KEY and retry through the Connect gateway.";
+var MTLS_CLIENT_UNREGISTERED_MESSAGE = "Edge Connect accepted the client certificate at the gateway, but the certificate is not registered for this partner. Contact EDGE DevRel to bind the certificate fingerprint to your OAuth client ID.";
+var MTLS_CLIENT_MISMATCH_MESSAGE = "Edge Connect accepted the client certificate at the gateway, but it is not bound to the OAuth client ID used by this request. Use the certificate issued for this client ID or contact EDGE DevRel.";
 function isMtlsEnforcedHost(host) {
   if (MTLS_ENFORCED_HOSTS.has(host)) {
     return true;
@@ -869,7 +876,7 @@ function isMtlsEnforcedHost(host) {
   return false;
 }
 function environmentRequiresMtls(environment, apiBaseUrl) {
-  if (environment === "staging" || environment === "production") {
+  if (environment === "sandbox" || environment === "production") {
     return true;
   }
   try {
@@ -1487,18 +1494,31 @@ var EdgeConnectServer = class _EdgeConnectServer {
     });
   }
   async handleApiErrorFromBody(error, status, path) {
+    const errorCode = error.error || error.code;
     if (status === 401) {
       return new import_connect5.EdgeAuthenticationError(error.message || "Access token is invalid or expired", error);
     }
     if (status === 403) {
-      if (error.error === "consent_required") {
+      if (errorCode === "connect_ingress_required") {
+        return new import_connect5.EdgeApiError("connect_ingress_required", CONNECT_INGRESS_REQUIRED_MESSAGE, status, error);
+      }
+      if (errorCode === "mtls_required") {
+        return new import_connect5.EdgeApiError("mtls_required", MTLS_REQUIRED_MESSAGE, status, error);
+      }
+      if (errorCode === "mtls_client_unregistered") {
+        return new import_connect5.EdgeApiError("mtls_client_unregistered", MTLS_CLIENT_UNREGISTERED_MESSAGE, status, error);
+      }
+      if (errorCode === "mtls_client_mismatch") {
+        return new import_connect5.EdgeApiError("mtls_client_mismatch", MTLS_CLIENT_MISMATCH_MESSAGE, status, error);
+      }
+      if (errorCode === "consent_required") {
         return new import_connect5.EdgeConsentRequiredError(
           this.config.clientId,
           error.consentUrl,
           error.message
         );
       }
-      if (error.error === "insufficient_scope" || error.error === "insufficient_consent") {
+      if (errorCode === "insufficient_scope" || errorCode === "insufficient_consent") {
         return new import_connect5.EdgeInsufficientScopeError(
           error.missing_scopes || error.missingScopes || [],
           error.message
@@ -1580,7 +1600,7 @@ function readPemValue(env, valueName, pathName, warnings) {
   }
 }
 function readEnvironment(env) {
-  const value = readEnv(env, "EDGE_ENVIRONMENT") || "staging";
+  const value = readEnv(env, "EDGE_ENVIRONMENT") || "sandbox";
   if (!ENVIRONMENT_NAMES.has(value)) {
     throw new import_connect6.EdgeValidationError("Invalid EDGE_ENVIRONMENT", {
       EDGE_ENVIRONMENT: [`Must be one of: ${Array.from(ENVIRONMENT_NAMES).join(", ")}`]
@@ -1642,11 +1662,11 @@ function buildMtlsConfig(env, requireMtls, warnings) {
   };
 }
 function inferMtlsRequirement(environment, apiBaseUrl) {
-  if (environment === "staging" || environment === "production") return true;
+  if (environment === "sandbox" || environment === "production") return true;
   const resolvedApiBaseUrl = apiBaseUrl || (0, import_connect6.getEnvironmentConfig)(environment).apiBaseUrl;
   try {
     const host = new URL(resolvedApiBaseUrl).host;
-    return host === "connect-staging.edgeboost.io" || host === "connect.edgeboost.io";
+    return host === "sandbox.connect.staging.edgeboost.io" || host === "connect.edgeboost.io";
   } catch {
     return false;
   }
@@ -1657,7 +1677,7 @@ function createEdgeConnectServerFromEnv(options = {}) {
   const environment = readEnvironment(env);
   const apiBaseUrl = readEnv(env, "EDGE_API_BASE_URL");
   const mtlsRequiredByTarget = inferMtlsRequirement(environment, apiBaseUrl);
-  const requireMtls = options.requireMtls ?? readBooleanEnv(env, "EDGE_REQUIRE_MTLS") ?? false;
+  const requireMtls = options.requireMtls ?? readBooleanEnv(env, "EDGE_REQUIRE_MTLS") ?? mtlsRequiredByTarget;
   const mtls = buildMtlsConfig(env, requireMtls, warnings);
   const timeout = readTimeout(env, options.timeout);
   const clientId = readFirstEnv(env, ["EDGE_CLIENT_ID", "EDGE_CONNECT_CLIENT_ID"]) || "";
@@ -2658,8 +2678,10 @@ var import_connect16 = require("@edge-markets/connect");
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   ACTIVE_EDGE_SCOPES,
+  ALL_EDGE_SCOPES,
   CONNECT_TRANSFER_DIRECTIONS,
   EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE,
+  EDGE_SCOPES,
   EDGE_WEBHOOK_EVENT_TYPES,
   EdgeApiError,
   EdgeAuthenticationError,
@@ -2678,6 +2700,7 @@ var import_connect16 = require("@edge-markets/connect");
   EdgeValidationError,
   EdgeWebhookInbox,
   EdgeWebhookReconciler,
+  RESERVED_EDGE_SCOPES,
   TRANSFER_CATEGORIES,
   assertSameTransferIntent,
   assertTransferEventMatchesIntent,

package/dist/index.mjs

@@ -769,7 +769,11 @@ function getInstanceKey(config) {
     config.partnerClientId || ""
   ]);
 }
-var MTLS_ENFORCED_HOSTS = /* @__PURE__ */ new Set(["connect-staging.edgeboost.io", "connect.edgeboost.io"]);
+var MTLS_ENFORCED_HOSTS = /* @__PURE__ */ new Set(["sandbox.connect.staging.edgeboost.io", "connect.edgeboost.io"]);
+var CONNECT_INGRESS_REQUIRED_MESSAGE = "Edge Connect API requests must go through the mTLS Connect gateway. Set EDGE_API_BASE_URL and EDGE_OAUTH_BASE_URL to the Connect gateway for this environment and configure EDGE_MTLS_CERT and EDGE_MTLS_KEY.";
+var MTLS_REQUIRED_MESSAGE = "Edge Connect rejected this request because no trusted partner mTLS client certificate was presented. Configure the issued EDGE_MTLS_CERT and EDGE_MTLS_KEY and retry through the Connect gateway.";
+var MTLS_CLIENT_UNREGISTERED_MESSAGE = "Edge Connect accepted the client certificate at the gateway, but the certificate is not registered for this partner. Contact EDGE DevRel to bind the certificate fingerprint to your OAuth client ID.";
+var MTLS_CLIENT_MISMATCH_MESSAGE = "Edge Connect accepted the client certificate at the gateway, but it is not bound to the OAuth client ID used by this request. Use the certificate issued for this client ID or contact EDGE DevRel.";
 function isMtlsEnforcedHost(host) {
   if (MTLS_ENFORCED_HOSTS.has(host)) {
     return true;
@@ -782,7 +786,7 @@ function isMtlsEnforcedHost(host) {
   return false;
 }
 function environmentRequiresMtls(environment, apiBaseUrl) {
-  if (environment === "staging" || environment === "production") {
+  if (environment === "sandbox" || environment === "production") {
     return true;
   }
   try {
@@ -1400,18 +1404,31 @@ var EdgeConnectServer = class _EdgeConnectServer {
     });
   }
   async handleApiErrorFromBody(error, status, path) {
+    const errorCode = error.error || error.code;
     if (status === 401) {
       return new EdgeAuthenticationError2(error.message || "Access token is invalid or expired", error);
     }
     if (status === 403) {
-      if (error.error === "consent_required") {
+      if (errorCode === "connect_ingress_required") {
+        return new EdgeApiError("connect_ingress_required", CONNECT_INGRESS_REQUIRED_MESSAGE, status, error);
+      }
+      if (errorCode === "mtls_required") {
+        return new EdgeApiError("mtls_required", MTLS_REQUIRED_MESSAGE, status, error);
+      }
+      if (errorCode === "mtls_client_unregistered") {
+        return new EdgeApiError("mtls_client_unregistered", MTLS_CLIENT_UNREGISTERED_MESSAGE, status, error);
+      }
+      if (errorCode === "mtls_client_mismatch") {
+        return new EdgeApiError("mtls_client_mismatch", MTLS_CLIENT_MISMATCH_MESSAGE, status, error);
+      }
+      if (errorCode === "consent_required") {
         return new EdgeConsentRequiredError(
           this.config.clientId,
           error.consentUrl,
           error.message
         );
       }
-      if (error.error === "insufficient_scope" || error.error === "insufficient_consent") {
+      if (errorCode === "insufficient_scope" || errorCode === "insufficient_consent") {
         return new EdgeInsufficientScopeError(
           error.missing_scopes || error.missingScopes || [],
           error.message
@@ -1493,7 +1510,7 @@ function readPemValue(env, valueName, pathName, warnings) {
   }
 }
 function readEnvironment(env) {
-  const value = readEnv(env, "EDGE_ENVIRONMENT") || "staging";
+  const value = readEnv(env, "EDGE_ENVIRONMENT") || "sandbox";
   if (!ENVIRONMENT_NAMES.has(value)) {
     throw new EdgeValidationError4("Invalid EDGE_ENVIRONMENT", {
       EDGE_ENVIRONMENT: [`Must be one of: ${Array.from(ENVIRONMENT_NAMES).join(", ")}`]
@@ -1555,11 +1572,11 @@ function buildMtlsConfig(env, requireMtls, warnings) {
   };
 }
 function inferMtlsRequirement(environment, apiBaseUrl) {
-  if (environment === "staging" || environment === "production") return true;
+  if (environment === "sandbox" || environment === "production") return true;
   const resolvedApiBaseUrl = apiBaseUrl || getEnvironmentConfig2(environment).apiBaseUrl;
   try {
     const host = new URL(resolvedApiBaseUrl).host;
-    return host === "connect-staging.edgeboost.io" || host === "connect.edgeboost.io";
+    return host === "sandbox.connect.staging.edgeboost.io" || host === "connect.edgeboost.io";
   } catch {
     return false;
   }
@@ -1570,7 +1587,7 @@ function createEdgeConnectServerFromEnv(options = {}) {
   const environment = readEnvironment(env);
   const apiBaseUrl = readEnv(env, "EDGE_API_BASE_URL");
   const mtlsRequiredByTarget = inferMtlsRequirement(environment, apiBaseUrl);
-  const requireMtls = options.requireMtls ?? readBooleanEnv(env, "EDGE_REQUIRE_MTLS") ?? false;
+  const requireMtls = options.requireMtls ?? readBooleanEnv(env, "EDGE_REQUIRE_MTLS") ?? mtlsRequiredByTarget;
   const mtls = buildMtlsConfig(env, requireMtls, warnings);
   const timeout = readTimeout(env, options.timeout);
   const clientId = readFirstEnv(env, ["EDGE_CLIENT_ID", "EDGE_CONNECT_CLIENT_ID"]) || "";
@@ -2600,6 +2617,9 @@ import {
 } from "@edge-markets/connect";
 import {
   ACTIVE_EDGE_SCOPES,
+  ALL_EDGE_SCOPES,
+  EDGE_SCOPES,
+  RESERVED_EDGE_SCOPES,
   EDGE_WEBHOOK_EVENT_TYPES as EDGE_WEBHOOK_EVENT_TYPES2,
   TRANSFER_CATEGORIES,
   getEnvironmentConfig as getEnvironmentConfig3,
@@ -2607,8 +2627,10 @@ import {
 } from "@edge-markets/connect";
 export {
   ACTIVE_EDGE_SCOPES,
+  ALL_EDGE_SCOPES,
   CONNECT_TRANSFER_DIRECTIONS,
   EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE,
+  EDGE_SCOPES,
   EDGE_WEBHOOK_EVENT_TYPES2 as EDGE_WEBHOOK_EVENT_TYPES,
   EdgeApiError2 as EdgeApiError,
   EdgeAuthenticationError4 as EdgeAuthenticationError,
@@ -2627,6 +2649,7 @@ export {
   EdgeValidationError13 as EdgeValidationError,
   EdgeWebhookInbox,
   EdgeWebhookReconciler,
+  RESERVED_EDGE_SCOPES,
   TRANSFER_CATEGORIES,
   assertSameTransferIntent,
   assertTransferEventMatchesIntent,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edge-markets/connect-node",
-  "version": "1.10.1",
+  "version": "1.11.1",
   "description": "Server SDK for EDGE Connect token exchange and API calls",
   "author": "Edge Markets",
   "license": "MIT",
@@ -22,7 +22,7 @@
   },
   "dependencies": {
     "undici": "^5.29.0",
-    "@edge-markets/connect": "^1.8.0"
+    "@edge-markets/connect": "^1.9.1"
   },
   "devDependencies": {
     "tsup": "^8.0.0",