@edge-markets/connect 1.2.0 → 1.3.0

package/dist/index.d.mts

@@ -1,3 +1,139 @@
+type EdgeEnvironment = 'production' | 'staging' | 'sandbox' | 'development';
+interface EdgeEnvironmentConfig {
+    /**
+     * @deprecated cognitoDomain is no longer used. Token exchange now goes through EdgeBoost API.
+     */
+    cognitoDomain: string;
+    apiBaseUrl: string;
+    oauthBaseUrl: string;
+    userClientUrl: string;
+    displayName: string;
+    isProduction: boolean;
+}
+declare const EDGE_ENVIRONMENTS: Readonly<Record<EdgeEnvironment, EdgeEnvironmentConfig>>;
+declare function getEnvironmentConfig(environment: EdgeEnvironment): EdgeEnvironmentConfig;
+declare function isProductionEnvironment(environment: EdgeEnvironment): boolean;
+declare function getAvailableEnvironments(): readonly EdgeEnvironment[];
+
+/**
+ * EDGE Connect OAuth Scopes
+ *
+ * OAuth scopes define what permissions your application requests from users.
+ * Each scope grants access to specific API endpoints.
+ *
+ * @module @edge-markets/connect/config
+ */
+/**
+ * Available OAuth scopes for EDGE Connect.
+ *
+ * Request the minimum scopes your application needs.
+ * Users see these permissions during the consent flow.
+ *
+ * @example
+ * ```typescript
+ * // Request only what you need
+ * link.open({
+ *   scopes: [EDGE_SCOPES.USER_READ, EDGE_SCOPES.BALANCE_READ],
+ * })
+ *
+ * // Or request all scopes
+ * link.open({
+ *   scopes: ALL_EDGE_SCOPES,
+ * })
+ * ```
+ */
+declare const EDGE_SCOPES: {
+    /**
+     * Read user profile information (name, email).
+     * Required for: `GET /v1/user`
+     */
+    readonly USER_READ: "user.read";
+    /**
+     * Read account balance.
+     * Required for: `GET /v1/balance`
+     */
+    readonly BALANCE_READ: "balance.read";
+    /**
+     * Initiate and verify fund transfers.
+     * Required for: `POST /v1/transfer`, `POST /v1/transfer/:id/verify`, `GET /v1/transfers`
+     */
+    readonly TRANSFER_WRITE: "transfer.write";
+};
+/**
+ * Type representing a valid EDGE Connect scope.
+ */
+type EdgeScope = (typeof EDGE_SCOPES)[keyof typeof EDGE_SCOPES];
+/**
+ * All available scopes as an array.
+ * Use when you need full access to all API features.
+ *
+ * @example
+ * ```typescript
+ * const link = new EdgeLink({
+ *   clientId: 'your-client-id',
+ *   environment: 'staging',
+ *   scopes: ALL_EDGE_SCOPES, // Request all permissions
+ *   onSuccess: handleSuccess,
+ * })
+ * ```
+ */
+declare const ALL_EDGE_SCOPES: readonly EdgeScope[];
+/**
+ * Human-readable descriptions for each scope.
+ * Useful for building custom consent UIs or explaining permissions.
+ */
+declare const SCOPE_DESCRIPTIONS: Readonly<Record<EdgeScope, string>>;
+/**
+ * Icons for each scope (for UI display).
+ * Using common icon library names (e.g., Lucide, Heroicons).
+ */
+declare const SCOPE_ICONS: Readonly<Record<EdgeScope, string>>;
+/**
+ * Builds the full scope string for a given environment.
+ *
+ * Different environments may use different scope prefixes in the API Gateway.
+ * This function handles the prefix automatically.
+ *
+ * Note: 'development' environment uses 'staging' scope prefix because it
+ * connects to the staging API Gateway for local testing.
+ *
+ * @param scope - The scope to format
+ * @param environment - The target environment
+ * @returns The full scope string for API Gateway authorization
+ *
+ * @example
+ * ```typescript
+ * formatScopeForEnvironment('user.read', 'staging')
+ * // Returns: 'edge-connect-staging/user.read'
+ *
+ * formatScopeForEnvironment('user.read', 'production')
+ * // Returns: 'edge-connect/user.read'
+ *
+ * formatScopeForEnvironment('user.read', 'development')
+ * // Returns: 'edge-connect-staging/user.read' (maps to staging)
+ * ```
+ */
+declare function formatScopeForEnvironment(scope: EdgeScope, environment: 'production' | 'staging' | 'sandbox' | 'development'): string;
+/**
+ * Formats multiple scopes for an environment.
+ *
+ * @param scopes - Array of scopes to format
+ * @param environment - The target environment
+ * @returns Array of full scope strings
+ */
+declare function formatScopesForEnvironment(scopes: readonly EdgeScope[] | EdgeScope[], environment: 'production' | 'staging' | 'sandbox' | 'development'): string[];
+/**
+ * Parses a full scope string to extract the base scope.
+ *
+ * @param fullScope - The full scope string (e.g., 'edge-connect-staging/user.read')
+ * @returns The base scope (e.g., 'user.read') or null if invalid
+ */
+declare function parseScope(fullScope: string): EdgeScope | null;
+/**
+ * Checks if a scope string is valid.
+ */
+declare function isValidScope(scope: string): scope is EdgeScope;
+
 /**
  * This file was auto-generated by openapi-typescript.
  * Do not make direct changes to the file.
@@ -2308,6 +2444,67 @@ type OtpMethod = 'sms' | 'totp';
  * Parameters for listing transfers.
  */
 type ListTransfersParams = NonNullable<operations['listTransfers']['parameters']['query']>;
+/**
+ * Address block for identity verification.
+ * The block itself is required; all sub-fields are optional — supply as many
+ * as the partner holds for a higher-confidence match.
+ */
+interface VerifyIdentityAddress {
+    /** Street address line (e.g. "123 Main St") */
+    street?: string;
+    city?: string;
+    /** US state code (e.g. "TX") */
+    state?: string;
+    zip?: string;
+}
+/**
+ * Options for `EdgeConnectServer.verifyIdentity()`.
+ *
+ * @example
+ * ```typescript
+ * const options: VerifyIdentityOptions = {
+ *   firstName: 'John',
+ *   lastName: 'Doe',
+ *   address: { street: '123 Main St', city: 'Austin', state: 'TX', zip: '78701' },
+ * }
+ * ```
+ */
+interface VerifyIdentityOptions {
+    firstName: string;
+    lastName: string;
+    /**
+     * Address details are required per the verification contract.
+     * All sub-fields within the block are individually optional — supply as many
+     * as the partner holds for a higher-confidence match.
+     * Address threshold enforcement is skipped if the EdgeBoost user has no address on file.
+     */
+    address: VerifyIdentityAddress;
+}
+/**
+ * Similarity scores returned when identity verification passes.
+ * Partners should log these for their own audit trail.
+ */
+interface VerifyIdentityScores {
+    /** Levenshtein-based full-name similarity score (0–100). Threshold: 70. */
+    name: number;
+    /** Levenshtein-based combined address similarity score (0–100). Threshold: 65. */
+    address: number;
+    /** Whether the ZIP code is an exact digit match. */
+    zipMatch: boolean;
+}
+/**
+ * Response from a successful `verifyIdentity()` call.
+ *
+ * @example
+ * ```typescript
+ * const result: VerifyIdentityResult = await edge.verifyIdentity(accessToken, options)
+ * console.log(`Name score: ${result.scores.name}`) // e.g. 95
+ * ```
+ */
+interface VerifyIdentityResult {
+    verified: true;
+    scores: VerifyIdentityScores;
+}
 /**
  * All possible transfer types.
  * Use for validation or building UI select options.
@@ -2429,142 +2626,29 @@ interface EdgeLinkExit {
         message: string;
     };
 }
-
-type EdgeEnvironment = 'production' | 'staging' | 'sandbox' | 'development';
-interface EdgeEnvironmentConfig {
-    /**
-     * @deprecated cognitoDomain is no longer used. Token exchange now goes through EdgeBoost API.
-     */
-    cognitoDomain: string;
-    apiBaseUrl: string;
-    oauthBaseUrl: string;
-    userClientUrl: string;
-    displayName: string;
-    isProduction: boolean;
+/** PKCE code verifier and challenge pair */
+interface PKCEPair {
+    verifier: string;
+    challenge: string;
+}
+/** Event emitted during the Link flow */
+interface EdgeLinkEvent {
+    eventName: EdgeLinkEventName;
+    timestamp: number;
+    metadata?: Record<string, unknown>;
+}
+/** All possible Link event names (superset of browser + mobile events) */
+type EdgeLinkEventName = 'OPEN' | 'CLOSE' | 'HANDOFF' | 'TRANSITION' | 'REDIRECT' | 'ERROR' | 'SUCCESS';
+/** Base configuration shared by all EdgeLink implementations */
+interface EdgeLinkConfigBase {
+    clientId: string;
+    environment: EdgeEnvironment;
+    onSuccess: (result: EdgeLinkSuccess) => void;
+    onExit?: (metadata: EdgeLinkExit) => void;
+    onEvent?: (event: EdgeLinkEvent) => void;
+    scopes?: EdgeScope[];
+    linkUrl?: string;
 }
-declare const EDGE_ENVIRONMENTS: Readonly<Record<EdgeEnvironment, EdgeEnvironmentConfig>>;
-declare function getEnvironmentConfig(environment: EdgeEnvironment): EdgeEnvironmentConfig;
-declare function isProductionEnvironment(environment: EdgeEnvironment): boolean;
-declare function getAvailableEnvironments(): readonly EdgeEnvironment[];
-
-/**
- * EDGE Connect OAuth Scopes
- *
- * OAuth scopes define what permissions your application requests from users.
- * Each scope grants access to specific API endpoints.
- *
- * @module @edge-markets/connect/config
- */
-/**
- * Available OAuth scopes for EDGE Connect.
- *
- * Request the minimum scopes your application needs.
- * Users see these permissions during the consent flow.
- *
- * @example
- * ```typescript
- * // Request only what you need
- * link.open({
- *   scopes: [EDGE_SCOPES.USER_READ, EDGE_SCOPES.BALANCE_READ],
- * })
- *
- * // Or request all scopes
- * link.open({
- *   scopes: ALL_EDGE_SCOPES,
- * })
- * ```
- */
-declare const EDGE_SCOPES: {
-    /**
-     * Read user profile information (name, email).
-     * Required for: `GET /v1/user`
-     */
-    readonly USER_READ: "user.read";
-    /**
-     * Read account balance.
-     * Required for: `GET /v1/balance`
-     */
-    readonly BALANCE_READ: "balance.read";
-    /**
-     * Initiate and verify fund transfers.
-     * Required for: `POST /v1/transfer`, `POST /v1/transfer/:id/verify`, `GET /v1/transfers`
-     */
-    readonly TRANSFER_WRITE: "transfer.write";
-};
-/**
- * Type representing a valid EDGE Connect scope.
- */
-type EdgeScope = (typeof EDGE_SCOPES)[keyof typeof EDGE_SCOPES];
-/**
- * All available scopes as an array.
- * Use when you need full access to all API features.
- *
- * @example
- * ```typescript
- * const link = new EdgeLink({
- *   clientId: 'your-client-id',
- *   environment: 'staging',
- *   scopes: ALL_EDGE_SCOPES, // Request all permissions
- *   onSuccess: handleSuccess,
- * })
- * ```
- */
-declare const ALL_EDGE_SCOPES: readonly EdgeScope[];
-/**
- * Human-readable descriptions for each scope.
- * Useful for building custom consent UIs or explaining permissions.
- */
-declare const SCOPE_DESCRIPTIONS: Readonly<Record<EdgeScope, string>>;
-/**
- * Icons for each scope (for UI display).
- * Using common icon library names (e.g., Lucide, Heroicons).
- */
-declare const SCOPE_ICONS: Readonly<Record<EdgeScope, string>>;
-/**
- * Builds the full scope string for a given environment.
- *
- * Different environments may use different scope prefixes in the API Gateway.
- * This function handles the prefix automatically.
- *
- * Note: 'development' environment uses 'staging' scope prefix because it
- * connects to the staging API Gateway for local testing.
- *
- * @param scope - The scope to format
- * @param environment - The target environment
- * @returns The full scope string for API Gateway authorization
- *
- * @example
- * ```typescript
- * formatScopeForEnvironment('user.read', 'staging')
- * // Returns: 'edge-connect-staging/user.read'
- *
- * formatScopeForEnvironment('user.read', 'production')
- * // Returns: 'edge-connect/user.read'
- *
- * formatScopeForEnvironment('user.read', 'development')
- * // Returns: 'edge-connect-staging/user.read' (maps to staging)
- * ```
- */
-declare function formatScopeForEnvironment(scope: EdgeScope, environment: 'production' | 'staging' | 'sandbox' | 'development'): string;
-/**
- * Formats multiple scopes for an environment.
- *
- * @param scopes - Array of scopes to format
- * @param environment - The target environment
- * @returns Array of full scope strings
- */
-declare function formatScopesForEnvironment(scopes: readonly EdgeScope[] | EdgeScope[], environment: 'production' | 'staging' | 'sandbox' | 'development'): string[];
-/**
- * Parses a full scope string to extract the base scope.
- *
- * @param fullScope - The full scope string (e.g., 'edge-connect-staging/user.read')
- * @returns The base scope (e.g., 'user.read') or null if invalid
- */
-declare function parseScope(fullScope: string): EdgeScope | null;
-/**
- * Checks if a scope string is valid.
- */
-declare function isValidScope(scope: string): scope is EdgeScope;
 
 /**
  * EDGE Connect SDK Error Classes
@@ -2779,6 +2863,32 @@ declare class EdgeValidationError extends EdgeError {
     readonly validationErrors: Record<string, string[]>;
     constructor(message: string, validationErrors: Record<string, string[]>);
 }
+/**
+ * Thrown when identity verification fails because one or more fields do not meet
+ * the similarity threshold when compared against the user's stored EdgeBoost profile.
+ *
+ * The `fieldErrors` map contains only the fields that failed verification.
+ * Each value is a human-readable message safe to display directly to the user.
+ *
+ * @example
+ * ```typescript
+ * try {
+ *   await edge.verifyIdentity(accessToken, { firstName: 'John', lastName: 'Doe', address: {} })
+ * } catch (error) {
+ *   if (error instanceof EdgeIdentityVerificationError) {
+ *     if (error.fieldErrors.name) {
+ *       showMessage(error.fieldErrors.name)
+ *       // "Name doesn't match what is on file, please contact support"
+ *     }
+ *   }
+ * }
+ * ```
+ */
+declare class EdgeIdentityVerificationError extends EdgeError {
+    /** Field-level messages for each failing field. Keys match the request fields (e.g. `name`, `address`). */
+    readonly fieldErrors: Record<string, string>;
+    constructor(fieldErrors: Record<string, string>, message?: string);
+}
 /**
  * Thrown when a popup is blocked by the browser.
  *
@@ -2857,6 +2967,10 @@ declare function isConsentRequiredError(error: unknown): error is EdgeConsentReq
  * Type guard for API errors.
  */
 declare function isApiError(error: unknown): error is EdgeApiError;
+/**
+ * Type guard for identity verification errors.
+ */
+declare function isIdentityVerificationError(error: unknown): error is EdgeIdentityVerificationError;
 /**
  * Type guard for network errors.
  */
@@ -2909,4 +3023,4 @@ declare const SDK_VERSION = "1.0.0";
  */
 declare const SDK_NAME = "@edge-markets/connect";
 
-export { ALL_EDGE_SCOPES, type ApiError, type Balance, type ConsentRequiredError, EDGE_ENVIRONMENTS, EDGE_SCOPES, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, type EdgeEnvironment, type EdgeEnvironmentConfig, EdgeError, EdgeInsufficientScopeError, type EdgeLinkExit, type EdgeLinkSuccess, EdgeNetworkError, EdgeNotFoundError, EdgePopupBlockedError, EdgePopupClosedError, type EdgeScope, EdgeStateMismatchError, EdgeTokenExchangeError, type EdgeTokens, EdgeValidationError, type InitiateTransferRequest, type ListTransfersParams, OTP_METHODS, type OtpMethod, type RevokeConsentResponse, SCOPE_DESCRIPTIONS, SCOPE_ICONS, SDK_NAME, SDK_VERSION, TRANSFER_STATUSES, TRANSFER_TYPES, type Transfer, type TransferList, type TransferListItem, type TransferStatus, type TransferType, type User, type VerifyTransferRequest, type components, formatScopeForEnvironment, formatScopesForEnvironment, getAvailableEnvironments, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isNetworkError, isProductionEnvironment, isValidScope, type operations, parseScope, type paths };
+export { ALL_EDGE_SCOPES, type ApiError, type Balance, type ConsentRequiredError, EDGE_ENVIRONMENTS, EDGE_SCOPES, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, type EdgeEnvironment, type EdgeEnvironmentConfig, EdgeError, EdgeIdentityVerificationError, EdgeInsufficientScopeError, type EdgeLinkConfigBase, type EdgeLinkEvent, type EdgeLinkEventName, type EdgeLinkExit, type EdgeLinkSuccess, EdgeNetworkError, EdgeNotFoundError, EdgePopupBlockedError, EdgePopupClosedError, type EdgeScope, EdgeStateMismatchError, EdgeTokenExchangeError, type EdgeTokens, EdgeValidationError, type InitiateTransferRequest, type ListTransfersParams, OTP_METHODS, type OtpMethod, type PKCEPair, type RevokeConsentResponse, SCOPE_DESCRIPTIONS, SCOPE_ICONS, SDK_NAME, SDK_VERSION, TRANSFER_STATUSES, TRANSFER_TYPES, type Transfer, type TransferList, type TransferListItem, type TransferStatus, type TransferType, type User, type VerifyIdentityAddress, type VerifyIdentityOptions, type VerifyIdentityResult, type VerifyIdentityScores, type VerifyTransferRequest, type components, formatScopeForEnvironment, formatScopesForEnvironment, getAvailableEnvironments, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isIdentityVerificationError, isNetworkError, isProductionEnvironment, isValidScope, type operations, parseScope, type paths };

package/dist/index.d.ts

@@ -1,3 +1,139 @@
+type EdgeEnvironment = 'production' | 'staging' | 'sandbox' | 'development';
+interface EdgeEnvironmentConfig {
+    /**
+     * @deprecated cognitoDomain is no longer used. Token exchange now goes through EdgeBoost API.
+     */
+    cognitoDomain: string;
+    apiBaseUrl: string;
+    oauthBaseUrl: string;
+    userClientUrl: string;
+    displayName: string;
+    isProduction: boolean;
+}
+declare const EDGE_ENVIRONMENTS: Readonly<Record<EdgeEnvironment, EdgeEnvironmentConfig>>;
+declare function getEnvironmentConfig(environment: EdgeEnvironment): EdgeEnvironmentConfig;
+declare function isProductionEnvironment(environment: EdgeEnvironment): boolean;
+declare function getAvailableEnvironments(): readonly EdgeEnvironment[];
+
+/**
+ * EDGE Connect OAuth Scopes
+ *
+ * OAuth scopes define what permissions your application requests from users.
+ * Each scope grants access to specific API endpoints.
+ *
+ * @module @edge-markets/connect/config
+ */
+/**
+ * Available OAuth scopes for EDGE Connect.
+ *
+ * Request the minimum scopes your application needs.
+ * Users see these permissions during the consent flow.
+ *
+ * @example
+ * ```typescript
+ * // Request only what you need
+ * link.open({
+ *   scopes: [EDGE_SCOPES.USER_READ, EDGE_SCOPES.BALANCE_READ],
+ * })
+ *
+ * // Or request all scopes
+ * link.open({
+ *   scopes: ALL_EDGE_SCOPES,
+ * })
+ * ```
+ */
+declare const EDGE_SCOPES: {
+    /**
+     * Read user profile information (name, email).
+     * Required for: `GET /v1/user`
+     */
+    readonly USER_READ: "user.read";
+    /**
+     * Read account balance.
+     * Required for: `GET /v1/balance`
+     */
+    readonly BALANCE_READ: "balance.read";
+    /**
+     * Initiate and verify fund transfers.
+     * Required for: `POST /v1/transfer`, `POST /v1/transfer/:id/verify`, `GET /v1/transfers`
+     */
+    readonly TRANSFER_WRITE: "transfer.write";
+};
+/**
+ * Type representing a valid EDGE Connect scope.
+ */
+type EdgeScope = (typeof EDGE_SCOPES)[keyof typeof EDGE_SCOPES];
+/**
+ * All available scopes as an array.
+ * Use when you need full access to all API features.
+ *
+ * @example
+ * ```typescript
+ * const link = new EdgeLink({
+ *   clientId: 'your-client-id',
+ *   environment: 'staging',
+ *   scopes: ALL_EDGE_SCOPES, // Request all permissions
+ *   onSuccess: handleSuccess,
+ * })
+ * ```
+ */
+declare const ALL_EDGE_SCOPES: readonly EdgeScope[];
+/**
+ * Human-readable descriptions for each scope.
+ * Useful for building custom consent UIs or explaining permissions.
+ */
+declare const SCOPE_DESCRIPTIONS: Readonly<Record<EdgeScope, string>>;
+/**
+ * Icons for each scope (for UI display).
+ * Using common icon library names (e.g., Lucide, Heroicons).
+ */
+declare const SCOPE_ICONS: Readonly<Record<EdgeScope, string>>;
+/**
+ * Builds the full scope string for a given environment.
+ *
+ * Different environments may use different scope prefixes in the API Gateway.
+ * This function handles the prefix automatically.
+ *
+ * Note: 'development' environment uses 'staging' scope prefix because it
+ * connects to the staging API Gateway for local testing.
+ *
+ * @param scope - The scope to format
+ * @param environment - The target environment
+ * @returns The full scope string for API Gateway authorization
+ *
+ * @example
+ * ```typescript
+ * formatScopeForEnvironment('user.read', 'staging')
+ * // Returns: 'edge-connect-staging/user.read'
+ *
+ * formatScopeForEnvironment('user.read', 'production')
+ * // Returns: 'edge-connect/user.read'
+ *
+ * formatScopeForEnvironment('user.read', 'development')
+ * // Returns: 'edge-connect-staging/user.read' (maps to staging)
+ * ```
+ */
+declare function formatScopeForEnvironment(scope: EdgeScope, environment: 'production' | 'staging' | 'sandbox' | 'development'): string;
+/**
+ * Formats multiple scopes for an environment.
+ *
+ * @param scopes - Array of scopes to format
+ * @param environment - The target environment
+ * @returns Array of full scope strings
+ */
+declare function formatScopesForEnvironment(scopes: readonly EdgeScope[] | EdgeScope[], environment: 'production' | 'staging' | 'sandbox' | 'development'): string[];
+/**
+ * Parses a full scope string to extract the base scope.
+ *
+ * @param fullScope - The full scope string (e.g., 'edge-connect-staging/user.read')
+ * @returns The base scope (e.g., 'user.read') or null if invalid
+ */
+declare function parseScope(fullScope: string): EdgeScope | null;
+/**
+ * Checks if a scope string is valid.
+ */
+declare function isValidScope(scope: string): scope is EdgeScope;
+
 /**
  * This file was auto-generated by openapi-typescript.
  * Do not make direct changes to the file.
@@ -2308,6 +2444,67 @@ type OtpMethod = 'sms' | 'totp';
  * Parameters for listing transfers.
  */
 type ListTransfersParams = NonNullable<operations['listTransfers']['parameters']['query']>;
+/**
+ * Address block for identity verification.
+ * The block itself is required; all sub-fields are optional — supply as many
+ * as the partner holds for a higher-confidence match.
+ */
+interface VerifyIdentityAddress {
+    /** Street address line (e.g. "123 Main St") */
+    street?: string;
+    city?: string;
+    /** US state code (e.g. "TX") */
+    state?: string;
+    zip?: string;
+}
+/**
+ * Options for `EdgeConnectServer.verifyIdentity()`.
+ *
+ * @example
+ * ```typescript
+ * const options: VerifyIdentityOptions = {
+ *   firstName: 'John',
+ *   lastName: 'Doe',
+ *   address: { street: '123 Main St', city: 'Austin', state: 'TX', zip: '78701' },
+ * }
+ * ```
+ */
+interface VerifyIdentityOptions {
+    firstName: string;
+    lastName: string;
+    /**
+     * Address details are required per the verification contract.
+     * All sub-fields within the block are individually optional — supply as many
+     * as the partner holds for a higher-confidence match.
+     * Address threshold enforcement is skipped if the EdgeBoost user has no address on file.
+     */
+    address: VerifyIdentityAddress;
+}
+/**
+ * Similarity scores returned when identity verification passes.
+ * Partners should log these for their own audit trail.
+ */
+interface VerifyIdentityScores {
+    /** Levenshtein-based full-name similarity score (0–100). Threshold: 70. */
+    name: number;
+    /** Levenshtein-based combined address similarity score (0–100). Threshold: 65. */
+    address: number;
+    /** Whether the ZIP code is an exact digit match. */
+    zipMatch: boolean;
+}
+/**
+ * Response from a successful `verifyIdentity()` call.
+ *
+ * @example
+ * ```typescript
+ * const result: VerifyIdentityResult = await edge.verifyIdentity(accessToken, options)
+ * console.log(`Name score: ${result.scores.name}`) // e.g. 95
+ * ```
+ */
+interface VerifyIdentityResult {
+    verified: true;
+    scores: VerifyIdentityScores;
+}
 /**
  * All possible transfer types.
  * Use for validation or building UI select options.
@@ -2429,142 +2626,29 @@ interface EdgeLinkExit {
         message: string;
     };
 }
-
-type EdgeEnvironment = 'production' | 'staging' | 'sandbox' | 'development';
-interface EdgeEnvironmentConfig {
-    /**
-     * @deprecated cognitoDomain is no longer used. Token exchange now goes through EdgeBoost API.
-     */
-    cognitoDomain: string;
-    apiBaseUrl: string;
-    oauthBaseUrl: string;
-    userClientUrl: string;
-    displayName: string;
-    isProduction: boolean;
+/** PKCE code verifier and challenge pair */
+interface PKCEPair {
+    verifier: string;
+    challenge: string;
+}
+/** Event emitted during the Link flow */
+interface EdgeLinkEvent {
+    eventName: EdgeLinkEventName;
+    timestamp: number;
+    metadata?: Record<string, unknown>;
+}
+/** All possible Link event names (superset of browser + mobile events) */
+type EdgeLinkEventName = 'OPEN' | 'CLOSE' | 'HANDOFF' | 'TRANSITION' | 'REDIRECT' | 'ERROR' | 'SUCCESS';
+/** Base configuration shared by all EdgeLink implementations */
+interface EdgeLinkConfigBase {
+    clientId: string;
+    environment: EdgeEnvironment;
+    onSuccess: (result: EdgeLinkSuccess) => void;
+    onExit?: (metadata: EdgeLinkExit) => void;
+    onEvent?: (event: EdgeLinkEvent) => void;
+    scopes?: EdgeScope[];
+    linkUrl?: string;
 }
-declare const EDGE_ENVIRONMENTS: Readonly<Record<EdgeEnvironment, EdgeEnvironmentConfig>>;
-declare function getEnvironmentConfig(environment: EdgeEnvironment): EdgeEnvironmentConfig;
-declare function isProductionEnvironment(environment: EdgeEnvironment): boolean;
-declare function getAvailableEnvironments(): readonly EdgeEnvironment[];
-
-/**
- * EDGE Connect OAuth Scopes
- *
- * OAuth scopes define what permissions your application requests from users.
- * Each scope grants access to specific API endpoints.
- *
- * @module @edge-markets/connect/config
- */
-/**
- * Available OAuth scopes for EDGE Connect.
- *
- * Request the minimum scopes your application needs.
- * Users see these permissions during the consent flow.
- *
- * @example
- * ```typescript
- * // Request only what you need
- * link.open({
- *   scopes: [EDGE_SCOPES.USER_READ, EDGE_SCOPES.BALANCE_READ],
- * })
- *
- * // Or request all scopes
- * link.open({
- *   scopes: ALL_EDGE_SCOPES,
- * })
- * ```
- */
-declare const EDGE_SCOPES: {
-    /**
-     * Read user profile information (name, email).
-     * Required for: `GET /v1/user`
-     */
-    readonly USER_READ: "user.read";
-    /**
-     * Read account balance.
-     * Required for: `GET /v1/balance`
-     */
-    readonly BALANCE_READ: "balance.read";
-    /**
-     * Initiate and verify fund transfers.
-     * Required for: `POST /v1/transfer`, `POST /v1/transfer/:id/verify`, `GET /v1/transfers`
-     */
-    readonly TRANSFER_WRITE: "transfer.write";
-};
-/**
- * Type representing a valid EDGE Connect scope.
- */
-type EdgeScope = (typeof EDGE_SCOPES)[keyof typeof EDGE_SCOPES];
-/**
- * All available scopes as an array.
- * Use when you need full access to all API features.
- *
- * @example
- * ```typescript
- * const link = new EdgeLink({
- *   clientId: 'your-client-id',
- *   environment: 'staging',
- *   scopes: ALL_EDGE_SCOPES, // Request all permissions
- *   onSuccess: handleSuccess,
- * })
- * ```
- */
-declare const ALL_EDGE_SCOPES: readonly EdgeScope[];
-/**
- * Human-readable descriptions for each scope.
- * Useful for building custom consent UIs or explaining permissions.
- */
-declare const SCOPE_DESCRIPTIONS: Readonly<Record<EdgeScope, string>>;
-/**
- * Icons for each scope (for UI display).
- * Using common icon library names (e.g., Lucide, Heroicons).
- */
-declare const SCOPE_ICONS: Readonly<Record<EdgeScope, string>>;
-/**
- * Builds the full scope string for a given environment.
- *
- * Different environments may use different scope prefixes in the API Gateway.
- * This function handles the prefix automatically.
- *
- * Note: 'development' environment uses 'staging' scope prefix because it
- * connects to the staging API Gateway for local testing.
- *
- * @param scope - The scope to format
- * @param environment - The target environment
- * @returns The full scope string for API Gateway authorization
- *
- * @example
- * ```typescript
- * formatScopeForEnvironment('user.read', 'staging')
- * // Returns: 'edge-connect-staging/user.read'
- *
- * formatScopeForEnvironment('user.read', 'production')
- * // Returns: 'edge-connect/user.read'
- *
- * formatScopeForEnvironment('user.read', 'development')
- * // Returns: 'edge-connect-staging/user.read' (maps to staging)
- * ```
- */
-declare function formatScopeForEnvironment(scope: EdgeScope, environment: 'production' | 'staging' | 'sandbox' | 'development'): string;
-/**
- * Formats multiple scopes for an environment.
- *
- * @param scopes - Array of scopes to format
- * @param environment - The target environment
- * @returns Array of full scope strings
- */
-declare function formatScopesForEnvironment(scopes: readonly EdgeScope[] | EdgeScope[], environment: 'production' | 'staging' | 'sandbox' | 'development'): string[];
-/**
- * Parses a full scope string to extract the base scope.
- *
- * @param fullScope - The full scope string (e.g., 'edge-connect-staging/user.read')
- * @returns The base scope (e.g., 'user.read') or null if invalid
- */
-declare function parseScope(fullScope: string): EdgeScope | null;
-/**
- * Checks if a scope string is valid.
- */
-declare function isValidScope(scope: string): scope is EdgeScope;
 
 /**
  * EDGE Connect SDK Error Classes
@@ -2779,6 +2863,32 @@ declare class EdgeValidationError extends EdgeError {
     readonly validationErrors: Record<string, string[]>;
     constructor(message: string, validationErrors: Record<string, string[]>);
 }
+/**
+ * Thrown when identity verification fails because one or more fields do not meet
+ * the similarity threshold when compared against the user's stored EdgeBoost profile.
+ *
+ * The `fieldErrors` map contains only the fields that failed verification.
+ * Each value is a human-readable message safe to display directly to the user.
+ *
+ * @example
+ * ```typescript
+ * try {
+ *   await edge.verifyIdentity(accessToken, { firstName: 'John', lastName: 'Doe', address: {} })
+ * } catch (error) {
+ *   if (error instanceof EdgeIdentityVerificationError) {
+ *     if (error.fieldErrors.name) {
+ *       showMessage(error.fieldErrors.name)
+ *       // "Name doesn't match what is on file, please contact support"
+ *     }
+ *   }
+ * }
+ * ```
+ */
+declare class EdgeIdentityVerificationError extends EdgeError {
+    /** Field-level messages for each failing field. Keys match the request fields (e.g. `name`, `address`). */
+    readonly fieldErrors: Record<string, string>;
+    constructor(fieldErrors: Record<string, string>, message?: string);
+}
 /**
  * Thrown when a popup is blocked by the browser.
  *
@@ -2857,6 +2967,10 @@ declare function isConsentRequiredError(error: unknown): error is EdgeConsentReq
  * Type guard for API errors.
  */
 declare function isApiError(error: unknown): error is EdgeApiError;
+/**
+ * Type guard for identity verification errors.
+ */
+declare function isIdentityVerificationError(error: unknown): error is EdgeIdentityVerificationError;
 /**
  * Type guard for network errors.
  */
@@ -2909,4 +3023,4 @@ declare const SDK_VERSION = "1.0.0";
  */
 declare const SDK_NAME = "@edge-markets/connect";
 
-export { ALL_EDGE_SCOPES, type ApiError, type Balance, type ConsentRequiredError, EDGE_ENVIRONMENTS, EDGE_SCOPES, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, type EdgeEnvironment, type EdgeEnvironmentConfig, EdgeError, EdgeInsufficientScopeError, type EdgeLinkExit, type EdgeLinkSuccess, EdgeNetworkError, EdgeNotFoundError, EdgePopupBlockedError, EdgePopupClosedError, type EdgeScope, EdgeStateMismatchError, EdgeTokenExchangeError, type EdgeTokens, EdgeValidationError, type InitiateTransferRequest, type ListTransfersParams, OTP_METHODS, type OtpMethod, type RevokeConsentResponse, SCOPE_DESCRIPTIONS, SCOPE_ICONS, SDK_NAME, SDK_VERSION, TRANSFER_STATUSES, TRANSFER_TYPES, type Transfer, type TransferList, type TransferListItem, type TransferStatus, type TransferType, type User, type VerifyTransferRequest, type components, formatScopeForEnvironment, formatScopesForEnvironment, getAvailableEnvironments, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isNetworkError, isProductionEnvironment, isValidScope, type operations, parseScope, type paths };
+export { ALL_EDGE_SCOPES, type ApiError, type Balance, type ConsentRequiredError, EDGE_ENVIRONMENTS, EDGE_SCOPES, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, type EdgeEnvironment, type EdgeEnvironmentConfig, EdgeError, EdgeIdentityVerificationError, EdgeInsufficientScopeError, type EdgeLinkConfigBase, type EdgeLinkEvent, type EdgeLinkEventName, type EdgeLinkExit, type EdgeLinkSuccess, EdgeNetworkError, EdgeNotFoundError, EdgePopupBlockedError, EdgePopupClosedError, type EdgeScope, EdgeStateMismatchError, EdgeTokenExchangeError, type EdgeTokens, EdgeValidationError, type InitiateTransferRequest, type ListTransfersParams, OTP_METHODS, type OtpMethod, type PKCEPair, type RevokeConsentResponse, SCOPE_DESCRIPTIONS, SCOPE_ICONS, SDK_NAME, SDK_VERSION, TRANSFER_STATUSES, TRANSFER_TYPES, type Transfer, type TransferList, type TransferListItem, type TransferStatus, type TransferType, type User, type VerifyIdentityAddress, type VerifyIdentityOptions, type VerifyIdentityResult, type VerifyIdentityScores, type VerifyTransferRequest, type components, formatScopeForEnvironment, formatScopesForEnvironment, getAvailableEnvironments, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isIdentityVerificationError, isNetworkError, isProductionEnvironment, isValidScope, type operations, parseScope, type paths };

package/dist/index.js

@@ -27,6 +27,7 @@ __export(index_exports, {
   EdgeAuthenticationError: () => EdgeAuthenticationError,
   EdgeConsentRequiredError: () => EdgeConsentRequiredError,
   EdgeError: () => EdgeError,
+  EdgeIdentityVerificationError: () => EdgeIdentityVerificationError,
   EdgeInsufficientScopeError: () => EdgeInsufficientScopeError,
   EdgeNetworkError: () => EdgeNetworkError,
   EdgeNotFoundError: () => EdgeNotFoundError,
@@ -50,6 +51,7 @@ __export(index_exports, {
   isAuthenticationError: () => isAuthenticationError,
   isConsentRequiredError: () => isConsentRequiredError,
   isEdgeError: () => isEdgeError,
+  isIdentityVerificationError: () => isIdentityVerificationError,
   isNetworkError: () => isNetworkError,
   isProductionEnvironment: () => isProductionEnvironment,
   isValidScope: () => isValidScope,
@@ -203,34 +205,19 @@ var EdgeError = class _EdgeError extends Error {
 };
 var EdgeAuthenticationError = class extends EdgeError {
   constructor(message, details) {
-    super(
-      "authentication_failed",
-      message || "Authentication failed or access token is invalid/expired",
-      401,
-      details
-    );
+    super("authentication_failed", message || "Authentication failed or access token is invalid/expired", 401, details);
     this.name = "EdgeAuthenticationError";
   }
 };
 var EdgeTokenExchangeError = class extends EdgeError {
   constructor(message, details) {
-    super(
-      "token_exchange_failed",
-      message || "Failed to exchange authorization code for tokens",
-      400,
-      details
-    );
+    super("token_exchange_failed", message || "Failed to exchange authorization code for tokens", 400, details);
     this.name = "EdgeTokenExchangeError";
   }
 };
 var EdgeConsentRequiredError = class extends EdgeError {
   constructor(clientId, consentUrl, message) {
-    super(
-      "consent_required",
-      message || "User has not granted consent to this application",
-      403,
-      { clientId, consentUrl }
-    );
+    super("consent_required", message || "User has not granted consent to this application", 403, { clientId, consentUrl });
     this.name = "EdgeConsentRequiredError";
     this.clientId = clientId;
     this.consentUrl = consentUrl;
@@ -238,12 +225,7 @@ var EdgeConsentRequiredError = class extends EdgeError {
 };
 var EdgeInsufficientScopeError = class extends EdgeError {
   constructor(missingScopes, message) {
-    super(
-      "insufficient_scope",
-      message || `Missing required scopes: ${missingScopes.join(", ")}`,
-      403,
-      { missingScopes }
-    );
+    super("insufficient_scope", message || `Missing required scopes: ${missingScopes.join(", ")}`, 403, { missingScopes });
     this.name = "EdgeInsufficientScopeError";
     this.missingScopes = missingScopes;
   }
@@ -269,12 +251,18 @@ var EdgeValidationError = class extends EdgeError {
     this.validationErrors = validationErrors;
   }
 };
+var EdgeIdentityVerificationError = class extends EdgeError {
+  constructor(fieldErrors, message) {
+    super("identity_verification_failed", message || "Identity verification failed. Please contact support.", 422, {
+      fieldErrors
+    });
+    this.name = "EdgeIdentityVerificationError";
+    this.fieldErrors = fieldErrors;
+  }
+};
 var EdgePopupBlockedError = class extends EdgeError {
   constructor() {
-    super(
-      "popup_blocked",
-      "Popup was blocked by the browser. Please allow popups for this site and try again."
-    );
+    super("popup_blocked", "Popup was blocked by the browser. Please allow popups for this site and try again.");
     this.name = "EdgePopupBlockedError";
   }
   toUserMessage() {
@@ -289,10 +277,7 @@ var EdgePopupClosedError = class extends EdgeError {
 };
 var EdgeStateMismatchError = class extends EdgeError {
   constructor() {
-    super(
-      "state_mismatch",
-      "Security error: state parameter mismatch. Please try again."
-    );
+    super("state_mismatch", "Security error: state parameter mismatch. Please try again.");
     this.name = "EdgeStateMismatchError";
   }
 };
@@ -317,6 +302,9 @@ function isConsentRequiredError(error) {
 function isApiError(error) {
   return error instanceof EdgeApiError;
 }
+function isIdentityVerificationError(error) {
+  return error instanceof EdgeIdentityVerificationError;
+}
 function isNetworkError(error) {
   return error instanceof EdgeNetworkError;
 }
@@ -333,6 +321,7 @@ var SDK_NAME = "@edge-markets/connect";
   EdgeAuthenticationError,
   EdgeConsentRequiredError,
   EdgeError,
+  EdgeIdentityVerificationError,
   EdgeInsufficientScopeError,
   EdgeNetworkError,
   EdgeNotFoundError,
@@ -356,6 +345,7 @@ var SDK_NAME = "@edge-markets/connect";
   isAuthenticationError,
   isConsentRequiredError,
   isEdgeError,
+  isIdentityVerificationError,
   isNetworkError,
   isProductionEnvironment,
   isValidScope,

package/dist/index.mjs

@@ -144,34 +144,19 @@ var EdgeError = class _EdgeError extends Error {
 };
 var EdgeAuthenticationError = class extends EdgeError {
   constructor(message, details) {
-    super(
-      "authentication_failed",
-      message || "Authentication failed or access token is invalid/expired",
-      401,
-      details
-    );
+    super("authentication_failed", message || "Authentication failed or access token is invalid/expired", 401, details);
     this.name = "EdgeAuthenticationError";
   }
 };
 var EdgeTokenExchangeError = class extends EdgeError {
   constructor(message, details) {
-    super(
-      "token_exchange_failed",
-      message || "Failed to exchange authorization code for tokens",
-      400,
-      details
-    );
+    super("token_exchange_failed", message || "Failed to exchange authorization code for tokens", 400, details);
     this.name = "EdgeTokenExchangeError";
   }
 };
 var EdgeConsentRequiredError = class extends EdgeError {
   constructor(clientId, consentUrl, message) {
-    super(
-      "consent_required",
-      message || "User has not granted consent to this application",
-      403,
-      { clientId, consentUrl }
-    );
+    super("consent_required", message || "User has not granted consent to this application", 403, { clientId, consentUrl });
     this.name = "EdgeConsentRequiredError";
     this.clientId = clientId;
     this.consentUrl = consentUrl;
@@ -179,12 +164,7 @@ var EdgeConsentRequiredError = class extends EdgeError {
 };
 var EdgeInsufficientScopeError = class extends EdgeError {
   constructor(missingScopes, message) {
-    super(
-      "insufficient_scope",
-      message || `Missing required scopes: ${missingScopes.join(", ")}`,
-      403,
-      { missingScopes }
-    );
+    super("insufficient_scope", message || `Missing required scopes: ${missingScopes.join(", ")}`, 403, { missingScopes });
     this.name = "EdgeInsufficientScopeError";
     this.missingScopes = missingScopes;
   }
@@ -210,12 +190,18 @@ var EdgeValidationError = class extends EdgeError {
     this.validationErrors = validationErrors;
   }
 };
+var EdgeIdentityVerificationError = class extends EdgeError {
+  constructor(fieldErrors, message) {
+    super("identity_verification_failed", message || "Identity verification failed. Please contact support.", 422, {
+      fieldErrors
+    });
+    this.name = "EdgeIdentityVerificationError";
+    this.fieldErrors = fieldErrors;
+  }
+};
 var EdgePopupBlockedError = class extends EdgeError {
   constructor() {
-    super(
-      "popup_blocked",
-      "Popup was blocked by the browser. Please allow popups for this site and try again."
-    );
+    super("popup_blocked", "Popup was blocked by the browser. Please allow popups for this site and try again.");
     this.name = "EdgePopupBlockedError";
   }
   toUserMessage() {
@@ -230,10 +216,7 @@ var EdgePopupClosedError = class extends EdgeError {
 };
 var EdgeStateMismatchError = class extends EdgeError {
   constructor() {
-    super(
-      "state_mismatch",
-      "Security error: state parameter mismatch. Please try again."
-    );
+    super("state_mismatch", "Security error: state parameter mismatch. Please try again.");
     this.name = "EdgeStateMismatchError";
   }
 };
@@ -258,6 +241,9 @@ function isConsentRequiredError(error) {
 function isApiError(error) {
   return error instanceof EdgeApiError;
 }
+function isIdentityVerificationError(error) {
+  return error instanceof EdgeIdentityVerificationError;
+}
 function isNetworkError(error) {
   return error instanceof EdgeNetworkError;
 }
@@ -273,6 +259,7 @@ export {
   EdgeAuthenticationError,
   EdgeConsentRequiredError,
   EdgeError,
+  EdgeIdentityVerificationError,
   EdgeInsufficientScopeError,
   EdgeNetworkError,
   EdgeNotFoundError,
@@ -296,6 +283,7 @@ export {
   isAuthenticationError,
   isConsentRequiredError,
   isEdgeError,
+  isIdentityVerificationError,
   isNetworkError,
   isProductionEnvironment,
   isValidScope,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edge-markets/connect",
-  "version": "1.2.0",
+  "version": "1.3.0",
   "description": "Core types, configuration, and utilities for EDGE Connect SDK",
   "author": "EdgeBoost",
   "license": "MIT",