@edge-markets/connect 1.5.1 → 1.6.1

package/README.md

@@ -24,6 +24,7 @@ import type {
   Balance,
   Transfer,
   EdgeTokens,
+  EdgeWebhookEvent,
 } from '@edge-markets/connect'
 
 // Types are generated from the OpenAPI spec
@@ -36,6 +37,49 @@ const user: User = {
 }
 ```
 
+### Webhook events
+
+`EdgeWebhookEvent` is a discriminated union over `event.type` covering every
+event the producer emits. Switching narrows `event.data` to the matching
+variant — no casts:
+
+```typescript
+import type { EdgeWebhookEvent } from '@edge-markets/connect'
+
+function handle(event: EdgeWebhookEvent) {
+  switch (event.type) {
+    case 'transfer.completed':
+      // event.data is { transferId, status: 'completed', type, amount }
+      console.log(`completed: ${event.data.transferId} for ${event.data.amount}`)
+      break
+    case 'transfer.failed':
+      // event.data.reason is `string | undefined`
+      console.log(`failed: ${event.data.reason ?? 'unknown'}`)
+      break
+    case 'transfer.expired':
+      console.log(`expired: ${event.data.transferId}`)
+      break
+    case 'transfer.processing':
+      // @experimental — reserved for ledger dual-write hand-off
+      break
+    case 'consent.revoked':
+      console.log(`consent revoked: ${event.data.userId}`)
+      break
+    default: {
+      const _exhaustive: never = event
+      return _exhaustive
+    }
+  }
+}
+```
+
+> `event.data.amount` is intentionally typed as `string` (e.g. `'100.00'`) to
+> preserve decimal precision. Parse with a decimal-aware library on your side.
+
+For HMAC signature verification on the live HTTP delivery channel, use
+`verifyWebhookSignature` from `@edge-markets/connect-node`. For
+reconciliation polling, use `EdgeConnectServer.syncWebhookEvents`.
+
 ### Configuration
 
 Get environment-specific URLs:
@@ -43,12 +87,14 @@ Get environment-specific URLs:
 ```typescript
 import {
   getEnvironmentConfig,
+  getLinkUrl,
   EDGE_SCOPES,
   formatScopeForEnvironment,
 } from '@edge-markets/connect'
 
 const config = getEnvironmentConfig('staging')
 console.log(config.apiBaseUrl) // https://...
+console.log(getLinkUrl('staging')) // https://oauth.staging-app.edgeboost.io/oauth/link
 
 // Format scopes for your environment
 const scopes = formatScopeForEnvironment(EDGE_SCOPES.BALANCE_READ, 'staging')
@@ -93,6 +139,12 @@ try {
 | `EdgeTokens` | OAuth tokens |
 | `EdgeLinkSuccess` | Successful link result |
 | `EdgeLinkExit` | Link exit metadata |
+| `EdgeWebhookEvent` | Discriminated union over webhook event types |
+| `TransferCompletedEventData` | Payload for `transfer.completed` |
+| `TransferFailedEventData` | Payload for `transfer.failed` (includes optional `reason`) |
+| `TransferExpiredEventData` | Payload for `transfer.expired` |
+| `ConsentRevokedEventData` | Payload for `consent.revoked` |
+| `EDGE_WEBHOOK_EVENT_TYPES` | Runtime tuple of all known event type strings |
 
 ### Configuration
 

package/dist/index.d.mts

@@ -1,4 +1,5 @@
 type EdgeEnvironment = 'production' | 'staging' | 'sandbox' | 'development';
+declare const EDGE_LINK_PATH = "/oauth/link";
 interface EdgeEnvironmentConfig {
     /**
      * @deprecated cognitoDomain is no longer used. Token exchange now goes through EdgeBoost API.
@@ -12,6 +13,14 @@ interface EdgeEnvironmentConfig {
 }
 declare const EDGE_ENVIRONMENTS: Readonly<Record<EdgeEnvironment, EdgeEnvironmentConfig>>;
 declare function getEnvironmentConfig(environment: EdgeEnvironment): EdgeEnvironmentConfig;
+/**
+ * Resolves the hosted Link UI URL for an environment.
+ *
+ * `linkUrl` is an advanced override for nonstandard deployments. It accepts
+ * either the full Link URL (`https://oauth.example.com/oauth/link`) or just the
+ * hosted OAuth origin (`https://oauth.example.com`).
+ */
+declare function getLinkUrl(environment: EdgeEnvironment, linkUrl?: string): string;
 declare function isProductionEnvironment(environment: EdgeEnvironment): boolean;
 declare function getAvailableEnvironments(): readonly EdgeEnvironment[];
 
@@ -2536,6 +2545,179 @@ declare const OTP_METHODS: readonly ["sms", "totp", "email"];
  */
 declare const TRANSFER_CATEGORIES: readonly ["sportsbook", "casino", "dfs", "sweepstakes"];
 
+/**
+ * EDGE Connect Webhook Event Types (SDK-002)
+ *
+ * Discriminated union over `event.type` so partners get full type narrowing
+ * inside `switch` blocks. Field shapes mirror the producer's enqueue calls
+ * 1:1; see `edgeboost-api/src/nest/services/connect/`:
+ *   - `transfer-execution.service.ts:273` (transfer.completed)
+ *   - `verification-session.service.ts:468` (transfer.failed)
+ *   - `connect.service.ts:184` (transfer.expired)
+ *   - `oauth/consent.service.ts:125` (consent.revoked)
+ *
+ * **Decimal precision:** `data.amount` is intentionally a `string`, not a
+ * `number`. The producer sends `String(transfer.amount)` so partner systems
+ * can parse with arbitrary-precision libraries (e.g., decimal.js, big.js)
+ * without losing the trailing cent.
+ *
+ * **Timestamps:** `created_at` is an ISO 8601 string, not a `Date` — webhook
+ * payloads are JSON, parsing into `Date` is the partner's choice.
+ */
+
+/**
+ * All EDGE Connect webhook event type strings.
+ *
+ * Use this with {@link EDGE_WEBHOOK_EVENT_TYPES} for runtime checks
+ * and as the discriminator on {@link EdgeWebhookEvent}.
+ */
+type EdgeWebhookEventType = 'transfer.completed' | 'transfer.failed' | 'transfer.expired' | 'transfer.processing' | 'consent.revoked';
+/**
+ * Runtime tuple of every known event type.
+ *
+ * Use this when you need an array of strings (e.g., to filter incoming
+ * events, validate config, or render a UI dropdown). Kept in sync with
+ * {@link EdgeWebhookEventType} via `satisfies`.
+ */
+declare const EDGE_WEBHOOK_EVENT_TYPES: readonly ["transfer.completed", "transfer.failed", "transfer.expired", "transfer.processing", "consent.revoked"];
+/**
+ * Common envelope shared by every webhook event.
+ *
+ * @template T - The discriminator literal (event type)
+ * @template D - The shape of the `data` payload for this event type
+ */
+interface BaseWebhookEvent<T extends EdgeWebhookEventType, D> {
+    /**
+     * Globally unique event identifier (`evt_<base36-time><random>`).
+     *
+     * Use this for idempotency — webhook delivery is at-least-once.
+     */
+    id: string;
+    /** Event discriminator. */
+    type: T;
+    /**
+     * ISO 8601 timestamp of when EDGE created the event.
+     *
+     * Snake-case key matches the wire format — JSON payloads are not transformed.
+     */
+    created_at: string;
+    /** Event-specific payload. Type narrows when you `switch` on `type`. */
+    data: D;
+}
+/**
+ * Payload for `transfer.completed`.
+ *
+ * Emitted when a transfer is verified and the user balance has been settled.
+ */
+interface TransferCompletedEventData {
+    /** UUID v4 of the transfer. */
+    transferId: string;
+    /** Always `'completed'` for this event. */
+    status: 'completed';
+    /** Direction of the transfer (debit = user → partner, credit = partner → user). */
+    type: TransferType;
+    /** Decimal amount as a string (e.g. `'100.00'`). NOT a number. */
+    amount: string;
+}
+/**
+ * Payload for `transfer.failed`.
+ *
+ * Emitted when OTP attempts are exhausted, the ledger rejects the transfer,
+ * or a hard failure occurs after authorization.
+ */
+interface TransferFailedEventData {
+    transferId: string;
+    status: 'failed';
+    type: TransferType;
+    amount: string;
+    /**
+     * Human-readable failure reason.
+     *
+     * Optional — older failures may not include this field. Always default-safe
+     * with `event.data.reason ?? 'unknown'` rather than asserting.
+     */
+    reason?: string;
+}
+/**
+ * Payload for `transfer.expired`.
+ *
+ * Emitted when the user did not verify their OTP within the 15-minute
+ * verification window.
+ */
+interface TransferExpiredEventData {
+    transferId: string;
+    status: 'expired';
+    type: TransferType;
+    amount: string;
+}
+/**
+ * Payload for `transfer.processing`.
+ *
+ * @experimental Reserved for the EDGE-360 ledger dual-write hand-off and not
+ * currently emitted by the production producer. The shape may change before
+ * GA — do not rely on it in production code paths yet.
+ */
+interface TransferProcessingEventData {
+    transferId: string;
+    status: 'processing';
+    type: TransferType;
+    amount: string;
+}
+/**
+ * Payload for `consent.revoked`.
+ *
+ * Emitted when a user revokes the partner's access to their EDGE account.
+ * The partner should mark the corresponding linked account as inactive and
+ * stop calling user-scoped endpoints with the now-invalid access token.
+ */
+interface ConsentRevokedEventData {
+    /** EDGE user ID whose consent was revoked. */
+    userId: string;
+    /** OAuth client ID that lost consent (your partner client ID). */
+    clientId: string;
+    /** ISO 8601 timestamp of the revocation. */
+    revokedAt: string;
+}
+/**
+ * A fully-typed EDGE Connect webhook event.
+ *
+ * Switching on `event.type` narrows `event.data` to the matching variant —
+ * no casts needed:
+ *
+ * @example
+ * ```typescript
+ * import type { EdgeWebhookEvent } from '@edge-markets/connect'
+ *
+ * function handle(event: EdgeWebhookEvent) {
+ *   switch (event.type) {
+ *     case 'transfer.completed':
+ *       // event.data is TransferCompletedEventData
+ *       creditWallet(event.data.transferId, event.data.amount)
+ *       break
+ *     case 'transfer.failed':
+ *       // event.data.reason is `string | undefined`
+ *       logFailure(event.data.transferId, event.data.reason)
+ *       break
+ *     case 'transfer.expired':
+ *       cancelPending(event.data.transferId)
+ *       break
+ *     case 'transfer.processing':
+ *       // experimental — no-op for now
+ *       break
+ *     case 'consent.revoked':
+ *       deactivateLink(event.data.userId, event.data.clientId)
+ *       break
+ *     default: {
+ *       // Compile error if a new event type is added without a handler
+ *       const _exhaustive: never = event
+ *       return _exhaustive
+ *     }
+ *   }
+ * }
+ * ```
+ */
+type EdgeWebhookEvent = BaseWebhookEvent<'transfer.completed', TransferCompletedEventData> | BaseWebhookEvent<'transfer.failed', TransferFailedEventData> | BaseWebhookEvent<'transfer.expired', TransferExpiredEventData> | BaseWebhookEvent<'transfer.processing', TransferProcessingEventData> | BaseWebhookEvent<'consent.revoked', ConsentRevokedEventData>;
+
 /**
  * EDGE Connect SDK Types
  *
@@ -3039,4 +3221,4 @@ declare const SDK_VERSION = "1.0.0";
  */
 declare const SDK_NAME = "@edge-markets/connect";
 
-export { ALL_EDGE_SCOPES, type ApiError, type Balance, type ConsentRequiredError, type CreateVerificationSessionRequest, EDGE_ENVIRONMENTS, EDGE_SCOPES, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, type EdgeEnvironment, type EdgeEnvironmentConfig, EdgeError, EdgeIdentityVerificationError, EdgeInsufficientScopeError, type EdgeLinkConfigBase, type EdgeLinkEvent, type EdgeLinkEventName, type EdgeLinkExit, type EdgeLinkSuccess, EdgeNetworkError, EdgeNotFoundError, EdgePopupBlockedError, EdgePopupClosedError, type EdgeScope, EdgeStateMismatchError, EdgeTokenExchangeError, type EdgeTokens, EdgeValidationError, type InitiateTransferRequest, type ListTransfersParams, OTP_METHODS, type OtpMethod, type PKCEPair, type RevokeConsentResponse, SCOPE_DESCRIPTIONS, SCOPE_ICONS, SDK_NAME, SDK_VERSION, type SdkGeolocation, TRANSFER_CATEGORIES, TRANSFER_STATUSES, TRANSFER_TYPES, type Transfer, type TransferCategory, type TransferList, type TransferListItem, type TransferStatus, type TransferType, type User, type UserAddress, type VerificationSession, type VerificationSessionStatus, type VerificationSessionStatusResponse, type VerifyIdentityAddress, type VerifyIdentityOptions, type VerifyIdentityResult, type VerifyIdentityScores, type components, formatScopeForEnvironment, formatScopesForEnvironment, getAvailableEnvironments, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isIdentityVerificationError, isNetworkError, isProductionEnvironment, isValidScope, type operations, parseScope, type paths };
+export { ALL_EDGE_SCOPES, type ApiError, type Balance, type BaseWebhookEvent, type ConsentRequiredError, type ConsentRevokedEventData, type CreateVerificationSessionRequest, EDGE_ENVIRONMENTS, EDGE_LINK_PATH, EDGE_SCOPES, EDGE_WEBHOOK_EVENT_TYPES, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, type EdgeEnvironment, type EdgeEnvironmentConfig, EdgeError, EdgeIdentityVerificationError, EdgeInsufficientScopeError, type EdgeLinkConfigBase, type EdgeLinkEvent, type EdgeLinkEventName, type EdgeLinkExit, type EdgeLinkSuccess, EdgeNetworkError, EdgeNotFoundError, EdgePopupBlockedError, EdgePopupClosedError, type EdgeScope, EdgeStateMismatchError, EdgeTokenExchangeError, type EdgeTokens, EdgeValidationError, type EdgeWebhookEvent, type EdgeWebhookEventType, type InitiateTransferRequest, type ListTransfersParams, OTP_METHODS, type OtpMethod, type PKCEPair, type RevokeConsentResponse, SCOPE_DESCRIPTIONS, SCOPE_ICONS, SDK_NAME, SDK_VERSION, type SdkGeolocation, TRANSFER_CATEGORIES, TRANSFER_STATUSES, TRANSFER_TYPES, type Transfer, type TransferCategory, type TransferCompletedEventData, type TransferExpiredEventData, type TransferFailedEventData, type TransferList, type TransferListItem, type TransferProcessingEventData, type TransferStatus, type TransferType, type User, type UserAddress, type VerificationSession, type VerificationSessionStatus, type VerificationSessionStatusResponse, type VerifyIdentityAddress, type VerifyIdentityOptions, type VerifyIdentityResult, type VerifyIdentityScores, type components, formatScopeForEnvironment, formatScopesForEnvironment, getAvailableEnvironments, getEnvironmentConfig, getLinkUrl, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isIdentityVerificationError, isNetworkError, isProductionEnvironment, isValidScope, type operations, parseScope, type paths };

package/dist/index.d.ts

@@ -1,4 +1,5 @@
 type EdgeEnvironment = 'production' | 'staging' | 'sandbox' | 'development';
+declare const EDGE_LINK_PATH = "/oauth/link";
 interface EdgeEnvironmentConfig {
     /**
      * @deprecated cognitoDomain is no longer used. Token exchange now goes through EdgeBoost API.
@@ -12,6 +13,14 @@ interface EdgeEnvironmentConfig {
 }
 declare const EDGE_ENVIRONMENTS: Readonly<Record<EdgeEnvironment, EdgeEnvironmentConfig>>;
 declare function getEnvironmentConfig(environment: EdgeEnvironment): EdgeEnvironmentConfig;
+/**
+ * Resolves the hosted Link UI URL for an environment.
+ *
+ * `linkUrl` is an advanced override for nonstandard deployments. It accepts
+ * either the full Link URL (`https://oauth.example.com/oauth/link`) or just the
+ * hosted OAuth origin (`https://oauth.example.com`).
+ */
+declare function getLinkUrl(environment: EdgeEnvironment, linkUrl?: string): string;
 declare function isProductionEnvironment(environment: EdgeEnvironment): boolean;
 declare function getAvailableEnvironments(): readonly EdgeEnvironment[];
 
@@ -2536,6 +2545,179 @@ declare const OTP_METHODS: readonly ["sms", "totp", "email"];
  */
 declare const TRANSFER_CATEGORIES: readonly ["sportsbook", "casino", "dfs", "sweepstakes"];
 
+/**
+ * EDGE Connect Webhook Event Types (SDK-002)
+ *
+ * Discriminated union over `event.type` so partners get full type narrowing
+ * inside `switch` blocks. Field shapes mirror the producer's enqueue calls
+ * 1:1; see `edgeboost-api/src/nest/services/connect/`:
+ *   - `transfer-execution.service.ts:273` (transfer.completed)
+ *   - `verification-session.service.ts:468` (transfer.failed)
+ *   - `connect.service.ts:184` (transfer.expired)
+ *   - `oauth/consent.service.ts:125` (consent.revoked)
+ *
+ * **Decimal precision:** `data.amount` is intentionally a `string`, not a
+ * `number`. The producer sends `String(transfer.amount)` so partner systems
+ * can parse with arbitrary-precision libraries (e.g., decimal.js, big.js)
+ * without losing the trailing cent.
+ *
+ * **Timestamps:** `created_at` is an ISO 8601 string, not a `Date` — webhook
+ * payloads are JSON, parsing into `Date` is the partner's choice.
+ */
+
+/**
+ * All EDGE Connect webhook event type strings.
+ *
+ * Use this with {@link EDGE_WEBHOOK_EVENT_TYPES} for runtime checks
+ * and as the discriminator on {@link EdgeWebhookEvent}.
+ */
+type EdgeWebhookEventType = 'transfer.completed' | 'transfer.failed' | 'transfer.expired' | 'transfer.processing' | 'consent.revoked';
+/**
+ * Runtime tuple of every known event type.
+ *
+ * Use this when you need an array of strings (e.g., to filter incoming
+ * events, validate config, or render a UI dropdown). Kept in sync with
+ * {@link EdgeWebhookEventType} via `satisfies`.
+ */
+declare const EDGE_WEBHOOK_EVENT_TYPES: readonly ["transfer.completed", "transfer.failed", "transfer.expired", "transfer.processing", "consent.revoked"];
+/**
+ * Common envelope shared by every webhook event.
+ *
+ * @template T - The discriminator literal (event type)
+ * @template D - The shape of the `data` payload for this event type
+ */
+interface BaseWebhookEvent<T extends EdgeWebhookEventType, D> {
+    /**
+     * Globally unique event identifier (`evt_<base36-time><random>`).
+     *
+     * Use this for idempotency — webhook delivery is at-least-once.
+     */
+    id: string;
+    /** Event discriminator. */
+    type: T;
+    /**
+     * ISO 8601 timestamp of when EDGE created the event.
+     *
+     * Snake-case key matches the wire format — JSON payloads are not transformed.
+     */
+    created_at: string;
+    /** Event-specific payload. Type narrows when you `switch` on `type`. */
+    data: D;
+}
+/**
+ * Payload for `transfer.completed`.
+ *
+ * Emitted when a transfer is verified and the user balance has been settled.
+ */
+interface TransferCompletedEventData {
+    /** UUID v4 of the transfer. */
+    transferId: string;
+    /** Always `'completed'` for this event. */
+    status: 'completed';
+    /** Direction of the transfer (debit = user → partner, credit = partner → user). */
+    type: TransferType;
+    /** Decimal amount as a string (e.g. `'100.00'`). NOT a number. */
+    amount: string;
+}
+/**
+ * Payload for `transfer.failed`.
+ *
+ * Emitted when OTP attempts are exhausted, the ledger rejects the transfer,
+ * or a hard failure occurs after authorization.
+ */
+interface TransferFailedEventData {
+    transferId: string;
+    status: 'failed';
+    type: TransferType;
+    amount: string;
+    /**
+     * Human-readable failure reason.
+     *
+     * Optional — older failures may not include this field. Always default-safe
+     * with `event.data.reason ?? 'unknown'` rather than asserting.
+     */
+    reason?: string;
+}
+/**
+ * Payload for `transfer.expired`.
+ *
+ * Emitted when the user did not verify their OTP within the 15-minute
+ * verification window.
+ */
+interface TransferExpiredEventData {
+    transferId: string;
+    status: 'expired';
+    type: TransferType;
+    amount: string;
+}
+/**
+ * Payload for `transfer.processing`.
+ *
+ * @experimental Reserved for the EDGE-360 ledger dual-write hand-off and not
+ * currently emitted by the production producer. The shape may change before
+ * GA — do not rely on it in production code paths yet.
+ */
+interface TransferProcessingEventData {
+    transferId: string;
+    status: 'processing';
+    type: TransferType;
+    amount: string;
+}
+/**
+ * Payload for `consent.revoked`.
+ *
+ * Emitted when a user revokes the partner's access to their EDGE account.
+ * The partner should mark the corresponding linked account as inactive and
+ * stop calling user-scoped endpoints with the now-invalid access token.
+ */
+interface ConsentRevokedEventData {
+    /** EDGE user ID whose consent was revoked. */
+    userId: string;
+    /** OAuth client ID that lost consent (your partner client ID). */
+    clientId: string;
+    /** ISO 8601 timestamp of the revocation. */
+    revokedAt: string;
+}
+/**
+ * A fully-typed EDGE Connect webhook event.
+ *
+ * Switching on `event.type` narrows `event.data` to the matching variant —
+ * no casts needed:
+ *
+ * @example
+ * ```typescript
+ * import type { EdgeWebhookEvent } from '@edge-markets/connect'
+ *
+ * function handle(event: EdgeWebhookEvent) {
+ *   switch (event.type) {
+ *     case 'transfer.completed':
+ *       // event.data is TransferCompletedEventData
+ *       creditWallet(event.data.transferId, event.data.amount)
+ *       break
+ *     case 'transfer.failed':
+ *       // event.data.reason is `string | undefined`
+ *       logFailure(event.data.transferId, event.data.reason)
+ *       break
+ *     case 'transfer.expired':
+ *       cancelPending(event.data.transferId)
+ *       break
+ *     case 'transfer.processing':
+ *       // experimental — no-op for now
+ *       break
+ *     case 'consent.revoked':
+ *       deactivateLink(event.data.userId, event.data.clientId)
+ *       break
+ *     default: {
+ *       // Compile error if a new event type is added without a handler
+ *       const _exhaustive: never = event
+ *       return _exhaustive
+ *     }
+ *   }
+ * }
+ * ```
+ */
+type EdgeWebhookEvent = BaseWebhookEvent<'transfer.completed', TransferCompletedEventData> | BaseWebhookEvent<'transfer.failed', TransferFailedEventData> | BaseWebhookEvent<'transfer.expired', TransferExpiredEventData> | BaseWebhookEvent<'transfer.processing', TransferProcessingEventData> | BaseWebhookEvent<'consent.revoked', ConsentRevokedEventData>;
+
 /**
  * EDGE Connect SDK Types
  *
@@ -3039,4 +3221,4 @@ declare const SDK_VERSION = "1.0.0";
  */
 declare const SDK_NAME = "@edge-markets/connect";
 
-export { ALL_EDGE_SCOPES, type ApiError, type Balance, type ConsentRequiredError, type CreateVerificationSessionRequest, EDGE_ENVIRONMENTS, EDGE_SCOPES, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, type EdgeEnvironment, type EdgeEnvironmentConfig, EdgeError, EdgeIdentityVerificationError, EdgeInsufficientScopeError, type EdgeLinkConfigBase, type EdgeLinkEvent, type EdgeLinkEventName, type EdgeLinkExit, type EdgeLinkSuccess, EdgeNetworkError, EdgeNotFoundError, EdgePopupBlockedError, EdgePopupClosedError, type EdgeScope, EdgeStateMismatchError, EdgeTokenExchangeError, type EdgeTokens, EdgeValidationError, type InitiateTransferRequest, type ListTransfersParams, OTP_METHODS, type OtpMethod, type PKCEPair, type RevokeConsentResponse, SCOPE_DESCRIPTIONS, SCOPE_ICONS, SDK_NAME, SDK_VERSION, type SdkGeolocation, TRANSFER_CATEGORIES, TRANSFER_STATUSES, TRANSFER_TYPES, type Transfer, type TransferCategory, type TransferList, type TransferListItem, type TransferStatus, type TransferType, type User, type UserAddress, type VerificationSession, type VerificationSessionStatus, type VerificationSessionStatusResponse, type VerifyIdentityAddress, type VerifyIdentityOptions, type VerifyIdentityResult, type VerifyIdentityScores, type components, formatScopeForEnvironment, formatScopesForEnvironment, getAvailableEnvironments, getEnvironmentConfig, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isIdentityVerificationError, isNetworkError, isProductionEnvironment, isValidScope, type operations, parseScope, type paths };
+export { ALL_EDGE_SCOPES, type ApiError, type Balance, type BaseWebhookEvent, type ConsentRequiredError, type ConsentRevokedEventData, type CreateVerificationSessionRequest, EDGE_ENVIRONMENTS, EDGE_LINK_PATH, EDGE_SCOPES, EDGE_WEBHOOK_EVENT_TYPES, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, type EdgeEnvironment, type EdgeEnvironmentConfig, EdgeError, EdgeIdentityVerificationError, EdgeInsufficientScopeError, type EdgeLinkConfigBase, type EdgeLinkEvent, type EdgeLinkEventName, type EdgeLinkExit, type EdgeLinkSuccess, EdgeNetworkError, EdgeNotFoundError, EdgePopupBlockedError, EdgePopupClosedError, type EdgeScope, EdgeStateMismatchError, EdgeTokenExchangeError, type EdgeTokens, EdgeValidationError, type EdgeWebhookEvent, type EdgeWebhookEventType, type InitiateTransferRequest, type ListTransfersParams, OTP_METHODS, type OtpMethod, type PKCEPair, type RevokeConsentResponse, SCOPE_DESCRIPTIONS, SCOPE_ICONS, SDK_NAME, SDK_VERSION, type SdkGeolocation, TRANSFER_CATEGORIES, TRANSFER_STATUSES, TRANSFER_TYPES, type Transfer, type TransferCategory, type TransferCompletedEventData, type TransferExpiredEventData, type TransferFailedEventData, type TransferList, type TransferListItem, type TransferProcessingEventData, type TransferStatus, type TransferType, type User, type UserAddress, type VerificationSession, type VerificationSessionStatus, type VerificationSessionStatusResponse, type VerifyIdentityAddress, type VerifyIdentityOptions, type VerifyIdentityResult, type VerifyIdentityScores, type components, formatScopeForEnvironment, formatScopesForEnvironment, getAvailableEnvironments, getEnvironmentConfig, getLinkUrl, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isIdentityVerificationError, isNetworkError, isProductionEnvironment, isValidScope, type operations, parseScope, type paths };

package/dist/index.js

@@ -22,7 +22,9 @@ var index_exports = {};
 __export(index_exports, {
   ALL_EDGE_SCOPES: () => ALL_EDGE_SCOPES,
   EDGE_ENVIRONMENTS: () => EDGE_ENVIRONMENTS,
+  EDGE_LINK_PATH: () => EDGE_LINK_PATH,
   EDGE_SCOPES: () => EDGE_SCOPES,
+  EDGE_WEBHOOK_EVENT_TYPES: () => EDGE_WEBHOOK_EVENT_TYPES,
   EdgeApiError: () => EdgeApiError,
   EdgeAuthenticationError: () => EdgeAuthenticationError,
   EdgeConsentRequiredError: () => EdgeConsentRequiredError,
@@ -48,6 +50,7 @@ __export(index_exports, {
   formatScopesForEnvironment: () => formatScopesForEnvironment,
   getAvailableEnvironments: () => getAvailableEnvironments,
   getEnvironmentConfig: () => getEnvironmentConfig,
+  getLinkUrl: () => getLinkUrl,
   isApiError: () => isApiError,
   isAuthenticationError: () => isAuthenticationError,
   isConsentRequiredError: () => isConsentRequiredError,
@@ -77,13 +80,23 @@ var TRANSFER_CATEGORIES = [
   "sweepstakes"
 ];
 
+// src/types/webhooks.ts
+var EDGE_WEBHOOK_EVENT_TYPES = [
+  "transfer.completed",
+  "transfer.failed",
+  "transfer.expired",
+  "transfer.processing",
+  "consent.revoked"
+];
+
 // src/config/environments.ts
+var EDGE_LINK_PATH = "/oauth/link";
 var EDGE_ENVIRONMENTS = {
   production: {
     cognitoDomain: "https://edge-connect.auth.us-east-1.amazoncognito.com",
-    apiBaseUrl: "https://api.edgeboost.com/connect/v1",
-    oauthBaseUrl: "https://api.edgeboost.com/api/v3/oauth",
-    userClientUrl: "https://app.edgeboost.com",
+    apiBaseUrl: "https://connect.edgeboost.io/connect/v1",
+    oauthBaseUrl: "https://connect.edgeboost.io/connect/oauth",
+    userClientUrl: "https://oauth.edgeboost.io",
     displayName: "Production",
     isProduction: true
   },
@@ -99,15 +112,15 @@ var EDGE_ENVIRONMENTS = {
     // User-facing captive frame for the Link SDK enrollment and transfer
     // verification flows. Served from the edge-connect-oauth Vite app
     // deployed on Amplify. No mTLS — browser traffic.
-    userClientUrl: "https://oauth.staging-app.edgeboost.bet",
+    userClientUrl: "https://oauth.staging-app.edgeboost.io",
     displayName: "Staging",
     isProduction: false
   },
   sandbox: {
     cognitoDomain: "https://edge-connect-sandbox.auth.us-east-1.amazoncognito.com",
-    apiBaseUrl: "https://sandbox-api.edgeboost.com/connect/v1",
-    oauthBaseUrl: "https://sandbox-api.edgeboost.com/api/v3/oauth",
-    userClientUrl: "https://sandbox.edgeboost.com",
+    apiBaseUrl: "https://api-sandbox.staging.edgeboost.io/connect/v1",
+    oauthBaseUrl: "https://api-sandbox.staging.edgeboost.io/api/v3/oauth",
+    userClientUrl: "https://oauth.staging-app.edgeboost.io",
     displayName: "Sandbox",
     isProduction: false
   },
@@ -133,6 +146,17 @@ var EDGE_ENVIRONMENTS = {
 function getEnvironmentConfig(environment) {
   return EDGE_ENVIRONMENTS[environment];
 }
+function getLinkUrl(environment, linkUrl) {
+  const configuredUrl = linkUrl?.trim();
+  const url = new URL(configuredUrl || `${EDGE_ENVIRONMENTS[environment].userClientUrl}${EDGE_LINK_PATH}`);
+  const normalizedPath = url.pathname.replace(/\/+$/, "");
+  if (!normalizedPath || normalizedPath === "/" || normalizedPath === "/oauth") {
+    url.pathname = EDGE_LINK_PATH;
+  } else {
+    url.pathname = normalizedPath;
+  }
+  return url.toString();
+}
 function isProductionEnvironment(environment) {
   return EDGE_ENVIRONMENTS[environment].isProduction;
 }
@@ -332,7 +356,9 @@ var SDK_NAME = "@edge-markets/connect";
 0 && (module.exports = {
   ALL_EDGE_SCOPES,
   EDGE_ENVIRONMENTS,
+  EDGE_LINK_PATH,
   EDGE_SCOPES,
+  EDGE_WEBHOOK_EVENT_TYPES,
   EdgeApiError,
   EdgeAuthenticationError,
   EdgeConsentRequiredError,
@@ -358,6 +384,7 @@ var SDK_NAME = "@edge-markets/connect";
   formatScopesForEnvironment,
   getAvailableEnvironments,
   getEnvironmentConfig,
+  getLinkUrl,
   isApiError,
   isAuthenticationError,
   isConsentRequiredError,

package/dist/index.mjs

@@ -15,13 +15,23 @@ var TRANSFER_CATEGORIES = [
   "sweepstakes"
 ];
 
+// src/types/webhooks.ts
+var EDGE_WEBHOOK_EVENT_TYPES = [
+  "transfer.completed",
+  "transfer.failed",
+  "transfer.expired",
+  "transfer.processing",
+  "consent.revoked"
+];
+
 // src/config/environments.ts
+var EDGE_LINK_PATH = "/oauth/link";
 var EDGE_ENVIRONMENTS = {
   production: {
     cognitoDomain: "https://edge-connect.auth.us-east-1.amazoncognito.com",
-    apiBaseUrl: "https://api.edgeboost.com/connect/v1",
-    oauthBaseUrl: "https://api.edgeboost.com/api/v3/oauth",
-    userClientUrl: "https://app.edgeboost.com",
+    apiBaseUrl: "https://connect.edgeboost.io/connect/v1",
+    oauthBaseUrl: "https://connect.edgeboost.io/connect/oauth",
+    userClientUrl: "https://oauth.edgeboost.io",
     displayName: "Production",
     isProduction: true
   },
@@ -37,15 +47,15 @@ var EDGE_ENVIRONMENTS = {
     // User-facing captive frame for the Link SDK enrollment and transfer
     // verification flows. Served from the edge-connect-oauth Vite app
     // deployed on Amplify. No mTLS — browser traffic.
-    userClientUrl: "https://oauth.staging-app.edgeboost.bet",
+    userClientUrl: "https://oauth.staging-app.edgeboost.io",
     displayName: "Staging",
     isProduction: false
   },
   sandbox: {
     cognitoDomain: "https://edge-connect-sandbox.auth.us-east-1.amazoncognito.com",
-    apiBaseUrl: "https://sandbox-api.edgeboost.com/connect/v1",
-    oauthBaseUrl: "https://sandbox-api.edgeboost.com/api/v3/oauth",
-    userClientUrl: "https://sandbox.edgeboost.com",
+    apiBaseUrl: "https://api-sandbox.staging.edgeboost.io/connect/v1",
+    oauthBaseUrl: "https://api-sandbox.staging.edgeboost.io/api/v3/oauth",
+    userClientUrl: "https://oauth.staging-app.edgeboost.io",
     displayName: "Sandbox",
     isProduction: false
   },
@@ -71,6 +81,17 @@ var EDGE_ENVIRONMENTS = {
 function getEnvironmentConfig(environment) {
   return EDGE_ENVIRONMENTS[environment];
 }
+function getLinkUrl(environment, linkUrl) {
+  const configuredUrl = linkUrl?.trim();
+  const url = new URL(configuredUrl || `${EDGE_ENVIRONMENTS[environment].userClientUrl}${EDGE_LINK_PATH}`);
+  const normalizedPath = url.pathname.replace(/\/+$/, "");
+  if (!normalizedPath || normalizedPath === "/" || normalizedPath === "/oauth") {
+    url.pathname = EDGE_LINK_PATH;
+  } else {
+    url.pathname = normalizedPath;
+  }
+  return url.toString();
+}
 function isProductionEnvironment(environment) {
   return EDGE_ENVIRONMENTS[environment].isProduction;
 }
@@ -269,7 +290,9 @@ var SDK_NAME = "@edge-markets/connect";
 export {
   ALL_EDGE_SCOPES,
   EDGE_ENVIRONMENTS,
+  EDGE_LINK_PATH,
   EDGE_SCOPES,
+  EDGE_WEBHOOK_EVENT_TYPES,
   EdgeApiError,
   EdgeAuthenticationError,
   EdgeConsentRequiredError,
@@ -295,6 +318,7 @@ export {
   formatScopesForEnvironment,
   getAvailableEnvironments,
   getEnvironmentConfig,
+  getLinkUrl,
   isApiError,
   isAuthenticationError,
   isConsentRequiredError,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edge-markets/connect",
-  "version": "1.5.1",
+  "version": "1.6.1",
   "description": "Core types, configuration, and utilities for EDGE Connect SDK",
   "author": "EdgeBoost",
   "license": "MIT",