@edge-markets/connect 1.7.0 → 1.9.0

package/README.md

@@ -153,7 +153,9 @@ try {
 | `EDGE_ENVIRONMENTS` | All environment configs |
 | `getEnvironmentConfig(env)` | Get config for environment |
 | `EDGE_SCOPES` | Available OAuth scopes |
-| `ALL_EDGE_SCOPES` | All scopes as array |
+| `ACTIVE_EDGE_SCOPES` | Scopes enabled for current partner integrations |
+| `ALL_EDGE_SCOPES` | Alias for all currently requestable scopes |
+| `RESERVED_EDGE_SCOPES` | Future-only scopes that should not be requested |
 | `formatScopeForEnvironment(scope, env)` | Format scope for Cognito |
 
 ### Errors

package/dist/index.d.mts

@@ -45,7 +45,7 @@ declare function getAvailableEnvironments(): readonly EdgeEnvironment[];
  *   scopes: [EDGE_SCOPES.USER_READ, EDGE_SCOPES.BALANCE_READ],
  * })
  *
- * // Or request all scopes
+ * // Or request all currently enabled scopes
  * link.open({
  *   scopes: ALL_EDGE_SCOPES,
  * })
@@ -63,7 +63,11 @@ declare const EDGE_SCOPES: {
      */
     readonly BALANCE_READ: "balance.read";
     /**
-     * Initiate fund transfers and create EDGE-hosted verification sessions.
+     * Reserved for future fund transfers and EDGE-hosted verification sessions.
+     * Not available in staging or production. Requesting this scope from Link
+     * SDKs fails with EdgeFeatureUnavailableError until EDGE enables transfers
+     * for a partner.
+     *
      * Required for: `POST /v1/transfer`, `POST /v1/transfer/:id/verification-session`, `GET /v1/transfers`
      */
     readonly TRANSFER_WRITE: "transfer.write";
@@ -73,15 +77,29 @@ declare const EDGE_SCOPES: {
  */
 type EdgeScope = (typeof EDGE_SCOPES)[keyof typeof EDGE_SCOPES];
 /**
- * All available scopes as an array.
- * Use when you need full access to all API features.
+ * Scopes active for current EDGE Connect partner integrations.
+ *
+ * Transfers are intentionally unavailable for now, so SDK Link flows request
+ * this set by default.
+ */
+declare const ACTIVE_EDGE_SCOPES: readonly EdgeScope[];
+/**
+ * Reserved scopes kept in the SDK catalog for future feature launches.
+ *
+ * Do not request these scopes unless EDGE has explicitly enabled the feature
+ * for your integration.
+ */
+declare const RESERVED_EDGE_SCOPES: readonly EdgeScope[];
+/**
+ * All currently requestable scopes as an array.
+ * This intentionally excludes reserved scopes such as `transfer.write`.
  *
  * @example
  * ```typescript
  * const link = new EdgeLink({
  *   clientId: 'your-client-id',
  *   environment: 'staging',
- *   scopes: ALL_EDGE_SCOPES, // Request all permissions
+ *   scopes: ALL_EDGE_SCOPES, // Same values as ACTIVE_EDGE_SCOPES today
  *   onSuccess: handleSuccess,
  * })
  * ```
@@ -142,6 +160,12 @@ declare function parseScope(fullScope: string): EdgeScope | null;
  * Checks if a scope string is valid.
  */
 declare function isValidScope(scope: string): scope is EdgeScope;
+/**
+ * Checks whether a scope string requests the future transfer feature.
+ * Accepts either short scopes (`transfer.write`) or formatted environment
+ * scopes (`edge-connect-staging/transfer.write`).
+ */
+declare function isTransferWriteScope(scope: string): boolean;
 
 /**
  * This file was auto-generated by openapi-typescript.
@@ -695,17 +719,7 @@ interface paths {
         put?: never;
         /**
          * Initiate a transfer
-         * @description Initiates a fund transfer that requires OTP verification.
-         *
-         *     **Transfer Types:**
-         *     - `debit`: Pull funds FROM user's EdgeBoost TO partner (user deposits to partner platform)
-         *     - `credit`: Push funds FROM partner TO user's EdgeBoost (user withdraws from partner platform)
-         *
-         *     **Idempotency:**
-         *     Use the `idempotencyKey` to safely retry requests. If a transfer with the same key exists, its current status will be returned.
-         *
-         *     **OTP Verification:**
-         *     After initiating, the transfer will be in `pending_verification` status. Call `POST /transfer/{transferId}/verification-session` to create an EDGE-hosted verification session and embed the returned `verificationUrl` in your frontend.
+         * @description Reserved for a future transfer release. Currently returns feature_unavailable with message: Feature not available yet, please contact Edge product team for more details.
          */
         post: operations['initiateTransfer'];
         delete?: never;
@@ -723,7 +737,7 @@ interface paths {
         };
         /**
          * Get transfer status
-         * @description Returns the current status of a transfer. Use this for polling after initiating a transfer.
+         * @description Reserved for a future transfer release. Currently returns feature_unavailable with message: Feature not available yet, please contact Edge product team for more details.
          */
         get: operations['getTransferStatus'];
         put?: never;
@@ -743,7 +757,7 @@ interface paths {
         };
         /**
          * List transfers
-         * @description Returns a paginated list of transfers for the authenticated user. Useful for reconciliation.
+         * @description Reserved for a future transfer release. Currently returns feature_unavailable with message: Feature not available yet, please contact Edge product team for more details.
          */
         get: operations['listTransfers'];
         put?: never;
@@ -3011,6 +3025,14 @@ declare class EdgeInsufficientScopeError extends EdgeError {
     readonly missingScopes: string[];
     constructor(missingScopes: string[], message?: string);
 }
+declare const EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE = "Feature not available yet, please contact Edge product team for more details";
+/**
+ * Thrown when an SDK surface exists for a future EDGE Connect feature that is
+ * not active for partners yet.
+ */
+declare class EdgeFeatureUnavailableError extends EdgeError {
+    constructor(message?: string);
+}
 /**
  * Thrown when an API request fails with a known error.
  *
@@ -3182,6 +3204,7 @@ declare function isIdentityVerificationError(error: unknown): error is EdgeIdent
  * Type guard for network errors.
  */
 declare function isNetworkError(error: unknown): error is EdgeNetworkError;
+declare function isFeatureUnavailableError(error: unknown): error is EdgeFeatureUnavailableError;
 
 /**
  * @edge-markets/connect
@@ -3230,4 +3253,4 @@ declare const SDK_VERSION = "1.0.0";
  */
 declare const SDK_NAME = "@edge-markets/connect";
 
-export { ALL_EDGE_SCOPES, type ApiError, type Balance, type BaseWebhookEvent, type ConsentRequiredError, type ConsentRevokedEventData, type CreateVerificationSessionRequest, EDGE_ENVIRONMENTS, EDGE_LINK_PATH, EDGE_SCOPES, EDGE_WEBHOOK_EVENT_TYPES, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, type EdgeEnvironment, type EdgeEnvironmentConfig, EdgeError, EdgeIdentityVerificationError, EdgeInsufficientScopeError, type EdgeLinkConfigBase, type EdgeLinkEvent, type EdgeLinkEventName, type EdgeLinkExit, type EdgeLinkSuccess, EdgeNetworkError, EdgeNotFoundError, EdgePopupBlockedError, EdgePopupClosedError, type EdgeScope, EdgeStateMismatchError, EdgeTokenExchangeError, type EdgeTokens, EdgeValidationError, type EdgeWebhookEvent, type EdgeWebhookEventType, type InitiateTransferRequest, type ListTransfersParams, OTP_METHODS, type OtpMethod, type PKCEPair, type RevokeConsentResponse, SCOPE_DESCRIPTIONS, SCOPE_ICONS, SDK_NAME, SDK_VERSION, type SdkGeolocation, TRANSFER_CATEGORIES, TRANSFER_STATUSES, TRANSFER_TYPES, type Transfer, type TransferCategory, type TransferCompletedEventData, type TransferExpiredEventData, type TransferFailedEventData, type TransferList, type TransferListItem, type TransferProcessingEventData, type TransferStatus, type TransferType, type User, type UserAddress, type VerificationSession, type VerificationSessionStatus, type VerificationSessionStatusResponse, type VerifyIdentityAddress, type VerifyIdentityOptions, type VerifyIdentityResult, type VerifyIdentityScores, type components, formatScopeForEnvironment, formatScopesForEnvironment, getAvailableEnvironments, getEnvironmentConfig, getLinkUrl, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isIdentityVerificationError, isNetworkError, isProductionEnvironment, isValidScope, type operations, parseScope, type paths };
+export { ACTIVE_EDGE_SCOPES, ALL_EDGE_SCOPES, type ApiError, type Balance, type BaseWebhookEvent, type ConsentRequiredError, type ConsentRevokedEventData, type CreateVerificationSessionRequest, EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE, EDGE_ENVIRONMENTS, EDGE_LINK_PATH, EDGE_SCOPES, EDGE_WEBHOOK_EVENT_TYPES, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, type EdgeEnvironment, type EdgeEnvironmentConfig, EdgeError, EdgeFeatureUnavailableError, EdgeIdentityVerificationError, EdgeInsufficientScopeError, type EdgeLinkConfigBase, type EdgeLinkEvent, type EdgeLinkEventName, type EdgeLinkExit, type EdgeLinkSuccess, EdgeNetworkError, EdgeNotFoundError, EdgePopupBlockedError, EdgePopupClosedError, type EdgeScope, EdgeStateMismatchError, EdgeTokenExchangeError, type EdgeTokens, EdgeValidationError, type EdgeWebhookEvent, type EdgeWebhookEventType, type InitiateTransferRequest, type ListTransfersParams, OTP_METHODS, type OtpMethod, type PKCEPair, RESERVED_EDGE_SCOPES, type RevokeConsentResponse, SCOPE_DESCRIPTIONS, SCOPE_ICONS, SDK_NAME, SDK_VERSION, type SdkGeolocation, TRANSFER_CATEGORIES, TRANSFER_STATUSES, TRANSFER_TYPES, type Transfer, type TransferCategory, type TransferCompletedEventData, type TransferExpiredEventData, type TransferFailedEventData, type TransferList, type TransferListItem, type TransferProcessingEventData, type TransferStatus, type TransferType, type User, type UserAddress, type VerificationSession, type VerificationSessionStatus, type VerificationSessionStatusResponse, type VerifyIdentityAddress, type VerifyIdentityOptions, type VerifyIdentityResult, type VerifyIdentityScores, type components, formatScopeForEnvironment, formatScopesForEnvironment, getAvailableEnvironments, getEnvironmentConfig, getLinkUrl, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isFeatureUnavailableError, isIdentityVerificationError, isNetworkError, isProductionEnvironment, isTransferWriteScope, isValidScope, type operations, parseScope, type paths };

package/dist/index.d.ts

@@ -45,7 +45,7 @@ declare function getAvailableEnvironments(): readonly EdgeEnvironment[];
  *   scopes: [EDGE_SCOPES.USER_READ, EDGE_SCOPES.BALANCE_READ],
  * })
  *
- * // Or request all scopes
+ * // Or request all currently enabled scopes
  * link.open({
  *   scopes: ALL_EDGE_SCOPES,
  * })
@@ -63,7 +63,11 @@ declare const EDGE_SCOPES: {
      */
     readonly BALANCE_READ: "balance.read";
     /**
-     * Initiate fund transfers and create EDGE-hosted verification sessions.
+     * Reserved for future fund transfers and EDGE-hosted verification sessions.
+     * Not available in staging or production. Requesting this scope from Link
+     * SDKs fails with EdgeFeatureUnavailableError until EDGE enables transfers
+     * for a partner.
+     *
      * Required for: `POST /v1/transfer`, `POST /v1/transfer/:id/verification-session`, `GET /v1/transfers`
      */
     readonly TRANSFER_WRITE: "transfer.write";
@@ -73,15 +77,29 @@ declare const EDGE_SCOPES: {
  */
 type EdgeScope = (typeof EDGE_SCOPES)[keyof typeof EDGE_SCOPES];
 /**
- * All available scopes as an array.
- * Use when you need full access to all API features.
+ * Scopes active for current EDGE Connect partner integrations.
+ *
+ * Transfers are intentionally unavailable for now, so SDK Link flows request
+ * this set by default.
+ */
+declare const ACTIVE_EDGE_SCOPES: readonly EdgeScope[];
+/**
+ * Reserved scopes kept in the SDK catalog for future feature launches.
+ *
+ * Do not request these scopes unless EDGE has explicitly enabled the feature
+ * for your integration.
+ */
+declare const RESERVED_EDGE_SCOPES: readonly EdgeScope[];
+/**
+ * All currently requestable scopes as an array.
+ * This intentionally excludes reserved scopes such as `transfer.write`.
  *
  * @example
  * ```typescript
  * const link = new EdgeLink({
  *   clientId: 'your-client-id',
  *   environment: 'staging',
- *   scopes: ALL_EDGE_SCOPES, // Request all permissions
+ *   scopes: ALL_EDGE_SCOPES, // Same values as ACTIVE_EDGE_SCOPES today
  *   onSuccess: handleSuccess,
  * })
  * ```
@@ -142,6 +160,12 @@ declare function parseScope(fullScope: string): EdgeScope | null;
  * Checks if a scope string is valid.
  */
 declare function isValidScope(scope: string): scope is EdgeScope;
+/**
+ * Checks whether a scope string requests the future transfer feature.
+ * Accepts either short scopes (`transfer.write`) or formatted environment
+ * scopes (`edge-connect-staging/transfer.write`).
+ */
+declare function isTransferWriteScope(scope: string): boolean;
 
 /**
  * This file was auto-generated by openapi-typescript.
@@ -695,17 +719,7 @@ interface paths {
         put?: never;
         /**
          * Initiate a transfer
-         * @description Initiates a fund transfer that requires OTP verification.
-         *
-         *     **Transfer Types:**
-         *     - `debit`: Pull funds FROM user's EdgeBoost TO partner (user deposits to partner platform)
-         *     - `credit`: Push funds FROM partner TO user's EdgeBoost (user withdraws from partner platform)
-         *
-         *     **Idempotency:**
-         *     Use the `idempotencyKey` to safely retry requests. If a transfer with the same key exists, its current status will be returned.
-         *
-         *     **OTP Verification:**
-         *     After initiating, the transfer will be in `pending_verification` status. Call `POST /transfer/{transferId}/verification-session` to create an EDGE-hosted verification session and embed the returned `verificationUrl` in your frontend.
+         * @description Reserved for a future transfer release. Currently returns feature_unavailable with message: Feature not available yet, please contact Edge product team for more details.
          */
         post: operations['initiateTransfer'];
         delete?: never;
@@ -723,7 +737,7 @@ interface paths {
         };
         /**
          * Get transfer status
-         * @description Returns the current status of a transfer. Use this for polling after initiating a transfer.
+         * @description Reserved for a future transfer release. Currently returns feature_unavailable with message: Feature not available yet, please contact Edge product team for more details.
          */
         get: operations['getTransferStatus'];
         put?: never;
@@ -743,7 +757,7 @@ interface paths {
         };
         /**
          * List transfers
-         * @description Returns a paginated list of transfers for the authenticated user. Useful for reconciliation.
+         * @description Reserved for a future transfer release. Currently returns feature_unavailable with message: Feature not available yet, please contact Edge product team for more details.
          */
         get: operations['listTransfers'];
         put?: never;
@@ -3011,6 +3025,14 @@ declare class EdgeInsufficientScopeError extends EdgeError {
     readonly missingScopes: string[];
     constructor(missingScopes: string[], message?: string);
 }
+declare const EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE = "Feature not available yet, please contact Edge product team for more details";
+/**
+ * Thrown when an SDK surface exists for a future EDGE Connect feature that is
+ * not active for partners yet.
+ */
+declare class EdgeFeatureUnavailableError extends EdgeError {
+    constructor(message?: string);
+}
 /**
  * Thrown when an API request fails with a known error.
  *
@@ -3182,6 +3204,7 @@ declare function isIdentityVerificationError(error: unknown): error is EdgeIdent
  * Type guard for network errors.
  */
 declare function isNetworkError(error: unknown): error is EdgeNetworkError;
+declare function isFeatureUnavailableError(error: unknown): error is EdgeFeatureUnavailableError;
 
 /**
  * @edge-markets/connect
@@ -3230,4 +3253,4 @@ declare const SDK_VERSION = "1.0.0";
  */
 declare const SDK_NAME = "@edge-markets/connect";
 
-export { ALL_EDGE_SCOPES, type ApiError, type Balance, type BaseWebhookEvent, type ConsentRequiredError, type ConsentRevokedEventData, type CreateVerificationSessionRequest, EDGE_ENVIRONMENTS, EDGE_LINK_PATH, EDGE_SCOPES, EDGE_WEBHOOK_EVENT_TYPES, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, type EdgeEnvironment, type EdgeEnvironmentConfig, EdgeError, EdgeIdentityVerificationError, EdgeInsufficientScopeError, type EdgeLinkConfigBase, type EdgeLinkEvent, type EdgeLinkEventName, type EdgeLinkExit, type EdgeLinkSuccess, EdgeNetworkError, EdgeNotFoundError, EdgePopupBlockedError, EdgePopupClosedError, type EdgeScope, EdgeStateMismatchError, EdgeTokenExchangeError, type EdgeTokens, EdgeValidationError, type EdgeWebhookEvent, type EdgeWebhookEventType, type InitiateTransferRequest, type ListTransfersParams, OTP_METHODS, type OtpMethod, type PKCEPair, type RevokeConsentResponse, SCOPE_DESCRIPTIONS, SCOPE_ICONS, SDK_NAME, SDK_VERSION, type SdkGeolocation, TRANSFER_CATEGORIES, TRANSFER_STATUSES, TRANSFER_TYPES, type Transfer, type TransferCategory, type TransferCompletedEventData, type TransferExpiredEventData, type TransferFailedEventData, type TransferList, type TransferListItem, type TransferProcessingEventData, type TransferStatus, type TransferType, type User, type UserAddress, type VerificationSession, type VerificationSessionStatus, type VerificationSessionStatusResponse, type VerifyIdentityAddress, type VerifyIdentityOptions, type VerifyIdentityResult, type VerifyIdentityScores, type components, formatScopeForEnvironment, formatScopesForEnvironment, getAvailableEnvironments, getEnvironmentConfig, getLinkUrl, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isIdentityVerificationError, isNetworkError, isProductionEnvironment, isValidScope, type operations, parseScope, type paths };
+export { ACTIVE_EDGE_SCOPES, ALL_EDGE_SCOPES, type ApiError, type Balance, type BaseWebhookEvent, type ConsentRequiredError, type ConsentRevokedEventData, type CreateVerificationSessionRequest, EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE, EDGE_ENVIRONMENTS, EDGE_LINK_PATH, EDGE_SCOPES, EDGE_WEBHOOK_EVENT_TYPES, EdgeApiError, EdgeAuthenticationError, EdgeConsentRequiredError, type EdgeEnvironment, type EdgeEnvironmentConfig, EdgeError, EdgeFeatureUnavailableError, EdgeIdentityVerificationError, EdgeInsufficientScopeError, type EdgeLinkConfigBase, type EdgeLinkEvent, type EdgeLinkEventName, type EdgeLinkExit, type EdgeLinkSuccess, EdgeNetworkError, EdgeNotFoundError, EdgePopupBlockedError, EdgePopupClosedError, type EdgeScope, EdgeStateMismatchError, EdgeTokenExchangeError, type EdgeTokens, EdgeValidationError, type EdgeWebhookEvent, type EdgeWebhookEventType, type InitiateTransferRequest, type ListTransfersParams, OTP_METHODS, type OtpMethod, type PKCEPair, RESERVED_EDGE_SCOPES, type RevokeConsentResponse, SCOPE_DESCRIPTIONS, SCOPE_ICONS, SDK_NAME, SDK_VERSION, type SdkGeolocation, TRANSFER_CATEGORIES, TRANSFER_STATUSES, TRANSFER_TYPES, type Transfer, type TransferCategory, type TransferCompletedEventData, type TransferExpiredEventData, type TransferFailedEventData, type TransferList, type TransferListItem, type TransferProcessingEventData, type TransferStatus, type TransferType, type User, type UserAddress, type VerificationSession, type VerificationSessionStatus, type VerificationSessionStatusResponse, type VerifyIdentityAddress, type VerifyIdentityOptions, type VerifyIdentityResult, type VerifyIdentityScores, type components, formatScopeForEnvironment, formatScopesForEnvironment, getAvailableEnvironments, getEnvironmentConfig, getLinkUrl, isApiError, isAuthenticationError, isConsentRequiredError, isEdgeError, isFeatureUnavailableError, isIdentityVerificationError, isNetworkError, isProductionEnvironment, isTransferWriteScope, isValidScope, type operations, parseScope, type paths };

package/dist/index.js

@@ -20,7 +20,9 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  ACTIVE_EDGE_SCOPES: () => ACTIVE_EDGE_SCOPES,
   ALL_EDGE_SCOPES: () => ALL_EDGE_SCOPES,
+  EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE: () => EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE,
   EDGE_ENVIRONMENTS: () => EDGE_ENVIRONMENTS,
   EDGE_LINK_PATH: () => EDGE_LINK_PATH,
   EDGE_SCOPES: () => EDGE_SCOPES,
@@ -29,6 +31,7 @@ __export(index_exports, {
   EdgeAuthenticationError: () => EdgeAuthenticationError,
   EdgeConsentRequiredError: () => EdgeConsentRequiredError,
   EdgeError: () => EdgeError,
+  EdgeFeatureUnavailableError: () => EdgeFeatureUnavailableError,
   EdgeIdentityVerificationError: () => EdgeIdentityVerificationError,
   EdgeInsufficientScopeError: () => EdgeInsufficientScopeError,
   EdgeNetworkError: () => EdgeNetworkError,
@@ -39,6 +42,7 @@ __export(index_exports, {
   EdgeTokenExchangeError: () => EdgeTokenExchangeError,
   EdgeValidationError: () => EdgeValidationError,
   OTP_METHODS: () => OTP_METHODS,
+  RESERVED_EDGE_SCOPES: () => RESERVED_EDGE_SCOPES,
   SCOPE_DESCRIPTIONS: () => SCOPE_DESCRIPTIONS,
   SCOPE_ICONS: () => SCOPE_ICONS,
   SDK_NAME: () => SDK_NAME,
@@ -55,9 +59,11 @@ __export(index_exports, {
   isAuthenticationError: () => isAuthenticationError,
   isConsentRequiredError: () => isConsentRequiredError,
   isEdgeError: () => isEdgeError,
+  isFeatureUnavailableError: () => isFeatureUnavailableError,
   isIdentityVerificationError: () => isIdentityVerificationError,
   isNetworkError: () => isNetworkError,
   isProductionEnvironment: () => isProductionEnvironment,
+  isTransferWriteScope: () => isTransferWriteScope,
   isValidScope: () => isValidScope,
   parseScope: () => parseScope
 });
@@ -118,9 +124,12 @@ var EDGE_ENVIRONMENTS = {
   },
   sandbox: {
     cognitoDomain: "https://edge-connect-sandbox.auth.us-east-1.amazoncognito.com",
-    apiBaseUrl: "https://api-sandbox.staging.edgeboost.io/connect/v1",
-    oauthBaseUrl: "https://api-sandbox.staging.edgeboost.io/api/v3/oauth",
-    userClientUrl: "https://oauth.staging-app.edgeboost.io",
+    // Sandbox partner API — mTLS-enforced. Uses its own sandbox gateway and
+    // sandbox OAuth/JWKS issuer. The browser Link UI is served from a separate
+    // sandbox host so SDK consumers do not enter the staging OAuth origin.
+    apiBaseUrl: "https://sandbox.connect.staging.edgeboost.io/connect/v1",
+    oauthBaseUrl: "https://sandbox.connect.staging.edgeboost.io/connect/oauth",
+    userClientUrl: "https://sandbox-oauth.staging-app.edgeboost.io",
     displayName: "Sandbox",
     isProduction: false
   },
@@ -177,16 +186,22 @@ var EDGE_SCOPES = {
    */
   BALANCE_READ: "balance.read",
   /**
-   * Initiate fund transfers and create EDGE-hosted verification sessions.
+   * Reserved for future fund transfers and EDGE-hosted verification sessions.
+   * Not available in staging or production. Requesting this scope from Link
+   * SDKs fails with EdgeFeatureUnavailableError until EDGE enables transfers
+   * for a partner.
+   *
    * Required for: `POST /v1/transfer`, `POST /v1/transfer/:id/verification-session`, `GET /v1/transfers`
    */
   TRANSFER_WRITE: "transfer.write"
 };
-var ALL_EDGE_SCOPES = Object.values(EDGE_SCOPES);
+var ACTIVE_EDGE_SCOPES = [EDGE_SCOPES.USER_READ, EDGE_SCOPES.BALANCE_READ];
+var RESERVED_EDGE_SCOPES = [EDGE_SCOPES.TRANSFER_WRITE];
+var ALL_EDGE_SCOPES = ACTIVE_EDGE_SCOPES;
 var SCOPE_DESCRIPTIONS = {
   [EDGE_SCOPES.USER_READ]: "View your profile information (name and email)",
   [EDGE_SCOPES.BALANCE_READ]: "View your EdgeBoost account balance",
-  [EDGE_SCOPES.TRANSFER_WRITE]: "Transfer funds to and from your EdgeBoost account"
+  [EDGE_SCOPES.TRANSFER_WRITE]: "Transfers are not available yet"
 };
 var SCOPE_ICONS = {
   [EDGE_SCOPES.USER_READ]: "user",
@@ -210,6 +225,10 @@ function parseScope(fullScope) {
 function isValidScope(scope) {
   return Object.values(EDGE_SCOPES).includes(scope);
 }
+function isTransferWriteScope(scope) {
+  const normalized = typeof scope === "string" ? scope.trim() : "";
+  return normalized === EDGE_SCOPES.TRANSFER_WRITE || normalized.endsWith(`/${EDGE_SCOPES.TRANSFER_WRITE}`);
+}
 
 // src/errors/edge.error.ts
 var EdgeError = class _EdgeError extends Error {
@@ -270,6 +289,13 @@ var EdgeInsufficientScopeError = class extends EdgeError {
     this.missingScopes = missingScopes;
   }
 };
+var EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE = "Feature not available yet, please contact Edge product team for more details";
+var EdgeFeatureUnavailableError = class extends EdgeError {
+  constructor(message = EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE) {
+    super("feature_unavailable", message, 501);
+    this.name = "EdgeFeatureUnavailableError";
+  }
+};
 var EdgeApiError = class extends EdgeError {
   constructor(code, message, statusCode, details) {
     super(code, message, statusCode, details);
@@ -348,13 +374,18 @@ function isIdentityVerificationError(error) {
 function isNetworkError(error) {
   return error instanceof EdgeNetworkError;
 }
+function isFeatureUnavailableError(error) {
+  return error instanceof EdgeFeatureUnavailableError;
+}
 
 // src/index.ts
 var SDK_VERSION = "1.0.0";
 var SDK_NAME = "@edge-markets/connect";
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  ACTIVE_EDGE_SCOPES,
   ALL_EDGE_SCOPES,
+  EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE,
   EDGE_ENVIRONMENTS,
   EDGE_LINK_PATH,
   EDGE_SCOPES,
@@ -363,6 +394,7 @@ var SDK_NAME = "@edge-markets/connect";
   EdgeAuthenticationError,
   EdgeConsentRequiredError,
   EdgeError,
+  EdgeFeatureUnavailableError,
   EdgeIdentityVerificationError,
   EdgeInsufficientScopeError,
   EdgeNetworkError,
@@ -373,6 +405,7 @@ var SDK_NAME = "@edge-markets/connect";
   EdgeTokenExchangeError,
   EdgeValidationError,
   OTP_METHODS,
+  RESERVED_EDGE_SCOPES,
   SCOPE_DESCRIPTIONS,
   SCOPE_ICONS,
   SDK_NAME,
@@ -389,9 +422,11 @@ var SDK_NAME = "@edge-markets/connect";
   isAuthenticationError,
   isConsentRequiredError,
   isEdgeError,
+  isFeatureUnavailableError,
   isIdentityVerificationError,
   isNetworkError,
   isProductionEnvironment,
+  isTransferWriteScope,
   isValidScope,
   parseScope
 });

package/dist/index.mjs

@@ -53,9 +53,12 @@ var EDGE_ENVIRONMENTS = {
   },
   sandbox: {
     cognitoDomain: "https://edge-connect-sandbox.auth.us-east-1.amazoncognito.com",
-    apiBaseUrl: "https://api-sandbox.staging.edgeboost.io/connect/v1",
-    oauthBaseUrl: "https://api-sandbox.staging.edgeboost.io/api/v3/oauth",
-    userClientUrl: "https://oauth.staging-app.edgeboost.io",
+    // Sandbox partner API — mTLS-enforced. Uses its own sandbox gateway and
+    // sandbox OAuth/JWKS issuer. The browser Link UI is served from a separate
+    // sandbox host so SDK consumers do not enter the staging OAuth origin.
+    apiBaseUrl: "https://sandbox.connect.staging.edgeboost.io/connect/v1",
+    oauthBaseUrl: "https://sandbox.connect.staging.edgeboost.io/connect/oauth",
+    userClientUrl: "https://sandbox-oauth.staging-app.edgeboost.io",
     displayName: "Sandbox",
     isProduction: false
   },
@@ -112,16 +115,22 @@ var EDGE_SCOPES = {
    */
   BALANCE_READ: "balance.read",
   /**
-   * Initiate fund transfers and create EDGE-hosted verification sessions.
+   * Reserved for future fund transfers and EDGE-hosted verification sessions.
+   * Not available in staging or production. Requesting this scope from Link
+   * SDKs fails with EdgeFeatureUnavailableError until EDGE enables transfers
+   * for a partner.
+   *
    * Required for: `POST /v1/transfer`, `POST /v1/transfer/:id/verification-session`, `GET /v1/transfers`
    */
   TRANSFER_WRITE: "transfer.write"
 };
-var ALL_EDGE_SCOPES = Object.values(EDGE_SCOPES);
+var ACTIVE_EDGE_SCOPES = [EDGE_SCOPES.USER_READ, EDGE_SCOPES.BALANCE_READ];
+var RESERVED_EDGE_SCOPES = [EDGE_SCOPES.TRANSFER_WRITE];
+var ALL_EDGE_SCOPES = ACTIVE_EDGE_SCOPES;
 var SCOPE_DESCRIPTIONS = {
   [EDGE_SCOPES.USER_READ]: "View your profile information (name and email)",
   [EDGE_SCOPES.BALANCE_READ]: "View your EdgeBoost account balance",
-  [EDGE_SCOPES.TRANSFER_WRITE]: "Transfer funds to and from your EdgeBoost account"
+  [EDGE_SCOPES.TRANSFER_WRITE]: "Transfers are not available yet"
 };
 var SCOPE_ICONS = {
   [EDGE_SCOPES.USER_READ]: "user",
@@ -145,6 +154,10 @@ function parseScope(fullScope) {
 function isValidScope(scope) {
   return Object.values(EDGE_SCOPES).includes(scope);
 }
+function isTransferWriteScope(scope) {
+  const normalized = typeof scope === "string" ? scope.trim() : "";
+  return normalized === EDGE_SCOPES.TRANSFER_WRITE || normalized.endsWith(`/${EDGE_SCOPES.TRANSFER_WRITE}`);
+}
 
 // src/errors/edge.error.ts
 var EdgeError = class _EdgeError extends Error {
@@ -205,6 +218,13 @@ var EdgeInsufficientScopeError = class extends EdgeError {
     this.missingScopes = missingScopes;
   }
 };
+var EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE = "Feature not available yet, please contact Edge product team for more details";
+var EdgeFeatureUnavailableError = class extends EdgeError {
+  constructor(message = EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE) {
+    super("feature_unavailable", message, 501);
+    this.name = "EdgeFeatureUnavailableError";
+  }
+};
 var EdgeApiError = class extends EdgeError {
   constructor(code, message, statusCode, details) {
     super(code, message, statusCode, details);
@@ -283,12 +303,17 @@ function isIdentityVerificationError(error) {
 function isNetworkError(error) {
   return error instanceof EdgeNetworkError;
 }
+function isFeatureUnavailableError(error) {
+  return error instanceof EdgeFeatureUnavailableError;
+}
 
 // src/index.ts
 var SDK_VERSION = "1.0.0";
 var SDK_NAME = "@edge-markets/connect";
 export {
+  ACTIVE_EDGE_SCOPES,
   ALL_EDGE_SCOPES,
+  EDGE_CONNECT_FEATURE_UNAVAILABLE_MESSAGE,
   EDGE_ENVIRONMENTS,
   EDGE_LINK_PATH,
   EDGE_SCOPES,
@@ -297,6 +322,7 @@ export {
   EdgeAuthenticationError,
   EdgeConsentRequiredError,
   EdgeError,
+  EdgeFeatureUnavailableError,
   EdgeIdentityVerificationError,
   EdgeInsufficientScopeError,
   EdgeNetworkError,
@@ -307,6 +333,7 @@ export {
   EdgeTokenExchangeError,
   EdgeValidationError,
   OTP_METHODS,
+  RESERVED_EDGE_SCOPES,
   SCOPE_DESCRIPTIONS,
   SCOPE_ICONS,
   SDK_NAME,
@@ -323,9 +350,11 @@ export {
   isAuthenticationError,
   isConsentRequiredError,
   isEdgeError,
+  isFeatureUnavailableError,
   isIdentityVerificationError,
   isNetworkError,
   isProductionEnvironment,
+  isTransferWriteScope,
   isValidScope,
   parseScope
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edge-markets/connect",
-  "version": "1.7.0",
+  "version": "1.9.0",
   "description": "Core types, configuration, and utilities for EDGE Connect SDK",
   "author": "EdgeBoost",
   "license": "MIT",