@mft/moneyhub-api-client 6.99.0 → 6.100.1

package/dist/requests/types/unauthenticated.d.ts

@@ -9,6 +9,10 @@ export interface UnauthenticatedRequests {
     listAPIConnections: (query?: {
         clientId?: string;
     }) => Promise<WellKnownConnection[]>;
+    /** Identity `.well-known/legacy-connections` */
+    listLegacyConnections: (query?: {
+        clientId?: string;
+    }) => Promise<WellKnownConnection[]>;
     listTestConnections: (query?: {
         clientId?: string;
     }) => Promise<WellKnownConnection[]>;

package/dist/requests/types/unauthenticated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"unauthenticated.d.ts","sourceRoot":"","sources":["../../../src/requests/types/unauthenticated.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,WAAW,EAAE,YAAY,EAAC,MAAM,eAAe,CAAA;AACvD,OAAO,EAAC,mBAAmB,EAAC,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAC,gCAAgC,EAAE,kBAAkB,EAAC,MAAM,2BAA2B,CAAA;AAE9F,MAAM,WAAW,uBAAuB;IACtC,uBAAuB,EAAE,CACvB,MAAM,CAAC,EAAE,gCAAgC,EACzC,OAAO,CAAC,EAAE,YAAY,KACnB,OAAO,CAAC,WAAW,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAA;IAE/C,eAAe,EAAE,CAAC,KAAK,CAAC,EAAE;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAC,KAAK,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;IAChF,kBAAkB,EAAE,CAAC,KAAK,CAAC,EAAE;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAC,KAAK,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;IACnF,mBAAmB,EAAE,CAAC,KAAK,CAAC,EAAE;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAC,KAAK,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;IACpF,mBAAmB,EAAE,CAAC,KAAK,CAAC,EAAE;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAC,KAAK,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;IACpF,uBAAuB,EAAE,CAAC,KAAK,CAAC,EAAE;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAC,KAAK,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;IACxF,eAAe,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;CACxC"}
+{"version":3,"file":"unauthenticated.d.ts","sourceRoot":"","sources":["../../../src/requests/types/unauthenticated.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,WAAW,EAAE,YAAY,EAAC,MAAM,eAAe,CAAA;AACvD,OAAO,EAAC,mBAAmB,EAAC,MAAM,yBAAyB,CAAA;AAC3D,OAAO,EAAC,gCAAgC,EAAE,kBAAkB,EAAC,MAAM,2BAA2B,CAAA;AAE9F,MAAM,WAAW,uBAAuB;IACtC,uBAAuB,EAAE,CACvB,MAAM,CAAC,EAAE,gCAAgC,EACzC,OAAO,CAAC,EAAE,YAAY,KACnB,OAAO,CAAC,WAAW,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAA;IAE/C,eAAe,EAAE,CAAC,KAAK,CAAC,EAAE;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAC,KAAK,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;IAChF,kBAAkB,EAAE,CAAC,KAAK,CAAC,EAAE;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAC,KAAK,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;IAEnF,gDAAgD;IAChD,qBAAqB,EAAE,CAAC,KAAK,CAAC,EAAE;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAC,KAAK,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;IACtF,mBAAmB,EAAE,CAAC,KAAK,CAAC,EAAE;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAC,KAAK,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;IACpF,mBAAmB,EAAE,CAAC,KAAK,CAAC,EAAE;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAC,KAAK,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;IACpF,uBAAuB,EAAE,CAAC,KAAK,CAAC,EAAE;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAC,KAAK,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;IACxF,eAAe,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;CACxC"}

package/dist/requests/unauthenticated.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"unauthenticated.d.ts","sourceRoot":"","sources":["../../src/requests/unauthenticated.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,cAAc,EAAe,MAAM,YAAY,CAAA;AACvD,OAAO,EAAC,uBAAuB,EAAC,MAAM,yBAAyB,CAAA;8CAE5B,cAAc,KAAG,uBAAuB;AAA3E,wBAoBC"}
+{"version":3,"file":"unauthenticated.d.ts","sourceRoot":"","sources":["../../src/requests/unauthenticated.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,cAAc,EAAe,MAAM,YAAY,CAAA;AACvD,OAAO,EAAC,uBAAuB,EAAC,MAAM,yBAAyB,CAAA;8CAE5B,cAAc,KAAG,uBAAuB;AAA3E,wBAsBC"}

package/dist/requests/unauthenticated.js

@@ -13,6 +13,7 @@ exports.default = ({ config, request }) => {
         }),
         listConnections: (query) => request(`${identityServiceUrl}/oidc/.well-known/all-connections?${query && query_string_1.default.stringify(query)}`),
         listAPIConnections: (query) => request(`${identityServiceUrl}/oidc/.well-known/api-connections?${query && query_string_1.default.stringify(query)}`),
+        listLegacyConnections: (query) => request(`${identityServiceUrl}/oidc/.well-known/legacy-connections?${query && query_string_1.default.stringify(query)}`),
         listTestConnections: (query) => request(`${identityServiceUrl}/oidc/.well-known/test-connections?${query && query_string_1.default.stringify(query)}`),
         listPaymentsConnections: (query) => request(`${identityServiceUrl}/oidc/.well-known/payments-connections?${query && query_string_1.default.stringify(query)}`),
         listBetaConnections: (query) => request(`${identityServiceUrl}/oidc/.well-known/beta-connections?${query && query_string_1.default.stringify(query)}`),

package/dist/requests/unauthenticated.js.map

@@ -1 +1 @@
-{"version":3,"file":"unauthenticated.js","sourceRoot":"","sources":["../../src/requests/unauthenticated.ts"],"names":[],"mappings":";;;;;AAAA,gEAA6B;AAI7B,kBAAe,CAAC,EAAC,MAAM,EAAE,OAAO,EAAiB,EAA2B,EAAE;IAC5E,MAAM,EAAC,iBAAiB,EAAE,kBAAkB,EAAE,eAAe,EAAC,GAAG,MAAM,CAAA;IACvE,OAAO;QACL,uBAAuB,EAAE,CAAC,MAAM,GAAG,EAAE,EAAE,OAAsB,EAAE,EAAE,CAC/D,OAAO,CAAC,GAAG,iBAAiB,wBAAwB,EAAE;YACpD,YAAY,EAAE,MAAM;YACpB,OAAO;SACR,CAAC;QACJ,eAAe,EAAE,CAAC,KAA2B,EAAE,EAAE,CAC/C,OAAO,CAAC,GAAG,kBAAkB,qCAAqC,KAAK,IAAI,sBAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACnG,kBAAkB,EAAE,CAAC,KAA2B,EAAE,EAAE,CAClD,OAAO,CAAC,GAAG,kBAAkB,qCAAqC,KAAK,IAAI,sBAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACnG,mBAAmB,EAAE,CAAC,KAA2B,EAAE,EAAE,CACnD,OAAO,CAAC,GAAG,kBAAkB,sCAAsC,KAAK,IAAI,sBAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACpG,uBAAuB,EAAE,CAAC,KAA2B,EAAE,EAAE,CACvD,OAAO,CAAC,GAAG,kBAAkB,0CAA0C,KAAK,IAAI,sBAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACxG,mBAAmB,EAAE,CAAC,KAA2B,EAAE,EAAE,CACnD,OAAO,CAAC,GAAG,kBAAkB,sCAAsC,KAAK,IAAI,sBAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACpG,eAAe,EAAE,GAAG,EAAE,CAAC,eAAe,EAAE;KACzC,CAAA;AACH,CAAC,CAAA"}
+{"version":3,"file":"unauthenticated.js","sourceRoot":"","sources":["../../src/requests/unauthenticated.ts"],"names":[],"mappings":";;;;;AAAA,gEAA6B;AAI7B,kBAAe,CAAC,EAAC,MAAM,EAAE,OAAO,EAAiB,EAA2B,EAAE;IAC5E,MAAM,EAAC,iBAAiB,EAAE,kBAAkB,EAAE,eAAe,EAAC,GAAG,MAAM,CAAA;IACvE,OAAO;QACL,uBAAuB,EAAE,CAAC,MAAM,GAAG,EAAE,EAAE,OAAsB,EAAE,EAAE,CAC/D,OAAO,CAAC,GAAG,iBAAiB,wBAAwB,EAAE;YACpD,YAAY,EAAE,MAAM;YACpB,OAAO;SACR,CAAC;QACJ,eAAe,EAAE,CAAC,KAA2B,EAAE,EAAE,CAC/C,OAAO,CAAC,GAAG,kBAAkB,qCAAqC,KAAK,IAAI,sBAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACnG,kBAAkB,EAAE,CAAC,KAA2B,EAAE,EAAE,CAClD,OAAO,CAAC,GAAG,kBAAkB,qCAAqC,KAAK,IAAI,sBAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACnG,qBAAqB,EAAE,CAAC,KAA2B,EAAE,EAAE,CACrD,OAAO,CAAC,GAAG,kBAAkB,wCAAwC,KAAK,IAAI,sBAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACtG,mBAAmB,EAAE,CAAC,KAA2B,EAAE,EAAE,CACnD,OAAO,CAAC,GAAG,kBAAkB,sCAAsC,KAAK,IAAI,sBAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACpG,uBAAuB,EAAE,CAAC,KAA2B,EAAE,EAAE,CACvD,OAAO,CAAC,GAAG,kBAAkB,0CAA0C,KAAK,IAAI,sBAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACxG,mBAAmB,EAAE,CAAC,KAA2B,EAAE,EAAE,CACnD,OAAO,CAAC,GAAG,kBAAkB,sCAAsC,KAAK,IAAI,sBAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACpG,eAAe,EAAE,GAAG,EAAE,CAAC,eAAe,EAAE;KACzC,CAAA;AACH,CAAC,CAAA"}

package/dist/schema/standard-financial-statement.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Standard Financial Statement (Money Advice Service schema).
+ * GET /standard-financial-statements/{reportId} response data.
+ */
+export interface StandardFinancialStatement {
+    id: string;
+    createdAt: string;
+    version: string;
+    currency: string;
+    /** Schema version key (e.g. "2.1") – structure defined by Money Advice Service */
+    [key: string]: unknown;
+}
+/**
+ * Metadata item from GET /standard-financial-statements list.
+ */
+export interface StandardFinancialStatementsMetadata {
+    id: string;
+    status?: string;
+    [key: string]: unknown;
+}
+//# sourceMappingURL=standard-financial-statement.d.ts.map

package/dist/schema/standard-financial-statement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"standard-financial-statement.d.ts","sourceRoot":"","sources":["../../src/schema/standard-financial-statement.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,QAAQ,EAAE,MAAM,CAAA;IAEhB,kFAAkF;IAClF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,mCAAmC;IAClD,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CACvB"}

package/dist/schema/standard-financial-statement.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=standard-financial-statement.js.map

package/dist/schema/standard-financial-statement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standard-financial-statement.js","sourceRoot":"","sources":["../../src/schema/standard-financial-statement.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "@mft/moneyhub-api-client",
-  "version": "6.99.0",
+  "version": "6.100.1",
   "description": "Node.JS client for the Moneyhub API",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "scripts": {
     "lint": "eslint src/ ",
     "lint-fix": "eslint src/ --fix",
+    "check-secrets": "node scripts/check-secrets.js",
     "test": "mocha --require ts-node/register --config test/opts/integration.json",
     "test-ci": "mocha --require ts-node/register --config test/opts/integration-ci.json",
     "test-caas": "mocha --require ts-node/register --config test/opts/integration-caas.json",
@@ -26,16 +27,16 @@
     "api",
     "openid"
   ],
-  "author": "Moneyub Financial Technology",
+  "author": "Moneyhub Financial Technology",
   "homepage": "https://github.com/moneyhub/moneyhub-api-client",
   "repository": "moneyhub/moneyhub-api-client",
   "license": "ISC",
   "engines": {
-    "node": ">= 12.0.0"
+    "node": ">= 18.0.0"
   },
   "dependencies": {
     "@isaacs/ttlcache": "^2.1.4",
-    "form-data": "^3.0.4",
+    "form-data": "^3.0.5",
     "got": "^11.8.5",
     "jose": "^5.2.3",
     "openid-client": "^5.6.5",

package/readme.md

@@ -26,6 +26,9 @@ This is an Node.JS client for the [Moneyhub API](https://docs.moneyhubenterprise
 - Get a tax return for a subset of transactions
 - Get the regular transactions on an account
 - Get beneficiaries
+- Create reseller check requests and get consent history
+- Standard financial statements
+- Legacy bank connections listing
 - CAAS (Categorisation as a Service) API for advanced transaction enrichment and categorisation
 
 Currently this library supports `client_secret_basic`, `client_secret_jwt` and `private_key_jwt` authentication.
@@ -64,7 +67,7 @@ const {Moneyhub} = require("@mft/moneyhub-api-client")
 
 ## Publishing (maintainers)
 
-Official releases are published to npm by **GitHub Actions** when a [GitHub Release](https://github.com/moneyhub/moneyhub-api-client/releases) is published (see `.github/workflows/publish.yml`). Do not rely on publishing from a developer machine.
+Official releases are published to npm by **GitHub Actions** when a [GitHub Release](https://github.com/moneyhub/moneyhub-api-client/releases) is published (see `.github/workflows/publish.yml`). The publish workflow runs lint and build on GitHub-hosted runners. Live integration tests are not part of publish; they run in the private synced repository (allowlisted IPs / secrets). Do not rely on publishing from a developer machine.
 
 The `prepublishOnly` lifecycle script runs **`scripts/assert-github-actions-publish.js`** before the build. It exits with an error unless `GITHUB_ACTIONS` is set (as it is in GitHub Actions), so a normal local `npm publish` is blocked. That reduces accidental publishes; it is **not** a security boundary on its own—npm access control and trusted publishing still matter.
 
@@ -74,9 +77,10 @@ To bypass the check in a **documented emergency** only, you can run `npm publish
 
 To use this API client you will need:
 
+- Node.js >= 18.0.0
 - A `client_id`, `client_secret` and `redirect_uri` of a registered API client
 - The url of the Moneyhub identity service for the environment you are connecting to (https://identity.moneyhub.co.uk)
-- The url for the API gateway for the environment that you are connecting to (https://api.moneyhub.co.uk/v2.0)
+- The url for the API gateway for the environment that you are connecting to (https://api.moneyhub.co.uk/v3)
 
 ## To install
 
@@ -257,6 +261,8 @@ The `expirationDateTime` and `transactionFromDateTime` options can be set accord
 
 Set `enableAsync` to true if you wish to make an AIS connection that won't wait for accounts and transactions to be fetched.
 
+Set `accVerification` to true to add the `mh:account_verification` claim. This is independent of `enableAsync`.
+
 **Note:** all methods generate an authorise URL using the Pushed Authorisation Request (PAR) method, see [here](https://docs.moneyhubenterprise.com/docs/pushed-authorisation-requests-par) for more details.
 
 #### `getAuthorizeUrl`
@@ -280,6 +286,7 @@ const url = await moneyhub.getAuthorizeUrl({
   expirationDateTime: "2022-09-01T00:00:00.000Z", // optional
   transactionFromDateTime: "2020-09-01T00:00:00.000Z", // optional,
   enableAsync: false, // optional
+  accVerification: false, // optional - adds mh:account_verification independently of enableAsync
 });
 
 // Default claims if none are provided
@@ -399,24 +406,6 @@ const defaultClaims = {
 
 #### `getRefreshAuthorizeUrlForCreatedUser`
 
-#### `getAuthorizeUrlLegacy`
-
-This method returns an authorize url for your API client using the legacy method (where a request object is generated and passed in as the `request` query parameter). You can redirect a user to this url, after which they will be redirected back to your `redirect_uri`. It has the same method signature as `getAuthorizeUrl`
-
-```javascript
-const url = await moneyhub.getAuthorizeUrlLegacy({
-  scope: "openid bank-id-scope other-data-scopes",
-  state: " your state value", // optional
-  nonce: "your nonce value", //optional
-  claims: claimsObject, // optional
-  permissions: ["ReadBeneficiariesDetail"], // optional - set of extra permissions to set for auth URL
-  permissionsAction: "replace" // optional - replace default consent permissions. Defaults to "add"
-  expirationDateTime: "2022-09-01T00:00:00.000Z", // optional
-  transactionFromDateTime: "2020-09-01T00:00:00.000Z", // optional,
-  enableAsync: false, // optional
-});
-```
-
 This is a helper function that returns an authorize url for a specific user to refresh an existing connection. This function uses the scope `openid refresh`. (Only relevant for legacy connections)
 
 ```javascript
@@ -444,6 +433,24 @@ const defaultClaims = {
 };
 ```
 
+#### `getAuthorizeUrlLegacy`
+
+This method returns an authorize url for your API client using the legacy method (where a request object is generated and passed in as the `request` query parameter). You can redirect a user to this url, after which they will be redirected back to your `redirect_uri`. It has the same method signature as `getAuthorizeUrl`
+
+```javascript
+const url = await moneyhub.getAuthorizeUrlLegacy({
+  scope: "openid bank-id-scope other-data-scopes",
+  state: " your state value", // optional
+  nonce: "your nonce value", //optional
+  claims: claimsObject, // optional
+  permissions: ["ReadBeneficiariesDetail"], // optional - set of extra permissions to set for auth URL
+  permissionsAction: "replace" // optional - replace default consent permissions. Defaults to "add"
+  expirationDateTime: "2022-09-01T00:00:00.000Z", // optional
+  transactionFromDateTime: "2020-09-01T00:00:00.000Z", // optional,
+  enableAsync: false, // optional
+});
+```
+
 #### `exchangeCodeForTokensLegacy`
 
 This is a legacy method to get tokens for a user.
@@ -850,7 +857,7 @@ Similar to getAccounts method, however this method does not return `transactionD
 
 ```javascript
 const queryParams = { limit: 10, offset: 5 , showTransacionData: false, showPerformanceScore: true};
-const accounts = await moneyhub.getAccounts({
+const accounts = await moneyhub.getAccountsList({
   userId: "userId",
   params: queryParams,
 }, options);
@@ -862,7 +869,7 @@ Similar to getAccountsWithDetails method, however this method does not return `t
 
 ```javascript
 const queryParams = { limit: 10, offset: 5 };
-const accounts = await moneyhub.getAccountsWithDetails({
+const accounts = await moneyhub.getAccountsListWithDetails({
   userId: "userId",
   params: queryParams,
 }, options);
@@ -1004,6 +1011,28 @@ const statements = await moneyhub.getAccountStatementsWithDetail({
 }, options);
 ```
 
+#### `getStandardFinancialStatements`
+
+List standard financial statement reports for a user (Money Advice Service schema metadata). Uses the scope `standard_financial_statement:read`.
+
+```javascript
+const statements = await moneyhub.getStandardFinancialStatements({
+  userId: "userId",
+  params: {limit: 10, offset: 0},
+}, options);
+```
+
+#### `getStandardFinancialStatement`
+
+Get a single standard financial statement report by id. Uses the scope `standard_financial_statement:read`.
+
+```javascript
+const statement = await moneyhub.getStandardFinancialStatement({
+  userId: "userId",
+  reportId: "reportId",
+}, options);
+```
+
 #### `createAccount`
 
 Create a manual account for a user. This function uses the scopes `accounts:read accounts:write:all`
@@ -1353,11 +1382,9 @@ const accounts = await moneyhub.getOsipAccounts({
 Get an account for a user. This function uses the scope `osip:read`.
 
 ```javascript
-const queryParams = { limit: 10, offset: 5 };
-const accounts = await moneyhub.getOsipAccounts({
+const account = await moneyhub.getOsipAccount({
   userId: "userId",
   accountId: "accountId",
-  params: queryParams,
 });
 ```
 
@@ -1367,7 +1394,7 @@ Get account holdings for an account. This function uses the scope `osip:read`.
 
 ```javascript
 const queryParams = { limit: 10, offset: 5 };
-const accounts = await moneyhub.getOsipAccounts({
+const holdings = await moneyhub.getOsipAccountHoldings({
   userId: "userId",
   accountId: "accountId",
   params: queryParams,
@@ -1380,7 +1407,7 @@ Get account transactions. This function uses the scope `osip:read`.
 
 ```javascript
 const queryParams = { limit: 10, offset: 5 };
-const accounts = await moneyhub.getOsipAccounts({
+const transactions = await moneyhub.getOsipAccountTransactions({
   userId: "userId",
   accountId: "accountId",
   params: queryParams,
@@ -1728,6 +1755,18 @@ const payees = await moneyhub.getPayees({
 });
 ```
 
+#### `getPayee`
+
+Get a single registered payee by id. This function uses the scope `payee:read`.
+
+```javascript
+const payee = await moneyhub.getPayee({
+  id: "payee-id",
+});
+```
+
+Example script: `node examples/payments/get-payee.js -i payee-id`.
+
 #### `getPayments`
 
 This method returns a list of initiated payments. This function uses the scope `payment:read`
@@ -1995,7 +2034,7 @@ const recurringPayment = await moneyhub.getRecurringPayment({
 This method creates a payment using the recurring payment consent. This function uses the scope `recurring_payment:create`
 
 ```javascript
-const recurringPayments = await moneyhub.getRecurringPayments({
+const recurringPayment = await moneyhub.makeRecurringPayment({
   recurringPaymentId: "Id of the recurring payment consent",
   payment: {
     payeeId: "payee-id", // optional
@@ -2016,6 +2055,22 @@ const revokedRecurringPayment = await moneyhub.revokeRecurringPayment({
 });
 ```
 
+#### `confirmFundsForRecurringPayment`
+
+Confirm that funds are available for a payment under an existing recurring payment consent. This function uses the scope `recurring_payment:funds_confirmation`.
+
+```javascript
+const fundsConfirmation = await moneyhub.confirmFundsForRecurringPayment({
+  recurringPaymentId: "Id of the recurring payment consent",
+  fundsConfirmation: {
+    amount: "10.00",
+    currency: "GBP",
+  },
+});
+```
+
+Example script: `node examples/recurring-payments/confirm-funds.js -i recurring-payment-id -a 10.00`.
+
 #### `getRegularTransactions`
 
 Get all the regular transactions for a user, there is an option to pass an account ID as a parameter as a filter. This function uses the scope `accounts:read`, `transactions:read:all` and `regular_transactions:read`
@@ -2221,6 +2276,20 @@ const resellerCheck = await moneyhub.createResellerCheckRequest({
 }, options);
 ```
 
+#### `getConsentHistory`
+
+Get consent history for the API client, optionally filtered by user. This function uses the scope `consent_history:read`.
+
+```javascript
+const consentHistory = await moneyhub.getConsentHistory({
+  limit: 10, // optional
+  offset: 0, // optional
+  userId: "user-id", // optional
+});
+```
+
+Example script: `node examples/consent-history/get-history.js -u user-id`.
+
 ### CAAS API
 
 The CAAS (Categorisation as a Service) API provides advanced transaction enrichment, categorisation, and management capabilities. All CAAS endpoints use dedicated scopes prefixed with `caas:`.
@@ -2481,6 +2550,14 @@ This method will resolve with a list of all the API connections that a user can
 const availableConnections = await moneyhub.listAPIConnections();
 ```
 
+#### `listLegacyConnections`
+
+This method will resolve with a list of legacy connections from Identity (`.well-known/legacy-connections`).
+
+```javascript
+const availableConnections = await moneyhub.listLegacyConnections();
+```
+
 #### `listTestConnections`
 
 This method will resolve with a list of all the Test connections that a user can connect to.

package/scripts/assert-github-actions-publish.js

@@ -1,10 +1,20 @@
 #!/usr/bin/env node
 // prepublishOnly guard; emergency bypass: npm publish --ignore-scripts
+const allowedRepo = "moneyhub/moneyhub-api-client";
+
 if (process.env.GITHUB_ACTIONS !== "true") {
   console.error(
     "Publishing this package is restricted to GitHub Actions. " +
-      "Create a GitHub Release to trigger the publish workflow. " +
+      "Create a GitHub Release on moneyhub/moneyhub-api-client to trigger the publish workflow. " +
       "For a documented emergency bypass, use npm publish --ignore-scripts."
   );
   process.exit(1);
 }
+
+if (process.env.GITHUB_REPOSITORY !== allowedRepo) {
+  console.error(
+    `Publishing this package is restricted to ${allowedRepo}. ` +
+      `Current repository: ${process.env.GITHUB_REPOSITORY || "(unset)"}.`
+  );
+  process.exit(1);
+}

package/scripts/check-secrets.js

@@ -0,0 +1,66 @@
+#!/usr/bin/env node
+const {execFileSync} = require("child_process")
+
+const git = args => execFileSync("git", args, {encoding: "utf8"})
+
+const blockedPaths = [
+  "examples/config.js",
+]
+
+const secretPatterns = [
+  {
+    name: "PEM private key",
+    regex: /-----BEGIN (?:RSA |EC |OPENSSH |DSA )?PRIVATE KEY-----/,
+  },
+  {
+    name: "JWK private component (\"d\")",
+    regex: /"d"\s*:\s*"[A-Za-z0-9_-]{20,}"/,
+  },
+  {
+    name: "Real client_secret value",
+    regex: /client_secret"?\s*[:=]\s*"(?!your client secret")[^"]{8,}"/,
+  },
+]
+
+const getStagedFiles = () => {
+  const output = git(["diff", "--cached", "--name-only", "--diff-filter=ACM", "--no-renames"])
+  return output.split("\n").map(line => line.trim()).filter(Boolean)
+}
+
+const getStagedContent = file => git(["show", `:${file}`])
+
+const scanFile = file => {
+  const findings = []
+  if (blockedPaths.includes(file)) {
+    findings.push(`${file}: file is blocked from being committed (use examples/config.example.js as a template and keep secrets in the git-ignored examples/config.js)`)
+    return findings
+  }
+  let content
+  try {
+    content = getStagedContent(file)
+  } catch (err) {
+    findings.push(`${file}: unable to read staged content, cannot verify it is secret-free (${err.message})`)
+    return findings
+  }
+  secretPatterns.forEach(({name, regex}) => {
+    if (regex.test(content)) {
+      findings.push(`${file}: matched "${name}"`)
+    }
+  })
+  return findings
+}
+
+const main = () => {
+  const files = getStagedFiles()
+  const findings = files.flatMap(scanFile)
+  if (findings.length === 0) {
+    process.exit(0)
+  }
+  console.error("\nCommit blocked: potential secrets detected in staged changes\n")
+  findings.forEach(finding => console.error(`  - ${finding}`))
+  console.error("\nRemove the secrets, unstage the file, and commit again.")
+  console.error("If this is a false positive, review the staged content before bypassing.\n")
+  process.exit(1)
+}
+
+main()

package/.idea/codeStyles/Project.xml

@@ -1,21 +0,0 @@
-<component name="ProjectCodeStyleConfiguration">
-  <code_scheme name="Project" version="173">
-    <JSCodeStyleSettings version="0">
-      <option name="USE_SEMICOLON_AFTER_STATEMENT" value="false" />
-      <option name="FORCE_SEMICOLON_STYLE" value="true" />
-      <option name="SPACE_BEFORE_FUNCTION_LEFT_PARENTH" value="false" />
-      <option name="FORCE_QUOTE_STYlE" value="true" />
-    </JSCodeStyleSettings>
-    <codeStyleSettings language="JavaScript">
-      <option name="BLOCK_COMMENT_ADD_SPACE" value="true" />
-      <option name="KEEP_BLANK_LINES_IN_CODE" value="3" />
-      <option name="INDENT_CASE_FROM_SWITCH" value="false" />
-      <option name="ALIGN_MULTILINE_PARAMETERS" value="false" />
-      <option name="ALIGN_MULTILINE_FOR" value="false" />
-      <indentOptions>
-        <option name="INDENT_SIZE" value="2" />
-        <option name="CONTINUATION_INDENT_SIZE" value="2" />
-      </indentOptions>
-    </codeStyleSettings>
-  </code_scheme>
-</component>

package/.idea/codeStyles/codeStyleConfig.xml

@@ -1,5 +0,0 @@
-<component name="ProjectCodeStyleConfiguration">
-  <state>
-    <option name="USE_PER_PROJECT_SETTINGS" value="true" />
-  </state>
-</component>