@moovio/sdk 25.12.0 → 25.12.3

package/src/lib/encodings.ts

@@ -3,7 +3,7 @@
  */
 
 import { bytesToBase64 } from "./base64.js";
-import { isPlainObject } from "./is-plain-object.js";
+import { isPlainObject } from "./primitives.js";
 
 export class EncodingError extends Error {
   constructor(message: string) {

package/src/lib/http.ts

@@ -45,8 +45,10 @@ export class HTTPClient {
   private requestHooks: BeforeRequestHook[] = [];
   private requestErrorHooks: RequestErrorHook[] = [];
   private responseHooks: ResponseHook[] = [];
+  private options: HTTPClientOptions;
 
-  constructor(private options: HTTPClientOptions = {}) {
+  constructor(options: HTTPClientOptions = {}) {
+    this.options = options;
     this.fetcher = options.fetcher || DEFAULT_FETCHER;
   }
 

package/src/lib/matchers.ts

@@ -6,7 +6,7 @@ import { APIError } from "../models/errors/apierror.js";
 import { ResponseValidationError } from "../models/errors/responsevalidationerror.js";
 import { ERR, OK, Result } from "../types/fp.js";
 import { matchResponse, matchStatusCode, StatusCodePredicate } from "./http.js";
-import { isPlainObject } from "./is-plain-object.js";
+import { isPlainObject } from "./primitives.js";
 
 export type Encoding =
   | "jsonl"

package/src/lib/primitives.ts

@@ -148,3 +148,19 @@ export function allRequired<V extends Record<string, unknown>>(
 
   return v as ReturnType<typeof allRequired<V>>;
 }
+
+export function isPlainObject(
+  value: unknown,
+): value is Record<string, unknown> {
+  if (value === null || typeof value !== "object") return false;
+  if (Object.prototype.toString.call(value) !== "[object Object]") return false;
+  const proto = Object.getPrototypeOf(value);
+  if (proto === null || proto === Object.prototype) return true;
+  // cross-realm plain objects (vm contexts, iframes) inherit from a
+  // different realm's Object.prototype, which itself has a null prototype
+  try {
+    return Object.getPrototypeOf(proto) === null;
+  } catch {
+    return false;
+  }
+}

package/src/lib/retries.ts

@@ -194,6 +194,14 @@ async function retryBackoff(
 }
 
 function retryIntervalFromResponse(res: Response): number {
+  const retryAfterMsVal = res.headers.get("retry-after-ms");
+  if (retryAfterMsVal) {
+    const parsedMs = Number(retryAfterMsVal);
+    if (Number.isFinite(parsedMs) && parsedMs >= 0) {
+      return parsedMs;
+    }
+  }
+
   const retryVal = res.headers.get("retry-after") || "";
   if (!retryVal) {
     return 0;

package/src/lib/sdks.ts

@@ -23,6 +23,7 @@ import {
   matchContentType,
 } from "./http.js";
 import { Logger } from "./logger.js";
+import { combineSignals } from "./primitives.js";
 import { retry, RetryConfig } from "./retries.js";
 import { SecurityState } from "./security.js";
 
@@ -127,27 +128,55 @@ export class ClientSDK {
     if (path) {
       baseURL.pathname = baseURL.pathname.replace(/\/+$/, "") + "/";
       reqURL = new URL(path, baseURL);
+      if (!reqURL.search && baseURL.search) {
+        reqURL.search = baseURL.search;
+      }
     } else {
       reqURL = baseURL;
     }
     reqURL.hash = "";
 
-    let finalQuery = query || "";
-
-    const secQuery: string[] = [];
-    for (const [k, v] of Object.entries(security?.queryParams || {})) {
-      const q = encodeForm(k, v, { charEncoding: "percent" });
-      if (typeof q !== "undefined") {
-        secQuery.push(q);
+    // Appends already-encoded query pairs to a query string, replacing any
+    // existing pairs with the same key so later sources take precedence.
+    const mergeQuery = (current: string, additions: string): string => {
+      if (!additions) {
+        return current;
       }
-    }
-    if (secQuery.length) {
-      finalQuery += `&${secQuery.join("&")}`;
-    }
+      const additionKeys = new Set(
+        additions
+          .split("&")
+          .filter((pair) => pair !== "")
+          .map((pair) => pair.split("=")[0] ?? ""),
+      );
+      const kept = current.split("&").filter((pair) => {
+        return pair !== "" && !additionKeys.has(pair.split("=")[0] ?? "");
+      });
+      return [...kept, additions].join("&");
+    };
+
+    const encodeQueryRecord = (record: Record<string, unknown>): string => {
+      return Object.entries(record)
+        .map(([k, v]) => {
+          if (v == null) {
+            return undefined;
+          }
+          const value = v;
+          return encodeForm(k, value, {
+            explode: Array.isArray(value),
+            charEncoding: "percent",
+          });
+        })
+        .filter((pair): pair is string => typeof pair !== "undefined")
+        .join("&");
+    };
+
+    const finalQuery = [
+      query || "",
+      encodeQueryRecord(security?.queryParams || {}),
+    ].reduce(mergeQuery, reqURL.search.slice(1));
 
     if (finalQuery) {
-      const q = finalQuery.startsWith("&") ? finalQuery.slice(1) : finalQuery;
-      reqURL.search = `?${q}`;
+      reqURL.search = `?${finalQuery}`;
     }
 
     const headers = new Headers(opHeaders);
@@ -193,9 +222,8 @@ export class ClientSDK {
       ...options?.fetchOptions,
       ...options,
     };
-    if (!fetchOptions?.signal && conf.timeoutMs && conf.timeoutMs > 0) {
-      const timeoutSignal = AbortSignal.timeout(conf.timeoutMs);
-      fetchOptions.signal = timeoutSignal;
+    if (!fetchOptions?.signal && conf.timeoutMs != null && conf.timeoutMs > 0) {
+      context.timeoutMs = conf.timeoutMs;
     }
 
     if (conf.body instanceof ReadableStream) {
@@ -242,10 +270,19 @@ export class ClientSDK {
     >
   > {
     const { context, isErrorStatusCode } = options;
+    const timeoutMs = context.timeoutMs;
 
     return retry(
       async () => {
-        const req = await this.#hooks.beforeRequest(context, request.clone());
+        const cloned = request.clone();
+        let attempt = cloned;
+        if (timeoutMs != null && timeoutMs > 0) {
+          const timeoutSignal = AbortSignal.timeout(timeoutMs);
+          const combined = combineSignals(cloned.signal, timeoutSignal)
+            ?? timeoutSignal;
+          attempt = new Request(cloned, { signal: combined });
+        }
+        const req = await this.#hooks.beforeRequest(context, attempt);
         await logRequest(this.#logger, req).catch((e) =>
           this.#logger?.log("Failed to log request:", e)
         );

package/src/lib/security.ts

@@ -12,17 +12,22 @@ type OAuth2PasswordFlow = {
   tokenURL: string;
 };
 
-export enum SecurityErrorCode {
-  Incomplete = "incomplete",
-  UnrecognisedSecurityType = "unrecognized_security_type",
-}
+export const SecurityErrorCode = {
+  Incomplete: "incomplete",
+  UnrecognisedSecurityType: "unrecognized_security_type",
+} as const;
+export type SecurityErrorCode =
+  (typeof SecurityErrorCode)[keyof typeof SecurityErrorCode];
 
 export class SecurityError extends Error {
+  public code: SecurityErrorCode;
+
   constructor(
-    public code: SecurityErrorCode,
+    code: SecurityErrorCode,
     message: string,
   ) {
     super(message);
+    this.code = code;
     this.name = "SecurityError";
   }
 

package/src/mcp-server/mcp-server.ts

@@ -19,7 +19,7 @@ const routes = buildRouteMap({
 export const app = buildApplication(routes, {
   name: "mcp",
   versionInfo: {
-    currentVersion: "25.12.0",
+    currentVersion: "25.12.3",
   },
 });
 

package/src/mcp-server/server.ts

@@ -166,6 +166,7 @@ import { tool$transfersGetCancellation } from "./tools/transfersGetCancellation.
 import { tool$transfersGetRefund } from "./tools/transfersGetRefund.js";
 import { tool$transfersInitiateRefund } from "./tools/transfersInitiateRefund.js";
 import { tool$transfersList } from "./tools/transfersList.js";
+import { tool$transfersListCancellations } from "./tools/transfersListCancellations.js";
 import { tool$transfersListRefunds } from "./tools/transfersListRefunds.js";
 import { tool$transfersUpdate } from "./tools/transfersUpdate.js";
 import { tool$underwritingGet } from "./tools/underwritingGet.js";
@@ -197,7 +198,7 @@ export function createMCPServer(deps: {
 }) {
   const server = new McpServer({
     name: "Moov",
-    version: "25.12.0",
+    version: "25.12.3",
   });
 
   const client = new MoovCore({
@@ -346,6 +347,7 @@ export function createMCPServer(deps: {
   tool(tool$transfersGet);
   tool(tool$transfersUpdate);
   tool(tool$transfersCreateCancellation);
+  tool(tool$transfersListCancellations);
   tool(tool$transfersGetCancellation);
   tool(tool$transfersInitiateRefund);
   tool(tool$transfersListRefunds);

package/src/mcp-server/tools/accountsCreate.ts

@@ -13,21 +13,19 @@ const args = {
 export const tool$accountsCreate: ToolDefinition<typeof args> = {
   name: "accounts-create",
   description:
-    `You can create **business** or **individual** accounts for your users (i.e., customers, merchants) by passing the required
-information to Moov. Requirements differ per account type and requested [capabilities](https://docs.moov.io/guides/accounts/capabilities/requirements/).
+    `You can create business or individual accounts for your users (i.e., customers, merchants) by passing the required information to Moov. Requirements differ per account type and requested [capabilities](https://docs.moov.io/guides/accounts/capabilities/reference/).
 
-If you're requesting the \`wallet\`, \`send-funds\`, \`collect-funds\`, or \`card-issuing\` capabilities, you'll need to:
-  + Send Moov the user [platform terms of service agreement](https://docs.moov.io/guides/accounts/requirements/platform-agreement/) acceptance.
-    This can be done upon account creation, or by [patching](https://docs.moov.io/api/moov-accounts/accounts/patch/) the account using the \`termsOfService\` field.
-If you're creating a business account with the business type \`llc\`, \`partnership\`, or \`privateCorporation\`, you'll need to:
+The \`transfers\` capability is automatically requested for every account. If you request any capability beyond \`transfers\` (for example, \`send-funds.ach\`, \`collect-funds.card-payments\`), you'll need to:
+  + Send Moov the user's [platform terms of service agreement](https://docs.moov.io/guides/accounts/requirements/platform-agreement/) acceptance. This can be done at account creation, or by [patching](https://docs.moov.io/api/moov-accounts/accounts/patch/) the account using the \`termsOfService\` field.
+  + Fulfill the [verification and underwriting requirements](https://docs.moov.io/guides/accounts/requirements/) for each requested capability. A capability isn't enabled until its requirements pass — check the capability's status to see what's still outstanding.
+
+If you're creating a business account, depending on the business type, you'll also need to:
   + Provide [business representatives](https://docs.moov.io/api/moov-accounts/representatives/) after creating the account.
   + [Patch](https://docs.moov.io/api/moov-accounts/accounts/patch/) the account to indicate that business representative ownership information is complete.
 
-Visit our documentation to read more about [creating accounts](https://docs.moov.io/guides/accounts/create-accounts/) and [verification requirements](https://docs.moov.io/guides/accounts/requirements/identity-verification/).
-Note that the \`mode\` field (for production or sandbox) is only required when creating a _facilitator_ account. All non-facilitator account requests will ignore the mode field and be set to the calling facilitator's mode.
+Visit our documentation to read more about [creating accounts](https://docs.moov.io/guides/accounts/create-accounts/) and [verification requirements](https://docs.moov.io/guides/accounts/requirements/identity-verification/). Note that the \`mode\` field (for production or sandbox) is only required when creating a Partner account. All other account requests will ignore the mode field and be set to the calling Partner account's mode.
 
-To access this endpoint using an [access token](https://docs.moov.io/api/authentication/access-tokens/) you'll need 
-to specify the \`/accounts.write\` scope.`,
+To access this endpoint using an [access token](https://docs.moov.io/api/authentication/access-tokens/) you'll need to specify the \`/accounts.write\` scope.`,
   args,
   tool: async (client, args, ctx) => {
     const [result, apiCall] = await accountsCreate(

package/src/mcp-server/tools/bankAccountsLink.ts

@@ -16,7 +16,7 @@ export const tool$bankAccountsLink: ToolDefinition<typeof args> = {
     `Link a bank account to an existing Moov account. Read our [bank accounts guide](https://docs.moov.io/guides/sources/bank-accounts/) to learn more.
 
 It is strongly recommended that callers include the \`X-Wait-For\` header, set to \`payment-method\`, if the newly linked
-bank-account is intended to be used right away. If this header is not included, the caller will need to poll the [List Payment
+bank account is intended to be used right away. If this header is not included, the caller will need to poll the [List Payment
 Methods](https://docs.moov.io/api/sources/payment-methods/list/)
 endpoint to wait for the new payment methods to be available for use.
 

package/src/mcp-server/tools/capabilitiesDisable.ts

@@ -13,7 +13,7 @@ const args = {
 export const tool$capabilitiesDisable: ToolDefinition<typeof args> = {
   name: "capabilities-disable",
   description:
-    `Disable a specific capability that an account has requested. Read our [capabilities guide](https://docs.moov.io/guides/accounts/capabilities/) to learn more.
+    `Disable a specific capability that an account has requested. Read our [capabilities reference](https://docs.moov.io/guides/accounts/capabilities/reference/) to learn more.
 
   To access this endpoint using an [access token](https://docs.moov.io/api/authentication/access-tokens/) 
 you'll need to specify the \`/accounts/{accountID}/capabilities.write\` scope.`,

package/src/mcp-server/tools/capabilitiesGet.ts

@@ -13,7 +13,7 @@ const args = {
 export const tool$capabilitiesGet: ToolDefinition<typeof args> = {
   name: "capabilities-get",
   description:
-    `Retrieve a specific capability that an account has requested. Read our [capabilities guide](https://docs.moov.io/guides/accounts/capabilities/) to learn more.
+    `Retrieve a specific capability that an account has requested. Read our [capabilities reference](https://docs.moov.io/guides/accounts/capabilities/reference/) to learn more.
 
 To access this endpoint using an [access token](https://docs.moov.io/api/authentication/access-tokens/) 
 you'll need to specify the \`/accounts/{accountID}/capabilities.read\` scope.`,

package/src/mcp-server/tools/capabilitiesList.ts

@@ -14,7 +14,7 @@ export const tool$capabilitiesList: ToolDefinition<typeof args> = {
   name: "capabilities-list",
   description: `Retrieve all the capabilities an account has requested.
 
-Read our [capabilities guide](https://docs.moov.io/guides/accounts/capabilities/) to learn more.
+Read our [capabilities reference](https://docs.moov.io/guides/accounts/capabilities/reference/) to learn more.
 
 To access this endpoint using an [access token](https://docs.moov.io/api/authentication/access-tokens/) 
 you'll need to specify the \`/accounts/{accountID}/capabilities.read\` scope.`,

package/src/mcp-server/tools/capabilitiesRequest.ts

@@ -13,7 +13,7 @@ const args = {
 export const tool$capabilitiesRequest: ToolDefinition<typeof args> = {
   name: "capabilities-request",
   description:
-    `Request capabilities for a specific account. Read our [capabilities guide](https://docs.moov.io/guides/accounts/capabilities/) to learn more.
+    `Request capabilities for a specific account. Read our [capabilities reference](https://docs.moov.io/guides/accounts/capabilities/reference/) to learn more.
 
 To access this endpoint using an [access token](https://docs.moov.io/api/authentication/access-tokens/) 
 you'll need to specify the \`/accounts/{accountID}/capabilities.write\` scope.`,

package/src/mcp-server/tools/transfersListCancellations.ts

@@ -0,0 +1,38 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import { transfersListCancellations } from "../../funcs/transfersListCancellations.js";
+import * as operations from "../../models/operations/index.js";
+import { formatResult, ToolDefinition } from "../tools.js";
+
+const args = {
+  request: operations.ListCancellationsRequest$inboundSchema,
+};
+
+export const tool$transfersListCancellations: ToolDefinition<typeof args> = {
+  name: "transfers-list-cancellations",
+  description: `  Get a list of cancellations for a transfer.
+  
+  To access this endpoint using a [token](https://docs.moov.io/api/authentication/access-tokens/) you'll need 
+  to specify the \`/accounts/{accountID}/transfers.read\` scope.`,
+  args,
+  tool: async (client, args, ctx) => {
+    const [result, apiCall] = await transfersListCancellations(
+      client,
+      args.request,
+      { fetchOptions: { signal: ctx.signal } },
+    ).$inspect();
+
+    if (!result.ok) {
+      return {
+        content: [{ type: "text", text: result.error.message }],
+        isError: true,
+      };
+    }
+
+    const value = result.value.result;
+
+    return formatResult(value, apiCall);
+  },
+};

package/src/models/components/addcapabilities.ts

@@ -13,6 +13,15 @@ import {
 } from "./capabilityid.js";
 
 export type AddCapabilities = {
+  /**
+   * Capabilities to request for the account. Request granular capability IDs that match your use case.
+   *
+   * @remarks
+   *
+   * Read our [capabilities reference](https://docs.moov.io/guides/accounts/capabilities/reference/) to choose the right capabilities for your integration.
+   *
+   * The `send-funds`, `collect-funds`, and `wallet` capability IDs are deprecated. Use granular values such as `send-funds.ach`, `collect-funds.card-payments`, or `wallet.balance` instead.
+   */
   capabilities: Array<CapabilityID>;
 };
 

package/src/models/components/capability.ts

@@ -29,7 +29,13 @@ export type Capability = {
    *
    * @remarks
    *
-   * The `production-app`, `platform.production-app`, and / or `platform.wallet-transfers` capabilities might appear in your list. These are read-only capabilities that Moov requests and uses for account verification purposes. These capabilities remains active with your account and require no additional action.
+   * **Deprecated capabilities**
+   *
+   * The `send-funds`, `collect-funds`, and `wallet` capability IDs are deprecated. Request granular capabilities instead (for example, `send-funds.ach`, `collect-funds.card-payments`, or `wallet.balance`). Deprecated values will be removed in a future API version.
+   *
+   * Read our [capabilities reference](https://docs.moov.io/guides/accounts/capabilities/reference/) to choose the right capabilities for your integration.
+   *
+   * The `production-app`, `platform.production-app`, and / or `platform.wallet-transfers` capabilities might appear in the list for your Partner account. These are read-only capabilities that Moov requests. These capabilities remain active with your account and require no additional action.
    */
   capability: CapabilityID;
   accountID: string;

package/src/models/components/capabilityid.ts

@@ -10,7 +10,13 @@ import { ClosedEnum } from "../../types/enums.js";
  *
  * @remarks
  *
- * The `production-app`, `platform.production-app`, and / or `platform.wallet-transfers` capabilities might appear in your list. These are read-only capabilities that Moov requests and uses for account verification purposes. These capabilities remains active with your account and require no additional action.
+ * **Deprecated capabilities**
+ *
+ * The `send-funds`, `collect-funds`, and `wallet` capability IDs are deprecated. Request granular capabilities instead (for example, `send-funds.ach`, `collect-funds.card-payments`, or `wallet.balance`). Deprecated values will be removed in a future API version.
+ *
+ * Read our [capabilities reference](https://docs.moov.io/guides/accounts/capabilities/reference/) to choose the right capabilities for your integration.
+ *
+ * The `production-app`, `platform.production-app`, and / or `platform.wallet-transfers` capabilities might appear in the list for your Partner account. These are read-only capabilities that Moov requests. These capabilities remain active with your account and require no additional action.
  */
 export const CapabilityID = {
   Transfers: "transfers",
@@ -27,6 +33,7 @@ export const CapabilityID = {
   Wallet: "wallet",
   WalletBalance: "wallet.balance",
   CardIssuing: "card-issuing",
+  IssuingCardholder: "issuing.cardholder",
   ProductionApp: "production-app",
   PlatformProductionApp: "platform.production-app",
   PlatformWalletTransfers: "platform.wallet-transfers",
@@ -36,7 +43,13 @@ export const CapabilityID = {
  *
  * @remarks
  *
- * The `production-app`, `platform.production-app`, and / or `platform.wallet-transfers` capabilities might appear in your list. These are read-only capabilities that Moov requests and uses for account verification purposes. These capabilities remains active with your account and require no additional action.
+ * **Deprecated capabilities**
+ *
+ * The `send-funds`, `collect-funds`, and `wallet` capability IDs are deprecated. Request granular capabilities instead (for example, `send-funds.ach`, `collect-funds.card-payments`, or `wallet.balance`). Deprecated values will be removed in a future API version.
+ *
+ * Read our [capabilities reference](https://docs.moov.io/guides/accounts/capabilities/reference/) to choose the right capabilities for your integration.
+ *
+ * The `production-app`, `platform.production-app`, and / or `platform.wallet-transfers` capabilities might appear in the list for your Partner account. These are read-only capabilities that Moov requests. These capabilities remain active with your account and require no additional action.
  */
 export type CapabilityID = ClosedEnum<typeof CapabilityID>;
 

package/src/models/components/cardbrandfees.ts

@@ -56,6 +56,10 @@ export type CardBrandFees = {
    * Details of refunded transactions.
    */
   refunds?: BillingCountAndAmount | undefined;
+  /**
+   * Details of card cancellations.
+   */
+  cardCancellations?: BillingCountAndAmount | undefined;
   /**
    * Total fees for this card brand.
    */
@@ -79,6 +83,7 @@ export const CardBrandFees$inboundSchema: z.ZodType<
     .optional(),
   declines: BillingCountAndAmount$inboundSchema.optional(),
   refunds: BillingCountAndAmount$inboundSchema.optional(),
+  cardCancellations: BillingCountAndAmount$inboundSchema.optional(),
   total: BillingCountAndAmount$inboundSchema,
 });
 /** @internal */
@@ -94,6 +99,7 @@ export type CardBrandFees$Outbound = {
   completedInternationalInPerson?: BillingCountAndAmount$Outbound | undefined;
   declines?: BillingCountAndAmount$Outbound | undefined;
   refunds?: BillingCountAndAmount$Outbound | undefined;
+  cardCancellations?: BillingCountAndAmount$Outbound | undefined;
   total: BillingCountAndAmount$Outbound;
 };
 
@@ -114,6 +120,7 @@ export const CardBrandFees$outboundSchema: z.ZodType<
     .optional(),
   declines: BillingCountAndAmount$outboundSchema.optional(),
   refunds: BillingCountAndAmount$outboundSchema.optional(),
+  cardCancellations: BillingCountAndAmount$outboundSchema.optional(),
   total: BillingCountAndAmount$outboundSchema,
 });
 

package/src/models/components/createaccount.ts

@@ -65,6 +65,15 @@ export type CreateAccount = {
    * User provided settings to manage an account.
    */
   settings?: Settings | undefined;
+  /**
+   * Capabilities to request when the account is created. Request granular capability IDs that match your use case.
+   *
+   * @remarks
+   *
+   * Read our [capabilities reference](https://docs.moov.io/guides/accounts/capabilities/reference/) to choose the right capabilities for your integration.
+   *
+   * The `send-funds`, `collect-funds`, and `wallet` capability IDs are deprecated. Use granular values such as `send-funds.ach`, `collect-funds.card-payments`, or `wallet.balance` instead.
+   */
   capabilities?: Array<CapabilityID> | undefined;
   /**
    * The operating mode for an account.

package/src/models/components/createpaymentlink.ts

@@ -48,7 +48,7 @@ import {
  *
  * @remarks
  *
- * A payment link must include either `payment` or `payout` details, but not both. For payout payment links,
+ * A payment link must include exactly one of `payment`, `payout`, or `customAmountPayment` details. For payout payment links,
  * `maxUses` will automatically be set to 1, as these are intended for a one-time disbursement
  * to a specific recipient.
  */
@@ -68,8 +68,8 @@ export type CreatePaymentLink = {
    *
    * In API versions before `2026.07.00`, this was a required field.
    *
-   * In API version `2026.07.00` and beyond, this field is required for `fixed` payment amount types and omitted
-   * for `open` payment amount types.
+   * In API version `2026.07.00` and beyond, this field is required for `payment` and `payout` links and must be
+   * omitted for `customAmountPayment` links, where the payor chooses the amount.
    */
   amount: Amount;
   /**

package/src/models/components/fullissuedcard.ts

@@ -7,11 +7,11 @@ import { safeParse } from "../../lib/schemas.js";
 import { Result as SafeParseResult } from "../../types/fp.js";
 import { SDKValidationError } from "../errors/sdkvalidationerror.js";
 import {
-  AuthorizedUser,
-  AuthorizedUser$inboundSchema,
-  AuthorizedUser$Outbound,
-  AuthorizedUser$outboundSchema,
-} from "./authorizeduser.js";
+  Address,
+  Address$inboundSchema,
+  Address$Outbound,
+  Address$outboundSchema,
+} from "./address.js";
 import {
   CardBrand,
   CardBrand$inboundSchema,
@@ -55,26 +55,32 @@ export type FullIssuedCard = {
    */
   expiration: CardExpiration;
   /**
-   * Fields for identifying an authorized individual.
+   * Unique identifier for the wallet funding the card.
    */
-  authorizedUser: AuthorizedUser;
+  fundingWalletID: string;
   /**
-   * Optional descriptor for the card.
+   * Identifier for the account of the card's authorized user.
    */
-  memo?: string | undefined;
+  authorizedUserAccountID?: string | undefined;
   /**
-   * Unique identifier for the wallet funding the card.
+   * An optional descriptive name for the card.
    */
-  fundingWalletID: string;
+  nickname?: string | undefined;
+  /**
+   * Free-form key-value pair list. Useful for storing information that is not captured elsewhere.
+   */
+  metadata?: { [k: string]: string } | undefined;
+  /**
+   * Billing address associated with the card.
+   */
+  billingAddress?: Address | undefined;
   /**
    * The `state` represents the operational status of an issued card. A card can only approve incoming authorizations if it is in an active state.
    *
    * @remarks
    *
-   * - `active`: The card is operational and approves authorizations. Generally becomes active shortly after card creation.
-   * - `inactive`: The card cannot approve authorizations. This is currently a temporary state assigned post-creation during the activation process.
+   * - `active`: The card is operational and can approve authorizations.
    * - `closed`: The card is permanently deactivated and cannot approve authorizations. A card can be closed by request or when it expires.
-   * - `pending-verification`: Awaiting additional authorized user verification before the card can be activated.
    */
   state: IssuedCardState;
   /**
@@ -83,6 +89,7 @@ export type FullIssuedCard = {
   formFactor: IssuedCardFormFactor;
   controls?: IssuingControls | undefined;
   createdOn: Date;
+  updatedOn: Date;
   /**
    * The issued card's Primary Account Number (PAN)
    */
@@ -103,13 +110,16 @@ export const FullIssuedCard$inboundSchema: z.ZodType<
   brand: CardBrand$inboundSchema,
   lastFourCardNumber: z.string(),
   expiration: CardExpiration$inboundSchema,
-  authorizedUser: AuthorizedUser$inboundSchema,
-  memo: z.string().optional(),
   fundingWalletID: z.string(),
+  authorizedUserAccountID: z.string().optional(),
+  nickname: z.string().optional(),
+  metadata: z.record(z.string()).optional(),
+  billingAddress: Address$inboundSchema.optional(),
   state: IssuedCardState$inboundSchema,
   formFactor: IssuedCardFormFactor$inboundSchema,
   controls: IssuingControls$inboundSchema.optional(),
   createdOn: z.string().datetime({ offset: true }).transform(v => new Date(v)),
+  updatedOn: z.string().datetime({ offset: true }).transform(v => new Date(v)),
   pan: z.string(),
   cvv: z.string(),
 });
@@ -119,13 +129,16 @@ export type FullIssuedCard$Outbound = {
   brand: string;
   lastFourCardNumber: string;
   expiration: CardExpiration$Outbound;
-  authorizedUser: AuthorizedUser$Outbound;
-  memo?: string | undefined;
   fundingWalletID: string;
+  authorizedUserAccountID?: string | undefined;
+  nickname?: string | undefined;
+  metadata?: { [k: string]: string } | undefined;
+  billingAddress?: Address$Outbound | undefined;
   state: string;
   formFactor: string;
   controls?: IssuingControls$Outbound | undefined;
   createdOn: string;
+  updatedOn: string;
   pan: string;
   cvv: string;
 };
@@ -140,13 +153,16 @@ export const FullIssuedCard$outboundSchema: z.ZodType<
   brand: CardBrand$outboundSchema,
   lastFourCardNumber: z.string(),
   expiration: CardExpiration$outboundSchema,
-  authorizedUser: AuthorizedUser$outboundSchema,
-  memo: z.string().optional(),
   fundingWalletID: z.string(),
+  authorizedUserAccountID: z.string().optional(),
+  nickname: z.string().optional(),
+  metadata: z.record(z.string()).optional(),
+  billingAddress: Address$outboundSchema.optional(),
   state: IssuedCardState$outboundSchema,
   formFactor: IssuedCardFormFactor$outboundSchema,
   controls: IssuingControls$outboundSchema.optional(),
   createdOn: z.date().transform(v => v.toISOString()),
+  updatedOn: z.date().transform(v => v.toISOString()),
   pan: z.string(),
   cvv: z.string(),
 });