[devinpearson]

Summary

Brings the emulated API closer to Investec's real one.

Transfer and payment responses (confirmed)

transfermultiple and paymultiple now return Investec's shape instead of echoing the request:

{ "data": { "TransferResponses": [{ "PaymentReferenceNumber": "UBP2201761367", "PaymentDate": "09/11/2026",
  "Status": "- No authorisation necessary <BR> - Payment/Transfer effective date 09/11/2026",
  "BeneficiaryName": "…", "BeneficiaryAccountId": "…", "AuthorisationRequired": false }], "ErrorMessage": null } }

One entry per transfer or payment. The field names were checked against Investec's developer page and the investec-pb-api SDK's types. The dashboard now shows the payment reference after a transfer or payment.

Profiles (best match, not confirmed)

• GET /za/pb/v1/profiles and GET /za/pb/v1/profiles/:profileId/accounts.
• The paths match Investec's API collection, but Investec doesn't publish the responses, so the fields are the sandbox's best match. The OpenAPI docs say so.
• Consent and scopes: they need the accounts scope, and 3-legged tokens see only consented accounts.
• Left out: "authorisation setup details", rather than inventing its shape.

Statements

GET …/documents accepts fromDate / toDate (validated). It lists monthly statements at each month end in the range, newest first, for completed months only, at most 24.

Environment variables

Real createdAt / updatedAt (new Card columns), replacing the fixed 2023 timestamp.

Not changed

The toggle-programmable-feature response shape stays as it is, because I couldn't confirm Investec's.

Behaviour change

Clients that read the transfer or payment response body (which used to echo the request) need the new TransferResponses shape. Dev databases need npx prisma migrate deploy.

Test plan

• API: 213 Jest tests. New test/fidelity.spec.ts: multi-leg transfer responses with unique references, profiles (including consent and scope with auth on), statement filters and validation, env var timestamps. The existing transfer and payment tests are updated to the new shape.
• Web: 43 unit tests (referenceSuffix), 17 Playwright tests (the payment message shows ref UBP…), lint, typecheck, build
• openapi:check (66 routes), knip

🤖 Generated with Claude Code