@vault/sdk · Changelog

3.2.0May 19, 2026Minor

Strongly-typed webhook events + async iterators on listings

Two changes that have been the top community asks for a year. Webhook events now ship with a discriminated-union WebhookEvent type so switch-case is exhaustive. All list endpoints return AsyncIterable so you can for await the cursor.

Added

Strongly-typed WebhookEvent union with 28 event kinds
Async iterator on list() methods — auto-paginates
New idempotencyKey helper · auto-generates a UUID

Fixed

Retry logic now respects Retry-After header
TS 5.4 narrowing on Customer.deleted works as expected

↗ commit e8b3f9a · 14 contributors · npm dl 620k

3.1.4May 02, 2026Patch

Edge runtime support

SDK now bundles a separate entry for edge runtimes (Vercel Edge, Cloudflare Workers, Deno Deploy). Slightly smaller (10kB → 7kB gzip) and avoids the Node crypto import.

Fixed

Edge bundle no longer pulls node:crypto
Fetch polyfill removed — assumes global fetch (Node 18+)

3.1.3Apr 18, 2026Patch

Misc fixes

charges.refund() now validates amount <= original
Improved error messages on 401 with hints about API key format
Removed accidental console.log from retry path

3.0.0Feb 04, 2026MajorBreaking

Rewrite in TypeScript · half the size · 4 breaking changes

3.0 is a ground-up rewrite. Same API surface, 14kB gzip (down from 28kB), and the types are much stricter. Four breaking changes — migration guide linked below.

Breaking

BREAK · new Vault(opts) opts now requires explicit apiVersion
BREAK · customer.delete() renamed to customer.remove()
BREAK · Removed deprecated client.charges.refund(id) shorthand
BREAK · Node 16 no longer supported · min Node 18

Added

Top-level await compatible in ESM mode
Source maps inlined in dev build

↗ migration guide · github.com/vault/vault-js/MIGRATION-v3.md