@ikatec/digisac-api-sdk 4.11.0 → 4.13.0

package/dist/apis/whatsappBusinessTemplates/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/apis/whatsappBusinessTemplates/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,mCAAmC,GAAG,WAAW,GAAG,aAAa,CAAA;AAE7E,MAAM,MAAM,gCAAgC,GAAG,OAAO,GAAG,IAAI,GAAG,IAAI,CAAA;AAEpE,MAAM,MAAM,gCAAgC,GAAG,gBAAgB,GAAG,WAAW,GAAG,SAAS,CAAA;AAEzF,MAAM,MAAM,qCAAqC,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAA;AAE5F,MAAM,MAAM,oCAAoC,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,CAAA;AAE1F,MAAM,MAAM,8BAA8B,GAAG;IAC3C,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,iCAAiC,GAAG;IAC9C,IAAI,EAAE,qCAAqC,CAAA;IAC3C,MAAM,CAAC,EAAE,oCAAoC,CAAA;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,OAAO,CAAC,EAAE,8BAA8B,EAAE,CAAA;IAC1C,uBAAuB,CAAC,EAAE,MAAM,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG;IACrC,EAAE,EAAE,MAAM,CAAA;IACV,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,iCAAiC,EAAE,CAAA;IAC/C,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CACzB,CAAA;AAED,MAAM,MAAM,qCAAqC,GAAG;IAClD,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,iCAAiC,EAAE,CAAA;IAC/C,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,mCAAmC,CAAA;IAChD,QAAQ,EAAE,gCAAgC,CAAA;IAC1C,QAAQ,EAAE,gCAAgC,CAAA;CAC3C,CAAA;AAED,MAAM,MAAM,qCAAqC,GAAG;IAClD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,iCAAiC,EAAE,CAAA;IAChD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,mCAAmC,CAAA;IACjD,QAAQ,CAAC,EAAE,gCAAgC,CAAA;IAC3C,QAAQ,CAAC,EAAE,gCAAgC,CAAA;CAC5C,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/apis/whatsappBusinessTemplates/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,mCAAmC,GAAG,WAAW,GAAG,aAAa,CAAA;AAE7E,MAAM,MAAM,gCAAgC,GAAG,OAAO,GAAG,IAAI,GAAG,IAAI,CAAA;AAEpE,MAAM,MAAM,gCAAgC,GAAG,gBAAgB,GAAG,WAAW,GAAG,SAAS,CAAA;AAEzF,MAAM,MAAM,qCAAqC,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAA;AAE5F,MAAM,MAAM,oCAAoC,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,UAAU,CAAA;AAE1F,MAAM,MAAM,8BAA8B,GAAG;IAC3C,IAAI,EAAE,MAAM,CAAA;IACZ,oEAAoE;IACpE,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB,CAAA;AAED,MAAM,MAAM,iCAAiC,GAAG;IAC9C,IAAI,EAAE,qCAAqC,CAAA;IAC3C,MAAM,CAAC,EAAE,oCAAoC,CAAA;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,OAAO,CAAC,EAAE,8BAA8B,EAAE,CAAA;IAC1C,uBAAuB,CAAC,EAAE,MAAM,CAAA;CACjC,CAAA;AAED,MAAM,MAAM,wBAAwB,GAAG;IACrC,EAAE,EAAE,MAAM,CAAA;IACV,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,iCAAiC,EAAE,CAAA;IAC/C,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,qGAAqG;IACrG,WAAW,CAAC,EAAE,mCAAmC,GAAG,IAAI,CAAA;IAExD,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAClC,CAAA;AAED,2DAA2D;AAC3D,MAAM,MAAM,mCAAmC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAEzE,2EAA2E;AAC3E,MAAM,MAAM,wCAAwC,GAAG;IACrD,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;CACjB,CAAA;AAED,MAAM,MAAM,gCAAgC,GAAG;IAC7C,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAA;CAC3B,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,qCAAqC,GAAG;IAClD,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,wCAAwC,CAAA;IACtD,UAAU,EAAE,iCAAiC,EAAE,CAAA;IAC/C,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,mCAAmC,CAAA;IAChD,QAAQ,EAAE,gCAAgC,CAAA;IAC1C,QAAQ,EAAE,gCAAgC,CAAA;CAC3C,CAAA;AAED;;;GAGG;AACH,MAAM,MAAM,qCAAqC,GAAG;IAClD,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,wCAAwC,CAAA;IACtD,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,iCAAiC,EAAE,CAAA;IAChD,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,mCAAmC,CAAA;IACjD,QAAQ,CAAC,EAAE,gCAAgC,CAAA;IAC3C,QAAQ,CAAC,EAAE,gCAAgC,CAAA;CAC5C,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ikatec/digisac-api-sdk",
-  "version": "4.11.0",
+  "version": "4.13.0",
   "type": "module",
   "main": "./dist/index.cjs",
   "module": "./dist/index.mjs",

package/src/apis/absence/AbsenceApi.test.ts

@@ -0,0 +1,65 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { AbsenceApi } from './AbsenceApi'
+import type { ApiClient } from '../../core/ApiClient'
+
+// ── Mock client factory ──────────────────────────────────────────────
+
+function createMockClient(): ApiClient {
+  return {
+    setAccessToken: vi.fn().mockReturnThis(),
+    request: vi.fn(),
+    requestRaw: vi.fn(),
+    get: vi.fn(),
+    post: vi.fn(),
+    put: vi.fn(),
+    patch: vi.fn(),
+    delete: vi.fn(),
+  }
+}
+
+// ── Tests ────────────────────────────────────────────────────────────
+
+describe('AbsenceApi', () => {
+  let client: ReturnType<typeof createMockClient>
+  let api: AbsenceApi
+
+  beforeEach(() => {
+    client = createMockClient()
+    api = new AbsenceApi(client)
+  })
+
+  it('report serializes the query of the report', async () => {
+    vi.mocked(client.get).mockResolvedValue({ data: [] })
+    await api.report({
+      filters: { reason: 'Almoço' },
+      sort: 'createdAt',
+      order: 'ASC',
+      perPage: 50,
+    })
+    const url = vi.mocked(client.get).mock.calls[0]?.[0] as string
+    expect(url).toMatch(/^\/absence\?/)
+    expect(decodeURIComponent(url)).toContain('"filters":{"reason":"Almoço"}')
+  })
+
+  it('findOpenAbsence calls client.get with /absence/find-open-absence', async () => {
+    vi.mocked(client.get).mockResolvedValue(null)
+    await expect(api.findOpenAbsence()).resolves.toBeNull()
+    expect(client.get).toHaveBeenCalledWith('/absence/find-open-absence', undefined)
+  })
+
+  it('unlock posts the body to /absence/unlock', async () => {
+    vi.mocked(client.post).mockResolvedValue({ success: false, message: 'INVALID_REASON' })
+    await expect(api.unlock({ reason: 'Voltei' })).resolves.toEqual({
+      success: false,
+      message: 'INVALID_REASON',
+    })
+    expect(client.post).toHaveBeenCalledWith('/absence/unlock', { reason: 'Voltei' }, undefined)
+  })
+
+  it('exportCsv calls client.get with /absence/export-csv and the query', async () => {
+    vi.mocked(client.get).mockResolvedValue('Usuário,De,Até,Motivo')
+    await api.exportCsv({ timezone: 'America/Sao_Paulo' })
+    const url = vi.mocked(client.get).mock.calls[0]?.[0] as string
+    expect(url).toMatch(/^\/absence\/export-csv\?/)
+  })
+})

package/src/apis/absence/AbsenceApi.ts

@@ -1,17 +1,90 @@
 import type { ApiClient } from '../../core/ApiClient'
 import { BaseCrudApi } from '../../core/BaseCrudApi'
-import type { GetByIdQuery } from '../../core/types'
-import type { Absence, CreateAbsencePayload, UpdateAbsencePayload } from './types'
+import type { GetByIdQuery, Paginated } from '../../core/types'
+import type {
+  Absence,
+  AbsenceReportItem,
+  AbsenceReportQuery,
+  CreateAbsencePayload,
+  UnlockAbsencePayload,
+  UnlockAbsenceResponse,
+  UpdateAbsencePayload,
+} from './types'
 
 /**
- * Absences of the users. The backend serves the report (`GET /absence`), `POST /absence` and
- * `PUT /absence/:id`; there is no read by id nor delete.
+ * Absences of the users. The backend serves the report (`GET /absence`, `GET /absence/export-csv`),
+ * `GET /absence/find-open-absence`, `POST /absence`, `POST /absence/unlock` and `PUT /absence/:id`; there is
+ * no read by id nor delete. Creating an absence sets the status of the user to `away` and `unlock` sets it
+ * back to `online` (both emit `user.updated` to the webhooks).
  */
 export class AbsenceApi extends BaseCrudApi<Absence, CreateAbsencePayload, UpdateAbsencePayload> {
   constructor(client: ApiClient) {
     super(client, '/absence')
   }
 
+  /**
+   * The absence report of the account (`GET /absence`), always paginated, with its own query (the rows are
+   * raw: see `AbsenceReportItem`). Prefer it to `getMany`, whose `where`/`include`/`paginate` the backend
+   * ignores. Requires both permissions, always: without them it answers 403
+   * `MISSING_ABSENCE_REPORT_PERMISSION`.
+   * @permissions overview.absence.view AND myAccount.absence
+   */
+  report(
+    query?: AbsenceReportQuery,
+    headers?: Record<string, string>,
+  ): Promise<Paginated<AbsenceReportItem>> {
+    return this.client.get<Paginated<AbsenceReportItem>>(
+      `${this.basePath}${this.toQueryString(query)}`,
+      headers,
+    )
+  }
+
+  /**
+   * Creates an absence for the current user (whatever `userId` says) and sets the user `away`. Resolves the
+   * stored absence (raw, without `user`).
+   * @permissions myAccount.absence
+   */
+  override create(body: CreateAbsencePayload, headers?: Record<string, string>): Promise<Absence> {
+    return super.create(body, headers)
+  }
+
+  /**
+   * The open absence of the current user, or `null` — also `null` while `settings.absence.enabled` is off.
+   * @permissions myAccount.absence
+   */
+  findOpenAbsence(headers?: Record<string, string>): Promise<AbsenceReportItem | null> {
+    return this.client.get<AbsenceReportItem | null>(`${this.basePath}/find-open-absence`, headers)
+  }
+
+  /**
+   * Ends an absence (the open one of the user when `id` is absent) and sets the user `online`. The refusals
+   * of `settings.absence` come with status 200 (`INVALID_REASON`, `INVALID_PASSWORD`); without an open
+   * absence it answers 500.
+   * @permissions myAccount.absence
+   */
+  unlock(
+    body: UnlockAbsencePayload,
+    headers?: Record<string, string>,
+  ): Promise<UnlockAbsenceResponse> {
+    return this.client.post<UnlockAbsenceResponse, UnlockAbsencePayload>(
+      `${this.basePath}/unlock`,
+      body,
+      headers,
+    )
+  }
+
+  /**
+   * Exports the report as CSV (`Usuário, De, Até, Motivo`; an open absence shows `Em andamento`), sent as
+   * the attachment `<yyyy-MM-dd>_absence-control.csv`.
+   * @permissions overview.absence.view AND myAccount.absence
+   */
+  exportCsv(query?: AbsenceReportQuery, headers?: Record<string, string>): Promise<string> {
+    return this.client.get<string>(
+      `${this.basePath}/export-csv${this.toQueryString(query)}`,
+      headers,
+    )
+  }
+
   /** @deprecated Not served: the backend has no GET /absence/:id, so this route answers 404. */
   override getById(
     id: string,

package/src/apis/absence/types.ts

@@ -1,5 +1,6 @@
 import type { User } from '../users'
 
+/** An absence as `PUT /absence/:id` answers it (the transformer of the backend). */
 export type Absence = {
   id: string
   accountId: string
@@ -8,7 +9,8 @@ export type Absence = {
   endedAt: string | null
   createdAt: string
   updatedAt: string
-  deletedAt: string | null
+  /** @deprecated Not a field of the backend: the model has no soft delete. */
+  deletedAt?: string | null
   // relationships
   user?: User
 }
@@ -16,7 +18,9 @@ export type Absence = {
 export type AbsenceRelationships = 'user'
 
 export type CreateAbsencePayload = {
-  userId: string
+  /** Ignored: the backend creates the absence for the current user. */
+  userId?: string
+  /** Up to 255 characters. */
   reason?: string
 }
 
@@ -24,3 +28,50 @@ export type UpdateAbsencePayload = {
   reason?: string
   endedAt?: string | null
 }
+
+/** Columns the report can be sorted by (an unknown one falls back to the default order). */
+export type AbsenceReportSortField = 'user' | 'createdAt' | 'endedAt'
+
+/**
+ * Query of the absence report (`GET /absence` and `GET /absence/export-csv`). The backend ignores
+ * `where` and `include`: it reads only these fields.
+ */
+export type AbsenceReportQuery = {
+  filters?: {
+    userId?: string
+    reason?: string
+    /** Absences created at or after this date. An invalid date answers 400 `Invalid date.`. */
+    createdAt?: string
+    /** Absences ended at or before this date. */
+    endedAt?: string
+  }
+  sort?: AbsenceReportSortField
+  /** Only `'ASC'` sorts ascending: any other value sorts descending. */
+  order?: 'ASC' | 'DESC'
+  page?: number
+  /** Up to 200 (a larger value is clamped, not refused). Defaults to 15. */
+  perPage?: number
+  /** IANA zone of the dates of the CSV export (e.g. `America/Sao_Paulo`). */
+  timezone?: string
+}
+
+/**
+ * A row of the report: the stored absence with its user, both raw (not transformed).
+ */
+export type AbsenceReportItem = Omit<Absence, 'deletedAt' | 'user'> & {
+  user?: Record<string, unknown>
+}
+
+/** The body of `unlock`: the absence to end (the open one of the user when `id` is absent). */
+export type UnlockAbsencePayload = {
+  id?: string
+  /** Required when `settings.absence.reason_required` is on. */
+  reason?: string
+  /** Required when `settings.absence.password_required` is on: the password of the user. */
+  password?: string
+}
+
+/** What `unlock` answers: the business refusals come with status 200. */
+export type UnlockAbsenceResponse =
+  | { success: true }
+  | { success: false; message: 'INVALID_REASON' | 'INVALID_PASSWORD' }

package/src/apis/activityLog/ActivityLogApi.test.ts

@@ -0,0 +1,44 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { ActivityLogApi } from './ActivityLogApi'
+import type { ApiClient } from '../../core/ApiClient'
+
+// ── Mock client factory ──────────────────────────────────────────────
+
+function createMockClient(): ApiClient {
+  return {
+    setAccessToken: vi.fn().mockReturnThis(),
+    request: vi.fn(),
+    requestRaw: vi.fn(),
+    get: vi.fn(),
+    post: vi.fn(),
+    put: vi.fn(),
+    patch: vi.fn(),
+    delete: vi.fn(),
+  }
+}
+
+// ── Tests ────────────────────────────────────────────────────────────
+
+describe('ActivityLogApi', () => {
+  let client: ReturnType<typeof createMockClient>
+  let api: ActivityLogApi
+
+  beforeEach(() => {
+    client = createMockClient()
+    api = new ActivityLogApi(client)
+  })
+
+  it('exportCsv calls client.get with /log/export-csv and the period', async () => {
+    vi.mocked(client.get).mockResolvedValue('csv')
+    await api.exportCsv({ filters: { from: '2026-10-01', to: '2026-10-17' } })
+    const url = vi.mocked(client.get).mock.calls[0]?.[0] as string
+    expect(url).toMatch(/^\/log\/export-csv\?/)
+    expect(decodeURIComponent(url)).toContain('"from":"2026-10-01"')
+  })
+
+  it('create posts the stored fields of the log', async () => {
+    const body = { resourceType: 'contact', resourceId: 'c-1', event: 'update', data: { a: 1 } }
+    await api.create(body)
+    expect(client.post).toHaveBeenCalledWith('/log', body, undefined)
+  })
+})

package/src/apis/activityLog/ActivityLogApi.ts

@@ -1,20 +1,39 @@
 import type { ApiClient } from '../../core/ApiClient'
 import { BaseCrudApi } from '../../core/BaseCrudApi'
-import type { ActivityLog, CreateActivityLogPayload, UpdateActivityLogPayload } from './types'
+import type {
+  ActivityLog,
+  ActivityLogListQuery,
+  CreateActivityLogPayload,
+  UpdateActivityLogPayload,
+} from './types'
 
 /**
  * Activity log of the account (stored in MongoDB: the routes answer 503 when it is unavailable).
- * The backend serves `GET /log`, `GET /log/:id` and `POST /log`; there is no update or delete.
+ * The backend serves `GET /log`, `GET /log/export-csv`, `GET /log/:id` and `POST /log`; there is no update
+ * or delete, so an entry created is permanent. `GET /log/:id` takes a MongoDB
+ * id (an UUID answers 500).
  */
 export class ActivityLogApi extends BaseCrudApi<
   ActivityLog,
   CreateActivityLogPayload,
-  UpdateActivityLogPayload
+  UpdateActivityLogPayload,
+  ActivityLogListQuery
 > {
   constructor(client: ApiClient) {
     super(client, '/log')
   }
 
+  /**
+   * Exports the entries of the period (`filters.from`/`filters.to`) as CSV, sent as the attachment
+   * `exportation.csv`.
+   */
+  exportCsv(query: ActivityLogListQuery, headers?: Record<string, string>): Promise<string> {
+    return this.client.get<string>(
+      `${this.basePath}/export-csv${this.toQueryString(query)}`,
+      headers,
+    )
+  }
+
   /** @deprecated Not served: the backend has no PUT /log/:id, so this route answers 404. */
   override updateById(
     id: string,

package/src/apis/activityLog/types.ts

@@ -1,22 +1,61 @@
+import type { ListQuery } from '../../core/types'
+
+/**
+ * An entry of the activity log (MongoDB). The stored fields are `resourceType`, `resourceId`, `event`,
+ * `userId`, `accessTokenId` and `data`. `create` and `getById` answer through a transformer that keeps only
+ * `id`, `accountId`, `createdAt` and `updatedAt`; the list answers every stored field plus `user`.
+ */
 export type ActivityLog = {
   id: string
   accountId: string
-  userId: string | null
-  action: string
-  entity: string
-  entityId: string | null
-  data: Record<string, unknown>
+  resourceType?: string
+  resourceId?: string | null
+  event?: string
+  userId?: string | null
+  accessTokenId?: string | null
+  data?: Record<string, unknown>
   createdAt: string
   updatedAt: string
+  /** On the list: the user of the entry. */
+  user?: { id: string; name: string }
+  /** @deprecated Not a field of the backend (it is dropped on create): use `event`. */
+  action?: string
+  /** @deprecated Not a field of the backend (it is dropped on create): use `resourceType`. */
+  entity?: string
+  /** @deprecated Not a field of the backend (it is dropped on create): use `resourceId`. */
+  entityId?: string | null
 }
 
 export type CreateActivityLogPayload = {
-  action: string
-  entity: string
-  entityId?: string
+  resourceType?: string
+  resourceId?: string
+  event?: string
+  userId?: string
+  accessTokenId?: string
   data?: Record<string, unknown>
+  /** @deprecated Dropped by the backend (not a field of the log): use `event`. */
+  action?: string
+  /** @deprecated Dropped by the backend (not a field of the log): use `resourceType`. */
+  entity?: string
+  /** @deprecated Dropped by the backend (not a field of the log): use `resourceId`. */
+  entityId?: string
 }
 
 export type UpdateActivityLogPayload = {
   data?: Record<string, unknown>
 }
+
+/**
+ * Query of the list and of the CSV export. The backend requires `filters.from` and `filters.to` (the
+ * period of `createdAt`); the other `filters` match the stored fields.
+ */
+export type ActivityLogListQuery = ListQuery<ActivityLog> & {
+  filters?: {
+    from?: string
+    to?: string
+    resourceType?: string
+    resourceId?: string
+    event?: string
+    userId?: string
+  }
+}

package/src/apis/categories/types.ts

@@ -11,6 +11,7 @@ export type CreateCategoryPayload = {
   title: string
 }
 
+/** The backend requires `title` on the update too (400 without it). */
 export type UpdateCategoryPayload = {
   title?: string
 }

package/src/apis/creditMovements/CreditMovementsApi.test.ts

@@ -0,0 +1,88 @@
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+import { CreditMovementsApi } from './CreditMovementsApi'
+import type { ApiClient } from '../../core/ApiClient'
+
+// ── Mock client factory ──────────────────────────────────────────────
+
+function createMockClient(): ApiClient {
+  return {
+    setAccessToken: vi.fn().mockReturnThis(),
+    request: vi.fn(),
+    requestRaw: vi.fn(),
+    get: vi.fn(),
+    post: vi.fn(),
+    put: vi.fn(),
+    patch: vi.fn(),
+    delete: vi.fn(),
+  }
+}
+
+// ── Tests ────────────────────────────────────────────────────────────
+
+describe('CreditMovementsApi', () => {
+  let client: ReturnType<typeof createMockClient>
+  let api: CreditMovementsApi
+
+  beforeEach(() => {
+    client = createMockClient()
+    api = new CreditMovementsApi(client)
+  })
+
+  it('balances calls client.get with /credit-movements/balances', async () => {
+    await api.balances()
+    expect(client.get).toHaveBeenCalledWith('/credit-movements/balances', undefined)
+  })
+
+  it('balance posts the service type to /credit-movements/balance', async () => {
+    vi.mocked(client.post).mockResolvedValue(20)
+    await expect(api.balance('sms-wavy')).resolves.toBe(20)
+    expect(client.post).toHaveBeenCalledWith(
+      '/credit-movements/balance',
+      { serviceType: 'sms-wavy' },
+      undefined,
+    )
+  })
+
+  it('balancesV2 serializes the period', async () => {
+    await api.balancesV2({ from: '2026-10-01', to: '2026-10-17' })
+    const url = vi.mocked(client.get).mock.calls[0]?.[0] as string
+    expect(url).toMatch(/^\/credit-movements\/v2\/balances\?/)
+    expect(decodeURIComponent(url)).toContain('"from":"2026-10-01"')
+  })
+
+  it('balancesV2 sends no query without a period', async () => {
+    await api.balancesV2()
+    expect(client.get).toHaveBeenCalledWith('/credit-movements/v2/balances', undefined)
+  })
+
+  it('totalServices serializes the filters and the page', async () => {
+    await api.totalServices({
+      filters: { from: '2026-10-01', to: '2026-10-17', serviceType: 'summary' },
+      page: 1,
+    })
+    const url = vi.mocked(client.get).mock.calls[0]?.[0] as string
+    expect(url).toMatch(/^\/credit-movements\/total-services\?/)
+    expect(decodeURIComponent(url)).toContain('"page":1')
+  })
+
+  it('exportXlsx resolves the binary body of requestRaw', async () => {
+    const requestRaw = vi.fn().mockResolvedValue(new Response(new ArrayBuffer(4)))
+    client.requestRaw = requestRaw
+    const result = await api.exportXlsx({
+      from: '2026-10-01',
+      to: '2026-10-17',
+      where: { $and: [] },
+    })
+    expect(result.byteLength).toBe(4)
+    const [method, url] = requestRaw.mock.calls[0] ?? []
+    expect(method).toBe('GET')
+    expect(url).toMatch(/^\/credit-movements\/export\?/)
+  })
+
+  it('exportXlsx refuses a client without requestRaw', async () => {
+    const withoutRaw: ApiClient = { ...client, requestRaw: undefined }
+    await expect(
+      new CreditMovementsApi(withoutRaw).exportXlsx({ from: 'a', to: 'b', where: { $and: [] } }),
+    ).rejects.toThrow('requestRaw')
+  })
+})

package/src/apis/creditMovements/CreditMovementsApi.ts

@@ -4,12 +4,19 @@ import type {
   CreditMovement,
   CreateCreditMovementPayload,
   UpdateCreditMovementPayload,
+  CreditBalances,
+  CreditBalanceV2,
+  CreditBalancesV2Query,
+  CreditMovementServiceType,
+  CreditMovementsExportQuery,
+  CreditTotalServices,
+  CreditTotalServicesQuery,
 } from './types'
 
 /**
  * Credit movements of the account (SMS and AI credits), only for reading: the writes are super
- * admin routes (`/admin/credit-movements`). The backend serves only `GET /credit-movements` and
- * `GET /credit-movements/:id`.
+ * admin routes (`/admin/credit-movements`). Besides the list and the read by id, the backend serves the
+ * balances, the totals per connection and the xlsx export.
  */
 export class CreditMovementsApi extends BaseCrudApi<
   CreditMovement,
@@ -41,4 +48,68 @@ export class CreditMovementsApi extends BaseCrudApi<
   override deleteById(id: string, headers?: Record<string, string>): Promise<CreditMovement> {
     return super.deleteById(id, headers)
   }
+
+  /** The balance of each service type of the account. */
+  balances(headers?: Record<string, string>): Promise<CreditBalances> {
+    return this.client.get<CreditBalances>(`${this.basePath}/balances`, headers)
+  }
+
+  /**
+   * The balance of one service type (a read, despite the POST). Without `serviceType` the route answers 500.
+   */
+  balance(
+    serviceType: CreditMovementServiceType,
+    headers?: Record<string, string>,
+  ): Promise<number> {
+    return this.client.post<number, { serviceType: CreditMovementServiceType }>(
+      `${this.basePath}/balance`,
+      { serviceType },
+      headers,
+    )
+  }
+
+  /** The balances of the period by service type and connection (`ins` without the trial credits). */
+  balancesV2(
+    query?: CreditBalancesV2Query,
+    headers?: Record<string, string>,
+  ): Promise<Record<CreditMovementServiceType, CreditBalanceV2>> {
+    return this.client.get<Record<CreditMovementServiceType, CreditBalanceV2>>(
+      `${this.basePath}/v2/balances${this.toQueryString(query)}`,
+      headers,
+    )
+  }
+
+  /**
+   * The total of credits of each connection in the period (five per page). Resolves `undefined` (no body)
+   * when `filters.from`, `filters.to`, `filters.serviceType` or `page` is missing.
+   */
+  totalServices(
+    query: CreditTotalServicesQuery,
+    headers?: Record<string, string>,
+  ): Promise<CreditTotalServices | undefined> {
+    return this.client.get<CreditTotalServices | undefined>(
+      `${this.basePath}/total-services${this.toQueryString(query)}`,
+      headers,
+    )
+  }
+
+  /**
+   * Exports the movements of the period as an xlsx workbook (binary). Needs a client with `requestRaw`.
+   * Without `where.$and` the route answers 500.
+   */
+  async exportXlsx(
+    query: CreditMovementsExportQuery,
+    headers?: Record<string, string>,
+  ): Promise<ArrayBuffer> {
+    if (!this.client.requestRaw) {
+      throw new Error('exportXlsx needs a client with requestRaw (the answer is a binary xlsx)')
+    }
+    const response = await this.client.requestRaw(
+      'GET',
+      `${this.basePath}/export${this.toQueryString(query)}`,
+      undefined,
+      headers,
+    )
+    return response.arrayBuffer()
+  }
 }