@yosle/tropipayjs 0.2.3 → 0.3.0

package/index.js

@@ -23,7 +23,17 @@ function _interopNamespaceDefault(e) {
 
 var crypto__namespace = /*#__PURE__*/_interopNamespaceDefault(crypto);
 
+const MAX_IMAGE_SIZE_MB = 2;
+/**
+ * Base path for the Tropipay API. All SDK endpoints target API v3
+ * (v2 is deprecated).
+ */
+const API_BASE = "/api/v3";
+
 function handleExceptions(error) {
+    // already mapped (e.g. thrown by login() inside the request interceptor)
+    if (error instanceof TropipayJSException)
+        return error;
     if (error instanceof axios.AxiosError) {
         if (error.response) {
             const axiosResponse = error.response;
@@ -79,7 +89,7 @@ class TropipayHooks {
      * you must select from the list of available events, otherwise
      * it will not produce an error but it will not be executed.
      * For get full list of available events see endpoint
-     * GET /api/v2/hook/events.
+     * GET /api/v3/user/hooks/events.
      * @param target String representing the type of event supported.
      * It is currently available: 'web' (allows to receive information in a url),
      * 'email' (allows to receive information in an email address).
@@ -90,20 +100,11 @@ class TropipayHooks {
      * @returns
      */
     async subscribe({ eventType, target, value, }) {
-        if (!Tropipay.accessToken) {
-            await this.tropipay.login();
-        }
         try {
-            const hooks = await this.tropipay.request.post(`/api/v2/hooks`, {
+            const hooks = await this.tropipay.request.post(`${API_BASE}/user/hooks`, {
                 event: eventType,
                 target: target,
                 value: value,
-            }, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                    Accept: "application/json",
-                },
             });
             return hooks.data;
         }
@@ -119,17 +120,8 @@ class TropipayHooks {
      * @returns All subscribed hooks or empty Array if none exist.
      */
     async list(eventType) {
-        if (!Tropipay.accessToken) {
-            await this.tropipay.login();
-        }
         try {
-            const hooks = await this.tropipay.request.get(`/api/v2/hooks/${eventType || ""}`, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                    Accept: "application/json",
-                },
-            });
+            const hooks = await this.tropipay.request.get(`${API_BASE}/user/hooks/${eventType || ""}`);
             return hooks.data;
         }
         catch (error) {
@@ -137,20 +129,11 @@ class TropipayHooks {
         }
     }
     async update(eventType, target, value) {
-        if (!Tropipay.accessToken) {
-            await this.tropipay.login();
-        }
         try {
-            const hooks = await this.tropipay.request.put(`/api/v2/hooks`, {
+            const hooks = await this.tropipay.request.put(`${API_BASE}/user/hooks`, {
                 event: eventType,
                 target: target,
                 value: value,
-            }, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                    Accept: "application/json",
-                },
             });
             return hooks.data;
         }
@@ -159,36 +142,17 @@ class TropipayHooks {
         }
     }
     async delete(eventType, target) {
-        if (!Tropipay.accessToken) {
-            await this.tropipay.login();
-        }
         try {
-            const hooks = await this.tropipay.request.delete(`/api/v2/hooks/${eventType}/${target}`, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                    Accept: "application/json",
-                },
-            });
+            const hooks = await this.tropipay.request.delete(`${API_BASE}/user/hooks/${eventType}/${target}`);
             return hooks.data;
         }
         catch (error) {
-            console.trace(error);
             throw handleExceptions(error);
         }
     }
     async events() {
-        if (!Tropipay.accessToken) {
-            await this.tropipay.login();
-        }
         try {
-            const hooks = await this.tropipay.request.get(`/api/v2/hooks/events`, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                    Accept: "application/json",
-                },
-            });
+            const hooks = await this.tropipay.request.get(`${API_BASE}/user/hooks/events`);
             return hooks.data;
         }
         catch (error) {
@@ -204,22 +168,15 @@ class PaymentCard {
     }
     /**
      * Create a paymentLink with the specified options.
+     * Supports multi-account via the optional `accountId` field of the
+     * payload (defaults to the user's default account).
      * @param payload PaymentLinkPayload Object.
      * @returns Promise<PaymentLink> or throws an Exception.
-     * @see https://tpp.stoplight.io/docs/tropipay-api-doc/b3A6ODgyNTM3OQ-create-a-new-pay-link-charge
+     * @see https://doc.tropipay.com/docs/api-reference/payment-cards
      */
     async create(payload) {
-        if (!Tropipay.accessToken) {
-            await this.tropipay.login();
-        }
         try {
-            const paylink = await this.tropipay.request.post("/api/v2/paymentcards", payload, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                    Accept: "application/json",
-                },
-            });
+            const paylink = await this.tropipay.request.post(`${API_BASE}/paymentcards`, payload);
             return paylink.data;
         }
         catch (error) {
@@ -232,21 +189,12 @@ class PaymentCard {
      * @returns Array of paymentlinks
      */
     async list() {
-        if (!Tropipay.accessToken) {
-            await this.tropipay.login();
-        }
         try {
-            const paymentcards = await this.tropipay.request.get(`/api/v2/paymentcards`, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                    Accept: "application/json",
-                },
-            });
+            const paymentcards = await this.tropipay.request.get(`${API_BASE}/paymentcards`);
             return paymentcards.data;
         }
         catch (error) {
-            throw new Error(`Could not retrieve PaymenCards list`);
+            throw handleExceptions(error);
         }
     }
     /**
@@ -257,17 +205,25 @@ class PaymentCard {
      * @throws {Error} If an error occurs while retrieving the payment card.
      */
     async get(id) {
-        if (!Tropipay.accessToken) {
-            await this.tropipay.login();
+        try {
+            const paymentcard = await this.tropipay.request.get(`${API_BASE}/paymentcards/${id}`);
+            return paymentcard.data;
         }
+        catch (error) {
+            throw handleExceptions(error);
+        }
+    }
+    /**
+     * Updates a payment card. Send the card id in `cardId` plus the
+     * fields to modify.
+     *
+     * @param payload Object with `cardId` and the fields to update.
+     * @return {Promise<any>} A Promise that resolves to the updated payment card data.
+     * @throws {Error} If an error occurs while updating the payment card.
+     */
+    async update(payload) {
         try {
-            const paymentcard = await this.tropipay.request.get(`/api/v2/paymentcards/${id}`, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                    Accept: "application/json",
-                },
-            });
+            const paymentcard = await this.tropipay.request.put(`${API_BASE}/paymentcards/`, payload);
             return paymentcard.data;
         }
         catch (error) {
@@ -283,16 +239,8 @@ class PaymentCard {
      * @throws {Error} If an error occurs while deleting the payment card.
      */
     async delete(id) {
-        if (!Tropipay.accessToken) {
-            await this.tropipay.login();
-        }
         try {
-            const paymentcard = await this.tropipay.request.delete(`/api/v2/paymentcards/`, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                    Accept: "application/json",
-                },
+            const paymentcard = await this.tropipay.request.delete(`${API_BASE}/paymentcards/`, {
                 data: {
                     cardId: id,
                 },
@@ -305,40 +253,6 @@ class PaymentCard {
     }
 }
 
-class MediationPaymentCard {
-    tropipay;
-    constructor(tropipayInstance) {
-        this.tropipay = tropipayInstance;
-    }
-    /**
-     * (ONLY FOR BUSINESS ACCOUNTS) Create a mediation paymentcard (an escrow payment link) with the specified options.
-     * This allows a payment to be made to persons belonging or not to the TropiPay platform with the
-     * particularity that the payment will be held in custody or retained until it is released with
-     * the approval of the payer.
-     * @param payload PaymentLinkPayload Object.
-     * @returns Promise<PaymentLink> or throws an Exception.
-     * @see https://tpp.stoplight.io/docs/tropipay-api-doc/12a128ff971e4-creating-a-mediation-payment-card
-     */
-    async create(payload) {
-        if (!Tropipay.accessToken) {
-            await this.tropipay.login();
-        }
-        try {
-            const paylink = await this.tropipay.request.post("/api/v2/paymentcards/mediation", payload, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                    Accept: "application/json",
-                },
-            });
-            return paylink.data;
-        }
-        catch (error) {
-            throw handleExceptions(error);
-        }
-    }
-}
-
 class DepositAccounts {
     tropipay;
     constructor(tropipayInstance) {
@@ -349,44 +263,28 @@ class DepositAccounts {
      * @returns Array of DepositAccounts
      */
     async list() {
-        if (!Tropipay.accessToken) {
-            await this.tropipay.login();
-        }
         try {
-            const deposit = await this.tropipay.request.get(`/api/v2/deposit_accounts`, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                    Accept: "application/json",
-                },
-            });
+            const deposit = await this.tropipay.request.get(`${API_BASE}/deposit_accounts`);
             return deposit.data;
         }
         catch (error) {
-            return handleExceptions(error);
+            throw handleExceptions(error);
         }
     }
     /**
      * Adds a new beneficiary to the user account.
+     * For crypto wallet beneficiaries use `beneficiaryType: 3`, put the
+     * wallet address in `accountNumber` and set the `network`.
      * @param payload
      * @returns
      */
     async create(depositAccountObj) {
-        if (!Tropipay.accessToken) {
-            await this.tropipay.login();
-        }
         try {
-            const deposit = await this.tropipay.request.post("/api/v2/deposit_accounts", depositAccountObj, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                    Accept: "application/json",
-                },
-            });
+            const deposit = await this.tropipay.request.post(`${API_BASE}/deposit_accounts`, depositAccountObj);
             return deposit.data;
         }
         catch (error) {
-            return handleExceptions(error);
+            throw handleExceptions(error);
         }
     }
     /**
@@ -396,67 +294,192 @@ class DepositAccounts {
      * @returns
      */
     async get(id) {
-        if (!Tropipay.accessToken) {
-            await this.tropipay.login();
-        }
         try {
-            const deposit = await this.tropipay.request.get(`/api/v2/deposit_accounts/${id}`, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                    Accept: "application/json",
-                },
-            });
+            const deposit = await this.tropipay.request.get(`${API_BASE}/deposit_accounts/${id}`);
             return deposit.data;
         }
         catch (error) {
-            return handleExceptions(error);
+            throw handleExceptions(error);
         }
     }
     /**
      * Updates certain beneficiary data.
-     * @param depositAccountObj
+     * @param depositAccountObj Object with the beneficiary id and the fields to update.
      * @returns
      */
     async update(depositAccountObj) {
-        if (!Tropipay.accessToken) {
-            await this.tropipay.login();
-        }
         try {
-            const deposit = await this.tropipay.request.put(`/api/v2/deposit_accounts/`, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                    Accept: "application/json",
-                },
-            });
+            const deposit = await this.tropipay.request.put(`${API_BASE}/deposit_accounts`, depositAccountObj);
             return deposit.data;
         }
         catch (error) {
-            return handleExceptions(error);
+            throw handleExceptions(error);
         }
     }
     /**
-     * (UNTESTED) Deletes the beneficiary indicated by id
+     * Deletes the beneficiary indicated by id
      * @param id
      * @returns
      */
     async delete(id) {
-        if (!Tropipay.accessToken) {
-            await this.tropipay.login();
+        try {
+            const deposit = await this.tropipay.request.delete(`${API_BASE}/deposit_accounts/${id}`);
+            return deposit.data;
         }
+        catch (error) {
+            throw handleExceptions(error);
+        }
+    }
+    /**
+     * Validates a beneficiary account number (bank account, card or
+     * crypto wallet address) before creating it.
+     * @param payload Account number data to validate (e.g. { accountNumber, paymentType, network, currency })
+     * @returns
+     */
+    async validateAccountNumber(payload) {
         try {
-            const deposit = await this.tropipay.request.delete(`/api/v2/deposit_accounts/${id}`, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                    Accept: "application/json",
-                },
+            const validation = await this.tropipay.request.post(`${API_BASE}/deposit_accounts/validate_account_number`, payload);
+            return validation.data;
+        }
+        catch (error) {
+            throw handleExceptions(error);
+        }
+    }
+}
+
+/**
+ * Multi-account support. A Tropipay user can hold several accounts
+ * (one per currency). Use `list()` to discover the `accountId` values
+ * accepted by `paymentCards.create()` and `transfers.payout()`.
+ */
+class Accounts {
+    tropipay;
+    constructor(tropipayInstance) {
+        this.tropipay = tropipayInstance;
+    }
+    /**
+     * List all the accounts of the current user with their id,
+     * accountNumber, currency, balance and enabled payment methods.
+     * @param type Optional comma-separated account types filter.
+     * @returns Array of Account objects.
+     */
+    async list(type) {
+        try {
+            const accounts = await this.tropipay.request.get(`${API_BASE}/accounts`, {
+                params: type ? { type } : undefined,
             });
-            return deposit.data;
+            // accept both a plain array and a paginated { count, rows } body
+            const data = accounts.data;
+            return Array.isArray(data) ? data : data?.rows ?? [];
+        }
+        catch (error) {
+            throw handleExceptions(error);
+        }
+    }
+    /**
+     * Get the balance of every account of the user.
+     * @returns Balances for all accounts.
+     */
+    async allBalances() {
+        try {
+            const balances = await this.tropipay.request.get(`${API_BASE}/accounts/allBalance`);
+            return balances.data;
         }
         catch (error) {
-            return handleExceptions(error);
+            throw handleExceptions(error);
+        }
+    }
+    /**
+     * Get the balance of one account by its account number
+     * (note: accountNumber, not account id — get it from `list()`).
+     * @param accountNumber The account number.
+     */
+    async balance(accountNumber) {
+        try {
+            const balance = await this.tropipay.request.get(`${API_BASE}/accounts/balance/${accountNumber}`);
+            return balance.data;
+        }
+        catch (error) {
+            throw handleExceptions(error);
+        }
+    }
+    /**
+     * List the movements of one account.
+     * @param accountId The account id (from `list()`).
+     * @param options Pagination: limit (max 50, default 20) and offset.
+     */
+    async movements(accountId, options = {}) {
+        try {
+            const movements = await this.tropipay.request.get(`${API_BASE}/accounts/${accountId}/movements`, {
+                params: { limit: options.limit ?? 20, offset: options.offset ?? 0 },
+            });
+            return movements.data;
+        }
+        catch (error) {
+            throw handleExceptions(error);
+        }
+    }
+}
+
+/**
+ * Money transfers (payouts) to beneficiaries. Requires 2FA and the
+ * ALLOW_EXTERNAL_TRANSFER permission on the Tropipay account.
+ *
+ * Typical flow:
+ * 1. `simulate(payload)` to preview amounts and fees.
+ * 2. `requestSecurityCode()` to receive the 2FA code (SMS/email).
+ * 3. `payout({ ...payload, securityCode })` to execute the transfer.
+ */
+class Transfers {
+    tropipay;
+    constructor(tropipayInstance) {
+        this.tropipay = tropipayInstance;
+    }
+    /**
+     * Simulate a payout without executing it: returns the resulting
+     * amounts, rates and fees for the given payload.
+     * Note the payload shape differs from `payout()`: it uses
+     * `currencyToPay`/`currencyToGet`, `amountToPay`/`amountToGet` and
+     * requires `accountId`.
+     * @param payload Simulation data (no securityCode needed).
+     */
+    async simulate(payload) {
+        try {
+            const simulation = await this.tropipay.request.post(`${API_BASE}/booking/payout/simulate`, payload);
+            return simulation.data;
+        }
+        catch (error) {
+            throw handleExceptions(error);
+        }
+    }
+    /**
+     * Execute a payout (external transfer) to a beneficiary.
+     * Requires the 2FA `securityCode` in the payload (use
+     * `requestSecurityCode()` first; in Development mode "123456" works).
+     * Supports multi-account via the optional `accountId` field.
+     * @param payload Payout data including securityCode.
+     */
+    async payout(payload) {
+        try {
+            const booking = await this.tropipay.request.post(`${API_BASE}/booking/payout`, payload);
+            return booking.data;
+        }
+        catch (error) {
+            throw handleExceptions(error);
+        }
+    }
+    /**
+     * Request the 2FA security code needed to confirm a payout.
+     * The code is delivered by SMS or email depending on the user's
+     * 2FA settings.
+     */
+    async requestSecurityCode() {
+        try {
+            const response = await this.tropipay.request.post(`${API_BASE}/booking/sendSecurityCode`, {});
+            return response.data;
+        }
+        catch (error) {
+            throw handleExceptions(error);
         }
     }
 }
@@ -467,19 +490,22 @@ class DepositAccounts {
  * @author Yosleivy Baez Acosta
  *
  */
+const TOKEN_URL = `${API_BASE}/access/token`;
 class Tropipay {
     clientId;
     clientSecret;
     scopes;
     request;
-    static accessToken;
-    static refreshToken;
-    static expiresIn;
+    // Per instance, so several credentials (or environments) never share a token
+    accessToken = null;
+    refreshToken = null;
+    expiresIn = null;
     serverMode;
     hooks;
     paymentCards;
     depositAccounts;
-    mediationPaymentCard;
+    accounts;
+    transfers;
     /**
      * Initializes a new instance of the Tropipay class.
      *
@@ -512,87 +538,77 @@ class Tropipay {
         this.serverMode = config.serverMode || "Development";
         const tpp_env = this.serverMode === "Production"
             ? "https://www.tropipay.com"
-            : "https://tropipay-dev.herokuapp.com";
+            : "https://sandbox.tropipay.me";
         this.request = axios.create({
             baseURL: config.customTropipayUrl || tpp_env,
             headers: {
                 "Content-Type": "application/json",
                 Accept: "application/json",
-                Authorization: `Bearer ${Tropipay.accessToken}`,
             },
         });
-        // Add request interceptor for Token expired
+        // Log in (or refresh an expired token) and attach the current token to
+        // every request. The token endpoint itself is skipped, otherwise login()
+        // would re-enter this interceptor forever.
         this.request.interceptors.request.use(async (config) => {
+            if (config.url === TOKEN_URL)
+                return config;
             const currentTimestamp = Math.floor(Date.now() / 1000); // Current time in seconds
-            if (Tropipay.expiresIn && Tropipay.expiresIn < currentTimestamp) {
-                // Token has expired, attempt to refresh it
-                try {
-                    await this.login();
-                }
-                catch (error) {
-                    // Handle token refresh error
-                    Tropipay.accessToken = null;
-                    Tropipay.refreshToken = null;
-                    throw handleExceptions(error);
-                }
+            const expired = this.expiresIn !== null && this.expiresIn < currentTimestamp;
+            if (!this.accessToken || expired) {
+                await this.login();
             }
+            config.headers.Authorization = `Bearer ${this.accessToken}`;
             return config;
         }, (error) => {
             return Promise.reject(error);
         });
         this.hooks = new TropipayHooks(this);
         this.paymentCards = new PaymentCard(this);
-        this.mediationPaymentCard = new MediationPaymentCard(this);
         this.depositAccounts = new DepositAccounts(this);
+        this.accounts = new Accounts(this);
+        this.transfers = new Transfers(this);
     }
     async login() {
         try {
-            if (Tropipay.refreshToken) {
-                const { data } = await this.request.post("/api/v2/access/token", {
+            if (this.refreshToken) {
+                const { data } = await this.request.post(TOKEN_URL, {
                     client_id: this.clientId,
                     client_secret: this.clientSecret,
                     grant_type: "refresh_token",
-                    refresh_token: Tropipay.refreshToken,
-                }, {
-                    headers: {
-                        "Content-Type": "application/json",
-                        Accept: "application/json",
-                    },
+                    refresh_token: this.refreshToken,
                 });
+                this.accessToken = data.access_token;
+                this.refreshToken = data.refresh_token;
+                this.expiresIn = data.expires_in;
                 return data;
             }
             // normal credetials login
-            const { data } = await this.request.post("/api/v2/access/token", {
+            const { data } = await this.request.post(TOKEN_URL, {
                 client_id: this.clientId,
                 client_secret: this.clientSecret,
                 grant_type: "client_credentials",
                 scope: this.scopes.join(" "), // "ALLOW_GET_PROFILE_DATA ALLOW_PAYMENT_IN ALLOW_EXTERNAL_CHARGE KYC3_FULL_ALLOW ALLOW_PAYMENT_OUT ALLOW_MARKET_PURCHASES ALLOW_GET_BALANCE ALLOW_GET_MOVEMENT_LIST ALLOW_GET_CREDENTIAL",
-            }, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Accept: "application/json",
-                },
             });
-            Tropipay.accessToken = data.access_token;
-            Tropipay.refreshToken = data.refresh_token;
-            Tropipay.expiresIn = data.expires_in;
+            this.accessToken = data.access_token;
+            this.refreshToken = data.refresh_token;
+            this.expiresIn = data.expires_in;
             return data;
         }
         catch (error) {
-            Tropipay.accessToken = null;
-            Tropipay.refreshToken = null;
-            Tropipay.expiresIn = null;
+            this.accessToken = null;
+            this.refreshToken = null;
+            this.expiresIn = null;
             throw handleExceptions(error);
         }
     }
     /**
      * Get the list of all supported countries by Tropipay.
      * @returns Array of Countries Data
-     * @see https://tpp.stoplight.io/docs/tropipay-api-doc/bfac21259e2ff-getting-users-countries-list
+     * @see https://doc.tropipay.com/docs/api-reference/countries
      */
     async countries() {
         try {
-            const countries = await this.request.get("/api/v2/countries");
+            const countries = await this.request.get(`${API_BASE}/countries`);
             return countries.data;
         }
         catch (error) {
@@ -600,21 +616,14 @@ class Tropipay {
         }
     }
     /**
-     * Get user balance
+     * Get balance of the user's default account.
+     * For per-account balances use `accounts.balance()` or
+     * `accounts.allBalances()`.
      * @returns balance Object { balance: number, pendingIn: number, pendingOut: number }
      */
     async getBalance() {
-        if (!Tropipay.accessToken) {
-            await this.login();
-        }
         try {
-            const balance = await this.request.get("/api/v2/users/balance", {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                    Accept: "application/json",
-                },
-            });
+            const balance = await this.request.get(`${API_BASE}/users/balance`);
             return balance.data;
         }
         catch (error) {
@@ -627,15 +636,15 @@ class Tropipay {
      * when adding new beneficiaries to some user.
      *
      * @returns Array of Country Objects
-     * @see https://tpp.stoplight.io/docs/tropipay-api-doc/3cfe5504f0524-getting-list-of-beneficiary-countries
+     * @see https://doc.tropipay.com/docs/api-reference/countries
      */
     async destinations() {
         try {
-            const countries = await this.request.get("/api/v2/countries/destinations");
+            const countries = await this.request.get(`${API_BASE}/countries/destinations`);
             return countries.data;
         }
         catch (error) {
-            throw new Error(`Could not retrieve the destination countries list`);
+            throw handleExceptions(error);
         }
     }
     /**
@@ -643,16 +652,9 @@ class Tropipay {
      * @returns Array of account Object or throws an error
      */
     async favorites() {
-        if (!Tropipay.accessToken) {
-            await this.login();
-        }
         try {
-            const favoritesList = await this.request.get("/api/v2/paymentcards/favorites", {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                    Accept: "application/json",
-                },
+            const favoritesList = await this.request.get(`${API_BASE}/paymentcards/filters`, {
+                params: { favorite: true },
             });
             return favoritesList?.data?.rows;
         }
@@ -662,20 +664,16 @@ class Tropipay {
     }
     /**
      * List all account movements. You can optionaly specify
-     * offset and limit params for pagination.
+     * offset and limit params for pagination (limit is capped
+     * to 50 by the API).
+     * For the movements of one specific account use
+     * `accounts.movements(accountId)`.
      * @returns
      */
     async movements(offset = 0, limit = 10) {
-        if (!Tropipay.accessToken)
-            await this.login();
         try {
-            const movements = await this.request.get("/api/v2/movements", {
+            const movements = await this.request.get(`${API_BASE}/movements`, {
                 params: { limit: limit, offset: offset },
-                headers: {
-                    "Content-Type": "application/json",
-                    Accept: "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                },
             });
             return movements.data;
         }
@@ -688,10 +686,8 @@ class Tropipay {
      * @returns account object
      */
     async profile() {
-        if (!Tropipay.accessToken)
-            await this.login();
         try {
-            const profile = await this.request.get("/api/users/profile");
+            const profile = await this.request.get(`${API_BASE}/users/profile`);
             return profile.data;
         }
         catch (error) {
@@ -704,51 +700,16 @@ class Tropipay {
      * @param originCurrency Target currency code supported by Tropipay.
      * @param targetCurrency Must be 'EUR'? (not documented by Tropipay)
      * @returns Conversion rate (number)
-     * @see https://tpp.stoplight.io/docs/tropipay-api-doc/85163f6f28b23-get-rate
+     * @see https://doc.tropipay.com/docs/api-reference/movements
      */
     async rates(originCurrency, targetCurrency = "EUR") {
-        if (!Tropipay.accessToken) {
-            await this.login();
-        }
         try {
-            const rates = await this.request.post("/api/v2/movements/get_rate", {
+            const rates = await this.request.post(`${API_BASE}/movements/get_rate`, {
                 currencyFrom: originCurrency,
                 currencyTo: targetCurrency,
-            }, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Accept: "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                },
             });
-            return rates.data.rate;
-        }
-        catch (error) {
-            throw handleExceptions(error);
-        }
-    }
-    /**
-     * (ONLY in Bussiness Accounts)
-     * An escrow payment link. This allows a payment to be made to persons
-     * belonging or not to the TropiPay platform with the particularity
-     * that the payment will be held in custody or retained until it is
-     * released with the approval of the payer.
-     * @deprecated This method is no longer supported and may be removed in a future release.
-     * @see https://tpp.stoplight.io/docs/tropipay-api-doc/12a128ff971e4-creating-a-mediation-payment-card
-     * @param config Payload with the payment details
-     */
-    async createMediationPaymentCard(config) {
-        if (!Tropipay.accessToken)
-            await this.login();
-        try {
-            const mediation = await this.request.post("/api/v2/paymentcards/mediation", config, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                    Accept: "application/json",
-                },
-            });
-            return mediation.data;
+            // the v3 API returns the rate as a numeric string
+            return Number(rates.data.rate);
         }
         catch (error) {
             throw handleExceptions(error);
@@ -769,20 +730,11 @@ class Tropipay {
      * the code received via SMS in Production (obtained via requestSecurityCode()).
      */
     async refundMovement(orderCode, amount, securityCode) {
-        if (!Tropipay.accessToken) {
-            await this.login();
-        }
         if (!this.scopes.includes("ALLOW_REFUND")) {
             throw new TropipayJSException("The credential does not have the ALLOW_REFUND scope required to perform refunds. If you believe your account should have this permission, please contact Tropipay support.", 403, null);
         }
         try {
-            const response = await this.request.post("/api/v3/movements/in/refund", { orderCode, amount, securityCode }, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Accept: "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                },
-            });
+            const response = await this.request.post(`${API_BASE}/movements/in/refund`, { orderCode, amount, securityCode });
             return response.data;
         }
         catch (error) {
@@ -802,17 +754,8 @@ class Tropipay {
      * @returns The API response confirming the code was sent
      */
     async requestSecurityCode(type = "sms") {
-        if (!Tropipay.accessToken) {
-            await this.login();
-        }
         try {
-            const response = await this.request.post("/api/v3/users/sendSecurityCode", { type }, {
-                headers: {
-                    "Content-Type": "application/json",
-                    Accept: "application/json",
-                    Authorization: `Bearer ${Tropipay.accessToken}`,
-                },
-            });
+            const response = await this.request.post(`${API_BASE}/users/sendSecurityCode`, { type });
             return response.data;
         }
         catch (error) {
@@ -820,13 +763,6 @@ class Tropipay {
         }
     }
 }
-class ClientSideUtils {
-    constructor(tropipayInstance) {
-        throw Error(`Not implemented yet`);
-    }
-}
-
-const MAX_IMAGE_SIZE_MB = 1;
 
 class ServerSideUtils {
     tropipay;
@@ -853,23 +789,71 @@ class ServerSideUtils {
     }
     /**
      * Checks if the provided base64 string represents a square image.
+     * Supports PNG and JPEG images (dimensions are read directly from
+     * the binary header, no DOM required).
      *
      * @param {string} base64String - The base64 string of the image
      * @return {Promise<boolean>} A Promise that resolves to a boolean indicating whether the image is square
      */
     static async isBase64ImageSquare(base64String) {
-        return new Promise((resolve, reject) => {
-            const img = new Image();
-            img.onload = () => {
-                // Check if the image has a 1:1 aspect ratio
-                const isSquare = img.width === img.height;
-                resolve(isSquare);
-            };
-            img.onerror = (error) => {
-                reject(error);
+        const dimensions = ServerSideUtils.getImageDimensions(base64String);
+        return dimensions.width === dimensions.height;
+    }
+    /**
+     * Reads the width/height of a base64 encoded PNG or JPEG image
+     * from its binary header.
+     *
+     * @param {string} base64String - base64 image, with or without the data: prefix
+     * @return {{width: number, height: number}} the image dimensions
+     */
+    static getImageDimensions(base64String) {
+        const base64Data = base64String.replace(/^data:image\/\w+;base64,/, "");
+        const buffer = Buffer.from(base64Data, "base64");
+        // PNG signature: 89 50 4E 47, IHDR width/height at offsets 16/20
+        if (buffer.length > 24 &&
+            buffer[0] === 0x89 &&
+            buffer[1] === 0x50 &&
+            buffer[2] === 0x4e &&
+            buffer[3] === 0x47) {
+            return {
+                width: buffer.readUInt32BE(16),
+                height: buffer.readUInt32BE(20),
             };
-            img.src = base64String;
-        });
+        }
+        // JPEG signature: FF D8. Scan segments for a SOFn marker with the frame size.
+        if (buffer.length > 4 && buffer[0] === 0xff && buffer[1] === 0xd8) {
+            let offset = 2;
+            while (offset + 9 < buffer.length) {
+                if (buffer[offset] !== 0xff) {
+                    offset++;
+                    continue;
+                }
+                const marker = buffer[offset + 1];
+                // 0xFF fill bytes may pad the stream before a marker
+                if (marker === 0xff) {
+                    offset++;
+                    continue;
+                }
+                // standalone markers (TEM, RST0-RST7) carry no length field
+                if (marker === 0x01 || (marker >= 0xd0 && marker <= 0xd7)) {
+                    offset += 2;
+                    continue;
+                }
+                // SOF0-SOF15 markers except DHT (C4), JPG (C8) and DAC (CC)
+                if (marker >= 0xc0 &&
+                    marker <= 0xcf &&
+                    marker !== 0xc4 &&
+                    marker !== 0xc8 &&
+                    marker !== 0xcc) {
+                    return {
+                        height: buffer.readUInt16BE(offset + 5),
+                        width: buffer.readUInt16BE(offset + 7),
+                    };
+                }
+                offset += 2 + buffer.readUInt16BE(offset + 2);
+            }
+        }
+        throw new Error("Unsupported image format: only PNG and JPEG are allowed");
     }
     /**
      * Takes a local file path and returns a base64 representation of the file content.
@@ -910,11 +894,10 @@ class ServerSideUtils {
                 console.error("Not a valid base64 image");
                 throw new Error("Not a valid base64 image");
             }
-            // TODO: use constants intead of magic numbers here
-            const isSizeLessThan2MB = base64Image.length * 0.75 <= MAX_IMAGE_SIZE_MB * 1024 * 1024;
-            if (!isSizeLessThan2MB) {
-                console.error(`The image should be less than 2mb`);
-                throw new Error(`The image should be less than 2mb`);
+            const isSizeValid = base64Image.length * 0.75 <= MAX_IMAGE_SIZE_MB * 1024 * 1024;
+            if (!isSizeValid) {
+                console.error(`The image should be less than ${MAX_IMAGE_SIZE_MB}mb`);
+                throw new Error(`The image should be less than ${MAX_IMAGE_SIZE_MB}mb`);
             }
             // all is fine
             return true;
@@ -926,6 +909,97 @@ class ServerSideUtils {
     }
 }
 
+/**
+ * Payment reasons accepted in the `reasonId` field.
+ */
+exports.Reasons = void 0;
+(function (Reasons) {
+    Reasons[Reasons["HOUSING_ARRANGEMENT"] = 1] = "HOUSING_ARRANGEMENT";
+    Reasons[Reasons["FINANCIAL_AID"] = 2] = "FINANCIAL_AID";
+    Reasons[Reasons["FAMILY_SUPPORT"] = 3] = "FAMILY_SUPPORT";
+    Reasons[Reasons["TRAVEL_FUND"] = 4] = "TRAVEL_FUND";
+    Reasons[Reasons["REAL_ESTATE_PURCHASE"] = 5] = "REAL_ESTATE_PURCHASE";
+    Reasons[Reasons["FURNITURE_PURCHASE"] = 6] = "FURNITURE_PURCHASE";
+    Reasons[Reasons["EDUCATION"] = 7] = "EDUCATION";
+    Reasons[Reasons["MEDICAL_EXPENSES"] = 8] = "MEDICAL_EXPENSES";
+    Reasons[Reasons["OTHER"] = 9] = "OTHER";
+    Reasons[Reasons["DEBT_PAYMENT"] = 10] = "DEBT_PAYMENT";
+    Reasons[Reasons["TOURISM"] = 11] = "TOURISM";
+    Reasons[Reasons["SELF_SHIPPING"] = 12] = "SELF_SHIPPING";
+    Reasons[Reasons["ACCOUNT_ACTIVATION"] = 13] = "ACCOUNT_ACTIVATION";
+    Reasons[Reasons["SPORTS_ACTIVITIES"] = 14] = "SPORTS_ACTIVITIES";
+    Reasons[Reasons["DONATION"] = 15] = "DONATION";
+    Reasons[Reasons["AFFILIATE_COMMISSION"] = 16] = "AFFILIATE_COMMISSION";
+    Reasons[Reasons["SALARY"] = 17] = "SALARY";
+    Reasons[Reasons["SAVINGS"] = 18] = "SAVINGS";
+    Reasons[Reasons["RENT_AND_LEASING"] = 19] = "RENT_AND_LEASING";
+    Reasons[Reasons["SHARED_EXPENSES"] = 20] = "SHARED_EXPENSES";
+    Reasons[Reasons["SERVICE_PAYMENT"] = 21] = "SERVICE_PAYMENT";
+    Reasons[Reasons["GIFT"] = 22] = "GIFT";
+    Reasons[Reasons["CRYPTOCURRENCY_PURCHASE"] = 23] = "CRYPTOCURRENCY_PURCHASE";
+    Reasons[Reasons["OPERATING_EXPENSES"] = 24] = "OPERATING_EXPENSES";
+    Reasons[Reasons["CURRENCY_EXCHANGE"] = 25] = "CURRENCY_EXCHANGE";
+    Reasons[Reasons["ACCOMMODATION"] = 26] = "ACCOMMODATION";
+    Reasons[Reasons["EQUIPMENT_PURCHASE"] = 27] = "EQUIPMENT_PURCHASE";
+    Reasons[Reasons["CONSULTING"] = 28] = "CONSULTING";
+    Reasons[Reasons["SOFTWARE_DEVELOPMENT"] = 29] = "SOFTWARE_DEVELOPMENT";
+    Reasons[Reasons["REFUND"] = 30] = "REFUND";
+    Reasons[Reasons["PACKAGE_DELIVERY"] = 31] = "PACKAGE_DELIVERY";
+    Reasons[Reasons["PERSONAL_EXPENSES"] = 32] = "PERSONAL_EXPENSES";
+    Reasons[Reasons["INVESTMENT"] = 33] = "INVESTMENT";
+    Reasons[Reasons["BILL_PAYMENT"] = 34] = "BILL_PAYMENT";
+    Reasons[Reasons["HOST_PAYMENT"] = 35] = "HOST_PAYMENT";
+    Reasons[Reasons["TRANSPORTATION"] = 36] = "TRANSPORTATION";
+    Reasons[Reasons["LOAN"] = 37] = "LOAN";
+    Reasons[Reasons["BONUS"] = 38] = "BONUS";
+    Reasons[Reasons["HALLOWEEN_REMITTANCE"] = 39] = "HALLOWEEN_REMITTANCE";
+    Reasons[Reasons["PLINK_REMITTANCE"] = 41] = "PLINK_REMITTANCE";
+    Reasons[Reasons["R1_2023"] = 78] = "R1_2023";
+    Reasons[Reasons["HAPPYWEEK"] = 79] = "HAPPYWEEK";
+    Reasons[Reasons["SENDING_YOU_A_KISS"] = 80] = "SENDING_YOU_A_KISS";
+})(exports.Reasons || (exports.Reasons = {}));
+
+const DepositAccountTypesList = {
+    /**
+     * Banco Metropolitano (Cuba) Bank Account
+     */
+    BANMET_BANK_ACCOUNT: 0,
+    /**
+     * Banco Popular de Ahorro
+     */
+    BPA_BANK_ACCOUNT: 1,
+    /**
+     * Banco de Credito y Comercio (Cuba) Bank Account
+     */
+    BANDEC_BANK_ACCOUNT: 2,
+    /**
+     * Banco Metropilitano (Cuba) card
+     */
+    BANMET_CARD: 3,
+    /**
+     * Banco Popular de Ahorro (Cuba) card
+     */
+    BPA_CARD: 4,
+    /**
+     * Not available anymore
+     * @deprecated
+     */
+    AIS_CUC_CARD: 5,
+    /**
+     * Not available
+     * @deprecated
+     */
+    AIS_USD_CARD: 6,
+    /**
+     * For international bank accounts
+     */
+    OTHER: 7,
+    /**
+     * Banco de Credito y comercio card
+     */
+    BANDEC_CARD: 8,
+};
+
 const SERVER_MODE = "Development"; // Move the constant here
 
 /**
@@ -936,7 +1010,6 @@ const SERVER_MODE = "Development"; // Move the constant here
  * Developed by Yosleivy Baez Acosta
  * GitHub: https://github.com/yosle/tropipayjs
  *
- * @version 0.1.11
  * @license MIT
  */
 if (typeof window !== "undefined") {
@@ -945,9 +1018,15 @@ if (typeof window !== "undefined") {
     throw new Error(err_msg);
 }
 
-exports.ClientSideUtils = ClientSideUtils;
+exports.API_BASE = API_BASE;
+exports.Accounts = Accounts;
+exports.DepositAccountTypesList = DepositAccountTypesList;
+exports.DepositAccounts = DepositAccounts;
 exports.MAX_IMAGE_SIZE_MB = MAX_IMAGE_SIZE_MB;
+exports.PaymentCard = PaymentCard;
 exports.SERVER_MODE = SERVER_MODE;
 exports.ServerSideUtils = ServerSideUtils;
+exports.Transfers = Transfers;
 exports.Tropipay = Tropipay;
+exports.TropipayHooks = TropipayHooks;
 //# sourceMappingURL=index.js.map