btrz-api-client 8.34.0 → 8.35.0

package/src/endpoints/inventory/products.js

@@ -40,7 +40,9 @@ function productsFactory({client, internalAuthTokenProvider}) {
    * @param {string} [opts.jwtToken] - JWT or internal auth symbol
    * @param {ProductsListQuery} [opts.query] - Query params
    * @param {Object} [opts.headers] - Optional headers
-   * @returns {Promise<import("axios").AxiosResponse>}
+   * @returns {Promise<import("axios").AxiosResponse<{ products: Array<object> }>>}
+   *   Resolves with list of products; response.data has Products shape.
+   * @throws When the request fails (400 invalid channels, 401 unauthorized, 500). ErrorResponse body.
    */
   function all({token, query = {}, headers}) {
     return client({
@@ -58,7 +60,9 @@ function productsFactory({client, internalAuthTokenProvider}) {
    * @param {string} opts.productId - Product id
    * @param {ProductGetQuery} [opts.query] - Query params (providerIds, channels, enabled)
    * @param {Object} [opts.headers] - Optional headers
-   * @returns {Promise<import("axios").AxiosResponse>}
+   * @returns {Promise<import("axios").AxiosResponse<{ product: object }>>}
+   *   Resolves with single product; response.data.product is the Product.
+   * @throws When the request fails (400/401/404/500). Body: INVALID_PRODUCTID, WRONG_DATA, PRODUCT_NOTFOUND.
    */
   function get({productId, token, jwtToken, query = {}, headers}) {
     return client({
@@ -69,13 +73,16 @@ function productsFactory({client, internalAuthTokenProvider}) {
   }
 
   /**
-   * POST /products - create product. API does not accept query params.
+   * POST /products - create product. No query params. Requires BETTEREZ_APP JWT or API key.
    * @param {Object} opts
    * @param {string} [opts.token] - API key
    * @param {string} [opts.jwtToken] - JWT or internal auth symbol
-   * @param {Object} opts.data - Product payload
+   * @param {Object} opts.data - Product payload (PostedProduct); must not include _id.
    * @param {Object} [opts.headers] - Optional headers
-   * @returns {Promise<import("axios").AxiosResponse>}
+   * @returns {Promise<import("axios").AxiosResponse<{ product: object }>>}
+   *   Resolves with the created product.
+   * @throws When the request fails (400/401/500). Body: DUPLICATE_PRODUCT, CANNOT_CREATE_PRODUCT_WITH_ID,
+   *   INVALID_PAYMENT_METHODS, INVALID_PARENT_PRODUCT_ID, INVALID_JOURNEY_RESTRICTIONS, INVALID_PRODUCT_NAME, etc.
    */
   function create({data, token, jwtToken, headers}) {
     return client({
@@ -87,14 +94,17 @@ function productsFactory({client, internalAuthTokenProvider}) {
   }
 
   /**
-   * PUT /products/:productId - update product. API does not accept query params.
+   * PUT /products/:productId - update product. No query params. Requires BETTEREZ_APP JWT or API key.
    * @param {Object} opts
    * @param {string} [opts.token] - API key
    * @param {string} [opts.jwtToken] - JWT or internal auth symbol
    * @param {string} opts.productId - Product id
-   * @param {Object} opts.data - Product payload
+   * @param {Object} opts.data - Product payload (PostedProduct).
    * @param {Object} [opts.headers] - Optional headers
-   * @returns {Promise<import("axios").AxiosResponse>}
+   * @returns {Promise<import("axios").AxiosResponse<{ product: object }>>}
+   *   Resolves with the updated product. Emits product.updated webhook.
+   * @throws When the request fails (400/401/404/500). Body: NOT_FOUND, INVALID_PAYMENT_METHODS,
+   *   CANNOT_SET_PARENT_AS_CHILD, INVALID_JOURNEY_RESTRICTIONS, INVALID_PRODUCT_NAME, etc.
    */
   function update({productId, data, token, jwtToken, headers}) {
     return client({
@@ -114,7 +124,8 @@ function productsFactory({client, internalAuthTokenProvider}) {
      * @param {string} [opts.jwtToken] - JWT or internal auth symbol
      * @param {string} opts.domain - Domain
      * @param {Object} [opts.headers] - Optional headers
-     * @returns {Promise<import("axios").AxiosResponse>}
+     * @returns {Promise<import("axios").AxiosResponse>} Resolves on success. May emit product.updated.
+     * @throws When the request fails (401, 404, 500).
      */
     remove: ({token, jwtToken, domain, headers}) => {
       return client({
@@ -133,7 +144,8 @@ function productsFactory({client, internalAuthTokenProvider}) {
      * @param {string} [opts.token] - API key
      * @param {string} [opts.jwtToken] - JWT or internal auth symbol
      * @param {Object} [opts.headers] - Optional headers
-     * @returns {Promise<import("axios").AxiosResponse>}
+     * @returns {Promise<import("axios").AxiosResponse>} Resolves with list of product families.
+     * @throws When the request fails (401, 500).
      */
     all: ({token, query = {}, headers}) => {
       return client({

package/src/endpoints/inventory/promos.js

@@ -40,7 +40,9 @@ function promosFactory({client, internalAuthTokenProvider}) {
    * @param {string} [opts.jwtToken] - JWT or internal auth symbol
    * @param {PromosListQuery} [opts.query] - Query params
    * @param {Object} [opts.headers] - Optional headers
-   * @returns {Promise<import("axios").AxiosResponse>}
+   * @returns {Promise<import("axios").AxiosResponse<{ promos: Array<object>, total: number }>>}
+   *   Resolves with paginated promos; response.data has Promos shape.
+   * @throws When the request fails (400/401/404/500). Body: WRONG_DATA, PROMO_NOT_FOUND.
    */
   function all({token, query = {}, headers}) {
     return client.get("/promos", {
@@ -66,13 +68,15 @@ function promosFactory({client, internalAuthTokenProvider}) {
   }
 
   /**
-   * POST /promos - create promo. API does not accept query params.
+   * POST /promos - create promo. No query params. Requires BETTEREZ_APP JWT or API key. Emits promo.created.
    * @param {Object} opts
    * @param {string} [opts.token] - API key
    * @param {string} [opts.jwtToken] - JWT or internal auth symbol
-   * @param {Object} opts.promo - Promo payload
+   * @param {Object} opts.promo - Promo payload (PromoUpdateRequest); must not include _id.
    * @param {Object} [opts.headers] - Optional headers
-   * @returns {Promise<import("axios").AxiosResponse>}
+   * @returns {Promise<import("axios").AxiosResponse<object>>} Resolves with created Promo.
+   * @throws When the request fails (400/401/500). Body: WRONG_DATA, INTERNALID_USED,
+   *   CANNOT_CREATE_PROMO_WITH_ID, INVALID_PAYMENT_METHOD_TYPE, etc.
    */
   function create({jwtToken, promo, token, headers}) {
     return client({
@@ -84,13 +88,14 @@ function promosFactory({client, internalAuthTokenProvider}) {
   }
 
   /**
-   * DELETE /promos/:promoId - remove promo. API does not accept query params.
+   * DELETE /promos/:promoId - disable promo (soft delete). No query params. Requires BETTEREZ_APP. Emits promo.deleted.
    * @param {Object} opts
    * @param {string} [opts.token] - API key
    * @param {string} [opts.jwtToken] - JWT or internal auth symbol
    * @param {string} opts.promoId - Promo id
    * @param {Object} [opts.headers] - Optional headers
-   * @returns {Promise<import("axios").AxiosResponse>}
+   * @returns {Promise<import("axios").AxiosResponse>} Resolves with disabled promo.
+   * @throws When the request fails (400/401/404/500). Body: WRONG_DATA, INVALID_PROMO_ID, PROMO_NOT_FOUND.
    */
   function remove({jwtToken, promoId, token, headers}) {
     return client({
@@ -101,14 +106,15 @@ function promosFactory({client, internalAuthTokenProvider}) {
   }
 
   /**
-   * PATCH /promos/:promoId - update promo. API does not accept query params.
+   * PATCH /promos/:promoId - update promo (partial). No query params. Requires BETTEREZ_APP. Emits promo.updated.
    * @param {Object} opts
    * @param {string} [opts.token] - API key
    * @param {string} [opts.jwtToken] - JWT or internal auth symbol
    * @param {string} opts.promoId - Promo id
-   * @param {Object} opts.update - Update payload
+   * @param {Object} opts.update - Partial update (PromoUpdateRequest).
    * @param {Object} [opts.headers] - Optional headers
-   * @returns {Promise<import("axios").AxiosResponse>}
+   * @returns {Promise<import("axios").AxiosResponse<object>>} Resolves with updated Promo.
+   * @throws When the request fails (400/401/404/500). Body: WRONG_DATA, INTERNALID_USED, PROMO_NOT_FOUND, etc.
    */
   // eslint-disable-next-line no-shadow
   function update({jwtToken, token, promoId, update, headers}) {
@@ -121,14 +127,15 @@ function promosFactory({client, internalAuthTokenProvider}) {
   }
 
   /**
-   * PATCH /promo/:promoId - patch promo with operations. API does not accept query params.
+   * PATCH /promo/:promoId - update rule availability (add/subtract). No query params. Emits promo.updated.
    * @param {Object} opts
    * @param {string} [opts.token] - API key
    * @param {string} [opts.jwtToken] - JWT or internal auth symbol
    * @param {string} opts.promoId - Promo id
-   * @param {Object} opts.operations - Patch operations
+   * @param {Object} opts.operations - Array of PromoUpdateOperation (op, path, value).
    * @param {Object} [opts.headers] - Optional headers
-   * @returns {Promise<import("axios").AxiosResponse>}
+   * @returns {Promise<import("axios").AxiosResponse<object>>} Resolves with PatchedPromos.
+   * @throws When the request fails (400/401/404/500).
    */
   function patch({jwtToken, token, promoId, operations, headers}) {
     return client({
@@ -140,14 +147,15 @@ function promosFactory({client, internalAuthTokenProvider}) {
   }
 
   /**
-   * POST /promos/:promoId/rules - add promo rule. API does not accept query params.
+   * POST /promos/:promoId/rules - add promo rule. No query params. Requires BETTEREZ_APP. May emit promo.updated.
    * @param {Object} opts
    * @param {string} [opts.token] - API key
    * @param {string} [opts.jwtToken] - JWT or internal auth symbol
    * @param {string} opts.promoId - Promo id
-   * @param {Object} opts.rule - Rule payload
+   * @param {Object} opts.rule - Rule payload (PromoRule).
    * @param {Object} [opts.headers] - Optional headers
-   * @returns {Promise<import("axios").AxiosResponse>}
+   * @returns {Promise<import("axios").AxiosResponse<object>>} Resolves with Promo including new rule.
+   * @throws When the request fails (400/401/404/500). Body: WRONG_DATA, INVALID_PRODUCT_ID, INVALID_FARE_ID, etc.
    */
   function addRule({jwtToken, token, promoId, rule, headers}) {
     return client({
@@ -159,15 +167,16 @@ function promosFactory({client, internalAuthTokenProvider}) {
   }
 
   /**
-   * PUT /promos/:promoId/rules/:ruleId - update promo rule. API does not accept query params.
+   * PUT /promos/:promoId/rules/:ruleId - update promo rule. No query params. Requires BETTEREZ_APP. Emits promo.updated.
    * @param {Object} opts
    * @param {string} [opts.token] - API key
    * @param {string} [opts.jwtToken] - JWT or internal auth symbol
    * @param {string} opts.promoId - Promo id
    * @param {string} opts.ruleId - Rule id
-   * @param {Object} opts.rule - Rule payload
+   * @param {Object} opts.rule - Full rule payload (PromoRule).
    * @param {Object} [opts.headers] - Optional headers
-   * @returns {Promise<import("axios").AxiosResponse>}
+   * @returns {Promise<import("axios").AxiosResponse<object>>} Resolves with updated Promo.
+   * @throws When the request fails (400/401/404/500). Body: WRONG_DATA, INVALID_PRODUCT_ID, INVALID_FARE_ID, etc.
    */
   function updateRule({jwtToken, token, promoId, ruleId, rule, headers}) {
     return client({

package/src/endpoints/inventory/station-groups.js

@@ -20,14 +20,12 @@ function stationGroupsFactory({client, internalAuthTokenProvider}) {
    * GET /station-groups - list station groups.
    * @param {Object} opts
    * @param {string} [opts.token] - API key
-   * @param {string} [opts.jwtToken] - JWT or internal auth symbol
-   * @param {StationGroupsListQuery} [opts.query] - Query params
+   * @param {StationGroupsListQuery} [opts.query] - Query params (e.g. providerIds)
    * @param {Object} [opts.headers] - Optional headers
    * @returns {Promise<import("axios").AxiosResponse>}
    */
   function all({token, query = {}, headers}) {
-    return client({
-      url: "/station-groups",
+    return client.get("/station-groups", {
       params: query,
       headers: authorizationHeaders({token, internalAuthTokenProvider, headers})
     });

package/src/endpoints/inventory/taxes.js

@@ -6,6 +6,15 @@ const {authorizationHeaders} = require("../endpoints_helpers.js");
  * @property {string} [providerIds] - The id of the providers to get taxes for
  */
 
+/**
+ * Query params for GET /taxes/exceptions (btrz-api-inventory). See get-tax-exceptions-handler getSpec().
+ * @typedef {Object} TaxExceptionsListQuery
+ * @property {string} [originId] - Origin station id (24 hex characters)
+ * @property {string} [destinationId] - Destination station id (24 hex characters)
+ * @property {number} [page] - Page to return
+ * @property {number} [recordsPerPage] - Records per page
+ */
+
 /**
  * Factory for taxes API (btrz-api-inventory).
  * @param {Object} deps
@@ -99,7 +108,7 @@ function taxesFactory({client, internalAuthTokenProvider}) {
         url: "/taxes/exceptions",
         method: "post",
         headers: authorizationHeaders({token, jwtToken, internalAuthTokenProvider, headers}),
-        data: taxException
+        data: {taxException}
       });
     },
     /**
@@ -117,7 +126,7 @@ function taxesFactory({client, internalAuthTokenProvider}) {
         url: `/taxes/exceptions/${taxExceptionId}`,
         method: "put",
         headers: authorizationHeaders({token, jwtToken, internalAuthTokenProvider, headers}),
-        data: taxException
+        data: {taxException}
       });
     },
     /**

package/src/endpoints/inventory/traveller-card-providers-types.js

@@ -2,6 +2,7 @@ const {authorizationHeaders} = require("./../endpoints_helpers.js");
 
 /**
  * Factory for traveller-card-providers types API (btrz-api-inventory).
+ * Returns the list of supported traveller card provider types (e.g. "custom", "caa").
  * @param {Object} deps
  * @param {import("axios").AxiosInstance} deps.client
  * @param {{ getToken: function(): string }} [deps.internalAuthTokenProvider]
@@ -9,16 +10,16 @@ const {authorizationHeaders} = require("./../endpoints_helpers.js");
  */
 function travellerCardProvidersTypesFactory({client, internalAuthTokenProvider}) {
   /**
-   * GET /traveller-card-providers/types - list traveller card provider types. API does not accept query params.
+   * GET /traveller-card-providers/types - list traveller card provider types (e.g. "custom", "caa"). No query or path params.
    * @param {Object} opts
    * @param {string} [opts.token] - API key
+   * @param {string} [opts.jwtToken] - JWT or internal auth symbol
    * @param {Object} [opts.headers] - Optional headers
-   * @returns {Promise<import("axios").AxiosResponse>}
+   * @returns {Promise<import("axios").AxiosResponse<{ travellerCardProviderTypes: Array<{ type: string, properties: Object }> }>>}
    */
-  function all({token, query = {}, headers}) {
+  function all({token, jwtToken, headers}) {
     return client.get("/traveller-card-providers/types", {
-      params: query,
-      headers: authorizationHeaders({token, internalAuthTokenProvider, headers})
+      headers: authorizationHeaders({token, jwtToken, internalAuthTokenProvider, headers})
     });
   }
 

package/src/endpoints/inventory/vehicle-types.js

@@ -11,16 +11,15 @@ const {
  */
 function vehicleTypesFactory({client, internalAuthTokenProvider}) {
   /**
-   * GET /vehicle-types - list vehicle types (e.g. Bus, Shuttle, Van, Train, Ferry, Tram).
+   * GET /vehicle-types - list vehicle types (e.g. Bus, Shuttle, Van, Train, Ferry, Tram). No query or path params.
    * @param {Object} opts
    * @param {string} [opts.token] - API key
    * @param {string} [opts.jwtToken] - JWT or internal auth symbol
    * @param {Object} [opts.headers] - Optional headers
-   * @returns {Promise<import("axios").AxiosResponse>}
+   * @returns {Promise<import("axios").AxiosResponse<{ vehicleTypes: Array<{ _id: string, name: string }> }>>}
    */
-  function all({token, jwtToken, query = {}, headers}) {
+  function all({token, jwtToken, headers}) {
     return client.get("/vehicle-types", {
-      params: query,
       headers: authorizationHeaders({token, jwtToken, internalAuthTokenProvider, headers})
     });
   }

package/src/endpoints/inventory/vehicles.js

@@ -41,12 +41,13 @@ function vehiclesFactory({client, internalAuthTokenProvider}) {
    */
   function all({
     token,
+    jwtToken,
     query = {},
     headers
   }) {
     return client.get("/vehicles", {
       params: query,
-      headers: authorizationHeaders({token, internalAuthTokenProvider, headers})
+      headers: authorizationHeaders({token, jwtToken, internalAuthTokenProvider, headers})
     });
   }
 
@@ -59,9 +60,9 @@ function vehiclesFactory({client, internalAuthTokenProvider}) {
    * @param {Object} [opts.headers] - Optional headers
    * @returns {Promise<import("axios").AxiosResponse>}
    */
-  function get({vehicleId, token, headers}) {
+  function get({vehicleId, token, jwtToken, headers}) {
     return client.get(`/vehicles/${vehicleId}`, {
-      headers: authorizationHeaders({token, internalAuthTokenProvider, headers})
+      headers: authorizationHeaders({token, jwtToken, internalAuthTokenProvider, headers})
     });
   }
 

package/src/endpoints/notifications/customers.js

@@ -62,7 +62,7 @@ function customersFactory({
    * @param {Object} opts
    * @param {string} [opts.token] - API key
    * @param {CustomersActivationPostQuery} [opts.query] - Query params (providerId required)
-   * @param {Object} [opts.data] - Request body (CustomerForActivation)
+   * @param {Object} opts.data - Body: CustomerForActivation (firstName, lastName, email; optional activateCustomerEmailLoginToken)
    * @param {Object} [opts.headers] - Optional headers
    * @returns {Promise<import("axios").AxiosResponse>}
    */

package/src/endpoints/notifications/external-customers.js

@@ -0,0 +1,41 @@
+const {authorizationHeaders} = require("../endpoints_helpers.js");
+
+/**
+ * Request body for POST /external-customers/ado/registration (btrz-api-notifications).
+ * @typedef {Object} SaldoMaxRegistrationRequest
+ * @property {string} email - User email to register in Saldo Max (verification code is sent to this email).
+ */
+
+/**
+ * Factory for external-customers API (btrz-api-notifications). Saldo Max (ADO) verification-code registration.
+ * @param {Object} deps
+ * @param {import("axios").AxiosInstance} deps.client
+ * @param {{ getToken: function(): string }} [deps.internalAuthTokenProvider]
+ * @returns {{ requestSaldoMaxVerificationCode: function }}
+ */
+function externalCustomersFactory({client, internalAuthTokenProvider}) {
+  /**
+   * POST /external-customers/ado/registration – Request a Saldo Max (ADO) verification code for the given email.
+   * Requires BETTEREZ_APP JWT. Forwards to Saldo Max; sends verification code to the email.
+   * @param {Object} opts
+   * @param {string} [opts.token] - API key
+   * @param {string} [opts.jwtToken] - JWT (BETTEREZ_APP audience)
+   * @param {SaldoMaxRegistrationRequest} opts.data - Body: { email } (or { body: { email } })
+   * @param {Object} [opts.headers] - Optional headers
+   * @returns {Promise<import("axios").AxiosResponse<{ code: string, message: string }>>}
+   */
+  function requestSaldoMaxVerificationCode({data, token, jwtToken, headers}) {
+    return client({
+      url: "/external-customers/ado/registration",
+      method: "post",
+      headers: authorizationHeaders({token, jwtToken, internalAuthTokenProvider, headers}),
+      data
+    });
+  }
+
+  return {
+    requestSaldoMaxVerificationCode
+  };
+}
+
+module.exports = externalCustomersFactory;

package/src/endpoints/notifications/pdfs.js

@@ -78,9 +78,6 @@ function pdfFactory({
     if (query.type === "transaction") {
       url = `/pdf-transactions/${itemId}`;
     }
-    if (query.type === "transaction") {
-      url = `/pdf-transactions/${itemId}`;
-    }
     if (query.type === "ssr") {
       url = `/pdf-ssrs/${itemId}`;
     }

package/src/endpoints/operations/accounting_items.js

@@ -26,12 +26,14 @@ function accountingItemsFactory({
    * GET /accounting-items - list accounting items.
    * @param {Object} opts
    * @param {string} [opts.token] - API key
+   * @param {string} [opts.jwtToken] - JWT or internal auth symbol
    * @param {AccountingItemsListQuery} [opts.query] - Query params (all optional)
    * @param {Object} [opts.headers] - Optional headers
    * @returns {Promise<import("axios").AxiosResponse>}
    */
   function all({
     token,
+    jwtToken,
     query = {},
     headers
   }) {
@@ -39,6 +41,7 @@ function accountingItemsFactory({
       params: query,
       headers: authorizationHeaders({
         token,
+        jwtToken,
         internalAuthTokenProvider,
         headers
       })
@@ -49,16 +52,18 @@ function accountingItemsFactory({
    * GET /accounting-items/:accountingItemId - get accounting item by id. API does not accept query params.
    * @param {Object} opts
    * @param {string} [opts.token] - API key
-   * @param {string} opts.accountingItemId - Accounting item id
+   * @param {string} [opts.jwtToken] - JWT or internal auth symbol
+   * @param {string} opts.accountingItemId - Accounting item id (ObjectId format)
    * @param {Object} [opts.headers] - Optional headers
    * @returns {Promise<import("axios").AxiosResponse>}
    */
   function get({
-    accountingItemId, token, headers
+    accountingItemId, token, jwtToken, headers
   }) {
     return client.get(`/accounting-items/${accountingItemId}`, {
       headers: authorizationHeaders({
         token,
+        jwtToken,
         internalAuthTokenProvider,
         headers
       })

package/src/endpoints/operations/flexpasses.js

@@ -9,14 +9,16 @@ const {authorizationHeaders} = require("./../endpoints_helpers.js");
  */
 function flexpassesFactory({client, internalAuthTokenProvider}) {
   /**
-   * DELETE /flexpasses/:flexpassId/scannings/:tripId - delete scan by trip id. API does not accept query params.
+   * DELETE /flexpasses/:flexpassId/scannings/:tripId - deletes one flexpass scanning for the given trip ID.
+   * Removes the scan matching tripId from the flexpass's scans; if multiple scans exist for the same tripId, only one is removed.
+   * Requires operations API base URL (e.g. .../operations). No query parameters.
    * @param {Object} opts
-   * @param {string} [opts.token] - API key
-   * @param {string} [opts.jwtToken] - JWT or internal auth symbol
-   * @param {string} opts.flexpassId - Flexpass id
-   * @param {string} opts.tripId - Trip id
-   * @param {Object} [opts.headers] - Optional headers
-   * @returns {Promise<import("axios").AxiosResponse>}
+   * @param {string} [opts.token] - API key (X-API-KEY)
+   * @param {string} [opts.jwtToken] - JWT or internal auth (Authorization Bearer)
+   * @param {string} opts.flexpassId - Flexpass document ID (Mongo ObjectId string)
+   * @param {string} opts.tripId - Trip identifier of the scan to remove (e.g. routeId_scheduleName_date)
+   * @param {Object} [opts.headers] - Optional request headers
+   * @returns {Promise<import("axios").AxiosResponse<{ flexpassDeleted?: string }>>}
    */
   function deleteScanBytripId({jwtToken, token, flexpassId, tripId, headers}) {
     return client({

package/src/endpoints/operations/gift-certificates.js

@@ -0,0 +1,39 @@
+const {authorizationHeaders} = require("../endpoints_helpers.js");
+
+/**
+ * Factory for gift-certificates API (btrz-api-operations).
+ * @param {Object} deps
+ * @param {import("axios").AxiosInstance} deps.client
+ * @param {{ getToken: function(): string }} [deps.internalAuthTokenProvider]
+ * @returns {Object} gift-certificates API methods
+ */
+function giftCertificatesFactory({client, internalAuthTokenProvider}) {
+  /**
+   * GET /gift-certificates - list paid gift certificates for a customer. Paginated; requires customer JWT when used with JwtAuth.
+   * @param {Object} opts
+   * @param {string} [opts.token] - API key (X-API-KEY)
+   * @param {string} [opts.jwtToken] - JWT or internal auth (Authorization Bearer); when using customer JWT, must match customer param
+   * @param {string} opts.customer - Customer number to filter by (required)
+   * @param {number} [opts.page] - 1-based page number; page size is 20
+   * @param {Object} [opts.headers] - Optional request headers
+   * @returns {Promise<import("axios").AxiosResponse<{ giftCertificates: Array<object>, count: number, next?: string, previous?: string }>>}
+   */
+  function list({jwtToken, token, customer, page, headers}) {
+    const params = {customer};
+    if (page != null) {
+      params.page = page;
+    }
+    return client({
+      url: "/gift-certificates",
+      method: "get",
+      params,
+      headers: authorizationHeaders({token, jwtToken, internalAuthTokenProvider, headers})
+    });
+  }
+
+  return {
+    list
+  };
+}
+
+module.exports = giftCertificatesFactory;

package/src/endpoints/operations/loans.js

@@ -24,15 +24,17 @@ function loansFactory({
   client, internalAuthTokenProvider
 }) {
   /**
-   * GET /loans - list loans.
+   * GET /loans - list loans for the account or provider. Paginated (20 per page). Requires operations API base URL.
    * @param {Object} opts
-   * @param {string} [opts.token] - API key
-   * @param {LoansListQuery} [opts.query] - Query params (all optional)
-   * @param {Object} [opts.headers] - Optional headers
-   * @returns {Promise<import("axios").AxiosResponse>}
+   * @param {string} [opts.token] - API key (X-API-KEY)
+   * @param {string} [opts.jwtToken] - JWT or internal auth (Authorization Bearer)
+   * @param {LoansListQuery} [opts.query] - Query params (all optional): page, shiftId, type, trxId, status, providerId
+   * @param {Object} [opts.headers] - Optional request headers
+   * @returns {Promise<import("axios").AxiosResponse<{ loans: Array<object>, count: number, next?: string, previous?: string }>>}
    */
   function all({
     token,
+    jwtToken,
     query = {},
     headers
   }) {
@@ -40,6 +42,7 @@ function loansFactory({
       params: query,
       headers: authorizationHeaders({
         token,
+        jwtToken,
         internalAuthTokenProvider,
         headers
       })
@@ -47,19 +50,21 @@ function loansFactory({
   }
 
   /**
-   * GET /loans/:loanId - get loan by id. API does not accept query params.
+   * GET /loans/:loanId - get a single loan by ID. Requires operations API base URL.
    * @param {Object} opts
-   * @param {string} [opts.token] - API key
-   * @param {string} opts.loanId - Loan id
-   * @param {Object} [opts.headers] - Optional headers
-   * @returns {Promise<import("axios").AxiosResponse>}
+   * @param {string} [opts.token] - API key (X-API-KEY)
+   * @param {string} [opts.jwtToken] - JWT or internal auth (Authorization Bearer)
+   * @param {string} opts.loanId - Loan document ID (24 hex characters)
+   * @param {Object} [opts.headers] - Optional request headers
+   * @returns {Promise<import("axios").AxiosResponse<{ loan: object }>>}
    */
   function get({
-    loanId, token, headers
+    loanId, token, jwtToken, headers
   }) {
     return client.get(`/loans/${loanId}`, {
       headers: authorizationHeaders({
         token,
+        jwtToken,
         internalAuthTokenProvider,
         headers
       })

package/src/endpoints/operations/movements.js

@@ -1,5 +1,15 @@
 const {authorizationHeaders} = require("./../endpoints_helpers.js");
 
+/**
+ * Request body for POST /movements (btrz-api-operations). See MovementPostData in movements models.
+ * @typedef {Object} MovementPostData
+ * @property {Array<{ _id: string, section?: string, sectionName?: string, seat?: string, row?: string, seatId?: string }>} tickets - Tickets to move (same transaction if more than one). Each must have _id; optional seat fields for destination seatmap.
+ * @property {{ routeId: string, scheduleId: string, date: string }} newManifest - Destination manifest: routeId (ObjectId), scheduleId (UUID), date (YYYY-MM-DD).
+ * @property {string} channel - Channel of the movement (e.g. backoffice). Must be a valid backoffice channel.
+ * @property {boolean} [allowsDifferentTrx] - If true, allows moving tickets from different transactions.
+ * @property {boolean} [newdesign] - If true, uses new seatmap design for accommodation.
+ */
+
 /**
  * Factory for movements API (btrz-api-operations).
  * @param {Object} deps
@@ -9,13 +19,14 @@ const {authorizationHeaders} = require("./../endpoints_helpers.js");
  */
 function movementsFactory({client, internalAuthTokenProvider}) {
   /**
-   * POST /movements - create movement. API does not accept query params.
+   * POST /movements - create a movement (move tickets to another manifest). No query params.
    * @param {Object} opts
-   * @param {string} [opts.token] - API key
-   * @param {string} [opts.jwtToken] - JWT or internal auth symbol
-   * @param {Object} opts.movement - Movement payload
-   * @param {Object} [opts.headers] - Optional headers
-   * @returns {Promise<import("axios").AxiosResponse>}
+   * @param {string} [opts.token] - API key (X-API-KEY)
+   * @param {string} [opts.jwtToken] - JWT or internal auth (Authorization Bearer)
+   * @param {MovementPostData} opts.movement - Request body: tickets, newManifest, channel; optional allowsDifferentTrx, newdesign
+   * @param {Object} [opts.query] - Optional query params (API accepts none)
+   * @param {Object} [opts.headers] - Optional request headers
+   * @returns {Promise<import("axios").AxiosResponse<{}>>}
    */
   function create({token, jwtToken, movement, query = {}, headers}) {
     return client({