@insurance-broker/api-client 1.48.0 → 2.3.0

package/dist/schema.d.ts

@@ -3336,6 +3336,8 @@ export interface paths {
          *     **Nothing here defines a feature.** A key that is not already in the catalogue is refused: which features exist is configuration, and a surface that could mint one would create keys no gate reads.
          *
          *     **Every broker on this plan is affected**, including ones nobody named. This is the route on the platform with the widest blast radius per request, which is why it has a permission of its own rather than sharing tenant provisioning's.
+         *
+         *     **Two operators granting the same feature at once both get an answer.** The loser of the insert race is put back through the change branch and answered `200`, exactly as if it had arrived a moment later. `409` is reserved for the row still moving after repeated attempts, and says to read the plan again and decide again.
          */
         post: operations["GrantPlanFeature"];
         delete?: never;
@@ -3392,6 +3394,8 @@ export interface paths {
          *     **An expiry must be in the future.** An override that had already expired would look like something was granted when nothing was.
          *
          *     `201` says the override is new; `200` says an existing one was restated. The whole row is restated rather than patched, because a value, a reason and an expiry only make sense together — a patched value under an old reason describes a decision that has since changed.
+         *
+         *     **Two operators overriding the same feature at once both get an answer.** The loser of the insert race is put back through the change branch and answered `200`. `409` is reserved for the row still moving after repeated attempts.
          */
         post: operations["OverrideTenantEntitlement"];
         delete?: never;
@@ -3680,6 +3684,32 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/policies/{id}/documents/{documentId}/download-links": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Mints a short-lived, single-use URL for a client that cannot send a header
+         * @description DOC-003, ADR-0034 section 7. Answers `{ url, expiresAtUtc }` for one document of one policy.
+         *
+         *     **This is for the clients that cannot send an `Authorization` header** - a native viewer, an image tag, an operating system downloader. Anything that can send a header should fetch `/content` instead.
+         *
+         *     **The URL is single-use and expires in minutes.** Treat it as spent the moment it is handed to anything. `expiresAtUtc` is this deployment's configured lifetime, so read it rather than assuming five minutes.
+         *
+         *     A document whose scan verdict is not `Clean` is refused here as well as at download, and the refusal names the verdict.
+         */
+        post: operations["MintPolicyDocumentDownloadLink"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/v1/document-templates": {
         parameters: {
             query?: never;
@@ -4035,7 +4065,13 @@ export interface paths {
         };
         /**
          * Everything filed against this customer's policies, newest first
-         * @description Lists the documents on every policy this customer holds — policy documents, certificates, invoices, receipts and correspondence. A document is quarantined the moment it is stored and only a malware scan moves it, so a row whose verdict is not Clean is listed and cannot be downloaded.
+         * @description Lists the documents on every policy this customer holds - policy documents, certificates, invoices, receipts and correspondence - paged by cursor.
+         *
+         *     A document is quarantined the moment it is stored and only a malware scan moves it, so a row whose `scanVerdict` is not `Clean` is listed here and cannot be downloaded. The refusal names which verdict it was.
+         *
+         *     **Paged, and the shape changed in step 11.8** (issue #177). This answers `{ items, nextCursor }` where it used to answer a bare array capped at a hundred rows, past which the oldest documents were unreachable. Pass `nextCursor` back as `cursor`; a null one means this is the last page.
+         *
+         *     For the documents of one policy rather than of all of them, use `/customer/policies/{id}/documents`.
          */
         get: operations["ListCustomerPolicyDocuments"];
         put?: never;
@@ -4086,6 +4122,149 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
+    "/api/v1/customer/policy-documents/{documentId}/download-links": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Mints a short-lived, single-use URL for a viewer that cannot send a header
+         * @description DOC-003, ADR-0034 section 7. Answers `{ url, expiresAtUtc }` for one of your own documents.
+         *
+         *     **This is for the clients that cannot send an `Authorization` header** - your device's own PDF viewer, an image tag, an operating system downloader. Anything that can send a header should fetch `/content` instead.
+         *
+         *     **The URL is single-use and expires in minutes.** Treat it as spent the moment you hand it to anything: a viewer that probes it before fetching will consume it. Mint one per view rather than caching one. `expiresAtUtc` is this deployment's configured lifetime, so read it rather than assuming five minutes.
+         *
+         *     A document whose scan verdict is not `Clean` is refused here as well as at download, and the refusal names the verdict. A document belonging to another customer answers exactly as one that does not exist.
+         */
+        post: operations["MintCustomerPolicyDocumentDownloadLink"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/customer/policies": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * The policies your broker has placed for you, most recent first
+         * @description POL-006. Every policy of yours, paged by cursor.
+         *
+         *     **You are not named in the request.** There is no customer field and no broker field: the list is whoever is signed in, resolved from the session. Another person's policies are not in it - not filtered out of it, but absent, because a policy that is not yours is not visible to this route at all.
+         *
+         *     **`status` is not the answer to "am I covered today".** That question is the status and the cover dates together: a policy reading `Active` whose cover period has ended is an ordinary row, and so is one reading `Expired` that a renewal later reinstates (ADR-0035 section 4). Both dates are on every row.
+         *
+         *     **`insurerId` and `productId` are identifiers, not names.** The insurer and the product are records your broker's catalogue owns; read their names from their own routes.
+         *
+         *     Your broker's migration working notes are not here. A policy carried across from an older system says so in `source`, and what the old system recorded verbatim is a separate record with a permission of its own.
+         */
+        get: operations["ListCustomerPolicies"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/customer/policies/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * One of your own policies
+         * @description POL-006. When the cover runs from and to, who it is placed with, what it costs and where it is in its life.
+         *
+         *     Another person's policy and a policy that does not exist are one 404, because a policy belonging to somebody else is not visible to this route at all rather than hidden from it by a filter somebody remembered to write.
+         */
+        get: operations["GetCustomerPolicy"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/customer/policies/{id}/documents": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * The documents filed against one of your policies, newest first
+         * @description POL-006 and DOC-003. What your broker has filed against this policy - the policy document itself, certificates, invoices, receipts and correspondence - paged by cursor.
+         *
+         *     A document is quarantined the moment it is stored and only a malware scan moves it, so a row whose `scanVerdict` is not `Clean` is listed here and cannot be downloaded. The refusal names which verdict it was.
+         *
+         *     A policy belonging to somebody else answers exactly as one that does not exist.
+         */
+        get: operations["ListCustomerPolicyDocumentsForPolicy"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/customer/policies/{id}/documents/{documentId}/download-links": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Mints a short-lived, single-use URL for a viewer that cannot send a header
+         * @description DOC-003, ADR-0034 section 7. Answers `{ url, expiresAtUtc }` for one document of one of your policies.
+         *
+         *     **This is for the clients that cannot send an `Authorization` header** - your device's own PDF viewer, an image tag, an operating system downloader. Anything that can send a header should fetch `/content` instead.
+         *
+         *     **The URL is single-use and expires in minutes.** Treat it as spent the moment you hand it to anything: a viewer that probes it before fetching will consume it. Mint one per view rather than caching one. `expiresAtUtc` is this deployment's configured lifetime, so read it rather than assuming five minutes.
+         *
+         *     A document whose scan verdict is not `Clean` is refused here as well as at download, and the refusal names the verdict.
+         */
+        post: operations["MintCustomerPolicyDocumentDownloadLinkForPolicy"];
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/api/v1/policy-documents/download-links/{token}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /** Redeems a short-lived download link and streams the policy document it names. */
+        get: operations["RedeemPolicyDocumentDownloadLink"];
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
     "/api/v1/quote-requests": {
         parameters: {
             query?: never;
@@ -5443,6 +5622,10 @@ export interface components {
             recordedAtUtc: string;
             state: string;
         };
+        CustomerPolicyPage: {
+            items: components["schemas"]["PolicyResponse"][];
+            nextCursor: null | string;
+        };
         CustomerPresentedQuoteResponse: {
             /** Format: uuid */
             presentationVersionId: string;
@@ -6544,6 +6727,15 @@ export interface components {
             sortOrder: number | string;
             features: components["schemas"]["PlatformPlanFeatureResponse"][];
         };
+        PolicyDocumentDownloadLinkResponse: {
+            url: string;
+            /** Format: date-time */
+            expiresAtUtc: string;
+        };
+        PolicyDocumentPage: {
+            items: components["schemas"]["PolicyDocumentResponse"][];
+            nextCursor: null | string;
+        };
         PolicyDocumentResponse: {
             /** Format: uuid */
             id: string;
@@ -15425,6 +15617,15 @@ export interface operations {
                 };
                 content?: never;
             };
+            /** @description Conflict */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ProblemDetails"];
+                };
+            };
         };
     };
     WithdrawPlanFeature: {
@@ -15554,6 +15755,15 @@ export interface operations {
                 };
                 content?: never;
             };
+            /** @description Conflict */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ProblemDetails"];
+                };
+            };
         };
     };
     WithdrawTenantEntitlement: {
@@ -16107,6 +16317,45 @@ export interface operations {
             };
         };
     };
+    MintPolicyDocumentDownloadLink: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                id: string;
+                documentId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Created */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["PolicyDocumentDownloadLinkResponse"];
+                };
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Conflict */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ProblemDetails"];
+                };
+            };
+        };
+    };
     ListDocumentTemplates: {
         parameters: {
             query?: {
@@ -16954,6 +17203,7 @@ export interface operations {
     ListCustomerPolicyDocuments: {
         parameters: {
             query?: {
+                cursor?: string;
                 limit?: number | string;
             };
             header?: never;
@@ -16968,7 +17218,16 @@ export interface operations {
                     [name: string]: unknown;
                 };
                 content: {
-                    "application/json": components["schemas"]["PolicyDocumentResponse"][];
+                    "application/json": components["schemas"]["PolicyDocumentPage"];
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["HttpValidationProblemDetails"];
                 };
             };
         };
@@ -17038,6 +17297,221 @@ export interface operations {
             };
         };
     };
+    MintCustomerPolicyDocumentDownloadLink: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                documentId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Created */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["PolicyDocumentDownloadLinkResponse"];
+                };
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Conflict */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ProblemDetails"];
+                };
+            };
+        };
+    };
+    ListCustomerPolicies: {
+        parameters: {
+            query?: {
+                cursor?: string;
+                limit?: number | string;
+            };
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["CustomerPolicyPage"];
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["HttpValidationProblemDetails"];
+                };
+            };
+        };
+    };
+    GetCustomerPolicy: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["PolicyResponse"];
+                };
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    ListCustomerPolicyDocumentsForPolicy: {
+        parameters: {
+            query?: {
+                cursor?: string;
+                limit?: number | string;
+            };
+            header?: never;
+            path: {
+                id: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["PolicyDocumentPage"];
+                };
+            };
+            /** @description Bad Request */
+            400: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["HttpValidationProblemDetails"];
+                };
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+        };
+    };
+    MintCustomerPolicyDocumentDownloadLinkForPolicy: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                id: string;
+                documentId: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description Created */
+            201: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/json": components["schemas"]["PolicyDocumentDownloadLinkResponse"];
+                };
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Conflict */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ProblemDetails"];
+                };
+            };
+        };
+    };
+    RedeemPolicyDocumentDownloadLink: {
+        parameters: {
+            query?: never;
+            header?: never;
+            path: {
+                token: string;
+            };
+            cookie?: never;
+        };
+        requestBody?: never;
+        responses: {
+            /** @description OK */
+            200: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Not Found */
+            404: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content?: never;
+            };
+            /** @description Conflict */
+            409: {
+                headers: {
+                    [name: string]: unknown;
+                };
+                content: {
+                    "application/problem+json": components["schemas"]["ProblemDetails"];
+                };
+            };
+        };
+    };
     ListQuoteRequests: {
         parameters: {
             query?: {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@insurance-broker/api-client",
-  "version": "1.48.0",
+  "version": "2.3.0",
   "description": "Generated TypeScript client for the Insurance Broker Platform API. Do not edit by hand: regenerate with scripts/update-api-contract.",
   "license": "UNLICENSED",
   "private": false,