@learnorama/mozaik-sdk 0.1.0-staging.11.1

package/dist/api/admin-tutoring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-tutoring.js","names":[],"sources":["../../src/api/admin-tutoring/admin-tutoring.ts"],"sourcesContent":["/**\n * Generated by orval 🍺\n * Do not edit manually.\n * Mozaik backend\n * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.\n * OpenAPI spec version: 0.1.0\n */\nimport type {\n  AiDraftRead,\n  AiDraftReviewWrite,\n  EducationalGoalRead,\n  EducationalGoalWrite,\n  LevelRead,\n  LevelWrite,\n  ListAllRequestsParams,\n  ListExpiringDocumentsParams,\n  ListFeedbackParams,\n  ListPractitionersParams,\n  PractitionerDocumentListRead,\n  PractitionerPage,\n  PractitionerRead,\n  PractitionerWrite,\n  SubjectRead,\n  SubjectWrite,\n  TutoringFeedbackModerationWrite,\n  TutoringFeedbackPage,\n  TutoringQueuePage,\n  TutoringRequestAdminCloseWrite,\n  TutoringRequestAdminWrite,\n  TutoringRequestStaffRead\n} from '../../models';\n\nimport { request } from '../../client';\n\nexport const getListExpiringDocumentsUrl = (params?: ListExpiringDocumentsParams,) => {\n  const normalizedParams = new URLSearchParams();\n\n  Object.entries(params || {}).forEach(([key, value]) => {\n\n    if (value !== undefined) {\n      normalizedParams.append(key, value === null ? 'null' : String(value))\n    }\n  });\n\n  const stringifiedParams = normalizedParams.toString();\n\n  return stringifiedParams.length > 0 ? `/admin/tutoring/documents/expiring?${stringifiedParams}` : `/admin/tutoring/documents/expiring`\n}\n\n/**\n * Whose attestation lapses soon, as a query rather than a filing cabinet.\n *\n * An URSSAF *attestation de vigilance* is valid for six months and a lapsed one\n * is a compliance problem. The legacy stores it as a ``text`` column with one\n * ``ursaff_date`` beside it, so this question has no answer there at all.\n * @summary List Expiring Documents\n */\nexport const listExpiringDocuments = async (params?: ListExpiringDocumentsParams, options?: Parameters<typeof request>[1]): Promise<PractitionerDocumentListRead> => {\n\n  return request<PractitionerDocumentListRead>(getListExpiringDocumentsUrl(params),\n  {\n    ...options,\n    method: 'GET'\n\n\n  }\n);}\n\n\nexport const getListFeedbackUrl = (params?: ListFeedbackParams,) => {\n  const normalizedParams = new URLSearchParams();\n\n  Object.entries(params || {}).forEach(([key, value]) => {\n\n    if (value !== undefined) {\n      normalizedParams.append(key, value === null ? 'null' : String(value))\n    }\n  });\n\n  const stringifiedParams = normalizedParams.toString();\n\n  return stringifiedParams.length > 0 ? `/admin/tutoring/feedback?${stringifiedParams}` : `/admin/tutoring/feedback`\n}\n\n/**\n * Ratings, newest first. ``?publishable=false`` is the moderation queue.\n *\n * Tenant-scoped through the request it belongs to: a rating is a child's free\n * text, so it is reachable only by an operator who reaches the tenant.\n * @summary List Feedback\n */\nexport const listFeedback = async (params?: ListFeedbackParams, options?: Parameters<typeof request>[1]): Promise<TutoringFeedbackPage> => {\n\n  return request<TutoringFeedbackPage>(getListFeedbackUrl(params),\n  {\n    ...options,\n    method: 'GET'\n\n\n  }\n);}\n\n\nexport const getModerateFeedbackUrl = (feedbackId: number,) => {\n\n\n\n\n  return `/admin/tutoring/feedback/${feedbackId}/moderation`\n}\n\n/**\n * Clear a rating for the public showcase, or withhold it.\n *\n * ``PUT`` on a sub-resource rather than ``PATCH`` on the rating, mirroring\n * ``/admin/reviews/{id}/moderation``: the decision is the resource, and it is\n * idempotent.\n * @summary Moderate Feedback\n */\nexport const moderateFeedback = async (feedbackId: number,\n    tutoringFeedbackModerationWrite: TutoringFeedbackModerationWrite, options?: Parameters<typeof request>[1]): Promise<void> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<void>(getModerateFeedbackUrl(feedbackId),\n  {\n    ...options,\n    method: 'PUT',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(tutoringFeedbackModerationWrite)\n  }\n);}\n\n\nexport const getCreateGoalUrl = () => {\n\n\n\n\n  return `/admin/tutoring/goals`\n}\n\n/**\n * @summary Create Goal\n */\nexport const createGoal = async (educationalGoalWrite: EducationalGoalWrite, options?: Parameters<typeof request>[1]): Promise<EducationalGoalRead> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<EducationalGoalRead>(getCreateGoalUrl(),\n  {\n    ...options,\n    method: 'POST',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(educationalGoalWrite)\n  }\n);}\n\n\nexport const getAmendGoalUrl = (goalId: number,) => {\n\n\n\n\n  return `/admin/tutoring/goals/${goalId}`\n}\n\n/**\n * @summary Amend Goal\n */\nexport const amendGoal = async (goalId: number,\n    educationalGoalWrite: EducationalGoalWrite, options?: Parameters<typeof request>[1]): Promise<EducationalGoalRead> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<EducationalGoalRead>(getAmendGoalUrl(goalId),\n  {\n    ...options,\n    method: 'PATCH',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(educationalGoalWrite)\n  }\n);}\n\n\nexport const getCreateLevelUrl = () => {\n\n\n\n\n  return `/admin/tutoring/levels`\n}\n\n/**\n * @summary Create Level\n */\nexport const createLevel = async (levelWrite: LevelWrite, options?: Parameters<typeof request>[1]): Promise<LevelRead> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<LevelRead>(getCreateLevelUrl(),\n  {\n    ...options,\n    method: 'POST',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(levelWrite)\n  }\n);}\n\n\nexport const getAmendLevelUrl = (levelId: number,) => {\n\n\n\n\n  return `/admin/tutoring/levels/${levelId}`\n}\n\n/**\n * @summary Amend Level\n */\nexport const amendLevel = async (levelId: number,\n    levelWrite: LevelWrite, options?: Parameters<typeof request>[1]): Promise<LevelRead> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<LevelRead>(getAmendLevelUrl(levelId),\n  {\n    ...options,\n    method: 'PATCH',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(levelWrite)\n  }\n);}\n\n\nexport const getListPractitionersUrl = (params?: ListPractitionersParams,) => {\n  const normalizedParams = new URLSearchParams();\n\n  Object.entries(params || {}).forEach(([key, value]) => {\n\n    if (value !== undefined) {\n      normalizedParams.append(key, value === null ? 'null' : String(value))\n    }\n  });\n\n  const stringifiedParams = normalizedParams.toString();\n\n  return stringifiedParams.length > 0 ? `/admin/tutoring/practitioners?${stringifiedParams}` : `/admin/tutoring/practitioners`\n}\n\n/**\n * Who can take work, filtered the way the question is actually asked.\n *\n * ``role``, ``capability``, ``subjectId`` and ``levelId`` together answer \"who\n * can take *this* request\", which is the only thing anybody wants from this\n * list. The legacy answers it with a different screen per role — nine of them,\n * plus two more for pelite.\n * @summary List Practitioners\n */\nexport const listPractitioners = async (params?: ListPractitionersParams, options?: Parameters<typeof request>[1]): Promise<PractitionerPage> => {\n\n  return request<PractitionerPage>(getListPractitionersUrl(params),\n  {\n    ...options,\n    method: 'GET'\n\n\n  }\n);}\n\n\nexport const getAmendPractitionerUrl = (userId: number,) => {\n\n\n\n\n  return `/admin/tutoring/practitioners/${userId}`\n}\n\n/**\n * Availability, capabilities and competencies in one call.\n *\n * Competencies are replaced wholesale rather than diffed: the screen shows a\n * checklist and submits it. Absent means unchanged; an empty list means none,\n * which is a real instruction and has to be distinguishable from absence —\n * hence ``exclude_unset``.\n * @summary Amend Practitioner\n */\nexport const amendPractitioner = async (userId: number,\n    practitionerWrite: PractitionerWrite, options?: Parameters<typeof request>[1]): Promise<PractitionerRead> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<PractitionerRead>(getAmendPractitionerUrl(userId),\n  {\n    ...options,\n    method: 'PATCH',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(practitionerWrite)\n  }\n);}\n\n\nexport const getListPractitionerDocumentsUrl = (userId: number,) => {\n\n\n\n\n  return `/admin/tutoring/practitioners/${userId}/documents`\n}\n\n/**\n * One practitioner's compliance paperwork. Metadata only, never the file.\n * @summary List Practitioner Documents\n */\nexport const listPractitionerDocuments = async (userId: number, options?: Parameters<typeof request>[1]): Promise<PractitionerDocumentListRead> => {\n\n  return request<PractitionerDocumentListRead>(getListPractitionerDocumentsUrl(userId),\n  {\n    ...options,\n    method: 'GET'\n\n\n  }\n);}\n\n\nexport const getListAllRequestsUrl = (params?: ListAllRequestsParams,) => {\n  const normalizedParams = new URLSearchParams();\n\n  Object.entries(params || {}).forEach(([key, value]) => {\n    const explodeParameters = [\"status\"];\n\n    if (Array.isArray(value) && explodeParameters.includes(key)) {\n      value.forEach((v) => {\n        normalizedParams.append(key, v === null ? 'null' : String(v));\n      });\n      return;\n    }\n\n    if (value !== undefined) {\n      normalizedParams.append(key, value === null ? 'null' : String(value))\n    }\n  });\n\n  const stringifiedParams = normalizedParams.toString();\n\n  return stringifiedParams.length > 0 ? `/admin/tutoring/requests?${stringifiedParams}` : `/admin/tutoring/requests`\n}\n\n/**\n * Every request in the tenants this operator reaches.\n *\n * Returns the queue shape rather than the staff shape on purpose: this is the\n * list screen, and a list of five hundred requests should not carry five hundred\n * statements. The staff detail shape is on the single-request route.\n * @summary List All Requests\n */\nexport const listAllRequests = async (params?: ListAllRequestsParams, options?: Parameters<typeof request>[1]): Promise<TutoringQueuePage> => {\n\n  return request<TutoringQueuePage>(getListAllRequestsUrl(params),\n  {\n    ...options,\n    method: 'GET'\n\n\n  }\n);}\n\n\nexport const getReadRequestUrl = (requestId: number,) => {\n\n\n\n\n  return `/admin/tutoring/requests/${requestId}`\n}\n\n/**\n * One request in full, including provenance and the staff note.\n * @summary Read Request\n */\nexport const readRequest = async (requestId: number, options?: Parameters<typeof request>[1]): Promise<TutoringRequestStaffRead> => {\n\n  return request<TutoringRequestStaffRead>(getReadRequestUrl(requestId),\n  {\n    ...options,\n    method: 'GET'\n\n\n  }\n);}\n\n\nexport const getAmendRequestUrl = (requestId: number,) => {\n\n\n\n\n  return `/admin/tutoring/requests/${requestId}`\n}\n\n/**\n * Reassign a stalled request, and say why, in one call.\n *\n * Partial: only fields present in the body are applied, so a client that knows\n * about one of them cannot blank the rest. Reassignment does **not** move the\n * status — a request routed to somebody else is still dispatched, and pretending\n * otherwise would corrupt the timestamp ladder every report reads.\n * @summary Amend Request\n */\nexport const amendRequest = async (requestId: number,\n    tutoringRequestAdminWrite: TutoringRequestAdminWrite, options?: Parameters<typeof request>[1]): Promise<TutoringRequestStaffRead> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<TutoringRequestStaffRead>(getAmendRequestUrl(requestId),\n  {\n    ...options,\n    method: 'PATCH',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(tutoringRequestAdminWrite)\n  }\n);}\n\n\nexport const getAdminCloseRequestUrl = (requestId: number,) => {\n\n\n\n\n  return `/admin/tutoring/requests/${requestId}/close`\n}\n\n/**\n * Close a request from the back office. Goes through the state machine.\n * @summary Admin Close Request\n */\nexport const adminCloseRequest = async (requestId: number,\n    tutoringRequestAdminCloseWrite: TutoringRequestAdminCloseWrite, options?: Parameters<typeof request>[1]): Promise<void> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<void>(getAdminCloseRequestUrl(requestId),\n  {\n    ...options,\n    method: 'POST',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(tutoringRequestAdminCloseWrite)\n  }\n);}\n\n\nexport const getReadDraftUrl = (requestId: number,) => {\n\n\n\n\n  return `/admin/tutoring/requests/${requestId}/draft`\n}\n\n/**\n * The latest draft for one request.\n *\n * ``404`` when there is none, which is the ordinary case: drafting is off by\n * default, and even switched on it produces nothing when the provider is\n * unreachable. A client must treat a missing draft as normal rather than as\n * an error — the request is answerable by a person either way.\n *\n * Only the latest. Re-drafting is not a feature yet, and returning a list\n * would promise one.\n * @summary Read Draft\n */\nexport const readDraft = async (requestId: number, options?: Parameters<typeof request>[1]): Promise<AiDraftRead> => {\n\n  return request<AiDraftRead>(getReadDraftUrl(requestId),\n  {\n    ...options,\n    method: 'GET'\n\n\n  }\n);}\n\n\nexport const getReviewDraftUrl = (requestId: number,) => {\n\n\n\n\n  return `/admin/tutoring/requests/${requestId}/draft/review`\n}\n\n/**\n * Score a draft, and optionally hand the request to a person.\n *\n * ``escalate`` stamps ``escalatedAt`` — the legacy's ``ai_to_live``. It is\n * taken from the body rather than inferred from a low ``vote``: a reviewer may\n * rate a draft poorly and still keep it as a starting point, or rate it well\n * and escalate anyway because the pupil needs a conversation.\n *\n * Re-reviewing overwrites the score. Escalation does not un-stamp, because\n * handing a request to a person is not a thing that gets taken back.\n *\n * The request's own status is untouched. A draft is not a state of the\n * request, and moving it here would corrupt the timestamp ladder the reports\n * read.\n * @summary Review Draft\n */\nexport const reviewDraft = async (requestId: number,\n    aiDraftReviewWrite: AiDraftReviewWrite, options?: Parameters<typeof request>[1]): Promise<AiDraftRead> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<AiDraftRead>(getReviewDraftUrl(requestId),\n  {\n    ...options,\n    method: 'PUT',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(aiDraftReviewWrite)\n  }\n);}\n\n\nexport const getCreateSubjectUrl = () => {\n\n\n\n\n  return `/admin/tutoring/subjects`\n}\n\n/**\n * Add a subject. Reference data, so ADMIN rather than SUPPORT.\n * @summary Create Subject\n */\nexport const createSubject = async (subjectWrite: SubjectWrite, options?: Parameters<typeof request>[1]): Promise<SubjectRead> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<SubjectRead>(getCreateSubjectUrl(),\n  {\n    ...options,\n    method: 'POST',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(subjectWrite)\n  }\n);}\n\n\nexport const getAmendSubjectUrl = (subjectId: number,) => {\n\n\n\n\n  return `/admin/tutoring/subjects/${subjectId}`\n}\n\n/**\n * @summary Amend Subject\n */\nexport const amendSubject = async (subjectId: number,\n    subjectWrite: SubjectWrite, options?: Parameters<typeof request>[1]): Promise<SubjectRead> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<SubjectRead>(getAmendSubjectUrl(subjectId),\n  {\n    ...options,\n    method: 'PATCH',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(subjectWrite)\n  }\n);}\n\n\n"],"mappings":";;;AAkCA,MAAa,+BAA+B,WAA0C;CACpF,MAAM,mBAAmB,IAAI,gBAAgB;CAE7C,OAAO,QAAQ,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,WAAW;EAErD,IAAI,UAAU,KAAA,GACZ,iBAAiB,OAAO,KAAK,UAAU,OAAO,SAAS,OAAO,KAAK,CAAC;CAExE,CAAC;CAED,MAAM,oBAAoB,iBAAiB,SAAS;CAEpD,OAAO,kBAAkB,SAAS,IAAI,sCAAsC,sBAAsB;AACpG;;;;;;;;;AAUA,MAAa,wBAAwB,OAAO,QAAsC,YAAmF;CAEnK,OAAO,QAAsC,4BAA4B,MAAM,GAC/E;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE;AAGF,MAAa,sBAAsB,WAAiC;CAClE,MAAM,mBAAmB,IAAI,gBAAgB;CAE7C,OAAO,QAAQ,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,WAAW;EAErD,IAAI,UAAU,KAAA,GACZ,iBAAiB,OAAO,KAAK,UAAU,OAAO,SAAS,OAAO,KAAK,CAAC;CAExE,CAAC;CAED,MAAM,oBAAoB,iBAAiB,SAAS;CAEpD,OAAO,kBAAkB,SAAS,IAAI,4BAA4B,sBAAsB;AAC1F;;;;;;;;AASA,MAAa,eAAe,OAAO,QAA6B,YAA2E;CAEzI,OAAO,QAA8B,mBAAmB,MAAM,GAC9D;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE;AAGF,MAAa,0BAA0B,eAAwB;CAK7D,OAAO,4BAA4B,WAAW;AAChD;;;;;;;;;AAUA,MAAa,mBAAmB,OAAO,YACnC,iCAAkE,YAA2D;CAE7H,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAAc,uBAAuB,UAAU,GACpD;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,+BAA+B;CACtD,CACF;AAAE;AAGF,MAAa,yBAAyB;CAKpC,OAAO;AACT;;;;AAKA,MAAa,aAAa,OAAO,sBAA4C,YAA0E;CAEnJ,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAA6B,iBAAiB,GACnD;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,oBAAoB;CAC3C,CACF;AAAE;AAGF,MAAa,mBAAmB,WAAoB;CAKlD,OAAO,yBAAyB;AAClC;;;;AAKA,MAAa,YAAY,OAAO,QAC5B,sBAA4C,YAA0E;CAEtH,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAA6B,gBAAgB,MAAM,GACxD;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,oBAAoB;CAC3C,CACF;AAAE;AAGF,MAAa,0BAA0B;CAKrC,OAAO;AACT;;;;AAKA,MAAa,cAAc,OAAO,YAAwB,YAAgE;CAEtH,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAAmB,kBAAkB,GAC1C;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,UAAU;CACjC,CACF;AAAE;AAGF,MAAa,oBAAoB,YAAqB;CAKpD,OAAO,0BAA0B;AACnC;;;;AAKA,MAAa,aAAa,OAAO,SAC7B,YAAwB,YAAgE;CAExF,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAAmB,iBAAiB,OAAO,GAChD;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,UAAU;CACjC,CACF;AAAE;AAGF,MAAa,2BAA2B,WAAsC;CAC5E,MAAM,mBAAmB,IAAI,gBAAgB;CAE7C,OAAO,QAAQ,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,WAAW;EAErD,IAAI,UAAU,KAAA,GACZ,iBAAiB,OAAO,KAAK,UAAU,OAAO,SAAS,OAAO,KAAK,CAAC;CAExE,CAAC;CAED,MAAM,oBAAoB,iBAAiB,SAAS;CAEpD,OAAO,kBAAkB,SAAS,IAAI,iCAAiC,sBAAsB;AAC/F;;;;;;;;;;AAWA,MAAa,oBAAoB,OAAO,QAAkC,YAAuE;CAE/I,OAAO,QAA0B,wBAAwB,MAAM,GAC/D;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE;AAGF,MAAa,2BAA2B,WAAoB;CAK1D,OAAO,iCAAiC;AAC1C;;;;;;;;;;AAWA,MAAa,oBAAoB,OAAO,QACpC,mBAAsC,YAAuE;CAE7G,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAA0B,wBAAwB,MAAM,GAC7D;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,iBAAiB;CACxC,CACF;AAAE;AAGF,MAAa,mCAAmC,WAAoB;CAKlE,OAAO,iCAAiC,OAAO;AACjD;;;;;AAMA,MAAa,4BAA4B,OAAO,QAAgB,YAAmF;CAEjJ,OAAO,QAAsC,gCAAgC,MAAM,GACnF;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE;AAGF,MAAa,yBAAyB,WAAoC;CACxE,MAAM,mBAAmB,IAAI,gBAAgB;CAE7C,OAAO,QAAQ,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,WAAW;EAGrD,IAAI,MAAM,QAAQ,KAAK,KAAK,CAFD,QAEiB,CAAC,CAAC,SAAS,GAAG,GAAG;GAC3D,MAAM,SAAS,MAAM;IACnB,iBAAiB,OAAO,KAAK,MAAM,OAAO,SAAS,OAAO,CAAC,CAAC;GAC9D,CAAC;GACD;EACF;EAEA,IAAI,UAAU,KAAA,GACZ,iBAAiB,OAAO,KAAK,UAAU,OAAO,SAAS,OAAO,KAAK,CAAC;CAExE,CAAC;CAED,MAAM,oBAAoB,iBAAiB,SAAS;CAEpD,OAAO,kBAAkB,SAAS,IAAI,4BAA4B,sBAAsB;AAC1F;;;;;;;;;AAUA,MAAa,kBAAkB,OAAO,QAAgC,YAAwE;CAE5I,OAAO,QAA2B,sBAAsB,MAAM,GAC9D;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE;AAGF,MAAa,qBAAqB,cAAuB;CAKvD,OAAO,4BAA4B;AACrC;;;;;AAMA,MAAa,cAAc,OAAO,WAAmB,YAA+E;CAElI,OAAO,QAAkC,kBAAkB,SAAS,GACpE;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE;AAGF,MAAa,sBAAsB,cAAuB;CAKxD,OAAO,4BAA4B;AACrC;;;;;;;;;;AAWA,MAAa,eAAe,OAAO,WAC/B,2BAAsD,YAA+E;CAErI,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAAkC,mBAAmB,SAAS,GACnE;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,yBAAyB;CAChD,CACF;AAAE;AAGF,MAAa,2BAA2B,cAAuB;CAK7D,OAAO,4BAA4B,UAAU;AAC/C;;;;;AAMA,MAAa,oBAAoB,OAAO,WACpC,gCAAgE,YAA2D;CAE3H,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAAc,wBAAwB,SAAS,GACpD;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,8BAA8B;CACrD,CACF;AAAE;AAGF,MAAa,mBAAmB,cAAuB;CAKrD,OAAO,4BAA4B,UAAU;AAC/C;;;;;;;;;;;;;AAcA,MAAa,YAAY,OAAO,WAAmB,YAAkE;CAEnH,OAAO,QAAqB,gBAAgB,SAAS,GACrD;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE;AAGF,MAAa,qBAAqB,cAAuB;CAKvD,OAAO,4BAA4B,UAAU;AAC/C;;;;;;;;;;;;;;;;;AAkBA,MAAa,cAAc,OAAO,WAC9B,oBAAwC,YAAkE;CAE1G,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAAqB,kBAAkB,SAAS,GACrD;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,kBAAkB;CACzC,CACF;AAAE;AAGF,MAAa,4BAA4B;CAKvC,OAAO;AACT;;;;;AAMA,MAAa,gBAAgB,OAAO,cAA4B,YAAkE;CAE9H,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAAqB,oBAAoB,GAC9C;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,YAAY;CACnC,CACF;AAAE;AAGF,MAAa,sBAAsB,cAAuB;CAKxD,OAAO,4BAA4B;AACrC;;;;AAKA,MAAa,eAAe,OAAO,WAC/B,cAA4B,YAAkE;CAE9F,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAAqB,mBAAmB,SAAS,GACtD;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,YAAY;CACnC,CACF;AAAE"}

package/dist/api/auth.d.ts

@@ -0,0 +1,92 @@
+
+import { $t as MeRead, Dr as CredentialsWrite, Kr as AuthorizationRead, Y as RefreshWrite, jr as CodeExchangeWrite, qr as AuthorizationParams, tn as LogoutWrite, z as SessionRead } from "../chunks/index.js";
+import { c as request } from "../chunks/client.js";
+//#region src/api/auth/auth.d.ts
+export declare const getAuthorizationUrl: (params: AuthorizationParams) => string;
+/**
+ * Build the Keycloak authorization URL for this client and this tenant.
+ *
+ * Everything cryptographic belongs to the caller: it generates ``state``, the
+ * PKCE verifier and the ``nonce``, and only ever sends the challenge. This
+ * endpoint contributes the one thing the caller cannot know — which identity
+ * provider to route to — and refuses an unsafe ``redirect_uri``.
+ *
+ * ``S256`` is hardcoded. ``plain`` is a valid PKCE method and provides no
+ * protection, so making it selectable would only ever be used by mistake.
+ *
+ * A resolved provider is passed as ``kc_idp_hint``. Aliases are case-sensitive
+ * at the broker and an unknown one silently falls back to the login form, which
+ * is why :func:`_resolve_provider_alias` validates against the registry instead
+ * of forwarding whatever arrived.
+ * @summary Authorization
+ */
+export declare const authorization: (params: AuthorizationParams, options?: Parameters<typeof request>[1]) => Promise<AuthorizationRead>;
+export declare const getReadMeUrl: () => string;
+/**
+ * Who the bearer of this token is, and what the session may do.
+ *
+ * No tokens in the response — this endpoint reissues nothing, and a shape with
+ * empty token fields would invite a client to store them. It is also the
+ * cheapest liveness check a client has: it exercises verification,
+ * tenant resolution and the account link in one call, so a 200 here means the
+ * whole chain is intact.
+ * @summary Read Me
+ */
+export declare const readMe: (options?: Parameters<typeof request>[1]) => Promise<MeRead>;
+export declare const getDeleteSessionUrl: () => string;
+/**
+ * Sign out, revoking the refresh token at the broker.
+ *
+ * Always 204. A logout that can fail is a logout users do not trust, and there
+ * is nothing useful for the caller to do about an unreachable broker — it is
+ * discarding its tokens either way. The failure is logged, not returned.
+ *
+ * The access token stays valid until it expires. That is inherent to verifying
+ * tokens offline, and it is why the realm keeps access-token lifetimes short
+ * rather than why this endpoint should pretend otherwise.
+ * @summary Delete Session
+ */
+export declare const deleteSession: (logoutWrite: LogoutWrite, options?: Parameters<typeof request>[1]) => Promise<void>;
+export declare const getCreateSessionFromCredentialsUrl: () => string;
+/**
+ * Log in with a username and password, via the broker's direct grant.
+ *
+ * Off unless ``AUTH_ALLOW_PASSWORD_GRANT`` says otherwise, and it should stay
+ * off wherever the client fleet allows: the grant defeats MFA, cannot reach a
+ * brokered partner, and puts the password through this process. It exists for
+ * the native apps already in the field.
+ *
+ * Rate limited on both the submitted username and the client address. Keyed on
+ * the lower-cased username so that case variation is not a way around the
+ * counter, and on the address so that spraying many usernames is bounded too.
+ * @summary Create Session From Credentials
+ */
+export declare const createSessionFromCredentials: (credentialsWrite: CredentialsWrite, options?: Parameters<typeof request>[1]) => Promise<SessionRead>;
+export declare const getRefreshSessionUrl: () => string;
+/**
+ * Exchange a refresh token for a new pair.
+ *
+ * Public: the refresh token *is* the credential, so requiring a valid access
+ * token as well would make the endpoint useless at the moment it is needed.
+ * Rotation happens at the broker, so the presented token stops working as the
+ * new one is issued.
+ *
+ * Returns the account as well as the tokens. That costs one indexed lookup and
+ * means a client resuming from cold storage does not need a second call to
+ * discover whether the account is still active — which it checks, because
+ * deactivation is a local decision Keycloak knows nothing about.
+ * @summary Refresh Session
+ */
+export declare const refreshSession: (refreshWrite: RefreshWrite, options?: Parameters<typeof request>[1]) => Promise<SessionRead>;
+export declare const getCreateSessionFromCodeUrl: () => string;
+/**
+ * Finish a brokered login: code plus verifier in, session out.
+ *
+ * Rate limited on the client address rather than on a user, because at this
+ * point there is no user — the code has not been exchanged yet. The limit is
+ * what stops a stolen code being brute-forced alongside a guessed verifier.
+ * @summary Create Session From Code
+ */
+export declare const createSessionFromCode: (codeExchangeWrite: CodeExchangeWrite, options?: Parameters<typeof request>[1]) => Promise<SessionRead>;
+//#endregion
+//# sourceMappingURL=auth.d.ts.map

package/dist/api/auth.js

@@ -0,0 +1,192 @@
+
+import { r as request } from "../chunks/client.js";
+//#region src/api/auth/auth.ts
+const getAuthorizationUrl = (params) => {
+	const normalizedParams = new URLSearchParams();
+	Object.entries(params || {}).forEach(([key, value]) => {
+		if (value !== void 0) normalizedParams.append(key, value === null ? "null" : String(value));
+	});
+	const stringifiedParams = normalizedParams.toString();
+	return stringifiedParams.length > 0 ? `/auth/authorization?${stringifiedParams}` : `/auth/authorization`;
+};
+/**
+* Build the Keycloak authorization URL for this client and this tenant.
+*
+* Everything cryptographic belongs to the caller: it generates ``state``, the
+* PKCE verifier and the ``nonce``, and only ever sends the challenge. This
+* endpoint contributes the one thing the caller cannot know — which identity
+* provider to route to — and refuses an unsafe ``redirect_uri``.
+*
+* ``S256`` is hardcoded. ``plain`` is a valid PKCE method and provides no
+* protection, so making it selectable would only ever be used by mistake.
+*
+* A resolved provider is passed as ``kc_idp_hint``. Aliases are case-sensitive
+* at the broker and an unknown one silently falls back to the login form, which
+* is why :func:`_resolve_provider_alias` validates against the registry instead
+* of forwarding whatever arrived.
+* @summary Authorization
+*/
+const authorization = async (params, options) => {
+	return request(getAuthorizationUrl(params), {
+		...options,
+		method: "GET"
+	});
+};
+const getReadMeUrl = () => {
+	return `/auth/me`;
+};
+/**
+* Who the bearer of this token is, and what the session may do.
+*
+* No tokens in the response — this endpoint reissues nothing, and a shape with
+* empty token fields would invite a client to store them. It is also the
+* cheapest liveness check a client has: it exercises verification,
+* tenant resolution and the account link in one call, so a 200 here means the
+* whole chain is intact.
+* @summary Read Me
+*/
+const readMe = async (options) => {
+	return request(getReadMeUrl(), {
+		...options,
+		method: "GET"
+	});
+};
+const getDeleteSessionUrl = () => {
+	return `/auth/sessions`;
+};
+/**
+* Sign out, revoking the refresh token at the broker.
+*
+* Always 204. A logout that can fail is a logout users do not trust, and there
+* is nothing useful for the caller to do about an unreachable broker — it is
+* discarding its tokens either way. The failure is logged, not returned.
+*
+* The access token stays valid until it expires. That is inherent to verifying
+* tokens offline, and it is why the realm keeps access-token lifetimes short
+* rather than why this endpoint should pretend otherwise.
+* @summary Delete Session
+*/
+const deleteSession = async (logoutWrite, options) => {
+	const getHeaders = (h) => {
+		if (!h) return {};
+		if (h instanceof Headers) return Object.fromEntries(h.entries());
+		if (Symbol.iterator in h) return Object.fromEntries(Array.from(h, (entry) => Array.from(entry)));
+		const headers = {};
+		for (const [name, value] of Object.entries(h)) if (value !== void 0) headers[name] = value;
+		return headers;
+	};
+	return request(getDeleteSessionUrl(), {
+		...options,
+		method: "DELETE",
+		headers: {
+			"Content-Type": "application/json",
+			...getHeaders(options?.headers)
+		},
+		body: JSON.stringify(logoutWrite)
+	});
+};
+const getCreateSessionFromCredentialsUrl = () => {
+	return `/auth/sessions`;
+};
+/**
+* Log in with a username and password, via the broker's direct grant.
+*
+* Off unless ``AUTH_ALLOW_PASSWORD_GRANT`` says otherwise, and it should stay
+* off wherever the client fleet allows: the grant defeats MFA, cannot reach a
+* brokered partner, and puts the password through this process. It exists for
+* the native apps already in the field.
+*
+* Rate limited on both the submitted username and the client address. Keyed on
+* the lower-cased username so that case variation is not a way around the
+* counter, and on the address so that spraying many usernames is bounded too.
+* @summary Create Session From Credentials
+*/
+const createSessionFromCredentials = async (credentialsWrite, options) => {
+	const getHeaders = (h) => {
+		if (!h) return {};
+		if (h instanceof Headers) return Object.fromEntries(h.entries());
+		if (Symbol.iterator in h) return Object.fromEntries(Array.from(h, (entry) => Array.from(entry)));
+		const headers = {};
+		for (const [name, value] of Object.entries(h)) if (value !== void 0) headers[name] = value;
+		return headers;
+	};
+	return request(getCreateSessionFromCredentialsUrl(), {
+		...options,
+		method: "POST",
+		headers: {
+			"Content-Type": "application/json",
+			...getHeaders(options?.headers)
+		},
+		body: JSON.stringify(credentialsWrite)
+	});
+};
+const getRefreshSessionUrl = () => {
+	return `/auth/sessions`;
+};
+/**
+* Exchange a refresh token for a new pair.
+*
+* Public: the refresh token *is* the credential, so requiring a valid access
+* token as well would make the endpoint useless at the moment it is needed.
+* Rotation happens at the broker, so the presented token stops working as the
+* new one is issued.
+*
+* Returns the account as well as the tokens. That costs one indexed lookup and
+* means a client resuming from cold storage does not need a second call to
+* discover whether the account is still active — which it checks, because
+* deactivation is a local decision Keycloak knows nothing about.
+* @summary Refresh Session
+*/
+const refreshSession = async (refreshWrite, options) => {
+	const getHeaders = (h) => {
+		if (!h) return {};
+		if (h instanceof Headers) return Object.fromEntries(h.entries());
+		if (Symbol.iterator in h) return Object.fromEntries(Array.from(h, (entry) => Array.from(entry)));
+		const headers = {};
+		for (const [name, value] of Object.entries(h)) if (value !== void 0) headers[name] = value;
+		return headers;
+	};
+	return request(getRefreshSessionUrl(), {
+		...options,
+		method: "PUT",
+		headers: {
+			"Content-Type": "application/json",
+			...getHeaders(options?.headers)
+		},
+		body: JSON.stringify(refreshWrite)
+	});
+};
+const getCreateSessionFromCodeUrl = () => {
+	return `/auth/sessions/code`;
+};
+/**
+* Finish a brokered login: code plus verifier in, session out.
+*
+* Rate limited on the client address rather than on a user, because at this
+* point there is no user — the code has not been exchanged yet. The limit is
+* what stops a stolen code being brute-forced alongside a guessed verifier.
+* @summary Create Session From Code
+*/
+const createSessionFromCode = async (codeExchangeWrite, options) => {
+	const getHeaders = (h) => {
+		if (!h) return {};
+		if (h instanceof Headers) return Object.fromEntries(h.entries());
+		if (Symbol.iterator in h) return Object.fromEntries(Array.from(h, (entry) => Array.from(entry)));
+		const headers = {};
+		for (const [name, value] of Object.entries(h)) if (value !== void 0) headers[name] = value;
+		return headers;
+	};
+	return request(getCreateSessionFromCodeUrl(), {
+		...options,
+		method: "POST",
+		headers: {
+			"Content-Type": "application/json",
+			...getHeaders(options?.headers)
+		},
+		body: JSON.stringify(codeExchangeWrite)
+	});
+};
+//#endregion
+export { authorization, createSessionFromCode, createSessionFromCredentials, deleteSession, getAuthorizationUrl, getCreateSessionFromCodeUrl, getCreateSessionFromCredentialsUrl, getDeleteSessionUrl, getReadMeUrl, getRefreshSessionUrl, readMe, refreshSession };
+
+//# sourceMappingURL=auth.js.map

package/dist/api/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","names":[],"sources":["../../src/api/auth/auth.ts"],"sourcesContent":["/**\n * Generated by orval 🍺\n * Do not edit manually.\n * Mozaik backend\n * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.\n * OpenAPI spec version: 0.1.0\n */\nimport type {\n  AuthorizationParams,\n  AuthorizationRead,\n  CodeExchangeWrite,\n  CredentialsWrite,\n  LogoutWrite,\n  MeRead,\n  RefreshWrite,\n  SessionRead\n} from '../../models';\n\nimport { request } from '../../client';\n\nexport const getAuthorizationUrl = (params: AuthorizationParams,) => {\n  const normalizedParams = new URLSearchParams();\n\n  Object.entries(params || {}).forEach(([key, value]) => {\n\n    if (value !== undefined) {\n      normalizedParams.append(key, value === null ? 'null' : String(value))\n    }\n  });\n\n  const stringifiedParams = normalizedParams.toString();\n\n  return stringifiedParams.length > 0 ? `/auth/authorization?${stringifiedParams}` : `/auth/authorization`\n}\n\n/**\n * Build the Keycloak authorization URL for this client and this tenant.\n *\n * Everything cryptographic belongs to the caller: it generates ``state``, the\n * PKCE verifier and the ``nonce``, and only ever sends the challenge. This\n * endpoint contributes the one thing the caller cannot know — which identity\n * provider to route to — and refuses an unsafe ``redirect_uri``.\n *\n * ``S256`` is hardcoded. ``plain`` is a valid PKCE method and provides no\n * protection, so making it selectable would only ever be used by mistake.\n *\n * A resolved provider is passed as ``kc_idp_hint``. Aliases are case-sensitive\n * at the broker and an unknown one silently falls back to the login form, which\n * is why :func:`_resolve_provider_alias` validates against the registry instead\n * of forwarding whatever arrived.\n * @summary Authorization\n */\nexport const authorization = async (params: AuthorizationParams, options?: Parameters<typeof request>[1]): Promise<AuthorizationRead> => {\n\n  return request<AuthorizationRead>(getAuthorizationUrl(params),\n  {\n    ...options,\n    method: 'GET'\n\n\n  }\n);}\n\n\nexport const getReadMeUrl = () => {\n\n\n\n\n  return `/auth/me`\n}\n\n/**\n * Who the bearer of this token is, and what the session may do.\n *\n * No tokens in the response — this endpoint reissues nothing, and a shape with\n * empty token fields would invite a client to store them. It is also the\n * cheapest liveness check a client has: it exercises verification,\n * tenant resolution and the account link in one call, so a 200 here means the\n * whole chain is intact.\n * @summary Read Me\n */\nexport const readMe = async ( options?: Parameters<typeof request>[1]): Promise<MeRead> => {\n\n  return request<MeRead>(getReadMeUrl(),\n  {\n    ...options,\n    method: 'GET'\n\n\n  }\n);}\n\n\nexport const getDeleteSessionUrl = () => {\n\n\n\n\n  return `/auth/sessions`\n}\n\n/**\n * Sign out, revoking the refresh token at the broker.\n *\n * Always 204. A logout that can fail is a logout users do not trust, and there\n * is nothing useful for the caller to do about an unreachable broker — it is\n * discarding its tokens either way. The failure is logged, not returned.\n *\n * The access token stays valid until it expires. That is inherent to verifying\n * tokens offline, and it is why the realm keeps access-token lifetimes short\n * rather than why this endpoint should pretend otherwise.\n * @summary Delete Session\n */\nexport const deleteSession = async (logoutWrite: LogoutWrite, options?: Parameters<typeof request>[1]): Promise<void> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<void>(getDeleteSessionUrl(),\n  {\n    ...options,\n    method: 'DELETE',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(logoutWrite)\n  }\n);}\n\n\nexport const getCreateSessionFromCredentialsUrl = () => {\n\n\n\n\n  return `/auth/sessions`\n}\n\n/**\n * Log in with a username and password, via the broker's direct grant.\n *\n * Off unless ``AUTH_ALLOW_PASSWORD_GRANT`` says otherwise, and it should stay\n * off wherever the client fleet allows: the grant defeats MFA, cannot reach a\n * brokered partner, and puts the password through this process. It exists for\n * the native apps already in the field.\n *\n * Rate limited on both the submitted username and the client address. Keyed on\n * the lower-cased username so that case variation is not a way around the\n * counter, and on the address so that spraying many usernames is bounded too.\n * @summary Create Session From Credentials\n */\nexport const createSessionFromCredentials = async (credentialsWrite: CredentialsWrite, options?: Parameters<typeof request>[1]): Promise<SessionRead> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<SessionRead>(getCreateSessionFromCredentialsUrl(),\n  {\n    ...options,\n    method: 'POST',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(credentialsWrite)\n  }\n);}\n\n\nexport const getRefreshSessionUrl = () => {\n\n\n\n\n  return `/auth/sessions`\n}\n\n/**\n * Exchange a refresh token for a new pair.\n *\n * Public: the refresh token *is* the credential, so requiring a valid access\n * token as well would make the endpoint useless at the moment it is needed.\n * Rotation happens at the broker, so the presented token stops working as the\n * new one is issued.\n *\n * Returns the account as well as the tokens. That costs one indexed lookup and\n * means a client resuming from cold storage does not need a second call to\n * discover whether the account is still active — which it checks, because\n * deactivation is a local decision Keycloak knows nothing about.\n * @summary Refresh Session\n */\nexport const refreshSession = async (refreshWrite: RefreshWrite, options?: Parameters<typeof request>[1]): Promise<SessionRead> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<SessionRead>(getRefreshSessionUrl(),\n  {\n    ...options,\n    method: 'PUT',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(refreshWrite)\n  }\n);}\n\n\nexport const getCreateSessionFromCodeUrl = () => {\n\n\n\n\n  return `/auth/sessions/code`\n}\n\n/**\n * Finish a brokered login: code plus verifier in, session out.\n *\n * Rate limited on the client address rather than on a user, because at this\n * point there is no user — the code has not been exchanged yet. The limit is\n * what stops a stolen code being brute-forced alongside a guessed verifier.\n * @summary Create Session From Code\n */\nexport const createSessionFromCode = async (codeExchangeWrite: CodeExchangeWrite, options?: Parameters<typeof request>[1]): Promise<SessionRead> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<SessionRead>(getCreateSessionFromCodeUrl(),\n  {\n    ...options,\n    method: 'POST',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(codeExchangeWrite)\n  }\n);}\n\n\n"],"mappings":";;;AAoBA,MAAa,uBAAuB,WAAiC;CACnE,MAAM,mBAAmB,IAAI,gBAAgB;CAE7C,OAAO,QAAQ,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,WAAW;EAErD,IAAI,UAAU,KAAA,GACZ,iBAAiB,OAAO,KAAK,UAAU,OAAO,SAAS,OAAO,KAAK,CAAC;CAExE,CAAC;CAED,MAAM,oBAAoB,iBAAiB,SAAS;CAEpD,OAAO,kBAAkB,SAAS,IAAI,uBAAuB,sBAAsB;AACrF;;;;;;;;;;;;;;;;;;AAmBA,MAAa,gBAAgB,OAAO,QAA6B,YAAwE;CAEvI,OAAO,QAA2B,oBAAoB,MAAM,GAC5D;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE;AAGF,MAAa,qBAAqB;CAKhC,OAAO;AACT;;;;;;;;;;;AAYA,MAAa,SAAS,OAAQ,YAA6D;CAEzF,OAAO,QAAgB,aAAa,GACpC;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE;AAGF,MAAa,4BAA4B;CAKvC,OAAO;AACT;;;;;;;;;;;;;AAcA,MAAa,gBAAgB,OAAO,aAA0B,YAA2D;CAErH,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAAc,oBAAoB,GACvC;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,WAAW;CAClC,CACF;AAAE;AAGF,MAAa,2CAA2C;CAKtD,OAAO;AACT;;;;;;;;;;;;;;AAeA,MAAa,+BAA+B,OAAO,kBAAoC,YAAkE;CAErJ,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAAqB,mCAAmC,GAC7D;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,gBAAgB;CACvC,CACF;AAAE;AAGF,MAAa,6BAA6B;CAKxC,OAAO;AACT;;;;;;;;;;;;;;;AAgBA,MAAa,iBAAiB,OAAO,cAA4B,YAAkE;CAE/H,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAAqB,qBAAqB,GAC/C;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,YAAY;CACnC,CACF;AAAE;AAGF,MAAa,oCAAoC;CAK/C,OAAO;AACT;;;;;;;;;AAUA,MAAa,wBAAwB,OAAO,mBAAsC,YAAkE;CAEhJ,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAAqB,4BAA4B,GACtD;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,iBAAiB;CACxC,CACF;AAAE"}

package/dist/api/biblio-catalogue.d.ts

@@ -0,0 +1,122 @@
+
+import { An as LikeRead, Or as ContentRead, Rr as CatalogRead, Vn as LearningPathDetailRead, Wt as PackDetailRead, X as RecommendationsRead, Z as ReadRecommendationsParams, dt as ReadCatalogParams, et as ReadPackParams, fr as EditorDetailRead, lr as EditorListRead, lt as ReadEditorParams, ut as ReadCatalogThemeParams, wn as ListEditorsParams } from "../chunks/index.js";
+import { c as request } from "../chunks/client.js";
+//#region src/api/biblio-catalogue/biblio-catalogue.d.ts
+export declare const getReadContentUrl: (contentId: number) => string;
+/**
+ * One content item, with this caller's own state on it (E34).
+ *
+ * ``liked`` and ``favorited`` are why this is not just the summary shape: they
+ * are per-caller and therefore uncacheable across users, which is worth knowing
+ * before anyone puts a shared cache in front of it.
+ * @summary Read Content
+ */
+export declare const readContent: (contentId: number, options?: Parameters<typeof request>[1]) => Promise<ContentRead>;
+export declare const getUnlikeContentUrl: (contentId: number) => string;
+/**
+ * Withdraw a like (E37). Idempotent — not liked is already the desired state.
+ * @summary Unlike Content
+ */
+export declare const unlikeContent: (contentId: number, options?: Parameters<typeof request>[1]) => Promise<LikeRead>;
+export declare const getLikeContentUrl: (contentId: number) => string;
+/**
+ * Record a like (E36). Idempotent.
+ *
+ * This and :func:`unlike_content` replace one non-idempotent
+ * ``POST /content/{id}/toggle-like``. A retried toggle reverses the user's
+ * intent; a repeated ``PUT`` cannot (§4, consequence 3).
+ *
+ * ``like_count`` is recomputed from ``content_rating`` rather than incremented,
+ * because an increment beside an upsert double-counts the second time the same
+ * person likes the same thing.
+ * @summary Like Content
+ */
+export declare const likeContent: (contentId: number, options?: Parameters<typeof request>[1]) => Promise<LikeRead>;
+export declare const getReadRecommendationsUrl: (contentId: number, params?: ReadRecommendationsParams) => string;
+/**
+ * Related content the caller can also reach (E35).
+ *
+ * Recommending something the account cannot open is worse than recommending
+ * nothing, so the candidate set is entitlement-filtered before ranking rather
+ * than after — filtering afterwards silently shortens the list instead.
+ *
+ * Keyword overlap for now, over the GIN index on ``content.keywords``.
+ * @summary Read Recommendations
+ */
+export declare const readRecommendations: (contentId: number, params?: ReadRecommendationsParams, options?: Parameters<typeof request>[1]) => Promise<RecommendationsRead>;
+export declare const getListEditorsUrl: (params?: ListEditorsParams) => string;
+/**
+ * Active editors (E44).
+ *
+ * ``order`` and ``sort`` are resolved against a whitelist and never
+ * interpolated. The legacy passed both straight to the query layer (defect
+ * D17); an unrecognised value is ``422`` rather than a surprise ordering.
+ *
+ * The collection is not wrapped in a single-element array. The legacy
+ * ``GET /api/v1/editors/`` was (§2.1).
+ *
+ * Authenticated even though the answer does not depend on who is asking. Which
+ * publishers a platform carries is commercial information, and an endpoint that
+ * enumerates them for anyone is a competitor's first request. The sibling
+ * ``/editors/{id}`` was already authenticated; this one was not, which is how
+ * the inconsistency was found.
+ * @summary List Editors
+ */
+export declare const listEditors: (params?: ListEditorsParams, options?: Parameters<typeof request>[1]) => Promise<EditorListRead>;
+export declare const getReadEditorUrl: (editorId: number, params?: ReadEditorParams) => string;
+/**
+ * One editor and the content of theirs this caller can reach (E45).
+ *
+ * One endpoint replaces two — a page and a JSON route that used ``pageSize``
+ * instead of ``limit`` and wrapped the object in an array. Same entity, two
+ * conventions, one codebase (§4, consequence 5).
+ * @summary Read Editor
+ */
+export declare const readEditor: (editorId: number, params?: ReadEditorParams, options?: Parameters<typeof request>[1]) => Promise<EditorDetailRead>;
+export declare const getReadLearningPathUrl: (learningPathId: number) => string;
+/**
+ * A ``parcours`` and the content it walks through, in order.
+ *
+ * The other end of the ``parcours`` array on a pack, which named paths a client
+ * then had no way to open.
+ *
+ * Steps the caller is not entitled to are **dropped, not hidden behind a
+ * padlock**: the same category test every listing uses decides what appears, so
+ * a path cannot become a way to learn that an item exists. That does mean a
+ * path can come back with fewer steps than the library curated, and with gaps
+ * in ``stepOrder`` — which is why the order is a field rather than the array
+ * index.
+ *
+ * An inactive path is ``404`` rather than an empty one: it was withdrawn, and
+ * an empty sequence would read as "we have nothing for you" instead.
+ * @summary Read Learning Path
+ */
+export declare const readLearningPath: (learningPathId: number, options?: Parameters<typeof request>[1]) => Promise<LearningPathDetailRead>;
+export declare const getReadPackUrl: (packId: number, params?: ReadPackParams) => string;
+/**
+ * A pack with its catalogs, latest additions and learning paths (E38).
+ *
+ * ``canonical`` is how the redirect dies. When a pack resolves to a single
+ * catalog the legacy answered ``302``; here the response is ``200`` and
+ * ``canonical`` names the resolved catalog, leaving the client to decide whether
+ * to follow it (§5.1).
+ *
+ * A pack the caller has no entitlement to is ``404``. The legacy dereferenced
+ * ``null`` and returned ``500`` (defect D12).
+ * @summary Read Pack
+ */
+export declare const readPack: (packId: number, params?: ReadPackParams, options?: Parameters<typeof request>[1]) => Promise<PackDetailRead>;
+export declare const getReadCatalogUrl: (packId: number, catalogId: number, params?: ReadCatalogParams) => string;
+/**
+ * One catalog inside a pack (E39).
+ * @summary Read Catalog
+ */
+export declare const readCatalog: (packId: number, catalogId: number, params?: ReadCatalogParams, options?: Parameters<typeof request>[1]) => Promise<CatalogRead>;
+export declare const getReadCatalogThemeUrl: (packId: number, catalogId: number, themeId: number, params?: ReadCatalogThemeParams) => string;
+/**
+ * The same catalog, narrowed to one theme (E40).
+ * @summary Read Catalog Theme
+ */
+export declare const readCatalogTheme: (packId: number, catalogId: number, themeId: number, params?: ReadCatalogThemeParams, options?: Parameters<typeof request>[1]) => Promise<CatalogRead>;
+//#endregion
+//# sourceMappingURL=biblio-catalogue.d.ts.map