@learnorama/mozaik-sdk 0.1.0

package/dist/api/biblio-nextory.d.ts

@@ -0,0 +1,43 @@
+
+import { Mn as LicenseRead } from "../index-wL_20vR8.js";
+import { c as request } from "../client-BDwBZYB0.js";
+//#region src/api/biblio-nextory/biblio-nextory.d.ts
+export declare const getDeleteLicenseUrl: () => string;
+/**
+ * Release this member's seat back to the household pool.
+ *
+ * Not in the legacy's member surface — releasing was staff-only, so a household
+ * at its cap had to call support. The seat stays claimed by this member rather
+ * than orphaned, so their next allocation gets the same number back and their
+ * reading positions with it.
+ *
+ * ``204`` whether or not a licence was held: the desired end state is "no
+ * seat", and reporting ``404`` would only tell a caller something they cannot
+ * act on.
+ * @summary Delete License
+ */
+export declare const deleteLicense: (options?: Parameters<typeof request>[1]) => Promise<void>;
+export declare const getReadLicenseUrl: () => string;
+/**
+ * The seat this member holds (E49). ``404`` when they hold none.
+ *
+ * Safe, and that is the entire point of the endpoint existing separately.
+ * @summary Read License
+ */
+export declare const readLicense: (options?: Parameters<typeof request>[1]) => Promise<LicenseRead>;
+export declare const getCreateLicenseUrl: () => string;
+/**
+ * Allocate or reactivate this member's seat (E50).
+ *
+ * Idempotent: a member who already holds one gets it back with ``200``, and the
+ * call doubles as a repair — a subscription that lapsed at the partner is
+ * reopened against the same number, so reading positions survive.
+ *
+ * Medium assurance: this creates an account for the member at a third party
+ * under their identity, which is not something a session established by a
+ * partner handing over a static URL key should be able to do.
+ * @summary Create License
+ */
+export declare const createLicense: (options?: Parameters<typeof request>[1]) => Promise<LicenseRead>;
+//#endregion
+//# sourceMappingURL=biblio-nextory.d.ts.map

package/dist/api/biblio-nextory.js

@@ -0,0 +1,65 @@
+
+import { r as request } from "../client-D3kMOcIr.js";
+//#region src/api/biblio-nextory/biblio-nextory.ts
+const getDeleteLicenseUrl = () => {
+	return `/biblio/me/nextory/license`;
+};
+/**
+* Release this member's seat back to the household pool.
+*
+* Not in the legacy's member surface — releasing was staff-only, so a household
+* at its cap had to call support. The seat stays claimed by this member rather
+* than orphaned, so their next allocation gets the same number back and their
+* reading positions with it.
+*
+* ``204`` whether or not a licence was held: the desired end state is "no
+* seat", and reporting ``404`` would only tell a caller something they cannot
+* act on.
+* @summary Delete License
+*/
+const deleteLicense = async (options) => {
+	return request(getDeleteLicenseUrl(), {
+		...options,
+		method: "DELETE"
+	});
+};
+const getReadLicenseUrl = () => {
+	return `/biblio/me/nextory/license`;
+};
+/**
+* The seat this member holds (E49). ``404`` when they hold none.
+*
+* Safe, and that is the entire point of the endpoint existing separately.
+* @summary Read License
+*/
+const readLicense = async (options) => {
+	return request(getReadLicenseUrl(), {
+		...options,
+		method: "GET"
+	});
+};
+const getCreateLicenseUrl = () => {
+	return `/biblio/me/nextory/license`;
+};
+/**
+* Allocate or reactivate this member's seat (E50).
+*
+* Idempotent: a member who already holds one gets it back with ``200``, and the
+* call doubles as a repair — a subscription that lapsed at the partner is
+* reopened against the same number, so reading positions survive.
+*
+* Medium assurance: this creates an account for the member at a third party
+* under their identity, which is not something a session established by a
+* partner handing over a static URL key should be able to do.
+* @summary Create License
+*/
+const createLicense = async (options) => {
+	return request(getCreateLicenseUrl(), {
+		...options,
+		method: "POST"
+	});
+};
+//#endregion
+export { createLicense, deleteLicense, getCreateLicenseUrl, getDeleteLicenseUrl, getReadLicenseUrl, readLicense };
+
+//# sourceMappingURL=biblio-nextory.js.map

package/dist/api/biblio-nextory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"biblio-nextory.js","names":[],"sources":["../../src/api/biblio-nextory/biblio-nextory.ts"],"sourcesContent":["/**\n * Generated by orval 🍺\n * Do not edit manually.\n * Mozaik backend\n * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.\n * OpenAPI spec version: 0.1.0\n */\nimport type {\n  LicenseRead\n} from '../../models';\n\nimport { request } from '../../client';\n\nexport const getDeleteLicenseUrl = () => {\n\n\n\n\n  return `/biblio/me/nextory/license`\n}\n\n/**\n * Release this member's seat back to the household pool.\n *\n * Not in the legacy's member surface — releasing was staff-only, so a household\n * at its cap had to call support. The seat stays claimed by this member rather\n * than orphaned, so their next allocation gets the same number back and their\n * reading positions with it.\n *\n * ``204`` whether or not a licence was held: the desired end state is \"no\n * seat\", and reporting ``404`` would only tell a caller something they cannot\n * act on.\n * @summary Delete License\n */\nexport const deleteLicense = async ( options?: Parameters<typeof request>[1]): Promise<void> => {\n\n  return request<void>(getDeleteLicenseUrl(),\n  {\n    ...options,\n    method: 'DELETE'\n\n\n  }\n);}\n\n\nexport const getReadLicenseUrl = () => {\n\n\n\n\n  return `/biblio/me/nextory/license`\n}\n\n/**\n * The seat this member holds (E49). ``404`` when they hold none.\n *\n * Safe, and that is the entire point of the endpoint existing separately.\n * @summary Read License\n */\nexport const readLicense = async ( options?: Parameters<typeof request>[1]): Promise<LicenseRead> => {\n\n  return request<LicenseRead>(getReadLicenseUrl(),\n  {\n    ...options,\n    method: 'GET'\n\n\n  }\n);}\n\n\nexport const getCreateLicenseUrl = () => {\n\n\n\n\n  return `/biblio/me/nextory/license`\n}\n\n/**\n * Allocate or reactivate this member's seat (E50).\n *\n * Idempotent: a member who already holds one gets it back with ``200``, and the\n * call doubles as a repair — a subscription that lapsed at the partner is\n * reopened against the same number, so reading positions survive.\n *\n * Medium assurance: this creates an account for the member at a third party\n * under their identity, which is not something a session established by a\n * partner handing over a static URL key should be able to do.\n * @summary Create License\n */\nexport const createLicense = async ( options?: Parameters<typeof request>[1]): Promise<LicenseRead> => {\n\n  return request<LicenseRead>(getCreateLicenseUrl(),\n  {\n    ...options,\n    method: 'POST'\n\n\n  }\n);}\n\n\n"],"mappings":";;;AAaA,MAAa,4BAA4B;CAKvC,OAAO;AACT;;;;;;;;;;;;;;AAeA,MAAa,gBAAgB,OAAQ,YAA2D;CAE9F,OAAO,QAAc,oBAAoB,GACzC;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE;AAGF,MAAa,0BAA0B;CAKrC,OAAO;AACT;;;;;;;AAQA,MAAa,cAAc,OAAQ,YAAkE;CAEnG,OAAO,QAAqB,kBAAkB,GAC9C;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE;AAGF,MAAa,4BAA4B;CAKvC,OAAO;AACT;;;;;;;;;;;;;AAcA,MAAa,gBAAgB,OAAQ,YAAkE;CAErG,OAAO,QAAqB,oBAAoB,GAChD;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE"}

package/dist/api/biblio-press.d.ts

@@ -0,0 +1,38 @@
+
+import { Q as ReadPressReviewParams, bt as PressArticleRead, dn as ListPressArticlesParams, qn as PressReviewRead, xt as PressArticleListRead } from "../index-wL_20vR8.js";
+import { c as request } from "../client-BDwBZYB0.js";
+//#region src/api/biblio-press/biblio-press.d.ts
+export declare const getListPressArticlesUrl: (params?: ListPressArticlesParams) => string;
+/**
+ * Press articles, filtered (E41).
+ *
+ * ``theme_id`` unifies the legacy's two separate parameters ``themeId`` and
+ * ``themePk``, which named the same thing. ``order`` is resolved against a
+ * whitelist; anything else is ``422`` rather than a surprise ordering.
+ * @summary List Press Articles
+ */
+export declare const listPressArticles: (params?: ListPressArticlesParams, options?: Parameters<typeof request>[1]) => Promise<PressArticleListRead>;
+export declare const getReadPressArticleUrl: (articleId: number) => string;
+/**
+ * One press article (E42). ``404`` when unknown *or* not entitled.
+ * @summary Read Press Article
+ */
+export declare const readPressArticle: (articleId: number, options?: Parameters<typeof request>[1]) => Promise<PressArticleRead>;
+export declare const getReadPressReviewUrl: (params?: ReadPressReviewParams) => string;
+/**
+ * The curated press review (E43). An explicit aggregate (§5.2).
+ *
+ * New as an endpoint; the legacy composed it into two pages and never exposed
+ * it. There is no curation table, so a section is a theme and its members are
+ * that theme's most recent entitled articles — which is what the rendered page
+ * amounted to. When a real curation model appears this is the one place that has
+ * to change.
+ *
+ * A theme with nothing the caller may read is omitted rather than returned
+ * empty: an empty section is a hole in a page, and the client cannot tell
+ * "nothing new" from "not licensed".
+ * @summary Read Press Review
+ */
+export declare const readPressReview: (params?: ReadPressReviewParams, options?: Parameters<typeof request>[1]) => Promise<PressReviewRead>;
+//#endregion
+//# sourceMappingURL=biblio-press.d.ts.map

package/dist/api/biblio-press.js

@@ -0,0 +1,70 @@
+
+import { r as request } from "../client-D3kMOcIr.js";
+//#region src/api/biblio-press/biblio-press.ts
+const getListPressArticlesUrl = (params) => {
+	const normalizedParams = new URLSearchParams();
+	Object.entries(params || {}).forEach(([key, value]) => {
+		if (value !== void 0) normalizedParams.append(key, value === null ? "null" : String(value));
+	});
+	const stringifiedParams = normalizedParams.toString();
+	return stringifiedParams.length > 0 ? `/biblio/press-articles?${stringifiedParams}` : `/biblio/press-articles`;
+};
+/**
+* Press articles, filtered (E41).
+*
+* ``theme_id`` unifies the legacy's two separate parameters ``themeId`` and
+* ``themePk``, which named the same thing. ``order`` is resolved against a
+* whitelist; anything else is ``422`` rather than a surprise ordering.
+* @summary List Press Articles
+*/
+const listPressArticles = async (params, options) => {
+	return request(getListPressArticlesUrl(params), {
+		...options,
+		method: "GET"
+	});
+};
+const getReadPressArticleUrl = (articleId) => {
+	return `/biblio/press-articles/${articleId}`;
+};
+/**
+* One press article (E42). ``404`` when unknown *or* not entitled.
+* @summary Read Press Article
+*/
+const readPressArticle = async (articleId, options) => {
+	return request(getReadPressArticleUrl(articleId), {
+		...options,
+		method: "GET"
+	});
+};
+const getReadPressReviewUrl = (params) => {
+	const normalizedParams = new URLSearchParams();
+	Object.entries(params || {}).forEach(([key, value]) => {
+		if (value !== void 0) normalizedParams.append(key, value === null ? "null" : String(value));
+	});
+	const stringifiedParams = normalizedParams.toString();
+	return stringifiedParams.length > 0 ? `/biblio/press-review?${stringifiedParams}` : `/biblio/press-review`;
+};
+/**
+* The curated press review (E43). An explicit aggregate (§5.2).
+*
+* New as an endpoint; the legacy composed it into two pages and never exposed
+* it. There is no curation table, so a section is a theme and its members are
+* that theme's most recent entitled articles — which is what the rendered page
+* amounted to. When a real curation model appears this is the one place that has
+* to change.
+*
+* A theme with nothing the caller may read is omitted rather than returned
+* empty: an empty section is a hole in a page, and the client cannot tell
+* "nothing new" from "not licensed".
+* @summary Read Press Review
+*/
+const readPressReview = async (params, options) => {
+	return request(getReadPressReviewUrl(params), {
+		...options,
+		method: "GET"
+	});
+};
+//#endregion
+export { getListPressArticlesUrl, getReadPressArticleUrl, getReadPressReviewUrl, listPressArticles, readPressArticle, readPressReview };
+
+//# sourceMappingURL=biblio-press.js.map

package/dist/api/biblio-press.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"biblio-press.js","names":[],"sources":["../../src/api/biblio-press/biblio-press.ts"],"sourcesContent":["/**\n * Generated by orval 🍺\n * Do not edit manually.\n * Mozaik backend\n * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.\n * OpenAPI spec version: 0.1.0\n */\nimport type {\n  ListPressArticlesParams,\n  PressArticleListRead,\n  PressArticleRead,\n  PressReviewRead,\n  ReadPressReviewParams\n} from '../../models';\n\nimport { request } from '../../client';\n\nexport const getListPressArticlesUrl = (params?: ListPressArticlesParams,) => {\n  const normalizedParams = new URLSearchParams();\n\n  Object.entries(params || {}).forEach(([key, value]) => {\n\n    if (value !== undefined) {\n      normalizedParams.append(key, value === null ? 'null' : String(value))\n    }\n  });\n\n  const stringifiedParams = normalizedParams.toString();\n\n  return stringifiedParams.length > 0 ? `/biblio/press-articles?${stringifiedParams}` : `/biblio/press-articles`\n}\n\n/**\n * Press articles, filtered (E41).\n *\n * ``theme_id`` unifies the legacy's two separate parameters ``themeId`` and\n * ``themePk``, which named the same thing. ``order`` is resolved against a\n * whitelist; anything else is ``422`` rather than a surprise ordering.\n * @summary List Press Articles\n */\nexport const listPressArticles = async (params?: ListPressArticlesParams, options?: Parameters<typeof request>[1]): Promise<PressArticleListRead> => {\n\n  return request<PressArticleListRead>(getListPressArticlesUrl(params),\n  {\n    ...options,\n    method: 'GET'\n\n\n  }\n);}\n\n\nexport const getReadPressArticleUrl = (articleId: number,) => {\n\n\n\n\n  return `/biblio/press-articles/${articleId}`\n}\n\n/**\n * One press article (E42). ``404`` when unknown *or* not entitled.\n * @summary Read Press Article\n */\nexport const readPressArticle = async (articleId: number, options?: Parameters<typeof request>[1]): Promise<PressArticleRead> => {\n\n  return request<PressArticleRead>(getReadPressArticleUrl(articleId),\n  {\n    ...options,\n    method: 'GET'\n\n\n  }\n);}\n\n\nexport const getReadPressReviewUrl = (params?: ReadPressReviewParams,) => {\n  const normalizedParams = new URLSearchParams();\n\n  Object.entries(params || {}).forEach(([key, value]) => {\n\n    if (value !== undefined) {\n      normalizedParams.append(key, value === null ? 'null' : String(value))\n    }\n  });\n\n  const stringifiedParams = normalizedParams.toString();\n\n  return stringifiedParams.length > 0 ? `/biblio/press-review?${stringifiedParams}` : `/biblio/press-review`\n}\n\n/**\n * The curated press review (E43). An explicit aggregate (§5.2).\n *\n * New as an endpoint; the legacy composed it into two pages and never exposed\n * it. There is no curation table, so a section is a theme and its members are\n * that theme's most recent entitled articles — which is what the rendered page\n * amounted to. When a real curation model appears this is the one place that has\n * to change.\n *\n * A theme with nothing the caller may read is omitted rather than returned\n * empty: an empty section is a hole in a page, and the client cannot tell\n * \"nothing new\" from \"not licensed\".\n * @summary Read Press Review\n */\nexport const readPressReview = async (params?: ReadPressReviewParams, options?: Parameters<typeof request>[1]): Promise<PressReviewRead> => {\n\n  return request<PressReviewRead>(getReadPressReviewUrl(params),\n  {\n    ...options,\n    method: 'GET'\n\n\n  }\n);}\n\n\n"],"mappings":";;;AAiBA,MAAa,2BAA2B,WAAsC;CAC5E,MAAM,mBAAmB,IAAI,gBAAgB;CAE7C,OAAO,QAAQ,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,WAAW;EAErD,IAAI,UAAU,KAAA,GACZ,iBAAiB,OAAO,KAAK,UAAU,OAAO,SAAS,OAAO,KAAK,CAAC;CAExE,CAAC;CAED,MAAM,oBAAoB,iBAAiB,SAAS;CAEpD,OAAO,kBAAkB,SAAS,IAAI,0BAA0B,sBAAsB;AACxF;;;;;;;;;AAUA,MAAa,oBAAoB,OAAO,QAAkC,YAA2E;CAEnJ,OAAO,QAA8B,wBAAwB,MAAM,GACnE;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE;AAGF,MAAa,0BAA0B,cAAuB;CAK5D,OAAO,0BAA0B;AACnC;;;;;AAMA,MAAa,mBAAmB,OAAO,WAAmB,YAAuE;CAE/H,OAAO,QAA0B,uBAAuB,SAAS,GACjE;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE;AAGF,MAAa,yBAAyB,WAAoC;CACxE,MAAM,mBAAmB,IAAI,gBAAgB;CAE7C,OAAO,QAAQ,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,WAAW;EAErD,IAAI,UAAU,KAAA,GACZ,iBAAiB,OAAO,KAAK,UAAU,OAAO,SAAS,OAAO,KAAK,CAAC;CAExE,CAAC;CAED,MAAM,oBAAoB,iBAAiB,SAAS;CAEpD,OAAO,kBAAkB,SAAS,IAAI,wBAAwB,sBAAsB;AACtF;;;;;;;;;;;;;;;AAgBA,MAAa,kBAAkB,OAAO,QAAgC,YAAsE;CAE1I,OAAO,QAAyB,sBAAsB,MAAM,GAC5D;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE"}

package/dist/api/biblio-search.d.ts

@@ -0,0 +1,17 @@
+
+import { H as SearchResultsRead, U as SearchParams } from "../index-wL_20vR8.js";
+import { c as request } from "../client-BDwBZYB0.js";
+//#region src/api/biblio-search/biblio-search.d.ts
+export declare const getSearchUrl: (params?: SearchParams) => string;
+/**
+ * Search the catalogue (E46).
+ *
+ * An empty ``q`` returns an empty ``data`` with ``200``. It is not an error: a
+ * client clearing its search box should get an empty result, not a failure.
+ *
+ * An unrecognised ``type`` is ``422``, naming the families that exist.
+ * @summary Search
+ */
+export declare const search: (params?: SearchParams, options?: Parameters<typeof request>[1]) => Promise<SearchResultsRead>;
+//#endregion
+//# sourceMappingURL=biblio-search.d.ts.map

package/dist/api/biblio-search.js

@@ -0,0 +1,30 @@
+
+import { r as request } from "../client-D3kMOcIr.js";
+//#region src/api/biblio-search/biblio-search.ts
+const getSearchUrl = (params) => {
+	const normalizedParams = new URLSearchParams();
+	Object.entries(params || {}).forEach(([key, value]) => {
+		if (value !== void 0) normalizedParams.append(key, value === null ? "null" : String(value));
+	});
+	const stringifiedParams = normalizedParams.toString();
+	return stringifiedParams.length > 0 ? `/biblio/search?${stringifiedParams}` : `/biblio/search`;
+};
+/**
+* Search the catalogue (E46).
+*
+* An empty ``q`` returns an empty ``data`` with ``200``. It is not an error: a
+* client clearing its search box should get an empty result, not a failure.
+*
+* An unrecognised ``type`` is ``422``, naming the families that exist.
+* @summary Search
+*/
+const search = async (params, options) => {
+	return request(getSearchUrl(params), {
+		...options,
+		method: "GET"
+	});
+};
+//#endregion
+export { getSearchUrl, search };
+
+//# sourceMappingURL=biblio-search.js.map

package/dist/api/biblio-search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"biblio-search.js","names":[],"sources":["../../src/api/biblio-search/biblio-search.ts"],"sourcesContent":["/**\n * Generated by orval 🍺\n * Do not edit manually.\n * Mozaik backend\n * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.\n * OpenAPI spec version: 0.1.0\n */\nimport type {\n  SearchParams,\n  SearchResultsRead\n} from '../../models';\n\nimport { request } from '../../client';\n\nexport const getSearchUrl = (params?: SearchParams,) => {\n  const normalizedParams = new URLSearchParams();\n\n  Object.entries(params || {}).forEach(([key, value]) => {\n\n    if (value !== undefined) {\n      normalizedParams.append(key, value === null ? 'null' : String(value))\n    }\n  });\n\n  const stringifiedParams = normalizedParams.toString();\n\n  return stringifiedParams.length > 0 ? `/biblio/search?${stringifiedParams}` : `/biblio/search`\n}\n\n/**\n * Search the catalogue (E46).\n *\n * An empty ``q`` returns an empty ``data`` with ``200``. It is not an error: a\n * client clearing its search box should get an empty result, not a failure.\n *\n * An unrecognised ``type`` is ``422``, naming the families that exist.\n * @summary Search\n */\nexport const search = async (params?: SearchParams, options?: Parameters<typeof request>[1]): Promise<SearchResultsRead> => {\n\n  return request<SearchResultsRead>(getSearchUrl(params),\n  {\n    ...options,\n    method: 'GET'\n\n\n  }\n);}\n\n\n"],"mappings":";;;AAcA,MAAa,gBAAgB,WAA2B;CACtD,MAAM,mBAAmB,IAAI,gBAAgB;CAE7C,OAAO,QAAQ,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,WAAW;EAErD,IAAI,UAAU,KAAA,GACZ,iBAAiB,OAAO,KAAK,UAAU,OAAO,SAAS,OAAO,KAAK,CAAC;CAExE,CAAC;CAED,MAAM,oBAAoB,iBAAiB,SAAS;CAEpD,OAAO,kBAAkB,SAAS,IAAI,kBAAkB,sBAAsB;AAChF;;;;;;;;;;AAWA,MAAa,SAAS,OAAO,QAAuB,YAAwE;CAE1H,OAAO,QAA2B,aAAa,MAAM,GACrD;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE"}

package/dist/api/biblio-telemetry.d.ts

@@ -0,0 +1,28 @@
+
+import { nt as ReadingSessionWrite, rt as ReadingSessionRead } from "../index-wL_20vR8.js";
+import { c as request } from "../client-BDwBZYB0.js";
+//#region src/api/biblio-telemetry/biblio-telemetry.d.ts
+export declare const getRecordReadingSessionUrl: (sessionTag: string) => string;
+/**
+ * Record one content-consumption session (E54). Idempotent on ``session_tag``.
+ *
+ * **There is no ``user_id`` and no ``client_id`` in the body, and there must
+ * never be.** The legacy endpoint was unauthenticated and took both from the
+ * request without checking either against a credential, so consumption records
+ * — which is to say the billing record — were forgeable for any account
+ * (defect D3). Both come from the token here.
+ *
+ * ``PUT`` because the legacy handler already checked whether the tag existed and
+ * returned success rather than duplicating: that is an upsert keyed by a
+ * client-supplied identifier, and the verb now says so. The tag becomes
+ * ``ConsumptionEvent.request_key``, so a retried request after a timeout costs
+ * one unit rather than two — enforced by a partial unique index, not by
+ * checking first and hoping.
+ *
+ * ``201`` on the first write for a tag, ``200`` when it already existed. Never
+ * an error for a repeat: that is what idempotent means (§2.6).
+ * @summary Record Reading Session
+ */
+export declare const recordReadingSession: (sessionTag: string, readingSessionWrite: ReadingSessionWrite, options?: Parameters<typeof request>[1]) => Promise<ReadingSessionRead>;
+//#endregion
+//# sourceMappingURL=biblio-telemetry.d.ts.map

package/dist/api/biblio-telemetry.js

@@ -0,0 +1,49 @@
+
+import { r as request } from "../client-D3kMOcIr.js";
+//#region src/api/biblio-telemetry/biblio-telemetry.ts
+const getRecordReadingSessionUrl = (sessionTag) => {
+	return `/biblio/reading-sessions/${sessionTag}`;
+};
+/**
+* Record one content-consumption session (E54). Idempotent on ``session_tag``.
+*
+* **There is no ``user_id`` and no ``client_id`` in the body, and there must
+* never be.** The legacy endpoint was unauthenticated and took both from the
+* request without checking either against a credential, so consumption records
+* — which is to say the billing record — were forgeable for any account
+* (defect D3). Both come from the token here.
+*
+* ``PUT`` because the legacy handler already checked whether the tag existed and
+* returned success rather than duplicating: that is an upsert keyed by a
+* client-supplied identifier, and the verb now says so. The tag becomes
+* ``ConsumptionEvent.request_key``, so a retried request after a timeout costs
+* one unit rather than two — enforced by a partial unique index, not by
+* checking first and hoping.
+*
+* ``201`` on the first write for a tag, ``200`` when it already existed. Never
+* an error for a repeat: that is what idempotent means (§2.6).
+* @summary Record Reading Session
+*/
+const recordReadingSession = async (sessionTag, readingSessionWrite, options) => {
+	const getHeaders = (h) => {
+		if (!h) return {};
+		if (h instanceof Headers) return Object.fromEntries(h.entries());
+		if (Symbol.iterator in h) return Object.fromEntries(Array.from(h, (entry) => Array.from(entry)));
+		const headers = {};
+		for (const [name, value] of Object.entries(h)) if (value !== void 0) headers[name] = value;
+		return headers;
+	};
+	return request(getRecordReadingSessionUrl(sessionTag), {
+		...options,
+		method: "PUT",
+		headers: {
+			"Content-Type": "application/json",
+			...getHeaders(options?.headers)
+		},
+		body: JSON.stringify(readingSessionWrite)
+	});
+};
+//#endregion
+export { getRecordReadingSessionUrl, recordReadingSession };
+
+//# sourceMappingURL=biblio-telemetry.js.map

package/dist/api/biblio-telemetry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"biblio-telemetry.js","names":[],"sources":["../../src/api/biblio-telemetry/biblio-telemetry.ts"],"sourcesContent":["/**\n * Generated by orval 🍺\n * Do not edit manually.\n * Mozaik backend\n * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.\n * OpenAPI spec version: 0.1.0\n */\nimport type {\n  ReadingSessionRead,\n  ReadingSessionWrite\n} from '../../models';\n\nimport { request } from '../../client';\n\nexport const getRecordReadingSessionUrl = (sessionTag: string,) => {\n\n\n\n\n  return `/biblio/reading-sessions/${sessionTag}`\n}\n\n/**\n * Record one content-consumption session (E54). Idempotent on ``session_tag``.\n *\n * **There is no ``user_id`` and no ``client_id`` in the body, and there must\n * never be.** The legacy endpoint was unauthenticated and took both from the\n * request without checking either against a credential, so consumption records\n * — which is to say the billing record — were forgeable for any account\n * (defect D3). Both come from the token here.\n *\n * ``PUT`` because the legacy handler already checked whether the tag existed and\n * returned success rather than duplicating: that is an upsert keyed by a\n * client-supplied identifier, and the verb now says so. The tag becomes\n * ``ConsumptionEvent.request_key``, so a retried request after a timeout costs\n * one unit rather than two — enforced by a partial unique index, not by\n * checking first and hoping.\n *\n * ``201`` on the first write for a tag, ``200`` when it already existed. Never\n * an error for a repeat: that is what idempotent means (§2.6).\n * @summary Record Reading Session\n */\nexport const recordReadingSession = async (sessionTag: string,\n    readingSessionWrite: ReadingSessionWrite, options?: Parameters<typeof request>[1]): Promise<ReadingSessionRead> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<ReadingSessionRead>(getRecordReadingSessionUrl(sessionTag),\n  {\n    ...options,\n    method: 'PUT',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(readingSessionWrite)\n  }\n);}\n\n\n"],"mappings":";;;AAcA,MAAa,8BAA8B,eAAwB;CAKjE,OAAO,4BAA4B;AACrC;;;;;;;;;;;;;;;;;;;;;AAsBA,MAAa,uBAAuB,OAAO,YACvC,qBAA0C,YAAyE;CAEnH,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAA4B,2BAA2B,UAAU,GACtE;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,mBAAmB;CAC1C,CACF;AAAE"}

package/dist/api/consumption.d.ts

@@ -0,0 +1,30 @@
+
+import { Rn as LeaseRead } from "../index-wL_20vR8.js";
+import { c as request } from "../client-BDwBZYB0.js";
+//#region src/api/consumption/consumption.d.ts
+export declare const getCloseLeaseUrl: (eventId: number) => string;
+/**
+ * Finish reading. Returns the seat immediately rather than at lapse.
+ *
+ * ``204`` whether or not the lease was still open: the desired end state is
+ * "closed", and a client that lost its connection and retried should not get an
+ * error for succeeding twice.
+ * @summary Close Lease
+ */
+export declare const closeLease: (eventId: number, options?: Parameters<typeof request>[1]) => Promise<void>;
+export declare const getRenewLeaseUrl: (eventId: number) => string;
+/**
+ * Heartbeat. Push the lease out; the client repeats before it lapses.
+ *
+ * ``404`` when the lease is closed, reaped, or somebody else's — the three are
+ * deliberately indistinguishable, because a lease id is a bare integer and
+ * guessing one must not reveal whether it exists.
+ *
+ * This does not write the ledger. A reader refreshing every thirty seconds for
+ * an hour would be 120 UPDATEs on the table we bill from, for a value that only
+ * matters while it is current; the durable extent is settled once, at close.
+ * @summary Renew Lease
+ */
+export declare const renewLease: (eventId: number, options?: Parameters<typeof request>[1]) => Promise<LeaseRead>;
+//#endregion
+//# sourceMappingURL=consumption.d.ts.map

package/dist/api/consumption.js

@@ -0,0 +1,45 @@
+
+import { r as request } from "../client-D3kMOcIr.js";
+//#region src/api/consumption/consumption.ts
+const getCloseLeaseUrl = (eventId) => {
+	return `/consumption/${eventId}`;
+};
+/**
+* Finish reading. Returns the seat immediately rather than at lapse.
+*
+* ``204`` whether or not the lease was still open: the desired end state is
+* "closed", and a client that lost its connection and retried should not get an
+* error for succeeding twice.
+* @summary Close Lease
+*/
+const closeLease = async (eventId, options) => {
+	return request(getCloseLeaseUrl(eventId), {
+		...options,
+		method: "DELETE"
+	});
+};
+const getRenewLeaseUrl = (eventId) => {
+	return `/consumption/${eventId}`;
+};
+/**
+* Heartbeat. Push the lease out; the client repeats before it lapses.
+*
+* ``404`` when the lease is closed, reaped, or somebody else's — the three are
+* deliberately indistinguishable, because a lease id is a bare integer and
+* guessing one must not reveal whether it exists.
+*
+* This does not write the ledger. A reader refreshing every thirty seconds for
+* an hour would be 120 UPDATEs on the table we bill from, for a value that only
+* matters while it is current; the durable extent is settled once, at close.
+* @summary Renew Lease
+*/
+const renewLease = async (eventId, options) => {
+	return request(getRenewLeaseUrl(eventId), {
+		...options,
+		method: "PUT"
+	});
+};
+//#endregion
+export { closeLease, getCloseLeaseUrl, getRenewLeaseUrl, renewLease };
+
+//# sourceMappingURL=consumption.js.map

package/dist/api/consumption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumption.js","names":[],"sources":["../../src/api/consumption/consumption.ts"],"sourcesContent":["/**\n * Generated by orval 🍺\n * Do not edit manually.\n * Mozaik backend\n * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.\n * OpenAPI spec version: 0.1.0\n */\nimport type {\n  LeaseRead\n} from '../../models';\n\nimport { request } from '../../client';\n\nexport const getCloseLeaseUrl = (eventId: number,) => {\n\n\n\n\n  return `/consumption/${eventId}`\n}\n\n/**\n * Finish reading. Returns the seat immediately rather than at lapse.\n *\n * ``204`` whether or not the lease was still open: the desired end state is\n * \"closed\", and a client that lost its connection and retried should not get an\n * error for succeeding twice.\n * @summary Close Lease\n */\nexport const closeLease = async (eventId: number, options?: Parameters<typeof request>[1]): Promise<void> => {\n\n  return request<void>(getCloseLeaseUrl(eventId),\n  {\n    ...options,\n    method: 'DELETE'\n\n\n  }\n);}\n\n\nexport const getRenewLeaseUrl = (eventId: number,) => {\n\n\n\n\n  return `/consumption/${eventId}`\n}\n\n/**\n * Heartbeat. Push the lease out; the client repeats before it lapses.\n *\n * ``404`` when the lease is closed, reaped, or somebody else's — the three are\n * deliberately indistinguishable, because a lease id is a bare integer and\n * guessing one must not reveal whether it exists.\n *\n * This does not write the ledger. A reader refreshing every thirty seconds for\n * an hour would be 120 UPDATEs on the table we bill from, for a value that only\n * matters while it is current; the durable extent is settled once, at close.\n * @summary Renew Lease\n */\nexport const renewLease = async (eventId: number, options?: Parameters<typeof request>[1]): Promise<LeaseRead> => {\n\n  return request<LeaseRead>(getRenewLeaseUrl(eventId),\n  {\n    ...options,\n    method: 'PUT'\n\n\n  }\n);}\n\n\n"],"mappings":";;;AAaA,MAAa,oBAAoB,YAAqB;CAKpD,OAAO,gBAAgB;AACzB;;;;;;;;;AAUA,MAAa,aAAa,OAAO,SAAiB,YAA2D;CAE3G,OAAO,QAAc,iBAAiB,OAAO,GAC7C;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE;AAGF,MAAa,oBAAoB,YAAqB;CAKpD,OAAO,gBAAgB;AACzB;;;;;;;;;;;;;AAcA,MAAa,aAAa,OAAO,SAAiB,YAAgE;CAEhH,OAAO,QAAmB,iBAAiB,OAAO,GAClD;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE"}

package/dist/api/cvs-app.d.ts

@@ -0,0 +1,39 @@
+
+import { At as PlaybackReportWrite, Kt as NotificationListRead, jt as PlaybackReportRead, mn as ListNotificationsParams } from "../index-wL_20vR8.js";
+import { c as request } from "../client-BDwBZYB0.js";
+//#region src/api/cvs-app/cvs-app.d.ts
+export declare const getListNotificationsUrl: (params?: ListNotificationsParams) => string;
+/**
+ * Notifications published to this caller's library.
+ *
+ * **These are tenant broadcasts, not a per-user inbox.** ``app_notification``
+ * has no user column and no read state — ``app_notification_bm`` links a
+ * notification to a library and that is the whole model. So ``unread_count`` is
+ * always ``0`` here and every notification is returned every time.
+ *
+ * Giving each member their own read state is a schema change (a
+ * ``notification_read`` row per user and notification), not a query change. It
+ * is worth doing — a broadcast list that never shrinks is one people stop
+ * opening — but it is a decision rather than a port, so it is not made here.
+ * @summary List Notifications
+ */
+export declare const listNotifications: (params?: ListNotificationsParams, options?: Parameters<typeof request>[1]) => Promise<NotificationListRead>;
+export declare const getCreateReportUrl: () => string;
+/**
+ * Report a playback problem.
+ *
+ * The identifying fields are taken from the credential, not the body. The
+ * legacy took ``adhId``, ``bmId`` and ``bmBibLocaleId`` from the query string
+ * and declared no ``Authorization`` at all, so anyone holding the shared
+ * ``api_key`` — which every deployed app binary contains — could file a report
+ * in any patron's name, at any library. The DTO still carries those three
+ * fields, marked transition-only, and this handler ignores every one of them.
+ *
+ * ``email`` is free text that ends up in a message. Authenticated and
+ * rate-limited it is a support channel; unauthenticated it is a spam relay with
+ * the library's return address on it.
+ * @summary Create Report
+ */
+export declare const createReport: (playbackReportWrite: PlaybackReportWrite, options?: Parameters<typeof request>[1]) => Promise<PlaybackReportRead>;
+//#endregion
+//# sourceMappingURL=cvs-app.d.ts.map

package/dist/api/cvs-app.js

@@ -0,0 +1,72 @@
+
+import { r as request } from "../client-D3kMOcIr.js";
+//#region src/api/cvs-app/cvs-app.ts
+const getListNotificationsUrl = (params) => {
+	const normalizedParams = new URLSearchParams();
+	Object.entries(params || {}).forEach(([key, value]) => {
+		if (value !== void 0) normalizedParams.append(key, value === null ? "null" : String(value));
+	});
+	const stringifiedParams = normalizedParams.toString();
+	return stringifiedParams.length > 0 ? `/cvs/notifications?${stringifiedParams}` : `/cvs/notifications`;
+};
+/**
+* Notifications published to this caller's library.
+*
+* **These are tenant broadcasts, not a per-user inbox.** ``app_notification``
+* has no user column and no read state — ``app_notification_bm`` links a
+* notification to a library and that is the whole model. So ``unread_count`` is
+* always ``0`` here and every notification is returned every time.
+*
+* Giving each member their own read state is a schema change (a
+* ``notification_read`` row per user and notification), not a query change. It
+* is worth doing — a broadcast list that never shrinks is one people stop
+* opening — but it is a decision rather than a port, so it is not made here.
+* @summary List Notifications
+*/
+const listNotifications = async (params, options) => {
+	return request(getListNotificationsUrl(params), {
+		...options,
+		method: "GET"
+	});
+};
+const getCreateReportUrl = () => {
+	return `/cvs/reports`;
+};
+/**
+* Report a playback problem.
+*
+* The identifying fields are taken from the credential, not the body. The
+* legacy took ``adhId``, ``bmId`` and ``bmBibLocaleId`` from the query string
+* and declared no ``Authorization`` at all, so anyone holding the shared
+* ``api_key`` — which every deployed app binary contains — could file a report
+* in any patron's name, at any library. The DTO still carries those three
+* fields, marked transition-only, and this handler ignores every one of them.
+*
+* ``email`` is free text that ends up in a message. Authenticated and
+* rate-limited it is a support channel; unauthenticated it is a spam relay with
+* the library's return address on it.
+* @summary Create Report
+*/
+const createReport = async (playbackReportWrite, options) => {
+	const getHeaders = (h) => {
+		if (!h) return {};
+		if (h instanceof Headers) return Object.fromEntries(h.entries());
+		if (Symbol.iterator in h) return Object.fromEntries(Array.from(h, (entry) => Array.from(entry)));
+		const headers = {};
+		for (const [name, value] of Object.entries(h)) if (value !== void 0) headers[name] = value;
+		return headers;
+	};
+	return request(getCreateReportUrl(), {
+		...options,
+		method: "POST",
+		headers: {
+			"Content-Type": "application/json",
+			...getHeaders(options?.headers)
+		},
+		body: JSON.stringify(playbackReportWrite)
+	});
+};
+//#endregion
+export { createReport, getCreateReportUrl, getListNotificationsUrl, listNotifications };
+
+//# sourceMappingURL=cvs-app.js.map

package/dist/api/cvs-app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cvs-app.js","names":[],"sources":["../../src/api/cvs-app/cvs-app.ts"],"sourcesContent":["/**\n * Generated by orval 🍺\n * Do not edit manually.\n * Mozaik backend\n * Four products behind one API — Biblio, Médiathèques, the partner catalogues (Nextory and YouScribe) and Prof Express. Authentication is Keycloak SSO only, once, for all of them: see the **auth** section below for the browser flow and the three failure modes.\n * OpenAPI spec version: 0.1.0\n */\nimport type {\n  ListNotificationsParams,\n  NotificationListRead,\n  PlaybackReportRead,\n  PlaybackReportWrite\n} from '../../models';\n\nimport { request } from '../../client';\n\nexport const getListNotificationsUrl = (params?: ListNotificationsParams,) => {\n  const normalizedParams = new URLSearchParams();\n\n  Object.entries(params || {}).forEach(([key, value]) => {\n\n    if (value !== undefined) {\n      normalizedParams.append(key, value === null ? 'null' : String(value))\n    }\n  });\n\n  const stringifiedParams = normalizedParams.toString();\n\n  return stringifiedParams.length > 0 ? `/cvs/notifications?${stringifiedParams}` : `/cvs/notifications`\n}\n\n/**\n * Notifications published to this caller's library.\n *\n * **These are tenant broadcasts, not a per-user inbox.** ``app_notification``\n * has no user column and no read state — ``app_notification_bm`` links a\n * notification to a library and that is the whole model. So ``unread_count`` is\n * always ``0`` here and every notification is returned every time.\n *\n * Giving each member their own read state is a schema change (a\n * ``notification_read`` row per user and notification), not a query change. It\n * is worth doing — a broadcast list that never shrinks is one people stop\n * opening — but it is a decision rather than a port, so it is not made here.\n * @summary List Notifications\n */\nexport const listNotifications = async (params?: ListNotificationsParams, options?: Parameters<typeof request>[1]): Promise<NotificationListRead> => {\n\n  return request<NotificationListRead>(getListNotificationsUrl(params),\n  {\n    ...options,\n    method: 'GET'\n\n\n  }\n);}\n\n\nexport const getCreateReportUrl = () => {\n\n\n\n\n  return `/cvs/reports`\n}\n\n/**\n * Report a playback problem.\n *\n * The identifying fields are taken from the credential, not the body. The\n * legacy took ``adhId``, ``bmId`` and ``bmBibLocaleId`` from the query string\n * and declared no ``Authorization`` at all, so anyone holding the shared\n * ``api_key`` — which every deployed app binary contains — could file a report\n * in any patron's name, at any library. The DTO still carries those three\n * fields, marked transition-only, and this handler ignores every one of them.\n *\n * ``email`` is free text that ends up in a message. Authenticated and\n * rate-limited it is a support channel; unauthenticated it is a spam relay with\n * the library's return address on it.\n * @summary Create Report\n */\nexport const createReport = async (playbackReportWrite: PlaybackReportWrite, options?: Parameters<typeof request>[1]): Promise<PlaybackReportRead> => {\n\n    const getHeaders = (h?: NonNullable<RequestInit['headers']>): Record<string, string | readonly string[]> => {\n    if (!h) return {};\n    if (h instanceof Headers) return Object.fromEntries(h.entries());\n    if (Symbol.iterator in h) {\n      return Object.fromEntries(\n        Array.from(h as Iterable<Iterable<string>>, (entry) => Array.from(entry) as [string, string]),\n      );\n    }\n    const headers: Record<string, string | readonly string[]> = {};\n    for (const [name, value] of Object.entries<string | readonly string[] | undefined>(h)) {\n      if (value !== undefined) headers[name] = value;\n    }\n    return headers;\n  };\nreturn request<PlaybackReportRead>(getCreateReportUrl(),\n  {\n    ...options,\n    method: 'POST',\n    headers: { 'Content-Type': 'application/json', ...getHeaders(options?.headers) },\n    body: JSON.stringify(playbackReportWrite)\n  }\n);}\n\n\n"],"mappings":";;;AAgBA,MAAa,2BAA2B,WAAsC;CAC5E,MAAM,mBAAmB,IAAI,gBAAgB;CAE7C,OAAO,QAAQ,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,WAAW;EAErD,IAAI,UAAU,KAAA,GACZ,iBAAiB,OAAO,KAAK,UAAU,OAAO,SAAS,OAAO,KAAK,CAAC;CAExE,CAAC;CAED,MAAM,oBAAoB,iBAAiB,SAAS;CAEpD,OAAO,kBAAkB,SAAS,IAAI,sBAAsB,sBAAsB;AACpF;;;;;;;;;;;;;;;AAgBA,MAAa,oBAAoB,OAAO,QAAkC,YAA2E;CAEnJ,OAAO,QAA8B,wBAAwB,MAAM,GACnE;EACE,GAAG;EACH,QAAQ;CAGV,CACF;AAAE;AAGF,MAAa,2BAA2B;CAKtC,OAAO;AACT;;;;;;;;;;;;;;;;AAiBA,MAAa,eAAe,OAAO,qBAA0C,YAAyE;CAElJ,MAAM,cAAc,MAAwF;EAC5G,IAAI,CAAC,GAAG,OAAO,CAAC;EAChB,IAAI,aAAa,SAAS,OAAO,OAAO,YAAY,EAAE,QAAQ,CAAC;EAC/D,IAAI,OAAO,YAAY,GACrB,OAAO,OAAO,YACZ,MAAM,KAAK,IAAkC,UAAU,MAAM,KAAK,KAAK,CAAqB,CAC9F;EAEF,MAAM,UAAsD,CAAC;EAC7D,KAAK,MAAM,CAAC,MAAM,UAAU,OAAO,QAAgD,CAAC,GAClF,IAAI,UAAU,KAAA,GAAW,QAAQ,QAAQ;EAE3C,OAAO;CACT;CACF,OAAO,QAA4B,mBAAmB,GACpD;EACE,GAAG;EACH,QAAQ;EACR,SAAS;GAAE,gBAAgB;GAAoB,GAAG,WAAW,SAAS,OAAO;EAAE;EAC/E,MAAM,KAAK,UAAU,mBAAmB;CAC1C,CACF;AAAE"}