Guía práctica de la API de AccesPub

# macOS / Linux (terminal). En Windows, usa Git Bash o WSL.
export BASE="https://api.accespub.app/v1"
export ACCESPUB_KEY="ap_test_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"   # tu clave de pruebas
# Solo para gestionar personas y claves: una clave de administración (ver paso 0)
export ACCESPUB_ADMIN_KEY="ap_test_yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy"

# Los ejemplos usan también estas variables. Se rellenan a medida que la API
# devuelve identificadores (cada ejemplo indica cuál guardar):
# export BATCH_ID=…   JOB_ID=…   ITEM_ID=…   USER_ID=…   KEY_ID=…

# Requiere Python 3.9+ y la librería requests:  pip install requests
import os, uuid, json, time, requests

BASE = "https://api.accespub.app/v1"
KEY = os.environ["ACCESPUB_KEY"]          # export ACCESPUB_KEY=ap_test_…
H = {"Authorization": f"Bearer {KEY}"}    # cabecera común a todas las peticiones
# Solo para gestionar personas y claves (clave de administración, ver paso 0):
HA = {"Authorization": f"Bearer {os.environ.get('ACCESPUB_ADMIN_KEY', '')}"}

# Los ejemplos van guardando los identificadores que devuelve la API en
# variables (BATCH_ID, JOB_ID…). Ejecútalos en orden en la misma sesión.

// Node.js 18 o superior (sin dependencias). Guarda los ejemplos en un
// fichero .mjs y ejecútalo con:  ACCESPUB_KEY=ap_test_… node guia.mjs
import { readFile, writeFile } from "node:fs/promises";

const BASE = "https://api.accespub.app/v1";
const H = { Authorization: `Bearer ${process.env.ACCESPUB_KEY}` };
// Solo para gestionar personas y claves (clave de administración, ver paso 0):
const HA = { Authorization: `Bearer ${process.env.ACCESPUB_ADMIN_KEY}` };

// Los ejemplos van guardando los identificadores que devuelve la API en
// variables (BATCH_ID, JOB_ID…). Usa "let" si repites un ejemplo.

curl -s "$BASE/me" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/me", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/me`, { headers: { ...H } });
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/organization" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/organization", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/organization`, { headers: { ...H } });
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/organization/usage?months=6" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/organization/usage?months=6", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/organization/usage?months=6`, { headers: { ...H } });
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/api-keys" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/api-keys", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/api-keys`, { headers: { ...H } });
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/api-keys" \
  -H "Authorization: Bearer $ACCESPUB_ADMIN_KEY" \
  -H "Content-Type: application/json" \
  -d '{"mode": "live", "label": "Producción - catálogo"}'

# Guarda el identificador que devuelve (campo "id"):
export KEY_ID=key_01JQ7V9R3T5V7X9Z1B3D5F7H9K

r = requests.post(
    f"{BASE}/api-keys",
    headers=HA,
    json={"mode": "live", "label": "Producción - catálogo"},
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))
KEY_ID = data["id"]

const r = await fetch(`${BASE}/api-keys`, {
  method: "POST",
  headers: { ...HA, "Content-Type": "application/json" },
  body: JSON.stringify({mode: "live", label: "Producción - catálogo"}),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));
const KEY_ID = data.id;

curl -s -X DELETE "$BASE/api-keys/$KEY_ID" \
  -H "Authorization: Bearer $ACCESPUB_ADMIN_KEY"

r = requests.delete(f"{BASE}/api-keys/{KEY_ID}", headers=HA)
print(r.status_code)

const r = await fetch(`${BASE}/api-keys/${KEY_ID}`, {
  method: "DELETE",
  headers: { ...HA },
});
console.log(r.status);

curl -s "$BASE/users" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/users", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/users`, { headers: { ...H } });
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/invitations" \
  -H "Authorization: Bearer $ACCESPUB_ADMIN_KEY" \
  -H "Content-Type: application/json" \
  -d '{"email": "jordi@velablanca.example", "role": "reviewer", "name": "Jordi Puig"}'

# Guarda el identificador que devuelve (campo "id"):
export USER_ID=usr_01JQ7W1F3H5J7K9M1N3P5Q7S9T

r = requests.post(
    f"{BASE}/invitations",
    headers=HA,
    json={"email": "jordi@velablanca.example", "role": "reviewer", "name": "Jordi Puig"},
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))
USER_ID = data["id"]

const r = await fetch(`${BASE}/invitations`, {
  method: "POST",
  headers: { ...HA, "Content-Type": "application/json" },
  body: JSON.stringify({email: "jordi@velablanca.example", role: "reviewer", name: "Jordi Puig"}),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));
const USER_ID = data.id;

curl -s "$BASE/invitations" \
  -H "Authorization: Bearer $ACCESPUB_ADMIN_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "email": "lucia@correctoras.example",
  "role": "external_reviewer",
  "name": "Lucía Ferrer",
  "batch_id": "'"$BATCH_ID"'"
}'

r = requests.post(
    f"{BASE}/invitations",
    headers=HA,
    json={
        "email": "lucia@correctoras.example",
        "role": "external_reviewer",
        "name": "Lucía Ferrer",
        "batch_id": BATCH_ID
    },
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/invitations`, {
  method: "POST",
  headers: { ...HA, "Content-Type": "application/json" },
  body: JSON.stringify({
    email: "lucia@correctoras.example",
    role: "external_reviewer",
    name: "Lucía Ferrer",
    batch_id: BATCH_ID
  }),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/invitations/accept" \
  -H "Content-Type: application/json" \
  -d '{"token": "TOKEN_DEL_ENLACE", "password": "una-contraseña-larga", "name": "Jordi Puig"}'

r = requests.post(
    f"{BASE}/invitations/accept",
    json={"token": "TOKEN_DEL_ENLACE", "password": "una-contraseña-larga", "name": "Jordi Puig"},
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/invitations/accept`, {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({token: "TOKEN_DEL_ENLACE", password: "una-contraseña-larga", name: "Jordi Puig"}),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s -X PATCH "$BASE/users/$USER_ID" \
  -H "Authorization: Bearer $ACCESPUB_ADMIN_KEY" \
  -H "Content-Type: application/json" \
  -d '{"role": "batch_manager"}'

r = requests.patch(
    f"{BASE}/users/{USER_ID}",
    headers=HA,
    json={"role": "batch_manager"},
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/users/${USER_ID}`, {
  method: "PATCH",
  headers: { ...HA, "Content-Type": "application/json" },
  body: JSON.stringify({role: "batch_manager"}),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s -X POST "$BASE/users/$USER_ID/access-link" \
  -H "Authorization: Bearer $ACCESPUB_ADMIN_KEY"

r = requests.post(f"{BASE}/users/{USER_ID}/access-link", headers=HA)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/users/${USER_ID}/access-link`, {
  method: "POST",
  headers: { ...HA },
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/users/$USER_ID/sign-in-link" \
  -H "Authorization: Bearer $ACCESPUB_KEY" \
  -H "Content-Type: application/json" \
  -d '{"next": "https://api.accespub.app/portal/titulos/job_01JQ7VC8T1Y3Z5A7B9C1D3E5F7/revision"}'

r = requests.post(
    f"{BASE}/users/{USER_ID}/sign-in-link",
    headers=H,
    json={
        "next": "https://api.accespub.app/portal/titulos/job_01JQ7VC8T1Y3Z5A7B9C1D3E5F7/revision"
    },
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/users/${USER_ID}/sign-in-link`, {
  method: "POST",
  headers: { ...H, "Content-Type": "application/json" },
  body: JSON.stringify({next: "https://api.accespub.app/portal/titulos/job_01JQ7VC8T1Y3Z5A7B9C1D3E5F7/revision"}),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s -X DELETE "$BASE/users/$USER_ID" \
  -H "Authorization: Bearer $ACCESPUB_ADMIN_KEY"

r = requests.delete(f"{BASE}/users/{USER_ID}", headers=HA)
print(r.status_code)

const r = await fetch(`${BASE}/users/${USER_ID}`, {
  method: "DELETE",
  headers: { ...HA },
});
console.log(r.status);

curl -s "$BASE/sessions" \
  -c cookies.txt \
  -H "Content-Type: application/json" \
  -d '{"email": "jordi@velablanca.example", "password": "una-contraseña-larga"}'

# Guarda el csrf_token de la respuesta para las peticiones que cambian algo:
export CSRF=…

s = requests.Session()   # guarda la cookie de sesión
r = s.post(
    f"{BASE}/sessions",
    json={"email": "jordi@velablanca.example", "password": "una-contraseña-larga"},
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))
CSRF = data["csrf_token"]

const r = await fetch(`${BASE}/sessions`, {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({email: "jordi@velablanca.example", password: "una-contraseña-larga"}),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));
const CSRF = data.csrf_token;
const COOKIE = r.headers.getSetCookie().map((c) => c.split(";")[0]).join("; ");

curl -s "$BASE/sessions/link" \
  -c cookies.txt \
  -H "Content-Type: application/json" \
  -d '{"token": "TOKEN_DEL_ENLACE_DE_LOTE"}'

# Guarda el csrf_token de la respuesta para las peticiones que cambian algo:
export CSRF=…

s = requests.Session()   # guarda la cookie de sesión
r = s.post(f"{BASE}/sessions/link", json={"token": "TOKEN_DEL_ENLACE_DE_LOTE"})
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))
CSRF = data["csrf_token"]

const r = await fetch(`${BASE}/sessions/link`, {
  method: "POST",
  headers: { "Content-Type": "application/json" },
  body: JSON.stringify({token: "TOKEN_DEL_ENLACE_DE_LOTE"}),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));
const CSRF = data.csrf_token;
const COOKIE = r.headers.getSetCookie().map((c) => c.split(";")[0]).join("; ");

curl -s "$BASE/me/password" \
  -b cookies.txt -H "X-CSRF-Token: $CSRF" \
  -H "Content-Type: application/json" \
  -d '{"current_password": "una-contraseña-larga", "new_password": "otra-contraseña-más-larga"}'

r = s.post(
    f"{BASE}/me/password",
    headers={"X-CSRF-Token": CSRF},
    json={
        "current_password": "una-contraseña-larga",
        "new_password": "otra-contraseña-más-larga"
    },
)
print(r.status_code)

const r = await fetch(`${BASE}/me/password`, {
  method: "POST",
  headers: { Cookie: COOKIE, "X-CSRF-Token": CSRF, "Content-Type": "application/json" },
  body: JSON.stringify({current_password: "una-contraseña-larga", new_password: "otra-contraseña-más-larga"}),
});
console.log(r.status);

curl -s -X DELETE "$BASE/sessions/current" \
  -b cookies.txt -H "X-CSRF-Token: $CSRF"

r = s.delete(f"{BASE}/sessions/current", headers={"X-CSRF-Token": CSRF})
print(r.status_code)

const r = await fetch(`${BASE}/sessions/current`, {
  method: "DELETE",
  headers: { Cookie: COOKIE, "X-CSRF-Token": CSRF },
});
console.log(r.status);

curl -s "$BASE/batches" \
  -H "Authorization: Bearer $ACCESPUB_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
  "name": "Novedades primavera 2027",
  "external_id": "LOTE-2027-03",
  "on_pending": "wait",
  "auto_finalize": false,
  "defaults": {
    "publisher": "Ediciones Vela Blanca",
    "fallback_language": "es",
    "ai_prefill": true,
    "commercial": {
      "pub_status": "04",
      "supplier_name": "Distribuciones Norte",
      "markets": [{"territory": "ES", "currency": "EUR", "tax_percent": "4"}]
    }
  }
}'

# Guarda el identificador que devuelve (campo "id"):
export BATCH_ID=bat_01JQ7VB3K9R2XW4D5M6N7P8Q

r = requests.post(
    f"{BASE}/batches",
    headers=H | {"Idempotency-Key": str(uuid.uuid4())},
    json={
        "name": "Novedades primavera 2027",
        "external_id": "LOTE-2027-03",
        "on_pending": "wait",
        "auto_finalize": False,
        "defaults": {
            "publisher": "Ediciones Vela Blanca",
            "fallback_language": "es",
            "ai_prefill": True,
            "commercial": {
                "pub_status": "04",
                "supplier_name": "Distribuciones Norte",
                "markets": [{"territory": "ES", "currency": "EUR", "tax_percent": "4"}]
            }
        }
    },
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))
BATCH_ID = data["id"]

const r = await fetch(`${BASE}/batches`, {
  method: "POST",
  headers: { ...H, "Content-Type": "application/json", "Idempotency-Key": crypto.randomUUID() },
  body: JSON.stringify({
    name: "Novedades primavera 2027",
    external_id: "LOTE-2027-03",
    on_pending: "wait",
    auto_finalize: false,
    defaults: {
      publisher: "Ediciones Vela Blanca",
      fallback_language: "es",
      ai_prefill: true,
      commercial: {
        pub_status: "04",
        supplier_name: "Distribuciones Norte",
        markets: [{territory: "ES", currency: "EUR", tax_percent: "4"}]
      }
    }
  }),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));
const BATCH_ID = data.id;

curl -s "$BASE/batches?status=needs_review&limit=25" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/batches?status=needs_review&limit=25", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/batches?status=needs_review&limit=25`, {
  headers: { ...H },
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/batches/$BATCH_ID" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/batches/{BATCH_ID}", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/batches/${BATCH_ID}`, { headers: { ...H } });
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s -X PATCH "$BASE/batches/$BATCH_ID" \
  -H "Authorization: Bearer $ACCESPUB_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "name": "Novedades primavera 2027 (revisado)",
  "auto_finalize": true,
  "reviewer_user_ids": ["'"$USER_ID"'"]
}'

r = requests.patch(
    f"{BASE}/batches/{BATCH_ID}",
    headers=H,
    json={
        "name": "Novedades primavera 2027 (revisado)",
        "auto_finalize": True,
        "reviewer_user_ids": [USER_ID]
    },
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/batches/${BATCH_ID}`, {
  method: "PATCH",
  headers: { ...H, "Content-Type": "application/json" },
  body: JSON.stringify({
    name: "Novedades primavera 2027 (revisado)",
    auto_finalize: true,
    reviewer_user_ids: [USER_ID]
  }),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s -X DELETE "$BASE/batches/$BATCH_ID" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.delete(f"{BASE}/batches/{BATCH_ID}", headers=H)
print(r.status_code)

const r = await fetch(`${BASE}/batches/${BATCH_ID}`, {
  method: "DELETE",
  headers: { ...H },
});
console.log(r.status);

curl -s "$BASE/batches/$BATCH_ID/jobs" \
  -H "Authorization: Bearer $ACCESPUB_KEY" \
  -H "Idempotency-Key: $(uuidgen)" \
  -F "file=@el-faro-de-las-gaviotas.epub" \
  -F "external_id=VB-0412" \
  -F "isbn=9788412345674"

# Guarda el identificador que devuelve (campo "id"):
export JOB_ID=job_01JQ7VC8T1Y3Z5A7B9C1D3E5F7

r = requests.post(
    f"{BASE}/batches/{BATCH_ID}/jobs",
    headers=H | {"Idempotency-Key": str(uuid.uuid4())},
    files={"file": open("el-faro-de-las-gaviotas.epub", "rb")},
    data={"external_id": "VB-0412", "isbn": "9788412345674"},
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))
JOB_ID = data["id"]

const form = new FormData();
form.append("file", new Blob([await readFile("el-faro-de-las-gaviotas.epub")]), "el-faro-de-las-gaviotas.epub");
form.append("external_id", "VB-0412");
form.append("isbn", "9788412345674");
const r = await fetch(`${BASE}/batches/${BATCH_ID}/jobs`, {
  method: "POST",
  headers: { ...H, "Idempotency-Key": crypto.randomUUID() },
  body: form,
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));
const JOB_ID = data.id;

curl -s "$BASE/jobs/$JOB_ID" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

# Esperar mientras esté en cola, analizándose o finalizándose (consulta cada 15 s):
while true; do
  ESTADO=$(curl -s "$BASE/jobs/$JOB_ID" -H "Authorization: Bearer $ACCESPUB_KEY" \
           | grep -o '"status": *"[a-z_]*"' | head -1 | cut -d'"' -f4)
  echo "Estado: $ESTADO"
  case "$ESTADO" in queued|processing|finalizing) sleep 15 ;; *) break ;; esac
done

# Esperar mientras esté en cola, analizándose o finalizándose (consulta cada 15 s)
while True:
    job = requests.get(f"{BASE}/jobs/{JOB_ID}", headers=H).json()
    print("Estado:", job["status"])
    if job["status"] not in ("queued", "processing", "finalizing"):
        break
    time.sleep(15)

print(job["title"], job["review"], job["billing"])

// Esperar mientras esté en cola, analizándose o finalizándose (consulta cada 15 s)
let job;
while (true) {
  job = await (await fetch(`${BASE}/jobs/${JOB_ID}`, { headers: H })).json();
  console.log("Estado:", job.status);
  if (!["queued", "processing", "finalizing"].includes(job.status)) break;
  await new Promise((ok) => setTimeout(ok, 15000));
}
console.log(job.title, job.review, job.billing);

curl -s "$BASE/batches/$BATCH_ID/jobs?status=needs_review" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/batches/{BATCH_ID}/jobs?status=needs_review", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/batches/${BATCH_ID}/jobs?status=needs_review`, {
  headers: { ...H },
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s -X PATCH "$BASE/jobs/$JOB_ID" \
  -H "Authorization: Bearer $ACCESPUB_KEY" \
  -H "Content-Type: application/json" \
  -d '{"isbn": "978-84-1234-567-4", "external_id": "VB-0412", "assignee_user_ids": ["'"$USER_ID"'"]}'

r = requests.patch(
    f"{BASE}/jobs/{JOB_ID}",
    headers=H,
    json={"isbn": "978-84-1234-567-4", "external_id": "VB-0412", "assignee_user_ids": [USER_ID]},
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/jobs/${JOB_ID}`, {
  method: "PATCH",
  headers: { ...H, "Content-Type": "application/json" },
  body: JSON.stringify({isbn: "978-84-1234-567-4", external_id: "VB-0412", assignee_user_ids: [USER_ID]}),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/jobs/$JOB_ID/report" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/jobs/{JOB_ID}/report", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/jobs/${JOB_ID}/report`, { headers: { ...H } });
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s -X POST "$BASE/jobs/$JOB_ID/reprocess" \
  -H "Authorization: Bearer $ACCESPUB_KEY" \
  -H "Idempotency-Key: $(uuidgen)"

r = requests.post(
    f"{BASE}/jobs/{JOB_ID}/reprocess",
    headers=H | {"Idempotency-Key": str(uuid.uuid4())},
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/jobs/${JOB_ID}/reprocess`, {
  method: "POST",
  headers: { ...H, "Idempotency-Key": crypto.randomUUID() },
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s -X DELETE "$BASE/jobs/$JOB_ID" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.delete(f"{BASE}/jobs/{JOB_ID}", headers=H)
print(r.status_code)

const r = await fetch(`${BASE}/jobs/${JOB_ID}`, { method: "DELETE", headers: { ...H } });
console.log(r.status);

curl -s "$BASE/large-upload-requests" \
  -H "Authorization: Bearer $ACCESPUB_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "batch_id": "'"$BATCH_ID"'",
  "filename": "atlas-de-las-nubes.epub",
  "size_bytes": 87031808,
  "reason": "Libro ilustrado con fotografías a alta resolución."
}'

r = requests.post(
    f"{BASE}/large-upload-requests",
    headers=H,
    json={
        "batch_id": BATCH_ID,
        "filename": "atlas-de-las-nubes.epub",
        "size_bytes": 87031808,
        "reason": "Libro ilustrado con fotografías a alta resolución."
    },
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/large-upload-requests`, {
  method: "POST",
  headers: { ...H, "Content-Type": "application/json" },
  body: JSON.stringify({
    batch_id: BATCH_ID,
    filename: "atlas-de-las-nubes.epub",
    size_bytes: 87031808,
    reason: "Libro ilustrado con fotografías a alta resolución."
  }),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/large-upload-requests" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/large-upload-requests", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/large-upload-requests`, { headers: { ...H } });
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/jobs/$JOB_ID/review-items?status=pending&limit=100" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

# Guarda el identificador que devuelve (campo "data[0].id"):
export ITEM_ID=img_0004

r = requests.get(
    f"{BASE}/jobs/{JOB_ID}/review-items?status=pending&limit=100",
    headers=H,
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))
ITEM_ID = data["data"][0]["id"]

const r = await fetch(`${BASE}/jobs/${JOB_ID}/review-items?status=pending&limit=100`, {
  headers: { ...H },
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));
const ITEM_ID = data.data[0].id;

curl -s -o imagen-a-revisar.jpg "$BASE/jobs/$JOB_ID/review-items/$ITEM_ID/image" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/jobs/{JOB_ID}/review-items/{ITEM_ID}/image", headers=H)
open("imagen-a-revisar.jpg", "wb").write(r.content)
print(r.status_code, "→ guardado en imagen-a-revisar.jpg")

const r = await fetch(`${BASE}/jobs/${JOB_ID}/review-items/${ITEM_ID}/image`, {
  headers: { ...H },
});
await writeFile("imagen-a-revisar.jpg", Buffer.from(await r.arrayBuffer()));
console.log(r.status, "→ guardado en imagen-a-revisar.jpg");

curl -s -X POST "$BASE/jobs/$JOB_ID/review-items/$ITEM_ID/suggestion" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.post(f"{BASE}/jobs/{JOB_ID}/review-items/{ITEM_ID}/suggestion", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/jobs/${JOB_ID}/review-items/${ITEM_ID}/suggestion`, {
  method: "POST",
  headers: { ...H },
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s -X POST "$BASE/jobs/$JOB_ID/ai-prefill" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.post(f"{BASE}/jobs/{JOB_ID}/ai-prefill", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/jobs/${JOB_ID}/ai-prefill`, {
  method: "POST",
  headers: { ...H },
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/jobs/$JOB_ID/ai-prefill" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/jobs/{JOB_ID}/ai-prefill", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/jobs/${JOB_ID}/ai-prefill`, { headers: { ...H } });
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/jobs/$JOB_ID/decisions" \
  -H "Authorization: Bearer $ACCESPUB_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
  "reviewer": {"name": "Jordi Puig", "email": "jordi@velablanca.example"},
  "decisions": [
    {
      "item_id": "img_0004",
      "decision": {
        "kind": "image",
        "decorative": false,
        "alt": "Faro blanco sobre un acantilado al amanecer, con gaviotas volando.",
        "from_suggestion": true
      }
    },
    {"item_id": "img_0005", "decision": {"kind": "image", "decorative": true}},
    {
      "item_id": "tbl_0001",
      "decision": {
        "kind": "table",
        "layout": false,
        "caption": "Horario de mareas en marzo",
        "first_row_as_headers": true
      }
    },
    {"item_id": "lang_0001", "decision": {"kind": "language", "action": "keep"}},
    {
      "item_id": "dlang_0002",
      "decision": {"kind": "language", "action": "replace", "new_lang": "ca"}
    },
    {
      "item_id": "book_language",
      "decision": {"kind": "language", "action": "replace", "languages": ["es"]}
    }
  ]
}'

r = requests.post(
    f"{BASE}/jobs/{JOB_ID}/decisions",
    headers=H | {"Idempotency-Key": str(uuid.uuid4())},
    json={
        "reviewer": {"name": "Jordi Puig", "email": "jordi@velablanca.example"},
        "decisions": [
            {
                "item_id": "img_0004",
                "decision": {
                    "kind": "image",
                    "decorative": False,
                    "alt": "Faro blanco sobre un acantilado al amanecer, con gaviotas volando.",
                    "from_suggestion": True
                }
            },
            {"item_id": "img_0005", "decision": {"kind": "image", "decorative": True}},
            {
                "item_id": "tbl_0001",
                "decision": {
                    "kind": "table",
                    "layout": False,
                    "caption": "Horario de mareas en marzo",
                    "first_row_as_headers": True
                }
            },
            {"item_id": "lang_0001", "decision": {"kind": "language", "action": "keep"}},
            {
                "item_id": "dlang_0002",
                "decision": {"kind": "language", "action": "replace", "new_lang": "ca"}
            },
            {
                "item_id": "book_language",
                "decision": {"kind": "language", "action": "replace", "languages": ["es"]}
            }
        ]
    },
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/jobs/${JOB_ID}/decisions`, {
  method: "POST",
  headers: { ...H, "Content-Type": "application/json", "Idempotency-Key": crypto.randomUUID() },
  body: JSON.stringify({
    reviewer: {name: "Jordi Puig", email: "jordi@velablanca.example"},
    decisions: [
      {
        item_id: "img_0004",
        decision: {
          kind: "image",
          decorative: false,
          alt: "Faro blanco sobre un acantilado al amanecer, con gaviotas volando.",
          from_suggestion: true
        }
      },
      {item_id: "img_0005", decision: {kind: "image", decorative: true}},
      {
        item_id: "tbl_0001",
        decision: {
          kind: "table",
          layout: false,
          caption: "Horario de mareas en marzo",
          first_row_as_headers: true
        }
      },
      {item_id: "lang_0001", decision: {kind: "language", action: "keep"}},
      {
        item_id: "dlang_0002",
        decision: {kind: "language", action: "replace", new_lang: "ca"}
      },
      {
        item_id: "book_language",
        decision: {kind: "language", action: "replace", languages: ["es"]}
      }
    ]
  }),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/jobs/$JOB_ID/decisions" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/jobs/{JOB_ID}/decisions", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/jobs/${JOB_ID}/decisions`, { headers: { ...H } });
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/jobs/$JOB_ID/skip-review" \
  -H "Authorization: Bearer $ACCESPUB_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
  "confirm_decorative": true,
  "reviewer": {"name": "Jordi Puig", "email": "jordi@velablanca.example"}
}'

r = requests.post(
    f"{BASE}/jobs/{JOB_ID}/skip-review",
    headers=H | {"Idempotency-Key": str(uuid.uuid4())},
    json={
        "confirm_decorative": True,
        "reviewer": {"name": "Jordi Puig", "email": "jordi@velablanca.example"}
    },
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/jobs/${JOB_ID}/skip-review`, {
  method: "POST",
  headers: { ...H, "Content-Type": "application/json", "Idempotency-Key": crypto.randomUUID() },
  body: JSON.stringify({
    confirm_decorative: true,
    reviewer: {name: "Jordi Puig", email: "jordi@velablanca.example"}
  }),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/jobs/$JOB_ID/metadata" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/jobs/{JOB_ID}/metadata", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/jobs/${JOB_ID}/metadata`, { headers: { ...H } });
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s -X PATCH "$BASE/jobs/$JOB_ID/metadata" \
  -H "Authorization: Bearer $ACCESPUB_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "dc": {
    "title": "El faro de las gaviotas",
    "creator": "Elena Roca",
    "date": "2020-06-05",
    "publisher": "Ediciones Vela Blanca"
  },
  "page_source_isbn": "9788412345681",
  "accessibility_summary": "Libro con texto alternativo en todas las ilustraciones y navegación por capítulos."
}'

r = requests.patch(
    f"{BASE}/jobs/{JOB_ID}/metadata",
    headers=H,
    json={
        "dc": {
            "title": "El faro de las gaviotas",
            "creator": "Elena Roca",
            "date": "2020-06-05",
            "publisher": "Ediciones Vela Blanca"
        },
        "page_source_isbn": "9788412345681",
        "accessibility_summary": "Libro con texto alternativo en todas las ilustraciones y navegación por capítulos."
    },
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/jobs/${JOB_ID}/metadata`, {
  method: "PATCH",
  headers: { ...H, "Content-Type": "application/json" },
  body: JSON.stringify({
    dc: {
      title: "El faro de las gaviotas",
      creator: "Elena Roca",
      date: "2020-06-05",
      publisher: "Ediciones Vela Blanca"
    },
    page_source_isbn: "9788412345681",
    accessibility_summary: "Libro con texto alternativo en todas las ilustraciones y navegación por capítulos."
  }),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s -X POST "$BASE/jobs/$JOB_ID/metadata/suggestion" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.post(f"{BASE}/jobs/{JOB_ID}/metadata/suggestion", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/jobs/${JOB_ID}/metadata/suggestion`, {
  method: "POST",
  headers: { ...H },
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s -X PATCH "$BASE/jobs/$JOB_ID/metadata" \
  -H "Authorization: Bearer $ACCESPUB_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "dc": {"description": "En un pueblo pesquero del norte, la última farera…"},
  "subjects": {
    "thema": ["FBA", "1DSE"],
    "bisac": ["FIC019000"],
    "keywords": ["faro", "mar", "memoria familiar"]
  }
}'

r = requests.patch(
    f"{BASE}/jobs/{JOB_ID}/metadata",
    headers=H,
    json={
        "dc": {"description": "En un pueblo pesquero del norte, la última farera…"},
        "subjects": {
            "thema": ["FBA", "1DSE"],
            "bisac": ["FIC019000"],
            "keywords": ["faro", "mar", "memoria familiar"]
        }
    },
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/jobs/${JOB_ID}/metadata`, {
  method: "PATCH",
  headers: { ...H, "Content-Type": "application/json" },
  body: JSON.stringify({
    dc: {description: "En un pueblo pesquero del norte, la última farera…"},
    subjects: {
      thema: ["FBA", "1DSE"],
      bisac: ["FIC019000"],
      keywords: ["faro", "mar", "memoria familiar"]
    }
  }),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/jobs/$JOB_ID/finalize" \
  -H "Authorization: Bearer $ACCESPUB_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{"allow_pending": false}'

r = requests.post(
    f"{BASE}/jobs/{JOB_ID}/finalize",
    headers=H | {"Idempotency-Key": str(uuid.uuid4())},
    json={"allow_pending": False},
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/jobs/${JOB_ID}/finalize`, {
  method: "POST",
  headers: { ...H, "Content-Type": "application/json", "Idempotency-Key": crypto.randomUUID() },
  body: JSON.stringify({allow_pending: false}),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/batches/$BATCH_ID/finalize" \
  -H "Authorization: Bearer $ACCESPUB_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{"job_ids": ["'"$JOB_ID"'"], "allow_pending": false}'

r = requests.post(
    f"{BASE}/batches/{BATCH_ID}/finalize",
    headers=H | {"Idempotency-Key": str(uuid.uuid4())},
    json={"job_ids": [JOB_ID], "allow_pending": False},
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/batches/${BATCH_ID}/finalize`, {
  method: "POST",
  headers: { ...H, "Content-Type": "application/json", "Idempotency-Key": crypto.randomUUID() },
  body: JSON.stringify({job_ids: [JOB_ID], allow_pending: false}),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s -o 9788412345674.epub "$BASE/jobs/$JOB_ID/files/epub?naming=isbn" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/jobs/{JOB_ID}/files/epub?naming=isbn", headers=H)
open("9788412345674.epub", "wb").write(r.content)
print(r.status_code, "→ guardado en 9788412345674.epub")

const r = await fetch(`${BASE}/jobs/${JOB_ID}/files/epub?naming=isbn`, {
  headers: { ...H },
});
await writeFile("9788412345674.epub", Buffer.from(await r.arrayBuffer()));
console.log(r.status, "→ guardado en 9788412345674.epub");

curl -s -o informe.html "$BASE/jobs/$JOB_ID/files/report_html?lang=es" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/jobs/{JOB_ID}/files/report_html?lang=es", headers=H)
open("informe.html", "wb").write(r.content)
print(r.status_code, "→ guardado en informe.html")

const r = await fetch(`${BASE}/jobs/${JOB_ID}/files/report_html?lang=es`, {
  headers: { ...H },
});
await writeFile("informe.html", Buffer.from(await r.arrayBuffer()));
console.log(r.status, "→ guardado en informe.html");

curl -s -o 9788412345674-onix.xml "$BASE/jobs/$JOB_ID/files/onix_a11y?naming=isbn" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/jobs/{JOB_ID}/files/onix_a11y?naming=isbn", headers=H)
open("9788412345674-onix.xml", "wb").write(r.content)
print(r.status_code, "→ guardado en 9788412345674-onix.xml")

const r = await fetch(`${BASE}/jobs/${JOB_ID}/files/onix_a11y?naming=isbn`, {
  headers: { ...H },
});
await writeFile("9788412345674-onix.xml", Buffer.from(await r.arrayBuffer()));
console.log(r.status, "→ guardado en 9788412345674-onix.xml");

curl -s -o original.epub "$BASE/jobs/$JOB_ID/files/original" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/jobs/{JOB_ID}/files/original", headers=H)
open("original.epub", "wb").write(r.content)
print(r.status_code, "→ guardado en original.epub")

const r = await fetch(`${BASE}/jobs/${JOB_ID}/files/original`, { headers: { ...H } });
await writeFile("original.epub", Buffer.from(await r.arrayBuffer()));
console.log(r.status, "→ guardado en original.epub");

curl -s -o novedades-primavera-2027.zip "$BASE/batches/$BATCH_ID/files/epubs?naming=isbn" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/batches/{BATCH_ID}/files/epubs?naming=isbn", headers=H)
open("novedades-primavera-2027.zip", "wb").write(r.content)
print(r.status_code, "→ guardado en novedades-primavera-2027.zip")

const r = await fetch(`${BASE}/batches/${BATCH_ID}/files/epubs?naming=isbn`, {
  headers: { ...H },
});
await writeFile("novedades-primavera-2027.zip", Buffer.from(await r.arrayBuffer()));
console.log(r.status, "→ guardado en novedades-primavera-2027.zip");

curl -s -o manifiesto.csv "$BASE/batches/$BATCH_ID/manifest?format=csv" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/batches/{BATCH_ID}/manifest?format=csv", headers=H)
open("manifiesto.csv", "wb").write(r.content)
print(r.status_code, "→ guardado en manifiesto.csv")

const r = await fetch(`${BASE}/batches/${BATCH_ID}/manifest?format=csv`, {
  headers: { ...H },
});
await writeFile("manifiesto.csv", Buffer.from(await r.arrayBuffer()));
console.log(r.status, "→ guardado en manifiesto.csv");

curl -s -X PATCH "$BASE/batches/$BATCH_ID/commercial" \
  -H "Authorization: Bearer $ACCESPUB_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "imprint": "Vela Blanca Narrativa",
  "pub_status": "04",
  "city": "Barcelona",
  "country": "ES",
  "supplier_name": "Distribuciones Norte",
  "markets": [
    {"territory": "ES", "currency": "EUR", "price_type": "02", "tax_percent": "4"},
    {"territory": "MX CO PE CL", "currency": "USD", "price_type": "01"},
    {
      "territory": "WORLD",
      "countries_excluded": "ES MX CO PE CL",
      "currency": "EUR",
      "price_type": "02"
    }
  ]
}'

r = requests.patch(
    f"{BASE}/batches/{BATCH_ID}/commercial",
    headers=H,
    json={
        "imprint": "Vela Blanca Narrativa",
        "pub_status": "04",
        "city": "Barcelona",
        "country": "ES",
        "supplier_name": "Distribuciones Norte",
        "markets": [
            {"territory": "ES", "currency": "EUR", "price_type": "02", "tax_percent": "4"},
            {"territory": "MX CO PE CL", "currency": "USD", "price_type": "01"},
            {
                "territory": "WORLD",
                "countries_excluded": "ES MX CO PE CL",
                "currency": "EUR",
                "price_type": "02"
            }
        ]
    },
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/batches/${BATCH_ID}/commercial`, {
  method: "PATCH",
  headers: { ...H, "Content-Type": "application/json" },
  body: JSON.stringify({
    imprint: "Vela Blanca Narrativa",
    pub_status: "04",
    city: "Barcelona",
    country: "ES",
    supplier_name: "Distribuciones Norte",
    markets: [
      {territory: "ES", currency: "EUR", price_type: "02", tax_percent: "4"},
      {territory: "MX CO PE CL", currency: "USD", price_type: "01"},
      {
        territory: "WORLD",
        countries_excluded: "ES MX CO PE CL",
        currency: "EUR",
        price_type: "02"
      }
    ]
  }),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/batches/$BATCH_ID/commercial" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/batches/{BATCH_ID}/commercial", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/batches/${BATCH_ID}/commercial`, { headers: { ...H } });
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s -X PATCH "$BASE/jobs/$JOB_ID/commercial" \
  -H "Authorization: Bearer $ACCESPUB_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "subtitle": "Una novela del Cantábrico",
  "collection": "Mareas",
  "collection_number": "7",
  "publishing_date": "2027-04-23",
  "copyright_year": "2027",
  "copyright_owner": "Elena Roca",
  "audience": "01",
  "age_from": "14",
  "contributors": [{"name": "Elena Roca", "role": "aut"}, {"name": "Joan Vidal", "role": "ill"}],
  "cover_url": "https://www.velablanca.example/cubiertas/9788412345674.jpg",
  "markets": [
    {
      "territory": "ES",
      "currency": "EUR",
      "price_type": "02",
      "tax_percent": "4",
      "price_amount": "9.99"
    },
    {
      "territory": "MX CO PE CL",
      "currency": "USD",
      "price_type": "01",
      "price_amount": "7.99"
    }
  ],
  "apply_to_batch": ["collection"]
}'

r = requests.patch(
    f"{BASE}/jobs/{JOB_ID}/commercial",
    headers=H,
    json={
        "subtitle": "Una novela del Cantábrico",
        "collection": "Mareas",
        "collection_number": "7",
        "publishing_date": "2027-04-23",
        "copyright_year": "2027",
        "copyright_owner": "Elena Roca",
        "audience": "01",
        "age_from": "14",
        "contributors": [{"name": "Elena Roca", "role": "aut"}, {"name": "Joan Vidal", "role": "ill"}],
        "cover_url": "https://www.velablanca.example/cubiertas/9788412345674.jpg",
        "markets": [
            {
                "territory": "ES",
                "currency": "EUR",
                "price_type": "02",
                "tax_percent": "4",
                "price_amount": "9.99"
            },
            {
                "territory": "MX CO PE CL",
                "currency": "USD",
                "price_type": "01",
                "price_amount": "7.99"
            }
        ],
        "apply_to_batch": ["collection"]
    },
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/jobs/${JOB_ID}/commercial`, {
  method: "PATCH",
  headers: { ...H, "Content-Type": "application/json" },
  body: JSON.stringify({
    subtitle: "Una novela del Cantábrico",
    collection: "Mareas",
    collection_number: "7",
    publishing_date: "2027-04-23",
    copyright_year: "2027",
    copyright_owner: "Elena Roca",
    audience: "01",
    age_from: "14",
    contributors: [{name: "Elena Roca", role: "aut"}, {name: "Joan Vidal", role: "ill"}],
    cover_url: "https://www.velablanca.example/cubiertas/9788412345674.jpg",
    markets: [
      {
        territory: "ES",
        currency: "EUR",
        price_type: "02",
        tax_percent: "4",
        price_amount: "9.99"
      },
      {territory: "MX CO PE CL", currency: "USD", price_type: "01", price_amount: "7.99"}
    ],
    apply_to_batch: ["collection"]
  }),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/jobs/$JOB_ID/commercial" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/jobs/{JOB_ID}/commercial", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/jobs/${JOB_ID}/commercial`, { headers: { ...H } });
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s -X POST "$BASE/jobs/$JOB_ID/onix-full" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.post(f"{BASE}/jobs/{JOB_ID}/onix-full", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/jobs/${JOB_ID}/onix-full`, {
  method: "POST",
  headers: { ...H },
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/batches/$BATCH_ID/onix-full" \
  -H "Authorization: Bearer $ACCESPUB_KEY" \
  -H "Content-Type: application/json" \
  -d '{"job_ids": ["'"$JOB_ID"'"]}'

r = requests.post(
    f"{BASE}/batches/{BATCH_ID}/onix-full",
    headers=H,
    json={"job_ids": [JOB_ID]},
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/batches/${BATCH_ID}/onix-full`, {
  method: "POST",
  headers: { ...H, "Content-Type": "application/json" },
  body: JSON.stringify({job_ids: [JOB_ID]}),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s -o 9788412345674-onix-comercial.xml "$BASE/jobs/$JOB_ID/files/onix_full?naming=isbn" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/jobs/{JOB_ID}/files/onix_full?naming=isbn", headers=H)
open("9788412345674-onix-comercial.xml", "wb").write(r.content)
print(r.status_code, "→ guardado en 9788412345674-onix-comercial.xml")

const r = await fetch(`${BASE}/jobs/${JOB_ID}/files/onix_full?naming=isbn`, {
  headers: { ...H },
});
await writeFile("9788412345674-onix-comercial.xml", Buffer.from(await r.arrayBuffer()));
console.log(r.status, "→ guardado en 9788412345674-onix-comercial.xml");

curl -s "$BASE/jobs/$JOB_ID/support-requests" \
  -H "Authorization: Bearer $ACCESPUB_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "message": "EPUBCheck sigue dando RSC-005 en el capítulo 3 después de la remediación.",
  "contact_email": "pau@velablanca.example",
  "share_epub": true
}'

r = requests.post(
    f"{BASE}/jobs/{JOB_ID}/support-requests",
    headers=H,
    json={
        "message": "EPUBCheck sigue dando RSC-005 en el capítulo 3 después de la remediación.",
        "contact_email": "pau@velablanca.example",
        "share_epub": True
    },
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/jobs/${JOB_ID}/support-requests`, {
  method: "POST",
  headers: { ...H, "Content-Type": "application/json" },
  body: JSON.stringify({
    message: "EPUBCheck sigue dando RSC-005 en el capítulo 3 después de la remediación.",
    contact_email: "pau@velablanca.example",
    share_epub: true
  }),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/jobs/$JOB_ID/support-requests" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/jobs/{JOB_ID}/support-requests", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/jobs/${JOB_ID}/support-requests`, { headers: { ...H } });
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/support-requests?status=open" \
  -H "Authorization: Bearer $ACCESPUB_KEY"

r = requests.get(f"{BASE}/support-requests?status=open", headers=H)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/support-requests?status=open`, { headers: { ...H } });
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/webhook-endpoints" \
  -H "Authorization: Bearer $ACCESPUB_ADMIN_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "url": "https://erp.velablanca.example/accespub/avisos",
  "description": "ERP de producción",
  "events": ["job.needs_review", "job.completed", "job.failed", "batch.completed", "credits.low"]
}'

# Guarda el identificador que devuelve (campo "id"):
export WEBHOOK_ID=whe_01JQ8C4E6G8J0K2M4N6P8R0S2T

r = requests.post(
    f"{BASE}/webhook-endpoints",
    headers=HA,
    json={
        "url": "https://erp.velablanca.example/accespub/avisos",
        "description": "ERP de producción",
        "events": [
            "job.needs_review",
            "job.completed",
            "job.failed",
            "batch.completed",
            "credits.low"
        ]
    },
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))
WEBHOOK_ID = data["id"]

const r = await fetch(`${BASE}/webhook-endpoints`, {
  method: "POST",
  headers: { ...HA, "Content-Type": "application/json" },
  body: JSON.stringify({
    url: "https://erp.velablanca.example/accespub/avisos",
    description: "ERP de producción",
    events: ["job.needs_review", "job.completed", "job.failed", "batch.completed", "credits.low"]
  }),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));
const WEBHOOK_ID = data.id;

# Simula un aviso firmado contra vuestro receptor local (necesita openssl).
SECRET="whsec_k3J9yQm1vH7pX2bN8cR5tW0aZ4eL6uF8"      # el de la dirección
ID="evt_prueba_$(date +%s)"; TS=$(date +%s)
BODY='{"id":"'$ID'","type":"webhook.test","created_at":"2027-03-05T10:00:00Z","mode":"test","data":{"message":"hola"}}'
KEY_HEX=$(printf '%s' "${SECRET#whsec_}" | base64 -d | od -An -tx1 | tr -d ' \n')
SIG=$(printf '%s' "$ID.$TS.$BODY" | openssl dgst -sha256 -mac HMAC -macopt hexkey:$KEY_HEX -binary | base64)

curl -s -i http://localhost:8000/accespub/avisos \
  -H "Content-Type: application/json" \
  -H "webhook-id: $ID" -H "webhook-timestamp: $TS" -H "webhook-signature: v1,$SIG" \
  -d "$BODY"
# → HTTP/1.0 204 (con una firma incorrecta, 401)

# receptor.py: recibe los avisos de AccesPub (Python 3.9+, sin dependencias)
import base64, hashlib, hmac, json, os, time
from http.server import BaseHTTPRequestHandler, HTTPServer

SECRET = os.environ["ACCESPUB_WEBHOOK_SECRET"]       # whsec_… (al dar de alta la dirección)
vistos = set()                                       # en producción, en vuestra base de datos

def verificar(headers, body: bytes) -> bool:
    msg_id, ts = headers.get("webhook-id", ""), headers.get("webhook-timestamp", "0")
    if abs(time.time() - int(ts)) > 300:             # más de 5 minutos: rechazar
        return False
    key = base64.b64decode(SECRET.removeprefix("whsec_"))
    firma = hmac.new(key, f"{msg_id}.{ts}.".encode() + body, hashlib.sha256).digest()
    esperada = base64.b64encode(firma).decode()
    return any(hmac.compare_digest(esperada, s.partition(",")[2])
               for s in headers.get("webhook-signature", "").split())

class Receptor(BaseHTTPRequestHandler):
    def do_POST(self):
        body = self.rfile.read(int(self.headers.get("Content-Length", 0)))   # el cuerpo tal cual llega
        if not verificar(self.headers, body):
            self.send_response(401); self.end_headers(); return
        self.send_response(204); self.end_headers()  # responder enseguida…
        evento = json.loads(body)
        if evento["id"] in vistos:                   # …y descartar repetidos
            return
        vistos.add(evento["id"])
        print(evento["type"], evento["data"].get("id"), evento["data"].get("status"))
        # p. ej. job.needs_review → botón «Revisar en AccesPub» con evento["data"]["review_url"]
        #        job.completed    → descargar las salidas del título

HTTPServer(("", 8000), Receptor).serve_forever()

// receptor.mjs: recibe los avisos de AccesPub (Node 18+, sin dependencias)
import http from "node:http";
import crypto from "node:crypto";

const SECRET = process.env.ACCESPUB_WEBHOOK_SECRET;  // whsec_… (al dar de alta la dirección)
const vistos = new Set();                            // en producción, en vuestra base de datos

function verificar(headers, body) {
  const id = headers["webhook-id"], ts = headers["webhook-timestamp"];
  if (!id || Math.abs(Date.now() / 1000 - Number(ts)) > 300) return false;
  const key = Buffer.from(SECRET.replace(/^whsec_/, ""), "base64");
  const esperada = Buffer.from(crypto.createHmac("sha256", key)
    .update(`${id}.${ts}.`).update(body).digest("base64"));
  return (headers["webhook-signature"] || "").split(" ").some((s) => {
    const firma = Buffer.from(s.split(",")[1] || "");
    return firma.length === esperada.length && crypto.timingSafeEqual(firma, esperada);
  });
}

http.createServer((req, res) => {
  const partes = [];
  req.on("data", (c) => partes.push(c));
  req.on("end", () => {
    const body = Buffer.concat(partes);              // el cuerpo tal cual llega
    if (!verificar(req.headers, body)) { res.writeHead(401).end(); return; }
    res.writeHead(204).end();                        // responder enseguida…
    const evento = JSON.parse(body);
    if (vistos.has(evento.id)) return;               // …y descartar repetidos
    vistos.add(evento.id);
    console.log(evento.type, evento.data.id, evento.data.status);
  });
}).listen(8000);

curl -s -X POST "$BASE/webhook-endpoints/$WEBHOOK_ID/test" \
  -H "Authorization: Bearer $ACCESPUB_ADMIN_KEY"

r = requests.post(f"{BASE}/webhook-endpoints/{WEBHOOK_ID}/test", headers=HA)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/webhook-endpoints/${WEBHOOK_ID}/test`, {
  method: "POST",
  headers: { ...HA },
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/webhook-endpoints" \
  -H "Authorization: Bearer $ACCESPUB_ADMIN_KEY"

r = requests.get(f"{BASE}/webhook-endpoints", headers=HA)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/webhook-endpoints`, { headers: { ...HA } });
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s "$BASE/webhook-endpoints/$WEBHOOK_ID/deliveries?limit=20" \
  -H "Authorization: Bearer $ACCESPUB_ADMIN_KEY"

# Guarda el identificador que devuelve (campo "data[0].id"):
export DELIVERY_ID=whd_01JQ8D2B4D6F8H0K2M4N6P8R0S

r = requests.get(
    f"{BASE}/webhook-endpoints/{WEBHOOK_ID}/deliveries?limit=20",
    headers=HA,
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))
DELIVERY_ID = data["data"][0]["id"]

const r = await fetch(`${BASE}/webhook-endpoints/${WEBHOOK_ID}/deliveries?limit=20`, {
  headers: { ...HA },
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));
const DELIVERY_ID = data.data[0].id;

curl -s "$BASE/webhook-endpoints/$WEBHOOK_ID/deliveries/$DELIVERY_ID" \
  -H "Authorization: Bearer $ACCESPUB_ADMIN_KEY"

r = requests.get(
    f"{BASE}/webhook-endpoints/{WEBHOOK_ID}/deliveries/{DELIVERY_ID}",
    headers=HA,
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/webhook-endpoints/${WEBHOOK_ID}/deliveries/${DELIVERY_ID}`, {
  headers: { ...HA },
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s -X POST "$BASE/webhook-endpoints/$WEBHOOK_ID/deliveries/$DELIVERY_ID/retry" \
  -H "Authorization: Bearer $ACCESPUB_ADMIN_KEY"

r = requests.post(
    f"{BASE}/webhook-endpoints/{WEBHOOK_ID}/deliveries/{DELIVERY_ID}/retry",
    headers=HA,
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/webhook-endpoints/${WEBHOOK_ID}/deliveries/${DELIVERY_ID}/retry`, {
  method: "POST",
  headers: { ...HA },
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s -X PATCH "$BASE/webhook-endpoints/$WEBHOOK_ID" \
  -H "Authorization: Bearer $ACCESPUB_ADMIN_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "events": ["job.needs_review", "job.ready", "job.completed", "job.failed", "batch.completed"],
  "enabled": true
}'

r = requests.patch(
    f"{BASE}/webhook-endpoints/{WEBHOOK_ID}",
    headers=HA,
    json={
        "events": ["job.needs_review", "job.ready", "job.completed", "job.failed", "batch.completed"],
        "enabled": True
    },
)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/webhook-endpoints/${WEBHOOK_ID}`, {
  method: "PATCH",
  headers: { ...HA, "Content-Type": "application/json" },
  body: JSON.stringify({
    events: ["job.needs_review", "job.ready", "job.completed", "job.failed", "batch.completed"],
    enabled: true
  }),
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s -X POST "$BASE/webhook-endpoints/$WEBHOOK_ID/rotate-secret" \
  -H "Authorization: Bearer $ACCESPUB_ADMIN_KEY"

r = requests.post(f"{BASE}/webhook-endpoints/{WEBHOOK_ID}/rotate-secret", headers=HA)
data = r.json()
print(r.status_code, json.dumps(data, indent=2, ensure_ascii=False))

const r = await fetch(`${BASE}/webhook-endpoints/${WEBHOOK_ID}/rotate-secret`, {
  method: "POST",
  headers: { ...HA },
});
const data = await r.json();
console.log(r.status, JSON.stringify(data, null, 2));

curl -s -X DELETE "$BASE/webhook-endpoints/$WEBHOOK_ID" \
  -H "Authorization: Bearer $ACCESPUB_ADMIN_KEY"

r = requests.delete(f"{BASE}/webhook-endpoints/{WEBHOOK_ID}", headers=HA)
print(r.status_code)

const r = await fetch(`${BASE}/webhook-endpoints/${WEBHOOK_ID}`, {
  method: "DELETE",
  headers: { ...HA },
});
console.log(r.status);