Getting started

import base64, hashlib, json, os, sys, time, uuid
import requests

API = "https://api-sandbox.prepared.com.au"
key = os.environ["PREPARED_API_KEY"]  # prep_test_...

def new_token():
    answer = requests.post(f"{API}/v1/token", headers={"Authorization": f"Bearer {key}"}).json()
    if "error" in answer:
        sys.exit(f"{answer['error']['code']}: {answer['error']['message']}")
    return answer["access_token"]

token = new_token()

# Build the multipart body first: Content-Digest is the SHA-256 of the exact bytes sent.
with open(sys.argv[1], "rb") as pdf:
    upload = requests.Request("POST", f"{API}/v1/contract-reviews", files={
        "file": ("contract.pdf", pdf.read(), "application/pdf"),
        "request": (None, json.dumps({"external_reference": sys.argv[2], "product": "contract_viewer"}), "application/json"),
    }).prepare()
digest = base64.b64encode(hashlib.sha256(upload.body).digest()).decode()
upload.headers.update({
    "Authorization": f"Bearer {token}",
    "Idempotency-Key": str(uuid.uuid4()),
    "Content-Digest": f"sha-256=:{digest}:",
})
review = requests.Session().send(upload).json()
if "error" in review:
    sys.exit(f"{review['error']['code']}: {review['error']['message']}")

# Poll until the contract viewer is live or processing fails, for up to 40 minutes (or register a webhook and wait to be told).
# A token lasts 15 minutes: a 401 means exchange the key again.
deadline = time.time() + 2400
while (review["publications"][0]["state"] == "pending" and review["processing"]["state"] != "failed"
       and time.time() < deadline):
    time.sleep(30)
    answer = requests.get(f"{API}/v1/contract-reviews/{review['id']}", headers={"Authorization": f"Bearer {token}"})
    if answer.status_code == 401:
        token = new_token()
    elif answer.ok:  # anything else: try again at the next poll
        review = answer.json()
if review["processing"]["state"] == "failed":
    sys.exit(f"processing failed: {review['processing']['failure_reason']}")
print(review["publications"][0]["state"], review["publications"][0]["url"])

import { createHash, randomUUID } from "node:crypto";
import { readFile } from "node:fs/promises";

const API = "https://api-sandbox.prepared.com.au";
const key = process.env.PREPARED_API_KEY; // prep_test_...
const [pdfPath, externalReference] = process.argv.slice(2);

const newToken = async () => {
  const answer = await (await fetch(`${API}/v1/token`, {
    method: "POST", headers: { Authorization: `Bearer ${key}` },
  })).json();
  if (answer.error) throw new Error(`${answer.error.code}: ${answer.error.message}`);
  return answer.access_token;
};
let token = await newToken();

// Build the multipart body first: Content-Digest is the SHA-256 of the exact bytes sent.
const form = new FormData();
form.append("file", new Blob([await readFile(pdfPath)], { type: "application/pdf" }), "contract.pdf");
form.append("request", new Blob(
  [JSON.stringify({ external_reference: externalReference, product: "contract_viewer" })], { type: "application/json" }));
const encoded = new Response(form);
const body = Buffer.from(await encoded.arrayBuffer());

let review = await (await fetch(`${API}/v1/contract-reviews`, {
  method: "POST",
  headers: {
    Authorization: `Bearer ${token}`,
    "Content-Type": encoded.headers.get("content-type"),
    "Idempotency-Key": randomUUID(),
    "Content-Digest": `sha-256=:${createHash("sha256").update(body).digest("base64")}:`,
  },
  body,
})).json();
if (review.error) throw new Error(`${review.error.code}: ${review.error.message}`);

// Poll until the contract viewer is live or processing fails, for up to 40 minutes (or register a webhook and wait to be told).
// A token lasts 15 minutes: a 401 means exchange the key again.
const deadline = Date.now() + 2400000;
while (review.publications[0].state === "pending" && review.processing.state !== "failed" && Date.now() < deadline) {
  await new Promise(resolve => setTimeout(resolve, 30000));
  const answer = await fetch(`${API}/v1/contract-reviews/${review.id}`, {
    headers: { Authorization: `Bearer ${token}` },
  });
  if (answer.status === 401) token = await newToken();
  else if (answer.ok) review = await answer.json(); // anything else: try again at the next poll
}
if (review.processing.state === "failed") throw new Error(`processing failed: ${review.processing.failure_reason}`);
console.log(review.publications[0].state, review.publications[0].url);