@abyss-project/probe 2.0.0 → 3.0.0

package/src/utils/probe-scan-cost.utils.ts

@@ -1,101 +1,101 @@
-// ──────────────────────────────────────────────
-// AbyssProbe scan cost model — pure, shared (client + server, no endpoint).
-//
-// Ported from abyss-storage's OWN weighted AV-scan cost model
-// (`apps/api/src/services/av-scan-usage.ts#computeAvScanCost`, introduced in
-// storage commit 317e4a0 "wire the weighted AV-scan quota", since made dead
-// code there by the AV v3 Phase 3b-2 hand-off — "storage never bills —
-// AbyssProbe does" — but the FORMULA itself is exactly what AbyssProbe's own
-// weighted billing needs, so it is ported here verbatim rather than
-// reinvented):
-//
-//   cost = round( (BASE + K_MB * ceil(sizeOctet / 1 MiB)) * MODE_WEIGHT[mode] )
-//
-// ASYNC costs LESS than SYNC (MODE_WEIGHT.async=1 < MODE_WEIGHT.sync=3) — a
-// synchronous scan holds the caller's request (and an engine worker) until
-// the verdict and cannot be batched/load-balanced, so it costs more than an
-// asynchronous (queued) scan of the SAME bytes. This is the numeric backing
-// for the scanner UI's "l'analyse en arrière-plan économise des tokens"
-// tooltip (WS1).
-//
-// PURE + DETERMINISTIC + no I/O: this is the SINGLE source of truth for
-// AbyssProbe's scan cost, used on BOTH sides of the wire —
-//   - server (apps/api/src/services/probe-scan.service.ts): the REAL cost
-//     billed via recordProbeScanUsage and persisted on probe_scans.costUnits
-//     once a scan reaches a verdict (DONE).
-//   - client (the AbyssProbe UI, or any external caller): a cost PREVIEW
-//     before scanning — call this with the picked file's size and the
-//     intended mode to show the estimated token cost, matching exactly what
-//     the server will bill (no separate "estimate" formula to drift out of
-//     sync with the real one — same function, same constants, both sides).
-//
-// Deliberately NOT exposed as an HTTP endpoint (no `POST /scan/estimate`):
-// the whole point of a pure function is that the client can compute it
-// locally, instantly, with zero round-trip — see this package's root README
-// note on `sdk.probe.*`'s HTTP-call-only convention; a helper like this one
-// (and `verifyProbeWebhookSignature` before it) is instead a plain top-level
-// export, not a `sdk.probe.*` method.
-// ──────────────────────────────────────────────
-
-import { ProbeScanMode } from '../types';
-
-/** Flat floor every scanned file pays (the "one scan" cost). Tunable. */
-export const PROBE_SCAN_COST_BASE = 1;
-
-/** Additional units per (ceil'd) mebibyte of scanned bytes. Tunable. */
-export const PROBE_SCAN_COST_K_MB = 1;
-
-/**
- * Per-mode cost multiplier. A synchronous scan blocks the caller's request
- * (and an engine worker) until the verdict and cannot be queued/batched, so
- * it costs strictly MORE than an asynchronous scan of the same bytes —
- * ASYNC < SYNC is a load-bearing invariant relied on by the scanner UI's
- * "background analysis saves tokens" messaging (WS1). Tunable, but this
- * ordering must never be inverted.
- */
-export const PROBE_SCAN_COST_MODE_WEIGHT: Record<ProbeScanMode, number> = {
-  [ProbeScanMode.ASYNC]: 1,
-  [ProbeScanMode.SYNC]: 3,
-};
-
-/** One mebibyte, the unit the per-MB term is quantised to. */
-const ONE_MB = 1024 * 1024;
-
-/**
- * Weighted cost of one AbyssProbe scan, in `ACCOUNT_AV_SCAN_UNITS` ("tokens"
- * in the UI). Pure + deterministic — same inputs always produce the same
- * output, no I/O, safe to call from a browser or a server.
- *
- * Returns `0` for a non-finite / non-positive `sizeOctet` (nothing to scan,
- * nothing to bill) rather than throwing — a defensive, never-crash contract
- * appropriate for a client-side cost preview that might run ahead of full
- * input validation (e.g. while a file is still being selected).
- *
- * `mode` defaults to the (cheaper) ASYNC weight when given an unrecognised
- * value, mirroring the ported formula's own `MODE_WEIGHT[mode] ?? MODE_WEIGHT.async`
- * fallback — never silently the MORE expensive weight.
- *
- * `mode`'s type is widened to `| 'sync' | 'async'` alongside the enum
- * itself, NOT just `ProbeScanMode`: apps/api's own server-side
- * `database/probe-scan.enum.ts#ProbeScanMode` is a SEPARATE TypeScript enum
- * declaration (kept server-local — see that file's header comment on why —
- * with the identical 'sync'/'async' runtime values, so the wire format never
- * drifts). TypeScript string enums are nominal: a same-valued member of that
- * OTHER enum is not directly assignable to THIS package's `ProbeScanMode`
- * parameter type, but IS assignable to a plain string-literal type matching
- * its value — so the server can call this exact function (`scan.mode`,
- * `estimateProbeScanCost`'s whole reason for living being ONE shared formula
- * on both sides of the wire, see this file's header comment) without a cast.
- */
-export const estimateProbeScanCost = (
-  sizeOctet: number,
-  mode: ProbeScanMode | 'sync' | 'async',
-): number => {
-  if (!Number.isFinite(sizeOctet) || sizeOctet <= 0) {
-    return 0;
-  }
-  const megabytes = Math.ceil(sizeOctet / ONE_MB);
-  const weight =
-    PROBE_SCAN_COST_MODE_WEIGHT[mode] ?? PROBE_SCAN_COST_MODE_WEIGHT[ProbeScanMode.ASYNC];
-  return Math.round((PROBE_SCAN_COST_BASE + PROBE_SCAN_COST_K_MB * megabytes) * weight);
-};
+// ──────────────────────────────────────────────
+// AbyssProbe scan cost model — pure, shared (client + server, no endpoint).
+//
+// Ported from abyss-storage's OWN weighted AV-scan cost model
+// (`apps/api/src/services/av-scan-usage.ts#computeAvScanCost`, introduced in
+// storage commit 317e4a0 "wire the weighted AV-scan quota", since made dead
+// code there by the AV v3 Phase 3b-2 hand-off — "storage never bills —
+// AbyssProbe does" — but the FORMULA itself is exactly what AbyssProbe's own
+// weighted billing needs, so it is ported here verbatim rather than
+// reinvented):
+//
+//   cost = round( (BASE + K_MB * ceil(sizeOctet / 1 MiB)) * MODE_WEIGHT[mode] )
+//
+// ASYNC costs LESS than SYNC (MODE_WEIGHT.async=1 < MODE_WEIGHT.sync=3) — a
+// synchronous scan holds the caller's request (and an engine worker) until
+// the verdict and cannot be batched/load-balanced, so it costs more than an
+// asynchronous (queued) scan of the SAME bytes. This is the numeric backing
+// for the scanner UI's "l'analyse en arrière-plan économise des tokens"
+// tooltip (WS1).
+//
+// PURE + DETERMINISTIC + no I/O: this is the SINGLE source of truth for
+// AbyssProbe's scan cost, used on BOTH sides of the wire —
+//   - server (apps/api/src/services/probe-scan.service.ts): the REAL cost
+//     billed via recordProbeScanUsage and persisted on probe_scans.costUnits
+//     once a scan reaches a verdict (DONE).
+//   - client (the AbyssProbe UI, or any external caller): a cost PREVIEW
+//     before scanning — call this with the picked file's size and the
+//     intended mode to show the estimated token cost, matching exactly what
+//     the server will bill (no separate "estimate" formula to drift out of
+//     sync with the real one — same function, same constants, both sides).
+//
+// Deliberately NOT exposed as an HTTP endpoint (no `POST /scan/estimate`):
+// the whole point of a pure function is that the client can compute it
+// locally, instantly, with zero round-trip — see this package's root README
+// note on `sdk.probe.*`'s HTTP-call-only convention; a helper like this one
+// (and `verifyProbeWebhookSignature` before it) is instead a plain top-level
+// export, not a `sdk.probe.*` method.
+// ──────────────────────────────────────────────
+
+import { ProbeScanMode } from '../types';
+
+/** Flat floor every scanned file pays (the "one scan" cost). Tunable. */
+export const PROBE_SCAN_COST_BASE = 1;
+
+/** Additional units per (ceil'd) mebibyte of scanned bytes. Tunable. */
+export const PROBE_SCAN_COST_K_MB = 1;
+
+/**
+ * Per-mode cost multiplier. A synchronous scan blocks the caller's request
+ * (and an engine worker) until the verdict and cannot be queued/batched, so
+ * it costs strictly MORE than an asynchronous scan of the same bytes —
+ * ASYNC < SYNC is a load-bearing invariant relied on by the scanner UI's
+ * "background analysis saves tokens" messaging (WS1). Tunable, but this
+ * ordering must never be inverted.
+ */
+export const PROBE_SCAN_COST_MODE_WEIGHT: Record<ProbeScanMode, number> = {
+  [ProbeScanMode.ASYNC]: 1,
+  [ProbeScanMode.SYNC]: 3,
+};
+
+/** One mebibyte, the unit the per-MB term is quantised to. */
+const ONE_MB = 1024 * 1024;
+
+/**
+ * Weighted cost of one AbyssProbe scan, in `ACCOUNT_AV_SCAN_UNITS` ("tokens"
+ * in the UI). Pure + deterministic — same inputs always produce the same
+ * output, no I/O, safe to call from a browser or a server.
+ *
+ * Returns `0` for a non-finite / non-positive `sizeOctet` (nothing to scan,
+ * nothing to bill) rather than throwing — a defensive, never-crash contract
+ * appropriate for a client-side cost preview that might run ahead of full
+ * input validation (e.g. while a file is still being selected).
+ *
+ * `mode` defaults to the (cheaper) ASYNC weight when given an unrecognised
+ * value, mirroring the ported formula's own `MODE_WEIGHT[mode] ?? MODE_WEIGHT.async`
+ * fallback — never silently the MORE expensive weight.
+ *
+ * `mode`'s type is widened to `| 'sync' | 'async'` alongside the enum
+ * itself, NOT just `ProbeScanMode`: apps/api's own server-side
+ * `database/probe-scan.enum.ts#ProbeScanMode` is a SEPARATE TypeScript enum
+ * declaration (kept server-local — see that file's header comment on why —
+ * with the identical 'sync'/'async' runtime values, so the wire format never
+ * drifts). TypeScript string enums are nominal: a same-valued member of that
+ * OTHER enum is not directly assignable to THIS package's `ProbeScanMode`
+ * parameter type, but IS assignable to a plain string-literal type matching
+ * its value — so the server can call this exact function (`scan.mode`,
+ * `estimateProbeScanCost`'s whole reason for living being ONE shared formula
+ * on both sides of the wire, see this file's header comment) without a cast.
+ */
+export const estimateProbeScanCost = (
+  sizeOctet: number,
+  mode: ProbeScanMode | 'sync' | 'async',
+): number => {
+  if (!Number.isFinite(sizeOctet) || sizeOctet <= 0) {
+    return 0;
+  }
+  const megabytes = Math.ceil(sizeOctet / ONE_MB);
+  const weight =
+    PROBE_SCAN_COST_MODE_WEIGHT[mode] ?? PROBE_SCAN_COST_MODE_WEIGHT[ProbeScanMode.ASYNC];
+  return Math.round((PROBE_SCAN_COST_BASE + PROBE_SCAN_COST_K_MB * megabytes) * weight);
+};

package/src/utils/probe-webhook-signature.utils.ts

@@ -1,7 +1,8 @@
 // ──────────────────────────────────────────────
-// AbyssProbe webhook signature verification (helper for RECEIVERS of a
-// webhook delivery — the abyss-main UI/abyss-storage/any external
-// integrator that registered a callbackUrl).
+// AbyssProbe webhook signature verification (helper for the RECEIVER of the
+// internal webhook — AbyssStorage's antivirus subscription — until its client
+// subscriptions move to Flow, P5 #792 L2). A client's own subscription is
+// signed by Flow, whose helper verifies it.
 //
 // Mirrors this package's own extraction-webhook.utils.ts
 // (verifyExtractionWebhook) — the same package's own precedent for this

package/tsconfig.check.json

@@ -1,15 +1,15 @@
-{
-  // Perimetre de VERIFICATION, distinct de celui du build.
-  //
-  // `tsconfig.json` exclut `src/**/*.spec.ts` parce qu'il sert a emettre `dist/`, ou une spec
-  // n'a rien a faire. Mais eslint s'appuie sur ce meme fichier via `parserOptions.project` :
-  // les cinq specs du paquet sortaient donc en « Parsing error: that TSConfig does not include
-  // this file », mesure du 2026-09-09, et n'etaient lintees par personne.
-  //
-  // Ce fichier sert uniquement a eslint. Il n'emet rien et ne change pas ce que `build` produit.
-  "extends": "./tsconfig.json",
-  "compilerOptions": {
-    "noEmit": true
-  },
-  "exclude": ["./dist/**/*"]
-}
+{
+  // Perimetre de VERIFICATION, distinct de celui du build.
+  //
+  // `tsconfig.json` exclut `src/**/*.spec.ts` parce qu'il sert a emettre `dist/`, ou une spec
+  // n'a rien a faire. Mais eslint s'appuie sur ce meme fichier via `parserOptions.project` :
+  // les cinq specs du paquet sortaient donc en « Parsing error: that TSConfig does not include
+  // this file », mesure du 2026-09-09, et n'etaient lintees par personne.
+  //
+  // Ce fichier sert uniquement a eslint. Il n'emet rien et ne change pas ce que `build` produit.
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "noEmit": true
+  },
+  "exclude": ["./dist/**/*"]
+}

package/tsconfig.json

@@ -1,36 +1,36 @@
-{
-  "compilerOptions": {
-    "incremental": false,
-    "target": "es2021",
-    "lib": [
-      "dom",
-      "es2021"
-    ],
-    "experimentalDecorators": true,
-    "emitDecoratorMetadata": true,
-    "module": "commonjs",
-    "rootDir": "src",
-    "moduleResolution": "node",
-    "resolveJsonModule": true,
-    "allowJs": true,
-    "declaration": true,
-    "sourceMap": true,
-    "outDir": "./dist",
-    "removeComments": true,
-    "allowSyntheticDefaultImports": true,
-    "esModuleInterop": true,
-    "forceConsistentCasingInFileNames": true,
-    "strict": true,
-    "strictNullChecks": true,
-    "strictFunctionTypes": true,
-    "strictPropertyInitialization": false,
-    "skipLibCheck": true
-  },
-  "include": [
-    "./src"
-  ],
-  "exclude": [
-    "./dist/**/*",
-    "./src/**/*.spec.ts"
-  ]
-}
+{
+  "compilerOptions": {
+    "incremental": false,
+    "target": "es2021",
+    "lib": [
+      "dom",
+      "es2021"
+    ],
+    "experimentalDecorators": true,
+    "emitDecoratorMetadata": true,
+    "module": "commonjs",
+    "rootDir": "src",
+    "moduleResolution": "node",
+    "resolveJsonModule": true,
+    "allowJs": true,
+    "declaration": true,
+    "sourceMap": true,
+    "outDir": "./dist",
+    "removeComments": true,
+    "allowSyntheticDefaultImports": true,
+    "esModuleInterop": true,
+    "forceConsistentCasingInFileNames": true,
+    "strict": true,
+    "strictNullChecks": true,
+    "strictFunctionTypes": true,
+    "strictPropertyInitialization": false,
+    "skipLibCheck": true
+  },
+  "include": [
+    "./src"
+  ],
+  "exclude": [
+    "./dist/**/*",
+    "./src/**/*.spec.ts"
+  ]
+}

package/dist/api/probe-webhook.api.d.ts

@@ -1,6 +0,0 @@
-import type { ICreateProbeWebhookBody, IUpdateProbeWebhookBody, IProbeWebhookScopeQuery, IListProbeWebhookDeliveriesQuery, ICreateProbeWebhookResponse, IListProbeWebhookResponse, IDeleteProbeWebhookResponse, IUpdateProbeWebhookResponse, IListProbeWebhookDeliveriesResponse } from '../types';
-export declare const createProbeWebhook: (body: ICreateProbeWebhookBody, scope?: IProbeWebhookScopeQuery, apiKey?: string) => Promise<ICreateProbeWebhookResponse>;
-export declare const listProbeWebhook: (scope?: IProbeWebhookScopeQuery, apiKey?: string) => Promise<IListProbeWebhookResponse>;
-export declare const deleteProbeWebhook: (webhookId: string, scope?: IProbeWebhookScopeQuery, apiKey?: string) => Promise<IDeleteProbeWebhookResponse>;
-export declare const updateProbeWebhook: (webhookId: string, body: IUpdateProbeWebhookBody, scope?: IProbeWebhookScopeQuery, apiKey?: string) => Promise<IUpdateProbeWebhookResponse>;
-export declare const listProbeWebhookDeliveries: (webhookId: string, query?: IListProbeWebhookDeliveriesQuery, apiKey?: string) => Promise<IListProbeWebhookDeliveriesResponse>;

package/dist/api/probe-webhook.api.js

@@ -1,41 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.listProbeWebhookDeliveries = exports.updateProbeWebhook = exports.deleteProbeWebhook = exports.listProbeWebhook = exports.createProbeWebhook = void 0;
-const __1 = require("..");
-const DEFAULT_API_KEY_HEADER = 'abyss-api-key';
-function authHeader(apiKey) {
-    return apiKey ? { [DEFAULT_API_KEY_HEADER]: apiKey } : {};
-}
-function serializeProbeQuery(query) {
-    const out = {};
-    for (const [key, value] of Object.entries(query)) {
-        if (value === undefined || value === null)
-            continue;
-        const wireKey = key === 'organizationId' ? 'organization_id' : key;
-        out[wireKey] = value instanceof Date ? value.toISOString() : value;
-    }
-    return out;
-}
-const createProbeWebhook = async (body, scope = {}, apiKey) => (await __1.AbyssProbeCore.axios.post('webhook', body, {
-    params: serializeProbeQuery(scope),
-    headers: authHeader(apiKey),
-})).data;
-exports.createProbeWebhook = createProbeWebhook;
-const listProbeWebhook = async (scope = {}, apiKey) => (await __1.AbyssProbeCore.axios.get('webhook', {
-    params: serializeProbeQuery(scope),
-    headers: authHeader(apiKey),
-})).data;
-exports.listProbeWebhook = listProbeWebhook;
-const deleteProbeWebhook = async (webhookId, scope = {}, apiKey) => (await __1.AbyssProbeCore.axios.delete(`webhook/${webhookId}`, {
-    params: serializeProbeQuery(scope),
-    headers: authHeader(apiKey),
-})).data;
-exports.deleteProbeWebhook = deleteProbeWebhook;
-const updateProbeWebhook = async (webhookId, body, scope = {}, apiKey) => (await __1.AbyssProbeCore.axios.patch(`webhook/${webhookId}`, body, {
-    params: serializeProbeQuery(scope),
-    headers: authHeader(apiKey),
-})).data;
-exports.updateProbeWebhook = updateProbeWebhook;
-const listProbeWebhookDeliveries = async (webhookId, query = {}, apiKey) => (await __1.AbyssProbeCore.axios.get(`webhook/${webhookId}/deliveries`, { params: serializeProbeQuery(query), headers: authHeader(apiKey) })).data;
-exports.listProbeWebhookDeliveries = listProbeWebhookDeliveries;
-//# sourceMappingURL=probe-webhook.api.js.map

package/dist/api/probe-webhook.api.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"probe-webhook.api.js","sourceRoot":"","sources":["../../src/api/probe-webhook.api.ts"],"names":[],"mappings":";;;AAaA,0BAAoC;AAapC,MAAM,sBAAsB,GAAG,eAAe,CAAC;AAE/C,SAAS,UAAU,CAAC,MAAe;IACjC,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5D,CAAC;AAGD,SAAS,mBAAmB,CAAmB,KAAQ;IACrD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC5E,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QACpD,MAAM,OAAO,GAAG,GAAG,KAAK,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACrE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOM,MAAM,kBAAkB,GAAG,KAAK,EACrC,IAA6B,EAC7B,QAAiC,EAAE,EACnC,MAAe,EACuB,EAAE,CACxC,CACE,MAAM,kBAAc,CAAC,KAAK,CAAC,IAAI,CAA8B,SAAS,EAAE,IAAI,EAAE;IAC5E,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC;IAClC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC;CAC5B,CAAC,CACH,CAAC,IAAI,CAAC;AAVI,QAAA,kBAAkB,sBAUtB;AAGF,MAAM,gBAAgB,GAAG,KAAK,EACnC,QAAiC,EAAE,EACnC,MAAe,EACqB,EAAE,CACtC,CACE,MAAM,kBAAc,CAAC,KAAK,CAAC,GAAG,CAA4B,SAAS,EAAE;IACnE,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC;IAClC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC;CAC5B,CAAC,CACH,CAAC,IAAI,CAAC;AATI,QAAA,gBAAgB,oBASpB;AAGF,MAAM,kBAAkB,GAAG,KAAK,EACrC,SAAiB,EACjB,QAAiC,EAAE,EACnC,MAAe,EACuB,EAAE,CACxC,CACE,MAAM,kBAAc,CAAC,KAAK,CAAC,MAAM,CAA8B,WAAW,SAAS,EAAE,EAAE;IACrF,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC;IAClC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC;CAC5B,CAAC,CACH,CAAC,IAAI,CAAC;AAVI,QAAA,kBAAkB,sBAUtB;AAQF,MAAM,kBAAkB,GAAG,KAAK,EACrC,SAAiB,EACjB,IAA6B,EAC7B,QAAiC,EAAE,EACnC,MAAe,EACuB,EAAE,CACxC,CACE,MAAM,kBAAc,CAAC,KAAK,CAAC,KAAK,CAA8B,WAAW,SAAS,EAAE,EAAE,IAAI,EAAE;IAC1F,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC;IAClC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC;CAC5B,CAAC,CACH,CAAC,IAAI,CAAC;AAXI,QAAA,kBAAkB,sBAWtB;AAMF,MAAM,0BAA0B,GAAG,KAAK,EAC7C,SAAiB,EACjB,QAA0C,EAAE,EAC5C,MAAe,EAC+B,EAAE,CAChD,CACE,MAAM,kBAAc,CAAC,KAAK,CAAC,GAAG,CAC5B,WAAW,SAAS,aAAa,EACjC,EAAE,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CACpE,CACF,CAAC,IAAI,CAAC;AAVI,QAAA,0BAA0B,8BAU9B"}

package/dist/api/probe-webhook.api.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/api/probe-webhook.api.test.js

@@ -1,43 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-const api = __importStar(require("./probe-webhook.api"));
-const _create = api.createProbeWebhook;
-const _list = api.listProbeWebhook;
-const _delete = api.deleteProbeWebhook;
-void _create;
-void _list;
-void _delete;
-//# sourceMappingURL=probe-webhook.api.test.js.map

package/dist/api/probe-webhook.api.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"probe-webhook.api.test.js","sourceRoot":"","sources":["../../src/api/probe-webhook.api.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA,yDAA2C;AAI3C,MAAM,OAAO,GAAkC,GAAG,CAAC,kBAAkB,CAAC;AACtE,MAAM,KAAK,GAAgC,GAAG,CAAC,gBAAgB,CAAC;AAChE,MAAM,OAAO,GAAkC,GAAG,CAAC,kBAAkB,CAAC;AAEtE,KAAK,OAAO,CAAC;AACb,KAAK,KAAK,CAAC;AACX,KAAK,OAAO,CAAC"}

package/src/api/probe-webhook.api.test.ts

@@ -1,17 +0,0 @@
-// Type-level compile test for the probe-webhook api surface.
-// No jest runner in this SDK package; compile guard only.
-// Run: npx tsc --noEmit (from packages/abyss_probe_core), or `npm run build`.
-
-import * as api from './probe-webhook.api';
-
-// All three functions must be exported — deliberately no update/reset-secret
-// (see probe-webhook.controller.ts's header comment on the small CRUD surface).
-const _create: typeof api.createProbeWebhook = api.createProbeWebhook;
-const _list: typeof api.listProbeWebhook = api.listProbeWebhook;
-const _delete: typeof api.deleteProbeWebhook = api.deleteProbeWebhook;
-
-void _create;
-void _list;
-void _delete;
-
-export {};

package/src/api/probe-webhook.api.ts

@@ -1,119 +0,0 @@
-// ──────────────────────────────────────────────
-// AbyssProbe webhook subscription API — CRUD over registered `probe_webhooks`
-// (create / list / delete / update, + paginated delivery history — mirrors
-// apps/api/src/api/controllers/probe-webhook.controller.ts EXACTLY, see that
-// file's header comment). No `probe/` path prefix — `@Controller({
-// prefixPath: '/webhook' })` mounts directly at `webhook`.
-//
-// See probe-webhook.application.api.ts for the application/API-key-auth
-// counterpart of this client (`/application/:applicationId/webhook...`,
-// Phase 3a) — it reuses every request/response type verbatim; only the URL
-// prefix, the extra `applicationId` argument, and the auth header differ.
-// ──────────────────────────────────────────────
-
-import { AbyssProbeCore } from '..';
-import type {
-  ICreateProbeWebhookBody,
-  IUpdateProbeWebhookBody,
-  IProbeWebhookScopeQuery,
-  IListProbeWebhookDeliveriesQuery,
-  ICreateProbeWebhookResponse,
-  IListProbeWebhookResponse,
-  IDeleteProbeWebhookResponse,
-  IUpdateProbeWebhookResponse,
-  IListProbeWebhookDeliveriesResponse,
-} from '../types';
-
-const DEFAULT_API_KEY_HEADER = 'abyss-api-key';
-
-function authHeader(apiKey?: string): Record<string, string> {
-  return apiKey ? { [DEFAULT_API_KEY_HEADER]: apiKey } : {};
-}
-
-/** Renames `organizationId` to the wire's `organization_id` (see probe-scan.api.ts). */
-function serializeProbeQuery<T extends object>(query: T): Record<string, unknown> {
-  const out: Record<string, unknown> = {};
-  for (const [key, value] of Object.entries(query as Record<string, unknown>)) {
-    if (value === undefined || value === null) continue;
-    const wireKey = key === 'organizationId' ? 'organization_id' : key;
-    out[wireKey] = value instanceof Date ? value.toISOString() : value;
-  }
-  return out;
-}
-
-/**
- * `POST /webhook` — register a callbackUrl for the caller's scope. The
- * response's `secret` field (HMAC signing secret) is returned ONLY here —
- * store it immediately, it cannot be re-revealed later.
- */
-export const createProbeWebhook = async (
-  body: ICreateProbeWebhookBody,
-  scope: IProbeWebhookScopeQuery = {},
-  apiKey?: string,
-): Promise<ICreateProbeWebhookResponse> =>
-  (
-    await AbyssProbeCore.axios.post<ICreateProbeWebhookResponse>('webhook', body, {
-      params: serializeProbeQuery(scope),
-      headers: authHeader(apiKey),
-    })
-  ).data;
-
-/** `GET /webhook` — flat, scope-filtered list (not paginated — bounded by WEBHOOK_MAX_PER_SCOPE server-side). */
-export const listProbeWebhook = async (
-  scope: IProbeWebhookScopeQuery = {},
-  apiKey?: string,
-): Promise<IListProbeWebhookResponse> =>
-  (
-    await AbyssProbeCore.axios.get<IListProbeWebhookResponse>('webhook', {
-      params: serializeProbeQuery(scope),
-      headers: authHeader(apiKey),
-    })
-  ).data;
-
-/** `DELETE /webhook/:webhookId`. */
-export const deleteProbeWebhook = async (
-  webhookId: string,
-  scope: IProbeWebhookScopeQuery = {},
-  apiKey?: string,
-): Promise<IDeleteProbeWebhookResponse> =>
-  (
-    await AbyssProbeCore.axios.delete<IDeleteProbeWebhookResponse>(`webhook/${webhookId}`, {
-      params: serializeProbeQuery(scope),
-      headers: authHeader(apiKey),
-    })
-  ).data;
-
-/**
- * `PATCH /webhook/:webhookId` (WS5-5) — edit `callbackUrl` and/or `active`.
- * At least one field is required. Scoped like {@link deleteProbeWebhook}
- * (404, never 403, for a webhookId outside the resolved scope). The response
- * includes `secret` — re-displayable now, see {@link IProbeWebhook}.
- */
-export const updateProbeWebhook = async (
-  webhookId: string,
-  body: IUpdateProbeWebhookBody,
-  scope: IProbeWebhookScopeQuery = {},
-  apiKey?: string,
-): Promise<IUpdateProbeWebhookResponse> =>
-  (
-    await AbyssProbeCore.axios.patch<IUpdateProbeWebhookResponse>(`webhook/${webhookId}`, body, {
-      params: serializeProbeQuery(scope),
-      headers: authHeader(apiKey),
-    })
-  ).data;
-
-/**
- * `GET /webhook/:webhookId/deliveries` (WS5-6) — paginated delivery-attempt
- * history for one registered webhook. Scoped like {@link deleteProbeWebhook}.
- */
-export const listProbeWebhookDeliveries = async (
-  webhookId: string,
-  query: IListProbeWebhookDeliveriesQuery = {},
-  apiKey?: string,
-): Promise<IListProbeWebhookDeliveriesResponse> =>
-  (
-    await AbyssProbeCore.axios.get<IListProbeWebhookDeliveriesResponse>(
-      `webhook/${webhookId}/deliveries`,
-      { params: serializeProbeQuery(query), headers: authHeader(apiKey) },
-    )
-  ).data;