@abyss-project/probe 2.0.1 → 3.0.0

package/src/types/tests/probe.dto.test.ts

@@ -1,156 +1,192 @@
-// Type-level compile test for AbyssProbe's DTO/response shapes — asserts
-// they match the server contract (probe-scan.controller.ts /
-// probe-webhook.controller.ts / probe-usage.controller.ts /
-// probe-webhook-delivery.service.ts) at compile time: any incompatible
-// rename/removal on either side fails `npm run build` here. No jest runner
-// in this SDK package; compile guard only (mirrors
-// ../api/extraction-plan-preset.api.test.ts). Run: npx tsc --noEmit.
-
-import {
-  ProbeScanVerdict,
-  ProbeScanMode,
-  ProbeScanStatus,
-  IProbeScanDetail,
-  IProbeScanHistoryItem,
-  IProbeWebhook,
-  IProbeWebhookDelivery,
-  IProbeWebhookDeliveryPayload,
-  IScanSyncData,
-  IScanAsyncData,
-  IUpdateProbeWebhookBody,
-  IProbeUsageData,
-} from '..';
-// estimateProbeScanCost lives in src/utils/ (a SIBLING of src/types/, not
-// re-exported by the types barrel this file otherwise imports from) — see
-// probe-scan-cost.utils.ts's own header comment for why it is a plain
-// top-level export rather than a `sdk.probe.*` method.
-import { estimateProbeScanCost } from '../../utils';
-
-// Enum exhaustiveness: fails to compile if a member is added/removed/renamed
-// here without updating this file — a cheap drift guard for values
-// transported verbatim over the wire (this SDK does not control the
-// server's enum, so a silent value drift is exactly what this must catch).
-const _verdicts: Record<ProbeScanVerdict, true> = { clean: true, infected: true };
-const _modes: Record<ProbeScanMode, true> = { sync: true, async: true };
-const _statuses: Record<ProbeScanStatus, true> = {
-  queued: true,
-  scanning: true,
-  done: true,
-  error: true,
-};
-
-// GET /scan/:scanId — WS5-4: full metadata parity with IProbeScanHistoryItem
-// (fileName/fileSize/mimeType/mode/startedAt/finishedAt/costUnits).
-const _scanDetail: IProbeScanDetail = {
-  scanId: 's1',
-  status: ProbeScanStatus.DONE,
-  verdict: ProbeScanVerdict.CLEAN,
-  viruses: [],
-  context: null,
-  fileName: 'invoice.pdf',
-  fileSize: 1024,
-  mimeType: 'application/pdf',
-  mode: ProbeScanMode.SYNC,
-  startedAt: new Date(),
-  finishedAt: new Date(),
-  costUnits: 3,
-};
-
-// GET /scan history row — WS5-1: costUnits added.
-const _historyItem: IProbeScanHistoryItem = {
-  scanId: 's1',
-  fileName: 'invoice.pdf',
-  fileSize: 1024,
-  mimeType: 'application/pdf',
-  verdict: ProbeScanVerdict.INFECTED,
-  viruses: ['Eicar-Test-Signature'],
-  mode: ProbeScanMode.ASYNC,
-  status: ProbeScanStatus.DONE,
-  context: { applicationFileId: 'af1' },
-  startedAt: new Date(),
-  finishedAt: new Date(),
-  costUnits: 1,
-  createdAt: new Date(),
-};
-
-// POST /scan — sync (200) / async (202) data shapes. WS5-1: costUnits added to the sync shape (always known/billed by the time a 200 is returned).
-const _scanSyncData: IScanSyncData = {
-  scanId: 's1',
-  verdict: ProbeScanVerdict.CLEAN,
-  viruses: [],
-  costUnits: 3,
-};
-const _scanAsyncData: IScanAsyncData = { scanId: 's1', status: ProbeScanStatus.QUEUED };
-
-// Webhook subscription — WS5-7: secret is now ALWAYS present (list/create/
-// update) and the create response returns IProbeWebhook.
-const _webhook: IProbeWebhook = {
-  id: 'w1',
-  callbackUrl: 'https://example.com/hook',
-  secret: 'shh',
-  active: true,
-  createdAt: new Date(),
-};
-
-// PATCH /webhook/:webhookId body (WS5-5) — every field optional (at least one required server-side).
-const _updateBody: IUpdateProbeWebhookBody = { active: false };
-const _updateBody2: IUpdateProbeWebhookBody = { callbackUrl: 'https://example.com/hook2' };
-
-// Webhook delivery payload — the exact body signed by x-probe-signature
-// (see verifyProbeWebhookSignature). WS5-1: costUnits added.
-const _deliveryPayload: IProbeWebhookDeliveryPayload = {
-  scanId: 's1',
-  context: null,
-  verdict: ProbeScanVerdict.INFECTED,
-  viruses: ['Eicar-Test-Signature'],
-  costUnits: 5,
-};
-
-// GET /webhook/:webhookId/deliveries row (WS5-6) — a persisted delivery-attempt.
-const _deliveryRecord: IProbeWebhookDelivery = {
-  id: 'd1',
-  webhookId: 'w1',
-  scanId: 's1',
-  url: 'https://example.com/hook',
-  statusCode: 200,
-  success: true,
-  attemptedAt: new Date(),
-  error: null,
-  createdAt: new Date(),
-};
-// webhookId is nullable (ad-hoc per-request callbackUrl with no matching registration).
-const _deliveryRecordAdHoc: IProbeWebhookDelivery = { ..._deliveryRecord, webhookId: null };
-
-// GET /usage data shape (WS5-3).
-const _usage: IProbeUsageData = { used: 10, limit: 1000, remaining: 990 };
-// -1 is the established "unlimited" sentinel (see estimateProbeScanCost's
-// server-side counterpart, utils/billing-emit.util.ts#UNLIMITED_EXPIRY_DAYS).
-const _usageUnlimited: IProbeUsageData = { used: 10, limit: -1, remaining: -1 };
-
-// estimateProbeScanCost (WS5-2) — pure shared cost model, ASYNC must cost
-// strictly less than SYNC for the same size (the scanner UI's "background
-// analysis saves tokens" tooltip depends on this). A one-byte compile-time
-// smoke check; the full behavioural suite lives in probe-scan-cost.utils.test.ts.
-const _asyncCost: number = estimateProbeScanCost(5 * 1024 * 1024, ProbeScanMode.ASYNC);
-const _syncCost: number = estimateProbeScanCost(5 * 1024 * 1024, ProbeScanMode.SYNC);
-if (_asyncCost >= _syncCost) {
-  throw new Error('estimateProbeScanCost: ASYNC must cost strictly less than SYNC');
-}
-
-void _verdicts;
-void _modes;
-void _statuses;
-void _scanDetail;
-void _historyItem;
-void _scanSyncData;
-void _scanAsyncData;
-void _webhook;
-void _updateBody;
-void _updateBody2;
-void _deliveryPayload;
-void _deliveryRecord;
-void _deliveryRecordAdHoc;
-void _usage;
-void _usageUnlimited;
-
-export {};
+// Type-level compile test for AbyssProbe's DTO/response shapes — asserts
+// they match the server contract (probe-scan.controller.ts /
+// probe-webhook-application.controller.ts / probe-usage.controller.ts /
+// probe-webhook-delivery.service.ts) at compile time: any incompatible
+// rename/removal on either side fails `npm run build` here. No jest runner
+// in this SDK package; compile guard only (mirrors
+// ../api/extraction-plan-preset.api.test.ts). Run: npx tsc --noEmit.
+
+import {
+  ProbeScanVerdict,
+  ProbeScanMode,
+  ProbeScanStatus,
+  IProbeScanDetail,
+  IProbeScanHistoryItem,
+  IProbeWebhook,
+  IProbeWebhookDelivery,
+  IProbeWebhookDeliveryPayload,
+  IScanSyncData,
+  IScanAsyncData,
+  IUpdateProbeWebhookBody,
+  IProbeUsageData,
+  ICreateProbeDeliverySubscriptionBody,
+  IUpdateProbeDeliverySubscriptionBody,
+  IPaginateProbeDeliveryQuery,
+  IPaginateProbeDeliverySubscriptionQuery,
+  ICreateProbeDeliverySubscriptionResponse,
+  IGetProbeDeliverySubscriptionResponse,
+  Code,
+} from '..';
+// estimateProbeScanCost lives in src/utils/ (a SIBLING of src/types/, not
+// re-exported by the types barrel this file otherwise imports from) — see
+// probe-scan-cost.utils.ts's own header comment for why it is a plain
+// top-level export rather than a `sdk.probe.*` method.
+import { estimateProbeScanCost } from '../../utils';
+
+// Enum exhaustiveness: fails to compile if a member is added/removed/renamed
+// here without updating this file — a cheap drift guard for values
+// transported verbatim over the wire (this SDK does not control the
+// server's enum, so a silent value drift is exactly what this must catch).
+const _verdicts: Record<ProbeScanVerdict, true> = { clean: true, infected: true };
+const _modes: Record<ProbeScanMode, true> = { sync: true, async: true };
+const _statuses: Record<ProbeScanStatus, true> = {
+  queued: true,
+  scanning: true,
+  done: true,
+  error: true,
+};
+
+// GET /scan/:scanId — WS5-4: full metadata parity with IProbeScanHistoryItem
+// (fileName/fileSize/mimeType/mode/startedAt/finishedAt/costUnits).
+const _scanDetail: IProbeScanDetail = {
+  scanId: 's1',
+  status: ProbeScanStatus.DONE,
+  verdict: ProbeScanVerdict.CLEAN,
+  viruses: [],
+  context: null,
+  fileName: 'invoice.pdf',
+  fileSize: 1024,
+  mimeType: 'application/pdf',
+  mode: ProbeScanMode.SYNC,
+  startedAt: new Date(),
+  finishedAt: new Date(),
+  costUnits: 3,
+};
+
+// GET /scan history row — WS5-1: costUnits added.
+const _historyItem: IProbeScanHistoryItem = {
+  scanId: 's1',
+  fileName: 'invoice.pdf',
+  fileSize: 1024,
+  mimeType: 'application/pdf',
+  verdict: ProbeScanVerdict.INFECTED,
+  viruses: ['Eicar-Test-Signature'],
+  mode: ProbeScanMode.ASYNC,
+  status: ProbeScanStatus.DONE,
+  context: { applicationFileId: 'af1' },
+  startedAt: new Date(),
+  finishedAt: new Date(),
+  costUnits: 1,
+  createdAt: new Date(),
+};
+
+// POST /scan — sync (200) / async (202) data shapes. WS5-1: costUnits added to the sync shape (always known/billed by the time a 200 is returned).
+const _scanSyncData: IScanSyncData = {
+  scanId: 's1',
+  verdict: ProbeScanVerdict.CLEAN,
+  viruses: [],
+  costUnits: 3,
+};
+const _scanAsyncData: IScanAsyncData = { scanId: 's1', status: ProbeScanStatus.QUEUED };
+
+// Webhook subscription — WS5-7: secret is now ALWAYS present (list/create/
+// update) and the create response returns IProbeWebhook.
+const _webhook: IProbeWebhook = {
+  id: 'w1',
+  callbackUrl: 'https://example.com/hook',
+  secret: 'shh',
+  active: true,
+  createdAt: new Date(),
+};
+
+// PATCH /application/:applicationId/webhook/:webhookId body (WS5-5) — every field optional (at least one required server-side).
+const _updateBody: IUpdateProbeWebhookBody = { active: false };
+const _updateBody2: IUpdateProbeWebhookBody = { callbackUrl: 'https://example.com/hook2' };
+
+// Webhook delivery payload — the exact body signed by x-probe-signature
+// (see verifyProbeWebhookSignature). WS5-1: costUnits added.
+const _deliveryPayload: IProbeWebhookDeliveryPayload = {
+  scanId: 's1',
+  context: null,
+  verdict: ProbeScanVerdict.INFECTED,
+  viruses: ['Eicar-Test-Signature'],
+  costUnits: 5,
+};
+
+// GET /application/:applicationId/webhook/:webhookId/deliveries row (WS5-6) — a persisted delivery-attempt.
+const _deliveryRecord: IProbeWebhookDelivery = {
+  id: 'd1',
+  webhookId: 'w1',
+  scanId: 's1',
+  url: 'https://example.com/hook',
+  statusCode: 200,
+  success: true,
+  attemptedAt: new Date(),
+  error: null,
+  createdAt: new Date(),
+};
+// webhookId stays nullable: it mirrors the column's real type.
+const _deliveryRecordAdHoc: IProbeWebhookDelivery = { ..._deliveryRecord, webhookId: null };
+
+// Delivery subscriptions (P5 #792) — the client's subscriptions live in Flow; the body names the
+// one event and the URL, the scope is the caller (or `organizationId`, or the application).
+const _createSubscription: ICreateProbeDeliverySubscriptionBody = {
+  eventTypes: ['PROBE_SCAN_COMPLETED'],
+  url: 'https://example.com/hook',
+};
+const _updateSubscription: IUpdateProbeDeliverySubscriptionBody = { isEnabled: false };
+const _subscriptionQuery: IPaginateProbeDeliverySubscriptionQuery = {
+  organizationId: 'o1',
+  isEnabled: true,
+  page: 1,
+  limit: 20,
+};
+const _deliveryQuery: IPaginateProbeDeliveryQuery = { organizationId: 'o1', page: 2 };
+// The secret is on the creation answer only.
+declare const created: ICreateProbeDeliverySubscriptionResponse;
+declare const read: IGetProbeDeliverySubscriptionResponse;
+const _secret: string = created.data.secret;
+// @ts-expect-error a read never carries the secret
+const _noSecret: string = read.data.secret;
+const _callbackCode: Code = Code.probeCallbackRequiresSubscription;
+
+// GET /usage data shape (WS5-3).
+const _usage: IProbeUsageData = { used: 10, limit: 1000, remaining: 990 };
+// -1 is the established "unlimited" sentinel (see estimateProbeScanCost's
+// server-side counterpart, utils/billing-emit.util.ts#UNLIMITED_EXPIRY_DAYS).
+const _usageUnlimited: IProbeUsageData = { used: 10, limit: -1, remaining: -1 };
+
+// estimateProbeScanCost (WS5-2) — pure shared cost model, ASYNC must cost
+// strictly less than SYNC for the same size (the scanner UI's "background
+// analysis saves tokens" tooltip depends on this). A one-byte compile-time
+// smoke check; the full behavioural suite lives in probe-scan-cost.utils.test.ts.
+const _asyncCost: number = estimateProbeScanCost(5 * 1024 * 1024, ProbeScanMode.ASYNC);
+const _syncCost: number = estimateProbeScanCost(5 * 1024 * 1024, ProbeScanMode.SYNC);
+if (_asyncCost >= _syncCost) {
+  throw new Error('estimateProbeScanCost: ASYNC must cost strictly less than SYNC');
+}
+
+void _verdicts;
+void _modes;
+void _statuses;
+void _scanDetail;
+void _historyItem;
+void _scanSyncData;
+void _scanAsyncData;
+void _webhook;
+void _createSubscription;
+void _updateSubscription;
+void _subscriptionQuery;
+void _deliveryQuery;
+void _secret;
+void _noSecret;
+void _callbackCode;
+void _updateBody;
+void _updateBody2;
+void _deliveryPayload;
+void _deliveryRecord;
+void _deliveryRecordAdHoc;
+void _usage;
+void _usageUnlimited;
+
+export {};

package/src/utils/probe-webhook-signature.utils.ts

@@ -1,56 +1,57 @@
-// ──────────────────────────────────────────────
-// AbyssProbe webhook signature verification (helper for RECEIVERS of a
-// webhook delivery — the abyss-main UI/abyss-storage/any external
-// integrator that registered a callbackUrl).
-//
-// Mirrors this package's own extraction-webhook.utils.ts
-// (verifyExtractionWebhook) — the same package's own precedent for this
-// exact problem — adapted to AbyssProbe's actual wire format: the signature
-// header (see PROBE_WEBHOOK_SIGNATURE_HEADER in this package's root index)
-// carries the RAW hex HMAC digest with no `sha256=` prefix (unlike
-// the extraction signature header `x-rcb-signature: sha256=<hex>`) — see
-// apps/api/src/services/probe-webhook-delivery.service.ts's `sign()`.
-//
-// Lazy-requires `crypto` so the SDK stays browser-compatible when this
-// utility is never invoked (a browser page is never the receiving end of a
-// server-to-server webhook).
-// ──────────────────────────────────────────────
-
-export interface VerifyProbeWebhookSignatureInput {
-  /** The exact bytes/string the receiver's HTTP framework handed it — must be the RAW body, not a re-serialized JSON.parse/stringify round trip (whitespace/key-order would change the HMAC). */
-  rawBody: string | Buffer;
-  /** The incoming `x-probe-signature` header value. */
-  signatureHeader: string | undefined;
-  /** This webhook registration's secret (re-displayable on IProbeWebhook). */
-  secret: string;
-}
-
-/**
- * Recompute the HMAC-SHA256 of `rawBody` with `secret` and constant-time
- * compare it against `signatureHeader`. Returns `false` (never throws) for
- * any malformed input — a hostile/truncated header must not crash the
- * receiver.
- */
-export function verifyProbeWebhookSignature(input: VerifyProbeWebhookSignatureInput): boolean {
-  if (!input.signatureHeader || !input.secret) return false;
-
-  // eslint-disable-next-line @typescript-eslint/no-require-imports
-  const crypto = require('crypto');
-  const computed: string = crypto
-    .createHmac('sha256', input.secret)
-    .update(input.rawBody)
-    .digest('hex');
-
-  if (input.signatureHeader.length !== computed.length) return false;
-
-  try {
-    return crypto.timingSafeEqual(
-      Buffer.from(input.signatureHeader, 'hex'),
-      Buffer.from(computed, 'hex'),
-    );
-  } catch {
-    // Buffer.from(..., 'hex') on a non-hex string yields a shorter buffer,
-    // which would otherwise make timingSafeEqual throw on a length mismatch.
-    return false;
-  }
-}
+// ──────────────────────────────────────────────
+// AbyssProbe webhook signature verification (helper for the RECEIVER of the
+// internal webhook — AbyssStorage's antivirus subscription — until its client
+// subscriptions move to Flow, P5 #792 L2). A client's own subscription is
+// signed by Flow, whose helper verifies it.
+//
+// Mirrors this package's own extraction-webhook.utils.ts
+// (verifyExtractionWebhook) — the same package's own precedent for this
+// exact problem — adapted to AbyssProbe's actual wire format: the signature
+// header (see PROBE_WEBHOOK_SIGNATURE_HEADER in this package's root index)
+// carries the RAW hex HMAC digest with no `sha256=` prefix (unlike
+// the extraction signature header `x-rcb-signature: sha256=<hex>`) — see
+// apps/api/src/services/probe-webhook-delivery.service.ts's `sign()`.
+//
+// Lazy-requires `crypto` so the SDK stays browser-compatible when this
+// utility is never invoked (a browser page is never the receiving end of a
+// server-to-server webhook).
+// ──────────────────────────────────────────────
+
+export interface VerifyProbeWebhookSignatureInput {
+  /** The exact bytes/string the receiver's HTTP framework handed it — must be the RAW body, not a re-serialized JSON.parse/stringify round trip (whitespace/key-order would change the HMAC). */
+  rawBody: string | Buffer;
+  /** The incoming `x-probe-signature` header value. */
+  signatureHeader: string | undefined;
+  /** This webhook registration's secret (re-displayable on IProbeWebhook). */
+  secret: string;
+}
+
+/**
+ * Recompute the HMAC-SHA256 of `rawBody` with `secret` and constant-time
+ * compare it against `signatureHeader`. Returns `false` (never throws) for
+ * any malformed input — a hostile/truncated header must not crash the
+ * receiver.
+ */
+export function verifyProbeWebhookSignature(input: VerifyProbeWebhookSignatureInput): boolean {
+  if (!input.signatureHeader || !input.secret) return false;
+
+  // eslint-disable-next-line @typescript-eslint/no-require-imports
+  const crypto = require('crypto');
+  const computed: string = crypto
+    .createHmac('sha256', input.secret)
+    .update(input.rawBody)
+    .digest('hex');
+
+  if (input.signatureHeader.length !== computed.length) return false;
+
+  try {
+    return crypto.timingSafeEqual(
+      Buffer.from(input.signatureHeader, 'hex'),
+      Buffer.from(computed, 'hex'),
+    );
+  } catch {
+    // Buffer.from(..., 'hex') on a non-hex string yields a shorter buffer,
+    // which would otherwise make timingSafeEqual throw on a length mismatch.
+    return false;
+  }
+}

package/dist/api/probe-webhook.api.d.ts

@@ -1,6 +0,0 @@
-import type { ICreateProbeWebhookBody, IUpdateProbeWebhookBody, IProbeWebhookScopeQuery, IListProbeWebhookDeliveriesQuery, ICreateProbeWebhookResponse, IListProbeWebhookResponse, IDeleteProbeWebhookResponse, IUpdateProbeWebhookResponse, IListProbeWebhookDeliveriesResponse } from '../types';
-export declare const createProbeWebhook: (body: ICreateProbeWebhookBody, scope?: IProbeWebhookScopeQuery, apiKey?: string) => Promise<ICreateProbeWebhookResponse>;
-export declare const listProbeWebhook: (scope?: IProbeWebhookScopeQuery, apiKey?: string) => Promise<IListProbeWebhookResponse>;
-export declare const deleteProbeWebhook: (webhookId: string, scope?: IProbeWebhookScopeQuery, apiKey?: string) => Promise<IDeleteProbeWebhookResponse>;
-export declare const updateProbeWebhook: (webhookId: string, body: IUpdateProbeWebhookBody, scope?: IProbeWebhookScopeQuery, apiKey?: string) => Promise<IUpdateProbeWebhookResponse>;
-export declare const listProbeWebhookDeliveries: (webhookId: string, query?: IListProbeWebhookDeliveriesQuery, apiKey?: string) => Promise<IListProbeWebhookDeliveriesResponse>;

package/dist/api/probe-webhook.api.js

@@ -1,41 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.listProbeWebhookDeliveries = exports.updateProbeWebhook = exports.deleteProbeWebhook = exports.listProbeWebhook = exports.createProbeWebhook = void 0;
-const __1 = require("..");
-const DEFAULT_API_KEY_HEADER = 'abyss-api-key';
-function authHeader(apiKey) {
-    return apiKey ? { [DEFAULT_API_KEY_HEADER]: apiKey } : {};
-}
-function serializeProbeQuery(query) {
-    const out = {};
-    for (const [key, value] of Object.entries(query)) {
-        if (value === undefined || value === null)
-            continue;
-        const wireKey = key === 'organizationId' ? 'organization_id' : key;
-        out[wireKey] = value instanceof Date ? value.toISOString() : value;
-    }
-    return out;
-}
-const createProbeWebhook = async (body, scope = {}, apiKey) => (await __1.AbyssProbeCore.axios.post('webhook', body, {
-    params: serializeProbeQuery(scope),
-    headers: authHeader(apiKey),
-})).data;
-exports.createProbeWebhook = createProbeWebhook;
-const listProbeWebhook = async (scope = {}, apiKey) => (await __1.AbyssProbeCore.axios.get('webhook', {
-    params: serializeProbeQuery(scope),
-    headers: authHeader(apiKey),
-})).data;
-exports.listProbeWebhook = listProbeWebhook;
-const deleteProbeWebhook = async (webhookId, scope = {}, apiKey) => (await __1.AbyssProbeCore.axios.delete(`webhook/${webhookId}`, {
-    params: serializeProbeQuery(scope),
-    headers: authHeader(apiKey),
-})).data;
-exports.deleteProbeWebhook = deleteProbeWebhook;
-const updateProbeWebhook = async (webhookId, body, scope = {}, apiKey) => (await __1.AbyssProbeCore.axios.patch(`webhook/${webhookId}`, body, {
-    params: serializeProbeQuery(scope),
-    headers: authHeader(apiKey),
-})).data;
-exports.updateProbeWebhook = updateProbeWebhook;
-const listProbeWebhookDeliveries = async (webhookId, query = {}, apiKey) => (await __1.AbyssProbeCore.axios.get(`webhook/${webhookId}/deliveries`, { params: serializeProbeQuery(query), headers: authHeader(apiKey) })).data;
-exports.listProbeWebhookDeliveries = listProbeWebhookDeliveries;
-//# sourceMappingURL=probe-webhook.api.js.map

package/dist/api/probe-webhook.api.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"probe-webhook.api.js","sourceRoot":"","sources":["../../src/api/probe-webhook.api.ts"],"names":[],"mappings":";;;AAaA,0BAAoC;AAapC,MAAM,sBAAsB,GAAG,eAAe,CAAC;AAE/C,SAAS,UAAU,CAAC,MAAe;IACjC,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5D,CAAC;AAGD,SAAS,mBAAmB,CAAmB,KAAQ;IACrD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC5E,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QACpD,MAAM,OAAO,GAAG,GAAG,KAAK,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC;QACnE,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACrE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOM,MAAM,kBAAkB,GAAG,KAAK,EACrC,IAA6B,EAC7B,QAAiC,EAAE,EACnC,MAAe,EACuB,EAAE,CACxC,CACE,MAAM,kBAAc,CAAC,KAAK,CAAC,IAAI,CAA8B,SAAS,EAAE,IAAI,EAAE;IAC5E,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC;IAClC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC;CAC5B,CAAC,CACH,CAAC,IAAI,CAAC;AAVI,QAAA,kBAAkB,sBAUtB;AAGF,MAAM,gBAAgB,GAAG,KAAK,EACnC,QAAiC,EAAE,EACnC,MAAe,EACqB,EAAE,CACtC,CACE,MAAM,kBAAc,CAAC,KAAK,CAAC,GAAG,CAA4B,SAAS,EAAE;IACnE,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC;IAClC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC;CAC5B,CAAC,CACH,CAAC,IAAI,CAAC;AATI,QAAA,gBAAgB,oBASpB;AAGF,MAAM,kBAAkB,GAAG,KAAK,EACrC,SAAiB,EACjB,QAAiC,EAAE,EACnC,MAAe,EACuB,EAAE,CACxC,CACE,MAAM,kBAAc,CAAC,KAAK,CAAC,MAAM,CAA8B,WAAW,SAAS,EAAE,EAAE;IACrF,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC;IAClC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC;CAC5B,CAAC,CACH,CAAC,IAAI,CAAC;AAVI,QAAA,kBAAkB,sBAUtB;AAQF,MAAM,kBAAkB,GAAG,KAAK,EACrC,SAAiB,EACjB,IAA6B,EAC7B,QAAiC,EAAE,EACnC,MAAe,EACuB,EAAE,CACxC,CACE,MAAM,kBAAc,CAAC,KAAK,CAAC,KAAK,CAA8B,WAAW,SAAS,EAAE,EAAE,IAAI,EAAE;IAC1F,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC;IAClC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC;CAC5B,CAAC,CACH,CAAC,IAAI,CAAC;AAXI,QAAA,kBAAkB,sBAWtB;AAMF,MAAM,0BAA0B,GAAG,KAAK,EAC7C,SAAiB,EACjB,QAA0C,EAAE,EAC5C,MAAe,EAC+B,EAAE,CAChD,CACE,MAAM,kBAAc,CAAC,KAAK,CAAC,GAAG,CAC5B,WAAW,SAAS,aAAa,EACjC,EAAE,MAAM,EAAE,mBAAmB,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CACpE,CACF,CAAC,IAAI,CAAC;AAVI,QAAA,0BAA0B,8BAU9B"}

package/dist/api/probe-webhook.api.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/api/probe-webhook.api.test.js

@@ -1,43 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-const api = __importStar(require("./probe-webhook.api"));
-const _create = api.createProbeWebhook;
-const _list = api.listProbeWebhook;
-const _delete = api.deleteProbeWebhook;
-void _create;
-void _list;
-void _delete;
-//# sourceMappingURL=probe-webhook.api.test.js.map

package/dist/api/probe-webhook.api.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"probe-webhook.api.test.js","sourceRoot":"","sources":["../../src/api/probe-webhook.api.test.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA,yDAA2C;AAI3C,MAAM,OAAO,GAAkC,GAAG,CAAC,kBAAkB,CAAC;AACtE,MAAM,KAAK,GAAgC,GAAG,CAAC,gBAAgB,CAAC;AAChE,MAAM,OAAO,GAAkC,GAAG,CAAC,kBAAkB,CAAC;AAEtE,KAAK,OAAO,CAAC;AACb,KAAK,KAAK,CAAC;AACX,KAAK,OAAO,CAAC"}

package/src/api/probe-webhook.api.test.ts

@@ -1,17 +0,0 @@
-// Type-level compile test for the probe-webhook api surface.
-// No jest runner in this SDK package; compile guard only.
-// Run: npx tsc --noEmit (from packages/abyss_probe_core), or `npm run build`.
-
-import * as api from './probe-webhook.api';
-
-// All three functions must be exported — deliberately no update/reset-secret
-// (see probe-webhook.controller.ts's header comment on the small CRUD surface).
-const _create: typeof api.createProbeWebhook = api.createProbeWebhook;
-const _list: typeof api.listProbeWebhook = api.listProbeWebhook;
-const _delete: typeof api.deleteProbeWebhook = api.deleteProbeWebhook;
-
-void _create;
-void _list;
-void _delete;
-
-export {};