@abyss-project/tools 1.0.1 → 1.0.3

package/src/types/interface/api/responses/recent.response.ts

@@ -7,6 +7,8 @@ export interface IRecentContentItem {
   title: string;
   updatedAt: string;
   createdByUserId: string;
+  /** Slug for board navigation (only boards expose a navigable slug). */
+  slug?: string;
 }
 
 export interface IRecentOrganizationData {

package/src/types/interface/models/rcb.dto.ts

@@ -1,267 +1,267 @@
-// ──────────────────────────────────────────────
-// RCB (Relevé de Compte Bancaire) DTOs.
-// Mirror server-side Sequelize models, dates serialized as ISO strings.
-// ──────────────────────────────────────────────
-
-export type RcbExtractionMode = 'auto' | 'hint' | 'template';
-export type RcbProcessingMode = 'sync' | 'queue';
-export type RcbExtractionStatus = 'pending' | 'completed' | 'failed' | 'cached';
-
-export type RcbFeedbackIssueType =
-  | 'missing_record'
-  | 'wrong_sign'
-  | 'wrong_amount'
-  | 'wrong_date'
-  | 'wrong_description'
-  | 'duplicate'
-  | 'other';
-
-export type RcbFeedbackStatus = 'open' | 'triaged' | 'fixed' | 'closed';
-
-export type RcbUsageEventType =
-  | 'extract.sync.success'
-  | 'extract.sync.cached'
-  | 'extract.sync.failed'
-  | 'extract.queue.enqueued'
-  | 'extract.queue.success'
-  | 'extract.queue.cached'
-  | 'extract.queue.failed'
-  | 'template.run.success'
-  | 'template.run.failed';
-
-export interface IRcbBankHint {
-  bank: string;
-  version?: string;
-}
-
-export interface IRcbTransaction {
-  date?: string;
-  description?: string;
-  amount?: number;
-  balance?: number;
-  valueDate?: string;
-  bookingDate?: string;
-  reference?: string;
-  [k: string]: unknown;
-}
-
-export interface IRcbExtractionMetadata {
-  iban?: string;
-  bic?: string;
-  bank?: string;
-  accountHolder?: string;
-  periodStart?: string;
-  periodEnd?: string;
-  openingBalance?: number;
-  closingBalance?: number;
-  currency?: string;
-  [k: string]: unknown;
-}
-
-export interface IRcbFile {
-  id: string;
-  userId: string;
-  applicationId: string | null;
-  pdfHash: string;
-  pdfSizeBytes: number;
-  pdfMimeType: string;
-  pdfPageCount: number | null;
-  pdfFilename: string | null;
-  applicationFileId: string | null;
-  userExternalId: string | null;
-  userMetadata: Record<string, unknown> | null;
-  detectedBank: string | null;
-  detectedVersion: string | null;
-  detectedIban: string | null;
-  detectedBic: string | null;
-  detectedCurrency: string | null;
-  createdAt: string;
-  updatedAt: string;
-}
-
-// Structured warning emitted by the extraction orchestrator. The `code`
-// is the i18n key suffix, `data` carries numeric/string values the UI
-// formats locally (currencies, dates, etc.).
-export enum RcbWarningCode {
-  NO_RECORDS = 'no_records',
-  NO_IBAN = 'no_iban',
-  NO_BALANCES = 'no_balances',
-  BALANCE_MISMATCH = 'balance_mismatch',
-}
-
-export interface IRcbWarning {
-  code: RcbWarningCode;
-  data?: {
-    actualCents?: number;
-    expectedCents?: number;
-    currency?: string;
-  };
-}
-
-export interface IRcbExtraction {
-  id: string;
-  fileId: string;
-  mode: RcbExtractionMode;
-  hintBank: string | null;
-  hintVersion: string | null;
-  templateId: string | null;
-  templateVersion: number | null;
-  status: RcbExtractionStatus;
-  strategyUsed: string | null;
-  confidence: number | null;
-  recordsCount: number | null;
-  balanceValidated: boolean | null;
-  durationMs: number | null;
-  error: string | null;
-  recordsJson: IRcbTransaction[] | null;
-  metadataJson: IRcbExtractionMetadata | null;
-  warningsJson: IRcbWarning[] | null;
-  tags: string[] | null;
-  note: string | null;
-  shareToken: string | null;
-  shareExpiresAt: string | null;
-  createdAt: string;
-}
-
-export interface IRcbTemplate {
-  id: string;
-  userId: string;
-  name: string;
-  description: string | null;
-  isActive: boolean;
-  createdAt: string;
-  updatedAt: string;
-}
-
-/**
- * Spatial zone on a PDF page (PDF coords: origin bottom-left, points).
- * Restricts regex matching to a specific rectangle.
- */
-export interface IRcbTemplateZone {
-  name: string;
-  page: number; // 1-indexed
-  x: number;
-  y: number;
-  w: number;
-  h: number;
-}
-
-/**
- * Typed shape of the template DSL JSON stored in `templateJson`. Mirrors
- * `TemplateDSL` server-side. UI editors should narrow `templateJson` to this
- * shape via `templateJson as IRcbTemplateDsl`.
- */
-export interface IRcbTemplateDsl {
-  regex_iban?: string;
-  regex_bic?: string;
-  period?: { regex: string };
-  balance?: { opening_regex?: string; closing_regex?: string };
-  transactions?: {
-    row_pattern: string;
-    date_format?: string;
-    amount_locale?: 'fr' | 'en';
-    sign_rule?: 'explicit' | 'keyword';
-  };
-  skip_patterns?: string[];
-  zones?: IRcbTemplateZone[];
-}
-
-export interface IRcbTemplateVersion {
-  id: string;
-  templateId: string;
-  version: number;
-  templateJson: Record<string, unknown>;
-  comment: string | null;
-  createdAt: string;
-}
-
-export interface IRcbFeedback {
-  id: string;
-  extractionId: string;
-  userId: string;
-  issueType: RcbFeedbackIssueType;
-  description: string | null;
-  status: RcbFeedbackStatus;
-  createdAt: string;
-}
-
-export interface IRcbWebhookDelivery {
-  id: string;
-  userId: string | null;
-  organizationId: string | null;
-  projectId: string | null;
-  createdByUserId: string | null;
-  webhookId: string | null;
-  jobId: string | null;
-  event: string;
-  url: string;
-  payloadJson: Record<string, unknown>;
-  attempts: number;
-  lastStatus: number | null;
-  lastError: string | null;
-  deliveredAt: string | null;
-  createdAt: string;
-  updatedAt: string;
-}
-
-// Webhook event identifier. Values mirror AbyssApplicationEvent's RCB_*
-// entries so a logger.log(applicationEvent: ...) and a webhook delivery
-// can never drift.
-export enum RcbWebhookEvent {
-  EXTRACT_COMPLETED = 'rcb.extract.completed',
-  EXTRACT_FAILED = 'rcb.extract.failed',
-  EXTRACT_LOW_CONFIDENCE = 'rcb.extract.low-confidence',
-  EXTRACT_BALANCE_KO = 'rcb.extract.balance-ko',
-  FILE_ARCHIVED = 'rcb.file.archived',
-  SHARE_MINTED = 'rcb.share.minted',
-  SHARE_REVOKED = 'rcb.share.revoked',
-  FEEDBACK_SUBMITTED = 'rcb.feedback.submitted',
-  JOB_FAILED = 'rcb.job.failed',
-  EXPORT_COMPLETED = 'rcb.export.completed',
-  EXPORT_FAILED = 'rcb.export.failed',
-}
-
-export const RCB_WEBHOOK_EVENTS: RcbWebhookEvent[] =
-  Object.values(RcbWebhookEvent);
-
-export interface IRcbWebhook {
-  id: string;
-  userId: string | null;
-  organizationId: string | null;
-  projectId: string | null;
-  createdByUserId: string | null;
-  webhookUrl: string;
-  webhookSecret: string;
-  isEnabled: boolean;
-  name: string;
-  description: string;
-  scopes: RcbWebhookEvent[];
-  consecutiveFailures: number;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface IRcbQuota {
-  userId: string;
-  tier: string;
-  monthlyExtractCap: number | null;
-  monthlyExtractedCap: number | null;
-  monthlyBytesCap: number | null;
-  queueOnlyAboveCount: number | null;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface IRcbBankVersion {
-  id: string;
-  bank: string;
-  version: string;
-  validFrom: string | null;
-  validTo: string | null;
-  detectorJson: Record<string, unknown>;
-  parserKind: string;
-  configJson: Record<string, unknown>;
-  isActive: boolean;
-  createdAt: string;
-  updatedAt: string;
-}
+// ──────────────────────────────────────────────
+// RCB (Relevé de Compte Bancaire) DTOs.
+// Mirror server-side Sequelize models, dates serialized as ISO strings.
+// ──────────────────────────────────────────────
+
+export type RcbExtractionMode = 'auto' | 'hint' | 'template';
+export type RcbProcessingMode = 'sync' | 'queue';
+export type RcbExtractionStatus = 'pending' | 'completed' | 'failed' | 'cached';
+
+export type RcbFeedbackIssueType =
+  | 'missing_record'
+  | 'wrong_sign'
+  | 'wrong_amount'
+  | 'wrong_date'
+  | 'wrong_description'
+  | 'duplicate'
+  | 'other';
+
+export type RcbFeedbackStatus = 'open' | 'triaged' | 'fixed' | 'closed';
+
+export type RcbUsageEventType =
+  | 'extract.sync.success'
+  | 'extract.sync.cached'
+  | 'extract.sync.failed'
+  | 'extract.queue.enqueued'
+  | 'extract.queue.success'
+  | 'extract.queue.cached'
+  | 'extract.queue.failed'
+  | 'template.run.success'
+  | 'template.run.failed';
+
+export interface IRcbBankHint {
+  bank: string;
+  version?: string;
+}
+
+export interface IRcbTransaction {
+  date?: string;
+  description?: string;
+  amount?: number;
+  balance?: number;
+  valueDate?: string;
+  bookingDate?: string;
+  reference?: string;
+  [k: string]: unknown;
+}
+
+export interface IRcbExtractionMetadata {
+  iban?: string;
+  bic?: string;
+  bank?: string;
+  accountHolder?: string;
+  periodStart?: string;
+  periodEnd?: string;
+  openingBalance?: number;
+  closingBalance?: number;
+  currency?: string;
+  [k: string]: unknown;
+}
+
+export interface IRcbFile {
+  id: string;
+  userId: string;
+  applicationId: string | null;
+  pdfHash: string;
+  pdfSizeBytes: number;
+  pdfMimeType: string;
+  pdfPageCount: number | null;
+  pdfFilename: string | null;
+  applicationFileId: string | null;
+  userExternalId: string | null;
+  userMetadata: Record<string, unknown> | null;
+  detectedBank: string | null;
+  detectedVersion: string | null;
+  detectedIban: string | null;
+  detectedBic: string | null;
+  detectedCurrency: string | null;
+  createdAt: string;
+  updatedAt: string;
+}
+
+// Structured warning emitted by the extraction orchestrator. The `code`
+// is the i18n key suffix, `data` carries numeric/string values the UI
+// formats locally (currencies, dates, etc.).
+export enum RcbWarningCode {
+  NO_RECORDS = 'no_records',
+  NO_IBAN = 'no_iban',
+  NO_BALANCES = 'no_balances',
+  BALANCE_MISMATCH = 'balance_mismatch',
+}
+
+export interface IRcbWarning {
+  code: RcbWarningCode;
+  data?: {
+    actualCents?: number;
+    expectedCents?: number;
+    currency?: string;
+  };
+}
+
+export interface IRcbExtraction {
+  id: string;
+  fileId: string;
+  mode: RcbExtractionMode;
+  hintBank: string | null;
+  hintVersion: string | null;
+  templateId: string | null;
+  templateVersion: number | null;
+  status: RcbExtractionStatus;
+  strategyUsed: string | null;
+  confidence: number | null;
+  recordsCount: number | null;
+  balanceValidated: boolean | null;
+  durationMs: number | null;
+  error: string | null;
+  recordsJson: IRcbTransaction[] | null;
+  metadataJson: IRcbExtractionMetadata | null;
+  warningsJson: IRcbWarning[] | null;
+  tags: string[] | null;
+  note: string | null;
+  shareToken: string | null;
+  shareExpiresAt: string | null;
+  createdAt: string;
+}
+
+export interface IRcbTemplate {
+  id: string;
+  userId: string;
+  name: string;
+  description: string | null;
+  isActive: boolean;
+  createdAt: string;
+  updatedAt: string;
+}
+
+/**
+ * Spatial zone on a PDF page (PDF coords: origin bottom-left, points).
+ * Restricts regex matching to a specific rectangle.
+ */
+export interface IRcbTemplateZone {
+  name: string;
+  page: number; // 1-indexed
+  x: number;
+  y: number;
+  w: number;
+  h: number;
+}
+
+/**
+ * Typed shape of the template DSL JSON stored in `templateJson`. Mirrors
+ * `TemplateDSL` server-side. UI editors should narrow `templateJson` to this
+ * shape via `templateJson as IRcbTemplateDsl`.
+ */
+export interface IRcbTemplateDsl {
+  regex_iban?: string;
+  regex_bic?: string;
+  period?: { regex: string };
+  balance?: { opening_regex?: string; closing_regex?: string };
+  transactions?: {
+    row_pattern: string;
+    date_format?: string;
+    amount_locale?: 'fr' | 'en';
+    sign_rule?: 'explicit' | 'keyword';
+  };
+  skip_patterns?: string[];
+  zones?: IRcbTemplateZone[];
+}
+
+export interface IRcbTemplateVersion {
+  id: string;
+  templateId: string;
+  version: number;
+  templateJson: Record<string, unknown>;
+  comment: string | null;
+  createdAt: string;
+}
+
+export interface IRcbFeedback {
+  id: string;
+  extractionId: string;
+  userId: string;
+  issueType: RcbFeedbackIssueType;
+  description: string | null;
+  status: RcbFeedbackStatus;
+  createdAt: string;
+}
+
+export interface IRcbWebhookDelivery {
+  id: string;
+  userId: string | null;
+  organizationId: string | null;
+  projectId: string | null;
+  createdByUserId: string | null;
+  webhookId: string | null;
+  jobId: string | null;
+  event: string;
+  url: string;
+  payloadJson: Record<string, unknown>;
+  attempts: number;
+  lastStatus: number | null;
+  lastError: string | null;
+  deliveredAt: string | null;
+  createdAt: string;
+  updatedAt: string;
+}
+
+// Webhook event identifier. Values mirror AbyssApplicationEvent's RCB_*
+// entries so a logger.log(applicationEvent: ...) and a webhook delivery
+// can never drift.
+export enum RcbWebhookEvent {
+  EXTRACT_COMPLETED = 'rcb.extract.completed',
+  EXTRACT_FAILED = 'rcb.extract.failed',
+  EXTRACT_LOW_CONFIDENCE = 'rcb.extract.low-confidence',
+  EXTRACT_BALANCE_KO = 'rcb.extract.balance-ko',
+  FILE_ARCHIVED = 'rcb.file.archived',
+  SHARE_MINTED = 'rcb.share.minted',
+  SHARE_REVOKED = 'rcb.share.revoked',
+  FEEDBACK_SUBMITTED = 'rcb.feedback.submitted',
+  JOB_FAILED = 'rcb.job.failed',
+  EXPORT_COMPLETED = 'rcb.export.completed',
+  EXPORT_FAILED = 'rcb.export.failed',
+}
+
+export const RCB_WEBHOOK_EVENTS: RcbWebhookEvent[] =
+  Object.values(RcbWebhookEvent);
+
+export interface IRcbWebhook {
+  id: string;
+  userId: string | null;
+  organizationId: string | null;
+  projectId: string | null;
+  createdByUserId: string | null;
+  webhookUrl: string;
+  webhookSecret: string;
+  isEnabled: boolean;
+  name: string;
+  description: string;
+  scopes: RcbWebhookEvent[];
+  consecutiveFailures: number;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface IRcbQuota {
+  userId: string;
+  tier: string;
+  monthlyExtractCap: number | null;
+  monthlyExtractedCap: number | null;
+  monthlyBytesCap: number | null;
+  queueOnlyAboveCount: number | null;
+  createdAt: string;
+  updatedAt: string;
+}
+
+export interface IRcbBankVersion {
+  id: string;
+  bank: string;
+  version: string;
+  validFrom: string | null;
+  validTo: string | null;
+  detectorJson: Record<string, unknown>;
+  parserKind: string;
+  configJson: Record<string, unknown>;
+  isActive: boolean;
+  createdAt: string;
+  updatedAt: string;
+}

package/src/utils/rcb-webhook.utils.ts

@@ -1,30 +1,30 @@
-// ──────────────────────────────────────────────
-// RCB webhook signature verification (server-side helper for receivers).
-//
-// AbyssTools RCB queue signs every webhook delivery with HMAC-SHA256 of
-// the raw JSON body using the secret provided at extract time. Receivers
-// compare the X-RCB-Signature header (format `sha256=<hex>`) against the
-// same computation. Constant-time compare prevents timing attacks.
-//
-// Lazy-requires `crypto` so the SDK stays browser-compatible when this
-// utility is never invoked (browsers won't receive webhooks anyway).
-// ──────────────────────────────────────────────
-
-export interface VerifyRcbWebhookInput {
-  rawBody: string | Buffer;
-  signatureHeader: string | undefined;
-  secret: string;
-}
-
-export function verifyRcbWebhook(input: VerifyRcbWebhookInput): boolean {
-  if (!input.signatureHeader || !input.secret) return false;
-  // eslint-disable-next-line @typescript-eslint/no-var-requires
-  const crypto = require('crypto');
-  const provided = input.signatureHeader.replace(/^sha256=/, '');
-  const computed: string = crypto
-    .createHmac('sha256', input.secret)
-    .update(input.rawBody)
-    .digest('hex');
-  if (provided.length !== computed.length) return false;
-  return crypto.timingSafeEqual(Buffer.from(provided, 'hex'), Buffer.from(computed, 'hex'));
-}
+// ──────────────────────────────────────────────
+// RCB webhook signature verification (server-side helper for receivers).
+//
+// AbyssTools RCB queue signs every webhook delivery with HMAC-SHA256 of
+// the raw JSON body using the secret provided at extract time. Receivers
+// compare the X-RCB-Signature header (format `sha256=<hex>`) against the
+// same computation. Constant-time compare prevents timing attacks.
+//
+// Lazy-requires `crypto` so the SDK stays browser-compatible when this
+// utility is never invoked (browsers won't receive webhooks anyway).
+// ──────────────────────────────────────────────
+
+export interface VerifyRcbWebhookInput {
+  rawBody: string | Buffer;
+  signatureHeader: string | undefined;
+  secret: string;
+}
+
+export function verifyRcbWebhook(input: VerifyRcbWebhookInput): boolean {
+  if (!input.signatureHeader || !input.secret) return false;
+  // eslint-disable-next-line @typescript-eslint/no-var-requires
+  const crypto = require('crypto');
+  const provided = input.signatureHeader.replace(/^sha256=/, '');
+  const computed: string = crypto
+    .createHmac('sha256', input.secret)
+    .update(input.rawBody)
+    .digest('hex');
+  if (provided.length !== computed.length) return false;
+  return crypto.timingSafeEqual(Buffer.from(provided, 'hex'), Buffer.from(computed, 'hex'));
+}