@abyss-project/tools 2.3.0 → 2.5.0

package/dist/types/enum/beam.enum.d.ts

@@ -7,8 +7,14 @@ export declare enum BeamServeDenyReasonCode {
     EXPIRED = "expired",
     FORBIDDEN_VISIBILITY = "forbidden_visibility",
     MAX_DOWNLOADS = "max_downloads",
-    SCAN_PENDING = "scan_pending",
-    SCAN_INFECTED = "scan_infected"
+    SCAN_PENDING = "scan_pending"
+}
+export declare enum BeamFileScanStatus {
+    PENDING_SCAN = "pending_scan",
+    CLEAN = "clean",
+    INFECTED = "infected",
+    SKIPPED = "skipped",
+    ERROR = "error"
 }
 export declare enum BeamDownloadKind {
     FILE = "file",

package/dist/types/enum/beam.enum.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.BeamDownloadKind = exports.BeamServeDenyReasonCode = exports.BeamVisibility = void 0;
+exports.BeamDownloadKind = exports.BeamFileScanStatus = exports.BeamServeDenyReasonCode = exports.BeamVisibility = void 0;
 var BeamVisibility;
 (function (BeamVisibility) {
     BeamVisibility["PUBLIC"] = "PUBLIC";
@@ -13,8 +13,15 @@ var BeamServeDenyReasonCode;
     BeamServeDenyReasonCode["FORBIDDEN_VISIBILITY"] = "forbidden_visibility";
     BeamServeDenyReasonCode["MAX_DOWNLOADS"] = "max_downloads";
     BeamServeDenyReasonCode["SCAN_PENDING"] = "scan_pending";
-    BeamServeDenyReasonCode["SCAN_INFECTED"] = "scan_infected";
 })(BeamServeDenyReasonCode || (exports.BeamServeDenyReasonCode = BeamServeDenyReasonCode = {}));
+var BeamFileScanStatus;
+(function (BeamFileScanStatus) {
+    BeamFileScanStatus["PENDING_SCAN"] = "pending_scan";
+    BeamFileScanStatus["CLEAN"] = "clean";
+    BeamFileScanStatus["INFECTED"] = "infected";
+    BeamFileScanStatus["SKIPPED"] = "skipped";
+    BeamFileScanStatus["ERROR"] = "error";
+})(BeamFileScanStatus || (exports.BeamFileScanStatus = BeamFileScanStatus = {}));
 var BeamDownloadKind;
 (function (BeamDownloadKind) {
     BeamDownloadKind["FILE"] = "file";

package/dist/types/enum/beam.enum.js.map

@@ -1 +1 @@
-{"version":3,"file":"beam.enum.js","sourceRoot":"","sources":["../../../src/types/enum/beam.enum.ts"],"names":[],"mappings":";;;AAIA,IAAY,cAGX;AAHD,WAAY,cAAc;IACxB,mCAAiB,CAAA;IACjB,2CAAyB,CAAA;AAC3B,CAAC,EAHW,cAAc,8BAAd,cAAc,QAGzB;AASD,IAAY,uBAOX;AAPD,WAAY,uBAAuB;IACjC,kDAAuB,CAAA;IACvB,8CAAmB,CAAA;IACnB,wEAA6C,CAAA;IAC7C,0DAA+B,CAAA;IAC/B,wDAA6B,CAAA;IAC7B,0DAA+B,CAAA;AACjC,CAAC,EAPW,uBAAuB,uCAAvB,uBAAuB,QAOlC;AAKD,IAAY,gBAGX;AAHD,WAAY,gBAAgB;IAC1B,iCAAa,CAAA;IACb,+BAAW,CAAA;AACb,CAAC,EAHW,gBAAgB,gCAAhB,gBAAgB,QAG3B"}
+{"version":3,"file":"beam.enum.js","sourceRoot":"","sources":["../../../src/types/enum/beam.enum.ts"],"names":[],"mappings":";;;AAIA,IAAY,cAGX;AAHD,WAAY,cAAc;IACxB,mCAAiB,CAAA;IACjB,2CAAyB,CAAA;AAC3B,CAAC,EAHW,cAAc,8BAAd,cAAc,QAGzB;AASD,IAAY,uBAMX;AAND,WAAY,uBAAuB;IACjC,kDAAuB,CAAA;IACvB,8CAAmB,CAAA;IACnB,wEAA6C,CAAA;IAC7C,0DAA+B,CAAA;IAC/B,wDAA6B,CAAA;AAC/B,CAAC,EANW,uBAAuB,uCAAvB,uBAAuB,QAMlC;AAWD,IAAY,kBAMX;AAND,WAAY,kBAAkB;IAC5B,mDAA6B,CAAA;IAC7B,qCAAe,CAAA;IACf,2CAAqB,CAAA;IACrB,yCAAmB,CAAA;IACnB,qCAAe,CAAA;AACjB,CAAC,EANW,kBAAkB,kCAAlB,kBAAkB,QAM7B;AAKD,IAAY,gBAGX;AAHD,WAAY,gBAAgB;IAC1B,iCAAa,CAAA;IACb,+BAAW,CAAA;AACb,CAAC,EAHW,gBAAgB,gCAAhB,gBAAgB,QAG3B"}

package/dist/types/enum/file-scan-status.enum.d.ts

@@ -0,0 +1 @@
+export type FileScanStatus = 'pending_scan' | 'clean' | 'infected' | 'skipped' | 'error';

package/dist/types/enum/file-scan-status.enum.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=file-scan-status.enum.js.map

package/dist/types/enum/file-scan-status.enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-scan-status.enum.js","sourceRoot":"","sources":["../../../src/types/enum/file-scan-status.enum.ts"],"names":[],"mappings":""}

package/dist/types/enum/index.d.ts

@@ -12,3 +12,4 @@ export * from './provider-kind.enum';
 export * from './interpreter-kind.enum';
 export * from './combine-strategy.enum';
 export * from './probe-scan.enum';
+export * from './file-scan-status.enum';

package/dist/types/enum/index.js

@@ -28,4 +28,5 @@ __exportStar(require("./provider-kind.enum"), exports);
 __exportStar(require("./interpreter-kind.enum"), exports);
 __exportStar(require("./combine-strategy.enum"), exports);
 __exportStar(require("./probe-scan.enum"), exports);
+__exportStar(require("./file-scan-status.enum"), exports);
 //# sourceMappingURL=index.js.map

package/dist/types/enum/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/enum/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAAiC;AACjC,wDAAsC;AACtC,2DAAyC;AACzC,uDAAqC;AACrC,8CAA4B;AAC5B,uDAAqC;AACrC,uDAAqC;AACrC,kDAAgC;AAChC,4DAA0C;AAC1C,wEAAsD;AACtD,uDAAqC;AACrC,0DAAwC;AACxC,0DAAwC;AACxC,oDAAkC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/types/enum/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAAiC;AACjC,wDAAsC;AACtC,2DAAyC;AACzC,uDAAqC;AACrC,8CAA4B;AAC5B,uDAAqC;AACrC,uDAAqC;AACrC,kDAAgC;AAChC,4DAA0C;AAC1C,wEAAsD;AACtD,uDAAqC;AACrC,0DAAwC;AACxC,0DAAwC;AACxC,oDAAkC;AAClC,0DAAwC"}

package/dist/types/interface/api/responses/beam.response.d.ts

@@ -2,7 +2,7 @@ import { BasePaginate } from '../type-message/base-paginate';
 import { IResponse } from '../type-message/response';
 import { IBeamTransfer, IBeamFile, IBeamRecipient } from '../../models/beam.dto';
 import { IContentShare } from '../../models/content-share.dto';
-import { BeamVisibility, BeamServeDenyReasonCode, BeamDownloadKind } from '../../../enum/beam.enum';
+import { BeamVisibility, BeamServeDenyReasonCode, BeamDownloadKind, BeamFileScanStatus } from '../../../enum/beam.enum';
 export interface IGetBeamData {
     beamTransfer: IBeamTransfer;
 }
@@ -39,6 +39,7 @@ export interface IBeamPublicFile {
     hasThumbnail: boolean;
     width: number | null;
     height: number | null;
+    scanStatus: BeamFileScanStatus;
 }
 export interface IBeamPublicView {
     slug: string;

package/dist/types/interface/models/atlas-document.dto.d.ts

@@ -1,5 +1,6 @@
 import { IAtlasPage } from './atlas-page.dto';
 import { IAtlas } from './atlas.dto';
+import { FileScanStatus } from '../../enum/file-scan-status.enum';
 export interface IAtlasDocument {
     id: string;
     atlasPageId: string;
@@ -12,6 +13,7 @@ export interface IAtlasDocument {
     sizeOctet: number;
     mimeType: string;
     checksum: string;
+    scanStatus: FileScanStatus | null;
     createdAt?: Date;
     updatedAt?: Date;
     atlasPage?: IAtlasPage;

package/dist/types/interface/models/board-card-document.dto.d.ts

@@ -1,5 +1,6 @@
 import { IBoardCard } from './board-card.dto';
 import { IBoard } from './board.dto';
+import { FileScanStatus } from '../../enum/file-scan-status.enum';
 export interface IBoardCardDocument {
     id: string;
     boardCardId: string;
@@ -12,6 +13,7 @@ export interface IBoardCardDocument {
     checksum: string;
     mimeType: string;
     sizeOctet: number;
+    scanStatus: FileScanStatus | null;
     updatedAt?: Date;
     createdAt?: Date;
     boardCard: IBoardCard;

package/dist/types/interface/models/extraction.dto.d.ts

@@ -1,6 +1,7 @@
 import { ExtractionWarningCode } from '../../../types/enum/extraction-warning.enum';
 import { ExtractionFeedbackIssueType } from '../../../types/enum/extraction-feedback-issue-type.enum';
 import { DocumentType } from '../../../types/enum/document-type.enum';
+import { FileScanStatus } from '../../enum/file-scan-status.enum';
 import type { IFieldValue, IExecutionManifest, IGlobalConfidence } from './extraction-plan.dto';
 export { ExtractionFeedbackIssueType };
 export type ExtractionMode = 'auto' | 'hint' | 'template';
@@ -51,6 +52,7 @@ export interface IExtractionFile {
     detectedIban: string | null;
     detectedBic: string | null;
     detectedCurrency: string | null;
+    scanStatus: FileScanStatus | null;
     createdAt: string;
     updatedAt: string;
 }

package/dist/types/interface/models/extraction.dto.js.map

@@ -1 +1 @@
-{"version":3,"file":"extraction.dto.js","sourceRoot":"","sources":["../../../../src/types/interface/models/extraction.dto.ts"],"names":[],"mappings":";;;AAKA,yFAAoF;AA4E3E,sGA5EA,+CAAqB,OA4EA;AA3E9B,iHAAsG;AAK7F,4GALA,iEAA2B,OAKA;AAoQpC,IAAY,sBAYX;AAZD,WAAY,sBAAsB;IAChC,qEAA2C,CAAA;IAC3C,+DAAqC,CAAA;IACrC,+EAAqD,CAAA;IACrD,uEAA6C,CAAA;IAC7C,6DAAmC,CAAA;IACnC,2DAAiC,CAAA;IACjC,6DAAmC,CAAA;IACnC,uEAA6C,CAAA;IAC7C,uDAA6B,CAAA;IAC7B,mEAAyC,CAAA;IACzC,6DAAmC,CAAA;AACrC,CAAC,EAZW,sBAAsB,sCAAtB,sBAAsB,QAYjC;AAEY,QAAA,yBAAyB,GACpC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;AAuCxC,IAAY,2BAGX;AAHD,WAAY,2BAA2B;IACrC,4CAAa,CAAA;IACb,0CAAW,CAAA;AACb,CAAC,EAHW,2BAA2B,2CAA3B,2BAA2B,QAGtC"}
+{"version":3,"file":"extraction.dto.js","sourceRoot":"","sources":["../../../../src/types/interface/models/extraction.dto.ts"],"names":[],"mappings":";;;AAKA,yFAAoF;AAwF3E,sGAxFA,+CAAqB,OAwFA;AAvF9B,iHAAsG;AAM7F,4GANA,iEAA2B,OAMA;AA+QpC,IAAY,sBAYX;AAZD,WAAY,sBAAsB;IAChC,qEAA2C,CAAA;IAC3C,+DAAqC,CAAA;IACrC,+EAAqD,CAAA;IACrD,uEAA6C,CAAA;IAC7C,6DAAmC,CAAA;IACnC,2DAAiC,CAAA;IACjC,6DAAmC,CAAA;IACnC,uEAA6C,CAAA;IAC7C,uDAA6B,CAAA;IAC7B,mEAAyC,CAAA;IACzC,6DAAmC,CAAA;AACrC,CAAC,EAZW,sBAAsB,sCAAtB,sBAAsB,QAYjC;AAEY,QAAA,yBAAyB,GACpC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;AAuCxC,IAAY,2BAGX;AAHD,WAAY,2BAA2B;IACrC,4CAAa,CAAA;IACb,0CAAW,CAAA;AACb,CAAC,EAHW,2BAA2B,2CAA3B,2BAA2B,QAGtC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@abyss-project/tools",
-  "version": "2.3.0",
+  "version": "2.5.0",
   "description": "Core package to interact with Abyss-Project Tools",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/src/types/enum/beam.enum.ts

@@ -20,7 +20,23 @@ export enum BeamServeDenyReasonCode {
   FORBIDDEN_VISIBILITY = 'forbidden_visibility',
   MAX_DOWNLOADS = 'max_downloads',
   SCAN_PENDING = 'scan_pending',
-  SCAN_INFECTED = 'scan_infected',
+}
+
+// Per-file AV verdict surfaced on the public listing (GET /b/:slug) so the
+// front can render a per-file badge — clean / "en analyse" (pending) /
+// "infecté" — independently of the whole-transfer denial reason above.
+// Storage-neutral: AbyssBeam serves an INFECTED file's bytes (spec decision —
+// infected files stay downloadable, not blocked; the front is expected to
+// warn before/at download). Mirrors the storage extension's `FileScanStatus`
+// (`@abyss-project/storage`) byte-for-byte; duplicated locally because this
+// package does not depend on `@abyss-project/storage` (same rationale as
+// BeamServeDenyReasonCode above).
+export enum BeamFileScanStatus {
+  PENDING_SCAN = 'pending_scan',
+  CLEAN = 'clean',
+  INFECTED = 'infected',
+  SKIPPED = 'skipped',
+  ERROR = 'error',
 }
 
 // What a beam_download_events row counted: a single-file download (/b/:slug/

package/src/types/enum/file-scan-status.enum.ts

@@ -0,0 +1,33 @@
+/**
+ * Antivirus scan verdict for a stored file, mirrored from AbyssStorage.
+ *
+ * Same vocabulary as `@abyss-project/storage`'s `FileScanStatus` enum
+ * (`application_files.scanStatus`): `pending_scan` | `clean` | `infected` |
+ * `skipped` | `error`. Intentionally re-declared here as a string union — NOT
+ * imported — because abyss-tools-core is standalone (does not depend on
+ * `@abyss-project/storage`), the same approach every other core package
+ * (abyss-main asset-core, abyss-banking-core, abyss-memories-core) takes for
+ * a mirrored external vocabulary. `BeamFileScanStatus` (beam.enum.ts) mirrors
+ * the SAME storage vocabulary as a real TS enum instead: that shape fits
+ * beam, which converts a single Map of live-read values at ONE serialization
+ * boundary (an explicit `Record<FileScanStatus, BeamFileScanStatus>`
+ * suffices there). This column is denormalized and WRITTEN from several call
+ * sites (webhook UPLOAD seed, webhook SCAN_RESULT update, cloud-import
+ * mirror, archive-upload seed) — a string union lets the backend assign a
+ * storage `FileScanStatus` enum value straight into it with no cast (a
+ * string-enum member is assignable to a matching string-literal union, but
+ * NOT to a distinct local enum with identical values), avoiding a repeated
+ * conversion Record at every one of those sites. Keep the members in sync
+ * with storage's enum.
+ *
+ * Storage-neutral posture (ADR-0038): this field is purely informational —
+ * exposed so the front can render an AbyssProbe indicator (clean / "en
+ * analyse" / infected). Nothing in abyss-tools purges an infected row,
+ * redacts a servable id, or blocks a read while pending; the front decides
+ * what to show (e.g. blurring a pending thumbnail).
+ *
+ * Used by BoardCardDocument, AtlasDocument and ExtractionFile (the last only
+ * for an archive-owned row — see ExtractionFile.scanStatus's own doc
+ * comment).
+ */
+export type FileScanStatus = 'pending_scan' | 'clean' | 'infected' | 'skipped' | 'error';

package/src/types/enum/index.ts

@@ -12,3 +12,4 @@ export * from './provider-kind.enum';
 export * from './interpreter-kind.enum';
 export * from './combine-strategy.enum';
 export * from './probe-scan.enum';
+export * from './file-scan-status.enum';

package/src/types/interface/api/responses/beam.response.ts

@@ -2,7 +2,12 @@ import { BasePaginate } from '../type-message/base-paginate';
 import { IResponse } from '../type-message/response';
 import { IBeamTransfer, IBeamFile, IBeamRecipient } from '../../models/beam.dto';
 import { IContentShare } from '../../models/content-share.dto';
-import { BeamVisibility, BeamServeDenyReasonCode, BeamDownloadKind } from '../../../enum/beam.enum';
+import {
+  BeamVisibility,
+  BeamServeDenyReasonCode,
+  BeamDownloadKind,
+  BeamFileScanStatus,
+} from '../../../enum/beam.enum';
 
 export interface IGetBeamData {
   beamTransfer: IBeamTransfer;
@@ -39,6 +44,9 @@ export type IFinalizeBeamResponse = IResponse<IFinalizeBeamData>;
 // Public serving (B3) — safe, purpose-built projection of a transfer for the
 // browser-facing view: no owner ids, no password/manage hashes; adds
 // hasPassword/isLocked/hasThumbnail so the front can render the locked state.
+// `scanStatus` is the per-file AV verdict (storage-neutral — an INFECTED file
+// is still listed and downloadable; the front renders the warning from this
+// field, see BeamFileScanStatus).
 export interface IBeamPublicFile {
   id: string;
   name: string;
@@ -48,6 +56,7 @@ export interface IBeamPublicFile {
   hasThumbnail: boolean;
   width: number | null;
   height: number | null;
+  scanStatus: BeamFileScanStatus;
 }
 
 export interface IBeamPublicView {

package/src/types/interface/models/atlas-document.dto.ts

@@ -1,5 +1,6 @@
 import { IAtlasPage } from './atlas-page.dto';
 import { IAtlas } from './atlas.dto';
+import { FileScanStatus } from '../../enum/file-scan-status.enum';
 
 export interface IAtlasDocument {
   id: string;
@@ -13,6 +14,15 @@ export interface IAtlasDocument {
   sizeOctet: number;
   mimeType: string;
   checksum: string;
+  /**
+   * Antivirus verdict mirrored from AbyssStorage (denormalized, seeded at the
+   * UPLOAD webhook and updated by the SCAN_RESULT webhook — see
+   * storage-webhook.service.ts#handleScanResult). Null for a document
+   * created before this column existed. Storage-neutral (ADR-0038): purely
+   * informational — never redacted, never gates a read. The front renders
+   * the AbyssProbe indicator (and blurs a pending thumbnail) from this field.
+   */
+  scanStatus: FileScanStatus | null;
   createdAt?: Date;
   updatedAt?: Date;
 

package/src/types/interface/models/board-card-document.dto.ts

@@ -1,5 +1,6 @@
 import { IBoardCard } from './board-card.dto';
 import { IBoard } from './board.dto';
+import { FileScanStatus } from '../../enum/file-scan-status.enum';
 
 export interface IBoardCardDocument {
   id: string;
@@ -13,6 +14,15 @@ export interface IBoardCardDocument {
   checksum: string;
   mimeType: string;
   sizeOctet: number;
+  /**
+   * Antivirus verdict mirrored from AbyssStorage (denormalized, seeded at the
+   * UPLOAD webhook and updated by the SCAN_RESULT webhook — see
+   * storage-webhook.service.ts#handleScanResult). Null for a document
+   * created before this column existed. Storage-neutral (ADR-0038): purely
+   * informational — never redacted, never gates a read. The front renders
+   * the AbyssProbe indicator (and blurs a pending thumbnail) from this field.
+   */
+  scanStatus: FileScanStatus | null;
   updatedAt?: Date;
   createdAt?: Date;
 

package/src/types/interface/models/extraction.dto.ts

@@ -6,6 +6,7 @@
 import { ExtractionWarningCode } from '../../../types/enum/extraction-warning.enum';
 import { ExtractionFeedbackIssueType } from '../../../types/enum/extraction-feedback-issue-type.enum';
 import { DocumentType } from '../../../types/enum/document-type.enum';
+import { FileScanStatus } from '../../enum/file-scan-status.enum';
 import type { IFieldValue, IExecutionManifest, IGlobalConfidence } from './extraction-plan.dto';
 
 // Re-export so consumers can import ExtractionFeedbackIssueType from the DTO barrel.
@@ -74,6 +75,17 @@ export interface IExtractionFile {
   detectedIban: string | null;
   detectedBic: string | null;
   detectedCurrency: string | null;
+  /**
+   * Antivirus verdict mirrored from AbyssStorage for an ARCHIVE-OWNED file
+   * only (seeded at extractionFileService.upsert from the archive-upload
+   * response — see extraction-extract.service.ts#archivePdf — and updated by
+   * the SCAN_RESULT webhook, storage-webhook.service.ts#handleScanResult).
+   * Null for a by-reference file (AbyssExtract never requested that scan, so
+   * it never mirrors a verdict for it) and for rows created before this
+   * column existed. Storage-neutral (ADR-0038): purely informational — never
+   * redacted, never gates a read.
+   */
+  scanStatus: FileScanStatus | null;
   createdAt: string;
   updatedAt: string;
 }