@abyss-project/tools 3.0.0 → 3.1.0

package/src/server-sent-events/server-sent-events.manager.ts

@@ -19,11 +19,13 @@ export class ServerSentEventsManager<
   T extends ServerSentEventBaseContext,
   P extends { type: string; payload: unknown },
 > {
-  private channel: string;
   private contexts: Map<string, Set<T>>;
 
-  constructor(channelName: string) {
-    this.channel = channelName;
+  // Le nom du canal est accepte pour ne rien casser chez les appelants, mais il
+  // n'est pas conserve : l'aiguillage se fait par la CLE de la table des
+  // gestionnaires (`AppConfig.sse[SSEChannels.X]`), jamais par un champ porte par
+  // le gestionnaire lui-meme. Le champ qui le stockait n'etait lu nulle part.
+  constructor(_channelName: string) {
     this.contexts = new Map();
   }
 

package/src/types/enum/document-type.enum.ts

@@ -6,5 +6,6 @@ export enum DocumentType {
   ID_CARD = 'id_card',
   RIB = 'rib',
   FINANCIAL_STATEMENT = 'financial_statement',
+  PAYSLIP = 'payslip',
   GENERIC = 'generic',
 }

package/src/types/enum/extract-field-format.enum.ts

@@ -0,0 +1,16 @@
+// ──────────────────────────────────────────────
+// ExtractFieldFormat — the shape of a published field value, so a client can
+// display it without knowing each key.
+// ──────────────────────────────────────────────
+
+export enum ExtractFieldFormat {
+  /** Integer amount in cents; the currency is the `currency` field. */
+  AMOUNT = 'amount',
+  /** ISO 8601 date (`YYYY-MM-DD`). */
+  DATE = 'date',
+  /** The percent itself: `9` for 9 %. */
+  PERCENT = 'percent',
+  BOOLEAN = 'boolean',
+  /** Free text or identifier (IBAN, SIRET, VAT number…), to display as is. */
+  TEXT = 'text',
+}

package/src/types/enum/extract-field-key.enum.ts

@@ -0,0 +1,77 @@
+// ──────────────────────────────────────────────
+// ExtractFieldKey — every field key AbyssExtract can publish for a known
+// document type (`generic` excluded: its fields are defined by the client).
+// The value is the key found in `fields` of an extraction result. Which type
+// publishes which key, and in which format: `EXTRACT_PUBLISHABLE_FIELDS`.
+// A valid machine-readable zone publishes its fields and `mrzValid` whatever
+// the document type.
+// ──────────────────────────────────────────────
+
+export enum ExtractFieldKey {
+  // Amounts
+  TOTAL_TTC = 'totalTtc',
+  TOTAL_HT = 'totalHt',
+  TOTAL_VAT = 'totalVat',
+  TOTAL = 'total',
+  VAT = 'vat',
+  OPENING_BALANCE = 'openingBalance',
+  CLOSING_BALANCE = 'closingBalance',
+  TOTAL_ACTIF = 'totalActif',
+  TOTAL_PASSIF = 'totalPassif',
+  FIXED_ASSETS = 'fixedAssets',
+  CURRENT_ASSETS = 'currentAssets',
+  CREDITORS_WITHIN_ONE_YEAR = 'creditorsWithinOneYear',
+  NET_CURRENT_LIABILITIES = 'netCurrentLiabilities',
+  TOTAL_ASSETS_LESS_CURRENT_LIABILITIES = 'totalAssetsLessCurrentLiabilities',
+  NET_ASSETS = 'netAssets',
+  CALLED_UP_SHARE_CAPITAL = 'calledUpShareCapital',
+  PROFIT_AND_LOSS_ACCOUNT = 'profitAndLossAccount',
+  TOTAL_SHAREHOLDERS_FUNDS = 'totalShareholdersFunds',
+  NET_CENTS = 'netCents',
+  GROSS_CENTS = 'grossCents',
+  NET_TAXABLE_CENTS = 'netTaxableCents',
+  PAS_AMOUNT_CENTS = 'pasAmountCents',
+  // Dates
+  INVOICE_DATE = 'invoiceDate',
+  DUE_DATE = 'dueDate',
+  DATE = 'date',
+  PERIOD_START = 'periodStart',
+  PERIOD_END = 'periodEnd',
+  FISCAL_YEAR_END = 'fiscalYearEnd',
+  BIRTH_DATE = 'birthDate',
+  EXPIRY_DATE = 'expiryDate',
+  ISSUE_DATE = 'issueDate',
+  // Percentages
+  PAS_RATE_PCT = 'pasRatePct',
+  // Identifiers
+  IBAN = 'iban',
+  BIC = 'bic',
+  SIRET = 'siret',
+  SIREN = 'siren',
+  VAT_NUMBER = 'vatNumber',
+  INVOICE_NUMBER = 'invoiceNumber',
+  DOCUMENT_NUMBER = 'documentNumber',
+  REGISTRATION_NUMBER = 'registrationNumber',
+  // Names and labels
+  SUPPLIER = 'supplier',
+  SUPPLIER_LEGAL_NAME = 'supplierLegalName',
+  MARKETPLACE = 'marketplace',
+  MERCHANT = 'merchant',
+  HOLDER_NAME = 'holderName',
+  BANK_NAME = 'bankName',
+  COMPANY = 'company',
+  EMPLOYER = 'employer',
+  LAST_NAME = 'lastName',
+  FIRST_NAMES = 'firstNames',
+  NATIONALITY = 'nationality',
+  /** ISO 4217 code of the published amounts. */
+  CURRENCY = 'currency',
+  /** Payslip period label: an ISO month (`2026-06`) or a day range (`2026-06-01..2026-06-30`). */
+  PERIOD = 'period',
+  // Machine-readable zone of an identity document
+  SEX = 'sex',
+  ISSUING_COUNTRY = 'issuingCountry',
+  DOCUMENT_KIND = 'documentKind',
+  /** Whether the check digits of the machine-readable zone are correct. */
+  MRZ_VALID = 'mrzValid',
+}

package/src/types/enum/extraction-warning.enum.ts

@@ -18,4 +18,61 @@ export enum ExtractionWarningCode {
    * enum for each domain-specific rule.
    */
   ADAPTER_VALIDATION_ERROR = 'adapter_validation_error',
+  /**
+   * A field was extracted but NOT published, because its calibrated confidence
+   * fell below the publish floor for its (documentType, fieldKey).
+   *
+   * This is deliberately its own code rather than an `ADAPTER_VALIDATION_ERROR`
+   * carrying a `data.type`. Suppression is a first-class product behaviour a
+   * client must be able to detect reliably — «did the engine find nothing, or
+   * did it find something it judged not worth sending?» are two different
+   * questions, and a client should not have to parse a free-text field to tell
+   * them apart.
+   *
+   * `data.fieldKey` names the field, `data.confidence` its calibrated value and
+   * `data.floor` the threshold it missed. The value itself is never in the
+   * warning: it stays in `provenance`, flagged `suppressed`.
+   */
+  FIELD_BELOW_PUBLISH_FLOOR = 'field_below_publish_floor',
+  /**
+   * A date field was extracted but NOT published, because nothing besides its
+   * format supported it: no label next to it, and it did not sit in the page
+   * band the document type expects for that field (#575).
+   *
+   * This is deliberately its own code rather than folded into
+   * `FIELD_BELOW_PUBLISH_FLOOR`: the confidence can sit ABOVE the field's
+   * publish floor (corroboration alone can carry a format-only date from 0.42
+   * to 0.565) and still not be published — a client checking only the floor
+   * would see no reason for the field's absence. Suppression is a first-class
+   * product behaviour a client must be able to detect reliably, here as much
+   * as for a below-floor drop.
+   *
+   * `data.fieldKey` names the field, `data.confidence` its calibrated value.
+   * The value itself is never in the warning: it stays in internal
+   * traceability only (`suppressedFields`, reason `format_only_date`), which
+   * is neither persisted nor returned to the client — only this warning is.
+   */
+  FIELD_FORMAT_ONLY_DATE = 'field_format_only_date',
+  /**
+   * A field of an identity document's machine-readable zone was read but NOT
+   * published, because its value lies outside the domain the zone allows
+   * (#614): a sex other than `M`, `F` or `X`, or a nationality or issuing
+   * state that is neither an ISO 3166-1 alpha-3 code nor one of the special
+   * codes of ICAO Doc 9303 part 3 (`D`, `UNO`, `XXA`, `RKS`…).
+   *
+   * These three fields are covered by no check digit, not even the composite
+   * one: a misread letter there leaves every key closing. The domain is the
+   * only check the zone itself offers for them, and a value that fails it is
+   * withheld rather than published at full confidence.
+   *
+   * This is deliberately its own code: the zone is valid and its other fields
+   * are published, so neither `FIELD_BELOW_PUBLISH_FLOOR` nor an
+   * `ADAPTER_VALIDATION_ERROR` of type `MRZ_INVALID` would tell the client why
+   * this one field is missing.
+   *
+   * `data.fieldKey` names the field. The value itself is never in the warning:
+   * it stays in internal traceability only (`suppressedFields`, reason
+   * `mrz_out_of_domain`), which is neither persisted nor returned to the client.
+   */
+  FIELD_MRZ_OUT_OF_DOMAIN = 'field_mrz_out_of_domain',
 }

package/src/types/enum/index.ts

@@ -7,6 +7,8 @@ export * from './document-type.enum';
 export * from './pdf-operation.enum';
 export * from './rcb-bank.enum';
 export * from './extraction-warning.enum';
+export * from './extract-field-key.enum';
+export * from './extract-field-format.enum';
 export * from './extraction-feedback-issue-type.enum';
 export * from './provider-kind.enum';
 export * from './interpreter-kind.enum';

package/src/types/enum/rcb-bank.enum.ts

@@ -68,57 +68,271 @@ export interface RcbBankCatalogueEntry {
 
 export const RCB_BANK_CATALOGUE: ReadonlyArray<RcbBankCatalogueEntry> = [
   // ─── French retail / business ─────────────
-  { id: RcbBankVersionId.BNP_CONNEXIS_DEFAULT,      bank: 'BNP Connexis',             version: 'default', country: 'FR', type: 'business' },
-  { id: RcbBankVersionId.BNP_PARIBAS_DEFAULT,       bank: 'BNP Paribas',              version: 'default', country: 'FR', type: 'retail' },
-  { id: RcbBankVersionId.SOCIETE_GENERALE_DEFAULT,  bank: 'Société Générale',         version: 'default', country: 'FR', type: 'retail' },
-  { id: RcbBankVersionId.CREDIT_AGRICOLE_DEFAULT,   bank: 'Crédit Agricole',          version: 'default', country: 'FR', type: 'retail' },
-  { id: RcbBankVersionId.LCL_DEFAULT,               bank: 'LCL',                      version: 'default', country: 'FR', type: 'retail' },
-  { id: RcbBankVersionId.BOURSORAMA_DEFAULT,        bank: 'Boursorama',               version: 'default', country: 'FR', type: 'retail' },
-  { id: RcbBankVersionId.LA_BANQUE_POSTALE_DEFAULT, bank: 'La Banque Postale',        version: 'default', country: 'FR', type: 'retail' },
-  { id: RcbBankVersionId.CAISSE_EPARGNE_DEFAULT,    bank: "Caisse d'Épargne",         version: 'default', country: 'FR', type: 'retail' },
-  { id: RcbBankVersionId.CIC_EBICS_DEFAULT,         bank: 'CIC',                      version: 'ebics',   country: 'FR', type: 'business' },
-  { id: RcbBankVersionId.CIC_DEFAULT,               bank: 'CIC',                      version: 'default', country: 'FR', type: 'retail' },
-  { id: RcbBankVersionId.CREDIT_MUTUEL_DEFAULT,     bank: 'Crédit Mutuel',            version: 'default', country: 'FR', type: 'retail' },
-  { id: RcbBankVersionId.BRED_DEFAULT,              bank: 'BRED',                     version: 'default', country: 'FR', type: 'retail' },
-  { id: RcbBankVersionId.CREDIT_DU_NORD_DEFAULT,    bank: 'Crédit du Nord',           version: 'default', country: 'FR', type: 'retail' },
-  { id: RcbBankVersionId.CDE_NET_DEFAULT,           bank: 'CDE Net',                  version: 'default', country: 'FR', type: 'business' },
-  { id: RcbBankVersionId.DELUBAC_DEFAULT,           bank: 'Delubac',                  version: 'default', country: 'FR', type: 'business' },
-  { id: RcbBankVersionId.PALATINE_DEFAULT,          bank: 'Palatine',                 version: 'default', country: 'FR', type: 'business' },
-  { id: RcbBankVersionId.NATIXIS_DEFAULT,           bank: 'Natixis',                  version: 'default', country: 'FR', type: 'corporate' },
-  { id: RcbBankVersionId.THEMIS_DEFAULT,            bank: 'Themis Banque',            version: 'default', country: 'FR', type: 'business' },
-  { id: RcbBankVersionId.ROTHSCHILD_DEFAULT,        bank: 'Rothschild Martin Maurel', version: 'default', country: 'FR', type: 'corporate' },
-  { id: RcbBankVersionId.LA_NEF_V1,                 bank: 'La Nef',                   version: 'v1',      country: 'FR', type: 'retail' },
-  { id: RcbBankVersionId.LA_NEF_V2,                 bank: 'La Nef',                   version: 'v2',      country: 'FR', type: 'retail' },
+  {
+    id: RcbBankVersionId.BNP_CONNEXIS_DEFAULT,
+    bank: 'BNP Connexis',
+    version: 'default',
+    country: 'FR',
+    type: 'business',
+  },
+  {
+    id: RcbBankVersionId.BNP_PARIBAS_DEFAULT,
+    bank: 'BNP Paribas',
+    version: 'default',
+    country: 'FR',
+    type: 'retail',
+  },
+  {
+    id: RcbBankVersionId.SOCIETE_GENERALE_DEFAULT,
+    bank: 'Société Générale',
+    version: 'default',
+    country: 'FR',
+    type: 'retail',
+  },
+  {
+    id: RcbBankVersionId.CREDIT_AGRICOLE_DEFAULT,
+    bank: 'Crédit Agricole',
+    version: 'default',
+    country: 'FR',
+    type: 'retail',
+  },
+  {
+    id: RcbBankVersionId.LCL_DEFAULT,
+    bank: 'LCL',
+    version: 'default',
+    country: 'FR',
+    type: 'retail',
+  },
+  {
+    id: RcbBankVersionId.BOURSORAMA_DEFAULT,
+    bank: 'Boursorama',
+    version: 'default',
+    country: 'FR',
+    type: 'retail',
+  },
+  {
+    id: RcbBankVersionId.LA_BANQUE_POSTALE_DEFAULT,
+    bank: 'La Banque Postale',
+    version: 'default',
+    country: 'FR',
+    type: 'retail',
+  },
+  {
+    id: RcbBankVersionId.CAISSE_EPARGNE_DEFAULT,
+    bank: "Caisse d'Épargne",
+    version: 'default',
+    country: 'FR',
+    type: 'retail',
+  },
+  {
+    id: RcbBankVersionId.CIC_EBICS_DEFAULT,
+    bank: 'CIC',
+    version: 'ebics',
+    country: 'FR',
+    type: 'business',
+  },
+  {
+    id: RcbBankVersionId.CIC_DEFAULT,
+    bank: 'CIC',
+    version: 'default',
+    country: 'FR',
+    type: 'retail',
+  },
+  {
+    id: RcbBankVersionId.CREDIT_MUTUEL_DEFAULT,
+    bank: 'Crédit Mutuel',
+    version: 'default',
+    country: 'FR',
+    type: 'retail',
+  },
+  {
+    id: RcbBankVersionId.BRED_DEFAULT,
+    bank: 'BRED',
+    version: 'default',
+    country: 'FR',
+    type: 'retail',
+  },
+  {
+    id: RcbBankVersionId.CREDIT_DU_NORD_DEFAULT,
+    bank: 'Crédit du Nord',
+    version: 'default',
+    country: 'FR',
+    type: 'retail',
+  },
+  {
+    id: RcbBankVersionId.CDE_NET_DEFAULT,
+    bank: 'CDE Net',
+    version: 'default',
+    country: 'FR',
+    type: 'business',
+  },
+  {
+    id: RcbBankVersionId.DELUBAC_DEFAULT,
+    bank: 'Delubac',
+    version: 'default',
+    country: 'FR',
+    type: 'business',
+  },
+  {
+    id: RcbBankVersionId.PALATINE_DEFAULT,
+    bank: 'Palatine',
+    version: 'default',
+    country: 'FR',
+    type: 'business',
+  },
+  {
+    id: RcbBankVersionId.NATIXIS_DEFAULT,
+    bank: 'Natixis',
+    version: 'default',
+    country: 'FR',
+    type: 'corporate',
+  },
+  {
+    id: RcbBankVersionId.THEMIS_DEFAULT,
+    bank: 'Themis Banque',
+    version: 'default',
+    country: 'FR',
+    type: 'business',
+  },
+  {
+    id: RcbBankVersionId.ROTHSCHILD_DEFAULT,
+    bank: 'Rothschild Martin Maurel',
+    version: 'default',
+    country: 'FR',
+    type: 'corporate',
+  },
+  { id: RcbBankVersionId.LA_NEF_V1, bank: 'La Nef', version: 'v1', country: 'FR', type: 'retail' },
+  { id: RcbBankVersionId.LA_NEF_V2, bank: 'La Nef', version: 'v2', country: 'FR', type: 'retail' },
 
   // ─── Neobanks / fintech ───────────────────
-  { id: RcbBankVersionId.QONTO_DEFAULT,             bank: 'Qonto',                    version: 'default', country: 'FR', type: 'neobank' },
-  { id: RcbBankVersionId.SHINE_DEFAULT,             bank: 'Shine',                    version: 'default', country: 'FR', type: 'neobank' },
-  { id: RcbBankVersionId.FINOM_DEFAULT,             bank: 'Finom',                    version: 'default', country: 'EU', type: 'neobank' },
-  { id: RcbBankVersionId.TIIME_DEFAULT,             bank: 'Tiime',                    version: 'default', country: 'FR', type: 'neobank' },
-  { id: RcbBankVersionId.SPENDESK_DEFAULT,          bank: 'Spendesk',                 version: 'default', country: 'FR', type: 'fintech' },
-  { id: RcbBankVersionId.SWAN_DEFAULT,              bank: 'Swan',                     version: 'default', country: 'FR', type: 'fintech' },
-  { id: RcbBankVersionId.N26_DEFAULT,               bank: 'N26',                      version: 'default', country: 'EU', type: 'neobank' },
-  { id: RcbBankVersionId.REVOLUT_DEFAULT,           bank: 'Revolut',                  version: 'default', country: 'EU', type: 'neobank' },
-  { id: RcbBankVersionId.WISE_DEFAULT,              bank: 'Wise',                     version: 'default', country: 'INTL', type: 'fintech' },
-  { id: RcbBankVersionId.PAYPAL_DEFAULT,            bank: 'PayPal',                   version: 'default', country: 'INTL', type: 'fintech' },
-  { id: RcbBankVersionId.AIRWALLEX_DEFAULT,         bank: 'Airwallex',                version: 'default', country: 'INTL', type: 'fintech' },
-  { id: RcbBankVersionId.VIVA_WALLET_DEFAULT,       bank: 'Viva Wallet',              version: 'default', country: 'EU', type: 'fintech' },
+  {
+    id: RcbBankVersionId.QONTO_DEFAULT,
+    bank: 'Qonto',
+    version: 'default',
+    country: 'FR',
+    type: 'neobank',
+  },
+  {
+    id: RcbBankVersionId.SHINE_DEFAULT,
+    bank: 'Shine',
+    version: 'default',
+    country: 'FR',
+    type: 'neobank',
+  },
+  {
+    id: RcbBankVersionId.FINOM_DEFAULT,
+    bank: 'Finom',
+    version: 'default',
+    country: 'EU',
+    type: 'neobank',
+  },
+  {
+    id: RcbBankVersionId.TIIME_DEFAULT,
+    bank: 'Tiime',
+    version: 'default',
+    country: 'FR',
+    type: 'neobank',
+  },
+  {
+    id: RcbBankVersionId.SPENDESK_DEFAULT,
+    bank: 'Spendesk',
+    version: 'default',
+    country: 'FR',
+    type: 'fintech',
+  },
+  {
+    id: RcbBankVersionId.SWAN_DEFAULT,
+    bank: 'Swan',
+    version: 'default',
+    country: 'FR',
+    type: 'fintech',
+  },
+  {
+    id: RcbBankVersionId.N26_DEFAULT,
+    bank: 'N26',
+    version: 'default',
+    country: 'EU',
+    type: 'neobank',
+  },
+  {
+    id: RcbBankVersionId.REVOLUT_DEFAULT,
+    bank: 'Revolut',
+    version: 'default',
+    country: 'EU',
+    type: 'neobank',
+  },
+  {
+    id: RcbBankVersionId.WISE_DEFAULT,
+    bank: 'Wise',
+    version: 'default',
+    country: 'INTL',
+    type: 'fintech',
+  },
+  {
+    id: RcbBankVersionId.PAYPAL_DEFAULT,
+    bank: 'PayPal',
+    version: 'default',
+    country: 'INTL',
+    type: 'fintech',
+  },
+  {
+    id: RcbBankVersionId.AIRWALLEX_DEFAULT,
+    bank: 'Airwallex',
+    version: 'default',
+    country: 'INTL',
+    type: 'fintech',
+  },
+  {
+    id: RcbBankVersionId.VIVA_WALLET_DEFAULT,
+    bank: 'Viva Wallet',
+    version: 'default',
+    country: 'EU',
+    type: 'fintech',
+  },
 
   // ─── International retail / corporate ─────
-  { id: RcbBankVersionId.HSBC_DEFAULT,              bank: 'HSBC',                     version: 'default', country: 'FR', type: 'retail' },
-  { id: RcbBankVersionId.HSBC_UK_DEFAULT,           bank: 'HSBC UK',                  version: 'default', country: 'UK', type: 'retail' },
-  { id: RcbBankVersionId.UBS_DEFAULT,               bank: 'UBS',                      version: 'default', country: 'CH', type: 'corporate' },
-  { id: RcbBankVersionId.CAIXA_DEFAULT,             bank: 'Caixa',                    version: 'default', country: 'PT', type: 'retail' },
-  { id: RcbBankVersionId.JPMORGAN_DEFAULT,          bank: 'JPMorgan',                 version: 'default', country: 'US', type: 'corporate' },
+  {
+    id: RcbBankVersionId.HSBC_DEFAULT,
+    bank: 'HSBC',
+    version: 'default',
+    country: 'FR',
+    type: 'retail',
+  },
+  {
+    id: RcbBankVersionId.HSBC_UK_DEFAULT,
+    bank: 'HSBC UK',
+    version: 'default',
+    country: 'UK',
+    type: 'retail',
+  },
+  {
+    id: RcbBankVersionId.UBS_DEFAULT,
+    bank: 'UBS',
+    version: 'default',
+    country: 'CH',
+    type: 'corporate',
+  },
+  {
+    id: RcbBankVersionId.CAIXA_DEFAULT,
+    bank: 'Caixa',
+    version: 'default',
+    country: 'PT',
+    type: 'retail',
+  },
+  {
+    id: RcbBankVersionId.JPMORGAN_DEFAULT,
+    bank: 'JPMorgan',
+    version: 'default',
+    country: 'US',
+    type: 'corporate',
+  },
 ];
 
 /**
  * Lookup by id (typed). Returns undefined for unknown ids — callers should
  * treat that as "use auto mode" rather than crash.
  */
-export function getRcbBankCatalogueEntry(
-  id: string,
-): RcbBankCatalogueEntry | undefined {
+export function getRcbBankCatalogueEntry(id: string): RcbBankCatalogueEntry | undefined {
   return RCB_BANK_CATALOGUE.find((e) => e.id === id);
 }
 

package/src/types/interface/api/requests/abyss.admin.request.ts

@@ -11,7 +11,8 @@ export interface ISyncOrganizationAbyssAdminBody {
 export interface ISyncProjectAbyssAdminBody {
   id: string;
   name: string;
-  createdByUserId: string;
+  /** null when the author's account was deleted: the project outlives it (#199). */
+  createdByUserId: string | null;
   organizationId: string;
 }
 

package/src/types/interface/api/requests/atlas-document.request.ts

@@ -6,6 +6,11 @@ export type IGetUploadPreSignedUrlAtlasDocumentParams = {
 };
 export type IGetUploadPreSignedUrlAtlasDocumentBody = {
   name: string;
+  // SP3 — transparent multipart: the DECLARED size (the front hasn't
+  // necessarily read the file into memory yet, only `file.size`), needed by
+  // `initiateUpload` to pick single-shot vs multipart and to seed the storage
+  // cap check.
+  sizeOctet: number;
 };
 
 export type IGetAtlasDocumentParams = {
@@ -30,3 +35,12 @@ export type IListAtlasDocumentParams = {
   atlasId: string;
   atlasPageId: string;
 };
+
+// IDOR fix — resolves an AtlasDocument's storage `publicAccessId` server-side
+// (scoped to the caller's AtlasMiddleware-verified atlasId), so the front
+// never needs an unscoped `applicationFile.get` call against storage.
+export type IGetPublicAccessIdAtlasDocumentParams = {
+  atlasId: string;
+  atlasPageId: string;
+  storageFileId: string;
+};

package/src/types/interface/api/requests/board-card-document.request.ts

@@ -4,6 +4,11 @@ export type IGetUploadPreSignedUrlBoardCardDocumentParams = {
 };
 export type IGetUploadPreSignedUrlBoardCardDocumentBody = {
   name: string;
+  // SP3 — transparent multipart: the DECLARED size (the front hasn't
+  // necessarily read the file into memory yet, only `file.size`), needed by
+  // `initiateUpload` to pick single-shot vs multipart and to seed the storage
+  // cap check.
+  sizeOctet: number;
 };
 
 export type IGetBoardCardDocumentParams = {

package/src/types/interface/api/requests/extraction.request.ts

@@ -71,6 +71,28 @@ export interface IExtractBody {
   plan_preset_id?: string;
 }
 
+/**
+ * Body of `POST /extract/application/:applicationId/extract` — exactly what
+ * that route accepts (extraction-extract-application.controller.ts): a
+ * multipart PDF, mode `auto` or `hint`, and the optional fields below. The
+ * route refuses storage_file_id, template_id, template, mode `template`,
+ * plan_preset_id and any body without a PDF (4xx), and is synchronous only,
+ * so none of those are expressible here (#581).
+ */
+export interface IExtractApplicationBody {
+  pdf: Buffer | Uint8Array;
+  mode: Exclude<ExtractionMode, 'template'>;
+  hint?: IExtractionBankHint;
+  pdf_filename?: string;
+  user_external_id?: string;
+  user_metadata?: Record<string, unknown>;
+  archive?: boolean;
+  force?: boolean;
+  improvementConsent?: boolean;
+  /** Inline plan: single pass, no OCR provider, no template pass (checked server-side). */
+  plan?: IExtractionPlan;
+}
+
 export interface IExtractBulkBody {
   items: Array<{
     storage_file_id?: string;

package/src/types/interface/api/requests/probe-scan.request.ts

@@ -21,7 +21,11 @@ export interface IScanOptions {
   callbackUrl?: string;
   /** Filename reported to the server (defaults to `'file'`). Cosmetic only. */
   filename?: string;
-  /** Content-Type hint used when constructing a Blob from a raw buffer/Uint8Array in a browser context. */
+  /**
+   * Content-Type stamped on the file part when the caller passes raw bytes
+   * (`Buffer`/`Uint8Array`). Ignored when the file is already a `Blob` — a
+   * browser `File` and `fs.openAsBlob(path)` carry their own type.
+   */
   mimeType?: string;
 }
 

package/src/types/interface/api/responses/atlas-document.response.ts

@@ -1,15 +1,16 @@
 import { IResponse } from '../type-message/response';
 import { BasePaginate } from '../type-message/base-paginate';
-import { IAtlasDocument } from '../..';
+import { IAtlasDocument, IUploadSession } from '../..';
 
 export interface IGetAtlasDocumentData {
   atlasDocument: IAtlasDocument;
 }
 export type IGetAtlasDocumentResponse = IResponse<IGetAtlasDocumentData>;
 
-export interface IGetUploadPreSignedUrlAtlasDocumentData {
-  preSignedUrl: string;
-}
+// SP3 — transparent multipart upload: proxies atlasDocumentService
+// .getUploadUrl's `UploadSession` result as-is (see
+// models/upload-session.dto.ts for the mirroring rationale).
+export type IGetUploadPreSignedUrlAtlasDocumentData = IUploadSession;
 export type IGetUploadPreSignedUrlAtlasDocumentResponse =
   IResponse<IGetUploadPreSignedUrlAtlasDocumentData>;
 
@@ -22,3 +23,9 @@ export interface IListAtlasDocumentData {
   atlasDocuments: IAtlasDocument[];
 }
 export type IListAtlasDocumentResponse = IResponse<IListAtlasDocumentData>;
+
+export interface IGetPublicAccessIdAtlasDocumentData {
+  publicAccessId: string;
+}
+export type IGetPublicAccessIdAtlasDocumentResponse =
+  IResponse<IGetPublicAccessIdAtlasDocumentData>;

package/src/types/interface/api/responses/board-card-document.response.ts

@@ -1,14 +1,15 @@
 import { IResponse } from '../type-message/response';
-import { IBoardCardDocument } from '../..';
+import { IBoardCardDocument, IUploadSession } from '../..';
 
 export interface IGetBoardCardDocumentData {
   boardCardDocument: IBoardCardDocument;
 }
 export type IGetBoardCardDocumentResponse = IResponse<IGetBoardCardDocumentData>;
 
-export interface IGetUploadPreSignedUrlBoardCardDocumentData {
-  preSignedUrl: string;
-}
+// SP3 — transparent multipart upload: proxies boardCardDocumentService
+// .getUploadUrl's `UploadSession` result as-is (see
+// models/upload-session.dto.ts for the mirroring rationale).
+export type IGetUploadPreSignedUrlBoardCardDocumentData = IUploadSession;
 export type IGetUploadPreSignedUrlBoardCardDocumentResponse =
   IResponse<IGetUploadPreSignedUrlBoardCardDocumentData>;
 

package/src/types/interface/api/responses/retrospective.response.ts

@@ -29,4 +29,5 @@ export interface ICountOrganizationRetrospectiveData {
   orphan?: number;
   unshared?: number;
 }
-export type ICountOrganizationRetrospectiveResponse = IResponse<ICountOrganizationRetrospectiveData>;
+export type ICountOrganizationRetrospectiveResponse =
+  IResponse<ICountOrganizationRetrospectiveData>;