@heossi/qnsi 0.3.2

package/dist/tenant.d.ts

@@ -0,0 +1,25 @@
+/**
+ * QNSP Tenant — tenant CRUD, crypto-policy management, current-health,
+ * current-quotas. Wraps `apps/tenant-service` (`/tenant/v1`).
+ */
+import type { Internal, RequestOptions } from "./_internal.js";
+export interface CreateTenantRequest {
+    readonly name: string;
+    readonly slug?: string;
+    readonly tier?: string;
+    readonly parentTenantId?: string;
+    readonly metadata?: Record<string, unknown>;
+}
+export declare class TenantClient {
+    private readonly internal;
+    constructor(internal: Internal);
+    createTenant(req: CreateTenantRequest, opts?: Pick<RequestOptions, "idempotencyKey">): Promise<Record<string, unknown>>;
+    getTenant(tenantId: string): Promise<Record<string, unknown>>;
+    updateTenant(tenantId: string, body: Record<string, unknown>, opts?: Pick<RequestOptions, "idempotencyKey">): Promise<Record<string, unknown>>;
+    listTenants(query?: RequestOptions["query"]): Promise<Record<string, unknown>>;
+    getCryptoPolicy(tenantId: string): Promise<Record<string, unknown>>;
+    upsertCryptoPolicy(tenantId: string, body: Record<string, unknown>, opts?: Pick<RequestOptions, "idempotencyKey">): Promise<Record<string, unknown>>;
+    getCurrentHealth(tenantId: string): Promise<Record<string, unknown>>;
+    getCurrentQuotas(tenantId: string): Promise<Record<string, unknown>>;
+}
+//# sourceMappingURL=tenant.d.ts.map

package/dist/tenant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.d.ts","sourceRoot":"","sources":["../src/tenant.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAI/D,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAED,qBAAa,YAAY;IACZ,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,QAAQ;IAE/C,YAAY,CAAC,GAAG,EAAE,mBAAmB,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAIpF,SAAS,CAAC,QAAQ,EAAE,MAAM;IAI1B,YAAY,CACX,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAK9C,WAAW,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC,OAAO,CAAC;IAI3C,eAAe,CAAC,QAAQ,EAAE,MAAM;IAIhC,kBAAkB,CACjB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAU9C,gBAAgB,CAAC,QAAQ,EAAE,MAAM;IAIjC,gBAAgB,CAAC,QAAQ,EAAE,MAAM;CAGjC"}

package/dist/tenant.js

@@ -0,0 +1,36 @@
+/**
+ * QNSP Tenant — tenant CRUD, crypto-policy management, current-health,
+ * current-quotas. Wraps `apps/tenant-service` (`/tenant/v1`).
+ */
+const PATH_PREFIX = "/proxy/tenant/v1";
+export class TenantClient {
+    internal;
+    constructor(internal) {
+        this.internal = internal;
+    }
+    createTenant(req, opts) {
+        return this.internal.request("POST", `${PATH_PREFIX}/tenants`, req, opts);
+    }
+    getTenant(tenantId) {
+        return this.internal.request("GET", `${PATH_PREFIX}/tenants/${tenantId}`);
+    }
+    updateTenant(tenantId, body, opts) {
+        return this.internal.request("PATCH", `${PATH_PREFIX}/tenants/${tenantId}`, body, opts);
+    }
+    listTenants(query) {
+        return this.internal.request("GET", `${PATH_PREFIX}/tenants`, undefined, { query });
+    }
+    getCryptoPolicy(tenantId) {
+        return this.internal.request("GET", `${PATH_PREFIX}/tenants/${tenantId}/crypto-policy`);
+    }
+    upsertCryptoPolicy(tenantId, body, opts) {
+        return this.internal.request("PUT", `${PATH_PREFIX}/tenants/${tenantId}/crypto-policy`, body, opts);
+    }
+    getCurrentHealth(tenantId) {
+        return this.internal.request("GET", `${PATH_PREFIX}/tenants/${tenantId}/health`);
+    }
+    getCurrentQuotas(tenantId) {
+        return this.internal.request("GET", `${PATH_PREFIX}/tenants/${tenantId}/quotas`);
+    }
+}
+//# sourceMappingURL=tenant.js.map

package/dist/tenant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.js","sourceRoot":"","sources":["../src/tenant.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,GAAG,kBAAkB,CAAC;AAUvC,MAAM,OAAO,YAAY;IACK;IAA7B,YAA6B,QAAkB;QAAlB,aAAQ,GAAR,QAAQ,CAAU;IAAG,CAAC;IAEnD,YAAY,CAAC,GAAwB,EAAE,IAA6C;QACnF,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC3E,CAAC;IAED,SAAS,CAAC,QAAgB;QACzB,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,YAAY,QAAQ,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,YAAY,CACX,QAAgB,EAChB,IAA6B,EAC7B,IAA6C;QAE7C,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,WAAW,YAAY,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACzF,CAAC;IAED,WAAW,CAAC,KAA+B;QAC1C,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,UAAU,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,eAAe,CAAC,QAAgB;QAC/B,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,YAAY,QAAQ,gBAAgB,CAAC,CAAC;IACzF,CAAC;IAED,kBAAkB,CACjB,QAAgB,EAChB,IAA6B,EAC7B,IAA6C;QAE7C,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAC3B,KAAK,EACL,GAAG,WAAW,YAAY,QAAQ,gBAAgB,EAClD,IAAI,EACJ,IAAI,CACJ,CAAC;IACH,CAAC;IAED,gBAAgB,CAAC,QAAgB;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,YAAY,QAAQ,SAAS,CAAC,CAAC;IAClF,CAAC;IAED,gBAAgB,CAAC,QAAgB;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,YAAY,QAAQ,SAAS,CAAC,CAAC;IAClF,CAAC;CACD"}

package/dist/vault.d.ts

@@ -0,0 +1,22 @@
+/**
+ * QNSP Vault — PQC-encrypted secret storage with versioning, rotation,
+ * and deletion. Wraps `apps/vault-service` (`/vault/v1`).
+ */
+import type { Internal, RequestOptions } from "./_internal.js";
+export interface CreateSecretRequest {
+    readonly name: string;
+    readonly payloadB64: string;
+    readonly algorithm?: string;
+    readonly metadata?: Record<string, unknown>;
+}
+export declare class VaultClient {
+    private readonly internal;
+    constructor(internal: Internal);
+    createSecret(req: CreateSecretRequest, opts?: Pick<RequestOptions, "idempotencyKey">): Promise<Record<string, unknown>>;
+    getSecret(secretId: string): Promise<Record<string, unknown>>;
+    getSecretVersion(secretId: string, version: number): Promise<Record<string, unknown>>;
+    rotateSecret(secretId: string, payloadB64: string, algorithm?: string, opts?: Pick<RequestOptions, "idempotencyKey">): Promise<Record<string, unknown>>;
+    deleteSecret(secretId: string): Promise<Record<string, unknown>>;
+    listSecretVersions(secretId: string): Promise<Record<string, unknown>>;
+}
+//# sourceMappingURL=vault.d.ts.map

package/dist/vault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.d.ts","sourceRoot":"","sources":["../src/vault.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAI/D,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC5C;AAED,qBAAa,WAAW;IACX,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,EAAE,QAAQ;IAE/C,YAAY,CAAC,GAAG,EAAE,mBAAmB,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAYpF,SAAS,CAAC,QAAQ,EAAE,MAAM;IAI1B,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;IAIlD,YAAY,CACX,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,IAAI,CAAC,EAAE,IAAI,CAAC,cAAc,EAAE,gBAAgB,CAAC;IAS9C,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAIhE,kBAAkB,CAAC,QAAQ,EAAE,MAAM;CAGnC"}

package/dist/vault.js

@@ -0,0 +1,43 @@
+/**
+ * QNSP Vault — PQC-encrypted secret storage with versioning, rotation,
+ * and deletion. Wraps `apps/vault-service` (`/vault/v1`).
+ */
+const PATH_PREFIX = "/proxy/vault/v1";
+export class VaultClient {
+    internal;
+    constructor(internal) {
+        this.internal = internal;
+    }
+    createSecret(req, opts) {
+        // Wire contract: vault createSecretSchema = { tenantId, name(min3), payload,
+        // metadata, rotationPolicy(default) }. tenantId is auto-injected by Internal.
+        // Map the SDK's payloadB64 -> payload and fold algorithm into metadata.
+        const metadata = {
+            ...(req.metadata ?? {}),
+            ...(req.algorithm ? { algorithm: req.algorithm } : {}),
+        };
+        const body = { name: req.name, payload: req.payloadB64, metadata };
+        return this.internal.request("POST", `${PATH_PREFIX}/secrets`, body, opts);
+    }
+    getSecret(secretId) {
+        return this.internal.request("GET", `${PATH_PREFIX}/secrets/${secretId}`);
+    }
+    getSecretVersion(secretId, version) {
+        return this.internal.request("GET", `${PATH_PREFIX}/secrets/${secretId}/versions/${version}`);
+    }
+    rotateSecret(secretId, payloadB64, algorithm, opts) {
+        // Wire contract: rotateSecretSchema = { tenantId, newPayload?, metadata?,
+        // rotationPolicy? }. Map payloadB64 -> newPayload; algorithm into metadata.
+        const body = { newPayload: payloadB64 };
+        if (algorithm !== undefined)
+            body["metadata"] = { algorithm };
+        return this.internal.request("POST", `${PATH_PREFIX}/secrets/${secretId}/rotate`, body, opts);
+    }
+    deleteSecret(secretId) {
+        return this.internal.request("DELETE", `${PATH_PREFIX}/secrets/${secretId}`);
+    }
+    listSecretVersions(secretId) {
+        return this.internal.request("GET", `${PATH_PREFIX}/secrets/${secretId}/versions`);
+    }
+}
+//# sourceMappingURL=vault.js.map

package/dist/vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../src/vault.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAStC,MAAM,OAAO,WAAW;IACM;IAA7B,YAA6B,QAAkB;QAAlB,aAAQ,GAAR,QAAQ,CAAU;IAAG,CAAC;IAEnD,YAAY,CAAC,GAAwB,EAAE,IAA6C;QACnF,6EAA6E;QAC7E,8EAA8E;QAC9E,wEAAwE;QACxE,MAAM,QAAQ,GAAG;YAChB,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;YACvB,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC;QACF,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5E,CAAC;IAED,SAAS,CAAC,QAAgB;QACzB,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,YAAY,QAAQ,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,gBAAgB,CAAC,QAAgB,EAAE,OAAe;QACjD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,YAAY,QAAQ,aAAa,OAAO,EAAE,CAAC,CAAC;IAC/F,CAAC;IAED,YAAY,CACX,QAAgB,EAChB,UAAkB,EAClB,SAAkB,EAClB,IAA6C;QAE7C,0EAA0E;QAC1E,4EAA4E;QAC5E,MAAM,IAAI,GAA4B,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;QACjE,IAAI,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC;QAC9D,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,WAAW,YAAY,QAAQ,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/F,CAAC;IAED,YAAY,CAAC,QAAgB;QAC5B,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,WAAW,YAAY,QAAQ,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,kBAAkB,CAAC,QAAgB;QAClC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,YAAY,QAAQ,WAAW,CAAC,CAAC;IACpF,CAAC;CACD"}

package/dist/webhooks.d.ts

@@ -0,0 +1,32 @@
+/**
+ * QNSP webhook signature verification + typed event parsing.
+ *
+ * Every QNSP webhook is signed with HMAC-SHA-256 over the raw request
+ * body. Always verify the **raw bytes** before parsing JSON.
+ */
+/** Default replay-protection window — 5 minutes. */
+export declare const MAX_WEBHOOK_SKEW_MS: number;
+export interface QnspWebhookEvent {
+    readonly eventType: string;
+    readonly eventId: string;
+    readonly occurredAt: string;
+    readonly payload: Record<string, unknown>;
+}
+/**
+ * Constant-time HMAC-SHA-256 verification. The header must be of the
+ * form `sha256=<hex>`.
+ */
+export declare function verifyQnspWebhookSignature(body: Uint8Array | string, signatureHeader: string, secret: string): void;
+/**
+ * Verify the HMAC, enforce replay protection, parse the JSON body, and
+ * return a typed `QnspWebhookEvent`.
+ */
+export declare function parseQnspWebhook(input: {
+    readonly body: Uint8Array | string;
+    readonly signatureHeader: string;
+    readonly timestampHeader?: string;
+    readonly secret: string;
+    readonly maxSkewMs?: number;
+    readonly now?: Date;
+}): QnspWebhookEvent;
+//# sourceMappingURL=webhooks.d.ts.map

package/dist/webhooks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.d.ts","sourceRoot":"","sources":["../src/webhooks.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH,oDAAoD;AACpD,eAAO,MAAM,mBAAmB,QAAgB,CAAC;AAEjD,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC1C;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACzC,IAAI,EAAE,UAAU,GAAG,MAAM,EACzB,eAAe,EAAE,MAAM,EACvB,MAAM,EAAE,MAAM,GACZ,IAAI,CAcN;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACvC,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC;IACnC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC;CACpB,GAAG,gBAAgB,CA2CnB"}

package/dist/webhooks.js

@@ -0,0 +1,77 @@
+/**
+ * QNSP webhook signature verification + typed event parsing.
+ *
+ * Every QNSP webhook is signed with HMAC-SHA-256 over the raw request
+ * body. Always verify the **raw bytes** before parsing JSON.
+ */
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { QnspWebhookError } from "./errors.js";
+/** Default replay-protection window — 5 minutes. */
+export const MAX_WEBHOOK_SKEW_MS = 5 * 60 * 1000;
+/**
+ * Constant-time HMAC-SHA-256 verification. The header must be of the
+ * form `sha256=<hex>`.
+ */
+export function verifyQnspWebhookSignature(body, signatureHeader, secret) {
+    if (!signatureHeader.startsWith("sha256=")) {
+        throw new QnspWebhookError("signature header must start with 'sha256='");
+    }
+    const expectedHex = signatureHeader.slice("sha256=".length);
+    const expected = Buffer.from(expectedHex, "hex");
+    if (expected.length === 0) {
+        throw new QnspWebhookError("signature is not valid hex");
+    }
+    const bodyBytes = typeof body === "string" ? Buffer.from(body, "utf8") : Buffer.from(body);
+    const actual = createHmac("sha256", secret).update(bodyBytes).digest();
+    if (actual.length !== expected.length || !timingSafeEqual(actual, expected)) {
+        throw new QnspWebhookError("signature mismatch");
+    }
+}
+/**
+ * Verify the HMAC, enforce replay protection, parse the JSON body, and
+ * return a typed `QnspWebhookEvent`.
+ */
+export function parseQnspWebhook(input) {
+    verifyQnspWebhookSignature(input.body, input.signatureHeader, input.secret);
+    const skewMs = input.maxSkewMs ?? MAX_WEBHOOK_SKEW_MS;
+    if (input.timestampHeader !== undefined && input.timestampHeader.length > 0) {
+        const ts = Date.parse(input.timestampHeader);
+        if (Number.isNaN(ts)) {
+            throw new QnspWebhookError("timestamp header is not RFC3339");
+        }
+        const reference = input.now ? input.now.getTime() : Date.now();
+        const delta = reference - ts;
+        if (delta > skewMs)
+            throw new QnspWebhookError("timestamp is too old");
+        if (-delta > skewMs)
+            throw new QnspWebhookError("timestamp is in the future");
+    }
+    const text = typeof input.body === "string" ? input.body : Buffer.from(input.body).toString("utf8");
+    let raw;
+    try {
+        raw = JSON.parse(text);
+    }
+    catch {
+        throw new QnspWebhookError("body is not valid JSON");
+    }
+    if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
+        throw new QnspWebhookError("body is not a JSON object");
+    }
+    const obj = raw;
+    const eventType = obj["event_type"];
+    const eventId = obj["event_id"];
+    if (typeof eventType !== "string") {
+        throw new QnspWebhookError("missing event_type");
+    }
+    if (typeof eventId !== "string") {
+        throw new QnspWebhookError("missing event_id");
+    }
+    const occurredAtRaw = obj["occurred_at"];
+    const occurredAt = typeof occurredAtRaw === "string" ? occurredAtRaw : "";
+    const payloadRaw = obj["payload"];
+    const payload = payloadRaw && typeof payloadRaw === "object" && !Array.isArray(payloadRaw)
+        ? payloadRaw
+        : {};
+    return { eventType, eventId, occurredAt, payload };
+}
+//# sourceMappingURL=webhooks.js.map

package/dist/webhooks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhooks.js","sourceRoot":"","sources":["../src/webhooks.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,oDAAoD;AACpD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AASjD;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACzC,IAAyB,EACzB,eAAuB,EACvB,MAAc;IAEd,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,gBAAgB,CAAC,4CAA4C,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,gBAAgB,CAAC,4BAA4B,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC;IACvE,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC7E,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;IAClD,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAOhC;IACA,0BAA0B,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAE5E,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,IAAI,mBAAmB,CAAC;IACtD,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,KAAK,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7E,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,gBAAgB,CAAC,iCAAiC,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAG,SAAS,GAAG,EAAE,CAAC;QAC7B,IAAI,KAAK,GAAG,MAAM;YAAE,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,GAAG,MAAM;YAAE,MAAM,IAAI,gBAAgB,CAAC,4BAA4B,CAAC,CAAC;IAC/E,CAAC;IAED,MAAM,IAAI,GACT,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxF,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACJ,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,gBAAgB,CAAC,wBAAwB,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,gBAAgB,CAAC,2BAA2B,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,GAAG,GAAG,GAA8B,CAAC;IAC3C,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IAChC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,IAAI,gBAAgB,CAAC,oBAAoB,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,aAAa,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1E,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,OAAO,GACZ,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QACzE,CAAC,CAAE,UAAsC;QACzC,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACpD,CAAC"}

package/package.json

@@ -0,0 +1,118 @@
+{
+  "name": "@heossi/qnsi",
+  "version": "0.3.2",
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "license": "Apache-2.0",
+  "description": "Official Node.js / TypeScript SDK for the QNSI Quantum-Native Security Infrastructure by HEOSSI. Single package covering vault, kms, audit, auth, tenant, access-control, billing, crypto-inventory, storage, search, ai-orchestrator + local PQC primitives + webhook verification. Mirrors the qnsp Python / Go / Rust SDK surface byte-for-byte.",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./activation": {
+      "types": "./dist/_activation/index.d.ts",
+      "import": "./dist/_activation/index.js"
+    },
+    "./browser": {
+      "types": "./dist/browser/index.d.ts",
+      "import": "./dist/browser/index.js"
+    },
+    "./langchain": {
+      "types": "./dist/langchain/index.d.ts",
+      "import": "./dist/langchain/index.js"
+    },
+    "./llamaindex": {
+      "types": "./dist/llamaindex/index.d.ts",
+      "import": "./dist/llamaindex/index.js"
+    },
+    "./autogen": {
+      "types": "./dist/autogen/index.d.ts",
+      "import": "./dist/autogen/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "bin": {
+    "qnsi": "./dist/cli/index.js"
+  },
+  "dependencies": {
+    "@noble/hashes": "^2.0.1",
+    "@noble/post-quantum": "^0.6.1",
+    "commander": "^14.0.3",
+    "dotenv": "^17.4.0",
+    "zod": "^4.3.6"
+  },
+  "peerDependencies": {
+    "@langchain/core": ">=0.3.0",
+    "autogen": ">=0.0.1",
+    "llamaindex": ">=0.5.0"
+  },
+  "peerDependenciesMeta": {
+    "@langchain/core": {
+      "optional": true
+    },
+    "autogen": {
+      "optional": true
+    },
+    "llamaindex": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@langchain/core": "^0.3.80",
+    "@types/node": "^25.5.2",
+    "typescript": "^6.0.2",
+    "vitest": "4.1.2"
+  },
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "keywords": [
+    "qnsp",
+    "sdk",
+    "post-quantum",
+    "pqc",
+    "vault",
+    "kms",
+    "audit",
+    "auth",
+    "tenant",
+    "billing",
+    "storage",
+    "search",
+    "ai",
+    "ml-kem",
+    "ml-dsa",
+    "slh-dsa",
+    "fips-203",
+    "fips-204",
+    "fips-205",
+    "quantum-safe",
+    "zero-trust"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/heossi-hq/qnsp-public",
+    "directory": "packages/qnsp"
+  },
+  "homepage": "https://cloud.qnsp.cuilabs.io",
+  "bugs": {
+    "url": "https://github.com/heossi-hq/qnsp-public/issues"
+  },
+  "files": [
+    "dist/**/*",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
+  ],
+  "scripts": {
+    "build": "tsc --project tsconfig.build.json",
+    "lint": "biome check .",
+    "test": "vitest run",
+    "typecheck": "tsc --project tsconfig.json --noEmit"
+  }
+}