fix: api key prefix rename, revoke fix, and webhook validation

Rename API key prefix from asn_ to asa_, fix key revoke by aligning
response property names with frontend interface, and add server/client
validation to prevent enabling webhooks without a URL.

1 files changed, 2 insertions, 2 deletions

diff --git a/apps/web/app/reader/settings/_components/api-settings.tsx b/apps/web/app/reader/settings/_components/api-settings.tsx
index 0ae6a8d..cca673f 100644
--- a/apps/web/app/reader/settings/_components/api-settings.tsx
+++ b/apps/web/app/reader/settings/_components/api-settings.tsx
@@ -431,7 +431,7 @@ function WebhookSection() {
         </button>
         <button
           onClick={handleToggleEnabled}
-          disabled={updateWebhookConfig.isPending}
+          disabled={updateWebhookConfig.isPending || (!webhookConfig?.webhookEnabled && !webhookConfig?.webhookUrl)}
           className="border border-border px-4 py-1.5 text-text-secondary transition-colors hover:text-text-primary disabled:opacity-50"
         >
           {webhookConfig?.webhookEnabled ? "disable" : "enable"}
@@ -511,7 +511,7 @@ export function ApiSettings() {
           authenticate requests with an api key in the authorization header:
         </p>
         <code className="block bg-background-tertiary px-3 py-2 text-text-secondary">
-          Authorization: Bearer asn_your_key_here
+          Authorization: Bearer asa_your_key_here
         </code>
         <div className="mt-3 space-y-1 text-text-dim">
           <p>get /api/v1/profile — your account info and limits</p>