@skillsmith/core 0.4.0 → 0.4.2

package/dist/src/security/stripe-validators.d.ts

@@ -0,0 +1,92 @@
+/**
+ * SMI-1062: Stripe ID Validators
+ *
+ * Validation and sanitization functions for Stripe IDs.
+ * Extracted from sanitization.ts for file size compliance.
+ */
+/**
+ * Stripe ID prefixes for validation
+ */
+declare const STRIPE_ID_PREFIXES: {
+    readonly customer: "cus_";
+    readonly subscription: "sub_";
+    readonly price: "price_";
+    readonly invoice: "in_";
+    readonly paymentIntent: "pi_";
+    readonly paymentMethod: "pm_";
+    readonly product: "prod_";
+    readonly checkout: "cs_";
+    readonly event: "evt_";
+};
+type StripeIdType = keyof typeof STRIPE_ID_PREFIXES;
+/**
+ * Validate a Stripe ID format
+ *
+ * Stripe IDs follow the pattern: prefix_alphanumeric
+ * - Prefix identifies the object type (cus_, sub_, price_, etc.)
+ * - Suffix is alphanumeric, typically 14-24 characters
+ *
+ * @param id - The Stripe ID to validate
+ * @param type - The expected ID type (customer, subscription, price, etc.)
+ * @param maxLength - Maximum allowed input length (default: 100)
+ * @returns true if valid, false otherwise
+ *
+ * @example
+ * ```typescript
+ * isValidStripeId('cus_OtLqEJvHu1Mvxm', 'customer')  // true
+ * isValidStripeId('sub_1234567890abcd', 'subscription')  // true
+ * isValidStripeId('invalid_id', 'customer')  // false
+ * ```
+ */
+export declare function isValidStripeId(id: string, type: StripeIdType, maxLength?: number): boolean;
+/**
+ * Sanitize a Stripe customer ID
+ *
+ * @param customerId - Raw customer ID
+ * @param maxLength - Maximum allowed input length (default: 100)
+ * @returns Sanitized customer ID or empty string if invalid
+ *
+ * @example
+ * ```typescript
+ * sanitizeStripeCustomerId('cus_OtLqEJvHu1Mvxm')
+ * // Returns: 'cus_OtLqEJvHu1Mvxm'
+ *
+ * sanitizeStripeCustomerId('cus_<script>')
+ * // Returns: ''
+ * ```
+ */
+export declare function sanitizeStripeCustomerId(customerId: string, maxLength?: number): string;
+/**
+ * Sanitize a Stripe subscription ID
+ *
+ * @param subscriptionId - Raw subscription ID
+ * @param maxLength - Maximum allowed input length (default: 100)
+ * @returns Sanitized subscription ID or empty string if invalid
+ */
+export declare function sanitizeStripeSubscriptionId(subscriptionId: string, maxLength?: number): string;
+/**
+ * Sanitize a Stripe price ID
+ *
+ * @param priceId - Raw price ID
+ * @param maxLength - Maximum allowed input length (default: 100)
+ * @returns Sanitized price ID or empty string if invalid
+ */
+export declare function sanitizeStripePriceId(priceId: string, maxLength?: number): string;
+/**
+ * Sanitize a Stripe invoice ID
+ *
+ * @param invoiceId - Raw invoice ID
+ * @param maxLength - Maximum allowed input length (default: 100)
+ * @returns Sanitized invoice ID or empty string if invalid
+ */
+export declare function sanitizeStripeInvoiceId(invoiceId: string, maxLength?: number): string;
+/**
+ * Sanitize a Stripe event ID (for webhooks)
+ *
+ * @param eventId - Raw event ID
+ * @param maxLength - Maximum allowed input length (default: 100)
+ * @returns Sanitized event ID or empty string if invalid
+ */
+export declare function sanitizeStripeEventId(eventId: string, maxLength?: number): string;
+export {};
+//# sourceMappingURL=stripe-validators.d.ts.map

package/dist/src/security/stripe-validators.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe-validators.d.ts","sourceRoot":"","sources":["../../../src/security/stripe-validators.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH;;GAEG;AACH,QAAA,MAAM,kBAAkB;;;;;;;;;;CAUd,CAAA;AAEV,KAAK,YAAY,GAAG,MAAM,OAAO,kBAAkB,CAAA;AAEnD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,SAAM,GAAG,OAAO,CAqBxF;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,wBAAwB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,SAAM,GAAG,MAAM,CAMpF;AAED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAAC,cAAc,EAAE,MAAM,EAAE,SAAS,SAAM,GAAG,MAAM,CAM5F;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,SAAM,GAAG,MAAM,CAM9E;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,SAAM,GAAG,MAAM,CAMlF;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,SAAM,GAAG,MAAM,CAM9E"}

package/dist/src/security/stripe-validators.js

@@ -0,0 +1,139 @@
+/**
+ * SMI-1062: Stripe ID Validators
+ *
+ * Validation and sanitization functions for Stripe IDs.
+ * Extracted from sanitization.ts for file size compliance.
+ */
+import { createLogger } from '../utils/logger.js';
+const logger = createLogger('StripeValidators');
+/**
+ * Stripe ID prefixes for validation
+ */
+const STRIPE_ID_PREFIXES = {
+    customer: 'cus_',
+    subscription: 'sub_',
+    price: 'price_',
+    invoice: 'in_',
+    paymentIntent: 'pi_',
+    paymentMethod: 'pm_',
+    product: 'prod_',
+    checkout: 'cs_',
+    event: 'evt_',
+};
+/**
+ * Validate a Stripe ID format
+ *
+ * Stripe IDs follow the pattern: prefix_alphanumeric
+ * - Prefix identifies the object type (cus_, sub_, price_, etc.)
+ * - Suffix is alphanumeric, typically 14-24 characters
+ *
+ * @param id - The Stripe ID to validate
+ * @param type - The expected ID type (customer, subscription, price, etc.)
+ * @param maxLength - Maximum allowed input length (default: 100)
+ * @returns true if valid, false otherwise
+ *
+ * @example
+ * ```typescript
+ * isValidStripeId('cus_OtLqEJvHu1Mvxm', 'customer')  // true
+ * isValidStripeId('sub_1234567890abcd', 'subscription')  // true
+ * isValidStripeId('invalid_id', 'customer')  // false
+ * ```
+ */
+export function isValidStripeId(id, type, maxLength = 100) {
+    if (!id || typeof id !== 'string') {
+        return false;
+    }
+    if (id.length > maxLength || id.length < 5) {
+        return false;
+    }
+    const prefix = STRIPE_ID_PREFIXES[type];
+    if (!id.startsWith(prefix)) {
+        return false;
+    }
+    // Validate suffix is alphanumeric only
+    const suffix = id.slice(prefix.length);
+    if (!/^[a-zA-Z0-9]+$/.test(suffix)) {
+        return false;
+    }
+    return true;
+}
+/**
+ * Sanitize a Stripe customer ID
+ *
+ * @param customerId - Raw customer ID
+ * @param maxLength - Maximum allowed input length (default: 100)
+ * @returns Sanitized customer ID or empty string if invalid
+ *
+ * @example
+ * ```typescript
+ * sanitizeStripeCustomerId('cus_OtLqEJvHu1Mvxm')
+ * // Returns: 'cus_OtLqEJvHu1Mvxm'
+ *
+ * sanitizeStripeCustomerId('cus_<script>')
+ * // Returns: ''
+ * ```
+ */
+export function sanitizeStripeCustomerId(customerId, maxLength = 100) {
+    if (!isValidStripeId(customerId, 'customer', maxLength)) {
+        logger.warn('Invalid Stripe customer ID', { customerId: customerId?.slice(0, 20) });
+        return '';
+    }
+    return customerId;
+}
+/**
+ * Sanitize a Stripe subscription ID
+ *
+ * @param subscriptionId - Raw subscription ID
+ * @param maxLength - Maximum allowed input length (default: 100)
+ * @returns Sanitized subscription ID or empty string if invalid
+ */
+export function sanitizeStripeSubscriptionId(subscriptionId, maxLength = 100) {
+    if (!isValidStripeId(subscriptionId, 'subscription', maxLength)) {
+        logger.warn('Invalid Stripe subscription ID', { subscriptionId: subscriptionId?.slice(0, 20) });
+        return '';
+    }
+    return subscriptionId;
+}
+/**
+ * Sanitize a Stripe price ID
+ *
+ * @param priceId - Raw price ID
+ * @param maxLength - Maximum allowed input length (default: 100)
+ * @returns Sanitized price ID or empty string if invalid
+ */
+export function sanitizeStripePriceId(priceId, maxLength = 100) {
+    if (!isValidStripeId(priceId, 'price', maxLength)) {
+        logger.warn('Invalid Stripe price ID', { priceId: priceId?.slice(0, 20) });
+        return '';
+    }
+    return priceId;
+}
+/**
+ * Sanitize a Stripe invoice ID
+ *
+ * @param invoiceId - Raw invoice ID
+ * @param maxLength - Maximum allowed input length (default: 100)
+ * @returns Sanitized invoice ID or empty string if invalid
+ */
+export function sanitizeStripeInvoiceId(invoiceId, maxLength = 100) {
+    if (!isValidStripeId(invoiceId, 'invoice', maxLength)) {
+        logger.warn('Invalid Stripe invoice ID', { invoiceId: invoiceId?.slice(0, 20) });
+        return '';
+    }
+    return invoiceId;
+}
+/**
+ * Sanitize a Stripe event ID (for webhooks)
+ *
+ * @param eventId - Raw event ID
+ * @param maxLength - Maximum allowed input length (default: 100)
+ * @returns Sanitized event ID or empty string if invalid
+ */
+export function sanitizeStripeEventId(eventId, maxLength = 100) {
+    if (!isValidStripeId(eventId, 'event', maxLength)) {
+        logger.warn('Invalid Stripe event ID', { eventId: eventId?.slice(0, 20) });
+        return '';
+    }
+    return eventId;
+}
+//# sourceMappingURL=stripe-validators.js.map

package/dist/src/security/stripe-validators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe-validators.js","sourceRoot":"","sources":["../../../src/security/stripe-validators.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEjD,MAAM,MAAM,GAAG,YAAY,CAAC,kBAAkB,CAAC,CAAA;AAE/C;;GAEG;AACH,MAAM,kBAAkB,GAAG;IACzB,QAAQ,EAAE,MAAM;IAChB,YAAY,EAAE,MAAM;IACpB,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,KAAK;IACd,aAAa,EAAE,KAAK;IACpB,aAAa,EAAE,KAAK;IACpB,OAAO,EAAE,OAAO;IAChB,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,MAAM;CACL,CAAA;AAIV;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,eAAe,CAAC,EAAU,EAAE,IAAkB,EAAE,SAAS,GAAG,GAAG;IAC7E,IAAI,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,IAAI,EAAE,CAAC,MAAM,GAAG,SAAS,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAA;IACd,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAA;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAA;IACd,CAAC;IAED,uCAAuC;IACvC,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACtC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,wBAAwB,CAAC,UAAkB,EAAE,SAAS,GAAG,GAAG;IAC1E,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;QACnF,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAAC,cAAsB,EAAE,SAAS,GAAG,GAAG;IAClF,IAAI,CAAC,eAAe,CAAC,cAAc,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE,EAAE,cAAc,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;QAC/F,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,cAAc,CAAA;AACvB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,SAAS,GAAG,GAAG;IACpE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;QAC1E,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CAAC,SAAiB,EAAE,SAAS,GAAG,GAAG;IACxE,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;QAChF,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,SAAS,GAAG,GAAG;IACpE,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAA;QAC1E,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/src/services/SearchService.d.ts

@@ -11,6 +11,8 @@
  */
 import type { Database as DatabaseType } from 'better-sqlite3';
 import type { Skill, SearchOptions, SearchResult, PaginatedResults, TrustTier } from '../types/skill.js';
+export type { FTSRow, BooleanSearchTerms, SearchCacheOptions } from './SearchService.types.js';
+export { escapeFtsToken, buildFtsQuery, buildHighlights } from './SearchService.helpers.js';
 /**
  * Full-text search service with BM25 ranking
  */
@@ -54,35 +56,9 @@ export declare class SearchService {
      */
     clearCache(): number;
     /**
-     * Build FTS5 query with proper escaping
-     *
-     * SMI-1034: Enhanced to filter empty tokens after escaping special characters.
+     * ADR-019: Filter-only search when query is empty
+     * Queries the skills table directly instead of using FTS5
      */
-    private buildFtsQuery;
-    /**
-     * Escape a single FTS token
-     *
-     * SMI-1034: Escape FTS5 special characters to prevent syntax errors.
-     * FTS5 special characters include: . " ' ( ) [ ] { } * ^ -
-     * The hyphen `-` is the NOT operator in FTS5, so it must be escaped too.
-     * These are replaced with spaces to ensure queries don't fail.
-     */
-    private escapeFtsToken;
-    /**
-     * Build cache key from search options
-     */
-    private buildCacheKey;
-    /**
-     * Build a search result with highlights
-     */
-    private buildSearchResult;
-    /**
-     * Build highlighted snippets for matched terms
-     */
-    private buildHighlights;
-    /**
-     * Convert database row to Skill object
-     */
-    private rowToSkill;
+    private searchByFiltersOnly;
 }
 //# sourceMappingURL=SearchService.d.ts.map

package/dist/src/services/SearchService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SearchService.d.ts","sourceRoot":"","sources":["../../../src/services/SearchService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC9D,OAAO,KAAK,EACV,KAAK,EACL,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,SAAS,EACV,MAAM,mBAAmB,CAAA;AAkB1B;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,EAAE,CAAc;IACxB,OAAO,CAAC,KAAK,CAAiB;IAC9B,OAAO,CAAC,QAAQ,CAAQ;gBAEZ,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE;IAM7D;;OAEG;IACH,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,gBAAgB,CAAC,YAAY,CAAC;IA0F9D;;OAEG;IACH,YAAY,CACV,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,GACrC,gBAAgB,CAAC,YAAY,CAAC;IAMjC;;OAEG;IACH,aAAa,CACX,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,EAC7D,OAAO,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,GACrC,gBAAgB,CAAC,YAAY,CAAC;IAmBjC;;OAEG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAE,MAAU,GAAG,MAAM,EAAE;IAapD;;OAEG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,GAAE,MAAU,GAAG,YAAY,EAAE;IA2B/D;;OAEG;IACH,UAAU,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,KAAK,GAAE,MAAW,GAAG,KAAK,EAAE;IAoB9D;;OAEG;IACH,UAAU,IAAI,MAAM;IAIpB;;;;OAIG;IACH,OAAO,CAAC,aAAa;IA4BrB;;;;;;;OAOG;IACH,OAAO,CAAC,cAAc;IAStB;;OAEG;IACH,OAAO,CAAC,aAAa;IAIrB;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;OAEG;IACH,OAAO,CAAC,eAAe;IA2CvB;;OAEG;IACH,OAAO,CAAC,UAAU;CAenB"}
+{"version":3,"file":"SearchService.d.ts","sourceRoot":"","sources":["../../../src/services/SearchService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC9D,OAAO,KAAK,EACV,KAAK,EACL,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,SAAS,EACV,MAAM,mBAAmB,CAAA;AAI1B,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAa9F,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAE3F;;GAEG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,EAAE,CAAc;IACxB,OAAO,CAAC,KAAK,CAAiB;IAC9B,OAAO,CAAC,QAAQ,CAAQ;gBAEZ,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE;IAM7D;;OAEG;IACH,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,gBAAgB,CAAC,YAAY,CAAC;IAuH9D;;OAEG;IACH,YAAY,CACV,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,GACrC,gBAAgB,CAAC,YAAY,CAAC;IAMjC;;OAEG;IACH,aAAa,CACX,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,EAC7D,OAAO,CAAC,EAAE,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,GACrC,gBAAgB,CAAC,YAAY,CAAC;IAmBjC;;OAEG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,GAAE,MAAU,GAAG,MAAM,EAAE;IAapD;;OAEG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,GAAE,MAAU,GAAG,YAAY,EAAE;IA2B/D;;OAEG;IACH,UAAU,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,KAAK,GAAE,MAAW,GAAG,KAAK,EAAE;IAoB9D;;OAEG;IACH,UAAU,IAAI,MAAM;IAIpB;;;OAGG;IACH,OAAO,CAAC,mBAAmB;CAqI5B"}

package/dist/src/services/SearchService.helpers.d.ts

@@ -0,0 +1,42 @@
+/**
+ * SMI-579: SearchService Helpers
+ *
+ * Helper functions for FTS5 search operations.
+ */
+import type { Skill, SearchResult } from '../types/skill.js';
+import type { FTSRow } from './SearchService.types.js';
+/**
+ * Escape a single FTS token
+ *
+ * SMI-1034: Escape FTS5 special characters to prevent syntax errors.
+ * FTS5 special characters include: . " ' ( ) [ ] { } * ^ -
+ * The hyphen `-` is the NOT operator in FTS5, so it must be escaped too.
+ * These are replaced with spaces to ensure queries don't fail.
+ */
+export declare function escapeFtsToken(token: string): string;
+/**
+ * Build FTS5 query with proper escaping
+ *
+ * SMI-1034: Enhanced to filter empty tokens after escaping special characters.
+ *
+ * @param query - Raw search query
+ * @returns Properly formatted FTS5 query string, or empty string if no valid tokens
+ */
+export declare function buildFtsQuery(query: string): string;
+/**
+ * Build cache key from search options
+ */
+export declare function buildCacheKey(options: object): string;
+/**
+ * Convert database row to Skill object
+ */
+export declare function rowToSkill(row: FTSRow): Skill;
+/**
+ * Build highlighted snippets for matched terms
+ */
+export declare function buildHighlights(skill: Skill, query: string): SearchResult['highlights'];
+/**
+ * Build a search result with highlights
+ */
+export declare function buildSearchResult(row: FTSRow, query: string): SearchResult;
+//# sourceMappingURL=SearchService.helpers.d.ts.map

package/dist/src/services/SearchService.helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SearchService.helpers.d.ts","sourceRoot":"","sources":["../../../src/services/SearchService.helpers.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,KAAK,EAAa,YAAY,EAAE,MAAM,mBAAmB,CAAA;AACvE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAA;AAEtD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAKpD;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAyBnD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,KAAK,CAmB7C;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,CAAC,YAAY,CAAC,CAyCvF;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,CAS1E"}

package/dist/src/services/SearchService.helpers.js

@@ -0,0 +1,128 @@
+/**
+ * SMI-579: SearchService Helpers
+ *
+ * Helper functions for FTS5 search operations.
+ */
+/**
+ * Escape a single FTS token
+ *
+ * SMI-1034: Escape FTS5 special characters to prevent syntax errors.
+ * FTS5 special characters include: . " ' ( ) [ ] { } * ^ -
+ * The hyphen `-` is the NOT operator in FTS5, so it must be escaped too.
+ * These are replaced with spaces to ensure queries don't fail.
+ */
+export function escapeFtsToken(token) {
+    return token
+        .replace(/[."'()[\]{}*^-]/g, ' ') // Replace special chars with space (including hyphen)
+        .replace(/\s+/g, ' ') // Collapse multiple spaces
+        .trim();
+}
+/**
+ * Build FTS5 query with proper escaping
+ *
+ * SMI-1034: Enhanced to filter empty tokens after escaping special characters.
+ *
+ * @param query - Raw search query
+ * @returns Properly formatted FTS5 query string, or empty string if no valid tokens
+ */
+export function buildFtsQuery(query) {
+    // Handle special FTS5 syntax (advanced users can use raw FTS5 queries)
+    // Only pass through if quotes are balanced (phrase query) and operators are space-separated
+    const quoteCount = (query.match(/"/g) || []).length;
+    const hasBalancedQuotes = quoteCount > 0 && quoteCount % 2 === 0;
+    const hasOperators = query.includes(' AND ') || query.includes(' OR ') || query.includes(' NOT ');
+    if (hasBalancedQuotes || hasOperators) {
+        return query;
+    }
+    // Split into tokens, escape each, and filter empty results
+    const tokens = query
+        .trim()
+        .split(/\s+/)
+        .filter(Boolean)
+        .map((t) => escapeFtsToken(t))
+        .filter((t) => t.length > 0); // Remove empty tokens after escaping
+    // Return empty string if no valid tokens remain
+    if (tokens.length === 0) {
+        return '';
+    }
+    return tokens.map((t) => t + '*').join(' ');
+}
+/**
+ * Build cache key from search options
+ */
+export function buildCacheKey(options) {
+    return `search:${JSON.stringify(options)}`;
+}
+/**
+ * Convert database row to Skill object
+ */
+export function rowToSkill(row) {
+    return {
+        id: row.id,
+        name: row.name,
+        description: row.description,
+        author: row.author,
+        repoUrl: row.repo_url,
+        qualityScore: row.quality_score,
+        trustTier: row.trust_tier,
+        tags: JSON.parse(row.tags || '[]'),
+        installable: row.installable ?? false,
+        // SMI-825: Security scan fields
+        riskScore: row.risk_score,
+        securityFindingsCount: row.security_findings_count ?? 0,
+        securityScannedAt: row.security_scanned_at,
+        securityPassed: row.security_passed === null ? null : row.security_passed === 1,
+        createdAt: row.created_at,
+        updatedAt: row.updated_at,
+    };
+}
+/**
+ * Build highlighted snippets for matched terms
+ */
+export function buildHighlights(skill, query) {
+    const highlights = {};
+    // Extract query terms (ignoring operators)
+    const terms = query
+        .replace(/["()]/g, '')
+        .split(/\s+/)
+        .filter((t) => !['AND', 'OR', 'NOT'].includes(t.toUpperCase()))
+        .map((t) => t.replace(/\*$/, '').toLowerCase());
+    // Build regex for matching
+    if (terms.length === 0)
+        return highlights;
+    const regex = new RegExp(`(${terms.map((t) => t.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')).join('|')})`, 'gi');
+    // Highlight in name
+    if (skill.name && regex.test(skill.name)) {
+        highlights.name = skill.name.replace(regex, '<mark>$1</mark>');
+    }
+    // Highlight in description
+    if (skill.description && regex.test(skill.description)) {
+        // Find the first match and extract surrounding context
+        const match = skill.description.match(regex);
+        if (match) {
+            const index = skill.description.toLowerCase().indexOf(match[0].toLowerCase());
+            const start = Math.max(0, index - 50);
+            const end = Math.min(skill.description.length, index + match[0].length + 50);
+            let snippet = skill.description.slice(start, end);
+            if (start > 0)
+                snippet = '...' + snippet;
+            if (end < skill.description.length)
+                snippet = snippet + '...';
+            highlights.description = snippet.replace(regex, '<mark>$1</mark>');
+        }
+    }
+    return highlights;
+}
+/**
+ * Build a search result with highlights
+ */
+export function buildSearchResult(row, query) {
+    const skill = rowToSkill(row);
+    const highlights = buildHighlights(skill, query);
+    return {
+        skill,
+        rank: Math.abs(row.rank), // BM25 returns negative values
+        highlights,
+    };
+}
+//# sourceMappingURL=SearchService.helpers.js.map

package/dist/src/services/SearchService.helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SearchService.helpers.js","sourceRoot":"","sources":["../../../src/services/SearchService.helpers.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,OAAO,KAAK;SACT,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,sDAAsD;SACvF,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,2BAA2B;SAChD,IAAI,EAAE,CAAA;AACX,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,uEAAuE;IACvE,4FAA4F;IAC5F,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAA;IACnD,MAAM,iBAAiB,GAAG,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC,KAAK,CAAC,CAAA;IAChE,MAAM,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAEjG,IAAI,iBAAiB,IAAI,YAAY,EAAE,CAAC;QACtC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,2DAA2D;IAC3D,MAAM,MAAM,GAAG,KAAK;SACjB,IAAI,EAAE;SACN,KAAK,CAAC,KAAK,CAAC;SACZ,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;SAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA,CAAC,qCAAqC;IAEpE,gDAAgD;IAChD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,CAAA;IACX,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAA;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,YAAY,EAAE,GAAG,CAAC,aAAa;QAC/B,SAAS,EAAE,GAAG,CAAC,UAAuB;QACtC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC;QAClC,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,KAAK;QACrC,gCAAgC;QAChC,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,qBAAqB,EAAE,GAAG,CAAC,uBAAuB,IAAI,CAAC;QACvD,iBAAiB,EAAE,GAAG,CAAC,mBAAmB;QAC1C,cAAc,EAAE,GAAG,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,KAAK,CAAC;QAC/E,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,SAAS,EAAE,GAAG,CAAC,UAAU;KAC1B,CAAA;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,KAAY,EAAE,KAAa;IACzD,MAAM,UAAU,GAA+B,EAAE,CAAA;IAEjD,2CAA2C;IAC3C,MAAM,KAAK,GAAG,KAAK;SAChB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,KAAK,CAAC,KAAK,CAAC;SACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;SAC9D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;IAEjD,2BAA2B;IAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,UAAU,CAAA;IAEzC,MAAM,KAAK,GAAG,IAAI,MAAM,CACtB,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAC3E,IAAI,CACL,CAAA;IAED,oBAAoB;IACpB,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,UAAU,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAA;IAChE,CAAC;IAED,2BAA2B;IAC3B,IAAI,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QACvD,uDAAuD;QACvD,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC5C,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAA;YAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,EAAE,CAAC,CAAA;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAA;YAE5E,IAAI,OAAO,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;YACjD,IAAI,KAAK,GAAG,CAAC;gBAAE,OAAO,GAAG,KAAK,GAAG,OAAO,CAAA;YACxC,IAAI,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM;gBAAE,OAAO,GAAG,OAAO,GAAG,KAAK,CAAA;YAE7D,UAAU,CAAC,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAA;QACpE,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAA;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,KAAa;IAC1D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;IAC7B,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IAEhD,OAAO;QACL,KAAK;QACL,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,+BAA+B;QACzD,UAAU;KACX,CAAA;AACH,CAAC"}