@skillsmith/core 0.5.3 → 0.5.4

package/dist/tests/webhooks/WebhookDeadLetterRepository.test.d.ts

@@ -0,0 +1,10 @@
+/**
+ * SMI-4307: Tests for WebhookDeadLetterRepository null-team guard
+ *
+ * F-03/F-02: `insertDeadLetter` must short-circuit when `input.teamId` is
+ * empty or null so Individual-tier users (and users whose team has not been
+ * provisioned yet) don't hit the NOT NULL / team-scoped RLS on
+ * `webhook_dead_letters`.
+ */
+export {};
+//# sourceMappingURL=WebhookDeadLetterRepository.test.d.ts.map

package/dist/tests/webhooks/WebhookDeadLetterRepository.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebhookDeadLetterRepository.test.d.ts","sourceRoot":"","sources":["../../../tests/webhooks/WebhookDeadLetterRepository.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/tests/webhooks/WebhookDeadLetterRepository.test.js

@@ -0,0 +1,109 @@
+/**
+ * SMI-4307: Tests for WebhookDeadLetterRepository null-team guard
+ *
+ * F-03/F-02: `insertDeadLetter` must short-circuit when `input.teamId` is
+ * empty or null so Individual-tier users (and users whose team has not been
+ * provisioned yet) don't hit the NOT NULL / team-scoped RLS on
+ * `webhook_dead_letters`.
+ */
+import { describe, it, expect, beforeEach, vi, afterEach } from 'vitest';
+import { WebhookDeadLetterRepository, } from '../../src/webhooks/WebhookDeadLetterRepository.js';
+function buildInsertInput(overrides = {}) {
+    return {
+        originalEventId: 'evt_123',
+        endpointUrl: 'https://example.com/hook',
+        payload: { k: 'v' },
+        failureReason: 'http_5xx',
+        attemptCount: 3,
+        firstFailedAt: new Date('2026-04-19T10:00:00Z'),
+        lastFailedAt: new Date('2026-04-19T10:05:00Z'),
+        teamId: 'team_abc',
+        ...overrides,
+    };
+}
+function buildClient(insertResult = { error: null }) {
+    const insertFn = vi.fn(async () => insertResult);
+    const client = {
+        from: vi.fn(() => ({
+            insert: insertFn,
+            // Unused methods — sufficient for insertDeadLetter() tests.
+            select: () => ({
+                eq: () => ({
+                    order: () => Promise.resolve({ data: [], error: null }),
+                }),
+            }),
+            update: () => ({
+                eq: () => Promise.resolve({ data: null, error: null }),
+            }),
+        })),
+    };
+    return { client, insertFn };
+}
+describe('WebhookDeadLetterRepository.insertDeadLetter — SMI-4307 null-team guard', () => {
+    let warnSpy;
+    beforeEach(() => {
+        warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => undefined);
+    });
+    afterEach(() => {
+        warnSpy.mockRestore();
+    });
+    it('inserts normally when teamId is present', async () => {
+        const { client, insertFn } = buildClient();
+        const repo = new WebhookDeadLetterRepository(client);
+        await repo.insertDeadLetter(buildInsertInput({ teamId: 'team_abc' }));
+        expect(insertFn).toHaveBeenCalledTimes(1);
+        const firstCall = insertFn.mock.calls[0];
+        const row = firstCall[0];
+        expect(row.team_id).toBe('team_abc');
+        expect(row.original_event_id).toBe('evt_123');
+    });
+    it('SHORT-CIRCUITS (no insert) when teamId is empty string', async () => {
+        const { client, insertFn } = buildClient();
+        const repo = new WebhookDeadLetterRepository(client);
+        await repo.insertDeadLetter(buildInsertInput({ teamId: '' }));
+        expect(insertFn).not.toHaveBeenCalled();
+        expect(warnSpy).toHaveBeenCalledWith('webhook-dlq: skipping DLQ insert — no teamId (orphan event)', expect.objectContaining({
+            originalEventId: 'evt_123',
+            failureReason: 'http_5xx',
+        }));
+    });
+    it('SHORT-CIRCUITS (no insert) when teamId is null-ish', async () => {
+        const { client, insertFn } = buildClient();
+        const repo = new WebhookDeadLetterRepository(client);
+        // Cast the null through unknown — InsertDeadLetterInput.teamId is string,
+        // but runtime callers have been observed to pass null via Supabase shape
+        // coercion. The guard must treat any falsy value as orphan.
+        await repo.insertDeadLetter(buildInsertInput({ teamId: null }));
+        expect(insertFn).not.toHaveBeenCalled();
+        expect(warnSpy).toHaveBeenCalled();
+    });
+    it('SHORT-CIRCUITS (no insert) when teamId is undefined', async () => {
+        const { client, insertFn } = buildClient();
+        const repo = new WebhookDeadLetterRepository(client);
+        await repo.insertDeadLetter(buildInsertInput({ teamId: undefined }));
+        expect(insertFn).not.toHaveBeenCalled();
+        expect(warnSpy).toHaveBeenCalled();
+    });
+    it('guard runs BEFORE endpoint_url validation (orphan event with bad URL is still skipped silently)', async () => {
+        const { client, insertFn } = buildClient();
+        const repo = new WebhookDeadLetterRepository(client);
+        // If the guard ran AFTER endpoint_url validation, this would throw.
+        // The guard running first means an Individual-tier user with a bad URL
+        // gets a clean skip rather than a noisy error.
+        await expect(repo.insertDeadLetter(buildInsertInput({ teamId: '', endpointUrl: '' }))).resolves.toBeUndefined();
+        expect(insertFn).not.toHaveBeenCalled();
+    });
+    it('still throws on endpoint_url validation when teamId is present (guard does not mask real errors)', async () => {
+        const { client, insertFn } = buildClient();
+        const repo = new WebhookDeadLetterRepository(client);
+        await expect(repo.insertDeadLetter(buildInsertInput({ teamId: 'team_abc', endpointUrl: '' }))).rejects.toThrow(/endpoint_url length/);
+        expect(insertFn).not.toHaveBeenCalled();
+    });
+    it('still throws on attempt_count validation when teamId is present', async () => {
+        const { client, insertFn } = buildClient();
+        const repo = new WebhookDeadLetterRepository(client);
+        await expect(repo.insertDeadLetter(buildInsertInput({ teamId: 'team_abc', attemptCount: 0 }))).rejects.toThrow(/attempt_count must be a positive integer/);
+        expect(insertFn).not.toHaveBeenCalled();
+    });
+});
+//# sourceMappingURL=WebhookDeadLetterRepository.test.js.map

package/dist/tests/webhooks/WebhookDeadLetterRepository.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"WebhookDeadLetterRepository.test.js","sourceRoot":"","sources":["../../../tests/webhooks/WebhookDeadLetterRepository.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACxE,OAAO,EACL,2BAA2B,GAG5B,MAAM,mDAAmD,CAAA;AAE1D,SAAS,gBAAgB,CAAC,YAA4C,EAAE;IACtE,OAAO;QACL,eAAe,EAAE,SAAS;QAC1B,WAAW,EAAE,0BAA0B;QACvC,OAAO,EAAE,EAAE,CAAC,EAAE,GAAG,EAAE;QACnB,aAAa,EAAE,UAAU;QACzB,YAAY,EAAE,CAAC;QACf,aAAa,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC;QAC/C,YAAY,EAAE,IAAI,IAAI,CAAC,sBAAsB,CAAC;QAC9C,MAAM,EAAE,UAAU;QAClB,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,eAAsD,EAAE,KAAK,EAAE,IAAI,EAAE;IACxF,MAAM,QAAQ,GAAG,EAAE,CAAC,EAAE,CAEpB,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,CAAA;IAC3B,MAAM,MAAM,GAAuB;QACjC,IAAI,EAAE,EAAE,CAAC,EAAE,CACT,GAAG,EAAE,CACH,CAAC;YACC,MAAM,EAAE,QAAQ;YAChB,4DAA4D;YAC5D,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACb,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;oBACT,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;iBACxD,CAAC;aACH,CAAC;YACF,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;gBACb,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;aACvD,CAAC;SACH,CAAsD,CAC1D;KACF,CAAA;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;AAC7B,CAAC;AAED,QAAQ,CAAC,yEAAyE,EAAE,GAAG,EAAE;IACvF,IAAI,OAAoC,CAAA;IAExC,UAAU,CAAC,GAAG,EAAE;QACd,OAAO,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACzE,CAAC,CAAC,CAAA;IAEF,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,CAAC,WAAW,EAAE,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAA;QAC1C,MAAM,IAAI,GAAG,IAAI,2BAA2B,CAAC,MAAM,CAAC,CAAA;QAEpD,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAA;QAErE,MAAM,CAAC,QAAQ,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;QACzC,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAyC,CAAA;QAChF,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC,CAAA;QACxB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACpC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAA;QAC1C,MAAM,IAAI,GAAG,IAAI,2BAA2B,CAAC,MAAM,CAAC,CAAA;QAEpD,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;QAE7D,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QACvC,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAClC,6DAA6D,EAC7D,MAAM,CAAC,gBAAgB,CAAC;YACtB,eAAe,EAAE,SAAS;YAC1B,aAAa,EAAE,UAAU;SAC1B,CAAC,CACH,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAA;QAC1C,MAAM,IAAI,GAAG,IAAI,2BAA2B,CAAC,MAAM,CAAC,CAAA;QAEpD,0EAA0E;QAC1E,yEAAyE;QACzE,4DAA4D;QAC5D,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,IAAyB,EAAE,CAAC,CAAC,CAAA;QAEpF,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QACvC,MAAM,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAA;QAC1C,MAAM,IAAI,GAAG,IAAI,2BAA2B,CAAC,MAAM,CAAC,CAAA;QAEpD,MAAM,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,SAA8B,EAAE,CAAC,CAAC,CAAA;QAEzF,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QACvC,MAAM,CAAC,OAAO,CAAC,CAAC,gBAAgB,EAAE,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iGAAiG,EAAE,KAAK,IAAI,EAAE;QAC/G,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAA;QAC1C,MAAM,IAAI,GAAG,IAAI,2BAA2B,CAAC,MAAM,CAAC,CAAA;QAEpD,oEAAoE;QACpE,uEAAuE;QACvE,+CAA+C;QAC/C,MAAM,MAAM,CACV,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,CACzE,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAA;QAE1B,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kGAAkG,EAAE,KAAK,IAAI,EAAE;QAChH,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAA;QAC1C,MAAM,IAAI,GAAG,IAAI,2BAA2B,CAAC,MAAM,CAAC,CAAA;QAEpD,MAAM,MAAM,CACV,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,CACjF,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAA;QAExC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAA;QAC1C,MAAM,IAAI,GAAG,IAAI,2BAA2B,CAAC,MAAM,CAAC,CAAA;QAEpD,MAAM,MAAM,CACV,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC,CACjF,CAAC,OAAO,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAA;QAE7D,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACzC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@skillsmith/core",
-  "version": "0.5.3",
+  "version": "0.5.4",
   "description": "Core types and utilities for Skillsmith",
   "type": "module",
   "main": "./dist/src/index.js",
@@ -60,21 +60,26 @@
     "benchmark:index": "npx tsx src/benchmarks/cli.ts --suite index",
     "benchmark:cache": "npx tsx src/benchmarks/cli.ts --suite cache",
     "benchmark:embedding": "npx tsx src/benchmarks/cli.ts --suite embedding",
+    "benchmark:incremental-parse": "npx tsx src/benchmarks/incrementalParseBenchmark.ts",
     "import:skills": "npx tsx src/scripts/import-to-database.ts"
   },
   "dependencies": {
     "@huggingface/transformers": "3.8.1",
     "@opentelemetry/api": "1.9.0",
-    "@opentelemetry/auto-instrumentations-node": "0.72.0",
+    "@opentelemetry/instrumentation-http": "0.214.0",
+    "@opentelemetry/instrumentation-runtime-node": "0.27.0",
+    "@opentelemetry/instrumentation-undici": "0.24.0",
     "@opentelemetry/resources": "2.6.1",
     "@opentelemetry/sdk-node": "0.214.0",
-    "@opentelemetry/sdk-trace-base": "2.6.0",
+    "@opentelemetry/sdk-trace-base": "2.7.0",
     "@opentelemetry/semantic-conventions": "1.40.0",
     "fts5-sql-bundle": "1.0.2",
     "lru-cache": "11.3.3",
     "posthog-node": "5.29.2",
     "stripe": "20.3.0",
+    "tree-sitter-wasms": "0.1.13",
     "typescript": "5.9.3",
+    "web-tree-sitter": "0.25.10",
     "zod": "4.2.1"
   },
   "devDependencies": {