whale-code 6.5.11 → 6.6.0

package/dist/server/__tests__/validation-misc.test.js

@@ -1,243 +0,0 @@
-/**
- * Tests for validateToolArgs — customers, products, direct tool schemas,
- * extra field preservation, malformed input, and error message format.
- */
-
-import { describe, it, expect } from "vitest";
-import { validateToolArgs } from "../validation.js";
-
-// ============================================================================
-// HELPERS
-// ============================================================================
-
-const VALID_UUID = "a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11";
-const VALID_UUID_2 = "b1eebc99-9c0b-4ef8-bb6d-6bb9bd380a22";
-function expectValid(result) {
-  expect(result.valid).toBe(true);
-}
-function expectInvalid(result) {
-  expect(result.valid).toBe(false);
-}
-
-// ============================================================================
-// CUSTOMERS
-// ============================================================================
-
-describe("customers", () => {
-  it("validates customer create with required fields", () => {
-    const result = validateToolArgs("customers", {
-      action: "create",
-      first_name: "John",
-      last_name: "Doe"
-    });
-    expectValid(result);
-  });
-  it("validates customer create with all optional fields", () => {
-    const result = validateToolArgs("customers", {
-      action: "create",
-      first_name: "Jane",
-      last_name: "Smith",
-      email: "jane@example.com",
-      phone: "555-1234",
-      date_of_birth: "1990-01-15",
-      email_consent: true,
-      sms_consent: false
-    });
-    expectValid(result);
-  });
-  it("rejects customer create with empty first_name", () => {
-    const result = validateToolArgs("customers", {
-      action: "create",
-      first_name: "",
-      last_name: "Doe"
-    });
-    expectInvalid(result);
-  });
-  it("rejects customer create with missing last_name", () => {
-    const result = validateToolArgs("customers", {
-      action: "create",
-      first_name: "John"
-    });
-    expectInvalid(result);
-  });
-  it("rejects customer create with invalid email", () => {
-    const result = validateToolArgs("customers", {
-      action: "create",
-      first_name: "John",
-      last_name: "Doe",
-      email: "not-an-email"
-    });
-    expectInvalid(result);
-  });
-  it("validates customer update", () => {
-    const result = validateToolArgs("customers", {
-      action: "update",
-      customer_id: VALID_UUID,
-      first_name: "Updated"
-    });
-    expectValid(result);
-  });
-  it("rejects customer update with non-UUID customer_id", () => {
-    const result = validateToolArgs("customers", {
-      action: "update",
-      customer_id: "not-a-uuid",
-      first_name: "Test"
-    });
-    expectInvalid(result);
-  });
-  it("validates customer merge", () => {
-    const result = validateToolArgs("customers", {
-      action: "merge",
-      primary_customer_id: VALID_UUID,
-      secondary_customer_id: VALID_UUID_2
-    });
-    expectValid(result);
-  });
-  it("rejects customer merge with missing secondary_customer_id", () => {
-    const result = validateToolArgs("customers", {
-      action: "merge",
-      primary_customer_id: VALID_UUID
-    });
-    expectInvalid(result);
-  });
-});
-
-// ============================================================================
-// PRODUCTS
-// ============================================================================
-
-describe("products", () => {
-  it("validates product merge", () => {
-    const result = validateToolArgs("products", {
-      action: "merge",
-      primary_product_id: VALID_UUID,
-      secondary_product_id: VALID_UUID_2
-    });
-    expectValid(result);
-  });
-  it("rejects product merge with non-UUID IDs", () => {
-    const result = validateToolArgs("products", {
-      action: "merge",
-      primary_product_id: "not-uuid",
-      secondary_product_id: VALID_UUID_2
-    });
-    expectInvalid(result);
-  });
-  it("passes through product read actions", () => {
-    const result = validateToolArgs("products", {
-      action: "find",
-      query: "organic"
-    });
-    expectValid(result);
-    expect(result.data.query).toBe("organic");
-  });
-});
-
-// ============================================================================
-// DIRECT TOOL SCHEMAS (non supply_chain)
-// ============================================================================
-
-describe("direct purchase_orders tool", () => {
-  it("validates approve", () => {
-    const result = validateToolArgs("purchase_orders", {
-      action: "approve",
-      purchase_order_id: VALID_UUID
-    });
-    expectValid(result);
-  });
-  it("rejects mark_ordered directly (literal mismatch with approve schema)", () => {
-    // The schema registry maps mark_ordered -> poApproveSchema, but that schema
-    // expects action: z.literal("approve"). Direct tool call with action: "mark_ordered"
-    // will fail validation. This is by design -- mark_ordered is intended for
-    // supply_chain routing where the action is resolved before schema lookup.
-    const result = validateToolArgs("purchase_orders", {
-      action: "mark_ordered",
-      purchase_order_id: VALID_UUID
-    });
-    expectInvalid(result);
-  });
-});
-describe("direct transfers tool", () => {
-  it("validates ship action", () => {
-    const result = validateToolArgs("transfers", {
-      action: "ship",
-      transfer_id: VALID_UUID
-    });
-    expectValid(result);
-  });
-  it("validates complete action (alias for receive)", () => {
-    const result = validateToolArgs("transfers", {
-      action: "complete",
-      transfer_id: VALID_UUID
-    });
-    expectValid(result);
-  });
-});
-
-// ============================================================================
-// EXTRA FIELDS PRESERVED
-// ============================================================================
-
-describe("extra fields preservation", () => {
-  it("preserves extra fields not in schema on success", () => {
-    const result = validateToolArgs("inventory", {
-      action: "adjust",
-      product_id: VALID_UUID,
-      location_id: VALID_UUID_2,
-      adjustment: 5,
-      custom_field: "extra-data",
-      another: 42
-    });
-    expectValid(result);
-    expect(result.data.custom_field).toBe("extra-data");
-    expect(result.data.another).toBe(42);
-  });
-});
-
-// ============================================================================
-// MALFORMED INPUT
-// ============================================================================
-
-describe("malformed input", () => {
-  it("handles action as number gracefully", () => {
-    // action is cast to string so numeric action would be a passthrough
-    const result = validateToolArgs("inventory", {
-      action: 42
-    });
-    expectValid(result); // passthrough since no schema for action "42"
-  });
-  it("handles args with prototype pollution keys", () => {
-    const args = JSON.parse('{"action":"adjust","product_id":"a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11","location_id":"b1eebc99-9c0b-4ef8-bb6d-6bb9bd380a22","adjustment":5}');
-    const result = validateToolArgs("inventory", args);
-    expectValid(result);
-  });
-});
-
-// ============================================================================
-// ERROR MESSAGE FORMAT
-// ============================================================================
-
-describe("error message format", () => {
-  it("includes field path in error message", () => {
-    const result = validateToolArgs("inventory", {
-      action: "adjust",
-      product_id: "bad",
-      location_id: VALID_UUID_2,
-      adjustment: 5
-    });
-    expectInvalid(result);
-    expect(result.error).toContain("Validation failed");
-    expect(result.error).toContain("product_id");
-  });
-  it("reports multiple validation errors", () => {
-    const result = validateToolArgs("inventory", {
-      action: "adjust",
-      product_id: "bad",
-      location_id: "also-bad",
-      adjustment: "not-a-number"
-    });
-    expectInvalid(result);
-    // Should contain multiple field references
-    expect(result.error).toContain("product_id");
-  });
-});

package/dist/server/__tests__/validation-supply-chain.test.js

@@ -1,188 +0,0 @@
-/**
- * Tests for validateToolArgs — supply_chain purchase order and transfer actions.
- */
-
-import { describe, it, expect } from "vitest";
-import { validateToolArgs } from "../validation.js";
-
-// ============================================================================
-// HELPERS
-// ============================================================================
-
-const VALID_UUID = "a0eebc99-9c0b-4ef8-bb6d-6bb9bd380a11";
-const VALID_UUID_2 = "b1eebc99-9c0b-4ef8-bb6d-6bb9bd380a22";
-const VALID_UUID_3 = "c2eebc99-9c0b-4ef8-bb6d-6bb9bd380a33";
-function expectValid(result) {
-  expect(result.valid).toBe(true);
-}
-function expectInvalid(result) {
-  expect(result.valid).toBe(false);
-}
-
-// ============================================================================
-// PURCHASE ORDERS (via supply_chain meta-tool)
-// ============================================================================
-
-describe("supply_chain purchase order actions", () => {
-  it("validates po_create", () => {
-    const result = validateToolArgs("supply_chain", {
-      action: "po_create",
-      supplier_id: VALID_UUID,
-      location_id: VALID_UUID_2,
-      notes: "Test order"
-    });
-    expectValid(result);
-  });
-  it("validates po_create with items", () => {
-    const result = validateToolArgs("supply_chain", {
-      action: "po_create",
-      supplier_id: VALID_UUID,
-      location_id: VALID_UUID_2,
-      items: [{
-        product_id: VALID_UUID_3,
-        quantity: 10,
-        unit_price: 5.99
-      }]
-    });
-    expectValid(result);
-  });
-  it("rejects po_create with zero-quantity item", () => {
-    const result = validateToolArgs("supply_chain", {
-      action: "po_create",
-      supplier_id: VALID_UUID,
-      location_id: VALID_UUID_2,
-      items: [{
-        product_id: VALID_UUID_3,
-        quantity: 0
-      }]
-    });
-    expectInvalid(result);
-  });
-  it("validates po_approve", () => {
-    const result = validateToolArgs("supply_chain", {
-      action: "po_approve",
-      purchase_order_id: VALID_UUID
-    });
-    expectValid(result);
-  });
-  it("validates po_receive", () => {
-    const result = validateToolArgs("supply_chain", {
-      action: "po_receive",
-      purchase_order_id: VALID_UUID
-    });
-    expectValid(result);
-  });
-  it("validates po_cancel", () => {
-    const result = validateToolArgs("supply_chain", {
-      action: "po_cancel",
-      purchase_order_id: VALID_UUID
-    });
-    expectValid(result);
-  });
-  it("validates po_add_items", () => {
-    const result = validateToolArgs("supply_chain", {
-      action: "po_add_items",
-      purchase_order_id: VALID_UUID,
-      items: [{
-        product_id: VALID_UUID_2,
-        quantity: 5
-      }]
-    });
-    expectValid(result);
-  });
-  it("rejects po_approve with missing purchase_order_id", () => {
-    const result = validateToolArgs("supply_chain", {
-      action: "po_approve"
-    });
-    expectInvalid(result);
-  });
-  it("passes through unknown supply_chain actions", () => {
-    const result = validateToolArgs("supply_chain", {
-      action: "find_suppliers",
-      query: "organic"
-    });
-    expectValid(result);
-    expect(result.data.query).toBe("organic");
-  });
-});
-
-// ============================================================================
-// TRANSFERS (via supply_chain meta-tool)
-// ============================================================================
-
-describe("supply_chain transfer actions", () => {
-  it("validates transfer_create with from/to location IDs", () => {
-    const result = validateToolArgs("supply_chain", {
-      action: "transfer_create",
-      from_location_id: VALID_UUID,
-      to_location_id: VALID_UUID_2
-    });
-    expectValid(result);
-  });
-  it("validates transfer_create with source/destination aliases", () => {
-    const result = validateToolArgs("supply_chain", {
-      action: "transfer_create",
-      source_location_id: VALID_UUID,
-      destination_location_id: VALID_UUID_2
-    });
-    expectValid(result);
-  });
-  it("rejects transfer_create missing both from_location_id and source_location_id", () => {
-    const result = validateToolArgs("supply_chain", {
-      action: "transfer_create",
-      to_location_id: VALID_UUID_2
-    });
-    expectInvalid(result);
-    expect(result.error).toContain("from_location_id");
-  });
-  it("rejects transfer_create missing both to_location_id and destination_location_id", () => {
-    const result = validateToolArgs("supply_chain", {
-      action: "transfer_create",
-      from_location_id: VALID_UUID
-    });
-    expectInvalid(result);
-    expect(result.error).toContain("to_location_id");
-  });
-  it("validates transfer_approve", () => {
-    const result = validateToolArgs("supply_chain", {
-      action: "transfer_approve",
-      transfer_id: VALID_UUID
-    });
-    expectValid(result);
-  });
-  it("validates transfer_ship", () => {
-    const result = validateToolArgs("supply_chain", {
-      action: "transfer_ship",
-      transfer_id: VALID_UUID
-    });
-    expectValid(result);
-  });
-  it("validates transfer_mark_in_transit", () => {
-    const result = validateToolArgs("supply_chain", {
-      action: "transfer_mark_in_transit",
-      transfer_id: VALID_UUID
-    });
-    expectValid(result);
-  });
-  it("validates transfer_receive", () => {
-    const result = validateToolArgs("supply_chain", {
-      action: "transfer_receive",
-      transfer_id: VALID_UUID
-    });
-    expectValid(result);
-  });
-  it("validates transfer_complete", () => {
-    const result = validateToolArgs("supply_chain", {
-      action: "transfer_complete",
-      transfer_id: VALID_UUID
-    });
-    expectValid(result);
-  });
-  it("validates transfer_cancel", () => {
-    const result = validateToolArgs("supply_chain", {
-      action: "transfer_cancel",
-      transfer_id: VALID_UUID
-    });
-    expectValid(result);
-  });
-});

package/dist/server/__tests__/worker.test.js

@@ -1,265 +0,0 @@
-import { describe, it, expect, vi } from "vitest";
-/**
- * worker.ts is a standalone process entry point. It:
- * 1. Creates a Supabase client
- * 2. Sets up a polling loop (workerTick) with exponential backoff
- * 3. Listens on pg NOTIFY for fast-path processing
- * 4. Handles graceful shutdown
- *
- * Since it auto-starts on import (calls start()), we test the exported
- * behavior patterns by mocking all external dependencies and verifying
- * the logic in isolation.
- *
- * Strategy: Instead of importing worker.ts directly (which would start the
- * process), we test the core logic patterns it uses: exponential backoff,
- * tick deduplication, shutdown behavior, and NOTIFY debouncing.
- */
-
-// ---------------------------------------------------------------------------
-// Test the worker patterns without importing the auto-starting module
-// ---------------------------------------------------------------------------
-describe("worker patterns", () => {
-  // =========================================================================
-  // Exponential backoff
-  // =========================================================================
-
-  describe("exponential backoff", () => {
-    const BASE_INTERVAL_MS = 15_000;
-    const MAX_INTERVAL_MS = 60_000;
-    function computeInterval(consecutiveErrors) {
-      if (consecutiveErrors < 3) return BASE_INTERVAL_MS;
-      return Math.min(BASE_INTERVAL_MS * Math.pow(2, consecutiveErrors - 2), MAX_INTERVAL_MS);
-    }
-    it("uses base interval for 0 errors", () => {
-      expect(computeInterval(0)).toBe(15_000);
-    });
-    it("uses base interval for 1-2 errors", () => {
-      expect(computeInterval(1)).toBe(15_000);
-      expect(computeInterval(2)).toBe(15_000);
-    });
-    it("doubles interval at 3 errors", () => {
-      expect(computeInterval(3)).toBe(30_000);
-    });
-    it("quadruples interval at 4 errors", () => {
-      expect(computeInterval(4)).toBe(60_000);
-    });
-    it("caps at MAX_INTERVAL_MS", () => {
-      expect(computeInterval(10)).toBe(60_000);
-      expect(computeInterval(20)).toBe(60_000);
-    });
-  });
-
-  // =========================================================================
-  // Tick deduplication
-  // =========================================================================
-
-  describe("tick deduplication", () => {
-    it("prevents concurrent ticks", async () => {
-      let running = false;
-      let callCount = 0;
-      async function workerTick() {
-        if (running) return;
-        running = true;
-        try {
-          callCount++;
-          await new Promise(r => setTimeout(r, 10));
-        } finally {
-          running = false;
-        }
-      }
-
-      // Fire two ticks concurrently
-      await Promise.all([workerTick(), workerTick()]);
-      // Only the first should have executed
-      expect(callCount).toBe(1);
-    });
-    it("allows sequential ticks after previous completes", async () => {
-      let running = false;
-      let callCount = 0;
-      async function workerTick() {
-        if (running) return;
-        running = true;
-        try {
-          callCount++;
-          await new Promise(r => setTimeout(r, 1));
-        } finally {
-          running = false;
-        }
-      }
-      await workerTick();
-      await workerTick();
-      expect(callCount).toBe(2);
-    });
-  });
-
-  // =========================================================================
-  // NOTIFY debouncing
-  // =========================================================================
-
-  describe("NOTIFY debouncing", () => {
-    it("batches multiple notifications within debounce window", async () => {
-      vi.useFakeTimers();
-      let processCalls = 0;
-      let lastBatchSize = 0;
-      let notifyTimer = null;
-      let notifyPending = 0;
-      function onNotification() {
-        notifyPending++;
-        if (!notifyTimer) {
-          notifyTimer = setTimeout(() => {
-            lastBatchSize = Math.min(notifyPending, 10);
-            notifyPending = 0;
-            notifyTimer = null;
-            processCalls++;
-          }, 50);
-        }
-      }
-
-      // Simulate 5 rapid notifications
-      onNotification();
-      onNotification();
-      onNotification();
-      onNotification();
-      onNotification();
-
-      // Timer hasn't fired yet
-      expect(processCalls).toBe(0);
-
-      // Advance past debounce window
-      vi.advanceTimersByTime(60);
-      expect(processCalls).toBe(1);
-      expect(lastBatchSize).toBe(5);
-      vi.useRealTimers();
-    });
-    it("caps batch size at 10", async () => {
-      vi.useFakeTimers();
-      let lastBatchSize = 0;
-      let notifyTimer = null;
-      let notifyPending = 0;
-      function onNotification() {
-        notifyPending++;
-        if (!notifyTimer) {
-          notifyTimer = setTimeout(() => {
-            lastBatchSize = Math.min(notifyPending, 10);
-            notifyPending = 0;
-            notifyTimer = null;
-          }, 50);
-        }
-      }
-
-      // Simulate 15 rapid notifications
-      for (let i = 0; i < 15; i++) onNotification();
-      vi.advanceTimersByTime(60);
-      expect(lastBatchSize).toBe(10);
-      vi.useRealTimers();
-    });
-  });
-
-  // =========================================================================
-  // Error recovery
-  // =========================================================================
-
-  describe("error recovery", () => {
-    it("resets backoff after successful tick", () => {
-      let consecutiveErrors = 5;
-      let currentInterval = 60_000;
-      const BASE_INTERVAL_MS = 15_000;
-
-      // Simulate successful tick
-      consecutiveErrors = 0;
-      if (currentInterval !== BASE_INTERVAL_MS) {
-        currentInterval = BASE_INTERVAL_MS;
-      }
-      expect(consecutiveErrors).toBe(0);
-      expect(currentInterval).toBe(BASE_INTERVAL_MS);
-    });
-    it("increments errors on failure", () => {
-      let consecutiveErrors = 0;
-
-      // Simulate 3 failed ticks
-      consecutiveErrors++;
-      expect(consecutiveErrors).toBe(1);
-      consecutiveErrors++;
-      expect(consecutiveErrors).toBe(2);
-      consecutiveErrors++;
-      expect(consecutiveErrors).toBe(3);
-    });
-  });
-
-  // =========================================================================
-  // Shutdown behavior
-  // =========================================================================
-
-  describe("shutdown behavior", () => {
-    it("clears interval and exits after grace period", () => {
-      vi.useFakeTimers();
-      let intervalCleared = false;
-      let poolShutdown = false;
-      let pgClientEnded = false;
-      let exitCalled = false;
-      function shutdown() {
-        intervalCleared = true;
-        poolShutdown = true;
-        pgClientEnded = true;
-        setTimeout(() => {
-          exitCalled = true;
-        }, 10_000);
-      }
-      shutdown();
-      expect(intervalCleared).toBe(true);
-      expect(poolShutdown).toBe(true);
-      expect(pgClientEnded).toBe(true);
-      expect(exitCalled).toBe(false);
-
-      // After 10s grace period
-      vi.advanceTimersByTime(10_000);
-      expect(exitCalled).toBe(true);
-      vi.useRealTimers();
-    });
-  });
-
-  // =========================================================================
-  // DATABASE_URL cleanup
-  // =========================================================================
-
-  describe("DATABASE_URL cleanup", () => {
-    it("strips sslmode parameter from URL", () => {
-      const cleanUrl = url => url.replace(/[?&]sslmode=[^&]*/g, "").replace(/\?$/, "");
-      expect(cleanUrl("postgres://host/db?sslmode=require")).toBe("postgres://host/db");
-      expect(cleanUrl("postgres://host/db?foo=bar&sslmode=require")).toBe("postgres://host/db?foo=bar");
-      expect(cleanUrl("postgres://host/db")).toBe("postgres://host/db");
-    });
-  });
-
-  // =========================================================================
-  // Parallel processing in workerTick
-  // =========================================================================
-
-  describe("parallel processing", () => {
-    it("runs step processing and auxiliary tasks in parallel", async () => {
-      const callOrder = [];
-      async function processSteps() {
-        callOrder.push("steps");
-        return {
-          processed: 2,
-          errors: 0
-        };
-      }
-      async function processWaiting() {
-        callOrder.push("waiting");
-        return 1;
-      }
-      async function processSchedule() {
-        callOrder.push("schedule");
-        return 0;
-      }
-      const [stepResult, waitingResolved] = await Promise.all([processSteps(), processWaiting()]);
-      const [scheduled] = await Promise.all([processSchedule()]);
-      expect(stepResult.processed).toBe(2);
-      expect(waitingResolved).toBe(1);
-      expect(scheduled).toBe(0);
-      expect(callOrder).toContain("steps");
-      expect(callOrder).toContain("waiting");
-    });
-  });
-});