chore: gradual dependency upgrade (P0–P5)

.github/workflows/api-tests.yml

@@ -44,6 +44,10 @@ jobs:
         working-directory: apps/api
         run: pnpm test
 
+      - name: Run entitlement unit tests
+        working-directory: proprietary/entitlement
+        run: pnpm vitest run --exclude 'src/**/integration/**'
+
       - name: Show container logs on failure
         if: failure()
         run: |

apps/api/eslint.config.mjs

@@ -0,0 +1,32 @@
+import eslint from '@eslint/js';
+import globals from 'globals';
+import tseslint from 'typescript-eslint';
+
+export default tseslint.config(
+  {
+    ignores: [
+      'dist/**',
+      'node_modules/**',
+      'coverage/**',
+      'eslint.config.mjs',
+      'scripts/**',
+      '**/*.js',
+    ],
+  },
+  eslint.configs.recommended,
+  ...tseslint.configs.recommended,
+  {
+    languageOptions: {
+      globals: { ...globals.node, ...globals.jest },
+      parserOptions: {
+        project: './tsconfig.eslint.json',
+        tsconfigRootDir: import.meta.dirname,
+      },
+    },
+    rules: {
+      '@typescript-eslint/explicit-function-return-type': 'error',
+      '@typescript-eslint/explicit-module-boundary-types': 'off',
+      '@typescript-eslint/no-explicit-any': 'error',
+    },
+  },
+);

apps/api/jest.config.js

@@ -11,7 +11,7 @@ module.exports = {
   ],
   coverageDirectory: './coverage',
   testEnvironment: 'node',
-  testPathIgnorePatterns: ['/node_modules/'],
+  testPathIgnorePatterns: ['/node_modules/', '/proprietary/entitlement/'],
   testTimeout: 30000,
   forceExit: true,
   setupFiles: ['<rootDir>/test/setup-env.ts'],

apps/api/package.json

@@ -9,7 +9,7 @@
     "start": "node dist/main",
     "start:dev": "ts-node -r tsconfig-paths/register src/main.ts",
     "start:prod": "node dist/main",
-    "lint": "eslint \"{src,apps,libs,test}/**/*.ts\"",
+    "lint": "eslint .",
     "clean": "rm -rf dist",
     "test": "jest",
     "test:watch": "jest --watch",
@@ -39,61 +39,62 @@
   },
   "dependencies": {
     "@betterdb/shared": "workspace:*",
-    "@fastify/static": "^8.3.0",
-    "@fastify/swagger": "^9.6.1",
-    "@fastify/swagger-ui": "^5.2.4",
+    "@fastify/static": "^9.0.0",
+    "@fastify/swagger": "^9.7.0",
+    "@fastify/swagger-ui": "^5.2.5",
     "@lancedb/lancedb": "^0.23.0",
-    "@langchain/community": "^1.1.3",
-    "@langchain/core": "^1.1.12",
-    "@langchain/ollama": "^1.1.0",
+    "@langchain/community": "^1.1.24",
+    "@langchain/core": "^1.1.35",
+    "@langchain/ollama": "^1.2.6",
     "@langchain/textsplitters": "^1.0.1",
-    "@nestjs/common": "^11.0.0",
-    "@nestjs/config": "^4.0.0",
-    "@nestjs/core": "^11.0.0",
+    "@nestjs/common": "^11.1.17",
+    "@nestjs/config": "^4.0.3",
+    "@nestjs/core": "^11.1.17",
+    "@nestjs/platform-fastify": "^11.1.17",
     "@nestjs/schedule": "^6.1.1",
-    "@nestjs/platform-fastify": "^11.1.16",
-    "@nestjs/swagger": "^11.2.4",
-    "@nestjs/throttler": "^5.2.0",
+    "@nestjs/swagger": "^11.2.6",
+    "@nestjs/throttler": "^6.5.0",
     "@types/better-sqlite3": "^7.6.13",
     "apache-arrow": "^21.1.0",
-    "better-sqlite3": "^12.5.0",
+    "better-sqlite3": "^12.8.0",
     "class-transformer": "^0.5.1",
-    "class-validator": "^0.14.3",
-    "fastify": "^5.8.1",
+    "class-validator": "^0.15.1",
+    "fastify": "^5.8.4",
     "hnswlib-node": "^3.0.0",
     "iovalkey": "^0.3.3",
     "jsonwebtoken": "^9.0.3",
-    "langchain": "^1.2.7",
-    "lru-cache": "^11.2.4",
+    "langchain": "^1.2.36",
+    "lru-cache": "^11.2.7",
     "ollama": "^0.6.3",
-    "pg": "^8.16.3",
+    "pg": "^8.20.0",
     "prom-client": "^15.1.3",
     "reflect-metadata": "^0.2.2",
-    "rxjs": "^7.8.1",
-    "semver": "^7.7.3",
-    "ws": "^8.0.0",
-    "zod": "^4.3.5"
+    "rxjs": "^7.8.2",
+    "semver": "^7.7.4",
+    "ws": "^8.20.0",
+    "zod": "^4.3.6"
   },
   "devDependencies": {
-    "@nestjs/cli": "^11.0.14",
-    "@nestjs/schematics": "^11.0.3",
-    "@nestjs/testing": "^11.1.12",
+    "@eslint/js": "^10.0.1",
+    "@nestjs/cli": "^11.0.16",
+    "@nestjs/schematics": "^11.0.9",
+    "@nestjs/testing": "^11.1.17",
     "@types/jest": "^30.0.0",
     "@types/jsonwebtoken": "^9.0.10",
-    "@types/node": "^22.10.5",
-    "@types/pg": "^8.16.0",
+    "@types/node": "^22.19.15",
+    "@types/pg": "^8.20.0",
     "@types/semver": "^7.7.1",
-    "@types/supertest": "^6.0.3",
-    "@types/ws": "^8.0.0",
-    "@typescript-eslint/eslint-plugin": "^8.19.1",
-    "@typescript-eslint/parser": "^8.19.1",
-    "eslint": "^9.17.0",
-    "jest": "^30.2.0",
-    "nodemon": "^3.1.11",
+    "@types/supertest": "^7.2.0",
+    "@types/ws": "^8.18.1",
+    "eslint": "^10.1.0",
+    "globals": "^17.4.0",
+    "jest": "^30.3.0",
+    "nodemon": "^3.1.14",
     "supertest": "^7.2.2",
     "ts-jest": "^29.4.6",
     "ts-node": "^10.9.2",
     "tsconfig-paths": "^4.2.0",
-    "typescript": "^5.7.2"
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.57.2"
   }
-}
+}

apps/api/tsconfig.eslint.json

@@ -0,0 +1,16 @@
+{
+  "extends": "./tsconfig.json",
+  "include": [
+    "src/**/*",
+    "test/**/*",
+    "apps/**/*",
+    "libs/**/*",
+    "../../proprietary/**/*"
+  ],
+  "exclude": [
+    "node_modules",
+    "dist",
+    "../../proprietary/entitlement/**/*",
+    "../../proprietary/infra/**/*"
+  ]
+}

apps/web/eslint.config.mjs

@@ -0,0 +1,36 @@
+import eslint from '@eslint/js';
+import reactHooks from 'eslint-plugin-react-hooks';
+import reactRefreshPlugin from 'eslint-plugin-react-refresh';
+import tseslint from 'typescript-eslint';
+import globals from 'globals';
+
+export default tseslint.config(
+  { ignores: ['dist/**', 'node_modules/**', 'eslint.config.mjs'] },
+  {
+    linterOptions: {
+      reportUnusedDisableDirectives: 'error',
+    },
+  },
+  eslint.configs.recommended,
+  ...tseslint.configs.recommended,
+  reactHooks.configs.flat['recommended-latest'],
+  {
+    plugins: { 'react-refresh': reactRefreshPlugin },
+    rules: {
+      'react-refresh/only-export-components': ['warn', { allowConstantExport: true }],
+    },
+  },
+  {
+    languageOptions: {
+      ecmaVersion: 2020,
+      globals: globals.browser,
+      parserOptions: {
+        project: './tsconfig.json',
+        tsconfigRootDir: import.meta.dirname,
+      },
+    },
+    rules: {
+      '@typescript-eslint/no-explicit-any': 'error',
+    },
+  },
+);

apps/web/package.json

@@ -8,7 +8,8 @@
     "dev": "vite",
     "build": "tsc && vite build",
     "preview": "vite preview",
-    "lint": "eslint . --ext ts,tsx --report-unused-disable-directives --max-warnings 0",
+    "lint": "eslint . --max-warnings 0",
+    "test": "vitest run",
     "clean": "rm -rf dist"
   },
   "dependencies": {
@@ -18,33 +19,34 @@
     "clsx": "^2.1.1",
     "d3": "^7.9.0",
     "date-fns": "^4.1.0",
-    "lucide-react": "^0.562.0",
-    "react": "^18.3.1",
-    "react-day-picker": "^9.13.0",
-    "react-dom": "^18.3.1",
-    "react-router-dom": "^7.12.0",
+    "lucide-react": "^1.0.1",
+    "react": "^19.2.4",
+    "react-day-picker": "^9.14.0",
+    "react-dom": "^19.2.4",
+    "react-router-dom": "^7.13.2",
     "react-tooltip": "^5.30.0",
-    "recharts": "^3.6.0",
-    "tailwind-merge": "^3.4.0"
+    "recharts": "^3.8.0",
+    "tailwind-merge": "^3.5.0"
   },
   "devDependencies": {
-    "@react-grab/mcp": "^0.1.26",
-    "@rollup/plugin-commonjs": "^29.0.0",
+    "@eslint/js": "^10.0.1",
+    "@react-grab/mcp": "^0.1.28",
+    "@rollup/plugin-commonjs": "^29.0.2",
+    "@tailwindcss/vite": "^4.2.2",
     "@types/d3": "^7.4.3",
-    "@types/node": "^22.10.5",
-    "@types/react": "^18.3.18",
-    "@types/react-dom": "^18.3.5",
-    "@typescript-eslint/eslint-plugin": "^8.19.1",
-    "@typescript-eslint/parser": "^8.19.1",
-    "@vitejs/plugin-react": "^4.3.4",
-    "autoprefixer": "^10.4.20",
-    "eslint": "^9.17.0",
-    "eslint-plugin-react-hooks": "^5.1.0",
-    "eslint-plugin-react-refresh": "^0.4.16",
-    "postcss": "^8.4.49",
-    "react-grab": "^0.1.26",
-    "tailwindcss": "^3.4.17",
-    "typescript": "^5.7.2",
-    "vite": "^6.0.7"
+    "@types/node": "^22.19.15",
+    "@types/react": "^19.2.14",
+    "@types/react-dom": "^19.2.3",
+    "@vitejs/plugin-react": "^6.0.1",
+    "eslint": "^10.1.0",
+    "eslint-plugin-react-hooks": "^7.0.1",
+    "eslint-plugin-react-refresh": "^0.5.2",
+    "globals": "^17.4.0",
+    "react-grab": "^0.1.28",
+    "tailwindcss": "^4.2.2",
+    "typescript": "^5.9.3",
+    "typescript-eslint": "^8.57.2",
+    "vitest": "^4.1.1",
+    "vite": "^8.0.2"
   }
-}
+}

apps/web/src/hooks/useVersionCheck.ts

@@ -42,7 +42,7 @@ export function useVersionCheckState(): VersionCheckContextValue {
     };
   });
 
-  const intervalRef = useRef<ReturnType<typeof setInterval>>();
+  const intervalRef = useRef<ReturnType<typeof setInterval> | undefined>(undefined);
   const intervalMsRef = useRef(3600000);
 
   const fetchVersion = useCallback(async () => {

apps/web/src/index.css

@@ -1,6 +1,29 @@
-@tailwind base;
-@tailwind components;
-@tailwind utilities;
+@import "tailwindcss";
+
+@theme {
+  --color-border: hsl(var(--border));
+  --color-input: hsl(var(--input));
+  --color-ring: hsl(var(--ring));
+  --color-background: hsl(var(--background));
+  --color-foreground: hsl(var(--foreground));
+  --color-primary: hsl(var(--primary));
+  --color-primary-foreground: hsl(var(--primary-foreground));
+  --color-secondary: hsl(var(--secondary));
+  --color-secondary-foreground: hsl(var(--secondary-foreground));
+  --color-destructive: hsl(var(--destructive));
+  --color-destructive-foreground: hsl(var(--destructive-foreground));
+  --color-muted: hsl(var(--muted));
+  --color-muted-foreground: hsl(var(--muted-foreground));
+  --color-accent: hsl(var(--accent));
+  --color-accent-foreground: hsl(var(--accent-foreground));
+  --color-popover: hsl(var(--popover));
+  --color-popover-foreground: hsl(var(--popover-foreground));
+  --color-card: hsl(var(--card));
+  --color-card-foreground: hsl(var(--card-foreground));
+  --radius-lg: var(--radius);
+  --radius-md: calc(var(--radius) - 2px);
+  --radius-sm: calc(var(--radius) - 4px);
+}
 
 @layer base {
   :root {