OUT-4040: L1.3 — Assembly webhook flow tests

[SandipBajracharya]

What & why

L1.3 — integration tests for the Assembly→Dropbox webhook flow (Copilot notifies of a file created/deleted/updated → we sync to Dropbox), including the ping-pong dedup that stops us re-syncing our own echoes. Third of the L1 flow spine (after L1.1 initial sync, L1.2 Dropbox webhook delta). Drives the real graph in-process (via the L1.0 Trigger double) against Testcontainers Postgres, Dropbox + Copilot faked via MSW.

Changes (all test/**, zero production change)

• test/msw/write.ts (+ harness test) — mockDropboxDeleteFile (/2/files/delete_v2, captures deleted paths)
• test/flows/assembly-webhook.integration.test.ts — service-direct: create / delete / update
• test/flows/assembly-webhook-controller.integration.test.ts — controller: ping-pong dedup + event guards

What it proves

• Service: create uploads to Dropbox + records the mapping; delete removes the exact Dropbox path + soft-deletes the row; update replaces the file (delete-then-recreate).
• Controller: ignores a created-event echo of our own in-flight create (scoped by path); still creates when a different file is mid-upload; ignores non-handleable events, non-file/folder objects, already-deleted files, no-op updates; skips when sync is disabled; 404 when the connection has no account.

Skip scenarios register no Dropbox handlers, so a stray outbound call trips onUnhandledRequest:'error'; the delete/update tests also assert the exact deleted path and that unchanged rows were never written (updatedAt).

Reviewed by the fullstack reviewer (SHIP). Cases 33–35 (dead-code webhook-record dedup) intentionally out of scope.

Testing

• pnpm typecheck ✅ · pnpm lint ✅
• pnpm test:integration — 75/75 ✅ (12 files)

🤖 Generated with Claude Code

[linear-code]

OUT-4040

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
dropbox-integration	Ready	Preview	Aug 13, 2026 9:40am

[greptile-apps]

Greptile Summary

Adds integration coverage for the Assembly-to-Dropbox webhook flow and its ping-pong deduplication behavior.

• Covers service-level create, delete, and update synchronization.
• Covers controller event guards, path-scoped deduplication, disabled synchronization, and missing-account handling.
• Adds an MSW Dropbox delete_v2 handler that records requested paths for exact-target assertions.

Confidence Score: 5/5

The PR appears safe to merge.

No blocking failure remains.

Important Files Changed

Filename	Overview
test/flows/assembly-webhook-controller.integration.test.ts	Adds controller-level tests for path-scoped echo deduplication, event guards, disabled synchronization, and missing Dropbox accounts.
test/flows/assembly-webhook.integration.test.ts	Adds service-level integration tests for Assembly-originated file creation, deletion, and replacement in Dropbox.
test/msw/write.integration.test.ts	Verifies that the Dropbox deletion mock handles delete_v2 and captures the requested path.
test/msw/write.ts	Adds a Dropbox delete_v2 MSW handler returning deleted-file metadata and exposing captured paths.

Sequence Diagram

sequenceDiagram
    participant A as Assembly webhook
    participant C as Webhook controller
    participant S as AssemblyWebhookService
    participant D as Dropbox
    participant DB as Postgres
    A->>C: File event
    C->>DB: Check connection and pending sync state
    alt Event should be skipped
        C-->>A: 200 without Dropbox operation
    else Event should be synchronized
        C->>S: Handle create, delete, or update
        S->>D: Upload or delete file
        S->>DB: Create or soft-delete mapping
        S-->>C: Completed
        C-->>A: 200
    end

Loading

_{Reviews (2): Last reviewed commit: "test(OUT-4040): don't assert the delete_..." | Re-trigger Greptile}

[SandipBajracharya]

@greptileai review PR again

[priosshrsth]

lgtm