@heliyos/heliyos-api-core 1.0.66 → 1.0.68

package/dist/email/notification-immediate.html

@@ -65,6 +65,17 @@
             font-weight: bold;
             color: #111827;
             margin: 0 0 12px 0;
+            word-break: break-word;
+            overflow-wrap: anywhere;
+        }
+
+        .event-summary {
+            margin: 0 0 12px 0;
+            font-size: 14px;
+            color: #374151;
+            line-height: 1.55;
+            word-break: break-word;
+            overflow-wrap: anywhere;
         }
 
         .event-details {
@@ -77,6 +88,7 @@
         .detail-table {
             width: 100%;
             border-collapse: collapse;
+            table-layout: fixed;
         }
 
         .detail-label {
@@ -90,6 +102,8 @@
         .detail-value {
             font-size: 13px;
             color: #111827;
+            word-break: break-word;
+            overflow-wrap: anywhere;
         }
 
         .detail-cell {
@@ -157,6 +171,9 @@
             <div class="event-card">
                 <div class="event-badge">{{event_type_label}}</div>
                 <div class="event-title">{{{object_name}}}</div>
+                {{#if summary}}
+                <div class="event-summary">{{{summary}}}</div>
+                {{/if}}
                 {{#if details}}
                 <div class="event-details">
                     <table class="detail-table">

package/dist/middleware.js

@@ -19,6 +19,55 @@ const serve_static_1 = __importDefault(require("serve-static"));
 const authentication_1 = require("./authentication");
 const allowedOrigin_1 = require("./allowedOrigin");
 const customError_1 = require("./@types/globals/customError");
+const genericErrorMessage = "Something went wrong";
+const defaultErrorStatusCode = 500;
+const nonProductionEnvironments = new Set(["development", "local", "test"]);
+const sensitiveErrorMessagePatterns = [
+    /https?:\/\//i,
+    /\bapi\.[a-z0-9.-]+\b/i,
+    /\btraceback\b/i,
+    /\bstack trace\b/i,
+    /\b(httpx|requests|axios)\b/i,
+    /\bparallel(?:\.ai)?\b/i,
+];
+const isProductionEnvironment = () => {
+    const nodeEnv = (process.env.NODE_ENV || "").toLowerCase();
+    return !nonProductionEnvironments.has(nodeEnv);
+};
+const toStatusCode = (status) => Number.isFinite(Number(status))
+    ? Number(status)
+    : defaultErrorStatusCode;
+const isSensitiveErrorMessage = (message) => {
+    if (!message) {
+        return true;
+    }
+    if (message.length > 220 || message.includes("\n") || message.includes("\r")) {
+        return true;
+    }
+    return sensitiveErrorMessagePatterns.some((pattern) => pattern.test(message));
+};
+const sanitizeErrorMessage = (message, statusCode) => {
+    if (!isProductionEnvironment()) {
+        return message || genericErrorMessage;
+    }
+    const normalizedMessage = (message || "").trim();
+    if (!normalizedMessage) {
+        return genericErrorMessage;
+    }
+    if (statusCode >= 500 && isSensitiveErrorMessage(normalizedMessage)) {
+        return genericErrorMessage;
+    }
+    if (statusCode < 500 && isSensitiveErrorMessage(normalizedMessage)) {
+        return genericErrorMessage;
+    }
+    return normalizedMessage;
+};
+const sanitizeErrorDescription = (description) => {
+    if (isProductionEnvironment()) {
+        return {};
+    }
+    return description;
+};
 /**
  * Function to handle invalid routes
  * @param _
@@ -134,10 +183,10 @@ const apply_cors = (req, res, next) => {
  */
 const handle_errors = (error, _, res, __) => {
     const { message, description, stack, status } = error;
-    const errorStatus = status || "500";
+    const statusCode = toStatusCode(status);
     const response = {
-        message,
-        description,
+        message: sanitizeErrorMessage(message, statusCode),
+        description: sanitizeErrorDescription(description),
     };
     //  Log original error
     console.error("=== Begin Error ===\n---\n" +
@@ -153,14 +202,10 @@ const handle_errors = (error, _, res, __) => {
         "Stack: " +
         stack +
         "\n---\n=== End Error ===");
-    if (!errorStatus) {
-        response.message = "Internal server error";
-    }
     //	Provide stack track in env development and local
-    if (process.env.NODE_ENV === "development" ||
-        process.env.NODE_ENV === "local") {
+    if (!isProductionEnvironment()) {
         response.error = Object.assign({ stack }, error);
     }
     //	Send status and response
-    return res.status(parseInt(errorStatus, 10)).json(response);
+    return res.status(statusCode).json(response);
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@heliyos/heliyos-api-core",
-  "version": "1.0.66",
+  "version": "1.0.68",
   "description": "Heliyos's core api functions and middlewares. Its a private package hosted on npm.",
   "main": "./dist/index.js",
   "scripts": {

package/src/email/notification-immediate.html

@@ -65,6 +65,17 @@
             font-weight: bold;
             color: #111827;
             margin: 0 0 12px 0;
+            word-break: break-word;
+            overflow-wrap: anywhere;
+        }
+
+        .event-summary {
+            margin: 0 0 12px 0;
+            font-size: 14px;
+            color: #374151;
+            line-height: 1.55;
+            word-break: break-word;
+            overflow-wrap: anywhere;
         }
 
         .event-details {
@@ -77,6 +88,7 @@
         .detail-table {
             width: 100%;
             border-collapse: collapse;
+            table-layout: fixed;
         }
 
         .detail-label {
@@ -90,6 +102,8 @@
         .detail-value {
             font-size: 13px;
             color: #111827;
+            word-break: break-word;
+            overflow-wrap: anywhere;
         }
 
         .detail-cell {
@@ -157,6 +171,9 @@
             <div class="event-card">
                 <div class="event-badge">{{event_type_label}}</div>
                 <div class="event-title">{{{object_name}}}</div>
+                {{#if summary}}
+                <div class="event-summary">{{{summary}}}</div>
+                {{/if}}
                 {{#if details}}
                 <div class="event-details">
                     <table class="detail-table">