@iflow-mcp/attio-mcp 1.3.6

package/dist/utils/error-sanitizer.js

@@ -0,0 +1,366 @@
+/**
+ * Error message sanitization utility to prevent information disclosure
+ *
+ * This module provides secure error handling by sanitizing error messages
+ * that might expose sensitive information to potential attackers.
+ */
+import { error as logError, OperationType } from './logger.js';
+/**
+ * Types of sensitive information to remove from error messages
+ */
+var SensitiveInfoType;
+(function (SensitiveInfoType) {
+    SensitiveInfoType["FILE_PATH"] = "file_path";
+    SensitiveInfoType["API_KEY"] = "api_key";
+    SensitiveInfoType["INTERNAL_ID"] = "internal_id";
+    SensitiveInfoType["STACK_TRACE"] = "stack_trace";
+    SensitiveInfoType["DATABASE_SCHEMA"] = "database_schema";
+    SensitiveInfoType["SYSTEM_INFO"] = "system_info";
+    SensitiveInfoType["URL_WITH_PARAMS"] = "url_with_params";
+    SensitiveInfoType["EMAIL_ADDRESS"] = "email_address";
+    SensitiveInfoType["IP_ADDRESS"] = "ip_address";
+    SensitiveInfoType["HTML_TAGS"] = "html_tags";
+    SensitiveInfoType["JAVASCRIPT_CODE"] = "javascript_code";
+    SensitiveInfoType["NETWORK_INFO"] = "network_info";
+})(SensitiveInfoType || (SensitiveInfoType = {}));
+/**
+ * Patterns for detecting sensitive information in error messages
+ */
+const SENSITIVE_PATTERNS = {
+    [SensitiveInfoType.FILE_PATH]: /(file:\/\/|([A-Z]:)?[/\\](?:Users|home|var|opt|etc|tmp|src|app)[/\\])[^\s"']+/gi,
+    [SensitiveInfoType.API_KEY]: /(?:(?:api[\s_-]*key)|token|bearer|authorization|secret|password|passwd|pwd)[\s:=]*["']?[a-zA-Z0-9\-_]{20,}["']?/gi,
+    [SensitiveInfoType.INTERNAL_ID]: /(?:workspace_id|record_id|object_id|user_id|session_id)[\s:=]*["']?[a-f0-9-]{20,}["']?/gi,
+    [SensitiveInfoType.STACK_TRACE]: /\s*at\s+[^\n]+/gi,
+    [SensitiveInfoType.DATABASE_SCHEMA]: /(?:table|column|field|attribute|slug)[\s:]+["']?[a-z_][a-z0-9_]*["']?/gi,
+    [SensitiveInfoType.SYSTEM_INFO]: /(?:node|npm|v\d+\.\d+\.\d+|darwin|linux|win32|x64|x86)/gi,
+    [SensitiveInfoType.URL_WITH_PARAMS]: /https?:\/\/[^\s]+\?[^\s]+/gi,
+    [SensitiveInfoType.EMAIL_ADDRESS]: /[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/gi,
+    [SensitiveInfoType.IP_ADDRESS]: /\b(?:[0-9]{1,3}\.){3}[0-9]{1,3}\b/gi,
+    [SensitiveInfoType.HTML_TAGS]: /<[^>]*>/gi,
+    [SensitiveInfoType.JAVASCRIPT_CODE]: /(javascript:|alert\(|console\.|eval\(|setTimeout\(|setInterval\()[^"'\s]*/gi,
+    [SensitiveInfoType.NETWORK_INFO]: /\b(localhost|127\.0\.0\.1|0\.0\.0\.0|host=[^\s]+|port=\d+|user=[^\s]+)\b/gi,
+};
+/**
+ * User-friendly error messages mapped by error type
+ */
+const USER_FRIENDLY_MESSAGES = {
+    // Authentication & Authorization
+    authentication: 'Authentication failed. Please check your credentials.',
+    authorization: 'You do not have permission to perform this action.',
+    forbidden: 'Access denied. This resource requires additional permissions.',
+    unauthorized: 'Authentication required. Please provide valid credentials.',
+    // Resource errors
+    not_found: 'The requested resource could not be found.',
+    resource_not_found: 'The specified record does not exist or you do not have access to it.',
+    invalid_id: 'The provided ID is invalid. Please check and try again.',
+    // Validation errors
+    validation: 'The provided data is invalid. Please check your input.',
+    invalid_format: 'The data format is incorrect. Please review the expected format.',
+    missing_required: 'Required information is missing. Please provide all required fields.',
+    duplicate: 'A record with this information already exists.',
+    // Rate limiting
+    rate_limit: 'Too many requests. Please wait a moment before trying again.',
+    quota_exceeded: 'Usage quota exceeded. Please try again later.',
+    // System errors
+    internal_error: 'An internal error occurred. Please try again later.',
+    service_unavailable: 'The service is temporarily unavailable. Please try again later.',
+    timeout: 'The request took too long to process. Please try again.',
+    network_error: 'A network error occurred. Please check your connection.',
+    // Field-specific errors
+    invalid_field: 'One or more fields contain invalid values.',
+    unknown_field: 'Unknown field provided. Please check the available fields.',
+    field_type_mismatch: 'Field value type mismatch. Please check the expected type.',
+    // Default fallback
+    default: 'An error occurred while processing your request.',
+};
+/**
+ * Map specific error patterns to error types
+ */
+function classifyError(message) {
+    const lowerMessage = message.toLowerCase();
+    if (lowerMessage.includes('authentication') ||
+        lowerMessage.includes('api key') ||
+        lowerMessage.includes('api_key')) {
+        return 'authentication';
+    }
+    if (lowerMessage.includes('authorization') ||
+        lowerMessage.includes('permission')) {
+        return 'authorization';
+    }
+    if (lowerMessage.includes('forbidden')) {
+        return 'forbidden';
+    }
+    if (lowerMessage.includes('not found')) {
+        return 'not_found';
+    }
+    if (lowerMessage.includes('invalid') && lowerMessage.includes('id')) {
+        return 'invalid_id';
+    }
+    if (lowerMessage.includes('validation') ||
+        lowerMessage.includes('invalid value')) {
+        return 'validation';
+    }
+    if (lowerMessage.includes('format')) {
+        return 'invalid_format';
+    }
+    if (lowerMessage.includes('required')) {
+        return 'missing_required';
+    }
+    if (lowerMessage.includes('duplicate') ||
+        lowerMessage.includes('already exists')) {
+        return 'duplicate';
+    }
+    if (lowerMessage.includes('rate limit')) {
+        return 'rate_limit';
+    }
+    if (lowerMessage.includes('timeout')) {
+        return 'timeout';
+    }
+    if (lowerMessage.includes('network')) {
+        return 'network_error';
+    }
+    if (lowerMessage.includes('cannot find attribute') ||
+        lowerMessage.includes('unknown field')) {
+        return 'unknown_field';
+    }
+    if (lowerMessage.includes('internal') ||
+        lowerMessage.includes('server error')) {
+        return 'internal_error';
+    }
+    return 'default';
+}
+/**
+ * Extract helpful context from error without exposing sensitive data
+ */
+function extractSafeContext(message) {
+    // Extract field names (but not values or system paths)
+    const fieldMatch = message.match(/(?:field|attribute)[s]?\s+(?:with\s+)?["']?([a-z_]+)["']?/i);
+    if (fieldMatch && fieldMatch[1] && !fieldMatch[1].includes('/')) {
+        return `Field: ${fieldMatch[1]}`;
+    }
+    // Extract resource type
+    const resourceMatch = message.match(/\b(company|companies|person|people|deal|deals|task|tasks|record|records)\b/i);
+    if (resourceMatch) {
+        return `Resource: ${resourceMatch[1].toLowerCase()}`;
+    }
+    return undefined;
+}
+/**
+ * Sanitize an error message to remove sensitive information
+ *
+ * @param error - The error to sanitize (Error object or string)
+ * @param options - Sanitization options
+ * @returns Sanitized error message safe for external exposure
+ */
+export function sanitizeErrorMessage(error, options = {}) {
+    const { includeContext = true, logOriginal = true, module = 'error-sanitizer', operation = 'sanitize', safeMetadata = {}, } = options;
+    // Extract the original message
+    let originalMessage;
+    let errorName = 'Error';
+    let stackTrace;
+    if (error instanceof Error) {
+        originalMessage = error.message;
+        errorName = error.name;
+        stackTrace = error.stack;
+    }
+    else if (typeof error === 'string') {
+        originalMessage = error;
+    }
+    else if (error && typeof error === 'object' && 'message' in error) {
+        const errorLike = error;
+        originalMessage = String(errorLike.message);
+        errorName = String(errorLike.name || 'Error');
+        stackTrace = String(errorLike.stack || '');
+    }
+    else {
+        originalMessage = String(error);
+    }
+    // Log the original error internally if requested
+    if (logOriginal && process.env.NODE_ENV !== 'production') {
+        logError(module, `Original error (internal only): ${originalMessage}`, { name: errorName, stack: stackTrace, ...safeMetadata }, undefined, operation, OperationType.SYSTEM);
+    }
+    // Remove sensitive patterns
+    let sanitized = originalMessage;
+    // Remove HTML tags first to prevent XSS (Issue #836)
+    sanitized = sanitized.replace(SENSITIVE_PATTERNS[SensitiveInfoType.HTML_TAGS], '');
+    // Remove JavaScript code (Issue #836)
+    sanitized = sanitized.replace(SENSITIVE_PATTERNS[SensitiveInfoType.JAVASCRIPT_CODE], '[JS_REDACTED]');
+    // Remove file paths
+    sanitized = sanitized.replace(SENSITIVE_PATTERNS[SensitiveInfoType.FILE_PATH], '[PATH_REDACTED]');
+    // Remove API keys and tokens
+    sanitized = sanitized.replace(SENSITIVE_PATTERNS[SensitiveInfoType.API_KEY], '[CREDENTIAL_REDACTED]');
+    // Remove internal IDs (but keep generic reference)
+    sanitized = sanitized.replace(SENSITIVE_PATTERNS[SensitiveInfoType.INTERNAL_ID], '[ID_REDACTED]');
+    // Remove stack traces
+    sanitized = sanitized.replace(SENSITIVE_PATTERNS[SensitiveInfoType.STACK_TRACE], '');
+    // Remove URLs with parameters
+    sanitized = sanitized.replace(SENSITIVE_PATTERNS[SensitiveInfoType.URL_WITH_PARAMS], '[URL_REDACTED]');
+    // Remove email addresses
+    sanitized = sanitized.replace(SENSITIVE_PATTERNS[SensitiveInfoType.EMAIL_ADDRESS], '[EMAIL_REDACTED]');
+    // Remove IP addresses
+    sanitized = sanitized.replace(SENSITIVE_PATTERNS[SensitiveInfoType.IP_ADDRESS], '[IP_REDACTED]');
+    // Remove network information (localhost, hosts, ports, users)
+    sanitized = sanitized.replace(SENSITIVE_PATTERNS[SensitiveInfoType.NETWORK_INFO], '[NETWORK_REDACTED]');
+    // Get user-friendly message based on error classification
+    const errorType = classifyError(originalMessage);
+    let userMessage = USER_FRIENDLY_MESSAGES[errorType] || USER_FRIENDLY_MESSAGES.default;
+    // Add safe context if available and requested
+    if (includeContext) {
+        const safeContext = extractSafeContext(originalMessage);
+        if (safeContext) {
+            userMessage = `${userMessage} (${safeContext})`;
+        }
+    }
+    // In production, return only the user-friendly message
+    if (process.env.NODE_ENV === 'production') {
+        return userMessage;
+    }
+    // In development, include sanitized technical details
+    return `${userMessage}\n[Dev Info: ${sanitized.substring(0, 200)}${sanitized.length > 200 ? '...' : ''}]`;
+}
+/**
+ * Create a fully sanitized error object
+ *
+ * @param error - The error to sanitize
+ * @param statusCode - Optional HTTP status code
+ * @param options - Sanitization options
+ * @returns Sanitized error object
+ */
+export function createSanitizedError(error, statusCode, options = {}) {
+    const sanitizedMessage = sanitizeErrorMessage(error, options);
+    // First try to classify by message content
+    const messageBasedType = classifyError(error instanceof Error ? error.message : String(error));
+    // If we have a status code and message classification returned 'default',
+    // derive type from status code instead (more reliable)
+    let errorType = messageBasedType;
+    const finalStatusCode = statusCode ?? inferStatusCode(messageBasedType);
+    if (statusCode && messageBasedType === 'default') {
+        errorType = inferTypeFromStatusCode(statusCode);
+    }
+    // Map 'default' to 'sanitized_error' for consistency with secure-error-handler
+    if (errorType === 'default') {
+        errorType = 'sanitized_error';
+    }
+    return {
+        message: sanitizedMessage,
+        type: errorType,
+        statusCode: finalStatusCode,
+        safeMetadata: options.safeMetadata,
+    };
+}
+/**
+ * Infer HTTP status code from error type
+ */
+function inferStatusCode(errorType) {
+    switch (errorType) {
+        case 'authentication':
+            return 401;
+        case 'authorization':
+        case 'forbidden':
+            return 403;
+        case 'not_found':
+        case 'resource_not_found':
+            return 404;
+        case 'validation':
+        case 'invalid_format':
+        case 'missing_required':
+        case 'invalid_id':
+        case 'unknown_field':
+        case 'field_type_mismatch':
+            return 400;
+        case 'duplicate':
+            return 409;
+        case 'rate_limit':
+        case 'quota_exceeded':
+            return 429;
+        case 'timeout':
+            return 408;
+        case 'service_unavailable':
+            return 503;
+        case 'internal_error':
+        case 'network_error':
+        default:
+            return 500;
+    }
+}
+/**
+ * Infer error type from HTTP status code
+ * Returns types consistent with secure-error-handler conventions (e.g., authentication_error)
+ */
+function inferTypeFromStatusCode(statusCode) {
+    if (statusCode === 400)
+        return 'validation_error';
+    if (statusCode === 401)
+        return 'authentication_error';
+    if (statusCode === 403)
+        return 'authorization_error';
+    if (statusCode === 404)
+        return 'not_found';
+    if (statusCode === 408)
+        return 'timeout';
+    if (statusCode === 409)
+        return 'duplicate';
+    if (statusCode === 429)
+        return 'rate_limit';
+    if (statusCode === 503)
+        return 'service_unavailable';
+    if (statusCode >= 500)
+        return 'server_error';
+    return 'sanitized_error';
+}
+/**
+ * Middleware-style error sanitizer for wrapping async functions
+ *
+ * @param fn - The async function to wrap
+ * @param options - Sanitization options
+ * @returns Wrapped function that sanitizes errors
+ */
+export function withErrorSanitization(fn, options = {}) {
+    return (async (...args) => {
+        try {
+            return await fn(...args);
+        }
+        catch (error) {
+            const sanitized = createSanitizedError(error, undefined, options);
+            const sanitizedError = new Error(sanitized.message);
+            sanitizedError.name = 'SanitizedError';
+            sanitizedError.statusCode = sanitized.statusCode;
+            sanitizedError.type = sanitized.type;
+            sanitizedError.safeMetadata = sanitized.safeMetadata;
+            throw sanitizedError;
+        }
+    });
+}
+/**
+ * Check if a message contains sensitive information
+ *
+ * @param message - The message to check
+ * @returns True if sensitive information is detected
+ */
+export function containsSensitiveInfo(message) {
+    for (const pattern of Object.values(SENSITIVE_PATTERNS)) {
+        if (pattern.test(message)) {
+            return true;
+        }
+    }
+    return false;
+}
+/**
+ * Get a safe error summary for logging or metrics
+ *
+ * @param error - The error to summarize
+ * @returns Safe summary string
+ */
+export function getErrorSummary(error) {
+    const errorType = classifyError(error instanceof Error ? error.message : String(error));
+    const safeContext = extractSafeContext(error instanceof Error ? error.message : String(error));
+    return safeContext ? `${errorType} (${safeContext})` : errorType;
+}
+export default {
+    sanitizeErrorMessage,
+    createSanitizedError,
+    withErrorSanitization,
+    containsSensitiveInfo,
+    getErrorSummary,
+};
+//# sourceMappingURL=error-sanitizer.js.map

package/dist/utils/error-sanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-sanitizer.js","sourceRoot":"","sources":["../../src/utils/error-sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,KAAK,IAAI,QAAQ,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE/D;;GAEG;AACH,IAAK,iBAaJ;AAbD,WAAK,iBAAiB;IACpB,4CAAuB,CAAA;IACvB,wCAAmB,CAAA;IACnB,gDAA2B,CAAA;IAC3B,gDAA2B,CAAA;IAC3B,wDAAmC,CAAA;IACnC,gDAA2B,CAAA;IAC3B,wDAAmC,CAAA;IACnC,oDAA+B,CAAA;IAC/B,8CAAyB,CAAA;IACzB,4CAAuB,CAAA;IACvB,wDAAmC,CAAA;IACnC,kDAA6B,CAAA;AAC/B,CAAC,EAbI,iBAAiB,KAAjB,iBAAiB,QAarB;AAED;;GAEG;AACH,MAAM,kBAAkB,GAAsC;IAC5D,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAC3B,iFAAiF;IACnF,CAAC,iBAAiB,CAAC,OAAO,CAAC,EACzB,mHAAmH;IACrH,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAC7B,0FAA0F;IAC5F,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAAE,kBAAkB;IACnD,CAAC,iBAAiB,CAAC,eAAe,CAAC,EACjC,yEAAyE;IAC3E,CAAC,iBAAiB,CAAC,WAAW,CAAC,EAC7B,0DAA0D;IAC5D,CAAC,iBAAiB,CAAC,eAAe,CAAC,EAAE,6BAA6B;IAClE,CAAC,iBAAiB,CAAC,aAAa,CAAC,EAC/B,kDAAkD;IACpD,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,qCAAqC;IACrE,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,WAAW;IAC1C,CAAC,iBAAiB,CAAC,eAAe,CAAC,EACjC,6EAA6E;IAC/E,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAC9B,4EAA4E;CAC/E,CAAC;AAoBF;;GAEG;AACH,MAAM,sBAAsB,GAA2B;IACrD,iCAAiC;IACjC,cAAc,EAAE,uDAAuD;IACvE,aAAa,EAAE,oDAAoD;IACnE,SAAS,EAAE,+DAA+D;IAC1E,YAAY,EAAE,4DAA4D;IAE1E,kBAAkB;IAClB,SAAS,EAAE,4CAA4C;IACvD,kBAAkB,EAChB,sEAAsE;IACxE,UAAU,EAAE,yDAAyD;IAErE,oBAAoB;IACpB,UAAU,EAAE,wDAAwD;IACpE,cAAc,EACZ,kEAAkE;IACpE,gBAAgB,EACd,sEAAsE;IACxE,SAAS,EAAE,gDAAgD;IAE3D,gBAAgB;IAChB,UAAU,EAAE,8DAA8D;IAC1E,cAAc,EAAE,+CAA+C;IAE/D,gBAAgB;IAChB,cAAc,EAAE,qDAAqD;IACrE,mBAAmB,EACjB,iEAAiE;IACnE,OAAO,EAAE,yDAAyD;IAClE,aAAa,EAAE,yDAAyD;IAExE,wBAAwB;IACxB,aAAa,EAAE,4CAA4C;IAC3D,aAAa,EAAE,4DAA4D;IAC3E,mBAAmB,EACjB,4DAA4D;IAE9D,mBAAmB;IACnB,OAAO,EAAE,kDAAkD;CAC5D,CAAC;AAEF;;GAEG;AACH,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAE3C,IACE,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QACvC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC;QAChC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAChC,CAAC;QACD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,IACE,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC;QACtC,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,EACnC,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpE,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IACE,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC;QACnC,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EACtC,CAAC;QACD,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,IACE,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC;QAClC,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EACvC,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACxC,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IACE,YAAY,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAC9C,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,EACtC,CAAC;QACD,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IACE,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;QACjC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EACrC,CAAC;QACD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,kBAAkB,CAAC,OAAe;IACzC,uDAAuD;IACvD,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAC9B,4DAA4D,CAC7D,CAAC;IACF,IAAI,UAAU,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChE,OAAO,UAAU,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACnC,CAAC;IAED,wBAAwB;IACxB,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,CACjC,6EAA6E,CAC9E,CAAC;IACF,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,aAAa,aAAa,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IACvD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAkBD;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAA+C,EAC/C,UAA+B,EAAE;IAEjC,MAAM,EACJ,cAAc,GAAG,IAAI,EACrB,WAAW,GAAG,IAAI,EAClB,MAAM,GAAG,iBAAiB,EAC1B,SAAS,GAAG,UAAU,EACtB,YAAY,GAAG,EAAE,GAClB,GAAG,OAAO,CAAC;IAEZ,+BAA+B;IAC/B,IAAI,eAAuB,CAAC;IAC5B,IAAI,SAAS,GAAG,OAAO,CAAC;IACxB,IAAI,UAA8B,CAAC;IAEnC,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC;QAChC,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC;QACvB,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC;IAC3B,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,eAAe,GAAG,KAAK,CAAC;IAC1B,CAAC;SAAM,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QACpE,MAAM,SAAS,GAAG,KAAkB,CAAC;QACrC,eAAe,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC5C,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,IAAI,OAAO,CAAC,CAAC;QAC9C,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;SAAM,CAAC;QACN,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC;IAED,iDAAiD;IACjD,IAAI,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QACzD,QAAQ,CACN,MAAM,EACN,mCAAmC,eAAe,EAAE,EACpD,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,YAAY,EAAE,EACvD,SAAS,EACT,SAAS,EACT,aAAa,CAAC,MAAM,CACrB,CAAC;IACJ,CAAC;IAED,4BAA4B;IAC5B,IAAI,SAAS,GAAG,eAAe,CAAC;IAEhC,qDAAqD;IACrD,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,kBAAkB,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAC/C,EAAE,CACH,CAAC;IAEF,sCAAsC;IACtC,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,kBAAkB,CAAC,iBAAiB,CAAC,eAAe,CAAC,EACrD,eAAe,CAChB,CAAC;IAEF,oBAAoB;IACpB,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,kBAAkB,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAC/C,iBAAiB,CAClB,CAAC;IAEF,6BAA6B;IAC7B,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,kBAAkB,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAC7C,uBAAuB,CACxB,CAAC;IAEF,mDAAmD;IACnD,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,kBAAkB,CAAC,iBAAiB,CAAC,WAAW,CAAC,EACjD,eAAe,CAChB,CAAC;IAEF,sBAAsB;IACtB,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,kBAAkB,CAAC,iBAAiB,CAAC,WAAW,CAAC,EACjD,EAAE,CACH,CAAC;IAEF,8BAA8B;IAC9B,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,kBAAkB,CAAC,iBAAiB,CAAC,eAAe,CAAC,EACrD,gBAAgB,CACjB,CAAC;IAEF,yBAAyB;IACzB,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,kBAAkB,CAAC,iBAAiB,CAAC,aAAa,CAAC,EACnD,kBAAkB,CACnB,CAAC;IAEF,sBAAsB;IACtB,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,kBAAkB,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAChD,eAAe,CAChB,CAAC;IAEF,8DAA8D;IAC9D,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,kBAAkB,CAAC,iBAAiB,CAAC,YAAY,CAAC,EAClD,oBAAoB,CACrB,CAAC;IAEF,0DAA0D;IAC1D,MAAM,SAAS,GAAG,aAAa,CAAC,eAAe,CAAC,CAAC;IACjD,IAAI,WAAW,GACb,sBAAsB,CAAC,SAAS,CAAC,IAAI,sBAAsB,CAAC,OAAO,CAAC;IAEtE,8CAA8C;IAC9C,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,WAAW,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAC;QACxD,IAAI,WAAW,EAAE,CAAC;YAChB,WAAW,GAAG,GAAG,WAAW,KAAK,WAAW,GAAG,CAAC;QAClD,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC1C,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,sDAAsD;IACtD,OAAO,GAAG,WAAW,gBAAgB,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAC9D,SAAS,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EACnC,GAAG,CAAC;AACN,CAAC;AAYD;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAA+C,EAC/C,UAAmB,EACnB,UAA+B,EAAE;IAEjC,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAE9D,2CAA2C;IAC3C,MAAM,gBAAgB,GAAG,aAAa,CACpC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;IAEF,0EAA0E;IAC1E,uDAAuD;IACvD,IAAI,SAAS,GAAG,gBAAgB,CAAC;IACjC,MAAM,eAAe,GAAG,UAAU,IAAI,eAAe,CAAC,gBAAgB,CAAC,CAAC;IAExE,IAAI,UAAU,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;QACjD,SAAS,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAClD,CAAC;IAED,+EAA+E;IAC/E,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,SAAS,GAAG,iBAAiB,CAAC;IAChC,CAAC;IAED,OAAO;QACL,OAAO,EAAE,gBAAgB;QACzB,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,eAAe;QAC3B,YAAY,EAAE,OAAO,CAAC,YAAY;KACnC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,eAAe,CAAC,SAAiB;IACxC,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,gBAAgB;YACnB,OAAO,GAAG,CAAC;QACb,KAAK,eAAe,CAAC;QACrB,KAAK,WAAW;YACd,OAAO,GAAG,CAAC;QACb,KAAK,WAAW,CAAC;QACjB,KAAK,oBAAoB;YACvB,OAAO,GAAG,CAAC;QACb,KAAK,YAAY,CAAC;QAClB,KAAK,gBAAgB,CAAC;QACtB,KAAK,kBAAkB,CAAC;QACxB,KAAK,YAAY,CAAC;QAClB,KAAK,eAAe,CAAC;QACrB,KAAK,qBAAqB;YACxB,OAAO,GAAG,CAAC;QACb,KAAK,WAAW;YACd,OAAO,GAAG,CAAC;QACb,KAAK,YAAY,CAAC;QAClB,KAAK,gBAAgB;YACnB,OAAO,GAAG,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,GAAG,CAAC;QACb,KAAK,qBAAqB;YACxB,OAAO,GAAG,CAAC;QACb,KAAK,gBAAgB,CAAC;QACtB,KAAK,eAAe,CAAC;QACrB;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,uBAAuB,CAAC,UAAkB;IACjD,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,kBAAkB,CAAC;IAClD,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,sBAAsB,CAAC;IACtD,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,qBAAqB,CAAC;IACrD,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,WAAW,CAAC;IAC3C,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,WAAW,CAAC;IAC3C,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,YAAY,CAAC;IAC5C,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,qBAAqB,CAAC;IACrD,IAAI,UAAU,IAAI,GAAG;QAAE,OAAO,cAAc,CAAC;IAC7C,OAAO,iBAAiB,CAAC;AAC3B,CAAC;AASD;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,EAAK,EACL,UAA+B,EAAE;IAEjC,OAAO,CAAC,KAAK,EAAE,GAAG,IAAmB,EAAE,EAAE;QACvC,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,SAAS,GAAG,oBAAoB,CACpC,KAAiD,EACjD,SAAS,EACT,OAAO,CACR,CAAC;YACF,MAAM,cAAc,GAAG,IAAI,KAAK,CAC9B,SAAS,CAAC,OAAO,CACM,CAAC;YAC1B,cAAc,CAAC,IAAI,GAAG,gBAAgB,CAAC;YACvC,cAAc,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;YACjD,cAAc,CAAC,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;YACrC,cAAc,CAAC,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC;YACrD,MAAM,cAAc,CAAC;QACvB,CAAC;IACH,CAAC,CAAM,CAAC;AACV,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACxD,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,KAA+C;IAE/C,MAAM,SAAS,GAAG,aAAa,CAC7B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;IACF,MAAM,WAAW,GAAG,kBAAkB,CACpC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CACvD,CAAC;IAEF,OAAO,WAAW,CAAC,CAAC,CAAC,GAAG,SAAS,KAAK,WAAW,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED,eAAe;IACb,oBAAoB;IACpB,oBAAoB;IACpB,qBAAqB;IACrB,qBAAqB;IACrB,eAAe;CAChB,CAAC"}

package/dist/utils/error-utilities.d.ts

@@ -0,0 +1,189 @@
+/**
+ * Common error handling utility functions to reduce code duplication
+ * These utilities provide consistent error handling patterns across the codebase
+ */
+import { AxiosError } from 'axios';
+import { AttioApiError } from './error-handler.js';
+/**
+ * Safely gets the error message from an unknown error type
+ *
+ * @param error - The error of unknown type
+ * @param fallbackMessage - Optional fallback message if error cannot be converted to string
+ * @returns A string error message
+ *
+ * @example
+ * try {
+ *   // some operation
+ * } catch (error: unknown) {
+ *   const message = getErrorMessage(error);
+ *   console.error('Operation failed:', message);
+ * }
+ */
+export declare function getErrorMessage(error: unknown, fallbackMessage?: string): string;
+/**
+ * Wraps an error with additional context
+ *
+ * @param error - The original error
+ * @param context - Additional context to add to the error message
+ * @returns A new Error with the enhanced message
+ *
+ * @example
+ * try {
+ *   // some operation
+ * } catch (error: unknown) {
+ *   throw wrapError(error, 'Failed to fetch user data');
+ * }
+ */
+export declare function wrapError(error: unknown, context: string): Error;
+/**
+ * Handles an error by wrapping it with context and optionally logging it
+ *
+ * @param error - The error to handle
+ * @param context - Context message for the error
+ * @param options - Optional configuration
+ * @returns The wrapped error
+ *
+ * @example
+ * try {
+ *   // some operation
+ * } catch (error: unknown) {
+ *   throw handleError(error, 'Failed to process company data', { log: true });
+ * }
+ */
+export declare function handleError(error: unknown, context: string, options?: {
+    log?: boolean;
+    logLevel?: 'error' | 'warn' | 'debug';
+    includeStack?: boolean;
+}): Error;
+/**
+ * Type guard to check if an error is an Axios error
+ *
+ * @param error - The error to check
+ * @returns True if the error is an AxiosError
+ */
+export declare function isAxiosError(error: unknown): error is AxiosError;
+/**
+ * Handles Axios errors with consistent formatting
+ *
+ * @param error - The error to handle
+ * @param operation - Description of the operation that failed
+ * @returns A formatted error with Axios response details
+ *
+ * @example
+ * try {
+ *   const response = await axios.get(url);
+ * } catch (error: unknown) {
+ *   throw handleAxiosError(error, 'fetch company attributes');
+ * }
+ */
+export declare function handleAxiosError(error: unknown, operation: string): Error;
+/**
+ * Creates a standardized error result for API operations
+ * This is a wrapper around createErrorResult with common defaults
+ *
+ * @param error - The error that occurred
+ * @param operation - The operation that was being performed
+ * @param resource - The resource type being operated on
+ * @param additionalDetails - Additional details to include in the error
+ * @returns Formatted error result for MCP response
+ *
+ * @example
+ * try {
+ *   // API operation
+ * } catch (error: unknown) {
+ *   return createStandardErrorResult(error, 'create', 'company', { companyId: '123' });
+ * }
+ */
+export declare function createStandardErrorResult(error: unknown, operation: string, resource: string, additionalDetails?: Record<string, unknown>): unknown;
+/**
+ * Logs an error with context and returns it
+ * Useful for debugging while maintaining error flow
+ *
+ * @param error - The error to log
+ * @param context - Context for the error
+ * @param details - Additional details to log
+ * @returns The original error (for chaining)
+ *
+ * @example
+ * try {
+ *   // some operation
+ * } catch (error: unknown) {
+ *   throw logAndReturn(error, 'CompanyService.create', { companyId });
+ * }
+ */
+export declare function logAndReturn(error: unknown, context: string, details?: Record<string, unknown>): unknown;
+/**
+ * Ensures an error is an Error instance
+ * Useful when you need to guarantee an Error object
+ *
+ * @param error - The error to normalize
+ * @param fallbackMessage - Message to use if error cannot be converted
+ * @returns An Error instance
+ *
+ * @example
+ * try {
+ *   // some operation
+ * } catch (error: unknown) {
+ *   const errorObj = ensureError(error);
+ *   // Now errorObj is guaranteed to be an Error instance
+ * }
+ */
+export declare function ensureError(error: unknown, fallbackMessage?: string): Error;
+/**
+ * Safely executes an async operation with error handling
+ *
+ * @param operation - The async operation to execute
+ * @param errorHandler - Function to handle errors
+ * @returns The result of the operation or the error handler
+ *
+ * @example
+ * const result = await safeAsync(
+ *   () => fetchCompanyData(id),
+ *   (error) => {
+ *     console.error('Failed to fetch:', error);
+ *     return defaultCompanyData;
+ *   }
+ * );
+ */
+export declare function safeAsync<T, E = T>(operation: () => Promise<T>, errorHandler: (error: unknown) => E | Promise<E>): Promise<T | E>;
+/**
+ * Type guard to check if an error is an AttioApiError
+ *
+ * @param error - The error to check
+ * @returns True if the error is an AttioApiError
+ */
+export declare function isAttioApiError(error: unknown): error is AttioApiError;
+/**
+ * Extracts status code from various error types
+ *
+ * @param error - The error to extract status from
+ * @returns The HTTP status code or undefined
+ *
+ * @example
+ * try {
+ *   // API call
+ * } catch (error: unknown) {
+ *   const status = getErrorStatus(error);
+ *   if (status === 404) {
+ *     // Handle not found
+ *   }
+ * }
+ */
+export declare function getErrorStatus(error: unknown): number | undefined;
+/**
+ * Determines if an error is retryable based on its type and status
+ *
+ * @param error - The error to check
+ * @returns True if the error is potentially retryable
+ *
+ * @example
+ * try {
+ *   // API call
+ * } catch (error: unknown) {
+ *   if (isRetryableError(error)) {
+ *     // Implement retry logic
+ *   }
+ * }
+ */
+export declare function isRetryableError(error: unknown): boolean;
+//# sourceMappingURL=error-utilities.d.ts.map

package/dist/utils/error-utilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-utilities.d.ts","sourceRoot":"","sources":["../../src/utils/error-utilities.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAc,EAAE,UAAU,EAAE,MAAM,OAAO,CAAC;AAC1C,OAAO,EAAqB,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAKtE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,OAAO,EACd,eAAe,SAA8B,GAC5C,MAAM,CAWR;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,KAAK,CAGhE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;IACR,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,OAAO,CAAC;IACtC,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,GACA,KAAK,CAyBP;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,UAAU,CAEhE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,GAAG,KAAK,CAsBzE;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,WAY5C;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,YAAY,CAC1B,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,OAAO,CAUT;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,OAAO,EACd,eAAe,SAA8B,GAC5C,KAAK,CAKP;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,EACtC,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAC/C,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAMhB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAEtE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAyBjE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CA0BxD"}