@iflow-mcp/attio-mcp 1.3.6

package/dist/utils/secure-error-handler.js

@@ -0,0 +1,478 @@
+/**
+ * Secure error handler for API operations
+ *
+ * This module provides centralized error handling with automatic sanitization
+ * for all API operations to prevent information disclosure.
+ */
+import { sanitizeErrorMessage, createSanitizedError, } from '../utils/error-sanitizer.js';
+import { error as logError, OperationType } from '../utils/logger.js';
+import { getErrorMessage, ensureError, getErrorStatus, } from '../utils/error-utilities.js';
+import { sanitizeMcpResponse } from '../utils/json-serializer.js';
+const DEFAULT_STATUS_CODE = 500;
+/**
+ * Type guard to check if an error has a status property
+ */
+const isStatusError = (error) => typeof error === 'object' &&
+    error !== null &&
+    'status' in error &&
+    typeof error.status === 'number';
+/**
+ * Type guard to check if an error has a statusCode property
+ */
+const isStatusCodeError = (error) => typeof error === 'object' &&
+    error !== null &&
+    'statusCode' in error &&
+    typeof error.statusCode === 'number';
+/**
+ * Type guard to check if an error is Axios-like
+ */
+const isAxiosLike = (error) => typeof error === 'object' &&
+    error !== null &&
+    'message' in error &&
+    (('response' in error &&
+        typeof error.response === 'object') ||
+        'request' in error);
+const resolveStatusCode = (error, fallback = DEFAULT_STATUS_CODE) => {
+    // Utilities know how to extract statuses from Axios, Attio API, and our wrapped
+    // StructuredHttpError instances. Always check them first to respect that
+    // centralised logic before falling back to heuristic property inspection.
+    const statusFromUtilities = getErrorStatus(error);
+    if (typeof statusFromUtilities === 'number') {
+        return statusFromUtilities;
+    }
+    // Use type guards for better type safety
+    if (isStatusCodeError(error)) {
+        return error.statusCode;
+    }
+    if (isStatusError(error)) {
+        return error.status;
+    }
+    // Check for Axios-like response structure
+    if (isAxiosLike(error) && error.response) {
+        return error.response.status;
+    }
+    return fallback;
+};
+const mapStatusToErrorType = (statusCode) => {
+    if (statusCode === 400)
+        return 'validation_error';
+    if (statusCode === 401)
+        return 'authentication_error';
+    if (statusCode === 403)
+        return 'authorization_error';
+    if (statusCode === 404)
+        return 'not_found';
+    if (statusCode === 429)
+        return 'rate_limit';
+    if (statusCode >= 500)
+        return 'server_error';
+    return 'internal_error';
+};
+const ERROR_SUGGESTIONS = {
+    authentication_error: 'Verify the configured Attio credentials and retry.',
+    authorization_error: 'Confirm the workspace permissions allow this tool operation.',
+    validation_error: 'Review the tool arguments for missing or invalid fields.',
+    not_found: 'Check the provided identifiers or search filters and try again.',
+    rate_limit: 'Wait a few seconds before retrying the request.',
+    server_error: 'Retry shortly. If the problem persists please contact support with the reference ID.',
+    internal_error: 'Retry the request. Contact support with the reference ID if it continues.',
+    retry_exhausted: 'The upstream service kept failing. Retry later or reach out to support with the reference ID.',
+    batch_error: 'Some items failed in the batch. Inspect the provided reference ID for details.',
+    sanitized_error: 'Retry the request. Contact support with the reference ID if it recurs.',
+};
+const DEFAULT_SUGGESTION = 'Retry the request later. If it continues to fail contact support with the reference ID.';
+/**
+ * Enhanced error class with context and sanitization
+ */
+export class SecureApiError extends Error {
+    statusCode;
+    errorType;
+    context;
+    originalError;
+    safeMetadata;
+    constructor(message, statusCode, errorType, context, originalError) {
+        // Always use sanitized message
+        const sanitized = sanitizeErrorMessage(message, {
+            includeContext: true,
+            module: context.module,
+            operation: context.operation,
+        });
+        super(sanitized);
+        this.name = 'SecureApiError';
+        this.statusCode = statusCode;
+        this.errorType = errorType;
+        this.context = context;
+        this.originalError = originalError;
+        // Extract safe metadata that can be exposed
+        this.safeMetadata = {
+            operation: context.operation,
+            resourceType: context.resourceType,
+            timestamp: new Date().toISOString(),
+            ...(context.correlationId
+                ? { correlationId: context.correlationId }
+                : {}),
+            ...(context.requestId ? { requestId: context.requestId } : {}),
+        };
+        // Maintain proper prototype chain
+        Object.setPrototypeOf(this, SecureApiError.prototype);
+    }
+    /**
+     * Get a safe JSON representation for API responses
+     */
+    toJSON() {
+        return {
+            error: {
+                message: this.message,
+                type: this.errorType,
+                statusCode: this.statusCode,
+                metadata: this.safeMetadata,
+            },
+        };
+    }
+}
+/**
+ * Wrap an async function with secure error handling
+ *
+ * @param fn - The async function to wrap
+ * @param context - Error context for logging and sanitization
+ * @returns Wrapped function with automatic error sanitization
+ *
+ * @example
+ * ```typescript
+ * const context = { operation: 'fetchData', module: 'DataService' };
+ * const safeFetch = withSecureErrorHandling(
+ *   async (id: string) => await api.getData(id),
+ *   context
+ * );
+ *
+ * try {
+ *   const result = await safeFetch('user-123');
+ * } catch (error) {
+ *   // error is now a SecureApiError with sanitized message
+ * }
+ * ```
+ */
+export function withSecureErrorHandling(fn, context) {
+    return async (...args) => {
+        try {
+            return await fn(...args);
+        }
+        catch (error) {
+            // Log the full error internally
+            logError(context.module, `Operation failed: ${context.operation}`, error, context, context.operation, OperationType.API_CALL);
+            // Determine status code
+            const statusCode = resolveStatusCode(error) ?? DEFAULT_STATUS_CODE;
+            const errorType = mapStatusToErrorType(statusCode);
+            // Create secure error with sanitized message
+            throw new SecureApiError(getErrorMessage(error, 'An unexpected error occurred'), statusCode, errorType, context, ensureError(error));
+        }
+    };
+}
+/**
+ * Create a standardized secure error response
+ *
+ * @param error - The error to convert
+ * @param context - Additional context
+ * @returns Secure error response
+ *
+ * @example
+ * ```typescript
+ * try {
+ *   await api.createUser(userData);
+ * } catch (error) {
+ *   const response = createSecureErrorResponse(error, {
+ *     operation: 'createUser',
+ *     module: 'UserService'
+ *   });
+ *   return response; // { success: false, error: { message, type, statusCode } }
+ * }
+ * ```
+ */
+export function createSecureErrorResponse(error, context = {}) {
+    const resolveSuggestion = (type) => context.suggestion ?? ERROR_SUGGESTIONS[type] ?? DEFAULT_SUGGESTION;
+    // If it's already a SecureApiError, use its safe data
+    if (error instanceof SecureApiError) {
+        const correlationId = context.correlationId ?? error.context.correlationId;
+        const requestId = context.requestId ?? error.context.requestId;
+        const errorType = context.errorType ?? error.errorType;
+        return {
+            success: false,
+            error: {
+                message: error.message,
+                type: errorType,
+                statusCode: error.statusCode,
+                suggestion: resolveSuggestion(errorType),
+                ...(correlationId ? { correlationId } : {}),
+                ...(requestId ? { requestId } : {}),
+            },
+        };
+    }
+    // Otherwise, sanitize the error
+    const sanitized = createSanitizedError(error, resolveStatusCode(error, undefined), {
+        module: context.module || 'unknown',
+        operation: context.operation || 'unknown',
+        includeContext: true,
+        safeMetadata: {
+            ...(context.resourceType ? { resourceType: context.resourceType } : {}),
+            ...(context.correlationId
+                ? { correlationId: context.correlationId }
+                : {}),
+        },
+    });
+    const correlationId = context.correlationId;
+    const requestId = context.requestId;
+    const errorType = context.errorType ?? sanitized.type;
+    return {
+        success: false,
+        error: {
+            message: sanitized.message,
+            type: errorType,
+            statusCode: sanitized.statusCode,
+            suggestion: resolveSuggestion(errorType),
+            ...(correlationId ? { correlationId } : {}),
+            ...(requestId ? { requestId } : {}),
+        },
+    };
+}
+export function createSecureToolErrorResult(error, options = {}) {
+    const { correlationId, requestId, fallbackMessage = 'Tool execution failed', includeReferenceInMessage = true, clientMessage, ...context } = options;
+    const secureResponse = createSecureErrorResponse(error, {
+        ...context,
+        correlationId,
+        requestId,
+    });
+    const baseMessage = clientMessage ?? secureResponse.error.message ?? fallbackMessage;
+    const referenceLine = includeReferenceInMessage && correlationId
+        ? `\nReference ID: ${correlationId}`
+        : '';
+    const guidanceLine = secureResponse.error.suggestion
+        ? `\nNext steps: ${secureResponse.error.suggestion}`
+        : '';
+    const errorPayload = {
+        type: secureResponse.error.type,
+        message: baseMessage,
+    };
+    if (secureResponse.error.statusCode) {
+        errorPayload.code = secureResponse.error.statusCode;
+    }
+    if (secureResponse.error.suggestion) {
+        errorPayload.suggestion = secureResponse.error.suggestion;
+    }
+    if (correlationId) {
+        errorPayload.correlationId = correlationId;
+    }
+    if (requestId) {
+        errorPayload.requestId = requestId;
+    }
+    const contentMessage = `${baseMessage}${referenceLine}${guidanceLine}`.trim();
+    const result = {
+        content: [
+            {
+                type: 'text',
+                text: contentMessage,
+            },
+        ],
+        isError: true,
+        error: errorPayload,
+    };
+    return sanitizeMcpResponse(result);
+}
+/**
+ * Batch error handler for multiple operations
+ */
+export class BatchErrorHandler {
+    errors = [];
+    context;
+    constructor(context) {
+        this.context = context;
+    }
+    /**
+     * Add an error for a specific batch item
+     */
+    addError(index, error) {
+        const fallbackMessage = getErrorMessage(error, 'Batch operation failed');
+        const statusCode = resolveStatusCode(error) ?? DEFAULT_STATUS_CODE;
+        const originalError = error instanceof Error ? error : undefined;
+        const secureError = error instanceof SecureApiError
+            ? error
+            : new SecureApiError(fallbackMessage, statusCode, 'batch_error', { ...this.context, batchIndex: index }, originalError);
+        this.errors.push({ index, error: secureError });
+    }
+    /**
+     * Check if there are any errors
+     */
+    hasErrors() {
+        return this.errors.length > 0;
+    }
+    /**
+     * Get a summary of batch errors
+     */
+    getSummary() {
+        const errorsByType = {};
+        for (const { error } of this.errors) {
+            errorsByType[error.errorType] = (errorsByType[error.errorType] || 0) + 1;
+        }
+        return {
+            totalErrors: this.errors.length,
+            errorsByType,
+        };
+    }
+    /**
+     * Get safe error details for response
+     */
+    getErrorDetails() {
+        return this.errors.map(({ index, error }) => ({
+            index,
+            error: error.message,
+            type: error.errorType,
+        }));
+    }
+}
+const defaultShouldRetry = (error) => {
+    const statusCode = resolveStatusCode(error) ?? DEFAULT_STATUS_CODE;
+    return statusCode >= 500 || statusCode === 429;
+};
+/**
+ * Retry an operation with exponential backoff and secure error handling
+ *
+ * @param fn - The async function to retry
+ * @param context - Error context for logging
+ * @param options - Retry configuration options
+ * @returns Promise that resolves with the function result or throws SecureApiError
+ *
+ * @example
+ * ```typescript
+ * const context = { operation: 'apiCall', module: 'ApiService' };
+ * const result = await retryWithSecureErrors(
+ *   () => api.unstableEndpoint(),
+ *   context,
+ *   { maxRetries: 3, initialDelay: 1000 }
+ * );
+ * ```
+ */
+export async function retryWithSecureErrors(fn, context, options = {}) {
+    const { maxRetries = 3, initialDelay = 1000, maxDelay = 10000, shouldRetry = defaultShouldRetry, } = options;
+    let lastError;
+    let delay = initialDelay;
+    for (let attempt = 0; attempt <= maxRetries; attempt++) {
+        try {
+            return await fn();
+        }
+        catch (error) {
+            lastError = error;
+            // Check if we should retry
+            if (attempt < maxRetries && shouldRetry(error)) {
+                // Log retry attempt using structured logging
+                logError('retry', `Retry attempt ${attempt + 1}/${maxRetries} after ${delay}ms`, { attempt: attempt + 1, maxRetries, delay }, undefined, 'retryWithSecureErrors', OperationType.API_CALL);
+                // Wait before retrying
+                await new Promise((resolve) => setTimeout(resolve, delay));
+                // Exponential backoff
+                delay = Math.min(delay * 2, maxDelay);
+            }
+            else {
+                // No more retries, throw secure error
+                const message = getErrorMessage(lastError, 'Operation failed after retries');
+                const statusCode = resolveStatusCode(lastError) ?? DEFAULT_STATUS_CODE;
+                throw new SecureApiError(message, statusCode, 'retry_exhausted', { ...context, attempts: attempt + 1 }, lastError instanceof Error ? lastError : undefined);
+            }
+        }
+    }
+    // This should never be reached, but just in case
+    throw new SecureApiError(getErrorMessage(lastError, 'Maximum retries exceeded'), resolveStatusCode(lastError) ?? DEFAULT_STATUS_CODE, 'retry_exhausted', { ...context, attempts: maxRetries + 1 }, lastError instanceof Error ? lastError : undefined);
+}
+/**
+ * Circuit breaker for preventing cascading failures
+ *
+ * @example
+ * ```typescript
+ * const context = { operation: 'externalApi', module: 'ApiService' };
+ * const circuitBreaker = new SecureCircuitBreaker(context, {
+ *   failureThreshold: 5,
+ *   resetTimeout: 60000
+ * });
+ *
+ * try {
+ *   const result = await circuitBreaker.execute(() => api.call());
+ * } catch (error) {
+ *   // Circuit breaker may be open, preventing cascading failures
+ * }
+ * ```
+ */
+export class SecureCircuitBreaker {
+    context;
+    options;
+    failures = 0;
+    lastFailureTime = 0;
+    state = 'closed';
+    constructor(context, options = {}) {
+        this.context = context;
+        this.options = options;
+        this.options.failureThreshold = options.failureThreshold || 5;
+        this.options.resetTimeout = options.resetTimeout || 60000;
+        this.options.halfOpenRequests = options.halfOpenRequests || 1;
+    }
+    /**
+     * Execute a function with circuit breaker protection
+     */
+    async execute(fn) {
+        // Check if circuit is open
+        if (this.state === 'open') {
+            const timeSinceLastFailure = Date.now() - this.lastFailureTime;
+            if (timeSinceLastFailure < this.options.resetTimeout) {
+                throw new SecureApiError('Service temporarily unavailable. Please try again later.', 503, 'circuit_open', this.context);
+            }
+            // Try half-open state
+            this.state = 'half-open';
+        }
+        try {
+            const result = await fn();
+            // Success - reset failures
+            if (this.state === 'half-open') {
+                this.state = 'closed';
+            }
+            this.failures = 0;
+            return result;
+        }
+        catch (error) {
+            this.failures++;
+            this.lastFailureTime = Date.now();
+            // Check if we should open the circuit
+            if (this.failures >= this.options.failureThreshold) {
+                this.state = 'open';
+                throw new SecureApiError('Service experiencing issues. Circuit breaker activated.', 503, 'circuit_breaker_activated', { ...this.context, failures: this.failures }, error instanceof Error ? error : undefined);
+            }
+            // Re-throw the error (sanitized)
+            throw new SecureApiError(getErrorMessage(error, 'Operation failed'), resolveStatusCode(error) ?? DEFAULT_STATUS_CODE, 'circuit_breaker_error', this.context, error instanceof Error ? error : undefined);
+        }
+    }
+    /**
+     * Get circuit breaker status
+     */
+    getStatus() {
+        return {
+            state: this.state,
+            failures: this.failures,
+            lastFailure: this.lastFailureTime
+                ? new Date(this.lastFailureTime)
+                : undefined,
+        };
+    }
+    /**
+     * Manually reset the circuit breaker
+     */
+    reset() {
+        this.state = 'closed';
+        this.failures = 0;
+        this.lastFailureTime = 0;
+    }
+}
+export default {
+    SecureApiError,
+    withSecureErrorHandling,
+    createSecureErrorResponse,
+    createSecureToolErrorResult,
+    BatchErrorHandler,
+    retryWithSecureErrors,
+    SecureCircuitBreaker,
+};
+//# sourceMappingURL=secure-error-handler.js.map

package/dist/utils/secure-error-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-error-handler.js","sourceRoot":"","sources":["../../src/utils/secure-error-handler.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EACL,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,KAAK,IAAI,QAAQ,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACrE,OAAO,EACL,eAAe,EACf,WAAW,EACX,cAAc,GACf,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAGjE,MAAM,mBAAmB,GAAG,GAAG,CAAC;AA6BhC;;GAEG;AACH,MAAM,aAAa,GAAG,CAAC,KAAc,EAA4B,EAAE,CACjE,OAAO,KAAK,KAAK,QAAQ;IACzB,KAAK,KAAK,IAAI;IACd,QAAQ,IAAI,KAAK;IACjB,OAAQ,KAAiC,CAAC,MAAM,KAAK,QAAQ,CAAC;AAEhE;;GAEG;AACH,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAAgC,EAAE,CACzE,OAAO,KAAK,KAAK,QAAQ;IACzB,KAAK,KAAK,IAAI;IACd,YAAY,IAAI,KAAK;IACrB,OAAQ,KAAiC,CAAC,UAAU,KAAK,QAAQ,CAAC;AAEpE;;GAEG;AACH,MAAM,WAAW,GAAG,CAAC,KAAc,EAA2B,EAAE,CAC9D,OAAO,KAAK,KAAK,QAAQ;IACzB,KAAK,KAAK,IAAI;IACd,SAAS,IAAI,KAAK;IAClB,CAAC,CAAC,UAAU,IAAI,KAAK;QACnB,OAAQ,KAAiC,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAChE,SAAS,IAAI,KAAK,CAAC,CAAC;AAExB,MAAM,iBAAiB,GAAG,CACxB,KAAc,EACd,WAA+B,mBAAmB,EAC9B,EAAE;IACtB,gFAAgF;IAChF,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,mBAAmB,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,OAAO,mBAAmB,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IAED,yCAAyC;IACzC,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,UAAU,CAAC;IAC1B,CAAC;IAED,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,MAAM,CAAC;IACtB,CAAC;IAED,0CAA0C;IAC1C,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC/B,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,UAAkB,EAAU,EAAE;IAC1D,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,kBAAkB,CAAC;IAClD,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,sBAAsB,CAAC;IACtD,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,qBAAqB,CAAC;IACrD,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,WAAW,CAAC;IAC3C,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,YAAY,CAAC;IAC5C,IAAI,UAAU,IAAI,GAAG;QAAE,OAAO,cAAc,CAAC;IAC7C,OAAO,gBAAgB,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAA2B;IAChD,oBAAoB,EAAE,oDAAoD;IAC1E,mBAAmB,EACjB,8DAA8D;IAChE,gBAAgB,EAAE,0DAA0D;IAC5E,SAAS,EAAE,iEAAiE;IAC5E,UAAU,EAAE,iDAAiD;IAC7D,YAAY,EACV,sFAAsF;IACxF,cAAc,EACZ,2EAA2E;IAC7E,eAAe,EACb,+FAA+F;IACjG,WAAW,EACT,gFAAgF;IAClF,eAAe,EACb,wEAAwE;CAC3E,CAAC;AAEF,MAAM,kBAAkB,GACtB,yFAAyF,CAAC;AAgB5F;;GAEG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvB,UAAU,CAAS;IACnB,SAAS,CAAS;IAClB,OAAO,CAAe;IACtB,aAAa,CAAS;IACtB,YAAY,CAA2B;IAEvD,YACE,OAAe,EACf,UAAkB,EAClB,SAAiB,EACjB,OAAqB,EACrB,aAAqB;QAErB,+BAA+B;QAC/B,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,EAAE;YAC9C,cAAc,EAAE,IAAI;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;QAEH,KAAK,CAAC,SAAS,CAAC,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;QAC7B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QAEnC,4CAA4C;QAC5C,IAAI,CAAC,YAAY,GAAG;YAClB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,GAAG,CAAC,OAAO,CAAC,aAAa;gBACvB,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE;gBAC1C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC/D,CAAC;QAEF,kCAAkC;QAClC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC;IAED;;OAEG;IACH,MAAM;QACJ,OAAO;YACL,KAAK,EAAE;gBACL,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS;gBACpB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,QAAQ,EAAE,IAAI,CAAC,YAAY;aAC5B;SACF,CAAC;IACJ,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,uBAAuB,CAIrC,EAAwC,EACxC,OAAqB;IAErB,OAAO,KAAK,EAAE,GAAG,IAAW,EAAoB,EAAE;QAChD,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,gCAAgC;YAChC,QAAQ,CACN,OAAO,CAAC,MAAM,EACd,qBAAqB,OAAO,CAAC,SAAS,EAAE,EACxC,KAAK,EACL,OAAO,EACP,OAAO,CAAC,SAAS,EACjB,aAAa,CAAC,QAAQ,CACvB,CAAC;YAEF,wBAAwB;YACxB,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,mBAAmB,CAAC;YACnE,MAAM,SAAS,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;YAEnD,6CAA6C;YAC7C,MAAM,IAAI,cAAc,CACtB,eAAe,CAAC,KAAK,EAAE,8BAA8B,CAAC,EACtD,UAAU,EACV,SAAS,EACT,OAAO,EACP,WAAW,CAAC,KAAK,CAAC,CACnB,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AA4BD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAAc,EACd,UAAsC,EAAE;IAExC,MAAM,iBAAiB,GAAG,CAAC,IAAY,EAAU,EAAE,CACjD,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC;IAEtE,sDAAsD;IACtD,IAAI,KAAK,YAAY,cAAc,EAAE,CAAC;QACpC,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC;QAC3E,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAC/D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC;QAEvD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,KAAK,EAAE;gBACL,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,IAAI,EAAE,SAAS;gBACf,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,UAAU,EAAE,iBAAiB,CAAC,SAAS,CAAC;gBACxC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpC;SACF,CAAC;IACJ,CAAC;IAED,gCAAgC;IAChC,MAAM,SAAS,GAAG,oBAAoB,CACpC,KAAiD,EACjD,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,EACnC;QACE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,SAAS;QACnC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,SAAS;QACzC,cAAc,EAAE,IAAI;QACpB,YAAY,EAAE;YACZ,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,OAAO,CAAC,aAAa;gBACvB,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE;gBAC1C,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CACF,CAAC;IAEF,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IACpC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC;IAEtD,OAAO;QACL,OAAO,EAAE,KAAK;QACd,KAAK,EAAE;YACL,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,IAAI,EAAE,SAAS;YACf,UAAU,EAAE,SAAS,CAAC,UAAU;YAChC,UAAU,EAAE,iBAAiB,CAAC,SAAS,CAAC;YACxC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAc,EACd,UAAkC,EAAE;IAEpC,MAAM,EACJ,aAAa,EACb,SAAS,EACT,eAAe,GAAG,uBAAuB,EACzC,yBAAyB,GAAG,IAAI,EAChC,aAAa,EACb,GAAG,OAAO,EACX,GAAG,OAAO,CAAC;IAEZ,MAAM,cAAc,GAAG,yBAAyB,CAAC,KAAK,EAAE;QACtD,GAAG,OAAO;QACV,aAAa;QACb,SAAS;KACV,CAAC,CAAC;IAEH,MAAM,WAAW,GACf,aAAa,IAAI,cAAc,CAAC,KAAK,CAAC,OAAO,IAAI,eAAe,CAAC;IACnE,MAAM,aAAa,GACjB,yBAAyB,IAAI,aAAa;QACxC,CAAC,CAAC,mBAAmB,aAAa,EAAE;QACpC,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU;QAClD,CAAC,CAAC,iBAAiB,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE;QACpD,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,YAAY,GAA4B;QAC5C,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC,IAAI;QAC/B,OAAO,EAAE,WAAW;KACrB,CAAC;IAEF,IAAI,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACpC,YAAY,CAAC,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC;IACtD,CAAC;IAED,IAAI,cAAc,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QACpC,YAAY,CAAC,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC;IAC5D,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,YAAY,CAAC,aAAa,GAAG,aAAa,CAAC;IAC7C,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,YAAY,CAAC,SAAS,GAAG,SAAS,CAAC;IACrC,CAAC;IAED,MAAM,cAAc,GAAG,GAAG,WAAW,GAAG,aAAa,GAAG,YAAY,EAAE,CAAC,IAAI,EAAE,CAAC;IAE9E,MAAM,MAAM,GAAmB;QAC7B,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,cAAc;aACrB;SACF;QACD,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,YAAuC;KAC/C,CAAC;IAEF,OAAO,mBAAmB,CAAC,MAAM,CAAmB,CAAC;AACvD,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,iBAAiB;IACpB,MAAM,GAAoD,EAAE,CAAC;IAC7D,OAAO,CAAe;IAE9B,YAAY,OAAqB;QAC/B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAa,EAAE,KAAc;QACpC,MAAM,eAAe,GAAG,eAAe,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;QACzE,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,mBAAmB,CAAC;QACnE,MAAM,aAAa,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAEjE,MAAM,WAAW,GACf,KAAK,YAAY,cAAc;YAC7B,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,cAAc,CAChB,eAAe,EACf,UAAU,EACV,aAAa,EACb,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,EACtC,aAAa,CACd,CAAC;QAER,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,UAAU;QACR,MAAM,YAAY,GAA2B,EAAE,CAAC;QAEhD,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACpC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC/B,YAAY;SACb,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5C,KAAK;YACL,KAAK,EAAE,KAAK,CAAC,OAAO;YACpB,IAAI,EAAE,KAAK,CAAC,SAAS;SACtB,CAAC,CAAC,CAAC;IACN,CAAC;CACF;AAiBD,MAAM,kBAAkB,GAAkB,CAAC,KAAK,EAAE,EAAE;IAClD,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,mBAAmB,CAAC;IACnE,OAAO,UAAU,IAAI,GAAG,IAAI,UAAU,KAAK,GAAG,CAAC;AACjD,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,EAAoB,EACpB,OAAqB,EACrB,UAAwB,EAAE;IAE1B,MAAM,EACJ,UAAU,GAAG,CAAC,EACd,YAAY,GAAG,IAAI,EACnB,QAAQ,GAAG,KAAK,EAChB,WAAW,GAAG,kBAAkB,GACjC,GAAG,OAAO,CAAC;IAEZ,IAAI,SAAkB,CAAC;IACvB,IAAI,KAAK,GAAG,YAAY,CAAC;IAEzB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,SAAS,GAAG,KAAK,CAAC;YAElB,2BAA2B;YAC3B,IAAI,OAAO,GAAG,UAAU,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/C,6CAA6C;gBAC7C,QAAQ,CACN,OAAO,EACP,iBAAiB,OAAO,GAAG,CAAC,IAAI,UAAU,UAAU,KAAK,IAAI,EAC7D,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,EAC3C,SAAS,EACT,uBAAuB,EACvB,aAAa,CAAC,QAAQ,CACvB,CAAC;gBAEF,uBAAuB;gBACvB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;gBAE3D,sBAAsB;gBACtB,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACN,sCAAsC;gBACtC,MAAM,OAAO,GAAG,eAAe,CAC7B,SAAS,EACT,gCAAgC,CACjC,CAAC;gBACF,MAAM,UAAU,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,mBAAmB,CAAC;gBAEvE,MAAM,IAAI,cAAc,CACtB,OAAO,EACP,UAAU,EACV,iBAAiB,EACjB,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,GAAG,CAAC,EAAE,EACrC,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CACnD,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,iDAAiD;IACjD,MAAM,IAAI,cAAc,CACtB,eAAe,CAAC,SAAS,EAAE,0BAA0B,CAAC,EACtD,iBAAiB,CAAC,SAAS,CAAC,IAAI,mBAAmB,EACnD,iBAAiB,EACjB,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,UAAU,GAAG,CAAC,EAAE,EACxC,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CACnD,CAAC;AACJ,CAAC;AAyBD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,oBAAoB;IAMZ;IACA;IANX,QAAQ,GAAG,CAAC,CAAC;IACb,eAAe,GAAG,CAAC,CAAC;IACpB,KAAK,GAAwB,QAAQ,CAAC;IAE9C,YACmB,OAAqB,EACrB,UAAiC,EAAE;QADnC,YAAO,GAAP,OAAO,CAAc;QACrB,YAAO,GAAP,OAAO,CAA4B;QAEpD,IAAI,CAAC,OAAO,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,KAAK,CAAC;QAC1D,IAAI,CAAC,OAAO,CAAC,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,IAAI,CAAC,CAAC;IAChE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAI,EAAoB;QACnC,2BAA2B;QAC3B,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC1B,MAAM,oBAAoB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC;YAE/D,IAAI,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,YAAa,EAAE,CAAC;gBACtD,MAAM,IAAI,cAAc,CACtB,0DAA0D,EAC1D,GAAG,EACH,cAAc,EACd,IAAI,CAAC,OAAO,CACb,CAAC;YACJ,CAAC;YAED,sBAAsB;YACtB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;YAE1B,2BAA2B;YAC3B,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;gBAC/B,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;YACxB,CAAC;YACD,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;YAElB,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,CAAC,QAAQ,EAAE,CAAC;YAChB,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAElC,sCAAsC;YACtC,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,gBAAiB,EAAE,CAAC;gBACpD,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;gBAEpB,MAAM,IAAI,cAAc,CACtB,yDAAyD,EACzD,GAAG,EACH,2BAA2B,EAC3B,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,EAC5C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC3C,CAAC;YACJ,CAAC;YAED,iCAAiC;YACjC,MAAM,IAAI,cAAc,CACtB,eAAe,CAAC,KAAK,EAAE,kBAAkB,CAAC,EAC1C,iBAAiB,CAAC,KAAK,CAAC,IAAI,mBAAmB,EAC/C,uBAAuB,EACvB,IAAI,CAAC,OAAO,EACZ,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC3C,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,WAAW,EAAE,IAAI,CAAC,eAAe;gBAC/B,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;gBAChC,CAAC,CAAC,SAAS;SACd,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;QAClB,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC;IAC3B,CAAC;CACF;AAED,eAAe;IACb,cAAc;IACd,uBAAuB;IACvB,yBAAyB;IACzB,2BAA2B;IAC3B,iBAAiB;IACjB,qBAAqB;IACrB,oBAAoB;CACrB,CAAC"}

package/dist/utils/security-constants.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Security constants for protecting against various code injection attacks
+ */
+/**
+ * Keys that pose a prototype pollution risk and must be filtered
+ * These keys can modify the prototype chain and should never be used in object merging
+ */
+export declare const PROTOTYPE_POLLUTION_KEYS: readonly ["__proto__", "constructor", "prototype"];
+/**
+ * Characters that could be used for path traversal attacks
+ */
+export declare const PATH_TRAVERSAL_CHARS: readonly [".", "/", "\\"];
+/**
+ * Combined dangerous keys for object merging operations
+ * Includes both prototype pollution keys and path traversal prevention
+ */
+export declare const DANGEROUS_KEYS: readonly ["__proto__", "constructor", "prototype"];
+//# sourceMappingURL=security-constants.d.ts.map

package/dist/utils/security-constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-constants.d.ts","sourceRoot":"","sources":["../../src/utils/security-constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;GAGG;AACH,eAAO,MAAM,wBAAwB,oDAI3B,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,oBAAoB,2BAA4B,CAAC;AAE9D;;;GAGG;AACH,eAAO,MAAM,cAAc,oDAAyC,CAAC"}

package/dist/utils/security-constants.js

@@ -0,0 +1,22 @@
+/**
+ * Security constants for protecting against various code injection attacks
+ */
+/**
+ * Keys that pose a prototype pollution risk and must be filtered
+ * These keys can modify the prototype chain and should never be used in object merging
+ */
+export const PROTOTYPE_POLLUTION_KEYS = [
+    '__proto__',
+    'constructor',
+    'prototype',
+];
+/**
+ * Characters that could be used for path traversal attacks
+ */
+export const PATH_TRAVERSAL_CHARS = ['.', '/', '\\'];
+/**
+ * Combined dangerous keys for object merging operations
+ * Includes both prototype pollution keys and path traversal prevention
+ */
+export const DANGEROUS_KEYS = [...PROTOTYPE_POLLUTION_KEYS];
+//# sourceMappingURL=security-constants.js.map

package/dist/utils/security-constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-constants.js","sourceRoot":"","sources":["../../src/utils/security-constants.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,WAAW;IACX,aAAa;IACb,WAAW;CACH,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAU,CAAC;AAE9D;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAG,wBAAwB,CAAU,CAAC"}

package/dist/utils/task-debug.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Task debugging utilities
+ */
+import { OperationType } from './logger.js';
+export declare function taskDebugEnabled(): boolean;
+export declare function logTaskDebug(scope: string, message: string, details?: Record<string, unknown>, op?: OperationType): void;
+export declare function sanitizePayload<T = unknown>(value: T): T;
+export declare function inspectTaskRecordShape(record: any): Record<string, unknown>;
+//# sourceMappingURL=task-debug.d.ts.map

package/dist/utils/task-debug.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-debug.d.ts","sourceRoot":"","sources":["../../src/utils/task-debug.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAS,aAAa,EAAE,MAAM,aAAa,CAAC;AAEnD,wBAAgB,gBAAgB,IAAI,OAAO,CAG1C;AAED,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,EAAE,GAAE,aAA6C,GAChD,IAAI,CAUN;AAED,wBAAgB,eAAe,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAgCxD;AAGD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAe3E"}

package/dist/utils/task-debug.js

@@ -0,0 +1,72 @@
+/**
+ * Task debugging utilities
+ */
+import { debug, OperationType } from './logger.js';
+export function taskDebugEnabled() {
+    const v = (process.env.TASKS_DEBUG || '').toLowerCase();
+    return v === '1' || v === 'true' || process.env.E2E_MODE === 'true';
+}
+export function logTaskDebug(scope, message, details, op = OperationType.DATA_PROCESSING) {
+    if (!taskDebugEnabled())
+        return;
+    try {
+        debug(`tasks.${scope}`, message, details, scope, op);
+    }
+    catch {
+        // Fallback to console if logger fails for any reason
+        // Avoid throwing in debug paths
+        debug(`tasks.${scope}`, message, details || {}, scope, op);
+    }
+}
+export function sanitizePayload(value) {
+    const seen = new WeakSet();
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any -- Recursive data sanitization requires any for handling arbitrary nested structures
+    const redact = (v) => {
+        if (v === null || v === undefined)
+            return v;
+        if (typeof v === 'string') {
+            // Redact email-like strings
+            const emailRegex = /([a-zA-Z0-9._%+-]+)@([a-zA-Z0-9.-]+\.[a-zA-Z]{2,})/g;
+            let s = v.replace(emailRegex, '***@***');
+            // Truncate very long strings (e.g. content)
+            if (s.length > 250)
+                s = s.slice(0, 250) + '…';
+            return s;
+        }
+        if (typeof v !== 'object')
+            return v;
+        if (seen.has(v))
+            return '[Circular]';
+        seen.add(v);
+        if (Array.isArray(v))
+            return v.map(redact);
+        const out = {};
+        for (const [k, val] of Object.entries(v)) {
+            // Common sensitive keys
+            if (k.toLowerCase().includes('token') ||
+                k.toLowerCase().includes('api_key')) {
+                out[k] = '***';
+                continue;
+            }
+            out[k] = redact(val);
+        }
+        return out;
+    };
+    return redact(value);
+}
+// eslint-disable-next-line @typescript-eslint/no-explicit-any -- Task record structure varies widely, any needed for shape inspection
+export function inspectTaskRecordShape(record) {
+    const shape = {
+        hasId: !!record?.id,
+        idKeys: record?.id ? Object.keys(record.id) : [],
+        hasValues: !!record?.values,
+        valueKeys: record?.values ? Object.keys(record.values) : [],
+        topLevelAssignees: Array.isArray(record?.assignees) && record.assignees.length > 0,
+        firstTopAssignee: record?.assignees?.[0] || null,
+        valuesAssignee: Array.isArray(record?.values?.assignee) &&
+            record.values.assignee.length > 0,
+        firstValuesAssignee: record?.values?.assignee?.[0] || null,
+    };
+    return shape;
+}
+//# sourceMappingURL=task-debug.js.map

package/dist/utils/task-debug.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-debug.js","sourceRoot":"","sources":["../../src/utils/task-debug.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,UAAU,gBAAgB;IAC9B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACxD,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,KAAa,EACb,OAAe,EACf,OAAiC,EACjC,KAAoB,aAAa,CAAC,eAAe;IAEjD,IAAI,CAAC,gBAAgB,EAAE;QAAE,OAAO;IAChC,IAAI,CAAC;QACH,KAAK,CAAC,SAAS,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,qDAAqD;QACrD,gCAAgC;QAEhC,KAAK,CAAC,SAAS,KAAK,EAAE,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAc,KAAQ;IACnD,MAAM,IAAI,GAAG,IAAI,OAAO,EAAE,CAAC;IAC3B,mJAAmJ;IACnJ,MAAM,MAAM,GAAG,CAAC,CAAM,EAAO,EAAE;QAC7B,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,4BAA4B;YAC5B,MAAM,UAAU,GAAG,qDAAqD,CAAC;YACzE,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;YACzC,4CAA4C;YAC5C,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG;gBAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC;YAC9C,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,YAAY,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACZ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,wBAAwB;YACxB,IACE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACjC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EACnC,CAAC;gBACD,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;gBACf,SAAS;YACX,CAAC;YACD,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,sIAAsI;AACtI,MAAM,UAAU,sBAAsB,CAAC,MAAW;IAChD,MAAM,KAAK,GAA4B;QACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE;QACnB,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;QAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM;QAC3B,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QAC3D,iBAAiB,EACf,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QACjE,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI;QAChD,cAAc,EACZ,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;YACvC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QACnC,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI;KAC3D,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC"}