@vorionsys/platform-core 0.1.0

package/dist/common/error-sanitizer.js

@@ -0,0 +1,298 @@
+/**
+ * Error Sanitizer
+ *
+ * Removes sensitive information from errors before returning to clients.
+ * Prevents leaking internal details like file paths, stack traces,
+ * database schema, and internal service names.
+ *
+ * @packageDocumentation
+ */
+import { createLogger } from './logger.js';
+import { getSecurityConfig, getSecurityMode } from './security-mode.js';
+import { randomUUID } from 'crypto';
+const logger = createLogger({ component: 'error-sanitizer' });
+/**
+ * Patterns that indicate sensitive information
+ */
+const SENSITIVE_PATTERNS = {
+    // File paths (Unix and Windows)
+    filePaths: [
+        /\/(?:Users|home|var|etc|opt|usr|tmp|srv)\/[^\s"']+/gi,
+        /[A-Z]:\\(?:Users|Program Files|Windows|temp)[^\s"']*/gi,
+        /(?:\.\.\/|\.\/)[^\s"']+/g,
+        /\/[a-zA-Z0-9_-]+\/[a-zA-Z0-9_\-./]+\.[a-z]{2,4}/gi,
+    ],
+    // Stack traces
+    stackTraces: [
+        /at\s+[^\s]+\s+\([^)]+\)/g,
+        /at\s+[^\s]+\s+\[[^\]]+\]/g,
+        /^\s*at\s+.+$/gm,
+        /Error:\s*\n\s*at/g,
+    ],
+    // Database information
+    database: [
+        /(?:table|column|index|constraint|relation)\s+["']?[a-zA-Z_][a-zA-Z0-9_]*["']?/gi,
+        /(?:SELECT|INSERT|UPDATE|DELETE|FROM|JOIN|WHERE)\s+[^\s;]+/gi,
+        /(?:pg_|mysql_|sqlite_|mongo_)[a-zA-Z_]+/gi,
+        /ERROR:\s*(?:duplicate key|violates|constraint)/gi,
+    ],
+    // Internal service names and endpoints
+    internalServices: [
+        /(?:internal|private|service|backend)[._-][a-zA-Z0-9_.-]+/gi,
+        /https?:\/\/(?:localhost|127\.0\.0\.1|10\.\d+\.\d+\.\d+|192\.168\.\d+\.\d+|172\.(?:1[6-9]|2\d|3[01])\.\d+\.\d+)[^\s]*/gi,
+        /[a-zA-Z0-9_-]+\.(?:internal|local|svc\.cluster\.local)/gi,
+    ],
+    // IP addresses (internal ranges)
+    internalIPs: [
+        /\b10\.\d{1,3}\.\d{1,3}\.\d{1,3}\b/g,
+        /\b192\.168\.\d{1,3}\.\d{1,3}\b/g,
+        /\b172\.(?:1[6-9]|2[0-9]|3[0-1])\.\d{1,3}\.\d{1,3}\b/g,
+        /\b127\.\d{1,3}\.\d{1,3}\.\d{1,3}\b/g,
+    ],
+    // Environment variables and secrets
+    secrets: [
+        /(?:password|secret|token|key|credential|auth)[=:]\s*["']?[^\s"']+["']?/gi,
+        /Bearer\s+[A-Za-z0-9\-_]+\.[A-Za-z0-9\-_]+\.[A-Za-z0-9\-_]+/g,
+        /[a-zA-Z_][a-zA-Z0-9_]*_(?:SECRET|KEY|TOKEN|PASSWORD)\s*[=:]/gi,
+    ],
+    // Node.js module paths
+    modulePaths: [
+        /node_modules\/[^\s"']+/g,
+        /node:internal\/[^\s"']+/g,
+    ],
+    // Memory addresses
+    memoryAddresses: [
+        /0x[0-9a-fA-F]{8,16}/g,
+    ],
+    // Process information
+    processInfo: [
+        /pid[=:]\s*\d+/gi,
+        /ppid[=:]\s*\d+/gi,
+    ],
+};
+/**
+ * Generic safe error messages by category
+ */
+const SAFE_ERROR_MESSAGES = {
+    INTERNAL_ERROR: 'An internal error occurred. Please try again later.',
+    DATABASE_ERROR: 'A database error occurred. Please try again later.',
+    AUTHENTICATION_ERROR: 'Authentication failed. Please check your credentials.',
+    AUTHORIZATION_ERROR: 'You do not have permission to perform this action.',
+    VALIDATION_ERROR: 'The request contains invalid data.',
+    NOT_FOUND: 'The requested resource was not found.',
+    RATE_LIMITED: 'Too many requests. Please try again later.',
+    SERVICE_UNAVAILABLE: 'The service is temporarily unavailable.',
+    TIMEOUT: 'The request timed out. Please try again.',
+    NETWORK_ERROR: 'A network error occurred. Please check your connection.',
+};
+/**
+ * Maps common error types to error codes
+ */
+const ERROR_TYPE_TO_CODE = new Map([
+    ['TypeError', 'INTERNAL_ERROR'],
+    ['ReferenceError', 'INTERNAL_ERROR'],
+    ['RangeError', 'VALIDATION_ERROR'],
+    ['SyntaxError', 'VALIDATION_ERROR'],
+    ['ValidationError', 'VALIDATION_ERROR'],
+    ['AuthenticationError', 'AUTHENTICATION_ERROR'],
+    ['AuthorizationError', 'AUTHORIZATION_ERROR'],
+    ['NotFoundError', 'NOT_FOUND'],
+    ['TimeoutError', 'TIMEOUT'],
+    ['DatabaseError', 'DATABASE_ERROR'],
+    ['PostgresError', 'DATABASE_ERROR'],
+    ['MongoError', 'DATABASE_ERROR'],
+    ['SequelizeError', 'DATABASE_ERROR'],
+]);
+/**
+ * Sanitize an error message by removing sensitive information
+ *
+ * @param message - The error message to sanitize
+ * @returns Sanitized message safe for client consumption
+ */
+export function sanitizeErrorMessage(message) {
+    if (!message || typeof message !== 'string') {
+        return 'An error occurred.';
+    }
+    let sanitized = message;
+    // Apply all sensitive pattern replacements
+    for (const [category, patterns] of Object.entries(SENSITIVE_PATTERNS)) {
+        for (const pattern of patterns) {
+            // Reset lastIndex for global patterns
+            pattern.lastIndex = 0;
+            sanitized = sanitized.replace(pattern, `[${category}_redacted]`);
+        }
+    }
+    // Remove any remaining potential paths (conservative approach)
+    sanitized = sanitized.replace(/[/\\][a-zA-Z0-9_\-.]+[/\\][^\s"']*/g, '[path_redacted]');
+    // Truncate if too long (prevent information leakage through length)
+    if (sanitized.length > 200) {
+        sanitized = sanitized.substring(0, 197) + '...';
+    }
+    return sanitized;
+}
+/**
+ * Detect error code from error type and message
+ *
+ * @param error - The error to analyze
+ * @returns Appropriate error code
+ */
+function detectErrorCode(error) {
+    // Check error constructor name
+    const errorType = error.constructor?.name || 'Error';
+    if (ERROR_TYPE_TO_CODE.has(errorType)) {
+        return ERROR_TYPE_TO_CODE.get(errorType);
+    }
+    // Check for common patterns in message
+    const message = error.message?.toLowerCase() || '';
+    if (message.includes('unauthorized') || message.includes('authentication')) {
+        return 'AUTHENTICATION_ERROR';
+    }
+    if (message.includes('forbidden') || message.includes('permission')) {
+        return 'AUTHORIZATION_ERROR';
+    }
+    if (message.includes('not found') || message.includes('does not exist')) {
+        return 'NOT_FOUND';
+    }
+    if (message.includes('validation') || message.includes('invalid')) {
+        return 'VALIDATION_ERROR';
+    }
+    if (message.includes('timeout') || message.includes('timed out')) {
+        return 'TIMEOUT';
+    }
+    if (message.includes('database') || message.includes('query') || message.includes('sql')) {
+        return 'DATABASE_ERROR';
+    }
+    if (message.includes('rate limit') || message.includes('too many')) {
+        return 'RATE_LIMITED';
+    }
+    if (message.includes('unavailable') || message.includes('service')) {
+        return 'SERVICE_UNAVAILABLE';
+    }
+    if (message.includes('network') || message.includes('connection')) {
+        return 'NETWORK_ERROR';
+    }
+    // Check if error has a code property
+    const errorWithCode = error;
+    if (errorWithCode.code && typeof errorWithCode.code === 'string') {
+        const code = errorWithCode.code.toUpperCase();
+        if (SAFE_ERROR_MESSAGES[code]) {
+            return code;
+        }
+    }
+    return 'INTERNAL_ERROR';
+}
+/**
+ * Sanitize an error for safe client consumption
+ *
+ * Full error details are logged server-side for debugging.
+ * Only sanitized, generic information is returned for clients.
+ *
+ * @param error - The error to sanitize
+ * @param requestId - Optional request ID for correlation (generated if not provided)
+ * @returns Sanitized error safe to return to clients
+ */
+export function sanitizeError(error, requestId) {
+    const config = getSecurityConfig();
+    const mode = getSecurityMode();
+    const correlationId = requestId || generateRequestId();
+    // Always log full error details server-side
+    logger.error({
+        requestId: correlationId,
+        errorName: error.name,
+        errorMessage: error.message,
+        errorStack: error.stack,
+        errorCode: error.code,
+        mode,
+    }, `Error occurred [${correlationId}]: ${error.message}`);
+    // In verbose mode (only development/testing), return more details
+    if (config.allowVerboseErrors) {
+        return {
+            code: detectErrorCode(error),
+            message: sanitizeErrorMessage(error.message),
+            requestId: correlationId,
+        };
+    }
+    // In production/staging, return only generic safe messages
+    const code = detectErrorCode(error);
+    const safeMessage = SAFE_ERROR_MESSAGES[code] || SAFE_ERROR_MESSAGES['INTERNAL_ERROR'];
+    return {
+        code,
+        message: safeMessage,
+        requestId: correlationId,
+    };
+}
+/**
+ * Generate a unique request ID for error correlation
+ */
+export function generateRequestId() {
+    return `req_${randomUUID()}`;
+}
+/**
+ * Create an error response object for HTTP responses
+ *
+ * @param error - The error to convert
+ * @param requestId - Request ID for correlation
+ * @param statusCode - HTTP status code (determined from error if not provided)
+ * @returns Error response object
+ */
+export function createErrorResponse(error, requestId, statusCode) {
+    const sanitized = sanitizeError(error, requestId);
+    // Determine status code from error code if not provided
+    const httpStatus = statusCode || getHttpStatusFromCode(sanitized.code);
+    return {
+        statusCode: httpStatus,
+        body: sanitized,
+    };
+}
+/**
+ * Map error codes to HTTP status codes
+ */
+function getHttpStatusFromCode(code) {
+    const statusMap = {
+        INTERNAL_ERROR: 500,
+        DATABASE_ERROR: 500,
+        AUTHENTICATION_ERROR: 401,
+        AUTHORIZATION_ERROR: 403,
+        VALIDATION_ERROR: 400,
+        NOT_FOUND: 404,
+        RATE_LIMITED: 429,
+        SERVICE_UNAVAILABLE: 503,
+        TIMEOUT: 504,
+        NETWORK_ERROR: 502,
+    };
+    return statusMap[code] || 500;
+}
+/**
+ * Wrap an async function with error sanitization
+ *
+ * @param fn - The async function to wrap
+ * @param requestId - Request ID for error correlation
+ * @returns Wrapped function that sanitizes errors
+ */
+export function withErrorSanitization(fn, requestId) {
+    return async (...args) => {
+        try {
+            return await fn(...args);
+        }
+        catch (error) {
+            if (error instanceof Error) {
+                throw sanitizeError(error, requestId);
+            }
+            throw sanitizeError(new Error(String(error)), requestId);
+        }
+    };
+}
+/**
+ * Check if an object is a SanitizedError
+ */
+export function isSanitizedError(obj) {
+    if (!obj || typeof obj !== 'object') {
+        return false;
+    }
+    const candidate = obj;
+    return (typeof candidate['code'] === 'string' &&
+        typeof candidate['message'] === 'string' &&
+        typeof candidate['requestId'] === 'string' &&
+        !('stack' in candidate));
+}
+//# sourceMappingURL=error-sanitizer.js.map

package/dist/common/error-sanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-sanitizer.js","sourceRoot":"","sources":["../../src/common/error-sanitizer.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAe9D;;GAEG;AACH,MAAM,kBAAkB,GAAG;IACzB,gCAAgC;IAChC,SAAS,EAAE;QACT,sDAAsD;QACtD,wDAAwD;QACxD,0BAA0B;QAC1B,mDAAmD;KACpD;IAED,eAAe;IACf,WAAW,EAAE;QACX,0BAA0B;QAC1B,2BAA2B;QAC3B,gBAAgB;QAChB,mBAAmB;KACpB;IAED,uBAAuB;IACvB,QAAQ,EAAE;QACR,iFAAiF;QACjF,6DAA6D;QAC7D,2CAA2C;QAC3C,kDAAkD;KACnD;IAED,uCAAuC;IACvC,gBAAgB,EAAE;QAChB,4DAA4D;QAC5D,wHAAwH;QACxH,0DAA0D;KAC3D;IAED,iCAAiC;IACjC,WAAW,EAAE;QACX,oCAAoC;QACpC,iCAAiC;QACjC,sDAAsD;QACtD,qCAAqC;KACtC;IAED,oCAAoC;IACpC,OAAO,EAAE;QACP,0EAA0E;QAC1E,6DAA6D;QAC7D,+DAA+D;KAChE;IAED,uBAAuB;IACvB,WAAW,EAAE;QACX,yBAAyB;QACzB,0BAA0B;KAC3B;IAED,mBAAmB;IACnB,eAAe,EAAE;QACf,sBAAsB;KACvB;IAED,sBAAsB;IACtB,WAAW,EAAE;QACX,iBAAiB;QACjB,kBAAkB;KACnB;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,mBAAmB,GAA2B;IAClD,cAAc,EAAE,qDAAqD;IACrE,cAAc,EAAE,oDAAoD;IACpE,oBAAoB,EAAE,uDAAuD;IAC7E,mBAAmB,EAAE,oDAAoD;IACzE,gBAAgB,EAAE,oCAAoC;IACtD,SAAS,EAAE,uCAAuC;IAClD,YAAY,EAAE,4CAA4C;IAC1D,mBAAmB,EAAE,yCAAyC;IAC9D,OAAO,EAAE,0CAA0C;IACnD,aAAa,EAAE,yDAAyD;CACzE,CAAC;AAEF;;GAEG;AACH,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IACtD,CAAC,WAAW,EAAE,gBAAgB,CAAC;IAC/B,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IACpC,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAClC,CAAC,aAAa,EAAE,kBAAkB,CAAC;IACnC,CAAC,iBAAiB,EAAE,kBAAkB,CAAC;IACvC,CAAC,qBAAqB,EAAE,sBAAsB,CAAC;IAC/C,CAAC,oBAAoB,EAAE,qBAAqB,CAAC;IAC7C,CAAC,eAAe,EAAE,WAAW,CAAC;IAC9B,CAAC,cAAc,EAAE,SAAS,CAAC;IAC3B,CAAC,eAAe,EAAE,gBAAgB,CAAC;IACnC,CAAC,eAAe,EAAE,gBAAgB,CAAC;IACnC,CAAC,YAAY,EAAE,gBAAgB,CAAC;IAChC,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;CACrC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IAED,IAAI,SAAS,GAAG,OAAO,CAAC;IAExB,2CAA2C;IAC3C,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACtE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,sCAAsC;YACtC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YACtB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,QAAQ,YAAY,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,qCAAqC,EAAE,iBAAiB,CAAC,CAAC;IAExF,oEAAoE;IACpE,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;QAC3B,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC;IAClD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,KAAY;IACnC,+BAA+B;IAC/B,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,EAAE,IAAI,IAAI,OAAO,CAAC;IACrD,IAAI,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,OAAO,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAE,CAAC;IAC5C,CAAC;IAED,uCAAuC;IACvC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAEnD,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC3E,OAAO,sBAAsB,CAAC;IAChC,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACpE,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxE,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAClE,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACjE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzF,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACnE,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACnE,OAAO,qBAAqB,CAAC;IAC/B,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAClE,OAAO,eAAe,CAAC;IACzB,CAAC;IAED,qCAAqC;IACrC,MAAM,aAAa,GAAG,KAAkC,CAAC;IACzD,IAAI,aAAa,CAAC,IAAI,IAAI,OAAO,aAAa,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,KAAY,EAAE,SAAkB;IAC5D,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,MAAM,aAAa,GAAG,SAAS,IAAI,iBAAiB,EAAE,CAAC;IAEvD,4CAA4C;IAC5C,MAAM,CAAC,KAAK,CACV;QACE,SAAS,EAAE,aAAa;QACxB,SAAS,EAAE,KAAK,CAAC,IAAI;QACrB,YAAY,EAAE,KAAK,CAAC,OAAO;QAC3B,UAAU,EAAE,KAAK,CAAC,KAAK;QACvB,SAAS,EAAG,KAAmC,CAAC,IAAI;QACpD,IAAI;KACL,EACD,mBAAmB,aAAa,MAAM,KAAK,CAAC,OAAO,EAAE,CACtD,CAAC;IAEF,kEAAkE;IAClE,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC9B,OAAO;YACL,IAAI,EAAE,eAAe,CAAC,KAAK,CAAC;YAC5B,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC;YAC5C,SAAS,EAAE,aAAa;SACzB,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IAEvF,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,WAAW;QACpB,SAAS,EAAE,aAAa;KACzB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,OAAO,UAAU,EAAE,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAY,EACZ,SAAkB,EAClB,UAAmB;IAKnB,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IAElD,wDAAwD;IACxD,MAAM,UAAU,GAAG,UAAU,IAAI,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAEvE,OAAO;QACL,UAAU,EAAE,UAAU;QACtB,IAAI,EAAE,SAAS;KAChB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,IAAY;IACzC,MAAM,SAAS,GAA2B;QACxC,cAAc,EAAE,GAAG;QACnB,cAAc,EAAE,GAAG;QACnB,oBAAoB,EAAE,GAAG;QACzB,mBAAmB,EAAE,GAAG;QACxB,gBAAgB,EAAE,GAAG;QACrB,SAAS,EAAE,GAAG;QACd,YAAY,EAAE,GAAG;QACjB,mBAAmB,EAAE,GAAG;QACxB,OAAO,EAAE,GAAG;QACZ,aAAa,EAAE,GAAG;KACnB,CAAC;IAEF,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;AAChC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CACnC,EAAK,EACL,SAAkB;IAElB,OAAO,KAAK,EAAE,GAAG,IAAmB,EAA2C,EAAE;QAC/E,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,GAAG,IAAI,CAAkB,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;gBAC3B,MAAM,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,aAAa,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAY;IAC3C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,GAA8B,CAAC;IACjD,OAAO,CACL,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,QAAQ;QACrC,OAAO,SAAS,CAAC,SAAS,CAAC,KAAK,QAAQ;QACxC,OAAO,SAAS,CAAC,WAAW,CAAC,KAAK,QAAQ;QAC1C,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC,CACxB,CAAC;AACJ,CAAC"}

package/dist/common/errors.d.ts

@@ -0,0 +1,229 @@
+/**
+ * Typed Error Classes for Vorion
+ *
+ * Provides structured error types with HTTP status codes for better error handling,
+ * observability, and programmatic error discrimination.
+ *
+ * @packageDocumentation
+ */
+/**
+ * Base error class for all Vorion errors.
+ * Extends Error with structured metadata for API responses and logging.
+ */
+export declare class VorionError extends Error {
+    /** Error code for programmatic identification */
+    code: string;
+    /** HTTP status code for API responses */
+    statusCode: number;
+    /** Additional error details for debugging */
+    details?: Record<string, unknown>;
+    constructor(message: string, details?: Record<string, unknown>);
+    /**
+     * Convert error to a JSON-serializable object for API responses
+     */
+    toJSON(): Record<string, unknown>;
+}
+/**
+ * Validation error for invalid input data.
+ * HTTP 400 Bad Request
+ */
+export declare class ValidationError extends VorionError {
+    code: string;
+    statusCode: number;
+    constructor(message: string, details?: Record<string, unknown>);
+}
+/**
+ * Not found error for missing resources.
+ * HTTP 404 Not Found
+ */
+export declare class NotFoundError extends VorionError {
+    code: string;
+    statusCode: number;
+    constructor(message: string, details?: Record<string, unknown>);
+}
+/**
+ * Unauthorized error for authentication failures.
+ * HTTP 401 Unauthorized
+ */
+export declare class UnauthorizedError extends VorionError {
+    code: string;
+    statusCode: number;
+    constructor(message: string, details?: Record<string, unknown>);
+}
+/**
+ * Forbidden error for authorization failures.
+ * HTTP 403 Forbidden
+ */
+export declare class ForbiddenError extends VorionError {
+    code: string;
+    statusCode: number;
+    constructor(message: string, details?: Record<string, unknown>);
+}
+/**
+ * Conflict error for resource state conflicts.
+ * HTTP 409 Conflict
+ */
+export declare class ConflictError extends VorionError {
+    code: string;
+    statusCode: number;
+    constructor(message: string, details?: Record<string, unknown>);
+}
+/**
+ * Rate limit error when request limits are exceeded.
+ * HTTP 429 Too Many Requests
+ */
+export declare class RateLimitError extends VorionError {
+    code: string;
+    statusCode: number;
+    /** Seconds until rate limit resets */
+    retryAfter?: number;
+    constructor(message: string, retryAfter?: number, details?: Record<string, unknown>);
+    toJSON(): Record<string, unknown>;
+}
+/**
+ * Configuration error for invalid or missing configuration.
+ * HTTP 500 Internal Server Error
+ */
+export declare class ConfigurationError extends VorionError {
+    code: string;
+    statusCode: number;
+    constructor(message: string, details?: Record<string, unknown>);
+}
+/**
+ * Encryption error for encryption/decryption failures.
+ * HTTP 500 Internal Server Error
+ */
+export declare class EncryptionError extends VorionError {
+    code: string;
+    statusCode: number;
+    constructor(message: string, details?: Record<string, unknown>);
+}
+/**
+ * Escalation error for escalation workflow failures.
+ * HTTP 400 Bad Request
+ */
+export declare class EscalationError extends VorionError {
+    code: string;
+    statusCode: number;
+    constructor(message: string, details?: Record<string, unknown>);
+}
+/**
+ * Database error for database operation failures.
+ * HTTP 500 Internal Server Error
+ */
+export declare class DatabaseError extends VorionError {
+    code: string;
+    statusCode: number;
+    constructor(message: string, details?: Record<string, unknown>);
+}
+/**
+ * External service error for third-party service failures.
+ * HTTP 502 Bad Gateway
+ */
+export declare class ExternalServiceError extends VorionError {
+    code: string;
+    statusCode: number;
+    constructor(message: string, details?: Record<string, unknown>);
+}
+/**
+ * Timeout error for operation timeouts.
+ * HTTP 504 Gateway Timeout
+ */
+export declare class TimeoutError extends VorionError {
+    code: string;
+    statusCode: number;
+    constructor(message: string, details?: Record<string, unknown>);
+}
+/**
+ * Type guard to check if an error is a VorionError
+ */
+export declare function isVorionError(error: unknown): error is VorionError;
+/**
+ * Helper to wrap unknown errors in a VorionError
+ */
+export declare function wrapError(error: unknown, fallbackMessage?: string): VorionError;
+/**
+ * Repository error for data access layer failures.
+ * HTTP 500 Internal Server Error
+ */
+export declare class RepositoryError extends VorionError {
+    readonly operation: string;
+    readonly entity?: string;
+    code: string;
+    statusCode: number;
+    constructor(message: string, operation: string, entity?: string, details?: Record<string, unknown>);
+}
+/**
+ * Service error for business logic failures.
+ * HTTP 500 Internal Server Error
+ */
+export declare class ServiceError extends VorionError {
+    readonly service: string;
+    readonly operation: string;
+    code: string;
+    statusCode: number;
+    constructor(message: string, service: string, operation: string, details?: Record<string, unknown>);
+}
+/**
+ * Integration error for external service failures.
+ * HTTP 502 Bad Gateway
+ */
+export declare class IntegrationError extends VorionError {
+    readonly integration: string;
+    readonly operation: string;
+    code: string;
+    statusCode: number;
+    constructor(message: string, integration: string, operation: string, details?: Record<string, unknown>);
+}
+/**
+ * Queue error for message queue operations.
+ * HTTP 500 Internal Server Error
+ */
+export declare class QueueError extends VorionError {
+    readonly queue: string;
+    readonly operation: string;
+    code: string;
+    statusCode: number;
+    constructor(message: string, queue: string, operation: string, details?: Record<string, unknown>);
+}
+/**
+ * Cache error for caching layer failures.
+ * HTTP 500 Internal Server Error
+ */
+export declare class CacheError extends VorionError {
+    readonly operation: string;
+    code: string;
+    statusCode: number;
+    constructor(message: string, operation: string, details?: Record<string, unknown>);
+}
+/**
+ * Governance error for policy evaluation failures.
+ * HTTP 500 Internal Server Error
+ */
+export declare class GovernanceError extends VorionError {
+    readonly operation: string;
+    code: string;
+    statusCode: number;
+    constructor(message: string, operation: string, details?: Record<string, unknown>);
+}
+/**
+ * Trust engine error for trust calculation failures.
+ * HTTP 500 Internal Server Error
+ */
+export declare class TrustEngineError extends VorionError {
+    readonly operation: string;
+    readonly entityId?: string;
+    code: string;
+    statusCode: number;
+    constructor(message: string, operation: string, entityId?: string, details?: Record<string, unknown>);
+}
+/**
+ * Wrap an error with operation context for better debugging.
+ * Re-throws VorionErrors with additional context, wraps other errors.
+ */
+export declare function wrapErrorWithContext(error: unknown, context: {
+    operation: string;
+    component: string;
+    details?: Record<string, unknown>;
+}): VorionError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/common/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/common/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;GAGG;AACH,qBAAa,WAAY,SAAQ,KAAK;IACpC,iDAAiD;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAEtB,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAe9D;;OAEG;IACH,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAUlC;AAED;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,WAAW;IACrC,IAAI,SAAsB;IAC1B,UAAU,SAAO;gBAEd,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;GAGG;AACH,qBAAa,aAAc,SAAQ,WAAW;IACnC,IAAI,SAAe;IACnB,UAAU,SAAO;gBAEd,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;GAGG;AACH,qBAAa,iBAAkB,SAAQ,WAAW;IACvC,IAAI,SAAkB;IACtB,UAAU,SAAO;gBAEd,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;GAGG;AACH,qBAAa,cAAe,SAAQ,WAAW;IACpC,IAAI,SAAe;IACnB,UAAU,SAAO;gBAEd,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;GAGG;AACH,qBAAa,aAAc,SAAQ,WAAW;IACnC,IAAI,SAAc;IAClB,UAAU,SAAO;gBAEd,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;GAGG;AACH,qBAAa,cAAe,SAAQ,WAAW;IACpC,IAAI,SAAyB;IAC7B,UAAU,SAAO;IAE1B,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;gBAER,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAQ1E,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAO3C;AAED;;;GAGG;AACH,qBAAa,kBAAmB,SAAQ,WAAW;IACxC,IAAI,SAAyB;IAC7B,UAAU,SAAO;gBAEd,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,WAAW;IACrC,IAAI,SAAsB;IAC1B,UAAU,SAAO;gBAEd,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,WAAW;IACrC,IAAI,SAAsB;IAC1B,UAAU,SAAO;gBAEd,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;GAGG;AACH,qBAAa,aAAc,SAAQ,WAAW;IACnC,IAAI,SAAoB;IACxB,UAAU,SAAO;gBAEd,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;GAGG;AACH,qBAAa,oBAAqB,SAAQ,WAAW;IAC1C,IAAI,SAA4B;IAChC,UAAU,SAAO;gBAEd,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;;GAGG;AACH,qBAAa,YAAa,SAAQ,WAAW;IAClC,IAAI,SAAa;IACjB,UAAU,SAAO;gBAEd,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAElE;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,eAAe,SAAiC,GAAG,WAAW,CAUvG;AAED;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,WAAW;aAM5B,SAAS,EAAE,MAAM;aACjB,MAAM,CAAC,EAAE,MAAM;IANxB,IAAI,SAAsB;IAC1B,UAAU,SAAO;gBAGxB,OAAO,EAAE,MAAM,EACC,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,EAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAKpC;AAED;;;GAGG;AACH,qBAAa,YAAa,SAAQ,WAAW;aAMzB,OAAO,EAAE,MAAM;aACf,SAAS,EAAE,MAAM;IAN1B,IAAI,SAAmB;IACvB,UAAU,SAAO;gBAGxB,OAAO,EAAE,MAAM,EACC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAKpC;AAED;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,WAAW;aAM7B,WAAW,EAAE,MAAM;aACnB,SAAS,EAAE,MAAM;IAN1B,IAAI,SAAuB;IAC3B,UAAU,SAAO;gBAGxB,OAAO,EAAE,MAAM,EACC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAKpC;AAED;;;GAGG;AACH,qBAAa,UAAW,SAAQ,WAAW;aAMvB,KAAK,EAAE,MAAM;aACb,SAAS,EAAE,MAAM;IAN1B,IAAI,SAAiB;IACrB,UAAU,SAAO;gBAGxB,OAAO,EAAE,MAAM,EACC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAKpC;AAED;;;GAGG;AACH,qBAAa,UAAW,SAAQ,WAAW;aAMvB,SAAS,EAAE,MAAM;IAL1B,IAAI,SAAiB;IACrB,UAAU,SAAO;gBAGxB,OAAO,EAAE,MAAM,EACC,SAAS,EAAE,MAAM,EACjC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAKpC;AAED;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,WAAW;aAM5B,SAAS,EAAE,MAAM;IAL1B,IAAI,SAAsB;IAC1B,UAAU,SAAO;gBAGxB,OAAO,EAAE,MAAM,EACC,SAAS,EAAE,MAAM,EACjC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAKpC;AAED;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,WAAW;aAM7B,SAAS,EAAE,MAAM;aACjB,QAAQ,CAAC,EAAE,MAAM;IAN1B,IAAI,SAAwB;IAC5B,UAAU,SAAO;gBAGxB,OAAO,EAAE,MAAM,EACC,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,EACjC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAKpC;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GACnF,WAAW,CAwBb"}