attio-mcp 0.1.2 → 1.0.0

package/dist/api/client.js

@@ -1,7 +1,6 @@
 import axios from 'axios';
 import { enhanceApiError } from '../utils/error-enhancer.js';
-// If logger is used, ensure it's imported, e.g.:
-// import { logger } from '../utils/logger';
+import { createScopedLogger, OperationType } from '../utils/logger.js';
 const MAX_RETRIES = 3;
 const RETRY_DELAY_MS = 1000;
 export function createAttioApiClient(baseURL, apiKey) {
@@ -10,39 +9,65 @@ export function createAttioApiClient(baseURL, apiKey) {
         headers: {
             Authorization: `Bearer ${apiKey}`,
             'Content-Type': 'application/json',
+            Accept: 'application/json',
         },
     });
     instance.interceptors.response.use((response) => response, async (error) => {
+        const log = createScopedLogger('api.client', 'responseInterceptor', OperationType.API_CALL);
         // Enhanced logging to inspect the error object thoroughly
-        console.error('[Interceptor] Raw error received by interceptor. Message:', error instanceof Error ? error.message : 'Unknown error');
-        console.error('[Interceptor] Is Axios Error:', axios.isAxiosError(error));
+        log.error('Raw error received by interceptor', error, {
+            isAxiosError: axios.isAxiosError(error),
+        });
         if (axios.isAxiosError(error)) {
             const axiosError = error;
-            console.error('[Interceptor] Axios error config:', axiosError.config);
+            log.debug('Axios error config', {
+                config: axiosError.config,
+            });
             // console.error('[Interceptor] Axios error request:', axiosError.request); // Often large, skip for brevity unless needed
-            console.error('[Interceptor] Axios error response status:', axiosError.response?.status);
-            console.error('[Interceptor] Axios error response headers:', JSON.stringify(axiosError.response?.headers));
-            console.error('[Interceptor] Axios error response data (raw):', JSON.stringify(axiosError.response?.data));
+            log.error('Axios error response details', undefined, {
+                status: axiosError.response?.status,
+                headers: axiosError.response?.headers,
+                data: axiosError.response?.data,
+            });
             if (axiosError.response) {
-                console.error(`[Interceptor] API Error: ${axiosError.response.status} ${axiosError.config?.method?.toUpperCase()} ${axiosError.config?.url}`);
+                log.error('API Error', axiosError, {
+                    status: axiosError.response.status,
+                    method: axiosError.config?.method?.toUpperCase(),
+                    url: axiosError.config?.url,
+                });
                 // console.error('[Interceptor] Full error.response object:', JSON.stringify(axiosError.response)); // Can be very verbose
-                const config = axiosError.config;
+                const config = (axiosError.config ??
+                    {});
                 const { status } = axiosError.response;
                 // Attempt to enhance the error first
                 const enhancedError = enhanceApiError(axiosError); // Pass the original AxiosError
                 config.retryCount = config.retryCount || 0;
-                if (config.retryCount < MAX_RETRIES &&
-                    (status === 429 || status >= 500)) {
+                // Only retry network errors, 429 (throttling), and 5xx server errors
+                // Never retry 4xx client errors (400, 401, 403, 404, etc.) except 429
+                const shouldRetry = !status || status === 429 || status >= 500;
+                if (config.retryCount < MAX_RETRIES && shouldRetry) {
                     config.retryCount++;
-                    console.warn(`[Interceptor] Retrying request (${config.retryCount}/${MAX_RETRIES}) for ${config.url} due to ${status}`);
-                    await new Promise((resolve) => setTimeout(resolve, RETRY_DELAY_MS * (config.retryCount || 1)));
-                    return instance.request(config);
+                    const target = config.url ?? '(unknown url)';
+                    log.warn('Retrying request due to error status', {
+                        retryCount: config.retryCount,
+                        maxRetries: MAX_RETRIES,
+                        target,
+                        status,
+                    });
+                    // Exponential backoff with jitter to prevent thundering herd
+                    const baseDelay = RETRY_DELAY_MS * Math.pow(2, config.retryCount - 1);
+                    const jitter = Math.floor(Math.random() * 300); // 0-300ms jitter
+                    const totalDelay = Math.min(baseDelay + jitter, 5000); // Cap at 5s
+                    await new Promise((resolve) => setTimeout(resolve, totalDelay));
+                    // Convert InternalAxiosRequestConfig to AxiosRequestConfig before retrying
+                    const retryConfig = { ...config };
+                    return instance.request(retryConfig);
                 }
                 return Promise.reject(enhancedError); // Reject with the potentially enhanced error
             }
         }
         else {
-            console.error('[Interceptor] Non-Axios error structure:', JSON.stringify(error, Object.getOwnPropertyNames(error || {})));
+            log.error('Non-Axios error structure', error);
         }
         // Fallback for non-Axios errors or Axios errors without a response
         return Promise.reject(error);

package/dist/api/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAKN,MAAM,OAAO,CAAC;AACf,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,iDAAiD;AACjD,4CAA4C;AAE5C,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,cAAc,GAAG,IAAI,CAAC;AAM5B,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,MAAc;IAEd,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5B,OAAO;QACP,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,EAAE;YACjC,cAAc,EAAE,kBAAkB;SACnC;KACF,CAAC,CAAC;IAEH,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAChC,CAAC,QAAuB,EAAE,EAAE,CAAC,QAAQ,EACrC,KAAK,EAAE,KAAc,EAAE,EAAE;QACvB,0DAA0D;QAC1D,OAAO,CAAC,KAAK,CACX,2DAA2D,EAC3D,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CACzD,CAAC;QACF,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAE1E,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,KAAmB,CAAC;YACvC,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;YACtE,0HAA0H;YAC1H,OAAO,CAAC,KAAK,CACX,4CAA4C,EAC5C,UAAU,CAAC,QAAQ,EAAE,MAAM,CAC5B,CAAC;YACF,OAAO,CAAC,KAAK,CACX,6CAA6C,EAC7C,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAC7C,CAAC;YACF,OAAO,CAAC,KAAK,CACX,gDAAgD,EAChD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAC1C,CAAC;YAEF,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;gBACxB,OAAO,CAAC,KAAK,CACX,4BACE,UAAU,CAAC,QAAQ,CAAC,MACtB,IAAI,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,IAC1C,UAAU,CAAC,MAAM,EAAE,GACrB,EAAE,CACH,CAAC;gBACF,0HAA0H;gBAE1H,MAAM,MAAM,GAAG,UAAU,CAAC,MAAqC,CAAC;gBAChE,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC;gBAEvC,qCAAqC;gBACrC,MAAM,aAAa,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,+BAA+B;gBAElF,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;gBAE3C,IACE,MAAM,CAAC,UAAU,GAAG,WAAW;oBAC/B,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,IAAI,GAAG,CAAC,EACjC,CAAC;oBACD,MAAM,CAAC,UAAU,EAAE,CAAC;oBACpB,OAAO,CAAC,IAAI,CACV,mCAAmC,MAAM,CAAC,UAAU,IAAI,WAAW,SAAS,MAAM,CAAC,GAAG,WAAW,MAAM,EAAE,CAC1G,CAAC;oBACF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAC5B,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAC/D,CAAC;oBACF,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClC,CAAC;gBACD,OAAO,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,6CAA6C;YACrF,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CACX,0CAA0C,EAC1C,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,mBAAmB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAC/D,CAAC;QACJ,CAAC;QAED,mEAAmE;QACnE,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CACF,CAAC;IAEF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,yEAAyE;AACzE,uFAAuF;AACvF,mDAAmD;AAEnD,wBAAwB;AACxB,gGAAgG;AAChG,IAAI;AAEJ,mGAAmG;AAEnG,gGAAgG"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/api/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAQ1B,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEvE,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,cAAc,GAAG,IAAI,CAAC;AAM5B,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,MAAc;IAEd,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5B,OAAO;QACP,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,MAAM,EAAE;YACjC,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;SAC3B;KACF,CAAC,CAAC;IAEH,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,GAAG,CAChC,CAAC,QAAuB,EAAE,EAAE,CAAC,QAAQ,EACrC,KAAK,EAAE,KAAc,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,kBAAkB,CAC5B,YAAY,EACZ,qBAAqB,EACrB,aAAa,CAAC,QAAQ,CACvB,CAAC;QACF,0DAA0D;QAC1D,GAAG,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,EAAE;YACpD,YAAY,EAAE,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC;SACxC,CAAC,CAAC;QAEH,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,UAAU,GAAG,KAAmB,CAAC;YACvC,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE;gBAC9B,MAAM,EAAE,UAAU,CAAC,MAAiB;aACrC,CAAC,CAAC;YACH,0HAA0H;YAC1H,GAAG,CAAC,KAAK,CAAC,8BAA8B,EAAE,SAAS,EAAE;gBACnD,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE,MAAM;gBACnC,OAAO,EAAE,UAAU,CAAC,QAAQ,EAAE,OAAkB;gBAChD,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE,IAAe;aAC3C,CAAC,CAAC;YAEH,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;gBACxB,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE;oBACjC,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,MAAM;oBAClC,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE;oBAChD,GAAG,EAAE,UAAU,CAAC,MAAM,EAAE,GAAG;iBAC5B,CAAC,CAAC;gBACH,0HAA0H;gBAE1H,MAAM,MAAM,GAAG,CAAC,UAAU,CAAC,MAAM;oBAC/B,EAAE,CAAgC,CAAC;gBACrC,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC;gBAEvC,qCAAqC;gBACrC,MAAM,aAAa,GAAG,eAAe,CACnC,UAAgD,CACjD,CAAC,CAAC,+BAA+B;gBAElC,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;gBAE3C,qEAAqE;gBACrE,sEAAsE;gBACtE,MAAM,WAAW,GAAG,CAAC,MAAM,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,IAAI,GAAG,CAAC;gBAE/D,IAAI,MAAM,CAAC,UAAU,GAAG,WAAW,IAAI,WAAW,EAAE,CAAC;oBACnD,MAAM,CAAC,UAAU,EAAE,CAAC;oBACpB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC;oBAC7C,GAAG,CAAC,IAAI,CAAC,sCAAsC,EAAE;wBAC/C,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,UAAU,EAAE,WAAW;wBACvB,MAAM;wBACN,MAAM;qBACP,CAAC,CAAC;oBACH,6DAA6D;oBAC7D,MAAM,SAAS,GACb,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;oBACtD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,iBAAiB;oBACjE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,YAAY;oBACnE,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;oBAEhE,2EAA2E;oBAC3E,MAAM,WAAW,GAAuB,EAAE,GAAG,MAAM,EAAE,CAAC;oBACtD,OAAO,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;gBACvC,CAAC;gBACD,OAAO,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,6CAA6C;YACrF,CAAC;QACH,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QAChD,CAAC;QAED,mEAAmE;QACnE,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC,CACF,CAAC;IAEF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,yEAAyE;AACzE,uFAAuF;AACvF,mDAAmD;AAEnD,wBAAwB;AACxB,gGAAgG;AAChG,IAAI;AAEJ,mGAAmG;AAEnG,gGAAgG"}

package/dist/api/lazy-client.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Enhanced lazy client - no circular dependencies
+ * Uses direct import since circular dependency has been resolved
+ */
+import { AxiosInstance } from 'axios';
+export declare function getLazyAttioClient(): AxiosInstance;
+export declare function setGlobalContext(context: Record<string, unknown>): void;
+export declare function clearClientCache(): void;
+export declare function getGlobalContext(): Record<string, unknown> | null;
+//# sourceMappingURL=lazy-client.d.ts.map

package/dist/api/lazy-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lazy-client.d.ts","sourceRoot":"","sources":["../../src/api/lazy-client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AAQtC,wBAAgB,kBAAkB,IAAI,aAAa,CAGlD;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAEvE;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAEvC;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAEjE"}

package/dist/api/lazy-client.js

@@ -0,0 +1,20 @@
+/**
+ * Enhanced lazy client - no circular dependencies
+ * Uses direct import since circular dependency has been resolved
+ */
+import { getAttioClient } from './attio-client.js';
+import { clearClientContext, getClientContext, setClientContext, } from './client-context.js';
+export function getLazyAttioClient() {
+    // Direct call since circular dependency has been resolved elsewhere
+    return getAttioClient();
+}
+export function setGlobalContext(context) {
+    setClientContext(context);
+}
+export function clearClientCache() {
+    clearClientContext();
+}
+export function getGlobalContext() {
+    return getClientContext();
+}
+//# sourceMappingURL=lazy-client.js.map

package/dist/api/lazy-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lazy-client.js","sourceRoot":"","sources":["../../src/api/lazy-client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,UAAU,kBAAkB;IAChC,oEAAoE;IACpE,OAAO,cAAc,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAgC;IAC/D,gBAAgB,CAAC,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,kBAAkB,EAAE,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,gBAAgB,EAAE,CAAC;AAC5B,CAAC"}

package/dist/api/operations/batch.d.ts

@@ -1,55 +1,109 @@
 /**
  * Batch operations for Attio API
  * Handles bulk operations with chunking and error handling
+ * Includes DoS protection through size and payload validation
+ * Enhanced for Issue #471: Batch Search Operations Support
  */
 import { AttioRecord, ResourceType, RecordBatchCreateParams, RecordBatchUpdateParams } from '../../types/attio.js';
 import { BatchRequestItem, BatchResponse, BatchConfig } from './types.js';
 import { RetryConfig } from './retry.js';
+import { UniversalResourceType } from '../../handlers/tool-configs/universal/types.js';
 /**
  * Creates multiple records in a batch operation
+ * Includes validation for batch size and payload to prevent DoS
  *
  * @param params - Batch record creation parameters
  * @param retryConfig - Optional retry configuration
  * @returns Array of created records
+ * @throws Error if batch size or payload exceeds limits
  */
 export declare function batchCreateRecords<T extends AttioRecord>(params: RecordBatchCreateParams, retryConfig?: Partial<RetryConfig>): Promise<T[]>;
 /**
  * Updates multiple records in a batch operation
+ * Includes validation for batch size and payload to prevent DoS
  *
  * @param params - Batch record update parameters
  * @param retryConfig - Optional retry configuration
  * @returns Array of updated records
+ * @throws Error if batch size or payload exceeds limits
  */
 export declare function batchUpdateRecords<T extends AttioRecord>(params: RecordBatchUpdateParams, retryConfig?: Partial<RetryConfig>): Promise<T[]>;
 /**
- * Default batch configuration
+ * Default batch configuration with security limits
  */
 export declare const DEFAULT_BATCH_CONFIG: BatchConfig;
 /**
  * Execute a batch of operations with chunking, error handling, and retry support
+ * Includes validation for batch size to prevent DoS attacks
  *
  * @param operations - Array of operations to process in batch
  * @param apiCall - Function that processes a single operation
  * @param config - Batch configuration options
  * @returns Batch response with individual results and summary
+ * @throws Error if batch size exceeds security limits
  */
 export declare function executeBatchOperations<T, R>(operations: BatchRequestItem<T>[], apiCall: (params: T) => Promise<R>, config?: Partial<BatchConfig>): Promise<BatchResponse<R>>;
 /**
  * Generic function to perform batch searches for any object type
+ * Includes validation for query count to prevent DoS
  *
  * @param objectType - Type of object to search (people or companies)
  * @param queries - Array of search query strings
  * @param batchConfig - Optional batch configuration
  * @returns Batch response with search results
+ * @throws Error if query count exceeds limits
  */
 export declare function batchSearchObjects<T extends AttioRecord>(objectType: ResourceType, queries: string[], batchConfig?: Partial<BatchConfig>): Promise<BatchResponse<T[]>>;
 /**
  * Generic function to get details for multiple records of any object type
+ * Includes validation for ID count to prevent DoS
  *
  * @param objectType - Type of object to get details for (people or companies)
  * @param recordIds - Array of record IDs to fetch
  * @param batchConfig - Optional batch configuration
  * @returns Batch response with record details
+ * @throws Error if ID count exceeds limits
  */
 export declare function batchGetObjectDetails<T extends AttioRecord>(objectType: ResourceType, recordIds: string[], batchConfig?: Partial<BatchConfig>): Promise<BatchResponse<T>>;
+/**
+ * Universal batch search interface for Issue #471
+ * Returns results in the format expected by universal tools with error isolation
+ */
+export interface UniversalBatchSearchResult {
+    success: boolean;
+    query: string;
+    result?: AttioRecord[];
+    error?: string;
+}
+/**
+ * Enhanced batch search for universal tools with error isolation
+ * Supports all universal resource types and returns formatted results
+ *
+ * @param resourceType - Universal resource type to search
+ * @param queries - Array of search query strings
+ * @param searchParams - Additional search parameters (limit, offset, filters)
+ * @param batchConfig - Optional batch configuration
+ * @returns Array of search results with error isolation
+ * @throws Error if validation fails
+ */
+export declare function universalBatchSearch(resourceType: UniversalResourceType, queries: string[], searchParams?: {
+    limit?: number;
+    offset?: number;
+    filters?: Record<string, unknown>;
+}, batchConfig?: Partial<BatchConfig>): Promise<UniversalBatchSearchResult[]>;
+/**
+ * Enhanced batch get details for universal tools
+ * Supports all universal resource types with error isolation
+ *
+ * @param resourceType - Universal resource type
+ * @param recordIds - Array of record IDs to fetch
+ * @param batchConfig - Optional batch configuration
+ * @returns Array of get results with error isolation
+ */
+export declare function universalBatchGetDetails(resourceType: UniversalResourceType, recordIds: string[], batchConfig?: Partial<BatchConfig>): Promise<Array<{
+    success: boolean;
+    recordId: string;
+    result?: AttioRecord;
+    error?: string;
+}>>;
 //# sourceMappingURL=batch.d.ts.map

package/dist/api/operations/batch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"batch.d.ts","sourceRoot":"","sources":["../../../src/api/operations/batch.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EACL,WAAW,EACX,YAAY,EAEZ,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,gBAAgB,EAEhB,aAAa,EACb,WAAW,EACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EAAiB,WAAW,EAAwB,MAAM,YAAY,CAAC;AAa9E;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,SAAS,WAAW,EAC5D,MAAM,EAAE,uBAAuB,EAC/B,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GACjC,OAAO,CAAC,CAAC,EAAE,CAAC,CAcd;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,SAAS,WAAW,EAC5D,MAAM,EAAE,uBAAuB,EAC/B,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GACjC,OAAO,CAAC,CAAC,EAAE,CAAC,CAed;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAIlC,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,EAAE,CAAC,EAC/C,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAAE,EACjC,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,EAClC,MAAM,GAAE,OAAO,CAAC,WAAW,CAAM,GAChC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAkE3B;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,SAAS,WAAW,EAC5D,UAAU,EAAE,YAAY,EACxB,OAAO,EAAE,MAAM,EAAE,EACjB,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GACjC,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAe7B;AAED;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,SAAS,WAAW,EAC/D,UAAU,EAAE,YAAY,EACxB,SAAS,EAAE,MAAM,EAAE,EACnB,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GACjC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAa3B"}
+{"version":3,"file":"batch.d.ts","sourceRoot":"","sources":["../../../src/api/operations/batch.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EACL,WAAW,EACX,YAAY,EAEZ,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,gBAAgB,EAEhB,aAAa,EACb,WAAW,EACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EAAiB,WAAW,EAAwB,MAAM,YAAY,CAAC;AAW9E,OAAO,EACL,qBAAqB,EAEtB,MAAM,gDAAgD,CAAC;AAcxD;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,SAAS,WAAW,EAC5D,MAAM,EAAE,uBAAuB,EAC/B,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GACjC,OAAO,CAAC,CAAC,EAAE,CAAC,CA8Bd;AAED;;;;;;;;GAQG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,SAAS,WAAW,EAC5D,MAAM,EAAE,uBAAuB,EAC/B,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GACjC,OAAO,CAAC,CAAC,EAAE,CAAC,CA+Bd;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAIlC,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAsB,sBAAsB,CAAC,CAAC,EAAE,CAAC,EAC/C,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAAE,EACjC,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,EAClC,MAAM,GAAE,OAAO,CAAC,WAAW,CAAM,GAChC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CA4E3B;AAED;;;;;;;;;GASG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,SAAS,WAAW,EAC5D,UAAU,EAAE,YAAY,EACxB,OAAO,EAAE,MAAM,EAAE,EACjB,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GACjC,OAAO,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAqB7B;AAED;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CAAC,CAAC,SAAS,WAAW,EAC/D,UAAU,EAAE,YAAY,EACxB,SAAS,EAAE,MAAM,EAAE,EACnB,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GACjC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAmB3B;AAMD;;;GAGG;AACH,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAyCD;;;;;;;;;;GAUG;AACH,wBAAsB,oBAAoB,CACxC,YAAY,EAAE,qBAAqB,EACnC,OAAO,EAAE,MAAM,EAAE,EACjB,YAAY,CAAC,EAAE;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC,EACD,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GACjC,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAyGvC;AA2DD;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAC5C,YAAY,EAAE,qBAAqB,EACnC,SAAS,EAAE,MAAM,EAAE,EACnB,WAAW,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GACjC,OAAO,CACR,KAAK,CAAC;IACJ,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CACH,CAqDA"}

package/dist/api/operations/batch.js

@@ -1,11 +1,21 @@
 /**
  * Batch operations for Attio API
  * Handles bulk operations with chunking and error handling
+ * Includes DoS protection through size and payload validation
+ * Enhanced for Issue #471: Batch Search Operations Support
  */
-import { getAttioClient } from '../attio-client.js';
+import { getLazyAttioClient } from '../../api/lazy-client.js';
+import { ResourceType, } from '../../types/attio.js';
 import { callWithRetry, DEFAULT_RETRY_CONFIG } from './retry.js';
 import { searchObject } from './search.js';
 import { getObjectDetails } from './crud.js';
+import { validateBatchSize, validatePayloadSize, } from '../../utils/batch-validation.js';
+import { getBatchSizeLimit } from '../../config/security-limits.js';
+import { createScopedLogger, OperationType } from '../../utils/logger.js';
+// Import universal types for enhanced batch search support
+import { UniversalResourceType, } from '../../handlers/tool-configs/universal/types.js';
+// Note: UniversalSearchService is imported dynamically to avoid circular dependency
+// (UniversalSearchService imports from api/operations which includes this file)
 /**
  * Helper function to construct object path
  * @private
@@ -16,13 +26,25 @@ function getObjectPath(objectSlug, objectId) {
 }
 /**
  * Creates multiple records in a batch operation
+ * Includes validation for batch size and payload to prevent DoS
  *
  * @param params - Batch record creation parameters
  * @param retryConfig - Optional retry configuration
  * @returns Array of created records
+ * @throws Error if batch size or payload exceeds limits
  */
 export async function batchCreateRecords(params, retryConfig) {
-    const api = getAttioClient();
+    // Validate batch size
+    const sizeValidation = validateBatchSize(params.records, 'create', params.objectSlug);
+    if (!sizeValidation.isValid) {
+        throw new Error(sizeValidation.error);
+    }
+    // Validate payload size
+    const payloadValidation = validatePayloadSize(params.records);
+    if (!payloadValidation.isValid) {
+        throw new Error(payloadValidation.error);
+    }
+    const api = getLazyAttioClient();
     const objectPath = getObjectPath(params.objectSlug, params.objectId);
     const path = `${objectPath}/records/batch`;
     return callWithRetry(async () => {
@@ -31,18 +53,30 @@ export async function batchCreateRecords(params, retryConfig) {
                 attributes: record.attributes,
             })),
         });
-        return response.data.data || [];
+        return response?.data?.data || [];
     }, retryConfig);
 }
 /**
  * Updates multiple records in a batch operation
+ * Includes validation for batch size and payload to prevent DoS
  *
  * @param params - Batch record update parameters
  * @param retryConfig - Optional retry configuration
  * @returns Array of updated records
+ * @throws Error if batch size or payload exceeds limits
  */
 export async function batchUpdateRecords(params, retryConfig) {
-    const api = getAttioClient();
+    // Validate batch size
+    const sizeValidation = validateBatchSize(params.records, 'update', params.objectSlug);
+    if (!sizeValidation.isValid) {
+        throw new Error(sizeValidation.error);
+    }
+    // Validate payload size
+    const payloadValidation = validatePayloadSize(params.records);
+    if (!payloadValidation.isValid) {
+        throw new Error(payloadValidation.error);
+    }
+    const api = getLazyAttioClient();
     const objectPath = getObjectPath(params.objectSlug, params.objectId);
     const path = `${objectPath}/records/batch`;
     return callWithRetry(async () => {
@@ -52,30 +86,38 @@ export async function batchUpdateRecords(params, retryConfig) {
                 attributes: record.attributes,
             })),
         });
-        return response.data.data || [];
+        return response?.data?.data || [];
     }, retryConfig);
 }
 /**
- * Default batch configuration
+ * Default batch configuration with security limits
  */
 export const DEFAULT_BATCH_CONFIG = {
-    maxBatchSize: 10,
+    maxBatchSize: Math.min(10, getBatchSizeLimit()), // Use the smaller of 10 or the configured limit
     continueOnError: true,
     retryConfig: DEFAULT_RETRY_CONFIG,
 };
 /**
  * Execute a batch of operations with chunking, error handling, and retry support
+ * Includes validation for batch size to prevent DoS attacks
  *
  * @param operations - Array of operations to process in batch
  * @param apiCall - Function that processes a single operation
  * @param config - Batch configuration options
  * @returns Batch response with individual results and summary
+ * @throws Error if batch size exceeds security limits
  */
 export async function executeBatchOperations(operations, apiCall, config = {}) {
-    // Merge with default config
+    // Validate overall batch size
+    const sizeValidation = validateBatchSize(operations, 'execute');
+    if (!sizeValidation.isValid) {
+        throw new Error(sizeValidation.error);
+    }
+    // Merge with default config, ensuring maxBatchSize doesn't exceed limits
     const batchConfig = {
         ...DEFAULT_BATCH_CONFIG,
         ...config,
+        maxBatchSize: Math.min(config.maxBatchSize || DEFAULT_BATCH_CONFIG.maxBatchSize, getBatchSizeLimit()),
     };
     // Initialize batch response
     const batchResponse = {
@@ -129,13 +171,20 @@ export async function executeBatchOperations(operations, apiCall, config = {}) {
 }
 /**
  * Generic function to perform batch searches for any object type
+ * Includes validation for query count to prevent DoS
  *
  * @param objectType - Type of object to search (people or companies)
  * @param queries - Array of search query strings
  * @param batchConfig - Optional batch configuration
  * @returns Batch response with search results
+ * @throws Error if query count exceeds limits
  */
 export async function batchSearchObjects(objectType, queries, batchConfig) {
+    // Validate batch size for search operations
+    const sizeValidation = validateBatchSize(queries, 'search', objectType);
+    if (!sizeValidation.isValid) {
+        throw new Error(sizeValidation.error);
+    }
     // Convert queries to batch request items
     const operations = queries.map((query, index) => ({
         params: query,
@@ -146,13 +195,20 @@ export async function batchSearchObjects(objectType, queries, batchConfig) {
 }
 /**
  * Generic function to get details for multiple records of any object type
+ * Includes validation for ID count to prevent DoS
  *
  * @param objectType - Type of object to get details for (people or companies)
  * @param recordIds - Array of record IDs to fetch
  * @param batchConfig - Optional batch configuration
  * @returns Batch response with record details
+ * @throws Error if ID count exceeds limits
  */
 export async function batchGetObjectDetails(objectType, recordIds, batchConfig) {
+    // Validate batch size
+    const sizeValidation = validateBatchSize(recordIds, 'get', objectType);
+    if (!sizeValidation.isValid) {
+        throw new Error(sizeValidation.error);
+    }
     // Convert record IDs to batch request items
     const operations = recordIds.map((recordId) => ({
         params: recordId,
@@ -161,4 +217,208 @@ export async function batchGetObjectDetails(objectType, recordIds, batchConfig)
     // Execute batch operations using the getObjectDetails function
     return executeBatchOperations(operations, (recordId) => getObjectDetails(objectType, recordId), batchConfig);
 }
+/**
+ * Type guard to check if a universal resource type is supported by legacy API
+ */
+function isLegacyResourceType(universalType) {
+    return (universalType === UniversalResourceType.COMPANIES ||
+        universalType === UniversalResourceType.PEOPLE);
+}
+/**
+ * Convert UniversalResourceType to ResourceType for legacy API compatibility
+ * Uses explicit type guards to ensure type safety
+ */
+function convertUniversalResourceType(universalType) {
+    // Use type guard for safe conversion
+    if (!isLegacyResourceType(universalType)) {
+        throw new Error(`Resource type ${universalType} is not supported by legacy batch API. Use UniversalSearchService path instead.`);
+    }
+    switch (universalType) {
+        case UniversalResourceType.COMPANIES:
+            return ResourceType.COMPANIES;
+        case UniversalResourceType.PEOPLE:
+            return ResourceType.PEOPLE;
+        default:
+            // This should never be reached due to type guard, but TypeScript requires it
+            throw new Error(`Unsupported universal resource type: ${universalType}`);
+    }
+}
+/**
+ * Enhanced batch search for universal tools with error isolation
+ * Supports all universal resource types and returns formatted results
+ *
+ * @param resourceType - Universal resource type to search
+ * @param queries - Array of search query strings
+ * @param searchParams - Additional search parameters (limit, offset, filters)
+ * @param batchConfig - Optional batch configuration
+ * @returns Array of search results with error isolation
+ * @throws Error if validation fails
+ */
+export async function universalBatchSearch(resourceType, queries, searchParams, batchConfig) {
+    // Performance timing start
+    const performanceStart = performance.now();
+    // Validate batch size for search operations
+    const sizeValidation = validateBatchSize(queries, 'search', resourceType);
+    if (!sizeValidation.isValid) {
+        // Get current batch size limit for enhanced error message
+        const maxSize = getBatchSizeLimit(resourceType) || 100;
+        const enhancedError = `${sizeValidation.error}. Attempted to search ${queries.length} queries, but maximum allowed for ${resourceType} is ${maxSize}. Consider breaking your search into smaller batches or using sequential search operations.`;
+        throw new Error(enhancedError);
+    }
+    const { limit, offset, filters } = searchParams || {};
+    // Log batch search initiation
+    const logger = createScopedLogger('api/operations/batch', 'batchSearchObjectsUniversal', OperationType.API_CALL);
+    logger.info(`Starting batch search for ${resourceType}`, {
+        queryCount: queries.length,
+    });
+    try {
+        // Handle resource types not supported by legacy batch API
+        if ([
+            UniversalResourceType.LISTS,
+            UniversalResourceType.RECORDS,
+            UniversalResourceType.TASKS,
+            UniversalResourceType.DEALS,
+        ].includes(resourceType)) {
+            // Use UniversalSearchService for these resource types
+            const result = await handleUniversalResourceTypeBatchSearch(resourceType, queries, { limit, offset, filters });
+            // Log performance metrics
+            const performanceEnd = performance.now();
+            const duration = performanceEnd - performanceStart;
+            const successCount = result.filter((r) => r.success).length;
+            logger.info(`Batch search completed for ${resourceType}`, {
+                durationMs: Number(duration.toFixed(2)),
+                successCount,
+                total: queries.length,
+            });
+            return result;
+        }
+        // For companies and people, use the existing optimized batch API
+        const legacyResourceType = convertUniversalResourceType(resourceType);
+        const batchResponse = await batchSearchObjects(legacyResourceType, queries, batchConfig);
+        // Convert BatchResponse format to UniversalBatchSearchResult format
+        const result = batchResponse.results.map((result, index) => ({
+            success: result.success,
+            query: queries[index],
+            result: result.success ? result.data : undefined,
+            error: result.success
+                ? undefined
+                : result.error instanceof Error
+                    ? result.error.message
+                    : String(result.error),
+        }));
+        // Log performance metrics
+        const performanceEnd = performance.now();
+        const duration = performanceEnd - performanceStart;
+        const successCount = result.filter((r) => r.success).length;
+        logger.info(`Batch search completed for ${resourceType}`, {
+            durationMs: Number(duration.toFixed(2)),
+            successCount,
+            total: queries.length,
+        });
+        return result;
+    }
+    catch (error) {
+        // Log performance metrics for failed operations
+        const performanceEnd = performance.now();
+        const duration = performanceEnd - performanceStart;
+        logger.error(`Batch search failed for ${resourceType}`, error, { durationMs: Number(duration.toFixed(2)) });
+        // If batch operation fails completely, return error for all queries
+        const errorMessage = error instanceof Error ? error.message : String(error);
+        return queries.map((query) => ({
+            success: false,
+            query,
+            error: errorMessage,
+        }));
+    }
+}
+/**
+ * Handle batch search for universal resource types not supported by legacy API
+ * Uses UniversalSearchService with error isolation per query
+ */
+async function handleUniversalResourceTypeBatchSearch(resourceType, queries, searchParams) {
+    const results = [];
+    // Process each query independently with error isolation
+    await Promise.allSettled(queries.map(async (query) => {
+        try {
+            // Dynamic import to avoid circular dependency
+            const { UniversalSearchService } = await import('../../services/UniversalSearchService.js');
+            const searchResult = await UniversalSearchService.searchRecords({
+                resource_type: resourceType,
+                query,
+                filters: searchParams.filters,
+                limit: searchParams.limit,
+                offset: searchParams.offset,
+            });
+            results.push({
+                success: true,
+                query,
+                result: searchResult,
+            });
+        }
+        catch (error) {
+            results.push({
+                success: false,
+                query,
+                error: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }));
+    // Ensure results are in the same order as queries
+    return queries.map((query) => results.find((r) => r.query === query) || {
+        success: false,
+        query,
+        error: 'Query processing failed',
+    });
+}
+/**
+ * Enhanced batch get details for universal tools
+ * Supports all universal resource types with error isolation
+ *
+ * @param resourceType - Universal resource type
+ * @param recordIds - Array of record IDs to fetch
+ * @param batchConfig - Optional batch configuration
+ * @returns Array of get results with error isolation
+ */
+export async function universalBatchGetDetails(resourceType, recordIds, batchConfig) {
+    // Validate batch size
+    const sizeValidation = validateBatchSize(recordIds, 'get', resourceType);
+    if (!sizeValidation.isValid) {
+        // Get current batch size limit for enhanced error message
+        const maxSize = getBatchSizeLimit(resourceType) || 100;
+        const enhancedError = `${sizeValidation.error}. Attempted to get ${recordIds.length} records, but maximum allowed for ${resourceType} is ${maxSize}. Consider breaking your request into smaller batches.`;
+        throw new Error(enhancedError);
+    }
+    // For companies and people, use existing batch API
+    if ([UniversalResourceType.COMPANIES, UniversalResourceType.PEOPLE].includes(resourceType)) {
+        const legacyResourceType = convertUniversalResourceType(resourceType);
+        try {
+            const batchResponse = await batchGetObjectDetails(legacyResourceType, recordIds, batchConfig);
+            return batchResponse.results.map((result, index) => ({
+                success: result.success,
+                recordId: recordIds[index],
+                result: result.success ? result.data : undefined,
+                error: result.success
+                    ? undefined
+                    : result.error instanceof Error
+                        ? result.error.message
+                        : String(result.error),
+            }));
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : String(error);
+            return recordIds.map((recordId) => ({
+                success: false,
+                recordId,
+                error: errorMessage,
+            }));
+        }
+    }
+    // For other resource types, handle individually with error isolation
+    // This would use the appropriate universal service methods
+    return recordIds.map((recordId) => ({
+        success: false,
+        recordId,
+        error: `Batch get details not yet implemented for resource type: ${resourceType}`,
+    }));
+}
 //# sourceMappingURL=batch.js.map