attio-mcp 0.1.2 → 1.1.0

package/dist/config/security-limits.js

@@ -0,0 +1,111 @@
+/**
+ * Security configuration for request size limits and DoS protection
+ *
+ * These limits help prevent denial-of-service attacks by restricting
+ * the size of batch operations and request payloads.
+ */
+/**
+ * Maximum sizes for batch operations by resource type
+ * These limits prevent memory exhaustion and API overload
+ */
+export const BATCH_SIZE_LIMITS = {
+    // Universal batch limits
+    DEFAULT: parseInt(process.env.MAX_BATCH_SIZE || '100', 10),
+    // Resource-specific limits (can be more restrictive)
+    COMPANIES: parseInt(process.env.MAX_BATCH_SIZE_COMPANIES || '100', 10),
+    PEOPLE: parseInt(process.env.MAX_BATCH_SIZE_PEOPLE || '100', 10),
+    RECORDS: parseInt(process.env.MAX_BATCH_SIZE_RECORDS || '100', 10),
+    TASKS: parseInt(process.env.MAX_BATCH_SIZE_TASKS || '50', 10),
+    NOTES: parseInt(process.env.MAX_BATCH_SIZE_NOTES || '50', 10),
+    LISTS: parseInt(process.env.MAX_BATCH_SIZE_LISTS || '100', 10),
+    // Search operations (may return many results)
+    SEARCH: parseInt(process.env.MAX_BATCH_SIZE_SEARCH || '50', 10),
+    // Bulk delete operations (more restrictive for safety)
+    DELETE: parseInt(process.env.MAX_BATCH_SIZE_DELETE || '50', 10),
+};
+/**
+ * Maximum payload sizes for different operation types
+ * Prevents excessively large requests that could cause memory issues
+ */
+export const PAYLOAD_SIZE_LIMITS = {
+    // Maximum size of a single record's data in bytes
+    SINGLE_RECORD: parseInt(process.env.MAX_RECORD_SIZE || '1048576', 10), // 1MB default
+    // Maximum total payload size for batch operations in bytes
+    BATCH_TOTAL: parseInt(process.env.MAX_BATCH_PAYLOAD || '10485760', 10), // 10MB default
+    // Maximum size for search query strings
+    SEARCH_QUERY: parseInt(process.env.MAX_SEARCH_QUERY_SIZE || '1024', 10), // 1KB default
+    // Maximum size for filter objects
+    FILTER_OBJECT: parseInt(process.env.MAX_FILTER_SIZE || '10240', 10), // 10KB default
+};
+/**
+ * Rate limiting configuration for batch operations
+ * Helps prevent API rate limit violations and ensures fair usage
+ */
+export const RATE_LIMITS = {
+    // Maximum concurrent batch requests
+    MAX_CONCURRENT_REQUESTS: parseInt(process.env.MAX_CONCURRENT_BATCH_REQUESTS || '5', 10),
+    // Delay between batch chunks in milliseconds
+    BATCH_DELAY_MS: parseInt(process.env.BATCH_DELAY_MS || '100', 10),
+    // Maximum requests per minute for batch operations
+    MAX_BATCH_REQUESTS_PER_MINUTE: parseInt(process.env.MAX_BATCH_RPM || '60', 10),
+};
+/**
+ * Validation messages for limit violations
+ */
+export const LIMIT_ERROR_MESSAGES = {
+    BATCH_SIZE_EXCEEDED: (size, limit, operation) => `Batch size (${size}) exceeds maximum allowed (${limit})${operation ? ` for ${operation}` : ''}. ` + `Please split into smaller batches for security and performance.`,
+    PAYLOAD_SIZE_EXCEEDED: (size, limit) => `Request payload size (${formatBytes(size)}) exceeds maximum allowed (${formatBytes(limit)}). ` +
+        `Please reduce the amount of data in your request.`,
+    SINGLE_RECORD_SIZE_EXCEEDED: (size, limit) => `Single record size (${formatBytes(size)}) exceeds maximum allowed (${formatBytes(limit)}). ` +
+        `Please reduce the amount of data in this record.`,
+    SEARCH_QUERY_TOO_LONG: (length, limit) => `Search query length (${length} characters) exceeds maximum allowed (${limit} characters). ` +
+        `Please use a shorter search query.`,
+    FILTER_TOO_COMPLEX: (size, limit) => `Filter object size (${formatBytes(size)}) exceeds maximum allowed (${formatBytes(limit)}). ` +
+        `Please simplify your filter criteria.`,
+    RATE_LIMIT_EXCEEDED: (requests, limit) => `Request rate (${requests} requests) exceeds maximum allowed (${limit} per minute). ` +
+        `Please slow down your requests or use smaller batches.`,
+};
+/**
+ * Helper function to format bytes for human-readable error messages
+ */
+function formatBytes(bytes) {
+    if (bytes < 1024)
+        return `${bytes} bytes`;
+    if (bytes < 1048576)
+        return `${(bytes / 1024).toFixed(1)} KB`;
+    return `${(bytes / 1048576).toFixed(1)} MB`;
+}
+/**
+ * Get the batch size limit for a specific resource type
+ */
+export function getBatchSizeLimit(resourceType) {
+    if (!resourceType)
+        return BATCH_SIZE_LIMITS.DEFAULT;
+    const upperType = resourceType.toUpperCase();
+    return (BATCH_SIZE_LIMITS[upperType] ||
+        BATCH_SIZE_LIMITS.DEFAULT);
+}
+/**
+ * Configuration validation on module load
+ */
+function validateConfiguration() {
+    // Ensure all limits are positive numbers
+    for (const [key, value] of Object.entries(BATCH_SIZE_LIMITS)) {
+        if (value <= 0 || isNaN(value)) {
+            throw new Error(`Invalid batch size limit for ${key}: ${value}`);
+        }
+    }
+    for (const [key, value] of Object.entries(PAYLOAD_SIZE_LIMITS)) {
+        if (value <= 0 || isNaN(value)) {
+            throw new Error(`Invalid payload size limit for ${key}: ${value}`);
+        }
+    }
+    for (const [key, value] of Object.entries(RATE_LIMITS)) {
+        if (value <= 0 || isNaN(value)) {
+            throw new Error(`Invalid rate limit for ${key}: ${value}`);
+        }
+    }
+}
+// Validate configuration on module load
+validateConfiguration();
+//# sourceMappingURL=security-limits.js.map

package/dist/config/security-limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-limits.js","sourceRoot":"","sources":["../../src/config/security-limits.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,yBAAyB;IACzB,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,KAAK,EAAE,EAAE,CAAC;IAE1D,qDAAqD;IACrD,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,KAAK,EAAE,EAAE,CAAC;IACtE,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,KAAK,EAAE,EAAE,CAAC;IAChE,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,IAAI,KAAK,EAAE,EAAE,CAAC;IAClE,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,EAAE,EAAE,CAAC;IAC7D,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,IAAI,EAAE,EAAE,CAAC;IAC7D,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,KAAK,EAAE,EAAE,CAAC;IAE9D,8CAA8C;IAC9C,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,IAAI,EAAE,EAAE,CAAC;IAE/D,uDAAuD;IACvD,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,IAAI,EAAE,EAAE,CAAC;CACvD,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,kDAAkD;IAClD,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,EAAE,EAAE,CAAC,EAAE,cAAc;IAErF,2DAA2D;IAC3D,WAAW,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,UAAU,EAAE,EAAE,CAAC,EAAE,eAAe;IAEvF,wCAAwC;IACxC,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,MAAM,EAAE,EAAE,CAAC,EAAE,cAAc;IAEvF,kCAAkC;IAClC,aAAa,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,EAAE,EAAE,CAAC,EAAE,eAAe;CAC5E,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,oCAAoC;IACpC,uBAAuB,EAAE,QAAQ,CAC/B,OAAO,CAAC,GAAG,CAAC,6BAA6B,IAAI,GAAG,EAChD,EAAE,CACH;IAED,6CAA6C;IAC7C,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,KAAK,EAAE,EAAE,CAAC;IAEjE,mDAAmD;IACnD,6BAA6B,EAAE,QAAQ,CACrC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,EACjC,EAAE,CACH;CACO,CAAC;AAEX;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,mBAAmB,EAAE,CAAC,IAAY,EAAE,KAAa,EAAE,SAAkB,EAAE,EAAE,CACvE,eAAe,IAAI,8BAA8B,KAAK,IACpD,SAAS,CAAC,CAAC,CAAC,QAAQ,SAAS,EAAE,CAAC,CAAC,CAAC,EACpC,IAAI,GAAG,iEAAiE;IAE1E,qBAAqB,EAAE,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE,CACrD,yBAAyB,WAAW,CAClC,IAAI,CACL,8BAA8B,WAAW,CAAC,KAAK,CAAC,KAAK;QACtD,mDAAmD;IAErD,2BAA2B,EAAE,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE,CAC3D,uBAAuB,WAAW,CAChC,IAAI,CACL,8BAA8B,WAAW,CAAC,KAAK,CAAC,KAAK;QACtD,kDAAkD;IAEpD,qBAAqB,EAAE,CAAC,MAAc,EAAE,KAAa,EAAE,EAAE,CACvD,wBAAwB,MAAM,yCAAyC,KAAK,gBAAgB;QAC5F,oCAAoC;IAEtC,kBAAkB,EAAE,CAAC,IAAY,EAAE,KAAa,EAAE,EAAE,CAClD,uBAAuB,WAAW,CAChC,IAAI,CACL,8BAA8B,WAAW,CAAC,KAAK,CAAC,KAAK;QACtD,uCAAuC;IAEzC,mBAAmB,EAAE,CAAC,QAAgB,EAAE,KAAa,EAAE,EAAE,CACvD,iBAAiB,QAAQ,uCAAuC,KAAK,gBAAgB;QACrF,wDAAwD;CAClD,CAAC;AAEX;;GAEG;AACH,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,KAAK,GAAG,IAAI;QAAE,OAAO,GAAG,KAAK,QAAQ,CAAC;IAC1C,IAAI,KAAK,GAAG,OAAO;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9D,OAAO,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAqB;IACrD,IAAI,CAAC,YAAY;QAAE,OAAO,iBAAiB,CAAC,OAAO,CAAC;IAEpD,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC;IAC7C,OAAO,CACJ,iBAA4C,CAAC,SAAS,CAAC;QACxD,iBAAiB,CAAC,OAAO,CAC1B,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB;IAC5B,yCAAyC;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC;QAC7D,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC/D,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACvD,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,KAAK,KAAK,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;AACH,CAAC;AAED,wCAAwC;AACxC,qBAAqB,EAAE,CAAC"}

package/dist/config/tool-aliases.d.ts

@@ -0,0 +1,21 @@
+export interface ToolAliasDefinition {
+    /** Canonical tool name to resolve to. */
+    target: string;
+    /** Optional human readable rationale for telemetry. */
+    reason?: string;
+    /** ISO string for when the alias was introduced. */
+    since?: string;
+    /** Optional release identifier for planned removal. */
+    removal?: string;
+}
+export interface ToolAliasResolution {
+    name: string;
+    alias?: {
+        alias: string;
+        definition: ToolAliasDefinition;
+    };
+}
+export declare function resolveToolName(toolName: string): ToolAliasResolution;
+export declare function getToolAliasRegistry(): Record<string, ToolAliasDefinition>;
+export declare function getToolAliasFlag(): string;
+//# sourceMappingURL=tool-aliases.d.ts.map

package/dist/config/tool-aliases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-aliases.d.ts","sourceRoot":"","sources":["../../src/config/tool-aliases.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,mBAAmB;IAClC,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA+ED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,mBAAmB,CAAA;KAAE,CAAC;CAC5D;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,CAwBrE;AAED,wBAAgB,oBAAoB,IAAI,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAE1E;AAED,wBAAgB,gBAAgB,IAAI,MAAM,CAEzC"}

package/dist/config/tool-aliases.js

@@ -0,0 +1,98 @@
+import { warn } from '../utils/logger.js';
+const TOOL_ALIAS_FLAG = 'MCP_DISABLE_TOOL_ALIASES';
+const SINCE_PHASE_1 = '2025-09-30';
+const TOOL_ALIAS_REGISTRY = Object.freeze({
+    'search-records': {
+        target: 'records_search',
+        reason: 'Phase 1 search tool rename (#776)',
+        since: SINCE_PHASE_1,
+        removal: 'v1.x (TBD)',
+    },
+    'get-record-details': {
+        target: 'records_get_details',
+        reason: 'Phase 1 search tool rename (#776)',
+        since: SINCE_PHASE_1,
+        removal: 'v1.x (TBD)',
+    },
+    'get-attributes': {
+        target: 'records_get_attributes',
+        reason: 'Phase 1 search tool rename (#776)',
+        since: SINCE_PHASE_1,
+        removal: 'v1.x (TBD)',
+    },
+    'discover-attributes': {
+        target: 'records_discover_attributes',
+        reason: 'Phase 1 search tool rename (#776)',
+        since: SINCE_PHASE_1,
+        removal: 'v1.x (TBD)',
+    },
+    'get-detailed-info': {
+        target: 'records_get_info',
+        reason: 'Phase 1 search tool rename (#776)',
+        since: SINCE_PHASE_1,
+        removal: 'v1.x (TBD)',
+    },
+    'advanced-search': {
+        target: 'records_search_advanced',
+        reason: 'Phase 1 search tool rename (#776)',
+        since: SINCE_PHASE_1,
+        removal: 'v1.x (TBD)',
+    },
+    'search-by-relationship': {
+        target: 'records_search_by_relationship',
+        reason: 'Phase 1 search tool rename (#776)',
+        since: SINCE_PHASE_1,
+        removal: 'v1.x (TBD)',
+    },
+    'search-by-content': {
+        target: 'records_search_by_content',
+        reason: 'Phase 1 search tool rename (#776)',
+        since: SINCE_PHASE_1,
+        removal: 'v1.x (TBD)',
+    },
+    'search-by-timeframe': {
+        target: 'records_search_by_timeframe',
+        reason: 'Phase 1 search tool rename (#776)',
+        since: SINCE_PHASE_1,
+        removal: 'v1.x (TBD)',
+    },
+    'batch-operations': {
+        target: 'records_batch',
+        reason: 'Phase 1 search tool rename (#776)',
+        since: SINCE_PHASE_1,
+        removal: 'v1.x (TBD)',
+    },
+    'batch-search': {
+        target: 'records_search_batch',
+        reason: 'Phase 1 search tool rename (#776)',
+        since: SINCE_PHASE_1,
+        removal: 'v1.x (TBD)',
+    },
+});
+function aliasesEnabled() {
+    return process.env[TOOL_ALIAS_FLAG] !== 'true';
+}
+export function resolveToolName(toolName) {
+    if (!aliasesEnabled()) {
+        return { name: toolName };
+    }
+    const definition = TOOL_ALIAS_REGISTRY[toolName];
+    if (!definition) {
+        return { name: toolName };
+    }
+    warn('tools.aliases', 'Resolved deprecated tool alias', {
+        alias: toolName,
+        target: definition.target,
+        reason: definition.reason,
+        since: definition.since,
+        removal: definition.removal,
+    }, 'alias-resolution');
+    return { name: definition.target, alias: { alias: toolName, definition } };
+}
+export function getToolAliasRegistry() {
+    return TOOL_ALIAS_REGISTRY;
+}
+export function getToolAliasFlag() {
+    return TOOL_ALIAS_FLAG;
+}
+//# sourceMappingURL=tool-aliases.js.map

package/dist/config/tool-aliases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-aliases.js","sourceRoot":"","sources":["../../src/config/tool-aliases.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAazC,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAEnD,MAAM,aAAa,GAAG,YAAY,CAAC;AAEnC,MAAM,mBAAmB,GAAwC,MAAM,CAAC,MAAM,CAAC;IAC7E,gBAAgB,EAAE;QAChB,MAAM,EAAE,gBAAgB;QACxB,MAAM,EAAE,mCAAmC;QAC3C,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,YAAY;KACtB;IACD,oBAAoB,EAAE;QACpB,MAAM,EAAE,qBAAqB;QAC7B,MAAM,EAAE,mCAAmC;QAC3C,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,YAAY;KACtB;IACD,gBAAgB,EAAE;QAChB,MAAM,EAAE,wBAAwB;QAChC,MAAM,EAAE,mCAAmC;QAC3C,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,YAAY;KACtB;IACD,qBAAqB,EAAE;QACrB,MAAM,EAAE,6BAA6B;QACrC,MAAM,EAAE,mCAAmC;QAC3C,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,YAAY;KACtB;IACD,mBAAmB,EAAE;QACnB,MAAM,EAAE,kBAAkB;QAC1B,MAAM,EAAE,mCAAmC;QAC3C,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,YAAY;KACtB;IACD,iBAAiB,EAAE;QACjB,MAAM,EAAE,yBAAyB;QACjC,MAAM,EAAE,mCAAmC;QAC3C,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,YAAY;KACtB;IACD,wBAAwB,EAAE;QACxB,MAAM,EAAE,gCAAgC;QACxC,MAAM,EAAE,mCAAmC;QAC3C,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,YAAY;KACtB;IACD,mBAAmB,EAAE;QACnB,MAAM,EAAE,2BAA2B;QACnC,MAAM,EAAE,mCAAmC;QAC3C,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,YAAY;KACtB;IACD,qBAAqB,EAAE;QACrB,MAAM,EAAE,6BAA6B;QACrC,MAAM,EAAE,mCAAmC;QAC3C,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,YAAY;KACtB;IACD,kBAAkB,EAAE;QAClB,MAAM,EAAE,eAAe;QACvB,MAAM,EAAE,mCAAmC;QAC3C,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,YAAY;KACtB;IACD,cAAc,EAAE;QACd,MAAM,EAAE,sBAAsB;QAC9B,MAAM,EAAE,mCAAmC;QAC3C,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,YAAY;KACtB;CACF,CAAC,CAAC;AAEH,SAAS,cAAc;IACrB,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,MAAM,CAAC;AACjD,CAAC;AAOD,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,UAAU,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5B,CAAC;IAED,IAAI,CACF,eAAe,EACf,gCAAgC,EAChC;QACE,KAAK,EAAE,QAAQ;QACf,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,OAAO,EAAE,UAAU,CAAC,OAAO;KAC5B,EACD,kBAAkB,CACnB,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO,eAAe,CAAC;AACzB,CAAC"}

package/dist/config/tool-mode.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Determines which MCP tool set should be exposed to clients.
+ *
+ * By default we expose the complete universal tool catalogue. Setting
+ * `ATTIO_MCP_TOOL_MODE=search` limits the surface area to the lightweight
+ * search/fetch compatibility tools that match OpenAI's baseline MCP support.
+ */
+/**
+ * Returns true when the server should run in search-only compatibility mode.
+ */
+export declare function isSearchOnlyMode(): boolean;
+/**
+ * Determines whether a given tool name may be exposed in the current mode.
+ */
+export declare function isToolAllowed(toolName: string): boolean;
+/**
+ * Filters an array of tool definitions/configurations so only the allowed
+ * tools are returned for the active server mode.
+ */
+export declare function filterAllowedTools<T extends {
+    name: string;
+}>(tools: T[]): T[];
+//# sourceMappingURL=tool-mode.d.ts.map

package/dist/config/tool-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-mode.d.ts","sourceRoot":"","sources":["../../src/config/tool-mode.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAG1C;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAKvD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,CAAC,SAAS;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,EAC3D,KAAK,EAAE,CAAC,EAAE,GACT,CAAC,EAAE,CAKL"}

package/dist/config/tool-mode.js

@@ -0,0 +1,36 @@
+/**
+ * Determines which MCP tool set should be exposed to clients.
+ *
+ * By default we expose the complete universal tool catalogue. Setting
+ * `ATTIO_MCP_TOOL_MODE=search` limits the surface area to the lightweight
+ * search/fetch compatibility tools that match OpenAI's baseline MCP support.
+ */
+const SEARCH_ONLY_ENV_VALUE = 'search';
+const SEARCH_ONLY_TOOL_NAMES = new Set(['search', 'fetch', 'aaa-health-check']);
+/**
+ * Returns true when the server should run in search-only compatibility mode.
+ */
+export function isSearchOnlyMode() {
+    const mode = (process.env.ATTIO_MCP_TOOL_MODE ?? '').toLowerCase();
+    return mode === SEARCH_ONLY_ENV_VALUE;
+}
+/**
+ * Determines whether a given tool name may be exposed in the current mode.
+ */
+export function isToolAllowed(toolName) {
+    if (!isSearchOnlyMode()) {
+        return true;
+    }
+    return SEARCH_ONLY_TOOL_NAMES.has(toolName);
+}
+/**
+ * Filters an array of tool definitions/configurations so only the allowed
+ * tools are returned for the active server mode.
+ */
+export function filterAllowedTools(tools) {
+    if (!isSearchOnlyMode()) {
+        return tools;
+    }
+    return tools.filter((tool) => isToolAllowed(tool.name));
+}
+//# sourceMappingURL=tool-mode.js.map

package/dist/config/tool-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-mode.js","sourceRoot":"","sources":["../../src/config/tool-mode.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,qBAAqB,GAAG,QAAQ,CAAC;AAEvC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAEhF;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,OAAO,IAAI,KAAK,qBAAqB,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,sBAAsB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAU;IAEV,IAAI,CAAC,gBAAgB,EAAE,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC"}

package/dist/constants/universal.constants.d.ts

@@ -0,0 +1,237 @@
+/**
+ * Universal Constants for Attio MCP Server
+ *
+ * Centralized location for all magic numbers, field mappings, and configuration
+ * constants used throughout the universal handlers and services.
+ *
+ * Addresses PR feedback: Extract constants to improve maintainability and
+ * reduce magic numbers scattered throughout the codebase.
+ */
+import { UniversalResourceType } from '../handlers/tool-configs/universal/types.js';
+/** Default TTL for tasks cache in milliseconds (30 seconds) */
+export declare const DEFAULT_TASKS_CACHE_TTL = 30000;
+/** Default TTL for 404 response cache in milliseconds (60 seconds) */
+export declare const DEFAULT_404_CACHE_TTL = 60000;
+/** Default TTL for attribute discovery cache in milliseconds (5 minutes) */
+export declare const DEFAULT_ATTRIBUTES_CACHE_TTL = 300000;
+/** Maximum number of cache entries before cleanup */
+export declare const MAX_CACHE_ENTRIES = 1000;
+/** Maximum number of suggestions to show in validation errors */
+export declare const MAX_VALIDATION_SUGGESTIONS = 5;
+/** Maximum length for truncated suggestion text */
+export declare const MAX_SUGGESTION_TEXT_LENGTH = 100;
+/** Default request timeout in milliseconds */
+export declare const DEFAULT_REQUEST_TIMEOUT = 30000;
+/** Maximum number of retry attempts for API calls */
+export declare const MAX_RETRY_ATTEMPTS = 3;
+/** Base delay between retries in milliseconds */
+export declare const RETRY_BASE_DELAY = 1000;
+/**
+ * Maps various resource type strings to canonical UniversalResourceType values
+ * Handles common typos and plural/singular variations
+ */
+export declare const RESOURCE_TYPE_MAPPINGS: Record<string, UniversalResourceType>;
+/**
+ * Maps resource types to their Attio API object slugs
+ * Used for schema discovery and API routing
+ */
+export declare const OBJECT_SLUG_MAP: Record<string, string>;
+export declare const COMPANY_FIELD_MAPPINGS: {
+    website: string;
+    url: string;
+    company_name: string;
+    company_domain: string;
+    domain: string;
+    website_url: string;
+    company_url: string;
+    site: string;
+    homepage: string;
+    web: string;
+    industry_type: string;
+    business_type: string;
+    sector: string;
+    category: string;
+    about: string;
+    summary: string;
+    overview: string;
+    info: string;
+    details: string;
+    size: string;
+    employees: string;
+    employee_count: string;
+    headcount: string;
+    staff_count: string;
+};
+export declare const COMPANY_VALID_FIELDS: string[];
+export declare const COMPANY_COMMON_MISTAKES: {
+    website: string;
+    url: string;
+    company_name: string;
+    about: string;
+    size: string;
+};
+export declare const PEOPLE_FIELD_MAPPINGS: {
+    full_name: string;
+    fullname: string;
+    person_name: string;
+    contact_name: string;
+    individual_name: string;
+    email: string;
+    emails: string;
+    email_address: string;
+    contact_email: string;
+    work_email: string;
+    business_email: string;
+    phone: string;
+    phones: string;
+    phone_number: string;
+    contact_phone: string;
+    mobile: string;
+    cell: string;
+    telephone: string;
+    job_title: string;
+    position: string;
+    role: string;
+    job_position: string;
+    job_role: string;
+    occupation: string;
+    designation: string;
+};
+export declare const PEOPLE_VALID_FIELDS: string[];
+export declare const PEOPLE_COMMON_MISTAKES: {
+    email: string;
+    phone: string;
+    job_title: string;
+    full_name: string;
+};
+export declare const TASK_FIELD_MAPPINGS: {
+    task: string;
+    description: string;
+    title: string;
+    name: string;
+    task_name: string;
+    task_title: string;
+    task_description: string;
+    todo: string;
+    item: string;
+    status: string;
+    completed: string;
+    done: string;
+    finished: string;
+    complete: string;
+    is_done: string;
+    is_finished: string;
+    deadline: string;
+    due_date: string;
+    due: string;
+    expires_at: string;
+    completion_date: string;
+    target_date: string;
+    assignee: string;
+    assigned_to: string;
+    owner: string;
+    responsible: string;
+    assigned_user: string;
+    task_owner: string;
+    linked_record: string;
+    related_records: string;
+    connected_records: string;
+    associated_records: string;
+};
+export declare const TASK_VALID_FIELDS: string[];
+export declare const TASK_COMMON_MISTAKES: {
+    task: string;
+    title: string;
+    status: string;
+    deadline: string;
+    assignee: string;
+};
+export declare const DEAL_FIELD_MAPPINGS: {
+    deal_name: string;
+    opportunity_name: string;
+    title: string;
+    deal_title: string;
+    amount: string;
+    deal_value: string;
+    opportunity_value: string;
+    deal_amount: string;
+    revenue: string;
+    deal_stage: string;
+    opportunity_stage: string;
+    sales_stage: string;
+    pipeline_stage: string;
+    close_date: string;
+    expected_close: string;
+    target_close: string;
+    projected_close: string;
+};
+export declare const DEAL_VALID_FIELDS: string[];
+export declare const DEAL_COMMON_MISTAKES: {
+    amount: string;
+    deal_name: string;
+    deal_stage: string;
+    close_date: string;
+};
+export declare const RECORD_FIELD_MAPPINGS: {
+    title: string;
+    record_name: string;
+};
+export declare const RECORD_VALID_FIELDS: string[];
+export declare const RECORD_COMMON_MISTAKES: {
+    title: string;
+};
+export declare const NOTE_FIELD_MAPPINGS: {
+    note: string;
+    text: string;
+    body: string;
+    message: string;
+    description: string;
+    comment: string;
+    note_title: string;
+    subject: string;
+    heading: string;
+    parent: string;
+    record_id: string;
+    attached_to: string;
+    linked_to: string;
+    object_type: string;
+    parent_type: string;
+    attached_to_type: string;
+};
+export declare const NOTE_VALID_FIELDS: string[];
+export declare const NOTE_COMMON_MISTAKES: {
+    note: string;
+    text: string;
+    parent: string;
+    object_type: string;
+};
+export declare const ERROR_MESSAGES: {
+    INVALID_RESOURCE_TYPE: (type: string) => string;
+    MISSING_REQUIRED_FIELD: (field: string) => string;
+    INVALID_FIELD_TYPE: (field: string, expected: string, received: string) => string;
+    FIELD_COLLISION: (fields: string[], target: string) => string;
+    ATTRIBUTE_DISCOVERY_FAILED: (resourceType: string) => string;
+    CACHE_CLEANUP_FAILED: string;
+    VALIDATION_FAILED: (resourceType: string) => string;
+};
+/** Regex pattern for valid email addresses (basic validation) */
+export declare const EMAIL_PATTERN: RegExp;
+/** Regex pattern for valid phone numbers (international format) */
+export declare const PHONE_PATTERN: RegExp;
+/** Regex pattern for valid URLs */
+export declare const URL_PATTERN: RegExp;
+/** Regex pattern for valid UUID format */
+export declare const UUID_PATTERN: RegExp;
+/** Values that should be converted to true */
+export declare const TRUTHY_VALUES: string[];
+/** Values that should be converted to false */
+export declare const FALSY_VALUES: string[];
+/** Default page size for paginated requests */
+export declare const DEFAULT_PAGE_SIZE = 25;
+/** Maximum page size allowed */
+export declare const MAX_PAGE_SIZE = 100;
+/** Default limit for search results */
+export declare const DEFAULT_SEARCH_LIMIT = 10;
+/** Maximum search results limit */
+export declare const MAX_SEARCH_LIMIT = 500;
+//# sourceMappingURL=universal.constants.d.ts.map

package/dist/constants/universal.constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"universal.constants.d.ts","sourceRoot":"","sources":["../../src/constants/universal.constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,qBAAqB,EAAE,MAAM,6CAA6C,CAAC;AAMpF,+DAA+D;AAC/D,eAAO,MAAM,uBAAuB,QAAQ,CAAC;AAE7C,sEAAsE;AACtE,eAAO,MAAM,qBAAqB,QAAQ,CAAC;AAE3C,4EAA4E;AAC5E,eAAO,MAAM,4BAA4B,SAAS,CAAC;AAEnD,qDAAqD;AACrD,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAMtC,iEAAiE;AACjE,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C,mDAAmD;AACnD,eAAO,MAAM,0BAA0B,MAAM,CAAC;AAE9C,8CAA8C;AAC9C,eAAO,MAAM,uBAAuB,QAAQ,CAAC;AAE7C,qDAAqD;AACrD,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC,iDAAiD;AACjD,eAAO,MAAM,gBAAgB,OAAO,CAAC;AAMrC;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,qBAAqB,CA4BxE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAQlD,CAAC;AAMF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;CA8BlC,CAAC;AAEF,eAAO,MAAM,oBAAoB,UAehC,CAAC;AAEF,eAAO,MAAM,uBAAuB;;;;;;CAMnC,CAAC;AAMF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;CAiCjC,CAAC;AAEF,eAAO,MAAM,mBAAmB,UAY/B,CAAC;AAEF,eAAO,MAAM,sBAAsB;;;;;CAKlC,CAAC;AAMF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0C/B,CAAC;AAEF,eAAO,MAAM,iBAAiB,UAS7B,CAAC;AAEF,eAAO,MAAM,oBAAoB;;;;;;CAMhC,CAAC;AAMF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;CAyB/B,CAAC;AAEF,eAAO,MAAM,iBAAiB,UAW7B,CAAC;AAEF,eAAO,MAAM,oBAAoB;;;;;CAKhC,CAAC;AAMF,eAAO,MAAM,qBAAqB;;;CAIjC,CAAC;AAEF,eAAO,MAAM,mBAAmB,UAS/B,CAAC;AAEF,eAAO,MAAM,sBAAsB;;CAElC,CAAC;AAMF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;CAwB/B,CAAC;AAEF,eAAO,MAAM,iBAAiB,UAQ7B,CAAC;AAEF,eAAO,MAAM,oBAAoB;;;;;CAMhC,CAAC;AAMF,eAAO,MAAM,cAAc;kCACK,MAAM;oCACJ,MAAM;gCACV,MAAM,YAAY,MAAM,YAAY,MAAM;8BAE5C,MAAM,EAAE,UAAU,MAAM;+CAEP,MAAM;;sCAGf,MAAM;CAEzC,CAAC;AAMF,iEAAiE;AACjE,eAAO,MAAM,aAAa,QAA+B,CAAC;AAE1D,mEAAmE;AACnE,eAAO,MAAM,aAAa,QAAqB,CAAC;AAEhD,mCAAmC;AACnC,eAAO,MAAM,WAAW,QAAoB,CAAC;AAE7C,0CAA0C;AAC1C,eAAO,MAAM,YAAY,QACqD,CAAC;AAM/E,8CAA8C;AAC9C,eAAO,MAAM,aAAa,UAWzB,CAAC;AAEF,+CAA+C;AAC/C,eAAO,MAAM,YAAY,UAWxB,CAAC;AAMF,+CAA+C;AAC/C,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAEpC,gCAAgC;AAChC,eAAO,MAAM,aAAa,MAAM,CAAC;AAEjC,uCAAuC;AACvC,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAEvC,mCAAmC;AACnC,eAAO,MAAM,gBAAgB,MAAM,CAAC"}