npm - sdlc-agent-4-enterprise-server - Versions diffs - 1.55.8 → 1.55.10 - Mend

sdlc-agent-4-enterprise-server 1.55.8 → 1.55.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (16) hide show

package/Dockerfile +12 -11
package/README.md +1 -1
package/dist/index.js +14 -0
package/dist/index.js.map +1 -1
package/dist/modules/pega/ingest-error-classifier.d.ts +37 -0
package/dist/modules/pega/ingest-error-classifier.js +77 -0
package/dist/modules/pega/ingest-error-classifier.js.map +1 -0
package/dist/server/HttpServer.js +11 -0
package/dist/server/HttpServer.js.map +1 -1
package/dist/server/routes/pega-ingest-rule.js +105 -62
package/dist/server/routes/pega-ingest-rule.js.map +1 -1
package/package.json +6 -3
package/src/index.ts +15 -0
package/src/modules/pega/ingest-error-classifier.ts +128 -0
package/src/server/HttpServer.ts +11 -0
package/src/server/routes/pega-ingest-rule.ts +69 -17

package/Dockerfile CHANGED Viewed

@@ -1,13 +1,13 @@
 # syntax=docker/dockerfile:1
 # =============================================================================
-# SA4E-335 Backend Dockerfile — Node.js 22 + Hono Code Intelligence MCP Server
+# SA4E-335 Backend Dockerfile — Node.js 22.23.4 + Hono Code Intelligence MCP Server
 # -----------------------------------------------------------------------------
 # Multi-stage build (7 stages): base, deps, build, mcp-python, production,
 # development, test. `production` is the SOLE CI push target (TDD AD-2).
 # Build-only tooling never reaches the runtime image.
 #
 # Design decisions (TDD §3.2 / Security Review):
-#   - AD-1 : base = node:22-slim (Debian/glibc) so native modules such as
+#   - AD-1 : base = node:22.23.4-slim (Debian/glibc) so native modules such as
 #            onnxruntime-node link against glibc (musl/alpine is incompatible).
 #   - SEC-02 (Critical): base image pinned by immutable sha256 DIGEST, not only
 #            the mutable tag, to keep the build hermetic/reproducible. The human
@@ -29,10 +29,10 @@
 # =============================================================================
 # --- Build-time arguments (NO secrets — build args must never carry credentials, BR-17) ---
-ARG NODE_VERSION=22
-# node:22-slim — pin by digest for a reproducible supply chain (SEC-02).
+ARG NODE_VERSION=22.23.4
+# node:22.23.4-slim — pin by digest for a reproducible supply chain (SEC-02).
 # Tag kept for readability; the digest is the authoritative pin.
-ARG NODE_BASE_DIGEST=sha256:43ac6c60b8f89723f746e8a92ce91abd5017e627ce1ddfe4238355d3a30b772c
+ARG NODE_BASE_DIGEST=sha256:de170b39439eb0e5a3444ad7d60b015614a381e10fecae2e30ec9e735122f38d
 # -----------------------------------------------------------------------------
 # base — shared workdir + build toolchain (glibc). Build-time only.
@@ -173,7 +173,7 @@ RUN python3 -m venv /opt/markdown-exporter-venv \
 # -----------------------------------------------------------------------------
 # production ★ — runtime image. SOLE CI push target. Minimal surface, non-root.
-# No git, no compilers (SEC-05). node:22-slim pinned by digest (SEC-02).
+# No git, no compilers (SEC-05). node:22.23.4-slim pinned by digest (SEC-02).
 # -----------------------------------------------------------------------------
 FROM node:${NODE_VERSION}-slim@${NODE_BASE_DIGEST} AS production
 WORKDIR /app
@@ -182,10 +182,11 @@ WORKDIR /app
 # npm CLI that the base image bundles under /usr/local/lib/node_modules/npm.
 # Those copies (pacote, sigstore, brace-expansion, picomatch, ip-address,
 # undici) are NOT reachable from backend/package-lock.json, and the pinned
-# node:22-slim digest is already the latest — so the fix is to bump the CLI
+# node:22.23.4-slim digest is already the latest — so the fix is to bump the CLI
 # itself (10.9.9 → NPM_VERSION: pacote/sigstore majors land on patched lines)
 # and refresh the two packages upstream has not re-released yet, using
-# same-major PATCH releases only (5.0.9→5.0.12, 6.28.0→6.28.1).
+# same-major releases only (5.0.9→5.0.12; undici 6.28.0→6.29.1 clears
+# CVE-2026-109383 + CVE-2026-87018, both fixed in undici 6.29.1).
 # npm/npx stay installed: the sandbox module's local-mode fallback (UC-06)
 # shells out to them at runtime, so removing the CLI would be a regression.
 # Build stages keep the base npm for `npm ci` — only the runtime CLI moves.
@@ -194,7 +195,7 @@ WORKDIR /app
 ARG NPM_VERSION=11.21.0
 RUN npm install -g npm@${NPM_VERSION} --no-audit --no-fund --loglevel=error \
   && NM=/usr/local/lib/node_modules/npm/node_modules \
-  && for entry in "brace-expansion 5.0.12" "undici 6.28.1"; do \
+  && for entry in "brace-expansion 5.0.12" "undici 6.29.1"; do \
        name=$(echo "$entry" | cut -d ' ' -f1); ver=$(echo "$entry" | cut -d ' ' -f2); \
        tgz=$(npm pack "${name}@${ver}" --pack-destination /tmp --silent); \
        rm -rf "${NM}/${name}"; mkdir -p "${NM}/${name}"; \
@@ -206,7 +207,7 @@ RUN npm install -g npm@${NPM_VERSION} --no-audit --no-fund --loglevel=error \
   # SEC-04: upgrade Debian packages to fix CVE-2026-103111 (libpcre2-8-0 HIGH)
   # and the perl CVE set found by Trivy on 2026-10-10 (CVE-2026-13221 CRITICAL,
   # CVE-2026-42497 HIGH, CVE-2026-42496, CVE-2026-8376, CVE-2026-48962,
-  # CVE-2026-57432, CVE-2026-57433 — perl-base/perl-modules in node:XX-slim)
+  # CVE-2026-57432, CVE-2026-57433 — perl-base/perl-modules in node:22.23.4-slim)
   && apt-get update \
   && apt-get upgrade -y --no-install-recommends libpcre2-8-0 perl-base perl-modules-5.36 \
   && apt-get clean \
@@ -265,7 +266,7 @@ ENV INDEX_CONCURRENCY_LIMIT=8
 EXPOSE 48721
-# Dependency-free health probe (SEC-12): node:22-slim does not ship `wget`, so a
+# Dependency-free health probe (SEC-12): node:22.23.4-slim does not ship `wget`, so a
 # wget-based probe would silently fail. Use node's built-in http client instead.
 HEALTHCHECK --interval=30s --timeout=5s --start-period=10s --retries=3 \
   CMD node -e "require('http').get('http://localhost:'+(process.env.PORT||48721)+'/health',r=>process.exit(r.statusCode===200?0:1)).on('error',()=>process.exit(1))"

package/README.md CHANGED Viewed

@@ -6,7 +6,7 @@
 </p>
 <p align="center">
-  <img src="https://img.shields.io/badge/version-1.55.8-blue?style=for-the-badge" alt="Version">
+  <img src="https://img.shields.io/badge/version-1.55.10-blue?style=for-the-badge" alt="Version">
   <img src="https://img.shields.io/badge/tools-66+-teal?style=for-the-badge" alt="Tools">
   <img src="https://img.shields.io/badge/node-%3E%3D18-green?style=for-the-badge" alt="Node">
 </p>

package/dist/index.js CHANGED Viewed

@@ -105,6 +105,20 @@ async function main() {
     };
     process.on('SIGTERM', () => shutdown('SIGTERM'));
     process.on('SIGINT', () => shutdown('SIGINT'));
+    // Global crash guards: a single rejected/uncaught error on an async path (e.g.
+    // Pega ingest) must NOT silently kill the process. Without these, Node tears the
+    // process down and EVERY in-flight HTTP socket fails at once as
+    // `UND_ERR_SOCKET "other side closed"` on the client — the exact Pega-ingest symptom.
+    // We log with full context so the real throw site is attributable instead of invisible.
+    process.on('unhandledRejection', (reason) => {
+        const err = reason instanceof Error ? { message: reason.message, stack: reason.stack } : { reason };
+        logger.error(err, '[fatal] Unhandled promise rejection — process kept alive for diagnosis');
+    });
+    process.on('uncaughtException', (err) => {
+        logger.error({ message: err.message, stack: err.stack }, '[fatal] Uncaught exception — process kept alive for diagnosis');
+        // Intentionally NOT exiting: an isolated ingest-path throw should not drop all
+        // concurrent connections. Fatal startup errors are still caught by main().catch.
+    });
     logger.info({ pid: process.pid, port: config.port, version: VERSION }, 'Backend MCP Server ready');
 }
 main().catch((err) => {

package/dist/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,IAAI,MAAM,cAAc,CAAC;AAChC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,+CAA+C,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAE9E,MAAM,OAAO,GAAG,OAAO,CAAC;AACxB,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;AAE7C,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAE5B,MAAM,MAAM,GAAG,IAAI,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC,QAAQ;QACtB,SAAS,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE;KAChE,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,6BAA6B,CAAC,CAAC;IAEnH,6BAA6B;IAC7B,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;IAClC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,SAAS,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,SAAS,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAE/C,iCAAiC;IACjC,MAAM,YAAY,EAAE,CAAC;IAErB,uEAAuE;IACvE,IAAI,CAAC;QACH,MAAM,mBAAmB,EAAE,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,sDAAsD,CAAC,CAAC;IAChF,CAAC;IAED,iEAAiE;IACjE,6DAA6D;IAC7D,mEAAmE;IACnE,IAAI,CAAC;QACH,MAAM,mBAAmB,EAAE,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,yEAAyE,CAAC,CAAC;IACnG,CAAC;IAED,mFAAmF;IACnF,IAAI,CAAC;QACH,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,gEAAgE,CAAC,CAAC;IAC1F,CAAC;IAED,6BAA6B;IAC7B,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE;QAClD,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,aAAa;QACxC,OAAO,EAAE,OAAO;KACjB,EAAE,SAAS,CAAC,CAAC;IAEd,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAE/B,wEAAwE;IACxE,6DAA6D;IAC7D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,4BAA4B,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAElG,2BAA2B;IAC3B,MAAM,QAAQ,CAAC,aAAa,EAAE,CAAC;IAC/B,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAE9E,MAAM,CAAC,IAAI,CACT,EAAE,YAAY,EAAE,QAAQ,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,aAAa,EAAE,EAAE,EAClF,qBAAqB,CACtB,CAAC;IAEF,sBAAsB;IACtB,oDAAoD;IACpD,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,EAAE,8BAA8B,CAAC,CAAC;IAChE,CAAC;IAED,oEAAoE;IACpE,4EAA4E;IAC5E,MAAM,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAErC,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAC9C,MAAM,gBAAgB,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IACtE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAErB,4BAA4B;IAC5B,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC;QACpD,0EAA0E;QAC1E,4EAA4E;QAC5E,yDAAyD;QACzD,IAAI,CAAC;YACH,MAAM,EAAE,iCAAiC,EAAE,GAAG,MAAM,MAAM,CAAC,gDAAgD,CAAC,CAAC;YAC7G,MAAM,iCAAiC,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,2DAA2D,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE/C,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,0BAA0B,CAAC,CAAC;AACrG,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,UAAU,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,+BAA+B,CAAC,CAAC;IAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
1	+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,IAAI,MAAM,cAAc,CAAC;AAChC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AACpF,OAAO,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,+CAA+C,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,sCAAsC,CAAC;AAE9E,MAAM,OAAO,GAAG,OAAO,CAAC;AACxB,MAAM,UAAU,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;AAE7C,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAE5B,MAAM,MAAM,GAAG,IAAI,CAAC;QAClB,KAAK,EAAE,MAAM,CAAC,QAAQ;QACtB,SAAS,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE;KAChE,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,6BAA6B,CAAC,CAAC;IAEnH,6BAA6B;IAC7B,MAAM,SAAS,GAAG,IAAI,SAAS,EAAE,CAAC;IAClC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,SAAS,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,SAAS,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAE/C,iCAAiC;IACjC,MAAM,YAAY,EAAE,CAAC;IAErB,uEAAuE;IACvE,IAAI,CAAC;QACH,MAAM,mBAAmB,EAAE,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,sDAAsD,CAAC,CAAC;IAChF,CAAC;IAED,iEAAiE;IACjE,6DAA6D;IAC7D,mEAAmE;IACnE,IAAI,CAAC;QACH,MAAM,mBAAmB,EAAE,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,yEAAyE,CAAC,CAAC;IACnG,CAAC;IAED,mFAAmF;IACnF,IAAI,CAAC;QACH,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,gEAAgE,CAAC,CAAC;IAC1F,CAAC;IAED,6BAA6B;IAC7B,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE;QAClD,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,aAAa;QACxC,OAAO,EAAE,OAAO;KACjB,EAAE,SAAS,CAAC,CAAC;IAEd,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAE/B,wEAAwE;IACxE,6DAA6D;IAC7D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC,4BAA4B,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAElG,2BAA2B;IAC3B,MAAM,QAAQ,CAAC,aAAa,EAAE,CAAC;IAC/B,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAE9E,MAAM,CAAC,IAAI,CACT,EAAE,YAAY,EAAE,QAAQ,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,QAAQ,CAAC,aAAa,EAAE,EAAE,EAClF,qBAAqB,CACtB,CAAC;IAEF,sBAAsB;IACtB,oDAAoD;IACpD,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjC,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,EAAE,8BAA8B,CAAC,CAAC;IAChE,CAAC;IAED,oEAAoE;IACpE,4EAA4E;IAC5E,MAAM,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAErC,MAAM,UAAU,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAC9C,MAAM,gBAAgB,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IACtE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IAErB,4BAA4B;IAC5B,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC;QACpD,0EAA0E;QAC1E,4EAA4E;QAC5E,yDAAyD;QACzD,IAAI,CAAC;YACH,MAAM,EAAE,iCAAiC,EAAE,GAAG,MAAM,MAAM,CAAC,gDAAgD,CAAC,CAAC;YAC7G,MAAM,iCAAiC,EAAE,CAAC;QAC5C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,2DAA2D,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE/C,+EAA+E;IAC/E,iFAAiF;IACjF,gEAAgE;IAChE,sFAAsF;IACtF,wFAAwF;IACxF,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAe,EAAE,EAAE;QACnD,MAAM,GAAG,GAAG,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QACpG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,wEAAwE,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAU,EAAE,EAAE;QAC7C,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,+DAA+D,CAAC,CAAC;QAC1H,+EAA+E;QAC/E,iFAAiF;IACnF,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,0BAA0B,CAAC,CAAC;AACrG,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,UAAU,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,+BAA+B,CAAC,CAAC;IAC3D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/modules/pega/ingest-error-classifier.d.ts ADDED Viewed

@@ -0,0 +1,37 @@
+/**
+ * Classify ingest-path errors into a safe, structured envelope so the extension
+ * can decide retry-vs-skip and show the user a cause WITHOUT reading server logs.
+ *
+ * SEC: we expose a stable `code`, a category, a retryable flag, and the error's
+ * class name — but NEVER the raw stack, SQL text, or internal paths (those stay
+ * in the server log only). The message is a classified, non-leaky summary.
+ */
+/** Stable error codes returned to the extension (contract — do not rename lightly). */
+export type IngestErrorCode = 'VALIDATION_ERROR' | 'MISSING_CHECKSUM' | 'DB_TRANSIENT' | 'DB_PERMANENT' | 'EXTRACTION_ERROR' | 'INTERNAL_ERROR';
+/** Coarse category for UI grouping. */
+export type IngestErrorCategory = 'validation' | 'database' | 'extraction' | 'unknown';
+/**
+ * Structured, log-free error detail for the response envelope.
+ * `retryable` lets the extension distinguish a transient fault (retry with
+ * backoff) from a permanent one (skip the rule, don't hammer the backend).
+ */
+export interface IngestErrorDetails {
+    category: IngestErrorCategory;
+    retryable: boolean;
+    /** Error constructor name (e.g. "MissingChecksumError") — safe, no payload. */
+    errorName: string;
+}
+/** Full classified result the route turns into `{ code, message, details }`. */
+export interface ClassifiedIngestError {
+    code: IngestErrorCode;
+    message: string;
+    details: IngestErrorDetails;
+}
+/**
+ * Classify an unknown thrown value into a safe envelope error.
+ * @param err - The caught error (any shape).
+ * @returns A classified, log-free error contract for the response body.
+ */
+export declare function classifyIngestError(err: unknown): ClassifiedIngestError;
+/** Classify a post-ingest extraction-phase failure (schema map / RelativeExtractor). */
+export declare function classifyExtractionError(err: unknown): ClassifiedIngestError;

package/dist/modules/pega/ingest-error-classifier.js ADDED Viewed

@@ -0,0 +1,77 @@
+/**
+ * Classify ingest-path errors into a safe, structured envelope so the extension
+ * can decide retry-vs-skip and show the user a cause WITHOUT reading server logs.
+ *
+ * SEC: we expose a stable `code`, a category, a retryable flag, and the error's
+ * class name — but NEVER the raw stack, SQL text, or internal paths (those stay
+ * in the server log only). The message is a classified, non-leaky summary.
+ */
+/** Postgres SQLSTATE classes/codes that are transient (worth a client retry). */
+const TRANSIENT_PG_CODES = new Set([
+    '08000', // connection_exception
+    '08003', // connection_does_not_exist
+    '08006', // connection_failure
+    '40001', // serialization_failure
+    '40P01', // deadlock_detected
+    '53300', // too_many_connections
+    '57P01', // admin_shutdown
+    '57P03', // cannot_connect_now
+]);
+/** Node socket/network error codes that are transient. */
+const TRANSIENT_NET_CODES = new Set([
+    'ECONNRESET', 'ETIMEDOUT', 'ECONNREFUSED', 'EPIPE', 'ENOTFOUND', 'EAI_AGAIN',
+]);
+/**
+ * Classify an unknown thrown value into a safe envelope error.
+ * @param err - The caught error (any shape).
+ * @returns A classified, log-free error contract for the response body.
+ */
+export function classifyIngestError(err) {
+    const name = err instanceof Error ? err.constructor.name : typeof err;
+    const code = extractErrorCode(err);
+    // 1. Known domain error: missing checksum → caller must upgrade (permanent).
+    if (name === 'MissingChecksumError' || code === 'MISSING_CHECKSUM') {
+        return build('MISSING_CHECKSUM', 'Rule rejected: missing client-computed checksum. Upgrade the extension.', 'validation', false, name);
+    }
+    // 2. Database faults — split transient (retry) vs permanent (skip).
+    if (code && (TRANSIENT_PG_CODES.has(code) || TRANSIENT_NET_CODES.has(code))) {
+        return build('DB_TRANSIENT', `Transient database/network fault (${code}). Safe to retry.`, 'database', true, name);
+    }
+    if (isLikelyDbError(err, name)) {
+        return build('DB_PERMANENT', 'Database rejected the write (non-transient). Do not retry without a fix.', 'database', false, name);
+    }
+    // 3. Fallback: unclassified internal error (treated as retryable-once by the
+    //    extension is acceptable, but marked non-retryable here to avoid loops).
+    return build('INTERNAL_ERROR', 'Ingest failed due to an internal error. See the error code and category.', 'unknown', false, name);
+}
+/** Classify a post-ingest extraction-phase failure (schema map / RelativeExtractor). */
+export function classifyExtractionError(err) {
+    const name = err instanceof Error ? err.constructor.name : typeof err;
+    return build('EXTRACTION_ERROR', 'Rule was ingested but dependency extraction failed. Rule stored; relatives unknown.', 'extraction', false, name);
+}
+// ─── Helpers ──────────────────────────────────────────────────────────────
+function build(code, message, category, retryable, errorName) {
+    return { code, message, details: { category, retryable, errorName } };
+}
+/** Read a `.code` property (pg errors + Node syscall errors both expose one). */
+function extractErrorCode(err) {
+    if (err && typeof err === 'object' && 'code' in err) {
+        const c = err.code;
+        if (typeof c === 'string' && c.length > 0)
+            return c;
+    }
+    return undefined;
+}
+/** Heuristic: does this look like a DB error (has pg-style fields or name)? */
+function isLikelyDbError(err, name) {
+    if (/postgres|database|query|sql/i.test(name))
+        return true;
+    if (err && typeof err === 'object') {
+        const e = err;
+        // node-postgres errors carry severity/routine/schema fields.
+        if ('severity' in e || 'routine' in e || 'sqlState' in e)
+            return true;
+    }
+    return false;
+}
+//# sourceMappingURL=ingest-error-classifier.js.map

package/dist/modules/pega/ingest-error-classifier.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"ingest-error-classifier.js","sourceRoot":"","sources":["../../../src/modules/pega/ingest-error-classifier.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAiCH,iFAAiF;AACjF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,OAAO,EAAE,uBAAuB;IAChC,OAAO,EAAE,4BAA4B;IACrC,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,wBAAwB;IACjC,OAAO,EAAE,oBAAoB;IAC7B,OAAO,EAAE,uBAAuB;IAChC,OAAO,EAAE,iBAAiB;IAC1B,OAAO,EAAE,qBAAqB;CAC/B,CAAC,CAAC;AAEH,0DAA0D;AAC1D,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW;CAC7E,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY;IAC9C,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC;IACtE,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAEnC,6EAA6E;IAC7E,IAAI,IAAI,KAAK,sBAAsB,IAAI,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACnE,OAAO,KAAK,CAAC,kBAAkB,EAC7B,yEAAyE,EACzE,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IAED,oEAAoE;IACpE,IAAI,IAAI,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAC5E,OAAO,KAAK,CAAC,cAAc,EACzB,qCAAqC,IAAI,mBAAmB,EAC5D,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC,cAAc,EACzB,0EAA0E,EAC1E,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,OAAO,KAAK,CAAC,gBAAgB,EAC3B,0EAA0E,EAC1E,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,uBAAuB,CAAC,GAAY;IAClD,MAAM,IAAI,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC;IACtE,OAAO,KAAK,CAAC,kBAAkB,EAC7B,qFAAqF,EACrF,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,6EAA6E;AAE7E,SAAS,KAAK,CACZ,IAAqB,EAAE,OAAe,EACtC,QAA6B,EAAE,SAAkB,EAAE,SAAiB;IAEpE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC;AACxE,CAAC;AAED,iFAAiF;AACjF,SAAS,gBAAgB,CAAC,GAAY;IACpC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QACpD,MAAM,CAAC,GAAI,GAA0B,CAAC,IAAI,CAAC;QAC3C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,+EAA+E;AAC/E,SAAS,eAAe,CAAC,GAAY,EAAE,IAAY;IACjD,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,CAAC,GAAG,GAA8B,CAAC;QACzC,6DAA6D;QAC7D,IAAI,UAAU,IAAI,CAAC,IAAI,SAAS,IAAI,CAAC,IAAI,UAAU,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACxE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/server/HttpServer.js CHANGED Viewed

@@ -37,6 +37,17 @@ export class HttpServer {
                 fetch: this.app.fetch,
                 port: this.port,
                 hostname: this.host,
+                // Fix 5/UND_ERR_SOCKET: Node's default keepAliveTimeout (~5s) closes an idle
+                // socket mid-pipeline when an ingest request is queued behind the DB under
+                // load — the client sees "other side closed". Raise the timeouts so a slow
+                // request waiting on Postgres is never dropped without a response.
+                // serverOptions is forwarded to node:http.createServer (@hono/node-server).
+                // Invariant: headersTimeout > keepAliveTimeout, requestTimeout ≥ both.
+                serverOptions: {
+                    keepAliveTimeout: 60_000, // keep idle sockets alive across batched POSTs
+                    headersTimeout: 65_000, // > keepAliveTimeout (Node requirement)
+                    requestTimeout: 120_000, // allow a slow DB-bound ingest to finish
+                },
             }, async (info) => {
                 this._isRunning = true;
                 this.logger.info({ port: info.port, host: this.host }, 'Backend server started');

package/dist/server/HttpServer.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"HttpServer.js","sourceRoot":"","sources":["../../src/server/HttpServer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EACL,+BAA+B,GAChC,MAAM,iDAAiD,CAAC;AAEzD,OAAO,EAAE,mBAAmB,EAA0B,MAAM,yBAAyB,CAAC;AACtF,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAK5D,MAAM,OAAO,UAAU;IAUD;IATZ,GAAG,CAAO;IACV,MAAM,GAAoC,IAAI,CAAC;IAC/C,MAAM,CAAS;IACf,IAAI,CAAS;IACb,IAAI,CAAS;IACb,UAAU,GAAG,KAAK,CAAC;IAC3B,+EAA+E;IACvE,gBAAgB,CAAoB;IAE5C,YAAoB,OAA0B;QAA1B,YAAO,GAAP,OAAO,CAAmB;QAC5C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;gBAClB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;~~aACpB~~,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAChB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;gBACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,wBAAwB,CAAC,CAAC;gBACjF,6EAA6E;gBAC7E,yBAAyB,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,8DAA8D,CAAC,CAAC;gBAC7F,CAAC,CAAC,CAAC;gBACH,oFAAoF;gBACpF,uBAAuB,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACtC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,+DAA+D,CAAC,CAAC;gBAC9F,CAAC,CAAC,CAAC;gBACH,sEAAsE;gBACtE,gEAAgE;gBAChE,mFAAmF;gBACnF,IAAI,CAAC,gBAAgB,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC1D,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,+BAA+B,EAAE,CAAC;YAClC,IAAI,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,IAAI,SAAS,KAAc,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACpD,IAAI,OAAO,KAAW,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;CACzC"}
1	+ {"version":3,"file":"HttpServer.js","sourceRoot":"","sources":["../../src/server/HttpServer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAE1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EACL,+BAA+B,GAChC,MAAM,iDAAiD,CAAC;AAEzD,OAAO,EAAE,mBAAmB,EAA0B,MAAM,yBAAyB,CAAC;AACtF,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAK5D,MAAM,OAAO,UAAU;IAUD;IATZ,GAAG,CAAO;IACV,MAAM,GAAoC,IAAI,CAAC;IAC/C,MAAM,CAAS;IACf,IAAI,CAAS;IACb,IAAI,CAAS;IACb,UAAU,GAAG,KAAK,CAAC;IAC3B,+EAA+E;IACvE,gBAAgB,CAAoB;IAE5C,YAAoB,OAA0B;QAA1B,YAAO,GAAP,OAAO,CAAmB;QAC5C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACzB,IAAI,CAAC,GAAG,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,KAAK;QACT,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;gBAClB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK;gBACrB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,6EAA6E;gBAC7E,2EAA2E;gBAC3E,2EAA2E;gBAC3E,mEAAmE;gBACnE,4EAA4E;gBAC5E,uEAAuE;gBACvE,aAAa,EAAE;oBACb,gBAAgB,EAAE,MAAM,EAAG,+CAA+C;oBAC1E,cAAc,EAAE,MAAM,EAAK,wCAAwC;oBACnE,cAAc,EAAE,OAAO,EAAI,yCAAyC;iBACrE;aACF,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBAChB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;gBACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,wBAAwB,CAAC,CAAC;gBACjF,6EAA6E;gBAC7E,yBAAyB,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,8DAA8D,CAAC,CAAC;gBAC7F,CAAC,CAAC,CAAC;gBACH,oFAAoF;gBACpF,uBAAuB,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;oBACtC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,+DAA+D,CAAC,CAAC;gBAC9F,CAAC,CAAC,CAAC;gBACH,sEAAsE;gBACtE,gEAAgE;gBAChE,mFAAmF;gBACnF,IAAI,CAAC,gBAAgB,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC1D,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,+BAA+B,EAAE,CAAC;YAClC,IAAI,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpB,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,IAAI,SAAS,KAAc,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACpD,IAAI,OAAO,KAAW,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;CACzC"}

package/dist/server/routes/pega-ingest-rule.js CHANGED Viewed

@@ -9,6 +9,7 @@ import { PegaService } from '../../modules/pega/PegaService.js';
 import { IngestRuleRequestSchema } from '../../modules/pega/schemas/ingest-rule.schema.js';
 import { RelativeExtractor } from '../../modules/pega/services/RelativeExtractor.js';
 import { PegaSchemaLoader } from '../../modules/pega/PegaSchemaLoader.js';
+import { classifyIngestError, classifyExtractionError, } from '../../modules/pega/ingest-error-classifier.js';
 /** Build schemaMap from pega-core-schemas.json (cached singleton) */
 let cachedSchemaMap = null;
 function getSchemaMap() {
@@ -23,70 +24,104 @@ export function createIngestRuleRoute(registry, logger) {
     // 10MB body limit per rule JSON
     app.use('*', bodyLimit({ maxSize: 10 * 1024 * 1024 }));
     app.post('/', async (c) => {
-        // 1. Resolve PegaService from memory module
-        const service = resolvePegaService(registry);
-        if (!service) {
-            return c.json({
-                data: null,
-                error: { code: 'NOT_READY', message: 'Memory module not ready' },
-            }, 503);
+        // Top-level guard: ingestSafely only wraps service.ingestRule(). Steps 4-5
+        // (getSchemaMap + RelativeExtractor.extract) run OUTSIDE it — a throw there
+        // would escape the handler and, under the Node HTTP server, can surface on the
+        // client as a socket close with no response (UND_ERR_SOCKET) instead of a 500.
+        // Wrapping the whole handler guarantees EVERY failure returns an error envelope.
+        try {
+            return await handleIngest(c, registry, logger);
         }
-        // SA4E-241 SEC-01: projectId derives from the authenticated identity, never
-        // from the body. This is a WRITE path — fail-closed (401) with no identity;
-        // body.projectId may only cross-check (403 on mismatch).
-        const identityProjectId = c.get('projectContext')?.projectId ?? '';
-        if (!identityProjectId) {
-            return c.json({ data: null, error: { code: 'MISSING_PROJECT_IDENTITY',
-                    message: 'X-Project-Id header or JWT pid claim is required.' } }, 401);
+        catch (err) {
+            const classified = classifyIngestError(err);
+            logger.error({ err: err instanceof Error ? err.message : String(err),
+                stack: err instanceof Error ? err.stack : undefined, code: classified.code }, '[pega-ingest-rule] Unhandled error in route handler');
+            const httpStatus = classified.details.retryable ? 503 : 500;
+            return c.json({ data: null, error: classified }, httpStatus);
         }
-        // 2. Parse and validate request body
-        const body = await c.req.json().catch(() => null);
-        if (!body) {
-            return c.json({
-                data: null,
-                error: { code: 'VALIDATION_ERROR', message: 'Invalid JSON body' },
-            }, 400);
-        }
-        const parsed = IngestRuleRequestSchema.safeParse(body);
-        if (!parsed.success) {
-            const msg = parsed.error.errors[0]?.message || 'Invalid request';
-            return c.json({
-                data: null,
-                error: { code: 'VALIDATION_ERROR', message: msg },
-            }, 400);
-        }
-        // SA4E-241 SEC-01: body.projectId (if sent) must match identity → 403.
-        if (parsed.data.projectId && parsed.data.projectId !== identityProjectId) {
-            return c.json({ data: null, error: { code: 'PROJECT_MISMATCH',
-                    message: 'body.projectId does not match the authenticated identity.' } }, 403);
-        }
-        // 3. Ingest rule via PegaService — scope strictly by authenticated identity.
-        const { ruleJson, checksum, version } = parsed.data;
-        const ingestResult = await ingestSafely(service, identityProjectId, ruleJson, checksum, version, logger);
-        if (ingestResult.error) {
-            return c.json({
-                data: null,
-                error: { code: 'INTERNAL_ERROR', message: ingestResult.error },
-            }, 500);
-        }
-        // 4. Extract relatives via RelativeExtractor
-        const schemaMap = getSchemaMap();
-        const extractor = new RelativeExtractor(schemaMap);
-        const relatives = extractor.extract(ruleJson);
-        // 5. Return combined response
-        const status = ingestResult.ruleId === -1 ? 200 : 201;
-        return c.json({
-            data: {
-                status: ingestResult.status,
-                ruleId: ingestResult.ruleId,
-                unresolvedDependencies: relatives,
-                reason: ingestResult.reason,
-            },
-            error: null,
-        }, status);
     });
     return app;
 }
+/**
+ * Core ingest handler — parse, validate, ingest, extract relatives.
+ * Extracted so the route wrapper can catch ANY throw (including the post-ingest
+ * schema/extraction steps) and always return an envelope.
+ */
+async function handleIngest(c, registry, logger) {
+    // 1. Resolve PegaService from memory module
+    const service = resolvePegaService(registry);
+    if (!service) {
+        return c.json({
+            data: null,
+            error: { code: 'NOT_READY', message: 'Memory module not ready' },
+        }, 503);
+    }
+    // SA4E-241 SEC-01: projectId derives from the authenticated identity, never
+    // from the body. This is a WRITE path — fail-closed (401) with no identity;
+    // body.projectId may only cross-check (403 on mismatch).
+    const identityProjectId = c.get('projectContext')?.projectId ?? '';
+    if (!identityProjectId) {
+        return c.json({ data: null, error: { code: 'MISSING_PROJECT_IDENTITY',
+                message: 'X-Project-Id header or JWT pid claim is required.' } }, 401);
+    }
+    // 2. Parse and validate request body
+    const body = await c.req.json().catch(() => null);
+    if (!body) {
+        return c.json({
+            data: null,
+            error: { code: 'VALIDATION_ERROR', message: 'Invalid JSON body' },
+        }, 400);
+    }
+    const parsed = IngestRuleRequestSchema.safeParse(body);
+    if (!parsed.success) {
+        const msg = parsed.error.errors[0]?.message || 'Invalid request';
+        return c.json({
+            data: null,
+            error: { code: 'VALIDATION_ERROR', message: msg },
+        }, 400);
+    }
+    // SA4E-241 SEC-01: body.projectId (if sent) must match identity → 403.
+    if (parsed.data.projectId && parsed.data.projectId !== identityProjectId) {
+        return c.json({ data: null, error: { code: 'PROJECT_MISMATCH',
+                message: 'body.projectId does not match the authenticated identity.' } }, 403);
+    }
+    // 3. Ingest rule via PegaService — scope strictly by authenticated identity.
+    const { ruleJson, checksum, version } = parsed.data;
+    const ingestResult = await ingestSafely(service, identityProjectId, ruleJson, checksum, version, logger);
+    if (ingestResult.classified) {
+        // Classified, log-free envelope: the extension reads code + details.category
+        // + details.retryable to decide retry-vs-skip and show the user a cause.
+        // Transient faults → 503 (retry-after semantics); permanent → 500.
+        const httpStatus = ingestResult.classified.details.retryable ? 503 : 500;
+        return c.json({ data: null, error: ingestResult.classified }, httpStatus);
+    }
+    // 4. Extract relatives via RelativeExtractor. This runs AFTER a successful
+    // ingest, so a failure here must NOT masquerade as an ingest failure — the
+    // rule IS stored. Return a distinct EXTRACTION_ERROR so the extension knows
+    // the rule landed but relatives are unknown (do not re-ingest blindly).
+    let relatives;
+    try {
+        const schemaMap = getSchemaMap();
+        const extractor = new RelativeExtractor(schemaMap);
+        relatives = extractor.extract(ruleJson);
+    }
+    catch (err) {
+        logger.error({ err: err instanceof Error ? err.message : String(err),
+            stack: err instanceof Error ? err.stack : undefined, ruleId: ingestResult.ruleId }, '[pega-ingest-rule] Relative extraction failed (rule already stored)');
+        return c.json({ data: null, error: classifyExtractionError(err) }, 500);
+    }
+    // 5. Return combined response
+    const status = ingestResult.ruleId === -1 ? 200 : 201;
+    return c.json({
+        data: {
+            status: ingestResult.status,
+            ruleId: ingestResult.ruleId,
+            unresolvedDependencies: relatives,
+            reason: ingestResult.reason,
+        },
+        error: null,
+    }, status);
+}
 // ─── Helpers ────────────────────────────────────────────────────────────────
 /** Lazily resolve PegaService from memory module */
 function resolvePegaService(registry) {
@@ -95,15 +130,23 @@ function resolvePegaService(registry) {
         return null;
     return new PegaService(memModule.getEngine());
 }
-/** Wrap ingestRule in try/catch to prevent unhandled exceptions */
+/**
+ * Wrap ingestRule in try/catch. On failure, return a CLASSIFIED error (safe,
+ * log-free) so the route can hand the extension a structured cause — the raw
+ * message/stack stays in the server log only (SEC: no internal detail leak).
+ */
 async function ingestSafely(service, projectId, ruleJson, checksum, version, logger) {
     try {
         const result = await service.ingestRule({ projectId, ruleJson, checksum, version });
         return { status: result.status, ruleId: result.ruleId, reason: result.reason };
     }
     catch (err) {
-        logger.error({ err: err.message, stack: err.stack }, '[pega-ingest-rule] Ingestion failed');
-        return { status: 'error', error: 'Ingestion failed. Check server logs for details.' };
+        const message = err instanceof Error ? err.message : String(err);
+        const stack = err instanceof Error ? err.stack : undefined;
+        const classified = classifyIngestError(err);
+        // Full detail in the log (for ops); only the classified envelope on the wire.
+        logger.error({ err: message, stack, code: classified.code, category: classified.details.category }, '[pega-ingest-rule] Ingestion failed');
+        return { status: 'error', classified };
     }
 }
 //# sourceMappingURL=pega-ingest-rule.js.map

package/dist/server/routes/pega-ingest-rule.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"pega-ingest-rule.js","sourceRoot":"","sources":["../../../src/server/routes/pega-ingest-rule.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;~~AAC5B~~,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAG5C,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAC3F,OAAO,EAAE,iBAAiB,EAAE,MAAM,kDAAkD,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;~~AAG1E~~,qEAAqE;AACrE,IAAI,eAAe,GAAyC,IAAI,CAAC;AAEjE,SAAS,YAAY;IACnB,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,gBAAgB,CAAC,cAAc,EAAE,CAAC;QAClD,eAAe,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAUD,MAAM,UAAU,qBAAqB,CAAC,QAAwB,EAAE,MAAc;IAC5E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAW,CAAC;IAEhC,gCAAgC;IAChC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;IAEvD,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxB,4CAA4C;~~QAC5C~~,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;~~QAC7C~~,IAAI,CAAC,OAAO,EAAE,CAAC;~~YACb~~,OAAO,CAAC,CAAC,IAAI,CAAC;~~gBACZ~~,IAAI,EAAE,IAAI;~~gBACV~~,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,yBAAyB,EAAE;~~aACjE~~,EAAE,GAAG,CAAC,CAAC;~~QACV~~,CAAC;~~QAED~~,4EAA4E;~~QAC5E~~,4EAA4E;~~QAC5E~~,yDAAyD;~~QACzD~~,MAAM,iBAAiB,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC;~~QACnE~~,IAAI,CAAC,iBAAiB,EAAE,CAAC;~~YACvB~~,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,0BAA0B;~~oBACnE~~,OAAO,EAAE,mDAAmD,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;~~QAC3E~~,CAAC;~~QAED~~,qCAAqC;~~QACrC~~,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;~~QAClD~~,IAAI,CAAC,IAAI,EAAE,CAAC;~~YACV~~,OAAO,CAAC,CAAC,IAAI,CAAC;~~gBACZ~~,IAAI,EAAE,IAAI;~~gBACV~~,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,mBAAmB,EAAE;~~aAClE~~,EAAE,GAAG,CAAC,CAAC;~~QACV~~,CAAC;~~QAED~~,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;~~QACvD~~,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;~~YACpB~~,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,iBAAiB,CAAC;~~YACjE~~,OAAO,CAAC,CAAC,IAAI,CAAC;~~gBACZ~~,IAAI,EAAE,IAAI;~~gBACV~~,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,GAAG,EAAE;~~aAClD~~,EAAE,GAAG,CAAC,CAAC;~~QACV~~,CAAC;~~QAED~~,uEAAuE;~~QACvE~~,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;~~YACzE~~,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB;~~oBAC3D~~,OAAO,EAAE,2DAA2D,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;~~QACnF~~,CAAC;~~QAED~~,6EAA6E;~~QAC7E~~,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;~~QACpD~~,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;~~QACzG~~,IAAI,YAAY,CAAC,~~KAAK~~,EAAE,CAAC;~~YACvB~~,OAAO,CAAC,CAAC,~~IAAI~~,CAAC;~~gBACZ~~,~~IAAI~~,~~EAAE~~,IAAI~~;gBACV~~,~~KAAK~~,EAAE,~~EAAE,~~IAAI,EAAE,~~gBAAgB~~,EAAE,~~OAAO~~,EAAE,YAAY,CAAC,~~KAAK~~,EAAE~~;aAC/D~~,EAAE,~~GAAG~~,CAAC,CAAC;~~QACV~~,CAAC;~~QAED~~,~~6CAA6C~~;~~QAC7C~~,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACnD,~~MAAM,~~SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,QAAmC,CAAC,CAAC;~~QAEzE~~,8BAA8B;~~QAC9B~~,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;~~QACtD~~,OAAO,CAAC,CAAC,IAAI,CAAC;~~YACZ~~,IAAI,EAAE;~~gBACJ~~,MAAM,EAAE,YAAY,CAAC,MAAM;~~gBAC3B~~,MAAM,EAAE,YAAY,CAAC,MAAM;~~gBAC3B~~,sBAAsB,EAAE,SAAS;~~gBACjC~~,MAAM,EAAE,YAAY,CAAC,MAAM;~~aAC5B~~;~~YACD~~,KAAK,EAAE,IAAI;~~SACZ~~,EAAE,MAAM,CAAC,CAAC;~~IACb~~,CAAC~~,CAAC,CAAC~~;~~IAEH,OAAO,GAAG,CAAC;AACb,CAAC;~~AAED,+EAA+E;AAE/E,oDAAoD;AACpD,SAAS,kBAAkB,CAAC,QAAwB;IAClD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAQ,CAAC;IACtD,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC5D,OAAO,IAAI,WAAW,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;AAChD,CAAC;AAED~~,mEAAmE~~;~~AACnE~~,KAAK,UAAU,YAAY,CACzB,OAAoB,EACpB,SAAiB,EACjB,QAAiC,EACjC,QAA4B,EAC5B,OAA2B,EAC3B,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACpF,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACjF,CAAC;IAAC,OAAO,~~GAAQ~~,EAAE,CAAC;~~QAClB~~,MAAM,CAAC,KAAK,CAAC,~~EAAE~~,GAAG,~~EAAE~~,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,~~GAAG~~,CAAC,~~KAAK~~,EAAE,EAAE,qCAAqC,CAAC,CAAC;~~QAC5F~~,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,~~KAAK~~,EAAE,~~kDAAkD,EAAE,~~CAAC;~~IACxF~~,CAAC;AACH,CAAC"}
1	+ {"version":3,"file":"pega-ingest-rule.js","sourceRoot":"","sources":["../../../src/server/routes/pega-ingest-rule.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAG5C,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,kDAAkD,CAAC;AAC3F,OAAO,EAAE,iBAAiB,EAAE,MAAM,kDAAkD,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAE1E,OAAO,EACL,mBAAmB,EAAE,uBAAuB,GAC7C,MAAM,+CAA+C,CAAC;AAEvD,qEAAqE;AACrE,IAAI,eAAe,GAAyC,IAAI,CAAC;AAEjE,SAAS,YAAY;IACnB,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,gBAAgB,CAAC,cAAc,EAAE,CAAC;QAClD,eAAe,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAUD,MAAM,UAAU,qBAAqB,CAAC,QAAwB,EAAE,MAAc;IAC5E,MAAM,GAAG,GAAG,IAAI,IAAI,EAAW,CAAC;IAEhC,gCAAgC;IAChC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;IAEvD,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACxB,2EAA2E;QAC3E,4EAA4E;QAC5E,+EAA+E;QAC/E,+EAA+E;QAC/E,iFAAiF;QACjF,IAAI,CAAC;YACH,OAAO,MAAM,YAAY,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;gBAClE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAC5E,qDAAqD,CAAC,CAAC;YACzD,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAC5D,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,UAAU,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,YAAY,CACzB,CAAmB,EACnB,QAAwB,EACxB,MAAc;IAEZ,4CAA4C;IAC5C,MAAM,OAAO,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,yBAAyB,EAAE;SACjE,EAAE,GAAG,CAAC,CAAC;IACV,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,yDAAyD;IACzD,MAAM,iBAAiB,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC;IACnE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,0BAA0B;gBACnE,OAAO,EAAE,mDAAmD,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3E,CAAC;IAED,qCAAqC;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,mBAAmB,EAAE;SAClE,EAAE,GAAG,CAAC,CAAC;IACV,CAAC;IAED,MAAM,MAAM,GAAG,uBAAuB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,iBAAiB,CAAC;QACjE,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,GAAG,EAAE;SAClD,EAAE,GAAG,CAAC,CAAC;IACV,CAAC;IAED,uEAAuE;IACvE,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QACzE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB;gBAC3D,OAAO,EAAE,2DAA2D,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IACnF,CAAC;IAED,6EAA6E;IAC7E,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IACpD,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACzG,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;QAC5B,6EAA6E;QAC7E,yEAAyE;QACzE,mEAAmE;QACnE,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACzE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,UAAU,EAAE,EAAE,UAAU,CAAC,CAAC;IAC5E,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,4EAA4E;IAC5E,wEAAwE;IACxE,IAAI,SAAS,CAAC;IACd,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,IAAI,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACnD,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,QAAmC,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAClE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,EAClF,qEAAqE,CAAC,CAAC;QACzE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,uBAAuB,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1E,CAAC;IAED,8BAA8B;IAC9B,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACtD,OAAO,CAAC,CAAC,IAAI,CAAC;QACZ,IAAI,EAAE;YACJ,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,MAAM,EAAE,YAAY,CAAC,MAAM;YAC3B,sBAAsB,EAAE,SAAS;YACjC,MAAM,EAAE,YAAY,CAAC,MAAM;SAC5B;QACD,KAAK,EAAE,IAAI;KACZ,EAAE,MAAM,CAAC,CAAC;AACf,CAAC;AAED,+EAA+E;AAE/E,oDAAoD;AACpD,SAAS,kBAAkB,CAAC,QAAwB;IAClD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,QAAQ,CAAQ,CAAC;IACtD,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC5D,OAAO,IAAI,WAAW,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,YAAY,CACzB,OAAoB,EACpB,SAAiB,EACjB,QAAiC,EACjC,QAA4B,EAC5B,OAA2B,EAC3B,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACpF,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;IACjF,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3D,MAAM,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QAC5C,8EAA8E;QAC9E,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,EAChG,qCAAqC,CAAC,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACzC,CAAC;AACH,CAAC"}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "sdlc-agent-4-enterprise-server",
-  "version": "1.55.8",
+  "version": "1.55.10",
   "description": "Code Intelligence MCP Server — multi-agent SDLC pipeline with semantic memory, code graph, and draw.io integration",
   "main": "dist/index.js",
   "bin": {
@@ -47,7 +47,7 @@
     "url": "git+https://github.com/dnguyenminh/SDLC-Agents-4-Enteprise.git"
   },
   "engines": {
-    "node": "22.x"
+    "node": "22.23.4"
   },
   "dependencies": {
     "@hono/node-server": "^1.12.0",
@@ -96,5 +96,8 @@
   "bugs": {
     "url": "https://github.com/dnguyenminh/SDLC-Agents-4-Enteprise/issues"
   },
-  "homepage": "https://github.com/dnguyenminh/SDLC-Agents-4-Enteprise#readme"
+  "homepage": "https://github.com/dnguyenminh/SDLC-Agents-4-Enteprise#readme",
+  "overrides": {
+    "undici": "6.29.1"
+  }
 }

package/src/index.ts CHANGED Viewed

@@ -125,6 +125,21 @@ async function main() {
   process.on('SIGTERM', () => shutdown('SIGTERM'));
   process.on('SIGINT', () => shutdown('SIGINT'));
+  // Global crash guards: a single rejected/uncaught error on an async path (e.g.
+  // Pega ingest) must NOT silently kill the process. Without these, Node tears the
+  // process down and EVERY in-flight HTTP socket fails at once as
+  // `UND_ERR_SOCKET "other side closed"` on the client — the exact Pega-ingest symptom.
+  // We log with full context so the real throw site is attributable instead of invisible.
+  process.on('unhandledRejection', (reason: unknown) => {
+    const err = reason instanceof Error ? { message: reason.message, stack: reason.stack } : { reason };
+    logger.error(err, '[fatal] Unhandled promise rejection — process kept alive for diagnosis');
+  });
+  process.on('uncaughtException', (err: Error) => {
+    logger.error({ message: err.message, stack: err.stack }, '[fatal] Uncaught exception — process kept alive for diagnosis');
+    // Intentionally NOT exiting: an isolated ingest-path throw should not drop all
+    // concurrent connections. Fatal startup errors are still caught by main().catch.
+  });
   logger.info({ pid: process.pid, port: config.port, version: VERSION }, 'Backend MCP Server ready');
 }

package/src/modules/pega/ingest-error-classifier.ts ADDED Viewed

@@ -0,0 +1,128 @@
+/**
+ * Classify ingest-path errors into a safe, structured envelope so the extension
+ * can decide retry-vs-skip and show the user a cause WITHOUT reading server logs.
+ *
+ * SEC: we expose a stable `code`, a category, a retryable flag, and the error's
+ * class name — but NEVER the raw stack, SQL text, or internal paths (those stay
+ * in the server log only). The message is a classified, non-leaky summary.
+ */
+/** Stable error codes returned to the extension (contract — do not rename lightly). */
+export type IngestErrorCode =
+  | 'VALIDATION_ERROR'
+  | 'MISSING_CHECKSUM'
+  | 'DB_TRANSIENT'
+  | 'DB_PERMANENT'
+  | 'EXTRACTION_ERROR'
+  | 'INTERNAL_ERROR';
+/** Coarse category for UI grouping. */
+export type IngestErrorCategory = 'validation' | 'database' | 'extraction' | 'unknown';
+/**
+ * Structured, log-free error detail for the response envelope.
+ * `retryable` lets the extension distinguish a transient fault (retry with
+ * backoff) from a permanent one (skip the rule, don't hammer the backend).
+ */
+export interface IngestErrorDetails {
+  category: IngestErrorCategory;
+  retryable: boolean;
+  /** Error constructor name (e.g. "MissingChecksumError") — safe, no payload. */
+  errorName: string;
+}
+/** Full classified result the route turns into `{ code, message, details }`. */
+export interface ClassifiedIngestError {
+  code: IngestErrorCode;
+  message: string;
+  details: IngestErrorDetails;
+}
+/** Postgres SQLSTATE classes/codes that are transient (worth a client retry). */
+const TRANSIENT_PG_CODES = new Set([
+  '08000', // connection_exception
+  '08003', // connection_does_not_exist
+  '08006', // connection_failure
+  '40001', // serialization_failure
+  '40P01', // deadlock_detected
+  '53300', // too_many_connections
+  '57P01', // admin_shutdown
+  '57P03', // cannot_connect_now
+]);
+/** Node socket/network error codes that are transient. */
+const TRANSIENT_NET_CODES = new Set([
+  'ECONNRESET', 'ETIMEDOUT', 'ECONNREFUSED', 'EPIPE', 'ENOTFOUND', 'EAI_AGAIN',
+]);
+/**
+ * Classify an unknown thrown value into a safe envelope error.
+ * @param err - The caught error (any shape).
+ * @returns A classified, log-free error contract for the response body.
+ */
+export function classifyIngestError(err: unknown): ClassifiedIngestError {
+  const name = err instanceof Error ? err.constructor.name : typeof err;
+  const code = extractErrorCode(err);
+  // 1. Known domain error: missing checksum → caller must upgrade (permanent).
+  if (name === 'MissingChecksumError' || code === 'MISSING_CHECKSUM') {
+    return build('MISSING_CHECKSUM',
+      'Rule rejected: missing client-computed checksum. Upgrade the extension.',
+      'validation', false, name);
+  }
+  // 2. Database faults — split transient (retry) vs permanent (skip).
+  if (code && (TRANSIENT_PG_CODES.has(code) || TRANSIENT_NET_CODES.has(code))) {
+    return build('DB_TRANSIENT',
+      `Transient database/network fault (${code}). Safe to retry.`,
+      'database', true, name);
+  }
+  if (isLikelyDbError(err, name)) {
+    return build('DB_PERMANENT',
+      'Database rejected the write (non-transient). Do not retry without a fix.',
+      'database', false, name);
+  }
+  // 3. Fallback: unclassified internal error (treated as retryable-once by the
+  //    extension is acceptable, but marked non-retryable here to avoid loops).
+  return build('INTERNAL_ERROR',
+    'Ingest failed due to an internal error. See the error code and category.',
+    'unknown', false, name);
+}
+/** Classify a post-ingest extraction-phase failure (schema map / RelativeExtractor). */
+export function classifyExtractionError(err: unknown): ClassifiedIngestError {
+  const name = err instanceof Error ? err.constructor.name : typeof err;
+  return build('EXTRACTION_ERROR',
+    'Rule was ingested but dependency extraction failed. Rule stored; relatives unknown.',
+    'extraction', false, name);
+}
+// ─── Helpers ──────────────────────────────────────────────────────────────
+function build(
+  code: IngestErrorCode, message: string,
+  category: IngestErrorCategory, retryable: boolean, errorName: string,
+): ClassifiedIngestError {
+  return { code, message, details: { category, retryable, errorName } };
+}
+/** Read a `.code` property (pg errors + Node syscall errors both expose one). */
+function extractErrorCode(err: unknown): string | undefined {
+  if (err && typeof err === 'object' && 'code' in err) {
+    const c = (err as { code?: unknown }).code;
+    if (typeof c === 'string' && c.length > 0) return c;
+  }
+  return undefined;
+}
+/** Heuristic: does this look like a DB error (has pg-style fields or name)? */
+function isLikelyDbError(err: unknown, name: string): boolean {
+  if (/postgres|database|query|sql/i.test(name)) return true;
+  if (err && typeof err === 'object') {
+    const e = err as Record<string, unknown>;
+    // node-postgres errors carry severity/routine/schema fields.
+    if ('severity' in e || 'routine' in e || 'sqlState' in e) return true;
+  }
+  return false;
+}

package/src/server/HttpServer.ts CHANGED Viewed

@@ -47,6 +47,17 @@ export class HttpServer {
         fetch: this.app.fetch,
         port: this.port,
         hostname: this.host,
+        // Fix 5/UND_ERR_SOCKET: Node's default keepAliveTimeout (~5s) closes an idle
+        // socket mid-pipeline when an ingest request is queued behind the DB under
+        // load — the client sees "other side closed". Raise the timeouts so a slow
+        // request waiting on Postgres is never dropped without a response.
+        // serverOptions is forwarded to node:http.createServer (@hono/node-server).
+        // Invariant: headersTimeout > keepAliveTimeout, requestTimeout ≥ both.
+        serverOptions: {
+          keepAliveTimeout: 60_000,  // keep idle sockets alive across batched POSTs
+          headersTimeout: 65_000,    // > keepAliveTimeout (Node requirement)
+          requestTimeout: 120_000,   // allow a slow DB-bound ingest to finish
+        },
       }, async (info) => {
         this._isRunning = true;
         this.logger.info({ port: info.port, host: this.host }, 'Backend server started');

package/src/server/routes/pega-ingest-rule.ts CHANGED Viewed

@@ -5,6 +5,7 @@
  */
 import { Hono } from 'hono';
+import type { Context } from 'hono';
 import { bodyLimit } from 'hono/body-limit';
 import type { Logger } from 'pino';
 import type { ModuleRegistry } from '../../modules/ModuleRegistry.js';
@@ -13,6 +14,9 @@ import { IngestRuleRequestSchema } from '../../modules/pega/schemas/ingest-rule.
 import { RelativeExtractor } from '../../modules/pega/services/RelativeExtractor.js';
 import { PegaSchemaLoader } from '../../modules/pega/PegaSchemaLoader.js';
 import type { PegaRuleKbSchema } from '../../modules/pega/strategies/KbDrivenPegaParserStrategy.js';
+import {
+  classifyIngestError, classifyExtractionError, type ClassifiedIngestError,
+} from '../../modules/pega/ingest-error-classifier.js';
 /** Build schemaMap from pega-core-schemas.json (cached singleton) */
 let cachedSchemaMap: Map<string, PegaRuleKbSchema> | null = null;
@@ -40,6 +44,36 @@ export function createIngestRuleRoute(registry: ModuleRegistry, logger: Logger):
   app.use('*', bodyLimit({ maxSize: 10 * 1024 * 1024 }));
   app.post('/', async (c) => {
+    // Top-level guard: ingestSafely only wraps service.ingestRule(). Steps 4-5
+    // (getSchemaMap + RelativeExtractor.extract) run OUTSIDE it — a throw there
+    // would escape the handler and, under the Node HTTP server, can surface on the
+    // client as a socket close with no response (UND_ERR_SOCKET) instead of a 500.
+    // Wrapping the whole handler guarantees EVERY failure returns an error envelope.
+    try {
+      return await handleIngest(c, registry, logger);
+    } catch (err) {
+      const classified = classifyIngestError(err);
+      logger.error({ err: err instanceof Error ? err.message : String(err),
+        stack: err instanceof Error ? err.stack : undefined, code: classified.code },
+        '[pega-ingest-rule] Unhandled error in route handler');
+      const httpStatus = classified.details.retryable ? 503 : 500;
+      return c.json({ data: null, error: classified }, httpStatus);
+    }
+  });
+  return app;
+}
+/**
+ * Core ingest handler — parse, validate, ingest, extract relatives.
+ * Extracted so the route wrapper can catch ANY throw (including the post-ingest
+ * schema/extraction steps) and always return an envelope.
+ */
+async function handleIngest(
+  c: Context<PegaEnv>,
+  registry: ModuleRegistry,
+  logger: Logger,
+) {
     // 1. Resolve PegaService from memory module
     const service = resolvePegaService(registry);
     if (!service) {
@@ -85,17 +119,29 @@ export function createIngestRuleRoute(registry: ModuleRegistry, logger: Logger):
     // 3. Ingest rule via PegaService — scope strictly by authenticated identity.
     const { ruleJson, checksum, version } = parsed.data;
     const ingestResult = await ingestSafely(service, identityProjectId, ruleJson, checksum, version, logger);
-    if (ingestResult.error) {
-      return c.json({
-        data: null,
-        error: { code: 'INTERNAL_ERROR', message: ingestResult.error },
-      }, 500);
+    if (ingestResult.classified) {
+      // Classified, log-free envelope: the extension reads code + details.category
+      // + details.retryable to decide retry-vs-skip and show the user a cause.
+      // Transient faults → 503 (retry-after semantics); permanent → 500.
+      const httpStatus = ingestResult.classified.details.retryable ? 503 : 500;
+      return c.json({ data: null, error: ingestResult.classified }, httpStatus);
     }
-    // 4. Extract relatives via RelativeExtractor
-    const schemaMap = getSchemaMap();
-    const extractor = new RelativeExtractor(schemaMap);
-    const relatives = extractor.extract(ruleJson as Record<string, unknown>);
+    // 4. Extract relatives via RelativeExtractor. This runs AFTER a successful
+    // ingest, so a failure here must NOT masquerade as an ingest failure — the
+    // rule IS stored. Return a distinct EXTRACTION_ERROR so the extension knows
+    // the rule landed but relatives are unknown (do not re-ingest blindly).
+    let relatives;
+    try {
+      const schemaMap = getSchemaMap();
+      const extractor = new RelativeExtractor(schemaMap);
+      relatives = extractor.extract(ruleJson as Record<string, unknown>);
+    } catch (err) {
+      logger.error({ err: err instanceof Error ? err.message : String(err),
+        stack: err instanceof Error ? err.stack : undefined, ruleId: ingestResult.ruleId },
+        '[pega-ingest-rule] Relative extraction failed (rule already stored)');
+      return c.json({ data: null, error: classifyExtractionError(err) }, 500);
+    }
     // 5. Return combined response
     const status = ingestResult.ruleId === -1 ? 200 : 201;
@@ -108,9 +154,6 @@ export function createIngestRuleRoute(registry: ModuleRegistry, logger: Logger):
       },
       error: null,
     }, status);
-  });
-  return app;
 }
 // ─── Helpers ────────────────────────────────────────────────────────────────
@@ -122,7 +165,11 @@ function resolvePegaService(registry: ModuleRegistry): PegaService | null {
   return new PegaService(memModule.getEngine());
 }
-/** Wrap ingestRule in try/catch to prevent unhandled exceptions */
+/**
+ * Wrap ingestRule in try/catch. On failure, return a CLASSIFIED error (safe,
+ * log-free) so the route can hand the extension a structured cause — the raw
+ * message/stack stays in the server log only (SEC: no internal detail leak).
+ */
 async function ingestSafely(
   service: PegaService,
   projectId: string,
@@ -130,12 +177,17 @@ async function ingestSafely(
   checksum: string | undefined,
   version: string | undefined,
   logger: Logger,
-): Promise<{ status: string; ruleId?: number; reason?: string; error?: string }> {
+): Promise<{ status: string; ruleId?: number; reason?: string; classified?: ClassifiedIngestError }> {
   try {
     const result = await service.ingestRule({ projectId, ruleJson, checksum, version });
     return { status: result.status, ruleId: result.ruleId, reason: result.reason };
-  } catch (err: any) {
-    logger.error({ err: err.message, stack: err.stack }, '[pega-ingest-rule] Ingestion failed');
-    return { status: 'error', error: 'Ingestion failed. Check server logs for details.' };
+  } catch (err: unknown) {
+    const message = err instanceof Error ? err.message : String(err);
+    const stack = err instanceof Error ? err.stack : undefined;
+    const classified = classifyIngestError(err);
+    // Full detail in the log (for ops); only the classified envelope on the wire.
+    logger.error({ err: message, stack, code: classified.code, category: classified.details.category },
+      '[pega-ingest-rule] Ingestion failed');
+    return { status: 'error', classified };
   }
 }