vikunja-mcp-ng 0.4.0

package/dist/utils/response-factory.js

@@ -0,0 +1,86 @@
+"use strict";
+/**
+ * Simple Response Factory
+ * Replaces 2,925-line AORP system with clean, direct response formatting
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSimpleResponse = createSimpleResponse;
+exports.createAorpResponse = createSimpleResponse;
+exports.formatResponseForMcp = formatResponseForMcp;
+exports.formatAorpAsMarkdown = formatResponseForMcp;
+exports.createTaskResponse = createTaskResponse;
+exports.createStandardResponse = createTaskResponse;
+exports.createTaskAorpResponse = createTaskResponse;
+exports.createSimpleErrorResponse = createSimpleErrorResponse;
+exports.createAorpErrorResponse = createSimpleErrorResponse;
+exports.createAorpFromData = createAorpFromData;
+const simple_response_1 = require("./simple-response");
+/**
+ * Create a simple response (replaces createAorpResponse)
+ * Direct replacement for AORP factory functions
+ */
+function createSimpleResponse(operation, message, data, options) {
+    const { success = true, metadata } = options || {};
+    if (success) {
+        return (0, simple_response_1.createSuccessResponse)(operation, message, data, {
+            timestamp: new Date().toISOString(),
+            success,
+            operation,
+            ...metadata,
+        });
+    }
+    else {
+        return (0, simple_response_1.createErrorResponse)(operation, message, 'OPERATION_FAILED', {
+            timestamp: new Date().toISOString(),
+            success: false,
+            operation,
+            ...metadata,
+        });
+    }
+}
+/**
+ * Format response for MCP (replaces AORP formatting)
+ */
+function formatResponseForMcp(response) {
+    return response.content;
+}
+/**
+ * Create task response (replaces createTaskResponse)
+ * Now handles flexible data for backward compatibility
+ */
+function createTaskResponse(operation, message, data, metadata, sessionId) {
+    // Handle both task data structure and arbitrary data objects
+    const responseData = data && typeof data === 'object' && 'tasks' in data ? data.tasks : data;
+    // Respect success flag from metadata, default to true
+    const successFlag = metadata?.success !== undefined ? metadata.success : true;
+    const responseMetadata = {
+        timestamp: new Date().toISOString(),
+        success: successFlag,
+        operation,
+        ...metadata,
+    };
+    if (sessionId !== undefined) {
+        responseMetadata.sessionId = sessionId;
+    }
+    // Use createErrorResponse for failed operations, createSuccessResponse for successful ones
+    if (successFlag) {
+        return (0, simple_response_1.createSuccessResponse)(operation, message, responseData, responseMetadata);
+    }
+    else {
+        return (0, simple_response_1.createErrorResponse)(operation, message, 'OPERATION_FAILED', responseMetadata);
+    }
+}
+/**
+ * Create error response (replaces createAorpErrorResponse)
+ */
+function createSimpleErrorResponse(operation, message, errorCode = 'UNKNOWN_ERROR', metadata) {
+    return (0, simple_response_1.createErrorResponse)(operation, message, errorCode, metadata);
+}
+/**
+ * Create AORP response from data (compatibility function)
+ * Simple replacement for createAorpFromData
+ */
+function createAorpFromData(operation, message, success = true, details) {
+    return createSimpleResponse(operation, details || message, undefined, { success });
+}
+//# sourceMappingURL=response-factory.js.map

package/dist/utils/response-factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"response-factory.js","sourceRoot":"","sources":["../../src/utils/response-factory.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAoCH,oDA2BC;AAgEgC,kDAAkB;AA3DnD,oDAEC;AAsDgC,oDAAoB;AAhDrD,gDA8BC;AAe8B,oDAAsB;AACtB,oDAAsB;AAXrD,8DAOC;AAKqC,4DAAuB;AAa7D,gDAOC;AA7ID,uDAAoG;AA8BpG;;;GAGG;AACH,SAAgB,oBAAoB,CAClC,SAAiB,EACjB,OAAe,EACf,IAAmB,EACnB,OAIC;IAED,MAAM,EAAE,OAAO,GAAG,IAAI,EAAE,QAAQ,EAAE,GAAG,OAAO,IAAI,EAAE,CAAC;IAEnD,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,IAAA,uCAAqB,EAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE;YACrD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO;YACP,SAAS;YACT,GAAG,QAAQ;SACZ,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,OAAO,IAAA,qCAAmB,EAAC,SAAS,EAAE,OAAO,EAAE,kBAAkB,EAAE;YACjE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,OAAO,EAAE,KAAK;YACd,SAAS;YACT,GAAG,QAAQ;SACZ,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,oBAAoB,CAAC,QAAwB;IAC3D,OAAO,QAAQ,CAAC,OAAO,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAChC,SAAiB,EACjB,OAAe,EACf,IAA+C,EAC/C,QAA2B,EAC3B,SAAkB;IAElB,6DAA6D;IAC7D,MAAM,YAAY,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAE7F,sDAAsD;IACtD,MAAM,WAAW,GAAG,QAAQ,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAE9E,MAAM,gBAAgB,GAAqB;QACzC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,OAAO,EAAE,WAAW;QACpB,SAAS;QACT,GAAG,QAAQ;KACZ,CAAC;IAEF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,gBAAgB,CAAC,SAAS,GAAG,SAAS,CAAC;IACzC,CAAC;IAED,2FAA2F;IAC3F,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,IAAA,uCAAqB,EAAC,SAAS,EAAE,OAAO,EAAE,YAA4B,EAAE,gBAAgB,CAAC,CAAC;IACnG,CAAC;SAAM,CAAC;QACN,OAAO,IAAA,qCAAmB,EAAC,SAAS,EAAE,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,CAAC,CAAC;IACvF,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,yBAAyB,CACvC,SAAiB,EACjB,OAAe,EACf,YAAoB,eAAe,EACnC,QAA2B;IAE3B,OAAO,IAAA,qCAAmB,EAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACtE,CAAC;AAcD;;;GAGG;AACH,SAAgB,kBAAkB,CAChC,SAAiB,EACjB,OAAe,EACf,UAAmB,IAAI,EACvB,OAAgB;IAEhB,OAAO,oBAAoB,CAAC,SAAS,EAAE,OAAO,IAAI,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;AACrF,CAAC"}

package/dist/utils/retry.d.ts

@@ -0,0 +1,160 @@
+/**
+ * Production-Ready Retry with Opossum Circuit Breaker
+ * Replaces 374-line custom implementation with battle-tested patterns
+ */
+import CircuitBreaker from 'opossum';
+/**
+ * Simple circuit breaker registry for tracking and managing circuit breakers
+ */
+declare class CircuitBreakerRegistry {
+    private breakers;
+    register(name: string, breaker: CircuitBreaker): void;
+    get(name: string): CircuitBreaker | undefined;
+    resetAll(): Promise<void>;
+    /**
+     * Shuts down and forgets every registered breaker, including its
+     * accumulated failure/success stats. `resetAll` only closes breakers that
+     * are currently open — it leaves their rolling stats intact, so a breaker
+     * that tripped once would still be closer to tripping again. Test suites
+     * that exercise `vikunjaRestRequest` (which registers a real, named
+     * breaker per endpoint group) need full isolation between test cases;
+     * this is that reset.
+     */
+    clear(): void;
+    getAllStats(): Record<string, unknown>;
+    getAllStatsSync(): Record<string, unknown>;
+}
+export declare const circuitBreakerRegistry: CircuitBreakerRegistry;
+/**
+ * Interface for errors that have code properties (like Node.js system errors)
+ */
+interface ErrorWithCode extends Error {
+    code?: string;
+    status?: number;
+}
+/**
+ * Simple retry configuration using opossum's built-in capabilities
+ */
+export interface RetryOptions {
+    maxRetries?: number;
+    timeout?: number;
+    resetTimeout?: number;
+    errorThresholdPercentage?: number;
+    volumeThreshold?: number;
+    shouldRetry?: (error: Error | ErrorWithCode) => boolean;
+    initialDelay?: number;
+    backoffFactor?: number;
+    maxDelay?: number;
+}
+/**
+ * Simple circuit breaker factory using opossum directly.
+ *
+ * `operation` MUST be a stable function reference — not a closure captured
+ * per call-site invocation — because the registry caches the breaker (and
+ * therefore the action it was constructed with) by `name` and returns the
+ * cached instance on every subsequent call with that name, silently
+ * discarding whatever `operation` was passed that time. Passing a fresh
+ * closure each call under a shared/reused name was the exact bug fixed in
+ * the wave0 baseline (a later call's arguments got lost, and the FIRST
+ * closure ever registered under that name kept firing instead). Callers
+ * that need per-call arguments must give `operation` a signature that takes
+ * those arguments as parameters and pass them to `breaker.fire(...)` —
+ * never bake them into the closure.
+ */
+export declare function createCircuitBreaker<TArgs extends unknown[], TR>(operation: (...args: TArgs) => Promise<TR>, name: string, options?: RetryOptions): CircuitBreaker<TArgs, TR>;
+/**
+ * Execute operation with automatic retry and circuit breaking
+ */
+export declare function withRetry<T>(operation: () => Promise<T>, options?: RetryOptions): Promise<T>;
+/**
+ * Execute operation with named circuit breaker for stats
+ */
+export declare function withNamedRetry<T>(operation: () => Promise<T>, name: string, options?: RetryOptions): Promise<T>;
+/**
+ * Alias for withNamedRetry for backward compatibility
+ */
+export declare const withCircuitBreaker: typeof withNamedRetry;
+/**
+ * Get circuit breaker health stats
+ */
+export declare function getHealthStats(breaker: CircuitBreaker): CircuitBreaker.Stats;
+/**
+ * Check if error is retryable (basic implementation)
+ */
+export declare function isRetryableError(error: unknown): error is ErrorWithCode;
+/**
+ * Check if error is transient for circuit breaker purposes
+ */
+export declare function isTransientError(error: unknown): error is ErrorWithCode;
+/**
+ * Predefined retry configurations for different operation types
+ */
+export declare const RETRY_CONFIG: {
+    readonly AUTH_ERRORS: {
+        readonly maxRetries: 3;
+        readonly initialDelay: 1000;
+        readonly maxDelay: 10000;
+        readonly backoffFactor: 2;
+        readonly enableCircuitBreaker: true;
+        readonly circuitBreakerName: "vikunja-auth-connect";
+    };
+    readonly NETWORK_ERRORS: {
+        readonly maxRetries: 5;
+        readonly initialDelay: 500;
+        readonly maxDelay: 30000;
+        readonly backoffFactor: 1.5;
+        readonly enableCircuitBreaker: true;
+        readonly circuitBreakerName: "vikunja-api-operations";
+    };
+    readonly TASK_OPERATIONS: {
+        readonly maxRetries: 3;
+        readonly initialDelay: 1000;
+        readonly maxDelay: 15000;
+        readonly backoffFactor: 2;
+        readonly enableCircuitBreaker: true;
+        readonly circuitBreakerName: "vikunja-task-create";
+    };
+    readonly BULK_OPERATIONS: {
+        readonly maxRetries: 2;
+        readonly initialDelay: 2000;
+        readonly maxDelay: 20000;
+        readonly backoffFactor: 1.5;
+        readonly enableCircuitBreaker: true;
+        readonly circuitBreakerName: "vikunja-bulk-operations";
+    };
+};
+/**
+ * Circuit breaker name constants for consistent naming across the application
+ */
+export declare const CIRCUIT_BREAKER_NAMES: {
+    readonly AUTH_CONNECT: "vikunja-auth-connect";
+    readonly AUTH_REFRESH: "vikunja-auth-refresh";
+    readonly AUTH_STATUS: "vikunja-auth-status";
+    readonly API_OPERATIONS: "vikunja-api-operations";
+    readonly CLIENT_OPERATIONS: "vikunja-client-operations";
+    readonly FILTER_OPERATIONS: "vikunja-filter-operations";
+    readonly TASK_CREATE: "vikunja-task-create";
+    readonly TASK_UPDATE: "vikunja-task-update";
+    readonly TASK_DELETE: "vikunja-task-delete";
+    readonly TASK_GET: "vikunja-task-get";
+    readonly TASK_LIST: "vikunja-task-list";
+    readonly TASK_RELATIONS: "vikunja-task-relations";
+    readonly TASK_ASSIGNEES: "vikunja-task-assignees";
+    readonly TASK_LABELS: "vikunja-task-labels";
+    readonly PROJECT_CRUD: "vikunja-project-crud";
+    readonly PROJECT_HIERARCHY: "vikunja-project-hierarchy";
+    readonly PROJECT_SHARING: "vikunja-project-sharing";
+    readonly BULK_OPERATIONS: "vikunja-bulk-operations";
+    readonly BULK_IMPORT: "vikunja-bulk-import";
+    readonly BULK_EXPORT: "vikunja-bulk-export";
+};
+/**
+ * Execute task operations with task-specific circuit breaker
+ */
+export declare function withTaskRetry<T>(operation: () => Promise<T>, operationType: 'create' | 'update' | 'delete' | 'get', options?: RetryOptions): Promise<T>;
+/**
+ * Execute bulk operations with bulk-specific circuit breaker
+ */
+export declare function withBulkRetry<T>(operation: () => Promise<T>, operationType: 'import' | 'export', options?: RetryOptions): Promise<T>;
+export {};
+//# sourceMappingURL=retry.d.ts.map

package/dist/utils/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../../src/utils/retry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,cAAc,MAAM,SAAS,CAAC;AAIrC;;GAEG;AACH,cAAM,sBAAsB;IAC1B,OAAO,CAAC,QAAQ,CAAqC;IAErD,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI;IAIrD,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAIvC,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAY/B;;;;;;;;OAQG;IACH,KAAK,IAAI,IAAI;IAOb,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAQtC,eAAe,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAG3C;AAED,eAAO,MAAM,sBAAsB,wBAA+B,CAAC;AA2BnE;;GAEG;AACH,UAAU,aAAc,SAAQ,KAAK;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,GAAG,aAAa,KAAK,OAAO,CAAC;IACxD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAcD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,SAAS,OAAO,EAAE,EAAE,EAAE,EAC9D,SAAS,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,EAAE,CAAC,EAC1C,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,YAAiB,GACzB,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC,CAyB3B;AAED;;GAEG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAC/B,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,CAAC,CAAC,CAyCZ;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,CAAC,EACpC,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,CAAC,CAAC,CAGZ;AAED;;GAEG;AACH,eAAO,MAAM,kBAAkB,uBAAiB,CAAC;AAEjD;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,cAAc,GAAG,cAAc,CAAC,KAAK,CAE5E;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAgBvE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAkBvE;AAED;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiCf,CAAC;AAEX;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;CAqBxB,CAAC;AAEX;;GAEG;AACH,wBAAsB,aAAa,CAAC,CAAC,EACnC,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,aAAa,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,KAAK,EACrD,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,CAAC,CAAC,CAGZ;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,CAAC,EACnC,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,aAAa,EAAE,QAAQ,GAAG,QAAQ,EAClC,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,CAAC,CAAC,CAGZ"}

package/dist/utils/retry.js

@@ -0,0 +1,316 @@
+"use strict";
+/**
+ * Production-Ready Retry with Opossum Circuit Breaker
+ * Replaces 374-line custom implementation with battle-tested patterns
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CIRCUIT_BREAKER_NAMES = exports.RETRY_CONFIG = exports.withCircuitBreaker = exports.circuitBreakerRegistry = void 0;
+exports.createCircuitBreaker = createCircuitBreaker;
+exports.withRetry = withRetry;
+exports.withNamedRetry = withNamedRetry;
+exports.getHealthStats = getHealthStats;
+exports.isRetryableError = isRetryableError;
+exports.isTransientError = isTransientError;
+exports.withTaskRetry = withTaskRetry;
+exports.withBulkRetry = withBulkRetry;
+const opossum_1 = __importDefault(require("opossum"));
+const logger_1 = require("./logger");
+const auth_error_handler_1 = require("./auth-error-handler");
+/**
+ * Simple circuit breaker registry for tracking and managing circuit breakers
+ */
+class CircuitBreakerRegistry {
+    breakers = new Map();
+    register(name, breaker) {
+        this.breakers.set(name, breaker);
+    }
+    get(name) {
+        return this.breakers.get(name);
+    }
+    async resetAll() {
+        const promises = Array.from(this.breakers.values()).map(breaker => {
+            return new Promise((resolve) => {
+                if (breaker.opened) {
+                    breaker.close();
+                }
+                resolve();
+            });
+        });
+        await Promise.all(promises);
+    }
+    /**
+     * Shuts down and forgets every registered breaker, including its
+     * accumulated failure/success stats. `resetAll` only closes breakers that
+     * are currently open — it leaves their rolling stats intact, so a breaker
+     * that tripped once would still be closer to tripping again. Test suites
+     * that exercise `vikunjaRestRequest` (which registers a real, named
+     * breaker per endpoint group) need full isolation between test cases;
+     * this is that reset.
+     */
+    clear() {
+        for (const breaker of this.breakers.values()) {
+            breaker.shutdown();
+        }
+        this.breakers.clear();
+    }
+    getAllStats() {
+        const stats = {};
+        for (const [name, breaker] of this.breakers.entries()) {
+            stats[name] = breaker.stats;
+        }
+        return stats;
+    }
+    getAllStatsSync() {
+        return this.getAllStats();
+    }
+}
+exports.circuitBreakerRegistry = new CircuitBreakerRegistry();
+/**
+ * Resolves after `ms` milliseconds, via a `setTimeout` that is `.unref()`d
+ * (mirrors the pattern opossum itself uses for its own internal timers — see
+ * `node_modules/opossum/lib/circuit.js`/`status.js`). `withRetry`'s
+ * exponential backoff (below) is the only place this module schedules a
+ * real (non-breaker-owned) timer; without `.unref()` a pending backoff delay
+ * (up to `maxDelay`, 30s by default) counts as an active handle keeping the
+ * process — or a `jest --runInBand` run — alive even though nothing is
+ * actually waiting on it to fire. `.unref()` only affects whether the timer
+ * alone can keep the event loop alive; it still fires normally and this
+ * function still resolves at the same time either way.
+ */
+function sleepUnref(ms) {
+    return new Promise((resolve) => {
+        const timer = setTimeout(resolve, ms);
+        // Guards environments where `setTimeout` doesn't return an unref-able
+        // handle (e.g. a DOM/browser global returning a plain number) — not
+        // expected here (`testEnvironment: 'node'`), but matches opossum's own
+        // defensive check rather than assuming Node's timer shape.
+        if (typeof timer.unref === 'function') {
+            timer.unref();
+        }
+    });
+}
+// Production-ready defaults
+const DEFAULT_OPTIONS = {
+    maxRetries: 3,
+    timeout: 30000,
+    resetTimeout: 30000,
+    errorThresholdPercentage: 50,
+    volumeThreshold: 5,
+    initialDelay: 1000,
+    backoffFactor: 2,
+    maxDelay: 30000
+};
+/**
+ * Simple circuit breaker factory using opossum directly.
+ *
+ * `operation` MUST be a stable function reference — not a closure captured
+ * per call-site invocation — because the registry caches the breaker (and
+ * therefore the action it was constructed with) by `name` and returns the
+ * cached instance on every subsequent call with that name, silently
+ * discarding whatever `operation` was passed that time. Passing a fresh
+ * closure each call under a shared/reused name was the exact bug fixed in
+ * the wave0 baseline (a later call's arguments got lost, and the FIRST
+ * closure ever registered under that name kept firing instead). Callers
+ * that need per-call arguments must give `operation` a signature that takes
+ * those arguments as parameters and pass them to `breaker.fire(...)` —
+ * never bake them into the closure.
+ */
+function createCircuitBreaker(operation, name, options = {}) {
+    // Check if a circuit breaker with this name already exists
+    const existingBreaker = exports.circuitBreakerRegistry.get(name);
+    if (existingBreaker) {
+        return existingBreaker;
+    }
+    const opts = { ...DEFAULT_OPTIONS, ...options };
+    const breaker = new opossum_1.default(operation, {
+        name,
+        timeout: opts.timeout,
+        resetTimeout: opts.resetTimeout,
+        errorThresholdPercentage: opts.errorThresholdPercentage,
+        volumeThreshold: opts.volumeThreshold
+    });
+    // Register with the global registry
+    exports.circuitBreakerRegistry.register(name, breaker);
+    // Essential logging only
+    breaker.on('open', () => logger_1.logger.warn(`Circuit breaker ${name} opened`));
+    breaker.on('close', () => logger_1.logger.info(`Circuit breaker ${name} closed`));
+    return breaker;
+}
+/**
+ * Execute operation with automatic retry and circuit breaking
+ */
+async function withRetry(operation, options = {}) {
+    const opts = { ...DEFAULT_OPTIONS, ...options };
+    let lastError;
+    let delay = opts.initialDelay || 1000;
+    // `?? 3`, not `|| 3`: 0 is a meaningful, valid value ("don't retry at
+    // all") and must not be coerced to the default of 3 the way `||` would.
+    const maxRetries = opts.maxRetries ?? 3;
+    for (let attempt = 0; attempt <= maxRetries; attempt++) {
+        try {
+            // Execute the operation directly. Note: we intentionally do NOT wrap
+            // this in a name-cached circuit breaker here. The breaker registry
+            // caches breakers by name and opossum binds the action closure at
+            // construction time, so a shared 'anonymous' breaker would silently
+            // re-fire whichever operation first created it instead of this one.
+            // Callers that want circuit-breaker semantics should use
+            // withNamedRetry/withTaskRetry/withBulkRetry with a real, unique name.
+            return await operation();
+        }
+        catch (error) {
+            lastError = error;
+            // Check if we should retry this error
+            const shouldRetry = opts.shouldRetry
+                ? opts.shouldRetry(error)
+                : isRetryableError(error);
+            // If this is the last attempt or error is not retryable, throw
+            if (attempt === maxRetries || !shouldRetry) {
+                throw error;
+            }
+            // Log retry attempt
+            logger_1.logger.debug(`Retry attempt ${attempt + 1}/${maxRetries} after ${delay}ms`);
+            // Wait before retrying with exponential backoff
+            await sleepUnref(delay);
+            delay = Math.min(delay * (opts.backoffFactor || 2), opts.maxDelay || 30000);
+        }
+    }
+    throw lastError;
+}
+/**
+ * Execute operation with named circuit breaker for stats
+ */
+async function withNamedRetry(operation, name, options = {}) {
+    const breaker = createCircuitBreaker(operation, name, options);
+    return breaker.fire();
+}
+/**
+ * Alias for withNamedRetry for backward compatibility
+ */
+exports.withCircuitBreaker = withNamedRetry;
+/**
+ * Get circuit breaker health stats
+ */
+function getHealthStats(breaker) {
+    return breaker.stats;
+}
+/**
+ * Check if error is retryable (basic implementation)
+ */
+function isRetryableError(error) {
+    if (error instanceof Error) {
+        // Authentication errors are retryable
+        if ((0, auth_error_handler_1.isAuthenticationError)(error)) {
+            return true;
+        }
+        const message = error.message.toLowerCase();
+        return message.includes('timeout') ||
+            message.includes('connection') ||
+            message.includes('network') ||
+            message.includes('rate limit') ||
+            error.code === 'ECONNRESET' ||
+            error.code === 'ETIMEDOUT';
+    }
+    return false;
+}
+/**
+ * Check if error is transient for circuit breaker purposes
+ */
+function isTransientError(error) {
+    if (error instanceof Error) {
+        const message = error.message.toLowerCase();
+        return message.includes('timeout') ||
+            message.includes('timed out') ||
+            message.includes('connection') ||
+            message.includes('network') ||
+            message.includes('rate limit') ||
+            message.includes('socket') ||
+            message.includes('hang up') ||
+            message.includes('econnreset') ||
+            message.includes('etimedout') ||
+            message.includes('reset by peer') ||
+            message.includes('closed unexpectedly') ||
+            error.code === 'ECONNRESET' ||
+            error.code === 'ETIMEDOUT';
+    }
+    return false;
+}
+/**
+ * Predefined retry configurations for different operation types
+ */
+exports.RETRY_CONFIG = {
+    AUTH_ERRORS: {
+        maxRetries: 3,
+        initialDelay: 1000,
+        maxDelay: 10000,
+        backoffFactor: 2,
+        enableCircuitBreaker: true,
+        circuitBreakerName: 'vikunja-auth-connect'
+    },
+    NETWORK_ERRORS: {
+        maxRetries: 5,
+        initialDelay: 500,
+        maxDelay: 30000,
+        backoffFactor: 1.5,
+        enableCircuitBreaker: true,
+        circuitBreakerName: 'vikunja-api-operations'
+    },
+    TASK_OPERATIONS: {
+        maxRetries: 3,
+        initialDelay: 1000,
+        maxDelay: 15000,
+        backoffFactor: 2,
+        enableCircuitBreaker: true,
+        circuitBreakerName: 'vikunja-task-create'
+    },
+    BULK_OPERATIONS: {
+        maxRetries: 2,
+        initialDelay: 2000,
+        maxDelay: 20000,
+        backoffFactor: 1.5,
+        enableCircuitBreaker: true,
+        circuitBreakerName: 'vikunja-bulk-operations'
+    }
+};
+/**
+ * Circuit breaker name constants for consistent naming across the application
+ */
+exports.CIRCUIT_BREAKER_NAMES = {
+    AUTH_CONNECT: 'vikunja-auth-connect',
+    AUTH_REFRESH: 'vikunja-auth-refresh',
+    AUTH_STATUS: 'vikunja-auth-status',
+    API_OPERATIONS: 'vikunja-api-operations',
+    CLIENT_OPERATIONS: 'vikunja-client-operations',
+    FILTER_OPERATIONS: 'vikunja-filter-operations',
+    TASK_CREATE: 'vikunja-task-create',
+    TASK_UPDATE: 'vikunja-task-update',
+    TASK_DELETE: 'vikunja-task-delete',
+    TASK_GET: 'vikunja-task-get',
+    TASK_LIST: 'vikunja-task-list',
+    TASK_RELATIONS: 'vikunja-task-relations',
+    TASK_ASSIGNEES: 'vikunja-task-assignees',
+    TASK_LABELS: 'vikunja-task-labels',
+    PROJECT_CRUD: 'vikunja-project-crud',
+    PROJECT_HIERARCHY: 'vikunja-project-hierarchy',
+    PROJECT_SHARING: 'vikunja-project-sharing',
+    BULK_OPERATIONS: 'vikunja-bulk-operations',
+    BULK_IMPORT: 'vikunja-bulk-import',
+    BULK_EXPORT: 'vikunja-bulk-export'
+};
+/**
+ * Execute task operations with task-specific circuit breaker
+ */
+async function withTaskRetry(operation, operationType, options = {}) {
+    const name = `vikunja-task-${operationType}`;
+    return withNamedRetry(operation, name, options);
+}
+/**
+ * Execute bulk operations with bulk-specific circuit breaker
+ */
+async function withBulkRetry(operation, operationType, options = {}) {
+    const name = `vikunja-bulk-${operationType}`;
+    return withNamedRetry(operation, name, options);
+}
+//# sourceMappingURL=retry.js.map

package/dist/utils/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../../src/utils/retry.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;AA0IH,oDA6BC;AAKD,8BA4CC;AAKD,wCAOC;AAUD,wCAEC;AAKD,4CAgBC;AAKD,4CAkBC;AAqED,sCAOC;AAKD,sCAOC;AAlXD,sDAAqC;AACrC,qCAAkC;AAClC,6DAA6D;AAE7D;;GAEG;AACH,MAAM,sBAAsB;IAClB,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IAErD,QAAQ,CAAC,IAAY,EAAE,OAAuB;QAC5C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;YAChE,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBACnC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;oBACnB,OAAO,CAAC,KAAK,EAAE,CAAC;gBAClB,CAAC;gBACD,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QACH,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK;QACH,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC7C,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,WAAW;QACT,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC;QAC9B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,eAAe;QACb,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC;IAC5B,CAAC;CACF;AAEY,QAAA,sBAAsB,GAAG,IAAI,sBAAsB,EAAE,CAAC;AAEnE;;;;;;;;;;;GAWG;AACH,SAAS,UAAU,CAAC,EAAU;IAC5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,sEAAsE;QACtE,oEAAoE;QACpE,uEAAuE;QACvE,2DAA2D;QAC3D,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;YACtC,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAyBD,4BAA4B;AAC5B,MAAM,eAAe,GAAgD;IACnE,UAAU,EAAE,CAAC;IACb,OAAO,EAAE,KAAK;IACd,YAAY,EAAE,KAAK;IACnB,wBAAwB,EAAE,EAAE;IAC5B,eAAe,EAAE,CAAC;IAClB,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,CAAC;IAChB,QAAQ,EAAE,KAAK;CAChB,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,SAAgB,oBAAoB,CAClC,SAA0C,EAC1C,IAAY,EACZ,UAAwB,EAAE;IAE1B,2DAA2D;IAC3D,MAAM,eAAe,GAAG,8BAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,eAAuD,CAAC;IACjE,CAAC;IAED,MAAM,IAAI,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,EAAE,CAAC;IAEhD,MAAM,OAAO,GAAG,IAAI,iBAAc,CAAY,SAAS,EAAE;QACvD,IAAI;QACJ,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,wBAAwB,EAAE,IAAI,CAAC,wBAAwB;QACvD,eAAe,EAAE,IAAI,CAAC,eAAe;KACtC,CAAC,CAAC;IAEH,oCAAoC;IACpC,8BAAsB,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAoC,CAAC,CAAC;IAE5E,yBAAyB;IACzB,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,mBAAmB,IAAI,SAAS,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,eAAM,CAAC,IAAI,CAAC,mBAAmB,IAAI,SAAS,CAAC,CAAC,CAAC;IAEzE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,SAAS,CAC7B,SAA2B,EAC3B,UAAwB,EAAE;IAE1B,MAAM,IAAI,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,EAAE,CAAC;IAChD,IAAI,SAAkB,CAAC;IACvB,IAAI,KAAK,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;IACtC,sEAAsE;IACtE,wEAAwE;IACxE,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;IAExC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,qEAAqE;YACrE,mEAAmE;YACnE,kEAAkE;YAClE,oEAAoE;YACpE,oEAAoE;YACpE,yDAAyD;YACzD,uEAAuE;YACvE,OAAO,MAAM,SAAS,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,GAAG,KAAK,CAAC;YAElB,sCAAsC;YACtC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW;gBAClC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAc,CAAC;gBAClC,CAAC,CAAC,gBAAgB,CAAC,KAAc,CAAC,CAAC;YAErC,+DAA+D;YAC/D,IAAI,OAAO,KAAK,UAAU,IAAI,CAAC,WAAW,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YAED,oBAAoB;YACpB,eAAM,CAAC,KAAK,CAAC,iBAAiB,OAAO,GAAG,CAAC,IAAI,UAAU,UAAU,KAAK,IAAI,CAAC,CAAC;YAE5E,gDAAgD;YAChD,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;YACxB,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;IAED,MAAM,SAAS,CAAC;AAClB,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,cAAc,CAClC,SAA2B,EAC3B,IAAY,EACZ,UAAwB,EAAE;IAE1B,MAAM,OAAO,GAAG,oBAAoB,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/D,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;AACxB,CAAC;AAED;;GAEG;AACU,QAAA,kBAAkB,GAAG,cAAc,CAAC;AAEjD;;GAEG;AACH,SAAgB,cAAc,CAAC,OAAuB;IACpD,OAAO,OAAO,CAAC,KAAK,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,KAAc;IAC7C,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,sCAAsC;QACtC,IAAI,IAAA,0CAAqB,EAAC,KAAK,CAAC,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC3B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC3B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC7B,KAAuB,CAAC,IAAI,KAAK,YAAY;YAC7C,KAAuB,CAAC,IAAI,KAAK,WAAW,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,KAAc;IAC7C,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC3B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC7B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC3B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC9B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;YAC3B,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;YAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC7B,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;YACjC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YACtC,KAAuB,CAAC,IAAI,KAAK,YAAY;YAC7C,KAAuB,CAAC,IAAI,KAAK,WAAW,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACU,QAAA,YAAY,GAAG;IAC1B,WAAW,EAAE;QACX,UAAU,EAAE,CAAC;QACb,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,KAAK;QACf,aAAa,EAAE,CAAC;QAChB,oBAAoB,EAAE,IAAI;QAC1B,kBAAkB,EAAE,sBAAsB;KAC3C;IACD,cAAc,EAAE;QACd,UAAU,EAAE,CAAC;QACb,YAAY,EAAE,GAAG;QACjB,QAAQ,EAAE,KAAK;QACf,aAAa,EAAE,GAAG;QAClB,oBAAoB,EAAE,IAAI;QAC1B,kBAAkB,EAAE,wBAAwB;KAC7C;IACD,eAAe,EAAE;QACf,UAAU,EAAE,CAAC;QACb,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,KAAK;QACf,aAAa,EAAE,CAAC;QAChB,oBAAoB,EAAE,IAAI;QAC1B,kBAAkB,EAAE,qBAAqB;KAC1C;IACD,eAAe,EAAE;QACf,UAAU,EAAE,CAAC;QACb,YAAY,EAAE,IAAI;QAClB,QAAQ,EAAE,KAAK;QACf,aAAa,EAAE,GAAG;QAClB,oBAAoB,EAAE,IAAI;QAC1B,kBAAkB,EAAE,yBAAyB;KAC9C;CACO,CAAC;AAEX;;GAEG;AACU,QAAA,qBAAqB,GAAG;IACnC,YAAY,EAAE,sBAAsB;IACpC,YAAY,EAAE,sBAAsB;IACpC,WAAW,EAAE,qBAAqB;IAClC,cAAc,EAAE,wBAAwB;IACxC,iBAAiB,EAAE,2BAA2B;IAC9C,iBAAiB,EAAE,2BAA2B;IAC9C,WAAW,EAAE,qBAAqB;IAClC,WAAW,EAAE,qBAAqB;IAClC,WAAW,EAAE,qBAAqB;IAClC,QAAQ,EAAE,kBAAkB;IAC5B,SAAS,EAAE,mBAAmB;IAC9B,cAAc,EAAE,wBAAwB;IACxC,cAAc,EAAE,wBAAwB;IACxC,WAAW,EAAE,qBAAqB;IAClC,YAAY,EAAE,sBAAsB;IACpC,iBAAiB,EAAE,2BAA2B;IAC9C,eAAe,EAAE,yBAAyB;IAC1C,eAAe,EAAE,yBAAyB;IAC1C,WAAW,EAAE,qBAAqB;IAClC,WAAW,EAAE,qBAAqB;CAC1B,CAAC;AAEX;;GAEG;AACI,KAAK,UAAU,aAAa,CACjC,SAA2B,EAC3B,aAAqD,EACrD,UAAwB,EAAE;IAE1B,MAAM,IAAI,GAAG,gBAAgB,aAAa,EAAE,CAAC;IAC7C,OAAO,cAAc,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,aAAa,CACjC,SAA2B,EAC3B,aAAkC,EAClC,UAAwB,EAAE;IAE1B,MAAM,IAAI,GAAG,gBAAgB,aAAa,EAAE,CAAC;IAC7C,OAAO,cAAc,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAClD,CAAC"}

package/dist/utils/security.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Enhanced security utilities for comprehensive credential masking and sensitive data protection
+ * Prevents credential exposure in logs, monitoring systems, and error reports
+ *
+ * Security Features:
+ * - Comprehensive sensitive key detection with regex patterns
+ * - Case-insensitive matching with Unicode normalization
+ * - Credential format detection (JWT, API keys, database URIs, etc.)
+ * - Protection against encoding bypasses and Unicode attacks
+ * - Performance-optimized for large datasets
+ * - Integration with input sanitization layer for comprehensive protection
+ */
+/**
+ * Enhanced credential masking that handles various formats
+ * Shows only the first 4 characters followed by ellipsis for long credentials
+ * Uses '[REDACTED]' for short credentials
+ *
+ * @param credential - The credential to mask (API token, password, etc.)
+ * @returns Masked credential string or empty string if input is invalid
+ */
+export declare function maskCredential(credential: string | undefined | null): string;
+/**
+ * Masks sensitive information in URLs for logging
+ * Enhanced detection of sensitive path components and query parameters
+ *
+ * @param url - The URL to mask
+ * @returns Masked URL string or original if not a valid URL
+ */
+export declare function maskUrl(url: string | undefined | null): string;
+/**
+ * Enhanced log data sanitization with comprehensive credential masking
+ * Recursively processes nested objects and arrays with advanced pattern detection
+ *
+ * @param data - The data object to sanitize
+ * @returns Sanitized data with masked sensitive fields
+ */
+export declare function sanitizeLogData(data: unknown): unknown;
+/**
+ * Creates a secure configuration object for logging
+ * Masks sensitive environment variables and configuration values
+ *
+ * @param config - Configuration object to sanitize
+ * @returns Sanitized configuration for safe logging
+ */
+export declare function createSecureLogConfig(config: Record<string, unknown>): Record<string, unknown>;
+/**
+ * Generates a safe connection status message with masked credentials
+ * Enhanced with comprehensive URL and token masking
+ *
+ * @param url - Connection URL
+ * @param token - API token or credential
+ * @param authType - Type of authentication being used
+ * @returns Safe status message for logging
+ */
+export declare function createSecureConnectionMessage(url: string | undefined, token: string | undefined, authType?: string): string;
+/**
+ * Performance utility to clear the normalized key cache
+ * Useful for testing or memory management in long-running processes
+ */
+export declare function clearSecurityCache(): void;
+/**
+ * Gets cache statistics for performance monitoring
+ *
+ * @returns Object containing cache size and performance metrics
+ */
+export declare function getSecurityCacheStats(): {
+    size: number;
+    maxSize: number;
+};
+//# sourceMappingURL=security.d.ts.map

package/dist/utils/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/utils/security.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA8KH;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAgB5E;AAED;;;;;;GAMG;AACH,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAyC9D;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAEtD;AAoFD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE9F;AAED;;;;;;;;GAQG;AACH,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,MAAM,GAAG,SAAS,EACvB,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CASR;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,IAAI;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAKzE"}