fix(pitchbook): stop a rejected API key reaching block output and logs

PitchBook's 401 body echoes the submitted key back inside `message`. No
PitchBook tool declared an `errorExtractor`, so the failure fell through to the
generic chain, whose first entry returns `data.message` verbatim — putting the
credential in the block error, the run log, and any agent context reading the
failure. The existing scrubber sat in `transformResponse`, which never runs on a
non-ok response.

- add a `pitchbook-errors` extractor that replaces the unauthorized message with
  a fixed string, and wire it through all 91 tools
- the extractor returns undefined unless the body carries a `message`, so a
  foreign 401 on the shared fallback chain is never labelled a PitchBook failure
- correct `investor_preferences.preferredIndustry` to the shape the API returns
- make `company_industries.emergingSpaces` opaque; its item shape is undocumented
- reject a non-list of article ids instead of throwing a bare TypeError

Author: waleedlatif1

apps/docs/content/docs/en/integrations/pitchbook.mdx

@@ -427,8 +427,6 @@ Retrieve the industry classification, verticals, keywords, and emerging spaces a
 |   ↳ `description` | string | Vertical label |
 | `keywords` | array | Keywords associated with the company |
 | `emergingSpaces` | array | Analyst-defined emerging spaces the company is placed in |
-|   ↳ `code` | string | Emerging space code |
-|   ↳ `description` | string | Emerging space label |
 
 ### PitchBook Company Investors
 
@@ -1840,8 +1838,14 @@ Retrieve what an investor targets: check size, deal size, valuation, revenue, ge
 |   ↳ `code` | string | Preference code |
 |   ↳ `description` | string | Preference label |
 | `preferredIndustry` | array | Industries the investor targets |
-|   ↳ `code` | string | Industry code |
-|   ↳ `description` | string | Industry label |
+|   ↳ `industryCode` | json | Most specific industry classification |
+|   ↳ `industrySector` | object | Top-level sector |
+|     ↳ `code` | string | Sector code |
+|     ↳ `description` | string | Sector label |
+|   ↳ `industryGroup` | object | Industry group within the sector |
+|     ↳ `code` | string | Group code |
+|     ↳ `description` | string | Group label |
+|   ↳ `primary` | boolean | Whether this is the primary industry |
 | `preferredDealTypes` | array | Deal types the investor targets |
 |   ↳ `code` | string | Deal type code |
 |   ↳ `description` | string | Deal type label |

apps/sim/tools/error-extractors.ts

@@ -424,6 +424,26 @@ const ERROR_EXTRACTORS: ErrorExtractorConfig[] = [
       return messages.length > 0 ? messages.join('; ') : undefined
     },
   },
+  {
+    id: 'pitchbook-errors',
+    description:
+      'PitchBook Public API error envelope: {reason, message}. An unauthorized response echoes the rejected key back inside `message` ("Active API key {KEY} not found"), so that case is replaced with a fixed string — the generic message fallback would otherwise put the credential in the block error, the run log, and any agent context reading the failure. Returns undefined unless the body carries a `message`, so that on the generic fallback chain — which every tool without an `errorExtractor` walks — a foreign 401 is never labelled a PitchBook auth failure',
+    examples: ['PitchBook'],
+    extract: (errorInfo) => {
+      const data = errorInfo?.data
+      if (!data || typeof data !== 'object' || Array.isArray(data)) return undefined
+
+      const reason = typeof data.reason === 'string' ? data.reason.trim() : ''
+      const message = typeof data.message === 'string' ? data.message.trim() : ''
+      if (!message) return undefined
+
+      if (errorInfo?.status === 401 || reason === 'UNAUTHORIZED') {
+        return 'PitchBook rejected the API key. Check that the key is active and has API access.'
+      }
+
+      return reason ? `${message} (${reason})` : message
+    },
+  },
   {
     id: 'splunk-errors',
     description:
@@ -533,6 +553,7 @@ export const ErrorExtractorId = {
   POSTHOG_ERRORS: 'posthog-errors',
   PROSPEO_ERRORS: 'prospeo-errors',
   CRUNCHBASE_ERRORS: 'crunchbase-errors',
+  PITCHBOOK_ERRORS: 'pitchbook-errors',
   SPLUNK_ERRORS: 'splunk-errors',
   PLAIN_TEXT_DATA: 'plain-text-data',
   HTTP_STATUS_TEXT: 'http-status-text',

apps/sim/tools/pitchbook/company_active_investors.ts

@@ -1,3 +1,4 @@
+import { ErrorExtractorId } from '@/tools/error-extractors'
 import type { PitchbookProfileParams, PitchbookResponse } from '@/tools/pitchbook/types'
 import { PITCHBOOK_API_BASE, pitchbookAuthHeaders, throwIfNotOk } from '@/tools/pitchbook/utils'
 import type { ToolConfig } from '@/tools/types'
@@ -10,6 +11,7 @@ export const pitchbookCompanyActiveInvestorsTool: ToolConfig<
   name: 'PitchBook Company Active Investors',
   description: 'Retrieve only the investors currently holding a position in a company',
   version: '1.0.0',
+  errorExtractor: ErrorExtractorId.PITCHBOOK_ERRORS,
 
   params: {
     apiKey: {

apps/sim/tools/pitchbook/company_bio.ts

@@ -1,3 +1,4 @@
+import { ErrorExtractorId } from '@/tools/error-extractors'
 import type { PitchbookProfileParams, PitchbookResponse } from '@/tools/pitchbook/types'
 import { PITCHBOOK_API_BASE, pitchbookAuthHeaders, throwIfNotOk } from '@/tools/pitchbook/utils'
 import type { ToolConfig } from '@/tools/types'
@@ -8,6 +9,7 @@ export const pitchbookCompanyBioTool: ToolConfig<PitchbookProfileParams, Pitchbo
   description:
     'Retrieve the core profile of a company: names, description, HQ, status, headcount, total raised, and social links',
   version: '1.0.0',
+  errorExtractor: ErrorExtractorId.PITCHBOOK_ERRORS,
 
   params: {
     apiKey: {

apps/sim/tools/pitchbook/company_deal_service_providers.ts

@@ -1,3 +1,4 @@
+import { ErrorExtractorId } from '@/tools/error-extractors'
 import type { PitchbookProfileParams, PitchbookResponse } from '@/tools/pitchbook/types'
 import { PITCHBOOK_API_BASE, pitchbookAuthHeaders, throwIfNotOk } from '@/tools/pitchbook/utils'
 import type { ToolConfig } from '@/tools/types'
@@ -11,6 +12,7 @@ export const pitchbookCompanyDealServiceProvidersTool: ToolConfig<
   description:
     'Retrieve the service providers that worked on a company deals, and what each was hired for',
   version: '1.0.0',
+  errorExtractor: ErrorExtractorId.PITCHBOOK_ERRORS,
 
   params: {
     apiKey: {

apps/sim/tools/pitchbook/company_deals.ts

@@ -1,3 +1,4 @@
+import { ErrorExtractorId } from '@/tools/error-extractors'
 import type { PitchbookProfileParams, PitchbookResponse } from '@/tools/pitchbook/types'
 import { PITCHBOOK_API_BASE, pitchbookAuthHeaders, throwIfNotOk } from '@/tools/pitchbook/utils'
 import type { ToolConfig } from '@/tools/types'
@@ -8,6 +9,7 @@ export const pitchbookCompanyDealsTool: ToolConfig<PitchbookProfileParams, Pitch
   description:
     'Retrieve every deal a company has been involved in, in chronological order with its deal type',
   version: '1.0.0',
+  errorExtractor: ErrorExtractorId.PITCHBOOK_ERRORS,
 
   params: {
     apiKey: {

apps/sim/tools/pitchbook/company_financials.ts

@@ -1,3 +1,4 @@
+import { ErrorExtractorId } from '@/tools/error-extractors'
 import type { PitchbookProfileParams, PitchbookResponse } from '@/tools/pitchbook/types'
 import { PITCHBOOK_API_BASE, pitchbookAuthHeaders, throwIfNotOk } from '@/tools/pitchbook/utils'
 import type { ToolConfig } from '@/tools/types'
@@ -9,6 +10,7 @@ export const pitchbookCompanyFinancialsTool: ToolConfig<PitchbookProfileParams,
     description:
       'Retrieve reported financials for a private company across every available fiscal period. Annual data is returned by default.',
     version: '1.0.0',
+    errorExtractor: ErrorExtractorId.PITCHBOOK_ERRORS,
 
     params: {
       apiKey: {

apps/sim/tools/pitchbook/company_general_service_providers.ts

@@ -1,3 +1,4 @@
+import { ErrorExtractorId } from '@/tools/error-extractors'
 import type { PitchbookProfileParams, PitchbookResponse } from '@/tools/pitchbook/types'
 import { PITCHBOOK_API_BASE, pitchbookAuthHeaders, throwIfNotOk } from '@/tools/pitchbook/utils'
 import type { ToolConfig } from '@/tools/types'
@@ -10,6 +11,7 @@ export const pitchbookCompanyGeneralServiceProvidersTool: ToolConfig<
   name: 'PitchBook Company General Service Providers',
   description: 'Retrieve the current and former general service providers engaged by a company',
   version: '1.0.0',
+  errorExtractor: ErrorExtractorId.PITCHBOOK_ERRORS,
 
   params: {
     apiKey: {

apps/sim/tools/pitchbook/company_industries.ts

@@ -1,3 +1,4 @@
+import { ErrorExtractorId } from '@/tools/error-extractors'
 import type { PitchbookProfileParams, PitchbookResponse } from '@/tools/pitchbook/types'
 import { PITCHBOOK_API_BASE, pitchbookAuthHeaders, throwIfNotOk } from '@/tools/pitchbook/utils'
 import type { ToolConfig } from '@/tools/types'
@@ -9,6 +10,7 @@ export const pitchbookCompanyIndustriesTool: ToolConfig<PitchbookProfileParams,
     description:
       'Retrieve the industry classification, verticals, keywords, and emerging spaces assigned to a company',
     version: '1.0.0',
+    errorExtractor: ErrorExtractorId.PITCHBOOK_ERRORS,
 
     params: {
       apiKey: {
@@ -107,16 +109,15 @@ export const pitchbookCompanyIndustriesTool: ToolConfig<PitchbookProfileParams,
         description: 'Keywords associated with the company',
         items: { type: 'string', description: 'Keyword' },
       },
+      /**
+       * The recorded sample is an empty array and PitchBook does not publish the
+       * entry shape anywhere in the collection, so the items stay opaque rather
+       * than borrowing the sibling `verticals` shape.
+       */
       emergingSpaces: {
         type: 'array',
         description: 'Analyst-defined emerging spaces the company is placed in',
-        items: {
-          type: 'object',
-          properties: {
-            code: { type: 'string', description: 'Emerging space code' },
-            description: { type: 'string', description: 'Emerging space label' },
-          },
-        },
+        items: { type: 'json' },
       },
     },
   }

apps/sim/tools/pitchbook/company_investors.ts

@@ -1,3 +1,4 @@
+import { ErrorExtractorId } from '@/tools/error-extractors'
 import type { PitchbookProfileParams, PitchbookResponse } from '@/tools/pitchbook/types'
 import { PITCHBOOK_API_BASE, pitchbookAuthHeaders, throwIfNotOk } from '@/tools/pitchbook/utils'
 import type { ToolConfig } from '@/tools/types'
@@ -9,6 +10,7 @@ export const pitchbookCompanyInvestorsTool: ToolConfig<PitchbookProfileParams, P
     description:
       'Retrieve every investor in a company, current and former, with the type of investor and when they invested',
     version: '1.0.0',
+    errorExtractor: ErrorExtractorId.PITCHBOOK_ERRORS,
 
     params: {
       apiKey: {