@hed-hog/core 0.0.327 → 0.0.329

package/dist/mcp/guards/mcp-permission.guard.js

@@ -0,0 +1,57 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpPermissionGuard = void 0;
+const api_prisma_1 = require("@hed-hog/api-prisma");
+const common_1 = require("@nestjs/common");
+let McpPermissionGuard = class McpPermissionGuard {
+    constructor(prisma) {
+        this.prisma = prisma;
+    }
+    async canActivate(context) {
+        var _a, _b;
+        const request = context.switchToHttp().getRequest();
+        // Only POST requests carry tool invocations
+        if (request.method !== 'POST')
+            return true;
+        const body = request.body;
+        const toolName = (body === null || body === void 0 ? void 0 : body.method) === 'tools/call' ? (_a = body === null || body === void 0 ? void 0 : body.params) === null || _a === void 0 ? void 0 : _a.name : undefined;
+        // tools/list, initialize, ping, etc. — no per-tool permission check needed
+        if (!toolName)
+            return true;
+        const userId = (_b = request === null || request === void 0 ? void 0 : request.auth) === null || _b === void 0 ? void 0 : _b.sub;
+        const count = await this.prisma.route.count({
+            where: {
+                type: 'MCP',
+                tool_name: toolName,
+                role_route: {
+                    some: {
+                        role: {
+                            role_user: {
+                                some: { user_id: userId },
+                            },
+                        },
+                    },
+                },
+            },
+        });
+        if (count === 0) {
+            throw new common_1.ForbiddenException(`Access denied to MCP tool '${toolName}'`);
+        }
+        return true;
+    }
+};
+exports.McpPermissionGuard = McpPermissionGuard;
+exports.McpPermissionGuard = McpPermissionGuard = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [api_prisma_1.PrismaService])
+], McpPermissionGuard);
+//# sourceMappingURL=mcp-permission.guard.js.map

package/dist/mcp/guards/mcp-permission.guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-permission.guard.js","sourceRoot":"","sources":["../../../src/mcp/guards/mcp-permission.guard.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,oDAAoD;AACpD,2CAKwB;AAIjB,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC7B,YAA6B,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;IAAG,CAAC;IAEtD,KAAK,CAAC,WAAW,CAAC,OAAyB;;QACzC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,UAAU,EAAW,CAAC;QAE7D,4CAA4C;QAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAE3C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAW,CAAC;QACjC,MAAM,QAAQ,GACZ,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,MAAK,YAAY,CAAC,CAAC,CAAC,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,0CAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAEjE,2EAA2E;QAC3E,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAE3B,MAAM,MAAM,GAAG,MAAC,OAAe,aAAf,OAAO,uBAAP,OAAO,CAAU,IAAI,0CAAE,GAAG,CAAC;QAE3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;YAC1C,KAAK,EAAE;gBACL,IAAI,EAAE,KAAY;gBAClB,SAAS,EAAE,QAAQ;gBACnB,UAAU,EAAE;oBACV,IAAI,EAAE;wBACJ,IAAI,EAAE;4BACJ,SAAS,EAAE;gCACT,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE;6BAC1B;yBACF;qBACF;iBACF;aACF;SACF,CAAC,CAAC;QAEH,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,MAAM,IAAI,2BAAkB,CAAC,8BAA8B,QAAQ,GAAG,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAA;AAxCY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;qCAE0B,0BAAa;GADvC,kBAAkB,CAwC9B"}

package/dist/mcp/interfaces/mcp-tool-definition.interface.d.ts

@@ -0,0 +1,7 @@
+export interface McpToolDefinition {
+    name: string;
+    description: string;
+    inputSchema?: Record<string, any>;
+    readOnly?: boolean;
+}
+//# sourceMappingURL=mcp-tool-definition.interface.d.ts.map

package/dist/mcp/interfaces/mcp-tool-definition.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tool-definition.interface.d.ts","sourceRoot":"","sources":["../../../src/mcp/interfaces/mcp-tool-definition.interface.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB"}

package/dist/mcp/interfaces/mcp-tool-definition.interface.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=mcp-tool-definition.interface.js.map

package/dist/mcp/interfaces/mcp-tool-definition.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-tool-definition.interface.js","sourceRoot":"","sources":["../../../src/mcp/interfaces/mcp-tool-definition.interface.ts"],"names":[],"mappings":""}

package/dist/mcp/mcp-audit.service.d.ts

@@ -0,0 +1,17 @@
+import { PrismaService } from '@hed-hog/api-prisma';
+interface AuditRecord {
+    userId: number;
+    toolName: string;
+    input: Record<string, any>;
+    success: boolean;
+    error?: string;
+    durationMs: number;
+}
+export declare class McpAuditService {
+    private readonly prisma;
+    private readonly logger;
+    constructor(prisma: PrismaService);
+    record(data: AuditRecord): Promise<void>;
+}
+export {};
+//# sourceMappingURL=mcp-audit.service.d.ts.map

package/dist/mcp/mcp-audit.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-audit.service.d.ts","sourceRoot":"","sources":["../../src/mcp/mcp-audit.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBACa,eAAe;IAGd,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoC;gBAE9B,MAAM,EAAE,aAAa;IAE5C,MAAM,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CAiB/C"}

package/dist/mcp/mcp-audit.service.js

@@ -0,0 +1,46 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var McpAuditService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpAuditService = void 0;
+const api_prisma_1 = require("@hed-hog/api-prisma");
+const common_1 = require("@nestjs/common");
+let McpAuditService = McpAuditService_1 = class McpAuditService {
+    constructor(prisma) {
+        this.prisma = prisma;
+        this.logger = new common_1.Logger(McpAuditService_1.name);
+    }
+    async record(data) {
+        var _a;
+        const sanitized = JSON.stringify(data.input).slice(0, 1000);
+        try {
+            await this.prisma.mcp_tool_call_log.create({
+                data: {
+                    user_id: data.userId || null,
+                    tool_name: data.toolName,
+                    input: sanitized,
+                    success: data.success,
+                    error: (_a = data.error) !== null && _a !== void 0 ? _a : null,
+                    duration_ms: data.durationMs,
+                },
+            });
+        }
+        catch (e) {
+            this.logger.warn(`Failed to persist MCP audit record: ${e.message}`);
+        }
+    }
+};
+exports.McpAuditService = McpAuditService;
+exports.McpAuditService = McpAuditService = McpAuditService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [api_prisma_1.PrismaService])
+], McpAuditService);
+//# sourceMappingURL=mcp-audit.service.js.map

package/dist/mcp/mcp-audit.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-audit.service.js","sourceRoot":"","sources":["../../src/mcp/mcp-audit.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,oDAAoD;AACpD,2CAAoD;AAY7C,IAAM,eAAe,uBAArB,MAAM,eAAe;IAG1B,YAA6B,MAAqB;QAArB,WAAM,GAAN,MAAM,CAAe;QAFjC,WAAM,GAAG,IAAI,eAAM,CAAC,iBAAe,CAAC,IAAI,CAAC,CAAC;IAEN,CAAC;IAEtD,KAAK,CAAC,MAAM,CAAC,IAAiB;;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC5D,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBACzC,IAAI,EAAE;oBACJ,OAAO,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;oBAC5B,SAAS,EAAE,IAAI,CAAC,QAAQ;oBACxB,KAAK,EAAE,SAAS;oBAChB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,KAAK,EAAE,MAAA,IAAI,CAAC,KAAK,mCAAI,IAAI;oBACzB,WAAW,EAAE,IAAI,CAAC,UAAU;iBAC7B;aACF,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;CACF,CAAA;AAtBY,0CAAe;0BAAf,eAAe;IAD3B,IAAA,mBAAU,GAAE;qCAI0B,0BAAa;GAHvC,eAAe,CAsB3B"}

package/dist/mcp/mcp-registry.service.d.ts

@@ -0,0 +1,21 @@
+import { OnModuleInit } from '@nestjs/common';
+import { DiscoveryService } from '@nestjs/core';
+import { Reflector } from '@nestjs/core';
+import { McpToolDefinition } from './interfaces/mcp-tool-definition.interface';
+import { McpContext } from './types/mcp-context.type';
+export interface McpToolEntry {
+    definition: McpToolDefinition;
+    handler: (args: Record<string, any>, context: McpContext) => Promise<any>;
+}
+export declare class McpRegistryService implements OnModuleInit {
+    private readonly discovery;
+    private readonly reflector;
+    private readonly logger;
+    private readonly tools;
+    constructor(discovery: DiscoveryService, reflector: Reflector);
+    onModuleInit(): void;
+    getAll(): McpToolEntry[];
+    get(toolName: string): McpToolEntry | undefined;
+    has(toolName: string): boolean;
+}
+//# sourceMappingURL=mcp-registry.service.d.ts.map

package/dist/mcp/mcp-registry.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-registry.service.d.ts","sourceRoot":"","sources":["../../src/mcp/mcp-registry.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAEzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAC/E,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;CAC3E;AAED,qBACa,kBAAmB,YAAW,YAAY;IAKnD,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,SAAS;IAL5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuC;IAC9D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmC;gBAGtC,SAAS,EAAE,gBAAgB,EAC3B,SAAS,EAAE,SAAS;IAGvC,YAAY,IAAI,IAAI;IAmCpB,MAAM,IAAI,YAAY,EAAE;IAIxB,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAI/C,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;CAG/B"}

package/dist/mcp/mcp-registry.service.js

@@ -0,0 +1,69 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var McpRegistryService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpRegistryService = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const core_2 = require("@nestjs/core");
+const mcp_tool_decorator_1 = require("./decorators/mcp-tool.decorator");
+let McpRegistryService = McpRegistryService_1 = class McpRegistryService {
+    constructor(discovery, reflector) {
+        this.discovery = discovery;
+        this.reflector = reflector;
+        this.logger = new common_1.Logger(McpRegistryService_1.name);
+        this.tools = new Map();
+    }
+    onModuleInit() {
+        const providers = this.discovery.getProviders();
+        for (const wrapper of providers) {
+            const { instance } = wrapper;
+            if (!instance || typeof instance !== 'object')
+                continue;
+            const prototype = Object.getPrototypeOf(instance);
+            if (!prototype)
+                continue;
+            const methodNames = Object.getOwnPropertyNames(prototype).filter((key) => {
+                if (key === 'constructor')
+                    return false;
+                const descriptor = Object.getOwnPropertyDescriptor(prototype, key);
+                return descriptor !== undefined && typeof descriptor.value === 'function';
+            });
+            for (const methodName of methodNames) {
+                const definition = this.reflector.get(mcp_tool_decorator_1.MCP_TOOL_METADATA, prototype[methodName]);
+                if (!definition)
+                    continue;
+                this.logger.log(`Registered MCP tool: ${definition.name}`);
+                this.tools.set(definition.name, {
+                    definition,
+                    handler: instance[methodName].bind(instance),
+                });
+            }
+        }
+        this.logger.log(`McpRegistryService: ${this.tools.size} tools registered`);
+    }
+    getAll() {
+        return Array.from(this.tools.values());
+    }
+    get(toolName) {
+        return this.tools.get(toolName);
+    }
+    has(toolName) {
+        return this.tools.has(toolName);
+    }
+};
+exports.McpRegistryService = McpRegistryService;
+exports.McpRegistryService = McpRegistryService = McpRegistryService_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.DiscoveryService,
+        core_2.Reflector])
+], McpRegistryService);
+//# sourceMappingURL=mcp-registry.service.js.map

package/dist/mcp/mcp-registry.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-registry.service.js","sourceRoot":"","sources":["../../src/mcp/mcp-registry.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,2CAAkE;AAClE,uCAAgD;AAChD,uCAAyC;AACzC,wEAAoE;AAU7D,IAAM,kBAAkB,0BAAxB,MAAM,kBAAkB;IAI7B,YACmB,SAA2B,EAC3B,SAAoB;QADpB,cAAS,GAAT,SAAS,CAAkB;QAC3B,cAAS,GAAT,SAAS,CAAW;QALtB,WAAM,GAAG,IAAI,eAAM,CAAC,oBAAkB,CAAC,IAAI,CAAC,CAAC;QAC7C,UAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAKtD,CAAC;IAEJ,YAAY;QACV,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;QAEhD,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;YAChC,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;YAC7B,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;gBAAE,SAAS;YAExD,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YAClD,IAAI,CAAC,SAAS;gBAAE,SAAS;YAEzB,MAAM,WAAW,GAAG,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE;gBACvE,IAAI,GAAG,KAAK,aAAa;oBAAE,OAAO,KAAK,CAAC;gBACxC,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;gBACnE,OAAO,UAAU,KAAK,SAAS,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,UAAU,CAAC;YAC5E,CAAC,CAAC,CAAC;YAEH,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACrC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CACnC,sCAAiB,EACjB,SAAS,CAAC,UAAU,CAAC,CACtB,CAAC;gBAEF,IAAI,CAAC,UAAU;oBAAE,SAAS;gBAE1B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,wBAAwB,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC3D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE;oBAC9B,UAAU;oBACV,OAAO,EAAG,QAAgB,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;iBACtD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,KAAK,CAAC,IAAI,mBAAmB,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM;QACJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,GAAG,CAAC,QAAgB;QAClB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,GAAG,CAAC,QAAgB;QAClB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;CACF,CAAA;AAvDY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,mBAAU,GAAE;qCAMmB,uBAAgB;QAChB,gBAAS;GAN5B,kBAAkB,CAuD9B"}

package/dist/mcp/mcp-server.service.d.ts

@@ -0,0 +1,12 @@
+import { Request, Response } from 'express';
+import { McpAuditService } from './mcp-audit.service';
+import { McpRegistryService } from './mcp-registry.service';
+import { McpContext } from './types/mcp-context.type';
+export declare class McpServerService {
+    private readonly registry;
+    private readonly audit;
+    constructor(registry: McpRegistryService, audit: McpAuditService);
+    handleRequest(req: Request, res: Response, context: McpContext): Promise<void>;
+    private buildServer;
+}
+//# sourceMappingURL=mcp-server.service.d.ts.map

package/dist/mcp/mcp-server.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.service.d.ts","sourceRoot":"","sources":["../../src/mcp/mcp-server.service.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,qBACa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK;gBADL,QAAQ,EAAE,kBAAkB,EAC5B,KAAK,EAAE,eAAe;IAGnC,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IASpF,OAAO,CAAC,WAAW;CA0DpB"}

package/dist/mcp/mcp-server.service.js

@@ -0,0 +1,94 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpServerService = void 0;
+const index_js_1 = require("@modelcontextprotocol/sdk/server/index.js");
+const streamableHttp_js_1 = require("@modelcontextprotocol/sdk/server/streamableHttp.js");
+const types_js_1 = require("@modelcontextprotocol/sdk/types.js");
+const common_1 = require("@nestjs/common");
+const mcp_audit_service_1 = require("./mcp-audit.service");
+const mcp_registry_service_1 = require("./mcp-registry.service");
+let McpServerService = class McpServerService {
+    constructor(registry, audit) {
+        this.registry = registry;
+        this.audit = audit;
+    }
+    async handleRequest(req, res, context) {
+        const server = this.buildServer(context);
+        const transport = new streamableHttp_js_1.StreamableHTTPServerTransport({
+            sessionIdGenerator: undefined,
+        });
+        await server.connect(transport);
+        await transport.handleRequest(req, res, req.body);
+    }
+    buildServer(context) {
+        const server = new index_js_1.Server({ name: 'hedhog-mcp', version: '1.0.0' }, { capabilities: { tools: {} } });
+        server.setRequestHandler(types_js_1.ListToolsRequestSchema, async () => ({
+            tools: this.registry.getAll().map((e) => {
+                var _a;
+                return ({
+                    name: e.definition.name,
+                    description: e.definition.description,
+                    inputSchema: (_a = e.definition.inputSchema) !== null && _a !== void 0 ? _a : {
+                        type: 'object',
+                        properties: {},
+                    },
+                });
+            }),
+        }));
+        server.setRequestHandler(types_js_1.CallToolRequestSchema, async (request) => {
+            var _a;
+            const toolName = request.params.name;
+            const args = ((_a = request.params.arguments) !== null && _a !== void 0 ? _a : {});
+            const entry = this.registry.get(toolName);
+            if (!entry) {
+                return {
+                    isError: true,
+                    content: [{ type: 'text', text: `Tool '${toolName}' not found` }],
+                };
+            }
+            const start = Date.now();
+            try {
+                const result = await entry.handler(args, Object.assign(Object.assign({}, context), { toolName }));
+                await this.audit.record({
+                    userId: context.userId,
+                    toolName,
+                    input: args,
+                    success: true,
+                    durationMs: Date.now() - start,
+                });
+                return { content: [{ type: 'text', text: JSON.stringify(result) }] };
+            }
+            catch (e) {
+                await this.audit.record({
+                    userId: context.userId,
+                    toolName,
+                    input: args,
+                    success: false,
+                    error: e.message,
+                    durationMs: Date.now() - start,
+                });
+                return {
+                    isError: true,
+                    content: [{ type: 'text', text: e.message }],
+                };
+            }
+        });
+        return server;
+    }
+};
+exports.McpServerService = McpServerService;
+exports.McpServerService = McpServerService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [mcp_registry_service_1.McpRegistryService,
+        mcp_audit_service_1.McpAuditService])
+], McpServerService);
+//# sourceMappingURL=mcp-server.service.js.map

package/dist/mcp/mcp-server.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-server.service.js","sourceRoot":"","sources":["../../src/mcp/mcp-server.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wEAAmE;AACnE,0FAAmG;AACnG,iEAG4C;AAC5C,2CAA4C;AAE5C,2DAAsD;AACtD,iEAA4D;AAIrD,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAC3B,YACmB,QAA4B,EAC5B,KAAsB;QADtB,aAAQ,GAAR,QAAQ,CAAoB;QAC5B,UAAK,GAAL,KAAK,CAAiB;IACtC,CAAC;IAEJ,KAAK,CAAC,aAAa,CAAC,GAAY,EAAE,GAAa,EAAE,OAAmB;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,iDAA6B,CAAC;YAClD,kBAAkB,EAAE,SAAS;SAC9B,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IAEO,WAAW,CAAC,OAAmB;QACrC,MAAM,MAAM,GAAG,IAAI,iBAAM,CACvB,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,EACxC,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAChC,CAAC;QAEF,MAAM,CAAC,iBAAiB,CAAC,iCAAsB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YAC5D,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;;gBAAC,OAAA,CAAC;oBACxC,IAAI,EAAE,CAAC,CAAC,UAAU,CAAC,IAAI;oBACvB,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,WAAW;oBACrC,WAAW,EAAE,MAAA,CAAC,CAAC,UAAU,CAAC,WAAW,mCAAI;wBACvC,IAAI,EAAE,QAAQ;wBACd,UAAU,EAAE,EAAE;qBACf;iBACF,CAAC,CAAA;aAAA,CAAC;SACJ,CAAC,CAAC,CAAC;QAEJ,MAAM,CAAC,iBAAiB,CAAC,gCAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;;YAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC;YACrC,MAAM,IAAI,GAAG,CAAC,MAAA,OAAO,CAAC,MAAM,CAAC,SAAS,mCAAI,EAAE,CAAwB,CAAC;YACrE,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAE1C,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,QAAQ,aAAa,EAAE,CAAC;iBAClE,CAAC;YACJ,CAAC;YAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,kCAAO,OAAO,KAAE,QAAQ,IAAG,CAAC;gBACnE,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;oBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,QAAQ;oBACR,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,IAAI;oBACb,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC/B,CAAC,CAAC;gBACH,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YACvE,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;oBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,QAAQ;oBACR,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,CAAC,CAAC,OAAO;oBAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;iBAC/B,CAAC,CAAC;gBACH,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;iBAC7C,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,MAAM,CAAC;IAChB,CAAC;CACF,CAAA;AAzEY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,mBAAU,GAAE;qCAGkB,yCAAkB;QACrB,mCAAe;GAH9B,gBAAgB,CAyE5B"}

package/dist/mcp/mcp.controller.d.ts

@@ -0,0 +1,8 @@
+import { Request, Response } from 'express';
+import { McpServerService } from './mcp-server.service';
+export declare class McpController {
+    private readonly mcpServer;
+    constructor(mcpServer: McpServerService);
+    handle(req: Request, res: Response): Promise<void>;
+}
+//# sourceMappingURL=mcp.controller.d.ts.map

package/dist/mcp/mcp.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.controller.d.ts","sourceRoot":"","sources":["../../src/mcp/mcp.controller.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAG5C,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,qBAGa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,SAAS;gBAAT,SAAS,EAAE,gBAAgB;IAGlD,MAAM,CAAQ,GAAG,EAAE,OAAO,EAAS,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;CAevE"}

package/dist/mcp/mcp.controller.js

@@ -0,0 +1,54 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpController = void 0;
+const api_1 = require("@hed-hog/api");
+const common_1 = require("@nestjs/common");
+const mcp_auth_guard_1 = require("./guards/mcp-auth.guard");
+const mcp_permission_guard_1 = require("./guards/mcp-permission.guard");
+const mcp_server_service_1 = require("./mcp-server.service");
+let McpController = class McpController {
+    constructor(mcpServer) {
+        this.mcpServer = mcpServer;
+    }
+    async handle(req, res) {
+        var _a, _b, _c, _d, _e;
+        const auth = req.auth;
+        const locale = (_c = (_b = (_a = req.headers['accept-language']) === null || _a === void 0 ? void 0 : _a.split(',')[0]) === null || _b === void 0 ? void 0 : _b.split('-')[0]) !== null && _c !== void 0 ? _c : 'en';
+        const body = req.body;
+        const toolName = (body === null || body === void 0 ? void 0 : body.method) === 'tools/call' ? ((_e = (_d = body === null || body === void 0 ? void 0 : body.params) === null || _d === void 0 ? void 0 : _d.name) !== null && _e !== void 0 ? _e : '') : '';
+        await this.mcpServer.handleRequest(req, res, {
+            userId: auth.sub,
+            sessionId: String(auth.sessionId),
+            locale,
+            toolName,
+        });
+    }
+};
+exports.McpController = McpController;
+__decorate([
+    (0, common_1.All)(),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], McpController.prototype, "handle", null);
+exports.McpController = McpController = __decorate([
+    (0, api_1.NoRole)(),
+    (0, common_1.UseGuards)(mcp_auth_guard_1.McpAuthGuard, mcp_permission_guard_1.McpPermissionGuard),
+    (0, common_1.Controller)('mcp'),
+    __metadata("design:paramtypes", [mcp_server_service_1.McpServerService])
+], McpController);
+//# sourceMappingURL=mcp.controller.js.map

package/dist/mcp/mcp.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.controller.js","sourceRoot":"","sources":["../../src/mcp/mcp.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,sCAAsC;AACtC,2CAAsE;AAEtE,4DAAuD;AACvD,wEAAmE;AACnE,6DAAwD;AAKjD,IAAM,aAAa,GAAnB,MAAM,aAAa;IACxB,YAA6B,SAA2B;QAA3B,cAAS,GAAT,SAAS,CAAkB;IAAG,CAAC;IAGtD,AAAN,KAAK,CAAC,MAAM,CAAQ,GAAY,EAAS,GAAa;;QACpD,MAAM,IAAI,GAAI,GAAW,CAAC,IAAI,CAAC;QAC/B,MAAM,MAAM,GACV,MAAA,MAAA,MAAA,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,0CAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,0CAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,mCAAI,IAAI,CAAC;QACvE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAW,CAAC;QAC7B,MAAM,QAAQ,GACZ,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,MAAK,YAAY,CAAC,CAAC,CAAC,CAAC,MAAA,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,0CAAE,IAAI,mCAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAElE,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,GAAG,EAAE,GAAG,EAAE;YAC3C,MAAM,EAAE,IAAI,CAAC,GAAG;YAChB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;YACjC,MAAM;YACN,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;CACF,CAAA;AAnBY,sCAAa;AAIlB;IADL,IAAA,YAAG,GAAE;IACQ,WAAA,IAAA,YAAG,GAAE,CAAA;IAAgB,WAAA,IAAA,YAAG,GAAE,CAAA;;;;2CAcvC;wBAlBU,aAAa;IAHzB,IAAA,YAAM,GAAE;IACR,IAAA,kBAAS,EAAC,6BAAY,EAAE,yCAAkB,CAAC;IAC3C,IAAA,mBAAU,EAAC,KAAK,CAAC;qCAEwB,qCAAgB;GAD7C,aAAa,CAmBzB"}

package/dist/mcp/mcp.module.d.ts

@@ -0,0 +1,3 @@
+export declare class McpModule {
+}
+//# sourceMappingURL=mcp.module.d.ts.map

package/dist/mcp/mcp.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.module.d.ts","sourceRoot":"","sources":["../../src/mcp/mcp.module.ts"],"names":[],"mappings":"AAeA,qBAoBa,SAAS;CAAG"}

package/dist/mcp/mcp.module.js

@@ -0,0 +1,49 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.McpModule = void 0;
+const api_prisma_1 = require("@hed-hog/api-prisma");
+const common_1 = require("@nestjs/common");
+const core_1 = require("@nestjs/core");
+const setting_module_1 = require("../setting/setting.module");
+const token_module_1 = require("../token/token.module");
+const user_module_1 = require("../user/user.module");
+const mcp_auth_guard_1 = require("./guards/mcp-auth.guard");
+const mcp_permission_guard_1 = require("./guards/mcp-permission.guard");
+const mcp_audit_service_1 = require("./mcp-audit.service");
+const mcp_registry_service_1 = require("./mcp-registry.service");
+const mcp_server_service_1 = require("./mcp-server.service");
+const mcp_controller_1 = require("./mcp.controller");
+const core_settings_mcp_tools_1 = require("./tools/core-settings.mcp-tools");
+const core_users_mcp_tools_1 = require("./tools/core-users.mcp-tools");
+let McpModule = class McpModule {
+};
+exports.McpModule = McpModule;
+exports.McpModule = McpModule = __decorate([
+    (0, common_1.Module)({
+        imports: [
+            core_1.DiscoveryModule,
+            (0, common_1.forwardRef)(() => api_prisma_1.PrismaModule),
+            (0, common_1.forwardRef)(() => token_module_1.TokenModule),
+            (0, common_1.forwardRef)(() => setting_module_1.SettingModule),
+            (0, common_1.forwardRef)(() => user_module_1.UserModule),
+        ],
+        controllers: [mcp_controller_1.McpController],
+        providers: [
+            mcp_registry_service_1.McpRegistryService,
+            mcp_server_service_1.McpServerService,
+            mcp_audit_service_1.McpAuditService,
+            mcp_auth_guard_1.McpAuthGuard,
+            mcp_permission_guard_1.McpPermissionGuard,
+            core_settings_mcp_tools_1.CoreSettingsMcpTools,
+            core_users_mcp_tools_1.CoreUsersMcpTools,
+        ],
+        exports: [mcp_registry_service_1.McpRegistryService, mcp_server_service_1.McpServerService],
+    })
+], McpModule);
+//# sourceMappingURL=mcp.module.js.map

package/dist/mcp/mcp.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp.module.js","sourceRoot":"","sources":["../../src/mcp/mcp.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,oDAAmD;AACnD,2CAAoD;AACpD,uCAA+C;AAC/C,8DAA0D;AAC1D,wDAAoD;AACpD,qDAAiD;AACjD,4DAAuD;AACvD,wEAAmE;AACnE,2DAAsD;AACtD,iEAA4D;AAC5D,6DAAwD;AACxD,qDAAiD;AACjD,6EAAuE;AACvE,uEAAiE;AAsB1D,IAAM,SAAS,GAAf,MAAM,SAAS;CAAG,CAAA;AAAZ,8BAAS;oBAAT,SAAS;IApBrB,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,sBAAe;YACf,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,yBAAY,CAAC;YAC9B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,0BAAW,CAAC;YAC7B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,8BAAa,CAAC;YAC/B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,wBAAU,CAAC;SAC7B;QACD,WAAW,EAAE,CAAC,8BAAa,CAAC;QAC5B,SAAS,EAAE;YACT,yCAAkB;YAClB,qCAAgB;YAChB,mCAAe;YACf,6BAAY;YACZ,yCAAkB;YAClB,8CAAoB;YACpB,wCAAiB;SAClB;QACD,OAAO,EAAE,CAAC,yCAAkB,EAAE,qCAAgB,CAAC;KAChD,CAAC;GACW,SAAS,CAAG"}

package/dist/mcp/tools/core-settings.mcp-tools.d.ts

@@ -0,0 +1,12 @@
+import { SettingService } from '../../setting/setting.service';
+import { McpContext } from '../types/mcp-context.type';
+export declare class CoreSettingsMcpTools {
+    private readonly settingService;
+    constructor(settingService: SettingService);
+    getEffectiveSettings(_args: Record<string, any>, context: McpContext): Promise<any>;
+    setUserSetting(args: {
+        slug: string;
+        value: string;
+    }, context: McpContext): Promise<any>;
+}
+//# sourceMappingURL=core-settings.mcp-tools.d.ts.map

package/dist/mcp/tools/core-settings.mcp-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-settings.mcp-tools.d.ts","sourceRoot":"","sources":["../../../src/mcp/tools/core-settings.mcp-tools.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAE/D,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAEvD,qBACa,oBAAoB;IACnB,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAAd,cAAc,EAAE,cAAc;IAQrD,oBAAoB,CACxB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAC1B,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,GAAG,CAAC;IAuBT,cAAc,CAClB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EACrC,OAAO,EAAE,UAAU,GAClB,OAAO,CAAC,GAAG,CAAC;CAQhB"}

package/dist/mcp/tools/core-settings.mcp-tools.js

@@ -0,0 +1,66 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CoreSettingsMcpTools = void 0;
+const common_1 = require("@nestjs/common");
+const setting_service_1 = require("../../setting/setting.service");
+const mcp_tool_decorator_1 = require("../decorators/mcp-tool.decorator");
+let CoreSettingsMcpTools = class CoreSettingsMcpTools {
+    constructor(settingService) {
+        this.settingService = settingService;
+    }
+    async getEffectiveSettings(_args, context) {
+        return this.settingService.getEffectiveSettings(context.userId);
+    }
+    async setUserSetting(args, context) {
+        return this.settingService.setSettingUserValue(context.locale, context.userId, args.slug, args.value);
+    }
+};
+exports.CoreSettingsMcpTools = CoreSettingsMcpTools;
+__decorate([
+    (0, mcp_tool_decorator_1.McpTool)({
+        name: 'core.settings.get',
+        description: 'Returns effective settings for the authenticated user',
+        inputSchema: { type: 'object', properties: {} },
+        readOnly: true,
+    }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], CoreSettingsMcpTools.prototype, "getEffectiveSettings", null);
+__decorate([
+    (0, mcp_tool_decorator_1.McpTool)({
+        name: 'core.settings.set',
+        description: 'Updates a user-overridable setting value for the authenticated user. Only settings with user_override=true can be changed.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                slug: {
+                    type: 'string',
+                    description: 'The slug identifier of the setting to update',
+                },
+                value: {
+                    type: 'string',
+                    description: 'The new value for the setting',
+                },
+            },
+            required: ['slug', 'value'],
+        },
+    }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], CoreSettingsMcpTools.prototype, "setUserSetting", null);
+exports.CoreSettingsMcpTools = CoreSettingsMcpTools = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [setting_service_1.SettingService])
+], CoreSettingsMcpTools);
+//# sourceMappingURL=core-settings.mcp-tools.js.map

package/dist/mcp/tools/core-settings.mcp-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-settings.mcp-tools.js","sourceRoot":"","sources":["../../../src/mcp/tools/core-settings.mcp-tools.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,mEAA+D;AAC/D,yEAA2D;AAIpD,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAC/B,YAA6B,cAA8B;QAA9B,mBAAc,GAAd,cAAc,CAAgB;IAAG,CAAC;IAQzD,AAAN,KAAK,CAAC,oBAAoB,CACxB,KAA0B,EAC1B,OAAmB;QAEnB,OAAO,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC;IAqBK,AAAN,KAAK,CAAC,cAAc,CAClB,IAAqC,EACrC,OAAmB;QAEnB,OAAO,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAC5C,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,MAAM,EACd,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,KAAK,CACX,CAAC;IACJ,CAAC;CACF,CAAA;AA9CY,oDAAoB;AASzB;IANL,IAAA,4BAAO,EAAC;QACP,IAAI,EAAE,mBAAmB;QACzB,WAAW,EAAE,uDAAuD;QACpE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE;QAC/C,QAAQ,EAAE,IAAI;KACf,CAAC;;;;gEAMD;AAqBK;IAnBL,IAAA,4BAAO,EAAC;QACP,IAAI,EAAE,mBAAmB;QACzB,WAAW,EACT,4HAA4H;QAC9H,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,IAAI,EAAE;oBACJ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,8CAA8C;iBAC5D;gBACD,KAAK,EAAE;oBACL,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,+BAA+B;iBAC7C;aACF;YACD,QAAQ,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;SAC5B;KACF,CAAC;;;;0DAWD;+BA7CU,oBAAoB;IADhC,IAAA,mBAAU,GAAE;qCAEkC,gCAAc;GADhD,oBAAoB,CA8ChC"}