@hed-hog/core 0.0.366 → 0.0.367

package/src/mcp/decorators/mcp-tool.decorator.ts

@@ -1,7 +1,7 @@
-import { SetMetadata } from '@nestjs/common';
-import { McpToolDefinition } from '../interfaces/mcp-tool-definition.interface';
-
-export const MCP_TOOL_METADATA = 'mcp:tool';
-
-export const McpTool = (definition: McpToolDefinition): MethodDecorator =>
-  SetMetadata(MCP_TOOL_METADATA, definition);
+import { SetMetadata } from '@nestjs/common';
+import { McpToolDefinition } from '../interfaces/mcp-tool-definition.interface';
+
+export const MCP_TOOL_METADATA = 'mcp:tool';
+
+export const McpTool = (definition: McpToolDefinition): MethodDecorator =>
+  SetMetadata(MCP_TOOL_METADATA, definition);

package/src/mcp/guards/mcp-permission.guard.ts

@@ -1,51 +1,51 @@
-import { PrismaService } from '@hed-hog/api-prisma';
-import {
-  CanActivate,
-  ExecutionContext,
-  ForbiddenException,
-  Injectable,
-} from '@nestjs/common';
-import { Request } from 'express';
-
-@Injectable()
-export class McpPermissionGuard implements CanActivate {
-  constructor(private readonly prisma: PrismaService) {}
-
-  async canActivate(context: ExecutionContext): Promise<boolean> {
-    const request = context.switchToHttp().getRequest<Request>();
-
-    // Only POST requests carry tool invocations
-    if (request.method !== 'POST') return true;
-
-    const body = request.body as any;
-    const toolName: string | undefined =
-      body?.method === 'tools/call' ? body?.params?.name : undefined;
-
-    // tools/list, initialize, ping, etc. — no per-tool permission check needed
-    if (!toolName) return true;
-
-    const userId = (request as any)?.auth?.sub;
-
-    const count = await this.prisma.route.count({
-      where: {
-        type: 'MCP' as any,
-        tool_name: toolName,
-        role_route: {
-          some: {
-            role: {
-              role_user: {
-                some: { user_id: userId },
-              },
-            },
-          },
-        },
-      },
-    });
-
-    if (count === 0) {
-      throw new ForbiddenException(`Access denied to MCP tool '${toolName}'`);
-    }
-
-    return true;
-  }
-}
+import { PrismaService } from '@hed-hog/api-prisma';
+import {
+  CanActivate,
+  ExecutionContext,
+  ForbiddenException,
+  Injectable,
+} from '@nestjs/common';
+import { Request } from 'express';
+
+@Injectable()
+export class McpPermissionGuard implements CanActivate {
+  constructor(private readonly prisma: PrismaService) {}
+
+  async canActivate(context: ExecutionContext): Promise<boolean> {
+    const request = context.switchToHttp().getRequest<Request>();
+
+    // Only POST requests carry tool invocations
+    if (request.method !== 'POST') return true;
+
+    const body = request.body as any;
+    const toolName: string | undefined =
+      body?.method === 'tools/call' ? body?.params?.name : undefined;
+
+    // tools/list, initialize, ping, etc. — no per-tool permission check needed
+    if (!toolName) return true;
+
+    const userId = (request as any)?.auth?.sub;
+
+    const count = await this.prisma.route.count({
+      where: {
+        type: 'MCP' as any,
+        tool_name: toolName,
+        role_route: {
+          some: {
+            role: {
+              role_user: {
+                some: { user_id: userId },
+              },
+            },
+          },
+        },
+      },
+    });
+
+    if (count === 0) {
+      throw new ForbiddenException(`Access denied to MCP tool '${toolName}'`);
+    }
+
+    return true;
+  }
+}

package/src/mcp/interfaces/mcp-tool-definition.interface.ts

@@ -1,6 +1,6 @@
-export interface McpToolDefinition {
-  name: string;
-  description: string;
-  inputSchema?: Record<string, any>;
-  readOnly?: boolean;
-}
+export interface McpToolDefinition {
+  name: string;
+  description: string;
+  inputSchema?: Record<string, any>;
+  readOnly?: boolean;
+}

package/src/mcp/mcp-server.service.ts

@@ -1,87 +1,87 @@
-import { Server } from '@modelcontextprotocol/sdk/server/index.js';
-import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
-import {
-  CallToolRequestSchema,
-  ListToolsRequestSchema,
-} from '@modelcontextprotocol/sdk/types.js';
-import { Injectable } from '@nestjs/common';
-import { Request, Response } from 'express';
-import { McpAuditService } from './mcp-audit.service';
-import { McpRegistryService } from './mcp-registry.service';
-import { McpContext } from './types/mcp-context.type';
-
-@Injectable()
-export class McpServerService {
-  constructor(
-    private readonly registry: McpRegistryService,
-    private readonly audit: McpAuditService,
-  ) {}
-
-  async handleRequest(req: Request, res: Response, context: McpContext): Promise<void> {
-    const server = this.buildServer(context);
-    const transport = new StreamableHTTPServerTransport({
-      sessionIdGenerator: undefined,
-    });
-    await server.connect(transport);
-    await transport.handleRequest(req, res, req.body);
-  }
-
-  private buildServer(context: McpContext): Server {
-    const server = new Server(
-      { name: 'hedhog-mcp', version: '1.0.0' },
-      { capabilities: { tools: {} } },
-    );
-
-    server.setRequestHandler(ListToolsRequestSchema, async () => ({
-      tools: this.registry.getAll().map((e) => ({
-        name: e.definition.name,
-        description: e.definition.description,
-        inputSchema: e.definition.inputSchema ?? {
-          type: 'object',
-          properties: {},
-        },
-      })),
-    }));
-
-    server.setRequestHandler(CallToolRequestSchema, async (request) => {
-      const toolName = request.params.name;
-      const args = (request.params.arguments ?? {}) as Record<string, any>;
-      const entry = this.registry.get(toolName);
-
-      if (!entry) {
-        return {
-          isError: true,
-          content: [{ type: 'text', text: `Tool '${toolName}' not found` }],
-        };
-      }
-
-      const start = Date.now();
-      try {
-        const result = await entry.handler(args, { ...context, toolName });
-        await this.audit.record({
-          userId: context.userId,
-          toolName,
-          input: args,
-          success: true,
-          durationMs: Date.now() - start,
-        });
-        return { content: [{ type: 'text', text: JSON.stringify(result) }] };
-      } catch (e: any) {
-        await this.audit.record({
-          userId: context.userId,
-          toolName,
-          input: args,
-          success: false,
-          error: e.message,
-          durationMs: Date.now() - start,
-        });
-        return {
-          isError: true,
-          content: [{ type: 'text', text: e.message }],
-        };
-      }
-    });
-
-    return server;
-  }
-}
+import { Server } from '@modelcontextprotocol/sdk/server/index.js';
+import { StreamableHTTPServerTransport } from '@modelcontextprotocol/sdk/server/streamableHttp.js';
+import {
+  CallToolRequestSchema,
+  ListToolsRequestSchema,
+} from '@modelcontextprotocol/sdk/types.js';
+import { Injectable } from '@nestjs/common';
+import { Request, Response } from 'express';
+import { McpAuditService } from './mcp-audit.service';
+import { McpRegistryService } from './mcp-registry.service';
+import { McpContext } from './types/mcp-context.type';
+
+@Injectable()
+export class McpServerService {
+  constructor(
+    private readonly registry: McpRegistryService,
+    private readonly audit: McpAuditService,
+  ) {}
+
+  async handleRequest(req: Request, res: Response, context: McpContext): Promise<void> {
+    const server = this.buildServer(context);
+    const transport = new StreamableHTTPServerTransport({
+      sessionIdGenerator: undefined,
+    });
+    await server.connect(transport);
+    await transport.handleRequest(req, res, req.body);
+  }
+
+  private buildServer(context: McpContext): Server {
+    const server = new Server(
+      { name: 'hedhog-mcp', version: '1.0.0' },
+      { capabilities: { tools: {} } },
+    );
+
+    server.setRequestHandler(ListToolsRequestSchema, async () => ({
+      tools: this.registry.getAll().map((e) => ({
+        name: e.definition.name,
+        description: e.definition.description,
+        inputSchema: e.definition.inputSchema ?? {
+          type: 'object',
+          properties: {},
+        },
+      })),
+    }));
+
+    server.setRequestHandler(CallToolRequestSchema, async (request) => {
+      const toolName = request.params.name;
+      const args = (request.params.arguments ?? {}) as Record<string, any>;
+      const entry = this.registry.get(toolName);
+
+      if (!entry) {
+        return {
+          isError: true,
+          content: [{ type: 'text', text: `Tool '${toolName}' not found` }],
+        };
+      }
+
+      const start = Date.now();
+      try {
+        const result = await entry.handler(args, { ...context, toolName });
+        await this.audit.record({
+          userId: context.userId,
+          toolName,
+          input: args,
+          success: true,
+          durationMs: Date.now() - start,
+        });
+        return { content: [{ type: 'text', text: JSON.stringify(result) }] };
+      } catch (e: any) {
+        await this.audit.record({
+          userId: context.userId,
+          toolName,
+          input: args,
+          success: false,
+          error: e.message,
+          durationMs: Date.now() - start,
+        });
+        return {
+          isError: true,
+          content: [{ type: 'text', text: e.message }],
+        };
+      }
+    });
+
+    return server;
+  }
+}

package/src/mcp/types/mcp-context.type.ts

@@ -1,6 +1,6 @@
-export type McpContext = {
-  userId: number;
-  sessionId: string;
-  locale: string;
-  toolName: string;
-};
+export type McpContext = {
+  userId: number;
+  sessionId: string;
+  locale: string;
+  toolName: string;
+};

package/src/mcp-chat/dto/create-conversation.dto.ts

@@ -1,7 +1,7 @@
-import { IsOptional, IsString } from 'class-validator';
-
-export class CreateConversationDTO {
-  @IsOptional()
-  @IsString()
-  title?: string;
-}
+import { IsOptional, IsString } from 'class-validator';
+
+export class CreateConversationDTO {
+  @IsOptional()
+  @IsString()
+  title?: string;
+}

package/src/mcp-chat/dto/send-message.dto.ts

@@ -1,7 +1,7 @@
-import { IsNotEmpty, IsString } from 'class-validator';
-
-export class SendMessageDTO {
-  @IsString()
-  @IsNotEmpty()
-  message: string;
-}
+import { IsNotEmpty, IsString } from 'class-validator';
+
+export class SendMessageDTO {
+  @IsString()
+  @IsNotEmpty()
+  message: string;
+}

package/src/route/dto/create.dto.ts

@@ -1,32 +1,32 @@
-import { getLocaleText } from '@hed-hog/api-locale';
-import { IsIn, IsOptional, IsString } from 'class-validator';
-import { HttpMethod } from '../../types/http-method';
-
-export type RouteType = 'HTTP' | 'MCP';
-
-const HTTP_METHODS = ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS', 'HEAD'];
-
-export class CreateDTO {
-  @IsOptional()
-  @IsString({ message: (args) => getLocaleText('validation.urlMustBeString', args.value) })
-  url?: string;
-
-  @IsOptional()
-  @IsString({ message: (args) => getLocaleText('validation.methodMustBeString', args.value) })
-  @IsIn(HTTP_METHODS, {
-    message: (args) => getLocaleText('validation.methodMustBeValid', args.value),
-  })
-  method?: HttpMethod;
-
-  @IsOptional()
-  @IsIn(['HTTP', 'MCP'])
-  type?: RouteType;
-
-  @IsOptional()
-  @IsString()
-  tool_name?: string;
-
-  @IsOptional()
-  @IsString()
-  name?: string;
-}
+import { getLocaleText } from '@hed-hog/api-locale';
+import { IsIn, IsOptional, IsString } from 'class-validator';
+import { HttpMethod } from '../../types/http-method';
+
+export type RouteType = 'HTTP' | 'MCP';
+
+const HTTP_METHODS = ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS', 'HEAD'];
+
+export class CreateDTO {
+  @IsOptional()
+  @IsString({ message: (args) => getLocaleText('validation.urlMustBeString', args.value) })
+  url?: string;
+
+  @IsOptional()
+  @IsString({ message: (args) => getLocaleText('validation.methodMustBeString', args.value) })
+  @IsIn(HTTP_METHODS, {
+    message: (args) => getLocaleText('validation.methodMustBeValid', args.value),
+  })
+  method?: HttpMethod;
+
+  @IsOptional()
+  @IsIn(['HTTP', 'MCP'])
+  type?: RouteType;
+
+  @IsOptional()
+  @IsString()
+  tool_name?: string;
+
+  @IsOptional()
+  @IsString()
+  name?: string;
+}

package/src/route/dto/update.dto.ts

@@ -1,31 +1,31 @@
-import { getLocaleText } from '@hed-hog/api-locale';
-import { IsIn, IsOptional, IsString } from 'class-validator';
-import { HttpMethod } from '../../types/http-method';
-import { RouteType } from './create.dto';
-
-const HTTP_METHODS = ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS', 'HEAD'];
-
-export class UpdateDTO {
-  @IsOptional()
-  @IsString({ message: (args) => getLocaleText('validation.urlMustBeString', args.value) })
-  url?: string;
-
-  @IsOptional()
-  @IsString({ message: (args) => getLocaleText('validation.methodMustBeString', args.value) })
-  @IsIn(HTTP_METHODS, {
-    message: (args) => getLocaleText('validation.methodMustBeValid', args.value),
-  })
-  method?: HttpMethod;
-
-  @IsOptional()
-  @IsIn(['HTTP', 'MCP'])
-  type?: RouteType;
-
-  @IsOptional()
-  @IsString()
-  tool_name?: string;
-
-  @IsOptional()
-  @IsString()
-  name?: string;
-}
+import { getLocaleText } from '@hed-hog/api-locale';
+import { IsIn, IsOptional, IsString } from 'class-validator';
+import { HttpMethod } from '../../types/http-method';
+import { RouteType } from './create.dto';
+
+const HTTP_METHODS = ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS', 'HEAD'];
+
+export class UpdateDTO {
+  @IsOptional()
+  @IsString({ message: (args) => getLocaleText('validation.urlMustBeString', args.value) })
+  url?: string;
+
+  @IsOptional()
+  @IsString({ message: (args) => getLocaleText('validation.methodMustBeString', args.value) })
+  @IsIn(HTTP_METHODS, {
+    message: (args) => getLocaleText('validation.methodMustBeValid', args.value),
+  })
+  method?: HttpMethod;
+
+  @IsOptional()
+  @IsIn(['HTTP', 'MCP'])
+  type?: RouteType;
+
+  @IsOptional()
+  @IsString()
+  tool_name?: string;
+
+  @IsOptional()
+  @IsString()
+  name?: string;
+}

package/src/webhook-integration/integration-event-catalog.controller.ts

@@ -1,50 +1,50 @@
-import { DeleteDTO, Role } from '@hed-hog/api';
-import { Pagination } from '@hed-hog/api-pagination';
-import {
-  Body,
-  Controller,
-  Delete,
-  Get,
-  Param,
-  ParseIntPipe,
-  Patch,
-  Post,
-} from '@nestjs/common';
-import { IntegrationEventCatalogService } from './integration-event-catalog.service';
-
-@Role()
-@Controller('integration-event-catalog')
-export class IntegrationEventCatalogController {
-  constructor(private readonly service: IntegrationEventCatalogService) {}
-
-  @Get()
-  list(@Pagination() paginationParams) {
-    return this.service.list(paginationParams);
-  }
-
-  @Get('options')
-  options() {
-    return this.service.options();
-  }
-
-  @Get(':id')
-  get(@Param('id', ParseIntPipe) id: number) {
-    return this.service.get(id);
-  }
-
-  @Post()
-  create(@Body() data: any) {
-    return this.service.create(data);
-  }
-
-  @Patch(':id')
-  update(@Param('id', ParseIntPipe) id: number, @Body() data: any) {
-    return this.service.update(id, data);
-  }
-
-  @Delete()
-  delete(@Body() data: DeleteDTO) {
-    return this.service.delete(data);
-  }
-}
-
+import { DeleteDTO, Role } from '@hed-hog/api';
+import { Pagination } from '@hed-hog/api-pagination';
+import {
+  Body,
+  Controller,
+  Delete,
+  Get,
+  Param,
+  ParseIntPipe,
+  Patch,
+  Post,
+} from '@nestjs/common';
+import { IntegrationEventCatalogService } from './integration-event-catalog.service';
+
+@Role()
+@Controller('integration-event-catalog')
+export class IntegrationEventCatalogController {
+  constructor(private readonly service: IntegrationEventCatalogService) {}
+
+  @Get()
+  list(@Pagination() paginationParams) {
+    return this.service.list(paginationParams);
+  }
+
+  @Get('options')
+  options() {
+    return this.service.options();
+  }
+
+  @Get(':id')
+  get(@Param('id', ParseIntPipe) id: number) {
+    return this.service.get(id);
+  }
+
+  @Post()
+  create(@Body() data: any) {
+    return this.service.create(data);
+  }
+
+  @Patch(':id')
+  update(@Param('id', ParseIntPipe) id: number, @Body() data: any) {
+    return this.service.update(id, data);
+  }
+
+  @Delete()
+  delete(@Body() data: DeleteDTO) {
+    return this.service.delete(data);
+  }
+}
+