@hed-hog/core 0.0.366 → 0.0.368

package/hedhog/table/webhook_call_log.yaml

@@ -1,46 +1,46 @@
-columns:
-  - type: pk
-  - type: fk
-    name: webhook_integration_id
-    isNullable: true
-    references:
-      table: webhook_integration
-      column: id
-      onDelete: set null
-      onUpdate: cascade
-  - name: public_uuid
-    type: varchar
-    length: 36
-  - name: status
-    type: enum
-    enum:
-      - success
-      - failed
-  - name: remote_ip
-    type: varchar
-    length: 127
-    isNullable: true
-  - name: duration_ms
-    type: int
-    default: 0
-  - name: error_message
-    type: text
-    isNullable: true
-  - name: payload_summary
-    type: json
-    isNullable: true
-  - name: response_summary
-    type: json
-    isNullable: true
-  - type: created_at
-  - type: updated_at
-indices:
-  - columns:
-      - webhook_integration_id
-  - columns:
-      - public_uuid
-  - columns:
-      - status
-  - columns:
-      - created_at
-
+columns:
+  - type: pk
+  - type: fk
+    name: webhook_integration_id
+    isNullable: true
+    references:
+      table: webhook_integration
+      column: id
+      onDelete: set null
+      onUpdate: cascade
+  - name: public_uuid
+    type: varchar
+    length: 36
+  - name: status
+    type: enum
+    enum:
+      - success
+      - failed
+  - name: remote_ip
+    type: varchar
+    length: 127
+    isNullable: true
+  - name: duration_ms
+    type: int
+    default: 0
+  - name: error_message
+    type: text
+    isNullable: true
+  - name: payload_summary
+    type: json
+    isNullable: true
+  - name: response_summary
+    type: json
+    isNullable: true
+  - type: created_at
+  - type: updated_at
+indices:
+  - columns:
+      - webhook_integration_id
+  - columns:
+      - public_uuid
+  - columns:
+      - status
+  - columns:
+      - created_at
+

package/hedhog/table/webhook_integration.yaml

@@ -1,43 +1,43 @@
-columns:
-  - type: pk
-  - type: slug
-  - name: name
-    type: varchar
-    length: 127
-  - name: description
-    type: text
-    isNullable: true
-  - name: public_uuid
-    type: varchar
-    length: 36
-  - name: status
-    type: enum
-    enum:
-      - active
-      - inactive
-    default: active
-  - name: require_token
-    type: boolean
-    default: false
-  - name: token_hash
-    type: varchar
-    length: 128
-    isNullable: true
-  - name: allowed_ips
-    type: json
-    isNullable: true
-  - name: body_schema
-    type: json
-    isNullable: true
-  - type: created_at
-  - type: updated_at
-indices:
-  - columns:
-      - slug
-    isUnique: true
-  - columns:
-      - public_uuid
-    isUnique: true
-  - columns:
-      - status
-
+columns:
+  - type: pk
+  - type: slug
+  - name: name
+    type: varchar
+    length: 127
+  - name: description
+    type: text
+    isNullable: true
+  - name: public_uuid
+    type: varchar
+    length: 36
+  - name: status
+    type: enum
+    enum:
+      - active
+      - inactive
+    default: active
+  - name: require_token
+    type: boolean
+    default: false
+  - name: token_hash
+    type: varchar
+    length: 128
+    isNullable: true
+  - name: allowed_ips
+    type: json
+    isNullable: true
+  - name: body_schema
+    type: json
+    isNullable: true
+  - type: created_at
+  - type: updated_at
+indices:
+  - columns:
+      - slug
+    isUnique: true
+  - columns:
+      - public_uuid
+    isUnique: true
+  - columns:
+      - status
+

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hed-hog/core",
-  "version": "0.0.366",
+  "version": "0.0.368",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "dependencies": {
@@ -38,12 +38,12 @@
     "speakeasy": "^2.0.0",
     "ua-parser-js": "^2.0.10",
     "uuid": "^11.1.0",
-    "@hed-hog/api-pagination": "0.0.7",
     "@hed-hog/api": "0.0.8",
     "@hed-hog/api-locale": "0.0.14",
+    "@hed-hog/api-pagination": "0.0.7",
     "@hed-hog/api-mail": "0.0.9",
-    "@hed-hog/api-prisma": "0.0.6",
-    "@hed-hog/api-types": "0.0.1"
+    "@hed-hog/api-types": "0.0.1",
+    "@hed-hog/api-prisma": "0.0.6"
   },
   "exports": {
     ".": {

package/src/file/file.service.ts

@@ -490,6 +490,7 @@ export class FileService implements OnModuleInit {
       mimetype?: string;
       size?: number;
       encoding?: string;
+      skipMimeValidation?: boolean;
     },
   ) {
     if (!filePath) {
@@ -511,7 +512,7 @@ export class FileService implements OnModuleInit {
       metadata?.originalname ?? metadata?.filename ?? basename(filePath),
     );
 
-    if (!(await this.acceptMimetypes(mimetype))) {
+    if (!metadata?.skipMimeValidation && !(await this.acceptMimetypes(mimetype))) {
       throw new BadRequestException(`Invalid file type: ${mimetype}`);
     }
 

package/src/integration/services/outbox-polling.coordinator.ts

@@ -15,6 +15,8 @@ export class OutboxPollingCoordinator {
   private processingLoopPromise: Promise<void> | null = null;
   private immediateWakeupTriggered = false;
   private shouldStopLoop = false;
+  private _currentTimeout: ReturnType<typeof setTimeout> | null = null;
+  private _resolveDelay: (() => void) | null = null;
 
   constructor(
     private readonly processor: OutboxProcessor,
@@ -62,6 +64,15 @@ export class OutboxPollingCoordinator {
    */
   triggerImmediateProcessing(): void {
     this.immediateWakeupTriggered = true;
+    if (this._currentTimeout !== null) {
+      clearTimeout(this._currentTimeout);
+      this._currentTimeout = null;
+      this.logger.debug('[outbox:wakeup] delay interrupted by new event notification');
+    }
+    if (this._resolveDelay) {
+      this._resolveDelay();
+      this._resolveDelay = null;
+    }
   }
 
   /**
@@ -88,7 +99,9 @@ export class OutboxPollingCoordinator {
         const processorEnabled = settings.outboxProcessorEnabled;
 
         if (!isEnabled || !processorEnabled) {
-          // If disabled, wait before checking again
+          this.logger.debug(
+            `[outbox:loop] processor disabled (outboxEnabled=${isEnabled} processorEnabled=${processorEnabled}), sleeping ${settings.idlePollingIntervalMs}ms`,
+          );
           await this.delay(settings.idlePollingIntervalMs);
           continue;
         }
@@ -135,9 +148,8 @@ export class OutboxPollingCoordinator {
    */
   private delay(ms: number): Promise<void> {
     return new Promise((resolve) => {
-      const timeout = setTimeout(resolve, ms);
-      // Store timeout for potential cancellation (not used yet, but available)
-      (this as any)._currentTimeout = timeout;
+      this._resolveDelay = resolve;
+      this._currentTimeout = setTimeout(resolve, ms);
     });
   }
 }

package/src/integration/services/outbox.processor.ts

@@ -34,7 +34,9 @@ export class OutboxProcessor {
       return 0;
     }
 
-    this.logger.debug(`Processing ${events.length} outbox events`);
+    this.logger.debug(
+      `[outbox:batch] processing ${events.length} event(s): ${events.map((e) => `${e.id}(${e.eventName})`).join(', ')}`,
+    );
 
     let processedCount = 0;
 
@@ -48,7 +50,7 @@ export class OutboxProcessor {
 
         if (handlers.length === 0) {
           this.logger.warn(
-            `No handlers registered for event: ${event.eventName}`,
+            `[outbox:batch] no handlers registered for eventName=${event.eventName} eventId=${event.id} — marking as processed and skipping`,
           );
           // Mark as processed even though no handlers
           await this.outboxService.updateStatus(
@@ -80,13 +82,17 @@ export class OutboxProcessor {
 
           await this.inboxService.markProcessing(inboxEvent.id);
 
+          this.logger.debug(
+            `[outbox:batch] running handler=${handlerDef.consumerName} eventId=${event.id}`,
+          );
+
           try {
             // Execute handler
-            await handlerDef.handler(
-              {
-                outboxEventId: event.id,
-                eventName: event.eventName,
-                sourceModule: event.sourceModule,
+            await handlerDef.handler(
+              {
+                outboxEventId: event.id,
+                eventName: event.eventName,
+                sourceModule: event.sourceModule,
                 aggregateType: event.aggregateType,
                 aggregateId: event.aggregateId,
                 payload: event.payload,
@@ -107,7 +113,7 @@ export class OutboxProcessor {
           } catch (error) {
             anyFailed = true;
             this.logger.error(
-              `Handler ${handlerDef.consumerName} failed for event ${event.id}:`,
+              `[outbox:batch] handler=${handlerDef.consumerName} failed for eventId=${event.id}: ${error instanceof Error ? error.message : String(error)}`,
               error,
             );
             await this.inboxService.markFailed(

package/src/integration/types/event.types.ts

@@ -32,10 +32,10 @@ export enum LinkType {
 /**
  * Domain event interface that is published and processed
  */
-export interface DomainEvent {
-  outboxEventId?: string;
-  eventName: string;
-  sourceModule: string;
+export interface DomainEvent {
+  outboxEventId?: string;
+  eventName: string;
+  sourceModule: string;
   aggregateType: string;
   aggregateId: string;
   payload: Record<string, any>;

package/src/locale/locale.controller.ts

@@ -24,8 +24,9 @@ export class LocaleController {
   async findAll(
     @Pagination() paginationDto: PaginationDTO,
     @Query('search') search?: string,
+    @Query('enabled') enabled?: string,
   ) {
-    return this.localeService.findAll(paginationDto, search);
+    return this.localeService.findAll(paginationDto, search, enabled);
   }
 
   @Post()

package/src/locale/locale.service.ts

@@ -12,7 +12,7 @@ export class LocaleService {
     private readonly paginationService: PaginationService,
   ) {}
 
-  async findAll(paginationDto: PaginationDTO, search?: string) {
+  async findAll(paginationDto: PaginationDTO, search?: string, enabled?: string) {
     const normalizedSearch = search ?? paginationDto.search;
     const paginationParams: PaginationDTO = {
       ...paginationDto,
@@ -24,14 +24,15 @@ export class LocaleService {
       paginationParams,
     );
 
+    const where: Record<string, any> = { OR };
+    if (enabled !== undefined) {
+      where.enabled = enabled === 'true';
+    }
+
     return this.paginationService.paginate(
       this.prismaService.locale,
       paginationParams,
-      {
-        where: {
-          OR,
-        },
-      },
+      { where },
     );
   }
 

package/src/mcp/decorators/mcp-tool.decorator.ts

@@ -1,7 +1,7 @@
-import { SetMetadata } from '@nestjs/common';
-import { McpToolDefinition } from '../interfaces/mcp-tool-definition.interface';
-
-export const MCP_TOOL_METADATA = 'mcp:tool';
-
-export const McpTool = (definition: McpToolDefinition): MethodDecorator =>
-  SetMetadata(MCP_TOOL_METADATA, definition);
+import { SetMetadata } from '@nestjs/common';
+import { McpToolDefinition } from '../interfaces/mcp-tool-definition.interface';
+
+export const MCP_TOOL_METADATA = 'mcp:tool';
+
+export const McpTool = (definition: McpToolDefinition): MethodDecorator =>
+  SetMetadata(MCP_TOOL_METADATA, definition);

package/src/mcp/guards/mcp-permission.guard.ts

@@ -1,51 +1,51 @@
-import { PrismaService } from '@hed-hog/api-prisma';
-import {
-  CanActivate,
-  ExecutionContext,
-  ForbiddenException,
-  Injectable,
-} from '@nestjs/common';
-import { Request } from 'express';
-
-@Injectable()
-export class McpPermissionGuard implements CanActivate {
-  constructor(private readonly prisma: PrismaService) {}
-
-  async canActivate(context: ExecutionContext): Promise<boolean> {
-    const request = context.switchToHttp().getRequest<Request>();
-
-    // Only POST requests carry tool invocations
-    if (request.method !== 'POST') return true;
-
-    const body = request.body as any;
-    const toolName: string | undefined =
-      body?.method === 'tools/call' ? body?.params?.name : undefined;
-
-    // tools/list, initialize, ping, etc. — no per-tool permission check needed
-    if (!toolName) return true;
-
-    const userId = (request as any)?.auth?.sub;
-
-    const count = await this.prisma.route.count({
-      where: {
-        type: 'MCP' as any,
-        tool_name: toolName,
-        role_route: {
-          some: {
-            role: {
-              role_user: {
-                some: { user_id: userId },
-              },
-            },
-          },
-        },
-      },
-    });
-
-    if (count === 0) {
-      throw new ForbiddenException(`Access denied to MCP tool '${toolName}'`);
-    }
-
-    return true;
-  }
-}
+import { PrismaService } from '@hed-hog/api-prisma';
+import {
+  CanActivate,
+  ExecutionContext,
+  ForbiddenException,
+  Injectable,
+} from '@nestjs/common';
+import { Request } from 'express';
+
+@Injectable()
+export class McpPermissionGuard implements CanActivate {
+  constructor(private readonly prisma: PrismaService) {}
+
+  async canActivate(context: ExecutionContext): Promise<boolean> {
+    const request = context.switchToHttp().getRequest<Request>();
+
+    // Only POST requests carry tool invocations
+    if (request.method !== 'POST') return true;
+
+    const body = request.body as any;
+    const toolName: string | undefined =
+      body?.method === 'tools/call' ? body?.params?.name : undefined;
+
+    // tools/list, initialize, ping, etc. — no per-tool permission check needed
+    if (!toolName) return true;
+
+    const userId = (request as any)?.auth?.sub;
+
+    const count = await this.prisma.route.count({
+      where: {
+        type: 'MCP' as any,
+        tool_name: toolName,
+        role_route: {
+          some: {
+            role: {
+              role_user: {
+                some: { user_id: userId },
+              },
+            },
+          },
+        },
+      },
+    });
+
+    if (count === 0) {
+      throw new ForbiddenException(`Access denied to MCP tool '${toolName}'`);
+    }
+
+    return true;
+  }
+}

package/src/mcp/interfaces/mcp-tool-definition.interface.ts

@@ -1,6 +1,6 @@
-export interface McpToolDefinition {
-  name: string;
-  description: string;
-  inputSchema?: Record<string, any>;
-  readOnly?: boolean;
-}
+export interface McpToolDefinition {
+  name: string;
+  description: string;
+  inputSchema?: Record<string, any>;
+  readOnly?: boolean;
+}