@hed-hog/core 0.0.367 → 0.0.370

package/hedhog/table/mcp_conversation.yaml

@@ -1,12 +1,12 @@
-columns:
-  - type: pk
-  - name: user_id
-    type: fk
-    references:
-      table: user
-      column: id
-      onDelete: CASCADE
-  - name: title
-    isNullable: true
-  - type: created_at
-  - type: updated_at
+columns:
+  - type: pk
+  - name: user_id
+    type: fk
+    references:
+      table: user
+      column: id
+      onDelete: CASCADE
+  - name: title
+    isNullable: true
+  - type: created_at
+  - type: updated_at

package/hedhog/table/mcp_conversation_message.yaml

@@ -1,23 +1,23 @@
-columns:
-  - type: pk
-  - name: conversation_id
-    type: fk
-    references:
-      table: mcp_conversation
-      column: id
-      onDelete: CASCADE
-  - name: role
-    type: enum
-    enum:
-      - user
-      - assistant
-      - tool_call
-      - tool_result
-  - name: content
-    type: text
-  - name: tool_name
-    isNullable: true
-  - name: tool_call_id
-    isNullable: true
-  - type: created_at
-  - type: updated_at
+columns:
+  - type: pk
+  - name: conversation_id
+    type: fk
+    references:
+      table: mcp_conversation
+      column: id
+      onDelete: CASCADE
+  - name: role
+    type: enum
+    enum:
+      - user
+      - assistant
+      - tool_call
+      - tool_result
+  - name: content
+    type: text
+  - name: tool_name
+    isNullable: true
+  - name: tool_call_id
+    isNullable: true
+  - type: created_at
+  - type: updated_at

package/hedhog/table/mcp_tool_call_log.yaml

@@ -1,22 +1,22 @@
-columns:
-  - type: pk
-  - name: user_id
-    type: fk
-    references:
-      table: user
-      column: id
-      onDelete: SET NULL
-    isNullable: true
-  - name: tool_name
-  - name: input
-    type: text
-    isNullable: true
-  - name: success
-    type: boolean
-    default: false
-  - name: error
-    isNullable: true
-  - name: duration_ms
-    type: int
-  - type: created_at
-  - type: updated_at
+columns:
+  - type: pk
+  - name: user_id
+    type: fk
+    references:
+      table: user
+      column: id
+      onDelete: SET NULL
+    isNullable: true
+  - name: tool_name
+  - name: input
+    type: text
+    isNullable: true
+  - name: success
+    type: boolean
+    default: false
+  - name: error
+    isNullable: true
+  - name: duration_ms
+    type: int
+  - type: created_at
+  - type: updated_at

package/hedhog/table/route.yaml

@@ -1,33 +1,33 @@
-columns:
-  - type: pk
-  - name: type
-    type: enum
-    enum:
-      - HTTP
-      - MCP
-    default: HTTP
-  - name: name
-    isNullable: true
-  - name: url
-    isNullable: true
-  - name: method
-    type: enum
-    enum:
-      - GET
-      - POST
-      - PATCH
-      - DELETE
-      - PUT
-      - OPTIONS
-      - HEAD
-    isNullable: true
-  - name: tool_name
-    isNullable: true
-  - name: description
-    isNullable: true
-  - type: created_at
-  - type: updated_at
-indices:
-  - columns:
-      - tool_name
-    isUnique: true
+columns:
+  - type: pk
+  - name: type
+    type: enum
+    enum:
+      - HTTP
+      - MCP
+    default: HTTP
+  - name: name
+    isNullable: true
+  - name: url
+    isNullable: true
+  - name: method
+    type: enum
+    enum:
+      - GET
+      - POST
+      - PATCH
+      - DELETE
+      - PUT
+      - OPTIONS
+      - HEAD
+    isNullable: true
+  - name: tool_name
+    isNullable: true
+  - name: description
+    isNullable: true
+  - type: created_at
+  - type: updated_at
+indices:
+  - columns:
+      - tool_name
+    isUnique: true

package/hedhog/table/user_change_log.yaml

@@ -0,0 +1,40 @@
+columns:
+  - type: pk
+  - name: target_user_id
+    type: fk
+    references:
+      table: user
+      column: id
+      onDelete: CASCADE
+      onUpdate: CASCADE
+  - name: actor_user_id
+    type: fk
+    isNullable: true
+    references:
+      table: user
+      column: id
+      onDelete: SET NULL
+      onUpdate: CASCADE
+  - name: action
+    type: varchar
+    length: 80
+  - name: summary
+    type: text
+    isNullable: true
+  - name: before_data
+    type: text
+    isNullable: true
+  - name: after_data
+    type: text
+    isNullable: true
+  - name: ip_address
+    type: varchar
+    length: 64
+    isNullable: true
+  - type: created_at
+  - type: updated_at
+
+indices:
+  - columns: [target_user_id]
+  - columns: [actor_user_id]
+  - columns: [action]

package/hedhog/table/webhook_call_log.yaml

@@ -1,46 +1,46 @@
-columns:
-  - type: pk
-  - type: fk
-    name: webhook_integration_id
-    isNullable: true
-    references:
-      table: webhook_integration
-      column: id
-      onDelete: set null
-      onUpdate: cascade
-  - name: public_uuid
-    type: varchar
-    length: 36
-  - name: status
-    type: enum
-    enum:
-      - success
-      - failed
-  - name: remote_ip
-    type: varchar
-    length: 127
-    isNullable: true
-  - name: duration_ms
-    type: int
-    default: 0
-  - name: error_message
-    type: text
-    isNullable: true
-  - name: payload_summary
-    type: json
-    isNullable: true
-  - name: response_summary
-    type: json
-    isNullable: true
-  - type: created_at
-  - type: updated_at
-indices:
-  - columns:
-      - webhook_integration_id
-  - columns:
-      - public_uuid
-  - columns:
-      - status
-  - columns:
-      - created_at
-
+columns:
+  - type: pk
+  - type: fk
+    name: webhook_integration_id
+    isNullable: true
+    references:
+      table: webhook_integration
+      column: id
+      onDelete: set null
+      onUpdate: cascade
+  - name: public_uuid
+    type: varchar
+    length: 36
+  - name: status
+    type: enum
+    enum:
+      - success
+      - failed
+  - name: remote_ip
+    type: varchar
+    length: 127
+    isNullable: true
+  - name: duration_ms
+    type: int
+    default: 0
+  - name: error_message
+    type: text
+    isNullable: true
+  - name: payload_summary
+    type: json
+    isNullable: true
+  - name: response_summary
+    type: json
+    isNullable: true
+  - type: created_at
+  - type: updated_at
+indices:
+  - columns:
+      - webhook_integration_id
+  - columns:
+      - public_uuid
+  - columns:
+      - status
+  - columns:
+      - created_at
+

package/hedhog/table/webhook_integration.yaml

@@ -1,43 +1,43 @@
-columns:
-  - type: pk
-  - type: slug
-  - name: name
-    type: varchar
-    length: 127
-  - name: description
-    type: text
-    isNullable: true
-  - name: public_uuid
-    type: varchar
-    length: 36
-  - name: status
-    type: enum
-    enum:
-      - active
-      - inactive
-    default: active
-  - name: require_token
-    type: boolean
-    default: false
-  - name: token_hash
-    type: varchar
-    length: 128
-    isNullable: true
-  - name: allowed_ips
-    type: json
-    isNullable: true
-  - name: body_schema
-    type: json
-    isNullable: true
-  - type: created_at
-  - type: updated_at
-indices:
-  - columns:
-      - slug
-    isUnique: true
-  - columns:
-      - public_uuid
-    isUnique: true
-  - columns:
-      - status
-
+columns:
+  - type: pk
+  - type: slug
+  - name: name
+    type: varchar
+    length: 127
+  - name: description
+    type: text
+    isNullable: true
+  - name: public_uuid
+    type: varchar
+    length: 36
+  - name: status
+    type: enum
+    enum:
+      - active
+      - inactive
+    default: active
+  - name: require_token
+    type: boolean
+    default: false
+  - name: token_hash
+    type: varchar
+    length: 128
+    isNullable: true
+  - name: allowed_ips
+    type: json
+    isNullable: true
+  - name: body_schema
+    type: json
+    isNullable: true
+  - type: created_at
+  - type: updated_at
+indices:
+  - columns:
+      - slug
+    isUnique: true
+  - columns:
+      - public_uuid
+    isUnique: true
+  - columns:
+      - status
+

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hed-hog/core",
-  "version": "0.0.367",
+  "version": "0.0.370",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "dependencies": {
@@ -38,12 +38,12 @@
     "speakeasy": "^2.0.0",
     "ua-parser-js": "^2.0.10",
     "uuid": "^11.1.0",
-    "@hed-hog/api-locale": "0.0.14",
     "@hed-hog/api": "0.0.8",
-    "@hed-hog/api-prisma": "0.0.6",
-    "@hed-hog/api-mail": "0.0.9",
+    "@hed-hog/api-locale": "0.0.14",
     "@hed-hog/api-pagination": "0.0.7",
-    "@hed-hog/api-types": "0.0.1"
+    "@hed-hog/api-prisma": "0.0.6",
+    "@hed-hog/api-types": "0.0.1",
+    "@hed-hog/api-mail": "0.0.9"
   },
   "exports": {
     ".": {

package/src/file/file.service.ts

@@ -490,6 +490,7 @@ export class FileService implements OnModuleInit {
       mimetype?: string;
       size?: number;
       encoding?: string;
+      skipMimeValidation?: boolean;
     },
   ) {
     if (!filePath) {
@@ -511,7 +512,7 @@ export class FileService implements OnModuleInit {
       metadata?.originalname ?? metadata?.filename ?? basename(filePath),
     );
 
-    if (!(await this.acceptMimetypes(mimetype))) {
+    if (!metadata?.skipMimeValidation && !(await this.acceptMimetypes(mimetype))) {
       throw new BadRequestException(`Invalid file type: ${mimetype}`);
     }
 

package/src/integration/types/event.types.ts

@@ -32,10 +32,10 @@ export enum LinkType {
 /**
  * Domain event interface that is published and processed
  */
-export interface DomainEvent {
-  outboxEventId?: string;
-  eventName: string;
-  sourceModule: string;
+export interface DomainEvent {
+  outboxEventId?: string;
+  eventName: string;
+  sourceModule: string;
   aggregateType: string;
   aggregateId: string;
   payload: Record<string, any>;

package/src/mcp/decorators/mcp-tool.decorator.ts

@@ -1,7 +1,7 @@
-import { SetMetadata } from '@nestjs/common';
-import { McpToolDefinition } from '../interfaces/mcp-tool-definition.interface';
-
-export const MCP_TOOL_METADATA = 'mcp:tool';
-
-export const McpTool = (definition: McpToolDefinition): MethodDecorator =>
-  SetMetadata(MCP_TOOL_METADATA, definition);
+import { SetMetadata } from '@nestjs/common';
+import { McpToolDefinition } from '../interfaces/mcp-tool-definition.interface';
+
+export const MCP_TOOL_METADATA = 'mcp:tool';
+
+export const McpTool = (definition: McpToolDefinition): MethodDecorator =>
+  SetMetadata(MCP_TOOL_METADATA, definition);

package/src/mcp/guards/mcp-permission.guard.ts

@@ -1,51 +1,51 @@
-import { PrismaService } from '@hed-hog/api-prisma';
-import {
-  CanActivate,
-  ExecutionContext,
-  ForbiddenException,
-  Injectable,
-} from '@nestjs/common';
-import { Request } from 'express';
-
-@Injectable()
-export class McpPermissionGuard implements CanActivate {
-  constructor(private readonly prisma: PrismaService) {}
-
-  async canActivate(context: ExecutionContext): Promise<boolean> {
-    const request = context.switchToHttp().getRequest<Request>();
-
-    // Only POST requests carry tool invocations
-    if (request.method !== 'POST') return true;
-
-    const body = request.body as any;
-    const toolName: string | undefined =
-      body?.method === 'tools/call' ? body?.params?.name : undefined;
-
-    // tools/list, initialize, ping, etc. — no per-tool permission check needed
-    if (!toolName) return true;
-
-    const userId = (request as any)?.auth?.sub;
-
-    const count = await this.prisma.route.count({
-      where: {
-        type: 'MCP' as any,
-        tool_name: toolName,
-        role_route: {
-          some: {
-            role: {
-              role_user: {
-                some: { user_id: userId },
-              },
-            },
-          },
-        },
-      },
-    });
-
-    if (count === 0) {
-      throw new ForbiddenException(`Access denied to MCP tool '${toolName}'`);
-    }
-
-    return true;
-  }
-}
+import { PrismaService } from '@hed-hog/api-prisma';
+import {
+  CanActivate,
+  ExecutionContext,
+  ForbiddenException,
+  Injectable,
+} from '@nestjs/common';
+import { Request } from 'express';
+
+@Injectable()
+export class McpPermissionGuard implements CanActivate {
+  constructor(private readonly prisma: PrismaService) {}
+
+  async canActivate(context: ExecutionContext): Promise<boolean> {
+    const request = context.switchToHttp().getRequest<Request>();
+
+    // Only POST requests carry tool invocations
+    if (request.method !== 'POST') return true;
+
+    const body = request.body as any;
+    const toolName: string | undefined =
+      body?.method === 'tools/call' ? body?.params?.name : undefined;
+
+    // tools/list, initialize, ping, etc. — no per-tool permission check needed
+    if (!toolName) return true;
+
+    const userId = (request as any)?.auth?.sub;
+
+    const count = await this.prisma.route.count({
+      where: {
+        type: 'MCP' as any,
+        tool_name: toolName,
+        role_route: {
+          some: {
+            role: {
+              role_user: {
+                some: { user_id: userId },
+              },
+            },
+          },
+        },
+      },
+    });
+
+    if (count === 0) {
+      throw new ForbiddenException(`Access denied to MCP tool '${toolName}'`);
+    }
+
+    return true;
+  }
+}

package/src/mcp/interfaces/mcp-tool-definition.interface.ts

@@ -1,6 +1,6 @@
-export interface McpToolDefinition {
-  name: string;
-  description: string;
-  inputSchema?: Record<string, any>;
-  readOnly?: boolean;
-}
+export interface McpToolDefinition {
+  name: string;
+  description: string;
+  inputSchema?: Record<string, any>;
+  readOnly?: boolean;
+}