@hed-hog/core 0.0.399 → 0.0.401

package/src/mcp/tools/core-dashboard.mcp-tools.ts

@@ -30,7 +30,7 @@ export class CoreDashboardMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: args.search ?? '',
-      sortField: args.sortField ?? 'id',
+      ...(args.sortField ? { sortField: args.sortField } : {}),
       sortOrder: args.sortOrder ?? 'asc',
       fields: '',
     });

package/src/mcp/tools/core-event-webhooks.mcp-tools.ts

@@ -30,7 +30,7 @@ export class CoreEventWebhooksMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: args.search ?? '',
-      sortField: args.sortField ?? 'id',
+      ...(args.sortField ? { sortField: args.sortField } : {}),
       sortOrder: (args.sortOrder as any) ?? 'asc',
       fields: '',
     });
@@ -126,7 +126,6 @@ export class CoreEventWebhooksMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: '',
-      sortField: 'id',
       sortOrder: 'desc' as any,
       fields: '',
     });

package/src/mcp/tools/core-files.mcp-tools.ts

@@ -1,15 +1,20 @@
 import { Injectable } from '@nestjs/common';
+import { FileUploadTicketService } from '../../file/file-upload-ticket.service';
 import { FileService } from '../../file/file.service';
 import { McpTool } from '../decorators/mcp-tool.decorator';
 import { McpContext } from '../types/mcp-context.type';
 
 @Injectable()
 export class CoreFilesMcpTools {
-  constructor(private readonly fileService: FileService) {}
+  constructor(
+    private readonly fileService: FileService,
+    private readonly uploadTickets: FileUploadTicketService,
+  ) {}
 
   @McpTool({
     name: 'core.files.list',
-    description: 'Lists uploaded files with optional pagination. Admin only.',
+    description:
+      'Lists files uploaded by the calling user, with optional pagination. Administrators see every file. Use it to find the fileId of something already in storage instead of uploading it again.',
     inputSchema: {
       type: 'object',
       properties: {
@@ -24,21 +29,29 @@ export class CoreFilesMcpTools {
   })
   async listFiles(
     args: { page?: number; pageSize?: number; search?: string; sortField?: string; sortOrder?: string },
-    _context: McpContext,
+    context: McpContext,
   ): Promise<any> {
-    return this.fileService.getFiles({
-      page: args.page ?? 1,
-      pageSize: args.pageSize ?? 20,
-      search: args.search ?? '',
-      sortField: args.sortField ?? 'id',
-      sortOrder: (args.sortOrder as any) ?? 'asc',
-      fields: '',
-    });
+    // Sem o recorte por dono esta tool é um índice de tudo o que qualquer empresa já
+    // subiu — inclusive o que foi gravado como `is_private` justamente para não ser
+    // listado. Quem administra o acervo continua vendo tudo.
+    const isAdmin = await this.fileService.isFileAdmin(context.userId);
+
+    return this.fileService.getFiles(
+      {
+        page: args.page ?? 1,
+        pageSize: args.pageSize ?? 20,
+        search: args.search ?? '',
+        ...(args.sortField ? { sortField: args.sortField } : {}),
+        sortOrder: (args.sortOrder as any) ?? 'asc',
+        fields: '',
+      },
+      isAdmin ? undefined : context.userId,
+    );
   }
 
   @McpTool({
     name: 'core.files.get',
-    description: 'Returns file details by ID. Admin only.',
+    description: 'Returns file details by ID. The file must belong to the caller, unless the caller is an administrator.',
     inputSchema: {
       type: 'object',
       properties: {
@@ -48,13 +61,14 @@ export class CoreFilesMcpTools {
     },
     readOnly: true,
   })
-  async getFile(args: { fileId: number }, _context: McpContext): Promise<any> {
-    return this.fileService.get(args.fileId);
+  async getFile(args: { fileId: number }, context: McpContext): Promise<any> {
+    return this.fileService.assertFileUsable(args.fileId, context.userId);
   }
 
   @McpTool({
     name: 'core.files.open-url',
-    description: 'Returns a temporary URL to open/view a file inline. Admin only.',
+    description:
+      'Returns a temporary URL to open/view a file inline. The file must belong to the caller, unless the caller is an administrator.',
     inputSchema: {
       type: 'object',
       properties: {
@@ -64,15 +78,19 @@ export class CoreFilesMcpTools {
     },
     readOnly: true,
   })
-  async getOpenUrl(args: { fileId: number }, _context: McpContext): Promise<any> {
-    const file = await this.fileService.get(args.fileId);
-    const url = await this.fileService.tempOpenURL(file.path);
+  async getOpenUrl(args: { fileId: number }, context: McpContext): Promise<any> {
+    await this.fileService.assertFileUsable(args.fileId, context.userId);
+    // `tempURLById`, e não `tempURL(file.path)`: `path` guarda só o basename, enquanto a
+    // chave real no provider inclui o prefixo `location` — a URL assinada sobre o path
+    // cru resolvia para NoSuchKey no S3.
+    const url = await this.fileService.tempOpenURLById(args.fileId);
     return { url };
   }
 
   @McpTool({
     name: 'core.files.download-url',
-    description: 'Returns a temporary URL to download a file. Admin only.',
+    description:
+      'Returns a temporary URL to download a file. The file must belong to the caller, unless the caller is an administrator.',
     inputSchema: {
       type: 'object',
       properties: {
@@ -82,9 +100,9 @@ export class CoreFilesMcpTools {
     },
     readOnly: true,
   })
-  async getDownloadUrl(args: { fileId: number }, _context: McpContext): Promise<any> {
-    const file = await this.fileService.get(args.fileId);
-    const url = await this.fileService.tempURL(file.path);
+  async getDownloadUrl(args: { fileId: number }, context: McpContext): Promise<any> {
+    await this.fileService.assertFileUsable(args.fileId, context.userId);
+    const url = await this.fileService.tempURLById(args.fileId);
     return { url };
   }
 
@@ -100,6 +118,168 @@ export class CoreFilesMcpTools {
     },
   })
   async deleteFiles(args: { ids: number[] }, context: McpContext): Promise<any> {
+    for (const id of args.ids ?? []) {
+      await this.fileService.assertFileUsable(id, context.userId);
+    }
+
     return this.fileService.delete(context.locale, { ids: args.ids });
   }
+
+  // ── Upload sem passar o conteúdo pela conversa ─────────────────────────────
+
+  @McpTool({
+    name: 'core.files.create-upload-url',
+    description:
+      'Opens an upload and returns a short-lived, single-use URL on the Hub API host to PUT the file to: PUT the binary to the returned url, then call core.files.upload.complete to get the fileId (or pass the uploadId straight to the tool that needs the file). Fastest path, but the url must be reachable from wherever the PUT runs. Clients in a network-restricted sandbox (e.g. claude.ai) usually cannot reach it; if you are in one, or the PUT fails with host_not_allowed, 403 or a network error, use core.files.upload.init instead, which sends the file through MCP calls. Works for files up to the storage-max-size setting (10mb by default).',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        fileName: { type: 'string', description: 'Original file name (required)' },
+        mimeType: {
+          type: 'string',
+          description:
+            'File MIME type, e.g. application/pdf (required). Must be allowed by the storage-accept-mimetype setting, and is verified against the uploaded bytes.',
+        },
+        sizeBytes: {
+          type: 'number',
+          description:
+            'Exact size of the file in bytes (required). The upload is rejected if the body does not match it.',
+        },
+        destination: {
+          type: 'string',
+          description: 'Storage folder (optional, defaults to mcp/uploads).',
+        },
+        isPrivate: {
+          type: 'boolean',
+          description: 'Keeps the file out of the unauthenticated by-id routes (optional).',
+        },
+        sha256: {
+          type: 'string',
+          description: 'Optional hex sha256 checked against the uploaded content.',
+        },
+        idempotencyKey: {
+          type: 'string',
+          description: 'Optional. Repeating a key returns the same upload instead of opening another.',
+        },
+      },
+      required: ['fileName', 'mimeType', 'sizeBytes'],
+    },
+  })
+  async createUploadUrl(args: any, context: McpContext): Promise<any> {
+    const { ticket } = await this.uploadTickets.create({
+      userId: context.userId,
+      fileName: args.fileName,
+      mimeType: args.mimeType,
+      sizeBytes: args.sizeBytes,
+      destination: args.destination,
+      isPrivate: args.isPrivate,
+      sha256: args.sha256,
+      idempotencyKey: args.idempotencyKey,
+      mode: 'signed_url',
+    });
+
+    return {
+      uploadId: ticket.id,
+      method: 'PUT',
+      url: await this.uploadTickets.buildUploadUrl(ticket.id),
+      headers: { 'Content-Type': ticket.mimetype },
+      expiresAt: ticket.expires_at.toISOString(),
+      sizeBytes: ticket.size_bytes,
+      next: 'PUT the raw file bytes to url, then call core.files.upload.complete with this uploadId. If the PUT is blocked (host_not_allowed, 403, network error), open a new upload with core.files.upload.init and send the file in chunks instead.',
+    };
+  }
+
+  @McpTool({
+    name: 'core.files.upload.init',
+    description:
+      'Opens an upload sent in base64 chunks through MCP calls, with no extra network access. Use it when core.files.create-upload-url is not an option: a network-restricted sandbox (e.g. claude.ai), or a PUT that failed with host_not_allowed, 403 or a network error. Works for files up to the storage-max-size setting (10mb by default), well beyond the ~256kb limit of inline fileBase64. Returns uploadId, chunkBytes and totalChunks. Then call core.files.upload.append once per chunk (index 0..totalChunks-1, each chunk at most chunkBytes raw bytes before base64 encoding) and finish with core.files.upload.complete to get the fileId, or pass the uploadId to the tool that needs the file. Generate the chunks programmatically in your sandbox (split the file and print the base64 of each chunk) rather than typing base64 by hand. The upload expires at expiresAt.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        fileName: { type: 'string', description: 'Original file name (required)' },
+        mimeType: { type: 'string', description: 'File MIME type (required)' },
+        sizeBytes: { type: 'number', description: 'Exact size of the file in bytes (required)' },
+        destination: { type: 'string', description: 'Storage folder (optional)' },
+        isPrivate: { type: 'boolean', description: 'Keeps the file private (optional)' },
+        sha256: { type: 'string', description: 'Optional hex sha256 of the whole file' },
+        idempotencyKey: { type: 'string', description: 'Optional retry key' },
+      },
+      required: ['fileName', 'mimeType', 'sizeBytes'],
+    },
+  })
+  async initChunkedUpload(args: any, context: McpContext): Promise<any> {
+    const { ticket, chunkBytes } = await this.uploadTickets.create({
+      userId: context.userId,
+      fileName: args.fileName,
+      mimeType: args.mimeType,
+      sizeBytes: args.sizeBytes,
+      destination: args.destination,
+      isPrivate: args.isPrivate,
+      sha256: args.sha256,
+      idempotencyKey: args.idempotencyKey,
+      mode: 'chunked',
+    });
+
+    return {
+      uploadId: ticket.id,
+      chunkBytes,
+      totalChunks: Math.ceil(ticket.size_bytes / chunkBytes),
+      expiresAt: ticket.expires_at.toISOString(),
+      next: `Send each chunk with core.files.upload.append, indexes 0..${Math.ceil(ticket.size_bytes / chunkBytes) - 1}, at most ${chunkBytes} raw bytes per chunk before base64 encoding, then call core.files.upload.complete with this uploadId.`,
+    };
+  }
+
+  @McpTool({
+    name: 'core.files.upload.append',
+    description:
+      'Sends one chunk of an upload opened with core.files.upload.init. Chunks are zero-indexed and must all arrive before complete; re-sending an index overwrites it.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        uploadId: { type: 'number', description: 'Upload ID from core.files.upload.init' },
+        index: { type: 'number', description: 'Zero-based chunk index' },
+        chunkBase64: {
+          type: 'string',
+          description:
+            'Base64 of this chunk of the file. The decoded size must not exceed the chunkBytes returned by init.',
+        },
+      },
+      required: ['uploadId', 'index', 'chunkBase64'],
+    },
+  })
+  async appendUploadChunk(
+    args: { uploadId: number; index: number; chunkBase64: string },
+    context: McpContext,
+  ): Promise<any> {
+    return this.uploadTickets.appendChunk(
+      args.uploadId,
+      args.index,
+      args.chunkBase64,
+      context.userId,
+    );
+  }
+
+  @McpTool({
+    name: 'core.files.upload.complete',
+    description:
+      'Finishes an upload and returns the fileId to pass to other tools. Works for both core.files.create-upload-url and core.files.upload.init, and is idempotent: calling it again for a finished upload returns the same fileId.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        uploadId: { type: 'number', description: 'Upload ID' },
+      },
+      required: ['uploadId'],
+    },
+  })
+  async completeUpload(args: { uploadId: number }, context: McpContext): Promise<any> {
+    const file = await this.uploadTickets.complete(args.uploadId, context.userId);
+
+    return {
+      uploadId: args.uploadId,
+      fileId: file.id,
+      filename: file.filename,
+      size: file.size,
+      mimetype: await this.fileService.mimetypeNameById(file.mimetype_id),
+    };
+  }
 }

package/src/mcp/tools/core-integration-events.mcp-tools.ts

@@ -30,7 +30,7 @@ export class CoreIntegrationEventsMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: args.search ?? '',
-      sortField: args.sortField ?? 'slug',
+      ...(args.sortField ? { sortField: args.sortField } : {}),
       sortOrder: (args.sortOrder as any) ?? 'asc',
       fields: '',
     });

package/src/mcp/tools/core-mail-sent.mcp-tools.ts

@@ -32,7 +32,7 @@ export class CoreMailSentMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: args.search ?? '',
-      sortField: args.sortField ?? 'id',
+      ...(args.sortField ? { sortField: args.sortField } : {}),
       sortOrder: args.sortOrder ?? 'asc',
       fields: '',
       status: args.status,

package/src/mcp/tools/core-mail.mcp-tools.ts

@@ -30,7 +30,7 @@ export class CoreMailMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: args.search ?? '',
-      sortField: args.sortField ?? 'id',
+      ...(args.sortField ? { sortField: args.sortField } : {}),
       sortOrder: (args.sortOrder as any) ?? 'asc',
       fields: '',
     });

package/src/mcp/tools/core-menus.mcp-tools.ts

@@ -61,7 +61,7 @@ export class CoreMenusMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: args.search ?? '',
-      sortField: args.sortField ?? 'id',
+      ...(args.sortField ? { sortField: args.sortField } : {}),
       sortOrder: (args.sortOrder as any) ?? 'asc',
       fields: '',
     });
@@ -173,7 +173,6 @@ export class CoreMenusMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: '',
-      sortField: 'id',
       sortOrder: PageOrderDirection.Asc,
       fields: '',
     });

package/src/mcp/tools/core-notifications.mcp-tools.ts

@@ -24,7 +24,6 @@ export class CoreNotificationsMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: '',
-      sortField: 'id',
       sortOrder: 'desc',
       fields: '',
     });

package/src/mcp/tools/core-roles.mcp-tools.ts

@@ -32,7 +32,7 @@ export class CoreRolesMcpTools {
         page: args.page ?? 1,
         pageSize: args.pageSize ?? 20,
         search: args.search ?? '',
-        sortField: args.sortField ?? 'id',
+        ...(args.sortField ? { sortField: args.sortField } : {}),
         sortOrder: (args.sortOrder as any) ?? 'asc',
         fields: '',
       },
@@ -130,7 +130,6 @@ export class CoreRolesMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: '',
-      sortField: 'id',
       sortOrder: PageOrderDirection.Asc,
       fields: '',
     });
@@ -171,7 +170,6 @@ export class CoreRolesMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: '',
-      sortField: 'id',
       sortOrder: PageOrderDirection.Asc,
       fields: '',
     });
@@ -219,7 +217,6 @@ export class CoreRolesMcpTools {
         page: args.page ?? 1,
         pageSize: args.pageSize ?? 20,
         search: '',
-        sortField: 'id',
         sortOrder: PageOrderDirection.Asc,
         fields: '',
       },
@@ -264,7 +261,6 @@ export class CoreRolesMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: '',
-      sortField: 'id',
       sortOrder: PageOrderDirection.Asc,
       fields: '',
     });

package/src/mcp/tools/core-routes.mcp-tools.ts

@@ -31,7 +31,7 @@ export class CoreRoutesMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: args.search ?? '',
-      sortField: args.sortField ?? 'id',
+      ...(args.sortField ? { sortField: args.sortField } : {}),
       sortOrder: (args.sortOrder as any) ?? 'asc',
       fields: '',
     });
@@ -131,7 +131,6 @@ export class CoreRoutesMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: '',
-      sortField: 'id',
       sortOrder: PageOrderDirection.Asc,
       fields: '',
     });
@@ -172,7 +171,6 @@ export class CoreRoutesMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: '',
-      sortField: 'id',
       sortOrder: PageOrderDirection.Asc,
       fields: '',
     });

package/src/mcp/tools/core-screens.mcp-tools.ts

@@ -31,7 +31,7 @@ export class CoreScreensMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: args.search ?? '',
-      sortField: args.sortField ?? 'id',
+      ...(args.sortField ? { sortField: args.sortField } : {}),
       sortOrder: (args.sortOrder as any) ?? 'asc',
       fields: '',
     });
@@ -121,7 +121,6 @@ export class CoreScreensMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: '',
-      sortField: 'id',
       sortOrder: PageOrderDirection.Asc,
       fields: '',
     });
@@ -162,7 +161,6 @@ export class CoreScreensMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: '',
-      sortField: 'id',
       sortOrder: PageOrderDirection.Asc,
       fields: '',
     });

package/src/mcp/tools/core-sessions.mcp-tools.ts

@@ -26,7 +26,6 @@ export class CoreSessionsMcpTools {
         page: args.page ?? 1,
         pageSize: args.pageSize ?? 20,
         search: '',
-        sortField: 'id',
         sortOrder: PageOrderDirection.Asc,
         fields: '',
       },
@@ -53,7 +52,6 @@ export class CoreSessionsMcpTools {
         page: args.page ?? 1,
         pageSize: args.pageSize ?? 20,
         search: '',
-        sortField: 'id',
         sortOrder: PageOrderDirection.Asc,
         fields: '',
       },

package/src/mcp/tools/core-settings.mcp-tools.ts

@@ -74,7 +74,7 @@ export class CoreSettingsMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: args.search ?? '',
-      sortField: args.sortField ?? 'id',
+      ...(args.sortField ? { sortField: args.sortField } : {}),
       sortOrder: (args.sortOrder as any) ?? 'asc',
       fields: '',
     });
@@ -117,7 +117,6 @@ export class CoreSettingsMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: args.search ?? '',
-      sortField: 'id',
       sortOrder: 'asc' as any,
       fields: '',
     });

package/src/mcp/tools/core-users.mcp-tools.ts

@@ -46,7 +46,7 @@ export class CoreUsersMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: args.search ?? '',
-      sortField: args.sortField ?? 'id',
+      ...(args.sortField ? { sortField: args.sortField } : {}),
       sortOrder: (args.sortOrder as any) ?? 'asc',
       fields: '',
     });

package/src/mcp/tools/core-webhooks.mcp-tools.ts

@@ -30,7 +30,7 @@ export class CoreWebhooksMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: args.search ?? '',
-      sortField: args.sortField ?? 'id',
+      ...(args.sortField ? { sortField: args.sortField } : {}),
       sortOrder: (args.sortOrder as any) ?? 'asc',
       fields: '',
     });
@@ -191,7 +191,6 @@ export class CoreWebhooksMcpTools {
       page: args.page ?? 1,
       pageSize: args.pageSize ?? 20,
       search: '',
-      sortField: 'id',
       sortOrder: 'desc' as any,
       fields: '',
     });

package/src/mcp/types/mcp-context.type.ts

@@ -1,6 +1,15 @@
-export type McpContext = {
-  userId: number;
-  sessionId: string;
-  locale: string;
-  toolName: string;
-};
+export type McpContext = {
+  userId: number;
+  sessionId: string;
+  locale: string;
+  toolName: string;
+  /**
+   * Client OAuth externo que originou a chamada (hoje `claude-connector`), ou
+   * null para o caminho interno — chave `hedhog_mcp_`, JWT de login, mcp-chat.
+   *
+   * Vale por dois motivos: a auditoria precisa distinguir uma acao feita pelo
+   * Claude Desktop de uma feita pelo Claude Code, e o teto de permissao so se
+   * aplica a cliente externo.
+   */
+  clientId: string | null;
+};

package/src/mcp-chat/mcp-chat.service.ts

@@ -562,6 +562,10 @@ export class McpChatService {
               sessionId: '',
               locale,
               toolName: originalName,
+              // O chat do admin e caminho interno: quem chama e o proprio
+              // operador, com a tela na frente. Nao ha client OAuth externo, e
+              // por isso o teto do conector nao se aplica aqui.
+              clientId: null,
             };
             try {
               const result = await entry.handler(args, context);
@@ -746,6 +750,10 @@ export class McpChatService {
               sessionId: '',
               locale,
               toolName: originalName,
+              // O chat do admin e caminho interno: quem chama e o proprio
+              // operador, com a tela na frente. Nao ha client OAuth externo, e
+              // por isso o teto do conector nao se aplica aqui.
+              clientId: null,
             };
             try {
               const result = await entry.handler(args ?? {}, context);