@hexabot-ai/api 3.1.4-alpha.0 → 3.2.0-alpha.0

package/src/user/entities/user.entity.ts

@@ -4,6 +4,7 @@
  * Full terms: see LICENSE.md.
  */
 
+import { userSchema, userFullSchema } from '@hexabot-ai/types';
 import {
   ChildEntity,
   Column,
@@ -13,6 +14,7 @@ import {
   RelationId,
 } from 'typeorm';
 
+import { AuditLabel } from '@/audit/decorators/audit-label.decorator';
 import { SubscriberOrmEntity } from '@/chat/entities/subscriber.entity';
 import { JsonColumn } from '@/database/decorators/json-column.decorator';
 import {
@@ -21,8 +23,8 @@ import {
 } from '@/database/decorators/orm-event-hooks.decorator';
 import { AsRelation } from '@/utils/decorators/relation-ref.decorator';
 
-import { User, UserDto, UserFull } from '../dto/user.dto';
-import { UserProvider } from '../types/user-provider.type';
+import { UserDto } from '../dto/user.dto';
+import type { UserProvider } from '../types/user-provider.type';
 import { hash } from '../utilities/bcryptjs';
 
 import { RoleOrmEntity } from './role.entity';
@@ -31,10 +33,11 @@ import { RoleOrmEntity } from './role.entity';
 @Index(['username'], { unique: true })
 @Index(['email'], { unique: true })
 export class UserOrmEntity extends SubscriberOrmEntity<UserDto> {
-  plainCls = User;
+  plainCls = userSchema;
 
-  fullCls = UserFull;
+  fullCls = userFullSchema;
 
+  @AuditLabel()
   @Column()
   username!: string;
 

package/src/user/guards/ability.guard.ts

@@ -6,6 +6,7 @@
 
 import { Url } from 'url';
 
+import type { User } from '@hexabot-ai/types';
 import {
   CanActivate,
   ExecutionContext,
@@ -16,7 +17,6 @@ import {
 import { Reflector } from '@nestjs/core';
 import { Request } from 'express';
 
-import { User } from '../dto/user.dto';
 import { TRole } from '../entities/role.entity';
 import { PermissionService } from '../services/permission.service';
 import { MethodToAction } from '../types/action.type';

package/src/user/guards/local-auth.guard.ts

@@ -4,15 +4,110 @@
  * Full terms: see LICENSE.md.
  */
 
-import { ExecutionContext, Injectable } from '@nestjs/common';
-import { AuthGuard } from '@nestjs/passport';
+import { ExecutionContext, Inject, Injectable, Optional } from '@nestjs/common';
+import { ModuleRef } from '@nestjs/core';
+import { AuthGuard, AuthModuleOptions } from '@nestjs/passport';
+import { Request } from 'express';
+import {
+  AuditLogService as SdkAuditLogService,
+  IAuditLog,
+} from 'nestjs-auditlog';
+
+import { AuditContextService } from '@/audit/services/audit-context.service';
+import {
+  resolveRequestIp,
+  resolveUserAgent,
+} from '@/audit/utils/request-context';
+
+const UNKNOWN_VALUE = 'unknown';
 
 @Injectable()
 export class LocalAuthGuard extends AuthGuard('local') {
+  constructor(
+    @Optional()
+    @Inject(AuthModuleOptions)
+    options: AuthModuleOptions | undefined,
+    private readonly moduleRef: ModuleRef,
+  ) {
+    super(options);
+  }
+
   async canActivate(context: ExecutionContext): Promise<boolean> {
-    const result = (await super.canActivate(context)) as boolean;
-    await super.logIn(context.switchToHttp().getRequest());
+    try {
+      const result = (await super.canActivate(context)) as boolean;
+      await super.logIn(context.switchToHttp().getRequest());
+
+      return result;
+    } catch (error) {
+      await this.recordFailedLogin(context);
+
+      throw error;
+    }
+  }
+
+  private async recordFailedLogin(context: ExecutionContext): Promise<void> {
+    const request = context.switchToHttp().getRequest<Request>();
+    const auditLogService = this.resolveAuditLogService();
+
+    if (!auditLogService) {
+      return;
+    }
+
+    this.resolveAuditContextService()?.setFromRequest(request);
+
+    await auditLogService.sendAuditLog(this.createFailedLoginAuditLog(request));
+  }
+
+  private createFailedLoginAuditLog(request: Request): IAuditLog {
+    const identifier = this.resolveIdentifier(request) ?? UNKNOWN_VALUE;
+
+    return {
+      resource: {
+        id: identifier,
+        type: 'Auth',
+        label: identifier,
+      } as IAuditLog['resource'] & { label: string },
+      operation: {
+        id: 'auth.login',
+        type: 'Login',
+        status: 'FAILED',
+      },
+      actor: {
+        id: identifier,
+        type: 'user',
+        label: identifier,
+        ip: resolveRequestIp(request),
+        agent: resolveUserAgent(request),
+      } as IAuditLog['actor'] & { label: string },
+    };
+  }
+
+  private resolveIdentifier(request: Request): string | undefined {
+    const identifier = (request.body as Record<string, unknown> | undefined)
+      ?.identifier;
+
+    if (typeof identifier !== 'string') {
+      return undefined;
+    }
+
+    const trimmed = identifier.trim();
+
+    return trimmed.length > 0 ? trimmed : undefined;
+  }
+
+  private resolveAuditLogService(): SdkAuditLogService | undefined {
+    try {
+      return this.moduleRef.get(SdkAuditLogService, { strict: false });
+    } catch {
+      return undefined;
+    }
+  }
 
-    return result;
+  private resolveAuditContextService(): AuditContextService | undefined {
+    try {
+      return this.moduleRef.get(AuditContextService, { strict: false });
+    } catch {
+      return undefined;
+    }
   }
 }

package/src/user/passport/session.serializer.ts

@@ -4,11 +4,11 @@
  * Full terms: see LICENSE.md.
  */
 
+import type { User } from '@hexabot-ai/types';
 import { Injectable } from '@nestjs/common';
 import { PassportSerializer } from '@nestjs/passport';
 import { SessionUser } from 'express-session';
 
-import { User } from '../dto/user.dto';
 import { UserService } from '../services/user.service';
 
 @Injectable()

package/src/user/repositories/credential.repository.ts

@@ -4,12 +4,6 @@
  * Full terms: see LICENSE.md.
  */
 
-/*
- * Hexabot — Fair Core License (FCL-1.0-ALv2)
- * Copyright (c) 2025 Hexastack.
- * Full terms: see LICENSE.md.
- */
-
 import { Injectable } from '@nestjs/common';
 import { InjectRepository } from '@nestjs/typeorm';
 import { Repository } from 'typeorm';

package/src/user/seeds/model.seed-model.ts

@@ -27,6 +27,11 @@ export const modelModels: ModelCreateDto[] = [
     identity: 'attachment',
     attributes: {},
   },
+  {
+    name: 'AuditLog',
+    identity: 'auditlog',
+    attributes: {},
+  },
   {
     name: 'User',
     identity: 'user',
@@ -67,6 +72,11 @@ export const modelModels: ModelCreateDto[] = [
     identity: 'subscriber',
     attributes: {},
   },
+  {
+    name: 'Source',
+    identity: 'source',
+    attributes: {},
+  },
   {
     name: 'Language',
     identity: 'language',

package/src/user/services/auth.service.ts

@@ -4,10 +4,10 @@
  * Full terms: see LICENSE.md.
  */
 
+import type { User } from '@hexabot-ai/types';
 import { Injectable } from '@nestjs/common';
 import { compareSync } from 'bcryptjs';
 
-import { User } from '../dto/user.dto';
 import { UserRepository } from '../repositories/user.repository';
 import { hash } from '../utilities/bcryptjs';
 

package/src/user/services/permission.service.ts

@@ -4,6 +4,7 @@
  * Full terms: see LICENSE.md.
  */
 
+import { PermissionFull } from '@hexabot-ai/types';
 import { CACHE_MANAGER } from '@nestjs/cache-manager';
 import { Inject, Injectable } from '@nestjs/common';
 import { OnEvent } from '@nestjs/event-emitter';
@@ -13,7 +14,6 @@ import { PERMISSION_CACHE_KEY } from '@/utils/constants/cache';
 import { Cacheable } from '@/utils/decorators/cacheable.decorator';
 import { BaseOrmService } from '@/utils/generics/base-orm.service';
 
-import { PermissionFull } from '../dto/permission.dto';
 import { PermissionOrmEntity } from '../entities/permission.entity';
 import { PermissionRepository } from '../repositories/permission.repository';
 import { PermissionsTree } from '../types/permission.type';

package/src/user/types/action.type.ts

@@ -4,16 +4,4 @@
  * Full terms: see LICENSE.md.
  */
 
-export enum Action {
-  CREATE = 'create',
-  READ = 'read',
-  UPDATE = 'update',
-  DELETE = 'delete',
-}
-
-export enum MethodToAction {
-  POST = 'create',
-  GET = 'read',
-  PATCH = 'update',
-  DELETE = 'delete',
-}
+export { Action, MethodToAction } from '@hexabot-ai/types';

package/src/user/types/index.type.ts

@@ -4,4 +4,4 @@
  * Full terms: see LICENSE.md.
  */
 
-export type TRelation = 'role' | 'createdBy';
+export type { TRelation } from '@hexabot-ai/types';

package/src/user/types/model.type.ts

@@ -4,32 +4,4 @@
  * Full terms: see LICENSE.md.
  */
 
-export type TModel =
-  | 'contenttype'
-  | 'content'
-  | 'nlpentity'
-  | 'nlpsampleentity'
-  | 'nlpsample'
-  | 'nlpvalue'
-  | 'setting'
-  | 'attachment'
-  | 'user'
-  | 'role'
-  | 'permission'
-  | 'label'
-  | 'labelgroup'
-  | 'message'
-  | 'thread'
-  | 'subscriber'
-  | 'language'
-  | 'translation'
-  | 'stats'
-  | 'menu'
-  | 'workflow'
-  | 'workflowversion'
-  | 'workflowrun'
-  | 'memorydefinition'
-  | 'memoryrecord'
-  | 'mcpserver'
-  | 'model'
-  | 'credential';
+export type { TModel } from '@hexabot-ai/types';

package/src/user/types/permission.type.ts

@@ -4,9 +4,7 @@
  * Full terms: see LICENSE.md.
  */
 
-import { Action } from './action.type';
-import { TModel } from './model.type';
-
-type ModelPermissionsPerRole = Record<TModel, Action[]>;
-
-export type PermissionsTree = Record<string, ModelPermissionsPerRole>;
+export type {
+  ModelPermissionsPerRole,
+  PermissionsTree,
+} from '@hexabot-ai/types';

package/src/user/types/user-provider.type.ts

@@ -4,7 +4,4 @@
  * Full terms: see LICENSE.md.
  */
 
-export type UserProvider = {
-  strategy: 'local';
-  sub?: string;
-};
+export type { UserProvider } from '@hexabot-ai/types';

package/src/utils/test/dummy/dto/dummy.dto.ts

@@ -4,22 +4,10 @@
  * Full terms: see LICENSE.md.
  */
 
-import { Exclude, Expose } from 'class-transformer';
+import { dummyFullSchema, dummySchema } from '@hexabot-ai/types';
 import { IsObject, IsOptional, IsString } from 'class-validator';
 
-import { BaseStub, DtoAction, DtoType, TDto } from '@/utils/types/dto.types';
-
-@Exclude()
-export class DummyStub extends BaseStub {
-  @Expose()
-  dummy!: string;
-
-  @Expose()
-  dynamicField?: Record<string, unknown>;
-}
-
-@Exclude()
-export class Dummy extends DummyStub {}
+import { DtoAction, TDto } from '@/utils/types/dto.types';
 
 export class DummyCreateDto {
   @IsString()
@@ -42,8 +30,8 @@ export class DummyUpdateDto {
 
 export type DummyDto = TDto<
   {
-    [DtoType.PLAIN]: typeof Dummy;
-    [DtoType.FULL]: typeof Dummy;
+    plain: typeof dummySchema;
+    full: typeof dummyFullSchema;
   },
   {
     [DtoAction.CREATE]: DummyCreateDto;

package/src/utils/test/dummy/entities/dummy.entity.ts

@@ -4,18 +4,19 @@
  * Full terms: see LICENSE.md.
  */
 
+import { dummySchema, dummyFullSchema } from '@hexabot-ai/types';
 import { Column, Entity } from 'typeorm';
 
 import { JsonColumn } from '@/database/decorators/json-column.decorator';
 import { BaseOrmEntity } from '@/database/entities/base.entity';
 
-import { Dummy, DummyDto } from '../dto/dummy.dto';
+import { DummyDto } from '../dto/dummy.dto';
 
 @Entity({ name: 'dummy' })
 export class DummyOrmEntity extends BaseOrmEntity<DummyDto> {
-  plainCls = Dummy;
+  plainCls = dummySchema;
 
-  fullCls = Dummy;
+  fullCls = dummyFullSchema;
 
   @Column()
   dummy!: string;

package/src/utils/test/fixtures/content.ts

@@ -4,9 +4,10 @@
  * Full terms: see LICENSE.md.
  */
 
+import { Content } from '@hexabot-ai/types';
 import { DataSource, DeepPartial } from 'typeorm';
 
-import { Content, ContentCreateDto } from '@/cms/dto/content.dto';
+import { ContentCreateDto } from '@/cms/dto/content.dto';
 import { ContentTypeOrmEntity } from '@/cms/entities/content-type.entity';
 import { ContentOrmEntity } from '@/cms/entities/content.entity';
 

package/src/utils/test/fixtures/contenttype.ts

@@ -4,10 +4,11 @@
  * Full terms: see LICENSE.md.
  */
 
+import { ContentType } from '@hexabot-ai/types';
 import { DataSource, DeepPartial } from 'typeorm';
 
 import { DEFAULT_CONTENT_TYPE_SCHEMA } from '@/cms';
-import { ContentType, ContentTypeCreateDto } from '@/cms/dto/contentType.dto';
+import { ContentTypeCreateDto } from '@/cms/dto/contentType.dto';
 import { ContentTypeOrmEntity } from '@/cms/entities/content-type.entity';
 
 import { getFixturesWithDefaultValues } from '../defaultValues';

package/src/utils/test/fixtures/label-group.ts

@@ -4,9 +4,10 @@
  * Full terms: see LICENSE.md.
  */
 
+import { LabelGroup } from '@hexabot-ai/types';
 import { DataSource } from 'typeorm';
 
-import { LabelGroup, LabelGroupCreateDto } from '@/chat/dto/label-group.dto';
+import { LabelGroupCreateDto } from '@/chat/dto/label-group.dto';
 import { LabelGroupOrmEntity } from '@/chat/entities/label-group.entity';
 import { LabelOrmEntity } from '@/chat/entities/label.entity';
 

package/src/utils/test/fixtures/label.ts

@@ -4,9 +4,10 @@
  * Full terms: see LICENSE.md.
  */
 
+import { Label } from '@hexabot-ai/types';
 import { DataSource } from 'typeorm';
 
-import { Label, LabelCreateDto } from '@/chat/dto/label.dto';
+import { LabelCreateDto } from '@/chat/dto/label.dto';
 import { LabelGroupOrmEntity } from '@/chat/entities/label-group.entity';
 import { LabelOrmEntity } from '@/chat/entities/label.entity';
 

package/src/utils/test/fixtures/message.ts

@@ -4,9 +4,11 @@
  * Full terms: see LICENSE.md.
  */
 
+import { Message, OutgoingMessageType } from '@hexabot-ai/types';
 import { DataSource } from 'typeorm';
 
-import { Message, MessageCreateDto } from '@/chat/dto/message.dto';
+import { SourceOrmEntity } from '@/channel/entities/source.entity';
+import { MessageCreateDto } from '@/chat/dto/message.dto';
 import { MessageOrmEntity } from '@/chat/entities/message.entity';
 import { ThreadOrmEntity } from '@/chat/entities/thread.entity';
 
@@ -24,7 +26,10 @@ const messages: TMessageFixtures['values'][] = [
     recipient: '1',
     thread: '1',
     sentBy: '0',
-    message: { text: 'Hello from the past' },
+    message: {
+      type: OutgoingMessageType.text,
+      data: { text: 'Hello from the past' },
+    },
     read: true,
     delivery: true,
   },
@@ -34,7 +39,10 @@ const messages: TMessageFixtures['values'][] = [
     recipient: '1',
     thread: '1',
     sentBy: '0',
-    message: { text: 'Hello' },
+    message: {
+      type: OutgoingMessageType.text,
+      data: { text: 'Hello' },
+    },
     delivery: true,
   },
   {
@@ -43,7 +51,10 @@ const messages: TMessageFixtures['values'][] = [
     recipient: '1',
     thread: '1',
     sentBy: '0',
-    message: { text: 'Hello back' },
+    message: {
+      type: OutgoingMessageType.text,
+      data: { text: 'Hello back' },
+    },
   },
 ];
 
@@ -65,6 +76,34 @@ const findMessages = async (dataSource: DataSource) =>
   await dataSource.getRepository(MessageOrmEntity).find({
     relations: ['sender', 'recipient', 'sentBy'],
   });
+const resolveSubscriberSourceId = (source: unknown): string | null => {
+  if (typeof source === 'string' && source.length > 0) {
+    return source;
+  }
+
+  if (source && typeof source === 'object' && 'id' in source) {
+    const sourceId = (source as { id?: unknown }).id;
+    if (typeof sourceId === 'string' && sourceId.length > 0) {
+      return sourceId;
+    }
+  }
+
+  return null;
+};
+const resolveSubscriberChannelName = (channel: unknown): string | null => {
+  if (
+    channel &&
+    typeof channel === 'object' &&
+    'name' in channel &&
+    typeof (channel as { name?: unknown }).name === 'string'
+  ) {
+    const channelName = (channel as { name: string }).name.trim();
+
+    return channelName.length > 0 ? channelName : null;
+  }
+
+  return null;
+};
 const parseIndex = (value?: string | null) => {
   if (value == null) {
     return null;
@@ -78,6 +117,7 @@ const parseIndex = (value?: string | null) => {
 export const installMessageFixturesTypeOrm = async (dataSource: DataSource) => {
   const repository = dataSource.getRepository(MessageOrmEntity);
   const threadRepository = dataSource.getRepository(ThreadOrmEntity);
+  const sourceRepository = dataSource.getRepository(SourceOrmEntity);
   const { subscribers, users } =
     await installSubscriberFixturesTypeOrm(dataSource);
 
@@ -85,6 +125,12 @@ export const installMessageFixturesTypeOrm = async (dataSource: DataSource) => {
     return await findMessages(dataSource);
   }
 
+  const sourceIdByChannel = new Map<string, string>(
+    (await sourceRepository.find()).map((source) => [
+      source.channel,
+      source.id,
+    ]),
+  );
   const threads = await Promise.all(
     subscribers.map(async (subscriber) => {
       const existing = await threadRepository.findOne({
@@ -94,9 +140,37 @@ export const installMessageFixturesTypeOrm = async (dataSource: DataSource) => {
         return existing;
       }
 
+      let sourceId = resolveSubscriberSourceId(subscriber.source);
+
+      if (!sourceId) {
+        const channelName = resolveSubscriberChannelName(subscriber.channel);
+
+        if (!channelName) {
+          return null;
+        }
+
+        sourceId = sourceIdByChannel.get(channelName) ?? null;
+
+        if (!sourceId) {
+          const source = await sourceRepository.save(
+            sourceRepository.create({
+              name: `fixture-source-${channelName}`,
+              channel: channelName,
+              settings: {},
+              state: true,
+              defaultWorkflow: null,
+            }),
+          );
+
+          sourceId = source.id;
+          sourceIdByChannel.set(channelName, sourceId);
+        }
+      }
+
       return await threadRepository.save(
         threadRepository.create({
           subscriber: { id: subscriber.id },
+          source: { id: sourceId },
           status: 'open',
           lastMessageAt: new Date(),
         }),

package/src/utils/test/fixtures/setting.ts

@@ -10,7 +10,6 @@ import { SettingCreateDto } from '@/setting/dto/setting.dto';
 import { SettingOrmEntity } from '@/setting/entities/setting.entity';
 import { getRandom } from '@/utils/helpers/safeRandom';
 
-const UNUSED_CHANNEL_GROUP = String(getRandom());
 const UNUSED_HELPER_GROUP = String(getRandom());
 
 export const settingFixtures: SettingCreateDto[] = [
@@ -69,12 +68,6 @@ export const settingFixtures: SettingCreateDto[] = [
     label: 'company_country',
     value: 'US',
   },
-  {
-    group: UNUSED_CHANNEL_GROUP,
-    subgroup: 'channel',
-    label: `${getRandom()}`,
-    value: '',
-  },
   {
     group: UNUSED_HELPER_GROUP,
     subgroup: 'helper',