@creezio/shell-ui 0.22.0

package/ui/settings/desktop-fleet-telemetry-settings.tsx

@@ -0,0 +1,269 @@
+"use client";
+
+import { getShellDesktopApi, getShellUiBrand } from "@creezio/shell-ui";
+
+/**
+ * Configuration → Support & télémétrie — consentement granulaire flotte.
+ */
+
+import { useCallback, useEffect, useState } from "react";
+import { toast } from "sonner";
+import { Loader2, Shield } from "lucide-react";
+import { Button } from "../primitives/button";
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "../primitives/card";
+import { Label } from "../primitives/label";
+import { ServerOperatorNotice } from "./server-mode-cards";
+
+type FleetScopeId =
+  | "heartbeat"
+  | "crashes"
+  | "ops"
+  | "sessions"
+  | "users"
+  | "request_logs"
+  | "hermes_stats"
+  | "hermes_chats"
+  | "assistant_chats"
+  | "plugins"
+  | "actions"
+  | "remote_commands";
+
+type FleetTelemetryConfig = {
+  enabled: boolean;
+  scopes: Record<FleetScopeId, boolean>;
+  consentAt: string | null;
+  consentVersion: number;
+};
+
+const SCOPE_META: Array<{
+  id: FleetScopeId;
+  label: string;
+  detail: string;
+  sensitive?: boolean;
+}> = [
+  {
+    id: "heartbeat",
+    label: "Présence & santé",
+    detail: "Online, version, slug, état des services locaux",
+  },
+  {
+    id: "crashes",
+    label: "Incidents / crashes",
+    detail: "Rapports de crash vers le cockpit support",
+  },
+  {
+    id: "ops",
+    label: "Boîte noire (boot & logs)",
+    detail: "Décisions de boot, durées, anomalies + tail du log principal — redacté",
+  },
+  {
+    id: "sessions",
+    label: "Sessions collaborateurs",
+    detail: "Qui est connecté (jamais les mots de passe)",
+  },
+  {
+    id: "users",
+    label: "Comptes locaux",
+    detail: "Liste users + rôles — pas de secrets / recovery",
+  },
+  {
+    id: "request_logs",
+    label: "Logs API / MCP",
+    detail: "Échantillon redacté (Authorization / BYOK masqués)",
+  },
+  {
+    id: "hermes_stats",
+    label: "Hermes — stats",
+    detail: "Compteurs appels / erreurs / latence",
+  },
+  {
+    id: "hermes_chats",
+    label: "Hermes — contenu des chats",
+    detail: "Messages Work / sessions Hermes",
+    sensitive: true,
+  },
+  {
+    id: "assistant_chats",
+    label: "Assistant in-app — chats",
+    detail: "Conversations assistant",
+    sensitive: true,
+  },
+  {
+    id: "plugins",
+    label: "Plugins",
+    detail: "Inventaire manifest + état",
+  },
+  {
+    id: "actions",
+    label: "Journal d’actions",
+    detail: "Événements UI / commandes métier agrégés",
+  },
+  {
+    id: "remote_commands",
+    label: "Accepter le pilotage distant",
+    detail: "Allowlist : update-check, restart embed, envoi diagnostics (pas de shell)",
+  },
+];
+
+export function DesktopFleetTelemetrySettings() {
+  const [desktop, setDesktop] = useState(false);
+  const [loading, setLoading] = useState(true);
+  const [busy, setBusy] = useState(false);
+  const [cfg, setCfg] = useState<FleetTelemetryConfig | null>(null);
+
+  const refresh = useCallback(async () => {
+    const api = getShellDesktopApi();
+    if (!api?.getFleetTelemetry) return;
+    try {
+      setCfg(await api.getFleetTelemetry());
+    } catch {
+      // Client distant : canal host-only refusé — la section est masquée
+      // par HostOnlySettings, ne pas laisser un rejet non catché au montage.
+    }
+  }, []);
+
+  useEffect(() => {
+    const api = getShellDesktopApi();
+    if (!api?.getFleetTelemetry) {
+      setLoading(false);
+      return;
+    }
+    setDesktop(true);
+    void refresh().finally(() => setLoading(false));
+  }, [refresh]);
+
+  async function apply(patch: {
+    enabled?: boolean;
+    scopes?: Partial<Record<FleetScopeId, boolean>>;
+    preset?: "basic" | "off" | "keep";
+  }) {
+    const api = getShellDesktopApi();
+    if (!api?.setFleetTelemetry) return;
+    setBusy(true);
+    try {
+      const next = await api.setFleetTelemetry(patch);
+      setCfg(next);
+      toast.success("Préférences télémétrie enregistrées");
+    } catch (e) {
+      toast.error(e instanceof Error ? e.message : "Échec enregistrement");
+    } finally {
+      setBusy(false);
+    }
+  }
+
+  async function onScope(id: FleetScopeId, value: boolean) {
+    const meta = SCOPE_META.find((m) => m.id === id);
+    if (value && meta?.sensitive) {
+      const ok = window.confirm(
+        "Je comprends que le contenu des conversations sera visible par le support Creezio.",
+      );
+      if (!ok) return;
+    }
+    await apply({ scopes: { [id]: value } });
+  }
+
+  // Web (serveur headless) : consentement posé par l'opérateur de l'instance.
+  if (!desktop) return <ServerOperatorNotice label="la télémétrie support" />;
+  if (loading || !cfg) {
+    return (
+      <Card>
+        <CardContent className="flex items-center gap-2 py-8 text-sm text-muted-foreground">
+          <Loader2 className="h-4 w-4 animate-spin" /> Chargement…
+        </CardContent>
+      </Card>
+    );
+  }
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle className="flex items-center gap-2 text-base">
+          <Shield className="h-4 w-4" />
+          Support & télémétrie
+        </CardTitle>
+        <CardDescription>
+          Partage optionnel avec Creezio Support. Tout est désactivé par défaut.
+          Les secrets (clés IA, JWT, tokens tunnel, mots de passe) ne sont jamais
+          envoyés.
+        </CardDescription>
+      </CardHeader>
+      <CardContent className="space-y-6">
+        <label className="flex cursor-pointer items-start justify-between gap-4 rounded-md border px-3 py-3">
+          <div className="space-y-1">
+            <Label className="text-sm font-medium">
+              Partager des données avec Creezio Support
+            </Label>
+            <p className="text-xs text-muted-foreground">
+              {cfg.enabled
+                ? cfg.consentAt
+                  ? `Actif depuis ${new Date(cfg.consentAt).toLocaleString("fr-FR")}`
+                  : "Actif"
+                : "Aucun envoi vers le cockpit flotte tant que c’est désactivé"}
+            </p>
+          </div>
+          <input
+            type="checkbox"
+            className="mt-1 h-4 w-4"
+            checked={cfg.enabled}
+            disabled={busy}
+            onChange={(e) => void apply({ enabled: e.target.checked })}
+          />
+        </label>
+
+        <div className="flex flex-wrap gap-2">
+          <Button
+            type="button"
+            size="sm"
+            variant="secondary"
+            disabled={busy}
+            onClick={() => void apply({ preset: "basic" })}
+          >
+            Activer le support basique
+          </Button>
+          <Button
+            type="button"
+            size="sm"
+            variant="outline"
+            disabled={busy}
+            onClick={() => void apply({ preset: "off" })}
+          >
+            Tout désactiver
+          </Button>
+        </div>
+
+        <div
+          className={`space-y-3 ${cfg.enabled ? "" : "pointer-events-none opacity-50"}`}
+        >
+          <p className="text-xs font-medium uppercase tracking-wide text-muted-foreground">
+            Catégories
+          </p>
+          {SCOPE_META.map((m) => (
+            <label
+              key={m.id}
+              className="flex cursor-pointer items-start justify-between gap-4 border-b border-border/60 pb-3 last:border-0"
+            >
+              <div className="min-w-0 space-y-0.5">
+                <span className="text-sm font-medium">
+                  {m.label}
+                  {m.sensitive ? (
+                    <span className="ml-2 text-[10px] font-normal uppercase text-amber-700">
+                      sensible
+                    </span>
+                  ) : null}
+                </span>
+                <p className="text-xs text-muted-foreground">{m.detail}</p>
+              </div>
+              <input
+                type="checkbox"
+                className="mt-1 h-4 w-4"
+                checked={cfg.scopes[m.id] === true}
+                disabled={busy || !cfg.enabled}
+                onChange={(e) => void onScope(m.id, e.target.checked)}
+              />
+            </label>
+          ))}
+        </div>
+      </CardContent>
+    </Card>
+  );
+}

package/ui/settings/desktop-hermes-settings.tsx

@@ -0,0 +1,341 @@
+"use client";
+
+import { getShellDesktopApi, getShellUiBrand } from "@creezio/shell-ui";
+
+/**
+ * Hermes — stack native Creezio (toujours embarqué sur Héberger).
+ * Statut + ouverture WebUI + logs. Pas de mode distant/désactivé.
+ */
+
+import { useCallback, useEffect, useState } from "react";
+import { toast } from "sonner";
+import { Bot, Download, ExternalLink, Loader2, RefreshCw } from "lucide-react";
+import { Button } from "../primitives/button";
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from "../primitives/card";
+import { useTabWorkspaceOptional } from "../workspace/tab-workspace-host";
+import {
+  isHermesWebuiOpenTarget,
+  resolveHermesWebuiOpenTarget,
+} from "../lib/hermes-ui";
+import { LockedConfigField } from "./locked-config-field";
+import { DesktopEmbedEnvPanel } from "./desktop-embed-env-panel";
+import { ServerServiceStatusCard } from "./server-mode-cards";
+
+type HermesStatus = {
+  status: string;
+  mode: string;
+  apiUrl: string | null;
+  webuiUrl: string | null;
+  webuiStatus: string;
+  binaryFound: boolean;
+  binaryPath: string | null;
+  version: string | null;
+  detail: string;
+  homeDir: string | null;
+  bootstrapPhase: string;
+  bootstrapError: string | null;
+  installing: boolean;
+  logs: string[];
+};
+
+function statusTone(status: string): string {
+  if (status === "running") {
+    return "border-emerald-200 bg-emerald-50 text-emerald-900";
+  }
+  if (status === "installing" || status === "starting") {
+    return "border-sky-200 bg-sky-50 text-sky-900";
+  }
+  if (status === "missing" || status === "error") {
+    return "border-amber-200 bg-amber-50 text-amber-900";
+  }
+  if (status === "skipped-remote-client" || status === "remote") {
+    return "border-sky-200 bg-sky-50 text-sky-900";
+  }
+  return "border-slate-200 bg-slate-50 text-slate-800";
+}
+
+function statusLabel(status: string): string {
+  switch (status) {
+    case "running":
+      return "En cours";
+    case "stopped":
+      return "Arrêté";
+    case "missing":
+      return "Runtime absent";
+    case "installing":
+      return "Installation…";
+    case "starting":
+      return "Démarrage…";
+    case "error":
+      return "Erreur";
+    case "skipped-remote-client":
+      return "Via l’hôte (Rejoindre)";
+    case "remote":
+      return "Via tunnel hôte";
+    default:
+      return status;
+  }
+}
+
+function webuiLabel(status: string): string {
+  switch (status) {
+    case "running":
+      return "WebUI kanban actif";
+    case "missing":
+      return "WebUI absent";
+    case "error":
+      return "WebUI erreur";
+    case "skipped":
+      return "WebUI via tunnel";
+    case "stopped":
+      return "WebUI arrêté";
+    default:
+      return status || "—";
+  }
+}
+
+export function DesktopHermesSettings() {
+  const workspace = useTabWorkspaceOptional();
+  const [desktop, setDesktop] = useState(false);
+  const [loading, setLoading] = useState(true);
+  const [installing, setInstalling] = useState(false);
+  const [status, setStatus] = useState<HermesStatus | null>(null);
+  const [showLogs, setShowLogs] = useState(false);
+  const [tunnelHermes, setTunnelHermes] = useState<string | null>(null);
+
+  const refresh = useCallback(async () => {
+    const api = getShellDesktopApi();
+    if (!api?.getHermesStatus) return;
+    setLoading(true);
+    try {
+      setStatus((await api.getHermesStatus()) as HermesStatus);
+      if (api.getTunnelStatus) {
+        const t = (await api.getTunnelStatus()) as {
+          publicUrls?: { hermes?: string | null };
+        };
+        setTunnelHermes(t.publicUrls?.hermes || null);
+      }
+    } finally {
+      setLoading(false);
+    }
+  }, []);
+
+  useEffect(() => {
+    const api = getShellDesktopApi();
+    if (!api?.getHermesStatus) return;
+    setDesktop(true);
+    void refresh();
+  }, [refresh]);
+
+  useEffect(() => {
+    if (!status?.installing && status?.status !== "starting" && !installing) return;
+    const t = setInterval(() => {
+      void refresh();
+    }, 2500);
+    return () => clearInterval(t);
+  }, [status?.installing, status?.status, installing, refresh]);
+
+  // Web (serveur headless) : statut via /api/v1/os/hermes/status.
+  if (!desktop) return <ServerServiceStatusCard kind="hermes" />;
+
+  async function onInstallRuntime() {
+    const api = getShellDesktopApi();
+    if (!api?.ensureHermesRuntime) {
+      toast.error("API ensureHermesRuntime indisponible — recompilez Electron.");
+      return;
+    }
+    setInstalling(true);
+    try {
+      const r = await api.ensureHermesRuntime();
+      if (r.ok) {
+        const restarted = api.retryHermes ? await api.retryHermes() : null;
+        if (restarted?.webuiUrl) {
+          toast.success("Hermes réparé et relancé.");
+        } else {
+          toast.error(
+            restarted?.detail ||
+              "Runtime réparé, mais Hermes ne répond pas. Consultez les logs.",
+          );
+        }
+      } else {
+        toast.error(r.detail || "Échec installation runtime");
+      }
+      await refresh();
+    } catch (e) {
+      toast.error(e instanceof Error ? e.message : "Erreur bootstrap");
+    } finally {
+      setInstalling(false);
+    }
+  }
+
+  async function onOpenWebuiTab() {
+    let retryToast: string | number | undefined;
+    const target = await resolveHermesWebuiOpenTarget({
+      onRetry: () => {
+        retryToast = toast.loading("Relance de l’API et de la WebUI Hermes…");
+      },
+    });
+    if (retryToast !== undefined) toast.dismiss(retryToast);
+    if (!isHermesWebuiOpenTarget(target)) {
+      toast.error(target.error);
+      return;
+    }
+    if (workspace?.openExternalSite) {
+      workspace.openExternalSite({
+        siteId: target.siteId,
+        url: target.url,
+        title: target.title,
+      });
+      toast.success("Onglet Hermes ouvert");
+      return;
+    }
+    const api = getShellDesktopApi();
+    if (api?.openTab) {
+      try {
+        await api.openTab(target.siteId, target.url);
+        toast.success("Onglet Hermes ouvert");
+        return;
+      } catch (e) {
+        toast.error(e instanceof Error ? e.message : "Ouverture impossible");
+        return;
+      }
+    }
+    window.open(target.url, "_blank", "noreferrer");
+  }
+
+  const busy = installing || Boolean(status?.installing);
+
+  return (
+    <Card>
+      <CardHeader>
+        <CardTitle className="flex items-center gap-2 text-base">
+          <Bot className="h-4 w-4" /> Hermes Agent
+        </CardTitle>
+        <CardDescription>
+          Agents natifs Creezio. Workspace et HOME confinés dans l’OS Creezio
+          — jamais dans C:\Users\…
+        </CardDescription>
+      </CardHeader>
+      <CardContent className="space-y-4">
+        <div
+          className={`rounded-md border px-3 py-2 text-sm ${statusTone(status?.status || "")}`}
+        >
+          {loading || !status ? (
+            <span className="inline-flex items-center gap-2">
+              <Loader2 className="h-3.5 w-3.5 animate-spin" /> Chargement…
+            </span>
+          ) : (
+            <>
+              <div className="font-medium">
+                {statusLabel(status.status)}
+                {status.version ? ` · v${status.version}` : ""}
+              </div>
+              <div className="mt-0.5 text-xs opacity-90">{status.detail}</div>
+              <div className="mt-1 text-xs opacity-90">
+                {webuiLabel(status.webuiStatus)}
+              </div>
+              {status.bootstrapError ? (
+                <div className="mt-1 text-xs text-amber-800">{status.bootstrapError}</div>
+              ) : null}
+            </>
+          )}
+        </div>
+
+        <div>
+          <div className="mb-2 text-xs font-semibold uppercase tracking-wide text-slate-500">
+            Service (pré-configuré)
+          </div>
+          <div className="grid gap-2 sm:grid-cols-2">
+            <LockedConfigField
+              label="Mode"
+              value="Embarqué (natif Creezio)"
+            />
+            <LockedConfigField
+              label="home_mode"
+              value="profile"
+              hint="HOME outils = hermes-home/home (sandbox OS)."
+            />
+            <LockedConfigField
+              label="Workspace agent"
+              value={
+                status?.homeDir
+                  ? `${status.homeDir.replace(/[/\\]+$/, "")}/workspace`
+                  : "…/hermes-home/workspace"
+              }
+              hint="Seul répertoire de travail autorisé."
+            />
+            <LockedConfigField
+              label="HERMES_HOME"
+              value={status?.homeDir || "…/hermes-home"}
+            />
+            <LockedConfigField
+              label="API locale"
+              value={status?.apiUrl || "http://127.0.0.1:18642"}
+            />
+            <LockedConfigField
+              label="WebUI locale"
+              value={status?.webuiUrl || "http://127.0.0.1:18797"}
+            />
+            <LockedConfigField
+              label="URL publique tunnel"
+              value={tunnelHermes || "Tunnel non réservé"}
+            />
+            <LockedConfigField
+              label="GATEWAY_ALLOW_ALL_USERS"
+              value="true"
+              hint="Desktop local — messagerie multi-user non utilisée."
+            />
+          </div>
+        </div>
+
+        <DesktopEmbedEnvPanel service="hermes" />
+
+        <div className="flex flex-wrap gap-2">
+          <Button
+            size="sm"
+            variant="secondary"
+            onClick={() => void onOpenWebuiTab()}
+            disabled={busy}
+          >
+            <ExternalLink className="mr-1 h-3.5 w-3.5" />
+            Ouvrir dans un onglet
+          </Button>
+          <Button
+            size="sm"
+            variant="outline"
+            onClick={() => void onInstallRuntime()}
+            disabled={busy || status?.status === "skipped-remote-client"}
+          >
+            {installing || status?.installing ? (
+              <Loader2 className="mr-1 h-3.5 w-3.5 animate-spin" />
+            ) : (
+              <Download className="mr-1 h-3.5 w-3.5" />
+            )}
+            Réparer
+          </Button>
+          <Button
+            size="sm"
+            variant="outline"
+            onClick={() => void refresh()}
+            disabled={loading}
+          >
+            <RefreshCw className="mr-1 h-3.5 w-3.5" /> Actualiser
+          </Button>
+          <Button
+            size="sm"
+            variant="ghost"
+            onClick={() => setShowLogs((v) => !v)}
+          >
+            {showLogs ? "Masquer les logs" : "Logs"}
+          </Button>
+        </div>
+
+        {showLogs && status?.logs?.length ? (
+          <pre className="max-h-48 overflow-auto rounded-md border bg-slate-950 p-2 font-mono text-[11px] leading-relaxed text-slate-100">
+            {status.logs.join("\n")}
+          </pre>
+        ) : null}
+      </CardContent>
+    </Card>
+  );
+}