@dashadmin/dash-admin 1.3.44 → 1.3.45

package/dist/components/serviceAccount/ApiKeyRevealDialog.js

@@ -0,0 +1,110 @@
+var __async = (__this, __arguments, generator) => {
+  return new Promise((resolve, reject) => {
+    var fulfilled = (value) => {
+      try {
+        step(generator.next(value));
+      } catch (e) {
+        reject(e);
+      }
+    };
+    var rejected = (value) => {
+      try {
+        step(generator.throw(value));
+      } catch (e) {
+        reject(e);
+      }
+    };
+    var step = (x) => x.done ? resolve(x.value) : Promise.resolve(x.value).then(fulfilled, rejected);
+    step((generator = generator.apply(__this, __arguments)).next());
+  });
+};
+import { jsx, jsxs } from "react/jsx-runtime";
+import React, { useState } from "react";
+import Alert from "@mui/material/Alert";
+import Box from "@mui/material/Box";
+import IconButton from "@mui/material/IconButton";
+import Tooltip from "@mui/material/Tooltip";
+import Typography from "@mui/material/Typography";
+import ContentCopyIcon from "@mui/icons-material/ContentCopy";
+import CheckIcon from "@mui/icons-material/Check";
+import { useI18nBridge } from "../../contexts/I18nBridgeContext";
+const ApiKeyRevealContent = ({ token, name }) => {
+  const { i18nProvider, locale } = useI18nBridge();
+  const [copied, setCopied] = useState(false);
+  const translate = React.useCallback(
+    (key, options) => {
+      var _a, _b;
+      if (i18nProvider == null ? void 0 : i18nProvider.translate) {
+        try {
+          return i18nProvider.translate(key, options);
+        } catch (e) {
+          return (_a = options == null ? void 0 : options._) != null ? _a : key;
+        }
+      }
+      return (_b = options == null ? void 0 : options._) != null ? _b : key;
+    },
+    // locale is a dependency so the text re-renders on a language switch.
+    [i18nProvider, locale]
+  );
+  const handleCopy = () => __async(null, null, function* () {
+    try {
+      yield navigator.clipboard.writeText(token);
+      setCopied(true);
+      setTimeout(() => setCopied(false), 2e3);
+    } catch (e) {
+      setCopied(false);
+    }
+  });
+  return /* @__PURE__ */ jsxs(Box, { children: [
+    /* @__PURE__ */ jsx(Alert, { severity: "warning", sx: { mb: 2 }, children: translate("serviceAccount.reveal.warning", {
+      _: "This is the only time this key will be shown. It cannot be recovered later \u2014 if you lose it, you will have to issue a new one."
+    }) }),
+    name ? /* @__PURE__ */ jsxs(Typography, { variant: "body2", sx: { mb: 1 }, children: [
+      translate("serviceAccount.reveal.forKey", { _: "Key" }),
+      ": ",
+      /* @__PURE__ */ jsx("strong", { children: name })
+    ] }) : null,
+    /* @__PURE__ */ jsxs(
+      Box,
+      {
+        sx: {
+          display: "flex",
+          alignItems: "center",
+          gap: 1,
+          p: 1.5,
+          borderRadius: 1,
+          border: (theme) => `1px solid ${theme.palette.divider}`,
+          bgcolor: (theme) => theme.palette.mode === "dark" ? "rgba(255,255,255,0.04)" : "rgba(0,0,0,0.04)"
+        },
+        children: [
+          /* @__PURE__ */ jsx(
+            Box,
+            {
+              component: "code",
+              sx: {
+                flex: 1,
+                fontFamily: "monospace",
+                fontSize: "0.875rem",
+                wordBreak: "break-all",
+                userSelect: "all"
+              },
+              children: token
+            }
+          ),
+          /* @__PURE__ */ jsx(
+            Tooltip,
+            {
+              title: copied ? translate("serviceAccount.reveal.copied", { _: "Copied" }) : translate("serviceAccount.reveal.copy", { _: "Copy" }),
+              children: /* @__PURE__ */ jsx(IconButton, { onClick: handleCopy, size: "small", "aria-label": "copy api key", children: copied ? /* @__PURE__ */ jsx(CheckIcon, { color: "success", fontSize: "small" }) : /* @__PURE__ */ jsx(ContentCopyIcon, { fontSize: "small" }) })
+            }
+          )
+        ]
+      }
+    )
+  ] });
+};
+var ApiKeyRevealDialog_default = ApiKeyRevealContent;
+export {
+  ApiKeyRevealContent,
+  ApiKeyRevealDialog_default as default
+};

package/dist/components/serviceAccount/ServiceAccountStatusSwitch.js

@@ -0,0 +1,94 @@
+var __async = (__this, __arguments, generator) => {
+  return new Promise((resolve, reject) => {
+    var fulfilled = (value) => {
+      try {
+        step(generator.next(value));
+      } catch (e) {
+        reject(e);
+      }
+    };
+    var rejected = (value) => {
+      try {
+        step(generator.throw(value));
+      } catch (e) {
+        reject(e);
+      }
+    };
+    var step = (x) => x.done ? resolve(x.value) : Promise.resolve(x.value).then(fulfilled, rejected);
+    step((generator = generator.apply(__this, __arguments)).next());
+  });
+};
+import { jsx, jsxs } from "react/jsx-runtime";
+import React, { useState } from "react";
+import { useRecordContext, useNotify, useRefresh } from "react-admin";
+import { useAxios } from "dash-axios-hook";
+import Box from "@mui/material/Box";
+import Switch from "@mui/material/Switch";
+import FormControlLabel from "@mui/material/FormControlLabel";
+import CircularProgress from "@mui/material/CircularProgress";
+import { useI18nBridge } from "../../contexts/I18nBridgeContext";
+const ServiceAccountStatusSwitch = ({
+  resourceConfig
+}) => {
+  const record = useRecordContext();
+  const notify = useNotify();
+  const refresh = useRefresh();
+  const axios = useAxios();
+  const { i18nProvider } = useI18nBridge();
+  const [loading, setLoading] = useState(false);
+  const translate = React.useCallback(
+    (key, fallback) => {
+      var _a;
+      try {
+        return (_a = i18nProvider == null ? void 0 : i18nProvider.translate(key, { _: fallback })) != null ? _a : fallback;
+      } catch (e) {
+        return fallback;
+      }
+    },
+    [i18nProvider]
+  );
+  if (!record) return null;
+  const isActive = record.status === "active";
+  const handleToggle = () => __async(null, null, function* () {
+    setLoading(true);
+    try {
+      const action = isActive ? "disable" : "enable";
+      yield axios.post(`${resourceConfig.model}/${record.id}/${action}`);
+      notify(
+        isActive ? translate("serviceAccount.notify.disabled", "API key disabled") : translate("serviceAccount.notify.enabled", "API key enabled"),
+        { type: "success" }
+      );
+      refresh();
+    } catch (error) {
+      console.error("ServiceAccountStatusSwitch: toggle failed", error);
+      notify(
+        translate("serviceAccount.notify.toggle_error", "Could not change the key status"),
+        { type: "error" }
+      );
+    } finally {
+      setLoading(false);
+    }
+  });
+  return /* @__PURE__ */ jsxs(Box, { sx: { display: "flex", alignItems: "center", gap: 1, my: 1 }, children: [
+    /* @__PURE__ */ jsx(
+      FormControlLabel,
+      {
+        control: /* @__PURE__ */ jsx(
+          Switch,
+          {
+            checked: isActive,
+            onChange: handleToggle,
+            disabled: loading,
+            color: "success"
+          }
+        ),
+        label: isActive ? translate("serviceAccount.status.active", "Active") : translate("serviceAccount.status.disabled", "Disabled")
+      }
+    ),
+    loading ? /* @__PURE__ */ jsx(CircularProgress, { size: 16 }) : null
+  ] });
+};
+var ServiceAccountStatusSwitch_default = ServiceAccountStatusSwitch;
+export {
+  ServiceAccountStatusSwitch_default as default
+};

package/dist/providers/i18n/en.js

@@ -302,8 +302,55 @@ const dashEnglish = {
     auto_reset_notice: "This screen will automatically reset in 30 seconds",
     loading: "Loading..."
   },
+  // Service account API keys
+  serviceAccount: {
+    reveal: {
+      title: "Copy your API key now",
+      warning: "This is the only time this key will be shown. It cannot be recovered later \u2014 if you lose it, you will have to issue a new one.",
+      forKey: "Key",
+      copy: "Copy",
+      copied: "Copied",
+      dismiss: "I have saved it"
+    },
+    status: {
+      active: "Active",
+      disabled: "Disabled"
+    },
+    expiration: {
+      "1": "1 day",
+      "7": "7 days",
+      "30": "30 days",
+      never: "Never"
+    },
+    notify: {
+      enabled: "API key enabled",
+      disabled: "API key disabled",
+      toggle_error: "Could not change the key status"
+    },
+    action: {
+      enable: "Enable",
+      disable: "Disable"
+    },
+    // Shown when a tenancy-level role is selected: such a key reaches every
+    // tenant in the account, so the tenant field stops being a boundary.
+    tenancy_role_warning: "This role grants access to every tenant in the account. The selected tenant is informational, not a security boundary."
+  },
   // Resource labels for admin panel
   resource: {
+    tenancy: {
+      serviceAccounts: {
+        label: "Service Accounts",
+        name: "Name",
+        tenant: "Tenant",
+        roles: "Roles",
+        expiration: "Expiration",
+        status: "Status",
+        token: "Key",
+        expires_at: "Expires",
+        last_used_at: "Last used",
+        created_at: "Created"
+      }
+    },
     // Groups
     groups: {
       system_resources: "System Resources",
@@ -506,6 +553,34 @@ const dashEnglish = {
     all_products: "All Products",
     has_modifiers: "Customizable",
     no_more_products: "No more products"
+  },
+  // JSON Color Selector - image-based theme extraction
+  colorSelector: {
+    imageExtractor: {
+      title_ai: "AI Theme Generator",
+      title_local: "Theme from Image",
+      upload_prompt: "Upload an Image to Extract Colors",
+      upload_hint: "Select an image file and we'll automatically extract a color palette",
+      upload_button: "Choose Image",
+      drop_hint: "or drag and drop it here",
+      invalid_file_type: "Please select a valid image file",
+      file_too_large: "File size must be less than %{limit}MB",
+      extracting: "Extracting colors from image...",
+      extracted_colors: "Extracted Colors (%{count} colors found)",
+      dominant_label: "Dominant",
+      uploaded_image_alt: "Uploaded image",
+      no_palette_error: "Please extract colors from an image first",
+      theme_generation_failed: "Failed to generate theme",
+      theme_description_label: "Theme Description (Optional)",
+      theme_description_placeholder: "Optional: Describe the theme style you want (e.g., 'modern and minimalist', 'warm and cozy', 'professional corporate')",
+      apply_colors_button: "Apply Colors",
+      generate_button: "Generate AI Theme",
+      generating_button: "Generating...",
+      apply_colors_help_label: "Apply Colors:",
+      apply_colors_help_desc: "Maps the extracted palette to your base theme colors locally \u2014 no AI involved",
+      generate_help_label: "Generate AI Theme:",
+      generate_help_desc: "Uses AI to create a complete color scheme based on extracted colors and your description"
+    }
   }
 };
 var en_default = __spreadValues(__spreadValues({}, raEnglish), dashEnglish);

package/dist/providers/i18n/es.js

@@ -309,8 +309,55 @@ const dashSpanish = {
     auto_reset_notice: "Esta pantalla se reiniciar\xE1 autom\xE1ticamente en 30 segundos",
     loading: "Cargando..."
   },
+  // Service account API keys
+  serviceAccount: {
+    reveal: {
+      title: "Copia tu API Key ahora",
+      warning: "Esta es la \xFAnica vez que se mostrar\xE1 esta clave. No se puede recuperar m\xE1s adelante \u2014 si la pierdes, tendr\xE1s que emitir una nueva.",
+      forKey: "Clave",
+      copy: "Copiar",
+      copied: "Copiado",
+      dismiss: "La he guardado"
+    },
+    status: {
+      active: "Activa",
+      disabled: "Deshabilitada"
+    },
+    expiration: {
+      "1": "1 d\xEDa",
+      "7": "7 d\xEDas",
+      "30": "30 d\xEDas",
+      never: "Nunca"
+    },
+    notify: {
+      enabled: "API Key habilitada",
+      disabled: "API Key deshabilitada",
+      toggle_error: "No se pudo cambiar el estado de la API Key"
+    },
+    action: {
+      enable: "Habilitar",
+      disable: "Deshabilitar"
+    },
+    // Shown when a tenancy-level role is selected: such a key reaches every
+    // tenant in the account, so the tenant field stops being a boundary.
+    tenancy_role_warning: "Este rol otorga acceso a todos los locales de la cuenta. El local seleccionado es informativo, no un l\xEDmite de seguridad."
+  },
   // Resource labels for admin panel
   resource: {
+    tenancy: {
+      serviceAccounts: {
+        label: "Cuentas de Servicio",
+        name: "Nombre",
+        tenant: "Local",
+        roles: "Roles",
+        expiration: "Expiraci\xF3n",
+        status: "Estado",
+        token: "Clave",
+        expires_at: "Expira",
+        last_used_at: "\xDAltimo uso",
+        created_at: "Creado"
+      }
+    },
     // Groups
     groups: {
       system_resources: "Recursos de Sistema",
@@ -512,6 +559,34 @@ const dashSpanish = {
     all_products: "Todos los Productos",
     has_modifiers: "Personalizable",
     no_more_products: "No hay m\xE1s productos"
+  },
+  // JSON Color Selector - extracción de tema desde imagen
+  colorSelector: {
+    imageExtractor: {
+      title_ai: "Generador de Tema con IA",
+      title_local: "Tema desde Imagen",
+      upload_prompt: "Sube una Imagen para Extraer Colores",
+      upload_hint: "Selecciona un archivo de imagen y extraeremos autom\xE1ticamente una paleta de colores",
+      upload_button: "Elegir Imagen",
+      drop_hint: "o arr\xE1strala aqu\xED",
+      invalid_file_type: "Por favor selecciona un archivo de imagen v\xE1lido",
+      file_too_large: "El archivo debe pesar menos de %{limit}MB",
+      extracting: "Extrayendo colores de la imagen...",
+      extracted_colors: "Colores Extra\xEDdos (%{count} colores encontrados)",
+      dominant_label: "Dominante",
+      uploaded_image_alt: "Imagen subida",
+      no_palette_error: "Primero extrae los colores de una imagen",
+      theme_generation_failed: "No se pudo generar el tema",
+      theme_description_label: "Descripci\xF3n del Tema (Opcional)",
+      theme_description_placeholder: "Opcional: Describe el estilo de tema que deseas (ej: 'moderno y minimalista', 'c\xE1lido y acogedor', 'corporativo profesional')",
+      apply_colors_button: "Aplicar Colores",
+      generate_button: "Generar Tema con IA",
+      generating_button: "Generando...",
+      apply_colors_help_label: "Aplicar Colores:",
+      apply_colors_help_desc: "Aplica la paleta extra\xEDda a los colores base de tu tema localmente \u2014 sin usar IA",
+      generate_help_label: "Generar Tema con IA:",
+      generate_help_desc: "Usa IA para crear un esquema de color completo basado en los colores extra\xEDdos y tu descripci\xF3n"
+    }
   }
 };
 var es_default = __spreadValues(__spreadValues({}, raSpanish), dashSpanish);

package/dist/providers/i18n/languages.js

@@ -2,7 +2,9 @@ import enMessages from "./en";
 import esMessages from "./es";
 const en = enMessages;
 const es = esMessages;
+import { mergeTranslations } from "./mergeTranslations";
 export {
   en,
-  es
+  es,
+  mergeTranslations
 };

package/dist/providers/i18n/mergeTranslations.js

@@ -0,0 +1,18 @@
+const isPlainObject = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const mergeTranslations = (...sources) => {
+  const result = {};
+  for (const source of sources) {
+    if (!isPlainObject(source)) continue;
+    for (const key of Object.keys(source)) {
+      const incoming = source[key];
+      const existing = result[key];
+      result[key] = isPlainObject(existing) && isPlainObject(incoming) ? mergeTranslations(existing, incoming) : incoming;
+    }
+  }
+  return result;
+};
+var mergeTranslations_default = mergeTranslations;
+export {
+  mergeTranslations_default as default,
+  mergeTranslations
+};

package/dist/templates/ResourceTemplateCreate.js

@@ -40,15 +40,18 @@ const ResourceTemplateCreate = (props) => {
     return `/${path}`.replace(/\/+/g, "/");
   };
   const onCreate = (data) => {
+    var _a, _b;
     const translatedLabel = translate(resourceConfig.label, { _: resourceConfig.label });
     if (_showNotifyAfterSubmit) {
       notify("dash.resource.created", { type: "success" });
     }
     if (_showDialogAfterSubmit) {
+      const successOverride = (_a = resourceConfig == null ? void 0 : resourceConfig.createSuccessDialog) == null ? void 0 : _a.call(resourceConfig, data);
+      const overrideTitle = typeof (successOverride == null ? void 0 : successOverride.title) === "string" ? translate(successOverride.title, { _: successOverride.title }) : successOverride == null ? void 0 : successOverride.title;
       dialog({
         variant: "info",
-        title: translate("dash.resource.created"),
-        content: translate("dash.resource.created_message", { label: translatedLabel }),
+        title: overrideTitle != null ? overrideTitle : translate("dash.resource.created"),
+        content: (_b = successOverride == null ? void 0 : successOverride.content) != null ? _b : translate("dash.resource.created_message", { label: translatedLabel }),
         onConfirm: () => {
           switch (resourceConfig == null ? void 0 : resourceConfig.redirectAfterCreate) {
             case false:

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@dashadmin/dash-admin",
-	"version": "1.3.44",
+	"version": "1.3.45",
 	"main": "dist/index.js",
 	"type": "module",
 	"scripts": {
@@ -27,6 +27,9 @@
 	"dependencies": {
 		"@capacitor/core": "^7.4.2",
 		"@capacitor/push-notifications": "^7.0.1",
+		"antd": "latest",
+		"@tanstack/react-query": "latest",
+		"@tanstack/react-query-persist-client": "latest",
 		"@emotion/react": "latest",
 		"@emotion/styled": "latest",
 		"@mui/material": "^7.3.10",

package/src/components/serviceAccount/ApiKeyRevealDialog.tsx

@@ -0,0 +1,129 @@
+import React, { useState } from "react";
+import Alert from "@mui/material/Alert";
+import Box from "@mui/material/Box";
+import IconButton from "@mui/material/IconButton";
+import Tooltip from "@mui/material/Tooltip";
+import Typography from "@mui/material/Typography";
+import ContentCopyIcon from "@mui/icons-material/ContentCopy";
+import CheckIcon from "@mui/icons-material/Check";
+import { useI18nBridge } from "../../contexts/I18nBridgeContext";
+
+export interface IApiKeyRevealContentProps {
+    /** The plaintext token, shown exactly once. */
+    token: string;
+    /** Name of the key, for context. */
+    name?: string | null;
+}
+
+/**
+ * One-time reveal of a newly issued API key.
+ *
+ * The plaintext credential is never persisted in recoverable form - only a
+ * short display prefix is stored - so this is the single moment the operator
+ * can copy it.
+ *
+ * Designed to be passed as the `content` of the framework dialog via a
+ * resource's `createSuccessDialog`, so it inherits the app's dialog chrome
+ * rather than introducing a second dialog system:
+ *
+ *   createSuccessDialog: (data) => data?.plain_text_token
+ *       ? { title: '...', content: <ApiKeyRevealContent token={data.plain_text_token} name={data.name} /> }
+ *       : null,
+ */
+export const ApiKeyRevealContent: React.FC<IApiKeyRevealContentProps> = ({ token, name }) => {
+    // DialogServiceProvider is mounted ABOVE <Admin> in DASHAppProviders, so
+    // dialog content renders outside React Admin's i18n context and
+    // useTranslate() would silently fall through to the English defaults.
+    // The bridge is the supported way to translate from out there - same
+    // pattern as AppMaterialMenu.
+    const { i18nProvider, locale } = useI18nBridge();
+    const [copied, setCopied] = useState(false);
+
+    const translate = React.useCallback(
+        (key: string, options?: any) => {
+            if (i18nProvider?.translate) {
+                try {
+                    return i18nProvider.translate(key, options);
+                } catch {
+                    return options?._ ?? key;
+                }
+            }
+            return options?._ ?? key;
+        },
+        // locale is a dependency so the text re-renders on a language switch.
+        [i18nProvider, locale]
+    );
+
+    const handleCopy = async () => {
+        try {
+            await navigator.clipboard.writeText(token);
+            setCopied(true);
+            setTimeout(() => setCopied(false), 2000);
+        } catch {
+            // Clipboard API unavailable (insecure context or denied permission).
+            // The value stays selectable so the operator can still copy it by
+            // hand - never leave them without a path to the secret.
+            setCopied(false);
+        }
+    };
+
+    return (
+        <Box>
+            <Alert severity="warning" sx={{ mb: 2 }}>
+                {translate("serviceAccount.reveal.warning", {
+                    _: "This is the only time this key will be shown. It cannot be recovered later — if you lose it, you will have to issue a new one.",
+                })}
+            </Alert>
+
+            {name ? (
+                <Typography variant="body2" sx={{ mb: 1 }}>
+                    {translate("serviceAccount.reveal.forKey", { _: "Key" })}: <strong>{name}</strong>
+                </Typography>
+            ) : null}
+
+            <Box
+                sx={{
+                    display: "flex",
+                    alignItems: "center",
+                    gap: 1,
+                    p: 1.5,
+                    borderRadius: 1,
+                    border: (theme) => `1px solid ${theme.palette.divider}`,
+                    bgcolor: (theme) =>
+                        theme.palette.mode === "dark" ? "rgba(255,255,255,0.04)" : "rgba(0,0,0,0.04)",
+                }}
+            >
+                <Box
+                    component="code"
+                    sx={{
+                        flex: 1,
+                        fontFamily: "monospace",
+                        fontSize: "0.875rem",
+                        wordBreak: "break-all",
+                        userSelect: "all",
+                    }}
+                >
+                    {token}
+                </Box>
+
+                <Tooltip
+                    title={
+                        copied
+                            ? translate("serviceAccount.reveal.copied", { _: "Copied" })
+                            : translate("serviceAccount.reveal.copy", { _: "Copy" })
+                    }
+                >
+                    <IconButton onClick={handleCopy} size="small" aria-label="copy api key">
+                        {copied ? (
+                            <CheckIcon color="success" fontSize="small" />
+                        ) : (
+                            <ContentCopyIcon fontSize="small" />
+                        )}
+                    </IconButton>
+                </Tooltip>
+            </Box>
+        </Box>
+    );
+};
+
+export default ApiKeyRevealContent;

package/src/components/serviceAccount/ServiceAccountStatusSwitch.tsx

@@ -0,0 +1,99 @@
+import React, { useState } from "react";
+import { useRecordContext, useNotify, useRefresh } from "react-admin";
+import { useAxios } from "dash-axios-hook";
+import Box from "@mui/material/Box";
+import Switch from "@mui/material/Switch";
+import FormControlLabel from "@mui/material/FormControlLabel";
+import CircularProgress from "@mui/material/CircularProgress";
+import { IDashAutoAdminCustomFieldComponent } from "dash-auto-admin";
+import { useI18nBridge } from "../../contexts/I18nBridgeContext";
+
+/**
+ * Enable/disable switch for a service account API key.
+ *
+ * Deliberately NOT a form field. Status is changed through the dedicated
+ * enable/disable endpoints rather than the update payload, for two reasons:
+ *
+ *  - The update contract rejects everything except role_ids, so submitting a
+ *    status would 422.
+ *  - Disabling must not rotate the credential. The endpoints flip a flag and
+ *    leave the token untouched, so re-enabling restores the same key rather
+ *    than forcing every integration to redeploy a new secret.
+ *
+ * The switch therefore acts immediately and refreshes, instead of waiting for
+ * a form save that would never carry it.
+ */
+const ServiceAccountStatusSwitch: React.FC<IDashAutoAdminCustomFieldComponent> = ({
+    resourceConfig,
+}) => {
+    const record = useRecordContext();
+    const notify = useNotify();
+    const refresh = useRefresh();
+    const axios = useAxios();
+    const { i18nProvider } = useI18nBridge();
+    const [loading, setLoading] = useState(false);
+
+    const translate = React.useCallback(
+        (key: string, fallback: string) => {
+            try {
+                return i18nProvider?.translate(key, { _: fallback }) ?? fallback;
+            } catch {
+                return fallback;
+            }
+        },
+        [i18nProvider]
+    );
+
+    if (!record) return null;
+
+    const isActive = record.status === "active";
+
+    const handleToggle = async () => {
+        setLoading(true);
+        try {
+            const action = isActive ? "disable" : "enable";
+
+            await axios.post(`${resourceConfig.model}/${record.id}/${action}`);
+
+            notify(
+                isActive
+                    ? translate("serviceAccount.notify.disabled", "API key disabled")
+                    : translate("serviceAccount.notify.enabled", "API key enabled"),
+                { type: "success" }
+            );
+
+            refresh();
+        } catch (error) {
+            console.error("ServiceAccountStatusSwitch: toggle failed", error);
+            notify(
+                translate("serviceAccount.notify.toggle_error", "Could not change the key status"),
+                { type: "error" }
+            );
+        } finally {
+            setLoading(false);
+        }
+    };
+
+    return (
+        <Box sx={{ display: "flex", alignItems: "center", gap: 1, my: 1 }}>
+            <FormControlLabel
+                control={
+                    <Switch
+                        checked={isActive}
+                        onChange={handleToggle}
+                        disabled={loading}
+                        color="success"
+                    />
+                }
+                label={
+                    isActive
+                        ? translate("serviceAccount.status.active", "Active")
+                        : translate("serviceAccount.status.disabled", "Disabled")
+                }
+            />
+            {loading ? <CircularProgress size={16} /> : null}
+        </Box>
+    );
+};
+
+export default ServiceAccountStatusSwitch;

package/src/providers/i18n/en.ts

@@ -311,8 +311,57 @@ const dashEnglish = {
 		auto_reset_notice: 'This screen will automatically reset in 30 seconds',
 		loading: 'Loading...',
 	},
+	// Service account API keys
+	serviceAccount: {
+		reveal: {
+			title: 'Copy your API key now',
+			warning:
+				'This is the only time this key will be shown. It cannot be recovered later — if you lose it, you will have to issue a new one.',
+			forKey: 'Key',
+			copy: 'Copy',
+			copied: 'Copied',
+			dismiss: 'I have saved it',
+		},
+		status: {
+			active: 'Active',
+			disabled: 'Disabled',
+		},
+		expiration: {
+			'1': '1 day',
+			'7': '7 days',
+			'30': '30 days',
+			never: 'Never',
+		},
+		notify: {
+			enabled: 'API key enabled',
+			disabled: 'API key disabled',
+			toggle_error: 'Could not change the key status',
+		},
+		action: {
+			enable: 'Enable',
+			disable: 'Disable',
+		},
+		// Shown when a tenancy-level role is selected: such a key reaches every
+		// tenant in the account, so the tenant field stops being a boundary.
+		tenancy_role_warning:
+			'This role grants access to every tenant in the account. The selected tenant is informational, not a security boundary.',
+	},
 	// Resource labels for admin panel
 	resource: {
+		tenancy: {
+			serviceAccounts: {
+				label: 'Service Accounts',
+				name: 'Name',
+				tenant: 'Tenant',
+				roles: 'Roles',
+				expiration: 'Expiration',
+				status: 'Status',
+				token: 'Key',
+				expires_at: 'Expires',
+				last_used_at: 'Last used',
+				created_at: 'Created',
+			},
+		},
 		// Groups
 		groups: {
 			system_resources: 'System Resources',
@@ -525,6 +574,37 @@ const dashEnglish = {
 		has_modifiers: 'Customizable',
 		no_more_products: 'No more products',
 	},
+	// JSON Color Selector - image-based theme extraction
+	colorSelector: {
+		imageExtractor: {
+			title_ai: 'AI Theme Generator',
+			title_local: 'Theme from Image',
+			upload_prompt: 'Upload an Image to Extract Colors',
+			upload_hint: "Select an image file and we'll automatically extract a color palette",
+			upload_button: 'Choose Image',
+			drop_hint: 'or drag and drop it here',
+			invalid_file_type: 'Please select a valid image file',
+			file_too_large: 'File size must be less than %{limit}MB',
+			extracting: 'Extracting colors from image...',
+			extracted_colors: 'Extracted Colors (%{count} colors found)',
+			dominant_label: 'Dominant',
+			uploaded_image_alt: 'Uploaded image',
+			no_palette_error: 'Please extract colors from an image first',
+			theme_generation_failed: 'Failed to generate theme',
+			theme_description_label: 'Theme Description (Optional)',
+			theme_description_placeholder:
+				"Optional: Describe the theme style you want (e.g., 'modern and minimalist', 'warm and cozy', 'professional corporate')",
+			apply_colors_button: 'Apply Colors',
+			generate_button: 'Generate AI Theme',
+			generating_button: 'Generating...',
+			apply_colors_help_label: 'Apply Colors:',
+			apply_colors_help_desc:
+				'Maps the extracted palette to your base theme colors locally — no AI involved',
+			generate_help_label: 'Generate AI Theme:',
+			generate_help_desc:
+				'Uses AI to create a complete color scheme based on extracted colors and your description',
+		},
+	},
 };
 
 export default {

package/src/providers/i18n/es.ts

@@ -318,8 +318,57 @@ const dashSpanish = {
 		auto_reset_notice: 'Esta pantalla se reiniciará automáticamente en 30 segundos',
 		loading: 'Cargando...',
 	},
+	// Service account API keys
+	serviceAccount: {
+		reveal: {
+			title: 'Copia tu API Key ahora',
+			warning:
+				'Esta es la única vez que se mostrará esta clave. No se puede recuperar más adelante — si la pierdes, tendrás que emitir una nueva.',
+			forKey: 'Clave',
+			copy: 'Copiar',
+			copied: 'Copiado',
+			dismiss: 'La he guardado',
+		},
+		status: {
+			active: 'Activa',
+			disabled: 'Deshabilitada',
+		},
+		expiration: {
+			'1': '1 día',
+			'7': '7 días',
+			'30': '30 días',
+			never: 'Nunca',
+		},
+		notify: {
+			enabled: 'API Key habilitada',
+			disabled: 'API Key deshabilitada',
+			toggle_error: 'No se pudo cambiar el estado de la API Key',
+		},
+		action: {
+			enable: 'Habilitar',
+			disable: 'Deshabilitar',
+		},
+		// Shown when a tenancy-level role is selected: such a key reaches every
+		// tenant in the account, so the tenant field stops being a boundary.
+		tenancy_role_warning:
+			'Este rol otorga acceso a todos los locales de la cuenta. El local seleccionado es informativo, no un límite de seguridad.',
+	},
 	// Resource labels for admin panel
 	resource: {
+		tenancy: {
+			serviceAccounts: {
+				label: 'Cuentas de Servicio',
+				name: 'Nombre',
+				tenant: 'Local',
+				roles: 'Roles',
+				expiration: 'Expiración',
+				status: 'Estado',
+				token: 'Clave',
+				expires_at: 'Expira',
+				last_used_at: 'Último uso',
+				created_at: 'Creado',
+			},
+		},
 		// Groups
 		groups: {
 			system_resources: 'Recursos de Sistema',
@@ -531,6 +580,37 @@ const dashSpanish = {
 		has_modifiers: 'Personalizable',
 		no_more_products: 'No hay más productos',
 	},
+	// JSON Color Selector - extracción de tema desde imagen
+	colorSelector: {
+		imageExtractor: {
+			title_ai: 'Generador de Tema con IA',
+			title_local: 'Tema desde Imagen',
+			upload_prompt: 'Sube una Imagen para Extraer Colores',
+			upload_hint: 'Selecciona un archivo de imagen y extraeremos automáticamente una paleta de colores',
+			upload_button: 'Elegir Imagen',
+			drop_hint: 'o arrástrala aquí',
+			invalid_file_type: 'Por favor selecciona un archivo de imagen válido',
+			file_too_large: 'El archivo debe pesar menos de %{limit}MB',
+			extracting: 'Extrayendo colores de la imagen...',
+			extracted_colors: 'Colores Extraídos (%{count} colores encontrados)',
+			dominant_label: 'Dominante',
+			uploaded_image_alt: 'Imagen subida',
+			no_palette_error: 'Primero extrae los colores de una imagen',
+			theme_generation_failed: 'No se pudo generar el tema',
+			theme_description_label: 'Descripción del Tema (Opcional)',
+			theme_description_placeholder:
+				"Opcional: Describe el estilo de tema que deseas (ej: 'moderno y minimalista', 'cálido y acogedor', 'corporativo profesional')",
+			apply_colors_button: 'Aplicar Colores',
+			generate_button: 'Generar Tema con IA',
+			generating_button: 'Generando...',
+			apply_colors_help_label: 'Aplicar Colores:',
+			apply_colors_help_desc:
+				'Aplica la paleta extraída a los colores base de tu tema localmente — sin usar IA',
+			generate_help_label: 'Generar Tema con IA:',
+			generate_help_desc:
+				'Usa IA para crear un esquema de color completo basado en los colores extraídos y tu descripción',
+		},
+	},
 };
 
 export default {

package/src/providers/i18n/languages.tsx

@@ -3,3 +3,6 @@ import esMessages from './es';
 
 export const en = enMessages;
 export const es = esMessages;
+
+export { mergeTranslations } from './mergeTranslations';
+export type { TranslationMessages } from './mergeTranslations';

package/src/providers/i18n/mergeTranslations.ts

@@ -0,0 +1,53 @@
+/**
+ * Deep-merge translation message trees.
+ *
+ * Apps compose their messages as `{ ...dashAdminEs, ...customSpanish }`. That
+ * spread is shallow, so any top-level key defined on BOTH sides is replaced
+ * wholesale by the app's version - every core key underneath it is silently
+ * dropped. Apps worked around this by hand-merging one extra level for
+ * `resource`, but that only moved the problem down a level: core's
+ * `resource.tenancy.*` is still erased by an app that defines any
+ * `resource.tenancy` key of its own.
+ *
+ * This merges recursively instead, so core can ship translations for a subtree
+ * an app also contributes to. App values still win on leaf collisions.
+ *
+ * Arrays are replaced, not concatenated - a translation array is a complete
+ * value (e.g. a list of month names), never something to append to.
+ *
+ * @example
+ *   mergeTranslations(dashAdminEs, customSpanish)
+ *   // core:  resource.tenancy.serviceAccounts.label
+ *   // app:   resource.tenancy.tenants.label
+ *   // -> both survive
+ */
+export type TranslationMessages = Record<string, any>;
+
+const isPlainObject = (value: unknown): value is TranslationMessages =>
+	typeof value === 'object' &&
+	value !== null &&
+	!Array.isArray(value);
+
+export const mergeTranslations = (
+	...sources: (TranslationMessages | undefined | null)[]
+): TranslationMessages => {
+	const result: TranslationMessages = {};
+
+	for (const source of sources) {
+		if (!isPlainObject(source)) continue;
+
+		for (const key of Object.keys(source)) {
+			const incoming = source[key];
+			const existing = result[key];
+
+			result[key] =
+				isPlainObject(existing) && isPlainObject(incoming)
+					? mergeTranslations(existing, incoming)
+					: incoming;
+		}
+	}
+
+	return result;
+};
+
+export default mergeTranslations;

package/src/templates/ResourceTemplateCreate.tsx

@@ -45,10 +45,25 @@ export const ResourceTemplateCreate: FC<IResourceTemplate> = (props) => {
 			notify('dash.resource.created', { type: 'success' });
 		}
 		if (_showDialogAfterSubmit) {
+			// A resource may override the success dialog to surface values the
+			// API returns exactly once (e.g. a generated secret that is never
+			// recoverable afterwards).
+			const successOverride = resourceConfig?.createSuccessDialog?.(data);
+
+			// A string title is treated as a translation key (with itself as
+			// fallback), matching how labels and menu titles behave elsewhere.
+			// JSX titles are rendered as-is.
+			const overrideTitle =
+				typeof successOverride?.title === 'string'
+					? translate(successOverride.title, { _: successOverride.title })
+					: successOverride?.title;
+
 			dialog({
 				variant: 'info',
-				title: translate('dash.resource.created'),
-				content: translate('dash.resource.created_message', { label: translatedLabel }),
+				title: overrideTitle ?? translate('dash.resource.created'),
+				content:
+					successOverride?.content ??
+					translate('dash.resource.created_message', { label: translatedLabel }),
 				onConfirm: () => {
 					switch (resourceConfig?.redirectAfterCreate) {
 						case false: