@hed-hog/core 0.0.347 → 0.0.350

package/hedhog/data/route.yaml

@@ -1290,6 +1290,15 @@
           slug: admin
       - where:
           slug: admin-access
+- url: /setting/:settingId/options
+  method: PUT
+  type: HTTP
+  relations:
+    role:
+      - where:
+          slug: admin
+      - where:
+          slug: admin-access
 - url: /setting
   method: PUT
   type: HTTP
@@ -2124,6 +2133,16 @@
       - where:
           slug: admin-access
 
+- url: /mcp-chat/:id/messages/stream
+  method: POST
+  type: HTTP
+  relations:
+    role:
+      - where:
+          slug: admin
+      - where:
+          slug: admin-access
+
 - url: /core/pdf/example
   method: GET
   type: HTTP
@@ -2131,3 +2150,117 @@
     role:
       - where:
           slug: admin
+
+- url: /mcp/api-keys
+  method: GET
+  type: HTTP
+  relations:
+    role:
+      - where:
+          slug: admin
+      - where:
+          slug: admin-access
+      - where:
+          slug: user
+
+- url: /mcp/api-keys
+  method: POST
+  type: HTTP
+  relations:
+    role:
+      - where:
+          slug: admin
+      - where:
+          slug: admin-access
+      - where:
+          slug: user
+
+- url: /mcp/api-keys/:id
+  method: DELETE
+  type: HTTP
+  relations:
+    role:
+      - where:
+          slug: admin
+      - where:
+          slug: admin-access
+      - where:
+          slug: user
+
+- url: /notification
+  method: GET
+  type: HTTP
+  relations:
+    role:
+      - where:
+          slug: admin
+      - where:
+          slug: user
+
+- url: /notification/unread-count
+  method: GET
+  type: HTTP
+  relations:
+    role:
+      - where:
+          slug: admin
+      - where:
+          slug: user
+
+- url: /notification/read-all
+  method: PATCH
+  type: HTTP
+  relations:
+    role:
+      - where:
+          slug: admin
+      - where:
+          slug: user
+
+- url: /notification/:id/read
+  method: PATCH
+  type: HTTP
+  relations:
+    role:
+      - where:
+          slug: admin
+      - where:
+          slug: user
+
+- url: /notification/:id/progress
+  method: PATCH
+  type: HTTP
+  relations:
+    role:
+      - where:
+          slug: admin
+      - where:
+          slug: user
+
+- url: /notification/:id
+  method: DELETE
+  type: HTTP
+  relations:
+    role:
+      - where:
+          slug: admin
+      - where:
+          slug: user
+
+- url: /notification
+  method: POST
+  type: HTTP
+  relations:
+    role:
+      - where:
+          slug: admin
+
+- url: /notification
+  method: DELETE
+  type: HTTP
+  relations:
+    role:
+      - where:
+          slug: admin
+      - where:
+          slug: user

package/hedhog/data/setting_group.yaml

@@ -8,6 +8,17 @@
     pt: Configurações gerais do sistema e configurações básicas
   relations:
     setting:
+      - slug: api-body-size-limit
+        type: number
+        component: input-number
+        name:
+          en: API Body Size Limit (MB)
+          pt: Limite do Corpo da Requisição (MB)
+        description:
+          en: Maximum size in megabytes for incoming API request bodies. Applies dynamically without restart (50 = 50 MB)
+          pt: Tamanho máximo em megabytes para corpos de requisição recebidos pela API. Aplica-se dinamicamente sem reiniciar (50 = 50 MB)
+        value: 50
+        user_override: false
       - slug: url
         type: string
         name:
@@ -77,6 +88,34 @@
         subgroup_id:
           where:
             slug: session-retention
+      - slug: webhook-log-retention-days
+        type: number
+        component: input-number
+        name:
+          en: Webhook Log Retention Period
+          pt: Período de Retenção de Logs de Webhook
+        description:
+          en: Number of days to keep incoming webhook execution logs before automatic deletion
+          pt: Número de dias para manter logs de execução de webhooks de entrada antes da exclusão automática
+        value: 30
+        user_override: false
+        subgroup_id:
+          where:
+            slug: webhook-log-retention
+      - slug: notification-retention-days
+        type: number
+        component: input-number
+        name:
+          en: Notification Retention Period
+          pt: Período de Retenção de Notificações
+        description:
+          en: Number of days to keep user notifications before automatic deletion. Unread notifications are also removed after this period
+          pt: Número de dias para manter notificações de usuários antes da exclusão automática. Notificações não lidas também são removidas após este período
+        value: 30
+        user_override: false
+        subgroup_id:
+          where:
+            slug: notification-retention
 - slug: authentication
   icon: lock-password
   name:
@@ -1469,6 +1508,12 @@
               order: 7
             - value: text/plain
               order: 8
+            - value: application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
+              order: 9
+            - value: application/vnd.openxmlformats-officedocument.wordprocessingml.document
+              order: 10
+            - value: application/vnd.openxmlformats-officedocument.presentationml.presentation
+              order: 11
         subgroup_id:
           where:
             slug: storage-general

package/hedhog/data/setting_subgroup.yaml

@@ -14,6 +14,22 @@
     en: Rules for retaining and removing expired user sessions
     pt: Regras para retenção e remoção de sessões expiradas de usuários
 
+- slug: webhook-log-retention
+  name:
+    en: Webhook Log Retention
+    pt: Retenção de Logs de Webhook
+  description:
+    en: Rules for retaining and removing incoming webhook call logs
+    pt: Regras para retenção e remoção de logs de chamadas de webhook de entrada
+
+- slug: notification-retention
+  name:
+    en: Notification Retention
+    pt: Retenção de Notificações
+  description:
+    en: Rules for retaining and automatically removing old user notifications
+    pt: Regras para retenção e remoção automática de notificações antigas de usuários
+
 - slug: email-password-auth
   name:
     en: Email and Password Authentication

package/hedhog/frontend/app/account/components/mcp-tokens.tsx.ejs

@@ -0,0 +1,285 @@
+'use client';
+
+import { PaginationFooter } from '@/components/entity-list/pagination-footer';
+import {
+  AlertDialog,
+  AlertDialogAction,
+  AlertDialogCancel,
+  AlertDialogContent,
+  AlertDialogDescription,
+  AlertDialogFooter,
+  AlertDialogHeader,
+  AlertDialogTitle,
+} from '@/components/ui/alert-dialog';
+import { Button } from '@/components/ui/button';
+import {
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+} from '@/components/ui/card';
+import {
+  Dialog,
+  DialogContent,
+  DialogDescription,
+  DialogFooter,
+  DialogHeader,
+  DialogTitle,
+} from '@/components/ui/dialog';
+import { Input } from '@/components/ui/input';
+import { Label } from '@/components/ui/label';
+import {
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow,
+} from '@/components/ui/table';
+import { usePagination } from '@/hooks/use-pagination';
+import { formatDateTime } from '@/lib/format-date';
+import { useApp } from '@hed-hog/next-app-provider';
+import { Check, Copy, KeyRound, Plus, Trash2 } from 'lucide-react';
+import { useTranslations } from 'next-intl';
+import { useState } from 'react';
+import { toast } from 'sonner';
+
+type McpApiKey = {
+  id: number;
+  name: string;
+  token_prefix: string;
+  last_used_at: string | null;
+  expires_at: string | null;
+  created_at: string;
+};
+
+export function McpTokens() {
+  const { request, getSettingValue } = useApp();
+  const t = useTranslations('core.McpTokens');
+
+  const [keyToRevoke, setKeyToRevoke] = useState<number | null>(null);
+  const [isCreateDialogOpen, setIsCreateDialogOpen] = useState(false);
+  const [newKeyName, setNewKeyName] = useState('');
+  const [createdToken, setCreatedToken] = useState<string | null>(null);
+  const [isCopied, setIsCopied] = useState(false);
+  const [isCopiedUrl, setIsCopiedUrl] = useState(false);
+  const {
+    items: keys,
+    refetch,
+    page,
+    setPage,
+    totalItems,
+    pageSize,
+    setPageSize,
+  } = usePagination({ url: '/mcp/api-keys' });
+
+  const apiUrl = getSettingValue('api-url') as string | null;
+  const mcpUrl = apiUrl ? `${apiUrl.replace(/\/$/, '')}/mcp` : '/mcp';
+
+  const handleCreate = async () => {
+    if (!newKeyName.trim()) return;
+    try {
+      const res = await request<McpApiKey & { rawToken: string }>({
+        url: '/mcp/api-keys',
+        method: 'POST',
+        data: { name: newKeyName.trim() },
+      });
+      setCreatedToken(res.data.rawToken);
+      setNewKeyName('');
+      refetch();
+    } catch {
+      toast.error(t('createFailure'));
+    }
+  };
+
+  const handleRevoke = async (id: number) => {
+    try {
+      await request({ url: `/mcp/api-keys/${id}`, method: 'DELETE' });
+      setKeyToRevoke(null);
+      refetch();
+      toast.success(t('revokeSuccess'));
+    } catch {
+      toast.error(t('revokeFailure'));
+    }
+  };
+
+  const handleCopyToken = () => {
+    if (!createdToken) return;
+    navigator.clipboard.writeText(createdToken);
+    setIsCopied(true);
+    setTimeout(() => setIsCopied(false), 2000);
+  };
+
+  const handleCopyUrl = () => {
+    navigator.clipboard.writeText(mcpUrl);
+    setIsCopiedUrl(true);
+    setTimeout(() => setIsCopiedUrl(false), 2000);
+  };
+
+  const handleCloseCreateDialog = () => {
+    setIsCreateDialogOpen(false);
+    setCreatedToken(null);
+    setNewKeyName('');
+    setIsCopied(false);
+  };
+
+  return (
+    <>
+      <Card>
+        <CardHeader className="flex flex-row items-start justify-between">
+          <div>
+            <CardTitle>{t('title')}</CardTitle>
+            <CardDescription className="mt-1">{t('description')}</CardDescription>
+          </div>
+          <Button size="sm" onClick={() => setIsCreateDialogOpen(true)}>
+            <Plus className="size-4 mr-2" />
+            {t('createToken')}
+          </Button>
+        </CardHeader>
+        <CardContent className="space-y-4">
+          <div className="flex items-center gap-2 rounded-md border bg-muted/40 px-3 py-2">
+            <span className="text-sm text-muted-foreground shrink-0">{t('mcpUrlLabel')}:</span>
+            <code className="flex-1 text-sm break-all">{mcpUrl}</code>
+            <Button variant="ghost" size="icon" className="size-7 shrink-0" onClick={handleCopyUrl}>
+              {isCopiedUrl ? <Check className="size-3.5 text-green-500" /> : <Copy className="size-3.5" />}
+            </Button>
+          </div>
+
+          {(keys as McpApiKey[]).length === 0 ? (
+            <div className="flex flex-col items-center gap-2 py-8 text-muted-foreground">
+              <KeyRound className="size-8 opacity-40" />
+              <p className="text-sm">{t('noTokens')}</p>
+            </div>
+          ) : (
+            <Table>
+              <TableHeader>
+                <TableRow>
+                  <TableHead>{t('name')}</TableHead>
+                  <TableHead>{t('tokenPrefix')}</TableHead>
+                  <TableHead>{t('lastUsed')}</TableHead>
+                  <TableHead>{t('createdAt')}</TableHead>
+                  <TableHead className="w-15" />
+                </TableRow>
+              </TableHeader>
+              <TableBody>
+                {(keys as McpApiKey[]).map((key) => (
+                  <TableRow key={key.id}>
+                    <TableCell className="font-medium">{key.name}</TableCell>
+                    <TableCell>
+                      <code className="rounded bg-muted px-1.5 py-0.5 text-xs">
+                        {key.token_prefix}…
+                      </code>
+                    </TableCell>
+                    <TableCell className="text-muted-foreground text-sm">
+                      {key.last_used_at ? formatDateTime(key.last_used_at, getSettingValue) : t('never')}
+                    </TableCell>
+                    <TableCell className="text-muted-foreground text-sm">
+                      {formatDateTime(key.created_at, getSettingValue)}
+                    </TableCell>
+                    <TableCell>
+                      <Button
+                        variant="ghost"
+                        size="icon"
+                        className="size-8 text-destructive hover:text-destructive"
+                        onClick={() => setKeyToRevoke(key.id)}
+                      >
+                        <Trash2 className="size-4" />
+                      </Button>
+                    </TableCell>
+                  </TableRow>
+                ))}
+              </TableBody>
+            </Table>
+          )}
+
+          <PaginationFooter
+            currentPage={page}
+            pageSize={pageSize}
+            totalItems={totalItems}
+            onPageChange={setPage}
+            onPageSizeChange={(newSize) => {
+              setPageSize(newSize);
+              setPage(1);
+            }}
+            pageSizeOptions={[10]}
+          />
+        </CardContent>
+      </Card>
+
+      {/* Revoke confirmation */}
+      <AlertDialog open={keyToRevoke !== null} onOpenChange={(open) => !open && setKeyToRevoke(null)}>
+        <AlertDialogContent>
+          <AlertDialogHeader>
+            <AlertDialogTitle>{t('revokeTokenTitle')}</AlertDialogTitle>
+            <AlertDialogDescription>{t('revokeTokenDescription')}</AlertDialogDescription>
+          </AlertDialogHeader>
+          <AlertDialogFooter>
+            <AlertDialogCancel>{t('cancel')}</AlertDialogCancel>
+            <AlertDialogAction
+              className="bg-destructive text-destructive-foreground hover:bg-destructive/90"
+              onClick={() => keyToRevoke !== null && handleRevoke(keyToRevoke)}
+            >
+              {t('revokeConfirm')}
+            </AlertDialogAction>
+          </AlertDialogFooter>
+        </AlertDialogContent>
+      </AlertDialog>
+
+      {/* Create token dialog */}
+      <Dialog open={isCreateDialogOpen} onOpenChange={(open) => !open && handleCloseCreateDialog()}>
+        <DialogContent className="sm:max-w-md">
+          {createdToken === null ? (
+            <>
+              <DialogHeader>
+                <DialogTitle>{t('createTokenTitle')}</DialogTitle>
+                <DialogDescription>{t('createTokenDescription')}</DialogDescription>
+              </DialogHeader>
+              <div className="space-y-2 py-2">
+                <Label htmlFor="token-name">{t('tokenNameLabel')}</Label>
+                <Input
+                  id="token-name"
+                  placeholder={t('tokenNamePlaceholder')}
+                  value={newKeyName}
+                  onChange={(e) => setNewKeyName(e.target.value)}
+                  onKeyDown={(e) => e.key === 'Enter' && handleCreate()}
+                />
+              </div>
+              <DialogFooter>
+                <Button variant="outline" onClick={handleCloseCreateDialog}>{t('cancel')}</Button>
+                <Button onClick={handleCreate} disabled={!newKeyName.trim()}>
+                  {t('createToken')}
+                </Button>
+              </DialogFooter>
+            </>
+          ) : (
+            <>
+              <DialogHeader>
+                <DialogTitle>{t('tokenCreatedTitle')}</DialogTitle>
+              </DialogHeader>
+              <div className="space-y-3 py-2">
+                <div className="rounded-md border border-yellow-300 bg-yellow-50 px-3 py-2 text-sm text-yellow-800 dark:border-yellow-700 dark:bg-yellow-950 dark:text-yellow-300">
+                  {t('tokenCreatedWarning')}
+                </div>
+                <div className="space-y-1">
+                  <Label>{t('tokenCreatedLabel')}</Label>
+                  <div className="flex items-center gap-2">
+                    <code className="flex-1 rounded border bg-muted px-3 py-2 text-xs break-all">
+                      {createdToken}
+                    </code>
+                    <Button variant="outline" size="icon" onClick={handleCopyToken} className="shrink-0">
+                      {isCopied ? <Check className="size-4 text-green-500" /> : <Copy className="size-4" />}
+                    </Button>
+                  </div>
+                </div>
+              </div>
+              <DialogFooter>
+                <Button onClick={handleCloseCreateDialog}>{t('closeDialog')}</Button>
+              </DialogFooter>
+            </>
+          )}
+        </DialogContent>
+      </Dialog>
+    </>
+  );
+}

package/hedhog/frontend/app/account/layout.tsx.ejs

@@ -1,14 +1,10 @@
 'use client';
 
 import { PageHeader } from '@/components/entity-list';
-import { Tabs, TabsList, TabsTrigger } from '@/components/ui/tabs';
+import { cn } from '@/lib/utils';
 import {
-  Tooltip,
-  TooltipContent,
-  TooltipTrigger,
-} from '@/components/ui/tooltip';
-import {
-  Link,
+  KeyRound,
+  Link as LinkIcon,
   Lock,
   LucideIcon,
   Mail,
@@ -17,7 +13,8 @@ import {
   User,
 } from 'lucide-react';
 import { useTranslations } from 'next-intl';
-import { usePathname, useRouter } from 'next/navigation';
+import Link from 'next/link';
+import { usePathname } from 'next/navigation';
 import { ReactNode } from 'react';
 
 type LayoutProps = {
@@ -32,7 +29,6 @@ type TabConfig = {
 
 export default function AccountLayout({ children }: LayoutProps) {
   const pathname = usePathname();
-  const router = useRouter();
   const t = useTranslations('core.Profile');
 
   const tabs: TabConfig[] = [
@@ -40,26 +36,13 @@ export default function AccountLayout({ children }: LayoutProps) {
     { value: 'password', label: t('tabPassword'), icon: Lock },
     { value: 'email', label: t('tabEmail'), icon: Mail },
     { value: '2fa', label: t('tab2fa'), icon: Shield },
-    { value: 'accounts', label: t('tabAccounts'), icon: Link },
+    { value: 'accounts', label: t('tabAccounts'), icon: LinkIcon },
     { value: 'sessions', label: t('tabSessions'), icon: Smartphone },
+    { value: 'mcp-tokens', label: t('tabMcpTokens'), icon: KeyRound },
   ];
 
-  const getCurrentTab = () => {
-    if (pathname.includes('/profile')) return 'profile';
-    if (pathname.includes('/password')) return 'password';
-    if (pathname.includes('/email')) return 'email';
-    if (pathname.includes('/2fa')) return '2fa';
-    if (pathname.includes('/accounts')) return 'accounts';
-    if (pathname.includes('/sessions')) return 'sessions';
-    return 'profile';
-  };
-
-  const handleTabChange = (value: string) => {
-    router.push(`/core/account/${value}`);
-  };
-
   return (
-    <div className="flex flex-col pl-4 h-screen">
+    <div className="flex min-w-0 flex-col overflow-x-hidden px-4">
       <PageHeader
         breadcrumbs={[
           { label: t('home'), href: '/' },
@@ -68,38 +51,32 @@ export default function AccountLayout({ children }: LayoutProps) {
         title={t('title')}
         description={t('description')}
       />
-      <div className="py-2">
-        <Tabs value={getCurrentTab()} onValueChange={handleTabChange}>
-          <TabsList className="grid w-full grid-cols-6 lg:w-fit gap-1 rounded-sm">
-            {tabs.map((tab) => {
-              const Icon = tab.icon;
-              const isActive = getCurrentTab() === tab.value;
 
-              return (
-                <Tooltip key={tab.value}>
-                  <TooltipTrigger asChild>
-                    <TabsTrigger
-                      value={tab.value}
-                      className={`gap-2 cursor-pointer hover:bg-primary/10 active:bg-primary/20 rounded-sm ${isActive ? 'text-primary' : 'text-primary/50'}`}
-                    >
-                      <Icon className="size-4" />
-                      <span
-                        className={`hidden sm:inline ${isActive ? 'text-primary' : 'text-primary/50'}`}
-                      >
-                        {tab.label}
-                      </span>
-                    </TabsTrigger>
-                  </TooltipTrigger>
-                  <TooltipContent side="bottom" className="block sm:hidden">
-                    {tab.label}
-                  </TooltipContent>
-                </Tooltip>
-              );
-            })}
-          </TabsList>
-          <div className="mt-2">{children}</div>
-        </Tabs>
+      <div className="sticky top-0 z-20 -mx-4 mb-6 border-b border-border bg-background/95 px-4 backdrop-blur supports-backdrop-filter:bg-background/80">
+        <nav className="flex items-end gap-1 overflow-x-auto" aria-label="Account tabs">
+          {tabs.map((tab) => {
+            const Icon = tab.icon;
+            const isActive = pathname.includes(`/${tab.value}`);
+            return (
+              <Link
+                key={tab.value}
+                href={`/core/account/${tab.value}`}
+                className={cn(
+                  'flex shrink-0 items-center gap-2 border-b-2 px-3 py-3 text-sm font-medium whitespace-nowrap transition-colors',
+                  isActive
+                    ? 'border-primary text-primary'
+                    : 'border-transparent text-muted-foreground hover:border-muted-foreground hover:text-foreground'
+                )}
+              >
+                <Icon className="size-4" />
+                <span className="hidden sm:inline">{tab.label}</span>
+              </Link>
+            );
+          })}
+        </nav>
       </div>
+
+      <div className="min-w-0 pb-25">{children}</div>
     </div>
   );
 }

package/hedhog/frontend/app/account/mcp-tokens/page.tsx.ejs

@@ -0,0 +1,5 @@
+import { McpTokens } from '../components/mcp-tokens';
+
+export default function McpTokensPage() {
+  return <McpTokens />;
+}