@hed-hog/core 0.0.355 → 0.0.358

package/hedhog/data/setting_subgroup.yaml

@@ -30,6 +30,14 @@
     en: Rules for retaining and automatically removing old user notifications
     pt: Regras para retenção e remoção automática de notificações antigas de usuários
 
+- slug: maintenance-mode
+  name:
+    en: Maintenance Mode
+    pt: Modo de Manutenção
+  description:
+    en: Controls whether the system is presented as temporarily unavailable for maintenance
+    pt: Controla se o sistema é apresentado como temporariamente indisponível para manutenção
+
 - slug: email-password-auth
   name:
     en: Email and Password Authentication
@@ -94,6 +102,14 @@
     en: Limits and policies for concurrent user sessions
     pt: Limites e políticas para sessões simultâneas de usuários
 
+- slug: admin-login-page
+  name:
+    en: Administration Login Page
+    pt: Página de Login da Administração
+  description:
+    en: Controls which OAuth providers are visible on the Admin login page
+    pt: Controla quais provedores OAuth são visíveis na página de login do Admin
+
 - slug: regional-settings
   name:
     en: Regional Settings
@@ -246,21 +262,13 @@
     en: Google Cloud Storage authentication settings
     pt: Configurações de autenticação do Google Cloud Storage
 
-- slug: openai
-  name:
-    en: OpenAI
-    pt: OpenAI
-  description:
-    en: OpenAI service credential settings
-    pt: Configurações de credenciais do serviço OpenAI
-
-- slug: gemini
+- slug: do-spaces-storage
   name:
-    en: Gemini
-    pt: Gemini
+    en: DigitalOcean Spaces
+    pt: DigitalOcean Spaces
   description:
-    en: Google Gemini service credential settings
-    pt: Configurações de credenciais do serviço Google Gemini
+    en: DigitalOcean Spaces bucket access and optional CDN settings
+    pt: Configurações de acesso ao bucket e CDN opcional do DigitalOcean Spaces
 
 - slug: outbox-general
   name:

package/hedhog/frontend/app/account/components/connected-accounts.tsx.ejs

@@ -9,14 +9,15 @@ import {
   CardHeader,
   CardTitle,
 } from '@/components/ui/card';
+import {
+  formatIntegrationProviderName,
+  IntegrationLogo,
+  normalizeIntegrationProvider,
+} from '@/components/ui/integration-logo';
 import { useApp } from '@hed-hog/next-app-provider';
 import { Link as LinkIcon, Unlink } from 'lucide-react';
 import { useTranslations } from 'next-intl';
 import Link from 'next/link';
-import FacebookIcon from '../../../../../../../public/facebook.svg';
-import GithubIcon from '../../../../../../../public/github.svg';
-import GoogleIcon from '../../../../../../../public/google.svg';
-import MicrosoftIcon from '../../../../../../../public/microsoft.svg';
 
 export function ConnectedAccounts() {
   const { getSettingValue, request, setAccessToken, showToastHandler, user } =
@@ -24,25 +25,18 @@ export function ConnectedAccounts() {
   const t = useTranslations('core.ConnectedAccounts');
   const availableProviders = getSettingValue('providers') || '[]';
 
-  const providerIcons: Record<string, React.ComponentType<any>> = {
-    google: GoogleIcon,
-    facebook: FacebookIcon,
-    github: GithubIcon,
-    microsoft: MicrosoftIcon,
-  };
-
   const providers = Array.isArray(availableProviders)
     ? availableProviders.map((p: any) => {
         if (typeof p === 'string') {
           return {
             id: p,
             name: p.charAt(0).toUpperCase() + p.slice(1),
-            icon: providerIcons[p] ?? (() => null),
+            normalizedId: normalizeIntegrationProvider(p),
           };
         }
         return {
           ...p,
-          icon: providerIcons[p.id] ?? (() => null),
+          normalizedId: normalizeIntegrationProvider(p.id),
         };
       })
     : [];
@@ -50,7 +44,7 @@ export function ConnectedAccounts() {
   const handleDisconnect = async (email: string, providerName: string) => {
     try {
       const { data }: any = await request({
-        url: `/oauth/${providerName.toLowerCase()}`,
+        url: `/oauth/${normalizeIntegrationProvider(providerName)}`,
         method: 'DELETE',
         data: { email },
       });
@@ -66,8 +60,10 @@ export function ConnectedAccounts() {
   };
 
   const getConnectionInfo = (providerName: string) => {
+    const normalizedProviderName = normalizeIntegrationProvider(providerName);
     const accounts = (user?.user_account ?? []).filter(
-      (ua) => ua.provider === providerName.toLowerCase()
+      (ua) =>
+        normalizeIntegrationProvider(ua.provider) === normalizedProviderName
     );
 
     return {
@@ -85,7 +81,7 @@ export function ConnectedAccounts() {
       </CardHeader>
       <CardContent className="space-y-4 px-6 pb-6">
         {providers?.map((provider: any) => {
-          const { isConnected, account } = getConnectionInfo(provider.name);
+          const { isConnected, account } = getConnectionInfo(provider.id);
 
           return (
             <div
@@ -94,11 +90,20 @@ export function ConnectedAccounts() {
             >
               <div className="flex items-center gap-4">
                 <div className="flex size-10 items-center justify-center rounded-lg bg-muted">
-                  <img className="size-5" src={provider.icon.src} />
+                  <IntegrationLogo
+                    provider={provider.id}
+                    size={20}
+                    decorative
+                  />
                 </div>
                 <div>
                   <div className="flex items-center gap-2">
-                    <p className="font-medium">{provider.name}</p>
+                    <p className="font-medium">
+                      {formatIntegrationProviderName(
+                        provider.id,
+                        provider.name
+                      )}
+                    </p>
                     {Boolean(isConnected) && (
                       <Badge variant="default" className="text-xs">
                         {t('connected')}
@@ -118,7 +123,7 @@ export function ConnectedAccounts() {
                     variant="outline"
                     size="sm"
                     onClick={() =>
-                      handleDisconnect(String(account?.email), provider.name)
+                      handleDisconnect(String(account?.email), provider.id)
                     }
                   >
                     <Unlink className="mr-2 size-4" />
@@ -126,7 +131,7 @@ export function ConnectedAccounts() {
                   </Button>
                 ) : (
                   <Link
-                    href={`${process.env.NEXT_PUBLIC_API_BASE_URL}/oauth/${provider.name.toLowerCase()}/connect`}
+                    href={`${process.env.NEXT_PUBLIC_API_BASE_URL}/oauth/${provider.normalizedId}/connect`}
                   >
                     <Button type="button" variant="outline" size="sm">
                       <LinkIcon className="mr-2 size-4" />

package/hedhog/frontend/app/account/components/tokens.tsx.ejs

@@ -0,0 +1,421 @@
+'use client';
+
+import { PaginationFooter } from '@/components/entity-list/pagination-footer';
+import {
+  AlertDialog,
+  AlertDialogAction,
+  AlertDialogCancel,
+  AlertDialogContent,
+  AlertDialogDescription,
+  AlertDialogFooter,
+  AlertDialogHeader,
+  AlertDialogTitle,
+} from '@/components/ui/alert-dialog';
+import { Badge } from '@/components/ui/badge';
+import { Button } from '@/components/ui/button';
+import {
+  Card,
+  CardContent,
+  CardDescription,
+  CardHeader,
+  CardTitle,
+} from '@/components/ui/card';
+import { Input } from '@/components/ui/input';
+import { Label } from '@/components/ui/label';
+import {
+  Sheet,
+  SheetDescription,
+  SheetFooter,
+  SheetHeader,
+  SheetTitle,
+} from '@/components/ui/sheet';
+import {
+  Table,
+  TableBody,
+  TableCell,
+  TableHead,
+  TableHeader,
+  TableRow,
+} from '@/components/ui/table';
+import { ResizableSheetContent } from '@/components/ui/resizable-sheet-content';
+import { usePagination } from '@/hooks/use-pagination';
+import { useApp } from '@hed-hog/next-app-provider';
+import { Check, Copy, KeyRound, Plus, Trash2 } from 'lucide-react';
+import { useTranslations } from 'next-intl';
+import { useState } from 'react';
+import { toast } from 'sonner';
+
+type ApiToken = {
+  id: number;
+  name: string;
+  type: 'mcp' | 'api';
+  token_prefix: string;
+  last_used_at: string | null;
+  expires_at: string | null;
+  created_at: string;
+};
+
+function daysSince(
+  date: string | null,
+  t: (key: string, values?: Record<string, unknown>) => string,
+): string {
+  if (!date) return t('never');
+  const days = Math.floor(
+    (Date.now() - new Date(date).getTime()) / 86400000,
+  );
+  if (days === 0) return t('today');
+  return t('daysAgo', { days });
+}
+
+function CopyButton({ value }: { value: string }) {
+  const [copied, setCopied] = useState(false);
+  const handleCopy = () => {
+    navigator.clipboard.writeText(value);
+    setCopied(true);
+    setTimeout(() => setCopied(false), 2000);
+  };
+  return (
+    <Button variant="ghost" size="icon" className="size-7 shrink-0" onClick={handleCopy}>
+      {copied ? (
+        <Check className="size-3.5 text-green-500" />
+      ) : (
+        <Copy className="size-3.5" />
+      )}
+    </Button>
+  );
+}
+
+function CodeRow({ label, value }: { label: string; value: string }) {
+  return (
+    <div className="flex items-center gap-2 rounded-md border bg-muted/40 px-3 py-2">
+      <span className="text-sm text-muted-foreground shrink-0">{label}:</span>
+      <code className="flex-1 text-xs break-all">{value}</code>
+      <CopyButton value={value} />
+    </div>
+  );
+}
+
+export function Tokens() {
+  const { request, getSettingValue } = useApp();
+  const t = useTranslations('core.Tokens');
+
+  const [keyToRevoke, setKeyToRevoke] = useState<number | null>(null);
+  const [isSheetOpen, setIsSheetOpen] = useState(false);
+  const [newKeyName, setNewKeyName] = useState('');
+  const [newKeyType, setNewKeyType] = useState<'mcp' | 'api'>('mcp');
+  const [createdToken, setCreatedToken] = useState<string | null>(null);
+  const [isCopied, setIsCopied] = useState(false);
+  const {
+    items: keys,
+    refetch,
+    page,
+    setPage,
+    totalItems,
+    pageSize,
+    setPageSize,
+  } = usePagination({ url: '/mcp/api-keys' });
+
+  const apiUrl = (getSettingValue('api-url') as string | null)?.replace(/\/$/, '') ?? '';
+  const mcpUrl = apiUrl ? `${apiUrl}/mcp` : '/mcp';
+
+  const handleCreate = async () => {
+    if (!newKeyName.trim()) return;
+    try {
+      const res = await request<ApiToken & { rawToken: string }>({
+        url: '/mcp/api-keys',
+        method: 'POST',
+        data: { name: newKeyName.trim(), type: newKeyType },
+      });
+      setCreatedToken(res.data.rawToken);
+      setNewKeyName('');
+      refetch();
+    } catch {
+      toast.error(t('createFailure'));
+    }
+  };
+
+  const handleRevoke = async (id: number) => {
+    try {
+      await request({ url: `/mcp/api-keys/${id}`, method: 'DELETE' });
+      setKeyToRevoke(null);
+      refetch();
+      toast.success(t('revokeSuccess'));
+    } catch {
+      toast.error(t('revokeFailure'));
+    }
+  };
+
+  const handleCopyToken = () => {
+    if (!createdToken) return;
+    navigator.clipboard.writeText(createdToken);
+    setIsCopied(true);
+    setTimeout(() => setIsCopied(false), 2000);
+  };
+
+  const handleCloseSheet = () => {
+    setIsSheetOpen(false);
+    setCreatedToken(null);
+    setNewKeyName('');
+    setNewKeyType('mcp');
+    setIsCopied(false);
+  };
+
+  return (
+    <>
+      <Card>
+        <CardHeader className="flex flex-row items-start justify-between">
+          <div>
+            <CardTitle>{t('title')}</CardTitle>
+            <CardDescription className="mt-1">{t('description')}</CardDescription>
+          </div>
+          <Button size="sm" onClick={() => setIsSheetOpen(true)}>
+            <Plus className="size-4 mr-2" />
+            {t('createToken')}
+          </Button>
+        </CardHeader>
+        <CardContent className="space-y-4">
+          {(keys as ApiToken[]).length === 0 ? (
+            <div className="flex flex-col items-center gap-2 py-8 text-muted-foreground">
+              <KeyRound className="size-8 opacity-40" />
+              <p className="text-sm">{t('noTokens')}</p>
+            </div>
+          ) : (
+            <Table>
+              <TableHeader>
+                <TableRow>
+                  <TableHead>{t('name')}</TableHead>
+                  <TableHead>{t('type')}</TableHead>
+                  <TableHead>{t('tokenPrefix')}</TableHead>
+                  <TableHead>{t('lastUsed')}</TableHead>
+                  <TableHead>{t('createdAt')}</TableHead>
+                  <TableHead className="w-15" />
+                </TableRow>
+              </TableHeader>
+              <TableBody>
+                {(keys as ApiToken[]).map((key) => (
+                  <TableRow key={key.id}>
+                    <TableCell className="font-medium">{key.name}</TableCell>
+                    <TableCell>
+                      <Badge
+                        variant={key.type === 'mcp' ? 'default' : 'secondary'}
+                        className="text-xs"
+                      >
+                        {key.type === 'mcp' ? t('typeMcp') : t('typeApi')}
+                      </Badge>
+                    </TableCell>
+                    <TableCell>
+                      <code className="rounded bg-muted px-1.5 py-0.5 text-xs">
+                        {key.token_prefix}…
+                      </code>
+                    </TableCell>
+                    <TableCell className="text-muted-foreground text-sm">
+                      {daysSince(key.last_used_at, t as any)}
+                    </TableCell>
+                    <TableCell className="text-muted-foreground text-sm">
+                      {new Date(key.created_at).toLocaleDateString()}
+                    </TableCell>
+                    <TableCell>
+                      <Button
+                        variant="ghost"
+                        size="icon"
+                        className="size-8 text-destructive hover:text-destructive"
+                        onClick={() => setKeyToRevoke(key.id)}
+                      >
+                        <Trash2 className="size-4" />
+                      </Button>
+                    </TableCell>
+                  </TableRow>
+                ))}
+              </TableBody>
+            </Table>
+          )}
+
+          <PaginationFooter
+            currentPage={page}
+            pageSize={pageSize}
+            totalItems={totalItems}
+            onPageChange={setPage}
+            onPageSizeChange={(newSize) => {
+              setPageSize(newSize);
+              setPage(1);
+            }}
+            pageSizeOptions={[10]}
+          />
+        </CardContent>
+      </Card>
+
+      {/* Revoke confirmation */}
+      <AlertDialog
+        open={keyToRevoke !== null}
+        onOpenChange={(open) => !open && setKeyToRevoke(null)}
+      >
+        <AlertDialogContent>
+          <AlertDialogHeader>
+            <AlertDialogTitle>{t('revokeTokenTitle')}</AlertDialogTitle>
+            <AlertDialogDescription>
+              {t('revokeTokenDescription')}
+            </AlertDialogDescription>
+          </AlertDialogHeader>
+          <AlertDialogFooter>
+            <AlertDialogCancel>{t('cancel')}</AlertDialogCancel>
+            <AlertDialogAction
+              className="bg-destructive text-destructive-foreground hover:bg-destructive/90"
+              onClick={() => keyToRevoke !== null && handleRevoke(keyToRevoke)}
+            >
+              {t('revokeConfirm')}
+            </AlertDialogAction>
+          </AlertDialogFooter>
+        </AlertDialogContent>
+      </AlertDialog>
+
+      {/* Create token sheet */}
+      <Sheet open={isSheetOpen} onOpenChange={(open) => !open && handleCloseSheet()}>
+        <ResizableSheetContent sheetId="create-token" defaultWidth={520}>
+          <SheetHeader>
+            <SheetTitle>
+              {createdToken ? t('tokenCreatedTitle') : t('createTokenTitle')}
+            </SheetTitle>
+            <SheetDescription>
+              {createdToken ? t('tokenCreatedWarning') : t('createTokenDescription')}
+            </SheetDescription>
+          </SheetHeader>
+
+          {createdToken === null ? (
+            <div className="flex flex-col gap-6 px-4 py-2 overflow-y-auto">
+              {/* Type selector */}
+              <div className="space-y-2">
+                <Label>{t('tokenTypeLabel')}</Label>
+                <div className="flex gap-2">
+                  <Button
+                    type="button"
+                    variant={newKeyType === 'mcp' ? 'default' : 'outline'}
+                    size="sm"
+                    className="flex-1"
+                    onClick={() => setNewKeyType('mcp')}
+                  >
+                    {t('typeMcp')}
+                  </Button>
+                  <Button
+                    type="button"
+                    variant={newKeyType === 'api' ? 'default' : 'outline'}
+                    size="sm"
+                    className="flex-1"
+                    onClick={() => setNewKeyType('api')}
+                  >
+                    {t('typeApi')}
+                  </Button>
+                </div>
+              </div>
+
+              {/* Token name */}
+              <div className="space-y-2">
+                <Label htmlFor="token-name">{t('tokenNameLabel')}</Label>
+                <Input
+                  id="token-name"
+                  placeholder={t('tokenNamePlaceholder')}
+                  value={newKeyName}
+                  onChange={(e) => setNewKeyName(e.target.value)}
+                  onKeyDown={(e) => e.key === 'Enter' && handleCreate()}
+                />
+              </div>
+
+              {/* Usage instructions */}
+              <div className="space-y-3 rounded-lg border bg-muted/30 p-4">
+                <p className="text-sm font-medium">{t('usageTitle')}</p>
+
+                {newKeyType === 'mcp' ? (
+                  <div className="space-y-3">
+                    <p className="text-xs text-muted-foreground">{t('mcpUsageDesc')}</p>
+                    <CodeRow label={t('serverUrlLabel')} value={mcpUrl} />
+                    <div className="space-y-1">
+                      <p className="text-xs text-muted-foreground">{t('mcpUsageHeader')}</p>
+                      <pre className="rounded bg-muted px-3 py-2 text-xs overflow-x-auto">
+                        {`Authorization: Bearer <${t('yourToken')}>`}
+                      </pre>
+                    </div>
+                    <div className="space-y-1">
+                      <p className="text-xs text-muted-foreground">{t('mcpUsageExampleLabel')}</p>
+                      <pre className="rounded bg-muted px-3 py-2 text-xs overflow-x-auto whitespace-pre-wrap break-all">
+{`{
+  "mcpServers": {
+    "hub": {
+      "type": "sse",
+      "url": "${mcpUrl}",
+      "headers": {
+        "Authorization": "Bearer <${t('yourToken')}>"
+      }
+    }
+  }
+}`}
+                      </pre>
+                    </div>
+                  </div>
+                ) : (
+                  <div className="space-y-3">
+                    <p className="text-xs text-muted-foreground">{t('apiUsageDesc')}</p>
+                    <CodeRow label={t('serverUrlLabel')} value={apiUrl || '/api'} />
+                    <div className="space-y-1">
+                      <p className="text-xs text-muted-foreground">{t('apiUsageHeader')}</p>
+                      <pre className="rounded bg-muted px-3 py-2 text-xs overflow-x-auto">
+                        {`Authorization: Bearer <${t('yourToken')}>`}
+                      </pre>
+                    </div>
+                    <div className="space-y-1">
+                      <p className="text-xs text-muted-foreground">{t('apiUsageExampleLabel')}</p>
+                      <pre className="rounded bg-muted px-3 py-2 text-xs overflow-x-auto whitespace-pre-wrap break-all">
+                        {`curl -H "Authorization: Bearer <${t('yourToken')}>" \\\n  ${apiUrl || '/api'}/users/me`}
+                      </pre>
+                    </div>
+                  </div>
+                )}
+              </div>
+            </div>
+          ) : (
+            <div className="flex flex-col gap-4 px-4 py-2 overflow-y-auto">
+              <div className="rounded-md border border-yellow-300 bg-yellow-50 px-3 py-2 text-sm text-yellow-800 dark:border-yellow-700 dark:bg-yellow-950 dark:text-yellow-300">
+                {t('tokenCreatedWarning')}
+              </div>
+              <div className="space-y-1">
+                <Label>{t('tokenCreatedLabel')}</Label>
+                <div className="flex items-center gap-2">
+                  <code className="flex-1 rounded border bg-muted px-3 py-2 text-xs break-all">
+                    {createdToken}
+                  </code>
+                  <Button
+                    variant="outline"
+                    size="icon"
+                    onClick={handleCopyToken}
+                    className="shrink-0"
+                  >
+                    {isCopied ? (
+                      <Check className="size-4 text-green-500" />
+                    ) : (
+                      <Copy className="size-4" />
+                    )}
+                  </Button>
+                </div>
+              </div>
+            </div>
+          )}
+
+          <SheetFooter className="px-4">
+            {createdToken === null ? (
+              <>
+                <Button variant="outline" onClick={handleCloseSheet}>
+                  {t('cancel')}
+                </Button>
+                <Button onClick={handleCreate} disabled={!newKeyName.trim()}>
+                  {t('createToken')}
+                </Button>
+              </>
+            ) : (
+              <Button className="w-full" onClick={handleCloseSheet}>
+                {t('closeSheet')}
+              </Button>
+            )}
+          </SheetFooter>
+        </ResizableSheetContent>
+      </Sheet>
+    </>
+  );
+}

package/hedhog/frontend/app/account/layout.tsx.ejs

@@ -38,11 +38,11 @@ export default function AccountLayout({ children }: LayoutProps) {
     { value: '2fa', label: t('tab2fa'), icon: Shield },
     { value: 'accounts', label: t('tabAccounts'), icon: LinkIcon },
     { value: 'sessions', label: t('tabSessions'), icon: Smartphone },
-    { value: 'mcp-tokens', label: t('tabMcpTokens'), icon: KeyRound },
+    { value: 'tokens', label: t('tabTokens'), icon: KeyRound },
   ];
 
   return (
-    <div className="flex min-w-0 flex-col overflow-x-hidden px-4">
+    <div className="flex min-w-0 flex-col px-4">
       <PageHeader
         breadcrumbs={[
           { label: t('home'), href: '/' },
@@ -53,7 +53,10 @@ export default function AccountLayout({ children }: LayoutProps) {
       />
 
       <div className="sticky top-0 z-20 -mx-4 mb-6 border-b border-border bg-background/95 px-4 backdrop-blur supports-backdrop-filter:bg-background/80">
-        <nav className="flex items-end gap-1 overflow-x-auto" aria-label="Account tabs">
+        <nav
+          className="flex items-end gap-1 overflow-x-auto"
+          aria-label="Account tabs"
+        >
           {tabs.map((tab) => {
             const Icon = tab.icon;
             const isActive = pathname.includes(`/${tab.value}`);

package/hedhog/frontend/app/account/mcp-tokens/page.tsx.ejs

@@ -1,5 +1,5 @@
-import { McpTokens } from '../components/mcp-tokens';
+import { redirect } from 'next/navigation';
 
 export default function McpTokensPage() {
-  return <McpTokens />;
+  redirect('/core/account/tokens');
 }

package/hedhog/frontend/app/account/tokens/page.tsx.ejs

@@ -0,0 +1,5 @@
+import { Tokens } from '../components/tokens';
+
+export default function TokensPage() {
+  return <Tokens />;
+}