@hed-hog/core 0.0.355 → 0.0.358

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hed-hog/core",
-  "version": "0.0.355",
+  "version": "0.0.358",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "dependencies": {
@@ -27,16 +27,17 @@
     "playwright": "^1.49.0",
     "png-to-ico": "^2.1.8",
     "qrcode": "^1.5.4",
+    "redis": "4.7.1",
     "rxjs": "^7.8.2",
     "sharp": "^0.34.2",
     "speakeasy": "^2.0.0",
     "uuid": "^11.1.0",
     "@modelcontextprotocol/sdk": "^1.12.0",
     "@hed-hog/api-locale": "0.0.14",
+    "@hed-hog/api-mail": "0.0.9",
     "@hed-hog/api": "0.0.8",
-    "@hed-hog/api-pagination": "0.0.7",
     "@hed-hog/api-prisma": "0.0.6",
-    "@hed-hog/api-mail": "0.0.9",
+    "@hed-hog/api-pagination": "0.0.7",
     "@hed-hog/api-types": "0.0.1"
   },
   "exports": {

package/src/ai/ai.service.ts

@@ -14,7 +14,7 @@ import { createHash } from 'crypto';
 import pdfParse from 'pdf-parse';
 import { DeleteDTO } from '../dto/delete.dto';
 import { FileService } from '../file/file.service';
-import { IntegrationDeveloperApiService } from '../integration/services/integration-developer-api.service';
+import { buildAiConfigFromIntegration } from '../integration-profile/integration-profile.utils';
 import { SettingService } from '../setting/setting.service';
 import { ChatAgentDTO } from './dto/chat-agent.dto';
 import { ChatDTO } from './dto/chat.dto';
@@ -40,8 +40,6 @@ type AiAttachment = {
   buffer: Buffer;
 };
 
-type AiProviderKeySettingSlug = 'ai-openai-api-key' | 'ai-gemini-api-key';
-
 @Injectable()
 export class AiService implements OnModuleInit {
   private readonly logger = new Logger(AiService.name);
@@ -53,27 +51,18 @@ export class AiService implements OnModuleInit {
     private readonly settingService: SettingService,
     @Inject(forwardRef(() => FileService))
     private readonly fileService: FileService,
-    @Inject(forwardRef(() => IntegrationDeveloperApiService))
-    private readonly integrationApi: IntegrationDeveloperApiService,
   ) {}
 
-  onModuleInit(): void {
-    this.integrationApi.subscribe({
-      eventName: 'core.setting.changed',
-      consumerName: 'core.ai-provider-key-validator',
-      priority: 0,
-      handler: async (event) => {
-        const slug = String(event.payload?.slug || '').trim();
-
-        if (!this.isAiProviderKeySlug(slug)) {
-          return;
-        }
-
-        await this.syncProviderEnabledFlag(slug);
-      },
-    });
-
-    void this.syncAllProviderEnabledFlags();
+  async onModuleInit() {
+    try {
+      const s = await this.settingService.getSettingValues([
+        'ai-openai-profile-id',
+        'ai-gemini-profile-id',
+      ]);
+      if (!Number(s['ai-openai-profile-id']) && !Number(s['ai-gemini-profile-id'])) {
+        this.logger.warn('No AI profiles configured. Set profiles in Settings → AI.');
+      }
+    } catch { /* settings not available yet */ }
   }
 
   async chat(data: ChatDTO, file?: MulterFile) {
@@ -423,119 +412,36 @@ export class AiService implements OnModuleInit {
     return 'gemini-1.5-flash';
   }
 
-  private isAiProviderKeySlug(slug: string): slug is AiProviderKeySettingSlug {
-    return slug === 'ai-openai-api-key' || slug === 'ai-gemini-api-key';
-  }
-
-  private getEnabledSlugFromProviderKey(slug: AiProviderKeySettingSlug) {
-    return slug === 'ai-openai-api-key'
-      ? 'ai-openai-api-key-enabled'
-      : 'ai-gemini-api-key-enabled';
-  }
-
-  private async syncAllProviderEnabledFlags() {
-    const results = await Promise.allSettled([
-      this.syncProviderEnabledFlag('ai-openai-api-key'),
-      this.syncProviderEnabledFlag('ai-gemini-api-key'),
-    ]);
-
-    results.forEach((result, index) => {
-      if (result.status === 'rejected') {
-        const slug = index === 0 ? 'ai-openai-api-key' : 'ai-gemini-api-key';
-        this.logger.warn(
-          `Failed to sync provider availability for ${slug}: ${result.reason instanceof Error ? result.reason.message : String(result.reason)}`,
-        );
-      }
-    });
-  }
-
-  private async syncProviderEnabledFlag(slug: AiProviderKeySettingSlug) {
-    const values = await this.settingService.getSettingValues(slug);
-    const apiKey = String(values?.[slug] || '').trim();
-    const enabledSlug = this.getEnabledSlugFromProviderKey(slug);
-
-    const isValid = slug === 'ai-openai-api-key'
-      ? await this.validateOpenAiKey(apiKey)
-      : await this.validateGeminiKey(apiKey);
-
-    await this.settingService.setValue(enabledSlug, isValid ? 'true' : 'false');
-  }
-
-  private getValidationErrorMessage(error: unknown) {
-    if (axios.isAxiosError(error)) {
-      const providerMessage =
-        error.response?.data?.error?.message ||
-        error.response?.data?.message ||
-        error.message;
-      const status = error.response?.status || 'network';
-      return `${status}: ${providerMessage}`;
-    }
-
-    return error instanceof Error ? error.message : String(error);
-  }
-
-  private async validateOpenAiKey(apiKey?: string | null): Promise<boolean> {
-    const normalizedKey = String(apiKey || '').trim();
-
-    if (!normalizedKey) {
-      return false;
-    }
-
-    try {
-      await axios.get('https://api.openai.com/v1/models', {
-        headers: {
-          Authorization: `Bearer ${normalizedKey}`,
-        },
-        params: {
-          limit: 1,
-        },
-        timeout: 5000,
-      });
+  private async getAiApiKey(provider: AiProvider): Promise<string> {
+    const slug = provider === 'openai' ? 'ai-openai-profile-id' : 'ai-gemini-profile-id';
+    const settings = await this.settingService.getSettingValues([slug]);
+    const profileId = Number(settings[slug]);
 
-      return true;
-    } catch (error) {
-      this.logger.warn(
-        `OpenAI key validation failed: ${this.getValidationErrorMessage(error)}`,
+    if (!profileId) {
+      throw new BadRequestException(
+        `No ${provider} AI profile configured. Set one in Settings → AI.`,
       );
-      return false;
     }
-  }
 
-  private async validateGeminiKey(apiKey?: string | null): Promise<boolean> {
-    const normalizedKey = String(apiKey || '').trim();
+    const profile = await this.prismaService.integration_profile.findUnique({
+      where: { id: profileId },
+      include: { integration_provider: { select: { slug: true } } },
+    });
 
-    if (!normalizedKey) {
-      return false;
+    if (!profile) {
+      throw new BadRequestException(`AI profile ${profileId} not found.`);
     }
 
-    try {
-      await axios.get('https://generativelanguage.googleapis.com/v1beta/models', {
-        params: {
-          key: normalizedKey,
-          pageSize: 1,
-        },
-        timeout: 5000,
-      });
+    const { apiKey } = buildAiConfigFromIntegration(
+      profile.integration_provider.slug,
+      profile.config,
+    );
 
-      return true;
-    } catch (error) {
-      this.logger.warn(
-        `Gemini key validation failed: ${this.getValidationErrorMessage(error)}`,
-      );
-      return false;
+    if (!apiKey) {
+      throw new BadRequestException(`AI profile ${profileId} has no API key configured.`);
     }
-  }
 
-  private async getApiKeys() {
-    const settings = await this.settingService.getSettingValues([
-      'ai-openai-api-key',
-      'ai-gemini-api-key',
-    ]);
-
-    return {
-      openai: settings['ai-openai-api-key'],
-      gemini: settings['ai-gemini-api-key'],
-    };
+    return apiKey;
   }
 
   private async chatWithOpenAi({
@@ -549,13 +455,7 @@ export class AiService implements OnModuleInit {
     systemPrompt?: string;
     attachment?: AiAttachment | null;
   }) {
-    const { openai } = await this.getApiKeys();
-
-    if (!openai) {
-      throw new BadRequestException(
-        'OpenAI API key is not configured (setting "ai-openai-api-key").',
-      );
-    }
+    const openai = await this.getAiApiKey('openai');
 
     const messages: Array<any> = [];
 
@@ -592,13 +492,7 @@ export class AiService implements OnModuleInit {
     model: string;
     instructions: string | null;
   }): Promise<string> {
-    const { openai } = await this.getApiKeys();
-
-    if (!openai) {
-      throw new BadRequestException(
-        'OpenAI API key is not configured (setting "ai-openai-api-key").',
-      );
-    }
+    const openai = await this.getAiApiKey('openai');
 
     const response = await axios.post(
       'https://api.openai.com/v1/assistants',
@@ -629,13 +523,7 @@ export class AiService implements OnModuleInit {
     assistantId: string,
     message: string,
   ): Promise<string> {
-    const { openai } = await this.getApiKeys();
-
-    if (!openai) {
-      throw new BadRequestException(
-        'OpenAI API key is not configured (setting "ai-openai-api-key").',
-      );
-    }
+    const openai = await this.getAiApiKey('openai');
 
     const threadResponse = await axios.post(
       'https://api.openai.com/v1/threads',
@@ -733,13 +621,7 @@ export class AiService implements OnModuleInit {
     systemPrompt?: string;
     attachment?: AiAttachment | null;
   }) {
-    const { gemini } = await this.getApiKeys();
-
-    if (!gemini) {
-      throw new BadRequestException(
-        'Gemini API key is not configured (setting "ai-gemini-api-key").',
-      );
-    }
+    const gemini = await this.getAiApiKey('gemini');
 
     const url = `https://generativelanguage.googleapis.com/v1beta/models/${model}:generateContent?key=${gemini}`;
 

package/src/auth/guards/auth.guard.ts

@@ -1,5 +1,6 @@
 import { IS_PUBLIC_KEY, WITH_NO_ROLE, WITH_ROLE } from '@hed-hog/api';
 import { getLocaleText } from '@hed-hog/api-locale';
+import { PrismaService } from '@hed-hog/api-prisma';
 import {
   CanActivate,
   ExecutionContext,
@@ -8,6 +9,7 @@ import {
 } from '@nestjs/common';
 import { Reflector } from '@nestjs/core';
 import { Request } from 'express';
+import { SecurityService } from '../../security/security.service';
 import { TokenService } from '../../token/token.service';
 
 @Injectable()
@@ -15,6 +17,8 @@ export class AuthGuard implements CanActivate {
   constructor(
     private token: TokenService,
     private reflector: Reflector,
+    private prisma: PrismaService,
+    private security: SecurityService,
   ) { }
 
   async canActivate(context: ExecutionContext): Promise<boolean> {
@@ -37,6 +41,10 @@ export class AuthGuard implements CanActivate {
     const token = this.extractTokenFromHeader(request);
     const locale = request.headers['locale'] || request.headers['accept-language'] || 'en';
 
+    if (token?.startsWith('hedhog_api_')) {
+      return this.verifyApiKey(request, token, isPublic);
+    }
+
     // If endpoint requires role/authentication and no token provided
     if (!token) {
       if (isPublic) {
@@ -76,6 +84,30 @@ export class AuthGuard implements CanActivate {
     return true;
   }
 
+  private async verifyApiKey(request: Request, token: string, isPublic: boolean): Promise<boolean> {
+    const hash = this.security.hashWithPepper(token);
+    const apiKey = await this.prisma.mcp_api_key.findFirst({
+      where: { token_hash: hash, type: 'api', revoked_at: null },
+    });
+
+    if (!apiKey) {
+      if (isPublic) return true;
+      throw new UnauthorizedException('Invalid API key');
+    }
+    if (apiKey.expires_at && apiKey.expires_at <= new Date()) {
+      if (isPublic) return true;
+      throw new UnauthorizedException('API key expired');
+    }
+
+    this.prisma.mcp_api_key.update({
+      where: { id: apiKey.id },
+      data: { last_used_at: new Date() },
+    }).catch(() => {});
+
+    request['auth'] = { sub: apiKey.user_id, sessionId: null };
+    return true;
+  }
+
   private extractTokenFromHeader(request: Request): string | undefined {
     const [type, token] = request.headers.authorization?.split(' ') ?? [];
 

package/src/core.module.ts

@@ -18,7 +18,6 @@ import { FileModule } from './file/file.module';
 import { InstallModule } from './install/install.module';
 import { IntegrationModule } from './integration/integration.module';
 import { LocaleModule as CoreLocaleModule } from './locale/locale.module';
-import { MailProfileModule } from './mail-profile/mail-profile.module';
 import { MailSentModule } from './mail-sent/mail-sent.module';
 import { MailModule } from './mail/mail.module';
 import { McpChatModule } from './mcp-chat/mcp-chat.module';
@@ -42,6 +41,7 @@ import { IsEmailWithSettingsConstraint } from './validators/is-email-with-settin
 import { IsPinCodeWithSettingConstraint } from './validators/is-pin-code-with-setting.validator';
 import { IsStrongPasswordWithSettingsConstraint } from './validators/is-strong-password-with-settings.validator';
 import { ValidatorServiceLocator } from './validators/service-locator';
+import { IntegrationProfileModule } from './integration-profile/integration-profile.module';
 import { WebhookIntegrationModule } from './webhook-integration/webhook-integration.module';
 
 @Global()
@@ -66,7 +66,7 @@ import { WebhookIntegrationModule } from './webhook-integration/webhook-integrat
     forwardRef(() => SystemModule),
     forwardRef(() => SettingModule),
     forwardRef(() => MailModule),
-    forwardRef(() => MailProfileModule),
+    forwardRef(() => IntegrationProfileModule),
     forwardRef(() => MailSentModule),
     forwardRef(() => FileModule),
     forwardRef(() => TaskModule),
@@ -86,7 +86,7 @@ import { WebhookIntegrationModule } from './webhook-integration/webhook-integrat
     UserModule,
     AuthModule,
     MailModule,
-    MailProfileModule,
+    IntegrationProfileModule,
     RouteModule,
     RoleModule,
     MenuModule,

package/src/file/file.controller.ts

@@ -8,6 +8,7 @@ import {
   forwardRef,
   Get,
   Inject,
+  Logger,
   Param,
   ParseIntPipe,
   Post,
@@ -29,11 +30,50 @@ import { FileService } from './file.service';
 @Role()
 @Controller('file')
 export class FileController {
+  private readonly logger = new Logger(FileController.name);
+
   constructor(
     @Inject(forwardRef(() => FileService))
     private readonly fileService: FileService,
   ) {}
 
+  private renderDownloadErrorHtml(locale: string, error: any): string {
+    const errorTitle = getLocaleText('file.download.error_title', locale);
+    const errorMessage = getLocaleText('file.download.error_message', locale);
+    const errorDetailsLabel = getLocaleText('file.download.error_details', locale);
+    const goBackText = getLocaleText('file.download.go_back', locale);
+
+    const templateData = {
+      locale: locale || 'en',
+      errorTitle,
+      errorMessage,
+      errorDetailsLabel,
+      errorDetails: error?.message || 'Unknown error occurred',
+      goBackText,
+    };
+
+    try {
+      const templatePath = join(__dirname, 'templates', 'download-error.html');
+      const templateSource = readFileSync(templatePath, 'utf-8');
+      const template = Handlebars.compile(templateSource);
+      return template(templateData);
+    } catch (templateError) {
+      this.logger.warn(
+        `Download error template missing or unreadable: ${templateError instanceof Error ? templateError.message : String(templateError)}`,
+      );
+
+      const safe = {
+        errorTitle: Handlebars.escapeExpression(String(errorTitle)),
+        errorMessage: Handlebars.escapeExpression(String(errorMessage)),
+        errorDetailsLabel: Handlebars.escapeExpression(String(errorDetailsLabel)),
+        errorDetails: Handlebars.escapeExpression(String(templateData.errorDetails)),
+        goBackText: Handlebars.escapeExpression(String(goBackText)),
+      };
+
+      return `<!doctype html><html lang="${Handlebars.escapeExpression(locale || 'en')}"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>${safe.errorTitle}</title></head><body><h1>${safe.errorTitle}</h1><p>${safe.errorMessage}</p><p><strong>${safe.errorDetailsLabel}</strong> ${safe.errorDetails}</p><button type="button" onclick="history.back()">${safe.goBackText}</button></body></html>`;
+    }
+  }
+
   @Get()
   async list(@Pagination() paginationParams) {
     return this.fileService.getFiles(paginationParams);
@@ -45,11 +85,16 @@ export class FileController {
   }
 
   @Put('open/:id')
-  async getTempOpenURL(@Param('id', ParseIntPipe) id: number) {
+  async getTempOpenURL(
+    @Param('id', ParseIntPipe) id: number,
+    @Req() req: Request,
+  ) {
+    const file = await this.fileService.get(id);
+    const token = this.fileService.createDownloadToken(file.path, 3600);
+    const origin = `${req.protocol}://${req.get('host')}`;
+
     return {
-      url: await this.fileService.tempOpenURL(
-        (await this.fileService.get(id)).path,
-      ),
+      url: `${origin}/file/open/${encodeURIComponent(token)}`,
     };
   }
 
@@ -96,27 +141,7 @@ export class FileController {
       return;
 
     } catch (error:any) {
-      // Buscar traduções
-      const errorTitle = getLocaleText('file.download.error_title', locale);
-      const errorMessage = getLocaleText('file.download.error_message', locale);
-      const errorDetailsLabel = getLocaleText('file.download.error_details', locale);
-      const goBackText = getLocaleText('file.download.go_back', locale);
-      
-      // Ler e compilar template
-      const templatePath = join(__dirname, 'templates', 'download-error.html');
-      const templateSource = readFileSync(templatePath, 'utf-8');
-      const template = Handlebars.compile(templateSource);
-      
-      // Renderizar template com dados
-      const html = template({
-        locale: locale || 'en',
-        errorTitle,
-        errorMessage,
-        errorDetailsLabel,
-        errorDetails: error?.message || 'Unknown error occurred',
-        goBackText,
-      });
-      
+      const html = this.renderDownloadErrorHtml(locale, error);
       res.status(400).set('Content-Type', 'text/html').send(html);
       return;
     }
@@ -176,23 +201,7 @@ export class FileController {
       return;
 
     } catch (error:any) {
-      const errorTitle = getLocaleText('file.download.error_title', locale);
-      const errorMessage = getLocaleText('file.download.error_message', locale);
-      const errorDetailsLabel = getLocaleText('file.download.error_details', locale);
-      const goBackText = getLocaleText('file.download.go_back', locale);
-
-      const templatePath = join(__dirname, 'templates', 'download-error.html');
-      const templateSource = readFileSync(templatePath, 'utf-8');
-      const template = Handlebars.compile(templateSource);
-
-      const html = template({
-        locale: locale || 'en',
-        errorTitle,
-        errorMessage,
-        errorDetailsLabel,
-        errorDetails: error?.message || 'Unknown error occurred',
-        goBackText,
-      });
+      const html = this.renderDownloadErrorHtml(locale, error);
 
       res.status(400).set('Content-Type', 'text/html').send(html);
       return;