@hed-hog/core 0.0.356 → 0.0.359

package/hedhog/frontend/messages/en.json

@@ -76,6 +76,7 @@
     "tabAccounts": "Accounts",
     "tabSessions": "Sessions",
     "tabMcpTokens": "MCP Tokens",
+    "tabTokens": "Tokens",
     "breadcrumbLabel": "Account",
     "home": "Home",
     "title": "Account",
@@ -139,12 +140,12 @@
       "home": "Home",
       "core": "Core"
     },
-    "title": "Manage setting options",
-    "description": "Manage options for list-type settings (combobox and checkbox), organized by group and subgroup.",
+    "title": "Setting Lists",
+    "description": "Manage items for list-type settings (combobox and checkbox).",
     "searchPlaceholder": "Search by name, slug, description or option...",
     "loading": "Loading settings...",
     "emptyTitle": "No list settings found",
-    "emptyDescriptionNoSettings": "The selected group has no list settings (combobox/checkbox) with options.",
+    "emptyDescriptionNoSettings": "There are no list-type settings (combobox/checkbox) configured.",
     "emptyDescriptionFiltered": "No setting matched the current filter.",
     "itemCount": "{count, plural, one {# item} other {# items}}",
     "emptyOptions": "No options configured.",
@@ -153,7 +154,18 @@
     "optionsSavedError": "Could not update options.",
     "optionsClearedSuccess": "List cleared successfully.",
     "optionsClearedError": "Could not clear the list.",
+    "viewMode": {
+      "list": "List",
+      "cards": "Cards"
+    },
+    "columns": {
+      "group": "Group",
+      "name": "Name",
+      "type": "Type",
+      "items": "Items"
+    },
     "actions": {
+      "refresh": "Refresh",
       "editOptions": "Edit list",
       "clearOptions": "Clear list",
       "addOption": "Add option",
@@ -1221,6 +1233,10 @@
     "selectWhatsAppProfile": "Select a WhatsApp profile",
     "selectStorageProfile": "Select a storage profile",
     "storageProfileEmptyState": "No storage profiles found.",
+    "selectAiProfile": "Select an AI profile",
+    "aiProfileEmptyState": "No AI profiles found.",
+    "selectOAuthProfile": "Select an OAuth profile",
+    "oauthProfileEmptyState": "No OAuth profiles found.",
     "mailProfile": {
       "nameLabel": "Name *",
       "namePlaceholder": "My Mail Profile",
@@ -2056,6 +2072,49 @@
     "revokeSuccess": "API key revoked",
     "revokeFailure": "Failed to revoke API key"
   },
+  "Tokens": {
+    "title": "Access Tokens",
+    "description": "Create and manage tokens for MCP server and REST API access",
+    "createToken": "Create Token",
+    "createTokenTitle": "Create Token",
+    "createTokenDescription": "Choose the token type and give it a name to identify it later",
+    "tokenTypeLabel": "Token Type",
+    "typeMcp": "MCP",
+    "typeApi": "API",
+    "tokenNameLabel": "Token Name",
+    "tokenNamePlaceholder": "e.g. My Application",
+    "tokenCreatedTitle": "Token Created",
+    "tokenCreatedWarning": "This token is shown only once. Copy it now and store it safely.",
+    "tokenCreatedLabel": "Your new token",
+    "closeDialog": "Close",
+    "mcpUrlLabel": "MCP Server URL",
+    "name": "Name",
+    "type": "Type",
+    "tokenPrefix": "Token Prefix",
+    "lastUsed": "Last Used",
+    "createdAt": "Created At",
+    "never": "Never",
+    "today": "Today",
+    "daysAgo": "{days} days ago",
+    "noTokens": "No tokens yet. Create one to get started.",
+    "revokeTokenTitle": "Revoke Token",
+    "revokeTokenDescription": "This token will stop working immediately. This action cannot be undone.",
+    "cancel": "Cancel",
+    "revokeConfirm": "Revoke",
+    "closeSheet": "Done",
+    "createFailure": "Failed to create token",
+    "revokeSuccess": "Token revoked",
+    "revokeFailure": "Failed to revoke token",
+    "usageTitle": "Usage Instructions",
+    "serverUrlLabel": "Server URL",
+    "yourToken": "your-token",
+    "mcpUsageDesc": "Configure your MCP client with the server URL below and pass the token as an Authorization header.",
+    "mcpUsageHeader": "Add this header to your MCP client configuration:",
+    "mcpUsageExampleLabel": "Example (Claude Desktop / Cursor):",
+    "apiUsageDesc": "Use this token to authenticate REST API requests by passing it as a Bearer token in the Authorization header.",
+    "apiUsageHeader": "Add this header to every request:",
+    "apiUsageExampleLabel": "Example (curl):"
+  },
   "McpFloatingChat": {
     "title": "MCP Chat",
     "openFullPage": "Open full view",
@@ -2280,6 +2339,11 @@
     "fieldOrganization": "Organization ID",
     "fieldRedirectUri": "Redirect URI",
     "fieldTenantId": "Tenant ID",
+    "callbackUrlsSectionTitle": "Callback URLs",
+    "callbackUrlsDescription": "Register these URLs in your OAuth application settings.",
+    "addCallbackUrl": "Add URL",
+    "noCallbackUrls": "No callback URLs configured.",
+    "callbackUrlPlaceholder": "https://yourdomain.com/callback/...",
     "showPassword": "Show value",
     "hidePassword": "Hide value"
   }

package/hedhog/frontend/messages/pt.json

@@ -76,6 +76,7 @@
     "tabAccounts": "Contas",
     "tabSessions": "Sessões",
     "tabMcpTokens": "Tokens MCP",
+    "tabTokens": "Tokens",
     "breadcrumbLabel": "Conta",
     "home": "Home",
     "title": "Conta",
@@ -139,12 +140,12 @@
       "home": "Home",
       "core": "Core"
     },
-    "title": "Gerenciar opções de configurações",
-    "description": "Gerencie as opções das settings do tipo lista (combobox e checkbox), organizadas por grupo e subgrupo.",
+    "title": "Listas de Configuração",
+    "description": "Gerencie os itens das configurações do tipo lista (combobox e checkbox).",
     "searchPlaceholder": "Pesquisar por nome, slug, descrição ou opção...",
     "loading": "Carregando configurações...",
     "emptyTitle": "Nenhuma setting de lista encontrada",
-    "emptyDescriptionNoSettings": "O grupo selecionado não possui settings de lista (combobox/checkbox) com opções.",
+    "emptyDescriptionNoSettings": "Não há configurações do tipo lista (combobox/checkbox) cadastradas.",
     "emptyDescriptionFiltered": "Nenhuma setting encontrada para o filtro informado.",
     "itemCount": "{count, plural, one {# item} other {# itens}}",
     "emptyOptions": "Nenhuma opção cadastrada.",
@@ -153,7 +154,18 @@
     "optionsSavedError": "Não foi possível atualizar as opções.",
     "optionsClearedSuccess": "Lista limpa com sucesso.",
     "optionsClearedError": "Não foi possível limpar a lista.",
+    "viewMode": {
+      "list": "Lista",
+      "cards": "Cards"
+    },
+    "columns": {
+      "group": "Grupo",
+      "name": "Nome",
+      "type": "Tipo",
+      "items": "Itens"
+    },
     "actions": {
+      "refresh": "Atualizar",
       "editOptions": "Editar lista",
       "clearOptions": "Limpar lista",
       "addOption": "Adicionar opção",
@@ -1224,6 +1236,10 @@
     "selectWhatsAppProfile": "Selecione um perfil de WhatsApp",
     "selectStorageProfile": "Selecione um perfil de armazenamento",
     "storageProfileEmptyState": "Nenhum perfil de armazenamento encontrado.",
+    "selectAiProfile": "Selecione um perfil de IA",
+    "aiProfileEmptyState": "Nenhum perfil de IA encontrado.",
+    "selectOAuthProfile": "Selecione um perfil OAuth",
+    "oauthProfileEmptyState": "Nenhum perfil OAuth encontrado.",
     "mailProfile": {
       "nameLabel": "Nome *",
       "namePlaceholder": "Meu Perfil de Email",
@@ -2111,6 +2127,49 @@
     "revokeSuccess": "Chave de API revogada",
     "revokeFailure": "Falha ao revogar a chave de API"
   },
+  "Tokens": {
+    "title": "Tokens de Acesso",
+    "description": "Crie e gerencie tokens para acesso ao servidor MCP e à API REST",
+    "createToken": "Criar Token",
+    "createTokenTitle": "Criar Token",
+    "createTokenDescription": "Escolha o tipo do token e dê um nome para identificá-lo depois",
+    "tokenTypeLabel": "Tipo de Token",
+    "typeMcp": "MCP",
+    "typeApi": "API",
+    "tokenNameLabel": "Nome do Token",
+    "tokenNamePlaceholder": "ex.: Minha Aplicação",
+    "tokenCreatedTitle": "Token Criado",
+    "tokenCreatedWarning": "Este token é exibido apenas uma vez. Copie-o agora e guarde em local seguro.",
+    "tokenCreatedLabel": "Seu novo token",
+    "closeDialog": "Fechar",
+    "mcpUrlLabel": "URL do Servidor MCP",
+    "name": "Nome",
+    "type": "Tipo",
+    "tokenPrefix": "Prefixo do Token",
+    "lastUsed": "Último Uso",
+    "createdAt": "Criado Em",
+    "never": "Nunca",
+    "today": "Hoje",
+    "daysAgo": "há {days} dias",
+    "noTokens": "Nenhum token ainda. Crie um para começar.",
+    "revokeTokenTitle": "Revogar Token",
+    "revokeTokenDescription": "Este token deixará de funcionar imediatamente. Esta ação não pode ser desfeita.",
+    "cancel": "Cancelar",
+    "revokeConfirm": "Revogar",
+    "closeSheet": "Concluir",
+    "createFailure": "Falha ao criar o token",
+    "revokeSuccess": "Token revogado",
+    "revokeFailure": "Falha ao revogar o token",
+    "usageTitle": "Instruções de Uso",
+    "serverUrlLabel": "URL do Servidor",
+    "yourToken": "seu-token",
+    "mcpUsageDesc": "Configure seu cliente MCP com a URL do servidor abaixo e passe o token como header de autorização.",
+    "mcpUsageHeader": "Adicione este header na configuração do seu cliente MCP:",
+    "mcpUsageExampleLabel": "Exemplo (Claude Desktop / Cursor):",
+    "apiUsageDesc": "Use este token para autenticar requisições à API REST passando-o como Bearer token no header Authorization.",
+    "apiUsageHeader": "Adicione este header em cada requisição:",
+    "apiUsageExampleLabel": "Exemplo (curl):"
+  },
   "McpFloatingChat": {
     "title": "Chat MCP",
     "openFullPage": "Abrir visão completa",
@@ -2335,6 +2394,11 @@
     "fieldOrganization": "ID da Organização",
     "fieldRedirectUri": "URI de Redirecionamento",
     "fieldTenantId": "Tenant ID",
+    "callbackUrlsSectionTitle": "URLs de Callback",
+    "callbackUrlsDescription": "Registre estas URLs nas configurações do seu aplicativo OAuth.",
+    "addCallbackUrl": "Adicionar URL",
+    "noCallbackUrls": "Nenhuma URL de callback configurada.",
+    "callbackUrlPlaceholder": "https://seudominio.com/callback/...",
     "showPassword": "Mostrar valor",
     "hidePassword": "Ocultar valor"
   }

package/hedhog/table/file.yaml

@@ -1,7 +1,7 @@
 columns:
   - type: pk
   - name: filename # nome original do arquivo
-  - name: path # caminho relativo ou URL do arquivo
+  - name: path # caminho/chave real do arquivo no storage
   - name: provider_id
     type: fk
     references:

package/hedhog/table/mcp_api_key.yaml

@@ -12,6 +12,10 @@ columns:
     type: varchar
   - name: token_prefix
     type: varchar
+  - name: type
+    type: varchar
+    length: 10
+    default: mcp
   - name: last_used_at
     type: datetime
     isNullable: true

package/hedhog/table/webhook_action.yaml

@@ -12,6 +12,9 @@ columns:
     enum:
       - email
       - whatsapp_evolution
+      - http_request
+      - internal_api
+      - app_command
   - name: name
     type: varchar
     length: 127
@@ -25,7 +28,7 @@ columns:
       - inactive
     default: active
   - type: fk
-    name: mail_profile_id
+    name: integration_profile_id
     isNullable: true
     references:
       table: integration_profile
@@ -73,6 +76,59 @@ columns:
   - name: whatsapp_token
     type: text
     isNullable: true
+  - name: http_url
+    type: text
+    isNullable: true
+  - name: http_method
+    type: varchar
+    length: 16
+    isNullable: true
+  - name: http_headers
+    type: json
+    isNullable: true
+  - name: http_query
+    type: json
+    isNullable: true
+  - name: http_body
+    type: text
+    isNullable: true
+  - name: http_timeout_ms
+    type: int
+    isNullable: true
+  - name: http_retry_count
+    type: int
+    isNullable: true
+  - name: internal_api_path
+    type: text
+    isNullable: true
+  - name: internal_api_method
+    type: varchar
+    length: 16
+    isNullable: true
+  - name: internal_api_query
+    type: json
+    isNullable: true
+  - name: internal_api_body
+    type: json
+    isNullable: true
+  - name: internal_api_token
+    type: text
+    isNullable: true
+  - type: fk
+    name: internal_api_user_id
+    isNullable: true
+    references:
+      table: user
+      column: id
+      onDelete: set null
+      onUpdate: cascade
+  - name: app_command_slug
+    type: varchar
+    length: 127
+    isNullable: true
+  - name: app_command_params
+    type: json
+    isNullable: true
   - type: created_at
   - type: updated_at
 indices:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hed-hog/core",
-  "version": "0.0.356",
+  "version": "0.0.359",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "dependencies": {
@@ -27,17 +27,18 @@
     "playwright": "^1.49.0",
     "png-to-ico": "^2.1.8",
     "qrcode": "^1.5.4",
+    "redis": "4.7.1",
     "rxjs": "^7.8.2",
     "sharp": "^0.34.2",
     "speakeasy": "^2.0.0",
     "uuid": "^11.1.0",
     "@modelcontextprotocol/sdk": "^1.12.0",
     "@hed-hog/api-locale": "0.0.14",
+    "@hed-hog/api-pagination": "0.0.7",
     "@hed-hog/api-mail": "0.0.9",
+    "@hed-hog/api-prisma": "0.0.6",
     "@hed-hog/api-types": "0.0.1",
-    "@hed-hog/api-pagination": "0.0.7",
-    "@hed-hog/api": "0.0.8",
-    "@hed-hog/api-prisma": "0.0.6"
+    "@hed-hog/api": "0.0.8"
   },
   "exports": {
     ".": {

package/src/auth/guards/auth.guard.ts

@@ -1,5 +1,6 @@
 import { IS_PUBLIC_KEY, WITH_NO_ROLE, WITH_ROLE } from '@hed-hog/api';
 import { getLocaleText } from '@hed-hog/api-locale';
+import { PrismaService } from '@hed-hog/api-prisma';
 import {
   CanActivate,
   ExecutionContext,
@@ -8,6 +9,7 @@ import {
 } from '@nestjs/common';
 import { Reflector } from '@nestjs/core';
 import { Request } from 'express';
+import { SecurityService } from '../../security/security.service';
 import { TokenService } from '../../token/token.service';
 
 @Injectable()
@@ -15,6 +17,8 @@ export class AuthGuard implements CanActivate {
   constructor(
     private token: TokenService,
     private reflector: Reflector,
+    private prisma: PrismaService,
+    private security: SecurityService,
   ) { }
 
   async canActivate(context: ExecutionContext): Promise<boolean> {
@@ -37,6 +41,10 @@ export class AuthGuard implements CanActivate {
     const token = this.extractTokenFromHeader(request);
     const locale = request.headers['locale'] || request.headers['accept-language'] || 'en';
 
+    if (token?.startsWith('hedhog_api_')) {
+      return this.verifyApiKey(request, token, isPublic);
+    }
+
     // If endpoint requires role/authentication and no token provided
     if (!token) {
       if (isPublic) {
@@ -76,6 +84,30 @@ export class AuthGuard implements CanActivate {
     return true;
   }
 
+  private async verifyApiKey(request: Request, token: string, isPublic: boolean): Promise<boolean> {
+    const hash = this.security.hashWithPepper(token);
+    const apiKey = await this.prisma.mcp_api_key.findFirst({
+      where: { token_hash: hash, type: 'api', revoked_at: null },
+    });
+
+    if (!apiKey) {
+      if (isPublic) return true;
+      throw new UnauthorizedException('Invalid API key');
+    }
+    if (apiKey.expires_at && apiKey.expires_at <= new Date()) {
+      if (isPublic) return true;
+      throw new UnauthorizedException('API key expired');
+    }
+
+    this.prisma.mcp_api_key.update({
+      where: { id: apiKey.id },
+      data: { last_used_at: new Date() },
+    }).catch(() => {});
+
+    request['auth'] = { sub: apiKey.user_id, sessionId: null };
+    return true;
+  }
+
   private extractTokenFromHeader(request: Request): string | undefined {
     const [type, token] = request.headers.authorization?.split(' ') ?? [];
 

package/src/file/file.controller.ts

@@ -8,6 +8,7 @@ import {
   forwardRef,
   Get,
   Inject,
+  Logger,
   Param,
   ParseIntPipe,
   Post,
@@ -29,11 +30,50 @@ import { FileService } from './file.service';
 @Role()
 @Controller('file')
 export class FileController {
+  private readonly logger = new Logger(FileController.name);
+
   constructor(
     @Inject(forwardRef(() => FileService))
     private readonly fileService: FileService,
   ) {}
 
+  private renderDownloadErrorHtml(locale: string, error: any): string {
+    const errorTitle = getLocaleText('file.download.error_title', locale);
+    const errorMessage = getLocaleText('file.download.error_message', locale);
+    const errorDetailsLabel = getLocaleText('file.download.error_details', locale);
+    const goBackText = getLocaleText('file.download.go_back', locale);
+
+    const templateData = {
+      locale: locale || 'en',
+      errorTitle,
+      errorMessage,
+      errorDetailsLabel,
+      errorDetails: error?.message || 'Unknown error occurred',
+      goBackText,
+    };
+
+    try {
+      const templatePath = join(__dirname, 'templates', 'download-error.html');
+      const templateSource = readFileSync(templatePath, 'utf-8');
+      const template = Handlebars.compile(templateSource);
+      return template(templateData);
+    } catch (templateError) {
+      this.logger.warn(
+        `Download error template missing or unreadable: ${templateError instanceof Error ? templateError.message : String(templateError)}`,
+      );
+
+      const safe = {
+        errorTitle: Handlebars.escapeExpression(String(errorTitle)),
+        errorMessage: Handlebars.escapeExpression(String(errorMessage)),
+        errorDetailsLabel: Handlebars.escapeExpression(String(errorDetailsLabel)),
+        errorDetails: Handlebars.escapeExpression(String(templateData.errorDetails)),
+        goBackText: Handlebars.escapeExpression(String(goBackText)),
+      };
+
+      return `<!doctype html><html lang="${Handlebars.escapeExpression(locale || 'en')}"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>${safe.errorTitle}</title></head><body><h1>${safe.errorTitle}</h1><p>${safe.errorMessage}</p><p><strong>${safe.errorDetailsLabel}</strong> ${safe.errorDetails}</p><button type="button" onclick="history.back()">${safe.goBackText}</button></body></html>`;
+    }
+  }
+
   @Get()
   async list(@Pagination() paginationParams) {
     return this.fileService.getFiles(paginationParams);
@@ -45,11 +85,16 @@ export class FileController {
   }
 
   @Put('open/:id')
-  async getTempOpenURL(@Param('id', ParseIntPipe) id: number) {
+  async getTempOpenURL(
+    @Param('id', ParseIntPipe) id: number,
+    @Req() req: Request,
+  ) {
+    const file = await this.fileService.get(id);
+    const token = this.fileService.createDownloadToken(file.path, 3600);
+    const origin = `${req.protocol}://${req.get('host')}`;
+
     return {
-      url: await this.fileService.tempOpenURL(
-        (await this.fileService.get(id)).path,
-      ),
+      url: `${origin}/file/open/${encodeURIComponent(token)}`,
     };
   }
 
@@ -96,27 +141,7 @@ export class FileController {
       return;
 
     } catch (error:any) {
-      // Buscar traduções
-      const errorTitle = getLocaleText('file.download.error_title', locale);
-      const errorMessage = getLocaleText('file.download.error_message', locale);
-      const errorDetailsLabel = getLocaleText('file.download.error_details', locale);
-      const goBackText = getLocaleText('file.download.go_back', locale);
-      
-      // Ler e compilar template
-      const templatePath = join(__dirname, 'templates', 'download-error.html');
-      const templateSource = readFileSync(templatePath, 'utf-8');
-      const template = Handlebars.compile(templateSource);
-      
-      // Renderizar template com dados
-      const html = template({
-        locale: locale || 'en',
-        errorTitle,
-        errorMessage,
-        errorDetailsLabel,
-        errorDetails: error?.message || 'Unknown error occurred',
-        goBackText,
-      });
-      
+      const html = this.renderDownloadErrorHtml(locale, error);
       res.status(400).set('Content-Type', 'text/html').send(html);
       return;
     }
@@ -176,23 +201,7 @@ export class FileController {
       return;
 
     } catch (error:any) {
-      const errorTitle = getLocaleText('file.download.error_title', locale);
-      const errorMessage = getLocaleText('file.download.error_message', locale);
-      const errorDetailsLabel = getLocaleText('file.download.error_details', locale);
-      const goBackText = getLocaleText('file.download.go_back', locale);
-
-      const templatePath = join(__dirname, 'templates', 'download-error.html');
-      const templateSource = readFileSync(templatePath, 'utf-8');
-      const template = Handlebars.compile(templateSource);
-
-      const html = template({
-        locale: locale || 'en',
-        errorTitle,
-        errorMessage,
-        errorDetailsLabel,
-        errorDetails: error?.message || 'Unknown error occurred',
-        goBackText,
-      });
+      const html = this.renderDownloadErrorHtml(locale, error);
 
       res.status(400).set('Content-Type', 'text/html').send(html);
       return;