@hed-hog/core 0.0.366 → 0.0.368

package/hedhog/data/setting_group.yaml

@@ -19,6 +19,9 @@
           pt: Por quanto tempo os navegadores armazenam em cache as imagens de avatar de usuários (em segundos).
         value: 3600
         user_override: false
+        subgroup_id:
+          where:
+            slug: general-system
       - slug: api-body-size-limit
         type: number
         component: input-number
@@ -30,6 +33,9 @@
           pt: Tamanho máximo em megabytes para corpos de requisição recebidos pela API. Aplica-se dinamicamente sem reiniciar (50 = 50 MB)
         value: 50
         user_override: false
+        subgroup_id:
+          where:
+            slug: general-system
       - slug: url
         type: string
         name:
@@ -40,6 +46,9 @@
           pt: A URL base acessível publicamente do sistema para requisições e redirecionamentos de clientes
         value: http://localhost:3200
         user_override: false
+        subgroup_id:
+          where:
+            slug: general-system
       - slug: api-url
         type: string
         name:
@@ -50,6 +59,9 @@
           pt: A URL do endpoint onde o servidor da API está acessível
         value: http://localhost:3100
         user_override: false
+        subgroup_id:
+          where:
+            slug: general-system
       - slug: installed
         type: boolean
         component: switch
@@ -61,6 +73,9 @@
           pt: Indica se o sistema completou os procedimentos de instalação e configuração inicial
         value: false
         user_override: false
+        subgroup_id:
+          where:
+            slug: general-system
       - slug: pagination-page-sizes
         type: array
         component: checkbox
@@ -72,6 +87,9 @@
           pt: Opções de tamanho de página exibidas no seletor de itens por página nas telas paginadas de todo o sistema
         value: '["6","12","24","48","96"]'
         user_override: false
+        subgroup_id:
+          where:
+            slug: general-system
         relations:
           setting_list:
             - value: '6'
@@ -84,16 +102,6 @@
               order: 3
             - value: '96'
               order: 4
-- slug: maintenance
-  icon: database-cog
-  name:
-    en: Maintenance
-    pt: Manutenção
-  description:
-    en: Database maintenance, cleanup operations, and retention policies for long-term system health
-    pt: Manutenção do banco de dados, operações de limpeza e políticas de retenção para a saúde do sistema a longo prazo
-  relations:
-    setting:
       - slug: maintenance-mode-enabled
         type: boolean
         component: switch
@@ -164,6 +172,20 @@
         subgroup_id:
           where:
             slug: notification-retention
+      - slug: stale-async-notification-hours
+        type: number
+        component: input-number
+        name:
+          en: Stale Async Notification Cleanup (hours)
+          pt: Limpeza de Notificações Assíncronas Travadas (horas)
+        description:
+          en: Number of hours an in-progress async notification (progress below 100% and not finished) may run before it is automatically deleted
+          pt: Número de horas que uma notificação assíncrona em andamento (progresso abaixo de 100% e não finalizada) pode ficar antes de ser excluída automaticamente
+        value: 24
+        user_override: false
+        subgroup_id:
+          where:
+            slug: notification-retention
       - slug: access-log-retention-days
         type: number
         component: input-number
@@ -178,7 +200,6 @@
         subgroup_id:
           where:
             slug: access-log-retention
-
       - slug: queue-worker-offline-cleanup-hours
         type: number
         component: input-number
@@ -193,6 +214,90 @@
         subgroup_id:
           where:
             slug: worker-retention
+      - slug: configured-mail
+        type: boolean
+        name:
+          en: Email Configured
+          pt: Email Configurado
+        description:
+          en: Indicates whether email notifications are fully configured and operational
+          pt: Indica se as notificações de email estão totalmente configuradas e operacionais
+        value: false
+        user_override: false
+        component: switch
+        subgroup_id:
+          where:
+            slug: mail-configuration
+      - slug: mail-integration-profile-id
+        type: number
+        component: entity-picker
+        name:
+          en: Mail Profile
+          pt: Perfil de Email
+        description:
+          en: Select the mail profile to use for sending system notifications
+          pt: Selecione o perfil de email a usar para enviar notificações do sistema
+        value: '1'
+        user_override: false
+        subgroup_id:
+          where:
+            slug: mail-configuration
+      - slug: ai-openai-profile-id
+        type: number
+        component: entity-picker
+        name:
+          en: OpenAI Profile
+          pt: Perfil OpenAI
+        description:
+          en: Integration profile (type AI / OpenAI) to use for OpenAI features
+          pt: Perfil de integração (tipo IA / OpenAI) a usar para recursos de OpenAI
+        value: ''
+        user_override: false
+        subgroup_id:
+          where:
+            slug: ai-configuration
+      - slug: ai-gemini-profile-id
+        type: number
+        component: entity-picker
+        name:
+          en: Gemini Profile
+          pt: Perfil Gemini
+        description:
+          en: Integration profile (type AI / Gemini) to use for Gemini features
+          pt: Perfil de integração (tipo IA / Gemini) a usar para recursos de Gemini
+        value: ''
+        user_override: false
+        subgroup_id:
+          where:
+            slug: ai-configuration
+      - slug: mcp-enabled
+        type: boolean
+        component: switch
+        name:
+          en: Enable MCP Server
+          pt: Habilitar Servidor MCP
+        description:
+          en: Enable or disable the MCP server and AI chat feature
+          pt: Habilitar ou desabilitar o servidor MCP e o recurso de chat de IA
+        value: true
+        user_override: false
+        subgroup_id:
+          where:
+            slug: mcp-configuration
+      - slug: mcp-ai-profile-id
+        type: number
+        component: entity-picker
+        name:
+          en: AI Profile
+          pt: Perfil de IA
+        description:
+          en: Integration profile (type AI) to use for MCP chat
+          pt: Perfil de integração (tipo IA) a usar no chat MCP
+        value: ''
+        user_override: false
+        subgroup_id:
+          where:
+            slug: mcp-configuration
 - slug: authentication
   icon: lock-password
   name:
@@ -1662,69 +1767,6 @@
               order: 3
             - value: image/tiff
               order: 4
-- slug: 'mail'
-  icon: mail
-  name:
-    en: Mail
-    pt: Email
-  description:
-    en: Configure email service provider, sender address, and credentials for system notifications
-    pt: Configure provedor de serviço de email, endereço do remetente e credenciais para notificações do sistema
-  relations:
-    setting:
-      - slug: configured-mail
-        type: boolean
-        name:
-          en: Email Configured
-          pt: Email Configurado
-        description:
-          en: Indicates whether email notifications are fully configured and operational
-          pt: Indica se as notificações de email estão totalmente configuradas e operacionais
-        value: false
-        user_override: false
-        component: switch
-      - slug: mail-integration-profile-id
-        type: number
-        component: entity-picker
-        name:
-          en: Mail Profile
-          pt: Perfil de Email
-        description:
-          en: Select the mail profile to use for sending system notifications
-          pt: Selecione o perfil de email a usar para enviar notificações do sistema
-        value: '1'
-- slug: ai
-  icon: brain
-  name:
-    en: AI
-    pt: IA
-  description:
-    en: Configure AI service providers and API credentials for intelligent system features
-    pt: Configure provedores de serviço de IA e credenciais de API para recursos inteligentes do sistema
-  relations:
-    setting:
-      - slug: ai-openai-profile-id
-        type: number
-        component: entity-picker
-        name:
-          en: OpenAI Profile
-          pt: Perfil OpenAI
-        description:
-          en: Integration profile (type AI / OpenAI) to use for OpenAI features
-          pt: Perfil de integração (tipo IA / OpenAI) a usar para recursos de OpenAI
-        value: ''
-        user_override: false
-      - slug: ai-gemini-profile-id
-        type: number
-        component: entity-picker
-        name:
-          en: Gemini Profile
-          pt: Perfil Gemini
-        description:
-          en: Integration profile (type AI / Gemini) to use for Gemini features
-          pt: Perfil de integração (tipo IA / Gemini) a usar para recursos de Gemini
-        value: ''
-        user_override: false
 - slug: integration
   icon: webhook
   name:
@@ -1890,38 +1932,6 @@
           where:
             slug: retry-config
 
-- slug: mcp
-  icon: terminal
-  name:
-    en: MCP
-    pt: MCP
-  description:
-    en: Model Context Protocol server and AI chat settings
-    pt: Configurações do servidor MCP e chat de IA
-  relations:
-    setting:
-      - slug: mcp-enabled
-        type: boolean
-        component: switch
-        name:
-          en: Enable MCP Server
-          pt: Habilitar Servidor MCP
-        description:
-          en: Enable or disable the MCP server and AI chat feature
-          pt: Habilitar ou desabilitar o servidor MCP e o recurso de chat de IA
-        value: true
-        user_override: false
-      - slug: mcp-ai-profile-id
-        type: number
-        component: entity-picker
-        name:
-          en: AI Profile
-          pt: Perfil de IA
-        description:
-          en: Integration profile (type AI) to use for MCP chat
-          pt: Perfil de integração (tipo IA) a usar no chat MCP
-        value: ''
-        user_override: false
 - slug: pdf
   icon: file-text
   name:

package/hedhog/data/setting_subgroup.yaml

@@ -325,3 +325,35 @@
   description:
     en: Rules for retaining and automatically removing offline workers
     pt: Regras para retenção e remoção automática de workers offline
+
+- slug: general-system
+  name:
+    en: System
+    pt: Sistema
+  description:
+    en: General system configuration settings
+    pt: Configurações gerais do sistema
+
+- slug: mail-configuration
+  name:
+    en: Email
+    pt: Email
+  description:
+    en: Email service configuration
+    pt: Configuração do serviço de email
+
+- slug: ai-configuration
+  name:
+    en: AI
+    pt: IA
+  description:
+    en: AI provider configuration
+    pt: Configuração de provedores de IA
+
+- slug: mcp-configuration
+  name:
+    en: MCP
+    pt: MCP
+  description:
+    en: Model Context Protocol configuration
+    pt: Configuração do servidor MCP

package/hedhog/frontend/app/integration/profiles/page.tsx.ejs

@@ -597,6 +597,62 @@ const PROVIDER_FIELDS: Record<string, FieldDef[]> = {
       ],
     },
   ],
+  recaptcha: [
+    {
+      key: 'site_key',
+      labelKey: 'fieldSiteKey',
+      type: 'text',
+      required: true,
+      colSpan: true,
+    },
+    {
+      key: 'secret_key',
+      labelKey: 'fieldSecretKey',
+      type: 'password',
+      required: true,
+      colSpan: true,
+    },
+    {
+      key: 'score_threshold',
+      labelKey: 'fieldScoreThreshold',
+      type: 'number',
+      required: false,
+      placeholder: '0.5',
+    },
+  ],
+  'cloudflare-turnstile': [
+    {
+      key: 'site_key',
+      labelKey: 'fieldSiteKey',
+      type: 'text',
+      required: true,
+      colSpan: true,
+    },
+    {
+      key: 'secret_key',
+      labelKey: 'fieldSecretKey',
+      type: 'password',
+      required: true,
+      colSpan: true,
+    },
+  ],
+  altcha: [
+    {
+      key: 'hmac_key',
+      labelKey: 'fieldHmacKey',
+      type: 'password',
+      required: true,
+      colSpan: true,
+    },
+    {
+      key: 'api_url',
+      labelKey: 'fieldApiUrl',
+      type: 'url',
+      required: false,
+      colSpan: true,
+      placeholder: 'https://eu.altcha.org/api/v1',
+    },
+  ],
 };
 
 // ─── Helpers ─────────────────────────────────────────────────────────────────

package/hedhog/frontend/app/roles/page.tsx.ejs

@@ -948,7 +948,10 @@ export default function RolePage() {
                             className="w-full"
                             type="button"
                             variant="outline"
-                            onClick={() => setEditingRole(null)}
+                            onClick={() => {
+                              clearEditDraft();
+                              setEditingRole(null);
+                            }}
                           >
                             {t('cancel')}
                           </Button>

package/hedhog/frontend/app/users/user-logs.tsx.ejs

@@ -0,0 +1,190 @@
+'use client';
+
+import { EmptyState } from '@/components/entity-list';
+import { formatDateTime } from '@/lib/format-date';
+import { User } from '@hed-hog/api-types';
+import { useApp, useQuery } from '@hed-hog/next-app-provider';
+import {
+  Image as ImageIcon,
+  KeyRound,
+  Loader2,
+  Pencil,
+  ScrollText,
+  ShieldMinus,
+  ShieldPlus,
+} from 'lucide-react';
+import { useTranslations } from 'next-intl';
+
+type UserChangeLog = {
+  id: string;
+  actorUserId: string | null;
+  actorName: string | null;
+  actorEmail: string | null;
+  action: string;
+  summary: string;
+  beforeData: string;
+  afterData: string;
+  ipAddress: string;
+  createdAt: string | null;
+};
+
+function getActionIcon(action: string) {
+  switch (action) {
+    case 'update':
+      return Pencil;
+    case 'reset_password':
+      return KeyRound;
+    case 'role_assigned':
+      return ShieldPlus;
+    case 'role_removed':
+      return ShieldMinus;
+    case 'avatar_changed':
+      return ImageIcon;
+    default:
+      return ScrollText;
+  }
+}
+
+function safeParse(raw: string): Record<string, unknown> | null {
+  if (!raw) return null;
+  try {
+    const parsed = JSON.parse(raw);
+    return parsed && typeof parsed === 'object' ? parsed : null;
+  } catch {
+    return null;
+  }
+}
+
+function formatValue(value: unknown) {
+  if (value === null || value === undefined || value === '') return '—';
+  return String(value);
+}
+
+function DiffList({ before, after }: { before: string; after: string }) {
+  const beforeObj = safeParse(before);
+  const afterObj = safeParse(after);
+
+  if (!beforeObj && !afterObj) return null;
+
+  const keys = Array.from(
+    new Set([
+      ...Object.keys(beforeObj ?? {}),
+      ...Object.keys(afterObj ?? {}),
+    ]),
+  );
+
+  if (!keys.length) return null;
+
+  return (
+    <div className="mt-2 space-y-1 rounded-md bg-muted/40 p-2">
+      {keys.map((key) => (
+        <div key={key} className="flex flex-wrap items-center gap-1 text-[11px]">
+          <span className="font-medium text-muted-foreground">{key}:</span>
+          {beforeObj && key in beforeObj && (
+            <span className="rounded bg-rose-50 px-1 py-0.5 text-rose-700 line-through">
+              {formatValue(beforeObj[key])}
+            </span>
+          )}
+          {afterObj && key in afterObj && (
+            <span className="rounded bg-emerald-50 px-1 py-0.5 text-emerald-700">
+              {formatValue(afterObj[key])}
+            </span>
+          )}
+        </div>
+      ))}
+    </div>
+  );
+}
+
+export function UserLogs({ editingUser }: { editingUser: User }) {
+  const { request, currentLocaleCode, getSettingValue } = useApp();
+  const t = useTranslations('core.UserChangeLog');
+  const userId = editingUser?.id;
+
+  const { data: logs = [], isLoading } = useQuery<UserChangeLog[]>({
+    queryKey: ['user-change-logs', userId, currentLocaleCode],
+    queryFn: async () => {
+      const response = await request<{ data: UserChangeLog[] }>({
+        url: `/user/${userId}/log`,
+        method: 'GET',
+      });
+      return response.data?.data || [];
+    },
+    enabled: !!userId,
+  });
+
+  const knownActions = [
+    'update',
+    'reset_password',
+    'role_assigned',
+    'role_removed',
+    'avatar_changed',
+  ];
+  const getActionLabel = (action: string) =>
+    knownActions.includes(action) ? t(action as never) : action;
+
+  if (isLoading) {
+    return (
+      <div className="flex items-center justify-center py-8 text-muted-foreground">
+        <Loader2 className="h-5 w-5 animate-spin" />
+      </div>
+    );
+  }
+
+  return (
+    <div className="space-y-3">
+      <h4 className="text-sm font-medium">{t('title')}</h4>
+
+      <div className="space-y-2">
+        {logs.length ? (
+          logs.map((log) => {
+            const Icon = getActionIcon(log.action);
+            const actor =
+              log.actorName || log.actorEmail || t('systemActor');
+
+            return (
+              <div key={log.id} className="rounded-lg border p-3">
+                <div className="flex items-start gap-3">
+                  <div className="rounded-md bg-slate-50 p-2">
+                    <Icon className="h-5 w-5 text-muted-foreground" />
+                  </div>
+                  <div className="flex-1">
+                    <div className="flex flex-wrap items-center justify-between gap-2">
+                      <p className="text-sm font-medium">
+                        {getActionLabel(log.action)}
+                      </p>
+                      {log.createdAt && (
+                        <span className="text-[11px] text-muted-foreground">
+                          {formatDateTime(
+                            log.createdAt,
+                            getSettingValue,
+                            currentLocaleCode,
+                          )}
+                        </span>
+                      )}
+                    </div>
+                    <p className="text-xs text-muted-foreground">
+                      {t('byActor')} {actor}
+                    </p>
+                    {log.summary && (
+                      <p className="mt-1 text-xs text-muted-foreground">
+                        {log.summary}
+                      </p>
+                    )}
+                    <DiffList before={log.beforeData} after={log.afterData} />
+                  </div>
+                </div>
+              </div>
+            );
+          })
+        ) : (
+          <EmptyState
+            icon={<ScrollText className="h-6 w-6" />}
+            title={t('emptyTitle')}
+            description={t('emptyDescription')}
+          />
+        )}
+      </div>
+    </div>
+  );
+}

package/hedhog/frontend/app/users/user-sheet.tsx.ejs

@@ -66,6 +66,7 @@ import {
   LucideIcon,
   Mail,
   Monitor,
+  ScrollText,
   RefreshCcw,
   Save,
   Shield,
@@ -84,6 +85,7 @@ import { z } from 'zod';
 import { ActiveSessions } from './active-session';
 import { UserIdentifiersSection } from './identifiers';
 import { PermissionsSection } from './permissions';
+import { UserLogs } from './user-logs';
 
 export type UserSheetProps = {
   open: boolean;
@@ -765,6 +767,10 @@ function UserEditSheet({
                 <Monitor className="h-4 w-4" />
                 <span>{t('tabSessions')}</span>
               </TabsTrigger>
+              <TabsTrigger value="logs">
+                <ScrollText className="h-4 w-4" />
+                <span>{t('tabLogs')}</span>
+              </TabsTrigger>
             </TabsList>
           </div>
 
@@ -1110,7 +1116,10 @@ function UserEditSheet({
                 <FormActions
                   statusContent={editDraftStatusContent}
                   cancelLabel={t('cancel')}
-                  onCancel={() => onOpenChange(false)}
+                  onCancel={() => {
+                    clearEditDraft();
+                    onOpenChange(false);
+                  }}
                   submitLabel={t('saveChanges')}
                   submitType="submit"
                   className="pt-2"
@@ -1478,6 +1487,11 @@ function UserEditSheet({
               refetch={handleRefreshUser}
             />
           </TabsContent>
+
+          {/* Logs Tab */}
+          <TabsContent value="logs" className="space-y-4 mt-4 p-4 pt-0">
+            <UserLogs editingUser={editingUser} />
+          </TabsContent>
         </Tabs>
       </ResizableSheetContent>
     </Sheet>

package/hedhog/frontend/messages/en.json

@@ -244,6 +244,7 @@
     "tabIdentifiers": "Identifiers",
     "tabMfa": "MFA",
     "tabSessions": "Sessions",
+    "tabLogs": "Logs",
     "cardLastLoginDescription": "Last Login",
     "cardLastLoginTitle": "Never",
     "securityTitle": "Security Overview",
@@ -944,6 +945,18 @@
     "revokeAllSuccess": "Sessions revoked successfully!",
     "revokeAllFailure": "Failed to revoke sessions"
   },
+  "UserChangeLog": {
+    "title": "Change History",
+    "byActor": "by",
+    "systemActor": "System",
+    "update": "Profile updated",
+    "reset_password": "Password reset",
+    "role_assigned": "Role assigned",
+    "role_removed": "Role removed",
+    "avatar_changed": "Avatar changed",
+    "emptyTitle": "No changes recorded",
+    "emptyDescription": "Administrative changes made to this user will appear here."
+  },
   "UserActiveSessions": {
     "title": "Active Sessions",
     "revokeAll": "Revoke All",
@@ -2355,6 +2368,10 @@
     "fieldMode": "Mode",
     "fieldModeSandbox": "Sandbox",
     "fieldModeProduction": "Production",
+    "fieldSiteKey": "Site Key",
+    "fieldHmacKey": "HMAC Key",
+    "fieldScoreThreshold": "Score Threshold",
+    "fieldApiUrl": "API URL",
     "callbackUrlsSectionTitle": "Callback URLs",
     "callbackUrlsDescription": "Register these URLs in your OAuth application settings.",
     "addCallbackUrl": "Add URL",