@hed-hog/core 0.0.385 → 0.0.387

package/hedhog/data/route.yaml

@@ -57,6 +57,8 @@
           slug: admin
       - where:
           slug: admin-access
+      - where:
+          slug: user
 - url: /sessions/:sessionId/revoke
   method: DELETE
   type: HTTP
@@ -66,6 +68,8 @@
           slug: admin
       - where:
           slug: admin-access
+      - where:
+          slug: user
 - url: /sessions/user
   method: GET
   type: HTTP
@@ -3228,6 +3232,10 @@
   method: GET
   type: HTTP
   relations: *core_user_roles
+- url: /auth/authorize/consent
+  method: POST
+  type: HTTP
+  relations: *core_user_roles
 - url: /auth/roles
   method: GET
   type: HTTP
@@ -3244,6 +3252,10 @@
   method: GET
   type: HTTP
   relations: *core_user_roles
+- url: /oauth/microsoft-entra-id/redeem/connect
+  method: GET
+  type: HTTP
+  relations: *core_user_roles
 - url: /oauth/:provider
   method: DELETE
   type: HTTP

package/hedhog/data/setting_group.yaml

@@ -71,7 +71,7 @@
         description:
           en: 'Base URLs for specific apps, formatted as "app=https://example.com" (one per tag). Used in transactional email links (e.g. password reset) when the request comes from that app, falling back to System URL otherwise.'
           pt: 'URLs base de apps específicos, no formato "app=https://exemplo.com" (uma por tag). Usadas em links de e-mails transacionais (ex.: redefinição de senha) quando a solicitação vem desse app, usando a URL do Sistema como alternativa.'
-        value: '["training=http://localhost:3001"]'
+        value: '["training=http://localhost:3001","class=https://localhost:3002","partners=http://localhost:3003"]'
         user_override: false
         subgroup_id:
           where:
@@ -517,6 +517,20 @@
         subgroup_id:
           where:
             slug: mfa-general
+      - slug: account-invite-expiration-minutes
+        type: number
+        component: input-number
+        name:
+          en: Account Invite Link Expiration
+          pt: Expiração do Link de Convite de Conta
+        description:
+          en: Minutes before an account creation invite link expires and becomes invalid
+          pt: Minutos antes de um link de convite de criação de conta expirar e se tornar inválido
+        value: 10080
+        user_override: false
+        subgroup_id:
+          where:
+            slug: mfa-general
       - slug: access-token-expiration-minutes
         type: number
         component: input-number

package/hedhog/frontend/app/account/components/regenerate-codes-dialog.tsx.ejs

@@ -1,3 +1,4 @@
+import type { PublicKeyCredentialRequestOptionsJSON } from '@simplewebauthn/browser';
 import { Button } from '@/components/ui/button';
 import {
   Dialog,
@@ -214,14 +215,17 @@ export function RegenerateCodesDialog({
                           const { startAuthentication } =
                             await import('@simplewebauthn/browser');
 
-                          const { data: optionsData } = await request({
-                            url: '/profile/webauthn/authenticate/generate',
-                            method: 'POST',
-                          });
+                          const { data: optionsData } =
+                            await request<PublicKeyCredentialRequestOptionsJSON>(
+                              {
+                                url: '/profile/webauthn/authenticate/generate',
+                                method: 'POST',
+                              }
+                            );
 
-                          const assertion = await startAuthentication(
-                            optionsData as any
-                          );
+                          const assertion = await startAuthentication({
+                            optionsJSON: optionsData,
+                          });
                           await onConfirm(
                             '',
                             undefined,

package/hedhog/frontend/app/account/components/verify-before-add-dialog.tsx.ejs

@@ -1,5 +1,6 @@
 'use client';
 
+import type { PublicKeyCredentialRequestOptionsJSON } from '@simplewebauthn/browser';
 import { Button } from '@/components/ui/button';
 import {
   Dialog,
@@ -187,14 +188,15 @@ export function VerifyBeforeAddDialog({
                       const { startAuthentication } =
                         await import('@simplewebauthn/browser');
 
-                      const { data: optionsData } = await request({
-                        url: '/profile/webauthn/authenticate/generate',
-                        method: 'POST',
-                      });
+                      const { data: optionsData } =
+                        await request<PublicKeyCredentialRequestOptionsJSON>({
+                          url: '/profile/webauthn/authenticate/generate',
+                          method: 'POST',
+                        });
 
-                      const assertion = await startAuthentication(
-                        optionsData as any
-                      );
+                      const assertion = await startAuthentication({
+                        optionsJSON: optionsData,
+                      });
                       await onVerify('', undefined, 'webauthn', assertion);
                       setCode('');
                       setLoading(false);

package/hedhog/frontend/app/account/hooks/use-mfa-setup.ts.ejs

@@ -212,7 +212,9 @@ export function useMfaSetup() {
       }
 
       showToastHandler('success', t('authenticateToRemove'));
-      const assertion = await startAuthentication(optionsResponse.data);
+      const assertion = await startAuthentication({
+        optionsJSON: optionsResponse.data,
+      });
       await request({
         url: '/profile/webauthn/authenticate/verify',
         method: 'POST',
@@ -417,7 +419,9 @@ export function useMfaSetup() {
         data: { name },
       });
 
-      const attestationResponse = await startRegistration(options);
+      const attestationResponse = await startRegistration({
+        optionsJSON: options,
+      });
 
       const { data }: any = await request({
         url: '/profile/webauthn/verify',

package/hedhog/frontend/app/dashboard/dashboard-home-tabs.tsx.ejs

@@ -28,6 +28,13 @@ import {
   ContextMenuSeparator,
   ContextMenuTrigger,
 } from '@/components/ui/context-menu';
+import {
+  DropdownMenu,
+  DropdownMenuContent,
+  DropdownMenuItem,
+  DropdownMenuSeparator,
+  DropdownMenuTrigger,
+} from '@/components/ui/dropdown-menu';
 import { Input } from '@/components/ui/input';
 import { ScrollArea } from '@/components/ui/scroll-area';
 import {
@@ -51,6 +58,7 @@ import {
   Home,
   LayoutDashboard,
   Loader2,
+  MoreHorizontal,
   Palette,
   Pencil,
   Plus,
@@ -1032,42 +1040,130 @@ export function DashboardHomeTabs() {
                               {tabContent}
                             </div>
                           ) : (
-                            <TabsTrigger
-                              value={dashboard.slug}
-                              draggable={!isBusy}
-                              onDragStart={(event) =>
-                                handleTabDragStart(event, dashboard.slug)
-                              }
-                              onDragOver={handleTabDragOver}
-                              onDrop={(event) =>
-                                void handleTabDrop(event, dashboard.slug)
-                              }
-                              onDragEnd={handleTabDragEnd}
-                              className={cn(
-                                'dashboard-tab-trigger -mb-px mt-1 inline-flex h-9 shrink-0 cursor-pointer items-center justify-center gap-2 overflow-hidden rounded-b-none rounded-t-lg border-none px-3 py-2 shadow-none data-[state=active]:shadow-none',
-                                draggingDashboardSlug === dashboard.slug &&
-                                  'opacity-70'
-                              )}
-                              style={
-                                isActiveTab
-                                  ? {
-                                      backgroundColor: 'var(--background)',
-                                      color: 'var(--primary)',
+                            <div className="group relative mt-1 shrink-0">
+                              <TabsTrigger
+                                value={dashboard.slug}
+                                draggable={!isBusy}
+                                onDragStart={(event) =>
+                                  handleTabDragStart(event, dashboard.slug)
+                                }
+                                onDragOver={handleTabDragOver}
+                                onDrop={(event) =>
+                                  void handleTabDrop(event, dashboard.slug)
+                                }
+                                onDragEnd={handleTabDragEnd}
+                                className={cn(
+                                  'dashboard-tab-trigger -mb-px inline-flex h-9 shrink-0 cursor-pointer items-center justify-center gap-2 overflow-hidden rounded-b-none rounded-t-lg border-none pr-9 pl-3 py-2 shadow-none data-[state=active]:shadow-none',
+                                  draggingDashboardSlug === dashboard.slug &&
+                                    'opacity-70'
+                                )}
+                                style={
+                                  isActiveTab
+                                    ? {
+                                        backgroundColor: 'var(--background)',
+                                        color: 'var(--primary)',
+                                      }
+                                    : {
+                                        backgroundColor: 'transparent',
+                                        color: 'var(--muted-foreground)',
+                                      }
+                                }
+                                onDoubleClick={() =>
+                                  startRenameDashboard(dashboard)
+                                }
+                                onContextMenu={() =>
+                                  setActiveSlug(dashboard.slug)
+                                }
+                              >
+                                {tabContent}
+                              </TabsTrigger>
+                              <DropdownMenu>
+                                <DropdownMenuTrigger asChild>
+                                  <Button
+                                    type="button"
+                                    variant="ghost"
+                                    size="icon"
+                                    className={cn(
+                                      'absolute top-1/2 right-1 z-10 size-7 -translate-y-1/2 rounded-md text-muted-foreground hover:text-foreground',
+                                      isActiveTab
+                                        ? 'bg-background/80'
+                                        : 'bg-transparent hover:bg-background/60'
+                                    )}
+                                    onClick={(event) => {
+                                      event.stopPropagation();
+                                      setActiveSlug(dashboard.slug);
+                                    }}
+                                    onPointerDown={(event) =>
+                                      event.stopPropagation()
                                     }
-                                  : {
-                                      backgroundColor: 'transparent',
-                                      color: 'var(--muted-foreground)',
+                                    aria-label={t('tabActions')}
+                                    title={t('tabActions')}
+                                  >
+                                    <MoreHorizontal className="size-4" />
+                                  </Button>
+                                </DropdownMenuTrigger>
+                                <DropdownMenuContent
+                                  align="end"
+                                  className="w-56"
+                                  onCloseAutoFocus={(event) =>
+                                    event.preventDefault()
+                                  }
+                                >
+                                  <DropdownMenuItem
+                                    onSelect={() =>
+                                      openAddWidgetsForDashboard(dashboard)
                                     }
-                              }
-                              onDoubleClick={() =>
-                                startRenameDashboard(dashboard)
-                              }
-                              onContextMenu={() =>
-                                setActiveSlug(dashboard.slug)
-                              }
-                            >
-                              {tabContent}
-                            </TabsTrigger>
+                                  >
+                                    <Plus className="size-4" />
+                                    {t('addWidgets')}
+                                  </DropdownMenuItem>
+                                  {!dashboard.is_home ? (
+                                    <DropdownMenuItem
+                                      onSelect={() =>
+                                        void handleSetHomeDashboard(dashboard)
+                                      }
+                                    >
+                                      <Home className="size-4" />
+                                      {t('setAsHome')}
+                                    </DropdownMenuItem>
+                                  ) : null}
+                                  <DropdownMenuItem
+                                    onSelect={() =>
+                                      startRenameDashboard(dashboard)
+                                    }
+                                  >
+                                    <Pencil className="size-4" />
+                                    {t('rename')}
+                                  </DropdownMenuItem>
+                                  <DropdownMenuItem
+                                    onSelect={() =>
+                                      openIconForDashboard(dashboard)
+                                    }
+                                  >
+                                    <Palette className="size-4" />
+                                    {t('changeIcon')}
+                                  </DropdownMenuItem>
+                                  <DropdownMenuItem
+                                    onSelect={() =>
+                                      openShareForDashboard(dashboard)
+                                    }
+                                  >
+                                    <Share2 className="size-4" />
+                                    {t('share')}
+                                  </DropdownMenuItem>
+                                  <DropdownMenuSeparator />
+                                  <DropdownMenuItem
+                                    variant="destructive"
+                                    onSelect={() =>
+                                      openDeleteForDashboard(dashboard)
+                                    }
+                                  >
+                                    <Trash2 className="size-4" />
+                                    {t('delete')}
+                                  </DropdownMenuItem>
+                                </DropdownMenuContent>
+                              </DropdownMenu>
+                            </div>
                           )}
                         </ContextMenuTrigger>
                         <ContextMenuContent className="w-56">

package/hedhog/frontend/app/integration/profiles/page.tsx.ejs

@@ -48,7 +48,8 @@ import {
   TableRow,
 } from '@/components/ui/table';
 import { TableBodySkeleton } from '@/components/ui/skeletons';
-import { Tabs, TabsContent, TabsList, TabsTrigger } from '@/components/ui/tabs';
+import { Tabs, TabsContent } from '@/components/ui/tabs';
+import { TabsOverflowList } from '@/components/ui/tabs-overflow-list';
 import { usePagination } from '@/hooks/use-pagination';
 import { formatDate } from '@/lib/format-date';
 import { useApp } from '@hed-hog/next-app-provider';
@@ -696,13 +697,20 @@ export default function IntegrationProfilesPage() {
       />
 
       <Tabs value={activeTab} onValueChange={setActiveTab}>
-        <TabsList>
-          {types.map((ty) => (
-            <TabsTrigger key={ty.slug} value={ty.slug}>
-              {getLocaleName(ty.integration_type_locale, currentLocaleCode)}
-            </TabsTrigger>
-          ))}
-        </TabsList>
+        {/* Colapsa as abas que não cabem num dropdown "Mais": há muitos tipos de
+            integração e em telas estreitas os TabsTrigger crus encolhiam e se
+            sobrepunham. triggerClassName replica o padding do TabsTrigger nos
+            spans de medição invisíveis do TabsOverflowList. */}
+        <TabsOverflowList
+          items={types.map((ty) => ({
+            value: ty.slug,
+            label: getLocaleName(ty.integration_type_locale, currentLocaleCode),
+          }))}
+          activeValue={activeTab}
+          onValueChange={setActiveTab}
+          moreLabel={t('tabsMore')}
+          triggerClassName="min-h-8 px-3 text-sm font-medium"
+        />
 
         {types.map((ty) => (
           <TabsContent key={ty.slug} value={ty.slug} className="mt-4">

package/hedhog/frontend/messages/en.json

@@ -1399,6 +1399,7 @@
     "shareDashboardError": "Could not share the dashboard.",
     "shareRemoved": "Sharing removed.",
     "revokeShareError": "Could not remove the sharing.",
+    "tabActions": "Tab actions",
     "addWidgets": "Add widgets",
     "setAsHome": "Set as home",
     "rename": "Rename",
@@ -2338,6 +2339,7 @@
     "title": "Integration Profiles",
     "description": "Manage credentials and connection settings for email, messaging, storage, AI, OAuth, and payment providers.",
     "searchPlaceholder": "Search profiles by name or slug...",
+    "tabsMore": "More",
     "selectProfile": "Select profile",
     "selectAllVisible": "Select all visible profiles",
     "newProfile": "New Profile",
@@ -2425,11 +2427,33 @@
     "fieldAccessKeyId": "Access Key ID",
     "fieldSecretAccessKey": "Secret Access Key",
     "fieldRegion": "Region",
+    "fieldDomain": "Domain",
     "fieldToken": "Token",
     "fieldInstanceName": "Instance Name",
     "fieldPhoneNumberId": "Phone Number ID",
     "fieldAccessToken": "Access Token",
     "fieldBusinessId": "Business ID",
+    "fieldAppId": "Meta App ID",
+    "fieldAppSecret": "Meta App Secret",
+    "fieldWabaId": "WhatsApp Business Account ID (WABA)",
+    "fieldVerifyToken": "Webhook Verify Token",
+    "fieldGraphApiVersion": "Graph API Version",
+    "fieldEnvironmentTest": "Test",
+    "fieldEnvironmentProduction": "Production",
+    "copiedToClipboard": "Copied to clipboard",
+    "whatsappWebhookSectionTitle": "Meta Webhook",
+    "whatsappWebhookDescription": "Register this webhook in your Meta app to receive WhatsApp messages.",
+    "whatsappWebhookCallbackUrlLabel": "Callback URL",
+    "whatsappWebhookVerifyTokenLabel": "Verify Token",
+    "whatsappWebhookVerifyTokenHint": "Use the same value you set in the Verify Token field above.",
+    "whatsappWebhookLoading": "Generating URL…",
+    "whatsappWebhookUnavailable": "URL unavailable — check the API base URL setting.",
+    "whatsappWebhookSaveFirst": "Save the profile to generate the webhook URL.",
+    "whatsappWebhookStepsTitle": "In the Meta dashboard (WhatsApp → Configuration):",
+    "whatsappWebhookStep1": "Paste the Callback URL and the Verify Token above.",
+    "whatsappWebhookStep2": "Click \"Verify and save\".",
+    "whatsappWebhookStep3": "Subscribe to the \"messages\" field.",
+    "whatsappWebhookStep4": "Send a test message and confirm it arrives.",
     "fieldBasePath": "Base Path",
     "fieldBucket": "Bucket",
     "fieldProjectId": "Project ID",
@@ -2481,6 +2505,36 @@
     "nodePoolPlaceholder": "Select a node pool",
     "nodePoolNoneFound": "No node pools found for this cluster.",
     "nodePoolLoadError": "Failed to load node pools. Check the API token and cluster ID.",
-    "nodePoolNeedCreds": "Fill in the API token and cluster ID first, then load the pools."
+    "nodePoolNeedCreds": "Fill in the API token and cluster ID first, then load the pools.",
+    "fieldEnvironment": "Environment",
+    "optionHomologation": "Homologation (testing)",
+    "optionProduction": "Production (real invoices)",
+    "fieldTaxId": "Issuer tax ID (CNPJ)",
+    "fieldLegalName": "Legal name",
+    "fieldTradeName": "Trade name",
+    "fieldMunicipalRegistration": "Municipal registration",
+    "fieldIbgeCityCode": "IBGE city code",
+    "fieldAddressStreet": "Street",
+    "fieldAddressNumber": "Number",
+    "fieldAddressComplement": "Complement",
+    "fieldAddressDistrict": "District",
+    "fieldAddressZip": "ZIP code",
+    "fieldAddressState": "State",
+    "fieldEmail": "Email",
+    "fieldPhone": "Phone",
+    "fieldTaxRegime": "Tax regime",
+    "optionSimplesNacional": "Simples Nacional",
+    "optionSimplesNacionalExcesso": "Simples Nacional (over the cap)",
+    "optionRegimeNormal": "Regular regime",
+    "optionMei": "MEI",
+    "fieldSpecialTaxRegime": "Special tax regime",
+    "fieldCulturalIncentive": "Cultural incentive",
+    "fieldCertificatePfx": "A1 certificate (.pfx/.p12)",
+    "fieldCertificatePassword": "Certificate password",
+    "fieldBaseUrl": "API base URL",
+    "fieldTimeoutMs": "Timeout (ms)",
+    "fieldMaxRetries": "Max retries",
+    "fileStored": "A file is stored and encrypted. Click to replace it.",
+    "fileSelected": "New file selected. It will be encrypted on save."
   }
 }

package/hedhog/frontend/messages/pt.json

@@ -1402,6 +1402,7 @@
     "shareDashboardError": "Não foi possível compartilhar o dashboard.",
     "shareRemoved": "Compartilhamento removido.",
     "revokeShareError": "Não foi possível remover o compartilhamento.",
+    "tabActions": "Ações da aba",
     "addWidgets": "Adicionar widgets",
     "setAsHome": "Definir como home",
     "rename": "Renomear",
@@ -2393,6 +2394,7 @@
     "title": "Perfis de Integração",
     "description": "Gerencie credenciais para provedores de e-mail, mensagens, armazenamento, IA, OAuth e pagamentos.",
     "searchPlaceholder": "Buscar perfis por nome ou slug...",
+    "tabsMore": "Mais",
     "selectProfile": "Selecionar perfil",
     "selectAllVisible": "Selecionar todos os perfis visíveis",
     "newProfile": "Novo Perfil",
@@ -2480,11 +2482,33 @@
     "fieldAccessKeyId": "Access Key ID",
     "fieldSecretAccessKey": "Secret Access Key",
     "fieldRegion": "Região",
+    "fieldDomain": "Domínio",
     "fieldToken": "Token",
     "fieldInstanceName": "Nome da Instância",
     "fieldPhoneNumberId": "ID do Número de Telefone",
     "fieldAccessToken": "Access Token",
     "fieldBusinessId": "Business ID",
+    "fieldAppId": "Meta App ID",
+    "fieldAppSecret": "Meta App Secret",
+    "fieldWabaId": "ID da Conta do WhatsApp Business (WABA)",
+    "fieldVerifyToken": "Verify Token do Webhook",
+    "fieldGraphApiVersion": "Versão da Graph API",
+    "fieldEnvironmentTest": "Teste",
+    "fieldEnvironmentProduction": "Produção",
+    "copiedToClipboard": "Copiado para a área de transferência",
+    "whatsappWebhookSectionTitle": "Webhook da Meta",
+    "whatsappWebhookDescription": "Registre este webhook no seu app da Meta para receber mensagens do WhatsApp.",
+    "whatsappWebhookCallbackUrlLabel": "URL de Callback",
+    "whatsappWebhookVerifyTokenLabel": "Verify Token",
+    "whatsappWebhookVerifyTokenHint": "Use o mesmo valor que você definiu no campo Verify Token acima.",
+    "whatsappWebhookLoading": "Gerando URL…",
+    "whatsappWebhookUnavailable": "URL indisponível — verifique a configuração de URL base da API.",
+    "whatsappWebhookSaveFirst": "Salve o perfil para gerar a URL do webhook.",
+    "whatsappWebhookStepsTitle": "No painel da Meta (WhatsApp → Configuração):",
+    "whatsappWebhookStep1": "Cole a URL de Callback e o Verify Token acima.",
+    "whatsappWebhookStep2": "Clique em \"Verificar e salvar\".",
+    "whatsappWebhookStep3": "Assine o campo \"messages\".",
+    "whatsappWebhookStep4": "Envie uma mensagem de teste e confirme que ela chega.",
     "fieldBasePath": "Caminho Base",
     "fieldBucket": "Bucket",
     "fieldProjectId": "Project ID",
@@ -2536,6 +2560,36 @@
     "nodePoolPlaceholder": "Selecione um node pool",
     "nodePoolNoneFound": "Nenhum node pool encontrado para este cluster.",
     "nodePoolLoadError": "Falha ao carregar os node pools. Verifique o token da API e o ID do cluster.",
-    "nodePoolNeedCreds": "Preencha o token da API e o ID do cluster primeiro, depois carregue os pools."
+    "nodePoolNeedCreds": "Preencha o token da API e o ID do cluster primeiro, depois carregue os pools.",
+    "fieldEnvironment": "Ambiente",
+    "optionHomologation": "Homologação (testes)",
+    "optionProduction": "Produção (notas reais)",
+    "fieldTaxId": "CNPJ do emitente",
+    "fieldLegalName": "Razão social",
+    "fieldTradeName": "Nome fantasia",
+    "fieldMunicipalRegistration": "Inscrição municipal",
+    "fieldIbgeCityCode": "Código IBGE do município",
+    "fieldAddressStreet": "Logradouro",
+    "fieldAddressNumber": "Número",
+    "fieldAddressComplement": "Complemento",
+    "fieldAddressDistrict": "Bairro",
+    "fieldAddressZip": "CEP",
+    "fieldAddressState": "Estado",
+    "fieldEmail": "E-mail",
+    "fieldPhone": "Telefone",
+    "fieldTaxRegime": "Regime tributário",
+    "optionSimplesNacional": "Simples Nacional",
+    "optionSimplesNacionalExcesso": "Simples Nacional (excesso de sublimite)",
+    "optionRegimeNormal": "Regime normal",
+    "optionMei": "MEI",
+    "fieldSpecialTaxRegime": "Regime especial de tributação",
+    "fieldCulturalIncentive": "Incentivador cultural",
+    "fieldCertificatePfx": "Certificado A1 (.pfx/.p12)",
+    "fieldCertificatePassword": "Senha do certificado",
+    "fieldBaseUrl": "URL base da API",
+    "fieldTimeoutMs": "Timeout (ms)",
+    "fieldMaxRetries": "Máximo de tentativas",
+    "fileStored": "Arquivo armazenado e cifrado. Clique para substituir.",
+    "fileSelected": "Novo arquivo selecionado. Será cifrado ao salvar."
   }
 }