@raketa-cloud/admin 1.10.8 → 1.10.10

package/package.json

@@ -1,7 +1,10 @@
 {
   "name": "@raketa-cloud/admin",
-  "version": "1.10.8",
+  "version": "1.10.10",
   "main": "src/index.js",
+  "engines": {
+    "node": ">=22"
+  },
   "files": [
     "src/",
     "dist/"
@@ -26,7 +29,7 @@
     "@tailwindcss/cli": "4.3.3",
     "@tailwindcss/forms": "0.5.11",
     "@tailwindcss/typography": "0.5.20",
-    "@types/node": "24.10.1",
+    "@types/node": "22.20.5",
     "babel-jest": "30.5.2",
     "jest": "30.5.2",
     "jest-environment-node": "30.5.2",
@@ -34,11 +37,12 @@
     "typescript": "5.9.3"
   },
   "dependencies": {
-    "@hono/node-server": "2.0.12",
+    "@hono/node-server": "2.1.5",
     "chart.js": "4.5.1",
     "ejs": "6.0.1",
+    "google-auth-library": "11.3.1",
     "graphql-request": "7.4.0",
-    "hono": "4.13.7",
+    "hono": "4.13.13",
     "lru-cache": "11.5.2"
   },
   "overrides": {

package/src/cloud/Resources.js

@@ -42,6 +42,7 @@ export default class Resources extends RaketaClient {
   previewUrl(resource, locale) {
     return buildMagicPreviewAddress(
       {
+        id: resource.id,
         slug: resource.slug,
         locale,
         resourceType: resource.resourceType,

package/src/cloud/documents/contentTasksDocuments.js

@@ -33,6 +33,15 @@ export const ContentTasksDocument = gql`
           insertedAt
           updatedAt
         }
+        payhawkWorkflow {
+          id
+          status
+          reference
+          partial
+          settings
+          insertedAt
+          updatedAt
+        }
       }
       pagination {
         currentPage

package/src/helpers/content_tasks_helper.js

@@ -1,7 +1,23 @@
+export const TRANSLATION_WORKFLOWS = [
+  "LOKALISE_TT_AI_RT_HUM",
+  "LOKALISE_TT_HUM",
+  "LOKALISE_TT_AI",
+  "PAYHAWK",
+];
+
+export const workflowProvider = (workflow) =>
+  workflow.startsWith("LOKALISE_") ? "lokalise" : workflow.toLowerCase();
+
+export const enabledTranslationWorkflows = (contentTasks) =>
+  TRANSLATION_WORKFLOWS.filter(
+    (workflow) => contentTasks?.[workflowProvider(workflow)] === true,
+  );
+
 const WORKFLOWS_MAP = {
   lokalise_tt_ai_rt_hum: "Lokalise: AI translation (Pro AI) & Human review",
   lokalise_tt_hum: "Lokalise: Human translation",
   lokalise_tt_ai: "Lokalise: AI translation (Pro AI)",
+  payhawk: "Payhawk: AI & Human translation",
 };
 
 export const workflowsMap = (workflowType) => {

package/src/helpers/reports/googleAuth.js

@@ -5,9 +5,15 @@
 // with no human in the loop — sign a JWT with it, swap that for an access token.
 // Nothing is persisted, so a restart costs one token exchange.
 //
-// The key's client_email needs Viewer access on the GA property.
+// Without a key, config.ga.useAdc falls back to Application Default Credentials
+// via google-auth-library — on Cloud Run / GCE / GKE that is the attached
+// service account through the metadata server. A key, when set, always wins.
+//
+// The key's client_email (or the ADC principal) needs Viewer access on the GA
+// property.
 import { createSign } from "node:crypto";
 import { readFileSync } from "node:fs";
+import { GoogleAuth } from "google-auth-library";
 
 const TOKEN_ENDPOINT = "https://oauth2.googleapis.com/token";
 const JWT_GRANT = "urn:ietf:params:oauth:grant-type:jwt-bearer";
@@ -24,12 +30,16 @@ const keyCache = new Map();
 const tokenCache = new Map();
 const pendingTokens = new Map();
 
+// Single ADC client: it owns its own token cache and refresh.
+let adcAuth = null;
+
 const credentialSource = (ga = {}) => ga.serviceAccount;
+const adcEnabled = (ga = {}) => Boolean(ga.useAdc);
 
 // True when a credential is configured — gates the Insights tab, so an
 // unconfigured admin sees no GA UI at all.
 export const serviceAccountConfigured = (ga = {}) =>
-  Boolean(credentialSource(ga));
+  Boolean(credentialSource(ga)) || adcEnabled(ga);
 
 // GOOGLE_APPLICATION_CREDENTIALS now holds the whole key JSON rather than a path
 // to it, so a source can be: an already-parsed object, the JSON itself, that
@@ -88,7 +98,7 @@ function serviceAccountKey(ga = {}) {
 
   if (!source) {
     throw new Error(
-      "Google service-account key is not set. Put the key JSON in GOOGLE_APPLICATION_CREDENTIALS (surfaced via config.ga.serviceAccount).",
+      "Google service-account key is not set. Put the key JSON in GOOGLE_APPLICATION_CREDENTIALS (surfaced via config.ga.serviceAccount), or enable Application Default Credentials via config.ga.useAdc.",
     );
   }
 
@@ -139,6 +149,8 @@ function signAssertion(key) {
 // they would each mint their own token. The in-flight exchange is shared: the
 // first caller starts it, the rest await the same promise.
 export async function accessToken(ga) {
+  if (!credentialSource(ga) && adcEnabled(ga)) return adcAccessToken();
+
   const key = serviceAccountKey(ga);
 
   const cached = tokenCache.get(key.client_email);
@@ -190,9 +202,27 @@ async function requestToken(key) {
   return json.access_token;
 }
 
+async function adcAccessToken() {
+  adcAuth ??= new GoogleAuth({ scopes: [SCOPE] });
+
+  let token;
+  try {
+    token = await adcAuth.getAccessToken();
+  } catch (err) {
+    throw new Error(`Google ADC token request failed: ${err.message}`);
+  }
+
+  if (!token) {
+    throw new Error("Google ADC token response contained no access_token.");
+  }
+
+  return token;
+}
+
 // Test / credential-rotation helper.
 export function clearAuthCache() {
   keyCache.clear();
   tokenCache.clear();
   pendingTokens.clear();
+  adcAuth = null;
 }

package/src/helpers/reports/quick-insights.js

@@ -2,7 +2,7 @@
 // Quick Insights for a single page path: summary KPIs with period-over-period
 // trend plus a daily page-views series, both over the last 30 days.
 //
-// `ga` below is the whole config.ga object — property id plus the key path the
+// `ga` below is the whole config.ga object — property id plus the credentials the
 // bearer token is minted from (see ./googleAuth).
 import localCache from "../../localCache";
 import { accessToken } from "./googleAuth";

package/src/helpers/reports/reportsUtils.js

@@ -135,7 +135,7 @@ async function fetchQuickInsights(ctx, resource, resourceType) {
   try {
     if (!gaEnabled(ctx)) {
       throw new Error(
-        "Google Analytics is not configured. Set config.ga.propertyId and config.ga.serviceAccount (GOOGLE_APPLICATION_CREDENTIALS) to enable reports.",
+        "Google Analytics is not configured. Set config.ga.propertyId plus config.ga.serviceAccount (GOOGLE_APPLICATION_CREDENTIALS) or config.ga.useAdc to enable reports.",
       );
     }
     const pagePath = gaPagePath(ctx, resource, resourceType);

package/src/helpers/utils.js

@@ -33,8 +33,22 @@ function formattedDate(dateTimeString) {
   });
 }
 
+export function isFeatureEnabled(value) {
+  if (typeof value === "object" && value !== null) {
+    return Object.values(value).some(
+      (providerEnabled) => providerEnabled === true,
+    );
+  }
+
+  return value === true;
+}
+
 function feature(featureName, context) {
-  return context?.globalConfig?.features?.[featureName] === true;
+  return isFeatureEnabled(context?.globalConfig?.features?.[featureName]);
+}
+
+function contentTaskProviderEnabled(provider, context) {
+  return context?.globalConfig?.features?.contentTasks?.[provider] === true;
 }
 
 export default {
@@ -42,4 +56,5 @@ export default {
   formattedDate,
   formattedDateTime,
   feature,
+  contentTaskProviderEnabled,
 };

package/src/magicPreview.js

@@ -57,10 +57,11 @@ export function unchunkToken(token, chunkSize = CHUNK_SIZE) {
 }
 
 export function generateMagicPreviewToken(
-  { slug, resourceType, locale } = {},
+  { id, slug, resourceType, locale } = {},
   config = {},
 ) {
   const payload = {
+    id,
     slug,
     resourceType,
     locale,
@@ -138,7 +139,7 @@ export function decipherMagicPreviewToken(token, config) {
 }
 
 export function buildMagicPreviewAddress(
-  { slug, resourceType, locale },
+  { id, slug, resourceType, locale },
   globalConfig,
 ) {
   if (!slug || !resourceType || !locale) {
@@ -149,6 +150,7 @@ export function buildMagicPreviewAddress(
 
   const token = generateMagicPreviewToken(
     {
+      id,
       slug,
       resourceType,
       locale,

package/src/routeResourceModule.js

@@ -24,6 +24,7 @@ import URLsHandler from "./handlers/resources/URLsHandler";
 import routeCollection from "./routeCollection";
 import routeNestedCollection from "./routeNestedCollection";
 import routeNestedMember from "./routeNestedMember";
+import { isFeatureEnabled } from "./helpers/utils";
 
 function routeResourceModule(
   adapter,
@@ -94,7 +95,7 @@ function routeResourceModule(
     { ...resourceConfig, viewsFallback: "resources/translations" },
   );
 
-  if (adapter.globalConfig?.features?.contentTasks) {
+  if (isFeatureEnabled(adapter.globalConfig?.features?.contentTasks)) {
     routeNestedCollection(
       adapter,
       baseResource,

package/src/tests/cloud/content_tasks_documents.test.js

@@ -0,0 +1,11 @@
+import { ContentTasksDocument } from "../../cloud/documents/contentTasksDocuments";
+
+describe("ContentTasksDocument", () => {
+  test("requests Payhawk workflow details", () => {
+    const query = ContentTasksDocument;
+
+    expect(query).toContain("payhawkWorkflow");
+    expect(query).toContain("reference");
+    expect(query).toContain("partial");
+  });
+});

package/src/tests/helpers/content_tasks_helper.test.js

@@ -1,4 +1,7 @@
 import {
+  TRANSLATION_WORKFLOWS,
+  enabledTranslationWorkflows,
+  workflowProvider,
   workflowsMap,
   buildResourceUrl,
   hasUnattachedKeys,
@@ -18,6 +21,7 @@ describe("content_tasks_helper", () => {
       expect(workflowsMap("lokalise_tt_ai")).toBe(
         "Lokalise: AI translation (Pro AI)",
       );
+      expect(workflowsMap("payhawk")).toBe("Payhawk: AI & Human translation");
     });
 
     test("returns 'Unknown workflow' for unknown type", () => {
@@ -25,6 +29,31 @@ describe("content_tasks_helper", () => {
     });
   });
 
+  test("exports all translation workflows and only Lokalise due-date workflows", () => {
+    expect(TRANSLATION_WORKFLOWS).toEqual([
+      "LOKALISE_TT_AI_RT_HUM",
+      "LOKALISE_TT_HUM",
+      "LOKALISE_TT_AI",
+      "PAYHAWK",
+    ]);
+    expect(workflowProvider("LOKALISE_TT_AI")).toBe("lokalise");
+    expect(workflowProvider("PAYHAWK")).toBe("payhawk");
+  });
+
+  describe("enabledTranslationWorkflows", () => {
+    test("returns workflows for only the enabled providers", () => {
+      expect(
+        enabledTranslationWorkflows({ lokalise: true, payhawk: false }),
+      ).toEqual(["LOKALISE_TT_AI_RT_HUM", "LOKALISE_TT_HUM", "LOKALISE_TT_AI"]);
+      expect(
+        enabledTranslationWorkflows({ lokalise: false, payhawk: true }),
+      ).toEqual(["PAYHAWK"]);
+      expect(
+        enabledTranslationWorkflows({ lokalise: true, payhawk: true }),
+      ).toEqual(TRANSLATION_WORKFLOWS);
+    });
+  });
+
   describe("buildResourceUrl", () => {
     const globalConfig = {
       resourceRoutes: {

package/src/tests/helpers/reports/quick-insights.test.js

@@ -3,6 +3,7 @@ import { mkdtempSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
 
+import { GoogleAuth } from "google-auth-library";
 import {
   clearAuthCache,
   serviceAccountConfigured,
@@ -14,6 +15,14 @@ import {
 } from "../../../helpers/reports/quick-insights";
 import localCache from "../../../localCache";
 
+// Only the ADC path goes through google-auth-library; the key path signs its
+// own JWT against the mocked fetch below, so it never touches this.
+const mockGetAccessToken = jest.fn();
+
+jest.mock("google-auth-library", () => ({
+  GoogleAuth: jest.fn(() => ({ getAccessToken: mockGetAccessToken })),
+}));
+
 // One throwaway RSA key. The app passes the whole key JSON through
 // ga.serviceAccount, so that is the form used here; the same key is also written
 // to a temp file, since that config value also accepts a path.
@@ -280,6 +289,98 @@ describe("quick-insights auth", () => {
   });
 });
 
+describe("quick-insights ADC auth", () => {
+  const ADC_GA = { propertyId: "1234", useAdc: true };
+
+  const ARGS = {
+    pagePath: "/pricing",
+    startDate: "2026-07-01",
+    endDate: "2026-07-01",
+    ga: ADC_GA,
+  };
+
+  beforeEach(() => {
+    clearAuthCache();
+    jest.clearAllMocks();
+    mockGetAccessToken.mockResolvedValue("adc-token");
+  });
+
+  afterEach(() => {
+    delete global.fetch;
+  });
+
+  test("serviceAccountConfigured accepts ADC in place of a key", () => {
+    expect(serviceAccountConfigured({ useAdc: true })).toBe(true);
+    expect(serviceAccountConfigured({ useAdc: false })).toBe(false);
+  });
+
+  test("calls the Data API with the ADC token, no JWT exchange", async () => {
+    mockGoogle();
+
+    const result = await runPageReport(ARGS);
+
+    expect(GoogleAuth).toHaveBeenCalledWith({
+      scopes: ["https://www.googleapis.com/auth/analytics.readonly"],
+    });
+    expect(global.fetch).toHaveBeenCalledTimes(1);
+
+    const [reportUrl, reportOptions] = global.fetch.mock.calls[0];
+    expect(reportUrl).toBe(
+      "https://analyticsdata.googleapis.com/v1beta/properties/1234:runReport",
+    );
+    expect(reportOptions.headers.authorization).toBe("Bearer adc-token");
+    expect(result.rows).toEqual([{ date: "2026-07-01", views: 4 }]);
+  });
+
+  test("a configured key wins over ADC", async () => {
+    mockGoogle();
+
+    await runPageReport({
+      ...ARGS,
+      ga: { ...ADC_GA, serviceAccount: keyJson },
+    });
+
+    expect(GoogleAuth).not.toHaveBeenCalled();
+    expect(global.fetch.mock.calls[0][0]).toBe(
+      "https://oauth2.googleapis.com/token",
+    );
+    expect(global.fetch.mock.calls[1][1].headers.authorization).toBe(
+      "Bearer at-1",
+    );
+  });
+
+  test("reuses one ADC client until the cache is cleared", async () => {
+    mockGoogle();
+
+    await runPageReport(ARGS);
+    await runPageReport(ARGS);
+    expect(GoogleAuth).toHaveBeenCalledTimes(1);
+    expect(mockGetAccessToken).toHaveBeenCalledTimes(2);
+
+    clearAuthCache();
+    await runPageReport(ARGS);
+    expect(GoogleAuth).toHaveBeenCalledTimes(2);
+  });
+
+  test("surfaces ADC token failures", async () => {
+    mockGoogle();
+
+    mockGetAccessToken.mockRejectedValueOnce(
+      new Error("Could not load the default credentials"),
+    );
+    await expect(runPageReport(ARGS)).rejects.toThrow(
+      /Google ADC token request failed: Could not load the default credentials/,
+    );
+
+    mockGetAccessToken.mockResolvedValueOnce(null);
+    await expect(runPageReport(ARGS)).rejects.toThrow(
+      /Google ADC token response contained no access_token/,
+    );
+
+    expect(global.fetch).not.toHaveBeenCalled();
+  });
+});
+
 describe("runSummary", () => {
   const metrics = (views, users, engagementSeconds, rate, sessions) => ({
     metricValues: [views, users, engagementSeconds, rate, sessions].map(

package/src/tests/helpers/utils.test.js

@@ -64,22 +64,25 @@ describe("formattedDate", () => {
 });
 
 describe("feature", () => {
-  it("returns true when the feature is enabled", () => {
+  it("returns true when at least one content task provider is enabled", () => {
     const context = {
       globalConfig: {
         features: {
-          contentTasks: true,
+          contentTasks: { lokalise: true, payhawk: false },
         },
       },
     };
+
     expect(utils.feature("contentTasks", context)).toEqual(true);
+    expect(utils.contentTaskProviderEnabled("lokalise", context)).toEqual(true);
+    expect(utils.contentTaskProviderEnabled("payhawk", context)).toEqual(false);
   });
 
-  it("returns false when the feature is disabled", () => {
+  it("returns false when all content task providers are disabled", () => {
     const context = {
       globalConfig: {
         features: {
-          contentTasks: false,
+          contentTasks: { lokalise: false, payhawk: false },
         },
       },
     };

package/src/tests/magicPreview.test.js

@@ -31,9 +31,10 @@ describe("magicPreview helper", () => {
   };
 
   describe("buildMagicPreviewAddress", () => {
-    it("builds full preview URL using remoteConfig.magicPreviewUrl", () => {
+    it("builds a preview URL with the resource ID in its token", () => {
       const address = buildMagicPreviewAddress(
         {
+          id: "resource-42",
           slug: "gocardless",
           resourceType: "customer",
           locale: "en",
@@ -44,6 +45,12 @@ describe("magicPreview helper", () => {
       expect(address).toMatch(
         /^https:\/\/example\.com\/magic-preview\/customer\/[A-Za-z0-9_-]+$/,
       );
+      expect(
+        decipherMagicPreviewToken(address.split("/").at(-1), config),
+      ).toMatchObject({
+        id: "resource-42",
+        slug: "gocardless",
+      });
     });
 
     it("builds localized preview URL for non-default locale", () => {
@@ -96,6 +103,7 @@ describe("magicPreview helper", () => {
     it("generates an encrypted token and deciphers it back", () => {
       const token = generateMagicPreviewToken(
         {
+          id: "resource-123",
           slug: "my-first-ebook",
           resourceType: "ebook",
           locale: "en",
@@ -115,6 +123,7 @@ describe("magicPreview helper", () => {
 
       const payload = decipherMagicPreviewToken(token, config);
       expect(payload).not.toBeNull();
+      expect(payload.id).toBe("resource-123");
       expect(payload.slug).toBe("my-first-ebook");
       expect(payload.resourceType).toBe("ebook");
       expect(payload.locale).toBe("en");

package/src/tests/routeResourceModule.test.js

@@ -211,8 +211,12 @@ describe("routeResourceModule", () => {
   });
 
   test("registers partial translations only when content tasks are enabled", () => {
-    const enabledAdapter = makeAdapter({ features: { contentTasks: true } });
-    const disabledAdapter = makeAdapter({ features: { contentTasks: false } });
+    const enabledAdapter = makeAdapter({
+      features: { contentTasks: { lokalise: true, payhawk: false } },
+    });
+    const disabledAdapter = makeAdapter({
+      features: { contentTasks: { lokalise: false, payhawk: false } },
+    });
 
     routeResourceModule(enabledAdapter, "article", "articles");
     routeResourceModule(disabledAdapter, "article", "articles");

package/src/tests/views/content_tasks.test.js

@@ -0,0 +1,36 @@
+import { readFileSync } from "node:fs";
+import ejs from "ejs";
+
+const template = readFileSync(
+  `${process.cwd()}/src/views/_shared/_content_tasks.ejs`,
+  "utf8",
+);
+
+function renderContentTasks(task) {
+  return ejs.render(template, {
+    _context: { globalConfig: {}, locales: {} },
+    content_tasks: {
+      hasUnattachedKeys: () => false,
+      workflowsMap: (workflow) => workflow,
+    },
+    Inflector: { capitalize: (value) => value, humanize: (value) => value },
+    showAllDetails: false,
+    tasks: [task],
+    utils: { formattedDateTime: (value) => value },
+  });
+}
+
+describe("content tasks", () => {
+  test("uses Payhawk workflow details to identify a partial task", () => {
+    const rendered = renderContentTasks({
+      insertedAt: "2026-10-19T12:30:00Z",
+      operatorMeta: {},
+      payhawkWorkflow: { partial: true, settings: {} },
+      resources: [],
+      workflow: "payhawk",
+    });
+
+    expect(rendered).toContain("Partial translation");
+    expect(rendered).toContain("payhawk");
+  });
+});

package/src/tests/views/due_date.test.js

@@ -87,6 +87,16 @@ describe("resources shared due date", () => {
     expect(dueDateInput.value).toBe("");
   });
 
+  test("shows and preserves the due date for the Payhawk workflow", () => {
+    const { dueDateWrapper, dueDateInput } = setupDueDateScript({
+      workflow: "PAYHAWK",
+      dueDate: "2026-10-19T12:30",
+    });
+
+    expect(dueDateWrapper.style.display).toBe("block");
+    expect(dueDateInput.value).toBe("2026-10-19T12:30");
+  });
+
   test("shows the due date and defaults it to the minimum weekday", () => {
     jest.useFakeTimers().setSystemTime(new Date("2026-10-16T10:00:00"));
 

package/src/tests/views/partial_translations.test.js

@@ -9,13 +9,21 @@ const template = readFileSync(
 function renderPartialTranslations(translations) {
   return ejs.render(template, {
     _context: {
+      globalConfig: {
+        features: { contentTasks: { lokalise: true, payhawk: true } },
+      },
       locale: "en",
       maxOpenRevisions: 1,
       locales: { en: { name: "English" }, fr: { name: "French" } },
       resourceConfig: { resourceTypePlural: "pages" },
     },
-    content_tasks: { workflowsMap: (workflow) => workflow },
+    content_tasks: {
+      TRANSLATION_WORKFLOWS: ["LOKALISE_TT_AI", "PAYHAWK"],
+      enabledTranslationWorkflows: () => ["LOKALISE_TT_AI", "PAYHAWK"],
+      workflowsMap: (workflow) => workflow,
+    },
     errors: {},
+    utils: {},
     partialTranslation: { locales: [], widgetIds: ["hero-1"], workflow: {} },
     previewUrl: "https://preview.example/hello",
     render_partial: () => "",
@@ -49,6 +57,13 @@ describe("partial translations form", () => {
     expect(rendered).not.toContain("This resource has no translations.");
   });
 
+  test("includes Payhawk as a translation workflow", () => {
+    const rendered = renderPartialTranslations({ fr: { id: "43" } });
+
+    expect(rendered).toContain('value="PAYHAWK"');
+    expect(rendered).toContain(">payhawk</option>");
+  });
+
   test("disables translations at the open revision limit", () => {
     const rendered = renderPartialTranslations({
       fr: { id: "43", revisionsCount: 1 },

package/src/tests/views/translations_create_form.test.js

@@ -0,0 +1,68 @@
+import { readFileSync } from "node:fs";
+import ejs from "ejs";
+
+const template = readFileSync(
+  `${process.cwd()}/src/views/resources/translations/create_form.ejs`,
+  "utf8",
+);
+
+function renderTranslationsCreateForm(
+  workflow = {},
+  providers = { lokalise: true, payhawk: true },
+) {
+  return ejs.render(template, {
+    _context: {
+      defaultLocale: "en",
+      globalConfig: {
+        features: { contentTasks: { lokalise: true, payhawk: true } },
+      },
+      locale: "en",
+      locales: {
+        en: { name: "English" },
+        fr: { name: "French" },
+      },
+      resourceConfig: { resourceType: "page", resourceTypePlural: "pages" },
+    },
+    blueprint: { id: "42", title: "Hello" },
+    content_tasks: {
+      TRANSLATION_WORKFLOWS: ["LOKALISE_TT_AI", "PAYHAWK"],
+      enabledTranslationWorkflows: () =>
+        ["LOKALISE_TT_AI", "PAYHAWK"].filter(
+          (workflowType) =>
+            providers[
+              workflowType.startsWith("LOKALISE_")
+                ? "lokalise"
+                : workflowType.toLowerCase()
+            ] === true,
+        ),
+      workflowsMap: (type) => type,
+    },
+    errors: {},
+    form_for: (_resource, _errors, callback) => callback({ submit: () => "" }),
+    Inflector: { downcase: (value) => value.toLowerCase() },
+    render_partial: () => "",
+    resource: { languages: [], translations: {}, workflow },
+    targetLocale: null,
+    utils: { feature: () => true },
+  });
+}
+
+describe("translations create form", () => {
+  test("hides providers disabled in the content task feature configuration", () => {
+    const rendered = renderTranslationsCreateForm(
+      {},
+      { lokalise: true, payhawk: false },
+    );
+
+    expect(rendered).toContain('value="LOKALISE_TT_AI"');
+    expect(rendered).not.toContain('value="PAYHAWK"');
+  });
+
+  test("includes Payhawk and preserves its selected value", () => {
+    const rendered = renderTranslationsCreateForm({ type: "PAYHAWK" });
+
+    expect(rendered).toContain('value="PAYHAWK" selected');
+    expect(rendered).toMatch(/>\s*payhawk\s*<\/option>/);
+    expect(rendered).toContain("Translation (Payhawk)");
+  });
+});

package/src/views/_shared/_content_tasks.ejs

@@ -19,6 +19,7 @@
     <tbody>
       <% tasks.forEach(task => { %>
         <% const resources = task.resources || []; %>
+        <% const workflow = task.lokaliseWorkflow || task.payhawkWorkflow; %>
         <% const isMarked = showAllDetails && content_tasks.hasUnattachedKeys(task); %>
 
         <tr class="<%= isMarked ? 'bg-orange-100 dark:bg-orange-950/40' : '' %>">
@@ -61,7 +62,7 @@
 
           <td>
             <span class="body-3 flex items-center gap-0.5">
-              <% if (task.lokaliseWorkflow?.partial) { %>
+              <% if (workflow?.partial) { %>
                 <svg viewBox="0 0 20 20" class="size-3.5 shrink-0 text-raketa-primary" role="img" aria-label="Partial translation">
                   <title>Partial translation</title>
                   <path fill="currentColor" d="M10 10V2a8 8 0 1 1-8 8h8Z" />
@@ -128,7 +129,7 @@
           <% if (showAllDetails) { %>
             <td class="whitespace-nowrap">
               <div class="body-3 text-raketa-foreground/50">
-                <% const dueDate = task.lokaliseWorkflow?.settings?.due_date %>
+                <% const dueDate = workflow?.settings?.due_date %>
 
                 <% if (dueDate) { %>
                   <div class="flex items-center gap-1 mb-0.5">

package/src/views/resources/_shared/_due_date.ejs

@@ -52,10 +52,10 @@
       const minDate = getMinimumDueDate();
       dueDateInput.min = minDate;
 
-      const isDefault = !workflowSelect.value;
-      dueDateWrapper.style.display = isDefault ? "none" : "block";
+      const hasWorkflow = Boolean(workflowSelect.value);
+      dueDateWrapper.style.display = hasWorkflow ? "block" : "none";
 
-      if (isDefault) {
+      if (!hasWorkflow) {
         dueDateInput.value = "";
       } else if (!dueDateInput.value) {
         dueDateInput.value = minDate;

package/src/views/resources/_shared/_history_toolbar.ejs

@@ -1,4 +1,4 @@
-<div class="actions-toolbar justify-end">
+<div class="justify-end actions-toolbar">
   <form method="POST" action="<%= `/${_context.locale}/${_context.resourceConfig.resourceTypePlural}/${resource.id}/${_context.resourceConfig.resourceType}_changes/reverts` %>" class="inline-block">
     <input type="hidden" name="version" value="<%= change.version %>">
 
@@ -7,7 +7,7 @@
       Revert
     </button>
     <% } else { %>
-    <button type="submit" disabled class="btn-text opacity-50 cursor-not-allowed">
+    <button type="submit" disabled class="opacity-50 cursor-not-allowed btn-text">
       Revert
     </button>
     <% } %>

package/src/views/resources/partial-translations/create_form.ejs

@@ -28,7 +28,7 @@
         <label for="workflow" class="font-semibold body-3">Translation workflow</label>
         <select name="partial_translation[workflow][type]" id="workflow" required>
           <option value="">Select workflow</option>
-          <% ['LOKALISE_TT_AI_RT_HUM', 'LOKALISE_TT_HUM', 'LOKALISE_TT_AI'].forEach(workflow => { %>
+          <% content_tasks.enabledTranslationWorkflows(_context.globalConfig.features.contentTasks).forEach(workflow => { %>
           <option value="<%= workflow %>" <%= partialTranslation.workflow?.type === workflow ? 'selected' : '' %>><%= content_tasks.workflowsMap(workflow.toLowerCase()) %></option>
           <% }) %>
         </select>

package/src/views/resources/translations/create_form.ejs

@@ -36,20 +36,14 @@
         <select name="resource[workflow][type]" id="workflow">
           <option value="">Default (no workflow)</option>
 
-          <option value="LOKALISE_TT_AI_RT_HUM" <%= resource.workflow?.type === 'LOKALISE_TT_AI_RT_HUM' ? 'selected' : '' %>>
-            <%= content_tasks.workflowsMap("LOKALISE_TT_AI_RT_HUM".toLowerCase()) %>
-          </option>
-
-          <option value="LOKALISE_TT_HUM" <%= resource.workflow?.type === 'LOKALISE_TT_HUM' ? 'selected' : '' %>>
-            <%= content_tasks.workflowsMap("LOKALISE_TT_HUM".toLowerCase()) %>
-          </option>
-
-          <option value="LOKALISE_TT_AI" <%= resource.workflow?.type === 'LOKALISE_TT_AI' ? 'selected' : '' %>>
-            <%= content_tasks.workflowsMap("LOKALISE_TT_AI".toLowerCase()) %>
+          <% content_tasks.enabledTranslationWorkflows(_context.globalConfig.features.contentTasks).forEach(workflow => { %>
+          <option value="<%= workflow %>" <%= resource.workflow?.type === workflow ? 'selected' : '' %>>
+            <%= content_tasks.workflowsMap(workflow.toLowerCase()) %>
           </option>
+          <% }) %>
         </select>
         <p class="text-sm text-raketa-foreground/50 mt-1">
-          Select a workflow for the translation process. Lokalise workflow initiates a translation task for external translation.
+          Select a workflow for the translation process. An external workflow initiates a translation task with the selected provider.
         </p>
       </div>
 
@@ -124,15 +118,18 @@
               <li>
                 <strong>Human Translation (Lokalise):</strong> A task is sent to Lokalise where a human translator fully translates and reviews the content.
               </li>
+              <li>
+                <strong>Translation (Payhawk):</strong> A task is sent to Payhawk for translation in configured target languages.
+              </li>
             </ul>
 
             <br />
-            <strong>Notes:</strong> For all Lokalise workflows (<strong>AI, AI + Human</strong>, and <strong>Human</strong>):
+            <strong>Notes:</strong> For all external workflows:
             <ul>
-              <li>Content is required to start a Lokalise task.</li>
+              <li>Content is required to start an external translation task.</li>
               <li>The private copy and new revision will be automatically created here in the CMS only after the external task is completed and returned.</li>
               <li>You can track translation progress in the <a href="<%= `/${_context.locale}/content_tasks` %>" target="_blank">Translation tasks</a> module.</li>
-              <li>Translations will only be created for languages supported in Lokalise.</li>
+              <li>Translations will only be created for languages configured for the selected provider.</li>
             </ul>
           </div>
         </div>