Merge branch 'feature/v2.5.0' into hawk/testing

Author: Neunerlei

.env.example

@@ -56,7 +56,7 @@ APP_FALLBACK_LOCALE="en_US"
 APP_FAKER_LOCALE="de_DE"
 
 APP_KEY=
-APP_PREVIOS_KEYS=
+APP_PREVIOUS_KEYS=
 
 APP_MAINTENANCE_DRIVER="cache"
 APP_MAINTENANCE_STORE="database"

.github/workflows/deploy-hawk-prod.yml

@@ -44,6 +44,8 @@ jobs:
           target: app_prod
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
+          build-args: |
+            CACHE_BUSTER=${{ github.sha }}
 
   deploy:
     runs-on: ubuntu-latest

.gitignore

@@ -8,13 +8,19 @@
 node_modules
 vendor
 
+# Generated icons
+resources/js/components/ui/icons/iconset/*
+
 # Credentials
 auth.json
 
 # Editors
 .idea/*
 .fleet
 .vscode
+/.fleet
+/.idea
+/.vscode
 
 # PHPUnit
 .phpunit.coverage
@@ -45,3 +51,10 @@ npm-debug.log
 yarn-error.log
 .DS_Store
 _architecture
+
+# Dev Stuff
+DbgCommand.php
+_docker_production_test
+.devcontainer
+.agents
+skills-lock.json

.phpstorm.meta.php

@@ -4,5 +4,8 @@
 
 namespace PHPSTORM_META {
 
+    use App\Services\System\Container\ServiceLocator;
+
     override(ServiceLocatorTrait::getService(0), type(0));
+    override(ServiceLocator::get(0), type(0));
 }

.vite/vitePluginCssLayers.ts

@@ -0,0 +1,23 @@
+import type {Plugin} from 'vite';
+
+interface CssLayerEntry {
+    path: string;
+    layer: string;
+}
+
+export function vitePluginCssLayers(entries: CssLayerEntry[]): Plugin {
+    return {
+        name: 'vite-plugin-css-layers',
+        enforce: 'pre',
+        transform(code, id) {
+            const cleanId = id.split('?')[0];
+
+            if (!cleanId.endsWith('.css')) return null;
+
+            const match = entries.find(e => cleanId.endsWith(e.path));
+            if (!match) return null;
+
+            return `@layer ${match.layer} {\n${code}\n}`;
+        }
+    };
+}

.vite/vitePluginHugeicons.ts

@@ -0,0 +1,87 @@
+import type {Plugin} from 'vite';
+import {existsSync, mkdirSync, readFileSync, writeFileSync} from 'node:fs';
+import {resolve} from 'node:path';
+
+// Bump this when the generated file template changes to force regeneration.
+const PLUGIN_VERSION = '1';
+
+type IconData = readonly (readonly [string, Record<string, string | number>])[];
+
+function iconsPkgVersion(): string {
+    const pkgJson = JSON.parse(
+        readFileSync(
+            resolve(process.cwd(), 'node_modules/@hugeicons/core-free-icons/package.json'),
+            'utf-8'
+        )
+    ) as { version: string };
+    return pkgJson.version;
+}
+
+function needsRegeneration(outputDir: string): boolean {
+    const markerPath = resolve(outputDir, '.gen-version');
+    if (!existsSync(markerPath)) return true;
+    const expected = `${iconsPkgVersion()}:${PLUGIN_VERSION}`;
+    return readFileSync(markerPath, 'utf-8').trim() !== expected;
+}
+
+function writeVersionMarker(outputDir: string): void {
+    writeFileSync(
+        resolve(outputDir, '.gen-version'),
+        `${iconsPkgVersion()}:${PLUGIN_VERSION}`,
+        'utf-8'
+    );
+}
+
+async function loadAllIcons(): Promise<Map<string, IconData>> {
+    const pkg = await import('@hugeicons/core-free-icons') as Record<string, unknown>;
+    const icons = new Map<string, IconData>();
+    for (const [name, data] of Object.entries(pkg)) {
+        if (name.endsWith('Icon') && Array.isArray(data)) {
+            icons.set(name, data as IconData);
+        }
+    }
+    return icons;
+}
+
+function stripReactKey(data: IconData): unknown[][] {
+    return data.map(([tag, attrs]) => {
+        const {key: _key, ...rest} = attrs as Record<string, unknown>;
+        return [tag, rest];
+    });
+}
+
+function generateSvelteFile(data: IconData): string {
+    return `<!-- Auto-generated by vitePluginHugeicons — do not edit. -->
+<script lang="ts">
+    import {HugeiconsIcon, type HugeiconsProps, type IconSvgElement} from '@hugeicons/svelte';
+    const iconData:IconSvgElement = ${JSON.stringify(stripReactKey(data))};
+    let {...props}: HugeiconsProps = $props();
+</script>
+<HugeiconsIcon icon={iconData} strokeWidth={2} {...props} />
+`;
+}
+
+export function vitePluginHugeicons(outputDir: string): Plugin {
+    async function generate() {
+        if (!needsRegeneration(outputDir)) return;
+
+        mkdirSync(outputDir, {recursive: true});
+        const icons = await loadAllIcons();
+
+        for (const [name, data] of icons) {
+            writeFileSync(resolve(outputDir, `${name}.svelte`), generateSvelteFile(data), 'utf-8');
+        }
+
+        writeVersionMarker(outputDir);
+    }
+
+    return {
+        name: 'vite-plugin-hugeicons',
+        async buildStart() {
+            await generate();
+        },
+        configureServer() {
+            void generate();
+        }
+    };
+}

_changelog/next-upgrade.md

@@ -73,3 +73,73 @@ FILE_CONVERTER_BINARY_GHOSTSCRIPT=/path/to/gs
 ## 2. Remove no longer required env variables:
 
 In this version we introduced a better solution to propagate the "reverb" (websocket) configuration to the frontend. Therefore the values must no longer be available at build time. For you, there is no need to intervene, but you probably like your `.env` file to be clean and tidy, so you can remove the `VITE_REVERB_*` variables from there.
+
+## 3. Upgrade PHP to 8.3
+
+The minimum PHP version is now **8.3** (raised from 8.2). Before deploying, ensure your host or Docker base image provides it.
+
+> **Note:** If you are running HAWKI in Docker, the official image (`neunerlei/php-nginx:8.3`) is already updated and no further action is needed.
+
+The following PHP extensions are now explicitly required — enable them if they are not already active on your server:
+
+```
+curl, dom, fileinfo, libxml, openssl, zip, gd
+```
+
+## 4. Configure encryption salts before migrating
+
+This version introduces five application-level encryption salts. These **must be set in your `.env` before running `php artisan migrate`** — if they are missing, `SaltProvider` will auto-generate them at runtime, but the values will differ on every boot, permanently breaking any data encrypted with the previous values.
+
+Generate each salt with `openssl rand -base64 32` and add them to your `.env`:
+
+```
+APP_ENCRYPTION_SALT_USERDATA=
+APP_ENCRYPTION_SALT_INVITATION=
+APP_ENCRYPTION_SALT_AI_CRYPTO=
+APP_ENCRYPTION_SALT_PASSKEY=
+APP_ENCRYPTION_SALT_BACKUP=
+```
+
+> **Note:** If you are running HAWKI in Docker, these salts must also be present in `_docker_production/.env` before the first container start after upgrading.
+
+## 5. Run all database migrations
+
+This version introduces many new tables. After setting the salts above, run:
+
+```bash
+php artisan migrate
+```
+
+## 6. Sync AI tools, MCP servers, and model config into the database
+
+AI tools and MCP servers have been migrated from static configuration files to database-backed models. After migrating, populate them from your existing configuration:
+
+```bash
+php artisan ai:tools:sync
+php artisan ai:config:sync
+```
+
+## 7. Update custom code referencing removed classes
+
+The following classes have been removed. Update any custom code that references them:
+
+| Removed | Replacement |
+|---|---|
+| `FileConverterFactory` | Inject `FileConverterInterface` directly; call `isAvailable()` to check if a converter is configured |
+| `AttachmentService` / `AttachmentFactory` | `AttachmentRepository` |
+| `MessageHandlerFactory` | Resolve `PrivateMessageHandler` / `GroupMessageHandler` from the Laravel service container |
+| `ExternalCommunicationCheck` middleware | `ExternalAccessMiddleware` or `AppAccessMiddleware` — configure feature toggles in `config/external_access.php` |
+
+## 8. Update custom code reading `AiModel` attributes
+
+The following `AiModel` attributes now return **typed value objects** instead of raw arrays or strings. Any code reading them with direct array access must be updated to use the value object API:
+
+`input`, `output`, `parameters`, `status`, `demand`, `capabilities`, `settings`
+
+## 9. Update custom storage service calls
+
+All method signatures on `FileStorageService` and `AvatarStorageService` have changed as part of the storage layer overhaul. Any custom code calling these services directly must be updated to use the new API.
+
+## 10. Update custom AI provider implementations
+
+If you have custom AI provider implementations, they must now implement `ProviderAdapterInterface` and be registered with `ProviderAdapterRegistry`. The previous inheritance-based approach is no longer supported.