Merge remote-tracking branch 'upstream/dev' into sur-70-feature-streamline-onboarding-auto-create-default-workspace

.vscode/launch.json

@@ -5,7 +5,7 @@
     "version": "0.2.0",
     "configurations": [
         {
-            "name": "Python Debugger: UV Run with Reload",
+            "name": "Backend: FastAPI",
             "type": "debugpy",
             "request": "launch",
             "module": "uvicorn",
@@ -25,7 +25,7 @@
             "python": "${command:python.interpreterPath}"
         },
         {
-            "name": "Python Debugger: main.py (direct)",
+            "name": "Backend: FastAPI (main.py)",
             "type": "debugpy",
             "request": "launch",
             "program": "${workspaceFolder}/surfsense_backend/main.py",
@@ -34,17 +34,95 @@
             "cwd": "${workspaceFolder}/surfsense_backend"
         },
         {
-            "name": "Python Debugger: Chat DeepAgent",
+            "name": "Frontend: Next.js",
+            "type": "node",
+            "request": "launch",
+            "cwd": "${workspaceFolder}/surfsense_web",
+            "runtimeExecutable": "npm",
+            "runtimeArgs": ["run", "dev"],
+            "console": "integratedTerminal",
+            "serverReadyAction": {
+                "pattern": "- Local:.+(https?://.+)",
+                "uriFormat": "%s",
+                "action": "debugWithChrome"
+            }
+        },
+        {
+            "name": "Frontend: Next.js (Server-Side Debug)",
+            "type": "node",
+            "request": "launch",
+            "cwd": "${workspaceFolder}/surfsense_web",
+            "runtimeExecutable": "npm",
+            "runtimeArgs": ["run", "debug:server"],
+            "console": "integratedTerminal",
+            "serverReadyAction": {
+                "pattern": "- Local:.+(https?://.+)",
+                "uriFormat": "%s",
+                "action": "debugWithChrome"
+            }
+        },
+        {
+            "name": "Celery: Worker",
             "type": "debugpy",
             "request": "launch",
-            "module": "app.agents.new_chat.chat_deepagent",
+            "module": "celery",
+            "args": [
+                "-A",
+                "app.celery_app:celery_app",
+                "worker",
+                "--loglevel=info",
+                "--pool=solo"
+            ],
             "console": "integratedTerminal",
             "justMyCode": false,
             "cwd": "${workspaceFolder}/surfsense_backend",
-            "python": "${command:python.interpreterPath}",
+            "python": "${command:python.interpreterPath}"
-            "env": {
+        },
-                "PYTHONPATH": "${workspaceFolder}/surfsense_backend"
+        {
+            "name": "Celery: Beat Scheduler",
+            "type": "debugpy",
+            "request": "launch",
+            "module": "celery",
+            "args": [
+                "-A",
+                "app.celery_app:celery_app",
+                "beat",
+                "--loglevel=info"
+            ],
+            "console": "integratedTerminal",
+            "justMyCode": false,
+            "cwd": "${workspaceFolder}/surfsense_backend",
+            "python": "${command:python.interpreterPath}"
+        }
+    ],
+    "compounds": [
+        {
+            "name": "Full Stack: Backend + Frontend + Celery",
+            "configurations": [
+                "Backend: FastAPI",
+                "Frontend: Next.js",
+                "Celery: Worker",
+                "Celery: Beat Scheduler"
+            ],
+            "stopAll": true,
+            "presentation": {
+                "hidden": false,
+                "group": "Full Stack",
+                "order": 1
+            }
+        },
+        {
+            "name": "Full Stack: Backend + Frontend",
+            "configurations": [
+                "Backend: FastAPI",
+                "Frontend: Next.js"
+            ],
+            "stopAll": true,
+            "presentation": {
+                "hidden": false,
+                "group": "Full Stack",
+                "order": 2
             }
         }
     ]
-}
+}

README.md

@@ -174,44 +174,27 @@ docker run -d -p 3000:3000 -p 8000:8000 `
   ghcr.io/modsetter/surfsense:latest
 ```
 
-**With Custom Configuration (e.g., OpenAI Embeddings):**
+**With Custom Configuration:**
+
+You can pass any environment variable using `-e` flags:
 
 ```bash
 docker run -d -p 3000:3000 -p 8000:8000 \
   -v surfsense-data:/data \
   -e EMBEDDING_MODEL=openai://text-embedding-ada-002 \
   -e OPENAI_API_KEY=your_openai_api_key \
-  --name surfsense \
+  -e AUTH_TYPE=GOOGLE \
-  --restart unless-stopped \
-  ghcr.io/modsetter/surfsense:latest
-```
-
-**With OAuth-based Connectors (Google Calendar, Gmail, Drive, Airtable):**
-
-To use OAuth-based connectors, you need to configure the respective client credentials:
-
-```bash
-docker run -d -p 3000:3000 -p 8000:8000 \
-  -v surfsense-data:/data \
-  # Google Connectors (Calendar, Gmail, Drive)
   -e GOOGLE_OAUTH_CLIENT_ID=your_google_client_id \
   -e GOOGLE_OAUTH_CLIENT_SECRET=your_google_client_secret \
-  -e GOOGLE_CALENDAR_REDIRECT_URI=http://localhost:8000/api/v1/auth/google/calendar/connector/callback \
+  -e ETL_SERVICE=LLAMACLOUD \
-  -e GOOGLE_GMAIL_REDIRECT_URI=http://localhost:8000/api/v1/auth/google/gmail/connector/callback \
+  -e LLAMA_CLOUD_API_KEY=your_llama_cloud_key \
-  -e GOOGLE_DRIVE_REDIRECT_URI=http://localhost:8000/api/v1/auth/google/drive/connector/callback \
-  # Airtable Connector
-  -e AIRTABLE_CLIENT_ID=your_airtable_client_id \
-  -e AIRTABLE_CLIENT_SECRET=your_airtable_client_secret \
-  -e AIRTABLE_REDIRECT_URI=http://localhost:8000/api/v1/auth/airtable/connector/callback \
   --name surfsense \
   --restart unless-stopped \
   ghcr.io/modsetter/surfsense:latest
 ```
 
 > [!NOTE]
-> - For Google connectors, create OAuth 2.0 credentials in the [Google Cloud Console](https://console.cloud.google.com/apis/credentials)
+> - If deploying behind a reverse proxy with HTTPS, add `-e BACKEND_URL=https://api.yourdomain.com`
-> - For Airtable connector, create an OAuth integration in the [Airtable Developer Hub](https://airtable.com/create/oauth)
-> - If deploying behind a reverse proxy with HTTPS, add `-e BACKEND_URL=https://api.yourdomain.com` and update the redirect URIs accordingly
 
 After starting, access SurfSense at:
 - **Frontend**: [http://localhost:3000](http://localhost:3000)

README.zh-CN.md

@@ -181,44 +181,27 @@ docker run -d -p 3000:3000 -p 8000:8000 `
   ghcr.io/modsetter/surfsense:latest
 ```
 
-**使用自定义配置（例如 OpenAI 嵌入）：**
+**使用自定义配置：**
+
+您可以使用 `-e` 标志传递任何环境变量：
 
 ```bash
 docker run -d -p 3000:3000 -p 8000:8000 \
   -v surfsense-data:/data \
   -e EMBEDDING_MODEL=openai://text-embedding-ada-002 \
   -e OPENAI_API_KEY=your_openai_api_key \
-  --name surfsense \
+  -e AUTH_TYPE=GOOGLE \
-  --restart unless-stopped \
-  ghcr.io/modsetter/surfsense:latest
-```
-
-**使用 OAuth 连接器（Google 日历、Gmail、云端硬盘、Airtable）：**
-
-要使用基于 OAuth 的连接器，您需要配置相应的客户端凭据：
-
-```bash
-docker run -d -p 3000:3000 -p 8000:8000 \
-  -v surfsense-data:/data \
-  # Google 连接器（日历、Gmail、云端硬盘）
   -e GOOGLE_OAUTH_CLIENT_ID=your_google_client_id \
   -e GOOGLE_OAUTH_CLIENT_SECRET=your_google_client_secret \
-  -e GOOGLE_CALENDAR_REDIRECT_URI=http://localhost:8000/api/v1/auth/google/calendar/connector/callback \
+  -e ETL_SERVICE=LLAMACLOUD \
-  -e GOOGLE_GMAIL_REDIRECT_URI=http://localhost:8000/api/v1/auth/google/gmail/connector/callback \
+  -e LLAMA_CLOUD_API_KEY=your_llama_cloud_key \
-  -e GOOGLE_DRIVE_REDIRECT_URI=http://localhost:8000/api/v1/auth/google/drive/connector/callback \
-  # Airtable 连接器
-  -e AIRTABLE_CLIENT_ID=your_airtable_client_id \
-  -e AIRTABLE_CLIENT_SECRET=your_airtable_client_secret \
-  -e AIRTABLE_REDIRECT_URI=http://localhost:8000/api/v1/auth/airtable/connector/callback \
   --name surfsense \
   --restart unless-stopped \
   ghcr.io/modsetter/surfsense:latest
 ```
 
 > [!NOTE]
-> - 对于 Google 连接器，请在 [Google Cloud Console](https://console.cloud.google.com/apis/credentials) 中创建 OAuth 2.0 凭据
+> - 如果部署在带有 HTTPS 的反向代理后面，请添加 `-e BACKEND_URL=https://api.yourdomain.com`
-> - 对于 Airtable 连接器，请在 [Airtable 开发者中心](https://airtable.com/create/oauth) 中创建 OAuth 集成
-> - 如果部署在带有 HTTPS 的反向代理后面，请添加 `-e BACKEND_URL=https://api.yourdomain.com` 并相应地更新重定向 URI
 
 启动后，访问 SurfSense：
 - **前端**: [http://localhost:3000](http://localhost:3000)

surfsense_backend/.env.example

@@ -34,42 +34,53 @@ REGISTRATION_ENABLED=TRUE or FALSE
 GOOGLE_OAUTH_CLIENT_ID=924507538m
 GOOGLE_OAUTH_CLIENT_SECRET=GOCSV
 
-# Connector Specific Configs
+# Google Connector Specific Configurations
 GOOGLE_CALENDAR_REDIRECT_URI=http://localhost:8000/api/v1/auth/google/calendar/connector/callback
 GOOGLE_GMAIL_REDIRECT_URI=http://localhost:8000/api/v1/auth/google/gmail/connector/callback
 GOOGLE_DRIVE_REDIRECT_URI=http://localhost:8000/api/v1/auth/google/drive/connector/callback
 
-# OAuth for Aitable Connector
+# Aitable OAuth Configuration
-AIRTABLE_CLIENT_ID=your_airtable_client_id
+AIRTABLE_CLIENT_ID=your_airtable_client_id_here
-AIRTABLE_CLIENT_SECRET=your_airtable_client_secret
+AIRTABLE_CLIENT_SECRET=your_airtable_client_secret_here
 AIRTABLE_REDIRECT_URI=http://localhost:8000/api/v1/auth/airtable/connector/callback
 
+# ClickUp OAuth Configuration
+CLICKUP_CLIENT_ID=your_clickup_client_id_here
+CLICKUP_CLIENT_SECRET=your_clickup_client_secret_here
+CLICKUP_REDIRECT_URI=http://localhost:8000/api/v1/auth/clickup/connector/callback
+
 # Discord OAuth Configuration
 DISCORD_CLIENT_ID=your_discord_client_id_here
 DISCORD_CLIENT_SECRET=your_discord_client_secret_here
 DISCORD_REDIRECT_URI=http://localhost:8000/api/v1/auth/discord/connector/callback
 DISCORD_BOT_TOKEN=your_bot_token_from_developer_portal
 
-# Jira OAuth Configuration
+# Atlassian OAuth Configuration
-JIRA_CLIENT_ID=our_jira_client_id
+ATLASSIAN_CLIENT_ID=your_atlassian_client_id_here
-JIRA_CLIENT_SECRET=your_jira_client_secret
+ATLASSIAN_CLIENT_SECRET=your_atlassian_client_secret_here
 JIRA_REDIRECT_URI=http://localhost:8000/api/v1/auth/jira/connector/callback
+CONFLUENCE_REDIRECT_URI=http://localhost:8000/api/v1/auth/confluence/connector/callback
 
-# OAuth for Linear Connector
+# Linear OAuth Configuration
-LINEAR_CLIENT_ID=your_linear_client_id
+LINEAR_CLIENT_ID=your_linear_client_id_here
-LINEAR_CLIENT_SECRET=your_linear_client_secret
+LINEAR_CLIENT_SECRET=your_linear_client_secret_here
 LINEAR_REDIRECT_URI=http://localhost:8000/api/v1/auth/linear/connector/callback
 
-# OAuth for Notion Connector
+# Notion OAuth Configuration
-NOTION_CLIENT_ID=your_notion_client_id
+NOTION_CLIENT_ID=your_notion_client_id_here
-NOTION_CLIENT_SECRET=your_notion_client_secret
+NOTION_CLIENT_SECRET=your_notion_client_secret_here
 NOTION_REDIRECT_URI=http://localhost:8000/api/v1/auth/notion/connector/callback
 
-# OAuth for Slack connector
+# Slack OAuth Configuration
-SLACK_CLIENT_ID=1234567890.1234567890123
+SLACK_CLIENT_ID=your_slack_client_id_here
-SLACK_CLIENT_SECRET=abcdefghijklmnopqrstuvwxyz1234567890
+SLACK_CLIENT_SECRET=your_slack_client_secret_here
 SLACK_REDIRECT_URI=http://localhost:8000/api/v1/auth/slack/connector/callback
 
+# Teams OAuth Configuration
+TEAMS_CLIENT_ID=your_teams_client_id_here
+TEAMS_CLIENT_SECRET=your_teams_client_secret_here
+TEAMS_REDIRECT_URI=http://localhost:8000/api/v1/auth/teams/connector/callback
+
 # Embedding Model
 # Examples:
 #     # Get sentence transformers embeddings

surfsense_backend/alembic/versions/57_allow_multiple_connectors_per_type.py

@@ -0,0 +1,55 @@
+"""Allow multiple connectors of same type per search space
+
+Revision ID: 57
+Revises: 56
+Create Date: 2026-01-06 12:00:00.000000
+
+"""
+
+from collections.abc import Sequence
+
+from sqlalchemy import text
+
+from alembic import op
+
+# revision identifiers, used by Alembic.
+revision: str = "57"
+down_revision: str | None = "56"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+
+def upgrade() -> None:
+    connection = op.get_bind()
+    constraint_exists = connection.execute(
+        text("""
+            SELECT 1 FROM information_schema.table_constraints 
+            WHERE table_name='search_source_connectors' 
+              AND constraint_type='UNIQUE' 
+              AND constraint_name='uq_searchspace_user_connector_type'
+        """)
+    ).scalar()
+    if constraint_exists:
+        op.drop_constraint(
+            "uq_searchspace_user_connector_type",
+            "search_source_connectors",
+            type_="unique",
+        )
+
+
+def downgrade() -> None:
+    connection = op.get_bind()
+    constraint_exists = connection.execute(
+        text("""
+            SELECT 1 FROM information_schema.table_constraints 
+            WHERE table_name='search_source_connectors' 
+              AND constraint_type='UNIQUE' 
+              AND constraint_name='uq_searchspace_user_connector_type'
+        """)
+    ).scalar()
+    if not constraint_exists:
+        op.create_unique_constraint(
+            "uq_searchspace_user_connector_type",
+            "search_source_connectors",
+            ["search_space_id", "user_id", "connector_type"],
+        )

surfsense_backend/alembic/versions/58_unique_connector_name_per_space_user.py

@@ -0,0 +1,55 @@
+"""
+Add unique constraint for (search_space_id, user_id, name) on search_source_connectors.
+
+Revision ID: 58
+Revises: 57
+Create Date: 2026-01-06 14:00:00.000000
+
+"""
+
+from collections.abc import Sequence
+
+from sqlalchemy import text
+
+from alembic import op
+
+revision: str = "58"
+down_revision: str | None = "57"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+
+def upgrade() -> None:
+    connection = op.get_bind()
+    constraint_exists = connection.execute(
+        text("""
+            SELECT 1 FROM information_schema.table_constraints
+            WHERE table_name='search_source_connectors'
+              AND constraint_type='UNIQUE'
+              AND constraint_name='uq_searchspace_user_connector_name'
+        """)
+    ).scalar()
+    if not constraint_exists:
+        op.create_unique_constraint(
+            "uq_searchspace_user_connector_name",
+            "search_source_connectors",
+            ["search_space_id", "user_id", "name"],
+        )
+
+
+def downgrade() -> None:
+    connection = op.get_bind()
+    constraint_exists = connection.execute(
+        text("""
+            SELECT 1 FROM information_schema.table_constraints
+            WHERE table_name='search_source_connectors'
+              AND constraint_type='UNIQUE'
+              AND constraint_name='uq_searchspace_user_connector_name'
+        """)
+    ).scalar()
+    if constraint_exists:
+        op.drop_constraint(
+            "uq_searchspace_user_connector_name",
+            "search_source_connectors",
+            type_="unique",
+        )

surfsense_backend/alembic/versions/59_add_teams_connector_enums.py

@@ -0,0 +1,160 @@
+"""Add TEAMS_CONNECTOR to SearchSourceConnectorType and DocumentType enums
+
+Revision ID: 59
+Revises: 58
+"""
+
+from collections.abc import Sequence
+
+from alembic import op
+
+# revision identifiers, used by Alembic.
+revision: str = "59"
+down_revision: str | None = "58"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+# Define the ENUM type name and the new value
+CONNECTOR_ENUM = "searchsourceconnectortype"
+CONNECTOR_NEW_VALUE = "TEAMS_CONNECTOR"
+DOCUMENT_ENUM = "documenttype"
+DOCUMENT_NEW_VALUE = "TEAMS_CONNECTOR"
+
+
+def upgrade() -> None:
+    """Upgrade schema - add TEAMS_CONNECTOR to connector and document enum safely."""
+    # Add TEAMS_CONNECTOR to searchsourceconnectortype only if not exists
+    op.execute(
+        f"""
+        DO $$
+        BEGIN
+            IF NOT EXISTS (
+                SELECT 1 FROM pg_enum
+                WHERE enumlabel = '{CONNECTOR_NEW_VALUE}'
+                AND enumtypid = (SELECT oid FROM pg_type WHERE typname = '{CONNECTOR_ENUM}')
+            ) THEN
+                ALTER TYPE {CONNECTOR_ENUM} ADD VALUE '{CONNECTOR_NEW_VALUE}';
+            END IF;
+        END$$;
+    """
+    )
+
+    # Add TEAMS_CONNECTOR to documenttype only if not exists
+    op.execute(
+        f"""
+        DO $$
+        BEGIN
+            IF NOT EXISTS (
+                SELECT 1 FROM pg_enum
+                WHERE enumlabel = '{DOCUMENT_NEW_VALUE}'
+                AND enumtypid = (SELECT oid FROM pg_type WHERE typname = '{DOCUMENT_ENUM}')
+            ) THEN
+                ALTER TYPE {DOCUMENT_ENUM} ADD VALUE '{DOCUMENT_NEW_VALUE}';
+            END IF;
+        END$$;
+    """
+    )
+
+
+def downgrade() -> None:
+    """Downgrade schema - remove TEAMS_CONNECTOR from connector and document enum."""
+
+    # Old enum name
+    old_connector_enum_name = f"{CONNECTOR_ENUM}_old"
+    old_document_enum_name = f"{DOCUMENT_ENUM}_old"
+
+    # All connector values except TEAMS_CONNECTOR
+    old_connector_values = (
+        "SERPER_API",
+        "TAVILY_API",
+        "SEARXNG_API",
+        "LINKUP_API",
+        "BAIDU_SEARCH_API",
+        "SLACK_CONNECTOR",
+        "NOTION_CONNECTOR",
+        "GITHUB_CONNECTOR",
+        "LINEAR_CONNECTOR",
+        "DISCORD_CONNECTOR",
+        "JIRA_CONNECTOR",
+        "CONFLUENCE_CONNECTOR",
+        "CLICKUP_CONNECTOR",
+        "GOOGLE_CALENDAR_CONNECTOR",
+        "GOOGLE_GMAIL_CONNECTOR",
+        "GOOGLE_DRIVE_CONNECTOR",
+        "AIRTABLE_CONNECTOR",
+        "LUMA_CONNECTOR",
+        "ELASTICSEARCH_CONNECTOR",
+        "WEBCRAWLER_CONNECTOR",
+    )
+    
+    # All document values except TEAMS_CONNECTOR
+    old_document_values = (
+        "EXTENSION",
+        "CRAWLED_URL",
+        "FILE",
+        "SLACK_CONNECTOR",
+        "NOTION_CONNECTOR",
+        "YOUTUBE_VIDEO",
+        "GITHUB_CONNECTOR",
+        "LINEAR_CONNECTOR",
+        "DISCORD_CONNECTOR",
+        "JIRA_CONNECTOR",
+        "CONFLUENCE_CONNECTOR",
+        "CLICKUP_CONNECTOR",
+        "GOOGLE_CALENDAR_CONNECTOR",
+        "GOOGLE_GMAIL_CONNECTOR",
+        "GOOGLE_DRIVE_FILE",
+        "AIRTABLE_CONNECTOR",
+        "LUMA_CONNECTOR",
+        "ELASTICSEARCH_CONNECTOR",
+        "BOOKSTACK_CONNECTOR",
+        "CIRCLEBACK",
+        "NOTE",
+    )
+
+    old_connector_values_sql = ", ".join([f"'{v}'" for v in old_connector_values])
+    old_document_values_sql = ", ".join([f"'{v}'" for v in old_document_values])
+
+    # Table and column names
+    connector_table_name = "search_source_connectors"
+    connector_column_name = "connector_type"
+    document_table_name = "documents"
+    document_column_name = "document_type"
+
+    # Connector Enum Downgrade Steps
+    # 1. Rename the current connector enum type
+    op.execute(f"ALTER TYPE {CONNECTOR_ENUM} RENAME TO {old_connector_enum_name}")
+
+    # 2. Create the new connector enum type with the old values
+    op.execute(f"CREATE TYPE {CONNECTOR_ENUM} AS ENUM({old_connector_values_sql})")
+
+    # 3. Alter the column to use the new connector enum type
+    op.execute(
+        f"""
+        ALTER TABLE {connector_table_name}
+        ALTER COLUMN {connector_column_name} TYPE {CONNECTOR_ENUM}
+        USING {connector_column_name}::text::{CONNECTOR_ENUM}
+    """
+    )
+
+    # 4. Drop the old connector enum type
+    op.execute(f"DROP TYPE {old_connector_enum_name}")
+
+    # Document Enum Downgrade Steps
+    # 1. Rename the current document enum type
+    op.execute(f"ALTER TYPE {DOCUMENT_ENUM} RENAME TO {old_document_enum_name}")
+
+    # 2. Create the new document enum type with the old values
+    op.execute(f"CREATE TYPE {DOCUMENT_ENUM} AS ENUM({old_document_values_sql})")
+
+    # 3. Alter the column to use the new document enum type
+    op.execute(
+        f"""
+        ALTER TABLE {document_table_name}
+        ALTER COLUMN {document_column_name} TYPE {DOCUMENT_ENUM}
+        USING {document_column_name}::text::{DOCUMENT_ENUM}
+    """
+    )
+
+    # 4. Drop the old document enum type
+    op.execute(f"DROP TYPE {old_document_enum_name}")

surfsense_backend/app/agents/new_chat/tools/knowledge_base.py

@@ -26,6 +26,7 @@ _ALL_CONNECTORS: list[str] = [
     "EXTENSION",
     "FILE",
     "SLACK_CONNECTOR",
+    "TEAMS_CONNECTOR",
     "NOTION_CONNECTOR",
     "YOUTUBE_VIDEO",
     "GITHUB_CONNECTOR",
@@ -573,6 +574,7 @@ def create_search_knowledge_base_tool(
         - FILE: "User-uploaded documents (PDFs, Word, etc.)" (personal files)
         - NOTE: "SurfSense Notes" (notes created inside SurfSense)
         - SLACK_CONNECTOR: "Slack conversations and shared content" (personal workspace communications)
+        - TEAMS_CONNECTOR: "Microsoft Teams messages and conversations" (personal Teams communications)
         - NOTION_CONNECTOR: "Notion workspace pages and databases" (personal knowledge management)
         - YOUTUBE_VIDEO: "YouTube video transcripts and metadata" (personally saved videos)
         - GITHUB_CONNECTOR: "GitHub repository content and issues" (personal repositories and interactions)

surfsense_backend/app/config/__init__.py

@@ -117,6 +117,16 @@ class Config:
     DISCORD_REDIRECT_URI = os.getenv("DISCORD_REDIRECT_URI")
     DISCORD_BOT_TOKEN = os.getenv("DISCORD_BOT_TOKEN")
 
+    # Microsoft Teams OAuth
+    TEAMS_CLIENT_ID = os.getenv("TEAMS_CLIENT_ID")
+    TEAMS_CLIENT_SECRET = os.getenv("TEAMS_CLIENT_SECRET")
+    TEAMS_REDIRECT_URI = os.getenv("TEAMS_REDIRECT_URI")
+
+    # ClickUp OAuth
+    CLICKUP_CLIENT_ID = os.getenv("CLICKUP_CLIENT_ID")
+    CLICKUP_CLIENT_SECRET = os.getenv("CLICKUP_CLIENT_SECRET")
+    CLICKUP_REDIRECT_URI = os.getenv("CLICKUP_REDIRECT_URI")
+
     # LLM instances are now managed per-user through the LLMConfig system
     # Legacy environment variables removed in favor of user-specific configurations
 

surfsense_backend/app/connectors/airtable_connector.py

@@ -294,6 +294,12 @@ class AirtableConnector:
             Tuple of (records, error_message)
         """
         try:
+            # Validate date strings before parsing
+            if not start_date or start_date.lower() in ("undefined", "null", "none"):
+                return [], "Invalid start_date: date string is required"
+            if not end_date or end_date.lower() in ("undefined", "null", "none"):
+                return [], "Invalid end_date: date string is required"
+
             # Parse and validate dates
             start_dt = isoparse(start_date)
             end_dt = isoparse(end_date)
@@ -382,3 +388,43 @@ class AirtableConnector:
                 markdown_parts.append("")
 
         return "\n".join(markdown_parts)
+
+
+# --- OAuth User Info ---
+
+AIRTABLE_WHOAMI_URL = "https://api.airtable.com/v0/meta/whoami"
+
+
+async def fetch_airtable_user_email(access_token: str) -> str | None:
+    """
+    Fetch user email from Airtable whoami API.
+
+    Args:
+        access_token: The Airtable OAuth access token
+
+    Returns:
+        User's email address or None if fetch fails
+    """
+    try:
+        async with httpx.AsyncClient() as client:
+            response = await client.get(
+                AIRTABLE_WHOAMI_URL,
+                headers={"Authorization": f"Bearer {access_token}"},
+                timeout=10.0,
+            )
+
+            if response.status_code == 200:
+                data = response.json()
+                email = data.get("email")
+                if email:
+                    logger.debug(f"Fetched Airtable user email: {email}")
+                    return email
+
+            logger.warning(
+                f"Failed to fetch Airtable user info: {response.status_code}"
+            )
+            return None
+
+    except Exception as e:
+        logger.warning(f"Error fetching Airtable user email: {e!s}")
+        return None

surfsense_backend/app/connectors/airtable_history.py

@@ -0,0 +1,175 @@
+"""
+Airtable OAuth Connector.
+
+Handles OAuth-based authentication and token refresh for Airtable API access.
+"""
+
+import logging
+
+from sqlalchemy.ext.asyncio import AsyncSession
+from sqlalchemy.future import select
+
+from app.config import config
+from app.connectors.airtable_connector import AirtableConnector
+from app.db import SearchSourceConnector
+from app.routes.airtable_add_connector_route import refresh_airtable_token
+from app.schemas.airtable_auth_credentials import AirtableAuthCredentialsBase
+from app.utils.oauth_security import TokenEncryption
+
+logger = logging.getLogger(__name__)
+
+
+class AirtableHistoryConnector:
+    """
+    Airtable connector with OAuth support and automatic token refresh.
+
+    This connector uses OAuth 2.0 access tokens to authenticate with the
+    Airtable API. It automatically refreshes expired tokens when needed.
+    """
+
+    def __init__(
+        self,
+        session: AsyncSession,
+        connector_id: int,
+        credentials: AirtableAuthCredentialsBase | None = None,
+    ):
+        """
+        Initialize the AirtableHistoryConnector with auto-refresh capability.
+
+        Args:
+            session: Database session for updating connector
+            connector_id: Connector ID for direct updates
+            credentials: Airtable OAuth credentials (optional, will be loaded from DB if not provided)
+        """
+        self._session = session
+        self._connector_id = connector_id
+        self._credentials = credentials
+        self._airtable_connector: AirtableConnector | None = None
+
+    async def _get_valid_token(self) -> str:
+        """
+        Get valid Airtable access token, refreshing if needed.
+
+        Returns:
+            Valid access token
+
+        Raises:
+            ValueError: If credentials are missing or invalid
+            Exception: If token refresh fails
+        """
+        # Load credentials from DB if not provided
+        if self._credentials is None:
+            result = await self._session.execute(
+                select(SearchSourceConnector).filter(
+                    SearchSourceConnector.id == self._connector_id
+                )
+            )
+            connector = result.scalars().first()
+
+            if not connector:
+                raise ValueError(f"Connector {self._connector_id} not found")
+
+            config_data = connector.config.copy()
+
+            # Decrypt credentials if they are encrypted
+            token_encrypted = config_data.get("_token_encrypted", False)
+            if token_encrypted and config.SECRET_KEY:
+                try:
+                    token_encryption = TokenEncryption(config.SECRET_KEY)
+
+                    # Decrypt sensitive fields
+                    if config_data.get("access_token"):
+                        config_data["access_token"] = token_encryption.decrypt_token(
+                            config_data["access_token"]
+                        )
+                    if config_data.get("refresh_token"):
+                        config_data["refresh_token"] = token_encryption.decrypt_token(
+                            config_data["refresh_token"]
+                        )
+
+                    logger.info(
+                        f"Decrypted Airtable credentials for connector {self._connector_id}"
+                    )
+                except Exception as e:
+                    logger.error(
+                        f"Failed to decrypt Airtable credentials for connector {self._connector_id}: {e!s}"
+                    )
+                    raise ValueError(
+                        f"Failed to decrypt Airtable credentials: {e!s}"
+                    ) from e
+
+            try:
+                self._credentials = AirtableAuthCredentialsBase.from_dict(config_data)
+            except Exception as e:
+                raise ValueError(f"Invalid Airtable credentials: {e!s}") from e
+
+        # Check if token is expired and refreshable
+        if self._credentials.is_expired and self._credentials.is_refreshable:
+            try:
+                logger.info(
+                    f"Airtable token expired for connector {self._connector_id}, refreshing..."
+                )
+
+                # Get connector for refresh
+                result = await self._session.execute(
+                    select(SearchSourceConnector).filter(
+                        SearchSourceConnector.id == self._connector_id
+                    )
+                )
+                connector = result.scalars().first()
+
+                if not connector:
+                    raise RuntimeError(
+                        f"Connector {self._connector_id} not found; cannot refresh token."
+                    )
+
+                # Refresh token
+                connector = await refresh_airtable_token(self._session, connector)
+
+                # Reload credentials after refresh
+                config_data = connector.config.copy()
+                token_encrypted = config_data.get("_token_encrypted", False)
+                if token_encrypted and config.SECRET_KEY:
+                    token_encryption = TokenEncryption(config.SECRET_KEY)
+                    if config_data.get("access_token"):
+                        config_data["access_token"] = token_encryption.decrypt_token(
+                            config_data["access_token"]
+                        )
+                    if config_data.get("refresh_token"):
+                        config_data["refresh_token"] = token_encryption.decrypt_token(
+                            config_data["refresh_token"]
+                        )
+
+                self._credentials = AirtableAuthCredentialsBase.from_dict(config_data)
+
+                # Invalidate cached connector so it's recreated with new token
+                self._airtable_connector = None
+
+                logger.info(
+                    f"Successfully refreshed Airtable token for connector {self._connector_id}"
+                )
+            except Exception as e:
+                logger.error(
+                    f"Failed to refresh Airtable token for connector {self._connector_id}: {e!s}"
+                )
+                raise Exception(
+                    f"Failed to refresh Airtable OAuth credentials: {e!s}"
+                ) from e
+
+        return self._credentials.access_token
+
+    async def _get_connector(self) -> AirtableConnector:
+        """
+        Get or create AirtableConnector with valid token.
+
+        Returns:
+            AirtableConnector instance
+        """
+        if self._airtable_connector is None:
+            # Ensure we have valid credentials (this will refresh if needed)
+            await self._get_valid_token()
+            # Use the credentials object which is now guaranteed to be valid
+            if not self._credentials:
+                raise ValueError("Credentials not loaded")
+            self._airtable_connector = AirtableConnector(self._credentials)
+        return self._airtable_connector

surfsense_backend/app/connectors/clickup_history.py

@@ -0,0 +1,349 @@
+"""
+ClickUp History Module
+
+A module for retrieving data from ClickUp with OAuth support and backward compatibility.
+Allows fetching tasks from workspaces and lists with automatic token refresh.
+"""
+
+import logging
+from typing import Any
+
+from sqlalchemy.ext.asyncio import AsyncSession
+from sqlalchemy.future import select
+
+from app.config import config
+from app.connectors.clickup_connector import ClickUpConnector
+from app.db import SearchSourceConnector
+from app.routes.clickup_add_connector_route import refresh_clickup_token
+from app.schemas.clickup_auth_credentials import ClickUpAuthCredentialsBase
+from app.utils.oauth_security import TokenEncryption
+
+logger = logging.getLogger(__name__)
+
+
+class ClickUpHistoryConnector:
+    """
+    Class for retrieving data from ClickUp with OAuth support and backward compatibility.
+    """
+
+    def __init__(
+        self,
+        session: AsyncSession,
+        connector_id: int,
+        credentials: ClickUpAuthCredentialsBase | None = None,
+        api_token: str | None = None,  # For backward compatibility
+    ):
+        """
+        Initialize the ClickUpHistoryConnector.
+
+        Args:
+            session: Database session for token refresh
+            connector_id: Connector ID for direct updates
+            credentials: ClickUp OAuth credentials (optional, will be loaded from DB if not provided)
+            api_token: Legacy API token for backward compatibility (optional)
+        """
+        self._session = session
+        self._connector_id = connector_id
+        self._credentials = credentials
+        self._api_token = api_token  # Legacy API token
+        self._use_oauth = False
+        self._use_legacy = api_token is not None
+        self._clickup_client: ClickUpConnector | None = None
+
+    async def _get_valid_token(self) -> str:
+        """
+        Get valid ClickUp access token, refreshing if needed.
+        For legacy API tokens, returns the token directly.
+
+        Returns:
+            Valid access token or API token
+
+        Raises:
+            ValueError: If credentials are missing or invalid
+            Exception: If token refresh fails
+        """
+        # If using legacy API token, return it directly
+        if self._use_legacy and self._api_token:
+            return self._api_token
+
+        # Load credentials from DB if not provided
+        if self._credentials is None:
+            result = await self._session.execute(
+                select(SearchSourceConnector).filter(
+                    SearchSourceConnector.id == self._connector_id
+                )
+            )
+            connector = result.scalars().first()
+
+            if not connector:
+                raise ValueError(f"Connector {self._connector_id} not found")
+
+            config_data = connector.config.copy()
+
+            # Check if using OAuth or legacy API token
+            is_oauth = config_data.get("_token_encrypted", False) or config_data.get(
+                "access_token"
+            )
+            has_legacy_token = config_data.get("CLICKUP_API_TOKEN") is not None
+
+            if is_oauth:
+                # OAuth 2.0 authentication
+                self._use_oauth = True
+                # Decrypt credentials if they are encrypted
+                token_encrypted = config_data.get("_token_encrypted", False)
+                if token_encrypted and config.SECRET_KEY:
+                    try:
+                        token_encryption = TokenEncryption(config.SECRET_KEY)
+
+                        # Decrypt sensitive fields
+                        if config_data.get("access_token"):
+                            config_data["access_token"] = (
+                                token_encryption.decrypt_token(
+                                    config_data["access_token"]
+                                )
+                            )
+                        if config_data.get("refresh_token"):
+                            config_data["refresh_token"] = (
+                                token_encryption.decrypt_token(
+                                    config_data["refresh_token"]
+                                )
+                            )
+
+                        logger.info(
+                            f"Decrypted ClickUp OAuth credentials for connector {self._connector_id}"
+                        )
+                    except Exception as e:
+                        logger.error(
+                            f"Failed to decrypt ClickUp OAuth credentials for connector {self._connector_id}: {e!s}"
+                        )
+                        raise ValueError(
+                            f"Failed to decrypt ClickUp OAuth credentials: {e!s}"
+                        ) from e
+
+                try:
+                    self._credentials = ClickUpAuthCredentialsBase.from_dict(
+                        config_data
+                    )
+                except Exception as e:
+                    raise ValueError(f"Invalid ClickUp OAuth credentials: {e!s}") from e
+            elif has_legacy_token:
+                # Legacy API token authentication (backward compatibility)
+                self._use_legacy = True
+                self._api_token = config_data.get("CLICKUP_API_TOKEN")
+
+                # Decrypt token if it's encrypted (legacy tokens might be encrypted)
+                token_encrypted = config_data.get("_token_encrypted", False)
+                if token_encrypted and config.SECRET_KEY and self._api_token:
+                    try:
+                        token_encryption = TokenEncryption(config.SECRET_KEY)
+                        self._api_token = token_encryption.decrypt_token(
+                            self._api_token
+                        )
+                        logger.info(
+                            f"Decrypted legacy ClickUp API token for connector {self._connector_id}"
+                        )
+                    except Exception as e:
+                        logger.warning(
+                            f"Failed to decrypt legacy ClickUp API token for connector {self._connector_id}: {e!s}. "
+                            "Trying to use token as-is (might be unencrypted)."
+                        )
+                        # Continue with token as-is - might be unencrypted legacy token
+
+                if not self._api_token:
+                    raise ValueError("ClickUp API token not found in connector config")
+
+                # Return legacy token directly (no refresh needed)
+                return self._api_token
+            else:
+                raise ValueError(
+                    "ClickUp credentials not found in connector config (neither OAuth nor API token)"
+                )
+
+        # Check if token is expired and refreshable (only for OAuth)
+        if (
+            self._use_oauth
+            and self._credentials.is_expired
+            and self._credentials.is_refreshable
+        ):
+            try:
+                logger.info(
+                    f"ClickUp token expired for connector {self._connector_id}, refreshing..."
+                )
+
+                # Get connector for refresh
+                result = await self._session.execute(
+                    select(SearchSourceConnector).filter(
+                        SearchSourceConnector.id == self._connector_id
+                    )
+                )
+                connector = result.scalars().first()
+
+                if not connector:
+                    raise RuntimeError(
+                        f"Connector {self._connector_id} not found; cannot refresh token."
+                    )
+
+                # Refresh token
+                connector = await refresh_clickup_token(self._session, connector)
+
+                # Reload credentials after refresh
+                config_data = connector.config.copy()
+                token_encrypted = config_data.get("_token_encrypted", False)
+                if token_encrypted and config.SECRET_KEY:
+                    token_encryption = TokenEncryption(config.SECRET_KEY)
+                    if config_data.get("access_token"):
+                        config_data["access_token"] = token_encryption.decrypt_token(
+                            config_data["access_token"]
+                        )
+                    if config_data.get("refresh_token"):
+                        config_data["refresh_token"] = token_encryption.decrypt_token(
+                            config_data["refresh_token"]
+                        )
+
+                self._credentials = ClickUpAuthCredentialsBase.from_dict(config_data)
+
+                # Invalidate cached client so it's recreated with new token
+                self._clickup_client = None
+
+                logger.info(
+                    f"Successfully refreshed ClickUp token for connector {self._connector_id}"
+                )
+            except Exception as e:
+                logger.error(
+                    f"Failed to refresh ClickUp token for connector {self._connector_id}: {e!s}"
+                )
+                raise Exception(
+                    f"Failed to refresh ClickUp OAuth credentials: {e!s}"
+                ) from e
+
+        if self._use_oauth:
+            return self._credentials.access_token
+        else:
+            return self._api_token
+
+    async def _get_client(self) -> ClickUpConnector:
+        """
+        Get or create ClickUpConnector with valid token.
+
+        Returns:
+            ClickUpConnector instance
+        """
+        if self._clickup_client is None:
+            token = await self._get_valid_token()
+            # ClickUp API uses Bearer token for OAuth, or direct token for legacy
+            if self._use_oauth:
+                # For OAuth, use Bearer token format (ClickUp OAuth expects "Bearer {token}")
+                self._clickup_client = ClickUpConnector(api_token=f"Bearer {token}")
+            else:
+                # For legacy API token, use token directly (format: "pk_...")
+                self._clickup_client = ClickUpConnector(api_token=token)
+        return self._clickup_client
+
+    async def close(self):
+        """Close any open connections."""
+        self._clickup_client = None
+
+    async def __aenter__(self):
+        """Async context manager entry."""
+        return self
+
+    async def __aexit__(self, exc_type, exc_val, exc_tb):
+        """Async context manager exit."""
+        await self.close()
+
+    async def get_authorized_workspaces(self) -> dict[str, Any]:
+        """
+        Fetch authorized workspaces (teams) from ClickUp.
+
+        Returns:
+            Dictionary containing teams data
+
+        Raises:
+            ValueError: If credentials have not been set
+            Exception: If the API request fails
+        """
+        client = await self._get_client()
+        return client.get_authorized_workspaces()
+
+    async def get_workspace_tasks(
+        self, workspace_id: str, include_closed: bool = False
+    ) -> list[dict[str, Any]]:
+        """
+        Fetch all tasks from a ClickUp workspace.
+
+        Args:
+            workspace_id: ClickUp workspace (team) ID
+            include_closed: Whether to include closed tasks (default: False)
+
+        Returns:
+            List of task objects
+
+        Raises:
+            ValueError: If credentials have not been set
+            Exception: If the API request fails
+        """
+        client = await self._get_client()
+        return client.get_workspace_tasks(
+            workspace_id=workspace_id, include_closed=include_closed
+        )
+
+    async def get_tasks_in_date_range(
+        self,
+        workspace_id: str,
+        start_date: str,
+        end_date: str,
+        include_closed: bool = False,
+    ) -> tuple[list[dict[str, Any]], str | None]:
+        """
+        Fetch tasks from ClickUp within a specific date range.
+
+        Args:
+            workspace_id: ClickUp workspace (team) ID
+            start_date: Start date in YYYY-MM-DD format
+            end_date: End date in YYYY-MM-DD format
+            include_closed: Whether to include closed tasks (default: False)
+
+        Returns:
+            Tuple containing (tasks list, error message or None)
+        """
+        client = await self._get_client()
+        return client.get_tasks_in_date_range(
+            workspace_id=workspace_id,
+            start_date=start_date,
+            end_date=end_date,
+            include_closed=include_closed,
+        )
+
+    async def get_task_details(self, task_id: str) -> dict[str, Any]:
+        """
+        Fetch detailed information about a specific task.
+
+        Args:
+            task_id: ClickUp task ID
+
+        Returns:
+            Task details
+
+        Raises:
+            ValueError: If credentials have not been set
+            Exception: If the API request fails
+        """
+        client = await self._get_client()
+        return client.get_task_details(task_id)
+
+    async def get_task_comments(self, task_id: str) -> dict[str, Any]:
+        """
+        Fetch comments for a specific task.
+
+        Args:
+            task_id: ClickUp task ID
+
+        Returns:
+            Task comments
+
+        Raises:
+            ValueError: If credentials have not been set
+            Exception: If the API request fails
+        """
+        client = await self._get_client()
+        return client.get_task_comments(task_id)

surfsense_backend/app/connectors/google_gmail_connector.py

@@ -6,6 +6,7 @@ Allows fetching emails from Gmail mailbox using Google OAuth credentials.
 
 import base64
 import json
+import logging
 import re
 from typing import Any
 
@@ -21,6 +22,34 @@ from app.db import (
     SearchSourceConnectorType,
 )
 
+logger = logging.getLogger(__name__)
+
+
+def fetch_google_user_email(credentials: Credentials) -> str | None:
+    """
+    Fetch user email from Gmail API using Google credentials.
+
+    Uses the Gmail users.getProfile endpoint which returns the authenticated
+    user's email address.
+
+    Args:
+        credentials: Google OAuth Credentials object (not encrypted)
+
+    Returns:
+        User's email address or None if fetch fails
+    """
+    try:
+        service = build("gmail", "v1", credentials=credentials)
+        profile = service.users().getProfile(userId="me").execute()
+        email = profile.get("emailAddress")
+        if email:
+            logger.debug(f"Fetched Google user email: {email}")
+            return email
+        return None
+    except Exception as e:
+        logger.warning(f"Error fetching Google user email: {e!s}")
+        return None
+
 
 class GoogleGmailConnector:
     """Class for retrieving emails from Gmail using Google OAuth credentials."""

surfsense_backend/app/connectors/linear_connector.py

@@ -9,18 +9,65 @@ import logging
 from datetime import datetime
 from typing import Any
 
+import httpx
 import requests
 from sqlalchemy.ext.asyncio import AsyncSession
 from sqlalchemy.future import select
 
 from app.config import config
 from app.db import SearchSourceConnector
-from app.routes.linear_add_connector_route import refresh_linear_token
 from app.schemas.linear_auth_credentials import LinearAuthCredentialsBase
 from app.utils.oauth_security import TokenEncryption
 
 logger = logging.getLogger(__name__)
 
+LINEAR_GRAPHQL_URL = "https://api.linear.app/graphql"
+
+ORGANIZATION_QUERY = """
+query {
+    organization {
+        name
+    }
+}
+"""
+
+
+async def fetch_linear_organization_name(access_token: str) -> str | None:
+    """
+    Fetch organization/workspace name from Linear GraphQL API.
+
+    Args:
+        access_token: The Linear OAuth access token
+
+    Returns:
+        Organization name or None if fetch fails
+    """
+    try:
+        async with httpx.AsyncClient() as client:
+            response = await client.post(
+                LINEAR_GRAPHQL_URL,
+                headers={
+                    "Authorization": access_token,
+                    "Content-Type": "application/json",
+                },
+                json={"query": ORGANIZATION_QUERY},
+                timeout=10.0,
+            )
+
+            if response.status_code == 200:
+                data = response.json()
+                org_name = data.get("data", {}).get("organization", {}).get("name")
+                if org_name:
+                    logger.debug(f"Fetched Linear organization name: {org_name}")
+                    return org_name
+
+            logger.warning(f"Failed to fetch Linear org info: {response.status_code}")
+            return None
+
+    except Exception as e:
+        logger.warning(f"Error fetching Linear organization name: {e!s}")
+        return None
+
 
 class LinearConnector:
     """Class for retrieving issues and comments from Linear."""
@@ -121,6 +168,9 @@ class LinearConnector:
                         f"Connector {self._connector_id} not found; cannot refresh token."
                     )
 
+                # Lazy import to avoid circular dependency
+                from app.routes.linear_add_connector_route import refresh_linear_token
+
                 # Refresh token
                 connector = await refresh_linear_token(self._session, connector)
 

surfsense_backend/app/connectors/slack_history.py

@@ -377,7 +377,7 @@ class SlackHistory:
                     else:
                         raise  # Re-raise to outer handler for not_in_channel or other SlackApiErrors
 
-                if not current_api_call_successful:
+                if not current_api_call_successful or result is None:
                     continue  # Retry the current page fetch due to handled rate limit
 
                 # Process result if successful

surfsense_backend/app/connectors/teams_connector.py

@@ -0,0 +1,338 @@
+"""
+Microsoft Teams Connector
+
+A module for interacting with Microsoft Teams Graph API to retrieve teams, channels, and message history.
+
+Supports OAuth-based authentication with token refresh.
+"""
+
+import logging
+from datetime import datetime, timezone
+from typing import Any
+
+import httpx
+from sqlalchemy.ext.asyncio import AsyncSession
+from sqlalchemy.future import select
+
+from app.config import config
+from app.db import SearchSourceConnector
+from app.routes.teams_add_connector_route import refresh_teams_token
+from app.schemas.teams_auth_credentials import TeamsAuthCredentialsBase
+from app.utils.oauth_security import TokenEncryption
+
+logger = logging.getLogger(__name__)
+
+
+class TeamsConnector:
+    """Class for retrieving teams, channels, and message history from Microsoft Teams."""
+
+    # Microsoft Graph API endpoints
+    GRAPH_API_BASE = "https://graph.microsoft.com/v1.0"
+
+    def __init__(
+        self,
+        access_token: str | None = None,
+        session: AsyncSession | None = None,
+        connector_id: int | None = None,
+        credentials: TeamsAuthCredentialsBase | None = None,
+    ):
+        """
+        Initialize the TeamsConnector with an access token or OAuth credentials.
+
+        Args:
+            access_token: Microsoft Graph API access token (optional, for backward compatibility)
+            session: Database session for token refresh (optional)
+            connector_id: Connector ID for token refresh (optional)
+            credentials: Teams OAuth credentials (optional, will be loaded from DB if not provided)
+        """
+        self._session = session
+        self._connector_id = connector_id
+        self._credentials = credentials
+        self._access_token = access_token
+
+    async def _get_valid_token(self) -> str:
+        """
+        Get valid Microsoft Teams access token, refreshing if needed.
+
+        Returns:
+            Valid access token
+
+        Raises:
+            ValueError: If credentials are missing or invalid
+            Exception: If token refresh fails
+        """
+        # If we have a direct token (backward compatibility), use it
+        if (
+            self._access_token
+            and self._session is None
+            and self._connector_id is None
+            and self._credentials is None
+        ):
+            return self._access_token
+
+        # Load credentials from DB if not provided
+        if self._credentials is None:
+            if not self._session or not self._connector_id:
+                raise ValueError(
+                    "Cannot load credentials: session and connector_id required"
+                )
+
+            result = await self._session.execute(
+                select(SearchSourceConnector).filter(
+                    SearchSourceConnector.id == self._connector_id
+                )
+            )
+            connector = result.scalars().first()
+
+            if not connector:
+                raise ValueError(f"Connector {self._connector_id} not found")
+
+            config_data = connector.config.copy()
+
+            # Decrypt credentials if they are encrypted
+            token_encrypted = config_data.get("_token_encrypted", False)
+            if token_encrypted and config.SECRET_KEY:
+                try:
+                    token_encryption = TokenEncryption(config.SECRET_KEY)
+
+                    # Decrypt sensitive fields
+                    if config_data.get("access_token"):
+                        config_data["access_token"] = token_encryption.decrypt_token(
+                            config_data["access_token"]
+                        )
+                    if config_data.get("refresh_token"):
+                        config_data["refresh_token"] = token_encryption.decrypt_token(
+                            config_data["refresh_token"]
+                        )
+
+                    logger.info(
+                        "Decrypted Teams credentials for connector %s",
+                        self._connector_id,
+                    )
+                except Exception as e:
+                    logger.error(
+                        "Failed to decrypt Teams credentials for connector %s: %s",
+                        self._connector_id,
+                        str(e),
+                    )
+                    raise ValueError(
+                        f"Failed to decrypt Teams credentials: {e!s}"
+                    ) from e
+
+            try:
+                self._credentials = TeamsAuthCredentialsBase.from_dict(config_data)
+            except Exception as e:
+                raise ValueError(f"Invalid Teams credentials: {e!s}") from e
+
+        # Check if token is expired and refreshable
+        if self._credentials.is_expired and self._credentials.is_refreshable:
+            try:
+                logger.info(
+                    "Teams token expired for connector %s, refreshing...",
+                    self._connector_id,
+                )
+
+                # Get connector for refresh
+                result = await self._session.execute(
+                    select(SearchSourceConnector).filter(
+                        SearchSourceConnector.id == self._connector_id
+                    )
+                )
+                connector = result.scalars().first()
+
+                if not connector:
+                    raise RuntimeError(
+                        f"Connector {self._connector_id} not found; cannot refresh token."
+                    )
+
+                # Refresh token
+                connector = await refresh_teams_token(self._session, connector)
+
+                # Reload credentials after refresh
+                config_data = connector.config.copy()
+                token_encrypted = config_data.get("_token_encrypted", False)
+                if token_encrypted and config.SECRET_KEY:
+                    token_encryption = TokenEncryption(config.SECRET_KEY)
+                    if config_data.get("access_token"):
+                        config_data["access_token"] = token_encryption.decrypt_token(
+                            config_data["access_token"]
+                        )
+                    if config_data.get("refresh_token"):
+                        config_data["refresh_token"] = token_encryption.decrypt_token(
+                            config_data["refresh_token"]
+                        )
+
+                self._credentials = TeamsAuthCredentialsBase.from_dict(config_data)
+
+                logger.info(
+                    "Successfully refreshed Teams token for connector %s",
+                    self._connector_id,
+                )
+            except Exception as e:
+                logger.error(
+                    "Failed to refresh Teams token for connector %s: %s",
+                    self._connector_id,
+                    str(e),
+                )
+                raise ValueError(
+                    f"Failed to refresh Teams OAuth credentials: {e!s}"
+                ) from e
+
+        return self._credentials.access_token
+
+    async def get_joined_teams(self) -> list[dict[str, Any]]:
+        """
+        Get list of all teams the user is a member of.
+
+        Returns:
+            List of team objects with id, display_name, etc.
+        """
+        access_token = await self._get_valid_token()
+
+        async with httpx.AsyncClient() as client:
+            response = await client.get(
+                f"{self.GRAPH_API_BASE}/me/joinedTeams",
+                headers={"Authorization": f"Bearer {access_token}"},
+                timeout=30.0,
+            )
+
+            if response.status_code != 200:
+                raise ValueError(
+                    f"Failed to get joined teams: {response.status_code} - {response.text}"
+                )
+
+            data = response.json()
+            return data.get("value", [])
+
+    async def get_team_channels(self, team_id: str) -> list[dict[str, Any]]:
+        """
+        Get list of all channels in a team.
+
+        Args:
+            team_id: The team ID
+
+        Returns:
+            List of channel objects
+        """
+        access_token = await self._get_valid_token()
+
+        async with httpx.AsyncClient() as client:
+            response = await client.get(
+                f"{self.GRAPH_API_BASE}/teams/{team_id}/channels",
+                headers={"Authorization": f"Bearer {access_token}"},
+                timeout=30.0,
+            )
+
+            if response.status_code != 200:
+                raise ValueError(
+                    f"Failed to get channels for team {team_id}: {response.status_code} - {response.text}"
+                )
+
+            data = response.json()
+            return data.get("value", [])
+
+    async def get_channel_messages(
+        self,
+        team_id: str,
+        channel_id: str,
+        start_date: datetime | None = None,
+        end_date: datetime | None = None,
+    ) -> list[dict[str, Any]]:
+        """
+        Get messages from a specific channel with optional date filtering.
+
+        Args:
+            team_id: The team ID
+            channel_id: The channel ID
+            start_date: Optional start date for filtering messages
+            end_date: Optional end date for filtering messages
+
+        Returns:
+            List of message objects
+        """
+        access_token = await self._get_valid_token()
+
+        async with httpx.AsyncClient() as client:
+            url = f"{self.GRAPH_API_BASE}/teams/{team_id}/channels/{channel_id}/messages"
+
+            # Note: The Graph API for channel messages doesn't support $filter parameter
+            # We fetch all messages and filter them client-side
+            response = await client.get(
+                url,
+                headers={"Authorization": f"Bearer {access_token}"},
+                timeout=30.0,
+            )
+
+            if response.status_code != 200:
+                raise ValueError(
+                    f"Failed to get messages from channel {channel_id}: {response.status_code} - {response.text}"
+                )
+
+            data = response.json()
+            messages = data.get("value", [])
+            
+            # Filter messages by date if needed (client-side filtering)
+            if start_date or end_date:
+                # Make sure comparison dates are timezone-aware (UTC)
+                if start_date and start_date.tzinfo is None:
+                    start_date = start_date.replace(tzinfo=timezone.utc)
+                if end_date and end_date.tzinfo is None:
+                    end_date = end_date.replace(tzinfo=timezone.utc)
+                
+                filtered_messages = []
+                for message in messages:
+                    created_at_str = message.get("createdDateTime")
+                    if not created_at_str:
+                        continue
+                    
+                    # Parse the ISO 8601 datetime string (already timezone-aware)
+                    created_at = datetime.fromisoformat(created_at_str.replace('Z', '+00:00'))
+                    
+                    # Check if message is within date range
+                    if start_date and created_at < start_date:
+                        continue
+                    if end_date and created_at > end_date:
+                        continue
+                    
+                    filtered_messages.append(message)
+                
+                return filtered_messages
+            
+            return messages
+
+    async def get_message_replies(
+        self, team_id: str, channel_id: str, message_id: str
+    ) -> list[dict[str, Any]]:
+        """
+        Get replies to a specific message.
+
+        Args:
+            team_id: The team ID
+            channel_id: The channel ID
+            message_id: The message ID
+
+        Returns:
+            List of reply message objects
+        """
+        access_token = await self._get_valid_token()
+
+        async with httpx.AsyncClient() as client:
+            url = f"{self.GRAPH_API_BASE}/teams/{team_id}/channels/{channel_id}/messages/{message_id}/replies"
+
+            response = await client.get(
+                url,
+                headers={"Authorization": f"Bearer {access_token}"},
+                timeout=30.0,
+            )
+
+            if response.status_code != 200:
+                logger.warning(
+                    "Failed to get replies for message %s: %s - %s",
+                    message_id,
+                    response.status_code,
+                    response.text,
+                )
+                return []
+
+            data = response.json()
+            return data.get("value", [])

surfsense_backend/app/connectors/teams_history.py

@@ -0,0 +1,254 @@
+"""
+Microsoft Teams History Module
+
+A module for retrieving conversation history from Microsoft Teams channels.
+Allows fetching team lists, channel lists, and message history with date range filtering.
+"""
+
+import logging
+from datetime import datetime
+from typing import Any
+
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from app.connectors.teams_connector import TeamsConnector
+from app.schemas.teams_auth_credentials import TeamsAuthCredentialsBase
+
+logger = logging.getLogger(__name__)
+
+
+class TeamsHistory:
+    """Class for retrieving conversation history from Microsoft Teams channels."""
+
+    def __init__(
+        self,
+        access_token: str | None = None,
+        session: AsyncSession | None = None,
+        connector_id: int | None = None,
+        credentials: TeamsAuthCredentialsBase | None = None,
+    ):
+        """
+        Initialize the TeamsHistory class.
+
+        Args:
+            access_token: Microsoft Graph API access token (optional, for backward compatibility)
+            session: Database session for token refresh (optional)
+            connector_id: Connector ID for token refresh (optional)
+            credentials: Teams OAuth credentials (optional, will be loaded from DB if not provided)
+        """
+        self.connector = TeamsConnector(
+            access_token=access_token,
+            session=session,
+            connector_id=connector_id,
+            credentials=credentials,
+        )
+
+    async def get_all_teams(self) -> list[dict[str, Any]]:
+        """
+        Get list of all teams the user has access to.
+
+        Returns:
+            List of team objects containing team metadata.
+        """
+        try:
+            teams = await self.connector.get_joined_teams()
+            logger.info("Retrieved %s teams", len(teams))
+            return teams
+        except Exception as e:
+            logger.error("Error fetching teams: %s", str(e))
+            raise
+
+    async def get_channels_for_team(self, team_id: str) -> list[dict[str, Any]]:
+        """
+        Get list of all channels in a specific team.
+
+        Args:
+            team_id: The ID of the team
+
+        Returns:
+            List of channel objects containing channel metadata.
+        """
+        try:
+            channels = await self.connector.get_team_channels(team_id)
+            logger.info("Retrieved %s channels for team %s", len(channels), team_id)
+            return channels
+        except Exception as e:
+            logger.error("Error fetching channels for team %s: %s", team_id, str(e))
+            raise
+
+    async def get_messages_from_channel(
+        self,
+        team_id: str,
+        channel_id: str,
+        start_date: datetime | None = None,
+        end_date: datetime | None = None,
+        include_replies: bool = True,
+    ) -> list[dict[str, Any]]:
+        """
+        Get messages from a specific channel with optional date filtering.
+
+        Args:
+            team_id: The ID of the team
+            channel_id: The ID of the channel
+            start_date: Optional start date for filtering messages
+            end_date: Optional end date for filtering messages
+            include_replies: Whether to include reply messages (default: True)
+
+        Returns:
+            List of message objects with content and metadata.
+        """
+        try:
+            messages = await self.connector.get_channel_messages(
+                team_id, channel_id, start_date, end_date
+            )
+
+            logger.info(
+                "Retrieved %s messages from channel %s in team %s",
+                len(messages),
+                channel_id,
+                team_id,
+            )
+
+            # Fetch replies if requested
+            if include_replies:
+                all_messages = []
+                for message in messages:
+                    all_messages.append(message)
+                    # Get replies for this message
+                    try:
+                        replies = await self.connector.get_message_replies(
+                            team_id, channel_id, message.get("id")
+                        )
+                        all_messages.extend(replies)
+                    except Exception:
+                        logger.warning(
+                            "Failed to get replies for message %s",
+                            message.get("id"),
+                            exc_info=True,
+                        )
+                        # Continue without replies for this message
+
+                logger.info(
+                    "Total messages including replies: %s for channel %s",
+                    len(all_messages),
+                    channel_id,
+                )
+                return all_messages
+
+            return messages
+
+        except Exception as e:
+            logger.error(
+                "Error fetching messages from channel %s in team %s: %s",
+                channel_id,
+                team_id,
+                str(e),
+            )
+            raise
+
+    async def get_all_messages_from_team(
+        self,
+        team_id: str,
+        start_date: datetime | None = None,
+        end_date: datetime | None = None,
+        include_replies: bool = True,
+    ) -> dict[str, list[dict[str, Any]]]:
+        """
+        Get all messages from all channels in a team.
+
+        Args:
+            team_id: The ID of the team
+            start_date: Optional start date for filtering messages
+            end_date: Optional end date for filtering messages
+            include_replies: Whether to include reply messages (default: True)
+
+        Returns:
+            Dictionary mapping channel IDs to lists of messages.
+        """
+        try:
+            channels = await self.get_channels_for_team(team_id)
+            all_channel_messages = {}
+
+            for channel in channels:
+                channel_id = channel.get("id")
+                channel_name = channel.get("displayName", "Unknown")
+
+                try:
+                    messages = await self.get_messages_from_channel(
+                        team_id, channel_id, start_date, end_date, include_replies
+                    )
+                    all_channel_messages[channel_id] = messages
+                    logger.info(
+                        "Fetched %s messages from channel '%s' (%s)",
+                        len(messages),
+                        channel_name,
+                        channel_id,
+                    )
+                except Exception:
+                    logger.error(
+                        "Failed to fetch messages from channel '%s' (%s)",
+                        channel_name,
+                        channel_id,
+                        exc_info=True,
+                    )
+                    all_channel_messages[channel_id] = []
+
+            return all_channel_messages
+
+        except Exception as e:
+            logger.error("Error fetching messages from team %s: %s", team_id, str(e))
+            raise
+
+    async def get_all_messages(
+        self,
+        start_date: datetime | None = None,
+        end_date: datetime | None = None,
+        include_replies: bool = True,
+    ) -> dict[str, dict[str, list[dict[str, Any]]]]:
+        """
+        Get all messages from all teams and channels the user has access to.
+
+        Args:
+            start_date: Optional start date for filtering messages
+            end_date: Optional end date for filtering messages
+            include_replies: Whether to include reply messages (default: True)
+
+        Returns:
+            Nested dictionary: team_id -> channel_id -> list of messages.
+        """
+        try:
+            teams = await self.get_all_teams()
+            all_messages = {}
+
+            for team in teams:
+                team_id = team.get("id")
+                team_name = team.get("displayName", "Unknown")
+
+                try:
+                    team_messages = await self.get_all_messages_from_team(
+                        team_id, start_date, end_date, include_replies
+                    )
+                    all_messages[team_id] = team_messages
+                    total_messages = sum(
+                        len(messages) for messages in team_messages.values()
+                    )
+                    logger.info(
+                        "Fetched %s total messages from team '%s' (%s)",
+                        total_messages,
+                        team_name,
+                        team_id,
+                    )
+                except Exception:
+                    logger.error(
+                        "Failed to fetch messages from team '%s' (%s)",
+                        team_name,
+                        team_id,
+                        exc_info=True,
+                    )
+                    all_messages[team_id] = {}
+
+            return all_messages
+
+        except Exception as e:
+            logger.error("Error fetching all messages: %s", str(e))
+            raise

surfsense_backend/app/db.py

@@ -36,6 +36,7 @@ class DocumentType(str, Enum):
     CRAWLED_URL = "CRAWLED_URL"
     FILE = "FILE"
     SLACK_CONNECTOR = "SLACK_CONNECTOR"
+    TEAMS_CONNECTOR = "TEAMS_CONNECTOR"
     NOTION_CONNECTOR = "NOTION_CONNECTOR"
     YOUTUBE_VIDEO = "YOUTUBE_VIDEO"
     GITHUB_CONNECTOR = "GITHUB_CONNECTOR"
@@ -62,6 +63,7 @@ class SearchSourceConnectorType(str, Enum):
     LINKUP_API = "LINKUP_API"
     BAIDU_SEARCH_API = "BAIDU_SEARCH_API"  # Baidu AI Search API for Chinese web search
     SLACK_CONNECTOR = "SLACK_CONNECTOR"
+    TEAMS_CONNECTOR = "TEAMS_CONNECTOR"
     NOTION_CONNECTOR = "NOTION_CONNECTOR"
     GITHUB_CONNECTOR = "GITHUB_CONNECTOR"
     LINEAR_CONNECTOR = "LINEAR_CONNECTOR"

surfsense_backend/app/routes/__init__.py

@@ -4,6 +4,7 @@ from .airtable_add_connector_route import (
     router as airtable_add_connector_router,
 )
 from .circleback_webhook_route import router as circleback_webhook_router
+from .clickup_add_connector_route import router as clickup_add_connector_router
 from .confluence_add_connector_route import router as confluence_add_connector_router
 from .discord_add_connector_route import router as discord_add_connector_router
 from .documents_routes import router as documents_router
@@ -30,6 +31,7 @@ from .rbac_routes import router as rbac_router
 from .search_source_connectors_routes import router as search_source_connectors_router
 from .search_spaces_routes import router as search_spaces_router
 from .slack_add_connector_route import router as slack_add_connector_router
+from .teams_add_connector_route import router as teams_add_connector_router
 
 router = APIRouter()
 
@@ -49,9 +51,11 @@ router.include_router(linear_add_connector_router)
 router.include_router(luma_add_connector_router)
 router.include_router(notion_add_connector_router)
 router.include_router(slack_add_connector_router)
+router.include_router(teams_add_connector_router)
 router.include_router(discord_add_connector_router)
 router.include_router(jira_add_connector_router)
 router.include_router(confluence_add_connector_router)
+router.include_router(clickup_add_connector_router)
 router.include_router(new_llm_config_router)  # LLM configs with prompt configuration
 router.include_router(logs_router)
 router.include_router(circleback_webhook_router)  # Circleback meeting webhooks

surfsense_backend/app/routes/airtable_add_connector_route.py

@@ -11,9 +11,9 @@ from fastapi.responses import RedirectResponse
 from pydantic import ValidationError
 from sqlalchemy.exc import IntegrityError
 from sqlalchemy.ext.asyncio import AsyncSession
-from sqlalchemy.future import select
 
 from app.config import config
+from app.connectors.airtable_connector import fetch_airtable_user_email
 from app.db import (
     SearchSourceConnector,
     SearchSourceConnectorType,
@@ -22,6 +22,10 @@ from app.db import (
 )
 from app.schemas.airtable_auth_credentials import AirtableAuthCredentialsBase
 from app.users import current_active_user
+from app.utils.connector_naming import (
+    check_duplicate_connector,
+    generate_unique_connector_name,
+)
 from app.utils.oauth_security import OAuthStateManager, TokenEncryption
 
 logger = logging.getLogger(__name__)
@@ -275,6 +279,8 @@ async def airtable_callback(
                 status_code=400, detail="No access token received from Airtable"
             )
 
+        user_email = await fetch_airtable_user_email(access_token)
+
         # Calculate expiration time (UTC, tz-aware)
         expires_at = None
         if token_json.get("expires_in"):
@@ -297,39 +303,43 @@ async def airtable_callback(
         credentials_dict = credentials.to_dict()
         credentials_dict["_token_encrypted"] = True
 
-        # Check if connector already exists for this search space and user
+        # Check for duplicate connector (same account already connected)
-        existing_connector_result = await session.execute(
+        is_duplicate = await check_duplicate_connector(
-            select(SearchSourceConnector).filter(
+            session,
-                SearchSourceConnector.search_space_id == space_id,
+            SearchSourceConnectorType.AIRTABLE_CONNECTOR,
-                SearchSourceConnector.user_id == user_id,
+            space_id,
-                SearchSourceConnector.connector_type
+            user_id,
-                == SearchSourceConnectorType.AIRTABLE_CONNECTOR,
+            user_email,
-            )
         )
-        existing_connector = existing_connector_result.scalars().first()
+        if is_duplicate:
+            logger.warning(
+                f"Duplicate Airtable connector detected for user {user_id} with email {user_email}"
+            )
+            return RedirectResponse(
+                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&error=duplicate_account&connector=airtable-connector"
+            )
 
-        if existing_connector:
+        # Generate a unique, user-friendly connector name
-            # Update existing connector
+        connector_name = await generate_unique_connector_name(
-            existing_connector.config = credentials_dict
+            session,
-            existing_connector.name = "Airtable Connector"
+            SearchSourceConnectorType.AIRTABLE_CONNECTOR,
-            existing_connector.is_indexable = True
+            space_id,
-            logger.info(
+            user_id,
-                f"Updated existing Airtable connector for user {user_id} in space {space_id}"
+            user_email,
-            )
+        )
-        else:
+        # Create new connector
-            # Create new connector
+        new_connector = SearchSourceConnector(
-            new_connector = SearchSourceConnector(
+            name=connector_name,
-                name="Airtable Connector",
+            connector_type=SearchSourceConnectorType.AIRTABLE_CONNECTOR,
-                connector_type=SearchSourceConnectorType.AIRTABLE_CONNECTOR,
+            is_indexable=True,
-                is_indexable=True,
+            config=credentials_dict,
-                config=credentials_dict,
+            search_space_id=space_id,
-                search_space_id=space_id,
+            user_id=user_id,
-                user_id=user_id,
+        )
-            )
+        session.add(new_connector)
-            session.add(new_connector)
+        logger.info(
-            logger.info(
+            f"Created new Airtable connector for user {user_id} in space {space_id}"
-                f"Created new Airtable connector for user {user_id} in space {space_id}"
+        )
-            )
 
         try:
             await session.commit()
@@ -338,7 +348,7 @@ async def airtable_callback(
             # Redirect to the frontend with success params for indexing config
             # Using query params to auto-open the popup with config view on new-chat page
             return RedirectResponse(
-                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=airtable-connector"
+                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=airtable-connector&connectorId={new_connector.id}"
             )
 
         except ValidationError as e:
@@ -350,7 +360,7 @@ async def airtable_callback(
             await session.rollback()
             raise HTTPException(
                 status_code=409,
-                detail=f"Integrity error: A connector with this type already exists. {e!s}",
+                detail=f"Database integrity error: {e!s}",
             ) from e
         except Exception as e:
             logger.error(f"Failed to create search source connector: {e!s}")
@@ -371,7 +381,7 @@ async def airtable_callback(
 
 async def refresh_airtable_token(
     session: AsyncSession, connector: SearchSourceConnector
-):
+) -> SearchSourceConnector:
     """
     Refresh the Airtable access token for a connector.
 
@@ -401,6 +411,12 @@ async def refresh_airtable_token(
                     status_code=500, detail="Failed to decrypt stored refresh token"
                 ) from e
 
+        if not refresh_token:
+            raise HTTPException(
+                status_code=400,
+                detail="No refresh token available. Please re-authenticate.",
+            )
+
         auth_header = make_basic_auth_header(
             config.AIRTABLE_CLIENT_ID, config.AIRTABLE_CLIENT_SECRET
         )
@@ -425,8 +441,14 @@ async def refresh_airtable_token(
             )
 
         if token_response.status_code != 200:
+            error_detail = token_response.text
+            try:
+                error_json = token_response.json()
+                error_detail = error_json.get("error_description", error_detail)
+            except Exception:
+                pass
             raise HTTPException(
-                status_code=400, detail="Token refresh failed: {token_response.text}"
+                status_code=400, detail=f"Token refresh failed: {error_detail}"
             )
 
         token_json = token_response.json()
@@ -468,6 +490,8 @@ async def refresh_airtable_token(
         )
 
         return connector
+    except HTTPException:
+        raise
     except Exception as e:
         raise HTTPException(
             status_code=500, detail=f"Failed to refresh Airtable token: {e!s}"

surfsense_backend/app/routes/clickup_add_connector_route.py

@@ -0,0 +1,481 @@
+"""
+ClickUp Connector OAuth Routes.
+
+Handles OAuth 2.0 authentication flow for ClickUp connector.
+"""
+
+import logging
+from datetime import UTC, datetime, timedelta
+from uuid import UUID
+
+import httpx
+from fastapi import APIRouter, Depends, HTTPException, Request
+from fastapi.responses import RedirectResponse
+from pydantic import ValidationError
+from sqlalchemy.exc import IntegrityError
+from sqlalchemy.ext.asyncio import AsyncSession
+from sqlalchemy.future import select
+
+from app.config import config
+from app.db import (
+    SearchSourceConnector,
+    SearchSourceConnectorType,
+    User,
+    get_async_session,
+)
+from app.schemas.clickup_auth_credentials import ClickUpAuthCredentialsBase
+from app.users import current_active_user
+from app.utils.oauth_security import OAuthStateManager, TokenEncryption
+
+logger = logging.getLogger(__name__)
+
+router = APIRouter()
+
+# ClickUp OAuth endpoints
+AUTHORIZATION_URL = "https://app.clickup.com/api"
+TOKEN_URL = "https://api.clickup.com/api/v2/oauth/token"
+
+# Initialize security utilities
+_state_manager = None
+_token_encryption = None
+
+
+def get_state_manager() -> OAuthStateManager:
+    """Get or create OAuth state manager instance."""
+    global _state_manager
+    if _state_manager is None:
+        if not config.SECRET_KEY:
+            raise ValueError("SECRET_KEY must be set for OAuth security")
+        _state_manager = OAuthStateManager(config.SECRET_KEY)
+    return _state_manager
+
+
+def get_token_encryption() -> TokenEncryption:
+    """Get or create token encryption instance."""
+    global _token_encryption
+    if _token_encryption is None:
+        if not config.SECRET_KEY:
+            raise ValueError("SECRET_KEY must be set for token encryption")
+        _token_encryption = TokenEncryption(config.SECRET_KEY)
+    return _token_encryption
+
+
+@router.get("/auth/clickup/connector/add")
+async def connect_clickup(space_id: int, user: User = Depends(current_active_user)):
+    """
+    Initiate ClickUp OAuth flow.
+
+    Args:
+        space_id: The search space ID
+        user: Current authenticated user
+
+    Returns:
+        Authorization URL for redirect
+    """
+    try:
+        if not space_id:
+            raise HTTPException(status_code=400, detail="space_id is required")
+
+        if not config.CLICKUP_CLIENT_ID:
+            raise HTTPException(status_code=500, detail="ClickUp OAuth not configured.")
+
+        if not config.SECRET_KEY:
+            raise HTTPException(
+                status_code=500, detail="SECRET_KEY not configured for OAuth security."
+            )
+
+        # Generate secure state parameter with HMAC signature
+        state_manager = get_state_manager()
+        state_encoded = state_manager.generate_secure_state(space_id, user.id)
+
+        # Build authorization URL
+        from urllib.parse import urlencode
+
+        auth_params = {
+            "client_id": config.CLICKUP_CLIENT_ID,
+            "redirect_uri": config.CLICKUP_REDIRECT_URI,
+            "state": state_encoded,
+        }
+
+        auth_url = f"{AUTHORIZATION_URL}?{urlencode(auth_params)}"
+
+        logger.info(f"Generated ClickUp OAuth URL for user {user.id}, space {space_id}")
+        return {"auth_url": auth_url}
+
+    except Exception as e:
+        logger.error(f"Failed to initiate ClickUp OAuth: {e!s}", exc_info=True)
+        raise HTTPException(
+            status_code=500, detail=f"Failed to initiate ClickUp OAuth: {e!s}"
+        ) from e
+
+
+@router.get("/auth/clickup/connector/callback")
+async def clickup_callback(
+    request: Request,
+    code: str | None = None,
+    error: str | None = None,
+    state: str | None = None,
+    session: AsyncSession = Depends(get_async_session),
+):
+    """
+    Handle ClickUp OAuth callback.
+
+    Args:
+        request: FastAPI request object
+        code: Authorization code from ClickUp (if user granted access)
+        error: Error code from ClickUp (if user denied access or error occurred)
+        state: State parameter containing user/space info
+        session: Database session
+
+    Returns:
+        Redirect response to frontend
+    """
+    try:
+        # Handle OAuth errors (e.g., user denied access)
+        if error:
+            logger.warning(f"ClickUp OAuth error: {error}")
+            # Try to decode state to get space_id for redirect, but don't fail if it's invalid
+            space_id = None
+            if state:
+                try:
+                    state_manager = get_state_manager()
+                    data = state_manager.validate_state(state)
+                    space_id = data.get("space_id")
+                except Exception:
+                    # If state is invalid, we'll redirect without space_id
+                    logger.warning("Failed to validate state in error handler")
+
+            # Redirect to frontend with error parameter
+            if space_id:
+                return RedirectResponse(
+                    url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&error=clickup_oauth_denied"
+                )
+            else:
+                return RedirectResponse(
+                    url=f"{config.NEXT_FRONTEND_URL}/dashboard?error=clickup_oauth_denied"
+                )
+
+        # Validate required parameters for successful flow
+        if not code:
+            raise HTTPException(status_code=400, detail="Missing authorization code")
+        if not state:
+            raise HTTPException(status_code=400, detail="Missing state parameter")
+
+        # Validate and decode state with signature verification
+        state_manager = get_state_manager()
+        try:
+            data = state_manager.validate_state(state)
+        except HTTPException:
+            raise
+        except Exception as e:
+            raise HTTPException(
+                status_code=400, detail=f"Invalid state parameter: {e!s}"
+            ) from e
+
+        user_id = UUID(data["user_id"])
+        space_id = data["space_id"]
+
+        # Validate redirect URI (security: ensure it matches configured value)
+        if not config.CLICKUP_REDIRECT_URI:
+            raise HTTPException(
+                status_code=500, detail="CLICKUP_REDIRECT_URI not configured"
+            )
+
+        # Exchange authorization code for access token
+        token_data = {
+            "client_id": config.CLICKUP_CLIENT_ID,
+            "client_secret": config.CLICKUP_CLIENT_SECRET,
+            "code": code,
+        }
+
+        async with httpx.AsyncClient() as client:
+            token_response = await client.post(
+                TOKEN_URL,
+                json=token_data,
+                headers={"Content-Type": "application/json"},
+                timeout=30.0,
+            )
+
+        if token_response.status_code != 200:
+            error_detail = token_response.text
+            try:
+                error_json = token_response.json()
+                error_detail = error_json.get("error", error_detail)
+            except Exception:
+                pass
+            raise HTTPException(
+                status_code=400, detail=f"Token exchange failed: {error_detail}"
+            )
+
+        token_json = token_response.json()
+
+        # Extract access token
+        access_token = token_json.get("access_token")
+        if not access_token:
+            raise HTTPException(
+                status_code=400, detail="No access token received from ClickUp"
+            )
+
+        # Extract refresh token if available
+        refresh_token = token_json.get("refresh_token")
+
+        # Encrypt sensitive tokens before storing
+        token_encryption = get_token_encryption()
+
+        # Calculate expiration time (UTC, tz-aware)
+        expires_at = None
+        expires_in = token_json.get("expires_in")
+        if expires_in:
+            now_utc = datetime.now(UTC)
+            expires_at = now_utc + timedelta(seconds=int(expires_in))
+
+        # Get user information and workspace information from ClickUp API
+        user_info = {}
+        workspace_info = {}
+        try:
+            async with httpx.AsyncClient() as client:
+                # Get user info
+                user_response = await client.get(
+                    "https://api.clickup.com/api/v2/user",
+                    headers={"Authorization": f"Bearer {access_token}"},
+                    timeout=30.0,
+                )
+                if user_response.status_code == 200:
+                    user_data = user_response.json().get("user", {})
+                    user_info = {
+                        "user_id": str(user_data.get("id"))
+                        if user_data.get("id") is not None
+                        else None,
+                        "user_email": user_data.get("email"),
+                        "user_name": user_data.get("username"),
+                    }
+
+                # Get workspace (team) info - get the first workspace
+                team_response = await client.get(
+                    "https://api.clickup.com/api/v2/team",
+                    headers={"Authorization": f"Bearer {access_token}"},
+                    timeout=30.0,
+                )
+                if team_response.status_code == 200:
+                    teams_data = team_response.json().get("teams", [])
+                    if teams_data and len(teams_data) > 0:
+                        first_team = teams_data[0]
+                        workspace_info = {
+                            "workspace_id": str(first_team.get("id"))
+                            if first_team.get("id") is not None
+                            else None,
+                            "workspace_name": first_team.get("name"),
+                        }
+        except Exception as e:
+            logger.warning(f"Failed to fetch user/workspace info from ClickUp: {e!s}")
+
+        # Store the encrypted tokens and user/workspace info in connector config
+        connector_config = {
+            "access_token": token_encryption.encrypt_token(access_token),
+            "refresh_token": token_encryption.encrypt_token(refresh_token)
+            if refresh_token
+            else None,
+            "expires_in": expires_in,
+            "expires_at": expires_at.isoformat() if expires_at else None,
+            "user_id": user_info.get("user_id"),
+            "user_email": user_info.get("user_email"),
+            "user_name": user_info.get("user_name"),
+            "workspace_id": workspace_info.get("workspace_id"),
+            "workspace_name": workspace_info.get("workspace_name"),
+            # Mark that token is encrypted for backward compatibility
+            "_token_encrypted": True,
+        }
+
+        # Check if connector already exists for this search space and user
+        existing_connector_result = await session.execute(
+            select(SearchSourceConnector).filter(
+                SearchSourceConnector.search_space_id == space_id,
+                SearchSourceConnector.user_id == user_id,
+                SearchSourceConnector.connector_type
+                == SearchSourceConnectorType.CLICKUP_CONNECTOR,
+            )
+        )
+        existing_connector = existing_connector_result.scalars().first()
+
+        if existing_connector:
+            # Update existing connector
+            existing_connector.config = connector_config
+            existing_connector.name = "ClickUp Connector"
+            existing_connector.is_indexable = True
+            logger.info(
+                f"Updated existing ClickUp connector for user {user_id} in space {space_id}"
+            )
+        else:
+            # Create new connector
+            new_connector = SearchSourceConnector(
+                name="ClickUp Connector",
+                connector_type=SearchSourceConnectorType.CLICKUP_CONNECTOR,
+                is_indexable=True,
+                config=connector_config,
+                search_space_id=space_id,
+                user_id=user_id,
+            )
+            session.add(new_connector)
+            logger.info(
+                f"Created new ClickUp connector for user {user_id} in space {space_id}"
+            )
+
+        try:
+            await session.commit()
+            logger.info(f"Successfully saved ClickUp connector for user {user_id}")
+
+            # Redirect to the frontend with success params
+            return RedirectResponse(
+                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=clickup-connector"
+            )
+
+        except ValidationError as e:
+            await session.rollback()
+            raise HTTPException(
+                status_code=422, detail=f"Validation error: {e!s}"
+            ) from e
+        except IntegrityError as e:
+            await session.rollback()
+            raise HTTPException(
+                status_code=409,
+                detail=f"Integrity error: A connector with this type already exists. {e!s}",
+            ) from e
+        except Exception as e:
+            logger.error(f"Failed to create search source connector: {e!s}")
+            await session.rollback()
+            raise HTTPException(
+                status_code=500,
+                detail=f"Failed to create search source connector: {e!s}",
+            ) from e
+
+    except HTTPException:
+        raise
+    except Exception as e:
+        logger.error(f"Failed to complete ClickUp OAuth: {e!s}", exc_info=True)
+        raise HTTPException(
+            status_code=500, detail=f"Failed to complete ClickUp OAuth: {e!s}"
+        ) from e
+
+
+async def refresh_clickup_token(
+    session: AsyncSession, connector: SearchSourceConnector
+) -> SearchSourceConnector:
+    """
+    Refresh the ClickUp access token for a connector.
+
+    Args:
+        session: Database session
+        connector: ClickUp connector to refresh
+
+    Returns:
+        Updated connector object
+    """
+    try:
+        logger.info(f"Refreshing ClickUp token for connector {connector.id}")
+
+        credentials = ClickUpAuthCredentialsBase.from_dict(connector.config)
+
+        # Decrypt tokens if they are encrypted
+        token_encryption = get_token_encryption()
+        is_encrypted = connector.config.get("_token_encrypted", False)
+
+        refresh_token = credentials.refresh_token
+        if is_encrypted and refresh_token:
+            try:
+                refresh_token = token_encryption.decrypt_token(refresh_token)
+            except Exception as e:
+                logger.error(f"Failed to decrypt refresh token: {e!s}")
+                raise HTTPException(
+                    status_code=500, detail="Failed to decrypt stored refresh token"
+                ) from e
+
+        if not refresh_token:
+            raise HTTPException(
+                status_code=400,
+                detail="No refresh token available. Please re-authenticate.",
+            )
+
+        # Prepare token refresh data
+        refresh_data = {
+            "client_id": config.CLICKUP_CLIENT_ID,
+            "client_secret": config.CLICKUP_CLIENT_SECRET,
+            "refresh_token": refresh_token,
+        }
+
+        async with httpx.AsyncClient() as client:
+            token_response = await client.post(
+                TOKEN_URL,
+                json=refresh_data,
+                headers={"Content-Type": "application/json"},
+                timeout=30.0,
+            )
+
+        if token_response.status_code != 200:
+            error_detail = token_response.text
+            try:
+                error_json = token_response.json()
+                error_detail = error_json.get("error", error_detail)
+            except Exception:
+                pass
+            raise HTTPException(
+                status_code=400, detail=f"Token refresh failed: {error_detail}"
+            )
+
+        token_json = token_response.json()
+
+        # Calculate expiration time (UTC, tz-aware)
+        expires_at = None
+        expires_in = token_json.get("expires_in")
+        if expires_in:
+            now_utc = datetime.now(UTC)
+            expires_at = now_utc + timedelta(seconds=int(expires_in))
+
+        # Encrypt new tokens before storing
+        access_token = token_json.get("access_token")
+        new_refresh_token = token_json.get("refresh_token")
+
+        if not access_token:
+            raise HTTPException(
+                status_code=400, detail="No access token received from ClickUp refresh"
+            )
+
+        # Update credentials object with encrypted tokens
+        credentials.access_token = token_encryption.encrypt_token(access_token)
+        if new_refresh_token:
+            credentials.refresh_token = token_encryption.encrypt_token(
+                new_refresh_token
+            )
+        credentials.expires_in = expires_in
+        credentials.expires_at = expires_at
+
+        # Preserve user and workspace info
+        if not credentials.user_id:
+            credentials.user_id = connector.config.get("user_id")
+        if not credentials.user_email:
+            credentials.user_email = connector.config.get("user_email")
+        if not credentials.user_name:
+            credentials.user_name = connector.config.get("user_name")
+        if not credentials.workspace_id:
+            credentials.workspace_id = connector.config.get("workspace_id")
+        if not credentials.workspace_name:
+            credentials.workspace_name = connector.config.get("workspace_name")
+
+        # Update connector config with encrypted tokens
+        credentials_dict = credentials.to_dict()
+        credentials_dict["_token_encrypted"] = True
+        connector.config = credentials_dict
+        await session.commit()
+        await session.refresh(connector)
+
+        logger.info(
+            f"Successfully refreshed ClickUp token for connector {connector.id}"
+        )
+
+        return connector
+    except HTTPException:
+        raise
+    except Exception as e:
+        logger.error(f"Failed to refresh ClickUp token: {e!s}", exc_info=True)
+        raise HTTPException(
+            status_code=500, detail=f"Failed to refresh ClickUp token: {e!s}"
+        ) from e

surfsense_backend/app/routes/confluence_add_connector_route.py

@@ -14,7 +14,6 @@ from fastapi.responses import RedirectResponse
 from pydantic import ValidationError
 from sqlalchemy.exc import IntegrityError
 from sqlalchemy.ext.asyncio import AsyncSession
-from sqlalchemy.future import select
 
 from app.config import config
 from app.db import (
@@ -25,6 +24,11 @@ from app.db import (
 )
 from app.schemas.atlassian_auth_credentials import AtlassianAuthCredentialsBase
 from app.users import current_active_user
+from app.utils.connector_naming import (
+    check_duplicate_connector,
+    extract_identifier_from_credentials,
+    generate_unique_connector_name,
+)
 from app.utils.oauth_security import OAuthStateManager, TokenEncryption
 
 logger = logging.getLogger(__name__)
@@ -288,47 +292,56 @@ async def confluence_callback(
             "_token_encrypted": True,
         }
 
-        # Check if connector already exists for this search space and user
+        # Extract unique identifier from connector credentials
-        existing_connector_result = await session.execute(
+        connector_identifier = extract_identifier_from_credentials(
-            select(SearchSourceConnector).filter(
+            SearchSourceConnectorType.CONFLUENCE_CONNECTOR, connector_config
-                SearchSourceConnector.search_space_id == space_id,
-                SearchSourceConnector.user_id == user_id,
-                SearchSourceConnector.connector_type
-                == SearchSourceConnectorType.CONFLUENCE_CONNECTOR,
-            )
         )
-        existing_connector = existing_connector_result.scalars().first()
 
-        if existing_connector:
+        # Check for duplicate connector (same Confluence instance already connected)
-            # Update existing connector
+        is_duplicate = await check_duplicate_connector(
-            existing_connector.config = connector_config
+            session,
-            existing_connector.name = "Confluence Connector"
+            SearchSourceConnectorType.CONFLUENCE_CONNECTOR,
-            existing_connector.is_indexable = True
+            space_id,
-            logger.info(
+            user_id,
-                f"Updated existing Confluence connector for user {user_id} in space {space_id}"
+            connector_identifier,
+        )
+        if is_duplicate:
+            logger.warning(
+                f"Duplicate Confluence connector detected for user {user_id} with instance {connector_identifier}"
             )
-        else:
+            return RedirectResponse(
-            # Create new connector
+                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&error=duplicate_account&connector=confluence-connector"
-            new_connector = SearchSourceConnector(
-                name="Confluence Connector",
-                connector_type=SearchSourceConnectorType.CONFLUENCE_CONNECTOR,
-                is_indexable=True,
-                config=connector_config,
-                search_space_id=space_id,
-                user_id=user_id,
-            )
-            session.add(new_connector)
-            logger.info(
-                f"Created new Confluence connector for user {user_id} in space {space_id}"
             )
 
+        # Generate a unique, user-friendly connector name
+        connector_name = await generate_unique_connector_name(
+            session,
+            SearchSourceConnectorType.CONFLUENCE_CONNECTOR,
+            space_id,
+            user_id,
+            connector_identifier,
+        )
+        # Create new connector
+        new_connector = SearchSourceConnector(
+            name=connector_name,
+            connector_type=SearchSourceConnectorType.CONFLUENCE_CONNECTOR,
+            is_indexable=True,
+            config=connector_config,
+            search_space_id=space_id,
+            user_id=user_id,
+        )
+        session.add(new_connector)
+        logger.info(
+            f"Created new Confluence connector for user {user_id} in space {space_id}"
+        )
+
         try:
             await session.commit()
             logger.info(f"Successfully saved Confluence connector for user {user_id}")
 
             # Redirect to the frontend with success params
             return RedirectResponse(
-                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=confluence-connector"
+                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=confluence-connector&connectorId={new_connector.id}"
             )
 
         except ValidationError as e:
@@ -340,7 +353,7 @@ async def confluence_callback(
             await session.rollback()
             raise HTTPException(
                 status_code=409,
-                detail=f"Integrity error: A connector with this type already exists. {e!s}",
+                detail=f"Database integrity error: {e!s}",
             ) from e
         except Exception as e:
             logger.error(f"Failed to create search source connector: {e!s}")

surfsense_backend/app/routes/discord_add_connector_route.py

@@ -14,7 +14,6 @@ from fastapi.responses import RedirectResponse
 from pydantic import ValidationError
 from sqlalchemy.exc import IntegrityError
 from sqlalchemy.ext.asyncio import AsyncSession
-from sqlalchemy.future import select
 
 from app.config import config
 from app.db import (
@@ -25,6 +24,11 @@ from app.db import (
 )
 from app.schemas.discord_auth_credentials import DiscordAuthCredentialsBase
 from app.users import current_active_user
+from app.utils.connector_naming import (
+    check_duplicate_connector,
+    extract_identifier_from_credentials,
+    generate_unique_connector_name,
+)
 from app.utils.oauth_security import OAuthStateManager, TokenEncryption
 
 logger = logging.getLogger(__name__)
@@ -284,47 +288,56 @@ async def discord_callback(
             "_token_encrypted": True,
         }
 
-        # Check if connector already exists for this search space and user
+        # Extract unique identifier from connector credentials
-        existing_connector_result = await session.execute(
+        connector_identifier = extract_identifier_from_credentials(
-            select(SearchSourceConnector).filter(
+            SearchSourceConnectorType.DISCORD_CONNECTOR, connector_config
-                SearchSourceConnector.search_space_id == space_id,
-                SearchSourceConnector.user_id == user_id,
-                SearchSourceConnector.connector_type
-                == SearchSourceConnectorType.DISCORD_CONNECTOR,
-            )
         )
-        existing_connector = existing_connector_result.scalars().first()
 
-        if existing_connector:
+        # Check for duplicate connector (same server already connected)
-            # Update existing connector
+        is_duplicate = await check_duplicate_connector(
-            existing_connector.config = connector_config
+            session,
-            existing_connector.name = "Discord Connector"
+            SearchSourceConnectorType.DISCORD_CONNECTOR,
-            existing_connector.is_indexable = True
+            space_id,
-            logger.info(
+            user_id,
-                f"Updated existing Discord connector for user {user_id} in space {space_id}"
+            connector_identifier,
+        )
+        if is_duplicate:
+            logger.warning(
+                f"Duplicate Discord connector detected for user {user_id} with server {connector_identifier}"
             )
-        else:
+            return RedirectResponse(
-            # Create new connector
+                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&error=duplicate_account&connector=discord-connector"
-            new_connector = SearchSourceConnector(
-                name="Discord Connector",
-                connector_type=SearchSourceConnectorType.DISCORD_CONNECTOR,
-                is_indexable=True,
-                config=connector_config,
-                search_space_id=space_id,
-                user_id=user_id,
-            )
-            session.add(new_connector)
-            logger.info(
-                f"Created new Discord connector for user {user_id} in space {space_id}"
             )
 
+        # Generate a unique, user-friendly connector name
+        connector_name = await generate_unique_connector_name(
+            session,
+            SearchSourceConnectorType.DISCORD_CONNECTOR,
+            space_id,
+            user_id,
+            connector_identifier,
+        )
+        # Create new connector
+        new_connector = SearchSourceConnector(
+            name=connector_name,
+            connector_type=SearchSourceConnectorType.DISCORD_CONNECTOR,
+            is_indexable=True,
+            config=connector_config,
+            search_space_id=space_id,
+            user_id=user_id,
+        )
+        session.add(new_connector)
+        logger.info(
+            f"Created new Discord connector for user {user_id} in space {space_id}"
+        )
+
         try:
             await session.commit()
             logger.info(f"Successfully saved Discord connector for user {user_id}")
 
             # Redirect to the frontend with success params
             return RedirectResponse(
-                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=discord-connector"
+                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=discord-connector&connectorId={new_connector.id}"
             )
 
         except ValidationError as e:
@@ -336,7 +349,7 @@ async def discord_callback(
             await session.rollback()
             raise HTTPException(
                 status_code=409,
-                detail=f"Integrity error: A connector with this type already exists. {e!s}",
+                detail=f"Database integrity error: {e!s}",
             ) from e
         except Exception as e:
             logger.error(f"Failed to create search source connector: {e!s}")

surfsense_backend/app/routes/google_calendar_add_connector_route.py

@@ -12,9 +12,9 @@ from google_auth_oauthlib.flow import Flow
 from pydantic import ValidationError
 from sqlalchemy.exc import IntegrityError
 from sqlalchemy.ext.asyncio import AsyncSession
-from sqlalchemy.future import select
 
 from app.config import config
+from app.connectors.google_gmail_connector import fetch_google_user_email
 from app.db import (
     SearchSourceConnector,
     SearchSourceConnectorType,
@@ -22,6 +22,10 @@ from app.db import (
     get_async_session,
 )
 from app.users import current_active_user
+from app.utils.connector_naming import (
+    check_duplicate_connector,
+    generate_unique_connector_name,
+)
 from app.utils.oauth_security import OAuthStateManager, TokenEncryption
 
 logger = logging.getLogger(__name__)
@@ -172,6 +176,9 @@ async def calendar_callback(
         creds = flow.credentials
         creds_dict = json.loads(creds.to_json())
 
+        # Fetch user email
+        user_email = fetch_google_user_email(creds)
+
         # Encrypt sensitive credentials before storing
         token_encryption = get_token_encryption()
 
@@ -190,24 +197,33 @@ async def calendar_callback(
         # Mark that credentials are encrypted for backward compatibility
         creds_dict["_token_encrypted"] = True
 
-        try:
+        # Check for duplicate connector (same account already connected)
-            # Check if a connector with the same type already exists for this search space and user
+        is_duplicate = await check_duplicate_connector(
-            result = await session.execute(
+            session,
-                select(SearchSourceConnector).filter(
+            SearchSourceConnectorType.GOOGLE_CALENDAR_CONNECTOR,
-                    SearchSourceConnector.search_space_id == space_id,
+            space_id,
-                    SearchSourceConnector.user_id == user_id,
+            user_id,
-                    SearchSourceConnector.connector_type
+            user_email,
-                    == SearchSourceConnectorType.GOOGLE_CALENDAR_CONNECTOR,
+        )
-                )
+        if is_duplicate:
+            logger.warning(
+                f"Duplicate Google Calendar connector detected for user {user_id} with email {user_email}"
+            )
+            return RedirectResponse(
+                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&error=duplicate_account&connector=google-calendar-connector"
+            )
+
+        try:
+            # Generate a unique, user-friendly connector name
+            connector_name = await generate_unique_connector_name(
+                session,
+                SearchSourceConnectorType.GOOGLE_CALENDAR_CONNECTOR,
+                space_id,
+                user_id,
+                user_email,
             )
-            existing_connector = result.scalars().first()
-            if existing_connector:
-                raise HTTPException(
-                    status_code=409,
-                    detail="A GOOGLE_CALENDAR_CONNECTOR connector already exists in this search space. Each search space can have only one connector of each type per user.",
-                )
             db_connector = SearchSourceConnector(
-                name="Google Calendar Connector",
+                name=connector_name,
                 connector_type=SearchSourceConnectorType.GOOGLE_CALENDAR_CONNECTOR,
                 config=creds_dict,
                 search_space_id=space_id,
@@ -220,7 +236,7 @@ async def calendar_callback(
             # Redirect to the frontend with success params for indexing config
             # Using query params to auto-open the popup with config view on new-chat page
             return RedirectResponse(
-                f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=google-calendar-connector"
+                f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=google-calendar-connector&connectorId={db_connector.id}"
             )
         except ValidationError as e:
             await session.rollback()
@@ -231,7 +247,7 @@ async def calendar_callback(
             await session.rollback()
             raise HTTPException(
                 status_code=409,
-                detail=f"Integrity error: A connector with this type already exists. {e!s}",
+                detail=f"Database integrity error: {e!s}",
             ) from e
         except HTTPException:
             await session.rollback()

surfsense_backend/app/routes/google_drive_add_connector_route.py

@@ -29,6 +29,7 @@ from app.connectors.google_drive import (
     get_start_page_token,
     list_folder_contents,
 )
+from app.connectors.google_gmail_connector import fetch_google_user_email
 from app.db import (
     SearchSourceConnector,
     SearchSourceConnectorType,
@@ -36,6 +37,10 @@ from app.db import (
     get_async_session,
 )
 from app.users import current_active_user
+from app.utils.connector_naming import (
+    check_duplicate_connector,
+    generate_unique_connector_name,
+)
 from app.utils.oauth_security import OAuthStateManager, TokenEncryption
 
 # Relax token scope validation for Google OAuth
@@ -227,6 +232,9 @@ async def drive_callback(
         creds = flow.credentials
         creds_dict = json.loads(creds.to_json())
 
+        # Fetch user email
+        user_email = fetch_google_user_email(creds)
+
         # Encrypt sensitive credentials before storing
         token_encryption = get_token_encryption()
 
@@ -245,26 +253,33 @@ async def drive_callback(
         # Mark that credentials are encrypted for backward compatibility
         creds_dict["_token_encrypted"] = True
 
-        # Check if connector already exists for this space/user
+        # Check for duplicate connector (same account already connected)
-        result = await session.execute(
+        is_duplicate = await check_duplicate_connector(
-            select(SearchSourceConnector).filter(
+            session,
-                SearchSourceConnector.search_space_id == space_id,
+            SearchSourceConnectorType.GOOGLE_DRIVE_CONNECTOR,
-                SearchSourceConnector.user_id == user_id,
+            space_id,
-                SearchSourceConnector.connector_type
+            user_id,
-                == SearchSourceConnectorType.GOOGLE_DRIVE_CONNECTOR,
+            user_email,
-            )
         )
-        existing_connector = result.scalars().first()
+        if is_duplicate:
-
+            logger.warning(
-        if existing_connector:
+                f"Duplicate Google Drive connector detected for user {user_id} with email {user_email}"
-            raise HTTPException(
+            )
-                status_code=409,
+            return RedirectResponse(
-                detail="A GOOGLE_DRIVE_CONNECTOR already exists in this search space. Each search space can have only one connector of each type per user.",
+                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&error=duplicate_account&connector=google-drive-connector"
             )
 
-        # Create new connector (NO folder selection here - happens at index time)
+        # Generate a unique, user-friendly connector name
+        connector_name = await generate_unique_connector_name(
+            session,
+            SearchSourceConnectorType.GOOGLE_DRIVE_CONNECTOR,
+            space_id,
+            user_id,
+            user_email,
+        )
+
         db_connector = SearchSourceConnector(
-            name="Google Drive Connector",
+            name=connector_name,
             connector_type=SearchSourceConnectorType.GOOGLE_DRIVE_CONNECTOR,
             config={
                 **creds_dict,
@@ -301,7 +316,7 @@ async def drive_callback(
         )
 
         return RedirectResponse(
-            url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=google-drive-connector"
+            url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=google-drive-connector&connectorId={db_connector.id}"
         )
 
     except HTTPException:
@@ -318,7 +333,7 @@ async def drive_callback(
         logger.error(f"Database integrity error: {e!s}", exc_info=True)
         raise HTTPException(
             status_code=409,
-            detail="A connector with this configuration already exists.",
+            detail=f"Database integrity error: {e!s}",
         ) from e
     except Exception as e:
         await session.rollback()

surfsense_backend/app/routes/google_gmail_add_connector_route.py

@@ -12,9 +12,9 @@ from google_auth_oauthlib.flow import Flow
 from pydantic import ValidationError
 from sqlalchemy.exc import IntegrityError
 from sqlalchemy.ext.asyncio import AsyncSession
-from sqlalchemy.future import select
 
 from app.config import config
+from app.connectors.google_gmail_connector import fetch_google_user_email
 from app.db import (
     SearchSourceConnector,
     SearchSourceConnectorType,
@@ -22,6 +22,10 @@ from app.db import (
     get_async_session,
 )
 from app.users import current_active_user
+from app.utils.connector_naming import (
+    check_duplicate_connector,
+    generate_unique_connector_name,
+)
 from app.utils.oauth_security import OAuthStateManager, TokenEncryption
 
 logger = logging.getLogger(__name__)
@@ -203,6 +207,9 @@ async def gmail_callback(
         creds = flow.credentials
         creds_dict = json.loads(creds.to_json())
 
+        # Fetch user email
+        user_email = fetch_google_user_email(creds)
+
         # Encrypt sensitive credentials before storing
         token_encryption = get_token_encryption()
 
@@ -221,24 +228,33 @@ async def gmail_callback(
         # Mark that credentials are encrypted for backward compatibility
         creds_dict["_token_encrypted"] = True
 
-        try:
+        # Check for duplicate connector (same account already connected)
-            # Check if a connector with the same type already exists for this search space and user
+        is_duplicate = await check_duplicate_connector(
-            result = await session.execute(
+            session,
-                select(SearchSourceConnector).filter(
+            SearchSourceConnectorType.GOOGLE_GMAIL_CONNECTOR,
-                    SearchSourceConnector.search_space_id == space_id,
+            space_id,
-                    SearchSourceConnector.user_id == user_id,
+            user_id,
-                    SearchSourceConnector.connector_type
+            user_email,
-                    == SearchSourceConnectorType.GOOGLE_GMAIL_CONNECTOR,
+        )
-                )
+        if is_duplicate:
+            logger.warning(
+                f"Duplicate Gmail connector detected for user {user_id} with email {user_email}"
+            )
+            return RedirectResponse(
+                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&error=duplicate_account&connector=google-gmail-connector"
+            )
+
+        try:
+            # Generate a unique, user-friendly connector name
+            connector_name = await generate_unique_connector_name(
+                session,
+                SearchSourceConnectorType.GOOGLE_GMAIL_CONNECTOR,
+                space_id,
+                user_id,
+                user_email,
             )
-            existing_connector = result.scalars().first()
-            if existing_connector:
-                raise HTTPException(
-                    status_code=409,
-                    detail="A GOOGLE_GMAIL_CONNECTOR connector already exists in this search space. Each search space can have only one connector of each type per user.",
-                )
             db_connector = SearchSourceConnector(
-                name="Google Gmail Connector",
+                name=connector_name,
                 connector_type=SearchSourceConnectorType.GOOGLE_GMAIL_CONNECTOR,
                 config=creds_dict,
                 search_space_id=space_id,
@@ -256,7 +272,7 @@ async def gmail_callback(
             # Redirect to the frontend with success params for indexing config
             # Using query params to auto-open the popup with config view on new-chat page
             return RedirectResponse(
-                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=google-gmail-connector"
+                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=google-gmail-connector&connectorId={db_connector.id}"
             )
 
         except IntegrityError as e:
@@ -264,7 +280,7 @@ async def gmail_callback(
             logger.error(f"Database integrity error: {e!s}")
             raise HTTPException(
                 status_code=409,
-                detail="A connector with this configuration already exists.",
+                detail=f"Database integrity error: {e!s}",
             ) from e
         except ValidationError as e:
             await session.rollback()

surfsense_backend/app/routes/jira_add_connector_route.py

@@ -15,7 +15,6 @@ from fastapi.responses import RedirectResponse
 from pydantic import ValidationError
 from sqlalchemy.exc import IntegrityError
 from sqlalchemy.ext.asyncio import AsyncSession
-from sqlalchemy.future import select
 
 from app.config import config
 from app.db import (
@@ -26,6 +25,11 @@ from app.db import (
 )
 from app.schemas.atlassian_auth_credentials import AtlassianAuthCredentialsBase
 from app.users import current_active_user
+from app.utils.connector_naming import (
+    check_duplicate_connector,
+    extract_identifier_from_credentials,
+    generate_unique_connector_name,
+)
 from app.utils.oauth_security import OAuthStateManager, TokenEncryption
 
 logger = logging.getLogger(__name__)
@@ -306,47 +310,56 @@ async def jira_callback(
             "_token_encrypted": True,
         }
 
-        # Check if connector already exists for this search space and user
+        # Extract unique identifier from connector credentials
-        existing_connector_result = await session.execute(
+        connector_identifier = extract_identifier_from_credentials(
-            select(SearchSourceConnector).filter(
+            SearchSourceConnectorType.JIRA_CONNECTOR, connector_config
-                SearchSourceConnector.search_space_id == space_id,
-                SearchSourceConnector.user_id == user_id,
-                SearchSourceConnector.connector_type
-                == SearchSourceConnectorType.JIRA_CONNECTOR,
-            )
         )
-        existing_connector = existing_connector_result.scalars().first()
 
-        if existing_connector:
+        # Check for duplicate connector (same Jira instance already connected)
-            # Update existing connector
+        is_duplicate = await check_duplicate_connector(
-            existing_connector.config = connector_config
+            session,
-            existing_connector.name = "Jira Connector"
+            SearchSourceConnectorType.JIRA_CONNECTOR,
-            existing_connector.is_indexable = True
+            space_id,
-            logger.info(
+            user_id,
-                f"Updated existing Jira connector for user {user_id} in space {space_id}"
+            connector_identifier,
+        )
+        if is_duplicate:
+            logger.warning(
+                f"Duplicate Jira connector detected for user {user_id} with instance {connector_identifier}"
             )
-        else:
+            return RedirectResponse(
-            # Create new connector
+                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&error=duplicate_account&connector=jira-connector"
-            new_connector = SearchSourceConnector(
-                name="Jira Connector",
-                connector_type=SearchSourceConnectorType.JIRA_CONNECTOR,
-                is_indexable=True,
-                config=connector_config,
-                search_space_id=space_id,
-                user_id=user_id,
-            )
-            session.add(new_connector)
-            logger.info(
-                f"Created new Jira connector for user {user_id} in space {space_id}"
             )
 
+        # Generate a unique, user-friendly connector name
+        connector_name = await generate_unique_connector_name(
+            session,
+            SearchSourceConnectorType.JIRA_CONNECTOR,
+            space_id,
+            user_id,
+            connector_identifier,
+        )
+        # Create new connector
+        new_connector = SearchSourceConnector(
+            name=connector_name,
+            connector_type=SearchSourceConnectorType.JIRA_CONNECTOR,
+            is_indexable=True,
+            config=connector_config,
+            search_space_id=space_id,
+            user_id=user_id,
+        )
+        session.add(new_connector)
+        logger.info(
+            f"Created new Jira connector for user {user_id} in space {space_id}"
+        )
+
         try:
             await session.commit()
             logger.info(f"Successfully saved Jira connector for user {user_id}")
 
             # Redirect to the frontend with success params
             return RedirectResponse(
-                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=jira-connector"
+                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=jira-connector&connectorId={new_connector.id}"
             )
 
         except ValidationError as e:
@@ -358,7 +371,7 @@ async def jira_callback(
             await session.rollback()
             raise HTTPException(
                 status_code=409,
-                detail=f"Integrity error: A connector with this type already exists. {e!s}",
+                detail=f"Database integrity error: {e!s}",
             ) from e
         except Exception as e:
             logger.error(f"Failed to create search source connector: {e!s}")

surfsense_backend/app/routes/linear_add_connector_route.py

@@ -14,9 +14,9 @@ from fastapi.responses import RedirectResponse
 from pydantic import ValidationError
 from sqlalchemy.exc import IntegrityError
 from sqlalchemy.ext.asyncio import AsyncSession
-from sqlalchemy.future import select
 
 from app.config import config
+from app.connectors.linear_connector import fetch_linear_organization_name
 from app.db import (
     SearchSourceConnector,
     SearchSourceConnectorType,
@@ -25,6 +25,10 @@ from app.db import (
 )
 from app.schemas.linear_auth_credentials import LinearAuthCredentialsBase
 from app.users import current_active_user
+from app.utils.connector_naming import (
+    check_duplicate_connector,
+    generate_unique_connector_name,
+)
 from app.utils.oauth_security import OAuthStateManager, TokenEncryption
 
 logger = logging.getLogger(__name__)
@@ -240,6 +244,9 @@ async def linear_callback(
                 status_code=400, detail="No access token received from Linear"
             )
 
+        # Fetch organization name
+        org_name = await fetch_linear_organization_name(access_token)
+
         # Calculate expiration time (UTC, tz-aware)
         expires_at = None
         if token_json.get("expires_in"):
@@ -260,39 +267,43 @@ async def linear_callback(
             "_token_encrypted": True,
         }
 
-        # Check if connector already exists for this search space and user
+        # Check for duplicate connector (same organization already connected)
-        existing_connector_result = await session.execute(
+        is_duplicate = await check_duplicate_connector(
-            select(SearchSourceConnector).filter(
+            session,
-                SearchSourceConnector.search_space_id == space_id,
+            SearchSourceConnectorType.LINEAR_CONNECTOR,
-                SearchSourceConnector.user_id == user_id,
+            space_id,
-                SearchSourceConnector.connector_type
+            user_id,
-                == SearchSourceConnectorType.LINEAR_CONNECTOR,
+            org_name,
-            )
         )
-        existing_connector = existing_connector_result.scalars().first()
+        if is_duplicate:
+            logger.warning(
+                f"Duplicate Linear connector detected for user {user_id} with org {org_name}"
+            )
+            return RedirectResponse(
+                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&error=duplicate_account&connector=linear-connector"
+            )
 
-        if existing_connector:
+        # Generate a unique, user-friendly connector name
-            # Update existing connector
+        connector_name = await generate_unique_connector_name(
-            existing_connector.config = connector_config
+            session,
-            existing_connector.name = "Linear Connector"
+            SearchSourceConnectorType.LINEAR_CONNECTOR,
-            existing_connector.is_indexable = True
+            space_id,
-            logger.info(
+            user_id,
-                f"Updated existing Linear connector for user {user_id} in space {space_id}"
+            org_name,
-            )
+        )
-        else:
+        # Create new connector
-            # Create new connector
+        new_connector = SearchSourceConnector(
-            new_connector = SearchSourceConnector(
+            name=connector_name,
-                name="Linear Connector",
+            connector_type=SearchSourceConnectorType.LINEAR_CONNECTOR,
-                connector_type=SearchSourceConnectorType.LINEAR_CONNECTOR,
+            is_indexable=True,
-                is_indexable=True,
+            config=connector_config,
-                config=connector_config,
+            search_space_id=space_id,
-                search_space_id=space_id,
+            user_id=user_id,
-                user_id=user_id,
+        )
-            )
+        session.add(new_connector)
-            session.add(new_connector)
+        logger.info(
-            logger.info(
+            f"Created new Linear connector for user {user_id} in space {space_id}"
-                f"Created new Linear connector for user {user_id} in space {space_id}"
+        )
-            )
 
         try:
             await session.commit()
@@ -300,7 +311,7 @@ async def linear_callback(
 
             # Redirect to the frontend with success params
             return RedirectResponse(
-                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=linear-connector"
+                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=linear-connector&connectorId={new_connector.id}"
             )
 
         except ValidationError as e:
@@ -312,7 +323,7 @@ async def linear_callback(
             await session.rollback()
             raise HTTPException(
                 status_code=409,
-                detail=f"Integrity error: A connector with this type already exists. {e!s}",
+                detail=f"Database integrity error: {e!s}",
             ) from e
         except Exception as e:
             logger.error(f"Failed to create search source connector: {e!s}")

surfsense_backend/app/routes/notion_add_connector_route.py

@@ -14,7 +14,6 @@ from fastapi.responses import RedirectResponse
 from pydantic import ValidationError
 from sqlalchemy.exc import IntegrityError
 from sqlalchemy.ext.asyncio import AsyncSession
-from sqlalchemy.future import select
 
 from app.config import config
 from app.db import (
@@ -25,6 +24,11 @@ from app.db import (
 )
 from app.schemas.notion_auth_credentials import NotionAuthCredentialsBase
 from app.users import current_active_user
+from app.utils.connector_naming import (
+    check_duplicate_connector,
+    extract_identifier_from_credentials,
+    generate_unique_connector_name,
+)
 from app.utils.oauth_security import OAuthStateManager, TokenEncryption
 
 logger = logging.getLogger(__name__)
@@ -262,47 +266,56 @@ async def notion_callback(
             "_token_encrypted": True,
         }
 
-        # Check if connector already exists for this search space and user
+        # Extract unique identifier from connector credentials
-        existing_connector_result = await session.execute(
+        connector_identifier = extract_identifier_from_credentials(
-            select(SearchSourceConnector).filter(
+            SearchSourceConnectorType.NOTION_CONNECTOR, connector_config
-                SearchSourceConnector.search_space_id == space_id,
-                SearchSourceConnector.user_id == user_id,
-                SearchSourceConnector.connector_type
-                == SearchSourceConnectorType.NOTION_CONNECTOR,
-            )
         )
-        existing_connector = existing_connector_result.scalars().first()
 
-        if existing_connector:
+        # Check for duplicate connector (same workspace already connected)
-            # Update existing connector
+        is_duplicate = await check_duplicate_connector(
-            existing_connector.config = connector_config
+            session,
-            existing_connector.name = "Notion Connector"
+            SearchSourceConnectorType.NOTION_CONNECTOR,
-            existing_connector.is_indexable = True
+            space_id,
-            logger.info(
+            user_id,
-                f"Updated existing Notion connector for user {user_id} in space {space_id}"
+            connector_identifier,
+        )
+        if is_duplicate:
+            logger.warning(
+                f"Duplicate Notion connector detected for user {user_id} with workspace {connector_identifier}"
             )
-        else:
+            return RedirectResponse(
-            # Create new connector
+                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&error=duplicate_account&connector=notion-connector"
-            new_connector = SearchSourceConnector(
-                name="Notion Connector",
-                connector_type=SearchSourceConnectorType.NOTION_CONNECTOR,
-                is_indexable=True,
-                config=connector_config,
-                search_space_id=space_id,
-                user_id=user_id,
-            )
-            session.add(new_connector)
-            logger.info(
-                f"Created new Notion connector for user {user_id} in space {space_id}"
             )
 
+        # Generate a unique, user-friendly connector name
+        connector_name = await generate_unique_connector_name(
+            session,
+            SearchSourceConnectorType.NOTION_CONNECTOR,
+            space_id,
+            user_id,
+            connector_identifier,
+        )
+        # Create new connector
+        new_connector = SearchSourceConnector(
+            name=connector_name,
+            connector_type=SearchSourceConnectorType.NOTION_CONNECTOR,
+            is_indexable=True,
+            config=connector_config,
+            search_space_id=space_id,
+            user_id=user_id,
+        )
+        session.add(new_connector)
+        logger.info(
+            f"Created new Notion connector for user {user_id} in space {space_id}"
+        )
+
         try:
             await session.commit()
             logger.info(f"Successfully saved Notion connector for user {user_id}")
 
             # Redirect to the frontend with success params
             return RedirectResponse(
-                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=notion-connector"
+                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=notion-connector&connectorId={new_connector.id}"
             )
 
         except ValidationError as e:
@@ -314,7 +327,7 @@ async def notion_callback(
             await session.rollback()
             raise HTTPException(
                 status_code=409,
-                detail=f"Integrity error: A connector with this type already exists. {e!s}",
+                detail=f"Database integrity error: {e!s}",
             ) from e
         except Exception as e:
             logger.error(f"Failed to create search source connector: {e!s}")

surfsense_backend/app/routes/search_source_connectors_routes.py

@@ -7,7 +7,8 @@ PUT /search-source-connectors/{connector_id} - Update a specific connector
 DELETE /search-source-connectors/{connector_id} - Delete a specific connector
 POST /search-source-connectors/{connector_id}/index - Index content from a connector to a search space
 
-Note: Each search space can have only one connector of each type per user (based on search_space_id, user_id, and connector_type).
+Note: OAuth connectors (Gmail, Drive, Slack, etc.) support multiple accounts per search space.
+Non-OAuth connectors (BookStack, GitHub, etc.) are limited to one per search space.
 """
 
 import logging
@@ -125,6 +126,7 @@ async def create_search_source_connector(
         )
 
         # Check if a connector with the same type already exists for this search space
+        # (for non-OAuth connectors that don't support multiple accounts)
         result = await session.execute(
             select(SearchSourceConnector).filter(
                 SearchSourceConnector.search_space_id == search_space_id,
@@ -556,6 +558,7 @@ async def index_connector_content(
 
     Currently supports:
     - SLACK_CONNECTOR: Indexes messages from all accessible Slack channels
+    - TEAMS_CONNECTOR: Indexes messages from all accessible Microsoft Teams channels
     - NOTION_CONNECTOR: Indexes pages from all accessible Notion pages
     - GITHUB_CONNECTOR: Indexes code and documentation from GitHub repositories
     - LINEAR_CONNECTOR: Indexes issues and comments from Linear
@@ -629,6 +632,19 @@ async def index_connector_content(
             )
             response_message = "Slack indexing started in the background."
 
+        elif connector.connector_type == SearchSourceConnectorType.TEAMS_CONNECTOR:
+            from app.tasks.celery_tasks.connector_tasks import (
+                index_teams_messages_task,
+            )
+
+            logger.info(
+                f"Triggering Teams indexing for connector {connector_id} into search space {search_space_id} from {indexing_from} to {indexing_to}"
+            )
+            index_teams_messages_task.delay(
+                connector_id, search_space_id, str(user.id), indexing_from, indexing_to
+            )
+            response_message = "Teams indexing started in the background."
+
         elif connector.connector_type == SearchSourceConnectorType.NOTION_CONNECTOR:
             from app.tasks.celery_tasks.connector_tasks import index_notion_pages_task
 
@@ -1186,6 +1202,64 @@ async def run_discord_indexing(
         logger.error(f"Error in background Discord indexing task: {e!s}")
 
 
+async def run_teams_indexing_with_new_session(
+    connector_id: int,
+    search_space_id: int,
+    user_id: str,
+    start_date: str,
+    end_date: str,
+):
+    """
+    Create a new session and run the Microsoft Teams indexing task.
+    This prevents session leaks by creating a dedicated session for the background task.
+    """
+    async with async_session_maker() as session:
+        await run_teams_indexing(
+            session, connector_id, search_space_id, user_id, start_date, end_date
+        )
+
+
+async def run_teams_indexing(
+    session: AsyncSession,
+    connector_id: int,
+    search_space_id: int,
+    user_id: str,
+    start_date: str,
+    end_date: str,
+):
+    """
+    Background task to run Microsoft Teams indexing.
+    Args:
+        session: Database session
+        connector_id: ID of the Teams connector
+        search_space_id: ID of the search space
+        user_id: ID of the user
+        start_date: Start date for indexing
+        end_date: End date for indexing
+    """
+    try:
+        from app.tasks.connector_indexers.teams_indexer import index_teams_messages
+
+        # Index Teams messages without updating last_indexed_at (we'll do it separately)
+        documents_processed, error_or_warning = await index_teams_messages(
+            session=session,
+            connector_id=connector_id,
+            search_space_id=search_space_id,
+            user_id=user_id,
+            start_date=start_date,
+            end_date=end_date,
+            update_last_indexed=False,  # Don't update timestamp in the indexing function
+        )
+
+        # Update last_indexed_at after successful indexing (even if 0 new docs - they were checked)
+        await update_connector_last_indexed(session, connector_id)
+        logger.info(
+            f"Teams indexing completed successfully: {documents_processed} documents processed. {error_or_warning or ''}"
+        )
+    except Exception as e:
+        logger.error(f"Error in background Teams indexing task: {e!s}")
+
+
 # Add new helper functions for Jira indexing
 async def run_jira_indexing_with_new_session(
     connector_id: int,

surfsense_backend/app/routes/slack_add_connector_route.py

@@ -14,7 +14,6 @@ from fastapi.responses import RedirectResponse
 from pydantic import ValidationError
 from sqlalchemy.exc import IntegrityError
 from sqlalchemy.ext.asyncio import AsyncSession
-from sqlalchemy.future import select
 
 from app.config import config
 from app.db import (
@@ -25,6 +24,11 @@ from app.db import (
 )
 from app.schemas.slack_auth_credentials import SlackAuthCredentialsBase
 from app.users import current_active_user
+from app.utils.connector_naming import (
+    check_duplicate_connector,
+    extract_identifier_from_credentials,
+    generate_unique_connector_name,
+)
 from app.utils.oauth_security import OAuthStateManager, TokenEncryption
 
 logger = logging.getLogger(__name__)
@@ -272,47 +276,57 @@ async def slack_callback(
             "_token_encrypted": True,
         }
 
-        # Check if connector already exists for this search space and user
+        # Extract unique identifier from connector credentials
-        existing_connector_result = await session.execute(
+        connector_identifier = extract_identifier_from_credentials(
-            select(SearchSourceConnector).filter(
+            SearchSourceConnectorType.SLACK_CONNECTOR, connector_config
-                SearchSourceConnector.search_space_id == space_id,
-                SearchSourceConnector.user_id == user_id,
-                SearchSourceConnector.connector_type
-                == SearchSourceConnectorType.SLACK_CONNECTOR,
-            )
         )
-        existing_connector = existing_connector_result.scalars().first()
 
-        if existing_connector:
+        # Check for duplicate connector (same workspace already connected)
-            # Update existing connector
+        is_duplicate = await check_duplicate_connector(
-            existing_connector.config = connector_config
+            session,
-            existing_connector.name = "Slack Connector"
+            SearchSourceConnectorType.SLACK_CONNECTOR,
-            existing_connector.is_indexable = True
+            space_id,
-            logger.info(
+            user_id,
-                f"Updated existing Slack connector for user {user_id} in space {space_id}"
+            connector_identifier,
+        )
+        if is_duplicate:
+            logger.warning(
+                f"Duplicate Slack connector detected for user {user_id} with workspace {connector_identifier}"
             )
-        else:
+            return RedirectResponse(
-            # Create new connector
+                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&error=duplicate_account&connector=slack-connector"
-            new_connector = SearchSourceConnector(
-                name="Slack Connector",
-                connector_type=SearchSourceConnectorType.SLACK_CONNECTOR,
-                is_indexable=True,
-                config=connector_config,
-                search_space_id=space_id,
-                user_id=user_id,
-            )
-            session.add(new_connector)
-            logger.info(
-                f"Created new Slack connector for user {user_id} in space {space_id}"
             )
 
+        # Generate a unique, user-friendly connector name
+        connector_name = await generate_unique_connector_name(
+            session,
+            SearchSourceConnectorType.SLACK_CONNECTOR,
+            space_id,
+            user_id,
+            connector_identifier,
+        )
+
+        # Create new connector
+        new_connector = SearchSourceConnector(
+            name=connector_name,
+            connector_type=SearchSourceConnectorType.SLACK_CONNECTOR,
+            is_indexable=True,
+            config=connector_config,
+            search_space_id=space_id,
+            user_id=user_id,
+        )
+        session.add(new_connector)
+        logger.info(
+            f"Created new Slack connector for user {user_id} in space {space_id}"
+        )
+
         try:
             await session.commit()
             logger.info(f"Successfully saved Slack connector for user {user_id}")
 
             # Redirect to the frontend with success params
             return RedirectResponse(
-                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=slack-connector"
+                url=f"{config.NEXT_FRONTEND_URL}/dashboard/{space_id}/new-chat?modal=connectors&tab=all&success=true&connector=slack-connector&connectorId={new_connector.id}"
             )
 
         except ValidationError as e:
@@ -324,7 +338,7 @@ async def slack_callback(
             await session.rollback()
             raise HTTPException(
                 status_code=409,
-                detail=f"Integrity error: A connector with this type already exists. {e!s}",
+                detail=f"Database integrity error: {e!s}",
             ) from e
         except Exception as e:
             logger.error(f"Failed to create search source connector: {e!s}")

surfsense_backend/app/routes/teams_add_connector_route.py

@@ -0,0 +1,474 @@
+"""
+Microsoft Teams Connector OAuth Routes.
+
+Handles OAuth 2.0 authentication flow for Microsoft Teams connector using Microsoft Graph API.
+"""
+
+import logging
+from datetime import UTC, datetime, timedelta
+from uuid import UUID
+
+import httpx
+from fastapi import APIRouter, Depends, HTTPException
+from fastapi.responses import RedirectResponse
+from sqlalchemy.exc import IntegrityError
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from app.config import config
+from app.db import (
+    SearchSourceConnector,
+    SearchSourceConnectorType,
+    User,
+    get_async_session,
+)
+from app.schemas.teams_auth_credentials import TeamsAuthCredentialsBase
+from app.users import current_active_user
+from app.utils.connector_naming import (
+    check_duplicate_connector,
+    extract_identifier_from_credentials,
+    generate_unique_connector_name,
+)
+from app.utils.oauth_security import OAuthStateManager, TokenEncryption
+
+logger = logging.getLogger(__name__)
+
+router = APIRouter()
+
+# Microsoft identity platform endpoints
+AUTHORIZATION_URL = "https://login.microsoftonline.com/common/oauth2/v2.0/authorize"
+TOKEN_URL = "https://login.microsoftonline.com/common/oauth2/v2.0/token"
+
+# OAuth scopes for Microsoft Teams (Graph API)
+SCOPES = [
+    "offline_access",  # Required for refresh tokens
+    "User.Read",  # Read user profile
+    "Team.ReadBasic.All",  # Read basic team information
+    "Channel.ReadBasic.All",  # Read basic channel information
+    "ChannelMessage.Read.All",  # Read messages in channels
+]
+
+# Initialize security utilities
+_state_manager = None
+_token_encryption = None
+
+
+def get_state_manager() -> OAuthStateManager:
+    """Get or create OAuth state manager instance."""
+    global _state_manager
+    if _state_manager is None:
+        if not config.SECRET_KEY:
+            raise ValueError("SECRET_KEY must be set for OAuth security")
+        _state_manager = OAuthStateManager(config.SECRET_KEY)
+    return _state_manager
+
+
+def get_token_encryption() -> TokenEncryption:
+    """Get or create token encryption instance."""
+    global _token_encryption
+    if _token_encryption is None:
+        if not config.SECRET_KEY:
+            raise ValueError("SECRET_KEY must be set for token encryption")
+        _token_encryption = TokenEncryption(config.SECRET_KEY)
+    return _token_encryption
+
+
+@router.get("/auth/teams/connector/add")
+async def connect_teams(space_id: int, user: User = Depends(current_active_user)):
+    """
+    Initiate Microsoft Teams OAuth flow.
+
+    Args:
+        space_id: The search space ID
+        user: Current authenticated user
+
+    Returns:
+        Authorization URL for redirect
+    """
+    try:
+        if not space_id:
+            raise HTTPException(status_code=400, detail="space_id is required")
+
+        if not config.TEAMS_CLIENT_ID:
+            raise HTTPException(
+                status_code=500, detail="Microsoft Teams OAuth not configured."
+            )
+
+        if not config.SECRET_KEY:
+            raise HTTPException(
+                status_code=500, detail="SECRET_KEY not configured for OAuth security."
+            )
+
+        # Generate secure state parameter with HMAC signature
+        state_manager = get_state_manager()
+        state_encoded = state_manager.generate_secure_state(space_id, user.id)
+
+        # Build authorization URL
+        from urllib.parse import urlencode
+
+        auth_params = {
+            "client_id": config.TEAMS_CLIENT_ID,
+            "response_type": "code",
+            "redirect_uri": config.TEAMS_REDIRECT_URI,
+            "response_mode": "query",
+            "scope": " ".join(SCOPES),
+            "state": state_encoded,
+        }
+
+        auth_url = f"{AUTHORIZATION_URL}?{urlencode(auth_params)}"
+
+        logger.info(
+            "Generated Microsoft Teams OAuth URL for user %s, space %s",
+            user.id,
+            space_id,
+        )
+        return {"auth_url": auth_url}
+
+    except Exception as e:
+        logger.error(
+            "Failed to initiate Microsoft Teams OAuth: %s", str(e), exc_info=True
+        )
+        raise HTTPException(
+            status_code=500,
+            detail=f"Failed to initiate Microsoft Teams OAuth: {e!s}",
+        ) from e
+
+
+@router.get("/auth/teams/connector/callback")
+async def teams_callback(
+    code: str | None = None,
+    error: str | None = None,
+    error_description: str | None = None,
+    state: str | None = None,
+    session: AsyncSession = Depends(get_async_session),
+):
+    """
+    Handle Microsoft Teams OAuth callback.
+
+    Args:
+        code: Authorization code from Microsoft (if user granted access)
+        error: Error code from Microsoft (if user denied access or error occurred)
+        error_description: Human-readable error description
+        state: State parameter containing user/space info
+        session: Database session
+
+    Returns:
+        Redirect response to frontend
+    """
+    try:
+        # Handle OAuth errors (e.g., user denied access)
+        if error:
+            error_msg = error_description or error
+            logger.warning("Microsoft Teams OAuth error: %s", error_msg)
+            redirect_url = f"{config.NEXT_FRONTEND_URL}/dashboard?error=teams_auth_failed&message={error_msg}"
+            return RedirectResponse(url=redirect_url)
+
+        # Validate required parameters
+        if not code or not state:
+            raise HTTPException(
+                status_code=400, detail="Missing required OAuth parameters"
+            )
+
+        # Verify and decode state parameter
+        state_manager = get_state_manager()
+        try:
+            data = state_manager.validate_state(state)
+            space_id = data["space_id"]
+            user_id = UUID(data["user_id"])
+        except (HTTPException, ValueError, KeyError) as e:
+            logger.error("Invalid OAuth state: %s", str(e))
+            redirect_url = f"{config.NEXT_FRONTEND_URL}/dashboard?error=invalid_state"
+            return RedirectResponse(url=redirect_url)
+
+        # Exchange authorization code for access token
+        token_data = {
+            "client_id": config.TEAMS_CLIENT_ID,
+            "client_secret": config.TEAMS_CLIENT_SECRET,
+            "code": code,
+            "redirect_uri": config.TEAMS_REDIRECT_URI,
+            "grant_type": "authorization_code",
+        }
+
+        async with httpx.AsyncClient() as client:
+            token_response = await client.post(
+                TOKEN_URL,
+                data=token_data,
+                headers={"Content-Type": "application/x-www-form-urlencoded"},
+                timeout=30.0,
+            )
+
+        if token_response.status_code != 200:
+            error_detail = token_response.text
+            try:
+                error_json = token_response.json()
+                error_detail = error_json.get("error_description", error_detail)
+            except Exception:
+                pass
+            raise HTTPException(
+                status_code=400, detail=f"Token exchange failed: {error_detail}"
+            )
+
+        token_json = token_response.json()
+
+        # Extract tokens from response
+        access_token = token_json.get("access_token")
+        refresh_token = token_json.get("refresh_token")
+
+        if not access_token:
+            raise HTTPException(
+                status_code=400, detail="No access token received from Microsoft"
+            )
+
+        # Encrypt sensitive tokens before storing
+        token_encryption = get_token_encryption()
+
+        # Calculate expiration time (UTC, tz-aware)
+        expires_at = None
+        if token_json.get("expires_in"):
+            now_utc = datetime.now(UTC)
+            expires_at = now_utc + timedelta(seconds=int(token_json["expires_in"]))
+
+        # Fetch user info from Microsoft Graph API
+        user_info = {}
+        tenant_info = {}
+        try:
+            async with httpx.AsyncClient() as client:
+                # Get user profile
+                user_response = await client.get(
+                    "https://graph.microsoft.com/v1.0/me",
+                    headers={"Authorization": f"Bearer {access_token}"},
+                    timeout=30.0,
+                )
+                if user_response.status_code == 200:
+                    user_data = user_response.json()
+                    user_info = {
+                        "user_id": user_data.get("id"),
+                        "user_name": user_data.get("displayName"),
+                        "user_email": user_data.get("mail")
+                        or user_data.get("userPrincipalName"),
+                    }
+
+                # Get organization/tenant info
+                org_response = await client.get(
+                    "https://graph.microsoft.com/v1.0/organization",
+                    headers={"Authorization": f"Bearer {access_token}"},
+                    timeout=30.0,
+                )
+                if org_response.status_code == 200:
+                    org_data = org_response.json()
+                    if org_data.get("value") and len(org_data["value"]) > 0:
+                        org = org_data["value"][0]
+                        tenant_info = {
+                            "tenant_id": org.get("id"),
+                            "tenant_name": org.get("displayName"),
+                        }
+        except Exception as e:
+            logger.warning(
+                "Failed to fetch user/tenant info from Microsoft Graph: %s", str(e)
+            )
+
+        # Store the encrypted tokens and user/tenant info in connector config
+        connector_config = {
+            "access_token": token_encryption.encrypt_token(access_token),
+            "refresh_token": token_encryption.encrypt_token(refresh_token)
+            if refresh_token
+            else None,
+            "token_type": token_json.get("token_type", "Bearer"),
+            "expires_in": token_json.get("expires_in"),
+            "expires_at": expires_at.isoformat() if expires_at else None,
+            "scope": token_json.get("scope"),
+            "tenant_id": tenant_info.get("tenant_id"),
+            "tenant_name": tenant_info.get("tenant_name"),
+            "user_id": user_info.get("user_id"),
+            # Mark that token is encrypted for backward compatibility
+            "_token_encrypted": True,
+        }
+
+        # Extract unique identifier from connector credentials
+        connector_identifier = extract_identifier_from_credentials(
+            SearchSourceConnectorType.TEAMS_CONNECTOR, connector_config
+        )
+
+        # Check for duplicate connector (same tenant already connected)
+        is_duplicate = await check_duplicate_connector(
+            session,
+            SearchSourceConnectorType.TEAMS_CONNECTOR,
+            space_id,
+            user_id,
+            connector_identifier,
+        )
+
+        if is_duplicate:
+            logger.warning(
+                "Duplicate Microsoft Teams connector for user %s, space %s, tenant %s",
+                user_id,
+                space_id,
+                tenant_info.get("tenant_name"),
+            )
+            redirect_url = f"{config.NEXT_FRONTEND_URL}/dashboard?error=duplicate_connector&message=This Microsoft Teams tenant is already connected to this space"
+            return RedirectResponse(url=redirect_url)
+
+        # Generate unique connector name
+        connector_name = await generate_unique_connector_name(
+            session,
+            SearchSourceConnectorType.TEAMS_CONNECTOR,
+            space_id,
+            user_id,
+            connector_identifier,
+        )
+
+        # Create new connector
+        new_connector = SearchSourceConnector(
+            name=connector_name,
+            connector_type=SearchSourceConnectorType.TEAMS_CONNECTOR,
+            is_indexable=True,
+            config=connector_config,
+            search_space_id=space_id,
+            user_id=user_id,
+        )
+
+        try:
+            session.add(new_connector)
+            await session.commit()
+            await session.refresh(new_connector)
+
+            logger.info(
+                "Successfully created Microsoft Teams connector %s for user %s",
+                new_connector.id,
+                user_id,
+            )
+
+            # Redirect to frontend with success
+            redirect_url = f"{config.NEXT_FRONTEND_URL}/dashboard?success=teams_connected&connector_id={new_connector.id}"
+            return RedirectResponse(url=redirect_url)
+
+        except IntegrityError as e:
+            await session.rollback()
+            logger.error("Database integrity error creating Teams connector: %s", str(e))
+            redirect_url = f"{config.NEXT_FRONTEND_URL}/dashboard?error=connector_creation_failed"
+            return RedirectResponse(url=redirect_url)
+
+    except HTTPException:
+        raise
+    except (IntegrityError, ValueError) as e:
+        logger.error("Teams OAuth callback error: %s", str(e), exc_info=True)
+        redirect_url = f"{config.NEXT_FRONTEND_URL}/dashboard?error=teams_auth_error"
+        return RedirectResponse(url=redirect_url)
+
+
+async def refresh_teams_token(
+    session: AsyncSession, connector: SearchSourceConnector
+) -> SearchSourceConnector:
+    """
+    Refresh Microsoft Teams OAuth tokens.
+
+    Args:
+        session: Database session
+        connector: The connector to refresh
+
+    Returns:
+        Updated connector with refreshed tokens
+
+    Raises:
+        HTTPException: If token refresh fails
+    """
+    logger.info(
+        "Refreshing Microsoft Teams OAuth tokens for connector %s", connector.id
+    )
+
+    credentials = TeamsAuthCredentialsBase.from_dict(connector.config)
+
+    # Decrypt tokens if they are encrypted
+    token_encryption = get_token_encryption()
+    is_encrypted = connector.config.get("_token_encrypted", False)
+    refresh_token = credentials.refresh_token
+
+    if is_encrypted and refresh_token:
+        try:
+            refresh_token = token_encryption.decrypt_token(refresh_token)
+        except Exception as e:
+            logger.error("Failed to decrypt refresh token: %s", str(e))
+            raise HTTPException(
+                status_code=500, detail="Failed to decrypt stored refresh token"
+            ) from e
+
+    if not refresh_token:
+        raise HTTPException(
+            status_code=400,
+            detail=f"No refresh token available for connector {connector.id}",
+        )
+
+    # Microsoft uses oauth2/v2.0/token for token refresh
+    refresh_data = {
+        "client_id": config.TEAMS_CLIENT_ID,
+        "client_secret": config.TEAMS_CLIENT_SECRET,
+        "grant_type": "refresh_token",
+        "refresh_token": refresh_token,
+        "scope": " ".join(SCOPES),
+    }
+
+    async with httpx.AsyncClient() as client:
+        token_response = await client.post(
+            TOKEN_URL,
+            data=refresh_data,
+            headers={"Content-Type": "application/x-www-form-urlencoded"},
+            timeout=30.0,
+        )
+
+    if token_response.status_code != 200:
+        error_detail = token_response.text
+        try:
+            error_json = token_response.json()
+            error_detail = error_json.get("error_description", error_detail)
+        except Exception:
+            pass
+        raise HTTPException(
+            status_code=400, detail=f"Token refresh failed: {error_detail}"
+        )
+
+    token_json = token_response.json()
+
+    # Extract new tokens
+    access_token = token_json.get("access_token")
+    new_refresh_token = token_json.get("refresh_token")
+
+    if not access_token:
+        raise HTTPException(
+            status_code=400, detail="No access token received from Microsoft refresh"
+        )
+
+    # Calculate expiration time (UTC, tz-aware)
+    expires_at = None
+    expires_in = token_json.get("expires_in")
+    if expires_in:
+        now_utc = datetime.now(UTC)
+        expires_at = now_utc + timedelta(seconds=int(expires_in))
+
+    # Update credentials object with encrypted tokens
+    credentials.access_token = token_encryption.encrypt_token(access_token)
+    if new_refresh_token:
+        credentials.refresh_token = token_encryption.encrypt_token(new_refresh_token)
+    credentials.expires_in = expires_in
+    credentials.expires_at = expires_at
+    credentials.scope = token_json.get("scope")
+
+    # Preserve tenant/user info
+    if not credentials.tenant_id:
+        credentials.tenant_id = connector.config.get("tenant_id")
+    if not credentials.tenant_name:
+        credentials.tenant_name = connector.config.get("tenant_name")
+    if not credentials.user_id:
+        credentials.user_id = connector.config.get("user_id")
+
+    # Update connector config with encrypted tokens
+    credentials_dict = credentials.to_dict()
+    credentials_dict["_token_encrypted"] = True
+    connector.config = credentials_dict
+
+    await session.commit()
+    await session.refresh(connector)
+
+    logger.info(
+        "Successfully refreshed Microsoft Teams tokens for connector %s", connector.id
+    )
+
+    return connector

surfsense_backend/app/schemas/clickup_auth_credentials.py

@@ -0,0 +1,85 @@
+from datetime import UTC, datetime
+
+from pydantic import BaseModel, field_validator
+
+
+class ClickUpAuthCredentialsBase(BaseModel):
+    access_token: str
+    refresh_token: str | None = None
+    expires_in: int | None = None
+    expires_at: datetime | None = None
+    user_id: str | None = None
+    user_email: str | None = None
+    user_name: str | None = None
+    workspace_id: str | None = None
+    workspace_name: str | None = None
+
+    @property
+    def is_expired(self) -> bool:
+        """Check if the credentials have expired."""
+        if self.expires_at is None:
+            return False  # Long-lived token, treat as not expired
+        return self.expires_at <= datetime.now(UTC)
+
+    @property
+    def is_refreshable(self) -> bool:
+        """Check if the credentials can be refreshed."""
+        return self.refresh_token is not None
+
+    def to_dict(self) -> dict:
+        """Convert credentials to dictionary for storage."""
+        return {
+            "access_token": self.access_token,
+            "refresh_token": self.refresh_token,
+            "expires_in": self.expires_in,
+            "expires_at": self.expires_at.isoformat() if self.expires_at else None,
+            "user_id": self.user_id,
+            "user_email": self.user_email,
+            "user_name": self.user_name,
+            "workspace_id": self.workspace_id,
+            "workspace_name": self.workspace_name,
+        }
+
+    @classmethod
+    def from_dict(cls, data: dict) -> "ClickUpAuthCredentialsBase":
+        """Create credentials from dictionary."""
+        expires_at = None
+        if data.get("expires_at"):
+            expires_at = datetime.fromisoformat(data["expires_at"])
+
+        # Convert user_id to string if it's an integer (for backward compatibility)
+        user_id = data.get("user_id")
+        if user_id is not None and not isinstance(user_id, str):
+            user_id = str(user_id)
+
+        # Convert workspace_id to string if it's an integer (for backward compatibility)
+        workspace_id = data.get("workspace_id")
+        if workspace_id is not None and not isinstance(workspace_id, str):
+            workspace_id = str(workspace_id)
+
+        return cls(
+            access_token=data.get("access_token", ""),
+            refresh_token=data.get("refresh_token"),
+            expires_in=data.get("expires_in"),
+            expires_at=expires_at,
+            user_id=user_id,
+            user_email=data.get("user_email"),
+            user_name=data.get("user_name"),
+            workspace_id=workspace_id,
+            workspace_name=data.get("workspace_name"),
+        )
+
+    @field_validator("expires_at", mode="before")
+    @classmethod
+    def ensure_aware_utc(cls, v):
+        # Strings like "2025-08-26T14:46:57.367184"
+        if isinstance(v, str):
+            # add +00:00 if missing tz info
+            if v.endswith("Z"):
+                return datetime.fromisoformat(v.replace("Z", "+00:00"))
+            dt = datetime.fromisoformat(v)
+            return dt if dt.tzinfo else dt.replace(tzinfo=UTC)
+        # datetime objects
+        if isinstance(v, datetime):
+            return v if v.tzinfo else v.replace(tzinfo=UTC)
+        return v

surfsense_backend/app/schemas/teams_auth_credentials.py

@@ -0,0 +1,79 @@
+"""
+Microsoft Teams OAuth credentials schema.
+"""
+
+from datetime import UTC, datetime
+
+from pydantic import BaseModel, field_validator
+
+
+class TeamsAuthCredentialsBase(BaseModel):
+    """Microsoft Teams OAuth credentials."""
+
+    access_token: str
+    refresh_token: str | None = None
+    token_type: str = "Bearer"
+    expires_in: int | None = None
+    expires_at: datetime | None = None
+    scope: str | None = None
+    tenant_id: str | None = None
+    tenant_name: str | None = None
+    user_id: str | None = None
+
+    @property
+    def is_expired(self) -> bool:
+        """Check if the credentials have expired."""
+        if self.expires_at is None:
+            return False
+        return self.expires_at <= datetime.now(UTC)
+
+    @property
+    def is_refreshable(self) -> bool:
+        """Check if the credentials can be refreshed."""
+        return self.refresh_token is not None
+
+    def to_dict(self) -> dict:
+        """Convert credentials to dictionary for storage."""
+        return {
+            "access_token": self.access_token,
+            "refresh_token": self.refresh_token,
+            "token_type": self.token_type,
+            "expires_in": self.expires_in,
+            "expires_at": self.expires_at.isoformat() if self.expires_at else None,
+            "scope": self.scope,
+            "tenant_id": self.tenant_id,
+            "tenant_name": self.tenant_name,
+            "user_id": self.user_id,
+        }
+
+    @classmethod
+    def from_dict(cls, data: dict) -> "TeamsAuthCredentialsBase":
+        """Create credentials from dictionary."""
+        expires_at = None
+        if data.get("expires_at"):
+            expires_at = datetime.fromisoformat(data["expires_at"])
+
+        return cls(
+            access_token=data.get("access_token", ""),
+            refresh_token=data.get("refresh_token"),
+            token_type=data.get("token_type", "Bearer"),
+            expires_in=data.get("expires_in"),
+            expires_at=expires_at,
+            scope=data.get("scope"),
+            tenant_id=data.get("tenant_id"),
+            tenant_name=data.get("tenant_name"),
+            user_id=data.get("user_id"),
+        )
+
+    @field_validator("expires_at", mode="before")
+    @classmethod
+    def ensure_aware_utc(cls, v):
+        """Ensure datetime is timezone-aware (UTC)."""
+        if isinstance(v, str):
+            if v.endswith("Z"):
+                return datetime.fromisoformat(v.replace("Z", "+00:00"))
+            dt = datetime.fromisoformat(v)
+            return dt if dt.tzinfo else dt.replace(tzinfo=UTC)
+        if isinstance(v, datetime):
+            return v if v.tzinfo else v.replace(tzinfo=UTC)
+        return v

surfsense_backend/app/services/connector_service.py

@@ -2269,6 +2269,80 @@ class ConnectorService:
 
         return result_object, discord_docs
 
+    async def search_teams(
+        self,
+        user_query: str,
+        search_space_id: int,
+        top_k: int = 20,
+        start_date: datetime | None = None,
+        end_date: datetime | None = None,
+    ) -> tuple:
+        """
+        Search for Microsoft Teams messages and return both the source information and langchain documents.
+
+        Uses combined chunk-level and document-level hybrid search with RRF fusion.
+
+        Args:
+            user_query: The user's query
+            search_space_id: The search space ID to search in
+            top_k: Maximum number of results to return
+            start_date: Optional start date for filtering documents by updated_at
+            end_date: Optional end date for filtering documents by updated_at
+
+        Returns:
+            tuple: (sources_info, langchain_documents)
+        """
+        teams_docs = await self._combined_rrf_search(
+            query_text=user_query,
+            search_space_id=search_space_id,
+            document_type="TEAMS_CONNECTOR",
+            top_k=top_k,
+            start_date=start_date,
+            end_date=end_date,
+        )
+
+        # Early return if no results
+        if not teams_docs:
+            return {
+                "id": 53,
+                "name": "Microsoft Teams",
+                "type": "TEAMS_CONNECTOR",
+                "sources": [],
+            }, []
+
+        def _title_fn(_doc_info: dict[str, Any], metadata: dict[str, Any]) -> str:
+            team_name = metadata.get("team_name", "Unknown Team")
+            channel_name = metadata.get("channel_name", "Unknown Channel")
+            message_date = metadata.get("start_date", "")
+            title = f"Teams: {team_name} - {channel_name}"
+            if message_date:
+                title += f" ({message_date})"
+            return title
+
+        def _url_fn(_doc_info: dict[str, Any], metadata: dict[str, Any]) -> str:
+            team_id = metadata.get("team_id", "")
+            channel_id = metadata.get("channel_id", "")
+            if team_id and channel_id:
+                return f"https://teams.microsoft.com/l/channel/{channel_id}/General?groupId={team_id}"
+            return ""
+
+        sources_list = self._build_chunk_sources_from_documents(
+            teams_docs,
+            title_fn=_title_fn,
+            url_fn=_url_fn,
+            description_fn=lambda chunk, _doc_info, _metadata: chunk.get("content", ""),
+        )
+
+        # Create result object
+        result_object = {
+            "id": 53,
+            "name": "Microsoft Teams",
+            "type": "TEAMS_CONNECTOR",
+            "sources": sources_list,
+        }
+
+        return result_object, teams_docs
+
     async def search_luma(
         self,
         user_query: str,

surfsense_backend/app/services/docling_service.py

@@ -128,42 +128,6 @@ class DoclingService:
             logger.error(f"❌ Docling initialization failed: {e}")
             raise RuntimeError(f"Docling initialization failed: {e}") from e
 
-    def _configure_easyocr_local_models(self):
-        """Configure EasyOCR to use pre-downloaded local models."""
-        try:
-            import os
-
-            import easyocr
-
-            # Set SSL environment for EasyOCR downloads
-            os.environ["CURL_CA_BUNDLE"] = ""
-            os.environ["REQUESTS_CA_BUNDLE"] = ""
-
-            # Try to use local models first, fallback to download if needed
-            try:
-                reader = easyocr.Reader(
-                    ["en"],
-                    download_enabled=False,
-                    model_storage_directory="/root/.EasyOCR/model",
-                )
-                logger.info("✅ EasyOCR configured for local models")
-                return reader
-            except Exception:
-                # If local models fail, allow download with SSL bypass
-                logger.info(
-                    "🔄 Local models failed, attempting download with SSL bypass..."
-                )
-                reader = easyocr.Reader(
-                    ["en"],
-                    download_enabled=True,
-                    model_storage_directory="/root/.EasyOCR/model",
-                )
-                logger.info("✅ EasyOCR configured with downloaded models")
-                return reader
-        except Exception as e:
-            logger.warning(f"⚠️ EasyOCR configuration failed: {e}")
-            return None
-
     async def process_document(
         self, file_path: str, filename: str | None = None
     ) -> dict[str, Any]:

surfsense_backend/app/services/llm_service.py

@@ -342,40 +342,7 @@ async def get_document_summary_llm(
     )
 
 
-# Backward-compatible aliases (deprecated - will be removed in future versions)
+# Backward-compatible alias (LLM preferences are now per-search-space, not per-user)
-async def get_user_llm_instance(
-    session: AsyncSession, user_id: str, search_space_id: int, role: str
-) -> ChatLiteLLM | None:
-    """
-    Deprecated: Use get_search_space_llm_instance instead.
-    LLM preferences are now stored at the search space level, not per-user.
-    """
-    return await get_search_space_llm_instance(session, search_space_id, role)
-
-
-# Legacy aliases for backward compatibility
-async def get_long_context_llm(
-    session: AsyncSession, search_space_id: int
-) -> ChatLiteLLM | None:
-    """Deprecated: Use get_document_summary_llm instead."""
-    return await get_document_summary_llm(session, search_space_id)
-
-
-async def get_fast_llm(
-    session: AsyncSession, search_space_id: int
-) -> ChatLiteLLM | None:
-    """Deprecated: Use get_agent_llm instead."""
-    return await get_agent_llm(session, search_space_id)
-
-
-async def get_strategic_llm(
-    session: AsyncSession, search_space_id: int
-) -> ChatLiteLLM | None:
-    """Deprecated: Use get_document_summary_llm instead."""
-    return await get_document_summary_llm(session, search_space_id)
-
-
-# User-based legacy aliases (LLM preferences are now per-search-space, not per-user)
 async def get_user_long_context_llm(
     session: AsyncSession, user_id: str, search_space_id: int
 ) -> ChatLiteLLM | None:
@@ -384,23 +351,3 @@ async def get_user_long_context_llm(
     The user_id parameter is ignored as LLM preferences are now per-search-space.
     """
     return await get_document_summary_llm(session, search_space_id)
-
-
-async def get_user_fast_llm(
-    session: AsyncSession, user_id: str, search_space_id: int
-) -> ChatLiteLLM | None:
-    """
-    Deprecated: Use get_agent_llm instead.
-    The user_id parameter is ignored as LLM preferences are now per-search-space.
-    """
-    return await get_agent_llm(session, search_space_id)
-
-
-async def get_user_strategic_llm(
-    session: AsyncSession, user_id: str, search_space_id: int
-) -> ChatLiteLLM | None:
-    """
-    Deprecated: Use get_document_summary_llm instead.
-    The user_id parameter is ignored as LLM preferences are now per-search-space.
-    """
-    return await get_document_summary_llm(session, search_space_id)

surfsense_backend/app/services/query_service.py

@@ -1,114 +0,0 @@
-import datetime
-from typing import Any
-
-from langchain_core.messages import AIMessage, HumanMessage, SystemMessage
-from sqlalchemy.ext.asyncio import AsyncSession
-
-from app.services.llm_service import get_document_summary_llm
-
-
-class QueryService:
-    """
-    Service for query-related operations, including reformulation and processing.
-    """
-
-    @staticmethod
-    async def reformulate_query_with_chat_history(
-        user_query: str,
-        session: AsyncSession,
-        search_space_id: int,
-        chat_history_str: str | None = None,
-    ) -> str:
-        """
-        Reformulate the user query using the search space's document summary LLM to make it more
-        effective for information retrieval and research purposes.
-
-        Args:
-            user_query: The original user query
-            session: Database session for accessing LLM configs
-            search_space_id: Search Space ID to get LLM preferences
-            chat_history_str: Optional chat history string
-
-        Returns:
-            str: The reformulated query
-        """
-        if not user_query or not user_query.strip():
-            return user_query
-
-        try:
-            # Get the search space's document summary LLM instance
-            llm = await get_document_summary_llm(session, search_space_id)
-            if not llm:
-                print(
-                    f"Warning: No document summary LLM configured for search space {search_space_id}. Using original query."
-                )
-                return user_query
-
-            # Create system message with instructions
-            system_message = SystemMessage(
-                content=f"""
-                Today's date: {datetime.datetime.now().strftime("%Y-%m-%d")}
-                You are a highly skilled AI assistant specializing in query optimization for advanced research.
-                Your primary objective is to transform a user's initial query into a highly effective search query.
-                This reformulated query will be used to retrieve information from diverse data sources.
-
-                **Chat History Context:**
-                {chat_history_str if chat_history_str else "No prior conversation history is available."}
-                If chat history is provided, analyze it to understand the user's evolving information needs and the broader context of their request. Use this understanding to refine the current query, ensuring it builds upon or clarifies previous interactions.
-
-                **Query Reformulation Guidelines:**
-                Your reformulated query should:
-                1.  **Enhance Specificity and Detail:** Add precision to narrow the search focus effectively, making the query less ambiguous and more targeted.
-                2.  **Resolve Ambiguities:** Identify and clarify vague terms or phrases. If a term has multiple meanings, orient the query towards the most likely one given the context.
-                3.  **Expand Key Concepts:** Incorporate relevant synonyms, related terms, and alternative phrasings for core concepts. This helps capture a wider range of relevant documents.
-                4.  **Deconstruct Complex Questions:** If the original query is multifaceted, break it down into its core searchable components or rephrase it to address each aspect clearly. The final output must still be a single, coherent query string.
-                5.  **Optimize for Comprehensiveness:** Ensure the query is structured to uncover all essential facets of the original request, aiming for thorough information retrieval suitable for research.
-                6.  **Maintain User Intent:** The reformulated query must stay true to the original intent of the user's query. Do not introduce new topics or shift the focus significantly.
-
-                **Crucial Constraints:**
-                *   **Conciseness and Effectiveness:** While aiming for comprehensiveness, the reformulated query MUST be as concise as possible. Eliminate all unnecessary verbosity. Focus on essential keywords, entities, and concepts that directly contribute to effective retrieval.
-                *   **Single, Direct Output:** Return ONLY the reformulated query itself. Do NOT include any explanations, introductory phrases (e.g., "Reformulated query:", "Here is the optimized query:"), or any other surrounding text or markdown formatting.
-
-                Your output should be a single, optimized query string, ready for immediate use in a search system.
-                """
-            )
-
-            # Create human message with the user query
-            human_message = HumanMessage(
-                content=f"Reformulate this query for better research results: {user_query}"
-            )
-
-            # Get the response from the LLM
-            response = await llm.agenerate(messages=[[system_message, human_message]])
-
-            # Extract the reformulated query from the response
-            reformulated_query = response.generations[0][0].text.strip()
-
-            # Return the original query if the reformulation is empty
-            if not reformulated_query:
-                return user_query
-
-            return reformulated_query
-
-        except Exception as e:
-            # Log the error and return the original query
-            print(f"Error reformulating query: {e}")
-            return user_query
-
-    @staticmethod
-    async def langchain_chat_history_to_str(chat_history: list[Any]) -> str:
-        """
-        Convert a list of chat history messages to a string.
-        """
-        chat_history_str = "<chat_history>\n"
-
-        for chat_message in chat_history:
-            if isinstance(chat_message, HumanMessage):
-                chat_history_str += f"<user>{chat_message.content}</user>\n"
-            elif isinstance(chat_message, AIMessage):
-                chat_history_str += f"<assistant>{chat_message.content}</assistant>\n"
-            elif isinstance(chat_message, SystemMessage):
-                chat_history_str += f"<system>{chat_message.content}</system>\n"
-
-        chat_history_str += "</chat_history>"
-        return chat_history_str

surfsense_backend/app/tasks/celery_tasks/connector_tasks.py

@@ -564,6 +564,49 @@ async def _index_discord_messages(
         )
 
 
+@celery_app.task(name="index_teams_messages", bind=True)
+def index_teams_messages_task(
+    self,
+    connector_id: int,
+    search_space_id: int,
+    user_id: str,
+    start_date: str,
+    end_date: str,
+):
+    """Celery task to index Microsoft Teams messages."""
+    import asyncio
+
+    loop = asyncio.new_event_loop()
+    asyncio.set_event_loop(loop)
+
+    try:
+        loop.run_until_complete(
+            _index_teams_messages(
+                connector_id, search_space_id, user_id, start_date, end_date
+            )
+        )
+    finally:
+        loop.close()
+
+
+async def _index_teams_messages(
+    connector_id: int,
+    search_space_id: int,
+    user_id: str,
+    start_date: str,
+    end_date: str,
+):
+    """Index Microsoft Teams messages with new session."""
+    from app.routes.search_source_connectors_routes import (
+        run_teams_indexing,
+    )
+
+    async with get_celery_session_maker()() as session:
+        await run_teams_indexing(
+            session, connector_id, search_space_id, user_id, start_date, end_date
+        )
+
+
 @celery_app.task(name="index_luma_events", bind=True)
 def index_luma_events_task(
     self,

surfsense_backend/app/tasks/connector_indexers/airtable_indexer.py

@@ -6,10 +6,8 @@ from sqlalchemy.exc import SQLAlchemyError
 from sqlalchemy.ext.asyncio import AsyncSession
 
 from app.config import config
-from app.connectors.airtable_connector import AirtableConnector
+from app.connectors.airtable_history import AirtableHistoryConnector
 from app.db import Document, DocumentType, SearchSourceConnectorType
-from app.routes.airtable_add_connector_route import refresh_airtable_token
-from app.schemas.airtable_auth_credentials import AirtableAuthCredentialsBase
 from app.services.llm_service import get_user_long_context_llm
 from app.services.task_logging_service import TaskLoggingService
 from app.utils.document_converters import (
@@ -18,7 +16,6 @@ from app.utils.document_converters import (
     generate_document_summary,
     generate_unique_identifier_hash,
 )
-from app.utils.oauth_security import TokenEncryption
 
 from .base import (
     calculate_date_range,
@@ -85,76 +82,11 @@ async def index_airtable_records(
             )
             return 0, f"Connector with ID {connector_id} not found"
 
-        # Create credentials from connector config
+        # Normalize "undefined" strings to None (from frontend)
-        config_data = (
+        if start_date == "undefined" or start_date == "":
-            connector.config.copy()
+            start_date = None
-        )  # Work with a copy to avoid modifying original
+        if end_date == "undefined" or end_date == "":
-
+            end_date = None
-        # Decrypt tokens if they are encrypted (only when explicitly marked)
-        token_encrypted = config_data.get("_token_encrypted", False)
-        if token_encrypted:
-            # Tokens are explicitly marked as encrypted, attempt decryption
-            if not config.SECRET_KEY:
-                await task_logger.log_task_failure(
-                    log_entry,
-                    f"SECRET_KEY not configured but tokens are marked as encrypted for connector {connector_id}",
-                    "Missing SECRET_KEY for token decryption",
-                    {"error_type": "MissingSecretKey"},
-                )
-                return 0, "SECRET_KEY not configured but tokens are marked as encrypted"
-            try:
-                token_encryption = TokenEncryption(config.SECRET_KEY)
-
-                # Decrypt access_token
-                if config_data.get("access_token"):
-                    config_data["access_token"] = token_encryption.decrypt_token(
-                        config_data["access_token"]
-                    )
-                    logger.info(
-                        f"Decrypted Airtable access token for connector {connector_id}"
-                    )
-
-                # Decrypt refresh_token if present
-                if config_data.get("refresh_token"):
-                    config_data["refresh_token"] = token_encryption.decrypt_token(
-                        config_data["refresh_token"]
-                    )
-                    logger.info(
-                        f"Decrypted Airtable refresh token for connector {connector_id}"
-                    )
-            except Exception as e:
-                await task_logger.log_task_failure(
-                    log_entry,
-                    f"Failed to decrypt Airtable tokens for connector {connector_id}: {e!s}",
-                    "Token decryption failed",
-                    {"error_type": "TokenDecryptionError"},
-                )
-                return 0, f"Failed to decrypt Airtable tokens: {e!s}"
-        # If _token_encrypted is False or not set, treat tokens as plaintext
-
-        try:
-            credentials = AirtableAuthCredentialsBase.from_dict(config_data)
-        except Exception as e:
-            await task_logger.log_task_failure(
-                log_entry,
-                f"Invalid Airtable credentials in connector {connector_id}",
-                str(e),
-                {"error_type": "InvalidCredentials"},
-            )
-            return 0, f"Invalid Airtable credentials: {e!s}"
-
-        # Check if credentials are expired
-        if credentials.is_expired:
-            await task_logger.log_task_failure(
-                log_entry,
-                f"Airtable credentials expired for connector {connector_id}",
-                "Credentials expired",
-                {"error_type": "ExpiredCredentials"},
-            )
-
-            connector = await refresh_airtable_token(session, connector)
-
-            # return 0, "Airtable credentials have expired. Please re-authenticate."
 
         # Calculate date range for indexing
         start_date_str, end_date_str = calculate_date_range(
@@ -166,8 +98,9 @@ async def index_airtable_records(
             f"from {start_date_str} to {end_date_str}"
         )
 
-        # Initialize Airtable connector
+        # Initialize Airtable history connector with auto-refresh capability
-        airtable_connector = AirtableConnector(credentials)
+        airtable_history = AirtableHistoryConnector(session, connector_id)
+        airtable_connector = await airtable_history._get_connector()
         total_processed = 0
 
         try:
@@ -459,47 +392,56 @@ async def index_airtable_records(
                             documents_skipped += 1
                             continue  # Skip this message and continue with others
 
-                    # Update the last_indexed_at timestamp for the connector only if requested
+                    # Accumulate total processed across all tables
-                    total_processed = documents_indexed
+                    total_processed += documents_indexed
-                    if total_processed > 0:
-                        await update_connector_last_indexed(
-                            session, connector, update_last_indexed
-                        )
 
                     # Final commit for any remaining documents not yet committed in batches
-                    logger.info(
+                    if documents_indexed > 0:
-                        f"Final commit: Total {documents_indexed} Airtable records processed"
+                        logger.info(
-                    )
+                            f"Final commit for table {table_name}: {documents_indexed} Airtable records processed"
-                    await session.commit()
+                        )
-                    logger.info(
+                        await session.commit()
-                        "Successfully committed all Airtable document changes to database"
+                        logger.info(
-                    )
+                            f"Successfully committed all Airtable document changes for table {table_name}"
+                        )
 
-                    # Log success
+            # Update the last_indexed_at timestamp for the connector only if requested
-                    await task_logger.log_task_success(
+            # (after all tables in all bases are processed)
-                        log_entry,
+            if total_processed > 0:
-                        f"Successfully completed Airtable indexing for connector {connector_id}",
+                await update_connector_last_indexed(
-                        {
+                    session, connector, update_last_indexed
-                            "events_processed": total_processed,
+                )
-                            "documents_indexed": documents_indexed,
-                            "documents_skipped": documents_skipped,
-                            "skipped_messages_count": len(skipped_messages),
-                        },
-                    )
 
-                    logger.info(
+            # Log success after processing all bases and tables
-                        f"Airtable indexing completed: {documents_indexed} new records, {documents_skipped} skipped"
+            await task_logger.log_task_success(
-                    )
+                log_entry,
-                    return (
+                f"Successfully completed Airtable indexing for connector {connector_id}",
-                        total_processed,
+                {
-                        None,
+                    "events_processed": total_processed,
-                    )  # Return None as the error message to indicate success
+                    "documents_indexed": total_processed,
+                },
+            )
+
+            logger.info(
+                f"Airtable indexing completed: {total_processed} total records processed"
+            )
+            return (
+                total_processed,
+                None,
+            )  # Return None as the error message to indicate success
 
         except Exception as e:
             logger.error(
                 f"Fetching Airtable bases for connector {connector_id} failed: {e!s}",
                 exc_info=True,
             )
+            await task_logger.log_task_failure(
+                log_entry,
+                f"Failed to fetch Airtable bases for connector {connector_id}",
+                str(e),
+                {"error_type": type(e).__name__},
+            )
+            return 0, f"Failed to fetch Airtable bases: {e!s}"
 
     except SQLAlchemyError as db_error:
         await session.rollback()

surfsense_backend/app/tasks/connector_indexers/clickup_indexer.py

@@ -2,13 +2,14 @@
 ClickUp connector indexer.
 """
 
+import contextlib
 from datetime import datetime
 
 from sqlalchemy.exc import SQLAlchemyError
 from sqlalchemy.ext.asyncio import AsyncSession
 
 from app.config import config
-from app.connectors.clickup_connector import ClickUpConnector
+from app.connectors.clickup_history import ClickUpHistoryConnector
 from app.db import Document, DocumentType, SearchSourceConnectorType
 from app.services.llm_service import get_user_long_context_llm
 from app.services.task_logging_service import TaskLoggingService
@@ -82,26 +83,30 @@ async def index_clickup_tasks(
             )
             return 0, error_msg
 
-        # Extract ClickUp configuration
+        # Check if using OAuth (has access_token in config) or legacy (has CLICKUP_API_TOKEN)
-        clickup_api_token = connector.config.get("CLICKUP_API_TOKEN")
+        has_oauth = connector.config.get("access_token") is not None
+        has_legacy = connector.config.get("CLICKUP_API_TOKEN") is not None
 
-        if not clickup_api_token:
+        if not has_oauth and not has_legacy:
-            error_msg = "ClickUp API token not found in connector configuration"
+            error_msg = "ClickUp credentials not found in connector configuration (neither OAuth nor API token)"
             await task_logger.log_task_failure(
                 log_entry,
-                f"ClickUp API token not found in connector config for connector {connector_id}",
+                f"ClickUp credentials not found in connector config for connector {connector_id}",
-                "Missing ClickUp token",
+                "Missing ClickUp credentials",
-                {"error_type": "MissingToken"},
+                {"error_type": "MissingCredentials"},
             )
             return 0, error_msg
 
         await task_logger.log_task_progress(
             log_entry,
-            f"Initializing ClickUp client for connector {connector_id}",
+            f"Initializing ClickUp client for connector {connector_id} ({'OAuth' if has_oauth else 'API Token'})",
             {"stage": "client_initialization"},
         )
 
-        clickup_client = ClickUpConnector(api_token=clickup_api_token)
+        # Use history connector which supports both OAuth and legacy API tokens
+        clickup_client = ClickUpHistoryConnector(
+            session=session, connector_id=connector_id
+        )
 
         # Get authorized workspaces
         await task_logger.log_task_progress(
@@ -110,7 +115,7 @@ async def index_clickup_tasks(
             {"stage": "workspace_fetching"},
         )
 
-        workspaces_response = clickup_client.get_authorized_workspaces()
+        workspaces_response = await clickup_client.get_authorized_workspaces()
         workspaces = workspaces_response.get("teams", [])
 
         if not workspaces:
@@ -141,7 +146,7 @@ async def index_clickup_tasks(
 
             # Fetch tasks for date range if provided
             if start_date and end_date:
-                tasks, error = clickup_client.get_tasks_in_date_range(
+                tasks, error = await clickup_client.get_tasks_in_date_range(
                     workspace_id=workspace_id,
                     start_date=start_date,
                     end_date=end_date,
@@ -153,7 +158,7 @@ async def index_clickup_tasks(
                     )
                     continue
             else:
-                tasks = clickup_client.get_workspace_tasks(
+                tasks = await clickup_client.get_workspace_tasks(
                     workspace_id=workspace_id, include_closed=True
                 )
 
@@ -393,10 +398,21 @@ async def index_clickup_tasks(
         logger.info(
             f"clickup indexing completed: {documents_indexed} new tasks, {documents_skipped} skipped"
         )
+
+        # Close client connection
+        try:
+            await clickup_client.close()
+        except Exception as e:
+            logger.warning(f"Error closing ClickUp client: {e!s}")
+
         return total_processed, None
 
     except SQLAlchemyError as db_error:
         await session.rollback()
+        # Clean up the connector in case of error
+        if "clickup_client" in locals():
+            with contextlib.suppress(Exception):
+                await clickup_client.close()
         await task_logger.log_task_failure(
             log_entry,
             f"Database error during ClickUp indexing for connector {connector_id}",
@@ -407,6 +423,10 @@ async def index_clickup_tasks(
         return 0, f"Database error: {db_error!s}"
     except Exception as e:
         await session.rollback()
+        # Clean up the connector in case of error
+        if "clickup_client" in locals():
+            with contextlib.suppress(Exception):
+                await clickup_client.close()
         await task_logger.log_task_failure(
             log_entry,
             f"Failed to index ClickUp tasks for connector {connector_id}",

surfsense_backend/app/tasks/connector_indexers/confluence_indexer.py

@@ -2,6 +2,7 @@
 Confluence connector indexer.
 """
 
+import contextlib
 from datetime import datetime
 
 from sqlalchemy.exc import SQLAlchemyError
@@ -142,10 +143,8 @@ async def index_confluence_pages(
                     )
                     # Close client before returning
                     if confluence_client:
-                        try:
+                        with contextlib.suppress(Exception):
                             await confluence_client.close()
-                        except Exception:
-                            pass
                     return 0, None
                 else:
                     await task_logger.log_task_failure(
@@ -156,10 +155,8 @@ async def index_confluence_pages(
                     )
                     # Close client on error
                     if confluence_client:
-                        try:
+                        with contextlib.suppress(Exception):
                             await confluence_client.close()
-                        except Exception:
-                            pass
                     return 0, f"Failed to get Confluence pages: {error}"
 
             logger.info(f"Retrieved {len(pages)} pages from Confluence API")
@@ -168,10 +165,8 @@ async def index_confluence_pages(
             logger.error(f"Error fetching Confluence pages: {e!s}", exc_info=True)
             # Close client on error
             if confluence_client:
-                try:
+                with contextlib.suppress(Exception):
                     await confluence_client.close()
-                except Exception:
-                    pass
             return 0, f"Error fetching Confluence pages: {e!s}"
 
         # Process and index each page
@@ -437,10 +432,8 @@ async def index_confluence_pages(
         await session.rollback()
         # Close client if it exists
         if confluence_client:
-            try:
+            with contextlib.suppress(Exception):
                 await confluence_client.close()
-            except Exception:
-                pass
         await task_logger.log_task_failure(
             log_entry,
             f"Database error during Confluence indexing for connector {connector_id}",
@@ -453,10 +446,8 @@ async def index_confluence_pages(
         await session.rollback()
         # Close client if it exists
         if confluence_client:
-            try:
+            with contextlib.suppress(Exception):
                 await confluence_client.close()
-            except Exception:
-                pass
         await task_logger.log_task_failure(
             log_entry,
             f"Failed to index Confluence pages for connector {connector_id}",

surfsense_backend/app/tasks/connector_indexers/jira_indexer.py

@@ -2,6 +2,7 @@
 Jira connector indexer.
 """
 
+import contextlib
 from datetime import datetime
 
 from sqlalchemy.exc import SQLAlchemyError
@@ -413,10 +414,8 @@ async def index_jira_issues(
         logger.error(f"Database error: {db_error!s}", exc_info=True)
         # Clean up the connector in case of error
         if "jira_client" in locals():
-            try:
+            with contextlib.suppress(Exception):
                 await jira_client.close()
-            except Exception:
-                pass
         return 0, f"Database error: {db_error!s}"
     except Exception as e:
         await session.rollback()
@@ -429,8 +428,6 @@ async def index_jira_issues(
         logger.error(f"Failed to index JIRA issues: {e!s}", exc_info=True)
         # Clean up the connector in case of error
         if "jira_client" in locals():
-            try:
+            with contextlib.suppress(Exception):
                 await jira_client.close()
-            except Exception:
-                pass
         return 0, f"Failed to index JIRA issues: {e!s}"

surfsense_backend/app/tasks/connector_indexers/teams_indexer.py

@@ -0,0 +1,473 @@
+"""
+Microsoft Teams connector indexer.
+"""
+
+from sqlalchemy.exc import SQLAlchemyError
+from sqlalchemy.ext.asyncio import AsyncSession
+
+from app.config import config
+from app.connectors.teams_history import TeamsHistory
+from app.db import Document, DocumentType, SearchSourceConnectorType
+from app.services.task_logging_service import TaskLoggingService
+from app.utils.document_converters import (
+    create_document_chunks,
+    generate_content_hash,
+    generate_unique_identifier_hash,
+)
+
+from .base import (
+    build_document_metadata_markdown,
+    calculate_date_range,
+    check_document_by_unique_identifier,
+    get_connector_by_id,
+    get_current_timestamp,
+    logger,
+    update_connector_last_indexed,
+)
+
+
+async def index_teams_messages(
+    session: AsyncSession,
+    connector_id: int,
+    search_space_id: int,
+    user_id: str,
+    start_date: str | None = None,
+    end_date: str | None = None,
+    update_last_indexed: bool = True,
+) -> tuple[int, str | None]:
+    """
+    Index Microsoft Teams messages from all accessible teams and channels.
+
+    Args:
+        session: Database session
+        connector_id: ID of the Teams connector
+        search_space_id: ID of the search space to store documents in
+        user_id: ID of the user
+        start_date: Start date for indexing (YYYY-MM-DD format)
+        end_date: End date for indexing (YYYY-MM-DD format)
+        update_last_indexed: Whether to update the last_indexed_at timestamp (default: True)
+
+    Returns:
+        Tuple containing (number of documents indexed, error message or None)
+    """
+    task_logger = TaskLoggingService(session, search_space_id)
+
+    # Log task start
+    log_entry = await task_logger.log_task_start(
+        task_name="teams_messages_indexing",
+        source="connector_indexing_task",
+        message=f"Starting Microsoft Teams messages indexing for connector {connector_id}",
+        metadata={
+            "connector_id": connector_id,
+            "user_id": str(user_id),
+            "start_date": start_date,
+            "end_date": end_date,
+        },
+    )
+
+    try:
+        # Get the connector
+        await task_logger.log_task_progress(
+            log_entry,
+            f"Retrieving Teams connector {connector_id} from database",
+            {"stage": "connector_retrieval"},
+        )
+
+        connector = await get_connector_by_id(
+            session, connector_id, SearchSourceConnectorType.TEAMS_CONNECTOR
+        )
+
+        if not connector:
+            await task_logger.log_task_failure(
+                log_entry,
+                f"Connector with ID {connector_id} not found or is not a Teams connector",
+                "Connector not found",
+                {"error_type": "ConnectorNotFound"},
+            )
+            return (
+                0,
+                f"Connector with ID {connector_id} not found or is not a Teams connector",
+            )
+
+        # Initialize Teams client with auto-refresh support
+        await task_logger.log_task_progress(
+            log_entry,
+            f"Initializing Teams client for connector {connector_id}",
+            {"stage": "client_initialization"},
+        )
+
+        teams_client = TeamsHistory(session=session, connector_id=connector_id)
+
+        # Handle 'undefined' string from frontend (treat as None)
+        if start_date == "undefined" or start_date == "":
+            start_date = None
+        if end_date == "undefined" or end_date == "":
+            end_date = None
+
+        # Calculate date range
+        await task_logger.log_task_progress(
+            log_entry,
+            "Calculating date range for Teams indexing",
+            {
+                "stage": "date_calculation",
+                "provided_start_date": start_date,
+                "provided_end_date": end_date,
+            },
+        )
+
+        start_date_str, end_date_str = calculate_date_range(
+            connector, start_date, end_date, default_days_back=365
+        )
+
+        logger.info(
+            "Indexing Teams messages from %s to %s", start_date_str, end_date_str
+        )
+
+        await task_logger.log_task_progress(
+            log_entry,
+            f"Fetching Teams from {start_date_str} to {end_date_str}",
+            {
+                "stage": "fetch_teams",
+                "start_date": start_date_str,
+                "end_date": end_date_str,
+            },
+        )
+
+        # Get all teams
+        try:
+            teams = await teams_client.get_all_teams()
+        except Exception as e:
+            await task_logger.log_task_failure(
+                log_entry,
+                f"Failed to get Teams for connector {connector_id}",
+                str(e),
+                {"error_type": "TeamsFetchError"},
+            )
+            return 0, f"Failed to get Teams: {e!s}"
+
+        if not teams:
+            await task_logger.log_task_success(
+                log_entry,
+                f"No Teams found for connector {connector_id}",
+                {"teams_found": 0},
+            )
+            return 0, "No Teams found"
+
+        # Track the number of documents indexed
+        documents_indexed = 0
+        documents_skipped = 0
+        skipped_channels = []
+
+        await task_logger.log_task_progress(
+            log_entry,
+            f"Starting to process {len(teams)} Teams",
+            {"stage": "process_teams", "total_teams": len(teams)},
+        )
+
+        # Convert date strings to datetime objects for filtering
+        from datetime import datetime, timezone
+
+        start_datetime = None
+        end_datetime = None
+        if start_date_str:
+            # Parse as naive datetime and make it timezone-aware (UTC)
+            start_datetime = datetime.strptime(start_date_str, "%Y-%m-%d").replace(tzinfo=timezone.utc)
+        if end_date_str:
+            # Parse as naive datetime, set to end of day, and make it timezone-aware (UTC)
+            end_datetime = datetime.strptime(end_date_str, "%Y-%m-%d").replace(hour=23, minute=59, second=59, tzinfo=timezone.utc)
+
+        # Process each team
+        for team in teams:
+            team_id = team.get("id")
+            team_name = team.get("displayName", "Unknown Team")
+
+            try:
+                # Get channels for this team
+                channels = await teams_client.get_channels_for_team(team_id)
+
+                if not channels:
+                    logger.info("No channels found in team %s", team_name)
+                    continue
+
+                # Process each channel in the team
+                for channel in channels:
+                    channel_id = channel.get("id")
+                    channel_name = channel.get("displayName", "Unknown Channel")
+
+                    try:
+                        # Get messages for this channel
+                        messages = await teams_client.get_messages_from_channel(
+                            team_id,
+                            channel_id,
+                            start_datetime,
+                            end_datetime,
+                            include_replies=True,
+                        )
+
+                        if not messages:
+                            logger.info(
+                                "No messages found in channel %s of team %s for the specified date range.",
+                                channel_name,
+                                team_name,
+                            )
+                            documents_skipped += 1
+                            continue
+
+                        # Process each message
+                        for msg in messages:
+                            # Skip deleted messages or empty content
+                            if msg.get("deletedDateTime"):
+                                continue
+
+                            # Extract message details
+                            message_id = msg.get("id", "")
+                            created_datetime = msg.get("createdDateTime", "")
+                            from_user = msg.get("from", {})
+                            user_name = from_user.get("user", {}).get(
+                                "displayName", "Unknown User"
+                            )
+                            user_email = from_user.get("user", {}).get(
+                                "userPrincipalName", "Unknown Email"
+                            )
+
+                            # Extract message content
+                            body = msg.get("body", {})
+                            content_type = body.get("contentType", "text")
+                            msg_text = body.get("content", "")
+
+                            # Skip empty messages
+                            if not msg_text or msg_text.strip() == "":
+                                continue
+
+                            # Format document metadata
+                            metadata_sections = [
+                                (
+                                    "METADATA",
+                                    [
+                                        f"TEAM_NAME: {team_name}",
+                                        f"TEAM_ID: {team_id}",
+                                        f"CHANNEL_NAME: {channel_name}",
+                                        f"CHANNEL_ID: {channel_id}",
+                                        f"MESSAGE_TIMESTAMP: {created_datetime}",
+                                        f"MESSAGE_USER_NAME: {user_name}",
+                                        f"MESSAGE_USER_EMAIL: {user_email}",
+                                        f"CONTENT_TYPE: {content_type}",
+                                    ],
+                                ),
+                                (
+                                    "CONTENT",
+                                    [
+                                        f"FORMAT: {content_type}",
+                                        "TEXT_START",
+                                        msg_text,
+                                        "TEXT_END",
+                                    ],
+                                ),
+                            ]
+
+                            # Build the document string
+                            combined_document_string = build_document_metadata_markdown(
+                                metadata_sections
+                            )
+
+                            # Generate unique identifier hash for this Teams message
+                            unique_identifier = f"{team_id}_{channel_id}_{message_id}"
+                            unique_identifier_hash = generate_unique_identifier_hash(
+                                DocumentType.TEAMS_CONNECTOR,
+                                unique_identifier,
+                                search_space_id,
+                            )
+
+                            # Generate content hash
+                            content_hash = generate_content_hash(
+                                combined_document_string, search_space_id
+                            )
+
+                            # Check if document with this unique identifier already exists
+                            existing_document = (
+                                await check_document_by_unique_identifier(
+                                    session, unique_identifier_hash
+                                )
+                            )
+
+                            if existing_document:
+                                # Document exists - check if content has changed
+                                if existing_document.content_hash == content_hash:
+                                    logger.info(
+                                        "Document for Teams message %s in channel %s unchanged. Skipping.",
+                                        message_id,
+                                        channel_name,
+                                    )
+                                    documents_skipped += 1
+                                    continue
+                                else:
+                                    # Content has changed - update the existing document
+                                    logger.info(
+                                        "Content changed for Teams message %s in channel %s. Updating document.",
+                                        message_id,
+                                        channel_name,
+                                    )
+
+                                    # Update chunks and embedding
+                                    chunks = await create_document_chunks(
+                                        combined_document_string
+                                    )
+                                    doc_embedding = config.embedding_model_instance.embed(
+                                        combined_document_string
+                                    )
+
+                                    # Update existing document
+                                    existing_document.content = combined_document_string
+                                    existing_document.content_hash = content_hash
+                                    existing_document.embedding = doc_embedding
+                                    existing_document.document_metadata = {
+                                        "team_name": team_name,
+                                        "team_id": team_id,
+                                        "channel_name": channel_name,
+                                        "channel_id": channel_id,
+                                        "start_date": start_date_str,
+                                        "end_date": end_date_str,
+                                        "message_count": len(messages),
+                                        "indexed_at": datetime.now().strftime(
+                                            "%Y-%m-%d %H:%M:%S"
+                                        ),
+                                    }
+
+                                    # Delete old chunks and add new ones
+                                    existing_document.chunks = chunks
+                                    existing_document.updated_at = get_current_timestamp()
+
+                                    documents_indexed += 1
+                                    logger.info(
+                                        "Successfully updated Teams message %s", message_id
+                                    )
+                                    continue
+
+                            # Document doesn't exist - create new one
+                            # Process chunks
+                            chunks = await create_document_chunks(
+                                combined_document_string
+                            )
+                            doc_embedding = config.embedding_model_instance.embed(
+                                combined_document_string
+                            )
+
+                            # Create and store new document
+                            document = Document(
+                                search_space_id=search_space_id,
+                                title=f"Teams - {team_name} - {channel_name}",
+                                document_type=DocumentType.TEAMS_CONNECTOR,
+                                document_metadata={
+                                    "team_name": team_name,
+                                    "team_id": team_id,
+                                    "channel_name": channel_name,
+                                    "channel_id": channel_id,
+                                    "start_date": start_date_str,
+                                    "end_date": end_date_str,
+                                    "message_count": len(messages),
+                                    "indexed_at": datetime.now().strftime(
+                                        "%Y-%m-%d %H:%M:%S"
+                                    ),
+                                },
+                                content=combined_document_string,
+                                embedding=doc_embedding,
+                                chunks=chunks,
+                                content_hash=content_hash,
+                                unique_identifier_hash=unique_identifier_hash,
+                                updated_at=get_current_timestamp(),
+                            )
+
+                            session.add(document)
+                            documents_indexed += 1
+
+                            # Batch commit every 10 documents
+                            if documents_indexed % 10 == 0:
+                                logger.info(
+                                    "Committing batch: %s Teams messages processed so far",
+                                    documents_indexed,
+                                )
+                                await session.commit()
+
+                        logger.info(
+                            "Successfully indexed channel %s in team %s with %s messages",
+                            channel_name,
+                            team_name,
+                            len(messages),
+                        )
+
+                    except Exception as e:
+                        logger.error(
+                            "Error processing channel %s in team %s: %s",
+                            channel_name,
+                            team_name,
+                            str(e),
+                        )
+                        skipped_channels.append(
+                            f"{team_name}/{channel_name} (processing error)"
+                        )
+                        documents_skipped += 1
+                        continue
+
+            except Exception as e:
+                logger.error("Error processing team %s: %s", team_name, str(e))
+                continue
+
+        # Update the last_indexed_at timestamp for the connector only if requested
+        # and if we successfully indexed at least one document
+        total_processed = documents_indexed
+        if total_processed > 0:
+            await update_connector_last_indexed(session, connector, update_last_indexed)
+
+        # Final commit for any remaining documents not yet committed in batches
+        logger.info(
+            "Final commit: Total %s Teams messages processed", documents_indexed
+        )
+        await session.commit()
+
+        # Prepare result message
+        result_message = None
+        if skipped_channels:
+            result_message = f"Processed {total_processed} messages. Skipped {len(skipped_channels)} channels: {', '.join(skipped_channels)}"
+        else:
+            result_message = f"Processed {total_processed} messages."
+
+        # Log success
+        await task_logger.log_task_success(
+            log_entry,
+            f"Successfully completed Teams indexing for connector {connector_id}",
+            {
+                "messages_processed": total_processed,
+                "documents_indexed": documents_indexed,
+                "documents_skipped": documents_skipped,
+                "skipped_channels_count": len(skipped_channels),
+                "result_message": result_message,
+            },
+        )
+
+        logger.info(
+            "Teams indexing completed: %s new messages, %s skipped",
+            documents_indexed,
+            documents_skipped,
+        )
+        return total_processed, result_message
+
+    except SQLAlchemyError as db_error:
+        await session.rollback()
+        await task_logger.log_task_failure(
+            log_entry,
+            f"Database error during Teams indexing for connector {connector_id}",
+            str(db_error),
+            {"error_type": "SQLAlchemyError"},
+        )
+        logger.error("Database error: %s", str(db_error))
+        return 0, f"Database error: {db_error!s}"
+    except Exception as e:
+        await session.rollback()
+        await task_logger.log_task_failure(
+            log_entry,
+            f"Failed to index Teams messages for connector {connector_id}",
+            str(e),
+            {"error_type": type(e).__name__},
+        )
+        logger.error("Failed to index Teams messages: %s", str(e))
+        return 0, f"Failed to index Teams messages: {e!s}"

surfsense_backend/app/utils/connector_naming.py

@@ -0,0 +1,193 @@
+"""
+Connector Naming Utilities.
+
+Provides functions for generating unique, user-friendly connector names.
+"""
+
+from typing import Any
+from urllib.parse import urlparse
+from uuid import UUID
+
+from sqlalchemy import func
+from sqlalchemy.ext.asyncio import AsyncSession
+from sqlalchemy.future import select
+
+from app.db import SearchSourceConnector, SearchSourceConnectorType
+
+# Friendly display names for connector types
+BASE_NAME_FOR_TYPE = {
+    SearchSourceConnectorType.GOOGLE_GMAIL_CONNECTOR: "Gmail",
+    SearchSourceConnectorType.GOOGLE_DRIVE_CONNECTOR: "Google Drive",
+    SearchSourceConnectorType.GOOGLE_CALENDAR_CONNECTOR: "Google Calendar",
+    SearchSourceConnectorType.SLACK_CONNECTOR: "Slack",
+    SearchSourceConnectorType.TEAMS_CONNECTOR: "Microsoft Teams",
+    SearchSourceConnectorType.NOTION_CONNECTOR: "Notion",
+    SearchSourceConnectorType.LINEAR_CONNECTOR: "Linear",
+    SearchSourceConnectorType.JIRA_CONNECTOR: "Jira",
+    SearchSourceConnectorType.DISCORD_CONNECTOR: "Discord",
+    SearchSourceConnectorType.CONFLUENCE_CONNECTOR: "Confluence",
+    SearchSourceConnectorType.AIRTABLE_CONNECTOR: "Airtable",
+}
+
+
+def get_base_name_for_type(connector_type: SearchSourceConnectorType) -> str:
+    """Get a friendly display name for a connector type."""
+    return BASE_NAME_FOR_TYPE.get(
+        connector_type, connector_type.replace("_", " ").title()
+    )
+
+
+def extract_identifier_from_credentials(
+    connector_type: SearchSourceConnectorType,
+    credentials: dict[str, Any],
+) -> str | None:
+    """
+    Extract a unique identifier from connector credentials.
+
+    Args:
+        connector_type: The type of connector
+        credentials: The connector credentials dict
+
+    Returns:
+        Identifier string (workspace name, email, etc.) or None
+    """
+    if connector_type == SearchSourceConnectorType.SLACK_CONNECTOR:
+        return credentials.get("team_name")
+
+    if connector_type == SearchSourceConnectorType.TEAMS_CONNECTOR:
+        return credentials.get("tenant_name")
+
+    if connector_type == SearchSourceConnectorType.NOTION_CONNECTOR:
+        return credentials.get("workspace_name")
+
+    if connector_type == SearchSourceConnectorType.DISCORD_CONNECTOR:
+        return credentials.get("guild_name")
+
+    if connector_type in (
+        SearchSourceConnectorType.JIRA_CONNECTOR,
+        SearchSourceConnectorType.CONFLUENCE_CONNECTOR,
+    ):
+        base_url = credentials.get("base_url", "")
+        if base_url:
+            try:
+                parsed = urlparse(base_url)
+                hostname = parsed.netloc or parsed.path
+                if ".atlassian.net" in hostname:
+                    return hostname.replace(".atlassian.net", "")
+                return hostname
+            except Exception:
+                pass
+        return None
+
+    # Google, Linear, Airtable require API calls - return None
+    return None
+
+
+def generate_connector_name_with_identifier(
+    connector_type: SearchSourceConnectorType,
+    identifier: str | None,
+) -> str:
+    """
+    Generate a connector name with an identifier.
+
+    Args:
+        connector_type: The type of connector
+        identifier: User identifier (email, workspace name, etc.)
+
+    Returns:
+        Name like "Gmail - john@example.com" or just "Gmail" if no identifier
+    """
+    base = get_base_name_for_type(connector_type)
+    if identifier:
+        return f"{base} - {identifier}"
+    return base
+
+
+async def count_connectors_of_type(
+    session: AsyncSession,
+    connector_type: SearchSourceConnectorType,
+    search_space_id: int,
+    user_id: UUID,
+) -> int:
+    """Count existing connectors of a type for a user in a search space."""
+    result = await session.execute(
+        select(func.count(SearchSourceConnector.id)).where(
+            SearchSourceConnector.connector_type == connector_type,
+            SearchSourceConnector.search_space_id == search_space_id,
+            SearchSourceConnector.user_id == user_id,
+        )
+    )
+    return result.scalar() or 0
+
+
+async def check_duplicate_connector(
+    session: AsyncSession,
+    connector_type: SearchSourceConnectorType,
+    search_space_id: int,
+    user_id: UUID,
+    identifier: str | None,
+) -> bool:
+    """
+    Check if a connector with the same identifier already exists.
+
+    Args:
+        session: Database session
+        connector_type: The type of connector
+        search_space_id: The search space ID
+        user_id: The user ID
+        identifier: User identifier (email, workspace name, etc.)
+
+    Returns:
+        True if a duplicate exists, False otherwise
+    """
+    if not identifier:
+        return False
+
+    expected_name = f"{get_base_name_for_type(connector_type)} - {identifier}"
+    result = await session.execute(
+        select(func.count(SearchSourceConnector.id)).where(
+            SearchSourceConnector.connector_type == connector_type,
+            SearchSourceConnector.search_space_id == search_space_id,
+            SearchSourceConnector.user_id == user_id,
+            SearchSourceConnector.name == expected_name,
+        )
+    )
+    return (result.scalar() or 0) > 0
+
+
+async def generate_unique_connector_name(
+    session: AsyncSession,
+    connector_type: SearchSourceConnectorType,
+    search_space_id: int,
+    user_id: UUID,
+    identifier: str | None = None,
+) -> str:
+    """
+    Generate a unique connector name.
+
+    If an identifier is provided (email, workspace name, etc.), uses it with base name.
+    Otherwise, falls back to counting existing connectors for uniqueness.
+
+    Args:
+        session: Database session
+        connector_type: The type of connector
+        search_space_id: The search space ID
+        user_id: The user ID
+        identifier: Optional user identifier (email, workspace name, etc.)
+
+    Returns:
+        Unique name like "Gmail - john@example.com" or "Gmail (2)"
+    """
+    base = get_base_name_for_type(connector_type)
+
+    if identifier:
+        return f"{base} - {identifier}"
+
+    # Fallback: use counter for uniqueness
+    count = await count_connectors_of_type(
+        session, connector_type, search_space_id, user_id
+    )
+
+    if count == 0:
+        return base
+    return f"{base} ({count + 1})"

surfsense_backend/app/utils/document_converters.py

@@ -222,88 +222,6 @@ async def convert_document_to_markdown(elements):
     return "".join(markdown_parts)
 
 
-def convert_chunks_to_langchain_documents(chunks):
-    """
-    Convert chunks from hybrid search results to LangChain Document objects.
-
-    Args:
-        chunks: List of chunk dictionaries from hybrid search results
-
-    Returns:
-        List of LangChain Document objects
-    """
-    try:
-        from langchain_core.documents import Document as LangChainDocument
-    except ImportError:
-        raise ImportError(
-            "LangChain is not installed. Please install it with `pip install langchain langchain-core`"
-        ) from None
-
-    langchain_docs = []
-
-    for chunk in chunks:
-        # Extract content from the chunk
-        content = chunk.get("content", "")
-
-        # Create metadata dictionary
-        metadata = {
-            "chunk_id": chunk.get("chunk_id"),
-            "score": chunk.get("score"),
-            "rank": chunk.get("rank") if "rank" in chunk else None,
-        }
-
-        # Add document information to metadata
-        if "document" in chunk:
-            doc = chunk["document"]
-            metadata.update(
-                {
-                    "document_id": doc.get("id"),
-                    "document_title": doc.get("title"),
-                    "document_type": doc.get("document_type"),
-                }
-            )
-
-            # Add document metadata if available
-            if "metadata" in doc:
-                # Prefix document metadata keys to avoid conflicts
-                doc_metadata = {
-                    f"doc_meta_{k}": v for k, v in doc.get("metadata", {}).items()
-                }
-                metadata.update(doc_metadata)
-
-                # Add source URL if available in metadata
-                if "url" in doc.get("metadata", {}):
-                    metadata["source"] = doc["metadata"]["url"]
-                elif "sourceURL" in doc.get("metadata", {}):
-                    metadata["source"] = doc["metadata"]["sourceURL"]
-
-        # Ensure source_id is set for citation purposes
-        # Use document_id as the source_id if available
-        if "document_id" in metadata:
-            metadata["source_id"] = metadata["document_id"]
-
-        # Update content for citation mode - format as XML with explicit source_id
-        new_content = f"""
-        <document>
-            <metadata>
-                <source_id>{metadata.get("source_id", metadata.get("document_id", "unknown"))}</source_id>
-            </metadata>
-            <content>
-                <text>
-                    {content}
-                </text>
-            </content>
-        </document>
-        """
-
-        # Create LangChain Document
-        langchain_doc = LangChainDocument(page_content=new_content, metadata=metadata)
-
-        langchain_docs.append(langchain_doc)
-
-    return langchain_docs
-
-
 def generate_content_hash(content: str, search_space_id: int) -> str:
     """Generate SHA-256 hash for the given content combined with search space ID."""
     combined_data = f"{search_space_id}:{content}"

surfsense_backend/app/utils/periodic_scheduler.py

@@ -19,6 +19,7 @@ logger = logging.getLogger(__name__)
 # Mapping of connector types to their corresponding Celery task names
 CONNECTOR_TASK_MAP = {
     SearchSourceConnectorType.SLACK_CONNECTOR: "index_slack_messages",
+    SearchSourceConnectorType.TEAMS_CONNECTOR: "index_teams_messages",
     SearchSourceConnectorType.NOTION_CONNECTOR: "index_notion_pages",
     SearchSourceConnectorType.GITHUB_CONNECTOR: "index_github_repos",
     SearchSourceConnectorType.LINEAR_CONNECTOR: "index_linear_issues",

surfsense_backend/app/utils/validators.py

@@ -551,7 +551,7 @@ def validate_connector_config(
         #     ],
         #     "validators": {},
         # },
-        "CLICKUP_CONNECTOR": {"required": ["CLICKUP_API_TOKEN"], "validators": {}},
+        # "CLICKUP_CONNECTOR": {"required": ["CLICKUP_API_TOKEN"], "validators": {}},
         # "GOOGLE_CALENDAR_CONNECTOR": {
         #     "required": ["token", "refresh_token", "token_uri", "client_id", "expiry", "scopes", "client_secret"],
         #     "validators": {},

surfsense_backend/pyproject.toml

@@ -1,8 +1,7 @@
 [project]
 name = "surf-new-backend"
-version = "0.0.10"
+version = "0.0.11"
 description = "SurfSense Backend"
-readme = "README.md"
 requires-python = ">=3.12"
 dependencies = [
     "alembic>=1.13.0",
@@ -153,3 +152,11 @@ line-ending = "auto"
 known-first-party = ["app"]
 force-single-line = false
 combine-as-imports = true
+
+[tool.setuptools.packages.find]
+where = ["."]
+include = ["app*", "alembic*"]
+
+[build-system]
+requires = ["setuptools>=61.0", "wheel"]
+build-backend = "setuptools.build_meta"

surfsense_backend/uv.lock

@@ -6409,8 +6409,8 @@ wheels = [
 
 [[package]]
 name = "surf-new-backend"
-version = "0.0.10"
+version = "0.0.11"
-source = { virtual = "." }
+source = { editable = "." }
 dependencies = [
     { name = "alembic" },
     { name = "asyncpg" },

surfsense_browser_extension/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "surfsense_browser_extension",
 	"displayName": "Surfsense Browser Extension",
-	"version": "0.0.10",
+	"version": "0.0.11",
 	"description": "Extension to collect Browsing History for SurfSense.",
 	"author": "https://github.com/MODSetter",
 	"engines": {

surfsense_web/app/(home)/layout.tsx

@@ -5,7 +5,7 @@ import { Navbar } from "@/components/homepage/navbar";
 
 export default function HomePageLayout({ children }: { children: React.ReactNode }) {
 	return (
-		<main className="min-h-screen bg-gradient-to-b from-gray-50 to-gray-100 text-gray-900 dark:from-black dark:to-gray-900 dark:text-white overflow-x-hidden">
+		<main className="min-h-screen bg-linear-to-b from-gray-50 to-gray-100 text-gray-900 dark:from-black dark:to-gray-900 dark:text-white overflow-x-hidden">
 			<Navbar />
 			{children}
 			<FooterNew />

surfsense_web/app/dashboard/[search_space_id]/team/page.tsx

@@ -28,7 +28,7 @@ import {
 } from "lucide-react";
 import { motion } from "motion/react";
 import { useParams, useRouter } from "next/navigation";
-import { useCallback, useMemo, useState } from "react";
+import { useCallback, useEffect, useMemo, useState } from "react";
 import { toast } from "sonner";
 import {
 	createInviteMutationAtom,
@@ -116,6 +116,7 @@ import type {
 } from "@/contracts/types/roles.types";
 import { invitesApiService } from "@/lib/apis/invites-api.service";
 import { rolesApiService } from "@/lib/apis/roles-api.service";
+import { trackSearchSpaceInviteSent, trackSearchSpaceUsersViewed } from "@/lib/posthog/events";
 import { cacheKeys } from "@/lib/query-client/cache-keys";
 import { cn } from "@/lib/utils";
 
@@ -297,6 +298,14 @@ export default function TeamManagementPage() {
 		toast.success("Team data refreshed");
 	}, [fetchMembers, fetchRoles, fetchInvites]);
 
+	// Track users per search space when team page is viewed
+	useEffect(() => {
+		if (members.length > 0 && !membersLoading) {
+			const ownerCount = members.filter((m) => m.is_owner).length;
+			trackSearchSpaceUsersViewed(searchSpaceId, members.length, ownerCount);
+		}
+	}, [members, membersLoading, searchSpaceId]);
+
 	if (accessLoading) {
 		return (
 			<div className="flex items-center justify-center min-h-[60vh]">
@@ -1088,10 +1097,12 @@ function InvitesTab({
 function CreateInviteDialog({
 	roles,
 	onCreateInvite,
+	searchSpaceId,
 	className,
 }: {
 	roles: Role[];
 	onCreateInvite: (data: CreateInviteRequest["data"]) => Promise<Invite>;
+	searchSpaceId: number;
 	className?: string;
 }) {
 	const [open, setOpen] = useState(false);
@@ -1114,6 +1125,17 @@ function CreateInviteDialog({
 
 			const invite = await onCreateInvite(data);
 			setCreatedInvite(invite);
+
+			// Track invite sent event
+			const roleName =
+				roleId && roleId !== "default"
+					? roles.find((r) => r.id.toString() === roleId)?.name
+					: undefined;
+			trackSearchSpaceInviteSent(searchSpaceId, {
+				roleName,
+				hasExpiry: !!expiresAt,
+				hasMaxUses: !!maxUses,
+			});
 		} catch (error) {
 			console.error("Failed to create invite:", error);
 		} finally {

surfsense_web/app/dashboard/page.tsx

@@ -181,7 +181,7 @@ const DashboardPage = () => {
 		email:
 			user?.email ||
 			(isLoadingUser ? "Loading..." : userError ? "Error loading user" : "Unknown User"),
-		avatar: "/icon-128.png", // Default avatar
+		avatar: "/icon-128.svg", // Default avatar
 	};
 
 	// Show loading while loading or auto-redirecting (single search space)

surfsense_web/app/invite/[invite_code]/page.tsx

@@ -33,6 +33,11 @@ import {
 import type { AcceptInviteResponse } from "@/contracts/types/invites.types";
 import { invitesApiService } from "@/lib/apis/invites-api.service";
 import { getBearerToken } from "@/lib/auth-utils";
+import {
+	trackSearchSpaceInviteAccepted,
+	trackSearchSpaceInviteDeclined,
+	trackSearchSpaceUserAdded,
+} from "@/lib/posthog/events";
 import { cacheKeys } from "@/lib/query-client/cache-keys";
 
 export default function InviteAcceptPage() {
@@ -91,6 +96,18 @@ export default function InviteAcceptPage() {
 			if (result) {
 				setAccepted(true);
 				setAcceptedData(result);
+
+				// Track invite accepted and user added events
+				trackSearchSpaceInviteAccepted(
+					result.search_space_id,
+					result.search_space_name,
+					result.role_name
+				);
+				trackSearchSpaceUserAdded(
+					result.search_space_id,
+					result.search_space_name,
+					result.role_name
+				);
 			}
 		} catch (err: any) {
 			setError(err.message || "Failed to accept invite");
@@ -99,6 +116,12 @@ export default function InviteAcceptPage() {
 		}
 	};
 
+	const handleDecline = () => {
+		// Track invite declined event
+		trackSearchSpaceInviteDeclined(inviteInfo?.search_space_name);
+		router.push("/dashboard");
+	};
+
 	const handleLoginRedirect = () => {
 		// Store the invite code to redirect back after login
 		localStorage.setItem("pending_invite_code", inviteCode);
@@ -324,11 +347,7 @@ export default function InviteAcceptPage() {
 								)}
 							</CardContent>
 							<CardFooter className="flex gap-2">
-								<Button
+								<Button variant="outline" className="flex-1" onClick={handleDecline}>
-									variant="outline"
-									className="flex-1"
-									onClick={() => router.push("/dashboard")}
-								>
 									Cancel
 								</Button>
 								<Button className="flex-1 gap-2" onClick={handleAccept} disabled={accepting}>
@@ -360,7 +379,7 @@ export default function InviteAcceptPage() {
 						href="/"
 						className="inline-flex items-center gap-2 text-muted-foreground hover:text-foreground transition-colors"
 					>
-						<Image src="/icon-128.png" alt="SurfSense" width={24} height={24} className="rounded" />
+						<Image src="/icon-128.svg" alt="SurfSense" width={24} height={24} className="rounded" />
 						<span className="text-sm font-medium">SurfSense</span>
 					</Link>
 				</motion.div>

surfsense_web/app/sitemap.ts

@@ -1,60 +1,179 @@
 import type { MetadataRoute } from "next";
 
+// Returns a date rounded to the current hour (updates only once per hour)
+function getHourlyDate(): Date {
+	const now = new Date();
+	now.setMinutes(0, 0, 0);
+	return now;
+}
+
 export default function sitemap(): MetadataRoute.Sitemap {
+	const lastModified = getHourlyDate();
+
 	return [
 		{
 			url: "https://www.surfsense.com/",
-			lastModified: new Date(),
+			lastModified,
-			changeFrequency: "yearly",
+			changeFrequency: "daily",
 			priority: 1,
 		},
 		{
 			url: "https://www.surfsense.com/contact",
-			lastModified: new Date(),
+			lastModified,
-			changeFrequency: "yearly",
+			changeFrequency: "daily",
-			priority: 1,
+			priority: 0.9,
 		},
 		{
 			url: "https://www.surfsense.com/pricing",
-			lastModified: new Date(),
+			lastModified,
-			changeFrequency: "yearly",
+			changeFrequency: "daily",
 			priority: 0.9,
 		},
 		{
 			url: "https://www.surfsense.com/privacy",
-			lastModified: new Date(),
+			lastModified,
-			changeFrequency: "monthly",
+			changeFrequency: "daily",
 			priority: 0.9,
 		},
 		{
 			url: "https://www.surfsense.com/terms",
-			lastModified: new Date(),
+			lastModified,
-			changeFrequency: "monthly",
+			changeFrequency: "daily",
 			priority: 0.9,
 		},
+		// Documentation pages
 		{
 			url: "https://www.surfsense.com/docs",
-			lastModified: new Date(),
+			lastModified,
-			changeFrequency: "weekly",
+			changeFrequency: "daily",
-			priority: 0.9,
+			priority: 1,
 		},
 		{
 			url: "https://www.surfsense.com/docs/installation",
-			lastModified: new Date(),
+			lastModified,
-			changeFrequency: "weekly",
+			changeFrequency: "daily",
 			priority: 0.9,
 		},
 		{
 			url: "https://www.surfsense.com/docs/docker-installation",
-			lastModified: new Date(),
+			lastModified,
-			changeFrequency: "weekly",
+			changeFrequency: "daily",
 			priority: 0.9,
 		},
 		{
 			url: "https://www.surfsense.com/docs/manual-installation",
-			lastModified: new Date(),
+			lastModified,
-			changeFrequency: "weekly",
+			changeFrequency: "daily",
 			priority: 0.9,
 		},
+		// Connector documentation
+		{
+			url: "https://www.surfsense.com/docs/connectors/airtable",
+			lastModified,
+			changeFrequency: "daily",
+			priority: 0.8,
+		},
+		{
+			url: "https://www.surfsense.com/docs/connectors/bookstack",
+			lastModified,
+			changeFrequency: "daily",
+			priority: 0.8,
+		},
+		{
+			url: "https://www.surfsense.com/docs/connectors/circleback",
+			lastModified,
+			changeFrequency: "daily",
+			priority: 0.8,
+		},
+		{
+			url: "https://www.surfsense.com/docs/connectors/clickup",
+			lastModified,
+			changeFrequency: "daily",
+			priority: 0.8,
+		},
+		{
+			url: "https://www.surfsense.com/docs/connectors/confluence",
+			lastModified,
+			changeFrequency: "daily",
+			priority: 0.8,
+		},
+		{
+			url: "https://www.surfsense.com/docs/connectors/discord",
+			lastModified,
+			changeFrequency: "daily",
+			priority: 0.8,
+		},
+		{
+			url: "https://www.surfsense.com/docs/connectors/elasticsearch",
+			lastModified,
+			changeFrequency: "daily",
+			priority: 0.8,
+		},
+		{
+			url: "https://www.surfsense.com/docs/connectors/github",
+			lastModified,
+			changeFrequency: "daily",
+			priority: 0.8,
+		},
+		{
+			url: "https://www.surfsense.com/docs/connectors/gmail",
+			lastModified,
+			changeFrequency: "daily",
+			priority: 0.8,
+		},
+		{
+			url: "https://www.surfsense.com/docs/connectors/google-calendar",
+			lastModified,
+			changeFrequency: "daily",
+			priority: 0.8,
+		},
+		{
+			url: "https://www.surfsense.com/docs/connectors/google-drive",
+			lastModified,
+			changeFrequency: "daily",
+			priority: 0.8,
+		},
+		{
+			url: "https://www.surfsense.com/docs/connectors/jira",
+			lastModified,
+			changeFrequency: "daily",
+			priority: 0.8,
+		},
+		{
+			url: "https://www.surfsense.com/docs/connectors/linear",
+			lastModified,
+			changeFrequency: "daily",
+			priority: 0.8,
+		},
+		{
+			url: "https://www.surfsense.com/docs/connectors/luma",
+			lastModified,
+			changeFrequency: "daily",
+			priority: 0.8,
+		},
+		{
+			url: "https://www.surfsense.com/docs/connectors/microsoft-teams",
+			lastModified,
+			changeFrequency: "daily",
+			priority: 0.8,
+		},
+		{
+			url: "https://www.surfsense.com/docs/connectors/notion",
+			lastModified,
+			changeFrequency: "daily",
+			priority: 0.8,
+		},
+		{
+			url: "https://www.surfsense.com/docs/connectors/slack",
+			lastModified,
+			changeFrequency: "daily",
+			priority: 0.8,
+		},
+		{
+			url: "https://www.surfsense.com/docs/connectors/web-crawler",
+			lastModified,
+			changeFrequency: "daily",
+			priority: 0.8,
+		},
 	];
 }

surfsense_web/changelog/content/2026-01-08.mdx

@@ -0,0 +1,48 @@
+---
+title: "SurfSense v0.0.11 - Connectors And More Connectors"
+description: "SurfSense v0.0.11 delivers powerful new integrations for our AI enterprise search platform, including Google Drive and Circleback connectors, multi-account support, and a fully responsive mobile interface."
+date: "2026-01-08"
+tags: ["Mobile", "UX", "Integrations", "Connectors"]
+version: "0.0.11"
+---
+
+<img src="/changelog/0.0.11/header.gif" alt="SurfSense v0.0.11 - Connectors And More Connectors" className="rounded-lg w-full" />
+
+## What's New in v0.0.11
+
+This release focuses on **connectivity and ease of use** for your enterprise search software. We've begun a comprehensive UX overhaul, streamlining how you connect your data sources, alongside a fully responsive mobile interface that lets you access SurfSense's AI enterprise search capabilities from anywhere.
+
+### New Features
+
+- **Mobile-Ready Interface**: A fully responsive UI implementation allows you to search and collaborate seamlessly from your mobile device, bringing enterprise search solutions to your pocket.
+- **Streamlined Connector Management**: We've simplified the connector setup and management pages as part of a larger, ongoing UX overhaul for a smoother experience.
+- **Google Drive Integration**: Added a dedicated connector for Google Drive, featuring granular file selection to index only what you need for precise enterprise search.
+- **Circleback Support**: Introducing a new connector for Circleback to integrate your meeting notes and insights into your unified knowledge base.
+- **Simplified OAuth Authentication**: All supported connectors have been migrated to OAuth, making setup faster and more secure across your enterprise search software stack.
+- **Multi-Account Support**: Connect multiple accounts for the same service (e.g., Personal and Work Google Drives) to unify all your data sources in one AI-powered search hub.
+
+<Accordion type="multiple" className="w-full not-prose">
+  <AccordionItem value="item-1">
+    <AccordionTrigger>Bug Fixes</AccordionTrigger>
+    <AccordionContent className="flex flex-col gap-4 text-balance">
+      <ul className="list-disc space-y-2 pl-4">
+        <li>Fixed a login issue affecting specific Google accounts on surfsense.com</li>
+        <li>Resolved most Docker self-hosting configuration issues for easier deployment</li>
+      </ul>
+    </AccordionContent>
+  </AccordionItem>
+  <AccordionItem value="item-2">
+    <AccordionTrigger>For Self-Hosters</AccordionTrigger>
+    <AccordionContent className="flex flex-col gap-4 text-balance">
+      <ul className="list-disc space-y-2 pl-4">
+        <li>Docker configuration has been streamlined for smoother self-hosted deployments</li>
+        <li>OAuth setup is now consistent across all connectors</li>
+      </ul>
+    </AccordionContent>
+  </AccordionItem>
+</Accordion>
+
+SurfSense is an open-source AI enterprise search solution that connects all your knowledge sources, from Google Drive to Slack to meeting notes, in one intelligent, federated search platform. Whether you're looking for enterprise search software for your team or a personal knowledge assistant, SurfSense delivers powerful enterprise search solutions with the flexibility of self-hosting.
+
+🚀 Connect more, search smarter!
+

surfsense_web/components/Logo.tsx

@@ -7,7 +7,7 @@ import { cn } from "@/lib/utils";
 export const Logo = ({ className }: { className?: string }) => {
 	return (
 		<Link href="/">
-			<Image src="/icon-128.png" className={cn(className)} alt="logo" width={128} height={128} />
+			<Image src="/icon-128.svg" className={cn("dark:invert", className)} alt="logo" width={128} height={128} />
 		</Link>
 	);
 };

surfsense_web/components/assistant-ui/connector-popup.tsx

@@ -19,9 +19,11 @@ import { ConnectorDialogHeader } from "./connector-popup/components/connector-di
 import { ConnectorConnectView } from "./connector-popup/connector-configs/views/connector-connect-view";
 import { ConnectorEditView } from "./connector-popup/connector-configs/views/connector-edit-view";
 import { IndexingConfigurationView } from "./connector-popup/connector-configs/views/indexing-configuration-view";
+import { OAUTH_CONNECTORS } from "./connector-popup/constants/connector-constants";
 import { useConnectorDialog } from "./connector-popup/hooks/use-connector-dialog";
 import { ActiveConnectorsTab } from "./connector-popup/tabs/active-connectors-tab";
 import { AllConnectorsTab } from "./connector-popup/tabs/all-connectors-tab";
+import { ConnectorAccountsListView } from "./connector-popup/views/connector-accounts-list-view";
 import { YouTubeCrawlerView } from "./connector-popup/views/youtube-crawler-view";
 
 export const ConnectorIndicator: FC = () => {
@@ -60,6 +62,7 @@ export const ConnectorIndicator: FC = () => {
 		periodicEnabled,
 		frequencyMinutes,
 		allConnectors,
+		viewingAccountsType,
 		setSearchQuery,
 		setStartDate,
 		setEndDate,
@@ -81,6 +84,8 @@ export const ConnectorIndicator: FC = () => {
 		handleBackFromEdit,
 		handleBackFromConnect,
 		handleBackFromYouTube,
+		handleViewAccountsList,
+		handleBackFromAccountsList,
 		handleQuickIndexConnector,
 		connectorConfig,
 		setConnectorConfig,
@@ -194,6 +199,25 @@ export const ConnectorIndicator: FC = () => {
 				{/* YouTube Crawler View - shown when adding YouTube videos */}
 				{isYouTubeView && searchSpaceId ? (
 					<YouTubeCrawlerView searchSpaceId={searchSpaceId} onBack={handleBackFromYouTube} />
+				) : viewingAccountsType ? (
+					<ConnectorAccountsListView
+						connectorType={viewingAccountsType.connectorType}
+						connectorTitle={viewingAccountsType.connectorTitle}
+						connectors={(allConnectors || []) as SearchSourceConnector[]}
+						indexingConnectorIds={indexingConnectorIds}
+						logsSummary={logsSummary}
+						onBack={handleBackFromAccountsList}
+						onManage={handleStartEdit}
+						onAddAccount={() => {
+							const oauthConnector = OAUTH_CONNECTORS.find(
+								(c) => c.connectorType === viewingAccountsType.connectorType
+							);
+							if (oauthConnector) {
+								handleConnectOAuth(oauthConnector);
+							}
+						}}
+						isConnecting={connectingId !== null}
+					/>
 				) : connectingConnectorType ? (
 					<ConnectorConnectView
 						connectorType={connectingConnectorType}
@@ -224,7 +248,8 @@ export const ConnectorIndicator: FC = () => {
 						onBack={handleBackFromEdit}
 						onQuickIndex={
 							editingConnector.connector_type !== "GOOGLE_DRIVE_CONNECTOR"
-								? () => handleQuickIndexConnector(editingConnector.id)
+								? () =>
+										handleQuickIndexConnector(editingConnector.id, editingConnector.connector_type)
 								: undefined
 						}
 						onConfigChange={setConnectorConfig}
@@ -289,6 +314,7 @@ export const ConnectorIndicator: FC = () => {
 											onCreateWebcrawler={handleCreateWebcrawler}
 											onCreateYouTubeCrawler={handleCreateYouTubeCrawler}
 											onManage={handleStartEdit}
+											onViewAccountsList={handleViewAccountsList}
 										/>
 									</TabsContent>
 
@@ -303,6 +329,7 @@ export const ConnectorIndicator: FC = () => {
 										searchSpaceId={searchSpaceId}
 										onTabChange={handleTabChange}
 										onManage={handleStartEdit}
+										onViewAccountsList={handleViewAccountsList}
 									/>
 								</div>
 							</div>

surfsense_web/components/assistant-ui/connector-popup/components/connector-card.tsx

@@ -17,6 +17,7 @@ interface ConnectorCardProps {
 	isConnected?: boolean;
 	isConnecting?: boolean;
 	documentCount?: number;
+	accountCount?: number;
 	lastIndexedAt?: string | null;
 	isIndexing?: boolean;
 	activeTask?: LogActiveTask;
@@ -96,6 +97,7 @@ export const ConnectorCard: FC<ConnectorCardProps> = ({
 	isConnected = false,
 	isConnecting = false,
 	documentCount,
+	accountCount,
 	lastIndexedAt,
 	isIndexing = false,
 	activeTask,
@@ -139,7 +141,7 @@ export const ConnectorCard: FC<ConnectorCardProps> = ({
 
 	return (
 		<div className="group relative flex items-center gap-4 p-4 rounded-xl text-left transition-all duration-200 w-full border border-border bg-slate-400/5 dark:bg-white/5 hover:bg-slate-400/10 dark:hover:bg-white/10">
-			<div className="flex h-12 w-12 items-center justify-center rounded-lg transition-colors flex-shrink-0 bg-slate-400/5 dark:bg-white/5 border border-slate-400/5 dark:border-white/5">
+			<div className="flex h-12 w-12 items-center justify-center rounded-lg transition-colors shrink-0 bg-slate-400/5 dark:bg-white/5 border border-slate-400/5 dark:border-white/5">
 				{connectorType ? (
 					getConnectorIcon(connectorType, "size-6")
 				) : id === "youtube-crawler" ? (
@@ -150,12 +152,20 @@ export const ConnectorCard: FC<ConnectorCardProps> = ({
 			</div>
 			<div className="flex-1 min-w-0">
 				<div className="flex items-center gap-2">
-					<span className="text-[14px] font-semibold leading-tight">{title}</span>
+					<span className="text-[14px] font-semibold leading-tight truncate">{title}</span>
 				</div>
 				<div className="text-[10px] text-muted-foreground mt-1">{getStatusContent()}</div>
 				{isConnected && documentCount !== undefined && (
-					<p className="text-[10px] text-muted-foreground mt-0.5">
+					<p className="text-[10px] text-muted-foreground mt-0.5 flex items-center gap-1.5">
-						{formatDocumentCount(documentCount)}
+						<span>{formatDocumentCount(documentCount)}</span>
+						{accountCount !== undefined && accountCount > 0 && (
+							<>
+								<span className="text-muted-foreground/50">•</span>
+								<span>
+									{accountCount} {accountCount === 1 ? "Account" : "Accounts"}
+								</span>
+							</>
+						)}
 					</p>
 				)}
 			</div>
@@ -163,7 +173,7 @@ export const ConnectorCard: FC<ConnectorCardProps> = ({
 				size="sm"
 				variant={isConnected ? "secondary" : "default"}
 				className={cn(
-					"h-8 text-[11px] px-3 rounded-lg flex-shrink-0 font-medium",
+					"h-8 text-[11px] px-3 rounded-lg shrink-0 font-medium",
 					isConnected &&
 						"bg-white text-slate-700 hover:bg-slate-50 border-0 shadow-xs dark:bg-secondary dark:text-secondary-foreground dark:hover:bg-secondary/80",
 					!isConnected && "shadow-xs"

surfsense_web/components/assistant-ui/connector-popup/connect-forms/components/clickup-connect-form.tsx

@@ -1,385 +0,0 @@
-"use client";
-
-import { zodResolver } from "@hookform/resolvers/zod";
-import { Info } from "lucide-react";
-import type { FC } from "react";
-import { useRef, useState } from "react";
-import { useForm } from "react-hook-form";
-import * as z from "zod";
-import {
-	Accordion,
-	AccordionContent,
-	AccordionItem,
-	AccordionTrigger,
-} from "@/components/ui/accordion";
-import { Alert, AlertDescription, AlertTitle } from "@/components/ui/alert";
-import {
-	Form,
-	FormControl,
-	FormDescription,
-	FormField,
-	FormItem,
-	FormLabel,
-	FormMessage,
-} from "@/components/ui/form";
-import { Input } from "@/components/ui/input";
-import { Label } from "@/components/ui/label";
-import {
-	Select,
-	SelectContent,
-	SelectItem,
-	SelectTrigger,
-	SelectValue,
-} from "@/components/ui/select";
-import { Switch } from "@/components/ui/switch";
-import { EnumConnectorName } from "@/contracts/enums/connector";
-import { DateRangeSelector } from "../../components/date-range-selector";
-import { getConnectorBenefits } from "../connector-benefits";
-import type { ConnectFormProps } from "../index";
-
-const clickupConnectorFormSchema = z.object({
-	name: z.string().min(3, {
-		message: "Connector name must be at least 3 characters.",
-	}),
-	api_token: z.string().min(10, {
-		message: "ClickUp API Token is required and must be valid.",
-	}),
-});
-
-type ClickUpConnectorFormValues = z.infer<typeof clickupConnectorFormSchema>;
-
-export const ClickUpConnectForm: FC<ConnectFormProps> = ({ onSubmit, isSubmitting }) => {
-	const isSubmittingRef = useRef(false);
-	const [startDate, setStartDate] = useState<Date | undefined>(undefined);
-	const [endDate, setEndDate] = useState<Date | undefined>(undefined);
-	const [periodicEnabled, setPeriodicEnabled] = useState(false);
-	const [frequencyMinutes, setFrequencyMinutes] = useState("1440");
-	const form = useForm<ClickUpConnectorFormValues>({
-		resolver: zodResolver(clickupConnectorFormSchema),
-		defaultValues: {
-			name: "ClickUp Connector",
-			api_token: "",
-		},
-	});
-
-	const handleSubmit = async (values: ClickUpConnectorFormValues) => {
-		// Prevent multiple submissions
-		if (isSubmittingRef.current || isSubmitting) {
-			return;
-		}
-
-		isSubmittingRef.current = true;
-		try {
-			await onSubmit({
-				name: values.name,
-				connector_type: EnumConnectorName.CLICKUP_CONNECTOR,
-				config: {
-					CLICKUP_API_TOKEN: values.api_token,
-				},
-				is_indexable: true,
-				last_indexed_at: null,
-				periodic_indexing_enabled: periodicEnabled,
-				indexing_frequency_minutes: periodicEnabled ? parseInt(frequencyMinutes, 10) : null,
-				next_scheduled_at: null,
-				startDate,
-				endDate,
-				periodicEnabled,
-				frequencyMinutes,
-			});
-		} finally {
-			isSubmittingRef.current = false;
-		}
-	};
-
-	return (
-		<div className="space-y-6 pb-6">
-			<Alert className="bg-slate-400/5 dark:bg-white/5 border-slate-400/20 p-2 sm:p-3 flex items-center [&>svg]:relative [&>svg]:left-0 [&>svg]:top-0 [&>svg+div]:translate-y-0">
-				<Info className="h-3 w-3 sm:h-4 sm:w-4 shrink-0 ml-1" />
-				<div className="-ml-1">
-					<AlertTitle className="text-xs sm:text-sm">API Token Required</AlertTitle>
-					<AlertDescription className="text-[10px] sm:text-xs !pl-0">
-						You'll need a ClickUp API Token to use this connector. You can create one from{" "}
-						<a
-							href="https://app.clickup.com/settings/apps"
-							target="_blank"
-							rel="noopener noreferrer"
-							className="font-medium underline underline-offset-4"
-						>
-							ClickUp Settings
-						</a>
-					</AlertDescription>
-				</div>
-			</Alert>
-
-			<div className="rounded-xl border border-border bg-slate-400/5 dark:bg-white/5 p-3 sm:p-6 space-y-3 sm:space-y-4">
-				<Form {...form}>
-					<form
-						id="clickup-connect-form"
-						onSubmit={form.handleSubmit(handleSubmit)}
-						className="space-y-4 sm:space-y-6"
-					>
-						<FormField
-							control={form.control}
-							name="name"
-							render={({ field }) => (
-								<FormItem>
-									<FormLabel className="text-xs sm:text-sm">Connector Name</FormLabel>
-									<FormControl>
-										<Input
-											placeholder="My ClickUp Connector"
-											className="h-8 sm:h-10 px-2 sm:px-3 text-xs sm:text-sm border-slate-400/20 focus-visible:border-slate-400/40"
-											disabled={isSubmitting}
-											{...field}
-										/>
-									</FormControl>
-									<FormDescription className="text-[10px] sm:text-xs">
-										A friendly name to identify this connector.
-									</FormDescription>
-									<FormMessage />
-								</FormItem>
-							)}
-						/>
-
-						<FormField
-							control={form.control}
-							name="api_token"
-							render={({ field }) => (
-								<FormItem>
-									<FormLabel className="text-xs sm:text-sm">ClickUp API Token</FormLabel>
-									<FormControl>
-										<Input
-											type="password"
-											placeholder="pk_..."
-											className="h-8 sm:h-10 px-2 sm:px-3 text-xs sm:text-sm border-slate-400/20 focus-visible:border-slate-400/40"
-											disabled={isSubmitting}
-											{...field}
-										/>
-									</FormControl>
-									<FormDescription className="text-[10px] sm:text-xs">
-										Your ClickUp API Token will be encrypted and stored securely.
-									</FormDescription>
-									<FormMessage />
-								</FormItem>
-							)}
-						/>
-
-						{/* Indexing Configuration */}
-						<div className="space-y-4 pt-4 border-t border-slate-400/20">
-							<h3 className="text-sm sm:text-base font-medium">Indexing Configuration</h3>
-
-							{/* Date Range Selector */}
-							<DateRangeSelector
-								startDate={startDate}
-								endDate={endDate}
-								onStartDateChange={setStartDate}
-								onEndDateChange={setEndDate}
-							/>
-
-							{/* Periodic Sync Config */}
-							<div className="rounded-xl bg-slate-400/5 dark:bg-white/5 p-3 sm:p-6">
-								<div className="flex items-center justify-between">
-									<div className="space-y-1">
-										<h3 className="font-medium text-sm sm:text-base">Enable Periodic Sync</h3>
-										<p className="text-xs sm:text-sm text-muted-foreground">
-											Automatically re-index at regular intervals
-										</p>
-									</div>
-									<Switch
-										checked={periodicEnabled}
-										onCheckedChange={setPeriodicEnabled}
-										disabled={isSubmitting}
-									/>
-								</div>
-
-								{periodicEnabled && (
-									<div className="mt-4 pt-4 border-t border-slate-400/20 space-y-3">
-										<div className="space-y-2">
-											<Label htmlFor="frequency" className="text-xs sm:text-sm">
-												Sync Frequency
-											</Label>
-											<Select
-												value={frequencyMinutes}
-												onValueChange={setFrequencyMinutes}
-												disabled={isSubmitting}
-											>
-												<SelectTrigger
-													id="frequency"
-													className="w-full bg-slate-400/5 dark:bg-slate-400/5 border-slate-400/20 text-xs sm:text-sm"
-												>
-													<SelectValue placeholder="Select frequency" />
-												</SelectTrigger>
-												<SelectContent className="z-[100]">
-													<SelectItem value="5" className="text-xs sm:text-sm">
-														Every 5 minutes
-													</SelectItem>
-													<SelectItem value="15" className="text-xs sm:text-sm">
-														Every 15 minutes
-													</SelectItem>
-													<SelectItem value="60" className="text-xs sm:text-sm">
-														Every hour
-													</SelectItem>
-													<SelectItem value="360" className="text-xs sm:text-sm">
-														Every 6 hours
-													</SelectItem>
-													<SelectItem value="720" className="text-xs sm:text-sm">
-														Every 12 hours
-													</SelectItem>
-													<SelectItem value="1440" className="text-xs sm:text-sm">
-														Daily
-													</SelectItem>
-													<SelectItem value="10080" className="text-xs sm:text-sm">
-														Weekly
-													</SelectItem>
-												</SelectContent>
-											</Select>
-										</div>
-									</div>
-								)}
-							</div>
-						</div>
-					</form>
-				</Form>
-			</div>
-
-			{/* What you get section */}
-			{getConnectorBenefits(EnumConnectorName.CLICKUP_CONNECTOR) && (
-				<div className="rounded-xl border border-border bg-slate-400/5 dark:bg-white/5 px-3 sm:px-6 py-4 space-y-2">
-					<h4 className="text-xs sm:text-sm font-medium">What you get with ClickUp integration:</h4>
-					<ul className="list-disc pl-5 text-[10px] sm:text-xs text-muted-foreground space-y-1">
-						{getConnectorBenefits(EnumConnectorName.CLICKUP_CONNECTOR)?.map((benefit) => (
-							<li key={benefit}>{benefit}</li>
-						))}
-					</ul>
-				</div>
-			)}
-
-			{/* Documentation Section */}
-			<Accordion
-				type="single"
-				collapsible
-				className="w-full border border-border rounded-xl bg-slate-400/5 dark:bg-white/5"
-			>
-				<AccordionItem value="documentation" className="border-0">
-					<AccordionTrigger className="text-sm sm:text-base font-medium px-3 sm:px-6 no-underline hover:no-underline">
-						Documentation
-					</AccordionTrigger>
-					<AccordionContent className="px-3 sm:px-6 pb-3 sm:pb-6 space-y-6">
-						<div>
-							<h3 className="text-sm sm:text-base font-semibold mb-2">How it works</h3>
-							<p className="text-[10px] sm:text-xs text-muted-foreground">
-								The ClickUp connector uses the ClickUp API to fetch all tasks and projects that your
-								API token has access to within your workspace.
-							</p>
-							<ul className="mt-2 list-disc pl-5 text-[10px] sm:text-xs text-muted-foreground space-y-1">
-								<li>
-									For follow up indexing runs, the connector retrieves tasks that have been updated
-									since the last indexing attempt.
-								</li>
-								<li>
-									Indexing is configured to run periodically, so updates should appear in your
-									search results within minutes.
-								</li>
-							</ul>
-						</div>
-
-						<div className="space-y-4">
-							<div>
-								<h3 className="text-sm sm:text-base font-semibold mb-2">Authorization</h3>
-								<Alert className="bg-slate-400/5 dark:bg-white/5 border-slate-400/20 mb-4">
-									<Info className="h-3 w-3 sm:h-4 sm:w-4" />
-									<AlertTitle className="text-[10px] sm:text-xs">API Token Required</AlertTitle>
-									<AlertDescription className="text-[9px] sm:text-[10px]">
-										You need a ClickUp personal API token to use this connector. The token will be
-										used to read your ClickUp data.
-									</AlertDescription>
-								</Alert>
-
-								<div className="space-y-4 sm:space-y-6">
-									<div>
-										<h4 className="text-[10px] sm:text-xs font-medium mb-2">
-											Step 1: Get Your API Token
-										</h4>
-										<ol className="list-decimal pl-5 space-y-2 text-[10px] sm:text-xs text-muted-foreground">
-											<li>Log in to your ClickUp account</li>
-											<li>Click your avatar in the upper-right corner and select "Settings"</li>
-											<li>In the sidebar, click "Apps"</li>
-											<li>
-												Under "API Token", click <strong>Generate</strong> or{" "}
-												<strong>Regenerate</strong>
-											</li>
-											<li>Copy the generated token (it typically starts with "pk_")</li>
-											<li>
-												Paste it in the form above. You can also visit{" "}
-												<a
-													href="https://app.clickup.com/settings/apps"
-													target="_blank"
-													rel="noopener noreferrer"
-													className="font-medium underline underline-offset-4"
-												>
-													ClickUp API Settings
-												</a>{" "}
-												directly.
-											</li>
-										</ol>
-									</div>
-
-									<div>
-										<h4 className="text-[10px] sm:text-xs font-medium mb-2">
-											Step 2: Grant necessary access
-										</h4>
-										<p className="text-[10px] sm:text-xs text-muted-foreground mb-3">
-											The API Token will have access to all tasks and projects that your user
-											account can see. Make sure your account has appropriate permissions for the
-											workspaces you want to index.
-										</p>
-										<Alert className="bg-slate-400/5 dark:bg-white/5 border-slate-400/20">
-											<Info className="h-3 w-3 sm:h-4 sm:w-4" />
-											<AlertTitle className="text-[10px] sm:text-xs">Data Privacy</AlertTitle>
-											<AlertDescription className="text-[9px] sm:text-[10px]">
-												Only tasks, comments, and basic metadata will be indexed. ClickUp
-												attachments and linked files are not indexed by this connector.
-											</AlertDescription>
-										</Alert>
-									</div>
-								</div>
-							</div>
-						</div>
-
-						<div className="space-y-4">
-							<div>
-								<h3 className="text-sm sm:text-base font-semibold mb-2">Indexing</h3>
-								<ol className="list-decimal pl-5 space-y-2 text-[10px] sm:text-xs text-muted-foreground mb-4">
-									<li>
-										Navigate to the Connector Dashboard and select the <strong>ClickUp</strong>{" "}
-										Connector.
-									</li>
-									<li>
-										Place your <strong>API Token</strong> in the form field.
-									</li>
-									<li>
-										Click <strong>Connect</strong> to establish the connection.
-									</li>
-									<li>Once connected, your ClickUp tasks will be indexed automatically.</li>
-								</ol>
-
-								<Alert className="bg-slate-400/5 dark:bg-white/5 border-slate-400/20">
-									<Info className="h-3 w-3 sm:h-4 sm:w-4" />
-									<AlertTitle className="text-[10px] sm:text-xs">What Gets Indexed</AlertTitle>
-									<AlertDescription className="text-[9px] sm:text-[10px]">
-										<p className="mb-2">The ClickUp connector indexes the following data:</p>
-										<ul className="list-disc pl-5 space-y-1">
-											<li>Task names and descriptions</li>
-											<li>Task comments and discussion threads</li>
-											<li>Task status, priority, and assignee information</li>
-											<li>Project and workspace information</li>
-										</ul>
-									</AlertDescription>
-								</Alert>
-							</div>
-						</div>
-					</AccordionContent>
-				</AccordionItem>
-			</Accordion>
-		</div>
-	);
-};

surfsense_web/components/assistant-ui/connector-popup/connect-forms/index.tsx

@@ -2,7 +2,6 @@ import type { FC } from "react";
 import { BaiduSearchApiConnectForm } from "./components/baidu-search-api-connect-form";
 import { BookStackConnectForm } from "./components/bookstack-connect-form";
 import { CirclebackConnectForm } from "./components/circleback-connect-form";
-import { ClickUpConnectForm } from "./components/clickup-connect-form";
 import { ElasticsearchConnectForm } from "./components/elasticsearch-connect-form";
 import { GithubConnectForm } from "./components/github-connect-form";
 import { LinkupApiConnectForm } from "./components/linkup-api-connect-form";
@@ -51,8 +50,6 @@ export function getConnectFormComponent(connectorType: string): ConnectFormCompo
 			return BookStackConnectForm;
 		case "GITHUB_CONNECTOR":
 			return GithubConnectForm;
-		case "CLICKUP_CONNECTOR":
-			return ClickUpConnectForm;
 		case "LUMA_CONNECTOR":
 			return LumaConnectForm;
 		case "CIRCLEBACK_CONNECTOR":

surfsense_web/components/assistant-ui/connector-popup/connector-configs/components/clickup-config.tsx

@@ -1,6 +1,6 @@
 "use client";
 
-import { KeyRound } from "lucide-react";
+import { Info, KeyRound } from "lucide-react";
 import type { FC } from "react";
 import { useEffect, useState } from "react";
 import { Input } from "@/components/ui/input";
@@ -16,17 +16,22 @@ export const ClickUpConfig: FC<ClickUpConfigProps> = ({
 	onConfigChange,
 	onNameChange,
 }) => {
+	// Check if this is an OAuth connector (has access_token or _token_encrypted flag)
+	const isOAuth = !!(connector.config?.access_token || connector.config?._token_encrypted);
+
 	const [apiToken, setApiToken] = useState<string>(
 		(connector.config?.CLICKUP_API_TOKEN as string) || ""
 	);
 	const [name, setName] = useState<string>(connector.name || "");
 
-	// Update API token and name when connector changes
+	// Update values when connector changes (only for legacy connectors)
 	useEffect(() => {
-		const token = (connector.config?.CLICKUP_API_TOKEN as string) || "";
+		if (!isOAuth) {
-		setApiToken(token);
+			const token = (connector.config?.CLICKUP_API_TOKEN as string) || "";
+			setApiToken(token);
+		}
 		setName(connector.name || "");
-	}, [connector.config, connector.name]);
+	}, [connector.config, connector.name, isOAuth]);
 
 	const handleApiTokenChange = (value: string) => {
 		setApiToken(value);
@@ -45,6 +50,32 @@ export const ClickUpConfig: FC<ClickUpConfigProps> = ({
 		}
 	};
 
+	// For OAuth connectors, show simple info message
+	if (isOAuth) {
+		const workspaceName = (connector.config?.workspace_name as string) || "Unknown Workspace";
+		return (
+			<div className="space-y-6">
+				{/* OAuth Info */}
+				<div className="rounded-xl border border-border bg-primary/5 p-4 flex items-start gap-3">
+					<div className="flex h-8 w-8 items-center justify-center rounded-lg bg-primary/10 shrink-0 mt-0.5">
+						<Info className="size-4" />
+					</div>
+					<div className="text-xs sm:text-sm">
+						<p className="font-medium text-xs sm:text-sm">Connected via OAuth</p>
+						<p className="text-muted-foreground mt-1 text-[10px] sm:text-sm">
+							Workspace:{" "}
+							<code className="bg-muted px-1 py-0.5 rounded text-inherit">{workspaceName}</code>
+						</p>
+						<p className="text-muted-foreground mt-1 text-[10px] sm:text-sm">
+							To update your connection, reconnect this connector.
+						</p>
+					</div>
+				</div>
+			</div>
+		);
+	}
+
+	// For legacy API token connectors, show the form
 	return (
 		<div className="space-y-6">
 			{/* Connector Name */}
@@ -82,7 +113,8 @@ export const ClickUpConfig: FC<ClickUpConfigProps> = ({
 						className="border-slate-400/20 focus-visible:border-slate-400/40"
 					/>
 					<p className="text-[10px] sm:text-xs text-muted-foreground">
-						Update your ClickUp API Token if needed.
+						Update your ClickUp API Token if needed. For better security and automatic token
+						refresh, consider disconnecting and reconnecting using OAuth 2.0.
 					</p>
 				</div>
 			</div>

surfsense_web/components/assistant-ui/connector-popup/connector-configs/components/teams-config.tsx

@@ -0,0 +1,29 @@
+"use client";
+
+import { Info } from "lucide-react";
+import type { FC } from "react";
+import type { ConnectorConfigProps } from "../index";
+
+export interface TeamsConfigProps extends ConnectorConfigProps {
+	onNameChange?: (name: string) => void;
+}
+
+export const TeamsConfig: FC<TeamsConfigProps> = () => {
+	return (
+		<div className="space-y-6">
+			<div className="rounded-xl border border-border bg-primary/5 p-4 flex items-start gap-3">
+				<div className="flex h-8 w-8 items-center justify-center rounded-lg bg-primary/10 shrink-0 mt-0.5">
+					<Info className="size-4" />
+				</div>
+				<div className="text-xs sm:text-sm">
+					<p className="font-medium text-xs sm:text-sm">Microsoft Teams Access</p>
+					<p className="text-muted-foreground mt-1 text-[10px] sm:text-sm">
+						SurfSense will index messages from Teams channels that you have access to. The app can
+						only read messages from teams and channels where you are a member. Make sure you're a
+						member of the teams you want to index before connecting.
+					</p>
+				</div>
+			</div>
+		</div>
+	);
+};

surfsense_web/components/assistant-ui/connector-popup/connector-configs/index.tsx

@@ -17,6 +17,7 @@ import { LumaConfig } from "./components/luma-config";
 import { SearxngConfig } from "./components/searxng-config";
 import { SlackConfig } from "./components/slack-config";
 import { TavilyApiConfig } from "./components/tavily-api-config";
+import { TeamsConfig } from "./components/teams-config";
 import { WebcrawlerConfig } from "./components/webcrawler-config";
 
 export interface ConnectorConfigProps {
@@ -52,6 +53,8 @@ export function getConnectorConfigComponent(
 			return SlackConfig;
 		case "DISCORD_CONNECTOR":
 			return DiscordConfig;
+		case "TEAMS_CONNECTOR":
+			return TeamsConfig;
 		case "CONFLUENCE_CONNECTOR":
 			return ConfluenceConfig;
 		case "BOOKSTACK_CONNECTOR":

surfsense_web/components/assistant-ui/connector-popup/connector-configs/views/connector-connect-view.tsx

@@ -54,7 +54,6 @@ export const ConnectorConnectView: FC<ConnectorConnectViewProps> = ({
 			ELASTICSEARCH_CONNECTOR: "elasticsearch-connect-form",
 			BOOKSTACK_CONNECTOR: "bookstack-connect-form",
 			GITHUB_CONNECTOR: "github-connect-form",
-			CLICKUP_CONNECTOR: "clickup-connect-form",
 			LUMA_CONNECTOR: "luma-connect-form",
 			CIRCLEBACK_CONNECTOR: "circleback-connect-form",
 		};

surfsense_web/components/assistant-ui/connector-popup/connector-configs/views/connector-edit-view.tsx

@@ -143,12 +143,14 @@ export const ConnectorEditView: FC<ConnectorEditViewProps> = ({
 
 				{/* Connector header */}
 				<div className="flex flex-col sm:flex-row items-start sm:items-center gap-4 mb-6">
-					<div className="flex items-center gap-4 flex-1 w-full sm:w-auto">
+					<div className="flex gap-4 flex-1 w-full sm:w-auto">
-						<div className="flex h-14 w-14 items-center justify-center rounded-xl bg-primary/10 border border-primary/20 flex-shrink-0">
+						<div className="flex h-14 w-14 items-center justify-center rounded-xl bg-primary/10 border border-primary/20 shrink-0">
 							{getConnectorIcon(connector.connector_type, "size-7")}
 						</div>
 						<div className="flex-1 min-w-0">
-							<h2 className="text-xl sm:text-2xl font-semibold tracking-tight">{connector.name}</h2>
+							<h2 className="text-xl sm:text-2xl font-semibold tracking-tight text-wrap whitespace-normal wrap-break-word">
+								{connector.name}
+							</h2>
 							<p className="text-xs sm:text-base text-muted-foreground mt-1">
 								Manage your connector settings and sync configuration
 							</p>

surfsense_web/components/assistant-ui/connector-popup/connector-configs/views/indexing-configuration-view.tsx

@@ -1,14 +1,16 @@
 "use client";
 
 import { ArrowLeft, Check, Info, Loader2 } from "lucide-react";
-import { type FC, useCallback, useEffect, useMemo, useRef, useState } from "react";
 import { useSearchParams } from "next/navigation";
+import { type FC, useCallback, useEffect, useMemo, useRef, useState } from "react";
 import { Button } from "@/components/ui/button";
 import type { SearchSourceConnector } from "@/contracts/types/connector.types";
+import { getConnectorTypeDisplay } from "@/lib/connectors/utils";
 import { cn } from "@/lib/utils";
 import { DateRangeSelector } from "../../components/date-range-selector";
 import { PeriodicSyncConfig } from "../../components/periodic-sync-config";
-import type { IndexingConfigState } from "../../constants/connector-constants";
+import { type IndexingConfigState, OAUTH_CONNECTORS } from "../../constants/connector-constants";
+import { getConnectorDisplayName } from "../../tabs/all-connectors-tab";
 import { getConnectorConfigComponent } from "../index";
 
 interface IndexingConfigurationViewProps {
@@ -89,12 +91,14 @@ export const IndexingConfigurationView: FC<IndexingConfigurationViewProps> = ({
 		};
 	}, [checkScrollState]);
 
+	const authConnector = OAUTH_CONNECTORS.find((c) => c.connectorType === connector?.connector_type);
+
 	return (
 		<div className="flex-1 flex flex-col min-h-0 overflow-hidden">
 			{/* Fixed Header */}
 			<div
 				className={cn(
-					"flex-shrink-0 px-6 sm:px-12 pt-8 sm:pt-10 transition-shadow duration-200 relative z-10",
+					"shrink-0 px-6 sm:px-12 pt-8 sm:pt-10 transition-shadow duration-200 relative z-10",
 					isScrolled && "shadow-sm"
 				)}
 			>
@@ -111,14 +115,19 @@ export const IndexingConfigurationView: FC<IndexingConfigurationViewProps> = ({
 				)}
 
 				{/* Success header */}
-				<div className="flex items-center gap-4 mb-6">
+				<div className="flex gap-4 mb-6">
 					<div className="flex h-14 w-14 items-center justify-center rounded-xl bg-green-500/10 border border-green-500/20">
 						<Check className="size-7 text-green-500" />
 					</div>
 					<div>
-						<h2 className="text-xl sm:text-2xl font-semibold tracking-tight">
+						<div className="flex flex-col">
-							{config.connectorTitle} Connected!
+							<span className="text-xl sm:text-2xl font-semibold tracking-tight text-wrap whitespace-normal wrap-break-word">
-						</h2>
+								{getConnectorTypeDisplay(connector?.connector_type || "")} Connected !
+							</span>{" "}
+							<span className="text-xl sm:text-xl font-semibold text-muted-foreground tracking-tight text-wrap whitespace-normal wrap-break-word">
+								{getConnectorDisplayName(connector?.name || "")}
+							</span>
+						</div>
 						<p className="text-xs sm:text-base text-muted-foreground mt-1">
 							Configure when to start syncing your data
 						</p>

surfsense_web/components/assistant-ui/connector-popup/constants/connector-constants.ts

@@ -51,6 +51,13 @@ export const OAUTH_CONNECTORS = [
 		connectorType: EnumConnectorName.SLACK_CONNECTOR,
 		authEndpoint: "/api/v1/auth/slack/connector/add/",
 	},
+	{
+		id: "teams-connector",
+		title: "Microsoft Teams",
+		description: "Search Teams messages",
+		connectorType: EnumConnectorName.TEAMS_CONNECTOR,
+		authEndpoint: "/api/v1/auth/teams/connector/add/",
+	},
 	{
 		id: "discord-connector",
 		title: "Discord",
@@ -72,6 +79,13 @@ export const OAUTH_CONNECTORS = [
 		connectorType: EnumConnectorName.CONFLUENCE_CONNECTOR,
 		authEndpoint: "/api/v1/auth/confluence/connector/add/",
 	},
+	{
+		id: "clickup-connector",
+		title: "ClickUp",
+		description: "Search ClickUp tasks",
+		connectorType: EnumConnectorName.CLICKUP_CONNECTOR,
+		authEndpoint: "/api/v1/auth/clickup/connector/add/",
+	},
 ] as const;
 
 // Content Sources (tools that extract and import content from external sources)
@@ -104,12 +118,6 @@ export const OTHER_CONNECTORS = [
 		description: "Search repositories",
 		connectorType: EnumConnectorName.GITHUB_CONNECTOR,
 	},
-	{
-		id: "clickup-connector",
-		title: "ClickUp",
-		description: "Search ClickUp tasks",
-		connectorType: EnumConnectorName.CLICKUP_CONNECTOR,
-	},
 	{
 		id: "luma-connector",
 		title: "Luma",

surfsense_web/components/assistant-ui/connector-popup/constants/connector-popup.schemas.ts

@@ -7,11 +7,12 @@ import { searchSourceConnectorTypeEnum } from "@/contracts/types/connector.types
 export const connectorPopupQueryParamsSchema = z.object({
 	modal: z.enum(["connectors"]).optional(),
 	tab: z.enum(["all", "active"]).optional(),
-	view: z.enum(["configure", "edit", "connect", "youtube"]).optional(),
+	view: z.enum(["configure", "edit", "connect", "youtube", "accounts"]).optional(),
 	connector: z.string().optional(),
 	connectorId: z.string().optional(),
 	connectorType: z.string().optional(),
 	success: z.enum(["true", "false"]).optional(),
+	error: z.string().optional(),
 });
 
 export type ConnectorPopupQueryParams = z.infer<typeof connectorPopupQueryParamsSchema>;

surfsense_web/components/assistant-ui/connector-popup/hooks/use-connector-dialog.ts

@@ -15,6 +15,14 @@ import { EnumConnectorName } from "@/contracts/enums/connector";
 import type { SearchSourceConnector } from "@/contracts/types/connector.types";
 import { searchSourceConnector } from "@/contracts/types/connector.types";
 import { authenticatedFetch } from "@/lib/auth-utils";
+import {
+	trackConnectorConnected,
+	trackConnectorDeleted,
+	trackIndexWithDateRangeOpened,
+	trackIndexWithDateRangeStarted,
+	trackPeriodicIndexingStarted,
+	trackQuickIndexClicked,
+} from "@/lib/posthog/events";
 import { cacheKeys } from "@/lib/query-client/cache-keys";
 import { queryClient } from "@/lib/query-client/client";
 import type { IndexingConfigState } from "../constants/connector-constants";
@@ -66,6 +74,12 @@ export const useConnectorDialog = () => {
 	const [isCreatingConnector, setIsCreatingConnector] = useState(false);
 	const isCreatingConnectorRef = useRef(false);
 
+	// Accounts list view state (for OAuth connectors with multiple accounts)
+	const [viewingAccountsType, setViewingAccountsType] = useState<{
+		connectorType: string;
+		connectorTitle: string;
+	} | null>(null);
+
 	// Helper function to get frequency label
 	const getFrequencyLabel = useCallback((minutes: string): string => {
 		switch (minutes) {
@@ -114,24 +128,50 @@ export const useConnectorDialog = () => {
 					setConnectingConnectorType(null);
 				}
 
+				// Clear viewing accounts type if view is not "accounts" anymore
+				if (params.view !== "accounts" && viewingAccountsType) {
+					setViewingAccountsType(null);
+				}
+
 				// Handle connect view
 				if (params.view === "connect" && params.connectorType && !connectingConnectorType) {
 					setConnectingConnectorType(params.connectorType);
 				}
 
+				// Handle accounts view
+				if (params.view === "accounts" && params.connectorType && !viewingAccountsType) {
+					const oauthConnector = OAUTH_CONNECTORS.find(
+						(c) => c.connectorType === params.connectorType
+					);
+					if (oauthConnector) {
+						setViewingAccountsType({
+							connectorType: oauthConnector.connectorType,
+							connectorTitle: oauthConnector.title,
+						});
+					}
+				}
+
 				// Handle YouTube view
 				if (params.view === "youtube") {
 					// YouTube view is active - no additional state needed
 				}
 
-				if (params.view === "configure" && params.connector && !indexingConfig) {
+				// Handle configure view (for page refresh support)
+				if (params.view === "configure" && params.connector && !indexingConfig && allConnectors) {
 					const oauthConnector = OAUTH_CONNECTORS.find((c) => c.id === params.connector);
-					if (oauthConnector && allConnectors) {
+					if (oauthConnector) {
-						const existingConnector = allConnectors.find(
+						let existingConnector: SearchSourceConnector | undefined;
-							(c: SearchSourceConnector) => c.connector_type === oauthConnector.connectorType
+						if (params.connectorId) {
-						);
+							const connectorId = parseInt(params.connectorId, 10);
+							existingConnector = allConnectors.find(
+								(c: SearchSourceConnector) => c.id === connectorId
+							);
+						} else {
+							existingConnector = allConnectors.find(
+								(c: SearchSourceConnector) => c.connector_type === oauthConnector.connectorType
+							);
+						}
 						if (existingConnector) {
-							// Validate connector data before setting state
 							const connectorValidation = searchSourceConnector.safeParse(existingConnector);
 							if (connectorValidation.success) {
 								const config = validateIndexingConfigState({
@@ -200,6 +240,10 @@ export const useConnectorDialog = () => {
 				if (connectingConnectorType) {
 					setConnectingConnectorType(null);
 				}
+				// Clear viewing accounts type when modal is closed
+				if (viewingAccountsType) {
+					setViewingAccountsType(null);
+				}
 				// Clear YouTube view when modal is closed (handled by view param check)
 			}
 		} catch (error) {
@@ -207,13 +251,48 @@ export const useConnectorDialog = () => {
 			console.warn("Invalid connector popup query params:", error);
 		}
 		// eslint-disable-next-line react-hooks/exhaustive-deps
-	}, [searchParams, allConnectors, editingConnector, indexingConfig, connectingConnectorType]);
+	}, [
+		searchParams,
+		allConnectors,
+		editingConnector,
+		indexingConfig,
+		connectingConnectorType,
+		viewingAccountsType,
+	]);
 
-	// Detect OAuth success and transition to config view
+	// Detect OAuth success / Failure and transition to config view
 	useEffect(() => {
 		try {
 			const params = parseConnectorPopupQueryParams(searchParams);
 
+			// Handle OAuth errors (e.g., duplicate account)
+			if (params.error && params.modal === "connectors") {
+				const oauthConnector = params.connector
+					? OAUTH_CONNECTORS.find((c) => c.id === params.connector)
+					: null;
+				const connectorName = oauthConnector?.title || "connector";
+
+				if (params.error === "duplicate_account") {
+					toast.error(`This ${connectorName} account is already connected`, {
+						description: "Please use a different account or manage the existing connection.",
+					});
+				} else {
+					toast.error(`Failed to connect ${connectorName}`, {
+						description: params.error.replace(/_/g, " "),
+					});
+				}
+
+				// Clean up error params from URL
+				const url = new URL(window.location.href);
+				url.searchParams.delete("error");
+				url.searchParams.delete("connector");
+				window.history.replaceState({}, "", url.toString());
+
+				// Open the popup to show the connectors
+				setIsOpen(true);
+				return;
+			}
+
 			if (
 				params.success === "true" &&
 				params.connector &&
@@ -225,13 +304,26 @@ export const useConnectorDialog = () => {
 					refetchAllConnectors().then((result) => {
 						if (!result.data) return;
 
-						const newConnector = result.data.find(
+						let newConnector: SearchSourceConnector | undefined;
-							(c: SearchSourceConnector) => c.connector_type === oauthConnector.connectorType
+						if (params.connectorId) {
-						);
+							const connectorId = parseInt(params.connectorId, 10);
+							newConnector = result.data.find((c: SearchSourceConnector) => c.id === connectorId);
+						} else {
+							newConnector = result.data.find(
+								(c: SearchSourceConnector) => c.connector_type === oauthConnector.connectorType
+							);
+						}
+
 						if (newConnector) {
-							// Validate connector data before setting state
 							const connectorValidation = searchSourceConnector.safeParse(newConnector);
 							if (connectorValidation.success) {
+								// Track connector connected event for OAuth connectors
+								trackConnectorConnected(
+									Number(searchSpaceId),
+									oauthConnector.connectorType,
+									newConnector.id
+								);
+
 								const config = validateIndexingConfigState({
 									connectorType: oauthConnector.connectorType,
 									connectorId: newConnector.id,
@@ -243,6 +335,7 @@ export const useConnectorDialog = () => {
 								setIsOpen(true);
 								const url = new URL(window.location.href);
 								url.searchParams.delete("success");
+								url.searchParams.set("connectorId", newConnector.id.toString());
 								url.searchParams.set("view", "configure");
 								window.history.replaceState({}, "", url.toString());
 							} else {
@@ -341,6 +434,13 @@ export const useConnectorDialog = () => {
 				if (connector) {
 					const connectorValidation = searchSourceConnector.safeParse(connector);
 					if (connectorValidation.success) {
+						// Track webcrawler connector connected
+						trackConnectorConnected(
+							Number(searchSpaceId),
+							EnumConnectorName.WEBCRAWLER_CONNECTOR,
+							connector.id
+						);
+
 						const config = validateIndexingConfigState({
 							connectorType: EnumConnectorName.WEBCRAWLER_CONNECTOR,
 							connectorId: connector.id,
@@ -436,6 +536,9 @@ export const useConnectorDialog = () => {
 							// Store connectingConnectorType before clearing it
 							const currentConnectorType = connectingConnectorType;
 
+							// Track connector connected event for non-OAuth connectors
+							trackConnectorConnected(Number(searchSpaceId), currentConnectorType, connector.id);
+
 							// Find connector title from constants
 							const connectorInfo = OTHER_CONNECTORS.find(
 								(c) => c.connectorType === currentConnectorType
@@ -632,6 +735,38 @@ export const useConnectorDialog = () => {
 		router.replace(url.pathname + url.search, { scroll: false });
 	}, [router]);
 
+	// Handle viewing accounts list for OAuth connector type
+	const handleViewAccountsList = useCallback(
+		(connectorType: string, connectorTitle: string) => {
+			if (!searchSpaceId) return;
+
+			setViewingAccountsType({
+				connectorType,
+				connectorTitle,
+			});
+
+			// Update URL to show accounts view, preserving current tab
+			const url = new URL(window.location.href);
+			url.searchParams.set("modal", "connectors");
+			url.searchParams.set("view", "accounts");
+			url.searchParams.set("connectorType", connectorType);
+			// Keep the current tab in URL so we can go back to it
+			window.history.pushState({ modal: true }, "", url.toString());
+		},
+		[searchSpaceId]
+	);
+
+	// Handle going back from accounts list view
+	const handleBackFromAccountsList = useCallback(() => {
+		setViewingAccountsType(null);
+		const url = new URL(window.location.href);
+		url.searchParams.set("modal", "connectors");
+		// Keep the current tab (don't change it) - just remove view-specific params
+		url.searchParams.delete("view");
+		url.searchParams.delete("connectorType");
+		router.replace(url.pathname + url.search, { scroll: false });
+	}, [router]);
+
 	// Handle starting indexing
 	const handleStartIndexing = useCallback(
 		async (refreshConnectors: () => void) => {
@@ -738,6 +873,27 @@ export const useConnectorDialog = () => {
 					});
 				}
 
+				// Track index with date range started event
+				trackIndexWithDateRangeStarted(
+					Number(searchSpaceId),
+					indexingConfig.connectorType,
+					indexingConfig.connectorId,
+					{
+						hasStartDate: !!startDate,
+						hasEndDate: !!endDate,
+					}
+				);
+
+				// Track periodic indexing started if enabled
+				if (periodicEnabled && indexingConfig.connectorType !== "GOOGLE_DRIVE_CONNECTOR") {
+					trackPeriodicIndexingStarted(
+						Number(searchSpaceId),
+						indexingConfig.connectorType,
+						indexingConfig.connectorId,
+						parseInt(frequencyMinutes, 10)
+					);
+				}
+
 				toast.success(`${indexingConfig.connectorTitle} indexing started`, {
 					description: periodicEnabled
 						? `Periodic sync enabled every ${getFrequencyLabel(frequencyMinutes)}.`
@@ -804,6 +960,15 @@ export const useConnectorDialog = () => {
 				return;
 			}
 
+			// Track index with date range opened event
+			if (connector.is_indexable) {
+				trackIndexWithDateRangeOpened(
+					Number(searchSpaceId),
+					connector.connector_type,
+					connector.id
+				);
+			}
+
 			setEditingConnector(connector);
 			setConnectorName(connector.name);
 			// Load existing periodic sync settings (disabled for Google Drive and non-indexable connectors)
@@ -939,6 +1104,36 @@ export const useConnectorDialog = () => {
 					indexingDescription = "Re-indexing started with new date range.";
 				}
 
+				// Track indexing started if re-indexing was performed
+				if (
+					editingConnector.is_indexable &&
+					(indexingDescription.includes("Re-indexing") || indexingDescription.includes("indexing"))
+				) {
+					trackIndexWithDateRangeStarted(
+						Number(searchSpaceId),
+						editingConnector.connector_type,
+						editingConnector.id,
+						{
+							hasStartDate: !!startDateStr,
+							hasEndDate: !!endDateStr,
+						}
+					);
+				}
+
+				// Track periodic indexing if enabled (for non-Google Drive connectors)
+				if (
+					periodicEnabled &&
+					editingConnector.is_indexable &&
+					editingConnector.connector_type !== "GOOGLE_DRIVE_CONNECTOR"
+				) {
+					trackPeriodicIndexingStarted(
+						Number(searchSpaceId),
+						editingConnector.connector_type,
+						editingConnector.id,
+						frequency || parseInt(frequencyMinutes, 10)
+					);
+				}
+
 				toast.success(`${editingConnector.name} updated successfully`, {
 					description: periodicEnabled
 						? `Periodic sync ${frequency ? `enabled every ${getFrequencyLabel(frequencyMinutes)}` : "enabled"}. ${indexingDescription}`
@@ -991,6 +1186,13 @@ export const useConnectorDialog = () => {
 					id: editingConnector.id,
 				});
 
+				// Track connector deleted event
+				trackConnectorDeleted(
+					Number(searchSpaceId),
+					editingConnector.connector_type,
+					editingConnector.id
+				);
+
 				toast.success(`${editingConnector.name} disconnected successfully`);
 
 				// Update URL - the effect will handle closing the modal and clearing state
@@ -1017,9 +1219,14 @@ export const useConnectorDialog = () => {
 
 	// Handle quick index (index without date picker, uses backend defaults)
 	const handleQuickIndexConnector = useCallback(
-		async (connectorId: number) => {
+		async (connectorId: number, connectorType?: string) => {
 			if (!searchSpaceId) return;
 
+			// Track quick index clicked event
+			if (connectorType) {
+				trackQuickIndexClicked(Number(searchSpaceId), connectorType, connectorId);
+			}
+
 			try {
 				await indexConnector({
 					connector_id: connectorId,
@@ -1081,6 +1288,7 @@ export const useConnectorDialog = () => {
 					setConnectorName(null);
 					setConnectorConfig(null);
 					setConnectingConnectorType(null);
+					setViewingAccountsType(null);
 					setStartDate(undefined);
 					setEndDate(undefined);
 					setPeriodicEnabled(false);
@@ -1126,6 +1334,7 @@ export const useConnectorDialog = () => {
 		frequencyMinutes,
 		searchSpaceId,
 		allConnectors,
+		viewingAccountsType,
 
 		// Setters
 		setSearchQuery,
@@ -1152,6 +1361,8 @@ export const useConnectorDialog = () => {
 		handleBackFromEdit,
 		handleBackFromConnect,
 		handleBackFromYouTube,
+		handleViewAccountsList,
+		handleBackFromAccountsList,
 		handleQuickIndexConnector,
 		connectorConfig,
 		setConnectorConfig,

surfsense_web/components/assistant-ui/connector-popup/tabs/active-connectors-tab.tsx

@@ -11,6 +11,7 @@ import { getConnectorIcon } from "@/contracts/enums/connectorIcons";
 import type { SearchSourceConnector } from "@/contracts/types/connector.types";
 import type { LogActiveTask, LogSummary } from "@/contracts/types/log.types";
 import { cn } from "@/lib/utils";
+import { OAUTH_CONNECTORS } from "../constants/connector-constants";
 import { getDocumentCountForConnector } from "../utils/connector-document-mapping";
 
 interface ActiveConnectorsTabProps {
@@ -24,6 +25,7 @@ interface ActiveConnectorsTabProps {
 	searchSpaceId: string;
 	onTabChange: (value: string) => void;
 	onManage?: (connector: SearchSourceConnector) => void;
+	onViewAccountsList?: (connectorType: string, connectorTitle: string) => void;
 }
 
 export const ActiveConnectorsTab: FC<ActiveConnectorsTabProps> = ({
@@ -36,6 +38,7 @@ export const ActiveConnectorsTab: FC<ActiveConnectorsTabProps> = ({
 	searchSpaceId,
 	onTabChange,
 	onManage,
+	onViewAccountsList,
 }) => {
 	const router = useRouter();
 
@@ -71,38 +74,26 @@ export const ActiveConnectorsTab: FC<ActiveConnectorsTabProps> = ({
 		const minutesAgo = differenceInMinutes(now, date);
 		const daysAgo = differenceInDays(now, date);
 
-		// Just now (within last minute)
+		if (minutesAgo < 1) return "Just now";
-		if (minutesAgo < 1) {
+		if (minutesAgo < 60) return `${minutesAgo} ${minutesAgo === 1 ? "minute" : "minutes"} ago`;
-			return "Just now";
+		if (isToday(date)) return `Today at ${format(date, "h:mm a")}`;
-		}
+		if (isYesterday(date)) return `Yesterday at ${format(date, "h:mm a")}`;
-
+		if (daysAgo < 7) return `${daysAgo} ${daysAgo === 1 ? "day" : "days"} ago`;
-		// X minutes ago (less than 1 hour)
-		if (minutesAgo < 60) {
-			return `${minutesAgo} ${minutesAgo === 1 ? "minute" : "minutes"} ago`;
-		}
-
-		// Today at [time]
-		if (isToday(date)) {
-			return `Today at ${format(date, "h:mm a")}`;
-		}
-
-		// Yesterday at [time]
-		if (isYesterday(date)) {
-			return `Yesterday at ${format(date, "h:mm a")}`;
-		}
-
-		// X days ago (less than 7 days)
-		if (daysAgo < 7) {
-			return `${daysAgo} ${daysAgo === 1 ? "day" : "days"} ago`;
-		}
-
-		// Full date for older entries
 		return format(date, "MMM d, yyyy");
 	};
 
-	// Document types that should be shown as cards (not from connectors)
+	// Get most recent last indexed date from a list of connectors
-	// These are: EXTENSION (browser extension), FILE (uploaded files), NOTE (editor notes),
+	const getMostRecentLastIndexed = (
-	// YOUTUBE_VIDEO (YouTube videos), and CRAWLED_URL (web pages - shown separately even though it can come from WEBCRAWLER_CONNECTOR)
+		connectorsList: SearchSourceConnector[]
+	): string | undefined => {
+		return connectorsList.reduce<string | undefined>((latest, c) => {
+			if (!c.last_indexed_at) return latest;
+			if (!latest) return c.last_indexed_at;
+			return new Date(c.last_indexed_at) > new Date(latest) ? c.last_indexed_at : latest;
+		}, undefined);
+	};
+
+	// Document types that should be shown as standalone cards (not from connectors)
 	const standaloneDocumentTypes = ["EXTENSION", "FILE", "NOTE", "YOUTUBE_VIDEO", "CRAWLED_URL"];
 
 	// Filter to only show standalone document types that have documents (count > 0)
@@ -118,8 +109,54 @@ export const ActiveConnectorsTab: FC<ActiveConnectorsTabProps> = ({
 			return doc.label.toLowerCase().includes(searchQuery.toLowerCase());
 		});
 
-	// Filter connectors based on search query
+	// Get OAuth connector types set for quick lookup
-	const filteredConnectors = connectors.filter((connector) => {
+	const oauthConnectorTypes = new Set<string>(OAUTH_CONNECTORS.map((c) => c.connectorType));
+
+	// Separate OAuth and non-OAuth connectors
+	const oauthConnectors = connectors.filter((c) => oauthConnectorTypes.has(c.connector_type));
+	const nonOauthConnectors = connectors.filter((c) => !oauthConnectorTypes.has(c.connector_type));
+
+	// Group OAuth connectors by type
+	const oauthConnectorsByType = oauthConnectors.reduce(
+		(acc, connector) => {
+			const type = connector.connector_type;
+			if (!acc[type]) {
+				acc[type] = [];
+			}
+			acc[type].push(connector);
+			return acc;
+		},
+		{} as Record<string, SearchSourceConnector[]>
+	);
+
+	// Get display info for OAuth connector type
+	const getOAuthConnectorTypeInfo = (connectorType: string) => {
+		const oauthConnector = OAUTH_CONNECTORS.find((c) => c.connectorType === connectorType);
+		return {
+			title:
+				oauthConnector?.title ||
+				connectorType
+					.replace(/_/g, " ")
+					.replace(/connector/gi, "")
+					.trim(),
+		};
+	};
+
+	// Filter OAuth connector types based on search query
+	const filteredOAuthConnectorTypes = Object.entries(oauthConnectorsByType).filter(
+		([connectorType]) => {
+			if (!searchQuery) return true;
+			const searchLower = searchQuery.toLowerCase();
+			const { title } = getOAuthConnectorTypeInfo(connectorType);
+			return (
+				title.toLowerCase().includes(searchLower) ||
+				connectorType.toLowerCase().includes(searchLower)
+			);
+		}
+	);
+
+	// Filter non-OAuth connectors based on search query
+	const filteredNonOAuthConnectors = nonOauthConnectors.filter((connector) => {
 		if (!searchQuery) return true;
 		const searchLower = searchQuery.toLowerCase();
 		return (
@@ -128,18 +165,97 @@ export const ActiveConnectorsTab: FC<ActiveConnectorsTabProps> = ({
 		);
 	});
 
+	const hasActiveConnectors =
+		filteredOAuthConnectorTypes.length > 0 || filteredNonOAuthConnectors.length > 0;
+
 	return (
 		<TabsContent value="active" className="m-0">
 			{hasSources ? (
 				<div className="space-y-6">
 					{/* Active Connectors Section */}
-					{filteredConnectors.length > 0 && (
+					{hasActiveConnectors && (
 						<div className="space-y-4">
 							<div className="flex items-center gap-2">
 								<h3 className="text-sm font-semibold text-muted-foreground">Active Connectors</h3>
 							</div>
 							<div className="grid grid-cols-1 sm:grid-cols-2 gap-3">
-								{filteredConnectors.map((connector) => {
+								{/* OAuth Connectors - Grouped by Type */}
+								{filteredOAuthConnectorTypes.map(([connectorType, typeConnectors]) => {
+									const { title } = getOAuthConnectorTypeInfo(connectorType);
+									const isAnyIndexing = typeConnectors.some((c: SearchSourceConnector) =>
+										indexingConnectorIds.has(c.id)
+									);
+									const documentCount = getDocumentCountForConnector(
+										connectorType,
+										documentTypeCounts
+									);
+									const accountCount = typeConnectors.length;
+									const mostRecentLastIndexed = getMostRecentLastIndexed(typeConnectors);
+
+									const handleManageClick = () => {
+										if (onViewAccountsList) {
+											onViewAccountsList(connectorType, title);
+										} else if (onManage && typeConnectors[0]) {
+											onManage(typeConnectors[0]);
+										}
+									};
+
+									return (
+										<div
+											key={`oauth-type-${connectorType}`}
+											className={cn(
+												"relative flex items-center gap-4 p-4 rounded-xl border border-border transition-all",
+												isAnyIndexing
+													? "bg-primary/5 border-primary/20"
+													: "bg-slate-400/5 dark:bg-white/5 hover:bg-slate-400/10 dark:hover:bg-white/10"
+											)}
+										>
+											<div
+												className={cn(
+													"flex h-12 w-12 items-center justify-center rounded-lg border shrink-0",
+													isAnyIndexing
+														? "bg-primary/10 border-primary/20"
+														: "bg-slate-400/5 dark:bg-white/5 border-slate-400/5 dark:border-white/5"
+												)}
+											>
+												{getConnectorIcon(connectorType, "size-6")}
+											</div>
+											<div className="flex-1 min-w-0">
+												<p className="text-[14px] font-semibold leading-tight truncate">{title}</p>
+												{isAnyIndexing ? (
+													<p className="text-[11px] text-primary mt-1 flex items-center gap-1.5">
+														<Loader2 className="size-3 animate-spin" />
+														Indexing...
+													</p>
+												) : (
+													<p className="text-[10px] text-muted-foreground mt-1 whitespace-nowrap">
+														{mostRecentLastIndexed
+															? `Last indexed: ${formatLastIndexedDate(mostRecentLastIndexed)}`
+															: "Never indexed"}
+													</p>
+												)}
+												<p className="text-[10px] text-muted-foreground mt-0.5 flex items-center gap-1.5">
+													<span>{formatDocumentCount(documentCount)}</span>
+													<span className="text-muted-foreground/50">•</span>
+													<span>
+														{accountCount} {accountCount === 1 ? "Account" : "Accounts"}
+													</span>
+												</p>
+											</div>
+											<Button
+												variant="secondary"
+												size="sm"
+												className="h-8 text-[11px] px-3 rounded-lg font-medium bg-white text-slate-700 hover:bg-slate-50 border-0 shadow-xs dark:bg-secondary dark:text-secondary-foreground dark:hover:bg-secondary/80 shrink-0"
+												onClick={handleManageClick}
+											>
+												Manage
+											</Button>
+										</div>
+									);
+								})}
+
+								{/* Non-OAuth Connectors - Individual Cards */}
+								{filteredNonOAuthConnectors.map((connector) => {
 									const isIndexing = indexingConnectorIds.has(connector.id);
 									const activeTask = logsSummary?.active_tasks?.find(
 										(task: LogActiveTask) => task.connector_id === connector.id
@@ -161,7 +277,7 @@ export const ActiveConnectorsTab: FC<ActiveConnectorsTabProps> = ({
 										>
 											<div
 												className={cn(
-													"flex h-12 w-12 items-center justify-center rounded-lg border",
+													"flex h-12 w-12 items-center justify-center rounded-lg border shrink-0",
 													isIndexing
 														? "bg-primary/10 border-primary/20"
 														: "bg-slate-400/5 dark:bg-white/5 border-slate-400/5 dark:border-white/5"
@@ -197,7 +313,7 @@ export const ActiveConnectorsTab: FC<ActiveConnectorsTabProps> = ({
 											<Button
 												variant="secondary"
 												size="sm"
-												className="h-8 text-[11px] px-3 rounded-lg font-medium bg-white text-slate-700 hover:bg-slate-50 border-0 shadow-xs dark:bg-secondary dark:text-secondary-foreground dark:hover:bg-secondary/80"
+												className="h-8 text-[11px] px-3 rounded-lg font-medium bg-white text-slate-700 hover:bg-slate-50 border-0 shadow-xs dark:bg-secondary dark:text-secondary-foreground dark:hover:bg-secondary/80 shrink-0"
 												onClick={onManage ? () => onManage(connector) : undefined}
 											>
 												Manage

surfsense_web/components/assistant-ui/connector-popup/tabs/all-connectors-tab.tsx

@@ -1,12 +1,27 @@
 "use client";
 
+import { Plus } from "lucide-react";
 import type { FC } from "react";
+import { Button } from "@/components/ui/button";
 import type { SearchSourceConnector } from "@/contracts/types/connector.types";
 import type { LogActiveTask, LogSummary } from "@/contracts/types/log.types";
 import { ConnectorCard } from "../components/connector-card";
 import { CRAWLERS, OAUTH_CONNECTORS, OTHER_CONNECTORS } from "../constants/connector-constants";
 import { getDocumentCountForConnector } from "../utils/connector-document-mapping";
 
+/**
+ * Extract the display name from a full connector name.
+ * Full names are in format "Base Name - identifier" (e.g., "Gmail - john@example.com").
+ * Returns just the identifier (e.g : john@example.com).
+ */
+export function getConnectorDisplayName(fullName: string): string {
+	const separatorIndex = fullName.indexOf(" - ");
+	if (separatorIndex !== -1) {
+		return fullName.substring(separatorIndex + 3);
+	}
+	return fullName;
+}
+
 interface AllConnectorsTabProps {
 	searchQuery: string;
 	searchSpaceId: string;
@@ -21,6 +36,7 @@ interface AllConnectorsTabProps {
 	onCreateWebcrawler?: () => void;
 	onCreateYouTubeCrawler?: () => void;
 	onManage?: (connector: SearchSourceConnector) => void;
+	onViewAccountsList?: (connectorType: string, connectorTitle: string) => void;
 }
 
 export const AllConnectorsTab: FC<AllConnectorsTabProps> = ({
@@ -37,6 +53,7 @@ export const AllConnectorsTab: FC<AllConnectorsTabProps> = ({
 	onCreateWebcrawler,
 	onCreateYouTubeCrawler,
 	onManage,
+	onViewAccountsList,
 }) => {
 	// Helper to find active task for a connector
 	const getActiveTaskForConnector = (connectorId: number): LogActiveTask | undefined => {
@@ -77,22 +94,39 @@ export const AllConnectorsTab: FC<AllConnectorsTabProps> = ({
 						{filteredOAuth.map((connector) => {
 							const isConnected = connectedTypes.has(connector.connectorType);
 							const isConnecting = connectingId === connector.id;
-							// Find the actual connector object if connected
+
-							const actualConnector =
+							// Find all connectors of this type
+							const typeConnectors =
 								isConnected && allConnectors
-									? allConnectors.find(
+									? allConnectors.filter(
 											(c: SearchSourceConnector) => c.connector_type === connector.connectorType
 										)
-									: undefined;
+									: [];
+
+							// Get the most recent last_indexed_at across all accounts
+							const mostRecentLastIndexed = typeConnectors.reduce<string | undefined>(
+								(latest, c) => {
+									if (!c.last_indexed_at) return latest;
+									if (!latest) return c.last_indexed_at;
+									return new Date(c.last_indexed_at) > new Date(latest)
+										? c.last_indexed_at
+										: latest;
+								},
+								undefined
+							);
 
 							const documentCount = getDocumentCountForConnector(
 								connector.connectorType,
 								documentTypeCounts
 							);
-							const isIndexing = actualConnector && indexingConnectorIds?.has(actualConnector.id);
+
-							const activeTask = actualConnector
+							// Check if any account is currently indexing
-								? getActiveTaskForConnector(actualConnector.id)
+							const isIndexing = typeConnectors.some((c) => indexingConnectorIds?.has(c.id));
-								: undefined;
+
+							// Get active task from any indexing account
+							const activeTask = typeConnectors
+								.map((c) => getActiveTaskForConnector(c.id))
+								.find((task) => task !== undefined);
 
 							return (
 								<ConnectorCard
@@ -104,12 +138,15 @@ export const AllConnectorsTab: FC<AllConnectorsTabProps> = ({
 									isConnected={isConnected}
 									isConnecting={isConnecting}
 									documentCount={documentCount}
-									lastIndexedAt={actualConnector?.last_indexed_at}
+									accountCount={typeConnectors.length}
+									lastIndexedAt={mostRecentLastIndexed}
 									isIndexing={isIndexing}
 									activeTask={activeTask}
 									onConnect={() => onConnectOAuth(connector)}
 									onManage={
-										actualConnector && onManage ? () => onManage(actualConnector) : undefined
+										isConnected && onViewAccountsList
+											? () => onViewAccountsList(connector.connectorType, connector.title)
+											: undefined
 									}
 								/>
 							);

surfsense_web/components/assistant-ui/connector-popup/utils/connector-document-mapping.ts

@@ -11,6 +11,7 @@
 export const CONNECTOR_TO_DOCUMENT_TYPE: Record<string, string> = {
 	// Direct mappings (connector type matches document type)
 	SLACK_CONNECTOR: "SLACK_CONNECTOR",
+	TEAMS_CONNECTOR: "TEAMS_CONNECTOR",
 	NOTION_CONNECTOR: "NOTION_CONNECTOR",
 	GITHUB_CONNECTOR: "GITHUB_CONNECTOR",
 	LINEAR_CONNECTOR: "LINEAR_CONNECTOR",

surfsense_web/components/assistant-ui/connector-popup/views/connector-accounts-list-view.tsx

@@ -0,0 +1,189 @@
+"use client";
+
+import { differenceInDays, differenceInMinutes, format, isToday, isYesterday } from "date-fns";
+import { ArrowLeft, Loader2, Plus } from "lucide-react";
+import type { FC } from "react";
+import { Button } from "@/components/ui/button";
+import { getConnectorIcon } from "@/contracts/enums/connectorIcons";
+import type { SearchSourceConnector } from "@/contracts/types/connector.types";
+import type { LogActiveTask, LogSummary } from "@/contracts/types/log.types";
+import { cn } from "@/lib/utils";
+import { getConnectorDisplayName } from "../tabs/all-connectors-tab";
+
+interface ConnectorAccountsListViewProps {
+	connectorType: string;
+	connectorTitle: string;
+	connectors: SearchSourceConnector[];
+	indexingConnectorIds: Set<number>;
+	logsSummary: LogSummary | undefined;
+	onBack: () => void;
+	onManage: (connector: SearchSourceConnector) => void;
+	onAddAccount: () => void;
+	isConnecting?: boolean;
+}
+
+/**
+ * Format last indexed date with contextual messages
+ */
+function formatLastIndexedDate(dateString: string): string {
+	const date = new Date(dateString);
+	const now = new Date();
+	const minutesAgo = differenceInMinutes(now, date);
+	const daysAgo = differenceInDays(now, date);
+
+	if (minutesAgo < 1) {
+		return "Just now";
+	}
+
+	if (minutesAgo < 60) {
+		return `${minutesAgo} ${minutesAgo === 1 ? "minute" : "minutes"} ago`;
+	}
+
+	if (isToday(date)) {
+		return `Today at ${format(date, "h:mm a")}`;
+	}
+
+	if (isYesterday(date)) {
+		return `Yesterday at ${format(date, "h:mm a")}`;
+	}
+
+	if (daysAgo < 7) {
+		return `${daysAgo} ${daysAgo === 1 ? "day" : "days"} ago`;
+	}
+
+	return format(date, "MMM d, yyyy");
+}
+
+export const ConnectorAccountsListView: FC<ConnectorAccountsListViewProps> = ({
+	connectorType,
+	connectorTitle,
+	connectors,
+	indexingConnectorIds,
+	logsSummary,
+	onBack,
+	onManage,
+	onAddAccount,
+	isConnecting = false,
+}) => {
+	// Filter connectors to only show those of this type
+	const typeConnectors = connectors.filter((c) => c.connector_type === connectorType);
+
+	return (
+		<div className="flex flex-col h-full">
+			{/* Header */}
+			<div className="px-4 sm:px-12 pt-6 sm:pt-10 pb-4 border-b border-border/50 bg-muted">
+				<div className="flex items-center justify-between gap-4 sm:pr-4">
+					<div className="flex items-center gap-4">
+						<Button
+							variant="ghost"
+							size="icon"
+							className="size-8 rounded-full shrink-0"
+							onClick={onBack}
+						>
+							<ArrowLeft className="size-4" />
+						</Button>
+						<div className="flex items-center gap-3">
+							<div className="flex h-10 w-10 items-center justify-center rounded-lg bg-slate-400/5 dark:bg-white/5 border border-slate-400/5 dark:border-white/5">
+								{getConnectorIcon(connectorType, "size-5")}
+							</div>
+							<div>
+								<h2 className="text-lg font-semibold">{connectorTitle} Accounts</h2>
+								<p className="text-xs text-muted-foreground">
+									{typeConnectors.length} connected account{typeConnectors.length !== 1 ? "s" : ""}
+								</p>
+							</div>
+						</div>
+					</div>
+					{/* Add Account Button with dashed border */}
+					<button
+						type="button"
+						onClick={onAddAccount}
+						disabled={isConnecting}
+						className={cn(
+							"flex items-center gap-2 px-3 py-2 rounded-lg mr-4 border-2 border-dashed border-border/70 text-left transition-all duration-200",
+							"border-primary/50 hover:bg-primary/5",
+							isConnecting && "opacity-50 cursor-not-allowed"
+						)}
+					>
+						<div className="flex h-6 w-6 items-center justify-center rounded-md bg-primary/10 shrink-0">
+							{isConnecting ? (
+								<Loader2 className="size-3.5 animate-spin text-primary" />
+							) : (
+								<Plus className="size-3.5 text-primary" />
+							)}
+						</div>
+						<span className="text-[12px] font-medium">
+							{isConnecting ? "Connecting..." : "Add Account"}
+						</span>
+					</button>
+				</div>
+			</div>
+
+			{/* Content */}
+			<div className="flex-1 overflow-y-auto px-4 sm:px-12 py-6 sm:py-8">
+				{/* Connected Accounts Grid */}
+				<div className="grid grid-cols-1 sm:grid-cols-2 gap-3">
+					{typeConnectors.map((connector) => {
+						const isIndexing = indexingConnectorIds.has(connector.id);
+						const activeTask = logsSummary?.active_tasks?.find(
+							(task: LogActiveTask) => task.connector_id === connector.id
+						);
+
+						return (
+							<div
+								key={connector.id}
+								className={cn(
+									"flex items-center gap-4 p-4 rounded-xl border border-border transition-all",
+									isIndexing
+										? "bg-primary/5 border-primary/20"
+										: "bg-slate-400/5 dark:bg-white/5 hover:bg-slate-400/10 dark:hover:bg-white/10"
+								)}
+							>
+								<div
+									className={cn(
+										"flex h-12 w-12 items-center justify-center rounded-lg border shrink-0",
+										isIndexing
+											? "bg-primary/10 border-primary/20"
+											: "bg-slate-400/5 dark:bg-white/5 border-slate-400/5 dark:border-white/5"
+									)}
+								>
+									{getConnectorIcon(connector.connector_type, "size-6")}
+								</div>
+								<div className="flex-1 min-w-0">
+									<p className="text-[14px] font-semibold leading-tight truncate">
+										{getConnectorDisplayName(connector.name)}
+									</p>
+									{isIndexing ? (
+										<p className="text-[11px] text-primary mt-1 flex items-center gap-1.5">
+											<Loader2 className="size-3 animate-spin" />
+											Indexing...
+											{activeTask?.message && (
+												<span className="text-muted-foreground truncate max-w-[100px]">
+													• {activeTask.message}
+												</span>
+											)}
+										</p>
+									) : (
+										<p className="text-[10px] text-muted-foreground mt-1 whitespace-nowrap truncate">
+											{connector.last_indexed_at
+												? `Last indexed: ${formatLastIndexedDate(connector.last_indexed_at)}`
+												: "Never indexed"}
+										</p>
+									)}
+								</div>
+								<Button
+									variant="secondary"
+									size="sm"
+									className="h-8 text-[11px] px-3 rounded-lg font-medium bg-white text-slate-700 hover:bg-slate-50 border-0 shadow-xs dark:bg-secondary dark:text-secondary-foreground dark:hover:bg-secondary/80 shrink-0"
+									onClick={() => onManage(connector)}
+								>
+									Manage
+								</Button>
+							</div>
+						);
+					})}
+				</div>
+			</div>
+		</div>
+	);
+};

surfsense_web/components/assistant-ui/document-upload-popup.tsx

@@ -1,7 +1,7 @@
 "use client";
 
-import { Upload } from "lucide-react";
 import { useAtomValue } from "jotai";
+import { Upload } from "lucide-react";
 import { useRouter } from "next/navigation";
 import {
 	createContext,

surfsense_web/components/copy-button.tsx

@@ -1,38 +0,0 @@
-"use client";
-import { Copy, CopyCheck } from "lucide-react";
-import type { RefObject } from "react";
-import { useEffect, useRef, useState } from "react";
-import { Button } from "./ui/button";
-
-export default function CopyButton({ ref }: { ref: RefObject<HTMLDivElement | null> }) {
-	const [copy, setCopy] = useState(false);
-	const timeoutRef = useRef<NodeJS.Timeout | null>(null);
-
-	useEffect(() => {
-		return () => {
-			if (timeoutRef.current) {
-				clearTimeout(timeoutRef.current);
-			}
-		};
-	}, []);
-
-	const handleClick = () => {
-		if (ref.current) {
-			const text = ref.current.innerText;
-			navigator.clipboard.writeText(text);
-
-			setCopy(true);
-			timeoutRef.current = setTimeout(() => {
-				setCopy(false);
-			}, 2000);
-		}
-	};
-
-	return (
-		<div className="w-full flex justify-end">
-			<Button variant="ghost" onClick={handleClick}>
-				{copy ? <CopyCheck /> : <Copy />}
-			</Button>
-		</div>
-	);
-}

surfsense_web/components/editConnector/EditConnectorLoadingSkeleton.tsx

@@ -1,22 +0,0 @@
-"use client";
-
-import { Card, CardContent, CardHeader } from "@/components/ui/card";
-import { Skeleton } from "@/components/ui/skeleton";
-
-export function EditConnectorLoadingSkeleton() {
-	return (
-		<div className="container mx-auto py-8 max-w-3xl">
-			<Skeleton className="h-8 w-48 mb-6" />
-			<Card className="border-2 border-border">
-				<CardHeader>
-					<Skeleton className="h-7 w-3/4 mb-2" />
-					<Skeleton className="h-4 w-full" />
-				</CardHeader>
-				<CardContent className="space-y-4">
-					<Skeleton className="h-10 w-full" />
-					<Skeleton className="h-20 w-full" />
-				</CardContent>
-			</Card>
-		</div>
-	);
-}

surfsense_web/components/editConnector/EditConnectorNameForm.tsx

@@ -1,28 +0,0 @@
-"use client";
-
-import type { Control } from "react-hook-form";
-import { FormControl, FormField, FormItem, FormLabel, FormMessage } from "@/components/ui/form";
-import { Input } from "@/components/ui/input";
-
-// Assuming EditConnectorFormValues is defined elsewhere or passed as generic
-interface EditConnectorNameFormProps {
-	control: Control<any>; // Use Control<EditConnectorFormValues> if type is available
-}
-
-export function EditConnectorNameForm({ control }: EditConnectorNameFormProps) {
-	return (
-		<FormField
-			control={control}
-			name="name"
-			render={({ field }) => (
-				<FormItem>
-					<FormLabel>Connector Name</FormLabel>
-					<FormControl>
-						<Input {...field} />
-					</FormControl>
-					<FormMessage />
-				</FormItem>
-			)}
-		/>
-	);
-}

surfsense_web/components/editConnector/EditGitHubConnectorConfig.tsx

@@ -1,189 +0,0 @@
-import { CircleAlert, Edit, KeyRound, Loader2 } from "lucide-react";
-import type React from "react";
-import type { UseFormReturn } from "react-hook-form";
-import { Alert, AlertDescription, AlertTitle } from "@/components/ui/alert";
-import { Button } from "@/components/ui/button";
-import { Checkbox } from "@/components/ui/checkbox";
-import {
-	FormControl,
-	FormDescription,
-	FormField,
-	FormItem,
-	FormLabel,
-	FormMessage,
-} from "@/components/ui/form";
-import { Input } from "@/components/ui/input";
-import { Skeleton } from "@/components/ui/skeleton";
-
-// Types needed from parent
-interface GithubRepo {
-	id: number;
-	name: string;
-	full_name: string;
-	private: boolean;
-	url: string;
-	description: string | null;
-	last_updated: string | null;
-}
-type GithubPatFormValues = { github_pat: string };
-type EditMode = "viewing" | "editing_repos";
-
-interface EditGitHubConnectorConfigProps {
-	// State from parent
-	editMode: EditMode;
-	originalPat: string;
-	currentSelectedRepos: string[];
-	fetchedRepos: GithubRepo[] | null;
-	newSelectedRepos: string[];
-	isFetchingRepos: boolean;
-	// Forms from parent
-	patForm: UseFormReturn<GithubPatFormValues>;
-	// Handlers from parent
-	setEditMode: (mode: EditMode) => void;
-	handleFetchRepositories: (values: GithubPatFormValues) => Promise<void>;
-	handleRepoSelectionChange: (repoFullName: string, checked: boolean) => void;
-	setNewSelectedRepos: React.Dispatch<React.SetStateAction<string[]>>;
-	setFetchedRepos: React.Dispatch<React.SetStateAction<GithubRepo[] | null>>;
-}
-
-export function EditGitHubConnectorConfig({
-	editMode,
-	originalPat,
-	currentSelectedRepos,
-	fetchedRepos,
-	newSelectedRepos,
-	isFetchingRepos,
-	patForm,
-	setEditMode,
-	handleFetchRepositories,
-	handleRepoSelectionChange,
-	setNewSelectedRepos,
-	setFetchedRepos,
-}: EditGitHubConnectorConfigProps) {
-	return (
-		<div className="space-y-4">
-			<h4 className="font-medium text-muted-foreground">Repository Selection & Access</h4>
-
-			{/* Viewing Mode */}
-			{editMode === "viewing" && (
-				<div className="space-y-3 p-4 border rounded-md bg-muted/50">
-					<FormLabel>Currently Indexed Repositories:</FormLabel>
-					{currentSelectedRepos.length > 0 ? (
-						<ul className="list-disc pl-5 text-sm">
-							{currentSelectedRepos.map((repo) => (
-								<li key={repo}>{repo}</li>
-							))}
-						</ul>
-					) : (
-						<p className="text-sm text-muted-foreground">(No repositories currently selected)</p>
-					)}
-					<Button
-						type="button"
-						variant="outline"
-						size="sm"
-						onClick={() => setEditMode("editing_repos")}
-					>
-						<Edit className="mr-2 h-4 w-4" /> Change Selection / Update PAT
-					</Button>
-					<FormDescription>
-						To change repo selections or update the PAT, click above.
-					</FormDescription>
-				</div>
-			)}
-
-			{/* Editing Mode */}
-			{editMode === "editing_repos" && (
-				<div className="space-y-4 p-4 border rounded-md">
-					{/* PAT Input */}
-					<div className="flex items-end gap-4 p-4 border rounded-md bg-muted/90">
-						<FormField
-							control={patForm.control}
-							name="github_pat"
-							render={({ field }) => (
-								<FormItem className="flex-grow">
-									<FormLabel className="flex items-center gap-1">
-										<KeyRound className="h-4 w-4" /> GitHub PAT
-									</FormLabel>
-									<FormControl>
-										<Input type="password" placeholder="ghp_... or github_pat_..." {...field} />
-									</FormControl>
-									<FormDescription>
-										Enter PAT to fetch/update repos or if you need to update the stored token.
-									</FormDescription>
-									<FormMessage />
-								</FormItem>
-							)}
-						/>
-						<Button
-							type="button"
-							disabled={isFetchingRepos}
-							size="sm"
-							onClick={async () => {
-								const isValid = await patForm.trigger("github_pat");
-								if (isValid) {
-									handleFetchRepositories(patForm.getValues());
-								}
-							}}
-						>
-							{isFetchingRepos ? (
-								<Loader2 className="h-4 w-4 animate-spin" />
-							) : (
-								"Fetch Repositories"
-							)}
-						</Button>
-					</div>
-
-					{/* Repo List */}
-					{isFetchingRepos && <Skeleton className="h-40 w-full" />}
-					{!isFetchingRepos &&
-						fetchedRepos !== null &&
-						(fetchedRepos.length === 0 ? (
-							<Alert variant="destructive">
-								<CircleAlert className="h-4 w-4" />
-								<AlertTitle>No Repositories Found</AlertTitle>
-								<AlertDescription>Check PAT & permissions.</AlertDescription>
-							</Alert>
-						) : (
-							<div className="space-y-2">
-								<FormLabel>
-									Select Repositories to Index ({newSelectedRepos.length} selected):
-								</FormLabel>
-								<div className="h-64 w-full rounded-md border p-4 overflow-y-auto">
-									{fetchedRepos.map((repo) => (
-										<div key={repo.id} className="flex items-center space-x-2 mb-2 py-1">
-											<Checkbox
-												id={`repo-${repo.id}`}
-												checked={newSelectedRepos.includes(repo.full_name)}
-												onCheckedChange={(checked) =>
-													handleRepoSelectionChange(repo.full_name, !!checked)
-												}
-											/>
-											<label
-												htmlFor={`repo-${repo.id}`}
-												className="text-sm font-medium leading-none peer-disabled:cursor-not-allowed peer-disabled:opacity-70"
-											>
-												{repo.full_name} {repo.private && "(Private)"}
-											</label>
-										</div>
-									))}
-								</div>
-							</div>
-						))}
-					<Button
-						type="button"
-						variant="ghost"
-						size="sm"
-						onClick={() => {
-							setEditMode("viewing");
-							setFetchedRepos(null);
-							setNewSelectedRepos(currentSelectedRepos);
-							patForm.reset({ github_pat: originalPat }); // Reset PAT form on cancel
-						}}
-					>
-						Cancel Repo Change
-					</Button>
-				</div>
-			)}
-		</div>
-	);
-}

surfsense_web/components/editConnector/EditSimpleTokenForm.tsx

@@ -1,49 +0,0 @@
-"use client";
-
-import { KeyRound } from "lucide-react";
-import type { Control } from "react-hook-form";
-import {
-	FormControl,
-	FormDescription,
-	FormField,
-	FormItem,
-	FormLabel,
-	FormMessage,
-} from "@/components/ui/form";
-import { Input } from "@/components/ui/input";
-
-// Assuming EditConnectorFormValues is defined elsewhere or passed as generic
-interface EditSimpleTokenFormProps {
-	control: Control<any>;
-	fieldName: string; // e.g., "SLACK_BOT_TOKEN"
-	fieldLabel: string; // e.g., "Slack Bot Token"
-	fieldDescription: string;
-	placeholder?: string;
-}
-
-export function EditSimpleTokenForm({
-	control,
-	fieldName,
-	fieldLabel,
-	fieldDescription,
-	placeholder,
-}: EditSimpleTokenFormProps) {
-	return (
-		<FormField
-			control={control}
-			name={fieldName}
-			render={({ field }) => (
-				<FormItem>
-					<FormLabel className="flex items-center gap-1">
-						<KeyRound className="h-4 w-4" /> {fieldLabel}
-					</FormLabel>
-					<FormControl>
-						<Input type="password" placeholder={placeholder} {...field} />
-					</FormControl>
-					<FormDescription>{fieldDescription}</FormDescription>
-					<FormMessage />
-				</FormItem>
-			)}
-		/>
-	);
-}

surfsense_web/components/editConnector/types.ts

@@ -1,59 +0,0 @@
-import * as z from "zod";
-
-// Types
-export interface GithubRepo {
-	id: number;
-	name: string;
-	full_name: string;
-	private: boolean;
-	url: string;
-	description: string | null;
-	last_updated: string | null;
-}
-
-export type EditMode = "viewing" | "editing_repos";
-
-// Schemas
-export const githubPatSchema = z.object({
-	github_pat: z
-		.string()
-		.min(20, { message: "GitHub Personal Access Token seems too short." })
-		.refine((pat) => pat.startsWith("ghp_") || pat.startsWith("github_pat_"), {
-			message: "GitHub PAT should start with 'ghp_' or 'github_pat_'",
-		}),
-});
-export type GithubPatFormValues = z.infer<typeof githubPatSchema>;
-
-export const editConnectorSchema = z.object({
-	name: z.string().min(3, { message: "Connector name must be at least 3 characters." }),
-	SLACK_BOT_TOKEN: z.string().optional(),
-	NOTION_INTEGRATION_TOKEN: z.string().optional(),
-	TAVILY_API_KEY: z.string().optional(),
-	SEARXNG_HOST: z.string().optional(),
-	SEARXNG_API_KEY: z.string().optional(),
-	SEARXNG_ENGINES: z.string().optional(),
-	SEARXNG_CATEGORIES: z.string().optional(),
-	SEARXNG_LANGUAGE: z.string().optional(),
-	SEARXNG_SAFESEARCH: z.string().optional(),
-	SEARXNG_VERIFY_SSL: z.string().optional(),
-	LINKUP_API_KEY: z.string().optional(),
-	DISCORD_BOT_TOKEN: z.string().optional(),
-	CONFLUENCE_BASE_URL: z.string().optional(),
-	CONFLUENCE_EMAIL: z.string().optional(),
-	CONFLUENCE_API_TOKEN: z.string().optional(),
-	BOOKSTACK_BASE_URL: z.string().optional(),
-	BOOKSTACK_TOKEN_ID: z.string().optional(),
-	BOOKSTACK_TOKEN_SECRET: z.string().optional(),
-	JIRA_BASE_URL: z.string().optional(),
-	JIRA_EMAIL: z.string().optional(),
-	JIRA_API_TOKEN: z.string().optional(),
-	GOOGLE_CALENDAR_CLIENT_ID: z.string().optional(),
-	GOOGLE_CALENDAR_CLIENT_SECRET: z.string().optional(),
-	GOOGLE_CALENDAR_REFRESH_TOKEN: z.string().optional(),
-	GOOGLE_CALENDAR_CALENDAR_IDS: z.string().optional(),
-	LUMA_API_KEY: z.string().optional(),
-	ELASTICSEARCH_API_KEY: z.string().optional(),
-	FIRECRAWL_API_KEY: z.string().optional(),
-	INITIAL_URLS: z.string().optional(),
-});
-export type EditConnectorFormValues = z.infer<typeof editConnectorSchema>;

surfsense_web/components/homepage/hero-section.tsx

@@ -4,8 +4,31 @@ import Image from "next/image";
 import Link from "next/link";
 import React, { useEffect, useRef, useState } from "react";
 import Balancer from "react-wrap-balancer";
+import { trackLoginAttempt } from "@/lib/posthog/events";
 import { cn } from "@/lib/utils";
 
+// Official Google "G" logo with brand colors
+const GoogleLogo = ({ className }: { className?: string }) => (
+	<svg className={className} viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">
+		<path
+			d="M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z"
+			fill="#4285F4"
+		/>
+		<path
+			d="M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z"
+			fill="#34A853"
+		/>
+		<path
+			d="M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z"
+			fill="#FBBC05"
+		/>
+		<path
+			d="M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z"
+			fill="#EA4335"
+		/>
+	</svg>
+);
+
 export function HeroSection() {
 	const containerRef = useRef<HTMLDivElement>(null);
 	const parentRef = useRef<HTMLDivElement>(null);
@@ -60,7 +83,7 @@ export function HeroSection() {
 			<h2 className="relative z-50 mx-auto mb-4 mt-4 max-w-4xl text-balance text-center text-3xl font-semibold tracking-tight text-gray-700 md:text-7xl dark:text-neutral-300">
 				<Balancer>
 					The AI Workspace{" "}
-					<div className="relative mx-auto inline-block w-max [filter:drop-shadow(0px_1px_3px_rgba(27,_37,_80,_0.14))]">
+					<div className="relative mx-auto inline-block w-max filter-[drop-shadow(0px_1px_3px_rgba(27,37,80,0.14))]">
 						<div className="text-black [text-shadow:0_0_rgba(0,0,0,0.1)] dark:text-white">
 							<span className="">Built for Teams</span>
 						</div>
@@ -73,12 +96,7 @@ export function HeroSection() {
 				your team.
 			</p>
 			<div className="mb-10 mt-8 flex w-full flex-col items-center justify-center gap-4 px-8 sm:flex-row md:mb-20">
-				<Link
+				<GetStartedButton />
-					href="/login"
-					className="group relative z-20 flex h-10 w-full cursor-pointer items-center justify-center space-x-2 rounded-lg bg-black p-px px-4 py-2 text-center text-sm font-semibold leading-6 text-white no-underline transition duration-200 sm:w-52 dark:bg-white dark:text-black"
-				>
-					Get Started
-				</Link>
 				{/* <Link
 					href="/pricing"
 					className="shadow-input group relative z-20 flex h-10 w-full cursor-pointer items-center justify-center space-x-2 rounded-lg bg-white p-px px-4 py-2 text-sm font-semibold leading-6 text-black no-underline transition duration-200 hover:-translate-y-0.5 sm:w-52 dark:bg-neutral-800 dark:text-white"
@@ -115,6 +133,65 @@ export function HeroSection() {
 	);
 }
 
+function GetStartedButton() {
+	const isGoogleAuth = process.env.NEXT_PUBLIC_FASTAPI_BACKEND_AUTH_TYPE === "GOOGLE";
+
+	const handleGoogleLogin = () => {
+		trackLoginAttempt("google");
+		window.location.href = `${process.env.NEXT_PUBLIC_FASTAPI_BACKEND_URL}/auth/google/authorize-redirect`;
+	};
+
+	if (isGoogleAuth) {
+		return (
+			<motion.button
+				type="button"
+				onClick={handleGoogleLogin}
+				whileHover="hover"
+				whileTap={{ scale: 0.98 }}
+				initial="idle"
+				className="group relative z-20 flex h-11 w-full cursor-pointer items-center justify-center gap-3 overflow-hidden rounded-xl bg-white px-6 py-2.5 text-sm font-semibold text-neutral-700 shadow-lg ring-1 ring-neutral-200/50 transition-shadow duration-300 hover:shadow-xl sm:w-56 dark:bg-neutral-900 dark:text-neutral-200 dark:ring-neutral-700/50"
+				variants={{
+					idle: { scale: 1, y: 0 },
+					hover: { scale: 1.02, y: -2 },
+				}}
+			>
+				{/* Animated gradient background on hover */}
+				<motion.div
+					className="absolute inset-0 bg-linear-to-r from-blue-50 via-green-50 to-yellow-50 dark:from-blue-950/30 dark:via-green-950/30 dark:to-yellow-950/30"
+					variants={{
+						idle: { opacity: 0 },
+						hover: { opacity: 1 },
+					}}
+					transition={{ duration: 0.3 }}
+				/>
+				{/* Google logo with subtle animation */}
+				<motion.div
+					className="relative"
+					variants={{
+						idle: { rotate: 0 },
+						hover: { rotate: [0, -8, 8, 0] },
+					}}
+					transition={{ duration: 0.4, ease: "easeInOut" }}
+				>
+					<GoogleLogo className="h-5 w-5" />
+				</motion.div>
+				<span className="relative">Continue with Google</span>
+			</motion.button>
+		);
+	}
+
+	return (
+		<motion.div whileHover={{ scale: 1.02, y: -2 }} whileTap={{ scale: 0.98 }}>
+			<Link
+				href="/login"
+				className="group relative z-20 flex h-11 w-full cursor-pointer items-center justify-center gap-2 rounded-xl bg-black px-6 py-2.5 text-sm font-semibold text-white shadow-lg transition-shadow duration-300 hover:shadow-xl sm:w-56 dark:bg-white dark:text-black"
+			>
+				Get Started
+			</Link>
+		</motion.div>
+	);
+}
+
 const BackgroundGrids = () => {
 	return (
 		<div className="pointer-events-none absolute inset-0 z-0 grid h-full w-full -rotate-45 transform select-none grid-cols-2 gap-10 md:grid-cols-4">
@@ -126,7 +203,7 @@ const BackgroundGrids = () => {
 				<GridLineVertical className="left-0" />
 				<GridLineVertical className="left-auto right-0" />
 			</div>
-			<div className="relative h-full w-full bg-gradient-to-b from-transparent via-neutral-100 to-transparent dark:via-neutral-800">
+			<div className="relative h-full w-full bg-linear-to-b from-transparent via-neutral-100 to-transparent dark:via-neutral-800">
 				<GridLineVertical className="left-0" />
 				<GridLineVertical className="left-auto right-0" />
 			</div>
@@ -237,7 +314,7 @@ const CollisionMechanism = React.forwardRef<
 					repeatDelay: beamOptions.repeatDelay || 0,
 				}}
 				className={cn(
-					"absolute left-96 top-20 m-auto h-14 w-px rounded-full bg-gradient-to-t from-orange-500 via-yellow-500 to-transparent",
+					"absolute left-96 top-20 m-auto h-14 w-px rounded-full bg-linear-to-t from-orange-500 via-yellow-500 to-transparent",
 					beamOptions.className
 				)}
 			/>
@@ -276,7 +353,7 @@ const Explosion = ({ ...props }: React.HTMLProps<HTMLDivElement>) => {
 				animate={{ opacity: [0, 1, 0] }}
 				exit={{ opacity: 0 }}
 				transition={{ duration: 1, ease: "easeOut" }}
-				className="absolute -inset-x-10 top-0 m-auto h-[4px] w-10 rounded-full bg-gradient-to-r from-transparent via-orange-500 to-transparent blur-sm"
+				className="absolute -inset-x-10 top-0 m-auto h-[4px] w-10 rounded-full bg-linear-to-r from-transparent via-orange-500 to-transparent blur-sm"
 			></motion.div>
 			{spans.map((span) => (
 				<motion.span
@@ -284,7 +361,7 @@ const Explosion = ({ ...props }: React.HTMLProps<HTMLDivElement>) => {
 					initial={{ x: span.initialX, y: span.initialY, opacity: 1 }}
 					animate={{ x: span.directionX, y: span.directionY, opacity: 0 }}
 					transition={{ duration: Math.random() * 1.5 + 0.5, ease: "easeOut" }}
-					className="absolute h-1 w-1 rounded-full bg-gradient-to-b from-orange-500 to-yellow-500"
+					className="absolute h-1 w-1 rounded-full bg-linear-to-b from-orange-500 to-yellow-500"
 				/>
 			))}
 		</div>
@@ -307,11 +384,11 @@ const GridLineVertical = ({ className, offset }: { className?: string; offset?:
 				} as React.CSSProperties
 			}
 			className={cn(
-				"absolute top-[calc(var(--offset)/2*-1)] h-[calc(100%+var(--offset))] w-[var(--width)]",
+				"absolute top-[calc(var(--offset)/2*-1)] h-[calc(100%+var(--offset))] w-(--width)",
 				"bg-[linear-gradient(to_bottom,var(--color),var(--color)_50%,transparent_0,transparent)]",
-				"[background-size:var(--width)_var(--height)]",
+				"bg-size-[var(--width)_var(--height)]",
-				"[mask:linear-gradient(to_top,var(--background)_var(--fade-stop),transparent),_linear-gradient(to_bottom,var(--background)_var(--fade-stop),transparent),_linear-gradient(black,black)]",
+				"[mask:linear-gradient(to_top,var(--background)_var(--fade-stop),transparent),linear-gradient(to_bottom,var(--background)_var(--fade-stop),transparent),linear-gradient(black,black)]",
-				"[mask-composite:exclude]",
+				"mask-exclude",
 				"z-30",
 				"dark:bg-[linear-gradient(to_bottom,var(--color-dark),var(--color-dark)_50%,transparent_0,transparent)]",
 				className

surfsense_web/components/homepage/navbar.tsx

@@ -54,7 +54,7 @@ const DesktopNav = ({ navItems, isScrolled }: any) => {
 					: "bg-transparent border border-transparent"
 			)}
 		>
-			<div className="flex flex-1 flex-row items-center gap-2">
+			<div className="flex flex-1 flex-row items-center gap-0.5">
 				<Logo className="h-8 w-8 rounded-md" />
 				<span className="dark:text-white/90 text-gray-800 text-lg font-bold">SurfSense</span>
 			</div>

surfsense_web/components/markdown-viewer.tsx

@@ -1,5 +1,5 @@
 import Image from "next/image";
-import { type StreamdownProps, Streamdown } from "streamdown";
+import { Streamdown, type StreamdownProps } from "streamdown";
 import { cn } from "@/lib/utils";
 
 interface MarkdownViewerProps {

surfsense_web/components/onboarding-tour.tsx

@@ -1,15 +1,15 @@
 "use client";
 
-import { useAtomValue } from "jotai";
 import { useQuery } from "@tanstack/react-query";
+import { useAtomValue } from "jotai";
 import { usePathname } from "next/navigation";
 import { useTheme } from "next-themes";
 import { useCallback, useEffect, useRef, useState } from "react";
 import { createPortal } from "react-dom";
-import { currentUserAtom } from "@/atoms/user/user-query.atoms";
-import { activeSearchSpaceIdAtom } from "@/atoms/search-spaces/search-space-query.atoms";
-import { documentTypeCountsAtom } from "@/atoms/documents/document-query.atoms";
 import { connectorsAtom } from "@/atoms/connectors/connector-query.atoms";
+import { documentTypeCountsAtom } from "@/atoms/documents/document-query.atoms";
+import { activeSearchSpaceIdAtom } from "@/atoms/search-spaces/search-space-query.atoms";
+import { currentUserAtom } from "@/atoms/user/user-query.atoms";
 import { fetchThreads } from "@/lib/chat/thread-persistence";
 
 interface TourStep {

surfsense_web/components/settings/llm-role-manager.tsx

@@ -45,7 +45,7 @@ const ROLE_DESCRIPTIONS = {
 	document_summary: {
 		icon: FileText,
 		title: "Document Summary LLM",
-		description: "Handles document summarization, long context analysis, and query reformulation",
+		description: "Handles document summarization",
 		color: "bg-purple-100 text-purple-800 border-purple-200",
 		examples: "Document analysis, podcasts, research synthesis",
 		characteristics: ["Large context window", "Deep reasoning", "Summarization"],
@@ -74,7 +74,6 @@ export function LLMRoleManager({ searchSpaceId }: LLMRoleManagerProps) {
 		data: preferences = {},
 		isFetching: preferencesLoading,
 		error: preferencesError,
-		refetch: refreshPreferences,
 	} = useAtomValue(llmPreferencesAtom);
 
 	const { mutateAsync: updatePreferences } = useAtomValue(updateLLMPreferencesMutationAtom);
@@ -187,19 +186,6 @@ export function LLMRoleManager({ searchSpaceId }: LLMRoleManagerProps) {
 						<span className="hidden sm:inline">Refresh Configs</span>
 						<span className="sm:hidden">Configs</span>
 					</Button>
-					<Button
-						variant="outline"
-						size="sm"
-						onClick={() => refreshPreferences()}
-						disabled={isLoading}
-						className="flex items-center gap-2 text-xs md:text-sm h-8 md:h-9"
-					>
-						<RefreshCw
-							className={`h-3 w-3 md:h-4 md:w-4 ${preferencesLoading ? "animate-spin" : ""}`}
-						/>
-						<span className="hidden sm:inline">Refresh Preferences</span>
-						<span className="sm:hidden">Prefs</span>
-					</Button>
 				</div>
 			</div>
 

surfsense_web/components/sidebar/app-sidebar.tsx

@@ -160,7 +160,7 @@ const defaultData = {
 	user: {
 		name: "Surf",
 		email: "m@example.com",
-		avatar: "/icon-128.png",
+		avatar: "/icon-128.svg",
 	},
 	navMain: [
 		{

surfsense_web/components/sources/types.ts

@@ -1,13 +0,0 @@
-export interface Connector {
-	id: string;
-	title: string;
-	description: string;
-	icon: React.ReactNode;
-	status: "available" | "coming-soon" | "connected";
-}
-
-export interface ConnectorCategory {
-	id: string;
-	title: string;
-	connectors: Connector[];
-}

surfsense_web/components/tool-ui/shared/action-buttons.tsx

@@ -1,41 +0,0 @@
-"use client";
-
-import type { FC } from "react";
-import { Button } from "@/components/ui/button";
-import type { Action, ActionsConfig } from "./schema";
-
-interface ActionButtonsProps {
-	actions?: Action[] | ActionsConfig;
-	onAction?: (actionId: string) => void;
-	disabled?: boolean;
-}
-
-export const ActionButtons: FC<ActionButtonsProps> = ({ actions, onAction, disabled }) => {
-	if (!actions) return null;
-
-	// Normalize actions to array format
-	const actionArray: Action[] = Array.isArray(actions)
-		? actions
-		: ([
-				actions.confirm && { ...actions.confirm, id: "confirm" },
-				actions.cancel && { ...actions.cancel, id: "cancel" },
-			].filter(Boolean) as Action[]);
-
-	if (actionArray.length === 0) return null;
-
-	return (
-		<div className="flex flex-wrap gap-2 pt-3">
-			{actionArray.map((action) => (
-				<Button
-					key={action.id}
-					variant={action.variant || "default"}
-					size="sm"
-					disabled={disabled || action.disabled}
-					onClick={() => onAction?.(action.id)}
-				>
-					{action.label}
-				</Button>
-			))}
-		</div>
-	);
-};

surfsense_web/components/tool-ui/shared/index.ts

@@ -1,2 +0,0 @@
-export * from "./action-buttons";
-export * from "./schema";

surfsense_web/components/tool-ui/shared/schema.ts

@@ -1,23 +0,0 @@
-import { z } from "zod";
-
-/**
- * Shared action schema for tool UI components
- */
-export const ActionSchema = z.object({
-	id: z.string(),
-	label: z.string(),
-	variant: z.enum(["default", "secondary", "destructive", "outline", "ghost", "link"]).optional(),
-	disabled: z.boolean().optional(),
-});
-
-export type Action = z.infer<typeof ActionSchema>;
-
-/**
- * Actions configuration schema
- */
-export const ActionsConfigSchema = z.object({
-	confirm: ActionSchema.optional(),
-	cancel: ActionSchema.optional(),
-});
-
-export type ActionsConfig = z.infer<typeof ActionsConfigSchema>;

surfsense_web/content/docs/connectors/airtable.mdx

@@ -3,4 +3,99 @@ title: Airtable
 description: Connect your Airtable bases to SurfSense
 ---
 
-# Documentation in progress
+# Airtable OAuth Integration Setup Guide
+
+This guide walks you through setting up an Airtable OAuth integration for SurfSense.
+
+## Step 1: Access Airtable OAuth Integrations
+
+1. Navigate to [airtable.com/create/oauth](https://airtable.com/create/oauth)
+2. In the **Builder Hub**, under **Developers**, click **"OAuth integrations"**
+3. Click **"Register an OAuth integration"**
+
+![Airtable OAuth Integrations Page](/docs/connectors/airtable/airtable-oauth-integrations.png)
+
+## Step 2: Register an Integration
+
+Fill in the basic integration details:
+
+| Field | Value |
+|-------|-------|
+| **Name** | `SurfSense` |
+| **OAuth redirect URL** | `http://localhost:8000/api/v1/auth/airtable/connector/callback` |
+
+Click **"Register integration"**
+
+![Register Integration Form](/docs/connectors/airtable/airtable-register-integration.png)
+
+## Step 3: Configure Scopes
+
+After registration, configure the required scopes (permissions) for your integration:
+
+### Record data and comments
+
+| Scope | Description |
+|-------|-------------|
+| ✅ `data.recordComments:read` | See comments in records |
+| ✅ `data.records:read` | See the data in records |
+
+### Base schema
+
+| Scope | Description |
+|-------|-------------|
+| ✅ `schema.bases:read` | See the structure of a base, like table names or field types |
+
+### User metadata
+
+| Scope | Description |
+|-------|-------------|
+| ✅ `user.email:read` | See the user's email address |
+
+![Scopes Configuration](/docs/connectors/airtable/airtable-scopes.png)
+
+## Step 4: Configure Support Information
+
+Scroll down to configure the support information and authorization preview:
+
+| Field | Value |
+|-------|-------|
+| **Support email** | Your support email address |
+| **Privacy policy URL** | Your privacy policy URL |
+| **Terms of service URL** | Your terms of service URL |
+
+The preview shows what users will see when authorizing SurfSense:
+- The data in your records
+- Comments in your records
+- The structure of your base, like table names or field types
+- Your email address
+
+Click **"Save changes"**
+
+![Support Information & Preview](/docs/connectors/airtable/airtable-support-info.png)
+
+## Step 5: Get OAuth Credentials
+
+After saving, you'll find your OAuth credentials on the integration page:
+
+1. Copy your **Client ID**
+2. Copy your **Client Secret**
+
+> ⚠️ Never share your client secret publicly.
+
+---
+
+## Running SurfSense with Airtable Connector
+
+Add the Airtable environment variables to your Docker run command:
+
+```bash
+docker run -d -p 3000:3000 -p 8000:8000 \
+  -v surfsense-data:/data \
+  # Airtable Connector
+  -e AIRTABLE_CLIENT_ID=your_airtable_client_id \
+  -e AIRTABLE_CLIENT_SECRET=your_airtable_client_secret \
+  -e AIRTABLE_REDIRECT_URI=http://localhost:8000/api/v1/auth/airtable/connector/callback \
+  --name surfsense \
+  --restart unless-stopped \
+  ghcr.io/modsetter/surfsense:latest
+```

surfsense_web/content/docs/connectors/clickup.mdx

@@ -3,4 +3,55 @@ title: ClickUp
 description: Connect your ClickUp workspace to SurfSense
 ---
 
-# Documentation in progress
+# ClickUp OAuth Integration Setup Guide
+
+This guide walks you through setting up a ClickUp OAuth integration for SurfSense.
+
+## Step 1: Access ClickUp API Settings
+
+1. Open your ClickUp workspace
+2. Navigate to **Settings** (gear icon) → **ClickUp API**
+3. You'll see the **ClickUp API Settings** page
+
+![ClickUp API Settings Page](/docs/connectors/clickup/clickup-api-settings.png)
+
+## Step 2: Create an App
+
+1. Click **"+ Create an App"** in the top-right corner
+2. Fill in the app details:
+
+| Field | Value |
+|-------|-------|
+| **App Name** | `SurfSense` |
+| **Redirect URL(s)** | `localhost:8000` |
+
+3. Click **"Save"** to create the app
+
+![App Created with Credentials](/docs/connectors/clickup/clickup-app-credentials.png)
+
+## Step 3: Get OAuth Credentials
+
+After creating the app, you'll see your credentials:
+
+1. Copy your **Client ID**
+2. Copy your **Client Secret** (click "Show" to reveal, or "Regenerate" if needed)
+
+> ⚠️ Never share your client secret publicly.
+
+---
+
+## Running SurfSense with ClickUp Connector
+
+Add the ClickUp environment variables to your Docker run command:
+
+```bash
+docker run -d -p 3000:3000 -p 8000:8000 \
+  -v surfsense-data:/data \
+  # ClickUp Connector
+  -e CLICKUP_CLIENT_ID=your_clickup_client_id \
+  -e CLICKUP_CLIENT_SECRET=your_clickup_client_secret \
+  -e CLICKUP_REDIRECT_URI=http://localhost:8000/api/v1/auth/clickup/connector/callback \
+  --name surfsense \
+  --restart unless-stopped \
+  ghcr.io/modsetter/surfsense:latest
+```

surfsense_web/content/docs/connectors/confluence.mdx

@@ -85,7 +85,7 @@ Select the **"Granular scopes"** tab and enable:
 1. In the left sidebar, click **"Settings"**
 2. Copy your **Client ID** and **Client Secret**
 
-> ⚠️ Never share your client secret publicly or include it in code repositories.
+> ⚠️ Never share your client secret publicly.
 
 ---
 

surfsense_web/content/docs/connectors/gmail.mdx

@@ -60,7 +60,7 @@ This guide walks you through setting up a Google OAuth 2.0 integration for SurfS
 1. After creating the OAuth client, you'll see a dialog with your credentials
 2. Copy your **Client ID** and **Client Secret**
 
-> ⚠️ Never share your client secret publicly or include it in code repositories.
+> ⚠️ Never share your client secret publicly.
 
 ![Google Developer Console Config](/docs/connectors/google/google_oauth_config.png)
 

surfsense_web/content/docs/connectors/google-calendar.mdx

@@ -59,7 +59,7 @@ This guide walks you through setting up a Google OAuth 2.0 integration for SurfS
 1. After creating the OAuth client, you'll see a dialog with your credentials
 2. Copy your **Client ID** and **Client Secret**
 
-> ⚠️ Never share your client secret publicly or include it in code repositories.
+> ⚠️ Never share your client secret publicly.
 
 ![Google Developer Console Config](/docs/connectors/google/google_oauth_config.png)
 

surfsense_web/content/docs/connectors/google-drive.mdx

@@ -60,7 +60,7 @@ This guide walks you through setting up a Google OAuth 2.0 integration for SurfS
 1. After creating the OAuth client, you'll see a dialog with your credentials
 2. Copy your **Client ID** and **Client Secret**
 
-> ⚠️ Never share your client secret publicly or include it in code repositories.
+> ⚠️ Never share your client secret publicly.
 
 ![Google Developer Console Config](/docs/connectors/google/google_oauth_config.png)
 

surfsense_web/content/docs/connectors/jira.mdx

@@ -72,7 +72,7 @@ This guide walks you through setting up an Atlassian OAuth 2.0 (3LO) integration
 1. In the left sidebar, click **"Settings"**
 2. Copy your **Client ID** and **Client Secret**
 
-> ⚠️ Never share your client secret publicly or include it in code repositories.
+> ⚠️ Never share your client secret publicly.
 
 ---