shutro-erp 0.2.1 → 0.3.1

package/dist/settings/web/ApiKeysPage.js

@@ -0,0 +1,70 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Settings › API keys (RFC 0017 §5.1): your keys — and the service accounts' for administrators —, a new key with its
+ * scopes and expiry, its secret shown once, revocation. The server decides what each key may do; scopes only narrow
+ * the user's own rights.
+ */
+import { Alert, ApiError, Button, Input, Label, Select, useKosh } from '../../ui/index.js';
+import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
+import { useId, useState } from 'react';
+import { useTranslation } from 'react-i18next';
+export function ApiKeysPage({ api }) {
+    const { t } = useTranslation('settings');
+    const { format } = useKosh();
+    const id = useId();
+    const queryClient = useQueryClient();
+    const keys = useQuery({
+        queryKey: ['settings', 'api-keys'],
+        queryFn: () => api.call('GET', '/api/v1/auth/api-keys'),
+    });
+    const scopes = useQuery({
+        queryKey: ['settings', 'scopes'],
+        queryFn: () => api.call('GET', '/api/v1/auth/scopes'),
+    });
+    const apps = [
+        ...new Set((scopes.data?.scopes ?? [])
+            .map((s) => s.scope)
+            .filter((s) => s.startsWith('read:'))
+            .map((s) => s.slice(5))),
+    ];
+    const [name, setName] = useState('');
+    const [days, setDays] = useState('365');
+    const [everything, setEverything] = useState(false);
+    const [levels, setLevels] = useState({});
+    const [secret, setSecret] = useState(null);
+    const chosen = everything
+        ? ['*']
+        : Object.entries(levels).flatMap(([app, level]) => level === 'none' ? [] : [`${level}:${app}`]);
+    const refresh = () => queryClient.invalidateQueries({ queryKey: ['settings', 'api-keys'] });
+    const create = useMutation({
+        mutationFn: () => api.call('POST', '/api/v1/auth/api-keys', {
+            name,
+            scopes: chosen,
+            expiresInDays: Number(days),
+        }),
+        onSuccess: async (key) => {
+            setSecret(key.token);
+            setName('');
+            setLevels({});
+            setEverything(false);
+            await refresh();
+        },
+    });
+    const revoke = useMutation({
+        mutationFn: (key) => api.call('POST', `/api/v1/auth/api-keys/${key}/revoke`),
+        onSuccess: refresh,
+    });
+    const error = create.error ?? revoke.error;
+    const message = (e) => (e instanceof ApiError ? e.message : String(e));
+    return (_jsxs("div", { className: "mx-auto grid max-w-4xl gap-6 p-4", children: [_jsx("h1", { className: "text-xl font-semibold", children: t('apiKeys.title') }), _jsx("p", { className: "text-sm text-muted-foreground", children: t('apiKeys.intro') }), error === null ? null : _jsx(Alert, { tone: "danger", children: message(error) }), secret === null ? null : (_jsx(Alert, { tone: "info", children: _jsxs("div", { className: "grid gap-2", children: [_jsx("p", { children: t('apiKeys.secretOnce') }), _jsx("code", { className: "break-all rounded bg-muted px-2 py-1 font-mono text-sm", children: secret }), _jsxs("div", { className: "flex gap-2", children: [_jsx(Button, { variant: "secondary", onClick: () => void navigator.clipboard?.writeText(secret), children: t('apiKeys.copy') }), _jsx(Button, { variant: "secondary", onClick: () => setSecret(null), children: t('apiKeys.done') })] })] }) })), _jsxs("section", { className: "grid gap-3 rounded-lg border p-4", "aria-labelledby": `${id}-new`, children: [_jsx("h2", { id: `${id}-new`, className: "font-medium", children: t('apiKeys.new') }), _jsxs("div", { className: "flex flex-wrap items-end gap-3", children: [_jsxs("div", { className: "grid gap-1", children: [_jsx(Label, { htmlFor: `${id}-name`, children: t('apiKeys.name') }), _jsx(Input, { id: `${id}-name`, className: "w-64", value: name, onChange: (e) => setName(e.target.value) })] }), _jsx(Select, { id: `${id}-days`, label: t('apiKeys.expires'), className: "w-40", value: days, options: ['30', '90', '365', '730'].map((d) => ({
+                                    value: d,
+                                    label: t('apiKeys.days', { count: Number(d) }),
+                                })), onChange: setDays })] }), _jsxs("label", { className: "flex items-center gap-2 text-sm", children: [_jsx("input", { type: "checkbox", checked: everything, onChange: (e) => setEverything(e.target.checked) }), t('apiKeys.everything')] }), everything ? null : (_jsxs("fieldset", { className: "grid gap-2 sm:grid-cols-2", children: [_jsx("legend", { className: "mb-1 text-sm text-muted-foreground", children: t('apiKeys.perApp') }), apps.map((app) => (_jsx(Select, { id: `${id}-app-${app}`, label: app, value: levels[app] ?? 'none', options: ['none', 'read', 'write'].map((l) => ({
+                                    value: l,
+                                    label: t(`apiKeys.levels.${l}`),
+                                })), onChange: (v) => setLevels({ ...levels, [app]: (v ?? 'none') }) }, app)))] })), _jsx("div", { children: _jsx(Button, { variant: "primary", disabled: name.trim() === '' || chosen.length === 0, busy: create.isPending, onClick: () => create.mutate(), children: t('apiKeys.create') }) })] }), (keys.data?.keys ?? []).length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: t('apiKeys.none') })) : (_jsx("div", { className: "overflow-x-auto", children: _jsxs("table", { className: "w-full text-sm", children: [_jsx("thead", { className: "bg-muted", children: _jsxs("tr", { children: [['name', 'user', 'key', 'scopes', 'expires', 'lastUsed', 'status'].map((c) => (_jsx("th", { className: "px-2 py-1 text-start", children: t(`apiKeys.columns.${c}`) }, c))), _jsx("th", { className: "px-2 py-1", children: _jsx("span", { className: "sr-only", children: t('apiKeys.revoke') }) })] }) }), _jsx("tbody", { children: (keys.data?.keys ?? []).map((k) => (_jsxs("tr", { className: "border-b", children: [_jsx("td", { className: "px-2 py-1", children: k.name }), _jsx("td", { className: "px-2 py-1", children: k.userName }), _jsxs("td", { className: "px-2 py-1 font-mono text-xs", children: [k.prefix, "\u2026"] }), _jsx("td", { className: "px-2 py-1", children: k.scopes.join(' ') }), _jsx("td", { className: "px-2 py-1", children: format.datetime(k.expiresAt) }), _jsx("td", { className: "px-2 py-1", children: k.lastUsedAt === null ? '—' : format.datetime(k.lastUsedAt) }), _jsx("td", { className: "px-2 py-1", children: k.revoked
+                                            ? t('apiKeys.revoked')
+                                            : new Date(k.expiresAt).getTime() < Date.now()
+                                                ? t('apiKeys.expired')
+                                                : t('apiKeys.active') }), _jsx("td", { className: "px-2 py-1 text-end", children: k.revoked ? null : (_jsx(Button, { variant: "secondary", "aria-label": t('apiKeys.revokeKey', { name: k.name }), busy: revoke.isPending && revoke.variables === k.id, onClick: () => revoke.mutate(k.id), children: t('apiKeys.revoke') })) })] }, k.id))) })] }) }))] }));
+}

package/dist/settings/web/index.d.ts

@@ -6,6 +6,7 @@
 import { type Registry } from '../../ui/index.js';
 import type { i18n } from 'i18next';
 import { messages } from './messages.js';
+export { ApiKeysPage } from './ApiKeysPage.js';
 export { AppsPage } from './AppsPage.js';
 /** Registers the Apps page (and its messages in `i18n`, when given). */
 export declare function registerSettingsWeb(registry: Registry, i18n?: i18n): Registry;

package/dist/settings/web/index.js

@@ -4,12 +4,16 @@
  * client action `settings.action_apps`) and its messages.
  */
 import { addMessages } from '../../ui/index.js';
+import { ApiKeysPage } from './ApiKeysPage.js';
 import { AppsPage } from './AppsPage.js';
 import { messages } from './messages.js';
+export { ApiKeysPage } from './ApiKeysPage.js';
 export { AppsPage } from './AppsPage.js';
 /** Registers the Apps page (and its messages in `i18n`, when given). */
 export function registerSettingsWeb(registry, i18n) {
     registry.registerPage('settings.Apps', AppsPage);
+    // Every signed-in user's own keys (RFC 0017 §5.1): in the user menu, not in the Settings app.
+    registry.registerUserPage('settings.ApiKeys', ApiKeysPage, { label: 'settings:apiKeys.title' });
     if (i18n !== undefined)
         addMessages(i18n, 'settings', messages);
     return registry;

package/dist/settings/web/messages.js

@@ -1,6 +1,37 @@
 /** Messages of the Settings app (namespace `settings`). */
 export const messages = {
     en: {
+        apiKeys: {
+            title: 'API keys',
+            intro: 'Keys let scripts and other systems call the API as you, within the scopes you give them. Your own rights still apply; a key can never do more than you.',
+            new: 'New key',
+            name: 'Name',
+            expires: 'Expires in',
+            days_one: '{{count}} day',
+            days_other: '{{count}} days',
+            everything: 'Everything I may do (*)',
+            perApp: 'Or per app:',
+            levels: { none: 'No access', read: 'Read', write: 'Read and change' },
+            create: 'Create key',
+            secretOnce: 'Copy the key now: it is shown only once.',
+            copy: 'Copy',
+            done: 'Done',
+            none: 'No API keys yet.',
+            columns: {
+                name: 'Name',
+                user: 'User',
+                key: 'Key',
+                scopes: 'Scopes',
+                expires: 'Expires',
+                lastUsed: 'Last used',
+                status: 'Status',
+            },
+            active: 'Active',
+            revoked: 'Revoked',
+            expired: 'Expired',
+            revoke: 'Revoke',
+            revokeKey: 'Revoke {{name}}',
+        },
         apps: 'Apps',
         appsIntro: 'Install the apps your business needs. Disabling keeps the data, so nothing is lost.',
         search: 'Search apps',
@@ -56,6 +87,37 @@ export const messages = {
         version: 'Version {{version}}',
     },
     bn: {
+        apiKeys: {
+            title: 'এপিআই কী',
+            intro: 'কী দিয়ে স্ক্রিপ্ট ও অন্য সিস্টেম আপনার হয়ে এপিআই ব্যবহার করে, আপনার দেওয়া পরিসরের মধ্যে। আপনার নিজের অধিকারই প্রযোজ্য; কোনো কী আপনার চেয়ে বেশি করতে পারে না।',
+            new: 'নতুন কী',
+            name: 'নাম',
+            expires: 'মেয়াদ',
+            days_one: '{{count}} দিন',
+            days_other: '{{count}} দিন',
+            everything: 'আমি যা করতে পারি সবকিছু (*)',
+            perApp: 'অথবা প্রতিটি অ্যাপের জন্য:',
+            levels: { none: 'প্রবেশাধিকার নেই', read: 'পড়া', write: 'পড়া ও পরিবর্তন' },
+            create: 'কী তৈরি করুন',
+            secretOnce: 'কী-টি এখনই কপি করুন: এটি একবারই দেখানো হয়।',
+            copy: 'কপি',
+            done: 'সম্পন্ন',
+            none: 'এখনো কোনো এপিআই কী নেই।',
+            columns: {
+                name: 'নাম',
+                user: 'ব্যবহারকারী',
+                key: 'কী',
+                scopes: 'পরিসর',
+                expires: 'মেয়াদ শেষ',
+                lastUsed: 'শেষ ব্যবহার',
+                status: 'অবস্থা',
+            },
+            active: 'সক্রিয়',
+            revoked: 'বাতিল',
+            expired: 'মেয়াদোত্তীর্ণ',
+            revoke: 'বাতিল করুন',
+            revokeKey: '{{name}} বাতিল করুন',
+        },
         apps: 'অ্যাপস',
         appsIntro: 'আপনার ব্যবসার প্রয়োজনীয় অ্যাপগুলো ইনস্টল করুন। নিষ্ক্রিয় করলে ডেটা থেকে যায়, কিছুই হারায় না।',
         search: 'অ্যাপ খুঁজুন',

package/dist/storage/routes.js

@@ -25,7 +25,7 @@ export function storageOf(app) {
     if (storage === undefined) {
         const configured = storageFromEnv();
         if (configured === null)
-            throw new HttpProblem(503, 'storage-unavailable', 'File storage is not configured', 'No object store is configured for attachments.', 'Set KOSH_STORAGE_DIR, or S3_ENDPOINT, S3_BUCKET, S3_ACCESS_KEY and S3_SECRET_KEY.');
+            throw new HttpProblem(503, 'storage-unavailable', 'File storage is not configured', 'No object store is configured for attachments.', 'Set SHUTRO_ERP_STORAGE_DIR, or S3_ENDPOINT, S3_BUCKET, S3_ACCESS_KEY and S3_SECRET_KEY.');
         storage = configured;
         stores.set(app, storage);
     }

package/dist/studio/build.js

@@ -42,7 +42,7 @@ export async function studioModules(cwd) {
 export async function runStudio(argv, write, cwd) {
     const [action, ...folders] = argv;
     if (action !== 'build') {
-        write('Usage: kosh studio build [folder …]   (default: every src/modules/*/studio.json)\n');
+        write('Usage: shutro-erp studio build [folder …]   (default: every src/modules/*/studio.json)\n');
         return 2;
     }
     const dirs = folders.length > 0 ? folders.map((f) => resolve(cwd, f)) : await studioModules(cwd);

package/dist/studio/generate.js

@@ -14,7 +14,7 @@ export class StudioSpecError extends Error {
         this.name = 'StudioSpecError';
     }
 }
-const HEADER = '// Generated by Kosh Studio from studio.json: do not edit (edit studio.json, then `kosh studio build`).';
+const HEADER = '// Generated by Shutro ERP Studio from studio.json: do not edit (edit studio.json, then `shutro-erp studio build`).';
 /** A TypeScript literal with single quotes and stable key order (as given). */
 export function lit(value, indent = '') {
     if (value === null || value === undefined)
@@ -181,7 +181,7 @@ export function generateModule(spec, options = {}) {
         HEADER,
         '/**',
         ` * ${spec.label}${spec.description === undefined ? '' : `: ${spec.description}`}`,
-        ' * A Kosh Studio module (RFC 0012): its fields, models, view changes, menus, approvals and rules, from studio.json.',
+        ' * A Shutro ERP Studio module (RFC 0012): its fields, models, view changes, menus, approvals and rules, from studio.json.',
         ' */',
         `import { base } from '${im.base}';`,
         ...deps.map((d) => `import { ${camel(d)} } from '${im.module(d)}';`),
@@ -222,8 +222,8 @@ export function generateModule(spec, options = {}) {
     const readme = [
         `# ${spec.label} (\`${name}\` ${spec.version})`,
         '',
-        'A Kosh Studio module (RFC 0012): `studio.json` is its source; `index.ts` and `models.ts` are generated from it',
-        '(`kosh studio build`). To take it over as code, delete `studio.json` and edit the TypeScript.',
+        'A Shutro ERP Studio module (RFC 0012): `studio.json` is its source; `index.ts` and `models.ts` are generated from it',
+        '(`shutro-erp studio build`). To take it over as code, delete `studio.json` and edit the TypeScript.',
         '',
         ...(spec.description === undefined ? [] : [spec.description, '']),
         ...((spec.fields ?? []).length === 0

package/dist/studio/module.js

@@ -368,7 +368,7 @@ export function registerStudioRoutes(context, options = {}) {
         await guard(request);
         const pullRequest = request.body?.pullRequest === true;
         if (pullRequest && git === null)
-            throw new HttpProblem(409, 'studio-git-unconfigured', 'No repository for proposals', 'Set KOSH_STUDIO_GIT_URL and KOSH_STUDIO_GIT_TOKEN to open pull requests; download the patch meanwhile.');
+            throw new HttpProblem(409, 'studio-git-unconfigured', 'No repository for proposals', 'Set SHUTRO_ERP_STUDIO_GIT_URL and SHUTRO_ERP_STUDIO_GIT_TOKEN to open pull requests; download the patch meanwhile.');
         const { review, files, modulesTs } = await prepare(specOf(request.body));
         const patch = review.diff.map((d) => d.diff).join('');
         if (!pullRequest || git === null)
@@ -384,7 +384,7 @@ export function registerStudioRoutes(context, options = {}) {
         });
         const command = review.change === 'install' ? 'install' : 'upgrade';
         const body = [
-            `A Kosh Studio change: **${review.spec.label}** (\`${name}\` ${review.spec.version}).`,
+            `A Shutro ERP Studio change: **${review.spec.label}** (\`${name}\` ${review.spec.version}).`,
             '',
             review.change === 'install'
                 ? `Installs the module \`${name}\`.`
@@ -393,7 +393,7 @@ export function registerStudioRoutes(context, options = {}) {
             'After deploying:',
             '',
             '```sh',
-            `npx kosh apps ${command} ${name}`,
+            `npx shutro-erp apps ${command} ${name}`,
             '```',
             '',
             ...(review.statements.length === 0
@@ -417,14 +417,14 @@ export function registerStudioRoutes(context, options = {}) {
         }
         catch (error) {
             if (error instanceof GitProposalError)
-                throw new HttpProblem(502, 'studio-git-failed', 'The repository refused the proposal', error.message, 'Check KOSH_STUDIO_GIT_URL, the token and its rights (contents and pull requests); the patch can be downloaded meanwhile.');
+                throw new HttpProblem(502, 'studio-git-failed', 'The repository refused the proposal', error.message, 'Check SHUTRO_ERP_STUDIO_GIT_URL, the token and its rights (contents and pull requests); the patch can be downloaded meanwhile.');
             throw error;
         }
     });
     app.post('/api/v1/studio/apply', async (request) => {
         const uid = await guard(request);
         if (mode !== 'write')
-            throw new HttpProblem(409, 'studio-propose-only', 'Studio proposes changes here', 'This server runs Studio in propose mode: it never writes code. Download the patch and deploy it.', 'KOSH_STUDIO=write is for development and single-server installations.');
+            throw new HttpProblem(409, 'studio-propose-only', 'Studio proposes changes here', 'This server runs Studio in propose mode: it never writes code. Download the patch and deploy it.', 'SHUTRO_ERP_STUDIO=write is for development and single-server installations.');
         const planId = request.body?.planId;
         if (typeof planId !== 'string')
             return invalid('planId (from /preview) is required.');

package/dist/studio/web/messages.js

@@ -35,7 +35,7 @@ export const messages = {
         openPullRequest: 'Open a pull request',
         openMergeRequest: 'Open a merge request',
         proposalOpened: 'Opened on {{repository}}:',
-        proposeNote: 'This server proposes changes: download the patch, commit it, and deploy it (then kosh apps upgrade).',
+        proposeNote: 'This server proposes changes: download the patch, commit it, and deploy it (then shutro-erp apps upgrade).',
         modulesTitle: 'Studio modules',
         modulesIntro: 'Each Studio change is saved in a module of your project: reviewed as code, versioned, and upgraded like any app.',
         modeWrite: 'Write mode: changes are applied on this server.',
@@ -109,7 +109,7 @@ export const messages = {
         openPullRequest: 'পুল রিকোয়েস্ট খুলুন',
         openMergeRequest: 'মার্জ রিকোয়েস্ট খুলুন',
         proposalOpened: '{{repository}}-এ খোলা হয়েছে:',
-        proposeNote: 'এই সার্ভার পরিবর্তন প্রস্তাব করে: প্যাচ ডাউনলোড করে কমিট ও ডিপ্লয় করুন (তারপর kosh apps upgrade)।',
+        proposeNote: 'এই সার্ভার পরিবর্তন প্রস্তাব করে: প্যাচ ডাউনলোড করে কমিট ও ডিপ্লয় করুন (তারপর shutro-erp apps upgrade)।',
         modulesTitle: 'স্টুডিও মডিউল',
         modulesIntro: 'স্টুডিওর প্রতিটি পরিবর্তন আপনার প্রজেক্টের একটি মডিউলে সংরক্ষিত হয়: কোডের মতো পর্যালোচিত, সংস্করণযুক্ত এবং যেকোনো অ্যাপের মতো আপগ্রেডযোগ্য।',
         modeWrite: 'রাইট মোড: পরিবর্তন এই সার্ভারে প্রয়োগ হয়।',

package/dist/ui/api.d.ts

@@ -65,6 +65,8 @@ export interface CurrentUser {
     readonly name: string;
     readonly company: number | null;
     readonly companies: readonly number[];
+    /** Number grouping per company (RFC 0016); older servers send none. */
+    readonly groupings?: Readonly<Record<string, 'international' | 'lakh'>>;
     readonly twoFactorEnabled: boolean;
     readonly administrator: boolean;
     readonly administratorNeedsSecondFactor: boolean;

package/dist/ui/app.js

@@ -97,7 +97,7 @@ const ServicesContext = createContext(null);
 function useServices() {
     const value = useContext(ServicesContext);
     if (value === null)
-        throw new Error('Kosh routes render inside <KoshApp>.');
+        throw new Error('Shutro ERP routes render inside <KoshApp>.');
     return value;
 }
 // ------------------------------------------------------------------------------------------------- shell
@@ -177,11 +177,11 @@ function Shell() {
     const user = me.data;
     const current = company ?? user.company ?? user.companies[0] ?? 0;
     const app = apps.data?.find((a) => a.code === params.app);
-    return (_jsx(KoshProvider, { api: api, registry: registry, uid: user.id, companyId: current, lang: lang, tz: Intl.DateTimeFormat().resolvedOptions().timeZone, ...(realtime === undefined ? {} : { realtime }), ...(offline === undefined ? {} : { offline }), children: _jsx(ToastProvider, { children: _jsxs(DesignProvider, { children: [_jsx(OfflineAgent, { uid: user.id }), _jsxs(PaletteContext.Provider, { value: openPalette, children: [_jsx("a", { href: "#content", className: "sr-only focus:not-sr-only focus:absolute focus:start-2 focus:top-2 focus:z-50 focus:rounded focus:bg-surface focus:px-3 focus:py-2", children: t('shell.skip') }), _jsx("header", { className: "sticky top-0 z-30 border-b bg-surface", children: _jsxs("div", { className: "flex h-12 items-center gap-2 px-3", children: [_jsxs(Menu, { children: [_jsx(MenuTrigger, { asChild: true, children: _jsx(Button, { variant: "ghost", size: "icon", "aria-label": t('shell.apps'), children: _jsx(Grid3x3, { "aria-hidden": true }) }) }), _jsxs(MenuContent, { align: "start", children: [_jsx(MenuItem, { onSelect: () => void navigate({ to: '/' }), children: t('shell.apps') }), _jsx(MenuSeparator, {}), (apps.data ?? []).map((a) => (_jsx(MenuItem, { onSelect: () => void navigate({ to: '/$app', params: { app: a.code } }), children: a.label }, a.code)))] })] }), _jsx(Link, { to: "/", className: "font-semibold", children: app?.label ?? t('app.name') }), _jsx("nav", { "aria-label": t('shell.menu'), className: "ms-2 flex-1", children: params.app === undefined ? null : (_jsx(MenuLinks, { app: params.app, menus: menus.data ?? [] })) }), _jsxs(Button, { variant: "secondary", size: "sm", className: "hidden h-8 w-56 justify-between text-muted-foreground sm:flex", onClick: () => setPalette(true), "aria-keyshortcuts": "Control+K Meta+K", children: [_jsxs("span", { className: "flex items-center gap-2", children: [_jsx(Search, { className: "size-4", "aria-hidden": true }), t('palette.button')] }), _jsx("kbd", { className: "rounded border bg-surface px-1.5 text-xs", children: "Ctrl K" })] }), _jsx(Button, { variant: "ghost", size: "icon", className: "sm:hidden", "aria-label": t('palette.button'), onClick: () => setPalette(true), children: _jsx(Search, { "aria-hidden": true }) }), _jsx(OfflineMenu, {}), registry.headerItems().map(({ name, component: Item }) => (_jsx(Item, { api: api }, name))), _jsx(CompanySwitcher, { me: user, company: current, onChange: (id) => {
+    return (_jsx(KoshProvider, { api: api, registry: registry, uid: user.id, companyId: current, lang: lang, tz: Intl.DateTimeFormat().resolvedOptions().timeZone, grouping: user.groupings?.[String(current)] ?? 'international', ...(realtime === undefined ? {} : { realtime }), ...(offline === undefined ? {} : { offline }), children: _jsx(ToastProvider, { children: _jsxs(DesignProvider, { children: [_jsx(OfflineAgent, { uid: user.id }), _jsxs(PaletteContext.Provider, { value: openPalette, children: [_jsx("a", { href: "#content", className: "sr-only focus:not-sr-only focus:absolute focus:start-2 focus:top-2 focus:z-50 focus:rounded focus:bg-surface focus:px-3 focus:py-2", children: t('shell.skip') }), _jsx("header", { className: "sticky top-0 z-30 border-b bg-surface", children: _jsxs("div", { className: "flex h-12 items-center gap-2 px-3", children: [_jsxs(Menu, { children: [_jsx(MenuTrigger, { asChild: true, children: _jsx(Button, { variant: "ghost", size: "icon", "aria-label": t('shell.apps'), children: _jsx(Grid3x3, { "aria-hidden": true }) }) }), _jsxs(MenuContent, { align: "start", children: [_jsx(MenuItem, { onSelect: () => void navigate({ to: '/' }), children: t('shell.apps') }), _jsx(MenuSeparator, {}), (apps.data ?? []).map((a) => (_jsx(MenuItem, { onSelect: () => void navigate({ to: '/$app', params: { app: a.code } }), children: a.label }, a.code)))] })] }), _jsx(Link, { to: "/", className: "font-semibold", children: app?.label ?? t('app.name') }), _jsx("nav", { "aria-label": t('shell.menu'), className: "ms-2 flex-1", children: params.app === undefined ? null : (_jsx(MenuLinks, { app: params.app, menus: menus.data ?? [] })) }), _jsxs(Button, { variant: "secondary", size: "sm", className: "hidden h-8 w-56 justify-between text-muted-foreground sm:flex", onClick: () => setPalette(true), "aria-keyshortcuts": "Control+K Meta+K", children: [_jsxs("span", { className: "flex items-center gap-2", children: [_jsx(Search, { className: "size-4", "aria-hidden": true }), t('palette.button')] }), _jsx("kbd", { className: "rounded border bg-surface px-1.5 text-xs", children: "Ctrl K" })] }), _jsx(Button, { variant: "ghost", size: "icon", className: "sm:hidden", "aria-label": t('palette.button'), onClick: () => setPalette(true), children: _jsx(Search, { "aria-hidden": true }) }), _jsx(OfflineMenu, {}), registry.headerItems().map(({ name, component: Item }) => (_jsx(Item, { api: api }, name))), _jsx(CompanySwitcher, { me: user, company: current, onChange: (id) => {
                                                 api.setCompany(id);
                                                 setCompany(id);
                                                 void queryClient.invalidateQueries();
-                                            } }), _jsx(LanguageMenu, {}), _jsx(ThemeMenu, {}), _jsxs(Menu, { children: [_jsx(MenuTrigger, { asChild: true, children: _jsx(Button, { variant: "ghost", size: "icon", "aria-label": user.name, children: _jsx(UserRound, { "aria-hidden": true }) }) }), _jsxs(MenuContent, { children: [_jsx(MenuLabel, { children: user.name }), _jsxs(MenuItem, { onSelect: async () => {
+                                            } }), _jsx(LanguageMenu, {}), _jsx(ThemeMenu, {}), _jsxs(Menu, { children: [_jsx(MenuTrigger, { asChild: true, children: _jsx(Button, { variant: "ghost", size: "icon", "aria-label": user.name, children: _jsx(UserRound, { "aria-hidden": true }) }) }), _jsxs(MenuContent, { children: [_jsx(MenuLabel, { children: user.name }), registry.userPages().map((p) => (_jsx(MenuItem, { onSelect: () => void navigate({ to: '/me/$page', params: { page: p.name } }), children: t(p.label) }, p.name))), _jsxs(MenuItem, { onSelect: async () => {
                                                                 await api.logout();
                                                                 queryClient.clear();
                                                                 await dropOfflineCache(persister);
@@ -451,9 +451,32 @@ const openRoute = createRoute({
     path: '/open/$model/$id',
     component: OpenRecordPage,
 });
+/** A personal page from the user menu (`registry.registerUserPage`), outside any app. */
+function UserPage() {
+    const { page } = useParams({ strict: false });
+    const { api, registry } = useServices();
+    const { t } = useTranslation();
+    const entry = registry.userPages().find((p) => p.name === page);
+    if (entry === undefined)
+        return _jsx("p", { className: "p-4 text-sm", children: t('notFound') });
+    const Page = entry.component;
+    return _jsx(Page, { api: api, label: t(entry.label) });
+}
+const userPageRoute = createRoute({
+    getParentRoute: () => shellRoute,
+    path: '/me/$page',
+    component: UserPage,
+});
 const routeTree = rootRoute.addChildren([
     loginRoute,
-    shellRoute.addChildren([indexRoute, openRoute, appRoute, actionRoute, recordRoute]),
+    shellRoute.addChildren([
+        indexRoute,
+        openRoute,
+        userPageRoute,
+        appRoute,
+        actionRoute,
+        recordRoute,
+    ]),
 ]);
 const LANG_KEY = 'kosh.lang';
 function initialLanguage() {

package/dist/ui/context.d.ts

@@ -26,13 +26,15 @@ export interface KoshContextValue {
 export declare function useKosh(): KoshContextValue;
 /** Applies the theme to `<html>` (the `dark` class) and follows the system when asked to. */
 declare function useTheme(): [ThemeChoice, (t: ThemeChoice) => void];
-export declare function KoshProvider({ api, registry, uid, companyId, lang, tz, realtime, offline, children, }: {
+export declare function KoshProvider({ api, registry, uid, companyId, lang, tz, grouping, realtime, offline, children, }: {
     readonly api: KoshApi;
     readonly registry: Registry;
     readonly uid: number;
     readonly companyId: number;
     readonly lang: string;
     readonly tz: string;
+    /** The company's number grouping (RFC 0016). */
+    readonly grouping?: 'international' | 'lakh';
     readonly realtime?: RealtimeClient;
     readonly offline?: OfflineQueue;
     readonly children: ReactNode;

package/dist/ui/context.js

@@ -47,9 +47,9 @@ function useTheme() {
     }, [theme]);
     return [theme, setTheme];
 }
-export function KoshProvider({ api, registry, uid, companyId, lang, tz, realtime, offline, children, }) {
+export function KoshProvider({ api, registry, uid, companyId, lang, tz, grouping, realtime, offline, children, }) {
     const [theme, setTheme] = useTheme();
-    const format = useMemo(() => createFormatter(lang, tz), [lang, tz]);
+    const format = useMemo(() => createFormatter(lang, tz, grouping === undefined ? {} : { grouping }), [lang, tz, grouping]);
     const value = useMemo(() => ({
         api,
         registry,

package/dist/ui/i18n/messages.js

@@ -4,7 +4,7 @@
  */
 export const en = {
     app: {
-        name: 'Kosh',
+        name: 'Shutro ERP',
         loading: 'Loading…',
         error: 'Something went wrong.',
         retry: 'Retry',
@@ -169,7 +169,7 @@ export const en = {
         synced_other: '{{count}} changes saved on this device were sent',
         needsAttention_one: '{{count}} change could not be sent. Open the cloud in the header.',
         needsAttention_other: '{{count}} changes could not be sent. Open the cloud in the header.',
-        newVersion: 'A new version of Kosh is ready.',
+        newVersion: 'A new version of Shutro ERP is ready.',
         reload: 'Reload',
     },
     home: {

package/dist/ui/index.d.ts

@@ -11,7 +11,7 @@ export { ApiError, type ApiOptions, type AppEntry, type CurrentUser, createKoshA
 export { KoshApp, type KoshAppProps } from './app.js';
 export { AppIcon } from './components/AppIcon.js';
 export * from './components/primitives.js';
-export { type KoshContextValue, KoshProvider, type ThemeChoice, useKosh } from './context.js';
+export { type KoshContextValue, KoshProvider, type ThemeChoice, useKosh, useTheme, } from './context.js';
 export { type DesignContextValue, DesignProvider, type DesignSpot, useDesign, } from './design.js';
 export { addMessages, createI18n, directionOf, NAMESPACE } from './i18n/index.js';
 export { LANGUAGES } from './i18n/messages.js';

package/dist/ui/index.js

@@ -15,7 +15,7 @@ export { ApiError, createKoshApi, NetworkError, } from './api.js';
 export { KoshApp } from './app.js';
 export { AppIcon } from './components/AppIcon.js';
 export * from './components/primitives.js';
-export { KoshProvider, useKosh } from './context.js';
+export { KoshProvider, useKosh, useTheme, } from './context.js';
 export { DesignProvider, useDesign, } from './design.js';
 export { addMessages, createI18n, directionOf, NAMESPACE } from './i18n/index.js';
 export { LANGUAGES } from './i18n/messages.js';

package/dist/ui/lib/format.d.ts

@@ -14,4 +14,6 @@ export interface Formatter {
 }
 export declare function createFormatter(lang: string, tz: string, options?: {
     readonly nativeDigits?: boolean;
+    /** `lakh`: 12,34,567 (RFC 0016). Bangla groups so already; English takes the Indian English pattern. */
+    readonly grouping?: 'international' | 'lakh';
 }): Formatter;

package/dist/ui/lib/format.js

@@ -11,7 +11,9 @@ export function createFormatter(lang, tz, options = {}) {
     // Bangla defaults to Bengali digits in ICU; RFC 0007 makes them a choice (Latin digits unless asked).
     const locale = base.startsWith('bn')
         ? `${base}-u-nu-${options.nativeDigits === true ? 'beng' : 'latn'}`
-        : base;
+        : options.grouping === 'lakh' && base.startsWith('en')
+            ? 'en-IN'
+            : base;
     const integer = new Intl.NumberFormat(locale, { maximumFractionDigits: 0 });
     const digits = new Intl.NumberFormat(locale, { useGrouping: false });
     const separator = new Intl.NumberFormat(locale).formatToParts(1.5).find((p) => p.type === 'decimal')?.value ??

package/dist/ui/pwa/worker.js

@@ -7,7 +7,7 @@
  */
 /** The worker's JavaScript. */
 export function serviceWorkerSource(config) {
-    return `/* Kosh service worker ${config.version}: generated by shutro-erp/ui/vite, do not edit. */
+    return `/* Shutro ERP service worker ${config.version}: generated by shutro-erp/ui/vite, do not edit. */
 const VERSION = ${JSON.stringify(config.version)};
 const ASSETS = ${JSON.stringify(config.assets)};
 const CACHE = 'kosh-' + VERSION;
@@ -57,7 +57,7 @@ self.addEventListener('fetch', (event) => {
 });
 
 self.addEventListener('push', (event) => {
-  let data = { title: 'Kosh', body: '', url: '/', id: 0 };
+  let data = { title: 'Shutro ERP', body: '', url: '/', id: 0 };
   try {
     data = { ...data, ...event.data.json() };
   } catch {

package/dist/ui/registry.d.ts

@@ -128,6 +128,21 @@ export declare class Registry {
     registerHeaderItem(name: string, component: ComponentType<HeaderItemProps>, options?: {
         readonly replace?: boolean;
     }): this;
+    /**
+     * A personal page every signed-in user reaches from the user menu, outside any app (`settings.ApiKeys`):
+     * served at `/me/<name>`; `label` is an i18n key (`settings:apiKeys.title`). The server still decides what the
+     * page may show and do.
+     */
+    registerUserPage(name: string, component: ComponentType<PageProps>, options: {
+        readonly label: string;
+        readonly replace?: boolean;
+    }): this;
+    /** The user pages, in registration order, with their label keys. */
+    userPages(): readonly {
+        readonly name: string;
+        readonly label: string;
+        readonly component: ComponentType<PageProps>;
+    }[];
     /** The header items, in registration order. */
     headerItems(): readonly {
         readonly name: string;

package/dist/ui/registry.js

@@ -12,6 +12,7 @@ export class Registry {
         component: new Map(),
         page: new Map(),
         header: new Map(),
+        userPage: new Map(),
         searchAssist: new Map(),
         chatterAssist: new Map(),
         createAssist: new Map(),
@@ -58,6 +59,25 @@ export class Registry {
     registerHeaderItem(name, component, options = {}) {
         return this.#add('header', name, component, options.replace === true);
     }
+    #userPageLabels = new Map();
+    /**
+     * A personal page every signed-in user reaches from the user menu, outside any app (`settings.ApiKeys`):
+     * served at `/me/<name>`; `label` is an i18n key (`settings:apiKeys.title`). The server still decides what the
+     * page may show and do.
+     */
+    registerUserPage(name, component, options) {
+        this.#add('userPage', name, component, options.replace === true);
+        this.#userPageLabels.set(name, options.label);
+        return this;
+    }
+    /** The user pages, in registration order, with their label keys. */
+    userPages() {
+        return [...this.#entries.userPage].map(([name, component]) => ({
+            name,
+            label: this.#userPageLabels.get(name) ?? name,
+            component: component,
+        }));
+    }
     /** The header items, in registration order. */
     headerItems() {
         return [...this.#entries.header].map(([name, component]) => ({

package/dist/ui/views/FormView.js

@@ -19,23 +19,36 @@ import { cn } from '../lib/cn.js';
 import { useLiveRecord } from '../live.js';
 import { useToast } from '../shell/toast.js';
 import { PrefetchedNames, useRowNames } from './widgets.js';
-function commandsOf(lines) {
+/** A line's values as the server takes them: many2many as `{ set }` (a line's taxes). */
+function lineValues(values, fields) {
+    const out = {};
+    for (const [key, value] of Object.entries(values))
+        out[key] = fields[key]?.kind === 'many2many' && Array.isArray(value) ? { set: value } : value;
+    return out;
+}
+function commandsOf(lines, fields) {
     return {
         ...(lines.rows.some((r) => r.id === undefined)
-            ? { create: lines.rows.filter((r) => r.id === undefined).map((r) => r.values) }
+            ? {
+                create: lines.rows
+                    .filter((r) => r.id === undefined)
+                    .map((r) => lineValues(r.values, fields)),
+            }
             : {}),
         ...(lines.rows.some((r) => r.id !== undefined && r.dirty)
             ? {
                 update: lines.rows
                     .filter((r) => r.id !== undefined && r.dirty)
-                    .map((r) => ({ id: r.id, values: r.values })),
+                    .map((r) => ({ id: r.id, values: lineValues(r.values, fields) })),
             }
             : {}),
         ...(lines.deleted.length > 0 ? { delete: lines.deleted } : {}),
     };
 }
 /** The payload of a save: changed values, many2many as `{ set }`. */
-function payloadOf(changes, fields, lines) {
+function payloadOf(changes, fields, lines, 
+/** The fields of a one2many's lines. */
+lineFields) {
     const out = {};
     for (const [key, value] of Object.entries(changes)) {
         if (fields[key]?.kind === 'many2many')
@@ -44,7 +57,7 @@ function payloadOf(changes, fields, lines) {
             out[key] = value;
     }
     for (const [key, state] of lines) {
-        const commands = commandsOf(state);
+        const commands = commandsOf(state, lineFields(key));
         if (Object.keys(commands).length > 0)
             out[key] = commands;
     }
@@ -177,7 +190,7 @@ export function FormView({ served, recordId, defaults, onSaved, onBack, crumbs,
     };
     const save = useMutation({
         mutationFn: async () => {
-            const payload = payloadOf(changes, fields, lines);
+            const payload = payloadOf(changes, fields, lines, (key) => served.fields[fields[key]?.target ?? ''] ?? {});
             const etag = loaded.data?.etag ?? null;
             try {
                 return isNew