shutro-erp 0.2.1 → 0.3.1

package/dist/accounting/payments.d.ts

@@ -51,9 +51,34 @@ export interface RegisterInput {
     readonly moves: readonly number[];
     readonly journal: number;
     readonly date?: string | undefined;
+    /** The money paid; by default what is due less what is withheld. */
     readonly amount?: string | undefined;
     readonly memo?: string | undefined;
+    /** What to withhold (see {@link proposeWithholdings}); none by default. */
+    readonly withholdings?: readonly {
+        readonly withholding: number;
+        readonly amount: string;
+    }[] | undefined;
 }
+export interface WithholdingProposal {
+    /** What the documents still owe. */
+    readonly residual: string;
+    readonly currency: string;
+    readonly withholdings: readonly {
+        readonly withholding: number;
+        readonly name: string;
+        readonly base: string;
+        readonly amount: string;
+    }[];
+    /** The money to pay: the residual less the withholdings. */
+    readonly amount: string;
+}
+/**
+ * The withholdings a payment of `moves` should keep back (RFC 0016 §5.1): those of the partner in the payment's
+ * direction (vendor bills: `vendor`; our invoices: `customer`), for documents whose total reaches their threshold,
+ * on the documents' untaxed amount, tax or total — prorated to what is still due — rounded to the currency.
+ */
+export declare function proposeWithholdings(env: Env, moves: readonly number[]): Promise<WithholdingProposal>;
 /** A payment for posted documents of one partner and currency, with their residual as the default amount. */
 export declare function registerPayment(env: Env, input: RegisterInput): Promise<{
     id: number;

package/dist/accounting/payments.js

@@ -9,6 +9,7 @@
  */
 import { HttpProblem } from '../server/index.js';
 import { orm } from '../server/orm.js';
+import { owedToUs } from './module.js';
 const fail = (model, fields, problem, hint) => new orm.ValidationError(model, fields, problem, hint);
 /** The open (not fully reconciled) lines of a reconcilable account, oldest due first. */
 export async function openLines(env, ids) {
@@ -331,6 +332,7 @@ export async function postPayments(payments) {
         currency: true,
         company: { currency: true, accountReceivable: true, accountPayable: true },
         documents: { lines: { account: true } },
+        withholdings: { withholding: { account: true } },
     });
     for (const p of loaded) {
         if (p.journal.type !== 'cash' && p.journal.type !== 'bank')
@@ -352,7 +354,7 @@ export async function postPayments(payments) {
                 throw fail('account.payment', ['documents'], `${d.name} is not from ${p.partner.name}.`, "Pay one partner's documents at a time.");
             if (d.currency.id !== p.currency.id)
                 throw fail('account.payment', ['documents'], `${d.name} is in another currency.`, "Pay in the document's currency.");
-            const incoming = d.kind === 'out_invoice' || d.kind === 'in_refund';
+            const incoming = owedToUs(d.kind);
             if (incoming !== (p.kind === 'inbound'))
                 throw fail('account.payment', ['documents'], `${d.name} is not ${p.kind === 'inbound' ? 'money to receive' : 'money to send'}.`, 'Check the direction.');
             for (const l of d.lines)
@@ -360,6 +362,25 @@ export async function postPayments(payments) {
                     docLineIds.push(l.id);
         }
         const inbound = p.kind === 'inbound';
+        // Withheld (VDS, TDS): the documents are settled by the money plus what was kept back (RFC 0016).
+        let withheld = orm.toDecimal(0);
+        const withheldLines = [];
+        for (const w of p.withholdings) {
+            const kept = w.amount.amount;
+            if (kept.lte(0))
+                continue;
+            withheld = withheld.plus(kept);
+            withheldLines.push({
+                account: w.withholding.account.id,
+                partner: p.partner.id,
+                name: w.withholding.name,
+                // Paying a vendor: a liability to the state (credit). Paid by a customer: a receivable from it (debit).
+                amountCurrency: inbound ? kept : kept.neg(),
+                debit: '0',
+                credit: '0',
+            });
+        }
+        const settled = amount.plus(withheld);
         const created = await env.model('account.move').create([
             {
                 journal: p.journal.id,
@@ -383,10 +404,11 @@ export async function postPayments(payments) {
                             account: counterpart.id,
                             partner: p.partner.id,
                             name: p.memo ?? 'Payment',
-                            amountCurrency: inbound ? amount.neg() : amount,
+                            amountCurrency: inbound ? settled.neg() : settled,
                             debit: '0',
                             credit: '0',
                         },
+                        ...withheldLines,
                     ],
                 },
             },
@@ -415,6 +437,68 @@ export async function postPayments(payments) {
         }
     }
 }
+/**
+ * The withholdings a payment of `moves` should keep back (RFC 0016 §5.1): those of the partner in the payment's
+ * direction (vendor bills: `vendor`; our invoices: `customer`), for documents whose total reaches their threshold,
+ * on the documents' untaxed amount, tax or total — prorated to what is still due — rounded to the currency.
+ */
+export async function proposeWithholdings(env, moves) {
+    const docs = await env
+        .model('account.move')
+        .browse(moves.map((id) => orm.asId(id, 'account.move')))
+        .load({ partner: { withholdings: true }, currency: true });
+    const first = docs.first();
+    if (docs.length === 0)
+        throw fail('account.payment', ['documents'], 'No documents to pay.', 'Choose a posted document.');
+    const inbound = owedToUs(first.kind);
+    const unit = first.currency.rounding;
+    const round = (d) => d.div(unit).toDecimalPlaces(0, orm.Decimal.ROUND_HALF_UP).times(unit);
+    let residual = orm.toDecimal(0);
+    const byWithholding = new Map();
+    for (const d of docs) {
+        const due = d.amountResidual?.amount ?? orm.toDecimal(0);
+        residual = residual.plus(due);
+        const total = d.amountTotal?.amount ?? orm.toDecimal(0);
+        if (total.isZero())
+            continue;
+        const share = due.div(total); // a partly paid document withholds on what is left
+        for (const w of d.partner?.withholdings ?? []) {
+            if (w.direction !== (inbound ? 'customer' : 'vendor') || total.lt(w.threshold))
+                continue;
+            const whole = w.base === 'tax'
+                ? (d.amountTax?.amount ?? orm.toDecimal(0))
+                : w.base === 'total'
+                    ? total
+                    : (d.amountUntaxed?.amount ?? orm.toDecimal(0));
+            const base = whole.times(share);
+            const entry = byWithholding.get(w.id) ?? {
+                name: w.name,
+                sequence: w.sequence,
+                base: orm.toDecimal(0),
+                amount: orm.toDecimal(0),
+            };
+            entry.base = entry.base.plus(base);
+            entry.amount = entry.amount.plus(base.times(w.rate));
+            byWithholding.set(w.id, entry);
+        }
+    }
+    // In their order (sequence, then as created).
+    const withholdings = [...byWithholding]
+        .sort(([a, x], [b, y]) => x.sequence - y.sequence || a - b)
+        .map(([withholding, w]) => ({
+        withholding,
+        name: w.name,
+        base: round(w.base).toFixed(),
+        amount: round(w.amount).toFixed(),
+    }));
+    const kept = withholdings.reduce((s, w) => s.plus(w.amount), orm.toDecimal(0));
+    return {
+        residual: residual.toFixed(),
+        currency: first.currency.name,
+        withholdings,
+        amount: residual.minus(kept).toFixed(),
+    };
+}
 /** A payment for posted documents of one partner and currency, with their residual as the default amount. */
 export async function registerPayment(env, input) {
     const docs = await env
@@ -430,8 +514,10 @@ export async function registerPayment(env, input) {
             throw fail('account.payment', ['documents'], `${d.name} is a journal entry, not a document.`, 'Pay invoices, bills or credit notes.');
         residual = residual.plus(d.amountResidual?.amount ?? 0);
     }
-    const kind = first.kind === 'out_invoice' || first.kind === 'in_refund' ? 'inbound' : 'outbound';
-    const amount = input.amount ?? residual.toString();
+    const kind = owedToUs(first.kind) ? 'inbound' : 'outbound';
+    const withholdings = input.withholdings ?? [];
+    const kept = withholdings.reduce((s, w) => s.plus(orm.toDecimal(w.amount)), orm.toDecimal(0));
+    const amount = input.amount ?? residual.minus(kept).toString();
     const created = await env.model('account.payment').create([
         {
             kind,
@@ -443,6 +529,12 @@ export async function registerPayment(env, input) {
             memo: input.memo ?? null,
             company: first.company.id,
             documents: { set: docs.ids },
+            withholdings: {
+                create: withholdings.map((w) => ({
+                    withholding: orm.asId(w.withholding, 'account.withholding'),
+                    amount: w.amount,
+                })),
+            },
         },
     ]);
     await created.post();

package/dist/accounting/web/RegisterPayment.d.ts

@@ -1,7 +1,8 @@
 /**
  * "Register payment" on a posted document that is not fully paid (a node component of the invoice form): a
- * dialog with the journal, the date, the amount (the amount due by default) and a memo, posted through
- * `POST /api/v1/accounting/payments/register`; the form reloads afterwards.
+ * dialog with the journal, the date, the withholdings the partner's documents call for (VDS, TDS — proposed by the
+ * server, each amount editable), the amount (what is due less what is withheld, by default) and a memo, posted
+ * through `POST /api/v1/accounting/payments/register`; the form reloads afterwards.
  */
 import { type NodeComponentProps } from '../../ui/index.js';
 import { type ReactElement } from 'react';

package/dist/accounting/web/RegisterPayment.js

@@ -1,21 +1,35 @@
 import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 /**
  * "Register payment" on a posted document that is not fully paid (a node component of the invoice form): a
- * dialog with the journal, the date, the amount (the amount due by default) and a memo, posted through
- * `POST /api/v1/accounting/payments/register`; the form reloads afterwards.
+ * dialog with the journal, the date, the withholdings the partner's documents call for (VDS, TDS — proposed by the
+ * server, each amount editable), the amount (what is due less what is withheld, by default) and a memo, posted
+ * through `POST /api/v1/accounting/payments/register`; the form reloads afterwards.
  */
-import { Alert, Button, Dialog, Input, Label, Select } from '../../ui/index.js';
+import { Alert, Button, Dialog, Input, Label, Select, useKosh, } from '../../ui/index.js';
 import { useMutation, useQuery } from '@tanstack/react-query';
 import { useId, useState } from 'react';
 import { useTranslation } from 'react-i18next';
+/** Exact decimal subtraction of decimal strings (no floats): `a - Σ b`, to the cent. */
+function less(a, bs) {
+    const cents = (v) => {
+        const [w = '0', f = ''] = v.trim().split('.');
+        return BigInt(w === '' ? '0' : w) * 100n + BigInt(`${f}00`.slice(0, 2));
+    };
+    const r = bs.reduce((s, b) => s - (/^\d+(\.\d+)?$/.test(b) ? cents(b) : 0n), cents(a));
+    const sign = r < 0n ? '-' : '';
+    const abs = r < 0n ? -r : r;
+    return `${sign}${abs / 100n}.${String(abs % 100n).padStart(2, '0')}`;
+}
 export function RegisterPayment({ api, record, reload }) {
     const { t } = useTranslation('accounting');
+    const { format } = useKosh();
     const id = useId();
     const [open, setOpen] = useState(false);
     const [journal, setJournal] = useState(null);
     const [date, setDate] = useState(new Date().toISOString().slice(0, 10));
     const [amount, setAmount] = useState(null);
     const [memo, setMemo] = useState('');
+    const [kept, setKept] = useState({});
     const [error, setError] = useState(null);
     const journals = useQuery({
         queryKey: ['accounting', 'journals', 'cash-bank'],
@@ -25,17 +39,34 @@ export function RegisterPayment({ api, record, reload }) {
         }),
         enabled: open,
     });
+    const proposal = useQuery({
+        queryKey: ['accounting', 'withholdings', record?.id],
+        queryFn: () => api.call('POST', '/api/v1/accounting/payments/propose', { moves: [record?.id] }),
+        enabled: open,
+    });
+    const withholdings = (proposal.data?.withholdings ?? []).map((w) => ({
+        ...w,
+        amount: kept[w.withholding] ?? w.amount,
+    }));
+    const due = proposal.data?.residual ??
+        record?.['amountResidual']?.amount ??
+        '';
+    const net = less(due, withholdings.map((w) => w.amount));
     const pay = useMutation({
         mutationFn: () => api.call('POST', '/api/v1/accounting/payments/register', {
             moves: [record?.id],
             journal: Number(journal),
             date,
-            ...(amount === null ? {} : { amount }),
+            amount: amount ?? net,
+            withholdings: withholdings
+                .filter((w) => /^\d+(\.\d+)?$/.test(w.amount) && Number(w.amount) > 0)
+                .map((w) => ({ withholding: w.withholding, amount: w.amount })),
             ...(memo === '' ? {} : { memo }),
         }),
         onSuccess: () => {
             setOpen(false);
             setError(null);
+            setKept({});
             reload();
         },
         onError: (e) => setError(e.message),
@@ -44,9 +75,11 @@ export function RegisterPayment({ api, record, reload }) {
         return null;
     if (record['paymentState'] === 'paid')
         return null;
-    const due = record['amountResidual']?.amount ?? '';
     return (_jsxs(_Fragment, { children: [_jsx(Button, { variant: "secondary", onClick: () => setOpen(true), children: t('pay.button') }), _jsx(Dialog, { open: open, onOpenChange: setOpen, title: t('pay.title'), footer: _jsx(Button, { variant: "primary", busy: pay.isPending, disabled: journal === null, onClick: () => pay.mutate(), children: t('pay.confirm') }), children: _jsxs("div", { className: "grid gap-3", children: [error === null ? null : _jsx(Alert, { tone: "danger", children: error }), _jsx(Select, { id: `${id}-journal`, label: t('pay.journal'), value: journal, options: (journals.data?.items ?? []).map((j) => ({
                                 value: String(j.id),
                                 label: `${String(j['code'])} ${String(j['name'])}`,
-                            })), onChange: setJournal }), _jsxs("div", { className: "grid gap-1", children: [_jsx(Label, { htmlFor: `${id}-date`, children: t('pay.date') }), _jsx(Input, { id: `${id}-date`, type: "date", value: date, onChange: (e) => setDate(e.target.value) })] }), _jsxs("div", { className: "grid gap-1", children: [_jsx(Label, { htmlFor: `${id}-amount`, children: t('pay.amount') }), _jsx(Input, { id: `${id}-amount`, inputMode: "decimal", value: amount ?? due, onChange: (e) => setAmount(e.target.value) })] }), _jsxs("div", { className: "grid gap-1", children: [_jsx(Label, { htmlFor: `${id}-memo`, children: t('pay.memo') }), _jsx(Input, { id: `${id}-memo`, value: memo, onChange: (e) => setMemo(e.target.value) })] })] }) })] }));
+                            })), onChange: setJournal }), _jsxs("div", { className: "grid gap-1", children: [_jsx(Label, { htmlFor: `${id}-date`, children: t('pay.date') }), _jsx(Input, { id: `${id}-date`, type: "date", value: date, onChange: (e) => setDate(e.target.value) })] }), withholdings.length === 0 ? null : (_jsxs("fieldset", { className: "grid gap-2 rounded-md border p-3", children: [_jsx("legend", { className: "px-1 text-sm font-medium", children: t('pay.withheld') }), withholdings.map((w) => (_jsxs("div", { className: "grid gap-1", children: [_jsxs(Label, { htmlFor: `${id}-w${w.withholding}`, children: [w.name, " (", format.decimal(w.base, 2), ")"] }), _jsx(Input, { id: `${id}-w${w.withholding}`, inputMode: "decimal", value: w.amount, onChange: (e) => setKept((k) => ({ ...k, [w.withholding]: e.target.value })) })] }, w.withholding)))] })), _jsxs("div", { className: "grid gap-1", children: [_jsx(Label, { htmlFor: `${id}-amount`, children: t('pay.amount') }), _jsx(Input, { id: `${id}-amount`, inputMode: "decimal", value: amount ?? net, onChange: (e) => setAmount(e.target.value) }), withholdings.length === 0 ? null : (_jsx("p", { className: "text-xs text-muted-foreground", children: t('pay.due', {
+                                        amount: format.decimal(due, 2),
+                                        withheld: format.decimal(less('0', withholdings.map((w) => w.amount)).replace('-', ''), 2),
+                                    }) }))] }), _jsxs("div", { className: "grid gap-1", children: [_jsx(Label, { htmlFor: `${id}-memo`, children: t('pay.memo') }), _jsx(Input, { id: `${id}-memo`, value: memo, onChange: (e) => setMemo(e.target.value) })] })] }) })] }));
 }

package/dist/accounting/web/SettingsPage.js

@@ -22,6 +22,8 @@ export function SettingsPage({ api }) {
     const [template, setTemplate] = useState(null);
     const [lockDate, setLockDate] = useState(null);
     const [taxLockDate, setTaxLockDate] = useState(null);
+    const [country, setCountry] = useState(null);
+    const [state, setState] = useState(null);
     const [message, setMessage] = useState(null);
     const [error, setError] = useState(null);
     const install = useMutation({
@@ -39,6 +41,8 @@ export function SettingsPage({ api }) {
         mutationFn: () => api.call('PUT', '/api/v1/accounting/settings', {
             lockDate: lockDate ?? settings.data?.lockDate ?? null,
             taxLockDate: taxLockDate ?? settings.data?.taxLockDate ?? null,
+            country: country ?? settings.data?.country ?? null,
+            state: state ?? settings.data?.state ?? null,
         }),
         onSuccess: async () => {
             setError(null);
@@ -54,5 +58,5 @@ export function SettingsPage({ api }) {
                         }) })) : (_jsxs("div", { className: "flex flex-wrap items-end gap-2", children: [_jsx(Select, { id: `${id}-chart`, label: t('settings.choose'), className: "w-64", value: template, options: (charts.data?.templates ?? []).map((c) => ({
                                     value: c.code,
                                     label: c.label,
-                                })), onChange: setTemplate }), _jsx(Button, { variant: "primary", disabled: template === null, busy: install.isPending, onClick: () => install.mutate(), children: t('settings.install') })] }))] }), _jsxs("section", { className: "grid gap-3 rounded-lg border p-4", children: [_jsxs("div", { className: "grid gap-1", children: [_jsx(Label, { htmlFor: `${id}-lock`, children: t('settings.lockDate') }), _jsx(Input, { id: `${id}-lock`, type: "date", value: lockDate ?? current?.lockDate ?? '', onChange: (e) => setLockDate(e.target.value === '' ? null : e.target.value) }), _jsx("p", { className: "text-xs text-muted-foreground", children: t('settings.lockDateHint') })] }), _jsxs("div", { className: "grid gap-1", children: [_jsx(Label, { htmlFor: `${id}-taxlock`, children: t('settings.taxLockDate') }), _jsx(Input, { id: `${id}-taxlock`, type: "date", value: taxLockDate ?? current?.taxLockDate ?? '', onChange: (e) => setTaxLockDate(e.target.value === '' ? null : e.target.value) }), _jsx("p", { className: "text-xs text-muted-foreground", children: t('settings.taxLockDateHint') })] }), _jsx("div", { children: _jsx(Button, { variant: "primary", busy: save.isPending, onClick: () => save.mutate(), children: t('settings.save') }) })] })] }));
+                                })), onChange: setTemplate }), _jsx(Button, { variant: "primary", disabled: template === null, busy: install.isPending, onClick: () => install.mutate(), children: t('settings.install') })] }))] }), _jsxs("section", { className: "grid gap-3 rounded-lg border p-4", children: [_jsxs("div", { className: "grid gap-1", children: [_jsx(Label, { htmlFor: `${id}-lock`, children: t('settings.lockDate') }), _jsx(Input, { id: `${id}-lock`, type: "date", value: lockDate ?? current?.lockDate ?? '', onChange: (e) => setLockDate(e.target.value === '' ? null : e.target.value) }), _jsx("p", { className: "text-xs text-muted-foreground", children: t('settings.lockDateHint') })] }), _jsxs("div", { className: "grid gap-1", children: [_jsx(Label, { htmlFor: `${id}-taxlock`, children: t('settings.taxLockDate') }), _jsx(Input, { id: `${id}-taxlock`, type: "date", value: taxLockDate ?? current?.taxLockDate ?? '', onChange: (e) => setTaxLockDate(e.target.value === '' ? null : e.target.value) }), _jsx("p", { className: "text-xs text-muted-foreground", children: t('settings.taxLockDateHint') })] }), _jsxs("div", { className: "grid gap-3 sm:grid-cols-2", children: [_jsxs("div", { className: "grid gap-1", children: [_jsx(Label, { htmlFor: `${id}-country`, children: t('settings.country') }), _jsx(Input, { id: `${id}-country`, maxLength: 2, value: country ?? current?.country ?? '', onChange: (e) => setCountry(e.target.value) })] }), _jsxs("div", { className: "grid gap-1", children: [_jsx(Label, { htmlFor: `${id}-state`, children: t('settings.state') }), _jsx(Input, { id: `${id}-state`, maxLength: 6, value: state ?? current?.state ?? '', onChange: (e) => setState(e.target.value) })] }), _jsx("p", { className: "text-xs text-muted-foreground sm:col-span-2", children: t('settings.placeHint') })] }), _jsx("div", { children: _jsx(Button, { variant: "primary", busy: save.isPending, onClick: () => save.mutate(), children: t('settings.save') }) })] })] }));
 }

package/dist/accounting/web/messages.js

@@ -12,6 +12,9 @@ export const messages = {
             lockDateHint: 'Nothing is posted, reversed or matched on or before this date.',
             taxLockDate: 'Tax lock date',
             taxLockDateHint: 'Tax returns are filed up to this date.',
+            country: 'Country (ISO code, e.g. IN)',
+            state: 'State (e.g. IN-MH)',
+            placeHint: 'Where the company is registered: a tax split by state (GST) posts its within-state parts when the place of supply is this state.',
             save: 'Save',
             saved: 'Settings saved.',
         },
@@ -55,6 +58,8 @@ export const messages = {
             memo: 'Memo',
             confirm: 'Pay',
             done: 'Payment {{name}} registered.',
+            withheld: 'Withheld at source',
+            due: 'Due {{amount}}; withheld {{withheld}}.',
         },
     },
     bn: {
@@ -69,6 +74,9 @@ export const messages = {
             lockDateHint: 'এই তারিখ বা তার আগে কিছু পোস্ট, রিভার্স বা মেলানো যাবে না।',
             taxLockDate: 'কর লক তারিখ',
             taxLockDateHint: 'এই তারিখ পর্যন্ত কর রিটার্ন দাখিল হয়েছে।',
+            country: 'দেশ (ISO কোড, যেমন IN)',
+            state: 'রাজ্য (যেমন IN-MH)',
+            placeHint: 'প্রতিষ্ঠান যেখানে নিবন্ধিত: রাজ্যভেদে ভাগ হওয়া কর (GST) সরবরাহের স্থান এই রাজ্য হলে রাজ্যের ভেতরের অংশগুলো পোস্ট করে।',
             save: 'সংরক্ষণ',
             saved: 'সেটিংস সংরক্ষিত।',
         },
@@ -112,6 +120,8 @@ export const messages = {
             memo: 'মন্তব্য',
             confirm: 'পরিশোধ',
             done: 'পেমেন্ট {{name}} নথিভুক্ত হয়েছে।',
+            withheld: 'উৎসে কর্তন',
+            due: 'বাকি {{amount}}; কর্তন {{withheld}}।',
         },
     },
 };

package/dist/assistant/routes.js

@@ -209,7 +209,7 @@ export function registerAssistantRoutes(context, options) {
                 ? 'No API key is configured on this server (ANTHROPIC_API_KEY).'
                 : 'An administrator has not switched the assistant on for this company.');
         if ((await usedThisMonth(env.companyId)) >= options.monthlyTokens)
-            throw new HttpProblem(429, 'assistant-budget', "The month's assistant budget is used up", `This company used its ${options.monthlyTokens} tokens of the month.`, 'An administrator can raise KOSH_ASSISTANT_MONTHLY_TOKENS.');
+            throw new HttpProblem(429, 'assistant-budget', "The month's assistant budget is used up", `This company used its ${options.monthlyTokens} tokens of the month.`, 'An administrator can raise SHUTRO_ERP_ASSISTANT_MONTHLY_TOKENS.');
         return client;
     };
     /** Logs a call in a transaction of its own (after the model answered: no transaction stays open meanwhile). */

package/dist/automation/engine.js

@@ -832,7 +832,7 @@ export function webhookProblem(url, hosts = webhookHosts()) {
         return 'Webhooks call https URLs (http only for localhost).';
     const allowed = hosts.some((h) => (h.startsWith('*.') ? host.endsWith(h.slice(1)) : host === h));
     if (!allowed)
-        return `The host ${host} is not on the webhook allow-list (KOSH_AUTOMATION_WEBHOOK_HOSTS).`;
+        return `The host ${host} is not on the webhook allow-list (SHUTRO_ERP_AUTOMATION_WEBHOOK_HOSTS).`;
     return null;
 }
 /** The signature of a webhook body: `sha256=<hex HMAC>` with the rule's secret. */

package/dist/automation/web/messages.js

@@ -62,7 +62,7 @@ export const messages = {
             cronHint: 'Minute hour day month weekday: "0 2 * * *" is every night at 02:00; @daily, @weekly, @monthly too. Runs on the records the condition matches.',
             url: 'URL',
             webhookFields: 'Fields to send',
-            webhookHint: "A signed JSON POST (X-Kosh-Signature: sha256 HMAC with the rule's webhook secret), retried on failure; the host must be on the allow-list (KOSH_AUTOMATION_WEBHOOK_HOSTS).",
+            webhookHint: "A signed JSON POST (X-Kosh-Signature: sha256 HMAC with the rule's webhook secret), retried on failure; the host must be on the allow-list (SHUTRO_ERP_AUTOMATION_WEBHOOK_HOSTS).",
             condition: 'And the record matches',
             conditionJson: 'Condition (domain)',
             field: 'Field',
@@ -169,7 +169,7 @@ export const messages = {
             cronHint: 'মিনিট ঘণ্টা দিন মাস সপ্তাহের দিন: "0 2 * * *" মানে প্রতি রাত ০২:০০; @daily, @weekly, @monthly-ও চলে। শর্তে মেলা রেকর্ডে চলে।',
             url: 'URL',
             webhookFields: 'যে ফিল্ড পাঠাবে',
-            webhookHint: 'স্বাক্ষরিত JSON POST (X-Kosh-Signature: নিয়মের ওয়েবহুক সিক্রেট দিয়ে sha256 HMAC), ব্যর্থ হলে আবার চেষ্টা; হোস্ট অনুমোদিত তালিকায় থাকতে হবে (KOSH_AUTOMATION_WEBHOOK_HOSTS)।',
+            webhookHint: 'স্বাক্ষরিত JSON POST (X-Kosh-Signature: নিয়মের ওয়েবহুক সিক্রেট দিয়ে sha256 HMAC), ব্যর্থ হলে আবার চেষ্টা; হোস্ট অনুমোদিত তালিকায় থাকতে হবে (SHUTRO_ERP_AUTOMATION_WEBHOOK_HOSTS)।',
             condition: 'এবং রেকর্ড মেলে',
             conditionJson: 'শর্ত (ডোমেইন)',
             field: 'ফিল্ড',

package/dist/cli/apps.d.ts

@@ -8,5 +8,5 @@ export interface AppsIo {
     /** The confirmation question (tests script it). Default: the terminal. */
     readonly prompter?: Prompter;
 }
-/** Runs `kosh apps …`. Returns the exit code. */
+/** Runs `shutro-erp apps …`. Returns the exit code. */
 export declare function runApps(argv: readonly string[], io: AppsIo): Promise<number>;

package/dist/cli/apps.js

@@ -1,5 +1,5 @@
 /**
- * `kosh apps` (RFC 0008): the App manager in the terminal. Lists the catalogue with each app's state, and installs,
+ * `shutro-erp apps` (RFC 0008): the App manager in the terminal. Lists the catalogue with each app's state, and installs,
  * enables or disables apps: the plan is shown first (modules, dependencies, cascades, schema statements), then
  * applied in one transaction by `shutro-erp` (`prepareApps` / `applyApps`).
  */
@@ -13,14 +13,14 @@ import { PROTECTED_APPS } from '../settings/index.js';
 import { modulesOf, seedWith } from './project.js';
 import { defaultsPrompter, terminalPrompter } from './prompt.js';
 import { createUi, PLAIN_TERMINAL } from './ui.js';
-export const APPS_USAGE = `Usage: kosh apps [command] [app …] [options]
+export const APPS_USAGE = `Usage: shutro-erp apps [command] [app …] [options]
 
-  kosh apps                     the catalogue: installed, disabled and available apps
-  kosh apps install <app …>     install apps and what they need, in one transaction
-  kosh apps enable <app …>      serve disabled apps again (their data is still there)
-  kosh apps disable <app …>     switch apps off: menus, API and access go, tables and data stay
+  shutro-erp apps                     the catalogue: installed, disabled and available apps
+  shutro-erp apps install <app …>     install apps and what they need, in one transaction
+  shutro-erp apps enable <app …>      serve disabled apps again (their data is still there)
+  shutro-erp apps disable <app …>     switch apps off: menus, API and access go, tables and data stay
                                 (apps that depend on them are disabled too)
-  kosh apps upgrade [app …]     move installed apps to their code's version: schema, data migrations,
+  shutro-erp apps upgrade [app …]     move installed apps to their code's version: schema, data migrations,
                                 seed data (default: every app whose code is newer)
 
 Options:
@@ -32,7 +32,7 @@ Options:
 
 After a change, restart the API (npm start) so it serves the new set.
 `;
-/** Pictographs for the apps Kosh ships; other modules get a puzzle piece. */
+/** Pictographs for the apps Shutro ERP ships; other modules get a puzzle piece. */
 const APP_ICONS = {
     base: '🏠',
     settings: '⚙️',
@@ -74,7 +74,7 @@ async function list(ui, driver, catalogue) {
         const label = m.app?.label ?? '';
         const why = row?.reason === 'dependency' ? ui.style('gray', ' (needed by another app)') : '';
         const behind = row !== undefined && row.version !== m.version
-            ? ui.style('cyan', ` (installed ${row.version}: kosh apps upgrade ${m.name})`)
+            ? ui.style('cyan', ` (installed ${row.version}: shutro-erp apps upgrade ${m.name})`)
             : '';
         ui.write(`  ${marks[s]} ${iconOf(ui, m.name)}  ${ui.style('bold', m.name.padEnd(width))}  ${ui.style('gray', m.version.padEnd(8))} ${s.padEnd(9)} ${label}${why}${behind}\n`);
     }
@@ -103,7 +103,7 @@ function showPlan(ui, prepared, catalogue) {
     if (plan.disable.length > 0)
         ui.detail('tables and data stay; enable brings everything back');
 }
-/** Runs `kosh apps …`. Returns the exit code. */
+/** Runs `shutro-erp apps …`. Returns the exit code. */
 export async function runApps(argv, io) {
     const { values, positionals } = parseArgs({
         args: [...argv],
@@ -131,11 +131,11 @@ export async function runApps(argv, io) {
     }
     if (command === 'uninstall') {
         ui.warn('Removing an app and its data comes with a later step of RFC 0008.');
-        ui.info(`Meanwhile: kosh apps disable ${names.join(' ') || '<app>'} (reversible, keeps the data).`);
+        ui.info(`Meanwhile: shutro-erp apps disable ${names.join(' ') || '<app>'} (reversible, keeps the data).`);
         return 2;
     }
     if (command !== 'list' && command !== 'upgrade' && names.length === 0) {
-        ui.fail(`Name the app(s): kosh apps ${command} <app …>`);
+        ui.fail(`Name the app(s): shutro-erp apps ${command} <app …>`);
         return 2;
     }
     const envFile = join(io.cwd, '.env');
@@ -143,14 +143,14 @@ export async function runApps(argv, io) {
         process.loadEnvFile(envFile);
     const databaseUrl = process.env['DATABASE_URL'];
     if (databaseUrl === undefined || databaseUrl === '') {
-        ui.fail('DATABASE_URL is not set: run kosh init, or add it to .env.');
+        ui.fail('DATABASE_URL is not set: run shutro-erp init, or add it to .env.');
         return 1;
     }
     const driver = pg.createDriver({
         url: databaseUrl,
         max: 2,
         parseNumeric: orm.toDecimal,
-        applicationName: 'kosh apps',
+        applicationName: 'shutro-erp apps',
     });
     const prompter = io.prompter ??
         (values.yes === true || values.plan === true ? defaultsPrompter() : terminalPrompter());

package/dist/cli/bin.js

@@ -1,6 +1,9 @@
 #!/usr/bin/env node
+import { applyEnvironmentNames } from '../server/index.js';
 import { runCli } from './index.js';
 import { detectTerminal } from './ui.js';
+// SHUTRO_ERP_* settings, read under their older KOSH_* names.
+applyEnvironmentNames();
 process.exitCode = await runCli(process.argv.slice(2), (text) => process.stdout.write(text), {
     terminal: detectTerminal(process.stdout),
 });

package/dist/cli/index.js

@@ -21,11 +21,11 @@ export const PACKAGE = Object.freeze({
     name: 'shutro-erp/cli',
     rfc: 'RFC 0001',
 });
-const USAGE = `Usage: kosh <command>
+const USAGE = `Usage: shutro-erp <command>
 
 Commands (run in the installation's folder; they read .env and src/modules.ts):
-  init [folder]          Set up an installation: database, company, administrator, apps (kosh init --help)
-  apps                   The apps: installed, disabled, available (kosh apps --help)
+  init [folder]          Set up an installation: database, company, administrator, apps (shutro-erp init --help)
+  apps                   The apps: installed, disabled, available (shutro-erp apps --help)
   apps install <app …>   Install apps and what they need, in one transaction
   apps disable <app …>   Switch apps off (their data stays); apps enable <app …> brings them back
   migrate                Plan schema changes into migrations/NNNN_*.sql, apply pending files, run the modules'
@@ -41,10 +41,10 @@ Commands (run in the installation's folder; they read .env and src/modules.ts):
   user create <login>    Create a user: --name, --email, --roles reporting.user,messaging.user, --password
   user password <login>  Set a new password
   generate client   Typed API client from the module set or an OpenAPI document
-      --modules <file|package>   a module (or file) exporting Kosh modules (\`modules\`, default, or each export)
+      --modules <file|package>   a module (or file) exporting Shutro ERP modules (\`modules\`, default, or each export)
       --from <file|url>          an OpenAPI document instead (a URL needs --token)
       --token <token>            Bearer token for --from <url>
-      --out <file>               where to write (default: src/api/kosh.gen.ts)
+      --out <file>               where to write (default: src/api/shutro-erp.gen.ts)
       --check                    fail if the file is out of date (CI)
 
 Every command takes --modules <file> (default src/modules.ts).
@@ -74,21 +74,21 @@ async function generate(argv, write, options) {
     });
     const cwd = options.cwd ?? process.cwd();
     if ((values.modules === undefined) === (values.from === undefined)) {
-        write('kosh generate client: pass exactly one of --modules or --from.\n');
+        write('shutro-erp generate client: pass exactly one of --modules or --from.\n');
         return 2;
     }
     const document = values.modules === undefined
         ? await documentFrom(values.from, values.token, cwd, options.fetch ?? globalThis.fetch)
         : openApiOf(await modulesOf(values.modules, cwd));
     const code = generateClient(document);
-    const out = resolve(cwd, values.out ?? 'src/api/kosh.gen.ts');
+    const out = resolve(cwd, values.out ?? 'src/api/shutro-erp.gen.ts');
     if (values.check === true) {
         const current = await readFile(out, 'utf8').catch(() => '');
         if (current.replaceAll('\r\n', '\n') === code) {
             write(`${out} is up to date.\n`);
             return 0;
         }
-        write(`${out} is out of date: run kosh generate client.\n`);
+        write(`${out} is out of date: run shutro-erp generate client.\n`);
         return 1;
     }
     await mkdir(dirname(out), { recursive: true });
@@ -128,7 +128,7 @@ export async function runCli(argv, write, options = {}) {
             return await command(argv.slice(1), write, cwd);
         }
         catch (error) {
-            write(`kosh ${argv[0]}: ${error instanceof Error ? error.message : String(error)}\n`);
+            write(`shutro-erp ${argv[0]}: ${error instanceof Error ? error.message : String(error)}\n`);
             return 1;
         }
     if (argv[0] === 'generate' && argv[1] === 'client') {
@@ -136,10 +136,10 @@ export async function runCli(argv, write, options = {}) {
             return await generate(argv.slice(2), write, options);
         }
         catch (error) {
-            write(`kosh generate client: ${error instanceof Error ? error.message : String(error)}\n`);
+            write(`shutro-erp generate client: ${error instanceof Error ? error.message : String(error)}\n`);
             return 1;
         }
     }
-    write(`Unknown command '${argv.join(' ')}'. Run kosh --help.\n`);
+    write(`Unknown command '${argv.join(' ')}'. Run shutro-erp --help.\n`);
     return 2;
 }

package/dist/cli/init.d.ts

@@ -14,5 +14,5 @@ export interface InitIo {
     /** What the output can show (colour, icons, spinners). Default: plain lines. */
     readonly terminal?: Terminal;
 }
-/** Runs `kosh init`. Returns the exit code. */
+/** Runs `shutro-erp init`. Returns the exit code. */
 export declare function runInit(argv: readonly string[], io: InitIo): Promise<number>;