shutro-erp 0.3.0 → 0.3.1

package/dist/cli/templates.js

@@ -1,8 +1,8 @@
 /**
- * The starter project `kosh init` writes: an API server and the back-office app, both importing `shutro-erp`.
+ * The starter project `shutro-erp init` writes: an API server and the back-office app, both importing `shutro-erp`.
  * Server files run on Node.js directly (type stripping); the back-office is a Vite app proxying `/api` to the server.
  */
-/** The apps `kosh init` can install (base and Settings are always there), in the order the installer lists them. */
+/** The apps `shutro-erp init` can install (base and Settings are always there), in the order the installer lists them. */
 export const APPS = {
     permissions: {
         label: 'Roles, field security and approvals',
@@ -105,8 +105,8 @@ export function packageJson(options, existing) {
             start: 'node --env-file=.env src/server.ts',
             web: 'vite',
             'build:web': 'vite build',
-            migrate: 'kosh migrate',
-            seed: 'kosh seed',
+            migrate: 'shutro-erp migrate',
+            seed: 'shutro-erp seed',
             'docker:up': 'docker compose up -d --build',
         }),
         engines: { node: '>=24', ...(base['engines'] ?? {}) },
@@ -130,7 +130,7 @@ export function modulesTs(_options) {
     const imports = apps.map((a) => `import { ${APPS[a].server} } from 'shutro-erp/${a}';`);
     return `/**
  * The apps this installation can install (the catalogue). The database records which are installed: Settings → Apps
- * in the back-office, or \`npx kosh apps\`, installs, disables and enables them. \`base\` (users, companies, sign-in)
+ * in the back-office, or \`npx shutro-erp apps\`, installs, disables and enables them. \`base\` (users, companies, sign-in)
  * and Settings are always installed. Add your own modules here (\`defineModule\` from \`shutro-erp/modules-sdk\`),
  * then install them from Settings → Apps.
  */
@@ -150,7 +150,7 @@ export const modules = [base, settings, realtime, notify, mail, automation, stud
 }
 export function serverTs() {
     return `/**
- * The Kosh API server: \`npm start\` (reads .env). It serves the installed apps of src/modules.ts, and switches to
+ * The Shutro ERP API server: \`npm start\` (reads .env). It serves the installed apps of src/modules.ts, and switches to
  * the new set without a restart when apps are installed or disabled (here or on another server).
  */
 import { createAppHost, startAppHost } from 'shutro-erp';
@@ -162,11 +162,11 @@ const host = await createAppHost({
   catalogue: modules,
   migrationsDir: 'migrations',
   ...(env['VALKEY_URL'] ? { valkeyUrl: env['VALKEY_URL'] } : {}),
-  // Secure cookies need HTTPS: on by default in production (KOSH_SECURE_COOKIES=false for plain HTTP).
-  auth: { secureCookies: (env['KOSH_SECURE_COOKIES'] ?? String(env['NODE_ENV'] === 'production')) === 'true' },
+  // Secure cookies need HTTPS: on by default in production (SHUTRO_ERP_SECURE_COOKIES=false for plain HTTP).
+  auth: { secureCookies: (env['SHUTRO_ERP_SECURE_COOKIES'] ?? env['KOSH_SECURE_COOKIES'] ?? String(env['NODE_ENV'] === 'production')) === 'true' },
 });
 const address = await startAppHost(host, { port: Number(env['PORT'] ?? 3000), host: env['HOST'] ?? '127.0.0.1' });
-process.stdout.write(\`Kosh API on \${address}\\n\`);
+process.stdout.write(\`Shutro ERP API on \${address}\\n\`);
 `;
 }
 export function viteConfig(options) {
@@ -176,7 +176,7 @@ import react from '@vitejs/plugin-react';
 import { koshPwa } from 'shutro-erp/ui/vite';
 import { defineConfig } from 'vite';
 
-const api = process.env['KOSH_API'] ?? 'http://localhost:${options.port}';
+const api = process.env['SHUTRO_ERP_API'] ?? process.env['KOSH_API'] ?? 'http://localhost:${options.port}';
 
 export default defineConfig({
   // koshPwa: the service worker (the app opens offline and gets web push)
@@ -263,7 +263,7 @@ export function manifest(options) {
 }
 /** The app icon (replace it with the company's). */
 export function icon() {
-    return `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" role="img" aria-label="Kosh">
+    return `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" role="img" aria-label="Shutro ERP">
   <rect width="512" height="512" rx="112" fill="#1d4ed8"/>
   <path d="M156 128h56v112l108-112h72L270 258l128 126h-74L220 282v102h-64z" fill="#fff"/>
 </svg>
@@ -273,7 +273,7 @@ export function indexCss() {
     return `@import "tailwindcss";
 @import "shutro-erp/ui/styles.css";
 
-/* Tailwind scans Kosh's components for the classes they use. */
+/* Tailwind scans Shutro ERP's components for the classes they use. */
 @source "../../node_modules/shutro-erp/dist";
 `;
 }
@@ -286,7 +286,7 @@ var/
 }
 /** Three images from one build: the API (migrates, then serves) and nginx with the back-office. */
 export function dockerfile() {
-    return `# Kosh images (kosh init). Built by compose.yaml: docker compose up -d --build
+    return `# Shutro ERP images (shutro-erp init). Built by compose.yaml: docker compose up -d --build
 FROM node:24-alpine AS build
 WORKDIR /app
 COPY package.json package-lock.json* ./
@@ -306,7 +306,7 @@ COPY --from=build /app/migrations ./migrations
 RUN mkdir -p /app/var/attachments && chown -R node:node /app/var
 USER node
 EXPOSE 3000
-CMD ["sh", "-c", "npx kosh migrate && node src/server.ts"]
+CMD ["sh", "-c", "npx shutro-erp migrate && node src/server.ts"]
 
 # The back-office: static files, /api proxied to the API.
 FROM nginx:1.27-alpine AS web
@@ -315,7 +315,7 @@ COPY nginx.conf /etc/nginx/conf.d/default.conf
 `;
 }
 export function nginxConf() {
-    return `# The back-office (kosh init): the built app, /api proxied to the API service.
+    return `# The back-office (shutro-erp init): the built app, /api proxied to the API service.
 server {
   listen 80;
   root /usr/share/nginx/html;
@@ -346,9 +346,9 @@ export function composeYaml(options) {
     const db = options.dockerDb ?? options.name.replace(/-/g, '_');
     /** A compose variable: `${NAME}` or `${NAME:-default}` (plain strings: nothing to escape). */
     const v = (name, fallback) => ['$', '{', name, fallback === undefined ? '' : fallback, '}'].join('');
-    const user = v('POSTGRES_USER', ':-kosh');
+    const user = v('POSTGRES_USER', ':-shutro');
     const lines = [
-        '# Kosh in Docker (kosh init).',
+        '# Shutro ERP in Docker (shutro-erp init).',
         '#   docker compose up -d db          only PostgreSQL (the API runs with npm start)',
         '#   docker compose up -d --build     everything: the back-office on http://localhost:8080',
         `name: ${options.name}`,
@@ -367,7 +367,7 @@ export function composeYaml(options) {
         '      - db:/var/lib/postgresql',
         '    healthcheck:',
         // $$ is a literal $ for compose: the shell in the container expands the variable.
-        `      test: ["CMD-SHELL", "pg_isready -U $${v('POSTGRES_USER', ':-kosh')}"]`,
+        `      test: ["CMD-SHELL", "pg_isready -U $${v('POSTGRES_USER', ':-shutro')}"]`,
         '      interval: 5s',
         '      retries: 30',
         '',
@@ -379,9 +379,11 @@ export function composeYaml(options) {
         '    env_file: .env',
         '    environment:',
         `      DATABASE_URL: ${v('DOCKER_DATABASE_URL', `:-postgres://${user}:${v('POSTGRES_PASSWORD')}@db:5432/${v('POSTGRES_DB', `:-${db}`)}`)}`,
-        ...(options.fileStorage === false ? [] : ['      KOSH_STORAGE_DIR: /app/var/attachments']),
+        ...(options.fileStorage === false
+            ? []
+            : ['      SHUTRO_ERP_STORAGE_DIR: /app/var/attachments']),
         '      # Plain HTTP on localhost; set "true" when the site is served over HTTPS.',
-        '      KOSH_SECURE_COOKIES: "false"',
+        '      SHUTRO_ERP_SECURE_COOKIES: "false"',
         '    depends_on:',
         '      db:',
         '        condition: service_healthy',
@@ -431,19 +433,19 @@ export function tsconfig() {
 export function readme(options) {
     return `# ${options.name}
 
-A [Kosh](https://www.npmjs.com/package/shutro-erp) installation, created with \`kosh init\`.
+A [Shutro ERP](https://www.npmjs.com/package/shutro-erp) installation, created with \`shutro-erp init\`.
 
 \`\`\`sh
 npm install
 npm start          # the API on http://localhost:${options.port}
 npm run web        # the back-office on http://localhost:${options.webPort ?? 5173} (sign in as the administrator)
-npx kosh migrate   # after changing modules: plan and apply database migrations, load seed data
-npx kosh seed      # load seed data again
+npx shutro-erp migrate   # after changing modules: plan and apply database migrations, load seed data
+npx shutro-erp seed      # load seed data again
 # Settings → Apps in the back-office installs, enables and disables apps (or, in the terminal:)
-npx kosh apps                   # the apps: installed, disabled, available
-npx kosh apps install <name>    # install an app (and what it needs) in one transaction
-npx kosh apps disable <name>    # switch an app off; its data stays (npx kosh apps enable <name>)
-npx kosh module create <name>   # a new module in src/modules/<name>/
+npx shutro-erp apps                   # the apps: installed, disabled, available
+npx shutro-erp apps install <name>    # install an app (and what it needs) in one transaction
+npx shutro-erp apps disable <name>    # switch an app off; its data stays (npx shutro-erp apps enable <name>)
+npx shutro-erp module create <name>   # a new module in src/modules/<name>/
 docker compose up -d --build    # everything in Docker: http://localhost:8080
 \`\`\`
 

package/dist/cli/ui.d.ts

@@ -1,10 +1,3 @@
-/**
- * The installer's look in the terminal, without dependencies: a logo, numbered steps, spinners for long work,
- * status lines (✔ ▲ ✖) and a summary card. On a Unicode terminal everything hangs on one rail down the left (│),
- * the questions of the interactive prompter included (`tui.ts`). Colour, Unicode and animation are detected from
- * the terminal (NO_COLOR, FORCE_COLOR, KOSH_ASCII=1, TERM=dumb, Windows consoles without Unicode); output that is not
- * a terminal (tests, logs, CI) gets plain lines with the same words and no escape codes.
- */
 /** What the terminal can show. */
 export interface Terminal {
     readonly color: boolean;
@@ -23,7 +16,7 @@ type Env = Readonly<Record<string, string | undefined>>;
 export declare function detectTerminal(stream: {
     readonly isTTY?: boolean;
     readonly columns?: number;
-}, env?: Env, platform?: string): Terminal;
+}, env?: Env, platform?: string, release?: string): Terminal;
 export declare const ESC = "\u001B[";
 /** The colours and weights the installer uses. */
 export type Style = 'bold' | 'dim' | 'inverse' | 'underline' | 'green' | 'yellow' | 'red' | 'cyan' | 'magenta' | 'gray';

package/dist/cli/ui.js

@@ -2,9 +2,10 @@
  * The installer's look in the terminal, without dependencies: a logo, numbered steps, spinners for long work,
  * status lines (✔ ▲ ✖) and a summary card. On a Unicode terminal everything hangs on one rail down the left (│),
  * the questions of the interactive prompter included (`tui.ts`). Colour, Unicode and animation are detected from
- * the terminal (NO_COLOR, FORCE_COLOR, KOSH_ASCII=1, TERM=dumb, Windows consoles without Unicode); output that is not
+ * the terminal (NO_COLOR, FORCE_COLOR, SHUTRO_ERP_ASCII=1, TERM=dumb, Windows consoles without Unicode); output that is not
  * a terminal (tests, logs, CI) gets plain lines with the same words and no escape codes.
  */
+import { release as osRelease } from 'node:os';
 /** Plain output: logs, tests, pipes. */
 export const PLAIN_TERMINAL = Object.freeze({
     color: false,
@@ -14,7 +15,7 @@ export const PLAIN_TERMINAL = Object.freeze({
     columns: 80,
 });
 /** Detects what `stream` (process.stdout) can show. */
-export function detectTerminal(stream, env = process.env, platform = process.platform) {
+export function detectTerminal(stream, env = process.env, platform = process.platform, release = osRelease()) {
     const tty = stream.isTTY === true && env['TERM'] !== 'dumb' && env['CI'] === undefined;
     const forced = env['FORCE_COLOR'] !== undefined && env['FORCE_COLOR'] !== '0';
     const color = env['NO_COLOR'] === undefined && (forced || tty);
@@ -24,11 +25,16 @@ export function detectTerminal(stream, env = process.env, platform = process.pla
         env['ConEmuTask'] === '{cmd::Cmder}' ||
         env['TERM'] === 'xterm-256color' ||
         env['TERM'] === 'alacritty';
-    const unicode = env['KOSH_ASCII'] !== '1' && (platform === 'win32' ? modernWindows : env['TERM'] !== 'linux');
+    // Windows 10 and later: the console host shows box drawing and colours too (UTF-8, virtual terminal); pictographs
+    // only in the modern terminals. Older Windows keeps ASCII.
+    const windows10 = Number(release.split('.')[0]) >= 10;
+    const unicode = env['KOSH_ASCII'] !== '1' &&
+        env['SHUTRO_ERP_ASCII'] !== '1' &&
+        (platform === 'win32' ? modernWindows || windows10 : env['TERM'] !== 'linux');
     return {
         color,
         unicode,
-        emoji: unicode && tty,
+        emoji: unicode && tty && (platform !== 'win32' || modernWindows),
         animate: tty,
         columns: Math.max(40, Math.min(stream.columns ?? 80, 120)),
     };
@@ -92,12 +98,12 @@ export const ICONS = {
     rocket: ['🚀', '◆'],
 };
 const LOGO = [
-    '██╗  ██╗ ██████╗ ███████╗██╗  ██╗',
-    '██║ ██╔╝██╔═══██╗██╔════╝██║  ██║',
-    '█████╔╝ ██║   ██║███████╗███████║',
-    '██╔═██╗ ██║   ██║╚════██║██╔══██║',
-    '██║  ██╗╚██████╔╝███████║██║  ██║',
-    '╚═╝  ╚═╝ ╚═════╝ ╚══════╝╚═╝  ╚═╝',
+    '███████╗██╗  ██╗██╗   ██╗████████╗██████╗  ██████╗',
+    '██╔════╝██║  ██║██║   ██║╚══██╔══╝██╔══██╗██╔═══██╗',
+    '███████╗███████║██║   ██║   ██║   ██████╔╝██║   ██║',
+    '╚════██║██╔══██║██║   ██║   ██║   ██╔══██╗██║   ██║',
+    '███████║██║  ██║╚██████╔╝   ██║   ██║  ██║╚██████╔╝',
+    '╚══════╝╚═╝  ╚═╝ ╚═════╝    ╚═╝   ╚═╝  ╚═╝ ╚═════╝',
 ];
 /** Cyan to violet, one 256-colour step per logo line. */
 const GRADIENT = [51, 45, 39, 33, 63, 99];
@@ -141,7 +147,7 @@ export function createUi(out, terminal = PLAIN_TERMINAL, options = {}) {
         icon,
         async banner(subtitle) {
             if (!terminal.unicode) {
-                write(`\n  ${s('bold', 'K O S H')}  ${subtitle}\n`);
+                write(`\n  ${s('bold', 'S H U T R O   E R P')}  ${subtitle}\n`);
                 return;
             }
             write('\n');

package/dist/contacts/.kosh/bindings.js

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 07f36b4355890ebe
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 2271aaa68e1a18a5
 // Bindings of module `contacts`: import the definition API from here to get types scoped to what it can see.
 export { defineModel, defineModule, extendModel, f, replace } from '../../server/orm.js';
 import { definitions } from '../../server/orm.js';

package/dist/contacts/.kosh/schema.d.ts

@@ -1,10 +1,11 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 07f36b4355890ebe
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 2271aaa68e1a18a5
 // Schema view of module `contacts` (RFC 0002 §7.7): the models it owns or depends on, with the extensions it can see.
 import type { F } from '../../server/orm.js';
 
 /** Model name → model type (RFC 0002 §7.7). */
 export interface SchemaView {
   readonly 'audit.event': AuditEvent;
+  readonly 'auth.api_key': AuthApiKey;
   readonly 'auth.credential': AuthCredential;
   readonly 'auth.session': AuthSession;
   readonly 'auth.user_grant': AuthUserGrant;
@@ -42,6 +43,34 @@ export interface AuditEvent {
 export interface AuditEventMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'audit.event'> {
 }
 
+/** `auth.api_key` (owner: base). */
+export interface AuthApiKey {
+  readonly name: 'auth.api_key';
+  readonly fields: {
+    readonly id: F.Id<'auth.api_key'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly name: F.Char<{ readonly required: true }>;
+    readonly user: F.Many2one<'res.users', { readonly required: true }>;
+    readonly tokenHash: F.Char<{ readonly required: true }>;
+    readonly prefix: F.Char<{ readonly required: true }>;
+    readonly scopes: F.Text<{ readonly required: true }>;
+    readonly expiresAt: F.Datetime<{ readonly required: true }>;
+    readonly lastUsedAt: F.Datetime;
+    readonly lastUsedIp: F.Char;
+    readonly revoked: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly issuedBy: F.Many2one<'res.users'>;
+  };
+  readonly methods: AuthApiKeyMethods;
+}
+
+/** Methods of `auth.api_key`: declared ones and transitions. */
+export interface AuthApiKeyMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.api_key'> {
+}
+
 /** `auth.credential` (owner: base). */
 export interface AuthCredential {
   readonly name: 'auth.credential';
@@ -260,6 +289,7 @@ export interface ResUsers {
     readonly companies: F.Many2many<'res.company', { readonly required: true }>;
     readonly lang: F.Char<{ readonly default: true }>;
     readonly tz: F.Char<{ readonly default: true }>;
+    readonly isService: F.Bool<{ readonly required: true; readonly default: true }>;
   };
   readonly methods: ResUsersMethods;
 }

package/dist/l10n_bd/.kosh/bindings.js

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 3a5b3163d9a0a2af
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 52fb4c0464f10e60
 // Bindings of module `l10n_bd`: import the definition API from here to get types scoped to what it can see.
 export { defineModel, defineModule, extendModel, f, replace } from '../../server/orm.js';
 import { definitions } from '../../server/orm.js';

package/dist/l10n_bd/.kosh/schema.d.ts

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 3a5b3163d9a0a2af
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 52fb4c0464f10e60
 // Schema view of module `l10n_bd` (RFC 0002 §7.7): the models it owns or depends on, with the extensions it can see.
 import type { F } from '../../server/orm.js';
 
@@ -22,6 +22,7 @@ export interface SchemaView {
   readonly 'approval.policy': ApprovalPolicy;
   readonly 'approval.request': ApprovalRequest;
   readonly 'audit.event': AuditEvent;
+  readonly 'auth.api_key': AuthApiKey;
   readonly 'auth.credential': AuthCredential;
   readonly 'auth.session': AuthSession;
   readonly 'auth.user_grant': AuthUserGrant;
@@ -583,6 +584,34 @@ export interface AuditEvent {
 export interface AuditEventMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'audit.event'> {
 }
 
+/** `auth.api_key` (owner: base). */
+export interface AuthApiKey {
+  readonly name: 'auth.api_key';
+  readonly fields: {
+    readonly id: F.Id<'auth.api_key'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly name: F.Char<{ readonly required: true }>;
+    readonly user: F.Many2one<'res.users', { readonly required: true }>;
+    readonly tokenHash: F.Char<{ readonly required: true }>;
+    readonly prefix: F.Char<{ readonly required: true }>;
+    readonly scopes: F.Text<{ readonly required: true }>;
+    readonly expiresAt: F.Datetime<{ readonly required: true }>;
+    readonly lastUsedAt: F.Datetime;
+    readonly lastUsedIp: F.Char;
+    readonly revoked: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly issuedBy: F.Many2one<'res.users'>;
+  };
+  readonly methods: AuthApiKeyMethods;
+}
+
+/** Methods of `auth.api_key`: declared ones and transitions. */
+export interface AuthApiKeyMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.api_key'> {
+}
+
 /** `auth.credential` (owner: base). */
 export interface AuthCredential {
   readonly name: 'auth.credential';
@@ -1224,6 +1253,7 @@ export interface ResUsers {
     readonly companies: F.Many2many<'res.company', { readonly required: true }>;
     readonly lang: F.Char<{ readonly default: true }>;
     readonly tz: F.Char<{ readonly default: true }>;
+    readonly isService: F.Bool<{ readonly required: true; readonly default: true }>;
   };
   readonly methods: ResUsersMethods;
 }

package/dist/l10n_in/.kosh/bindings.js

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: b77299ae8f7c3001
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 3a48057268d9c891
 // Bindings of module `l10n_in`: import the definition API from here to get types scoped to what it can see.
 export { defineModel, defineModule, extendModel, f, replace } from '../../server/orm.js';
 import { definitions } from '../../server/orm.js';

package/dist/l10n_in/.kosh/schema.d.ts

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: b77299ae8f7c3001
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 3a48057268d9c891
 // Schema view of module `l10n_in` (RFC 0002 §7.7): the models it owns or depends on, with the extensions it can see.
 import type { F } from '../../server/orm.js';
 
@@ -22,6 +22,7 @@ export interface SchemaView {
   readonly 'approval.policy': ApprovalPolicy;
   readonly 'approval.request': ApprovalRequest;
   readonly 'audit.event': AuditEvent;
+  readonly 'auth.api_key': AuthApiKey;
   readonly 'auth.credential': AuthCredential;
   readonly 'auth.session': AuthSession;
   readonly 'auth.user_grant': AuthUserGrant;
@@ -605,6 +606,34 @@ export interface AuditEvent {
 export interface AuditEventMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'audit.event'> {
 }
 
+/** `auth.api_key` (owner: base). */
+export interface AuthApiKey {
+  readonly name: 'auth.api_key';
+  readonly fields: {
+    readonly id: F.Id<'auth.api_key'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly name: F.Char<{ readonly required: true }>;
+    readonly user: F.Many2one<'res.users', { readonly required: true }>;
+    readonly tokenHash: F.Char<{ readonly required: true }>;
+    readonly prefix: F.Char<{ readonly required: true }>;
+    readonly scopes: F.Text<{ readonly required: true }>;
+    readonly expiresAt: F.Datetime<{ readonly required: true }>;
+    readonly lastUsedAt: F.Datetime;
+    readonly lastUsedIp: F.Char;
+    readonly revoked: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly issuedBy: F.Many2one<'res.users'>;
+  };
+  readonly methods: AuthApiKeyMethods;
+}
+
+/** Methods of `auth.api_key`: declared ones and transitions. */
+export interface AuthApiKeyMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.api_key'> {
+}
+
 /** `auth.credential` (owner: base). */
 export interface AuthCredential {
   readonly name: 'auth.credential';
@@ -1286,6 +1315,7 @@ export interface ResUsers {
     readonly companies: F.Many2many<'res.company', { readonly required: true }>;
     readonly lang: F.Char<{ readonly default: true }>;
     readonly tz: F.Char<{ readonly default: true }>;
+    readonly isService: F.Bool<{ readonly required: true; readonly default: true }>;
   };
   readonly methods: ResUsersMethods;
 }

package/dist/l10n_in/einvoice.js

@@ -280,7 +280,7 @@ export async function einvoiceState(env, id) {
         },
     };
 }
-const unavailable = () => new HttpProblem(409, 'no-gst-provider', 'E-invoicing is not set up', 'No IRP / e-way bill provider is configured for this installation (KOSH_GST_PROVIDER).');
+const unavailable = () => new HttpProblem(409, 'no-gst-provider', 'E-invoicing is not set up', 'No IRP / e-way bill provider is configured for this installation (SHUTRO_ERP_GST_PROVIDER).');
 /**
  * Registers a document with the IRP. The document must be readable and the user may post (the right to e-invoice
  * goes with it). A refusal, here or by the IRP, is kept on the document and answered with 422.

package/dist/l10n_in/web/messages.js

@@ -43,7 +43,7 @@ export const messages = {
             save: 'Save',
             saved: 'Saved.',
             provider: 'IRP provider: {{provider}}',
-            noProvider: 'No IRP provider is set up (KOSH_GST_PROVIDER): e-invoicing is unavailable.',
+            noProvider: 'No IRP provider is set up (SHUTRO_ERP_GST_PROVIDER): e-invoicing is unavailable.',
         },
         gst: {
             title: 'GST returns',
@@ -122,7 +122,7 @@ export const messages = {
             save: 'সংরক্ষণ',
             saved: 'সংরক্ষিত।',
             provider: 'IRP প্রদানকারী: {{provider}}',
-            noProvider: 'কোনো IRP প্রদানকারী নেই (KOSH_GST_PROVIDER): ই-চালান অনুপলব্ধ।',
+            noProvider: 'কোনো IRP প্রদানকারী নেই (SHUTRO_ERP_GST_PROVIDER): ই-চালান অনুপলব্ধ।',
         },
         gst: {
             title: 'জিএসটি রিটার্ন',

package/dist/mail/index.js

@@ -40,14 +40,14 @@ export function mailerFromEnv(env = process.env) {
     const url = env['SMTP_URL'];
     if (url === undefined || url === '')
         return undefined;
-    return createSmtpMailer({ url, from: env['MAIL_FROM'] ?? 'Kosh <kosh@localhost>' });
+    return createSmtpMailer({ url, from: env['MAIL_FROM'] ?? 'Shutro ERP <shutro-erp@localhost>' });
 }
 /** A mailer that keeps what it is given (tests, dry runs). */
 export function createMemoryMailer() {
     const sent = [];
     return {
         name: 'memory',
-        from: 'Kosh <kosh@localhost>',
+        from: 'Shutro ERP <shutro-erp@localhost>',
         sent,
         async send(mail) {
             sent.push(mail);

package/dist/modules-sdk/loader.js

@@ -63,11 +63,11 @@ export function loadModules(roots, options) {
     const actions = new Map();
     for (const m of modules) {
         if (!satisfies(options.koshVersion, m.kosh))
-            fail(`Module '${m.name}' needs Kosh ${m.kosh}; this is Kosh ${options.koshVersion}.`, 'Upgrade the module or the framework.');
+            fail(`Module '${m.name}' needs Shutro ERP ${m.kosh}; this is Shutro ERP ${options.koshVersion}.`, 'Upgrade the module or the framework.');
         const deps = closure(m);
         for (const sd of m.shutro.depends)
             if (!deps.has(sd.name))
-                fail(`Module '${m.name}' uses the Shutro module '${sd.name}' but no Kosh module it depends on provides it.`, `Add the Kosh module '${sd.name}' to depends.`);
+                fail(`Module '${m.name}' uses the Shutro module '${sd.name}' but no Shutro ERP module it depends on provides it.`, `Add the Shutro ERP module '${sd.name}' to depends.`);
         // Groups an access level may grant: this module's and its dependencies'.
         const groups = new Set(m.shutro.groups.map((g) => g.code));
         for (const d of deps)

package/dist/notify/messages.js

@@ -13,9 +13,9 @@ export const TEXTS = {
         },
         states: { approved: 'approved', rejected: 'rejected' },
         email: {
-            open: 'Open in Kosh',
-            why: 'You receive this email because of your notification settings in Kosh.',
-            digestSubject: 'Your Kosh summary: {{count}} notifications',
+            open: 'Open in Shutro ERP',
+            why: 'You receive this email because of your notification settings in Shutro ERP.',
+            digestSubject: 'Your Shutro ERP summary: {{count}} notifications',
             digestIntro: 'What happened since your last summary, by record.',
         },
     },

package/dist/notify/routes.js

@@ -50,7 +50,7 @@ export function registerNotifyRoutes({ app }, options = {}) {
     app.get('/api/v1/notifications/push/key', async (request) => {
         await request.env(async () => undefined); // signed in
         if (options.pusher === undefined)
-            throw new HttpProblem(404, 'push-not-configured', 'Push is not set up', 'This installation has no VAPID keys.', 'Set VAPID_PUBLIC_KEY, VAPID_PRIVATE_KEY and VAPID_SUBJECT (kosh init writes them).');
+            throw new HttpProblem(404, 'push-not-configured', 'Push is not set up', 'This installation has no VAPID keys.', 'Set VAPID_PUBLIC_KEY, VAPID_PRIVATE_KEY and VAPID_SUBJECT (shutro-erp init writes them).');
         return { publicKey: options.pusher.publicKey };
     });
     app.post('/api/v1/notifications/push', async (request) => {

package/dist/notify/web/messages.js

@@ -11,7 +11,7 @@ export const messages = {
         push: {
             off: 'Push notifications on this device are off',
             on: 'Push notifications on this device are on',
-            denied: 'This browser blocks notifications from Kosh',
+            denied: 'This browser blocks notifications from Shutro ERP',
             busy: 'One moment…',
             turnOn: 'Turn on',
             turnOff: 'Turn off',

package/dist/portal/.kosh/bindings.js

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 435daa394f2704fc
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: bae647ca883975a1
 // Bindings of module `portal`: import the definition API from here to get types scoped to what it can see.
 export { defineModel, defineModule, extendModel, f, replace } from '../../server/orm.js';
 import { definitions } from '../../server/orm.js';

package/dist/portal/.kosh/schema.d.ts

@@ -1,10 +1,11 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 435daa394f2704fc
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: bae647ca883975a1
 // Schema view of module `portal` (RFC 0002 §7.7): the models it owns or depends on, with the extensions it can see.
 import type { F } from '../../server/orm.js';
 
 /** Model name → model type (RFC 0002 §7.7). */
 export interface SchemaView {
   readonly 'audit.event': AuditEvent;
+  readonly 'auth.api_key': AuthApiKey;
   readonly 'auth.credential': AuthCredential;
   readonly 'auth.session': AuthSession;
   readonly 'auth.user_grant': AuthUserGrant;
@@ -45,6 +46,34 @@ export interface AuditEvent {
 export interface AuditEventMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'audit.event'> {
 }
 
+/** `auth.api_key` (owner: base). */
+export interface AuthApiKey {
+  readonly name: 'auth.api_key';
+  readonly fields: {
+    readonly id: F.Id<'auth.api_key'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly name: F.Char<{ readonly required: true }>;
+    readonly user: F.Many2one<'res.users', { readonly required: true }>;
+    readonly tokenHash: F.Char<{ readonly required: true }>;
+    readonly prefix: F.Char<{ readonly required: true }>;
+    readonly scopes: F.Text<{ readonly required: true }>;
+    readonly expiresAt: F.Datetime<{ readonly required: true }>;
+    readonly lastUsedAt: F.Datetime;
+    readonly lastUsedIp: F.Char;
+    readonly revoked: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly issuedBy: F.Many2one<'res.users'>;
+  };
+  readonly methods: AuthApiKeyMethods;
+}
+
+/** Methods of `auth.api_key`: declared ones and transitions. */
+export interface AuthApiKeyMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.api_key'> {
+}
+
 /** `auth.credential` (owner: base). */
 export interface AuthCredential {
   readonly name: 'auth.credential';
@@ -336,6 +365,7 @@ export interface ResUsers {
     readonly companies: F.Many2many<'res.company', { readonly required: true }>;
     readonly lang: F.Char<{ readonly default: true }>;
     readonly tz: F.Char<{ readonly default: true }>;
+    readonly isService: F.Bool<{ readonly required: true; readonly default: true }>;
     readonly portalPartner: F.Many2one<'res.partner'>; // portal
   };
   readonly methods: ResUsersMethods;

package/dist/product/.kosh/bindings.js

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 5d099798463eb84a
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 86d7229d7b275957
 // Bindings of module `product`: import the definition API from here to get types scoped to what it can see.
 export { defineModel, defineModule, extendModel, f, replace } from '../../server/orm.js';
 import { definitions } from '../../server/orm.js';