shutro-erp 0.3.0 → 0.3.2

package/dist/server/host.js

@@ -152,7 +152,11 @@ export async function createAppHost(options) {
         current.server.app.server.emit('upgrade', req, socket, head);
     });
     const listener = listen
-        ? pg.createDriver({ url: options.databaseUrl, max: 1, applicationName: 'kosh apps listener' })
+        ? pg.createDriver({
+            url: options.databaseUrl,
+            max: 1,
+            applicationName: 'shutro-erp apps listener',
+        })
         : undefined;
     const stopListening = await listener?.listen(APPS_CHANNEL, (digest) => {
         if (digest !== current.digest)

package/dist/server/identity.d.ts

@@ -17,6 +17,13 @@ export interface RequestIdentity {
     readonly grants?: readonly string[];
     readonly lang?: string;
     readonly tz?: string;
+    /**
+     * An API key's scopes (RFC 0017 §5.1), when the request carries one: they narrow what the user may do (`*`,
+     * `read:<app>`, `write:<app>`); the user's rights still apply. Absent for sessions.
+     */
+    readonly scopes?: readonly string[];
+    /** The API key the request carries. */
+    readonly apiKey?: number;
 }
 /**
  * The single explicit bypass (CLAUDE.md "superuser mode", RFC 0003 §5.2): the user holds an administrator role

package/dist/server/index.d.ts

@@ -9,7 +9,7 @@ export { IDEMPOTENCY_TABLE, idempotencyTableStatements, idempotent, type Outcome
 export { type ApiField, type ApiModel, apiModels, defaultFields, publicApiModels, schemaName, } from './api/metadata.js';
 export { type FoundRecord, type MenuNode, moduleVisible, Navigation } from './api/navigation.js';
 export { fieldSchema, openApiDocument, openApiOf } from './api/openapi.js';
-export { registerRestApi } from './api/rest.js';
+export { readApiRecord, registerRestApi } from './api/rest.js';
 export { type ServedView, type ViewField, ViewRegistry } from './api/views.js';
 export { APPS_CHANNEL, APPS_LOG_TABLE, APPS_TABLE, type AppLoadContext, type ApplyAppsOptions, type AppsResult, applyApps, appsDigest, appTableStatements, FRAMEWORK_TABLES, installDefaults, installedApps, installedModules, type PrepareAppsOptions, type PreparedApps, prepareApps, readInstalledApps, recordInstalledApps, restoreAppMigrations, } from './apps.js';
 export { type AuditInput, audit } from './audit.js';
@@ -20,6 +20,7 @@ export { type InstallBaseOptions, installBase } from './auth/install.js';
 export { registerAuthRoutes } from './auth/routes.js';
 export { type AuthOptions, AuthService, cookieOf, SESSION_COOKIE, type SessionInfo, timeOf, type UserInfo, } from './auth/service.js';
 export { DEMO_PASSWORD, type DemoResult, installDemo } from './demo.js';
+export { applyEnvironmentNames } from './env-names.js';
 export { HttpProblem, type Problem, problemOf, ServerConfigError } from './errors.js';
 export { type AppHost, type AppHostOptions, createAppHost, startAppHost } from './host.js';
 export { type Authenticator, denyAll, isSuperuser, languageOf, type RequestIdentity, type RequestRunOptions, runOptionsOf, } from './identity.js';

package/dist/server/index.js

@@ -9,7 +9,7 @@ export { IDEMPOTENCY_TABLE, idempotencyTableStatements, idempotent, } from './ap
 export { apiModels, defaultFields, publicApiModels, schemaName, } from './api/metadata.js';
 export { moduleVisible, Navigation } from './api/navigation.js';
 export { fieldSchema, openApiDocument, openApiOf } from './api/openapi.js';
-export { registerRestApi } from './api/rest.js';
+export { readApiRecord, registerRestApi } from './api/rest.js';
 export { ViewRegistry } from './api/views.js';
 export { APPS_CHANNEL, APPS_LOG_TABLE, APPS_TABLE, applyApps, appsDigest, appTableStatements, FRAMEWORK_TABLES, installDefaults, installedApps, installedModules, prepareApps, readInstalledApps, recordInstalledApps, restoreAppMigrations, } from './apps.js';
 export { audit } from './audit.js';
@@ -20,6 +20,7 @@ export { installBase } from './auth/install.js';
 export { registerAuthRoutes } from './auth/routes.js';
 export { AuthService, cookieOf, SESSION_COOKIE, timeOf, } from './auth/service.js';
 export { DEMO_PASSWORD, installDemo } from './demo.js';
+export { applyEnvironmentNames } from './env-names.js';
 export { HttpProblem, problemOf, ServerConfigError } from './errors.js';
 export { createAppHost, startAppHost } from './host.js';
 export { denyAll, isSuperuser, languageOf, runOptionsOf, } from './identity.js';

package/dist/server/registry.js

@@ -53,6 +53,6 @@ export function buildKoshRegistry(modules, options = {}) {
     });
     for (const name of registry.loadOrder)
         if (!loaded.byName.has(name) && name !== CHANGE_EVENTS_MODULE)
-            throw new ServerConfigError(`The Shutro module '${name}' has no Kosh manifest.`, 'Wrap it with defineModule() from shutro-erp/modules-sdk (its access levels are required) and depend on it.');
+            throw new ServerConfigError(`The Shutro module '${name}' has no Shutro ERP manifest.`, 'Wrap it with defineModule() from shutro-erp/modules-sdk (its access levels are required) and depend on it.');
     return { loaded, registry };
 }

package/dist/server/server.d.ts

@@ -1,3 +1,8 @@
+/**
+ * The Kosh server (RFC 0002, CLAUDE.md robustness): Fastify with Pino logs (request ids, redacted credentials),
+ * authentication through an {@link Authenticator}, one Shutro transaction per request (`request.env`), RFC 9457
+ * errors, rate limiting on Valkey, OpenTelemetry spans, health checks, and graceful shutdown.
+ */
 import type { KoshModule } from '../modules-sdk/index.js';
 import type { Span } from '@opentelemetry/api';
 import { type FastifyInstance, type FastifyServerFactory, type FastifyServerOptions } from 'fastify';

package/dist/server/server.js

@@ -12,8 +12,11 @@ import { Navigation } from './api/navigation.js';
 import { openApiDocument } from './api/openapi.js';
 import { registerRestApi } from './api/rest.js';
 import { ViewRegistry } from './api/views.js';
+import { registerApiKeyRoutes } from './auth/api-keys.js';
 import { registerAuthRoutes } from './auth/routes.js';
+import { enforceScopes } from './auth/scopes.js';
 import { AuthService } from './auth/service.js';
+import { applyEnvironmentNames } from './env-names.js';
 import { HttpProblem, problemOf, ServerConfigError } from './errors.js';
 import { denyAll, runOptionsOf } from './identity.js';
 import { orm, pg } from './orm.js';
@@ -43,6 +46,7 @@ function externalGroupsOf(registry) {
 }
 /** Creates the server (not listening yet). @throws {ServerConfigError} for modules that cannot load together */
 export async function createServer(options) {
+    applyEnvironmentNames(); // SHUTRO_ERP_* settings, read under their KOSH_* names
     const registry = buildKoshRegistry(options.modules, {
         ...(options.security === undefined ? {} : { security: options.security }),
     });
@@ -102,6 +106,15 @@ export async function createServer(options) {
             }
         });
     });
+    // The app each module route belongs to (API key scopes, RFC 0017 §5.1): set while a module registers its routes.
+    const routeApps = new Map();
+    let routeModule = null;
+    app.addHook('onRoute', (route) => {
+        if (routeModule === null)
+            return;
+        for (const method of [route.method].flat())
+            routeApps.set(`${method} ${route.url}`, routeModule);
+    });
     app.addHook('onRequest', async (request, reply) => {
         reply.header('x-request-id', request.id);
         request.span = tracer.startSpan(`HTTP ${request.method}`, {
@@ -118,6 +131,17 @@ export async function createServer(options) {
         if (config.public === true || config.auth === false)
             return;
         request.identity = await authenticate(request);
+        // An API key's scopes (RFC 0017 §5.1): the route's app is the module that registered it, or its model's.
+        const scopes = request.identity?.scopes;
+        if (scopes !== undefined) {
+            const route = request.routeOptions.url ?? '';
+            const model = request.params?.model;
+            const owner = routeApps.get(`${request.method} ${route}`) ??
+                (typeof model === 'string'
+                    ? (registry.registry.models.get(model)?.module ?? null)
+                    : null);
+            enforceScopes(scopes, request.method, route, owner);
+        }
         // Customers and vendors of the portal (RFC 0015 §5.1): the portal API and signing in, nothing else.
         if (request.identity !== null &&
             external.size > 0 &&
@@ -133,7 +157,11 @@ export async function createServer(options) {
             max: options.rateLimit?.max ?? 600,
             timeWindow: options.rateLimit?.timeWindow ?? '1 minute',
             ...(valkey === undefined ? {} : { redis: valkey, nameSpace: 'kosh:ratelimit:' }),
-            keyGenerator: (request) => request.identity === null ? `ip:${request.ip}` : `user:${request.identity.user}`,
+            keyGenerator: (request) => request.identity === null
+                ? `ip:${request.ip}`
+                : request.identity.apiKey !== undefined
+                    ? `key:${request.identity.apiKey}`
+                    : `user:${request.identity.user}`,
             allowList: (request) => request.routeOptions.config.public === true,
             errorResponseBuilder: (_request, context) => new HttpProblem(429, 'rate-limited', 'Too many requests', `Limit of ${context.max} requests per ${context.after} reached.`, `Retry after ${context.after}.`),
         });
@@ -170,8 +198,10 @@ export async function createServer(options) {
             detail: `No route ${request.method} ${request.url.split('?')[0] ?? ''}.`,
         });
     });
-    if (auth !== undefined)
+    if (auth !== undefined) {
         registerAuthRoutes(app, auth, { loginLimit: options.auth?.loginLimit ?? 10 });
+        registerApiKeyRoutes(app, auth, registry);
+    }
     // The generated REST API and its OpenAPI document (RFC 0002 §6.3–6.4).
     for (const statement of idempotencyTableStatements())
         await driver.query(statement);
@@ -182,7 +212,10 @@ export async function createServer(options) {
         models,
         driver,
         openapi: () => {
-            openapi ??= openApiDocument(models.values(), { title: 'Kosh API', version: KOSH_VERSION });
+            openapi ??= openApiDocument(models.values(), {
+                title: 'Shutro ERP API',
+                version: KOSH_VERSION,
+            });
             return openapi;
         },
     });
@@ -198,8 +231,15 @@ export async function createServer(options) {
         ...(options.apps === undefined ? {} : { apps: options.apps }),
     };
     for (const m of registry.loaded.modules)
-        if (m.routes !== undefined)
-            await m.routes(context);
+        if (m.routes !== undefined) {
+            routeModule = m.name;
+            try {
+                await m.routes(context);
+            }
+            finally {
+                routeModule = null;
+            }
+        }
     // Health checks: public, not rate limited. Liveness: the process answers. Readiness: dependencies answer.
     app.get('/health/live', { config: { public: true } }, async () => ({ status: 'ok' }));
     app.get('/health/ready', { config: { public: true } }, async (_request, reply) => {

package/dist/settings/routes.js

@@ -64,7 +64,7 @@ export function registerAppRoutes(context) {
     const { app, driver } = context;
     const appsOf = () => {
         if (context.apps === undefined)
-            throw new HttpProblem(503, 'app-manager-unavailable', 'App manager unavailable', 'This server does not run in an app host, so it cannot change the installed apps.', 'Start the server with createAppHost (the starter project does), or use npx kosh apps.');
+            throw new HttpProblem(503, 'app-manager-unavailable', 'App manager unavailable', 'This server does not run in an app host, so it cannot change the installed apps.', 'Start the server with createAppHost (the starter project does), or use npx shutro-erp apps.');
         return context.apps;
     };
     /** Administrators and App managers only; returns the caller's user id. */

package/dist/settings/web/ApiKeysPage.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Settings › API keys (RFC 0017 §5.1): your keys — and the service accounts' for administrators —, a new key with its
+ * scopes and expiry, its secret shown once, revocation. The server decides what each key may do; scopes only narrow
+ * the user's own rights.
+ */
+import { type PageProps } from '../../ui/index.js';
+import { type ReactElement } from 'react';
+export declare function ApiKeysPage({ api }: PageProps): ReactElement;

package/dist/settings/web/ApiKeysPage.js

@@ -0,0 +1,70 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Settings › API keys (RFC 0017 §5.1): your keys — and the service accounts' for administrators —, a new key with its
+ * scopes and expiry, its secret shown once, revocation. The server decides what each key may do; scopes only narrow
+ * the user's own rights.
+ */
+import { Alert, ApiError, Button, Input, Label, Select, useKosh } from '../../ui/index.js';
+import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
+import { useId, useState } from 'react';
+import { useTranslation } from 'react-i18next';
+export function ApiKeysPage({ api }) {
+    const { t } = useTranslation('settings');
+    const { format } = useKosh();
+    const id = useId();
+    const queryClient = useQueryClient();
+    const keys = useQuery({
+        queryKey: ['settings', 'api-keys'],
+        queryFn: () => api.call('GET', '/api/v1/auth/api-keys'),
+    });
+    const scopes = useQuery({
+        queryKey: ['settings', 'scopes'],
+        queryFn: () => api.call('GET', '/api/v1/auth/scopes'),
+    });
+    const apps = [
+        ...new Set((scopes.data?.scopes ?? [])
+            .map((s) => s.scope)
+            .filter((s) => s.startsWith('read:'))
+            .map((s) => s.slice(5))),
+    ];
+    const [name, setName] = useState('');
+    const [days, setDays] = useState('365');
+    const [everything, setEverything] = useState(false);
+    const [levels, setLevels] = useState({});
+    const [secret, setSecret] = useState(null);
+    const chosen = everything
+        ? ['*']
+        : Object.entries(levels).flatMap(([app, level]) => level === 'none' ? [] : [`${level}:${app}`]);
+    const refresh = () => queryClient.invalidateQueries({ queryKey: ['settings', 'api-keys'] });
+    const create = useMutation({
+        mutationFn: () => api.call('POST', '/api/v1/auth/api-keys', {
+            name,
+            scopes: chosen,
+            expiresInDays: Number(days),
+        }),
+        onSuccess: async (key) => {
+            setSecret(key.token);
+            setName('');
+            setLevels({});
+            setEverything(false);
+            await refresh();
+        },
+    });
+    const revoke = useMutation({
+        mutationFn: (key) => api.call('POST', `/api/v1/auth/api-keys/${key}/revoke`),
+        onSuccess: refresh,
+    });
+    const error = create.error ?? revoke.error;
+    const message = (e) => (e instanceof ApiError ? e.message : String(e));
+    return (_jsxs("div", { className: "mx-auto grid max-w-4xl gap-6 p-4", children: [_jsx("h1", { className: "text-xl font-semibold", children: t('apiKeys.title') }), _jsx("p", { className: "text-sm text-muted-foreground", children: t('apiKeys.intro') }), error === null ? null : _jsx(Alert, { tone: "danger", children: message(error) }), secret === null ? null : (_jsx(Alert, { tone: "info", children: _jsxs("div", { className: "grid gap-2", children: [_jsx("p", { children: t('apiKeys.secretOnce') }), _jsx("code", { className: "break-all rounded bg-muted px-2 py-1 font-mono text-sm", children: secret }), _jsxs("div", { className: "flex gap-2", children: [_jsx(Button, { variant: "secondary", onClick: () => void navigator.clipboard?.writeText(secret), children: t('apiKeys.copy') }), _jsx(Button, { variant: "secondary", onClick: () => setSecret(null), children: t('apiKeys.done') })] })] }) })), _jsxs("section", { className: "grid gap-3 rounded-lg border p-4", "aria-labelledby": `${id}-new`, children: [_jsx("h2", { id: `${id}-new`, className: "font-medium", children: t('apiKeys.new') }), _jsxs("div", { className: "flex flex-wrap items-end gap-3", children: [_jsxs("div", { className: "grid gap-1", children: [_jsx(Label, { htmlFor: `${id}-name`, children: t('apiKeys.name') }), _jsx(Input, { id: `${id}-name`, className: "w-64", value: name, onChange: (e) => setName(e.target.value) })] }), _jsx(Select, { id: `${id}-days`, label: t('apiKeys.expires'), className: "w-40", value: days, options: ['30', '90', '365', '730'].map((d) => ({
+                                    value: d,
+                                    label: t('apiKeys.days', { count: Number(d) }),
+                                })), onChange: setDays })] }), _jsxs("label", { className: "flex items-center gap-2 text-sm", children: [_jsx("input", { type: "checkbox", checked: everything, onChange: (e) => setEverything(e.target.checked) }), t('apiKeys.everything')] }), everything ? null : (_jsxs("fieldset", { className: "grid gap-2 sm:grid-cols-2", children: [_jsx("legend", { className: "mb-1 text-sm text-muted-foreground", children: t('apiKeys.perApp') }), apps.map((app) => (_jsx(Select, { id: `${id}-app-${app}`, label: app, value: levels[app] ?? 'none', options: ['none', 'read', 'write'].map((l) => ({
+                                    value: l,
+                                    label: t(`apiKeys.levels.${l}`),
+                                })), onChange: (v) => setLevels({ ...levels, [app]: (v ?? 'none') }) }, app)))] })), _jsx("div", { children: _jsx(Button, { variant: "primary", disabled: name.trim() === '' || chosen.length === 0, busy: create.isPending, onClick: () => create.mutate(), children: t('apiKeys.create') }) })] }), (keys.data?.keys ?? []).length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: t('apiKeys.none') })) : (_jsx("div", { className: "overflow-x-auto", children: _jsxs("table", { className: "w-full text-sm", children: [_jsx("thead", { className: "bg-muted", children: _jsxs("tr", { children: [['name', 'user', 'key', 'scopes', 'expires', 'lastUsed', 'status'].map((c) => (_jsx("th", { className: "px-2 py-1 text-start", children: t(`apiKeys.columns.${c}`) }, c))), _jsx("th", { className: "px-2 py-1", children: _jsx("span", { className: "sr-only", children: t('apiKeys.revoke') }) })] }) }), _jsx("tbody", { children: (keys.data?.keys ?? []).map((k) => (_jsxs("tr", { className: "border-b", children: [_jsx("td", { className: "px-2 py-1", children: k.name }), _jsx("td", { className: "px-2 py-1", children: k.userName }), _jsxs("td", { className: "px-2 py-1 font-mono text-xs", children: [k.prefix, "\u2026"] }), _jsx("td", { className: "px-2 py-1", children: k.scopes.join(' ') }), _jsx("td", { className: "px-2 py-1", children: format.datetime(k.expiresAt) }), _jsx("td", { className: "px-2 py-1", children: k.lastUsedAt === null ? '—' : format.datetime(k.lastUsedAt) }), _jsx("td", { className: "px-2 py-1", children: k.revoked
+                                            ? t('apiKeys.revoked')
+                                            : new Date(k.expiresAt).getTime() < Date.now()
+                                                ? t('apiKeys.expired')
+                                                : t('apiKeys.active') }), _jsx("td", { className: "px-2 py-1 text-end", children: k.revoked ? null : (_jsx(Button, { variant: "secondary", "aria-label": t('apiKeys.revokeKey', { name: k.name }), busy: revoke.isPending && revoke.variables === k.id, onClick: () => revoke.mutate(k.id), children: t('apiKeys.revoke') })) })] }, k.id))) })] }) }))] }));
+}

package/dist/settings/web/index.d.ts

@@ -6,6 +6,7 @@
 import { type Registry } from '../../ui/index.js';
 import type { i18n } from 'i18next';
 import { messages } from './messages.js';
+export { ApiKeysPage } from './ApiKeysPage.js';
 export { AppsPage } from './AppsPage.js';
 /** Registers the Apps page (and its messages in `i18n`, when given). */
 export declare function registerSettingsWeb(registry: Registry, i18n?: i18n): Registry;

package/dist/settings/web/index.js

@@ -4,12 +4,16 @@
  * client action `settings.action_apps`) and its messages.
  */
 import { addMessages } from '../../ui/index.js';
+import { ApiKeysPage } from './ApiKeysPage.js';
 import { AppsPage } from './AppsPage.js';
 import { messages } from './messages.js';
+export { ApiKeysPage } from './ApiKeysPage.js';
 export { AppsPage } from './AppsPage.js';
 /** Registers the Apps page (and its messages in `i18n`, when given). */
 export function registerSettingsWeb(registry, i18n) {
     registry.registerPage('settings.Apps', AppsPage);
+    // Every signed-in user's own keys (RFC 0017 §5.1): in the user menu, not in the Settings app.
+    registry.registerUserPage('settings.ApiKeys', ApiKeysPage, { label: 'settings:apiKeys.title' });
     if (i18n !== undefined)
         addMessages(i18n, 'settings', messages);
     return registry;

package/dist/settings/web/messages.js

@@ -1,6 +1,37 @@
 /** Messages of the Settings app (namespace `settings`). */
 export const messages = {
     en: {
+        apiKeys: {
+            title: 'API keys',
+            intro: 'Keys let scripts and other systems call the API as you, within the scopes you give them. Your own rights still apply; a key can never do more than you.',
+            new: 'New key',
+            name: 'Name',
+            expires: 'Expires in',
+            days_one: '{{count}} day',
+            days_other: '{{count}} days',
+            everything: 'Everything I may do (*)',
+            perApp: 'Or per app:',
+            levels: { none: 'No access', read: 'Read', write: 'Read and change' },
+            create: 'Create key',
+            secretOnce: 'Copy the key now: it is shown only once.',
+            copy: 'Copy',
+            done: 'Done',
+            none: 'No API keys yet.',
+            columns: {
+                name: 'Name',
+                user: 'User',
+                key: 'Key',
+                scopes: 'Scopes',
+                expires: 'Expires',
+                lastUsed: 'Last used',
+                status: 'Status',
+            },
+            active: 'Active',
+            revoked: 'Revoked',
+            expired: 'Expired',
+            revoke: 'Revoke',
+            revokeKey: 'Revoke {{name}}',
+        },
         apps: 'Apps',
         appsIntro: 'Install the apps your business needs. Disabling keeps the data, so nothing is lost.',
         search: 'Search apps',
@@ -56,6 +87,37 @@ export const messages = {
         version: 'Version {{version}}',
     },
     bn: {
+        apiKeys: {
+            title: 'এপিআই কী',
+            intro: 'কী দিয়ে স্ক্রিপ্ট ও অন্য সিস্টেম আপনার হয়ে এপিআই ব্যবহার করে, আপনার দেওয়া পরিসরের মধ্যে। আপনার নিজের অধিকারই প্রযোজ্য; কোনো কী আপনার চেয়ে বেশি করতে পারে না।',
+            new: 'নতুন কী',
+            name: 'নাম',
+            expires: 'মেয়াদ',
+            days_one: '{{count}} দিন',
+            days_other: '{{count}} দিন',
+            everything: 'আমি যা করতে পারি সবকিছু (*)',
+            perApp: 'অথবা প্রতিটি অ্যাপের জন্য:',
+            levels: { none: 'প্রবেশাধিকার নেই', read: 'পড়া', write: 'পড়া ও পরিবর্তন' },
+            create: 'কী তৈরি করুন',
+            secretOnce: 'কী-টি এখনই কপি করুন: এটি একবারই দেখানো হয়।',
+            copy: 'কপি',
+            done: 'সম্পন্ন',
+            none: 'এখনো কোনো এপিআই কী নেই।',
+            columns: {
+                name: 'নাম',
+                user: 'ব্যবহারকারী',
+                key: 'কী',
+                scopes: 'পরিসর',
+                expires: 'মেয়াদ শেষ',
+                lastUsed: 'শেষ ব্যবহার',
+                status: 'অবস্থা',
+            },
+            active: 'সক্রিয়',
+            revoked: 'বাতিল',
+            expired: 'মেয়াদোত্তীর্ণ',
+            revoke: 'বাতিল করুন',
+            revokeKey: '{{name}} বাতিল করুন',
+        },
         apps: 'অ্যাপস',
         appsIntro: 'আপনার ব্যবসার প্রয়োজনীয় অ্যাপগুলো ইনস্টল করুন। নিষ্ক্রিয় করলে ডেটা থেকে যায়, কিছুই হারায় না।',
         search: 'অ্যাপ খুঁজুন',

package/dist/storage/routes.js

@@ -25,7 +25,7 @@ export function storageOf(app) {
     if (storage === undefined) {
         const configured = storageFromEnv();
         if (configured === null)
-            throw new HttpProblem(503, 'storage-unavailable', 'File storage is not configured', 'No object store is configured for attachments.', 'Set KOSH_STORAGE_DIR, or S3_ENDPOINT, S3_BUCKET, S3_ACCESS_KEY and S3_SECRET_KEY.');
+            throw new HttpProblem(503, 'storage-unavailable', 'File storage is not configured', 'No object store is configured for attachments.', 'Set SHUTRO_ERP_STORAGE_DIR, or S3_ENDPOINT, S3_BUCKET, S3_ACCESS_KEY and S3_SECRET_KEY.');
         storage = configured;
         stores.set(app, storage);
     }

package/dist/studio/build.js

@@ -42,7 +42,7 @@ export async function studioModules(cwd) {
 export async function runStudio(argv, write, cwd) {
     const [action, ...folders] = argv;
     if (action !== 'build') {
-        write('Usage: kosh studio build [folder …]   (default: every src/modules/*/studio.json)\n');
+        write('Usage: shutro-erp studio build [folder …]   (default: every src/modules/*/studio.json)\n');
         return 2;
     }
     const dirs = folders.length > 0 ? folders.map((f) => resolve(cwd, f)) : await studioModules(cwd);

package/dist/studio/generate.js

@@ -14,7 +14,7 @@ export class StudioSpecError extends Error {
         this.name = 'StudioSpecError';
     }
 }
-const HEADER = '// Generated by Kosh Studio from studio.json: do not edit (edit studio.json, then `kosh studio build`).';
+const HEADER = '// Generated by Shutro ERP Studio from studio.json: do not edit (edit studio.json, then `shutro-erp studio build`).';
 /** A TypeScript literal with single quotes and stable key order (as given). */
 export function lit(value, indent = '') {
     if (value === null || value === undefined)
@@ -181,7 +181,7 @@ export function generateModule(spec, options = {}) {
         HEADER,
         '/**',
         ` * ${spec.label}${spec.description === undefined ? '' : `: ${spec.description}`}`,
-        ' * A Kosh Studio module (RFC 0012): its fields, models, view changes, menus, approvals and rules, from studio.json.',
+        ' * A Shutro ERP Studio module (RFC 0012): its fields, models, view changes, menus, approvals and rules, from studio.json.',
         ' */',
         `import { base } from '${im.base}';`,
         ...deps.map((d) => `import { ${camel(d)} } from '${im.module(d)}';`),
@@ -222,8 +222,8 @@ export function generateModule(spec, options = {}) {
     const readme = [
         `# ${spec.label} (\`${name}\` ${spec.version})`,
         '',
-        'A Kosh Studio module (RFC 0012): `studio.json` is its source; `index.ts` and `models.ts` are generated from it',
-        '(`kosh studio build`). To take it over as code, delete `studio.json` and edit the TypeScript.',
+        'A Shutro ERP Studio module (RFC 0012): `studio.json` is its source; `index.ts` and `models.ts` are generated from it',
+        '(`shutro-erp studio build`). To take it over as code, delete `studio.json` and edit the TypeScript.',
         '',
         ...(spec.description === undefined ? [] : [spec.description, '']),
         ...((spec.fields ?? []).length === 0

package/dist/studio/module.js

@@ -368,7 +368,7 @@ export function registerStudioRoutes(context, options = {}) {
         await guard(request);
         const pullRequest = request.body?.pullRequest === true;
         if (pullRequest && git === null)
-            throw new HttpProblem(409, 'studio-git-unconfigured', 'No repository for proposals', 'Set KOSH_STUDIO_GIT_URL and KOSH_STUDIO_GIT_TOKEN to open pull requests; download the patch meanwhile.');
+            throw new HttpProblem(409, 'studio-git-unconfigured', 'No repository for proposals', 'Set SHUTRO_ERP_STUDIO_GIT_URL and SHUTRO_ERP_STUDIO_GIT_TOKEN to open pull requests; download the patch meanwhile.');
         const { review, files, modulesTs } = await prepare(specOf(request.body));
         const patch = review.diff.map((d) => d.diff).join('');
         if (!pullRequest || git === null)
@@ -384,7 +384,7 @@ export function registerStudioRoutes(context, options = {}) {
         });
         const command = review.change === 'install' ? 'install' : 'upgrade';
         const body = [
-            `A Kosh Studio change: **${review.spec.label}** (\`${name}\` ${review.spec.version}).`,
+            `A Shutro ERP Studio change: **${review.spec.label}** (\`${name}\` ${review.spec.version}).`,
             '',
             review.change === 'install'
                 ? `Installs the module \`${name}\`.`
@@ -393,7 +393,7 @@ export function registerStudioRoutes(context, options = {}) {
             'After deploying:',
             '',
             '```sh',
-            `npx kosh apps ${command} ${name}`,
+            `npx shutro-erp apps ${command} ${name}`,
             '```',
             '',
             ...(review.statements.length === 0
@@ -417,14 +417,14 @@ export function registerStudioRoutes(context, options = {}) {
         }
         catch (error) {
             if (error instanceof GitProposalError)
-                throw new HttpProblem(502, 'studio-git-failed', 'The repository refused the proposal', error.message, 'Check KOSH_STUDIO_GIT_URL, the token and its rights (contents and pull requests); the patch can be downloaded meanwhile.');
+                throw new HttpProblem(502, 'studio-git-failed', 'The repository refused the proposal', error.message, 'Check SHUTRO_ERP_STUDIO_GIT_URL, the token and its rights (contents and pull requests); the patch can be downloaded meanwhile.');
             throw error;
         }
     });
     app.post('/api/v1/studio/apply', async (request) => {
         const uid = await guard(request);
         if (mode !== 'write')
-            throw new HttpProblem(409, 'studio-propose-only', 'Studio proposes changes here', 'This server runs Studio in propose mode: it never writes code. Download the patch and deploy it.', 'KOSH_STUDIO=write is for development and single-server installations.');
+            throw new HttpProblem(409, 'studio-propose-only', 'Studio proposes changes here', 'This server runs Studio in propose mode: it never writes code. Download the patch and deploy it.', 'SHUTRO_ERP_STUDIO=write is for development and single-server installations.');
         const planId = request.body?.planId;
         if (typeof planId !== 'string')
             return invalid('planId (from /preview) is required.');

package/dist/studio/web/messages.js

@@ -35,7 +35,7 @@ export const messages = {
         openPullRequest: 'Open a pull request',
         openMergeRequest: 'Open a merge request',
         proposalOpened: 'Opened on {{repository}}:',
-        proposeNote: 'This server proposes changes: download the patch, commit it, and deploy it (then kosh apps upgrade).',
+        proposeNote: 'This server proposes changes: download the patch, commit it, and deploy it (then shutro-erp apps upgrade).',
         modulesTitle: 'Studio modules',
         modulesIntro: 'Each Studio change is saved in a module of your project: reviewed as code, versioned, and upgraded like any app.',
         modeWrite: 'Write mode: changes are applied on this server.',
@@ -109,7 +109,7 @@ export const messages = {
         openPullRequest: 'পুল রিকোয়েস্ট খুলুন',
         openMergeRequest: 'মার্জ রিকোয়েস্ট খুলুন',
         proposalOpened: '{{repository}}-এ খোলা হয়েছে:',
-        proposeNote: 'এই সার্ভার পরিবর্তন প্রস্তাব করে: প্যাচ ডাউনলোড করে কমিট ও ডিপ্লয় করুন (তারপর kosh apps upgrade)।',
+        proposeNote: 'এই সার্ভার পরিবর্তন প্রস্তাব করে: প্যাচ ডাউনলোড করে কমিট ও ডিপ্লয় করুন (তারপর shutro-erp apps upgrade)।',
         modulesTitle: 'স্টুডিও মডিউল',
         modulesIntro: 'স্টুডিওর প্রতিটি পরিবর্তন আপনার প্রজেক্টের একটি মডিউলে সংরক্ষিত হয়: কোডের মতো পর্যালোচিত, সংস্করণযুক্ত এবং যেকোনো অ্যাপের মতো আপগ্রেডযোগ্য।',
         modeWrite: 'রাইট মোড: পরিবর্তন এই সার্ভারে প্রয়োগ হয়।',

package/dist/ui/app.js

@@ -97,7 +97,7 @@ const ServicesContext = createContext(null);
 function useServices() {
     const value = useContext(ServicesContext);
     if (value === null)
-        throw new Error('Kosh routes render inside <KoshApp>.');
+        throw new Error('Shutro ERP routes render inside <KoshApp>.');
     return value;
 }
 // ------------------------------------------------------------------------------------------------- shell
@@ -181,7 +181,7 @@ function Shell() {
                                                 api.setCompany(id);
                                                 setCompany(id);
                                                 void queryClient.invalidateQueries();
-                                            } }), _jsx(LanguageMenu, {}), _jsx(ThemeMenu, {}), _jsxs(Menu, { children: [_jsx(MenuTrigger, { asChild: true, children: _jsx(Button, { variant: "ghost", size: "icon", "aria-label": user.name, children: _jsx(UserRound, { "aria-hidden": true }) }) }), _jsxs(MenuContent, { children: [_jsx(MenuLabel, { children: user.name }), _jsxs(MenuItem, { onSelect: async () => {
+                                            } }), _jsx(LanguageMenu, {}), _jsx(ThemeMenu, {}), _jsxs(Menu, { children: [_jsx(MenuTrigger, { asChild: true, children: _jsx(Button, { variant: "ghost", size: "icon", "aria-label": user.name, children: _jsx(UserRound, { "aria-hidden": true }) }) }), _jsxs(MenuContent, { children: [_jsx(MenuLabel, { children: user.name }), registry.userPages().map((p) => (_jsx(MenuItem, { onSelect: () => void navigate({ to: '/me/$page', params: { page: p.name } }), children: t(p.label) }, p.name))), _jsxs(MenuItem, { onSelect: async () => {
                                                                 await api.logout();
                                                                 queryClient.clear();
                                                                 await dropOfflineCache(persister);
@@ -451,9 +451,32 @@ const openRoute = createRoute({
     path: '/open/$model/$id',
     component: OpenRecordPage,
 });
+/** A personal page from the user menu (`registry.registerUserPage`), outside any app. */
+function UserPage() {
+    const { page } = useParams({ strict: false });
+    const { api, registry } = useServices();
+    const { t } = useTranslation();
+    const entry = registry.userPages().find((p) => p.name === page);
+    if (entry === undefined)
+        return _jsx("p", { className: "p-4 text-sm", children: t('notFound') });
+    const Page = entry.component;
+    return _jsx(Page, { api: api, label: t(entry.label) });
+}
+const userPageRoute = createRoute({
+    getParentRoute: () => shellRoute,
+    path: '/me/$page',
+    component: UserPage,
+});
 const routeTree = rootRoute.addChildren([
     loginRoute,
-    shellRoute.addChildren([indexRoute, openRoute, appRoute, actionRoute, recordRoute]),
+    shellRoute.addChildren([
+        indexRoute,
+        openRoute,
+        userPageRoute,
+        appRoute,
+        actionRoute,
+        recordRoute,
+    ]),
 ]);
 const LANG_KEY = 'kosh.lang';
 function initialLanguage() {

package/dist/ui/i18n/messages.js

@@ -4,7 +4,7 @@
  */
 export const en = {
     app: {
-        name: 'Kosh',
+        name: 'Shutro ERP',
         loading: 'Loading…',
         error: 'Something went wrong.',
         retry: 'Retry',
@@ -169,7 +169,7 @@ export const en = {
         synced_other: '{{count}} changes saved on this device were sent',
         needsAttention_one: '{{count}} change could not be sent. Open the cloud in the header.',
         needsAttention_other: '{{count}} changes could not be sent. Open the cloud in the header.',
-        newVersion: 'A new version of Kosh is ready.',
+        newVersion: 'A new version of Shutro ERP is ready.',
         reload: 'Reload',
     },
     home: {

package/dist/ui/pwa/worker.js

@@ -7,7 +7,7 @@
  */
 /** The worker's JavaScript. */
 export function serviceWorkerSource(config) {
-    return `/* Kosh service worker ${config.version}: generated by shutro-erp/ui/vite, do not edit. */
+    return `/* Shutro ERP service worker ${config.version}: generated by shutro-erp/ui/vite, do not edit. */
 const VERSION = ${JSON.stringify(config.version)};
 const ASSETS = ${JSON.stringify(config.assets)};
 const CACHE = 'kosh-' + VERSION;
@@ -57,7 +57,7 @@ self.addEventListener('fetch', (event) => {
 });
 
 self.addEventListener('push', (event) => {
-  let data = { title: 'Kosh', body: '', url: '/', id: 0 };
+  let data = { title: 'Shutro ERP', body: '', url: '/', id: 0 };
   try {
     data = { ...data, ...event.data.json() };
   } catch {

package/dist/ui/registry.d.ts

@@ -128,6 +128,21 @@ export declare class Registry {
     registerHeaderItem(name: string, component: ComponentType<HeaderItemProps>, options?: {
         readonly replace?: boolean;
     }): this;
+    /**
+     * A personal page every signed-in user reaches from the user menu, outside any app (`settings.ApiKeys`):
+     * served at `/me/<name>`; `label` is an i18n key (`settings:apiKeys.title`). The server still decides what the
+     * page may show and do.
+     */
+    registerUserPage(name: string, component: ComponentType<PageProps>, options: {
+        readonly label: string;
+        readonly replace?: boolean;
+    }): this;
+    /** The user pages, in registration order, with their label keys. */
+    userPages(): readonly {
+        readonly name: string;
+        readonly label: string;
+        readonly component: ComponentType<PageProps>;
+    }[];
     /** The header items, in registration order. */
     headerItems(): readonly {
         readonly name: string;