shutro-erp 0.3.1 → 0.3.3

package/dist/purchase_portal/.kosh/schema.d.ts

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 64da9b36804c7c1a
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 2bbbe12acf870fd9
 // Schema view of module `purchase_portal` (RFC 0002 §7.7): the models it owns or depends on, with the extensions it can see.
 import type { F } from '../../server/orm.js';
 
@@ -11,6 +11,7 @@ export interface SchemaView {
   readonly 'audit.event': AuditEvent;
   readonly 'auth.api_key': AuthApiKey;
   readonly 'auth.credential': AuthCredential;
+  readonly 'auth.policy': AuthPolicy;
   readonly 'auth.session': AuthSession;
   readonly 'auth.user_grant': AuthUserGrant;
   readonly 'auth.user_group': AuthUserGroup;
@@ -222,6 +223,26 @@ export interface AuthCredential {
 export interface AuthCredentialMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.credential'> {
 }
 
+/** `auth.policy` (owner: base). */
+export interface AuthPolicy {
+  readonly name: 'auth.policy';
+  readonly fields: {
+    readonly id: F.Id<'auth.policy'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly twoFactor: F.Selection<'administrators' | 'everyone', { readonly required: true; readonly default: true }>;
+    readonly sessionDays: F.Integer;
+  };
+  readonly methods: AuthPolicyMethods;
+}
+
+/** Methods of `auth.policy`: declared ones and transitions. */
+export interface AuthPolicyMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.policy'> {
+}
+
 /** `auth.session` (owner: base). */
 export interface AuthSession {
   readonly name: 'auth.session';
@@ -706,6 +727,13 @@ export interface ResCompany {
     readonly name: F.Char<{ readonly required: true }>;
     readonly currency: F.Many2one<'res.currency', { readonly required: true }>;
     readonly numberGrouping: F.Selection<'international' | 'lakh', { readonly required: true; readonly default: true }>;
+    readonly accentColor: F.Char;
+    readonly street: F.Char;
+    readonly city: F.Char;
+    readonly zip: F.Char;
+    readonly email: F.Char;
+    readonly phone: F.Char;
+    readonly website: F.Char;
   };
   readonly methods: ResCompanyMethods;
 }

package/dist/sale_account/.kosh/bindings.js

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: e1b93f7adda98b39
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: b268ad86cd210c36
 // Bindings of module `sale_account`: import the definition API from here to get types scoped to what it can see.
 export { defineModel, defineModule, extendModel, f, replace } from '../../server/orm.js';
 import { definitions } from '../../server/orm.js';

package/dist/sale_account/.kosh/schema.d.ts

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: e1b93f7adda98b39
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: b268ad86cd210c36
 // Schema view of module `sale_account` (RFC 0002 §7.7): the models it owns or depends on, with the extensions it can see.
 import type { F } from '../../server/orm.js';
 
@@ -24,6 +24,7 @@ export interface SchemaView {
   readonly 'audit.event': AuditEvent;
   readonly 'auth.api_key': AuthApiKey;
   readonly 'auth.credential': AuthCredential;
+  readonly 'auth.policy': AuthPolicy;
   readonly 'auth.session': AuthSession;
   readonly 'auth.user_grant': AuthUserGrant;
   readonly 'auth.user_group': AuthUserGroup;
@@ -634,6 +635,26 @@ export interface AuthCredential {
 export interface AuthCredentialMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.credential'> {
 }
 
+/** `auth.policy` (owner: base). */
+export interface AuthPolicy {
+  readonly name: 'auth.policy';
+  readonly fields: {
+    readonly id: F.Id<'auth.policy'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly twoFactor: F.Selection<'administrators' | 'everyone', { readonly required: true; readonly default: true }>;
+    readonly sessionDays: F.Integer;
+  };
+  readonly methods: AuthPolicyMethods;
+}
+
+/** Methods of `auth.policy`: declared ones and transitions. */
+export interface AuthPolicyMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.policy'> {
+}
+
 /** `auth.session` (owner: base). */
 export interface AuthSession {
   readonly name: 'auth.session';
@@ -1128,6 +1149,13 @@ export interface ResCompany {
     readonly name: F.Char<{ readonly required: true }>;
     readonly currency: F.Many2one<'res.currency', { readonly required: true }>;
     readonly numberGrouping: F.Selection<'international' | 'lakh', { readonly required: true; readonly default: true }>;
+    readonly accentColor: F.Char;
+    readonly street: F.Char;
+    readonly city: F.Char;
+    readonly zip: F.Char;
+    readonly email: F.Char;
+    readonly phone: F.Char;
+    readonly website: F.Char;
     readonly fiscalYearStart: F.Integer<{ readonly required: true; readonly default: true }>; // accounting
     readonly chartTemplate: F.Char; // accounting
     readonly country: F.Char; // accounting

package/dist/sale_portal/.kosh/bindings.js

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 5a5c7561d67ef3cf
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 2377e830cd00a651
 // Bindings of module `sale_portal`: import the definition API from here to get types scoped to what it can see.
 export { defineModel, defineModule, extendModel, f, replace } from '../../server/orm.js';
 import { definitions } from '../../server/orm.js';

package/dist/sale_portal/.kosh/schema.d.ts

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 5a5c7561d67ef3cf
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 2377e830cd00a651
 // Schema view of module `sale_portal` (RFC 0002 §7.7): the models it owns or depends on, with the extensions it can see.
 import type { F } from '../../server/orm.js';
 
@@ -8,6 +8,7 @@ export interface SchemaView {
   readonly 'audit.event': AuditEvent;
   readonly 'auth.api_key': AuthApiKey;
   readonly 'auth.credential': AuthCredential;
+  readonly 'auth.policy': AuthPolicy;
   readonly 'auth.session': AuthSession;
   readonly 'auth.user_grant': AuthUserGrant;
   readonly 'auth.user_group': AuthUserGroup;
@@ -139,6 +140,26 @@ export interface AuthCredential {
 export interface AuthCredentialMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.credential'> {
 }
 
+/** `auth.policy` (owner: base). */
+export interface AuthPolicy {
+  readonly name: 'auth.policy';
+  readonly fields: {
+    readonly id: F.Id<'auth.policy'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly twoFactor: F.Selection<'administrators' | 'everyone', { readonly required: true; readonly default: true }>;
+    readonly sessionDays: F.Integer;
+  };
+  readonly methods: AuthPolicyMethods;
+}
+
+/** Methods of `auth.policy`: declared ones and transitions. */
+export interface AuthPolicyMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.policy'> {
+}
+
 /** `auth.session` (owner: base). */
 export interface AuthSession {
   readonly name: 'auth.session';
@@ -552,6 +573,13 @@ export interface ResCompany {
     readonly name: F.Char<{ readonly required: true }>;
     readonly currency: F.Many2one<'res.currency', { readonly required: true }>;
     readonly numberGrouping: F.Selection<'international' | 'lakh', { readonly required: true; readonly default: true }>;
+    readonly accentColor: F.Char;
+    readonly street: F.Char;
+    readonly city: F.Char;
+    readonly zip: F.Char;
+    readonly email: F.Char;
+    readonly phone: F.Char;
+    readonly website: F.Char;
   };
   readonly methods: ResCompanyMethods;
 }

package/dist/sale_project/.kosh/bindings.js

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 698d6a45d2c40df8
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: b044bca835096ac0
 // Bindings of module `sale_project`: import the definition API from here to get types scoped to what it can see.
 export { defineModel, defineModule, extendModel, f, replace } from '../../server/orm.js';
 import { definitions } from '../../server/orm.js';

package/dist/sale_project/.kosh/schema.d.ts

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 698d6a45d2c40df8
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: b044bca835096ac0
 // Schema view of module `sale_project` (RFC 0002 §7.7): the models it owns or depends on, with the extensions it can see.
 import type { F } from '../../server/orm.js';
 
@@ -8,6 +8,7 @@ export interface SchemaView {
   readonly 'audit.event': AuditEvent;
   readonly 'auth.api_key': AuthApiKey;
   readonly 'auth.credential': AuthCredential;
+  readonly 'auth.policy': AuthPolicy;
   readonly 'auth.session': AuthSession;
   readonly 'auth.user_grant': AuthUserGrant;
   readonly 'auth.user_group': AuthUserGroup;
@@ -140,6 +141,26 @@ export interface AuthCredential {
 export interface AuthCredentialMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.credential'> {
 }
 
+/** `auth.policy` (owner: base). */
+export interface AuthPolicy {
+  readonly name: 'auth.policy';
+  readonly fields: {
+    readonly id: F.Id<'auth.policy'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly twoFactor: F.Selection<'administrators' | 'everyone', { readonly required: true; readonly default: true }>;
+    readonly sessionDays: F.Integer;
+  };
+  readonly methods: AuthPolicyMethods;
+}
+
+/** Methods of `auth.policy`: declared ones and transitions. */
+export interface AuthPolicyMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.policy'> {
+}
+
 /** `auth.session` (owner: base). */
 export interface AuthSession {
   readonly name: 'auth.session';
@@ -596,6 +617,13 @@ export interface ResCompany {
     readonly name: F.Char<{ readonly required: true }>;
     readonly currency: F.Many2one<'res.currency', { readonly required: true }>;
     readonly numberGrouping: F.Selection<'international' | 'lakh', { readonly required: true; readonly default: true }>;
+    readonly accentColor: F.Char;
+    readonly street: F.Char;
+    readonly city: F.Char;
+    readonly zip: F.Char;
+    readonly email: F.Char;
+    readonly phone: F.Char;
+    readonly website: F.Char;
   };
   readonly methods: ResCompanyMethods;
 }

package/dist/sales/.kosh/bindings.js

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: b513566045fc25a0
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 2d9d91e59673d178
 // Bindings of module `sales`: import the definition API from here to get types scoped to what it can see.
 export { defineModel, defineModule, extendModel, f, replace } from '../../server/orm.js';
 import { definitions } from '../../server/orm.js';

package/dist/sales/.kosh/schema.d.ts

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: b513566045fc25a0
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 2d9d91e59673d178
 // Schema view of module `sales` (RFC 0002 §7.7): the models it owns or depends on, with the extensions it can see.
 import type { F } from '../../server/orm.js';
 
@@ -8,6 +8,7 @@ export interface SchemaView {
   readonly 'audit.event': AuditEvent;
   readonly 'auth.api_key': AuthApiKey;
   readonly 'auth.credential': AuthCredential;
+  readonly 'auth.policy': AuthPolicy;
   readonly 'auth.session': AuthSession;
   readonly 'auth.user_grant': AuthUserGrant;
   readonly 'auth.user_group': AuthUserGroup;
@@ -136,6 +137,26 @@ export interface AuthCredential {
 export interface AuthCredentialMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.credential'> {
 }
 
+/** `auth.policy` (owner: base). */
+export interface AuthPolicy {
+  readonly name: 'auth.policy';
+  readonly fields: {
+    readonly id: F.Id<'auth.policy'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly twoFactor: F.Selection<'administrators' | 'everyone', { readonly required: true; readonly default: true }>;
+    readonly sessionDays: F.Integer;
+  };
+  readonly methods: AuthPolicyMethods;
+}
+
+/** Methods of `auth.policy`: declared ones and transitions. */
+export interface AuthPolicyMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.policy'> {
+}
+
 /** `auth.session` (owner: base). */
 export interface AuthSession {
   readonly name: 'auth.session';
@@ -477,6 +498,13 @@ export interface ResCompany {
     readonly name: F.Char<{ readonly required: true }>;
     readonly currency: F.Many2one<'res.currency', { readonly required: true }>;
     readonly numberGrouping: F.Selection<'international' | 'lakh', { readonly required: true; readonly default: true }>;
+    readonly accentColor: F.Char;
+    readonly street: F.Char;
+    readonly city: F.Char;
+    readonly zip: F.Char;
+    readonly email: F.Char;
+    readonly phone: F.Char;
+    readonly website: F.Char;
   };
   readonly methods: ResCompanyMethods;
 }

package/dist/sales/index.js

@@ -17,6 +17,8 @@ export const sales = defineModule({
     kosh: '^0.1.0',
     hooks: { demo: salesDemo },
     depends: [contacts, product, messaging],
+    // What webhooks may subscribe to besides record changes (RFC 0017 §5.3).
+    events: [{ topic: 'sale.order.confirmed', model: 'sale.order', label: 'Sales order confirmed' }],
     app: {
         code: 'sales',
         label: 'Sales',

package/dist/server/api/rest.d.ts

@@ -17,8 +17,13 @@
  * - `GET    /api/v1/openapi.json`                           the OpenAPI 3.1 document
  */
 import type { FastifyInstance } from 'fastify';
-import type { Driver } from '../orm.js';
+import type { Driver, Env } from '../orm.js';
 import { type ApiModel } from './metadata.js';
+/**
+ * A record as `GET /api/v1/models/<model>/<id>` returns it to `env`'s user (their readable default fields), or null
+ * when they cannot see it: what webhooks send (RFC 0017 §5.3).
+ */
+export declare function readApiRecord(env: Env, model: ApiModel, id: number): Promise<Record<string, unknown> | null>;
 /** Registers the generated routes for `models`. */
 export declare function registerRestApi(app: FastifyInstance, options: {
     readonly models: ReadonlyMap<string, ApiModel>;

package/dist/server/api/rest.js

@@ -102,6 +102,17 @@ function ifMatch(request) {
         throw problem(400, 'invalid-if-match', 'Invalid If-Match', 'If-Match must be an ETag returned by this API.');
     return new Date(Number(m[1]));
 }
+/**
+ * A record as `GET /api/v1/models/<model>/<id>` returns it to `env`'s user (their readable default fields), or null
+ * when they cannot see it: what webhooks send (RFC 0017 §5.3).
+ */
+export async function readApiRecord(env, model, id) {
+    const set = await ref(env, model.name).search({ where: { id }, limit: 1 });
+    if (set.length === 0)
+        return null;
+    const [row] = await rows(set, fieldsOf(model, env, undefined));
+    return row ?? null;
+}
 async function record(env, model, id, fields) {
     const set = await ref(env, model.name).browse([id]).load(['id', 'updatedAt']);
     const [row] = await rows(set, fields ?? fieldsOf(model, env, undefined));

package/dist/server/auth/base.js

@@ -22,6 +22,15 @@ const ResCompany = defineModel('res.company', {
         currency: f.many2one('res.currency', { required: true }),
         /** How numbers are grouped on screen and in documents (RFC 0016): 1,234,567 or 12,34,567 (lakh and crore). */
         numberGrouping: f.selection({ international: 'International (1,234,567)', lakh: 'Lakh and crore (12,34,567)' }, { required: true, default: 'international', label: 'Number grouping' }),
+        /** The company's brand colour (`#4f46e5`), the back-office's accent (RFC 0018); the default when empty. */
+        accentColor: f.char({ size: 7, label: 'Brand colour' }),
+        /** Its address and how to reach it (RFC 0019 §3.4): on documents, e-invoices and the portal. */
+        street: f.char({ label: 'Address' }),
+        city: f.char({ label: 'City' }),
+        zip: f.char({ size: 12, label: 'Postal code' }),
+        email: f.char({ label: 'Email' }),
+        phone: f.char({ label: 'Phone' }),
+        website: f.char({ label: 'Website' }),
     },
 });
 const readRows = async (env, model, ids, keys) => env.asSuperuser({ reason: 'check administrators' }, async (su) => {
@@ -127,6 +136,17 @@ const AuthUserGrant = defineModel('auth.user_grant', {
         reason: f.char({ required: true }),
     },
 });
+/**
+ * The installation's security policy (RFC 0019 §3.5): one row, read by the auth service, changed in Settings ›
+ * Security. Without a row: two-factor sign-in for administrators only, sessions as the server is configured.
+ */
+const AuthPolicy = defineModel('auth.policy', {
+    fields: {
+        twoFactor: f.selection({ administrators: 'Administrators', everyone: 'Everyone' }, { required: true, default: 'administrators', label: 'Two-factor sign-in required for' }),
+        /** Days a sign-in lasts at most; empty: the server's setting. */
+        sessionDays: f.integer({ label: 'Session lifetime (days)' }),
+    },
+});
 /**
  * The security audit log (CLAUDE.md: logins, permission changes, exports, sensitive actions). Append-only: no one
  * may change or delete events (administrators included: the REST API never serves it, and the admin API only reads).
@@ -196,6 +216,7 @@ export const baseShutro = defineModule({
         AuthApiKey,
         AuthUserGroup,
         AuthUserGrant,
+        AuthPolicy,
         AuditEvent,
         SavedView,
     ],
@@ -214,6 +235,7 @@ export const base = defineKoshModule({
         'auth.api_key',
         'auth.user_group',
         'auth.user_grant',
+        'auth.policy',
         'audit.event',
     ],
 });

package/dist/server/auth/routes.d.ts

@@ -10,6 +10,9 @@
  * - `POST /api/v1/auth/2fa/verify`    `{ code }` (TOTP or recovery code) completes a pending sign-in
  * - `POST /api/v1/auth/2fa/disable`   `{ password, code }`
  * - `POST /api/v1/auth/password`      `{ current, next }`; other sessions are revoked
+ * - `GET  /api/v1/auth/profile`       your details (RFC 0019); `PATCH` `{ name?, email?, phone?, lang?, tz?, company? }`
+ * - `GET  /api/v1/auth/sessions`      your signed-in devices; `DELETE …/sessions/:id` signs one out
+ * - `POST /api/v1/auth/sessions/sign-out-others`
  */
 import type { FastifyInstance } from 'fastify';
 import type { AuthService } from './service.js';

package/dist/server/auth/routes.js

@@ -52,4 +52,33 @@ export function registerAuthRoutes(app, auth, options = {}) {
         await auth.changePassword(await auth.requireSession(request), text(request, 'current'), text(request, 'next'));
         return { ok: true };
     });
+    // Your own profile and sessions (RFC 0019 §3.6): a session's, never an API key's.
+    app.get('/api/v1/auth/profile', { config: { auth: false } }, async (request) => auth.profile(await auth.requireSession(request)));
+    app.patch('/api/v1/auth/profile', { config: { auth: false } }, async (request) => {
+        const body = (request.body ?? {});
+        const values = {};
+        for (const key of ['name', 'email', 'phone', 'lang', 'tz'])
+            if (body[key] !== undefined) {
+                if (body[key] !== null &&
+                    (typeof body[key] !== 'string' || body[key].length > 200))
+                    throw new HttpProblem(400, 'invalid-body', 'Invalid body', `'${key}' is a short text.`);
+                values[key] = body[key];
+            }
+        if (body['company'] !== undefined) {
+            if (!Number.isSafeInteger(body['company']))
+                throw new HttpProblem(400, 'invalid-body', 'Invalid body', "'company' is a company id.");
+            values['company'] = body['company'];
+        }
+        return auth.updateProfile(await auth.requireSession(request), values);
+    });
+    app.get('/api/v1/auth/sessions', { config: { auth: false } }, async (request) => ({
+        sessions: await auth.sessions(await auth.requireSession(request)),
+    }));
+    app.delete('/api/v1/auth/sessions/:id', { config: { auth: false } }, async (request) => {
+        const id = Number(request.params.id);
+        if (!Number.isSafeInteger(id) || id <= 0)
+            throw new HttpProblem(400, 'invalid-id', 'Invalid id', 'The id is a positive integer.');
+        return auth.revokeSessions(await auth.requireSession(request), id);
+    });
+    app.post('/api/v1/auth/sessions/sign-out-others', { config: { auth: false } }, async (request) => auth.revokeSessions(await auth.requireSession(request), 'others'));
 }

package/dist/server/auth/service.d.ts

@@ -39,11 +39,22 @@ export interface UserInfo {
     readonly companies: readonly number[];
     /** The number grouping of each of the user's companies (RFC 0016): `lakh` or `international`. */
     readonly groupings: Readonly<Record<string, 'international' | 'lakh'>>;
+    /** The brand colour of each of the user's companies that has one (RFC 0018): `#rrggbb`. */
+    readonly accents: Readonly<Record<string, string>>;
     readonly twoFactorEnabled: boolean;
     /** Holds an administrator role (in some company). */
     readonly administrator: boolean;
     /** Administrator rights are withheld until this session has a second factor (enable or verify 2FA). */
     readonly administratorNeedsSecondFactor: boolean;
+    /** The policy requires two-factor sign-in of everyone and it is not on: nothing but setting it up is allowed. */
+    readonly twoFactorSetupRequired: boolean;
+}
+/** The installation's security policy (RFC 0019 §3.5). */
+export interface SecurityPolicy {
+    /** Who must sign in with a second factor: administrators only (the default), or everyone. */
+    readonly twoFactor: 'administrators' | 'everyone';
+    /** Days a sign-in lasts at most; null: the server's `lifetimeMs`. */
+    readonly sessionDays: number | null;
 }
 /** An API key as listed (never its secret). */
 export interface ApiKeyInfo {
@@ -162,4 +173,45 @@ export declare class AuthService {
     disableTwoFactor(session: SessionInfo, password: string, code: string): Promise<void>;
     /** Changes the password; every other session of the user is revoked. */
     changePassword(session: SessionInfo, current: string, next: string): Promise<void>;
+    /** The security policy (cached like sessions; {@link forgetPolicy} after changing it). */
+    policy(): Promise<SecurityPolicy>;
+    /** Forgets the cached policy: after Settings › Security changed it. */
+    forgetPolicy(): void;
+    /** Forgets what is cached about `user` (their identity and sessions): after their roles or account changed. */
+    forget(user: number): void;
+    /** The signed-in user's own details (RFC 0019 §3.6). */
+    profile(session: SessionInfo): Promise<Profile>;
+    /**
+     * Changes the user's own details: name, email, phone, language, time zone, and the default company (one of
+     * theirs). Audited.
+     */
+    updateProfile(session: SessionInfo, values: Partial<Omit<Profile, 'login'>>): Promise<Profile>;
+    /** The user's active sessions, newest use first; the current one marked. */
+    sessions(session: SessionInfo): Promise<SessionEntry[]>;
+    /** Signs out one of the user's own sessions (or all but this one with `'others'`). Audited. */
+    revokeSessions(session: SessionInfo, which: number | 'others'): Promise<{
+        revoked: number;
+    }>;
+}
+/** The user's own details (RFC 0019 §3.6). */
+export interface Profile {
+    readonly login: string;
+    readonly name: string;
+    readonly email: string | null;
+    readonly phone: string | null;
+    readonly lang: string;
+    readonly tz: string;
+    /** The default company. */
+    readonly company: number | null;
+}
+/** One of the user's sessions (a signed-in device). */
+export interface SessionEntry {
+    readonly id: number;
+    readonly ip: string | null;
+    readonly userAgent: string | null;
+    readonly lastSeenAt: string;
+    readonly createdAt: string | null;
+    readonly secondFactor: boolean;
+    /** This browser. */
+    readonly current: boolean;
 }