shutro-erp 0.3.2 → 0.3.4

package/dist/settings/security.js

@@ -0,0 +1,158 @@
+/**
+ * Settings › Security (RFC 0019 §3.5), administrators only: the installation's policy — two-factor sign-in for
+ * administrators only (the default) or for everyone, and how long a sign-in lasts — with who it would stop until
+ * they set two-factor up; and who is signed in where, with sign-out of any session. The audit log has its own route
+ * (`/api/v1/admin/audit`, `shutro-erp/permissions`). Everything is audited.
+ *
+ * - `GET   /api/v1/settings/security`        the policy; the people without two-factor sign-in
+ * - `PATCH /api/v1/settings/security`        `{ twoFactor?: 'administrators' | 'everyone', sessionDays?: 1–90 | null }`
+ * - `GET   /api/v1/settings/sessions`        every active session (the person, device, address, last use)
+ * - `DELETE /api/v1/settings/sessions/:id`   signs that session out
+ */
+import { audit, HttpProblem } from '../server/index.js';
+const ref = (env, name) => env.model(name);
+const rows = async (set, keys) => {
+    const s = await set;
+    return s.length === 0 ? [] : (await s.load(keys)).read(['id', ...keys]);
+};
+const iso = (v) => v === null || v === undefined ? null : new Date(v instanceof Date ? v : String(v)).toISOString();
+export function registerSecurityRoutes(context) {
+    const { app, registry } = context;
+    const auth = context.auth;
+    if (auth === undefined)
+        return;
+    /** Portal users: not the company's people, the policy is not theirs. */
+    const external = new Set(registry.loaded.modules.flatMap((m) => m.externalGroups ?? []));
+    const guarded = (request, fn) => request.env(async (env) => {
+        if (!env.administrator)
+            throw new HttpProblem(403, 'access', 'Administrators only', 'Security settings need the Administrator role.');
+        return env.asSuperuser({ reason: 'security settings' }, async (su) => {
+            const out = await fn(env, su);
+            await su.flush();
+            return out;
+        });
+    }, { write: true });
+    /** People who sign in (not service accounts, not portal users) without two-factor sign-in. */
+    const withoutTwoFactor = async (su) => {
+        const people = await rows(ref(su, 'res.users').search({ where: { isService: { ne: true } }, order: ['name asc'] }), ['name', 'login']);
+        const ids = people.map((p) => p['id']);
+        if (ids.length === 0)
+            return [];
+        const on = new Set((await rows(ref(su, 'auth.credential').search({ where: { user: { in: ids }, totpEnabled: true } }), ['user'])).map((c) => c['user']));
+        const groups = await rows(ref(su, 'auth.user_group').search({ where: { user: { in: ids } } }), [
+            'user',
+            'group',
+        ]);
+        const isExternal = (id) => {
+            const own = groups.filter((g) => g['user'] === id).map((g) => String(g['group']));
+            return own.length > 0 && own.every((g) => external.has(g));
+        };
+        return people
+            .filter((p) => !on.has(p['id']) && !isExternal(p['id']))
+            .map((p) => ({ id: p['id'], name: String(p['name']), login: String(p['login']) }));
+    };
+    const read = async (su) => ({
+        ...(await auth.policy()),
+        withoutTwoFactor: await withoutTwoFactor(su),
+    });
+    app.get('/api/v1/settings/security', async (request) => guarded(request, (_env, su) => read(su)));
+    app.patch('/api/v1/settings/security', async (request) => {
+        const body = (request.body ?? {});
+        const values = {};
+        if (body['twoFactor'] !== undefined) {
+            if (body['twoFactor'] !== 'administrators' && body['twoFactor'] !== 'everyone')
+                throw new HttpProblem(422, 'invalid-policy', 'Invalid policy', "Two-factor sign-in is required of 'administrators' or 'everyone'.");
+            values['twoFactor'] = body['twoFactor'];
+        }
+        if (body['sessionDays'] !== undefined) {
+            const days = body['sessionDays'];
+            if (days !== null &&
+                !(Number.isInteger(days) && days >= 1 && days <= 90))
+                throw new HttpProblem(422, 'invalid-policy', 'Invalid policy', 'A sign-in lasts 1 to 90 days, or empty for the server’s setting.');
+            values['sessionDays'] = days;
+        }
+        await guarded(request, async (env, su) => {
+            if (Object.keys(values).length > 0) {
+                const current = await ref(su, 'auth.policy').search({ where: {}, limit: 1 });
+                if (current.length === 0)
+                    await ref(su, 'auth.policy').create([values]);
+                else
+                    await current.write(values);
+                await audit(env, {
+                    kind: 'security.policy',
+                    summary: `Security policy changed: ${Object.entries(values)
+                        .map(([k, v]) => `${k} = ${v ?? 'default'}`)
+                        .join(', ')}.`,
+                    details: values,
+                    ip: request.ip,
+                });
+            }
+        });
+        // After the commit: the policy applies to every request from now on (this node; others within the cache time).
+        auth.forgetPolicy();
+        return guarded(request, (_env, su) => read(su));
+    });
+    app.get('/api/v1/settings/sessions', async (request) => {
+        const current = await auth.session(request);
+        return guarded(request, async (_env, su) => {
+            const sessions = await rows(ref(su, 'auth.session').search({
+                where: { revoked: false, expiresAt: { gt: new Date() } },
+                order: ['lastSeenAt desc', 'id desc'],
+                limit: 500,
+            }), ['user', 'ip', 'userAgent', 'lastSeenAt', 'createdAt', 'secondFactor', 'twoFactorVerified']);
+            const users = [...new Set(sessions.map((s) => s['user']))];
+            const people = users.length === 0
+                ? []
+                : await rows(ref(su, 'res.users').search({ where: { id: { in: users } } }), [
+                    'name',
+                    'login',
+                ]);
+            const person = new Map(people.map((p) => [p['id'], p]));
+            return {
+                sessions: sessions
+                    // Sign-ins still waiting for their second factor are not in yet.
+                    .filter((s) => s['twoFactorVerified'] === true)
+                    .map((s) => ({
+                    id: s['id'],
+                    user: s['user'],
+                    name: String(person.get(s['user'])?.['name'] ?? ''),
+                    login: String(person.get(s['user'])?.['login'] ?? ''),
+                    ip: typeof s['ip'] === 'string' ? s['ip'] : null,
+                    userAgent: typeof s['userAgent'] === 'string' ? s['userAgent'] : null,
+                    lastSeenAt: iso(s['lastSeenAt']),
+                    createdAt: iso(s['createdAt']),
+                    secondFactor: s['secondFactor'] === true,
+                    current: s['id'] === current?.id,
+                })),
+            };
+        });
+    });
+    app.delete('/api/v1/settings/sessions/:id', async (request) => {
+        const id = Number(request.params.id);
+        if (!Number.isSafeInteger(id) || id <= 0)
+            throw new HttpProblem(400, 'invalid-id', 'Invalid id', 'The id is a positive integer.');
+        const current = await auth.session(request);
+        if (current?.id === id)
+            throw new HttpProblem(409, 'current-session', 'This is your session', 'Sign out from the user menu to end your own session.');
+        const user = await guarded(request, async (env, su) => {
+            const set = await ref(su, 'auth.session').search({ where: { id, revoked: false } });
+            const [row] = await rows(set, ['user']);
+            if (row === undefined)
+                throw new HttpProblem(404, 'missing-record', 'Not found', `There is no session ${id}.`);
+            await set.write({ revoked: true });
+            const [who] = await rows(ref(su, 'res.users').search({ where: { id: row['user'] } }), [
+                'login',
+            ]);
+            await audit(env, {
+                kind: 'security.session_revoked',
+                summary: `Signed out a session of ${String(who?.['login'] ?? row['user'])}.`,
+                targetModel: 'res.users',
+                targetId: row['user'],
+                ip: request.ip,
+            });
+            return row['user'];
+        });
+        auth.forget(user);
+        return { revoked: 1 };
+    });
+}

package/dist/settings/web/AuditPage.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Settings › Audit log (RFC 0019 §3.5): every sign-in, permission change, export and sensitive action, newest first,
+ * filtered by kind, person, period and words, with more on demand and the filtered events exported as CSV (the export
+ * is itself logged). Administrators, and holders of the "View the audit log" permission.
+ */
+import { type PageProps } from '../../ui/index.js';
+import { type ReactElement } from 'react';
+export declare function AuditPage({ api }: PageProps): ReactElement;

package/dist/settings/web/AuditPage.js

@@ -0,0 +1,74 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Settings › Audit log (RFC 0019 §3.5): every sign-in, permission change, export and sensitive action, newest first,
+ * filtered by kind, person, period and words, with more on demand and the filtered events exported as CSV (the export
+ * is itself logged). Administrators, and holders of the "View the audit log" permission.
+ */
+import { Alert, ApiError, Badge, Button, Input, Label, Select, useKosh, } from '../../ui/index.js';
+import { useInfiniteQuery, useMutation, useQuery } from '@tanstack/react-query';
+import { Download } from 'lucide-react';
+import { useId, useState } from 'react';
+import { useTranslation } from 'react-i18next';
+const PAGE = 50;
+/** The families of events, by their kind's prefix. */
+const FAMILIES = ['auth.', 'security.', 'people.', 'settings.', 'data.', 'admin.'];
+const message = (error) => (error instanceof ApiError ? error.message : String(error));
+const tone = (kind) => kind.endsWith('_failed') || kind.endsWith('_revoked')
+    ? 'warning'
+    : kind.startsWith('security.')
+        ? 'info'
+        : 'neutral';
+function saveFile(blob, filename) {
+    const url = URL.createObjectURL(blob);
+    const a = document.createElement('a');
+    a.href = url;
+    a.download = filename;
+    a.click();
+    setTimeout(() => URL.revokeObjectURL(url), 1000);
+}
+export function AuditPage({ api }) {
+    const { t } = useTranslation('settings');
+    const { format } = useKosh();
+    const id = useId();
+    const [family, setFamily] = useState('all');
+    const [actor, setActor] = useState('all');
+    const [from, setFrom] = useState('');
+    const [to, setTo] = useState('');
+    const [words, setWords] = useState('');
+    const people = useQuery({
+        queryKey: ['settings', 'people', 'all'],
+        queryFn: () => api.call('GET', '/api/v1/settings/people'),
+    });
+    const filters = new URLSearchParams();
+    if (family !== 'all')
+        filters.set('kind', family);
+    if (actor !== 'all')
+        filters.set('actor', actor);
+    if (from !== '')
+        filters.set('from', from);
+    if (to !== '')
+        filters.set('to', to);
+    if (words.trim() !== '')
+        filters.set('q', words.trim());
+    const query = filters.toString();
+    const events = useInfiniteQuery({
+        queryKey: ['settings', 'audit', query],
+        initialPageParam: 0,
+        queryFn: ({ pageParam }) => api.call('GET', `/api/v1/admin/audit?${query}${query === '' ? '' : '&'}limit=${PAGE}${pageParam === 0 ? '' : `&before=${pageParam}`}`),
+        getNextPageParam: (last) => last.events.length < PAGE ? undefined : last.events[last.events.length - 1]?.id,
+    });
+    const exported = useMutation({
+        mutationFn: async () => {
+            const { blob, filename } = await api.download(`/api/v1/admin/audit?${query}${query === '' ? '' : '&'}limit=1000&format=csv`, undefined, 'GET');
+            saveFile(blob, filename);
+        },
+    });
+    const list = events.data?.pages.flatMap((p) => p.events) ?? [];
+    return (_jsxs("div", { className: "mx-auto grid max-w-6xl gap-5", children: [_jsxs("header", { className: "flex flex-wrap items-start justify-between gap-3", children: [_jsxs("div", { children: [_jsx("h1", { className: "text-xl font-semibold", children: t('audit.title') }), _jsx("p", { className: "text-sm text-muted-foreground", children: t('audit.intro') })] }), _jsxs(Button, { busy: exported.isPending, onClick: () => exported.mutate(), children: [_jsx(Download, { className: "size-4", "aria-hidden": true }), t('audit.export')] })] }), _jsxs("div", { className: "grid gap-3 rounded-lg border bg-surface p-4 sm:grid-cols-2 lg:grid-cols-5", children: [_jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-kind`, children: t('audit.kind') }), _jsx(Select, { id: `${id}-kind`, label: t('audit.kind'), value: family, options: [
+                                    { value: 'all', label: t('audit.all') },
+                                    ...FAMILIES.map((f) => ({ value: f, label: t(`audit.families.${f.slice(0, -1)}`) })),
+                                ], onChange: setFamily })] }), _jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-actor`, children: t('audit.person') }), _jsx(Select, { id: `${id}-actor`, label: t('audit.person'), value: actor, options: [
+                                    { value: 'all', label: t('audit.everyone') },
+                                    ...(people.data?.people ?? []).map((p) => ({ value: String(p.id), label: p.name })),
+                                ], onChange: setActor })] }), _jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-from`, children: t('audit.from') }), _jsx(Input, { id: `${id}-from`, type: "date", value: from, onChange: (e) => setFrom(e.target.value) })] }), _jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-to`, children: t('audit.to') }), _jsx(Input, { id: `${id}-to`, type: "date", value: to, onChange: (e) => setTo(e.target.value) })] }), _jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-q`, children: t('audit.words') }), _jsx(Input, { id: `${id}-q`, type: "search", value: words, onChange: (e) => setWords(e.target.value) })] })] }), events.error === null ? null : _jsx(Alert, { tone: "danger", children: message(events.error) }), exported.error === null ? null : _jsx(Alert, { tone: "danger", children: message(exported.error) }), _jsx("div", { className: "overflow-x-auto rounded-lg border bg-surface", children: _jsxs("table", { className: "w-full text-sm", children: [_jsx("caption", { className: "sr-only", children: t('audit.title') }), _jsx("thead", { className: "border-b bg-muted/40 text-start text-xs text-muted-foreground", children: _jsxs("tr", { children: [_jsx("th", { scope: "col", className: "px-3 py-2 text-start font-medium", children: t('audit.when') }), _jsx("th", { scope: "col", className: "px-3 py-2 text-start font-medium", children: t('audit.person') }), _jsx("th", { scope: "col", className: "px-3 py-2 text-start font-medium", children: t('audit.what') }), _jsx("th", { scope: "col", className: "px-3 py-2 text-start font-medium", children: t('audit.ip') })] }) }), _jsxs("tbody", { className: "divide-y", children: [list.map((e) => (_jsxs("tr", { className: "align-top", children: [_jsx("td", { className: "whitespace-nowrap px-3 py-2 text-muted-foreground", children: format.datetime(e.createdAt) }), _jsx("td", { className: "whitespace-nowrap px-3 py-2", children: e.actorName ?? t('audit.system') }), _jsxs("td", { className: "px-3 py-2", children: [_jsxs("div", { className: "flex flex-wrap items-center gap-2", children: [_jsx(Badge, { tone: tone(e.kind), children: _jsx("span", { className: "font-mono text-xs", children: e.kind }) }), _jsx("span", { children: e.summary })] }), e.targetModel === null ? null : (_jsxs("p", { className: "mt-0.5 font-mono text-xs text-muted-foreground", children: [e.targetModel, e.targetId === null ? '' : ` #${e.targetId}`] }))] }), _jsx("td", { className: "whitespace-nowrap px-3 py-2 font-mono text-xs text-muted-foreground", children: e.ip ?? '' })] }, e.id))), events.data !== undefined && list.length === 0 ? (_jsx("tr", { children: _jsx("td", { colSpan: 4, className: "px-3 py-6 text-center text-muted-foreground", children: t('audit.none') }) })) : null] })] }) }), events.hasNextPage ? (_jsx("div", { className: "flex justify-center", children: _jsx(Button, { busy: events.isFetchingNextPage, onClick: () => void events.fetchNextPage(), children: t('audit.more') }) })) : null] }));
+}

package/dist/settings/web/CompaniesPage.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Settings › Companies (RFC 0019 §3.4): every company of the installation with its currency and the people who work
+ * in it; switching to one; and, for administrators, a new company — its apps' defaults (journals, sequences, taxes…)
+ * are installed with it, and the administrators can switch to it at once.
+ */
+import { type PageProps } from '../../ui/index.js';
+import { type ReactElement } from 'react';
+export declare function CompaniesPage({ api }: PageProps): ReactElement;

package/dist/settings/web/CompaniesPage.js

@@ -0,0 +1,52 @@
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Settings › Companies (RFC 0019 §3.4): every company of the installation with its currency and the people who work
+ * in it; switching to one; and, for administrators, a new company — its apps' defaults (journals, sequences, taxes…)
+ * are installed with it, and the administrators can switch to it at once.
+ */
+import { Alert, ApiError, Avatar, Badge, Button, Dialog, Input, imageUrl, Label, Select, useKosh, } from '../../ui/index.js';
+import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
+import { Building2, Plus } from 'lucide-react';
+import { useEffect, useId, useState } from 'react';
+import { useTranslation } from 'react-i18next';
+const message = (error) => (error instanceof ApiError ? error.message : String(error));
+function NewCompanyDialog({ api, currencies, open, onOpenChange, }) {
+    const { t } = useTranslation('settings');
+    const id = useId();
+    const queryClient = useQueryClient();
+    const [name, setName] = useState('');
+    const [currency, setCurrency] = useState(null);
+    const create = useMutation({
+        mutationFn: () => api.call('POST', '/api/v1/settings/companies', {
+            name,
+            currency: Number(currency),
+        }),
+        onSuccess: () => {
+            void queryClient.invalidateQueries({ queryKey: ['settings', 'companies'] });
+            // The switcher lists the user's companies from their details.
+            void queryClient.invalidateQueries({ queryKey: ['me'] });
+            onOpenChange(false);
+        },
+    });
+    useEffect(() => {
+        if (!open) {
+            setName('');
+            setCurrency(null);
+            create.reset();
+        }
+    }, [open, create.reset]);
+    return (_jsx(Dialog, { open: open, onOpenChange: onOpenChange, title: t('companies.newTitle'), description: t('companies.newHint'), footer: _jsxs(_Fragment, { children: [_jsx(Button, { onClick: () => onOpenChange(false), children: t('profile.cancel') }), _jsx(Button, { variant: "primary", busy: create.isPending, disabled: name.trim() === '' || currency === null, onClick: () => create.mutate(), children: t('companies.create') })] }), children: _jsxs("div", { className: "grid gap-4", children: [_jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-name`, children: t('company.name') }), _jsx(Input, { id: `${id}-name`, value: name, onChange: (e) => setName(e.target.value) })] }), _jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-currency`, children: t('companies.currency') }), _jsx(Select, { id: `${id}-currency`, label: t('companies.currency'), value: currency, placeholder: t('companies.chooseCurrency'), options: currencies.map((c) => ({ value: String(c.id), label: c.name })), onChange: setCurrency })] }), create.error === null ? null : _jsx(Alert, { tone: "danger", children: message(create.error) })] }) }));
+}
+export function CompaniesPage({ api }) {
+    const { t } = useTranslation('settings');
+    const { switchCompany } = useKosh();
+    const [creating, setCreating] = useState(false);
+    const list = useQuery({
+        queryKey: ['settings', 'companies'],
+        queryFn: () => api.call('GET', '/api/v1/settings/companies'),
+    });
+    if (list.error !== null)
+        return _jsx(Alert, { tone: "danger", children: message(list.error) });
+    const data = list.data;
+    return (_jsxs("div", { className: "mx-auto grid max-w-3xl gap-6", children: [_jsxs("header", { className: "flex flex-wrap items-start justify-between gap-3", children: [_jsxs("div", { children: [_jsx("h1", { className: "text-xl font-semibold", children: t('companies.title') }), _jsx("p", { className: "text-sm text-muted-foreground", children: t('companies.intro') })] }), data?.canCreate === true ? (_jsxs(Button, { variant: "primary", onClick: () => setCreating(true), children: [_jsx(Plus, { className: "size-4", "aria-hidden": true }), t('companies.new')] })) : null] }), data === undefined ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "\u2026" })) : (_jsx("ul", { className: "divide-y rounded-lg border bg-surface", children: data.companies.map((c) => (_jsxs("li", { className: "flex flex-wrap items-center gap-3 px-4 py-3", children: [c.logo === null ? (_jsx("span", { "aria-hidden": true, className: "grid size-9 shrink-0 place-items-center rounded-md bg-muted text-muted-foreground", children: _jsx(Building2, { className: "size-4" }) })) : (_jsx(Avatar, { name: c.name, src: imageUrl('company', c.id, c.logo), shape: "square", className: "size-9 border" })), _jsxs("div", { className: "min-w-0 flex-1", children: [_jsxs("p", { className: "flex items-center gap-2 font-medium", children: [_jsx("span", { className: "truncate", children: c.name }), c.current ? _jsx(Badge, { tone: "info", children: t('companies.current') }) : null] }), _jsxs("p", { className: "text-sm text-muted-foreground", children: [c.currency, " \u00B7 ", t('companies.people', { count: c.people })] })] }), c.current || !c.member || switchCompany === undefined ? null : (_jsx(Button, { size: "sm", "aria-label": t('companies.switchTo', { name: c.name }), onClick: () => switchCompany(c.id), children: t('companies.switch') }))] }, c.id))) })), data === undefined ? null : (_jsx(NewCompanyDialog, { api: api, currencies: data.currencies, open: creating, onOpenChange: setCreating }))] }));
+}

package/dist/settings/web/CompanyPage.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Settings › Company (RFC 0018, RFC 0019 §3.4): the current company's name, number grouping and brand colour — the
+ * back-office's accent for everyone in the company — and its details: address, contacts and whatever the installed
+ * apps add (tax ids, fiscal year…), as the server offers them. The preview shows the colour as buttons, links and
+ * selections take it, in light and dark; the themes keep text readable whatever colour is chosen.
+ */
+import { type PageProps } from '../../ui/index.js';
+import { type ReactElement } from 'react';
+export declare function CompanyPage({ api }: PageProps): ReactElement;

package/dist/settings/web/CompanyPage.js

@@ -0,0 +1,105 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Settings › Company (RFC 0018, RFC 0019 §3.4): the current company's name, number grouping and brand colour — the
+ * back-office's accent for everyone in the company — and its details: address, contacts and whatever the installed
+ * apps add (tax ids, fiscal year…), as the server offers them. The preview shows the colour as buttons, links and
+ * selections take it, in light and dark; the themes keep text readable whatever colour is chosen.
+ */
+import { Alert, ApiError, accentVariables, Badge, Button, Checkbox, ImagePicker, Input, imageUrl, Label, Select, Textarea, } from '../../ui/index.js';
+import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
+import { Check } from 'lucide-react';
+import { useId, useState } from 'react';
+import { useTranslation } from 'react-i18next';
+/** One detail, by its kind: text, a long text, a number, yes / no, or a choice. */
+function DetailField({ detail, value, onChange, }) {
+    const id = `company-${detail.key}`;
+    const { t } = useTranslation('settings');
+    if (detail.kind === 'boolean')
+        return (_jsxs("div", { className: "flex items-center gap-2 sm:col-span-2", children: [_jsx(Checkbox, { id: id, checked: value === true, disabled: detail.readonly, onCheckedChange: (checked) => onChange(checked === true) }), _jsx(Label, { htmlFor: id, children: detail.label })] }));
+    return (_jsxs("div", { className: `grid gap-1.5 ${detail.kind === 'text' ? 'sm:col-span-2' : ''}`, children: [_jsx(Label, { htmlFor: id, children: detail.label }), detail.kind === 'selection' ? (_jsx(Select, { id: id, label: detail.label, value: typeof value === 'string' ? value : 'none', options: [{ value: 'none', label: t('company.notSet') }, ...(detail.options ?? [])], disabled: detail.readonly, onChange: (v) => onChange(v === 'none' ? null : v) })) : detail.kind === 'text' ? (_jsx(Textarea, { id: id, rows: 3, value: typeof value === 'string' ? value : '', readOnly: detail.readonly, onChange: (e) => onChange(e.target.value) })) : (_jsx(Input, { id: id, type: detail.kind === 'integer' ? 'number' : 'text', value: value === null ? '' : String(value), readOnly: detail.readonly, onChange: (e) => onChange(detail.kind === 'integer'
+                    ? e.target.value === ''
+                        ? null
+                        : Number.parseInt(e.target.value, 10)
+                    : e.target.value) }))] }));
+}
+/** Suggested colours: indigo (the default), and a few that read well as an accent in both themes. */
+const SWATCHES = [
+    '#4f46e5',
+    '#2563eb',
+    '#0d9488',
+    '#16a34a',
+    '#ca8a04',
+    '#ea580c',
+    '#dc2626',
+    '#db2777',
+    '#7c3aed',
+    '#475569',
+];
+const HEX = /^#[0-9a-fA-F]{6}$/;
+function Preview({ color, dark, }) {
+    const { t } = useTranslation('settings');
+    return (_jsxs("div", { className: `${dark ? 'dark' : 'light'} grid gap-3 rounded-lg border bg-background p-4 text-foreground`, style: accentVariables(color), children: [_jsx("p", { className: "text-xs font-medium text-muted-foreground", children: dark ? t('company.dark') : t('company.light') }), _jsxs("div", { className: "flex flex-wrap items-center gap-2", children: [_jsx(Button, { size: "sm", variant: "primary", tabIndex: -1, children: t('company.sampleAction') }), _jsx(Badge, { tone: "info", children: t('company.sampleBadge') }), _jsx("span", { className: "text-sm text-primary underline underline-offset-4", children: t('company.sampleLink') })] }), _jsx("div", { className: "rounded-md bg-accent px-3 py-2 text-sm text-accent-foreground", children: t('company.sampleSelected') })] }));
+}
+export function CompanyPage({ api }) {
+    const company = useQuery({
+        queryKey: ['settings', 'company'],
+        queryFn: () => api.call('GET', '/api/v1/settings/company'),
+    });
+    if (company.error !== null)
+        return (_jsx(Alert, { tone: "danger", children: company.error instanceof ApiError ? company.error.message : String(company.error) }));
+    // The form starts from the loaded company: nothing can be chosen before it is there and then overwritten.
+    return company.data === undefined ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "\u2026" })) : (_jsx(CompanyForm, { api: api, company: company.data }));
+}
+function CompanyForm({ api, company }) {
+    const { t } = useTranslation('settings');
+    const id = useId();
+    const queryClient = useQueryClient();
+    const [name, setName] = useState(company.name);
+    const [grouping, setGrouping] = useState(company.numberGrouping);
+    const [color, setColor] = useState(company.accentColor);
+    const [typed, setTyped] = useState(company.accentColor ?? '');
+    const me = useQuery({
+        queryKey: ['me'],
+        queryFn: () => api.call('GET', '/api/v1/auth/me'),
+    });
+    const logo = useMutation({
+        mutationFn: (image) => image === null
+            ? api.call('DELETE', `/api/v1/images/company/${company.id}`)
+            : api.call('PUT', `/api/v1/images/company/${company.id}`, { image }),
+        // The sidebar and the switcher show the logo from the user's details.
+        onSuccess: () => void queryClient.invalidateQueries({ queryKey: ['me'] }),
+    });
+    // Only the details changed are sent.
+    const [details, setDetails] = useState({});
+    const save = useMutation({
+        mutationFn: () => api.call('PATCH', '/api/v1/settings/company', {
+            name,
+            numberGrouping: grouping,
+            accentColor: color,
+            ...(Object.keys(details).length === 0 ? {} : { details }),
+        }),
+        onSuccess: () => {
+            setDetails({});
+            void queryClient.invalidateQueries({ queryKey: ['settings', 'company'] });
+            // The shell takes the accent and the grouping from the user's details.
+            void queryClient.invalidateQueries({ queryKey: ['me'] });
+        },
+    });
+    const pick = (next) => {
+        setColor(next);
+        setTyped(next ?? '');
+    };
+    return (_jsxs("div", { className: "mx-auto grid max-w-3xl gap-6", children: [_jsxs("header", { children: [_jsx("h1", { className: "text-xl font-semibold", children: t('company.title') }), _jsx("p", { className: "text-sm text-muted-foreground", children: t('company.intro') })] }), _jsxs("form", { className: "grid gap-6", onSubmit: (e) => {
+                    e.preventDefault();
+                    save.mutate();
+                }, children: [_jsxs("section", { className: "grid gap-4 rounded-lg border bg-surface p-5", children: [_jsx("h2", { className: "font-semibold", children: t('company.identity') }), _jsx(ImagePicker, { name: name, src: imageUrl('company', company.id, me.data?.logos?.[String(company.id)]), fit: "logo", busy: logo.isPending, onChoose: (image) => logo.mutate(image), onRemove: () => logo.mutate(null) }), logo.error === null ? null : (_jsx(Alert, { tone: "danger", children: logo.error instanceof ApiError ? logo.error.message : String(logo.error) })), _jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-name`, children: t('company.name') }), _jsx(Input, { id: `${id}-name`, value: name, required: true, onChange: (e) => setName(e.target.value) })] }), _jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-grouping`, children: t('company.grouping') }), _jsx(Select, { id: `${id}-grouping`, label: t('company.grouping'), value: grouping, options: [
+                                            { value: 'international', label: t('company.international') },
+                                            { value: 'lakh', label: t('company.lakh') },
+                                        ], onChange: (v) => setGrouping(v === 'lakh' ? 'lakh' : 'international') })] })] }), company.details.length === 0 ? null : (_jsxs("section", { className: "grid gap-4 rounded-lg border bg-surface p-5", children: [_jsxs("div", { children: [_jsx("h2", { className: "font-semibold", children: t('company.details') }), _jsx("p", { className: "text-sm text-muted-foreground", children: t('company.detailsHint', { currency: company.currency }) })] }), _jsx("div", { className: "grid gap-4 sm:grid-cols-2", children: company.details.map((d) => (_jsx(DetailField, { detail: d, value: d.key in details ? details[d.key] : d.value, onChange: (v) => setDetails((all) => ({ ...all, [d.key]: v })) }, d.key))) })] })), _jsxs("section", { className: "grid gap-4 rounded-lg border bg-surface p-5", children: [_jsxs("div", { children: [_jsx("h2", { className: "font-semibold", children: t('company.brand') }), _jsx("p", { className: "text-sm text-muted-foreground", children: t('company.brandHint') })] }), _jsxs("fieldset", { className: "grid gap-3", children: [_jsx("legend", { className: "sr-only", children: t('company.brand') }), _jsx("div", { className: "flex flex-wrap gap-2", children: SWATCHES.map((swatch) => (_jsx("button", { type: "button", "aria-label": swatch, "aria-pressed": color === swatch, onClick: () => pick(swatch), className: "grid size-8 place-items-center rounded-full border-2 border-surface ring-1 ring-border", style: { background: swatch }, children: color === swatch ? _jsx(Check, { className: "size-4 text-white", "aria-hidden": true }) : null }, swatch))) }), _jsxs("div", { className: "flex flex-wrap items-end gap-3", children: [_jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-hex`, children: t('company.hex') }), _jsxs("div", { className: "flex items-center gap-2", children: [_jsx("input", { type: "color", "aria-label": t('company.picker'), value: color ?? '#4f46e5', onChange: (e) => pick(e.target.value), className: "size-9 cursor-pointer rounded-md border bg-surface p-1" }), _jsx(Input, { id: `${id}-hex`, className: "w-32 font-mono", value: typed, placeholder: "#4f46e5", "aria-invalid": typed !== '' && !HEX.test(typed) ? true : undefined, onChange: (e) => {
+                                                                    setTyped(e.target.value);
+                                                                    if (HEX.test(e.target.value))
+                                                                        setColor(e.target.value.toLowerCase());
+                                                                    if (e.target.value === '')
+                                                                        setColor(null);
+                                                                } })] })] }), _jsx(Button, { type: "button", variant: "ghost", size: "sm", onClick: () => pick(null), children: t('company.default') })] })] }), _jsxs("div", { className: "grid gap-3 sm:grid-cols-2", children: [_jsx(Preview, { color: color, dark: false }), _jsx(Preview, { color: color, dark: true })] })] }), save.error === null ? null : (_jsx(Alert, { tone: "danger", children: save.error instanceof ApiError ? save.error.message : String(save.error) })), save.isSuccess ? _jsx(Alert, { tone: "info", children: t('company.saved') }) : null, _jsx("div", { className: "flex justify-end", children: _jsx(Button, { type: "submit", variant: "primary", busy: save.isPending, children: t('company.save') }) })] })] }));
+}

package/dist/settings/web/ConnectedAppsPage.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Connected apps (RFC 0017 §5.2), from the account menu: the apps you allowed to act for you through OAuth, what each
+ * may do in words, when it last did, and *Remove access* — which ends every token the app holds for you at once.
+ */
+import { type PageProps } from '../../ui/index.js';
+import type { ReactElement } from 'react';
+export declare function ConnectedAppsPage({ api }: PageProps): ReactElement;

package/dist/settings/web/ConnectedAppsPage.js

@@ -0,0 +1,33 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Connected apps (RFC 0017 §5.2), from the account menu: the apps you allowed to act for you through OAuth, what each
+ * may do in words, when it last did, and *Remove access* — which ends every token the app holds for you at once.
+ */
+import { Alert, ApiError, Button, useKosh } from '../../ui/index.js';
+import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
+import { ExternalLink, Plug } from 'lucide-react';
+import { useTranslation } from 'react-i18next';
+export function ConnectedAppsPage({ api }) {
+    const { t } = useTranslation('settings');
+    const { format } = useKosh();
+    const queryClient = useQueryClient();
+    const grants = useQuery({
+        queryKey: ['oauth', 'grants'],
+        queryFn: () => api.call('GET', '/api/v1/auth/oauth/grants'),
+    });
+    const revoke = useMutation({
+        mutationFn: (id) => api.call('POST', `/api/v1/auth/oauth/grants/${id}/revoke`),
+        onSuccess: () => void queryClient.invalidateQueries({ queryKey: ['oauth', 'grants'] }),
+    });
+    const error = grants.error ?? revoke.error;
+    return (_jsxs("div", { className: "mx-auto grid max-w-3xl gap-6", children: [_jsxs("header", { children: [_jsx("h1", { className: "text-xl font-semibold", children: t('connected.title') }), _jsx("p", { className: "text-sm text-muted-foreground", children: t('connected.intro') })] }), error === null ? null : (_jsx(Alert, { tone: "danger", children: error instanceof ApiError ? error.message : String(error) })), grants.data === undefined ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "\u2026" })) : grants.data.grants.length === 0 ? (_jsx("p", { className: "rounded-lg border bg-surface p-6 text-center text-sm text-muted-foreground", children: t('connected.none') })) : (_jsx("ul", { className: "grid gap-3", children: grants.data.grants.map((g) => (_jsxs("li", { className: "flex flex-wrap items-start gap-3 rounded-lg border bg-surface p-4", children: [_jsx("span", { "aria-hidden": true, className: "grid size-9 shrink-0 place-items-center rounded-md bg-muted text-muted-foreground", children: _jsx(Plug, { className: "size-4" }) }), _jsxs("div", { className: "grid min-w-0 flex-1 gap-1", children: [_jsxs("p", { className: "flex items-center gap-2 font-medium", children: [g.app, g.homepage === null ? null : (_jsx("a", { href: g.homepage, target: "_blank", rel: "noreferrer noopener", "aria-label": t('connected.homepage', { app: g.app }), className: "text-muted-foreground hover:text-foreground", children: _jsx(ExternalLink, { className: "size-3.5", "aria-hidden": true }) }))] }), _jsx("ul", { className: "flex flex-wrap gap-x-3 text-sm text-muted-foreground", children: g.scopes.map((s) => (_jsx("li", { children: s.label }, s.scope))) }), _jsx("p", { className: "text-xs text-muted-foreground", children: [
+                                        g.createdAt === null
+                                            ? null
+                                            : t('connected.since', { when: format.date(g.createdAt.slice(0, 10)) }),
+                                        g.lastUsedAt === null
+                                            ? t('connected.neverUsed')
+                                            : t('connected.lastUsed', { when: format.datetime(g.lastUsedAt) }),
+                                    ]
+                                        .filter((x) => x !== null)
+                                        .join(' · ') })] }), _jsx(Button, { size: "sm", variant: "danger", busy: revoke.isPending && revoke.variables === g.id, onClick: () => revoke.mutate(g.id), "aria-label": t('connected.revokeApp', { app: g.app }), children: t('connected.revoke') })] }, g.id))) }))] }));
+}

package/dist/settings/web/OverviewPage.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Settings' home (RFC 0019 §3.1): every section the user may open, in its group (Workspace, People, Security, Apps —
+ * the server's menus decide which), each with what it is for; and a search over their names, descriptions and
+ * keywords ("lakh" finds Company, "two-factor" your profile). Sections of other modules join their group with their
+ * menu; their description and keywords come from `settings:overview.<action>` messages when the module adds them.
+ */
+import { type PageProps } from '../../ui/index.js';
+import { type ReactElement } from 'react';
+export declare function OverviewPage({ api }: PageProps): ReactElement;

package/dist/settings/web/OverviewPage.js

@@ -0,0 +1,77 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Settings' home (RFC 0019 §3.1): every section the user may open, in its group (Workspace, People, Security, Apps —
+ * the server's menus decide which), each with what it is for; and a search over their names, descriptions and
+ * keywords ("lakh" finds Company, "two-factor" your profile). Sections of other modules join their group with their
+ * menu; their description and keywords come from `settings:overview.<action>` messages when the module adds them.
+ */
+import { AppIcon } from '../../ui/index.js';
+import { useQuery } from '@tanstack/react-query';
+import { Link } from '@tanstack/react-router';
+import { Search, UserRound } from 'lucide-react';
+import { useId, useState } from 'react';
+import { useTranslation } from 'react-i18next';
+const normalise = (s) => s.toLocaleLowerCase().normalize('NFKD');
+/** Each section's icon (AppIcon names); a module's own section shows the Settings gear. */
+const SECTION_ICONS = {
+    'settings.action_company': 'company',
+    'settings.action_companies': 'companies',
+    'settings.action_people': 'users',
+    'settings.action_roles': 'shield',
+    'settings.action_security': 'security',
+    'settings.action_audit': 'audit',
+    'settings.action_apps': 'apps',
+    'assistant.action_settings': 'assistant',
+};
+export function OverviewPage({ api }) {
+    const { t } = useTranslation('settings');
+    const id = useId();
+    const [query, setQuery] = useState('');
+    const menus = useQuery({ queryKey: ['menus', 'settings'], queryFn: () => api.menus('settings') });
+    const about = (action) => ({
+        description: t(`overview.about.${action}.description`, { defaultValue: '' }),
+        keywords: t(`overview.about.${action}.keywords`, { defaultValue: '' }),
+    });
+    const entry = (n) => n.action === undefined || n.action === 'settings.action_overview'
+        ? null
+        : { label: n.label, action: n.action, ...about(n.action) };
+    // The groups (a menu with children), and loose sections under "Other".
+    const roots = (menus.data ?? []).flatMap((root) => root.children);
+    const groups = [];
+    const loose = [];
+    for (const node of roots) {
+        if (node.children.length > 0)
+            groups.push({
+                id: node.id,
+                label: node.label,
+                entries: node.children.map(entry).filter((e) => e !== null),
+            });
+        else {
+            const e = entry(node);
+            if (e !== null)
+                loose.push(e);
+        }
+    }
+    if (loose.length > 0)
+        groups.push({ id: 'other', label: t('overview.other'), entries: loose });
+    // Your profile is everyone's, outside the app's menus.
+    const profile = {
+        label: t('profile.title'),
+        action: '',
+        description: t('overview.profile'),
+        keywords: t('overview.profileKeywords'),
+    };
+    const q = normalise(query.trim());
+    const matches = (e) => q === '' ||
+        q
+            .split(/\s+/)
+            .every((word) => normalise(`${e.label} ${e.description} ${e.keywords}`).includes(word));
+    const shown = groups
+        .map((g) => ({ ...g, entries: g.entries.filter(matches) }))
+        .filter((g) => g.entries.length > 0);
+    const card = (e, to) => _jsx("li", { children: to }, e.action || 'profile');
+    const showProfile = matches(profile);
+    return (_jsxs("div", { className: "mx-auto grid max-w-4xl gap-6", children: [_jsxs("header", { className: "grid gap-3", children: [_jsx("h1", { className: "text-2xl font-semibold", children: t('overview.title') }), _jsxs("div", { className: "relative", children: [_jsx(Search, { className: "pointer-events-none absolute start-3 top-1/2 size-4 -translate-y-1/2 text-muted-foreground", "aria-hidden": true }), _jsx("label", { htmlFor: `${id}-q`, className: "sr-only", children: t('overview.search') }), _jsx("input", { id: `${id}-q`, type: "search", 
+                                // biome-ignore lint/a11y/noAutofocus: the page is a search first; it opens on purpose
+                                autoFocus: true, value: query, placeholder: t('overview.search'), onChange: (e) => setQuery(e.target.value), className: "h-11 w-full rounded-lg border border-input bg-surface ps-10 pe-3 text-base shadow-sm outline-none focus-visible:ring-2 focus-visible:ring-ring" })] })] }), shown.length === 0 && !showProfile ? (_jsx("p", { className: "text-sm text-muted-foreground", children: t('overview.nothing', { query }) })) : null, shown.map((g) => (_jsxs("section", { "aria-labelledby": `${id}-${g.id}`, className: "grid gap-2", children: [_jsx("h2", { id: `${id}-${g.id}`, className: "text-xs font-medium tracking-wide text-muted-foreground uppercase", children: g.label }), _jsx("ul", { className: "grid gap-3 sm:grid-cols-2", children: g.entries.map((e) => card(e, _jsxs(Link, { to: "/$app/a/$action", params: { app: 'settings', action: e.action }, className: "flex h-full items-start gap-3 rounded-lg border bg-surface p-4 hover:border-primary/40 hover:bg-accent/40", children: [_jsx(AppIcon, { name: SECTION_ICONS[e.action] ?? 'settings', className: "size-9" }), _jsxs("span", { className: "grid gap-0.5", children: [_jsx("span", { className: "font-medium", children: e.label }), e.description === '' ? null : (_jsx("span", { className: "text-sm text-muted-foreground", children: e.description }))] })] }))) })] }, g.id))), showProfile ? (_jsxs("section", { "aria-labelledby": `${id}-you`, className: "grid gap-2", children: [_jsx("h2", { id: `${id}-you`, className: "text-xs font-medium tracking-wide text-muted-foreground uppercase", children: t('overview.you') }), _jsx("ul", { className: "grid gap-3 sm:grid-cols-2", children: card(profile, _jsxs(Link, { to: "/me/$page", params: { page: 'settings.Profile' }, className: "flex h-full items-start gap-3 rounded-lg border bg-surface p-4 hover:border-primary/40 hover:bg-accent/40", children: [_jsx("span", { "aria-hidden": true, className: "grid size-9 shrink-0 place-items-center rounded-lg bg-accent text-accent-foreground", children: _jsx(UserRound, { className: "size-4" }) }), _jsxs("span", { className: "grid gap-0.5", children: [_jsx("span", { className: "font-medium", children: profile.label }), _jsx("span", { className: "text-sm text-muted-foreground", children: profile.description })] })] })) })] })) : null] }));
+}

package/dist/settings/web/PeoplePage.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Settings › People (RFC 0019 §3.2): who works here — searched and filtered by status —, invitations (the link
+ * emailed when mail is set up, always shown to copy), a person's details and roles per app and company, a new
+ * invitation, a two-factor reset, deactivation and reactivation, and their recent activity. The server decides
+ * what a People manager may do (not administrators, not their own roles) and audits it all.
+ */
+import { type PageProps } from '../../ui/index.js';
+import { type ReactElement } from 'react';
+export declare function PeoplePage({ api }: PageProps): ReactElement;