shutro-erp 0.3.2 → 0.3.4

package/dist/integrations/web/OAuthAppsPage.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Integrations › OAuth apps (RFC 0017 §5.2): the third-party apps that may ask users for access — their client id,
+ * redirect addresses and the scopes they may ask for. A new app's client secret is shown once (public apps have none
+ * and use PKCE); a new secret replaces the old at once; an app switched off stops every token it holds. The server
+ * checks the addresses and scopes and audits every change.
+ */
+import { type PageProps } from '../../ui/index.js';
+import { type ReactElement } from 'react';
+export declare function OAuthAppsPage({ api }: PageProps): ReactElement;

package/dist/integrations/web/OAuthAppsPage.js

@@ -0,0 +1,79 @@
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Integrations › OAuth apps (RFC 0017 §5.2): the third-party apps that may ask users for access — their client id,
+ * redirect addresses and the scopes they may ask for. A new app's client secret is shown once (public apps have none
+ * and use PKCE); a new secret replaces the old at once; an app switched off stops every token it holds. The server
+ * checks the addresses and scopes and audits every change.
+ */
+import { Alert, ApiError, Badge, Button, Checkbox, Dialog, Input, Label, } from '../../ui/index.js';
+import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
+import { Check, Copy, KeyRound, Plus } from 'lucide-react';
+import { useEffect, useId, useState } from 'react';
+import { useTranslation } from 'react-i18next';
+const message = (error) => (error instanceof ApiError ? error.message : String(error));
+/** A value to copy, with a button that says when it is copied. */
+function Copyable({ value, label, }) {
+    const { t } = useTranslation('integrations');
+    const [copied, setCopied] = useState(false);
+    return (_jsxs("div", { className: "flex items-center gap-2", children: [_jsx("code", { className: "min-w-0 flex-1 select-all break-all rounded bg-muted px-2 py-1 font-mono text-xs", children: value }), _jsx(Button, { size: "icon", variant: "ghost", "aria-label": t('oauth.copy', { what: label }), onClick: () => {
+                    void navigator.clipboard?.writeText(value).then(() => setCopied(true));
+                }, children: copied ? _jsx(Check, { "aria-hidden": true }) : _jsx(Copy, { "aria-hidden": true }) })] }));
+}
+function NewAppDialog({ api, open, onOpenChange, }) {
+    const { t } = useTranslation('integrations');
+    const id = useId();
+    const queryClient = useQueryClient();
+    const [name, setName] = useState('');
+    const [uris, setUris] = useState('');
+    const [chosen, setChosen] = useState([]);
+    const [confidential, setConfidential] = useState(true);
+    const scopes = useQuery({
+        queryKey: ['auth', 'scopes'],
+        queryFn: () => api.call('GET', '/api/v1/auth/scopes'),
+    });
+    const create = useMutation({
+        mutationFn: () => api.call('POST', '/api/v1/oauth/apps', {
+            name,
+            confidential,
+            redirectUris: uris
+                .split(/\s+/)
+                .map((u) => u.trim())
+                .filter((u) => u !== ''),
+            scopes: chosen,
+        }),
+        onSuccess: () => void queryClient.invalidateQueries({ queryKey: ['oauth', 'apps'] }),
+    });
+    useEffect(() => {
+        if (!open) {
+            setName('');
+            setUris('');
+            setChosen([]);
+            setConfidential(true);
+            create.reset();
+        }
+    }, [open, create.reset]);
+    const made = create.data;
+    return (_jsx(Dialog, { open: open, onOpenChange: onOpenChange, title: t('oauth.newTitle'), description: t('oauth.newHint'), wide: true, footer: made === undefined ? (_jsxs(_Fragment, { children: [_jsx(Button, { onClick: () => onOpenChange(false), children: t('oauth.cancel') }), _jsx(Button, { variant: "primary", busy: create.isPending, disabled: name.trim() === '' || uris.trim() === '' || chosen.length === 0, onClick: () => create.mutate(), children: t('oauth.create') })] })) : (_jsx(Button, { variant: "primary", onClick: () => onOpenChange(false), children: t('oauth.done') })), children: made !== undefined ? (_jsxs("div", { className: "grid gap-3", children: [_jsx(Alert, { tone: "warning", children: made.clientSecret === null ? t('oauth.publicMade') : t('oauth.secretOnce') }), _jsxs("div", { className: "grid gap-1", children: [_jsx("span", { className: "text-sm font-medium", children: t('oauth.clientId') }), _jsx(Copyable, { value: made.clientId, label: t('oauth.clientId') })] }), made.clientSecret === null ? null : (_jsxs("div", { className: "grid gap-1", "data-testid": "oauth-secret", children: [_jsx("span", { className: "text-sm font-medium", children: t('oauth.clientSecret') }), _jsx(Copyable, { value: made.clientSecret, label: t('oauth.clientSecret') })] }))] })) : (_jsxs("div", { className: "grid gap-4", children: [_jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-name`, children: t('oauth.name') }), _jsx(Input, { id: `${id}-name`, value: name, onChange: (e) => setName(e.target.value) })] }), _jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-uris`, children: t('oauth.redirects') }), _jsx("textarea", { id: `${id}-uris`, rows: 2, className: "rounded-md border bg-surface px-3 py-2 font-mono text-sm", placeholder: "https://partner.example.com/oauth/callback", value: uris, onChange: (e) => setUris(e.target.value) }), _jsx("p", { className: "text-xs text-muted-foreground", children: t('oauth.redirectsHint') })] }), _jsxs("fieldset", { className: "grid gap-2", children: [_jsx("legend", { className: "mb-1 text-sm font-medium", children: t('oauth.scopes') }), _jsx("div", { className: "grid max-h-48 gap-1.5 overflow-auto rounded-md border p-2 sm:grid-cols-2", children: (scopes.data?.scopes ?? []).map((s) => (_jsxs("div", { className: "flex items-center gap-2 text-sm", children: [_jsx(Checkbox, { id: `${id}-scope-${s.scope}`, checked: chosen.includes(s.scope), onCheckedChange: (on) => setChosen((all) => on === true ? [...all, s.scope] : all.filter((x) => x !== s.scope)) }), _jsx(Label, { htmlFor: `${id}-scope-${s.scope}`, className: "font-normal", children: s.label }), _jsx("code", { className: "ms-auto font-mono text-xs text-muted-foreground", children: s.scope })] }, s.scope))) })] }), _jsxs("div", { className: "flex items-start gap-2 text-sm", children: [_jsx(Checkbox, { id: `${id}-public`, checked: !confidential, onCheckedChange: (on) => setConfidential(on !== true) }), _jsxs(Label, { htmlFor: `${id}-public`, className: "font-normal", children: [t('oauth.public'), _jsx("span", { className: "block text-xs text-muted-foreground", children: t('oauth.publicHint') })] })] }), create.error === null ? null : _jsx(Alert, { tone: "danger", children: message(create.error) })] })) }));
+}
+export function OAuthAppsPage({ api }) {
+    const { t } = useTranslation('integrations');
+    const queryClient = useQueryClient();
+    const [creating, setCreating] = useState(false);
+    const [secret, setSecret] = useState(null);
+    const apps = useQuery({
+        queryKey: ['oauth', 'apps'],
+        queryFn: () => api.call('GET', '/api/v1/oauth/apps'),
+    });
+    const refresh = () => void queryClient.invalidateQueries({ queryKey: ['oauth', 'apps'] });
+    const rotate = useMutation({
+        mutationFn: (app) => api
+            .call('POST', `/api/v1/oauth/apps/${app.id}/secret`)
+            .then((r) => setSecret({ app: app.name, value: r.clientSecret })),
+    });
+    const toggle = useMutation({
+        mutationFn: (app) => api.call('PATCH', `/api/v1/oauth/apps/${app.id}`, { active: !app.active }),
+        onSuccess: refresh,
+    });
+    const error = apps.error ?? rotate.error ?? toggle.error;
+    return (_jsxs("div", { className: "mx-auto grid max-w-4xl gap-6", children: [_jsxs("header", { className: "flex flex-wrap items-start justify-between gap-3", children: [_jsxs("div", { children: [_jsx("h1", { className: "text-xl font-semibold", children: t('oauth.title') }), _jsx("p", { className: "text-sm text-muted-foreground", children: t('oauth.intro') })] }), _jsxs(Button, { variant: "primary", onClick: () => setCreating(true), children: [_jsx(Plus, { className: "size-4", "aria-hidden": true }), t('oauth.new')] })] }), error === null ? null : _jsx(Alert, { tone: "danger", children: message(error) }), secret === null ? null : (_jsxs(Alert, { tone: "warning", children: [_jsx("p", { className: "mb-2", children: t('oauth.newSecret', { app: secret.app }) }), _jsx(Copyable, { value: secret.value, label: t('oauth.clientSecret') })] })), apps.data === undefined ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "\u2026" })) : apps.data.apps.length === 0 ? (_jsx("p", { className: "rounded-lg border bg-surface p-6 text-center text-sm text-muted-foreground", children: t('oauth.none') })) : (_jsx("ul", { className: "grid gap-3", children: apps.data.apps.map((a) => (_jsxs("li", { className: "grid gap-3 rounded-lg border bg-surface p-4", children: [_jsxs("div", { className: "flex flex-wrap items-center gap-2", children: [_jsx(KeyRound, { className: "size-4 text-muted-foreground", "aria-hidden": true }), _jsx("span", { className: "font-medium", children: a.name }), _jsx(Badge, { tone: a.confidential ? 'neutral' : 'info', children: a.confidential ? t('oauth.confidential') : t('oauth.publicBadge') }), a.active ? null : _jsx(Badge, { tone: "warning", children: t('oauth.inactive') }), _jsx("span", { className: "flex-1" }), a.confidential ? (_jsx(Button, { size: "sm", busy: rotate.isPending && rotate.variables?.id === a.id, onClick: () => rotate.mutate(a), children: t('oauth.rotate') })) : null, _jsx(Button, { size: "sm", variant: "ghost", busy: toggle.isPending && toggle.variables?.id === a.id, onClick: () => toggle.mutate(a), children: a.active ? t('oauth.deactivate') : t('oauth.activate') })] }), _jsxs("dl", { className: "grid gap-2 text-sm sm:grid-cols-[10rem_1fr]", children: [_jsx("dt", { className: "text-muted-foreground", children: t('oauth.clientId') }), _jsx("dd", { children: _jsx(Copyable, { value: a.clientId, label: t('oauth.clientId') }) }), _jsx("dt", { className: "text-muted-foreground", children: t('oauth.redirects') }), _jsx("dd", { className: "break-all font-mono text-xs", children: a.redirectUris.join('\n') }), _jsx("dt", { className: "text-muted-foreground", children: t('oauth.scopes') }), _jsx("dd", { className: "flex flex-wrap gap-1", children: a.scopes.map((s) => (_jsx(Badge, { children: _jsx("span", { className: "font-mono text-xs", children: s }) }, s))) })] })] }, a.id))) })), _jsx(NewAppDialog, { api: api, open: creating, onOpenChange: setCreating })] }));
+}

package/dist/integrations/web/index.d.ts

@@ -10,6 +10,7 @@ import { messages } from './messages.js';
 export { DeliveryTools } from './DeliveryTools.js';
 export { EndpointTools } from './EndpointTools.js';
 export { InboundTools } from './InboundTools.js';
+export { OAuthAppsPage } from './OAuthAppsPage.js';
 export { WebhookTools } from './WebhookTools.js';
 /** Registers the components (and the messages in `i18n`, when given). */
 export declare function registerIntegrationsWeb(registry: Registry, i18n?: i18n): Registry;

package/dist/integrations/web/index.js

@@ -9,10 +9,12 @@ import { DeliveryTools } from './DeliveryTools.js';
 import { EndpointTools } from './EndpointTools.js';
 import { InboundTools } from './InboundTools.js';
 import { messages } from './messages.js';
+import { OAuthAppsPage } from './OAuthAppsPage.js';
 import { WebhookTools } from './WebhookTools.js';
 export { DeliveryTools } from './DeliveryTools.js';
 export { EndpointTools } from './EndpointTools.js';
 export { InboundTools } from './InboundTools.js';
+export { OAuthAppsPage } from './OAuthAppsPage.js';
 export { WebhookTools } from './WebhookTools.js';
 /** Registers the components (and the messages in `i18n`, when given). */
 export function registerIntegrationsWeb(registry, i18n) {
@@ -20,6 +22,7 @@ export function registerIntegrationsWeb(registry, i18n) {
     registry.registerComponent('integrations.DeliveryTools', DeliveryTools);
     registry.registerComponent('integrations.EndpointTools', EndpointTools);
     registry.registerComponent('integrations.InboundTools', InboundTools);
+    registry.registerPage('integrations.OAuthApps', OAuthAppsPage);
     if (i18n !== undefined)
         addMessages(i18n, 'integrations', messages);
     return registry;

package/dist/integrations/web/messages.js

@@ -1,6 +1,35 @@
 /** Messages of the Integrations app (namespace `integrations`), in English and Bangla. */
 export const messages = {
     en: {
+        oauth: {
+            title: 'OAuth apps',
+            intro: 'Apps of other companies that may ask your users for access. Each user decides; an app never does more than its user may.',
+            new: 'New app',
+            newTitle: 'A new OAuth app',
+            newHint: 'Where users are sent back after they allow it, and what it may ask for.',
+            name: 'Name',
+            redirects: 'Redirect addresses',
+            redirectsHint: 'One per line, https (http only for localhost). The address must match exactly.',
+            scopes: 'Scopes it may ask for',
+            public: 'A public app (phone or browser app: no secret, PKCE only)',
+            publicHint: 'It cannot keep a secret, so every sign-in proves itself with PKCE.',
+            create: 'Create',
+            cancel: 'Cancel',
+            done: 'Done',
+            clientId: 'Client id',
+            clientSecret: 'Client secret',
+            secretOnce: 'Copy the client secret now: it is shown only once.',
+            publicMade: 'A public app has no secret: give the developer its client id.',
+            newSecret: 'The new secret of {{app}}: copy it now. The old one stops working.',
+            copy: 'Copy the {{what}}',
+            none: 'No OAuth apps yet.',
+            confidential: 'Confidential',
+            publicBadge: 'Public',
+            inactive: 'Switched off',
+            rotate: 'New secret',
+            deactivate: 'Switch off',
+            activate: 'Switch on',
+        },
         tools: {
             title: 'Webhook tools',
             ping: 'Send a test event',
@@ -26,6 +55,35 @@ export const messages = {
         },
     },
     bn: {
+        oauth: {
+            title: 'OAuth অ্যাপ',
+            intro: 'অন্য প্রতিষ্ঠানের অ্যাপ যা আপনার ব্যবহারকারীদের কাছে অনুমতি চাইতে পারে। প্রতিটি ব্যবহারকারী নিজে সিদ্ধান্ত নেন।',
+            new: 'নতুন অ্যাপ',
+            newTitle: 'নতুন OAuth অ্যাপ',
+            newHint: 'অনুমতির পর ব্যবহারকারীরা কোথায় ফিরবেন, আর এটি কী চাইতে পারে।',
+            name: 'নাম',
+            redirects: 'ফেরত ঠিকানা',
+            redirectsHint: 'প্রতি লাইনে একটি, https (localhost এর জন্য http)। ঠিকানা হুবহু মিলতে হবে।',
+            scopes: 'যে স্কোপ চাইতে পারে',
+            public: 'পাবলিক অ্যাপ (ফোন বা ব্রাউজার: সিক্রেট নেই, শুধু PKCE)',
+            publicHint: 'এটি সিক্রেট রাখতে পারে না, তাই প্রতিটি সাইন-ইন PKCE দিয়ে প্রমাণ করে।',
+            create: 'তৈরি করুন',
+            cancel: 'বাতিল',
+            done: 'শেষ',
+            clientId: 'ক্লায়েন্ট আইডি',
+            clientSecret: 'ক্লায়েন্ট সিক্রেট',
+            secretOnce: 'এখনই সিক্রেট কপি করুন: এটি একবারই দেখানো হয়।',
+            publicMade: 'পাবলিক অ্যাপের সিক্রেট নেই: ডেভেলপারকে ক্লায়েন্ট আইডি দিন।',
+            newSecret: '{{app}}-এর নতুন সিক্রেট: এখনই কপি করুন। পুরনোটি আর কাজ করবে না।',
+            copy: '{{what}} কপি করুন',
+            none: 'এখনো কোনো OAuth অ্যাপ নেই।',
+            confidential: 'গোপনীয়',
+            publicBadge: 'পাবলিক',
+            inactive: 'বন্ধ',
+            rotate: 'নতুন সিক্রেট',
+            deactivate: 'বন্ধ করুন',
+            activate: 'চালু করুন',
+        },
         tools: {
             title: 'ওয়েবহুক সরঞ্জাম',
             ping: 'পরীক্ষামূলক ইভেন্ট পাঠান',

package/dist/l10n_bd/.kosh/bindings.js

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 52fb4c0464f10e60
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: d28665dceee41886
 // Bindings of module `l10n_bd`: import the definition API from here to get types scoped to what it can see.
 export { defineModel, defineModule, extendModel, f, replace } from '../../server/orm.js';
 import { definitions } from '../../server/orm.js';

package/dist/l10n_bd/.kosh/schema.d.ts

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 52fb4c0464f10e60
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: d28665dceee41886
 // Schema view of module `l10n_bd` (RFC 0002 §7.7): the models it owns or depends on, with the extensions it can see.
 import type { F } from '../../server/orm.js';
 
@@ -24,9 +24,11 @@ export interface SchemaView {
   readonly 'audit.event': AuditEvent;
   readonly 'auth.api_key': AuthApiKey;
   readonly 'auth.credential': AuthCredential;
+  readonly 'auth.policy': AuthPolicy;
   readonly 'auth.session': AuthSession;
   readonly 'auth.user_grant': AuthUserGrant;
   readonly 'auth.user_group': AuthUserGroup;
+  readonly 'kosh.image': KoshImage;
   readonly 'kosh.saved_view': KoshSavedView;
   readonly 'mail.activity': MailActivity;
   readonly 'mail.activity.type': MailActivityType;
@@ -35,6 +37,10 @@ export interface SchemaView {
   readonly 'mail.follower': MailFollower;
   readonly 'mail.message': MailMessage;
   readonly 'mail.message.reaction': MailMessageReaction;
+  readonly 'oauth.app': OauthApp;
+  readonly 'oauth.code': OauthCode;
+  readonly 'oauth.grant': OauthGrant;
+  readonly 'oauth.token': OauthToken;
   readonly 'product.category': ProductCategory;
   readonly 'product.product': ProductProduct;
   readonly 'report.dashboard': ReportDashboard;
@@ -635,6 +641,26 @@ export interface AuthCredential {
 export interface AuthCredentialMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.credential'> {
 }
 
+/** `auth.policy` (owner: base). */
+export interface AuthPolicy {
+  readonly name: 'auth.policy';
+  readonly fields: {
+    readonly id: F.Id<'auth.policy'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly twoFactor: F.Selection<'administrators' | 'everyone', { readonly required: true; readonly default: true }>;
+    readonly sessionDays: F.Integer;
+  };
+  readonly methods: AuthPolicyMethods;
+}
+
+/** Methods of `auth.policy`: declared ones and transitions. */
+export interface AuthPolicyMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.policy'> {
+}
+
 /** `auth.session` (owner: base). */
 export interface AuthSession {
   readonly name: 'auth.session';
@@ -707,6 +733,29 @@ export interface AuthUserGroup {
 export interface AuthUserGroupMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.user_group'> {
 }
 
+/** `kosh.image` (owner: base). */
+export interface KoshImage {
+  readonly name: 'kosh.image';
+  readonly fields: {
+    readonly id: F.Id<'kosh.image'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly ownerModel: F.Char<{ readonly required: true }>;
+    readonly ownerId: F.Integer<{ readonly required: true }>;
+    readonly mime: F.Char<{ readonly required: true }>;
+    readonly data: F.Text<{ readonly required: true }>;
+    readonly hash: F.Char<{ readonly required: true }>;
+  };
+  readonly methods: KoshImageMethods;
+}
+
+/** Methods of `kosh.image`: declared ones and transitions. */
+export interface KoshImageMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'kosh.image'> {
+}
+
 /** `kosh.saved_view` (owner: base). */
 export interface KoshSavedView {
   readonly name: 'kosh.saved_view';
@@ -909,6 +958,105 @@ export interface MailMessageReaction {
 export interface MailMessageReactionMethods extends F.Methods<typeof import('../../messaging/index.js').messagingShutro, 'mail.message.reaction'> {
 }
 
+/** `oauth.app` (owner: base). */
+export interface OauthApp {
+  readonly name: 'oauth.app';
+  readonly fields: {
+    readonly id: F.Id<'oauth.app'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly name: F.Char<{ readonly required: true }>;
+    readonly clientId: F.Char<{ readonly required: true }>;
+    readonly secretHash: F.Char;
+    readonly confidential: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly redirectUris: F.Text<{ readonly required: true }>;
+    readonly scopes: F.Char<{ readonly required: true }>;
+    readonly homepage: F.Char;
+    readonly active: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly owner: F.Many2one<'res.users'>;
+  };
+  readonly methods: OauthAppMethods;
+}
+
+/** Methods of `oauth.app`: declared ones and transitions. */
+export interface OauthAppMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'oauth.app'> {
+}
+
+/** `oauth.code` (owner: base). */
+export interface OauthCode {
+  readonly name: 'oauth.code';
+  readonly fields: {
+    readonly id: F.Id<'oauth.code'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly codeHash: F.Char<{ readonly required: true }>;
+    readonly grant: F.Many2one<'oauth.grant', { readonly required: true }>;
+    readonly redirectUri: F.Char<{ readonly required: true }>;
+    readonly challenge: F.Char;
+    readonly expiresAt: F.Datetime<{ readonly required: true }>;
+    readonly used: F.Bool<{ readonly required: true; readonly default: true }>;
+  };
+  readonly methods: OauthCodeMethods;
+}
+
+/** Methods of `oauth.code`: declared ones and transitions. */
+export interface OauthCodeMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'oauth.code'> {
+}
+
+/** `oauth.grant` (owner: base). */
+export interface OauthGrant {
+  readonly name: 'oauth.grant';
+  readonly fields: {
+    readonly id: F.Id<'oauth.grant'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly user: F.Many2one<'res.users', { readonly required: true }>;
+    readonly app: F.Many2one<'oauth.app', { readonly required: true }>;
+    readonly scopes: F.Char<{ readonly required: true }>;
+    readonly revoked: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly lastUsedAt: F.Datetime;
+  };
+  readonly methods: OauthGrantMethods;
+}
+
+/** Methods of `oauth.grant`: declared ones and transitions. */
+export interface OauthGrantMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'oauth.grant'> {
+}
+
+/** `oauth.token` (owner: base). */
+export interface OauthToken {
+  readonly name: 'oauth.token';
+  readonly fields: {
+    readonly id: F.Id<'oauth.token'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly grant: F.Many2one<'oauth.grant', { readonly required: true }>;
+    readonly accessHash: F.Char<{ readonly required: true }>;
+    readonly refreshHash: F.Char<{ readonly required: true }>;
+    readonly accessExpiresAt: F.Datetime<{ readonly required: true }>;
+    readonly refreshExpiresAt: F.Datetime<{ readonly required: true }>;
+    readonly revoked: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly rotated: F.Bool<{ readonly required: true; readonly default: true }>;
+  };
+  readonly methods: OauthTokenMethods;
+}
+
+/** Methods of `oauth.token`: declared ones and transitions. */
+export interface OauthTokenMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'oauth.token'> {
+}
+
 /** `product.category` (owner: product). */
 export interface ProductCategory {
   readonly name: 'product.category';
@@ -1129,6 +1277,13 @@ export interface ResCompany {
     readonly name: F.Char<{ readonly required: true }>;
     readonly currency: F.Many2one<'res.currency', { readonly required: true }>;
     readonly numberGrouping: F.Selection<'international' | 'lakh', { readonly required: true; readonly default: true }>;
+    readonly accentColor: F.Char;
+    readonly street: F.Char;
+    readonly city: F.Char;
+    readonly zip: F.Char;
+    readonly email: F.Char;
+    readonly phone: F.Char;
+    readonly website: F.Char;
     readonly fiscalYearStart: F.Integer<{ readonly required: true; readonly default: true }>; // accounting
     readonly chartTemplate: F.Char; // accounting
     readonly country: F.Char; // accounting

package/dist/l10n_in/.kosh/bindings.js

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 3a48057268d9c891
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: c1be73bb58451058
 // Bindings of module `l10n_in`: import the definition API from here to get types scoped to what it can see.
 export { defineModel, defineModule, extendModel, f, replace } from '../../server/orm.js';
 import { definitions } from '../../server/orm.js';

package/dist/l10n_in/.kosh/schema.d.ts

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 3a48057268d9c891
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: c1be73bb58451058
 // Schema view of module `l10n_in` (RFC 0002 §7.7): the models it owns or depends on, with the extensions it can see.
 import type { F } from '../../server/orm.js';
 
@@ -24,9 +24,11 @@ export interface SchemaView {
   readonly 'audit.event': AuditEvent;
   readonly 'auth.api_key': AuthApiKey;
   readonly 'auth.credential': AuthCredential;
+  readonly 'auth.policy': AuthPolicy;
   readonly 'auth.session': AuthSession;
   readonly 'auth.user_grant': AuthUserGrant;
   readonly 'auth.user_group': AuthUserGroup;
+  readonly 'kosh.image': KoshImage;
   readonly 'kosh.saved_view': KoshSavedView;
   readonly 'l10n_in.einvoice': L10nInEinvoice;
   readonly 'mail.activity': MailActivity;
@@ -36,6 +38,10 @@ export interface SchemaView {
   readonly 'mail.follower': MailFollower;
   readonly 'mail.message': MailMessage;
   readonly 'mail.message.reaction': MailMessageReaction;
+  readonly 'oauth.app': OauthApp;
+  readonly 'oauth.code': OauthCode;
+  readonly 'oauth.grant': OauthGrant;
+  readonly 'oauth.token': OauthToken;
   readonly 'product.category': ProductCategory;
   readonly 'product.product': ProductProduct;
   readonly 'report.dashboard': ReportDashboard;
@@ -657,6 +663,26 @@ export interface AuthCredential {
 export interface AuthCredentialMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.credential'> {
 }
 
+/** `auth.policy` (owner: base). */
+export interface AuthPolicy {
+  readonly name: 'auth.policy';
+  readonly fields: {
+    readonly id: F.Id<'auth.policy'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly twoFactor: F.Selection<'administrators' | 'everyone', { readonly required: true; readonly default: true }>;
+    readonly sessionDays: F.Integer;
+  };
+  readonly methods: AuthPolicyMethods;
+}
+
+/** Methods of `auth.policy`: declared ones and transitions. */
+export interface AuthPolicyMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.policy'> {
+}
+
 /** `auth.session` (owner: base). */
 export interface AuthSession {
   readonly name: 'auth.session';
@@ -729,6 +755,29 @@ export interface AuthUserGroup {
 export interface AuthUserGroupMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.user_group'> {
 }
 
+/** `kosh.image` (owner: base). */
+export interface KoshImage {
+  readonly name: 'kosh.image';
+  readonly fields: {
+    readonly id: F.Id<'kosh.image'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly ownerModel: F.Char<{ readonly required: true }>;
+    readonly ownerId: F.Integer<{ readonly required: true }>;
+    readonly mime: F.Char<{ readonly required: true }>;
+    readonly data: F.Text<{ readonly required: true }>;
+    readonly hash: F.Char<{ readonly required: true }>;
+  };
+  readonly methods: KoshImageMethods;
+}
+
+/** Methods of `kosh.image`: declared ones and transitions. */
+export interface KoshImageMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'kosh.image'> {
+}
+
 /** `kosh.saved_view` (owner: base). */
 export interface KoshSavedView {
   readonly name: 'kosh.saved_view';
@@ -966,6 +1015,105 @@ export interface MailMessageReaction {
 export interface MailMessageReactionMethods extends F.Methods<typeof import('../../messaging/index.js').messagingShutro, 'mail.message.reaction'> {
 }
 
+/** `oauth.app` (owner: base). */
+export interface OauthApp {
+  readonly name: 'oauth.app';
+  readonly fields: {
+    readonly id: F.Id<'oauth.app'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly name: F.Char<{ readonly required: true }>;
+    readonly clientId: F.Char<{ readonly required: true }>;
+    readonly secretHash: F.Char;
+    readonly confidential: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly redirectUris: F.Text<{ readonly required: true }>;
+    readonly scopes: F.Char<{ readonly required: true }>;
+    readonly homepage: F.Char;
+    readonly active: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly owner: F.Many2one<'res.users'>;
+  };
+  readonly methods: OauthAppMethods;
+}
+
+/** Methods of `oauth.app`: declared ones and transitions. */
+export interface OauthAppMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'oauth.app'> {
+}
+
+/** `oauth.code` (owner: base). */
+export interface OauthCode {
+  readonly name: 'oauth.code';
+  readonly fields: {
+    readonly id: F.Id<'oauth.code'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly codeHash: F.Char<{ readonly required: true }>;
+    readonly grant: F.Many2one<'oauth.grant', { readonly required: true }>;
+    readonly redirectUri: F.Char<{ readonly required: true }>;
+    readonly challenge: F.Char;
+    readonly expiresAt: F.Datetime<{ readonly required: true }>;
+    readonly used: F.Bool<{ readonly required: true; readonly default: true }>;
+  };
+  readonly methods: OauthCodeMethods;
+}
+
+/** Methods of `oauth.code`: declared ones and transitions. */
+export interface OauthCodeMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'oauth.code'> {
+}
+
+/** `oauth.grant` (owner: base). */
+export interface OauthGrant {
+  readonly name: 'oauth.grant';
+  readonly fields: {
+    readonly id: F.Id<'oauth.grant'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly user: F.Many2one<'res.users', { readonly required: true }>;
+    readonly app: F.Many2one<'oauth.app', { readonly required: true }>;
+    readonly scopes: F.Char<{ readonly required: true }>;
+    readonly revoked: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly lastUsedAt: F.Datetime;
+  };
+  readonly methods: OauthGrantMethods;
+}
+
+/** Methods of `oauth.grant`: declared ones and transitions. */
+export interface OauthGrantMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'oauth.grant'> {
+}
+
+/** `oauth.token` (owner: base). */
+export interface OauthToken {
+  readonly name: 'oauth.token';
+  readonly fields: {
+    readonly id: F.Id<'oauth.token'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly grant: F.Many2one<'oauth.grant', { readonly required: true }>;
+    readonly accessHash: F.Char<{ readonly required: true }>;
+    readonly refreshHash: F.Char<{ readonly required: true }>;
+    readonly accessExpiresAt: F.Datetime<{ readonly required: true }>;
+    readonly refreshExpiresAt: F.Datetime<{ readonly required: true }>;
+    readonly revoked: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly rotated: F.Bool<{ readonly required: true; readonly default: true }>;
+  };
+  readonly methods: OauthTokenMethods;
+}
+
+/** Methods of `oauth.token`: declared ones and transitions. */
+export interface OauthTokenMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'oauth.token'> {
+}
+
 /** `product.category` (owner: product). */
 export interface ProductCategory {
   readonly name: 'product.category';
@@ -1187,6 +1335,13 @@ export interface ResCompany {
     readonly name: F.Char<{ readonly required: true }>;
     readonly currency: F.Many2one<'res.currency', { readonly required: true }>;
     readonly numberGrouping: F.Selection<'international' | 'lakh', { readonly required: true; readonly default: true }>;
+    readonly accentColor: F.Char;
+    readonly street: F.Char;
+    readonly city: F.Char;
+    readonly zip: F.Char;
+    readonly email: F.Char;
+    readonly phone: F.Char;
+    readonly website: F.Char;
     readonly fiscalYearStart: F.Integer<{ readonly required: true; readonly default: true }>; // accounting
     readonly chartTemplate: F.Char; // accounting
     readonly country: F.Char; // accounting
@@ -1200,9 +1355,6 @@ export interface ResCompany {
     readonly accountRetainedEarnings: F.Many2one<'account.account'>; // accounting
     readonly gstin: F.Char; // l10n_in
     readonly pan: F.Char; // l10n_in
-    readonly street: F.Char; // l10n_in
-    readonly city: F.Char; // l10n_in
-    readonly zip: F.Char; // l10n_in
     readonly einvoiceEnabled: F.Bool<{ readonly required: true; readonly default: true }>; // l10n_in
   };
   readonly methods: ResCompanyMethods;