shutro-erp 0.3.3 → 0.3.4

package/dist/account_portal/.kosh/bindings.js

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 668898d9db81475e
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: b86e876d4a603b3c
 // Bindings of module `account_portal`: import the definition API from here to get types scoped to what it can see.
 export { defineModel, defineModule, extendModel, f, replace } from '../../server/orm.js';
 import { definitions } from '../../server/orm.js';

package/dist/account_portal/.kosh/schema.d.ts

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 668898d9db81475e
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: b86e876d4a603b3c
 // Schema view of module `account_portal` (RFC 0002 §7.7): the models it owns or depends on, with the extensions it can see.
 import type { F } from '../../server/orm.js';
 
@@ -28,6 +28,7 @@ export interface SchemaView {
   readonly 'auth.session': AuthSession;
   readonly 'auth.user_grant': AuthUserGrant;
   readonly 'auth.user_group': AuthUserGroup;
+  readonly 'kosh.image': KoshImage;
   readonly 'kosh.saved_view': KoshSavedView;
   readonly 'mail.activity': MailActivity;
   readonly 'mail.activity.type': MailActivityType;
@@ -36,6 +37,10 @@ export interface SchemaView {
   readonly 'mail.follower': MailFollower;
   readonly 'mail.message': MailMessage;
   readonly 'mail.message.reaction': MailMessageReaction;
+  readonly 'oauth.app': OauthApp;
+  readonly 'oauth.code': OauthCode;
+  readonly 'oauth.grant': OauthGrant;
+  readonly 'oauth.token': OauthToken;
   readonly 'portal.announcement': PortalAnnouncement;
   readonly 'portal.invitation': PortalInvitation;
   readonly 'portal.signature': PortalSignature;
@@ -727,6 +732,29 @@ export interface AuthUserGroup {
 export interface AuthUserGroupMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.user_group'> {
 }
 
+/** `kosh.image` (owner: base). */
+export interface KoshImage {
+  readonly name: 'kosh.image';
+  readonly fields: {
+    readonly id: F.Id<'kosh.image'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly ownerModel: F.Char<{ readonly required: true }>;
+    readonly ownerId: F.Integer<{ readonly required: true }>;
+    readonly mime: F.Char<{ readonly required: true }>;
+    readonly data: F.Text<{ readonly required: true }>;
+    readonly hash: F.Char<{ readonly required: true }>;
+  };
+  readonly methods: KoshImageMethods;
+}
+
+/** Methods of `kosh.image`: declared ones and transitions. */
+export interface KoshImageMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'kosh.image'> {
+}
+
 /** `kosh.saved_view` (owner: base). */
 export interface KoshSavedView {
   readonly name: 'kosh.saved_view';
@@ -929,6 +957,105 @@ export interface MailMessageReaction {
 export interface MailMessageReactionMethods extends F.Methods<typeof import('../../messaging/index.js').messagingShutro, 'mail.message.reaction'> {
 }
 
+/** `oauth.app` (owner: base). */
+export interface OauthApp {
+  readonly name: 'oauth.app';
+  readonly fields: {
+    readonly id: F.Id<'oauth.app'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly name: F.Char<{ readonly required: true }>;
+    readonly clientId: F.Char<{ readonly required: true }>;
+    readonly secretHash: F.Char;
+    readonly confidential: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly redirectUris: F.Text<{ readonly required: true }>;
+    readonly scopes: F.Char<{ readonly required: true }>;
+    readonly homepage: F.Char;
+    readonly active: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly owner: F.Many2one<'res.users'>;
+  };
+  readonly methods: OauthAppMethods;
+}
+
+/** Methods of `oauth.app`: declared ones and transitions. */
+export interface OauthAppMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'oauth.app'> {
+}
+
+/** `oauth.code` (owner: base). */
+export interface OauthCode {
+  readonly name: 'oauth.code';
+  readonly fields: {
+    readonly id: F.Id<'oauth.code'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly codeHash: F.Char<{ readonly required: true }>;
+    readonly grant: F.Many2one<'oauth.grant', { readonly required: true }>;
+    readonly redirectUri: F.Char<{ readonly required: true }>;
+    readonly challenge: F.Char;
+    readonly expiresAt: F.Datetime<{ readonly required: true }>;
+    readonly used: F.Bool<{ readonly required: true; readonly default: true }>;
+  };
+  readonly methods: OauthCodeMethods;
+}
+
+/** Methods of `oauth.code`: declared ones and transitions. */
+export interface OauthCodeMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'oauth.code'> {
+}
+
+/** `oauth.grant` (owner: base). */
+export interface OauthGrant {
+  readonly name: 'oauth.grant';
+  readonly fields: {
+    readonly id: F.Id<'oauth.grant'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly user: F.Many2one<'res.users', { readonly required: true }>;
+    readonly app: F.Many2one<'oauth.app', { readonly required: true }>;
+    readonly scopes: F.Char<{ readonly required: true }>;
+    readonly revoked: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly lastUsedAt: F.Datetime;
+  };
+  readonly methods: OauthGrantMethods;
+}
+
+/** Methods of `oauth.grant`: declared ones and transitions. */
+export interface OauthGrantMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'oauth.grant'> {
+}
+
+/** `oauth.token` (owner: base). */
+export interface OauthToken {
+  readonly name: 'oauth.token';
+  readonly fields: {
+    readonly id: F.Id<'oauth.token'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly grant: F.Many2one<'oauth.grant', { readonly required: true }>;
+    readonly accessHash: F.Char<{ readonly required: true }>;
+    readonly refreshHash: F.Char<{ readonly required: true }>;
+    readonly accessExpiresAt: F.Datetime<{ readonly required: true }>;
+    readonly refreshExpiresAt: F.Datetime<{ readonly required: true }>;
+    readonly revoked: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly rotated: F.Bool<{ readonly required: true; readonly default: true }>;
+  };
+  readonly methods: OauthTokenMethods;
+}
+
+/** Methods of `oauth.token`: declared ones and transitions. */
+export interface OauthTokenMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'oauth.token'> {
+}
+
 /** `portal.announcement` (owner: portal). */
 export interface PortalAnnouncement {
   readonly name: 'portal.announcement';

package/dist/accounting/.kosh/bindings.js

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: e7d2cbddec9ade69
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: c9101ef07bbb3e64
 // Bindings of module `accounting`: import the definition API from here to get types scoped to what it can see.
 export { defineModel, defineModule, extendModel, f, replace } from '../../server/orm.js';
 import { definitions } from '../../server/orm.js';

package/dist/accounting/.kosh/schema.d.ts

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: e7d2cbddec9ade69
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: c9101ef07bbb3e64
 // Schema view of module `accounting` (RFC 0002 §7.7): the models it owns or depends on, with the extensions it can see.
 import type { F } from '../../server/orm.js';
 
@@ -28,6 +28,7 @@ export interface SchemaView {
   readonly 'auth.session': AuthSession;
   readonly 'auth.user_grant': AuthUserGrant;
   readonly 'auth.user_group': AuthUserGroup;
+  readonly 'kosh.image': KoshImage;
   readonly 'kosh.saved_view': KoshSavedView;
   readonly 'mail.activity': MailActivity;
   readonly 'mail.activity.type': MailActivityType;
@@ -36,6 +37,10 @@ export interface SchemaView {
   readonly 'mail.follower': MailFollower;
   readonly 'mail.message': MailMessage;
   readonly 'mail.message.reaction': MailMessageReaction;
+  readonly 'oauth.app': OauthApp;
+  readonly 'oauth.code': OauthCode;
+  readonly 'oauth.grant': OauthGrant;
+  readonly 'oauth.token': OauthToken;
   readonly 'product.category': ProductCategory;
   readonly 'product.product': ProductProduct;
   readonly 'report.dashboard': ReportDashboard;
@@ -724,6 +729,29 @@ export interface AuthUserGroup {
 export interface AuthUserGroupMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.user_group'> {
 }
 
+/** `kosh.image` (owner: base). */
+export interface KoshImage {
+  readonly name: 'kosh.image';
+  readonly fields: {
+    readonly id: F.Id<'kosh.image'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly ownerModel: F.Char<{ readonly required: true }>;
+    readonly ownerId: F.Integer<{ readonly required: true }>;
+    readonly mime: F.Char<{ readonly required: true }>;
+    readonly data: F.Text<{ readonly required: true }>;
+    readonly hash: F.Char<{ readonly required: true }>;
+  };
+  readonly methods: KoshImageMethods;
+}
+
+/** Methods of `kosh.image`: declared ones and transitions. */
+export interface KoshImageMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'kosh.image'> {
+}
+
 /** `kosh.saved_view` (owner: base). */
 export interface KoshSavedView {
   readonly name: 'kosh.saved_view';
@@ -926,6 +954,105 @@ export interface MailMessageReaction {
 export interface MailMessageReactionMethods extends F.Methods<typeof import('../../messaging/index.js').messagingShutro, 'mail.message.reaction'> {
 }
 
+/** `oauth.app` (owner: base). */
+export interface OauthApp {
+  readonly name: 'oauth.app';
+  readonly fields: {
+    readonly id: F.Id<'oauth.app'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly name: F.Char<{ readonly required: true }>;
+    readonly clientId: F.Char<{ readonly required: true }>;
+    readonly secretHash: F.Char;
+    readonly confidential: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly redirectUris: F.Text<{ readonly required: true }>;
+    readonly scopes: F.Char<{ readonly required: true }>;
+    readonly homepage: F.Char;
+    readonly active: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly owner: F.Many2one<'res.users'>;
+  };
+  readonly methods: OauthAppMethods;
+}
+
+/** Methods of `oauth.app`: declared ones and transitions. */
+export interface OauthAppMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'oauth.app'> {
+}
+
+/** `oauth.code` (owner: base). */
+export interface OauthCode {
+  readonly name: 'oauth.code';
+  readonly fields: {
+    readonly id: F.Id<'oauth.code'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly codeHash: F.Char<{ readonly required: true }>;
+    readonly grant: F.Many2one<'oauth.grant', { readonly required: true }>;
+    readonly redirectUri: F.Char<{ readonly required: true }>;
+    readonly challenge: F.Char;
+    readonly expiresAt: F.Datetime<{ readonly required: true }>;
+    readonly used: F.Bool<{ readonly required: true; readonly default: true }>;
+  };
+  readonly methods: OauthCodeMethods;
+}
+
+/** Methods of `oauth.code`: declared ones and transitions. */
+export interface OauthCodeMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'oauth.code'> {
+}
+
+/** `oauth.grant` (owner: base). */
+export interface OauthGrant {
+  readonly name: 'oauth.grant';
+  readonly fields: {
+    readonly id: F.Id<'oauth.grant'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly user: F.Many2one<'res.users', { readonly required: true }>;
+    readonly app: F.Many2one<'oauth.app', { readonly required: true }>;
+    readonly scopes: F.Char<{ readonly required: true }>;
+    readonly revoked: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly lastUsedAt: F.Datetime;
+  };
+  readonly methods: OauthGrantMethods;
+}
+
+/** Methods of `oauth.grant`: declared ones and transitions. */
+export interface OauthGrantMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'oauth.grant'> {
+}
+
+/** `oauth.token` (owner: base). */
+export interface OauthToken {
+  readonly name: 'oauth.token';
+  readonly fields: {
+    readonly id: F.Id<'oauth.token'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly grant: F.Many2one<'oauth.grant', { readonly required: true }>;
+    readonly accessHash: F.Char<{ readonly required: true }>;
+    readonly refreshHash: F.Char<{ readonly required: true }>;
+    readonly accessExpiresAt: F.Datetime<{ readonly required: true }>;
+    readonly refreshExpiresAt: F.Datetime<{ readonly required: true }>;
+    readonly revoked: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly rotated: F.Bool<{ readonly required: true; readonly default: true }>;
+  };
+  readonly methods: OauthTokenMethods;
+}
+
+/** Methods of `oauth.token`: declared ones and transitions. */
+export interface OauthTokenMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'oauth.token'> {
+}
+
 /** `product.category` (owner: product). */
 export interface ProductCategory {
   readonly name: 'product.category';

package/dist/contacts/.kosh/bindings.js

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 31cf57953410c779
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 87baf088f27622fd
 // Bindings of module `contacts`: import the definition API from here to get types scoped to what it can see.
 export { defineModel, defineModule, extendModel, f, replace } from '../../server/orm.js';
 import { definitions } from '../../server/orm.js';

package/dist/contacts/.kosh/schema.d.ts

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 31cf57953410c779
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 87baf088f27622fd
 // Schema view of module `contacts` (RFC 0002 §7.7): the models it owns or depends on, with the extensions it can see.
 import type { F } from '../../server/orm.js';
 
@@ -11,7 +11,12 @@ export interface SchemaView {
   readonly 'auth.session': AuthSession;
   readonly 'auth.user_grant': AuthUserGrant;
   readonly 'auth.user_group': AuthUserGroup;
+  readonly 'kosh.image': KoshImage;
   readonly 'kosh.saved_view': KoshSavedView;
+  readonly 'oauth.app': OauthApp;
+  readonly 'oauth.code': OauthCode;
+  readonly 'oauth.grant': OauthGrant;
+  readonly 'oauth.token': OauthToken;
   readonly 'res.company': ResCompany;
   readonly 'res.currency': ResCurrency;
   readonly 'res.partner': ResPartner;
@@ -187,6 +192,29 @@ export interface AuthUserGroup {
 export interface AuthUserGroupMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'auth.user_group'> {
 }
 
+/** `kosh.image` (owner: base). */
+export interface KoshImage {
+  readonly name: 'kosh.image';
+  readonly fields: {
+    readonly id: F.Id<'kosh.image'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly ownerModel: F.Char<{ readonly required: true }>;
+    readonly ownerId: F.Integer<{ readonly required: true }>;
+    readonly mime: F.Char<{ readonly required: true }>;
+    readonly data: F.Text<{ readonly required: true }>;
+    readonly hash: F.Char<{ readonly required: true }>;
+  };
+  readonly methods: KoshImageMethods;
+}
+
+/** Methods of `kosh.image`: declared ones and transitions. */
+export interface KoshImageMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'kosh.image'> {
+}
+
 /** `kosh.saved_view` (owner: base). */
 export interface KoshSavedView {
   readonly name: 'kosh.saved_view';
@@ -211,6 +239,105 @@ export interface KoshSavedView {
 export interface KoshSavedViewMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'kosh.saved_view'> {
 }
 
+/** `oauth.app` (owner: base). */
+export interface OauthApp {
+  readonly name: 'oauth.app';
+  readonly fields: {
+    readonly id: F.Id<'oauth.app'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly name: F.Char<{ readonly required: true }>;
+    readonly clientId: F.Char<{ readonly required: true }>;
+    readonly secretHash: F.Char;
+    readonly confidential: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly redirectUris: F.Text<{ readonly required: true }>;
+    readonly scopes: F.Char<{ readonly required: true }>;
+    readonly homepage: F.Char;
+    readonly active: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly owner: F.Many2one<'res.users'>;
+  };
+  readonly methods: OauthAppMethods;
+}
+
+/** Methods of `oauth.app`: declared ones and transitions. */
+export interface OauthAppMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'oauth.app'> {
+}
+
+/** `oauth.code` (owner: base). */
+export interface OauthCode {
+  readonly name: 'oauth.code';
+  readonly fields: {
+    readonly id: F.Id<'oauth.code'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly codeHash: F.Char<{ readonly required: true }>;
+    readonly grant: F.Many2one<'oauth.grant', { readonly required: true }>;
+    readonly redirectUri: F.Char<{ readonly required: true }>;
+    readonly challenge: F.Char;
+    readonly expiresAt: F.Datetime<{ readonly required: true }>;
+    readonly used: F.Bool<{ readonly required: true; readonly default: true }>;
+  };
+  readonly methods: OauthCodeMethods;
+}
+
+/** Methods of `oauth.code`: declared ones and transitions. */
+export interface OauthCodeMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'oauth.code'> {
+}
+
+/** `oauth.grant` (owner: base). */
+export interface OauthGrant {
+  readonly name: 'oauth.grant';
+  readonly fields: {
+    readonly id: F.Id<'oauth.grant'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly user: F.Many2one<'res.users', { readonly required: true }>;
+    readonly app: F.Many2one<'oauth.app', { readonly required: true }>;
+    readonly scopes: F.Char<{ readonly required: true }>;
+    readonly revoked: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly lastUsedAt: F.Datetime;
+  };
+  readonly methods: OauthGrantMethods;
+}
+
+/** Methods of `oauth.grant`: declared ones and transitions. */
+export interface OauthGrantMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'oauth.grant'> {
+}
+
+/** `oauth.token` (owner: base). */
+export interface OauthToken {
+  readonly name: 'oauth.token';
+  readonly fields: {
+    readonly id: F.Id<'oauth.token'>;
+    readonly createdAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly updatedAt: F.Datetime<{ readonly required: true; readonly readonly: true }>;
+    readonly createdBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly updatedBy: F.Many2one<'res.users', { readonly readonly: true }>;
+    readonly displayName: F.Char<{ readonly required: true; readonly readonly: true; readonly compute: true }>;
+    readonly grant: F.Many2one<'oauth.grant', { readonly required: true }>;
+    readonly accessHash: F.Char<{ readonly required: true }>;
+    readonly refreshHash: F.Char<{ readonly required: true }>;
+    readonly accessExpiresAt: F.Datetime<{ readonly required: true }>;
+    readonly refreshExpiresAt: F.Datetime<{ readonly required: true }>;
+    readonly revoked: F.Bool<{ readonly required: true; readonly default: true }>;
+    readonly rotated: F.Bool<{ readonly required: true; readonly default: true }>;
+  };
+  readonly methods: OauthTokenMethods;
+}
+
+/** Methods of `oauth.token`: declared ones and transitions. */
+export interface OauthTokenMethods extends F.Methods<typeof import('../../server/index.js').baseShutro, 'oauth.token'> {
+}
+
 /** `res.company` (owner: base). */
 export interface ResCompany {
   readonly name: 'res.company';

package/dist/integrations/index.js

@@ -299,6 +299,11 @@ export function integrationsModule(options = {}) {
                 label: 'Inbound calls',
                 views: ['list', 'form'],
             }),
+            'integrations.action_oauth_apps': {
+                type: 'client',
+                page: 'integrations.OAuthApps',
+                label: 'OAuth apps',
+            },
         },
         menus: [
             { id: 'integrations.root', label: 'Integrations', app: 'integrations' },
@@ -330,6 +335,13 @@ export function integrationsModule(options = {}) {
                 action: 'integrations.action_inbound',
                 sequence: 4,
             },
+            {
+                id: 'integrations.oauth_apps',
+                parent: 'integrations.root',
+                label: 'OAuth apps',
+                action: 'integrations.action_oauth_apps',
+                sequence: 5,
+            },
         ],
         views: {
             'webhook.subscription.list': list('webhook.subscription', {

package/dist/integrations/web/OAuthAppsPage.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Integrations › OAuth apps (RFC 0017 §5.2): the third-party apps that may ask users for access — their client id,
+ * redirect addresses and the scopes they may ask for. A new app's client secret is shown once (public apps have none
+ * and use PKCE); a new secret replaces the old at once; an app switched off stops every token it holds. The server
+ * checks the addresses and scopes and audits every change.
+ */
+import { type PageProps } from '../../ui/index.js';
+import { type ReactElement } from 'react';
+export declare function OAuthAppsPage({ api }: PageProps): ReactElement;

package/dist/integrations/web/OAuthAppsPage.js

@@ -0,0 +1,79 @@
+import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Integrations › OAuth apps (RFC 0017 §5.2): the third-party apps that may ask users for access — their client id,
+ * redirect addresses and the scopes they may ask for. A new app's client secret is shown once (public apps have none
+ * and use PKCE); a new secret replaces the old at once; an app switched off stops every token it holds. The server
+ * checks the addresses and scopes and audits every change.
+ */
+import { Alert, ApiError, Badge, Button, Checkbox, Dialog, Input, Label, } from '../../ui/index.js';
+import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
+import { Check, Copy, KeyRound, Plus } from 'lucide-react';
+import { useEffect, useId, useState } from 'react';
+import { useTranslation } from 'react-i18next';
+const message = (error) => (error instanceof ApiError ? error.message : String(error));
+/** A value to copy, with a button that says when it is copied. */
+function Copyable({ value, label, }) {
+    const { t } = useTranslation('integrations');
+    const [copied, setCopied] = useState(false);
+    return (_jsxs("div", { className: "flex items-center gap-2", children: [_jsx("code", { className: "min-w-0 flex-1 select-all break-all rounded bg-muted px-2 py-1 font-mono text-xs", children: value }), _jsx(Button, { size: "icon", variant: "ghost", "aria-label": t('oauth.copy', { what: label }), onClick: () => {
+                    void navigator.clipboard?.writeText(value).then(() => setCopied(true));
+                }, children: copied ? _jsx(Check, { "aria-hidden": true }) : _jsx(Copy, { "aria-hidden": true }) })] }));
+}
+function NewAppDialog({ api, open, onOpenChange, }) {
+    const { t } = useTranslation('integrations');
+    const id = useId();
+    const queryClient = useQueryClient();
+    const [name, setName] = useState('');
+    const [uris, setUris] = useState('');
+    const [chosen, setChosen] = useState([]);
+    const [confidential, setConfidential] = useState(true);
+    const scopes = useQuery({
+        queryKey: ['auth', 'scopes'],
+        queryFn: () => api.call('GET', '/api/v1/auth/scopes'),
+    });
+    const create = useMutation({
+        mutationFn: () => api.call('POST', '/api/v1/oauth/apps', {
+            name,
+            confidential,
+            redirectUris: uris
+                .split(/\s+/)
+                .map((u) => u.trim())
+                .filter((u) => u !== ''),
+            scopes: chosen,
+        }),
+        onSuccess: () => void queryClient.invalidateQueries({ queryKey: ['oauth', 'apps'] }),
+    });
+    useEffect(() => {
+        if (!open) {
+            setName('');
+            setUris('');
+            setChosen([]);
+            setConfidential(true);
+            create.reset();
+        }
+    }, [open, create.reset]);
+    const made = create.data;
+    return (_jsx(Dialog, { open: open, onOpenChange: onOpenChange, title: t('oauth.newTitle'), description: t('oauth.newHint'), wide: true, footer: made === undefined ? (_jsxs(_Fragment, { children: [_jsx(Button, { onClick: () => onOpenChange(false), children: t('oauth.cancel') }), _jsx(Button, { variant: "primary", busy: create.isPending, disabled: name.trim() === '' || uris.trim() === '' || chosen.length === 0, onClick: () => create.mutate(), children: t('oauth.create') })] })) : (_jsx(Button, { variant: "primary", onClick: () => onOpenChange(false), children: t('oauth.done') })), children: made !== undefined ? (_jsxs("div", { className: "grid gap-3", children: [_jsx(Alert, { tone: "warning", children: made.clientSecret === null ? t('oauth.publicMade') : t('oauth.secretOnce') }), _jsxs("div", { className: "grid gap-1", children: [_jsx("span", { className: "text-sm font-medium", children: t('oauth.clientId') }), _jsx(Copyable, { value: made.clientId, label: t('oauth.clientId') })] }), made.clientSecret === null ? null : (_jsxs("div", { className: "grid gap-1", "data-testid": "oauth-secret", children: [_jsx("span", { className: "text-sm font-medium", children: t('oauth.clientSecret') }), _jsx(Copyable, { value: made.clientSecret, label: t('oauth.clientSecret') })] }))] })) : (_jsxs("div", { className: "grid gap-4", children: [_jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-name`, children: t('oauth.name') }), _jsx(Input, { id: `${id}-name`, value: name, onChange: (e) => setName(e.target.value) })] }), _jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-uris`, children: t('oauth.redirects') }), _jsx("textarea", { id: `${id}-uris`, rows: 2, className: "rounded-md border bg-surface px-3 py-2 font-mono text-sm", placeholder: "https://partner.example.com/oauth/callback", value: uris, onChange: (e) => setUris(e.target.value) }), _jsx("p", { className: "text-xs text-muted-foreground", children: t('oauth.redirectsHint') })] }), _jsxs("fieldset", { className: "grid gap-2", children: [_jsx("legend", { className: "mb-1 text-sm font-medium", children: t('oauth.scopes') }), _jsx("div", { className: "grid max-h-48 gap-1.5 overflow-auto rounded-md border p-2 sm:grid-cols-2", children: (scopes.data?.scopes ?? []).map((s) => (_jsxs("div", { className: "flex items-center gap-2 text-sm", children: [_jsx(Checkbox, { id: `${id}-scope-${s.scope}`, checked: chosen.includes(s.scope), onCheckedChange: (on) => setChosen((all) => on === true ? [...all, s.scope] : all.filter((x) => x !== s.scope)) }), _jsx(Label, { htmlFor: `${id}-scope-${s.scope}`, className: "font-normal", children: s.label }), _jsx("code", { className: "ms-auto font-mono text-xs text-muted-foreground", children: s.scope })] }, s.scope))) })] }), _jsxs("div", { className: "flex items-start gap-2 text-sm", children: [_jsx(Checkbox, { id: `${id}-public`, checked: !confidential, onCheckedChange: (on) => setConfidential(on !== true) }), _jsxs(Label, { htmlFor: `${id}-public`, className: "font-normal", children: [t('oauth.public'), _jsx("span", { className: "block text-xs text-muted-foreground", children: t('oauth.publicHint') })] })] }), create.error === null ? null : _jsx(Alert, { tone: "danger", children: message(create.error) })] })) }));
+}
+export function OAuthAppsPage({ api }) {
+    const { t } = useTranslation('integrations');
+    const queryClient = useQueryClient();
+    const [creating, setCreating] = useState(false);
+    const [secret, setSecret] = useState(null);
+    const apps = useQuery({
+        queryKey: ['oauth', 'apps'],
+        queryFn: () => api.call('GET', '/api/v1/oauth/apps'),
+    });
+    const refresh = () => void queryClient.invalidateQueries({ queryKey: ['oauth', 'apps'] });
+    const rotate = useMutation({
+        mutationFn: (app) => api
+            .call('POST', `/api/v1/oauth/apps/${app.id}/secret`)
+            .then((r) => setSecret({ app: app.name, value: r.clientSecret })),
+    });
+    const toggle = useMutation({
+        mutationFn: (app) => api.call('PATCH', `/api/v1/oauth/apps/${app.id}`, { active: !app.active }),
+        onSuccess: refresh,
+    });
+    const error = apps.error ?? rotate.error ?? toggle.error;
+    return (_jsxs("div", { className: "mx-auto grid max-w-4xl gap-6", children: [_jsxs("header", { className: "flex flex-wrap items-start justify-between gap-3", children: [_jsxs("div", { children: [_jsx("h1", { className: "text-xl font-semibold", children: t('oauth.title') }), _jsx("p", { className: "text-sm text-muted-foreground", children: t('oauth.intro') })] }), _jsxs(Button, { variant: "primary", onClick: () => setCreating(true), children: [_jsx(Plus, { className: "size-4", "aria-hidden": true }), t('oauth.new')] })] }), error === null ? null : _jsx(Alert, { tone: "danger", children: message(error) }), secret === null ? null : (_jsxs(Alert, { tone: "warning", children: [_jsx("p", { className: "mb-2", children: t('oauth.newSecret', { app: secret.app }) }), _jsx(Copyable, { value: secret.value, label: t('oauth.clientSecret') })] })), apps.data === undefined ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "\u2026" })) : apps.data.apps.length === 0 ? (_jsx("p", { className: "rounded-lg border bg-surface p-6 text-center text-sm text-muted-foreground", children: t('oauth.none') })) : (_jsx("ul", { className: "grid gap-3", children: apps.data.apps.map((a) => (_jsxs("li", { className: "grid gap-3 rounded-lg border bg-surface p-4", children: [_jsxs("div", { className: "flex flex-wrap items-center gap-2", children: [_jsx(KeyRound, { className: "size-4 text-muted-foreground", "aria-hidden": true }), _jsx("span", { className: "font-medium", children: a.name }), _jsx(Badge, { tone: a.confidential ? 'neutral' : 'info', children: a.confidential ? t('oauth.confidential') : t('oauth.publicBadge') }), a.active ? null : _jsx(Badge, { tone: "warning", children: t('oauth.inactive') }), _jsx("span", { className: "flex-1" }), a.confidential ? (_jsx(Button, { size: "sm", busy: rotate.isPending && rotate.variables?.id === a.id, onClick: () => rotate.mutate(a), children: t('oauth.rotate') })) : null, _jsx(Button, { size: "sm", variant: "ghost", busy: toggle.isPending && toggle.variables?.id === a.id, onClick: () => toggle.mutate(a), children: a.active ? t('oauth.deactivate') : t('oauth.activate') })] }), _jsxs("dl", { className: "grid gap-2 text-sm sm:grid-cols-[10rem_1fr]", children: [_jsx("dt", { className: "text-muted-foreground", children: t('oauth.clientId') }), _jsx("dd", { children: _jsx(Copyable, { value: a.clientId, label: t('oauth.clientId') }) }), _jsx("dt", { className: "text-muted-foreground", children: t('oauth.redirects') }), _jsx("dd", { className: "break-all font-mono text-xs", children: a.redirectUris.join('\n') }), _jsx("dt", { className: "text-muted-foreground", children: t('oauth.scopes') }), _jsx("dd", { className: "flex flex-wrap gap-1", children: a.scopes.map((s) => (_jsx(Badge, { children: _jsx("span", { className: "font-mono text-xs", children: s }) }, s))) })] })] }, a.id))) })), _jsx(NewAppDialog, { api: api, open: creating, onOpenChange: setCreating })] }));
+}

package/dist/integrations/web/index.d.ts

@@ -10,6 +10,7 @@ import { messages } from './messages.js';
 export { DeliveryTools } from './DeliveryTools.js';
 export { EndpointTools } from './EndpointTools.js';
 export { InboundTools } from './InboundTools.js';
+export { OAuthAppsPage } from './OAuthAppsPage.js';
 export { WebhookTools } from './WebhookTools.js';
 /** Registers the components (and the messages in `i18n`, when given). */
 export declare function registerIntegrationsWeb(registry: Registry, i18n?: i18n): Registry;