shutro-erp 0.3.3 → 0.3.5

package/dist/trade_finance_sale/module.js

@@ -0,0 +1,44 @@
+/**
+ * The data layer of the Trade Finance ↔ Sales bridge (RFC 0021, Trade Finance step 3): an export LC received for a sales order takes its customer, currency and amount; the order lists its LCs.
+ */
+import { salesShutro } from '../sales/index.js';
+import { orm } from '../server/orm.js';
+import { tradeFinanceShutro } from '../trade_finance/index.js';
+import { defineModule, extendModel, f, onchange } from './.kosh/bindings.js';
+export const LcSale = extendModel('trade.lc', {
+    fields: {
+        saleOrder: f.many2one('sale.order', { ondelete: 'set null', label: 'Sales order' }),
+    },
+    onchange: {
+        // The order's counterparty, currency and total; the LC's direction and source document.
+        saleOrder: onchange('trade.lc', async (d) => {
+            const order = await d.record('saleOrder');
+            if (order === null || order === undefined)
+                return;
+            d.set('direction', 'export');
+            d.set('partner', order.partner.id);
+            d.set('currency', order.currency.id);
+            d.set('amount', order.amountTotal?.amount.toString() ?? null);
+            d.set('origin', order.name);
+        }),
+    },
+});
+export const SaleLcs = extendModel('sale.order', {
+    fields: {
+        lcs: f.one2many('trade.lc', 'saleOrder', { label: 'Letters of credit' }),
+    },
+});
+export const tradeFinanceSaleShutro = defineModule({
+    name: 'trade_finance_sale',
+    version: '0.1.0',
+    depends: [tradeFinanceShutro, salesShutro],
+    groups: [
+        orm.defineGroup({
+            code: 'trade_finance_sale.user',
+            label: 'Export LCs for sales orders',
+            implies: ['trade_finance.user', 'sales.user'],
+        }),
+    ],
+    models: [],
+    extensions: [LcSale, SaleLcs],
+});

package/dist/ui/api.d.ts

@@ -36,6 +36,7 @@ export interface ViewField {
     readonly label: string;
     readonly required: boolean;
     readonly readonly: boolean;
+    readonly help?: string;
     readonly target?: string;
     readonly options?: readonly {
         readonly value: string;
@@ -74,6 +75,10 @@ export interface CurrentUser {
     readonly administratorNeedsSecondFactor: boolean;
     /** The policy requires two-factor sign-in of everyone and it is not on (RFC 0019 §3.5); older servers send none. */
     readonly twoFactorSetupRequired?: boolean;
+    /** The user's photo version, or null (older servers send none). */
+    readonly avatar?: string | null;
+    /** Each company's logo version, when it has one. */
+    readonly logos?: Readonly<Record<string, string>>;
 }
 export interface AppEntry {
     readonly code: string;
@@ -186,7 +191,7 @@ export interface KoshApi {
         readonly filename: string;
     }>;
     /** Sends a file as the raw body (`Content-Type` from the file, `X-Filename` URI-encoded); the JSON answer. */
-    upload<T>(path: string, file: Blob, filename: string): Promise<T>;
+    upload<T>(path: string, file: Blob, filename: string, extra?: Readonly<Record<string, string>>): Promise<T>;
     /**
      * POSTs `body` and reads the server-sent events of the answer (`event:` and JSON `data:` lines), calling
      * `onEvent` for each (`message` when the event has no name) until the stream ends. @throws {ApiError} when the

package/dist/ui/api.js

@@ -226,8 +226,9 @@ export function createKoshApi(options = {}) {
             if (buffered.trim() !== '')
                 flush(buffered);
         },
-        async upload(path, file, filename) {
+        async upload(path, file, filename, extra = {}) {
             const headers = {
+                ...extra,
                 'content-type': file.type === '' ? 'application/octet-stream' : file.type,
                 'x-filename': encodeURIComponent(filename),
             };

package/dist/ui/app.js

@@ -12,11 +12,12 @@ import { compileSearch, decodeSearch, encodeSearch } from '../search/index.js';
 import { onlineManager, QueryClient, QueryClientProvider, useQuery, useQueryClient, } from '@tanstack/react-query';
 import { PersistQueryClientProvider } from '@tanstack/react-query-persist-client';
 import { createRootRoute, createRoute, createRouter, Link, Navigate, Outlet, RouterProvider, useNavigate, useParams, useSearch, } from '@tanstack/react-router';
-import { CalendarDays, ChartColumn, ChartGantt, ChevronRight, ChevronsUpDown, Columns3, Grid2x2, Languages, LayoutDashboard, List, LogOut, Map as MapIcon, Monitor, Moon, Network, PanelLeft, Plus, Search, Sheet, Sun, Table2, } from 'lucide-react';
+import { CalendarDays, ChartColumn, ChartGantt, ChevronDown, ChevronRight, ChevronsUpDown, Columns3, Grid2x2, House, Languages, LayoutDashboard, List, LogOut, Map as MapIcon, Monitor, Moon, Network, PanelLeft, Plus, Search, Sheet, Sun, Table2, } from 'lucide-react';
 import { Direction } from 'radix-ui';
 import { createContext, useCallback, useContext, useEffect, useMemo, useState, } from 'react';
 import { I18nextProvider, useTranslation } from 'react-i18next';
 import { ApiError } from './api.js';
+import { Avatar, imageUrl } from './components/Avatar.js';
 import { Alert, Button, Menu, MenuCheckboxItem, MenuContent, MenuItem, MenuLabel, MenuSeparator, MenuTrigger, Spinner, } from './components/primitives.js';
 import { KoshProvider, useKosh } from './context.js';
 import { DesignProvider } from './design.js';
@@ -29,8 +30,10 @@ import { setPrefill, takePrefill } from './prefill.js';
 import { onAppUpdate, registerServiceWorker } from './pwa/register.js';
 import { createRealtimeClient } from './realtime.js';
 import { SearchBar } from './search/SearchBar.js';
+import { ViewTabs } from './search/ViewTabs.js';
 import { Activate } from './shell/Activate.js';
 import { CommandPalette, PaletteContext } from './shell/CommandPalette.js';
+import { Consent } from './shell/Consent.js';
 import { Home } from './shell/Home.js';
 import { Login } from './shell/Login.js';
 import { OfflineMenu } from './shell/OfflineMenu.js';
@@ -142,7 +145,8 @@ function CompanyBlock({ me, company, collapsed, onChange, }) {
         enabled: me.companies.length > 0,
     });
     const name = names.data?.find((c) => c.id === company)?.displayName ?? t('app.name');
-    const badge = (_jsx("span", { "aria-hidden": true, className: "grid size-7 shrink-0 place-items-center rounded-md bg-primary text-xs font-semibold text-primary-foreground", children: name.slice(0, 1).toUpperCase() }));
+    // The company's logo, else its initial.
+    const badge = (_jsx(Avatar, { name: name.slice(0, 1), src: imageUrl('company', company, me.logos?.[String(company)]), shape: "square", className: "font-semibold" }));
     if (collapsed)
         return _jsx("span", { title: name, children: badge });
     if (me.companies.length < 2)
@@ -153,19 +157,16 @@ function CompanyBlock({ me, company, collapsed, onChange, }) {
                                 onChange(c.id);
                         }, children: _jsxs("span", { className: "flex items-center gap-2", children: [_jsx("span", { "aria-hidden": true, className: "grid size-5 place-items-center rounded bg-muted text-[10px] font-semibold", children: c.displayName.slice(0, 1).toUpperCase() }), c.displayName] }) }, c.id)))] })] }));
 }
-/** The user at the bottom of the sidebar: their pages and signing out. */
-function UserMenu({ user, collapsed, }) {
+function UserMenu({ user, collapsed, corner, }) {
     const { t } = useTranslation();
-    const { api, registry, persister } = useServices();
+    const { api, registry, persister, lang, setLang } = useServices();
+    const { theme, setTheme, density, setDensity } = useKosh();
     const queryClient = useQueryClient();
     const navigate = useNavigate();
-    const initials = user.name
-        .split(/\s+/)
-        .map((w) => w.slice(0, 1))
-        .join('')
-        .slice(0, 2)
-        .toUpperCase();
-    return (_jsxs(Menu, { children: [_jsx(MenuTrigger, { asChild: true, children: _jsxs("button", { type: "button", "aria-label": user.name, className: cn('flex w-full min-w-0 items-center gap-2 rounded-md px-1.5 py-1.5 text-sm hover:bg-muted', collapsed && 'justify-center'), children: [_jsx("span", { "aria-hidden": true, className: "grid size-7 shrink-0 place-items-center rounded-full bg-muted text-xs font-medium", children: initials }), collapsed ? null : _jsx("span", { className: "truncate", children: user.name })] }) }), _jsxs(MenuContent, { align: "start", side: "top", children: [_jsx(MenuLabel, { children: user.name }), registry.userPages().map((p) => (_jsx(MenuItem, { onSelect: () => void navigate({ to: '/me/$page', params: { page: p.name } }), children: t(p.label) }, p.name))), _jsxs(MenuItem, { onSelect: async () => {
+    return (_jsxs(Menu, { children: [_jsx(MenuTrigger, { asChild: true, children: _jsxs("button", { type: "button", "aria-label": user.name, "data-kosh-account": corner === undefined ? 'sidebar' : 'corner', className: cn('flex min-w-0 items-center gap-2 rounded-md px-1.5 py-1.5 text-sm hover:bg-muted', corner === undefined ? 'w-full' : 'rounded-full border bg-surface pe-3', collapsed && 'justify-center'), children: [_jsx(Avatar, { name: user.name, src: imageUrl('user', user.id, user.avatar) }), collapsed ? null : _jsx("span", { className: "truncate", children: user.name }), corner === undefined ? null : (_jsx(ChevronDown, { className: "size-3.5 text-muted-foreground", "aria-hidden": true }))] }) }), _jsxs(MenuContent, { align: corner === undefined ? 'start' : 'end', side: corner === undefined ? 'top' : 'bottom', className: corner === undefined ? undefined : 'max-h-[80vh] w-64 overflow-y-auto', children: [_jsxs(MenuLabel, { children: [user.name, _jsx("span", { className: "block text-xs font-normal text-muted-foreground", children: user.login })] }), registry.userPages().map((p) => (_jsx(MenuItem, { onSelect: () => void navigate({ to: '/me/$page', params: { page: p.name } }), children: t(p.label) }, p.name))), corner === undefined ? null : (_jsxs(_Fragment, { children: [corner.companies.length < 2 ? null : (_jsxs(_Fragment, { children: [_jsx(MenuSeparator, {}), _jsx(MenuLabel, { children: t('shell.company') }), corner.companies.map((c) => (_jsx(MenuCheckboxItem, { checked: c.id === corner.current, onCheckedChange: () => {
+                                            if (c.id !== corner.current)
+                                                corner.onSwitch(c.id);
+                                        }, children: c.name }, c.id)))] })), _jsx(MenuSeparator, {}), _jsx(MenuLabel, { children: t('shell.language') }), LANGUAGES.map((l) => (_jsx(MenuCheckboxItem, { checked: lang === l.code, onCheckedChange: () => setLang(l.code), children: _jsx("span", { lang: l.code.replace('_', '-'), children: l.name }) }, l.code))), _jsx(MenuSeparator, {}), _jsx(MenuLabel, { children: t('shell.theme') }), ['light', 'dark', 'system'].map((choice) => (_jsx(MenuCheckboxItem, { checked: theme === choice, onCheckedChange: () => setTheme(choice), children: t(`shell.${choice}`) }, choice))), _jsx(MenuLabel, { children: t('shell.density') }), ['comfortable', 'compact'].map((choice) => (_jsx(MenuCheckboxItem, { checked: density === choice, onCheckedChange: () => setDensity(choice), children: t(`views.${choice}`) }, choice)))] })), _jsx(MenuSeparator, {}), _jsxs(MenuItem, { onSelect: async () => {
                             await api.logout();
                             queryClient.clear();
                             await dropOfflineCache(persister);
@@ -247,11 +248,21 @@ function Shell() {
             setDrawer(false);
             setPalette(true);
         }, top: _jsx(CompanyBlock, { me: user, company: current, collapsed: inDrawer ? false : collapsed, onChange: switchCompany }), bottom: _jsx(UserMenu, { user: user, collapsed: inDrawer ? false : collapsed }), onNavigate: inDrawer ? () => setDrawer(false) : undefined }));
-    return (_jsx(KoshProvider, { api: api, registry: registry, uid: user.id, companyId: current, lang: lang, tz: Intl.DateTimeFormat().resolvedOptions().timeZone, grouping: user.groupings?.[String(current)] ?? 'international', accent: user.accents?.[String(current)] ?? null, ...(realtime === undefined ? {} : { realtime }), ...(offline === undefined ? {} : { offline }), switchCompany: switchCompany, children: _jsx(ToastProvider, { children: _jsxs(DesignProvider, { children: [_jsx(OfflineAgent, { uid: user.id }), _jsxs(PaletteContext.Provider, { value: openPalette, children: [_jsx("a", { href: "#content", className: "sr-only focus:not-sr-only focus:absolute focus:start-2 focus:top-2 focus:z-50 focus:rounded focus:bg-surface focus:px-3 focus:py-2", children: t('shell.skip') }), _jsxs("div", { className: "flex min-h-screen", children: [_jsx("aside", { "aria-label": t('shell.sidebar'), className: cn('sticky top-0 hidden h-screen shrink-0 border-e bg-surface transition-[width] lg:block', collapsed ? 'w-14' : 'w-60'), children: sidebar(false) }), _jsx(SidebarDrawer, { open: drawer, onOpenChange: setDrawer, children: sidebar(true) }), _jsxs("div", { className: "flex min-w-0 flex-1 flex-col", children: [_jsx("header", { className: "sticky top-0 z-30 border-b bg-surface", children: _jsxs("div", { className: "flex h-12 items-center gap-2 px-3 lg:px-4", children: [_jsx(Button, { variant: "ghost", size: "icon", className: "lg:hidden", "aria-label": t('shell.openMenu'), onClick: () => setDrawer(true), children: _jsx(PanelLeft, { className: "rtl:rotate-180", "aria-hidden": true }) }), _jsx("nav", { "aria-label": t('shell.location'), className: "flex min-w-0 flex-1 items-center gap-1.5 text-sm", children: app === undefined ? (_jsx("span", { className: "font-semibold", children: userPage !== undefined
+    return (_jsx(KoshProvider, { api: api, registry: registry, uid: user.id, companyId: current, lang: lang, tz: Intl.DateTimeFormat().resolvedOptions().timeZone, grouping: user.groupings?.[String(current)] ?? 'international', accent: user.accents?.[String(current)] ?? null, ...(realtime === undefined ? {} : { realtime }), ...(offline === undefined ? {} : { offline }), switchCompany: switchCompany, children: _jsx(ToastProvider, { children: _jsxs(DesignProvider, { children: [_jsx(OfflineAgent, { uid: user.id }), _jsxs(PaletteContext.Provider, { value: openPalette, children: [_jsx("a", { href: "#content", className: "sr-only focus:not-sr-only focus:absolute focus:start-2 focus:top-2 focus:z-50 focus:rounded focus:bg-surface focus:px-3 focus:py-2", children: t('shell.skip') }), params.app === undefined ? (_jsxs("div", { className: "flex min-h-screen flex-col", children: [_jsxs("div", { className: "flex h-14 items-center gap-2 px-4 lg:px-6", children: [userPage === undefined ? null : (_jsxs(Link, { to: "/", className: "flex items-center gap-1.5 rounded-md px-2 py-1 text-sm text-muted-foreground hover:bg-muted hover:text-foreground", children: [_jsx(House, { className: "size-4", "aria-hidden": true }), t('shell.home')] })), _jsx("span", { className: "flex-1" }), registry
+                                                .headerItems()
+                                                .filter((item) => item.home)
+                                                .map(({ name, component: Item }) => (_jsx(Item, { api: api }, name))), _jsx(UserMenu, { user: user, collapsed: false, corner: {
+                                                    companies: (companyNames.data ?? []).map((c) => ({
+                                                        id: c.id,
+                                                        name: c.displayName,
+                                                    })),
+                                                    current,
+                                                    onSwitch: switchCompany,
+                                                } })] }), user.administratorNeedsSecondFactor ? (_jsx("div", { className: "px-4 pt-3", children: _jsx(Alert, { tone: "info", children: t('auth.adminNeeds2fa') }) })) : null, _jsx("main", { id: "content", className: "mx-auto w-full max-w-[100rem] flex-1 p-4 lg:p-6", children: _jsx(Outlet, {}) })] })) : (_jsxs("div", { className: "flex min-h-screen", children: [_jsx("aside", { "aria-label": t('shell.sidebar'), className: cn('sticky top-0 hidden h-screen shrink-0 border-e bg-surface transition-[width] lg:block', collapsed ? 'w-14' : 'w-60'), children: sidebar(false) }), _jsx(SidebarDrawer, { open: drawer, onOpenChange: setDrawer, children: sidebar(true) }), _jsxs("div", { className: "flex min-w-0 flex-1 flex-col", children: [_jsx("header", { className: "sticky top-0 z-30 border-b bg-surface", children: _jsxs("div", { className: "flex h-12 items-center gap-2 px-3 lg:px-4", children: [_jsx(Button, { variant: "ghost", size: "icon", className: "lg:hidden", "aria-label": t('shell.openMenu'), onClick: () => setDrawer(true), children: _jsx(PanelLeft, { className: "rtl:rotate-180", "aria-hidden": true }) }), _jsx("nav", { "aria-label": t('shell.location'), className: "flex min-w-0 flex-1 items-center gap-1.5 text-sm", children: app === undefined ? (_jsx("span", { className: "font-semibold", children: userPage !== undefined
                                                                     ? t(userPage.label)
                                                                     : params.app === undefined
                                                                         ? t('shell.home')
-                                                                        : t('app.name') })) : (_jsxs(_Fragment, { children: [_jsx(Link, { to: "/$app", params: { app: app.code }, className: "font-semibold hover:underline", children: app.label }), section === undefined ? null : (_jsxs(_Fragment, { children: [_jsx(ChevronRight, { className: "size-3.5 text-muted-foreground rtl:rotate-180", "aria-hidden": true }), _jsx(Link, { to: "/$app/a/$action", params: { app: app.code, action: params.action ?? '' }, className: "truncate text-muted-foreground hover:text-foreground hover:underline", children: section })] }))] })) }), _jsx(Button, { variant: "ghost", size: "icon", className: "lg:hidden", "aria-label": t('palette.button'), onClick: () => setPalette(true), children: _jsx(Search, { "aria-hidden": true }) }), _jsx(OfflineMenu, {}), registry.headerItems().map(({ name, component: Item }) => (_jsx(Item, { api: api }, name))), _jsx(LanguageMenu, {}), _jsx(ThemeMenu, {})] }) }), user.administratorNeedsSecondFactor ? (_jsx("div", { className: "px-4 pt-3", children: _jsx(Alert, { tone: "info", children: t('auth.adminNeeds2fa') }) })) : null, _jsx("main", { id: "content", className: "mx-auto w-full max-w-[100rem] flex-1 p-4 lg:p-6", children: _jsx(Outlet, {}) })] })] }), _jsx(CommandPalette, { open: palette, onOpenChange: setPalette, api: api, onShortcuts: openHelp, companies: (companyNames.data ?? [])
+                                                                        : t('app.name') })) : (_jsxs(_Fragment, { children: [_jsx(Link, { to: "/$app", params: { app: app.code }, className: "font-semibold hover:underline", children: app.label }), section === undefined ? null : (_jsxs(_Fragment, { children: [_jsx(ChevronRight, { className: "size-3.5 text-muted-foreground rtl:rotate-180", "aria-hidden": true }), _jsx(Link, { to: "/$app/a/$action", params: { app: app.code, action: params.action ?? '' }, className: "truncate text-muted-foreground hover:text-foreground hover:underline", children: section })] }))] })) }), _jsx(Button, { variant: "ghost", size: "icon", className: "lg:hidden", "aria-label": t('palette.button'), onClick: () => setPalette(true), children: _jsx(Search, { "aria-hidden": true }) }), _jsx(OfflineMenu, {}), registry.headerItems().map(({ name, component: Item }) => (_jsx(Item, { api: api }, name))), _jsx(LanguageMenu, {}), _jsx(ThemeMenu, {})] }) }), user.administratorNeedsSecondFactor ? (_jsx("div", { className: "px-4 pt-3", children: _jsx(Alert, { tone: "info", children: t('auth.adminNeeds2fa') }) })) : null, _jsx("main", { id: "content", className: "mx-auto w-full max-w-[100rem] flex-1 p-4 lg:p-6", children: _jsx(Outlet, {}) })] })] })), _jsx(CommandPalette, { open: palette, onOpenChange: setPalette, api: api, onShortcuts: openHelp, companies: (companyNames.data ?? [])
                                     .filter((c) => c.id !== current)
                                     .map((c) => ({ id: c.id, name: c.displayName })), onSwitchCompany: switchCompany }), _jsx(ShortcutsHelp, { open: help, onOpenChange: setHelp })] })] }) }) }));
 }
@@ -291,10 +302,11 @@ function useServedView(action, type) {
 function ClientPage({ action }) {
     const { registry, api } = useServices();
     const { t } = useTranslation();
+    const params = useParams({ strict: false });
     const Page = registry.page(action.page);
     if (Page === undefined)
         return _jsx(Alert, { children: t('app.unknownPage', { page: action.page }) });
-    return _jsx(Page, { api: api, ...(action.label === undefined ? {} : { label: action.label }) });
+    return (_jsx(Page, { api: api, ...(action.label === undefined ? {} : { label: action.label }), ...(params.app === undefined ? {} : { app: params.app }), ...(params.action === undefined ? {} : { action: params.action }) }));
 }
 function ActionPage() {
     const { action: actionId } = useParams({ strict: false });
@@ -390,7 +402,7 @@ function WindowActionPage() {
                                         params: { app, action: actionId },
                                         search: { ...search, view: v },
                                     }), children: _jsx(Icon, { "aria-hidden": true }) }, v));
-                            })] })) : null] }), _jsx(SearchBar, { model: model, viewType: type, spec: spec.data, state: state, onChange: setState, labels: labels }), Renderer === undefined ? (_jsx(Alert, { children: `No renderer for '${served.data.view.component ?? type}'.` })) : (_jsx(Renderer, { served: served.data, where: compiled.where, groupBy: compiled.groupBy, order: compiled.order, onOrder: (order) => setState({ ...state, order }), onOpen: open, onDrill: drill }))] }));
+                            })] })) : null] }), _jsx(ViewTabs, { model: model, viewType: type, state: state, onChange: setState }), _jsx(SearchBar, { model: model, viewType: type, spec: spec.data, state: state, onChange: setState, labels: labels }), Renderer === undefined ? (_jsx(Alert, { children: `No renderer for '${served.data.view.component ?? type}'.` })) : (_jsx(Renderer, { served: served.data, where: compiled.where, groupBy: compiled.groupBy, order: compiled.order, onOrder: (order) => setState({ ...state, order }), onOpen: open, onDrill: drill }))] }));
 }
 /** What the record page needs from the shell: the API, the user, the apps (for breadcrumbs). */
 function useRecordContext() {
@@ -481,9 +493,24 @@ function ActivatePage() {
     const navigate = useNavigate();
     return _jsx(Activate, { api: useServices().api, onSignedIn: () => void navigate({ to: '/' }) });
 }
+/** Where to go after signing in: `?next=` when it is a path of this site (never another site), else home. */
+function nextPath() {
+    const next = new URLSearchParams(window.location.search).get('next') ?? '';
+    return next.startsWith('/') && !next.startsWith('//') && !next.startsWith('/\\') ? next : '/';
+}
 function LoginPage() {
     const navigate = useNavigate();
-    return _jsx(Login, { api: useServices().api, onSignedIn: () => void navigate({ to: '/' }) });
+    return (_jsx(Login, { api: useServices().api, onSignedIn: () => {
+            const next = nextPath();
+            // A page outside the router's own paths with its query (the OAuth consent) loads as an address.
+            if (next.startsWith('/oauth/'))
+                window.location.assign(next);
+            else
+                void navigate({ to: next });
+        } }));
+}
+function ConsentPage() {
+    return _jsx(Consent, { api: useServices().api });
 }
 // ------------------------------------------------------------------------------------------------- router
 const rootRoute = createRootRoute({ component: Outlet });
@@ -497,6 +524,12 @@ const activateRoute = createRoute({
     path: '/activate',
     component: ActivatePage,
 });
+/** The OAuth consent page (RFC 0017 §5.2): outside the shell, like sign-in. */
+const consentRoute = createRoute({
+    getParentRoute: () => rootRoute,
+    path: '/oauth/authorize',
+    component: ConsentPage,
+});
 const shellRoute = createRoute({ getParentRoute: () => rootRoute, id: 'shell', component: Shell });
 const indexRoute = createRoute({
     getParentRoute: () => shellRoute,
@@ -546,6 +579,7 @@ const userPageRoute = createRoute({
 const routeTree = rootRoute.addChildren([
     loginRoute,
     activateRoute,
+    consentRoute,
     shellRoute.addChildren([
         indexRoute,
         openRoute,

package/dist/ui/components/AppIcon.js

@@ -3,7 +3,7 @@ import { jsx as _jsx } from "react/jsx-runtime";
  * App icons by name (`app.icon` in a module manifest): the launcher's tiles and the App manager's cards. Names
  * follow Lucide; an unknown name shows a neutral grid, never a broken image.
  */
-import { BookOpen, Boxes, Briefcase, ChartColumn, FolderKanban, LayoutGrid, Mail, MessageSquare, MessagesSquare, Package, PencilRuler, Receipt, Ruler, Settings, ShieldCheck, ShoppingCart, Users, Wallet, Warehouse, Workflow, } from 'lucide-react';
+import { BookOpen, Boxes, Briefcase, Building, Building2, CalendarDays, ChartColumn, Factory, FolderKanban, Globe, Landmark, LayoutGrid, ListChecks, LockKeyhole, Mail, MessageSquare, MessagesSquare, Package, PencilRuler, Plug, Receipt, Ruler, ScrollText, Settings, ShieldCheck, ShoppingCart, Sparkles, Store, Ticket, TrendingUp, UserPlus, Users, Wallet, Warehouse, Workflow, Wrench, } from 'lucide-react';
 import { cn } from '../lib/cn.js';
 const ICONS = {
     settings: Settings,
@@ -37,6 +37,38 @@ const ICONS = {
     shield: ShieldCheck,
     permissions: ShieldCheck,
     briefcase: Briefcase,
+    plug: Plug,
+    focus: ListChecks,
+    agenda: CalendarDays,
+    pipeline: TrendingUp,
+    workforce: Briefcase,
+    hiring: UserPlus,
+    stockroom: Warehouse,
+    production: Factory,
+    assetcare: Wrench,
+    tradefinance: Landmark,
+    eventhub: Ticket,
+    sites: Globe,
+    counter: Store,
+    event: Ticket,
+    trade_finance: Landmark,
+    maintenance: Wrench,
+    mrp: Factory,
+    stock: Warehouse,
+    recruitment: UserPlus,
+    hr: Briefcase,
+    crm: TrendingUp,
+    calendar: CalendarDays,
+    todo: ListChecks,
+    integrations: Plug,
+    cart: ShoppingCart,
+    company: Building2,
+    companies: Building,
+    security: LockKeyhole,
+    audit: ScrollText,
+    apps: LayoutGrid,
+    assistant: Sparkles,
+    sparkles: Sparkles,
 };
 /** A tinted square with the app's icon (decorative: the app's name is always shown next to it). */
 export function AppIcon({ name, className, }) {

package/dist/ui/components/Avatar.d.ts

@@ -0,0 +1,21 @@
+import { type ReactElement } from 'react';
+/** The URL of a photo (`user`) or logo (`company`), or null when there is none. */
+export declare function imageUrl(kind: 'user' | 'company', id: number, version: string | null | undefined): string | null;
+/** Up to two initials of a name. */
+export declare function initialsOf(name: string): string;
+export declare function Avatar({ name, src, shape, className, }: {
+    readonly name: string;
+    readonly src: string | null;
+    /** People are round; companies square. */
+    readonly shape?: 'circle' | 'square';
+    readonly className?: string;
+}): ReactElement;
+export declare function ImagePicker({ name, src, fit, onChoose, onRemove, busy, }: {
+    readonly name: string;
+    readonly src: string | null;
+    readonly fit: 'photo' | 'logo';
+    /** The image as a `data:` URL, already small. */
+    readonly onChoose: (dataUrl: string) => void;
+    readonly onRemove: () => void;
+    readonly busy?: boolean;
+}): ReactElement;

package/dist/ui/components/Avatar.js

@@ -0,0 +1,71 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Photos and logos: `Avatar` shows a person's photo or a company's logo (the server's image route, versioned so the
+ * browser caches it), else the initials on a tint. `ImagePicker` chooses a file and makes it small in the browser —
+ * a 256 px square, cropped to the centre for photos, fitted whole for logos — before anything is sent.
+ */
+import { ImageUp, Trash2 } from 'lucide-react';
+import { useId, useRef, useState } from 'react';
+import { useTranslation } from 'react-i18next';
+import { cn } from '../lib/cn.js';
+import { Button } from './primitives.js';
+/** The URL of a photo (`user`) or logo (`company`), or null when there is none. */
+export function imageUrl(kind, id, version) {
+    return version === null || version === undefined
+        ? null
+        : `/api/v1/images/${kind}/${id}?v=${version}`;
+}
+/** Up to two initials of a name. */
+export function initialsOf(name) {
+    return name
+        .split(/\s+/)
+        .filter((w) => w !== '')
+        .map((w) => w.slice(0, 1))
+        .join('')
+        .slice(0, 2)
+        .toUpperCase();
+}
+export function Avatar({ name, src, shape = 'circle', className, }) {
+    const [failed, setFailed] = useState(false);
+    const round = shape === 'circle' ? 'rounded-full' : 'rounded-md';
+    if (src !== null && !failed)
+        return (_jsx("img", { src: src, alt: "", "aria-hidden": true, onError: () => setFailed(true), className: cn('size-7 shrink-0 bg-surface object-cover', shape === 'square' && 'object-contain', round, className) }));
+    return (_jsx("span", { "aria-hidden": true, className: cn('grid size-7 shrink-0 place-items-center bg-primary text-xs font-medium text-primary-foreground', round, className), children: initialsOf(name) }));
+}
+const SIZE = 256;
+/** Draws `file` on a 256 px square: covered and centred (`photo`) or fitted whole (`logo`). */
+async function shrink(file, fit) {
+    const bitmap = await createImageBitmap(file);
+    const canvas = document.createElement('canvas');
+    canvas.width = SIZE;
+    canvas.height = SIZE;
+    const ctx = canvas.getContext('2d');
+    if (ctx === null)
+        throw new Error('No canvas');
+    const scale = fit === 'photo'
+        ? Math.max(SIZE / bitmap.width, SIZE / bitmap.height)
+        : Math.min(SIZE / bitmap.width, SIZE / bitmap.height);
+    const w = bitmap.width * scale;
+    const h = bitmap.height * scale;
+    ctx.imageSmoothingQuality = 'high';
+    ctx.drawImage(bitmap, (SIZE - w) / 2, (SIZE - h) / 2, w, h);
+    bitmap.close();
+    // Photos as WebP (small); logos as PNG (they keep transparency and sharp edges).
+    return fit === 'photo' ? canvas.toDataURL('image/webp', 0.86) : canvas.toDataURL('image/png');
+}
+export function ImagePicker({ name, src, fit, onChoose, onRemove, busy, }) {
+    const { t } = useTranslation();
+    const id = useId();
+    const input = useRef(null);
+    const [error, setError] = useState(null);
+    return (_jsxs("div", { className: "flex flex-wrap items-center gap-4", children: [_jsx(Avatar, { name: name, src: src, shape: fit === 'photo' ? 'circle' : 'square', className: "size-16 text-lg" }), _jsxs("div", { className: "grid gap-1.5", children: [_jsxs("div", { className: "flex flex-wrap gap-2", children: [_jsx("input", { ref: input, id: id, type: "file", accept: "image/png,image/jpeg,image/webp", className: "sr-only", onChange: (e) => {
+                                    const file = e.target.files?.[0];
+                                    e.target.value = '';
+                                    if (file === undefined)
+                                        return;
+                                    setError(null);
+                                    shrink(file, fit)
+                                        .then(onChoose)
+                                        .catch(() => setError(t('image.unreadable')));
+                                } }), _jsxs(Button, { size: "sm", busy: busy === true, onClick: () => input.current?.click(), children: [_jsx(ImageUp, { "aria-hidden": true }), fit === 'photo' ? t('image.choosePhoto') : t('image.chooseLogo')] }), src === null ? null : (_jsxs(Button, { size: "sm", variant: "ghost", onClick: onRemove, children: [_jsx(Trash2, { "aria-hidden": true }), t('image.remove')] }))] }), _jsx("p", { className: "text-xs text-muted-foreground", children: error ?? t('image.hint') })] })] }));
+}

package/dist/ui/components/primitives.d.ts

@@ -76,3 +76,5 @@ export declare function EmptyState({ icon, title, description, action, }: {
     readonly description?: string;
     readonly action?: ReactNode;
 }): ReactElement;
+/** The classes of a button, for elements that must look like one (a file picker's label). */
+export declare function buttonClass(variant?: ButtonProps['variant'], size?: ButtonProps['size']): string;

package/dist/ui/components/primitives.js

@@ -23,7 +23,9 @@ const buttonVariants = cva('inline-flex items-center justify-center gap-2 whites
 });
 export function Button({ className, variant, size, asChild, busy, children, disabled, ...props }) {
     const Comp = asChild === true ? Slot.Root : 'button';
-    return (_jsxs(Comp, { className: cn(buttonVariants({ variant, size }), className), disabled: disabled === true || busy === true, "aria-busy": busy === true ? true : undefined, ...props, children: [busy === true ? _jsx(Loader2, { className: "animate-spin", "aria-hidden": true }) : null, children] }));
+    return (_jsxs(Comp
+    // A button inside a record's form must not save it: only `type="submit"` submits.
+    , { ...(asChild === true ? {} : { type: 'button' }), className: cn(buttonVariants({ variant, size }), className), disabled: disabled === true || busy === true, "aria-busy": busy === true ? true : undefined, ...props, children: [busy === true ? _jsx(Loader2, { className: "animate-spin", "aria-hidden": true }) : null, children] }));
 }
 const field = 'w-full rounded-md border border-input bg-surface px-3 text-sm text-surface-foreground placeholder:text-muted-foreground disabled:cursor-not-allowed disabled:opacity-60 read-only:bg-muted aria-invalid:border-danger';
 export function Input({ className, ...props }) {
@@ -120,3 +122,7 @@ export function Skeleton({ className, ...props }) {
 export function EmptyState({ icon, title, description, action, }) {
     return (_jsxs("div", { className: "flex flex-col items-center gap-2 px-6 py-12 text-center", children: [icon === undefined ? null : (_jsx("div", { className: "mb-1 flex size-12 items-center justify-center rounded-full bg-muted text-muted-foreground [&_svg]:size-6", children: icon })), _jsx("p", { className: "font-medium", children: title }), description === undefined ? null : (_jsx("p", { className: "max-w-md text-sm text-muted-foreground", children: description })), action === undefined ? null : _jsx("div", { className: "mt-2", children: action })] }));
 }
+/** The classes of a button, for elements that must look like one (a file picker's label). */
+export function buttonClass(variant = 'primary', size = 'md') {
+    return buttonVariants({ variant, size });
+}

package/dist/ui/i18n/messages.d.ts

@@ -88,8 +88,12 @@ export declare const en: {
         export: string;
         exportCsv: string;
         exportXlsx: string;
+        exportPdf: string;
         exportFailed: string;
         columns: string;
+        pinned: string;
+        resetWidths: string;
+        resize: string;
         density: string;
         statusOf: string;
         nextState: string;
@@ -113,6 +117,7 @@ export declare const en: {
         compact: string;
         comfortable: string;
         emptyTitle: string;
+        emptyNamed: string;
         emptyHint: string;
         emptyFiltered: string;
         moved: string;
@@ -166,6 +171,23 @@ export declare const en: {
         none: string;
         lines: string;
         addLine: string;
+        nextStep: {
+            ready: string;
+            before: string;
+            missing_one: string;
+            missing_other: string;
+        };
+        daysLeft: {
+            today: string;
+            in: string;
+            late: string;
+        };
+        image: {
+            choose: string;
+            remove: string;
+            none: string;
+            saveFirst: string;
+        };
         removeLine: string;
         choose: string;
         pasted_one: string;
@@ -234,11 +256,37 @@ export declare const en: {
         done: string;
         recent: string;
         apps: string;
+        today: string;
+        approve: string;
+        review: string;
+        dueToday: string;
+        todo: string;
+        meetings: string;
+        mentioned: string;
+        saved: string;
     };
     toast: {
         region: string;
         close: string;
     };
+    image: {
+        choosePhoto: string;
+        chooseLogo: string;
+        remove: string;
+        hint: string;
+        unreadable: string;
+    };
+    oauth: {
+        title: string;
+        as: string;
+        may: string;
+        limits: string;
+        back: string;
+        homepage: string;
+        already: string;
+        allow: string;
+        cancel: string;
+    };
     palette: {
         switchCompany: string;
         profile: string;
@@ -292,6 +340,11 @@ export declare const en: {
         custom: string;
         remove: string;
         or: string;
+        savedViews: string;
+        allRecords: string;
+        moreViews_one: string;
+        moreViews_other: string;
+        shared: string;
     };
 };
 type Messages = typeof en;