shutro-erp 0.3.3 → 0.3.5

package/dist/settings/web/PeoplePage.js

@@ -5,7 +5,7 @@ import { Fragment as _Fragment, jsx as _jsx, jsxs as _jsxs } from "react/jsx-run
  * invitation, a two-factor reset, deactivation and reactivation, and their recent activity. The server decides
  * what a People manager may do (not administrators, not their own roles) and audits it all.
  */
-import { Alert, ApiError, Badge, Button, Dialog, EmptyState, Input, Label, useKosh, } from '../../ui/index.js';
+import { Alert, ApiError, Avatar, Badge, Button, Dialog, EmptyState, Input, imageUrl, Label, useKosh, } from '../../ui/index.js';
 import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
 import { Check, Copy, Search, ShieldCheck, UserPlus } from 'lucide-react';
 import { useEffect, useId, useState } from 'react';
@@ -13,15 +13,6 @@ import { useTranslation } from 'react-i18next';
 import { RolesEditor } from './RolesEditor.js';
 const P = '/api/v1/settings/people';
 const message = (error) => (error instanceof ApiError ? error.message : String(error));
-const initials = (name) => name
-    .split(/\s+/)
-    .map((w) => w.slice(0, 1))
-    .join('')
-    .slice(0, 2)
-    .toUpperCase();
-function Avatar({ name }) {
-    return (_jsx("span", { "aria-hidden": true, className: "grid size-8 shrink-0 place-items-center rounded-full bg-accent text-xs font-semibold text-accent-foreground", children: initials(name) }));
-}
 function StateBadge({ person }) {
     const { t } = useTranslation('settings');
     return person.state === 'deactivated' ? (_jsx(Badge, { tone: "neutral", children: t('people.deactivated') })) : person.state === 'invited' ? (_jsx(Badge, { tone: "warning", children: t('people.invited') })) : (_jsx(Badge, { tone: "success", children: t('people.active') }));
@@ -34,31 +25,45 @@ function InvitationLink({ url, emailed, to, }) {
                             void navigator.clipboard?.writeText(url).then(() => setCopied(true));
                         }, children: [copied ? _jsx(Check, { "aria-hidden": true }) : _jsx(Copy, { "aria-hidden": true }), copied ? t('people.copied') : t('people.copy')] })] })] }));
 }
+/** Invite someone (they choose their password from a link), or add them directly with a password you pass on. */
 function InviteDialog({ api, catalogue, open, onOpenChange, }) {
     const { t } = useTranslation('settings');
     const id = useId();
     const queryClient = useQueryClient();
+    const [mode, setMode] = useState('invite');
     const [name, setName] = useState('');
     const [email, setEmail] = useState('');
+    const [login, setLogin] = useState('');
+    const [password, setPassword] = useState('');
+    const [repeat, setRepeat] = useState('');
     const [assignments, setAssignments] = useState([]);
     const invite = useMutation({
-        mutationFn: () => api.call('POST', P, {
-            name,
-            email,
-            assignments,
-        }),
+        mutationFn: () => api.call('POST', P, mode === 'invite'
+            ? { name, email, assignments }
+            : { name, email, login: login.trim() === '' ? email : login, password, assignments }),
         onSuccess: () => void queryClient.invalidateQueries({ queryKey: ['settings', 'people'] }),
     });
     useEffect(() => {
         if (!open) {
+            setMode('invite');
             setName('');
             setEmail('');
+            setLogin('');
+            setPassword('');
+            setRepeat('');
             setAssignments([]);
             invite.reset();
         }
     }, [open, invite.reset]);
     const done = invite.data;
-    return (_jsx(Dialog, { open: open, onOpenChange: onOpenChange, title: t('people.inviteTitle'), description: t('people.inviteHint'), wide: true, footer: done === undefined ? (_jsxs(_Fragment, { children: [_jsx(Button, { onClick: () => onOpenChange(false), children: t('profile.cancel') }), _jsx(Button, { variant: "primary", busy: invite.isPending, disabled: name.trim() === '' || !email.includes('@'), onClick: () => invite.mutate(), children: t('people.send') })] })) : (_jsx(Button, { variant: "primary", onClick: () => onOpenChange(false), children: t('people.done') })), children: done !== undefined ? (_jsx(InvitationLink, { url: done.activationUrl, emailed: done.emailed, to: done.login })) : (_jsxs("div", { className: "grid gap-4", children: [_jsxs("div", { className: "grid gap-4 sm:grid-cols-2", children: [_jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-name`, children: t('profile.name') }), _jsx(Input, { id: `${id}-name`, value: name, onChange: (e) => setName(e.target.value) })] }), _jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-email`, children: t('profile.email') }), _jsx(Input, { id: `${id}-email`, type: "email", value: email, onChange: (e) => setEmail(e.target.value) })] })] }), _jsxs("div", { className: "grid gap-2", children: [_jsx("h3", { className: "text-sm font-semibold", children: t('people.roles') }), _jsx(RolesEditor, { catalogue: catalogue, value: assignments, onChange: setAssignments })] }), invite.error === null ? null : _jsx(Alert, { tone: "danger", children: message(invite.error) })] })) }));
+    const mismatch = repeat !== '' && repeat !== password;
+    const ready = name.trim() !== '' &&
+        (mode === 'invite'
+            ? email.includes('@')
+            : (login.trim() !== '' || email.includes('@')) &&
+                password.length >= 12 &&
+                repeat === password);
+    return (_jsx(Dialog, { open: open, onOpenChange: onOpenChange, title: mode === 'invite' ? t('people.inviteTitle') : t('people.addTitle'), description: mode === 'invite' ? t('people.inviteHint') : t('people.addHint'), wide: true, footer: done === undefined ? (_jsxs(_Fragment, { children: [_jsx(Button, { onClick: () => onOpenChange(false), children: t('profile.cancel') }), _jsx(Button, { variant: "primary", busy: invite.isPending, disabled: !ready, onClick: () => invite.mutate(), children: mode === 'invite' ? t('people.send') : t('people.add') })] })) : (_jsx(Button, { variant: "primary", onClick: () => onOpenChange(false), children: t('people.done') })), children: done !== undefined ? (done.activationUrl === null ? (_jsx(Alert, { tone: "info", children: t('people.added', { login: done.login }) })) : (_jsx(InvitationLink, { url: done.activationUrl, emailed: done.emailed, to: done.login }))) : (_jsxs("div", { className: "grid gap-4", children: [_jsxs("fieldset", { className: "grid gap-2 sm:grid-cols-2", children: [_jsx("legend", { className: "sr-only", children: t('people.how') }), ['invite', 'password'].map((m) => (_jsxs("label", { className: `flex cursor-pointer items-start gap-2 rounded-lg border p-3 text-sm ${mode === m ? 'border-primary bg-accent/40' : ''}`, children: [_jsx("input", { type: "radio", name: `${id}-mode`, className: "mt-1", checked: mode === m, onChange: () => setMode(m) }), _jsxs("span", { children: [_jsx("span", { className: "font-medium", children: t(`people.mode.${m}`) }), _jsx("span", { className: "block text-muted-foreground", children: t(`people.mode.${m}Hint`) })] })] }, m)))] }), _jsxs("div", { className: "grid gap-4 sm:grid-cols-2", children: [_jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-name`, children: t('profile.name') }), _jsx(Input, { id: `${id}-name`, value: name, onChange: (e) => setName(e.target.value) })] }), _jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-email`, children: mode === 'invite' ? t('profile.email') : t('people.emailOptional') }), _jsx(Input, { id: `${id}-email`, type: "email", value: email, onChange: (e) => setEmail(e.target.value) })] }), mode === 'password' ? (_jsxs(_Fragment, { children: [_jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-login`, children: t('people.login') }), _jsx(Input, { id: `${id}-login`, autoComplete: "off", placeholder: email === '' ? 'rahim' : email, value: login, onChange: (e) => setLogin(e.target.value) })] }), _jsx("div", {}), _jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-password`, children: t('people.password') }), _jsx(Input, { id: `${id}-password`, type: "password", autoComplete: "new-password", value: password, onChange: (e) => setPassword(e.target.value) }), _jsx("p", { className: "text-xs text-muted-foreground", children: t('people.passwordHint') })] }), _jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-repeat`, children: t('people.repeat') }), _jsx(Input, { id: `${id}-repeat`, type: "password", autoComplete: "new-password", "aria-invalid": mismatch ? true : undefined, value: repeat, onChange: (e) => setRepeat(e.target.value) }), mismatch ? _jsx("p", { className: "text-xs text-danger", children: t('people.mismatch') }) : null] })] })) : null] }), _jsxs("div", { className: "grid gap-2", children: [_jsx("h3", { className: "text-sm font-semibold", children: t('people.roles') }), _jsx(RolesEditor, { catalogue: catalogue, value: assignments, onChange: setAssignments })] }), invite.error === null ? null : _jsx(Alert, { tone: "danger", children: message(invite.error) })] })) }));
 }
 /** What a person can do, computed by the server as them (administrators only). */
 function Effective({ api, personId }) {
@@ -130,7 +135,7 @@ function PersonDialog({ api, catalogue, personId, onClose, }) {
     const p = person.data;
     const error = saveDetails.error ?? saveRoles.error ?? setActive.error ?? resend.error ?? reset.error;
     const self = personId === uid;
-    return (_jsx(Dialog, { open: true, onOpenChange: (open) => !open && onClose(), title: p?.name ?? '…', wide: true, children: p === undefined ? null : (_jsxs("div", { className: "grid gap-5", children: [_jsxs("div", { className: "flex flex-wrap items-center gap-2 text-sm", children: [_jsx(Avatar, { name: p.name }), _jsx("span", { className: "text-muted-foreground", children: p.login }), _jsx(StateBadge, { person: p }), p.administrator ? _jsx(Badge, { tone: "info", children: t('people.administrator') }) : null, p.twoFactor ? (_jsxs(Badge, { tone: "success", children: [_jsx(ShieldCheck, { className: "size-3", "aria-hidden": true }), t('people.twoFactor')] })) : null] }), _jsxs("section", { className: "grid gap-3", children: [_jsx("h3", { className: "text-sm font-semibold", children: t('people.details') }), _jsxs("div", { className: "grid gap-3 sm:grid-cols-[1fr_1fr_auto] sm:items-end", children: [_jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-name`, children: t('profile.name') }), _jsx(Input, { id: `${id}-name`, value: name, onChange: (e) => setName(e.target.value) })] }), _jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-email`, children: t('profile.email') }), _jsx(Input, { id: `${id}-email`, type: "email", value: email, onChange: (e) => setEmail(e.target.value) })] }), _jsx(Button, { variant: "secondary", busy: saveDetails.isPending, onClick: () => saveDetails.mutate(), children: t('profile.save') })] })] }), _jsxs("section", { className: "grid gap-3", children: [_jsx("h3", { className: "text-sm font-semibold", children: t('people.roles') }), self && !catalogue.manager.administrator ? (_jsx("p", { className: "text-sm text-muted-foreground", children: t('people.notYourOwn') })) : (_jsxs(_Fragment, { children: [_jsx(RolesEditor, { catalogue: catalogue, value: assignments, onChange: setAssignments }), _jsx("div", { children: _jsx(Button, { variant: "primary", busy: saveRoles.isPending, onClick: () => saveRoles.mutate(), children: t('people.saveRoles') }) })] }))] }), _jsxs("section", { className: "grid gap-3", children: [_jsx("h3", { className: "text-sm font-semibold", children: t('people.access') }), _jsxs("div", { className: "flex flex-wrap gap-2", children: [p.state === 'invited' || p.state === 'active' ? (_jsx(Button, { variant: "secondary", busy: resend.isPending, onClick: () => resend.mutate(), children: p.state === 'invited' ? t('people.resend') : t('people.newLink') })) : null, p.twoFactor ? (_jsx(Button, { variant: "secondary", onClick: () => setConfirm('reset'), children: t('people.reset2fa') })) : null, self ? null : p.active ? (_jsx(Button, { variant: "danger", onClick: () => setConfirm('deactivate'), children: t('people.deactivate') })) : (_jsx(Button, { variant: "secondary", busy: setActive.isPending, onClick: () => setActive.mutate(true), children: t('people.reactivate') }))] }), link === null ? null : (_jsx(InvitationLink, { url: link.url, emailed: link.emailed, to: p.login })), confirm === null ? null : (_jsx(Alert, { tone: "warning", action: _jsxs("div", { className: "flex gap-2", children: [_jsx(Button, { size: "sm", onClick: () => setConfirm(null), children: t('profile.cancel') }), _jsx(Button, { size: "sm", variant: "danger", busy: setActive.isPending || reset.isPending, onClick: () => confirm === 'reset' ? reset.mutate() : setActive.mutate(false), children: confirm === 'reset' ? t('people.reset2fa') : t('people.deactivate') })] }), children: confirm === 'reset' ? t('people.resetConfirm') : t('people.deactivateConfirm') }))] }), error === null ? null : _jsx(Alert, { tone: "danger", children: message(error) }), catalogue.manager.administrator ? _jsx(Effective, { api: api, personId: personId }) : null, _jsxs("section", { className: "grid gap-2", children: [_jsx("h3", { className: "text-sm font-semibold", children: t('people.activity') }), p.activity.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: t('people.noActivity') })) : (_jsx("ol", { className: "grid gap-1.5 text-sm", children: p.activity.map((a, i) => (_jsxs("li", { className: "flex gap-3", children: [_jsx("span", { className: "w-40 shrink-0 text-xs text-muted-foreground", children: a.at === null ? '' : format.datetime(a.at) }), _jsx("span", { children: a.summary })] }, i))) }))] })] })) }));
+    return (_jsx(Dialog, { open: true, onOpenChange: (open) => !open && onClose(), title: p?.name ?? '…', wide: true, children: p === undefined ? null : (_jsxs("div", { className: "grid gap-5", children: [_jsxs("div", { className: "flex flex-wrap items-center gap-2 text-sm", children: [_jsx(Avatar, { name: p.name, src: imageUrl('user', p.id, p.avatar), className: "size-8" }), _jsx("span", { className: "text-muted-foreground", children: p.login }), _jsx(StateBadge, { person: p }), p.administrator ? _jsx(Badge, { tone: "info", children: t('people.administrator') }) : null, p.twoFactor ? (_jsxs(Badge, { tone: "success", children: [_jsx(ShieldCheck, { className: "size-3", "aria-hidden": true }), t('people.twoFactor')] })) : null] }), _jsxs("section", { className: "grid gap-3", children: [_jsx("h3", { className: "text-sm font-semibold", children: t('people.details') }), _jsxs("div", { className: "grid gap-3 sm:grid-cols-[1fr_1fr_auto] sm:items-end", children: [_jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-name`, children: t('profile.name') }), _jsx(Input, { id: `${id}-name`, value: name, onChange: (e) => setName(e.target.value) })] }), _jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-email`, children: t('profile.email') }), _jsx(Input, { id: `${id}-email`, type: "email", value: email, onChange: (e) => setEmail(e.target.value) })] }), _jsx(Button, { variant: "secondary", busy: saveDetails.isPending, onClick: () => saveDetails.mutate(), children: t('profile.save') })] })] }), _jsxs("section", { className: "grid gap-3", children: [_jsx("h3", { className: "text-sm font-semibold", children: t('people.roles') }), self && !catalogue.manager.administrator ? (_jsx("p", { className: "text-sm text-muted-foreground", children: t('people.notYourOwn') })) : (_jsxs(_Fragment, { children: [_jsx(RolesEditor, { catalogue: catalogue, value: assignments, onChange: setAssignments }), _jsx("div", { children: _jsx(Button, { variant: "primary", busy: saveRoles.isPending, onClick: () => saveRoles.mutate(), children: t('people.saveRoles') }) })] }))] }), _jsxs("section", { className: "grid gap-3", children: [_jsx("h3", { className: "text-sm font-semibold", children: t('people.access') }), _jsxs("div", { className: "flex flex-wrap gap-2", children: [p.state === 'invited' || p.state === 'active' ? (_jsx(Button, { variant: "secondary", busy: resend.isPending, onClick: () => resend.mutate(), children: p.state === 'invited' ? t('people.resend') : t('people.newLink') })) : null, p.twoFactor ? (_jsx(Button, { variant: "secondary", onClick: () => setConfirm('reset'), children: t('people.reset2fa') })) : null, self ? null : p.active ? (_jsx(Button, { variant: "danger", onClick: () => setConfirm('deactivate'), children: t('people.deactivate') })) : (_jsx(Button, { variant: "secondary", busy: setActive.isPending, onClick: () => setActive.mutate(true), children: t('people.reactivate') }))] }), link === null ? null : (_jsx(InvitationLink, { url: link.url, emailed: link.emailed, to: p.login })), confirm === null ? null : (_jsx(Alert, { tone: "warning", action: _jsxs("div", { className: "flex gap-2", children: [_jsx(Button, { size: "sm", onClick: () => setConfirm(null), children: t('profile.cancel') }), _jsx(Button, { size: "sm", variant: "danger", busy: setActive.isPending || reset.isPending, onClick: () => confirm === 'reset' ? reset.mutate() : setActive.mutate(false), children: confirm === 'reset' ? t('people.reset2fa') : t('people.deactivate') })] }), children: confirm === 'reset' ? t('people.resetConfirm') : t('people.deactivateConfirm') }))] }), error === null ? null : _jsx(Alert, { tone: "danger", children: message(error) }), catalogue.manager.administrator ? _jsx(Effective, { api: api, personId: personId }) : null, _jsxs("section", { className: "grid gap-2", children: [_jsx("h3", { className: "text-sm font-semibold", children: t('people.activity') }), p.activity.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: t('people.noActivity') })) : (_jsx("ol", { className: "grid gap-1.5 text-sm", children: p.activity.map((a, i) => (_jsxs("li", { className: "flex gap-3", children: [_jsx("span", { className: "w-40 shrink-0 text-xs text-muted-foreground", children: a.at === null ? '' : format.datetime(a.at) }), _jsx("span", { children: a.summary })] }, i))) }))] })] })) }));
 }
 export function PeoplePage({ api }) {
     const { t } = useTranslation('settings');
@@ -152,7 +157,7 @@ export function PeoplePage({ api }) {
         return _jsx(Alert, { tone: "danger", children: message(catalogue.error) });
     const list = people.data?.people ?? [];
     const statuses = ['all', 'active', 'invited', 'deactivated'];
-    return (_jsxs("div", { className: "mx-auto grid max-w-5xl gap-5", children: [_jsxs("header", { className: "flex flex-wrap items-center justify-between gap-3", children: [_jsxs("div", { children: [_jsx("h1", { className: "text-xl font-semibold", children: t('people.title') }), _jsx("p", { className: "text-sm text-muted-foreground", children: t('people.intro') })] }), _jsxs(Button, { variant: "primary", onClick: () => setInviting(true), disabled: catalogue.data === undefined, children: [_jsx(UserPlus, { "aria-hidden": true }), t('people.invite')] })] }), _jsxs("div", { className: "flex flex-wrap items-center gap-3", children: [_jsxs("div", { className: "relative min-w-60 flex-1", children: [_jsx(Search, { className: "pointer-events-none absolute start-3 top-1/2 size-4 -translate-y-1/2 text-muted-foreground", "aria-hidden": true }), _jsx("label", { htmlFor: `${id}-q`, className: "sr-only", children: t('people.search') }), _jsx(Input, { id: `${id}-q`, type: "search", className: "ps-9", placeholder: t('people.search'), value: q, onChange: (e) => setQ(e.target.value) })] }), _jsxs("fieldset", { className: "flex rounded-md border p-0.5", children: [_jsx("legend", { className: "sr-only", children: t('people.status') }), statuses.map((s) => (_jsx("button", { type: "button", "aria-pressed": status === s, onClick: () => setStatus(s), className: "rounded px-3 py-1 text-sm aria-pressed:bg-accent aria-pressed:font-medium aria-pressed:text-accent-foreground", children: t(`people.filter.${s}`) }, s)))] })] }), people.isSuccess && list.length === 0 ? (_jsx(EmptyState, { title: t('people.empty') })) : (_jsx("ul", { className: "divide-y rounded-lg border bg-surface", "aria-label": t('people.title'), children: list.map((p) => (_jsx("li", { children: _jsxs("button", { type: "button", onClick: () => setOpen(p.id), className: "flex w-full flex-wrap items-center gap-3 px-4 py-3 text-start hover:bg-muted/50", children: [_jsx(Avatar, { name: p.name }), _jsxs("span", { className: "grid min-w-48 flex-1", children: [_jsx("span", { className: "font-medium", children: p.name }), _jsx("span", { className: "text-sm text-muted-foreground", children: p.login })] }), _jsxs("span", { className: "flex min-w-48 flex-1 flex-wrap gap-1", children: [p.administrator ? _jsx(Badge, { tone: "info", children: t('people.administrator') }) : null, p.assignments
+    return (_jsxs("div", { className: "mx-auto grid max-w-5xl gap-5", children: [_jsxs("header", { className: "flex flex-wrap items-center justify-between gap-3", children: [_jsxs("div", { children: [_jsx("h1", { className: "text-xl font-semibold", children: t('people.title') }), _jsx("p", { className: "text-sm text-muted-foreground", children: t('people.intro') })] }), _jsxs(Button, { variant: "primary", onClick: () => setInviting(true), disabled: catalogue.data === undefined, children: [_jsx(UserPlus, { "aria-hidden": true }), t('people.invite')] })] }), _jsxs("div", { className: "flex flex-wrap items-center gap-3", children: [_jsxs("div", { className: "relative min-w-60 flex-1", children: [_jsx(Search, { className: "pointer-events-none absolute start-3 top-1/2 size-4 -translate-y-1/2 text-muted-foreground", "aria-hidden": true }), _jsx("label", { htmlFor: `${id}-q`, className: "sr-only", children: t('people.search') }), _jsx(Input, { id: `${id}-q`, type: "search", className: "ps-9", placeholder: t('people.search'), value: q, onChange: (e) => setQ(e.target.value) })] }), _jsxs("fieldset", { className: "flex rounded-md border p-0.5", children: [_jsx("legend", { className: "sr-only", children: t('people.status') }), statuses.map((s) => (_jsx("button", { type: "button", "aria-pressed": status === s, onClick: () => setStatus(s), className: "rounded px-3 py-1 text-sm aria-pressed:bg-accent aria-pressed:font-medium aria-pressed:text-accent-foreground", children: t(`people.filter.${s}`) }, s)))] })] }), people.isSuccess && list.length === 0 ? (_jsx(EmptyState, { title: t('people.empty') })) : (_jsx("ul", { className: "divide-y rounded-lg border bg-surface", "aria-label": t('people.title'), children: list.map((p) => (_jsx("li", { children: _jsxs("button", { type: "button", onClick: () => setOpen(p.id), className: "flex w-full flex-wrap items-center gap-3 px-4 py-3 text-start hover:bg-muted/50", children: [_jsx(Avatar, { name: p.name, src: imageUrl('user', p.id, p.avatar), className: "size-8" }), _jsxs("span", { className: "grid min-w-48 flex-1", children: [_jsx("span", { className: "font-medium", children: p.name }), _jsx("span", { className: "text-sm text-muted-foreground", children: p.login })] }), _jsxs("span", { className: "flex min-w-48 flex-1 flex-wrap gap-1", children: [p.administrator ? _jsx(Badge, { tone: "info", children: t('people.administrator') }) : null, p.assignments
                                         .filter((a) => !a.group.startsWith('base.'))
                                         .slice(0, 3)
                                         .map((a) => (_jsx(Badge, { tone: "neutral", children: a.label }, `${a.group}-${a.company}`))), p.assignments.length > 3 ? (_jsxs("span", { className: "text-xs text-muted-foreground", children: ["+", p.assignments.length - 3] })) : null] }), _jsxs("span", { className: "flex items-center gap-2", children: [p.twoFactor ? (_jsx(ShieldCheck, { className: "size-4 text-success", "aria-label": t('people.twoFactor') })) : null, _jsx(StateBadge, { person: p })] }), _jsx("span", { className: "w-40 text-end text-xs text-muted-foreground", children: p.state === 'invited' && p.invitationExpiresAt !== null

package/dist/settings/web/ProfilePage.js

@@ -4,7 +4,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
  * your password, two-factor sign-in (set up with an authenticator app, recovery codes, turn off) and the devices
  * signed in as you (sign one out, or all the others). The server checks and audits every change.
  */
-import { Alert, ApiError, Badge, Button, Input, LANGUAGES, Label, Select, useKosh, useLanguage, } from '../../ui/index.js';
+import { Alert, ApiError, Badge, Button, ImagePicker, Input, imageUrl, LANGUAGES, Label, Select, useKosh, useLanguage, } from '../../ui/index.js';
 import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
 import { Laptop, Monitor, Smartphone } from 'lucide-react';
 import { useEffect, useId, useState } from 'react';
@@ -142,6 +142,13 @@ export function ProfilePage({ api }) {
             setLang(saved.lang);
         },
     });
+    const photo = useMutation({
+        mutationFn: (image) => image === null
+            ? api.call('DELETE', '/api/v1/auth/profile/avatar')
+            : api.call('PUT', '/api/v1/auth/profile/avatar', { image }),
+        // The shell shows the photo from the user's details.
+        onSuccess: () => void queryClient.invalidateQueries({ queryKey: ['me'] }),
+    });
     const [current, setCurrent] = useState('');
     const [next, setNext] = useState('');
     const [repeat, setRepeat] = useState('');
@@ -169,12 +176,7 @@ export function ProfilePage({ api }) {
     if (draft === null || me.data === undefined)
         return _jsx("p", { className: "text-sm text-muted-foreground", children: "\u2026" });
     const set = (patch) => setDraft({ ...draft, ...patch });
-    return (_jsxs("div", { className: "mx-auto grid max-w-3xl gap-6", children: [_jsxs("header", { className: "flex items-center gap-4", children: [_jsx("span", { "aria-hidden": true, className: "grid size-14 place-items-center rounded-full bg-primary text-lg font-semibold text-primary-foreground", children: draft.name
-                            .split(/\s+/)
-                            .map((w) => w.slice(0, 1))
-                            .join('')
-                            .slice(0, 2)
-                            .toUpperCase() }), _jsxs("div", { children: [_jsx("h1", { className: "text-xl font-semibold", children: t('profile.title') }), _jsx("p", { className: "text-sm text-muted-foreground", children: t('profile.signedInAs', { login: draft.login }) })] })] }), _jsxs("form", { className: "grid gap-6", onSubmit: (e) => {
+    return (_jsxs("div", { className: "mx-auto grid max-w-3xl gap-6", children: [_jsxs("header", { className: "grid gap-4", children: [_jsxs("div", { children: [_jsx("h1", { className: "text-xl font-semibold", children: t('profile.title') }), _jsx("p", { className: "text-sm text-muted-foreground", children: t('profile.signedInAs', { login: draft.login }) })] }), _jsxs("section", { "aria-label": t('profile.photo'), className: "rounded-lg border bg-surface p-5", children: [_jsx(ImagePicker, { name: draft.name, src: imageUrl('user', me.data.id, me.data.avatar), fit: "photo", busy: photo.isPending, onChoose: (image) => photo.mutate(image), onRemove: () => photo.mutate(null) }), photo.error === null ? null : (_jsx("div", { className: "mt-3", children: _jsx(Alert, { tone: "danger", children: message(photo.error) }) }))] })] }), _jsxs("form", { className: "grid gap-6", onSubmit: (e) => {
                     e.preventDefault();
                     save.mutate({
                         name: draft.name,

package/dist/settings/web/index.d.ts

@@ -7,10 +7,12 @@ import { type Registry } from '../../ui/index.js';
 import type { i18n } from 'i18next';
 import { messages } from './messages.js';
 export { ApiKeysPage } from './ApiKeysPage.js';
+export { AppSettingsPage } from './AppSettingsPage.js';
 export { AppsPage } from './AppsPage.js';
 export { AuditPage } from './AuditPage.js';
 export { CompaniesPage } from './CompaniesPage.js';
 export { CompanyPage } from './CompanyPage.js';
+export { ConnectedAppsPage } from './ConnectedAppsPage.js';
 export { OverviewPage } from './OverviewPage.js';
 export { PeoplePage } from './PeoplePage.js';
 export { deviceOf, ProfilePage } from './ProfilePage.js';

package/dist/settings/web/index.js

@@ -5,10 +5,12 @@
  */
 import { addMessages } from '../../ui/index.js';
 import { ApiKeysPage } from './ApiKeysPage.js';
+import { AppSettingsPage } from './AppSettingsPage.js';
 import { AppsPage } from './AppsPage.js';
 import { AuditPage } from './AuditPage.js';
 import { CompaniesPage } from './CompaniesPage.js';
 import { CompanyPage } from './CompanyPage.js';
+import { ConnectedAppsPage } from './ConnectedAppsPage.js';
 import { messages } from './messages.js';
 import { OverviewPage } from './OverviewPage.js';
 import { PeoplePage } from './PeoplePage.js';
@@ -16,10 +18,12 @@ import { ProfilePage } from './ProfilePage.js';
 import { RolesPage } from './RolesPage.js';
 import { SecurityPage } from './SecurityPage.js';
 export { ApiKeysPage } from './ApiKeysPage.js';
+export { AppSettingsPage } from './AppSettingsPage.js';
 export { AppsPage } from './AppsPage.js';
 export { AuditPage } from './AuditPage.js';
 export { CompaniesPage } from './CompaniesPage.js';
 export { CompanyPage } from './CompanyPage.js';
+export { ConnectedAppsPage } from './ConnectedAppsPage.js';
 export { OverviewPage } from './OverviewPage.js';
 export { PeoplePage } from './PeoplePage.js';
 export { deviceOf, ProfilePage } from './ProfilePage.js';
@@ -30,6 +34,7 @@ export { SecurityPage } from './SecurityPage.js';
 export function registerSettingsWeb(registry, i18n) {
     registry.registerPage('settings.Overview', OverviewPage);
     registry.registerPage('settings.Apps', AppsPage);
+    registry.registerPage('settings.AppSettings', AppSettingsPage);
     registry.registerPage('settings.People', PeoplePage);
     registry.registerPage('settings.Roles', RolesPage);
     registry.registerPage('settings.Company', CompanyPage);
@@ -39,6 +44,9 @@ export function registerSettingsWeb(registry, i18n) {
     // Every signed-in user's own profile (RFC 0019) and keys (RFC 0017 §5.1): in the user menu, not in Settings.
     registry.registerUserPage('settings.Profile', ProfilePage, { label: 'settings:profile.title' });
     registry.registerUserPage('settings.ApiKeys', ApiKeysPage, { label: 'settings:apiKeys.title' });
+    registry.registerUserPage('settings.ConnectedApps', ConnectedAppsPage, {
+        label: 'settings:connected.title',
+    });
     if (i18n !== undefined)
         addMessages(i18n, 'settings', messages);
     return registry;

package/dist/settings/web/messages.js

@@ -1,6 +1,56 @@
 /** Messages of the Settings app (namespace `settings`). */
 export const messages = {
     en: {
+        appSettings: {
+            title: 'App settings',
+            intro: 'Each app’s own settings, in one place. Who may change them is set by the app; every change is in the audit log.',
+            apps: 'Apps',
+            none: 'No installed app you may open has settings yet.',
+            perCompany: 'For this company',
+            everywhere: 'For every company',
+            changed: 'Changed',
+            reset: 'Reset',
+            resetOne: 'Reset {{setting}} to its default',
+            defaultIs: 'Default: {{value}}',
+            save: 'Save',
+            discard: 'Discard',
+            saved: 'Saved.',
+            readOnly: 'You may see these settings; changing them needs another role.',
+            notSet: 'Not set',
+            history: 'History',
+            historyOf: 'History of {{setting}}',
+            neverChanged: 'Never changed: the default applies.',
+            system: 'System',
+            how: { changed: 'changed', copied: 'copied from another company', imported: 'imported' },
+            copyTo: 'Copy to another company…',
+            copyTitle: 'Copy settings to another company',
+            copyIntro: 'This company’s settings for each app, written to the company you choose. What would change is shown first; nothing is written until you confirm.',
+            toCompany: 'To company',
+            chooseCompany: 'Choose a company',
+            copyNow: 'Copy the settings',
+            copied: 'Settings copied ({{count}} sections changed).',
+            nothingToChange: 'Nothing would change: the settings are the same already.',
+            export: 'Export',
+            import: 'Import…',
+            importFile: 'Settings file to import',
+            importTitle: 'Import settings',
+            importIntro: 'A settings file exported from Shutro ERP, checked against the installed apps. What would change is shown first; unknown settings are skipped.',
+            importNow: 'Import the settings',
+            imported: 'Settings imported ({{count}} sections changed).',
+            skipped: 'Skipped (not in this installation): {{what}}',
+            notJson: 'That file is not a settings export.',
+        },
+        connected: {
+            title: 'Connected apps',
+            intro: 'Apps you allowed to act for you. They can never do more than you may; remove one and its access ends at once.',
+            none: 'You have not allowed any app.',
+            since: 'allowed {{when}}',
+            lastUsed: 'last used {{when}}',
+            neverUsed: 'not used yet',
+            revoke: 'Remove access',
+            revokeApp: 'Remove the access of {{app}}',
+            homepage: 'About {{app}}',
+        },
         roles: {
             title: 'Roles & permissions',
             intro: 'What each role lets people open and do. Changes are previewed before they are saved.',
@@ -62,9 +112,26 @@ export const messages = {
         people: {
             title: 'People',
             intro: 'Who works here, what they can open, and how they sign in.',
-            invite: 'Invite',
+            invite: 'Add or invite',
             inviteTitle: 'Invite someone',
             inviteHint: 'They get a link to choose their password; it works for 7 days.',
+            addTitle: 'Add someone',
+            addHint: 'You set their password and pass it on; they can change it in their profile.',
+            add: 'Add the person',
+            added: '{{login}} can sign in now with the password you set. Pass it on safely.',
+            how: 'How they get in',
+            mode: {
+                invite: 'Send an invitation',
+                inviteHint: 'An email with a link; they choose their own password.',
+                password: 'Add with a password',
+                passwordHint: 'They can sign in at once; no email needed.',
+            },
+            emailOptional: 'Email (optional)',
+            login: 'Login',
+            password: 'Password',
+            passwordHint: 'At least 12 characters.',
+            repeat: 'Repeat the password',
+            mismatch: 'The passwords differ.',
             send: 'Send the invitation',
             done: 'Done',
             emailed: 'The invitation is on its way to {{to}}. You can also pass on the link:',
@@ -129,10 +196,18 @@ export const messages = {
                     description: 'Sign-ins, permission changes, exports and sensitive actions; filtered and exported.',
                     keywords: 'audit log history events who did what logins export csv',
                 },
+                'settings.action_app_settings': {
+                    description: 'Each app’s own settings: quotations, purchase orders, fiscal year and lock dates, and more.',
+                    keywords: 'app settings configuration defaults',
+                },
                 'settings.action_companies': {
                     description: 'Every company, its currency and people; switch between them or add one.',
                     keywords: 'companies multi-company branches new company switch',
                 },
+                'settings.action_people': {
+                    description: 'Invite people, give them roles per app and company, deactivate them, reset their two-factor sign-in.',
+                    keywords: 'people users employees invite invitation roles deactivate 2fa reset',
+                },
                 'settings.action_roles': {
                     description: 'What each role opens and allows, rights per model, record rules; previewed before saving.',
                     keywords: 'roles permissions access rights groups record rules field security acl',
@@ -184,6 +259,7 @@ export const messages = {
             turnOff: 'Turn off two-factor sign-in',
             password: 'Password',
             recoveryCodes: 'Your recovery codes: each signs you in once if you lose your phone. Keep them somewhere safe; they are shown only now.',
+            photo: 'Photo',
             sessions: 'Signed-in devices',
             sessionsHint: 'Where you are signed in now. Sign out a device you do not recognise.',
             thisDevice: 'This device',
@@ -368,6 +444,56 @@ export const messages = {
         version: 'Version {{version}}',
     },
     bn: {
+        appSettings: {
+            title: 'অ্যাপ সেটিংস',
+            intro: 'প্রতিটি অ্যাপের নিজস্ব সেটিংস, এক জায়গায়। কে বদলাতে পারবেন তা অ্যাপ ঠিক করে; প্রতিটি পরিবর্তন অডিট লগে থাকে।',
+            apps: 'অ্যাপস',
+            none: 'আপনি খুলতে পারেন এমন কোনো অ্যাপের এখনো সেটিংস নেই।',
+            perCompany: 'এই প্রতিষ্ঠানের জন্য',
+            everywhere: 'সব প্রতিষ্ঠানের জন্য',
+            changed: 'পরিবর্তিত',
+            reset: 'ডিফল্টে ফিরিয়ে দিন',
+            resetOne: '{{setting}} ডিফল্টে ফিরিয়ে দিন',
+            defaultIs: 'ডিফল্ট: {{value}}',
+            save: 'সংরক্ষণ করুন',
+            discard: 'বাদ দিন',
+            saved: 'সংরক্ষিত।',
+            readOnly: 'আপনি এই সেটিংস দেখতে পারেন; বদলাতে অন্য রোল লাগে।',
+            notSet: 'নির্ধারিত নয়',
+            history: 'ইতিহাস',
+            historyOf: '{{setting}}-এর ইতিহাস',
+            neverChanged: 'কখনো বদলানো হয়নি: ডিফল্ট প্রযোজ্য।',
+            system: 'সিস্টেম',
+            how: { changed: 'বদলানো হয়েছে', copied: 'অন্য প্রতিষ্ঠান থেকে কপি', imported: 'ইমপোর্ট' },
+            copyTo: 'অন্য প্রতিষ্ঠানে কপি করুন…',
+            copyTitle: 'সেটিংস অন্য প্রতিষ্ঠানে কপি করুন',
+            copyIntro: 'এই প্রতিষ্ঠানের প্রতিটি অ্যাপের সেটিংস আপনার বেছে নেওয়া প্রতিষ্ঠানে লেখা হবে। কী বদলাবে তা আগে দেখানো হয়; নিশ্চিত না করা পর্যন্ত কিছু লেখা হয় না।',
+            toCompany: 'যে প্রতিষ্ঠানে',
+            chooseCompany: 'প্রতিষ্ঠান বেছে নিন',
+            copyNow: 'সেটিংস কপি করুন',
+            copied: 'সেটিংস কপি হয়েছে ({{count}}টি অংশ বদলেছে)।',
+            nothingToChange: 'কিছু বদলাবে না: সেটিংস আগে থেকেই এক।',
+            export: 'এক্সপোর্ট',
+            import: 'ইমপোর্ট…',
+            importFile: 'ইমপোর্টের সেটিংস ফাইল',
+            importTitle: 'সেটিংস ইমপোর্ট',
+            importIntro: 'Shutro ERP থেকে এক্সপোর্ট করা সেটিংস ফাইল, ইনস্টল করা অ্যাপের সাথে মিলিয়ে দেখা। কী বদলাবে তা আগে দেখানো হয়; অজানা সেটিংস বাদ যায়।',
+            importNow: 'সেটিংস ইমপোর্ট করুন',
+            imported: 'সেটিংস ইমপোর্ট হয়েছে ({{count}}টি অংশ বদলেছে)।',
+            skipped: 'বাদ গেছে (এই ইনস্টলেশনে নেই): {{what}}',
+            notJson: 'ফাইলটি সেটিংস এক্সপোর্ট নয়।',
+        },
+        connected: {
+            title: 'সংযুক্ত অ্যাপস',
+            intro: 'যে অ্যাপগুলোকে আপনি আপনার হয়ে কাজ করতে দিয়েছেন। সরিয়ে দিলে সাথে সাথে প্রবেশাধিকার শেষ।',
+            none: 'আপনি কোনো অ্যাপকে অনুমতি দেননি।',
+            since: '{{when}} থেকে অনুমতি',
+            lastUsed: 'সর্বশেষ ব্যবহার {{when}}',
+            neverUsed: 'এখনো ব্যবহার হয়নি',
+            revoke: 'প্রবেশাধিকার সরান',
+            revokeApp: '{{app}}-এর প্রবেশাধিকার সরান',
+            homepage: '{{app}} সম্পর্কে',
+        },
         roles: {
             title: 'রোল ও অনুমতি',
             intro: 'প্রতিটি রোল মানুষকে কী খুলতে ও করতে দেয়। সংরক্ষণের আগে পরিবর্তন দেখানো হয়।',
@@ -429,9 +555,26 @@ export const messages = {
         people: {
             title: 'মানুষ',
             intro: 'এখানে কারা কাজ করেন, কী খুলতে পারেন এবং কীভাবে সাইন ইন করেন।',
-            invite: 'আমন্ত্রণ',
+            invite: 'যোগ বা আমন্ত্রণ',
             inviteTitle: 'কাউকে আমন্ত্রণ জানান',
             inviteHint: 'তাঁরা পাসওয়ার্ড বেছে নেওয়ার একটি লিংক পাবেন; এটি ৭ দিন কাজ করে।',
+            addTitle: 'কাউকে যোগ করুন',
+            addHint: 'আপনি পাসওয়ার্ড ঠিক করে দিন; তাঁরা প্রোফাইলে বদলাতে পারেন।',
+            add: 'যোগ করুন',
+            added: '{{login}} এখনই আপনার ঠিক করা পাসওয়ার্ড দিয়ে সাইন ইন করতে পারেন। নিরাপদে জানিয়ে দিন।',
+            how: 'কীভাবে প্রবেশ করবেন',
+            mode: {
+                invite: 'আমন্ত্রণ পাঠান',
+                inviteHint: 'একটি ইমেইলে লিংক; তাঁরা নিজের পাসওয়ার্ড বেছে নেন।',
+                password: 'পাসওয়ার্ড দিয়ে যোগ করুন',
+                passwordHint: 'সাথে সাথে সাইন ইন করতে পারেন; ইমেইল লাগে না।',
+            },
+            emailOptional: 'ইমেইল (ঐচ্ছিক)',
+            login: 'লগইন',
+            password: 'পাসওয়ার্ড',
+            passwordHint: 'অন্তত ১২ অক্ষর।',
+            repeat: 'পাসওয়ার্ড আবার দিন',
+            mismatch: 'পাসওয়ার্ড মিলছে না।',
             send: 'আমন্ত্রণ পাঠান',
             done: 'সম্পন্ন',
             emailed: 'আমন্ত্রণ {{to}}-এ যাচ্ছে। লিংকটি আপনিও পাঠাতে পারেন:',
@@ -555,6 +698,7 @@ export const messages = {
             turnOff: 'দুই-ধাপের সাইন ইন বন্ধ করুন',
             password: 'পাসওয়ার্ড',
             recoveryCodes: 'আপনার রিকভারি কোড: ফোন হারালে প্রতিটি একবার সাইন ইন করায়। নিরাপদে রাখুন; শুধু এখনই দেখানো হচ্ছে।',
+            photo: 'ছবি',
             sessions: 'সাইন ইন করা ডিভাইস',
             sessionsHint: 'এখন যেখানে আপনি সাইন ইন আছেন। অচেনা ডিভাইস সাইন আউট করুন।',
             thisDevice: 'এই ডিভাইস',

package/dist/stock/.kosh/bindings.d.ts

@@ -0,0 +1,22 @@
+export { defineModel, defineModule, extendModel, f, replace } from '../../server/orm.js';
+import { type DefinitionHelpers } from '../../server/orm.js';
+import type { DefaultLoaded, Env as CoreEnv, RecordSet as CoreRecordSet, Shutro as CoreShutro } from '../../server/orm.js';
+import type { SchemaView } from './schema.js';
+export type { SchemaView };
+/** Every model visible in this view. */
+export type ModelName = keyof SchemaView & string;
+/** `Env` typed to this view. */
+export type Env = CoreEnv<SchemaView>;
+/** `Shutro` typed to this view. */
+export type Shutro = CoreShutro<SchemaView>;
+/** A recordset of `M`, with the default loaded shape unless `L` is given. */
+export type Records<M extends ModelName, L = DefaultLoaded<SchemaView, M>> = CoreRecordSet<SchemaView, M, L>;
+export declare const compute: DefinitionHelpers<SchemaView>['compute'];
+export declare const check: DefinitionHelpers<SchemaView>['check'];
+export declare const onchange: DefinitionHelpers<SchemaView>['onchange'];
+export declare const records: DefinitionHelpers<SchemaView>['records'];
+export declare const method: DefinitionHelpers<SchemaView>['method'];
+/** Module data (RFC 0017): records, overrides of dependencies' records, and references, typed like creates. */
+export declare const record: DefinitionHelpers<SchemaView>['record'];
+export declare const override: DefinitionHelpers<SchemaView>['override'];
+export declare const ref: DefinitionHelpers<SchemaView>['ref'];

package/dist/stock/.kosh/bindings.js

@@ -0,0 +1,15 @@
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 8b53af7578c6a801
+// Bindings of module `stock`: import the definition API from here to get types scoped to what it can see.
+export { defineModel, defineModule, extendModel, f, replace } from '../../server/orm.js';
+import { definitions } from '../../server/orm.js';
+/** Definition callbacks typed against this module's view: no casts in computes, checks, onchange, methods. */
+const helpers = definitions();
+export const compute = helpers.compute;
+export const check = helpers.check;
+export const onchange = helpers.onchange;
+export const records = helpers.records;
+export const method = helpers.method;
+/** Module data (RFC 0017): records, overrides of dependencies' records, and references, typed like creates. */
+export const record = helpers.record;
+export const override = helpers.override;
+export const ref = helpers.ref;