shutro-erp 0.3.4 → 0.3.5

package/dist/settings/web/AppSettingsPage.js

@@ -0,0 +1,210 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Settings › App settings (RFC 0020): the apps' own settings, declared in their manifests. The apps you may see on
+ * the left; an app's sections as cards — each setting with its help, a mark when it differs from the default with
+ * *Reset*, and *Save* per section, sending only what changed. Company settings name the company they apply to. The
+ * server checks every value and who may change it, and audits each change. Each setting opens its history (who, when,
+ * old → new); administrators copy a company's settings to another, export them as a file and import one, every one
+ * of those previewed before anything is written.
+ */
+import { Alert, ApiError, AppIcon, Badge, Button, Checkbox, DateField, Dialog, Input, Label, Select, Textarea, useKosh, } from '../../ui/index.js';
+import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
+import { Copy, Download, History, RotateCcw, Upload } from 'lucide-react';
+import { useEffect, useRef, useState } from 'react';
+import { useTranslation } from 'react-i18next';
+const shown = (value) => value === null || value === ''
+    ? '—'
+    : value === true
+        ? '✓'
+        : value === false
+            ? '✗'
+            : String(value);
+const BASE = '/api/v1/settings/app-settings';
+const message = (error) => (error instanceof ApiError ? error.message : String(error));
+/** The app shown: `?app=` in the address, else the first. */
+function useChosenApp(apps) {
+    const [chosen, setChosen] = useState(() => new URLSearchParams(window.location.search).get('app') ?? undefined);
+    const set = (app) => {
+        setChosen(app);
+        const url = new URL(window.location.href);
+        url.searchParams.set('app', app);
+        window.history.replaceState(window.history.state, '', url);
+    };
+    return [apps.some((a) => a.app === chosen) ? chosen : apps[0]?.app, set];
+}
+function Control({ setting, value, disabled, onChange, }) {
+    const id = `setting-${setting.key}`;
+    const { t } = useTranslation('settings');
+    switch (setting.type) {
+        case 'boolean':
+            return (_jsx(Checkbox, { id: id, checked: value === true, disabled: disabled, onCheckedChange: (on) => onChange(on === true) }));
+        case 'selection':
+            return (_jsx(Select, { id: id, label: setting.label, value: typeof value === 'string' ? value : 'none', disabled: disabled, options: [{ value: 'none', label: t('appSettings.notSet') }, ...(setting.options ?? [])], onChange: (v) => onChange(v === 'none' ? null : v) }));
+        case 'text':
+            return (_jsx(Textarea, { id: id, rows: 4, disabled: disabled, value: typeof value === 'string' ? value : '', onChange: (e) => onChange(e.target.value) }));
+        case 'date':
+            return disabled ? (_jsx(Input, { id: id, disabled: true, className: "w-48", value: typeof value === 'string' ? value : '', readOnly: true })) : (_jsx(DateField, { id: id, value: typeof value === 'string' ? value : null, onChange: onChange }));
+        default:
+            return (_jsx(Input, { id: id, className: setting.type === 'char' ? undefined : 'w-48', disabled: disabled, type: setting.type === 'integer' ? 'number' : 'text', inputMode: setting.type === 'decimal' ? 'decimal' : undefined, min: setting.min ?? undefined, max: setting.max ?? undefined, value: value === null ? '' : String(value), onChange: (e) => {
+                    const raw = e.target.value;
+                    onChange(setting.type === 'integer'
+                        ? raw === ''
+                            ? null
+                            : Number.parseInt(raw, 10)
+                        : raw === ''
+                            ? null
+                            : raw);
+                } }));
+    }
+}
+/** Who changed a setting, when, from what to what — the audit log of this section, newest first. */
+function HistoryDialog({ api, app, section, setting, onClose, }) {
+    const { t } = useTranslation('settings');
+    const { format } = useKosh();
+    const history = useQuery({
+        queryKey: ['settings', 'app-settings', app, section.key, 'history', setting?.key],
+        queryFn: () => api.call('GET', `${BASE}/${app}/${section.key}/history?key=${encodeURIComponent(setting?.key ?? '')}`),
+        enabled: setting !== null,
+    });
+    return (_jsx(Dialog, { open: setting !== null, onOpenChange: (open) => {
+            if (!open)
+                onClose();
+        }, title: t('appSettings.historyOf', { setting: setting?.label ?? '' }), children: history.error !== null ? (_jsx(Alert, { tone: "danger", children: message(history.error) })) : history.data === undefined ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "\u2026" })) : history.data.events.length === 0 ? (_jsx("p", { className: "text-sm text-muted-foreground", children: t('appSettings.neverChanged') })) : (_jsx("ol", { className: "grid gap-2 text-sm", children: history.data.events.map((e) => (_jsxs("li", { className: "grid gap-0.5 rounded-md border p-2", children: [_jsxs("span", { className: "text-xs text-muted-foreground", children: [format.datetime(e.at), " \u00B7 ", e.actor?.name ?? t('appSettings.system'), " \u00B7", ' ', t(`appSettings.how.${e.how}`)] }), e.changes.map((c) => (_jsxs("span", { className: "tabular-nums", children: [_jsx("s", { className: "text-muted-foreground", children: shown(c.from) }), " \u2192 ", _jsx("b", { children: shown(c.to) })] }, c.key)))] }, e.at))) })) }));
+}
+/** The changes a copy or an import would make, section by section. */
+function ChangesList({ preview }) {
+    const { t } = useTranslation('settings');
+    return (_jsxs("div", { className: "grid gap-3 text-sm", children: [preview.sections.length === 0 ? (_jsx("p", { className: "text-muted-foreground", children: t('appSettings.nothingToChange') })) : (preview.sections.map((s) => (_jsxs("div", { className: "grid gap-1", children: [_jsxs("span", { className: "font-medium", children: [s.appLabel, " \u203A ", s.label] }), _jsx("ul", { className: "grid gap-0.5 ps-4", children: s.changes.map((c) => (_jsxs("li", { className: "tabular-nums", children: [c.label, ": ", _jsx("s", { className: "text-muted-foreground", children: shown(c.from) }), " \u2192", ' ', _jsx("b", { children: shown(c.to) })] }, c.key))) })] }, `${s.app}.${s.section}`)))), (preview.skipped ?? []).length === 0 ? null : (_jsx("p", { className: "text-xs text-muted-foreground", children: t('appSettings.skipped', { what: (preview.skipped ?? []).join(', ') }) }))] }));
+}
+/** Administrators: copy this company's settings to another, export them, import a file — each previewed first. */
+function Tools({ api, onDone }) {
+    const { t } = useTranslation('settings');
+    const { companyId } = useKosh();
+    const [copying, setCopying] = useState(false);
+    const [to, setTo] = useState('');
+    const [importing, setImporting] = useState(null);
+    const [error, setError] = useState(null);
+    const [done, setDone] = useState(null);
+    const file = useRef(null);
+    const companies = useQuery({
+        queryKey: ['settings', 'companies'],
+        queryFn: () => api.call('GET', '/api/v1/settings/companies'),
+        enabled: copying,
+    });
+    const targets = (companies.data?.companies ?? []).filter((c) => c.id !== companyId && c.member);
+    const copyPreview = useQuery({
+        queryKey: ['settings', 'app-settings', 'copy', companyId, to],
+        queryFn: () => api.call('POST', `${BASE}/copy`, { from: companyId, to: Number(to), preview: true }),
+        enabled: copying && to !== '',
+    });
+    const copy = useMutation({
+        mutationFn: () => api.call('POST', `${BASE}/copy`, { from: companyId, to: Number(to) }),
+        onSuccess: (r) => {
+            setCopying(false);
+            setDone(t('appSettings.copied', { count: r.sections.length }));
+            onDone();
+        },
+        onError: (e) => setError(message(e)),
+    });
+    const importPreview = useQuery({
+        queryKey: ['settings', 'app-settings', 'import', importing],
+        queryFn: () => api.call('POST', `${BASE}/import`, { file: importing, preview: true }),
+        enabled: importing !== null,
+        retry: false,
+    });
+    const doImport = useMutation({
+        mutationFn: () => api.call('POST', `${BASE}/import`, { file: importing }),
+        onSuccess: (r) => {
+            setImporting(null);
+            setDone(t('appSettings.imported', { count: r.sections.length }));
+            onDone();
+        },
+        onError: (e) => setError(message(e)),
+    });
+    const exportFile = async () => {
+        try {
+            const data = await api.call('GET', `${BASE}/export`);
+            const blob = new Blob([JSON.stringify(data, null, 2)], { type: 'application/json' });
+            const url = URL.createObjectURL(blob);
+            const a = document.createElement('a');
+            a.href = url;
+            a.download = `app-settings-${data.company.name.replaceAll(/[^\w-]+/g, '_')}.json`;
+            a.click();
+            URL.revokeObjectURL(url);
+        }
+        catch (e) {
+            setError(message(e));
+        }
+    };
+    const read = (f) => {
+        if (f === undefined)
+            return;
+        f.text().then((text) => {
+            try {
+                setImporting(JSON.parse(text));
+                setError(null);
+            }
+            catch {
+                setError(t('appSettings.notJson'));
+            }
+        }, (e) => setError(message(e)));
+    };
+    return (_jsxs("div", { className: "flex flex-wrap items-center gap-2", children: [_jsxs(Button, { size: "sm", variant: "secondary", onClick: () => setCopying(true), children: [_jsx(Copy, { "aria-hidden": true }), t('appSettings.copyTo')] }), _jsxs(Button, { size: "sm", variant: "secondary", onClick: () => void exportFile(), children: [_jsx(Download, { "aria-hidden": true }), t('appSettings.export')] }), _jsxs(Button, { size: "sm", variant: "secondary", onClick: () => file.current?.click(), children: [_jsx(Upload, { "aria-hidden": true }), t('appSettings.import')] }), _jsx("input", { ref: file, type: "file", accept: "application/json,.json", className: "sr-only", "aria-label": t('appSettings.importFile'), onChange: (e) => {
+                    read(e.target.files?.[0]);
+                    e.target.value = '';
+                } }), done === null ? null : _jsx("span", { className: "text-sm text-muted-foreground", children: done }), error === null ? null : _jsx(Alert, { tone: "danger", children: error }), _jsx(Dialog, { open: copying, onOpenChange: setCopying, title: t('appSettings.copyTitle'), description: t('appSettings.copyIntro'), footer: _jsx(Button, { variant: "primary", disabled: to === '' || (copyPreview.data?.sections.length ?? 0) === 0, busy: copy.isPending, onClick: () => copy.mutate(), children: t('appSettings.copyNow') }), children: _jsxs("div", { className: "grid gap-3", children: [_jsx(Select, { id: "copy-to", label: t('appSettings.toCompany'), value: to === '' ? 'none' : to, options: [
+                                { value: 'none', label: t('appSettings.chooseCompany') },
+                                ...targets.map((c) => ({ value: String(c.id), label: c.name })),
+                            ], onChange: (v) => setTo(v === 'none' ? '' : v) }), copyPreview.error !== null ? (_jsx(Alert, { tone: "danger", children: message(copyPreview.error) })) : copyPreview.data === undefined ? null : (_jsx(ChangesList, { preview: copyPreview.data }))] }) }), _jsx(Dialog, { open: importing !== null, onOpenChange: (open) => {
+                    if (!open)
+                        setImporting(null);
+                }, title: t('appSettings.importTitle'), description: t('appSettings.importIntro'), footer: _jsx(Button, { variant: "primary", disabled: (importPreview.data?.sections.length ?? 0) === 0, busy: doImport.isPending, onClick: () => doImport.mutate(), children: t('appSettings.importNow') }), children: importPreview.error !== null ? (_jsx(Alert, { tone: "danger", children: message(importPreview.error) })) : importPreview.data === undefined ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "\u2026" })) : (_jsx(ChangesList, { preview: importPreview.data })) })] }));
+}
+function SectionCard({ api, app, section, }) {
+    const { t } = useTranslation('settings');
+    const queryClient = useQueryClient();
+    const [draft, setDraft] = useState({});
+    const [history, setHistory] = useState(null);
+    // biome-ignore lint/correctness/useExhaustiveDependencies: a reloaded section starts a clean draft
+    useEffect(() => setDraft({}), [section]);
+    const refresh = () => void queryClient.invalidateQueries({ queryKey: ['settings', 'app-settings', app] });
+    const save = useMutation({
+        mutationFn: () => api.call('PATCH', `${BASE}/${app}/${section.key}`, { values: draft }),
+        onSuccess: refresh,
+    });
+    const reset = useMutation({
+        mutationFn: (key) => api.call('POST', `${BASE}/${app}/${section.key}/reset`, { keys: [key] }),
+        onSuccess: refresh,
+    });
+    const currentOf = (s) => (s.key in draft ? draft[s.key] : s.value);
+    const dirty = Object.keys(draft).length > 0;
+    return (_jsxs("section", { id: `section-${section.key}`, "aria-labelledby": `section-${section.key}-title`, className: "grid gap-4 rounded-lg border bg-surface p-5", children: [_jsxs("div", { className: "flex flex-wrap items-start justify-between gap-2", children: [_jsxs("div", { children: [_jsx("h2", { id: `section-${section.key}-title`, className: "font-semibold", children: section.label }), section.description === null ? null : (_jsx("p", { className: "text-sm text-muted-foreground", children: section.description }))] }), _jsx(Badge, { tone: "neutral", children: section.scope === 'company' ? t('appSettings.perCompany') : t('appSettings.everywhere') })] }), _jsx("div", { className: "grid gap-5", children: section.settings
+                    .filter((s) => {
+                    if (s.visibleWhen === null)
+                        return true;
+                    const other = section.settings.find((x) => x.key === s.visibleWhen?.key);
+                    return other !== undefined && currentOf(other) === s.visibleWhen.equals;
+                })
+                    .map((s) => (_jsxs("div", { className: "grid gap-1.5 sm:grid-cols-[16rem_1fr] sm:gap-6", children: [_jsxs("div", { className: "grid content-start gap-1", children: [_jsxs(Label, { htmlFor: `setting-${s.key}`, className: "flex flex-wrap items-center gap-2", children: [s.label, s.changed && !(s.key in draft) ? (_jsx(Badge, { tone: "info", children: t('appSettings.changed') })) : null] }), s.help === null ? null : _jsx("p", { className: "text-xs text-muted-foreground", children: s.help })] }), _jsxs("div", { className: "flex flex-wrap items-start gap-2", children: [_jsx("div", { className: "min-w-0 flex-1", children: _jsx(Control, { setting: s, value: currentOf(s), disabled: !section.editable, onChange: (v) => setDraft((d) => ({ ...d, [s.key]: v })) }) }), _jsx(Button, { size: "icon", variant: "ghost", "aria-label": t('appSettings.historyOf', { setting: s.label }), title: t('appSettings.history'), onClick: () => setHistory(s), children: _jsx(History, { "aria-hidden": true }) }), s.changed && section.editable && !(s.key in draft) ? (_jsxs(Button, { size: "sm", variant: "ghost", busy: reset.isPending && reset.variables === s.key, "aria-label": t('appSettings.resetOne', { setting: s.label }), title: t('appSettings.defaultIs', {
+                                        value: s.default === null || s.default === '' ? '—' : String(s.default),
+                                    }), onClick: () => reset.mutate(s.key), children: [_jsx(RotateCcw, { "aria-hidden": true }), t('appSettings.reset')] })) : null] })] }, s.key))) }), save.error === null && reset.error === null ? null : (_jsx(Alert, { tone: "danger", children: message(save.error ?? reset.error) })), _jsx(HistoryDialog, { api: api, app: app, section: section, setting: history, onClose: () => setHistory(null) }), section.editable ? (_jsxs("div", { className: "flex items-center justify-end gap-2", children: [save.isSuccess && !dirty ? (_jsx("span", { className: "text-sm text-muted-foreground", children: t('appSettings.saved') })) : null, dirty ? (_jsx(Button, { variant: "ghost", onClick: () => setDraft({}), children: t('appSettings.discard') })) : null, _jsx(Button, { variant: "primary", disabled: !dirty, busy: save.isPending, onClick: () => save.mutate(), children: t('appSettings.save') })] })) : (_jsx("p", { className: "text-xs text-muted-foreground", children: t('appSettings.readOnly') }))] }));
+}
+export function AppSettingsPage({ api }) {
+    const { t } = useTranslation('settings');
+    const { companyId } = useKosh();
+    const queryClient = useQueryClient();
+    const list = useQuery({
+        queryKey: ['settings', 'app-settings'],
+        queryFn: () => api.call('GET', BASE),
+    });
+    const apps = list.data?.apps ?? [];
+    const [app, choose] = useChosenApp(apps);
+    const settings = useQuery({
+        queryKey: ['settings', 'app-settings', app, companyId],
+        queryFn: () => api.call('GET', `${BASE}/${app}`),
+        enabled: app !== undefined,
+    });
+    if (list.error !== null)
+        return _jsx(Alert, { tone: "danger", children: message(list.error) });
+    return (_jsxs("div", { className: "mx-auto grid max-w-5xl gap-6", children: [_jsxs("header", { className: "flex flex-wrap items-start justify-between gap-3", children: [_jsxs("div", { children: [_jsx("h1", { className: "text-xl font-semibold", children: t('appSettings.title') }), _jsx("p", { className: "text-sm text-muted-foreground", children: t('appSettings.intro') })] }), list.data?.administrator === true ? (_jsx(Tools, { api: api, onDone: () => void queryClient.invalidateQueries({ queryKey: ['settings', 'app-settings'] }) })) : null] }), list.data !== undefined && apps.length === 0 ? (_jsx("p", { className: "rounded-lg border bg-surface p-6 text-center text-sm text-muted-foreground", children: t('appSettings.none') })) : (_jsxs("div", { className: "grid gap-6 md:grid-cols-[13rem_1fr]", children: [_jsx("nav", { "aria-label": t('appSettings.apps'), className: "md:sticky md:top-16 md:self-start", children: _jsx("ul", { className: "flex gap-1 overflow-x-auto md:grid", children: apps.map((a) => (_jsx("li", { children: _jsxs("button", { type: "button", "aria-current": a.app === app ? 'page' : undefined, onClick: () => choose(a.app), className: `flex w-full items-center gap-2 rounded-md px-2 py-1.5 text-start text-sm hover:bg-muted ${a.app === app ? 'bg-accent font-medium text-accent-foreground' : ''}`, children: [_jsx(AppIcon, { name: a.icon ?? a.app, className: "size-6 rounded-md [&_svg]:size-3.5" }), a.label] }) }, a.app))) }) }), _jsx("div", { className: "grid gap-4", children: settings.error !== null ? (_jsx(Alert, { tone: "danger", children: message(settings.error) })) : settings.data === undefined ? (_jsx("p", { className: "text-sm text-muted-foreground", children: "\u2026" })) : (settings.data.sections.map((s) => (_jsx(SectionCard, { api: api, app: settings.data.app, section: s }, s.key)))) })] }))] }));
+}

package/dist/settings/web/OverviewPage.js

@@ -21,6 +21,7 @@ const SECTION_ICONS = {
     'settings.action_security': 'security',
     'settings.action_audit': 'audit',
     'settings.action_apps': 'apps',
+    'settings.action_app_settings': 'settings',
     'assistant.action_settings': 'assistant',
 };
 export function OverviewPage({ api }) {
@@ -28,10 +29,22 @@ export function OverviewPage({ api }) {
     const id = useId();
     const [query, setQuery] = useState('');
     const menus = useQuery({ queryKey: ['menus', 'settings'], queryFn: () => api.menus('settings') });
-    const about = (action) => ({
-        description: t(`overview.about.${action}.description`, { defaultValue: '' }),
-        keywords: t(`overview.about.${action}.keywords`, { defaultValue: '' }),
+    // The apps' own settings (RFC 0020): their sections' words make App settings findable by them.
+    const appSettings = useQuery({
+        queryKey: ['settings', 'app-settings'],
+        queryFn: () => api.call('GET', '/api/v1/settings/app-settings'),
     });
+    const about = (action) => {
+        const words = action === 'settings.action_app_settings'
+            ? (appSettings.data?.apps ?? [])
+                .flatMap((a) => [a.label, ...a.sections.flatMap((s) => [s.label, s.keywords])])
+                .join(' ')
+            : '';
+        return {
+            description: t(`overview.about.${action}.description`, { defaultValue: '' }),
+            keywords: `${t(`overview.about.${action}.keywords`, { defaultValue: '' })} ${words}`,
+        };
+    };
     const entry = (n) => n.action === undefined || n.action === 'settings.action_overview'
         ? null
         : { label: n.label, action: n.action, ...about(n.action) };

package/dist/settings/web/PeoplePage.js

@@ -25,31 +25,45 @@ function InvitationLink({ url, emailed, to, }) {
                             void navigator.clipboard?.writeText(url).then(() => setCopied(true));
                         }, children: [copied ? _jsx(Check, { "aria-hidden": true }) : _jsx(Copy, { "aria-hidden": true }), copied ? t('people.copied') : t('people.copy')] })] })] }));
 }
+/** Invite someone (they choose their password from a link), or add them directly with a password you pass on. */
 function InviteDialog({ api, catalogue, open, onOpenChange, }) {
     const { t } = useTranslation('settings');
     const id = useId();
     const queryClient = useQueryClient();
+    const [mode, setMode] = useState('invite');
     const [name, setName] = useState('');
     const [email, setEmail] = useState('');
+    const [login, setLogin] = useState('');
+    const [password, setPassword] = useState('');
+    const [repeat, setRepeat] = useState('');
     const [assignments, setAssignments] = useState([]);
     const invite = useMutation({
-        mutationFn: () => api.call('POST', P, {
-            name,
-            email,
-            assignments,
-        }),
+        mutationFn: () => api.call('POST', P, mode === 'invite'
+            ? { name, email, assignments }
+            : { name, email, login: login.trim() === '' ? email : login, password, assignments }),
         onSuccess: () => void queryClient.invalidateQueries({ queryKey: ['settings', 'people'] }),
     });
     useEffect(() => {
         if (!open) {
+            setMode('invite');
             setName('');
             setEmail('');
+            setLogin('');
+            setPassword('');
+            setRepeat('');
             setAssignments([]);
             invite.reset();
         }
     }, [open, invite.reset]);
     const done = invite.data;
-    return (_jsx(Dialog, { open: open, onOpenChange: onOpenChange, title: t('people.inviteTitle'), description: t('people.inviteHint'), wide: true, footer: done === undefined ? (_jsxs(_Fragment, { children: [_jsx(Button, { onClick: () => onOpenChange(false), children: t('profile.cancel') }), _jsx(Button, { variant: "primary", busy: invite.isPending, disabled: name.trim() === '' || !email.includes('@'), onClick: () => invite.mutate(), children: t('people.send') })] })) : (_jsx(Button, { variant: "primary", onClick: () => onOpenChange(false), children: t('people.done') })), children: done !== undefined ? (_jsx(InvitationLink, { url: done.activationUrl, emailed: done.emailed, to: done.login })) : (_jsxs("div", { className: "grid gap-4", children: [_jsxs("div", { className: "grid gap-4 sm:grid-cols-2", children: [_jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-name`, children: t('profile.name') }), _jsx(Input, { id: `${id}-name`, value: name, onChange: (e) => setName(e.target.value) })] }), _jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-email`, children: t('profile.email') }), _jsx(Input, { id: `${id}-email`, type: "email", value: email, onChange: (e) => setEmail(e.target.value) })] })] }), _jsxs("div", { className: "grid gap-2", children: [_jsx("h3", { className: "text-sm font-semibold", children: t('people.roles') }), _jsx(RolesEditor, { catalogue: catalogue, value: assignments, onChange: setAssignments })] }), invite.error === null ? null : _jsx(Alert, { tone: "danger", children: message(invite.error) })] })) }));
+    const mismatch = repeat !== '' && repeat !== password;
+    const ready = name.trim() !== '' &&
+        (mode === 'invite'
+            ? email.includes('@')
+            : (login.trim() !== '' || email.includes('@')) &&
+                password.length >= 12 &&
+                repeat === password);
+    return (_jsx(Dialog, { open: open, onOpenChange: onOpenChange, title: mode === 'invite' ? t('people.inviteTitle') : t('people.addTitle'), description: mode === 'invite' ? t('people.inviteHint') : t('people.addHint'), wide: true, footer: done === undefined ? (_jsxs(_Fragment, { children: [_jsx(Button, { onClick: () => onOpenChange(false), children: t('profile.cancel') }), _jsx(Button, { variant: "primary", busy: invite.isPending, disabled: !ready, onClick: () => invite.mutate(), children: mode === 'invite' ? t('people.send') : t('people.add') })] })) : (_jsx(Button, { variant: "primary", onClick: () => onOpenChange(false), children: t('people.done') })), children: done !== undefined ? (done.activationUrl === null ? (_jsx(Alert, { tone: "info", children: t('people.added', { login: done.login }) })) : (_jsx(InvitationLink, { url: done.activationUrl, emailed: done.emailed, to: done.login }))) : (_jsxs("div", { className: "grid gap-4", children: [_jsxs("fieldset", { className: "grid gap-2 sm:grid-cols-2", children: [_jsx("legend", { className: "sr-only", children: t('people.how') }), ['invite', 'password'].map((m) => (_jsxs("label", { className: `flex cursor-pointer items-start gap-2 rounded-lg border p-3 text-sm ${mode === m ? 'border-primary bg-accent/40' : ''}`, children: [_jsx("input", { type: "radio", name: `${id}-mode`, className: "mt-1", checked: mode === m, onChange: () => setMode(m) }), _jsxs("span", { children: [_jsx("span", { className: "font-medium", children: t(`people.mode.${m}`) }), _jsx("span", { className: "block text-muted-foreground", children: t(`people.mode.${m}Hint`) })] })] }, m)))] }), _jsxs("div", { className: "grid gap-4 sm:grid-cols-2", children: [_jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-name`, children: t('profile.name') }), _jsx(Input, { id: `${id}-name`, value: name, onChange: (e) => setName(e.target.value) })] }), _jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-email`, children: mode === 'invite' ? t('profile.email') : t('people.emailOptional') }), _jsx(Input, { id: `${id}-email`, type: "email", value: email, onChange: (e) => setEmail(e.target.value) })] }), mode === 'password' ? (_jsxs(_Fragment, { children: [_jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-login`, children: t('people.login') }), _jsx(Input, { id: `${id}-login`, autoComplete: "off", placeholder: email === '' ? 'rahim' : email, value: login, onChange: (e) => setLogin(e.target.value) })] }), _jsx("div", {}), _jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-password`, children: t('people.password') }), _jsx(Input, { id: `${id}-password`, type: "password", autoComplete: "new-password", value: password, onChange: (e) => setPassword(e.target.value) }), _jsx("p", { className: "text-xs text-muted-foreground", children: t('people.passwordHint') })] }), _jsxs("div", { className: "grid gap-1.5", children: [_jsx(Label, { htmlFor: `${id}-repeat`, children: t('people.repeat') }), _jsx(Input, { id: `${id}-repeat`, type: "password", autoComplete: "new-password", "aria-invalid": mismatch ? true : undefined, value: repeat, onChange: (e) => setRepeat(e.target.value) }), mismatch ? _jsx("p", { className: "text-xs text-danger", children: t('people.mismatch') }) : null] })] })) : null] }), _jsxs("div", { className: "grid gap-2", children: [_jsx("h3", { className: "text-sm font-semibold", children: t('people.roles') }), _jsx(RolesEditor, { catalogue: catalogue, value: assignments, onChange: setAssignments })] }), invite.error === null ? null : _jsx(Alert, { tone: "danger", children: message(invite.error) })] })) }));
 }
 /** What a person can do, computed by the server as them (administrators only). */
 function Effective({ api, personId }) {

package/dist/settings/web/index.d.ts

@@ -7,6 +7,7 @@ import { type Registry } from '../../ui/index.js';
 import type { i18n } from 'i18next';
 import { messages } from './messages.js';
 export { ApiKeysPage } from './ApiKeysPage.js';
+export { AppSettingsPage } from './AppSettingsPage.js';
 export { AppsPage } from './AppsPage.js';
 export { AuditPage } from './AuditPage.js';
 export { CompaniesPage } from './CompaniesPage.js';

package/dist/settings/web/index.js

@@ -5,6 +5,7 @@
  */
 import { addMessages } from '../../ui/index.js';
 import { ApiKeysPage } from './ApiKeysPage.js';
+import { AppSettingsPage } from './AppSettingsPage.js';
 import { AppsPage } from './AppsPage.js';
 import { AuditPage } from './AuditPage.js';
 import { CompaniesPage } from './CompaniesPage.js';
@@ -17,6 +18,7 @@ import { ProfilePage } from './ProfilePage.js';
 import { RolesPage } from './RolesPage.js';
 import { SecurityPage } from './SecurityPage.js';
 export { ApiKeysPage } from './ApiKeysPage.js';
+export { AppSettingsPage } from './AppSettingsPage.js';
 export { AppsPage } from './AppsPage.js';
 export { AuditPage } from './AuditPage.js';
 export { CompaniesPage } from './CompaniesPage.js';
@@ -32,6 +34,7 @@ export { SecurityPage } from './SecurityPage.js';
 export function registerSettingsWeb(registry, i18n) {
     registry.registerPage('settings.Overview', OverviewPage);
     registry.registerPage('settings.Apps', AppsPage);
+    registry.registerPage('settings.AppSettings', AppSettingsPage);
     registry.registerPage('settings.People', PeoplePage);
     registry.registerPage('settings.Roles', RolesPage);
     registry.registerPage('settings.Company', CompanyPage);

package/dist/settings/web/messages.js

@@ -1,6 +1,45 @@
 /** Messages of the Settings app (namespace `settings`). */
 export const messages = {
     en: {
+        appSettings: {
+            title: 'App settings',
+            intro: 'Each app’s own settings, in one place. Who may change them is set by the app; every change is in the audit log.',
+            apps: 'Apps',
+            none: 'No installed app you may open has settings yet.',
+            perCompany: 'For this company',
+            everywhere: 'For every company',
+            changed: 'Changed',
+            reset: 'Reset',
+            resetOne: 'Reset {{setting}} to its default',
+            defaultIs: 'Default: {{value}}',
+            save: 'Save',
+            discard: 'Discard',
+            saved: 'Saved.',
+            readOnly: 'You may see these settings; changing them needs another role.',
+            notSet: 'Not set',
+            history: 'History',
+            historyOf: 'History of {{setting}}',
+            neverChanged: 'Never changed: the default applies.',
+            system: 'System',
+            how: { changed: 'changed', copied: 'copied from another company', imported: 'imported' },
+            copyTo: 'Copy to another company…',
+            copyTitle: 'Copy settings to another company',
+            copyIntro: 'This company’s settings for each app, written to the company you choose. What would change is shown first; nothing is written until you confirm.',
+            toCompany: 'To company',
+            chooseCompany: 'Choose a company',
+            copyNow: 'Copy the settings',
+            copied: 'Settings copied ({{count}} sections changed).',
+            nothingToChange: 'Nothing would change: the settings are the same already.',
+            export: 'Export',
+            import: 'Import…',
+            importFile: 'Settings file to import',
+            importTitle: 'Import settings',
+            importIntro: 'A settings file exported from Shutro ERP, checked against the installed apps. What would change is shown first; unknown settings are skipped.',
+            importNow: 'Import the settings',
+            imported: 'Settings imported ({{count}} sections changed).',
+            skipped: 'Skipped (not in this installation): {{what}}',
+            notJson: 'That file is not a settings export.',
+        },
         connected: {
             title: 'Connected apps',
             intro: 'Apps you allowed to act for you. They can never do more than you may; remove one and its access ends at once.',
@@ -73,9 +112,26 @@ export const messages = {
         people: {
             title: 'People',
             intro: 'Who works here, what they can open, and how they sign in.',
-            invite: 'Invite',
+            invite: 'Add or invite',
             inviteTitle: 'Invite someone',
             inviteHint: 'They get a link to choose their password; it works for 7 days.',
+            addTitle: 'Add someone',
+            addHint: 'You set their password and pass it on; they can change it in their profile.',
+            add: 'Add the person',
+            added: '{{login}} can sign in now with the password you set. Pass it on safely.',
+            how: 'How they get in',
+            mode: {
+                invite: 'Send an invitation',
+                inviteHint: 'An email with a link; they choose their own password.',
+                password: 'Add with a password',
+                passwordHint: 'They can sign in at once; no email needed.',
+            },
+            emailOptional: 'Email (optional)',
+            login: 'Login',
+            password: 'Password',
+            passwordHint: 'At least 12 characters.',
+            repeat: 'Repeat the password',
+            mismatch: 'The passwords differ.',
             send: 'Send the invitation',
             done: 'Done',
             emailed: 'The invitation is on its way to {{to}}. You can also pass on the link:',
@@ -140,6 +196,10 @@ export const messages = {
                     description: 'Sign-ins, permission changes, exports and sensitive actions; filtered and exported.',
                     keywords: 'audit log history events who did what logins export csv',
                 },
+                'settings.action_app_settings': {
+                    description: 'Each app’s own settings: quotations, purchase orders, fiscal year and lock dates, and more.',
+                    keywords: 'app settings configuration defaults',
+                },
                 'settings.action_companies': {
                     description: 'Every company, its currency and people; switch between them or add one.',
                     keywords: 'companies multi-company branches new company switch',
@@ -384,6 +444,45 @@ export const messages = {
         version: 'Version {{version}}',
     },
     bn: {
+        appSettings: {
+            title: 'অ্যাপ সেটিংস',
+            intro: 'প্রতিটি অ্যাপের নিজস্ব সেটিংস, এক জায়গায়। কে বদলাতে পারবেন তা অ্যাপ ঠিক করে; প্রতিটি পরিবর্তন অডিট লগে থাকে।',
+            apps: 'অ্যাপস',
+            none: 'আপনি খুলতে পারেন এমন কোনো অ্যাপের এখনো সেটিংস নেই।',
+            perCompany: 'এই প্রতিষ্ঠানের জন্য',
+            everywhere: 'সব প্রতিষ্ঠানের জন্য',
+            changed: 'পরিবর্তিত',
+            reset: 'ডিফল্টে ফিরিয়ে দিন',
+            resetOne: '{{setting}} ডিফল্টে ফিরিয়ে দিন',
+            defaultIs: 'ডিফল্ট: {{value}}',
+            save: 'সংরক্ষণ করুন',
+            discard: 'বাদ দিন',
+            saved: 'সংরক্ষিত।',
+            readOnly: 'আপনি এই সেটিংস দেখতে পারেন; বদলাতে অন্য রোল লাগে।',
+            notSet: 'নির্ধারিত নয়',
+            history: 'ইতিহাস',
+            historyOf: '{{setting}}-এর ইতিহাস',
+            neverChanged: 'কখনো বদলানো হয়নি: ডিফল্ট প্রযোজ্য।',
+            system: 'সিস্টেম',
+            how: { changed: 'বদলানো হয়েছে', copied: 'অন্য প্রতিষ্ঠান থেকে কপি', imported: 'ইমপোর্ট' },
+            copyTo: 'অন্য প্রতিষ্ঠানে কপি করুন…',
+            copyTitle: 'সেটিংস অন্য প্রতিষ্ঠানে কপি করুন',
+            copyIntro: 'এই প্রতিষ্ঠানের প্রতিটি অ্যাপের সেটিংস আপনার বেছে নেওয়া প্রতিষ্ঠানে লেখা হবে। কী বদলাবে তা আগে দেখানো হয়; নিশ্চিত না করা পর্যন্ত কিছু লেখা হয় না।',
+            toCompany: 'যে প্রতিষ্ঠানে',
+            chooseCompany: 'প্রতিষ্ঠান বেছে নিন',
+            copyNow: 'সেটিংস কপি করুন',
+            copied: 'সেটিংস কপি হয়েছে ({{count}}টি অংশ বদলেছে)।',
+            nothingToChange: 'কিছু বদলাবে না: সেটিংস আগে থেকেই এক।',
+            export: 'এক্সপোর্ট',
+            import: 'ইমপোর্ট…',
+            importFile: 'ইমপোর্টের সেটিংস ফাইল',
+            importTitle: 'সেটিংস ইমপোর্ট',
+            importIntro: 'Shutro ERP থেকে এক্সপোর্ট করা সেটিংস ফাইল, ইনস্টল করা অ্যাপের সাথে মিলিয়ে দেখা। কী বদলাবে তা আগে দেখানো হয়; অজানা সেটিংস বাদ যায়।',
+            importNow: 'সেটিংস ইমপোর্ট করুন',
+            imported: 'সেটিংস ইমপোর্ট হয়েছে ({{count}}টি অংশ বদলেছে)।',
+            skipped: 'বাদ গেছে (এই ইনস্টলেশনে নেই): {{what}}',
+            notJson: 'ফাইলটি সেটিংস এক্সপোর্ট নয়।',
+        },
         connected: {
             title: 'সংযুক্ত অ্যাপস',
             intro: 'যে অ্যাপগুলোকে আপনি আপনার হয়ে কাজ করতে দিয়েছেন। সরিয়ে দিলে সাথে সাথে প্রবেশাধিকার শেষ।',
@@ -456,9 +555,26 @@ export const messages = {
         people: {
             title: 'মানুষ',
             intro: 'এখানে কারা কাজ করেন, কী খুলতে পারেন এবং কীভাবে সাইন ইন করেন।',
-            invite: 'আমন্ত্রণ',
+            invite: 'যোগ বা আমন্ত্রণ',
             inviteTitle: 'কাউকে আমন্ত্রণ জানান',
             inviteHint: 'তাঁরা পাসওয়ার্ড বেছে নেওয়ার একটি লিংক পাবেন; এটি ৭ দিন কাজ করে।',
+            addTitle: 'কাউকে যোগ করুন',
+            addHint: 'আপনি পাসওয়ার্ড ঠিক করে দিন; তাঁরা প্রোফাইলে বদলাতে পারেন।',
+            add: 'যোগ করুন',
+            added: '{{login}} এখনই আপনার ঠিক করা পাসওয়ার্ড দিয়ে সাইন ইন করতে পারেন। নিরাপদে জানিয়ে দিন।',
+            how: 'কীভাবে প্রবেশ করবেন',
+            mode: {
+                invite: 'আমন্ত্রণ পাঠান',
+                inviteHint: 'একটি ইমেইলে লিংক; তাঁরা নিজের পাসওয়ার্ড বেছে নেন।',
+                password: 'পাসওয়ার্ড দিয়ে যোগ করুন',
+                passwordHint: 'সাথে সাথে সাইন ইন করতে পারেন; ইমেইল লাগে না।',
+            },
+            emailOptional: 'ইমেইল (ঐচ্ছিক)',
+            login: 'লগইন',
+            password: 'পাসওয়ার্ড',
+            passwordHint: 'অন্তত ১২ অক্ষর।',
+            repeat: 'পাসওয়ার্ড আবার দিন',
+            mismatch: 'পাসওয়ার্ড মিলছে না।',
             send: 'আমন্ত্রণ পাঠান',
             done: 'সম্পন্ন',
             emailed: 'আমন্ত্রণ {{to}}-এ যাচ্ছে। লিংকটি আপনিও পাঠাতে পারেন:',

package/dist/stock/.kosh/bindings.d.ts

@@ -0,0 +1,22 @@
+export { defineModel, defineModule, extendModel, f, replace } from '../../server/orm.js';
+import { type DefinitionHelpers } from '../../server/orm.js';
+import type { DefaultLoaded, Env as CoreEnv, RecordSet as CoreRecordSet, Shutro as CoreShutro } from '../../server/orm.js';
+import type { SchemaView } from './schema.js';
+export type { SchemaView };
+/** Every model visible in this view. */
+export type ModelName = keyof SchemaView & string;
+/** `Env` typed to this view. */
+export type Env = CoreEnv<SchemaView>;
+/** `Shutro` typed to this view. */
+export type Shutro = CoreShutro<SchemaView>;
+/** A recordset of `M`, with the default loaded shape unless `L` is given. */
+export type Records<M extends ModelName, L = DefaultLoaded<SchemaView, M>> = CoreRecordSet<SchemaView, M, L>;
+export declare const compute: DefinitionHelpers<SchemaView>['compute'];
+export declare const check: DefinitionHelpers<SchemaView>['check'];
+export declare const onchange: DefinitionHelpers<SchemaView>['onchange'];
+export declare const records: DefinitionHelpers<SchemaView>['records'];
+export declare const method: DefinitionHelpers<SchemaView>['method'];
+/** Module data (RFC 0017): records, overrides of dependencies' records, and references, typed like creates. */
+export declare const record: DefinitionHelpers<SchemaView>['record'];
+export declare const override: DefinitionHelpers<SchemaView>['override'];
+export declare const ref: DefinitionHelpers<SchemaView>['ref'];

package/dist/stock/.kosh/bindings.js

@@ -0,0 +1,15 @@
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 8b53af7578c6a801
+// Bindings of module `stock`: import the definition API from here to get types scoped to what it can see.
+export { defineModel, defineModule, extendModel, f, replace } from '../../server/orm.js';
+import { definitions } from '../../server/orm.js';
+/** Definition callbacks typed against this module's view: no casts in computes, checks, onchange, methods. */
+const helpers = definitions();
+export const compute = helpers.compute;
+export const check = helpers.check;
+export const onchange = helpers.onchange;
+export const records = helpers.records;
+export const method = helpers.method;
+/** Module data (RFC 0017): records, overrides of dependencies' records, and references, typed like creates. */
+export const record = helpers.record;
+export const override = helpers.override;
+export const ref = helpers.ref;