shutro-erp 0.3.5 → 0.3.7

package/dist/attendance/routes.js

@@ -0,0 +1,266 @@
+/**
+ * Attendance's routes (RFC 0024 §2.2):
+ *
+ * - `GET  /api/v1/attendance/me`                   the user's employee, whether checked in and since when, today's day
+ * - `POST /api/v1/attendance/punch`                `{ latitude?, longitude? }`: the user checks in or out from the
+ *                                                  phone — inside a site's radius where its geofence is on
+ * - `GET  /api/v1/attendance/kiosk/people`         kiosks: the people who check in there (names only)
+ * - `POST /api/v1/attendance/kiosk/punch`          kiosks: `{ badge }` or `{ employee, pin }`; five wrong PINs lock
+ *                                                  the person at the kiosks for 15 minutes
+ * - `POST /api/v1/attendance/employees/:id/pin`    managers: `{ pin }` (4 to 8 digits), stored hashed
+ * - `POST /api/v1/attendance/import`               managers: `{ format: 'zkteco' | 'csv', content }`
+ * - `POST /api/v1/attendance/days/compute`         managers: `{ from, to, employees? }`
+ * - `GET  /api/v1/attendance/formats`              the device file formats
+ */
+import { audit, HttpProblem, hashPassword, verifyPassword } from '../server/index.js';
+import { orm } from '../server/orm.js';
+import { DEVICE_FORMATS, distanceMetres, importPunches, localDate, punch, recomputeDays, timeZoneOf, } from './days.js';
+const DATE = /^\d{4}-\d{2}-\d{2}$/;
+const LOCK_AFTER = 5;
+const LOCK_MS = 15 * 60_000;
+/** Wrong PINs per employee at the kiosks of this node: `{ count, until }`. */
+const failures = new Map();
+const isManager = (env) => env.administrator || env.groups.has('attendance.manager');
+const asProblem = (error) => {
+    if (error instanceof orm.ValidationError)
+        throw new HttpProblem(422, 'invalid', 'Not possible', error.message);
+    throw error;
+};
+export function registerAttendanceRoutes({ app }) {
+    const managers = (env) => {
+        if (!isManager(env))
+            throw new HttpProblem(403, 'access', 'Attendance managers', 'This needs the Attendance manager role.');
+    };
+    /** The user's own employee. @throws {HttpProblem} 404 without one */
+    const ownEmployee = async (su, uid) => {
+        const [e] = await (await su.model('hr.employee').search({ where: { user: uid }, limit: 1 })).load({ company: true });
+        if (e === undefined)
+            throw new HttpProblem(404, 'no-employee', 'Not an employee', 'Ask HR to add you as an employee.');
+        return e;
+    };
+    app.get('/api/v1/attendance/me', async (request) => request.env(async (raw) => {
+        const env = raw;
+        return env.asSuperuser({ reason: 'own attendance' }, async (su) => {
+            const e = await ownEmployee(su, env.uid);
+            const [open] = await (await su
+                .model('attendance.record')
+                .search({ where: { employee: e.id, checkOut: { isNull: true } }, limit: 1 })).load(['checkIn']);
+            const tz = await timeZoneOf(su);
+            const [today] = await (await su
+                .model('attendance.day')
+                .search({ where: { employee: e.id, date: localDate(new Date(), tz) }, limit: 1 })).load(['status', 'workedHours', 'lateMinutes', 'overtimeHours']);
+            return {
+                employee: { id: e.id, name: e.name },
+                checkedInSince: open === undefined ? null : open.checkIn.toISOString(),
+                today: today === undefined
+                    ? null
+                    : {
+                        status: today.status,
+                        workedHours: today.workedHours.toString(),
+                        lateMinutes: today.lateMinutes,
+                        overtimeHours: today.overtimeHours.toString(),
+                    },
+            };
+        });
+    }, { write: true }));
+    app.post('/api/v1/attendance/punch', async (request) => {
+        const body = (request.body ?? {});
+        const lat = typeof body['latitude'] === 'number' ? body['latitude'] : null;
+        const lon = typeof body['longitude'] === 'number' ? body['longitude'] : null;
+        if ((lat === null) !== (lon === null) ||
+            (lat !== null && (Math.abs(lat) > 90 || Math.abs(lon) > 180)))
+            throw new HttpProblem(422, 'invalid-location', 'Invalid location', 'Send latitude and longitude together.');
+        return request.env(async (raw) => {
+            const env = raw;
+            if (!env.administrator && !env.groups.has('attendance.user'))
+                throw new HttpProblem(403, 'access', 'Attendance', 'This needs access to Attendance.');
+            return env.asSuperuser({ reason: 'check in from the phone' }, async (su) => {
+                const e = await ownEmployee(su, env.uid);
+                // The nearest site with coordinates; its geofence decides.
+                const sites = [
+                    ...(await (await su.model('attendance.site').search({
+                        where: { company: e.company.id, latitude: { isNull: false } },
+                    })).load(['latitude', 'longitude', 'radius', 'geofence', 'name'])),
+                ];
+                let site = null;
+                let inside = null;
+                let distance = null;
+                if (sites.length > 0) {
+                    const fenced = sites.some((s) => s.geofence);
+                    if (lat === null || lon === null) {
+                        if (fenced)
+                            throw new HttpProblem(422, 'location-needed', 'Location needed', 'Allow the location so the check-in is on site.');
+                    }
+                    else {
+                        const measured = sites
+                            .map((s) => ({
+                            s,
+                            d: distanceMetres({ lat, lon }, { lat: Number(s.latitude), lon: Number(s.longitude) }),
+                        }))
+                            .sort((a, b) => a.d - b.d);
+                        const nearest = measured[0];
+                        site = nearest.s.id;
+                        distance = nearest.d;
+                        inside = nearest.d <= nearest.s.radius;
+                        if (!inside && nearest.s.geofence)
+                            throw new HttpProblem(422, 'outside-site', 'Not on site', `You are ${nearest.d} m from ${nearest.s.name}; check in within ${nearest.s.radius} m.`);
+                    }
+                }
+                const out = await punch(su, e.id, new Date(), {
+                    source: 'phone',
+                    site,
+                    inside,
+                    distance,
+                }).catch(asProblem);
+                return out;
+            });
+        }, { write: true });
+    });
+    app.get('/api/v1/attendance/kiosk/people', async (request) => request.env(async (raw) => {
+        const env = raw;
+        if (!env.administrator && !env.groups.has('attendance.kiosk') && !isManager(env))
+            throw new HttpProblem(403, 'access', 'Kiosk', 'This needs the kiosk role.');
+        return env.asSuperuser({ reason: 'kiosk people' }, async (su) => ({
+            people: [
+                ...(await (await su.model('hr.employee').search({
+                    where: { company: env.companyId, attendancePin: { isNull: false } },
+                })).load(['name'])),
+            ]
+                .map((e) => ({ id: e.id, name: e.name }))
+                .sort((a, b) => a.name.localeCompare(b.name)),
+        }));
+    }, { write: true }));
+    app.post('/api/v1/attendance/kiosk/punch', async (request) => {
+        const body = (request.body ?? {});
+        const badge = typeof body['badge'] === 'string' ? body['badge'].trim() : '';
+        const pin = typeof body['pin'] === 'string' ? body['pin'] : '';
+        const employee = Number(body['employee']);
+        const site = body['site'] === undefined || body['site'] === null ? null : Number(body['site']);
+        if (badge === '' && (!Number.isSafeInteger(employee) || pin === ''))
+            throw new HttpProblem(422, 'who', 'Who is it?', 'Scan the badge, or choose your name and type your PIN.');
+        return request.env(async (raw) => {
+            const env = raw;
+            if (!env.administrator && !env.groups.has('attendance.kiosk') && !isManager(env))
+                throw new HttpProblem(403, 'access', 'Kiosk', 'This needs the kiosk role.');
+            return env.asSuperuser({ reason: 'kiosk check-in' }, async (su) => {
+                let who;
+                if (badge !== '') {
+                    const [e] = await (await su.model('hr.employee').search({
+                        where: { attendanceBadge: badge, company: env.companyId },
+                        limit: 1,
+                    })).load(['name']);
+                    if (e === undefined)
+                        throw new HttpProblem(404, 'unknown-badge', 'Unknown badge', 'This badge belongs to nobody here.');
+                    who = { id: e.id, name: e.name };
+                }
+                else {
+                    const lock = failures.get(employee);
+                    if (lock !== undefined && lock.until > Date.now())
+                        throw new HttpProblem(429, 'locked', 'Locked', 'Too many wrong PINs: try again in 15 minutes.');
+                    const [e] = await (await su.model('hr.employee').search({
+                        where: { id: employee, company: env.companyId },
+                        limit: 1,
+                    })).load(['name', 'attendancePin']);
+                    const ok = e?.attendancePin != null && (await verifyPassword(pin, e.attendancePin));
+                    if (e === undefined || !ok) {
+                        const count = (lock?.until ?? 0) > Date.now() ? 0 : (lock?.count ?? 0) + 1;
+                        failures.set(employee, {
+                            count: count >= LOCK_AFTER ? 0 : count,
+                            until: count >= LOCK_AFTER ? Date.now() + LOCK_MS : 0,
+                        });
+                        await audit(env, {
+                            kind: 'attendance.kiosk_pin_failed',
+                            summary: `A wrong kiosk PIN for employee ${employee}.`,
+                            targetModel: 'hr.employee',
+                            targetId: employee,
+                            ip: request.ip,
+                        });
+                        throw new HttpProblem(401, 'wrong-pin', 'Wrong PIN', 'The PIN does not match.');
+                    }
+                    failures.delete(employee);
+                    who = { id: e.id, name: e.name };
+                }
+                const out = await punch(su, who.id, new Date(), { source: 'kiosk', site }).catch(asProblem);
+                return { ...out, employee: who };
+            });
+        }, { write: true });
+    });
+    app.post('/api/v1/attendance/employees/:id/pin', async (request) => {
+        const id = Number(request.params.id);
+        const pin = request.body?.['pin'];
+        if (typeof pin !== 'string' || !/^\d{4,8}$/.test(pin))
+            throw new HttpProblem(422, 'invalid-pin', 'Invalid PIN', 'A PIN is 4 to 8 digits.');
+        return request.env(async (raw) => {
+            const env = raw;
+            managers(env);
+            const hashed = await hashPassword(pin);
+            return env.asSuperuser({ reason: 'kiosk PIN' }, async (su) => {
+                const found = await su
+                    .model('hr.employee')
+                    .search({ where: { id: id }, limit: 1 });
+                if (found.length === 0)
+                    throw new HttpProblem(404, 'missing-record', 'Not found', `There is no employee ${id}.`);
+                await found.write({ attendancePin: hashed });
+                await audit(env, {
+                    kind: 'attendance.pin_set',
+                    summary: `Kiosk PIN set for employee ${id}.`,
+                    targetModel: 'hr.employee',
+                    targetId: id,
+                    ip: request.ip,
+                });
+                await su.flush();
+                return { id, pin: true };
+            });
+        }, { write: true });
+    });
+    app.get('/api/v1/attendance/formats', async () => ({
+        formats: DEVICE_FORMATS.map((f) => ({ key: f.key, label: f.label })),
+    }));
+    app.post('/api/v1/attendance/import', async (request) => {
+        const body = (request.body ?? {});
+        const format = DEVICE_FORMATS.find((f) => f.key === body['format']);
+        const content = body['content'];
+        if (format === undefined || typeof content !== 'string' || content.length > 5_000_000)
+            throw new HttpProblem(422, 'invalid-file', 'Invalid file', `Give the format (${DEVICE_FORMATS.map((f) => f.key).join(', ')}) and the file's text.`);
+        const punches = format.parse(content);
+        return request.env(async (raw) => {
+            const env = raw;
+            managers(env);
+            return env.asSuperuser({ reason: 'device import' }, async (su) => {
+                const result = await importPunches(su, punches).catch(asProblem);
+                await audit(env, {
+                    kind: 'attendance.imported',
+                    summary: `${result.imported} punches imported from a ${format.label} file.`,
+                    details: { ...result },
+                    ip: request.ip,
+                });
+                return { read: punches.length, ...result };
+            });
+        }, { write: true });
+    });
+    app.post('/api/v1/attendance/days/compute', async (request) => {
+        const body = (request.body ?? {});
+        const from = body['from'];
+        const to = body['to'];
+        if (typeof from !== 'string' ||
+            typeof to !== 'string' ||
+            !DATE.test(from) ||
+            !DATE.test(to) ||
+            to < from)
+            throw new HttpProblem(422, 'invalid-dates', 'Invalid dates', 'Give from and to as YYYY-MM-DD, in order.');
+        if (Date.parse(to) - Date.parse(from) > 92 * 86_400_000)
+            throw new HttpProblem(422, 'too-long', 'Too long', 'Compute at most three months at a time.');
+        return request.env(async (raw) => {
+            const env = raw;
+            managers(env);
+            return env.asSuperuser({ reason: 'attendance days' }, async (su) => {
+                const ids = Array.isArray(body['employees'])
+                    ? body['employees'].map(Number)
+                    : (await su.model('hr.employee').search({ where: { company: env.companyId } })).ids.map(Number);
+                const written = await recomputeDays(su, ids, from, to);
+                await su.flush();
+                return { written };
+            });
+        }, { write: true });
+    });
+}

package/dist/attendance/web/Check.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Check in from the phone (RFC 0024 §2.2): one large button that checks in, or out when checked in. The phone's
+ * location goes with it when the browser gives it; the server decides whether it is on site (the site's geofence)
+ * and keeps only inside or outside and the distance. Today's worked hours and lateness under it.
+ */
+import { type PageProps } from '../../ui/index.js';
+import type { ReactElement } from 'react';
+export declare function Check({ api }: PageProps): ReactElement;

package/dist/attendance/web/Check.js

@@ -0,0 +1,40 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Check in from the phone (RFC 0024 §2.2): one large button that checks in, or out when checked in. The phone's
+ * location goes with it when the browser gives it; the server decides whether it is on site (the site's geofence)
+ * and keeps only inside or outside and the distance. Today's worked hours and lateness under it.
+ */
+import { Alert, Button, Spinner, useKosh } from '../../ui/index.js';
+import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query';
+import { useTranslation } from 'react-i18next';
+/** The phone's position, or nothing when the browser has none or it is refused (the server then decides). */
+function position() {
+    if (typeof navigator === 'undefined' || navigator.geolocation === undefined)
+        return Promise.resolve(null);
+    return new Promise((resolve) => navigator.geolocation.getCurrentPosition((p) => resolve({ latitude: p.coords.latitude, longitude: p.coords.longitude }), () => resolve(null), { enableHighAccuracy: true, timeout: 10_000, maximumAge: 30_000 }));
+}
+export function Check({ api }) {
+    const { t } = useTranslation('attendance');
+    const { format } = useKosh();
+    const queryClient = useQueryClient();
+    const me = useQuery({
+        queryKey: ['attendance', 'me'],
+        queryFn: () => api.call('GET', '/api/v1/attendance/me'),
+        retry: false,
+    });
+    const tap = useMutation({
+        mutationFn: async () => {
+            const where = await position();
+            return api.call('POST', '/api/v1/attendance/punch', where ?? {});
+        },
+        onSuccess: () => void queryClient.invalidateQueries({ queryKey: ['attendance', 'me'] }),
+    });
+    if (me.isPending)
+        return _jsx(Spinner, { label: t('loading') });
+    if (me.error !== null)
+        return _jsx(Alert, { tone: "danger", children: me.error.message });
+    const since = me.data.checkedInSince;
+    return (_jsxs("div", { className: "mx-auto grid max-w-md gap-6 p-4 text-center", children: [_jsxs("div", { children: [_jsx("h1", { className: "text-xl font-semibold", children: me.data.employee.name }), _jsx("p", { role: "status", className: "text-sm text-muted-foreground", children: since === null ? t('notIn') : t('inSince', { time: format.datetime(since) }) })] }), _jsx(Button, { variant: "primary", className: "h-32 text-2xl", busy: tap.isPending, onClick: () => tap.mutate(), children: since === null ? t('checkIn') : t('checkOut') }), tap.error === null ? null : _jsx(Alert, { tone: "danger", children: tap.error.message }), tap.data === undefined ? null : (_jsx("p", { className: "text-sm", children: t(tap.data.action === 'in' ? 'doneIn' : 'doneOut', {
+                    time: format.datetime(tap.data.at),
+                }) })), me.data.today === null ? null : (_jsxs("dl", { className: "grid grid-cols-3 gap-2 rounded-lg border p-3 text-sm", children: [_jsxs("div", { children: [_jsx("dt", { className: "text-muted-foreground", children: t('worked') }), _jsx("dd", { className: "font-semibold tabular-nums", children: me.data.today.workedHours })] }), _jsxs("div", { children: [_jsx("dt", { className: "text-muted-foreground", children: t('late') }), _jsx("dd", { className: "font-semibold tabular-nums", children: me.data.today.lateMinutes })] }), _jsxs("div", { children: [_jsx("dt", { className: "text-muted-foreground", children: t('overtime') }), _jsx("dd", { className: "font-semibold tabular-nums", children: me.data.today.overtimeHours })] })] })), _jsx("p", { className: "text-xs text-muted-foreground", children: t('locationNote') })] }));
+}

package/dist/attendance/web/Kiosk.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The kiosk (RFC 0024 §2.2): a tablet at the gate, signed in with the kiosk role. A badge scanned into the box (a
+ * scanner types its code and Enter), or a name chosen and a PIN typed on the pad, checks the person in or out;
+ * the screen greets them and clears itself after a few seconds. Five wrong PINs lock the person for 15 minutes.
+ */
+import { type PageProps } from '../../ui/index.js';
+import { type ReactElement } from 'react';
+export declare function Kiosk({ api }: PageProps): ReactElement;

package/dist/attendance/web/Kiosk.js

@@ -0,0 +1,62 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * The kiosk (RFC 0024 §2.2): a tablet at the gate, signed in with the kiosk role. A badge scanned into the box (a
+ * scanner types its code and Enter), or a name chosen and a PIN typed on the pad, checks the person in or out;
+ * the screen greets them and clears itself after a few seconds. Five wrong PINs lock the person for 15 minutes.
+ */
+import { Alert, Button, Input } from '../../ui/index.js';
+import { useMutation, useQuery } from '@tanstack/react-query';
+import { useEffect, useRef, useState } from 'react';
+import { useTranslation } from 'react-i18next';
+const KEYS = ['1', '2', '3', '4', '5', '6', '7', '8', '9', '⌫', '0', '✓'];
+export function Kiosk({ api }) {
+    const { t } = useTranslation('attendance');
+    const people = useQuery({
+        queryKey: ['attendance', 'kiosk', 'people'],
+        queryFn: () => api
+            .call('GET', '/api/v1/attendance/kiosk/people')
+            .then((r) => r.people),
+    });
+    const [badge, setBadge] = useState('');
+    const [person, setPerson] = useState(null);
+    const [pin, setPin] = useState('');
+    const box = useRef(null);
+    const punch = useMutation({
+        mutationFn: (body) => api.call('POST', '/api/v1/attendance/kiosk/punch', body),
+        onSettled: () => {
+            setBadge('');
+            setPin('');
+            setPerson(null);
+        },
+    });
+    // The greeting clears itself; the badge box keeps the focus for the next scan.
+    useEffect(() => {
+        if (punch.data === undefined && punch.error === null)
+            return;
+        const timer = window.setTimeout(() => {
+            punch.reset();
+            box.current?.focus();
+        }, 4000);
+        return () => window.clearTimeout(timer);
+    }, [punch]);
+    const press = (key) => {
+        if (key === '⌫')
+            setPin((p) => p.slice(0, -1));
+        else if (key === '✓') {
+            if (person !== null && pin.length >= 4)
+                punch.mutate({ employee: person.id, pin });
+        }
+        else if (pin.length < 8)
+            setPin((p) => p + key);
+    };
+    return (_jsxs("div", { className: "mx-auto grid max-w-2xl gap-6 p-4", children: [_jsx("h1", { className: "text-center text-2xl font-semibold", children: t('kioskTitle') }), punch.data === undefined ? null : (_jsx("p", { role: "status", className: "rounded-lg bg-success/10 p-6 text-center text-xl font-semibold", children: t(punch.data.action === 'in' ? 'welcome' : 'goodbye', {
+                    name: punch.data.employee.name,
+                }) })), punch.error === null ? null : _jsx(Alert, { tone: "danger", children: punch.error.message }), _jsx("form", { onSubmit: (e) => {
+                    e.preventDefault();
+                    if (badge.trim() !== '')
+                        punch.mutate({ badge: badge.trim() });
+                }, children: _jsx(Input, { ref: box, autoFocus: true, "aria-label": t('badge'), placeholder: t('badgeHint'), value: badge, onChange: (e) => setBadge(e.target.value), className: "h-12 text-center text-lg" }) }), _jsxs("div", { className: "grid gap-4 md:grid-cols-2", children: [_jsx("nav", { "aria-label": t('people'), className: "max-h-80 overflow-y-auto rounded-lg border", children: _jsx("ul", { children: (people.data ?? []).map((p) => (_jsx("li", { children: _jsx("button", { type: "button", "aria-pressed": person?.id === p.id, onClick: () => {
+                                        setPerson(p);
+                                        setPin('');
+                                    }, className: `w-full px-3 py-2 text-start hover:bg-muted ${person?.id === p.id ? 'bg-accent text-accent-foreground' : ''}`, children: p.name }) }, p.id))) }) }), _jsxs("div", { className: "grid gap-2", children: [_jsx("p", { "aria-live": "polite", className: "text-center text-sm text-muted-foreground", children: person === null ? t('choose') : t('pinFor', { name: person.name }) }), _jsx("output", { "aria-label": t('pin'), className: "h-10 text-center text-2xl tracking-[0.5em]", children: '•'.repeat(pin.length) }), _jsx("div", { className: "grid grid-cols-3 gap-2", children: KEYS.map((k) => (_jsx(Button, { variant: k === '✓' ? 'primary' : 'secondary', className: "h-14 text-xl", "aria-label": k === '⌫' ? t('erase') : k === '✓' ? t('enter') : k, disabled: person === null || punch.isPending, onClick: () => press(k), children: k }, k))) })] })] })] }));
+}

package/dist/attendance/web/PinButton.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Set the kiosk PIN on an employee's form (RFC 0024 §2.2), placed by a view extension. Shown to those who may read
+ * the person's attendance details (Attendance managers); the PIN goes to the server, which stores only its hash.
+ */
+import { type NodeComponentProps } from '../../ui/index.js';
+import { type ReactElement } from 'react';
+export declare function PinButton({ record, api }: NodeComponentProps): ReactElement | null;

package/dist/attendance/web/PinButton.js

@@ -0,0 +1,29 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * Set the kiosk PIN on an employee's form (RFC 0024 §2.2), placed by a view extension. Shown to those who may read
+ * the person's attendance details (Attendance managers); the PIN goes to the server, which stores only its hash.
+ */
+import { Alert, Button, Dialog, Input, Label } from '../../ui/index.js';
+import { useMutation } from '@tanstack/react-query';
+import { useId, useState } from 'react';
+import { useTranslation } from 'react-i18next';
+export function PinButton({ record, api }) {
+    const { t } = useTranslation('attendance');
+    const id = useId();
+    const [open, setOpen] = useState(false);
+    const [pin, setPin] = useState('');
+    const save = useMutation({
+        mutationFn: () => api.call('POST', `/api/v1/attendance/employees/${String(record?.['id'])}/pin`, { pin }),
+        onSuccess: () => {
+            setPin('');
+            setOpen(false);
+        },
+    });
+    // The badge is readable by Attendance managers only: without it, nothing to set here.
+    if (record === null || typeof record['id'] !== 'number' || !('attendanceBadge' in record))
+        return null;
+    return (_jsxs("div", { className: "flex items-center gap-2", children: [_jsx(Button, { size: "sm", variant: "secondary", onClick: () => setOpen(true), children: t('setPin') }), save.isSuccess ? (_jsx("span", { className: "text-sm text-muted-foreground", children: t('pinSaved') })) : null, _jsx(Dialog, { open: open, onOpenChange: setOpen, title: t('setPin'), description: t('pinHelp'), children: _jsxs("form", { className: "grid gap-3", onSubmit: (e) => {
+                        e.preventDefault();
+                        save.mutate();
+                    }, children: [_jsx(Label, { htmlFor: id, children: t('newPin') }), _jsx(Input, { id: id, inputMode: "numeric", autoComplete: "off", pattern: "[0-9]{4,8}", value: pin, onChange: (e) => setPin(e.target.value.replace(/\D/g, '').slice(0, 8)) }), save.error === null ? null : _jsx(Alert, { tone: "danger", children: save.error.message }), _jsx(Button, { type: "submit", variant: "primary", busy: save.isPending, disabled: pin.length < 4, children: t('savePin') })] }) })] }));
+}

package/dist/attendance/web/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * @packageDocumentation
+ * The web contribution of `shutro-erp/attendance`: the phone check-in page, the kiosk and the PIN on employee forms.
+ */
+import { type Registry } from '../../ui/index.js';
+import type { i18n } from 'i18next';
+import { messages } from './messages.js';
+export { Check } from './Check.js';
+export { Kiosk } from './Kiosk.js';
+export { PinButton } from './PinButton.js';
+/** Registers the pages (and the messages in `i18n`, when given). */
+export declare function registerAttendanceWeb(registry: Registry, i18n?: i18n): Registry;
+export { messages as attendanceMessages };

package/dist/attendance/web/index.js

@@ -0,0 +1,22 @@
+/**
+ * @packageDocumentation
+ * The web contribution of `shutro-erp/attendance`: the phone check-in page, the kiosk and the PIN on employee forms.
+ */
+import { addMessages } from '../../ui/index.js';
+import { Check } from './Check.js';
+import { Kiosk } from './Kiosk.js';
+import { messages } from './messages.js';
+import { PinButton } from './PinButton.js';
+export { Check } from './Check.js';
+export { Kiosk } from './Kiosk.js';
+export { PinButton } from './PinButton.js';
+/** Registers the pages (and the messages in `i18n`, when given). */
+export function registerAttendanceWeb(registry, i18n) {
+    registry.registerPage('attendance.Check', Check);
+    registry.registerPage('attendance.Kiosk', Kiosk);
+    registry.registerComponent('attendance.Pin', PinButton);
+    if (i18n !== undefined)
+        addMessages(i18n, 'attendance', messages);
+    return registry;
+}
+export { messages as attendanceMessages };

package/dist/attendance/web/messages.d.ts

@@ -0,0 +1,2 @@
+/** Messages of the Attendance pages (namespace `attendance`), in English and Bangla. */
+export declare const messages: Readonly<Record<string, object>>;

package/dist/attendance/web/messages.js

@@ -0,0 +1,61 @@
+/** Messages of the Attendance pages (namespace `attendance`), in English and Bangla. */
+export const messages = {
+    en: {
+        loading: 'Loading…',
+        notIn: 'Not checked in.',
+        inSince: 'Checked in since {{time}}.',
+        checkIn: 'Check in',
+        checkOut: 'Check out',
+        doneIn: 'Checked in at {{time}}.',
+        doneOut: 'Checked out at {{time}}.',
+        worked: 'Worked today (h)',
+        late: 'Late (min)',
+        overtime: 'Overtime (h)',
+        locationNote: 'Your location goes with the check-in so the server can tell whether you are on site; only “inside” or “outside” and the distance are kept.',
+        kioskTitle: 'Check in or out',
+        badge: 'Badge',
+        badgeHint: 'Scan your badge',
+        people: 'People',
+        choose: 'Or choose your name, then type your PIN',
+        pinFor: 'PIN for {{name}}',
+        pin: 'PIN',
+        erase: 'Erase',
+        enter: 'Enter',
+        welcome: 'Welcome, {{name}}! Checked in.',
+        goodbye: 'Goodbye, {{name}}! Checked out.',
+        setPin: 'Set the kiosk PIN',
+        pinHelp: 'Four to eight digits, typed at the kiosk with the person’s name. Only its hash is kept.',
+        newPin: 'New PIN',
+        savePin: 'Save the PIN',
+        pinSaved: 'PIN saved.',
+    },
+    bn: {
+        loading: 'লোড হচ্ছে…',
+        notIn: 'চেক-ইন করা হয়নি।',
+        inSince: '{{time}} থেকে চেক-ইন করা আছে।',
+        checkIn: 'চেক-ইন',
+        checkOut: 'চেক-আউট',
+        doneIn: '{{time}}-এ চেক-ইন হয়েছে।',
+        doneOut: '{{time}}-এ চেক-আউট হয়েছে।',
+        worked: 'আজ কাজ (ঘণ্টা)',
+        late: 'দেরি (মিনিট)',
+        overtime: 'ওভারটাইম (ঘণ্টা)',
+        locationNote: 'আপনি অফিসে আছেন কি না তা যাচাই করতে চেক-ইনের সাথে আপনার অবস্থান যায়; শুধু “ভেতরে” বা “বাইরে” এবং দূরত্ব রাখা হয়।',
+        kioskTitle: 'চেক-ইন বা চেক-আউট',
+        badge: 'ব্যাজ',
+        badgeHint: 'আপনার ব্যাজ স্ক্যান করুন',
+        people: 'কর্মী',
+        choose: 'অথবা আপনার নাম বেছে নিয়ে পিন দিন',
+        pinFor: '{{name}}-এর পিন',
+        pin: 'পিন',
+        erase: 'মুছুন',
+        enter: 'নিশ্চিত',
+        welcome: 'স্বাগতম, {{name}}! চেক-ইন হয়েছে।',
+        goodbye: 'বিদায়, {{name}}! চেক-আউট হয়েছে।',
+        setPin: 'কিয়স্ক পিন দিন',
+        pinHelp: 'চার থেকে আট অঙ্ক, কিয়স্কে নামের সাথে দিতে হয়। শুধু এর হ্যাশ রাখা হয়।',
+        newPin: 'নতুন পিন',
+        savePin: 'পিন সংরক্ষণ করুন',
+        pinSaved: 'পিন সংরক্ষিত।',
+    },
+};

package/dist/automation/engine.js

@@ -476,7 +476,7 @@ async function scopeFor(context, rule, change, depth) {
                 : change.uid
             : (rule.runAsUser ?? null);
     const actorName = async (id) => context.shutro.bootstrap({ reason: 'automation actor' }, async (su) => {
-        const [u] = await rows(su, 'res.users', { id, active: { in: [true, false] } }, ['name']);
+        const [u] = await rows(su.withFlags({ activeTest: false }), 'res.users', { id }, ['name']);
         return String(u?.['name'] ?? '');
     });
     if ((rule.runAs === 'system' || change.timed !== undefined) && uid === null)

package/dist/calendar/.kosh/bindings.js

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: ea3894a43dbbf85d
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 8ba76e6f1fdbe5e8
 // Bindings of module `calendar`: import the definition API from here to get types scoped to what it can see.
 export { defineModel, defineModule, extendModel, f, replace } from '../../server/orm.js';
 import { definitions } from '../../server/orm.js';

package/dist/calendar/.kosh/schema.d.ts

@@ -1,4 +1,4 @@
-// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: ea3894a43dbbf85d
+// GENERATED by `pnpm generate:models` (Shutro’s generator). Do not edit. definitions-hash: 8ba76e6f1fdbe5e8
 // Schema view of module `calendar` (RFC 0002 §7.7): the models it owns or depends on, with the extensions it can see.
 import type { F } from '../../server/orm.js';
 
@@ -699,6 +699,7 @@ export interface ResPartner {
     readonly parent: F.Many2one<'res.partner'>;
     readonly contacts: F.One2many<'res.partner', { readonly required: true }>;
     readonly email: F.Char;
+    readonly lang: F.Selection<'en' | 'bn'>;
     readonly phone: F.Char;
     readonly mobile: F.Char;
     readonly website: F.Char;

package/dist/calendar/i18n/bn.d.ts

@@ -0,0 +1,2 @@
+/** Bangla for the module's labels, keyed by their English text (RFC 0023 §3.1; `pnpm i18n:extract`). */
+export declare const bn: Readonly<Record<string, string>>;