lambda-erp 0.1.12__tar.gz → 0.1.14__tar.gz

{lambda_erp-0.1.12 → lambda_erp-0.1.14}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: lambda-erp
-Version: 0.1.12
+Version: 0.1.14
 Summary: Core ERP logic - accounting, sales, purchasing, inventory
 Author: TORUS INVESTMENTS AG
 License-Expression: MIT

{lambda_erp-0.1.12 → lambda_erp-0.1.14}/api/auth.py

@@ -244,10 +244,23 @@ def require_non_public_manager(user: dict = Depends(get_current_user)) -> dict:
 
 @router.get("/setup-status")
 def auth_setup_status():
-    """Public: check if any users exist (for first-run detection)."""
+    """Public: first-run detection + whether registration is open.
+
+    - first_run: no users yet — the next registrant becomes the admin.
+    - public_signup: the admin has enabled open self-registration (as viewer).
+    - registration_open: registration without an invite is possible at all
+      (first_run OR public_signup) — the signup form keys off this.
+    """
     db = get_db()
     count = db.sql('SELECT COUNT(*) as cnt FROM "User"')[0]["cnt"]
-    return {"has_users": count > 0, "registration_open": count == 0}
+    first_run = count == 0
+    public_signup = _setting_enabled(db, "allow_public_signup")
+    return {
+        "has_users": count > 0,
+        "first_run": first_run,
+        "public_signup": public_signup,
+        "registration_open": first_run or public_signup,
+    }
 
 
 @router.post("/register")
@@ -263,11 +276,10 @@ def register(data: RegisterRequest, request: Request, response: Response):
     user_count = db.sql('SELECT COUNT(*) as cnt FROM "User"')[0]["cnt"]
 
     if user_count == 0:
+        # First user bootstraps the instance as admin.
         role = "admin"
-    else:
-        if not data.invite_token:
-            raise HTTPException(status_code=403, detail="Registration requires an invite")
-
+    elif data.invite_token:
+        # Invite-only registration: the invite is bound to an email and a role.
         rows = db.sql('SELECT token, email, role, used FROM "Invite" WHERE token = ?', [data.invite_token])
         invite = rows[0] if rows else None
         if not invite:
@@ -280,6 +292,11 @@ def register(data: RegisterRequest, request: Request, response: Response):
         role = validate_assignable_role(invite["role"])
         db.sql('UPDATE "Invite" SET used = 1 WHERE token = ?', [data.invite_token])
         db.conn.commit()
+    elif _setting_enabled(db, "allow_public_signup"):
+        # Open signup is enabled: anyone may self-register, but only as a viewer.
+        role = "viewer"
+    else:
+        raise HTTPException(status_code=403, detail="Registration requires an invite")
 
     user_name = f"USR-{uuid.uuid4().hex[:8]}"
     db.insert("User", {
@@ -401,6 +418,20 @@ def list_invites(user: dict = Depends(require_admin)):
     return [dict(r) for r in rows]
 
 
+@router.delete("/invites/{token}")
+def revoke_invite(token: str, user: dict = Depends(require_admin)):
+    """Revoke a pending (unused) invite so its link no longer works."""
+    db = get_db()
+    rows = db.sql('SELECT token, used FROM "Invite" WHERE token = ?', [token])
+    if not rows:
+        raise HTTPException(status_code=404, detail="Invite not found")
+    if rows[0]["used"]:
+        raise HTTPException(status_code=409, detail="Invite already used")
+    db.sql('DELETE FROM "Invite" WHERE token = ?', [token])
+    db.conn.commit()
+    return {"ok": True}
+
+
 @router.post("/public-manager")
 def create_public_manager(user: dict = Depends(require_admin)):
     """Create (or re-enable) the public manager account for demo mode.
@@ -477,9 +508,19 @@ def get_public_manager_status():
 DEFAULTS = {
     "pdf_page_size": "A4",
     "opening_balances_enabled": "1",
+    # When "1", anyone may self-register (as viewer) without an invite. Default
+    # off: after the first user (admin), registration is invite-only.
+    "allow_public_signup": "0",
 }
 
 
+def _setting_enabled(db, key: str) -> bool:
+    """Read a boolean Settings flag, honoring DEFAULTS for unset keys."""
+    rows = db.sql('SELECT value FROM "Settings" WHERE key = ?', [key])
+    value = rows[0]["value"] if rows else DEFAULTS.get(key)
+    return str(value) == "1"
+
+
 @router.get("/settings")
 def get_settings(user: dict = Depends(get_current_user)):
     db = get_db()

{lambda_erp-0.1.12 → lambda_erp-0.1.14}/api/pdf.py

@@ -37,6 +37,22 @@ def register_pdf_template_dir(path: str) -> None:
         _plugin_template_dirs.insert(0, path)
         _jinja_env.loader = _build_loader()
 
+
+_pdf_context_providers = []
+
+
+def register_pdf_context(fn) -> None:
+    """Register a provider that augments the PDF render context.
+
+    `fn(doctype, name, context)` is called just before rendering with the
+    assembled context (doc, company_info, party_info, currency, items, …) and
+    may return a dict of EXTRA keys to merge in — e.g. a computed Swiss QR-bill
+    image for invoices. Lets a deployment add per-document content the template
+    can't compute itself. Exceptions are swallowed so a buggy provider can't
+    break PDF generation.
+    """
+    _pdf_context_providers.append(fn)
+
 # Document type → (title, party_field, party_name_field, party_doctype, party_label)
 DOC_CONFIG = {
     "Quotation":        ("Quotation",        "customer", "customer_name", "Customer", "Customer"),
@@ -114,7 +130,7 @@ def generate_pdf(doctype_slug: str, name: str) -> bytes:
     company_info = {}
     if company_id:
         row = db.get_value("Company", company_id,
-                           ["company_name", "email", "phone", "address", "city", "zip_code", "country", "tax_id"])
+                           ["company_name", "email", "phone", "address", "city", "zip_code", "country", "tax_id", "iban"])
         if row:
             company_info = _get_dict(row)
             # Show the company's CURRENT display name from the master.
@@ -164,7 +180,7 @@ def generate_pdf(doctype_slug: str, name: str) -> bytes:
     # plugin's branded override) can reference sibling assets — logo.png, fonts,
     # CSS — by relative path. Falls back to the built-in templates dir.
     base_url = template.filename or os.path.join(TEMPLATE_DIR, "document.html")
-    html_str = template.render(
+    context = dict(
         doc=doc,
         title=title,
         company_name=company_name,
@@ -180,4 +196,16 @@ def generate_pdf(doctype_slug: str, name: str) -> bytes:
         page_size=page_size,
     )
 
+    # Let deployment plugins augment the context (e.g. a Swiss QR-bill image for
+    # invoices). A provider that raises must not break PDF generation.
+    for provider in _pdf_context_providers:
+        try:
+            extra = provider(doctype, name, context)
+            if extra:
+                context.update(extra)
+        except Exception:
+            pass
+
+    html_str = template.render(**context)
+
     return HTML(string=html_str, base_url=base_url).write_pdf()

{lambda_erp-0.1.12 → lambda_erp-0.1.14}/api/routers/admin.py

@@ -36,7 +36,7 @@ def _window_totals(now: float, seconds: int) -> dict:
     totals = db.conn.execute(
         'SELECT '
         '  COALESCE(SUM(cost_usd), 0) AS total_usd, '
-        '  COALESCE(SUM(CASE WHEN role = "public_manager" THEN cost_usd ELSE 0 END), 0) AS demo_usd, '
+        '  COALESCE(SUM(CASE WHEN role = \'public_manager\' THEN cost_usd ELSE 0 END), 0) AS demo_usd, '
         '  COALESCE(SUM(prompt_tokens), 0) AS prompt_tokens, '
         '  COALESCE(SUM(completion_tokens), 0) AS completion_tokens, '
         '  COUNT(*) AS call_count, '

{lambda_erp-0.1.12 → lambda_erp-0.1.14}/frontend/src/api/client.ts

@@ -353,7 +353,13 @@ export const api = {
     request<any>("/setup/opening-balances/invoices", { method: "POST", body: JSON.stringify(data) }),
 
   // Auth
-  authSetupStatus: () => request<{ has_users: boolean; registration_open: boolean }>("/auth/setup-status"),
+  authSetupStatus: () =>
+    request<{
+      has_users: boolean;
+      first_run: boolean;
+      public_signup: boolean;
+      registration_open: boolean;
+    }>("/auth/setup-status"),
   authRegister: (data: { email: string; full_name: string; password: string; invite_token?: string }) =>
     request<any>("/auth/register", { method: "POST", body: JSON.stringify(data) }),
   authLogin: (email: string, password: string) =>
@@ -368,6 +374,8 @@ export const api = {
   authDisableUser: (userName: string) =>
     request<any>(`/auth/users/${encodeURIComponent(userName)}`, { method: "DELETE" }),
   authListInvites: () => request<any[]>("/auth/invites"),
+  authRevokeInvite: (token: string) =>
+    request<any>(`/auth/invites/${encodeURIComponent(token)}`, { method: "DELETE" }),
   getPublicManagerStatus: () => request<{ active: boolean; user?: any }>("/auth/public-manager"),
   createPublicManager: () => request<any>("/auth/public-manager", { method: "POST" }),
   removePublicManager: () => request<any>("/auth/public-manager", { method: "DELETE" }),

{lambda_erp-0.1.12 → lambda_erp-0.1.14}/lambda_erp/database.py

@@ -270,6 +270,7 @@ class Database:
                 zip_code TEXT,
                 country TEXT,
                 tax_id TEXT,
+                iban TEXT,
                 default_cost_center TEXT,
                 round_off_account TEXT,
                 round_off_cost_center TEXT,
@@ -1707,6 +1708,11 @@ def _m013_unrealized_exchange_account(db: "Database") -> None:
         )
 
 
+def _m014_company_iban(db: "Database") -> None:
+    """Add Company.iban (bank account for payment instructions / QR-bills)."""
+    db._add_column_if_missing("Company", "iban", "TEXT")
+
+
 Database.MIGRATIONS = [
     (1, "chat_message_session_id", _m001_chat_message_session_id),
     (2, "chat_session_user_id", _m002_chat_session_user_id),
@@ -1721,6 +1727,7 @@ Database.MIGRATIONS = [
     (11, "payment_entry_currency", _m011_payment_entry_currency),
     (12, "exchange_gain_loss_account", _m012_exchange_gain_loss_account),
     (13, "unrealized_exchange_account", _m013_unrealized_exchange_account),
+    (14, "company_iban", _m014_company_iban),
 ]
 
 

{lambda_erp-0.1.12 → lambda_erp-0.1.14}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "lambda-erp"
-version = "0.1.12"
+version = "0.1.14"
 description = "Core ERP logic - accounting, sales, purchasing, inventory"
 readme = "README.md"
 license = "MIT"