lambda-erp 0.6.23__tar.gz → 0.6.25__tar.gz

{lambda_erp-0.6.23 → lambda_erp-0.6.25}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: lambda-erp
-Version: 0.6.23
+Version: 0.6.25
 Summary: Core ERP logic - accounting, sales, purchasing, inventory
 Author: TORUS INVESTMENTS AG
 License-Expression: Apache-2.0

{lambda_erp-0.6.23 → lambda_erp-0.6.25}/api/auth.py

@@ -720,6 +720,46 @@ def update_settings(data: dict, user: dict = Depends(require_admin)):
     return settings
 
 
+@router.get("/my-settings")
+def get_my_settings(user: dict = Depends(get_current_user)):
+    """The CURRENT user's personal preferences as a {key: value} bag.
+
+    Distinct from the global, admin-only /settings above: this is scoped to the
+    caller and any authenticated user may read (and, via PUT, write) their OWN
+    row. Consumers so far: `columns.<doctype>` (personal list columns) and
+    `language`. Returns {} for a user who has set nothing.
+    """
+    db = get_db()
+    rows = db.sql('SELECT key, value FROM "User Preference" WHERE user_name = ?', [user["name"]])
+    return {r["key"]: r["value"] for r in rows}
+
+
+@router.put("/my-settings")
+def update_my_settings(data: dict, user: dict = Depends(get_current_user)):
+    """Merge-upsert the caller's OWN preferences (not admin-gated — a user owns
+    their prefs). Only rows with this user_name are ever touched, so one user can
+    never read or overwrite another's. Send only the keys you want to change."""
+    db = get_db()
+    uname = user["name"]
+    for key, value in data.items():
+        existing = db.sql(
+            'SELECT 1 FROM "User Preference" WHERE user_name = ? AND key = ?', [uname, key]
+        )
+        if existing:
+            db.sql(
+                'UPDATE "User Preference" SET value = ? WHERE user_name = ? AND key = ?',
+                [str(value), uname, key],
+            )
+        else:
+            db.sql(
+                'INSERT INTO "User Preference" (user_name, key, value) VALUES (?, ?, ?)',
+                [uname, key, str(value)],
+            )
+    db.conn.commit()
+    rows = db.sql('SELECT key, value FROM "User Preference" WHERE user_name = ?', [uname])
+    return {r["key"]: r["value"] for r in rows}
+
+
 # ---------------------------------------------------------------------------
 # Programmatic chat API — Bearer API keys
 # ---------------------------------------------------------------------------

{lambda_erp-0.6.23 → lambda_erp-0.6.25}/frontend/src/api/client.ts

@@ -464,6 +464,11 @@ export const api = {
   getSettings: () => request<Record<string, string>>("/auth/settings"),
   updateSettings: (data: Record<string, string>) =>
     request<Record<string, string>>("/auth/settings", { method: "PUT", body: JSON.stringify(data) }),
+  // Per-USER preferences (columns.<doctype>, language, …) — scoped to the caller,
+  // not admin-gated, unlike the global getSettings/updateSettings above.
+  getMySettings: () => request<Record<string, string>>("/auth/my-settings"),
+  updateMySettings: (data: Record<string, string>) =>
+    request<Record<string, string>>("/auth/my-settings", { method: "PUT", body: JSON.stringify(data) }),
   getApiKeys: () =>
     request<Array<{
       id: string; name: string; user?: string; role: string; key_prefix: string;

{lambda_erp-0.6.23 → lambda_erp-0.6.25}/lambda_erp/database.py

@@ -1348,6 +1348,17 @@ class Database:
                 value TEXT
             )""",
 
+            # Per-USER preferences — distinct from the global admin-only Settings
+            # above. A key->value bag scoped to one User; any authenticated user
+            # reads/writes ONLY their own rows via /auth/my-settings (not admin).
+            # Consumers: `columns.<doctype>` (personal list columns), `language`.
+            """CREATE TABLE IF NOT EXISTS "User Preference" (
+                user_name TEXT NOT NULL,
+                key TEXT NOT NULL,
+                value TEXT,
+                PRIMARY KEY (user_name, key)
+            )""",
+
             # Bearer API keys for the programmatic chat API (off by default via
             # the `chat_api_enabled` Settings flag). Tokens are stored hashed
             # (sha256); `key_prefix` is a display-only fragment. `role` bounds the

{lambda_erp-0.6.23 → lambda_erp-0.6.25}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "lambda-erp"
-version = "0.6.23"
+version = "0.6.25"
 description = "Core ERP logic - accounting, sales, purchasing, inventory"
 readme = "README.md"
 license = "Apache-2.0"