@7365admin1/core 3.52.6-staging.252 → 3.52.6

package/CHANGELOG.md

@@ -1,5 +1,33 @@
 # @iservice365/core
 
+## 3.52.6
+
+### Patch Changes
+
+- 3c13b1f: Spreadsheet vehicle import is fail-closed. `bulkUpsertVehicles` wrote every row to the database whatever the ANPR cameras answered, so an imported blocklist plate that no camera accepted was saved as blocked while the car still opened the barrier. Rows are now run through the shared `sweepExpiredVehicles` decision — every camera must confirm — and only confirmed rows are saved; the rest are rolled back off any camera that did take them and returned in `failedRows` with the camera and the reason.
+- 33d649a: Fix the expired-vehicle sweep never matching a genuine expiry
+
+  `vehicles.end` is written as a BSON Date, but both `getAllExpiredVehicles` and
+  `deleteExpiredVehicles` compared it against `new Date().toISOString()` - a
+  String. String sorts before Date in BSON canonical type order, so a Date is
+  never `$lte` a String: the hourly cron has never selected a genuinely expired
+  vehicle, and a season pass that expired kept opening the barrier indefinitely.
+  Measured read-only on staging: the old query returned 0 rows while 3 vehicles
+  whose `end` had passed were still live.
+
+  The only rows it ever did match were the ones whose `end` was the string `""` -
+  no expiry at all - which is the opposite of the rule. Nine such rows were
+  deleted at one site in a single run on 2026-09-01.
+
+  Both queries now share `expiredVehicleSweepFilter(now)` in `vehicle.model.ts`,
+  which compares a Date with a Date and requires `$type: "date"`, so a blank or
+  missing expiry is never swept. `MVehicle` also no longer stores a blank expiry
+  as `""`: `value.end ?? expiredDate` kept the empty string because `??` only
+  falls through on null/undefined, which is where the non-Date values came from.
+  A blank expiry now takes the same createdAt + 10 years sentinel as a null one.
+
+  No backfill: existing rows are unchanged.
+
 ## 3.52.5
 
 ### Patch Changes

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@7365admin1/core",
   "license": "MIT",
-  "version": "3.52.6-staging.252",
+  "version": "3.52.6",
   "author": "7365admin1",
   "main": "dist/index.js",
   "module": "dist/index.mjs",

package/.changeset/bulk-upsert-fail-closed.md

@@ -1,5 +0,0 @@
----
-"@7365admin1/core": patch
----
-
-Spreadsheet vehicle import is fail-closed. `bulkUpsertVehicles` wrote every row to the database whatever the ANPR cameras answered, so an imported blocklist plate that no camera accepted was saved as blocked while the car still opened the barrier. Rows are now run through the shared `sweepExpiredVehicles` decision — every camera must confirm — and only confirmed rows are saved; the rest are rolled back off any camera that did take them and returned in `failedRows` with the camera and the reason.

package/.changeset/expired-vehicle-date-comparison.md

@@ -1,26 +0,0 @@
----
-"@7365admin1/core": patch
----
-
-Fix the expired-vehicle sweep never matching a genuine expiry
-
-`vehicles.end` is written as a BSON Date, but both `getAllExpiredVehicles` and
-`deleteExpiredVehicles` compared it against `new Date().toISOString()` - a
-String. String sorts before Date in BSON canonical type order, so a Date is
-never `$lte` a String: the hourly cron has never selected a genuinely expired
-vehicle, and a season pass that expired kept opening the barrier indefinitely.
-Measured read-only on staging: the old query returned 0 rows while 3 vehicles
-whose `end` had passed were still live.
-
-The only rows it ever did match were the ones whose `end` was the string `""` -
-no expiry at all - which is the opposite of the rule. Nine such rows were
-deleted at one site in a single run on 2026-09-01.
-
-Both queries now share `expiredVehicleSweepFilter(now)` in `vehicle.model.ts`,
-which compares a Date with a Date and requires `$type: "date"`, so a blank or
-missing expiry is never swept. `MVehicle` also no longer stores a blank expiry
-as `""`: `value.end ?? expiredDate` kept the empty string because `??` only
-falls through on null/undefined, which is where the non-Date values came from.
-A blank expiry now takes the same createdAt + 10 years sentinel as a null one.
-
-No backfill: existing rows are unchanged.