@7365admin1/layer-common 3.2.8-staging.205 → 3.2.8-staging.207

package/components/HidUserEnrollment.vue

@@ -62,13 +62,13 @@
             v-model="selectedReaderId"
             class="reader-select"
             :items="readerOptions"
-            @update:model-value="loadUsers"
+            @update:model-value="reloadUsersFromFirstPage"
           />
           <AppField
             v-model="search"
             search
             placeholder="Search"
-            @keyup.enter="loadUsers"
+            @keyup.enter="reloadUsersFromFirstPage"
           />
           <AppSelect
             v-if="!props.cardManagement"
@@ -76,7 +76,7 @@
             :items="statusOptions"
             placeholder="Status"
             clearable
-            @update:model-value="loadUsers"
+            @update:model-value="reloadUsersFromFirstPage"
           />
         </div>
       </template>
@@ -239,6 +239,24 @@
             klass="mb-3"
           />
 
+          <div class="field-label">Link To <span>*</span></div>
+          <AppSelect
+            v-model="form.subjectCategory"
+            :items="subjectCategoryOptions"
+            placeholder="Select person type"
+            klass="mb-3"
+            @update:model-value="onSubjectCategoryChanged"
+          />
+
+          <div class="field-label">Resident / Staff / Provider <span>*</span></div>
+          <AppSelect
+            v-model="form.subjectId"
+            :items="subjectOptions"
+            :loading="loadingSubjects"
+            placeholder="Select an existing site record"
+            klass="mb-3"
+          />
+
           <div class="field-label">ID</div>
           <AppField v-model="form.hidUserId" aria-label="ID" readonly klass="mb-3" />
 
@@ -400,15 +418,30 @@
             No physical HID card is assigned to this user.
           </v-alert>
 
-          <div class="field-label">Card data type</div>
-          <AppSelect
-            v-model="cardForm.cardType"
-            :items="physicalCardTypeOptions"
+          <div class="field-label">Reader card data mode</div>
+          <v-alert
+            :type="cardProfileConfigured ? 'info' : 'warning'"
+            variant="tonal"
+            density="compact"
             class="mb-3"
-          />
+          >
+            {{ cardProfileLabel }}
+          </v-alert>
           <p class="field-hint hid-card-type-hint">
             PACS uses Facility Code + Card Number. CSN uses the raw serial number read from the physical card.
           </p>
+          <template v-if="hybridCardProfile">
+            <div class="field-label mt-3">Presented Card Type</div>
+            <AppSelect
+              v-model="cardForm.cardType"
+              :items="hybridCardTypeOptions"
+              aria-label="Presented Card Type"
+              class="mb-3"
+            />
+            <p class="field-hint hid-card-type-hint">
+              Choose MIFARE CSN for a MIFARE card. Choose PACS for any other card in this reader mode.
+            </p>
+          </template>
           <p class="field-hint hid-card-access-hint">
             The card uses this HID user's existing portal and access rules; assigning a card does not grant new access.
           </p>
@@ -453,14 +486,14 @@
           <div class="hid-card-actions mt-4">
             <AppButton
               variant="secondary"
-              :disabled="savingCard || enrollingCard"
+              :disabled="savingCard || enrollingCard || !cardProfileConfigured"
               @click="assignPhysicalCard"
             >
               Assign Manually
             </AppButton>
             <AppButton
               icon="mdi-contactless-payment"
-              :disabled="savingCard || enrollingCard"
+              :disabled="savingCard || enrollingCard || !cardProfileConfigured"
               @click="enrollPhysicalCard"
             >
               Read at Reader
@@ -534,6 +567,7 @@ const props = defineProps({
 const {
   getReaders,
   getIdentities,
+  getReaderUsers,
   getUserImage,
   setUserImage,
   deleteUserImage,
@@ -549,10 +583,70 @@ const {
   createIdentity,
   updateIdentity,
   deleteIdentity,
+  getPermissionCandidates,
 } = useHidAmico();
 
-const readers = ref<Record<string, any>[]>([]);
-const users = ref<Record<string, any>[]>([]);
+type HidMetadata = Record<string, unknown> & {
+  name?: string;
+  block?: string;
+  level?: string;
+  unit?: string;
+  unitLabel?: string;
+  photo?: string;
+  facialData?: string;
+  imageTimestamp?: string;
+  lastAccessAt?: string;
+  facialScores?: Record<string, unknown>;
+  pinEnrolled?: boolean;
+  hidPhysicalCards?: HidCard[];
+};
+
+type HidReader = Record<string, unknown> & {
+  _id: string;
+  name?: string;
+  deviceId?: string;
+  portalName?: string;
+  portalId?: string;
+  cardReadingMode?: string;
+  pacsFormat?: string;
+  csnByteOrder?: string;
+};
+
+type HidUser = Record<string, unknown> & {
+  _id?: string;
+  _rowKey?: string;
+  reader?: string;
+  hidUserId?: string | number;
+  rawHidUserId?: string | number;
+  registration?: string;
+  cardNo?: string;
+  name?: string;
+  metadata?: HidMetadata;
+  isAdministrator?: boolean;
+  person?: string;
+  user?: string;
+  member?: string;
+  serviceProvider?: string;
+  visitor?: string;
+};
+
+type HidCard = Record<string, unknown> & {
+  id?: string | number;
+  cardType?: "pacs" | "csn";
+  facilityCode?: string | number;
+  cardNumber?: string | number;
+  value?: string | number;
+  source?: "reader" | "manual" | "device";
+};
+
+type HidIdentityPayload = Record<string, unknown> & {
+  hidUserId: string;
+  registration: string;
+  metadata: HidMetadata;
+};
+
+const readers = ref<HidReader[]>([]);
+const users = ref<HidUser[]>([]);
 const userImages = ref<Record<string, string>>({});
 const administratorUserIds = ref<Set<number>>(new Set());
 const selectedReaderId = ref("");
@@ -570,10 +664,10 @@ const formDialog = ref(false);
 const viewDialog = ref(false);
 const deleteDialog = ref(false);
 const cardDialog = ref(false);
-const selectedUser = ref<Record<string, any> | null>(null);
-const cardUser = ref<Record<string, any> | null>(null);
-const physicalCards = ref<Record<string, any>[]>([]);
-const physicalCardsByUserId = ref<Record<string, Record<string, any>[]>>({});
+const selectedUser = ref<HidUser | null>(null);
+const cardUser = ref<HidUser | null>(null);
+const physicalCards = ref<HidCard[]>([]);
+const physicalCardsByUserId = ref<Record<string, HidCard[]>>({});
 const loadingCards = ref(false);
 const savingCard = ref(false);
 const enrollingCard = ref(false);
@@ -603,8 +697,24 @@ const form = reactive({
   isAdministrator: false,
   accessPin: "",
   photoPreview: "",
+  subjectCategory: "resident" as THidPermissionCategory,
+  subjectId: "",
 });
 
+const route = useRoute();
+const orgId = computed(() => String(route.params.org || ""));
+const permissionCandidates = ref<THidPermissionCandidate[]>([]);
+const loadingSubjects = ref(false);
+const subjectCategoryOptions = [
+  { title: "Resident", value: "resident" },
+  { title: "Property management", value: "property_management" },
+  { title: "Service provider", value: "service_provider" },
+];
+const subjectOptions = computed(() => permissionCandidates.value.map((candidate) => ({
+  title: candidate.subtitle ? `${candidate.name} · ${candidate.subtitle}` : candidate.name,
+  value: candidate.subjectId,
+})));
+
 const cardForm = reactive({
   cardType: "pacs" as "pacs" | "csn",
   facilityCode: "",
@@ -612,10 +722,27 @@ const cardForm = reactive({
   cardValue: "",
 });
 
-const physicalCardTypeOptions = [
-  { title: "PACS (Facility Code + Card Number)", value: "pacs" },
-  { title: "CSN (Raw Card Serial Number)", value: "csn" },
+const cardReader = computed(() => {
+  const readerId = String(cardUser.value?.reader || selectedReaderId.value || "");
+  return readers.value.find((reader) => String(reader._id) === readerId) || null;
+});
+const cardProfileConfigured = computed(() => ["pacs", "csn", "csn_for_mifare"].includes(
+  String(cardReader.value?.cardReadingMode || ""),
+));
+const hybridCardProfile = computed(() => cardReader.value?.cardReadingMode === "csn_for_mifare");
+const hybridCardTypeOptions = [
+  { title: "MIFARE card (CSN)", value: "csn" },
+  { title: "Other card (PACS)", value: "pacs" },
 ];
+const cardProfileLabel = computed(() => {
+  const mode = String(cardReader.value?.cardReadingMode || "unconfigured");
+  if (mode === "pacs") return `PACS · ${(cardReader.value?.pacsFormat || "raw").toUpperCase()}`;
+  if (mode === "csn") return `CSN · ${(cardReader.value?.csnByteOrder || "msb").toUpperCase()} first`;
+  if (mode === "csn_for_mifare") {
+    return `PACS for non-MIFARE cards · CSN for MIFARE (${(cardReader.value?.csnByteOrder || "msb").toUpperCase()} first)`;
+  }
+  return "Configure the card data mode on the HID Reader screen before assigning a card.";
+});
 
 const statusOptions = ["Mapped", "Unmapped"];
 
@@ -655,6 +782,11 @@ function goToPage(next: number) {
   loadUsers();
 }
 
+function reloadUsersFromFirstPage() {
+  page.value = 1;
+  loadUsers();
+}
+
 const readerOptions = computed(() =>
   readers.value.map((reader) => ({
     title: `${reader.name || reader.deviceId || reader._id} — ${reader.portalName || "Portal not configured"}`,
@@ -687,8 +819,12 @@ async function init() {
 async function loadReaders() {
   if (!props.site) return;
   const response = await getReaders({ site: props.site, page: 1, limit: 100 });
-  readers.value =
-    response?.items ?? response?.data?.items ?? response?.data?.readers ?? [];
+  const responseRecord = toRecord(response);
+  const responseData = toRecord(responseRecord.data);
+  const items = responseRecord.items ?? responseData.items ?? responseData.readers ?? [];
+  readers.value = (Array.isArray(items) ? items : [])
+    .map(toHidReader)
+    .filter((reader): reader is HidReader => reader !== null);
   if (!selectedReaderId.value && readers.value.length) {
     selectedReaderId.value = readers.value[0]._id;
   }
@@ -704,44 +840,26 @@ async function loadUsers() {
 
   loading.value = true;
   try {
-    const identityQuery: Record<string, any> = {
-      page: 1,
-      limit: 500,
-    };
-
-    const [identityResponse, readerResponse, roleResponse] = await Promise.all([
-      getIdentities(selectedReaderId.value, identityQuery),
-      runObjectOperation(selectedReaderId.value, {
-        operation: "load",
-        object: "users",
-        limit: 500,
-        offset: 0,
-      }),
-      loadAdministratorRoles(selectedReaderId.value),
-    ]);
-
-    const identities =
-      identityResponse?.items ??
-      identityResponse?.data?.items ??
-      identityResponse?.data?.identities ??
-      [];
-    administratorUserIds.value = getAdministratorRoleUserIds(roleResponse);
-    const readerUsers = normalizeHidUsers(readerResponse).filter(
-      (user) => Number(user.userTypeId) !== 1,
-    );
-    const mergedUsers = mergeReaderUsersWithIdentities(readerUsers, identities).map(
-      (user) => ({
-        ...user,
-        isAdministrator: hasAdministratorRule(user),
-      }),
+    const response = await getReaderUsers(selectedReaderId.value, {
+      page: page.value,
+      limit: limit.value,
+      search: search.value.trim(),
+      status: status.value.toLowerCase() as "mapped" | "unmapped" | "",
+    });
+    const responseRecord = toRecord(response);
+    const responseData = toRecord(responseRecord.data);
+    const responseItems = responseRecord.items ?? responseData.items ?? [];
+    const pageItems = (Array.isArray(responseItems) ? responseItems : []).map(toHidUser);
+    administratorUserIds.value = new Set(
+      pageItems
+        .filter((user) => user.isAdministrator === true)
+        .map((user) => toHidNumericId(user.hidUserId))
+        .filter((userId: number | undefined): userId is number => Boolean(userId)),
     );
-    const filteredUsers = filterUsers(mergedUsers);
-    total.value = filteredUsers.length;
-    pages.value = Math.max(1, Math.ceil(total.value / limit.value));
-    if (page.value > pages.value) page.value = pages.value;
-    const start = (page.value - 1) * limit.value;
-    users.value = filteredUsers.slice(start, start + limit.value);
-    serverPageRange.value = "";
+    users.value = pageItems;
+    total.value = Number(responseRecord.total ?? responseData.total ?? users.value.length);
+    pages.value = Number(responseRecord.pages ?? responseData.pages ?? 1);
+    serverPageRange.value = String(responseRecord.pageRange ?? responseData.pageRange ?? "");
     if (props.cardManagement) {
       await loadVisibleUserCards(users.value);
     } else {
@@ -761,7 +879,7 @@ async function loadUsers() {
   }
 }
 
-async function loadUserImages(items: Record<string, any>[]) {
+async function loadUserImages(items: HidUser[]) {
   if (!selectedReaderId.value) return;
 
   await Promise.all(
@@ -799,6 +917,34 @@ function resetForm() {
   form.photoPreview = "";
   selectedPhotoFile.value = null;
   removePhotoRequested.value = false;
+  form.subjectCategory = "resident";
+  form.subjectId = "";
+}
+
+async function loadSubjectCandidates() {
+  const readerId = form.reader || selectedReaderId.value;
+  if (!readerId || !orgId.value) {
+    permissionCandidates.value = [];
+    return;
+  }
+  loadingSubjects.value = true;
+  try {
+    const response = await getPermissionCandidates(props.site, {
+      orgId: orgId.value,
+      readerId,
+      category: form.subjectCategory,
+      page: 1,
+      limit: 500,
+    });
+    permissionCandidates.value = response.items || [];
+  } finally {
+    loadingSubjects.value = false;
+  }
+}
+
+async function onSubjectCategoryChanged() {
+  form.subjectId = "";
+  await loadSubjectCandidates();
 }
 
 async function openEnroll() {
@@ -810,10 +956,11 @@ async function openEnroll() {
   ]);
   form.hidUserId = hidUserId;
   form.registration = registration;
+  await loadSubjectCandidates();
   formDialog.value = true;
 }
 
-async function openEdit(user: Record<string, any>) {
+async function openEdit(user: HidUser) {
   selectedUser.value = user;
   form.reader = String(user.reader ?? selectedReaderId.value);
   form.block = user.metadata?.block ?? "";
@@ -827,6 +974,13 @@ async function openEdit(user: Record<string, any>) {
   pinEnrolled.value = Boolean(user.metadata?.pinEnrolled);
   removePinRequested.value = false;
   form.photoPreview = getUserImageSrc(user);
+  form.subjectCategory = user.person
+    ? "resident"
+    : user.serviceProvider
+      ? "service_provider"
+      : "property_management";
+  form.subjectId = String(user.person || user.member || user.serviceProvider || "");
+  await loadSubjectCandidates();
   selectedPhotoFile.value = null;
   removePhotoRequested.value = false;
   formDialog.value = true;
@@ -849,12 +1003,12 @@ async function openEdit(user: Record<string, any>) {
   }
 }
 
-function openView(user: Record<string, any>) {
+function openView(user: HidUser) {
   selectedUser.value = user;
   viewDialog.value = true;
 }
 
-function openDelete(user: Record<string, any>) {
+function openDelete(user: HidUser) {
   selectedUser.value = user;
   deleteDialog.value = true;
 }
@@ -903,8 +1057,8 @@ function onPhotoChange(event: Event) {
     showToast("Facial enrollment only accepts JPG or PNG images.", "error");
     return;
   }
-  if (file.size > 2 * 1024 * 1024) {
-    showToast("Facial enrollment images must be smaller than 2 MB.", "error");
+  if (file.size >= 1024 * 1024) {
+    showToast("Facial enrollment images must be smaller than 1 MB.", "error");
     return;
   }
 
@@ -920,7 +1074,7 @@ function onPhotoChange(event: Event) {
 async function saveUser() {
   const readerId =
     selectedReaderId.value || form.reader || readers.value[0]?._id;
-  if (!readerId || !form.name || !form.hidUserId || !form.registration) {
+  if (!readerId || !form.name || !form.hidUserId || !form.registration || !form.subjectId) {
     showToast("Please complete the required HID user fields.", "error");
     return;
   }
@@ -934,6 +1088,7 @@ async function saveUser() {
   }
 
   saving.value = true;
+  let newlyCreatedHidUserId: number | undefined;
   try {
     const hidUser = toHidUserObject({
       hidUserId: form.hidUserId,
@@ -948,7 +1103,14 @@ async function saveUser() {
     const payload = {
       hidUserId: String(hidUser.id),
       registration: form.registration,
-      type: (selectedUser.value?.type || "resident") as
+      person: form.subjectCategory === "resident" ? form.subjectId : "",
+      member: form.subjectCategory === "property_management" ? form.subjectId : "",
+      serviceProvider: form.subjectCategory === "service_provider" ? form.subjectId : "",
+      type: (form.subjectCategory === "resident"
+        ? "resident"
+        : form.subjectCategory === "service_provider"
+          ? "contractor"
+          : form.isAdministrator ? "admin" : "staff") as
         | "resident"
         | "staff"
         | "contractor"
@@ -963,7 +1125,6 @@ async function saveUser() {
         unit: form.unit,
         unitLabel: buildUnitLabel(),
         facialData: form.photoPreview ? form.hidUserId : "",
-        photo: form.photoPreview,
         imageTimestamp: selectedUser.value?.metadata?.imageTimestamp || "",
         facialScores: selectedUser.value?.metadata?.facialScores || {},
         pinEnrolled: pinEnrolled.value,
@@ -983,7 +1144,8 @@ async function saveUser() {
         await saveIdentityOnReader(readerId, payload);
       }
     } else {
-      await createHidUserOnReader(readerId, hidUser);
+      const created = await createHidUserOnReader(readerId, hidUser);
+      if (created) newlyCreatedHidUserId = hidUser.id;
       await syncHidUserRole(readerId, hidUser.id, form.isAdministrator);
       const facialResult = await syncFacialImage(readerId, hidUser.id);
       applyFacialResult(payload.metadata, facialResult);
@@ -999,7 +1161,18 @@ async function saveUser() {
         ? "HID user updated on reader."
         : "HID user enrolled on reader."
     );
-  } catch (error: any) {
+  } catch (error: unknown) {
+    if (newlyCreatedHidUserId) {
+      try {
+        await runObjectOperation(readerId, {
+          operation: "destroy",
+          object: "users",
+          where: { users: { id: newlyCreatedHidUserId } },
+        });
+      } catch (rollbackError) {
+        console.error("Unable to roll back the partially enrolled HID user:", rollbackError);
+      }
+    }
     console.error("Unable to save HID user:", error);
     showToast(getHidErrorMessage(error), "error");
   } finally {
@@ -1094,7 +1267,7 @@ async function deleteUser() {
     deleteDialog.value = false;
     await loadUsers();
     showToast("HID user deleted from reader.");
-  } catch (error: any) {
+  } catch (error: unknown) {
     console.error("Unable to delete HID user:", error);
     showToast(getHidErrorMessage(error), "error");
   } finally {
@@ -1104,7 +1277,7 @@ async function deleteUser() {
 
 async function saveIdentityOnReader(
   readerId: string,
-  payload: Record<string, any>
+  payload: HidIdentityPayload,
 ) {
   const existingIdentity = await findExistingIdentityOnReader(
     readerId,
@@ -1117,7 +1290,7 @@ async function saveIdentityOnReader(
 
   try {
     await createIdentity(readerId, { ...payload, site: props.site });
-  } catch (error: any) {
+  } catch (error: unknown) {
     const message = getHidErrorMessage(error);
     if (!message.toLowerCase().includes("already exists")) throw error;
 
@@ -1132,24 +1305,23 @@ async function saveIdentityOnReader(
 
 async function findExistingIdentityOnReader(
   readerId: string,
-  payload: Record<string, any>
+  payload: HidIdentityPayload,
 ) {
   const response = await getIdentities(readerId, {
     page: 1,
     limit: 500,
     search: payload.hidUserId || payload.registration || payload.cardNo || "",
   });
-  const identities =
-    response?.items ??
-    response?.data?.items ??
-    response?.data?.identities ??
-    [];
+  const responseRecord = toRecord(response);
+  const responseData = toRecord(responseRecord.data);
+  const responseItems = responseRecord.items ?? responseData.items ?? responseData.identities ?? [];
+  const identities = (Array.isArray(responseItems) ? responseItems : []).map(toHidUser);
   const hidUserId = String(payload.hidUserId || "");
   const registration = String(payload.registration || "");
   const cardNo = String(payload.cardNo || "");
 
   return identities.find(
-    (identity: Record<string, any>) =>
+    (identity) =>
       String(identity.hidUserId || "") === hidUserId ||
       Boolean(
         registration && String(identity.registration || "") === registration
@@ -1160,12 +1332,12 @@ async function findExistingIdentityOnReader(
 
 async function createHidUserOnReader(
   readerId: string,
-  user: Record<string, any>
+  user: { id?: number; name: string; registration: string },
 ) {
   const existing = await getHidUserFromReader(readerId, user.id);
   if (existing) {
     await updateHidUserOnReader(readerId, user);
-    return;
+    return false;
   }
 
   await runObjectOperation(readerId, {
@@ -1173,6 +1345,7 @@ async function createHidUserOnReader(
     object: "users",
     values: [user],
   });
+  return true;
 }
 
 async function getHidUserFromReader(readerId: string, id: unknown) {
@@ -1193,7 +1366,7 @@ async function getHidUserFromReader(readerId: string, id: unknown) {
 
 async function updateHidUserOnReader(
   readerId: string,
-  user: Record<string, any>
+  user: { id?: number; name: string; registration: string },
 ) {
   const { id, ...values } = user;
   await runObjectOperation(readerId, {
@@ -1210,7 +1383,7 @@ async function updateHidUserOnReader(
 
 async function deleteHidUserFromReader(
   readerId: string,
-  user: Record<string, any>
+  user: HidUser,
 ) {
   const id = toHidNumericId(user.hidUserId);
   if (!readerId || !id) return;
@@ -1299,36 +1472,7 @@ async function getHidUserRole(readerId: string, userId: number) {
   return Array.isArray(roles) ? roles[0] : undefined;
 }
 
-function loadAdministratorRoles(readerId: string) {
-  return runObjectOperation(readerId, {
-    operation: "load",
-    object: "user_roles",
-    where: {
-      user_roles: {
-        role: 1,
-      },
-    },
-    limit: 500,
-    offset: 0,
-  });
-}
-
-function getAdministratorRoleUserIds(response: Record<string, any> | null) {
-  const data = response?.data || response || {};
-  const roles =
-    data?.user_roles ||
-    data?.data?.user_roles ||
-    data?.result?.user_roles ||
-    [];
-
-  return new Set(
-    (Array.isArray(roles) ? roles : [])
-      .map((role) => toHidNumericId(role.user_id))
-      .filter((userId): userId is number => Boolean(userId))
-  );
-}
-
-function toHidUserObject(identity: Record<string, any>) {
+function toHidUserObject(identity: Pick<HidUser, "hidUserId" | "name" | "registration">) {
   return {
     id: toHidNumericId(identity.hidUserId),
     name:
@@ -1349,12 +1493,12 @@ function toHidNumericId(value: unknown) {
   return Number.isInteger(parsed) && parsed > 0 ? parsed : undefined;
 }
 
-function hasAdministratorRule(user?: Record<string, any> | null) {
+function hasAdministratorRule(user?: HidUser | null) {
   const hidUserId = toHidNumericId(user?.hidUserId);
   return Boolean(hidUserId && administratorUserIds.value.has(hidUserId));
 }
 
-async function loadVisibleUserCards(items: Record<string, any>[]) {
+async function loadVisibleUserCards(items: HidUser[]) {
   if (!selectedReaderId.value) return;
 
   const entries = await Promise.all(
@@ -1364,7 +1508,9 @@ async function loadVisibleUserCards(items: Record<string, any>[]) {
 
       try {
         const response = await getUserCards(selectedReaderId.value, hidUserId);
-        return [String(hidUserId), response?.data?.cards || []] as const;
+        const responseData = toRecord(toRecord(response).data);
+        const cards = responseData.cards;
+        return [String(hidUserId), (Array.isArray(cards) ? cards : []).map(toHidCard)] as const;
       } catch {
         return [String(hidUserId), []] as const;
       }
@@ -1376,14 +1522,15 @@ async function loadVisibleUserCards(items: Record<string, any>[]) {
   );
 }
 
-function getUserPhysicalCards(user: Record<string, any>) {
+function getUserPhysicalCards(user: HidUser) {
   const hidUserId = toHidNumericId(user.hidUserId);
   return hidUserId ? physicalCardsByUserId.value[String(hidUserId)] || [] : [];
 }
 
-async function openCardManager(user: Record<string, any>) {
+async function openCardManager(user: HidUser) {
   cardUser.value = user;
-  cardForm.cardType = "pacs";
+  const reader = readers.value.find((item) => String(item._id) === String(user.reader || selectedReaderId.value));
+  cardForm.cardType = reader?.cardReadingMode === "pacs" ? "pacs" : "csn";
   cardForm.facilityCode = "";
   cardForm.cardNumber = "";
   cardForm.cardValue = "";
@@ -1405,7 +1552,9 @@ async function loadPhysicalCards() {
   loadingCards.value = true;
   try {
     const response = await getUserCards(readerId, hidUserId);
-    physicalCards.value = response?.data?.cards || [];
+    const responseData = toRecord(toRecord(response).data);
+    const cards = responseData.cards;
+    physicalCards.value = (Array.isArray(cards) ? cards : []).map(toHidCard);
   } catch (error: unknown) {
     physicalCards.value = [];
     showToast(getHidErrorMessage(error), "error");
@@ -1414,17 +1563,17 @@ async function loadPhysicalCards() {
   }
 }
 
-function parsePhysicalCardInteger(value: string, label: string) {
+function parsePhysicalCardInteger(value: string, label: string, maximum: bigint) {
   if (!/^\d+$/.test(value.trim())) {
     showToast(`${label} must contain numbers only.`, "error");
     return null;
   }
-  const number = Number(value);
-  if (!Number.isSafeInteger(number) || number < 0) {
+  const normalized = value.trim();
+  if (BigInt(normalized) > maximum) {
     showToast(`${label} is outside the supported range.`, "error");
     return null;
   }
-  return number;
+  return normalized;
 }
 
 async function assignPhysicalCard() {
@@ -1432,20 +1581,20 @@ async function assignPhysicalCard() {
   if (!readerId || !hidUserId) return;
 
   let payload:
-    | { cardType: "pacs"; facilityCode: number; cardNumber: number }
+    | { cardType: "pacs"; facilityCode: string; cardNumber: string }
     | { cardType: "csn"; cardValue: string };
   if (cardForm.cardType === "pacs") {
-    const facilityCode = parsePhysicalCardInteger(cardForm.facilityCode, "Facility Code");
-    const cardNumber = parsePhysicalCardInteger(cardForm.cardNumber, "Card Number");
+    const facilityCode = parsePhysicalCardInteger(cardForm.facilityCode, "Facility Code", 4294967295n);
+    const cardNumber = parsePhysicalCardInteger(cardForm.cardNumber, "Card Number", 4294967295n);
     if (facilityCode === null || cardNumber === null) return;
     payload = { cardType: "pacs", facilityCode, cardNumber };
   } else {
-    const cardValue = parsePhysicalCardInteger(cardForm.cardValue, "CSN");
-    if (cardValue === null || cardValue <= 0) {
-      if (cardValue === 0) showToast("CSN must be greater than zero.", "error");
+    const cardValue = parsePhysicalCardInteger(cardForm.cardValue, "CSN", 18446744073709551615n);
+    if (cardValue === null || BigInt(cardValue) <= 0n) {
+      if (cardValue === "0") showToast("CSN must be greater than zero.", "error");
       return;
     }
-    payload = { cardType: "csn", cardValue: String(cardValue) };
+    payload = { cardType: "csn", cardValue };
   }
 
   savingCard.value = true;
@@ -1496,7 +1645,7 @@ async function cancelPhysicalCardEnrollment() {
   }
 }
 
-async function removePhysicalCard(card: Record<string, any>) {
+async function removePhysicalCard(card: HidCard) {
   if (!window.confirm(`Remove physical HID card ${formatPhysicalCard(card)}?`)) return;
   const { readerId, hidUserId } = getCardReaderAndUser();
   if (!readerId || !hidUserId || !card?.id) return;
@@ -1514,7 +1663,7 @@ async function removePhysicalCard(card: Record<string, any>) {
   }
 }
 
-function formatPhysicalCard(card: Record<string, any>) {
+function formatPhysicalCard(card: HidCard) {
   if (card?.cardType === "pacs") {
     return `PACS ${card.facilityCode}.${card.cardNumber}`;
   }
@@ -1522,7 +1671,7 @@ function formatPhysicalCard(card: Record<string, any>) {
   return `Card ${card?.value || "N/A"}`;
 }
 
-function getPhysicalCardSubtitle(card: Record<string, any>) {
+function getPhysicalCardSubtitle(card: HidCard) {
   const source = card?.source === "reader" ? "Read at reader" : card?.source === "manual" ? "Manual" : "On device";
   return `${source} - Raw value ${card?.value || "N/A"}`;
 }
@@ -1532,11 +1681,11 @@ function buildUnitLabel() {
   return parts.length ? `BLK ${parts.join("/")}` : "";
 }
 
-function getName(user?: Record<string, any> | null) {
+function getName(user?: HidUser | null) {
   return user?.metadata?.name || user?.name || "N/A";
 }
 
-function getUnit(user?: Record<string, any> | null) {
+function getUnit(user?: HidUser | null) {
   return (
     user?.metadata?.unitLabel ||
     [user?.metadata?.block, user?.metadata?.level, user?.metadata?.unit]
@@ -1546,7 +1695,7 @@ function getUnit(user?: Record<string, any> | null) {
   );
 }
 
-function getFacialData(user: Record<string, any>) {
+function getFacialData(user: HidUser) {
   return (
     user?.metadata?.facialData ||
     user?.metadata?.imageTimestamp ||
@@ -1554,7 +1703,7 @@ function getFacialData(user: Record<string, any>) {
   );
 }
 
-function getUserImageSrc(user: Record<string, any>) {
+function getUserImageSrc(user: HidUser) {
   const hidUserId = toHidNumericId(user?.hidUserId);
   return (
     user?.metadata?.photo ||
@@ -1621,39 +1770,41 @@ async function getExistingHidReaderUsers(fields?: string[]) {
   }
 }
 
-function normalizeHidUsers(response: Record<string, any>) {
-  const items =
-    response?.data?.users ||
-    response?.data?.data?.users ||
-    response?.users ||
-    [];
+function normalizeHidUsers(response: unknown): HidUser[] {
+  const responseRecord = toRecord(response);
+  const responseData = toRecord(responseRecord.data);
+  const nestedData = toRecord(responseData.data);
+  const items = responseData.users ?? nestedData.users ?? responseRecord.users ?? [];
 
   return Array.isArray(items)
-    ? items.map((user) => ({
+    ? items.map((value) => {
+        const user = toRecord(value);
+        return {
         _rowKey: `reader-${user.id}`,
         hidUserId: String(user.id || ""),
-        rawHidUserId: user.id,
-        registration: user.registration,
-        userTypeId: user.user_type_id,
-        cardNo: user.card_value || user.cardNo || "",
-        name: user.name,
+        rawHidUserId: toText(user.id),
+        registration: toText(user.registration),
+        userTypeId: toText(user.user_type_id),
+        cardNo: toText(user.card_value || user.cardNo),
+        name: toText(user.name),
         metadata: {
-          name: user.name,
+          name: toText(user.name),
           imageTimestamp: user.image_timestamp
             ? String(user.image_timestamp)
             : "",
           lastAccessAt: fromUnixSeconds(user.last_access),
           hidReaderSource: true,
         },
-      }))
+        };
+      })
     : [];
 }
 
 function mergeReaderUsersWithIdentities(
-  readerUsers: Record<string, any>[],
-  identities: Record<string, any>[]
+  readerUsers: HidUser[],
+  identities: HidUser[],
 ) {
-  const identityById = new Map<string, Record<string, any>>();
+  const identityById = new Map<string, HidUser>();
   identities.forEach((identity) => {
     const id = toHidNumericId(identity.hidUserId);
     if (id) identityById.set(String(id), identity);
@@ -1671,9 +1822,9 @@ function mergeReaderUsersWithIdentities(
       _rowKey: `mapped-${identity._id || readerUser.rawHidUserId}`,
       hidUserId: identity.hidUserId || readerUser.hidUserId,
       rawHidUserId: readerUser.rawHidUserId,
-      name: identity.metadata?.name || identity.name || readerUser.name,
-      registration: identity.registration || readerUser.registration,
-      cardNo: identity.cardNo || readerUser.cardNo,
+      name: identity.metadata?.name || identity.name || readerUser.name || "",
+      registration: identity.registration || readerUser.registration || "",
+      cardNo: identity.cardNo || readerUser.cardNo || "",
       metadata: {
         ...readerUser.metadata,
         ...identity.metadata,
@@ -1689,33 +1840,12 @@ function mergeReaderUsersWithIdentities(
   return merged;
 }
 
-function filterUsers(items: Record<string, any>[]) {
-  const searchText = search.value.trim().toLowerCase();
-  return items.filter((item) => {
-    const matchesSearch =
-      !searchText ||
-      [getName(item), item.hidUserId, item.registration, item.cardNo].some(
-        (value) =>
-          String(value || "")
-            .toLowerCase()
-            .includes(searchText)
-      );
-    const matchesStatus = !status.value || getMappingStatus(item) === status.value;
-    return matchesSearch && matchesStatus;
-  });
-}
-
-function getTotalFromPageRange(value: string) {
-  const match = value.match(/\bof\s+(\d+)$/i);
-  return match ? Number(match[1]) : undefined;
-}
-
-function getMappingStatus(user: Record<string, any>) {
+function getMappingStatus(user: HidUser) {
   return hasMappedRecord(user) ? "Mapped" : "Unmapped";
 }
 
-function hasMappedRecord(user: Record<string, any>) {
-  return Boolean(user?.person || user?.user || user?.member || user?.visitor);
+function hasMappedRecord(user: HidUser) {
+  return Boolean(user?.person || user?.user || user?.member || user?.serviceProvider || user?.visitor);
 }
 
 function formatDate(value?: string) {
@@ -1741,23 +1871,66 @@ function showToast(message: string, color = "success") {
   snackbar.show = true;
 }
 
-function getHidErrorMessage(error: any) {
-  const data =
-    error?.data ||
-    error?.response?._data ||
-    error?.response?.data ||
-    error?.cause?.data ||
-    error?.cause?.response?._data ||
-    {};
-
-  return String(
-    data?.message ||
-      data?.error ||
-      data?.statusMessage ||
-      error?.statusMessage ||
-      error?.message ||
-      "Unable to save HID user."
+function getHidErrorMessage(error: unknown) {
+  const errorRecord = toRecord(error);
+  const response = toRecord(errorRecord.response);
+  const cause = toRecord(errorRecord.cause);
+  const causeResponse = toRecord(cause.response);
+  const data = toRecord(
+    errorRecord.data || response._data || response.data || cause.data || causeResponse._data,
   );
+
+  return toText(
+    data.message || data.error || data.statusMessage || errorRecord.statusMessage || errorRecord.message,
+    "Unable to save HID user.",
+  );
+}
+
+function toRecord(value: unknown): Record<string, unknown> {
+  return typeof value === "object" && value !== null && !Array.isArray(value)
+    ? value as Record<string, unknown>
+    : {};
+}
+
+function toHidReader(value: unknown): HidReader | null {
+  const reader = toRecord(value);
+  const id = toText(reader._id);
+  return id ? { ...reader, _id: id } : null;
+}
+
+function toHidUser(value: unknown): HidUser {
+  const user = toRecord(value);
+  return {
+    ...user,
+    _id: toText(user._id) || undefined,
+    _rowKey: toText(user._rowKey) || undefined,
+    reader: toText(user.reader) || undefined,
+    hidUserId: toText(user.hidUserId) || undefined,
+    registration: toText(user.registration) || undefined,
+    cardNo: toText(user.cardNo) || undefined,
+    name: toText(user.name) || undefined,
+    metadata: toHidMetadata(user.metadata),
+    isAdministrator: user.isAdministrator === true,
+    person: toText(user.person) || undefined,
+    user: toText(user.user) || undefined,
+    member: toText(user.member) || undefined,
+    serviceProvider: toText(user.serviceProvider) || undefined,
+    visitor: toText(user.visitor) || undefined,
+  };
+}
+
+function toHidMetadata(value: unknown): HidMetadata {
+  return toRecord(value) as HidMetadata;
+}
+
+function toHidCard(value: unknown): HidCard {
+  const card = toRecord(value);
+  return {
+    ...card,
+    id: toText(card.id) || undefined,
+    cardType: card.cardType === "pacs" || card.cardType === "csn" ? card.cardType : undefined,
+    source: card.source === "reader" || card.source === "manual" || card.source === "device" ? card.source : undefined,
+  };
 }
 </script>