@7365admin1/layer-common 4.111.0 → 4.113.0

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @iservice365/layer-common
 
+## 4.113.0
+
+### Minor Changes
+
+- 92f08bca: Vehicle Mgmt: new "QR sticker" column (Linked / None / n of m) and an All / With sticker / Without sticker filter, shown only while the site's QR switch is on
+
+## 4.112.0
+
+### Minor Changes
+
+- 9350b17: Robots: "Open HERO Fleet Core" button (`RobotFleetCoreButton`, in the site robots header) for Super Admin and Property Management. Shown only when `GET /api/robots/fleet-core/session?check=1` answers 200; on click it opens a new tab, fetches the one-hour sign-in pass and points the tab at the console (`https://…/#token=…` only). Web only.
+
 ## 4.111.0
 
 ### Minor Changes
@@ -3080,11 +3092,11 @@ Monthly report: a month that had patrols opens the list of that month's patrol r
   `utils/console-tier.ts` + `composables/useConsoleTier.ts` mirror the server's
   own rule from two endpoints the console already calls, unprojected:
 
-                                                                                                                                                                                                                                                                                                                                                                                                GET /api/members/user/:user/app/admin    the Seven365 staff membership
-                                                                                                                                                                                                                                                                                                                                                                                                GET /api/roles/id/:role                  that membership's role document
+                                                                                                                                                                                                                                                                                                                                                                                                  GET /api/members/user/:user/app/admin    the Seven365 staff membership
+                                                                                                                                                                                                                                                                                                                                                                                                  GET /api/roles/id/:role                  that membership's role document
 
-                                                                                                                                                                                                                                                                                                                                                                                                owner  = member.type === "admin" && role.type === "admin" && role.default === true
-                                                                                                                                                                                                                                                                                                                                                                                                staff  = member.type === "admin" && role.type === "admin"
+                                                                                                                                                                                                                                                                                                                                                                                                  owner  = member.type === "admin" && role.type === "admin" && role.default === true
+                                                                                                                                                                                                                                                                                                                                                                                                  staff  = member.type === "admin" && role.type === "admin"
 
   `role.default` is the marker because it is the only property of a platform
   staff role no API caller can set - `role.controller.ts` validates create and

package/components/Robot/FleetCoreButton.vue

@@ -0,0 +1,48 @@
+<template>
+  <!--
+    "Open HERO Fleet Core" (web only, owner 2026-10-09: Super Admin + Property
+    Management). Shown only when the server says this account may open the
+    console (`?check=1` answered 200) - 404 where Fleet Core is not set up and
+    403 for everyone else keep it hidden. The pass is fetched on click only.
+  -->
+  <v-btn
+    v-if="available"
+    size="small"
+    variant="tonal"
+    color="primary"
+    prepend-icon="mdi-open-in-new"
+    :loading="opening"
+    @click="open"
+  >
+    Open HERO Fleet Core
+  </v-btn>
+  <span v-if="failed" class="hero-tag hero-tag--neutral" role="status">Could not open HERO Fleet Core. Try again.</span>
+</template>
+
+<script setup lang="ts">
+import { onMounted, ref } from "vue";
+import { openFleetCoreConsole } from "../../utils/robot-fleet-core";
+
+const { getFleetCoreSession } = useRobots();
+const available = ref(false);
+const opening = ref(false);
+const failed = ref(false);
+
+onMounted(async () => {
+  try {
+    available.value = (await getFleetCoreSession({ check: true }))?.available === true;
+  } catch {
+    available.value = false;
+  }
+});
+
+async function open() {
+  opening.value = true;
+  failed.value = false;
+  failed.value = !(await openFleetCoreConsole(
+    () => getFleetCoreSession(),
+    () => window.open("", "_blank") as any,
+  ));
+  opening.value = false;
+}
+</script>

package/components/Robot/SiteHeader.vue

@@ -35,6 +35,7 @@
     </div>
     <span class="hero-head__spacer" />
     <div class="hero-header__right">
+      <RobotFleetCoreButton />
       <RobotLiveIndicator :connected="connected" />
       <span class="hero-tag hero-tag--neutral">{{ role }}</span>
     </div>
@@ -45,6 +46,7 @@
 <script setup lang="ts">
 import RobotMark from "./Mark.vue";
 import RobotLiveIndicator from "./LiveIndicator.vue";
+import RobotFleetCoreButton from "./FleetCoreButton.vue";
 import { typeLabel, type TRobotType } from "../../utils/robot-display";
 
 withDefaults(

package/components/VehicleManagement.vue

@@ -48,9 +48,18 @@
 
       <!-- Search joins the toolbar row rather than stacking a second one. -->
       <template #prepend-additional>
+        <v-select v-if="qrEnabled" v-model="qrStickerFilter" :items="qrStickerFilterItems" label="QR sticker"
+          density="compact" variant="outlined" hide-details class="vehicle-qr-filter" style="max-width: 190px"
+          data-test="vehicle-qr-filter" />
         <AppField v-model="searchInput" search compact placeholder="Search" klass="app-toolbar__search" />
       </template>
 
+      <template #item.qrSticker="{ item }">
+        <v-chip size="small" variant="tonal" :color="qrStickerSummary(rowPlates(item)).color" data-test="vehicle-qr-cell">
+          {{ qrStickerSummary(rowPlates(item)).label }}
+        </v-chip>
+      </template>
+
       <template #item.category="{ value }">
         {{ formatValues("category", value) }}
       </template>
@@ -439,7 +448,7 @@ import {
 // `error.message` put ofetch's own developer string in the delete dialog:
 // `[PUT] "/api/vehicles/6a9691f25648d7633171c9e3": 502`.
 import { errorConverter } from '../utils/data';
-import { stickerCodeHint } from '../utils/vehicle-qr-blank';
+import { qrStickerSummary, stickerCodeHint } from '../utils/vehicle-qr-blank';
 import { isPermissionRefusalError } from '../utils/permission-refusal';
 
 
@@ -456,9 +465,11 @@ const props = defineProps({
 });
 
 
-const headers = [
+const headers = computed(() => [
   { title: "Name", value: "name" },
   { title: "Vehicle Numbers", value: "plates" },
+  // Only while the site's QR switch is on (like the print button).
+  ...(qrEnabled.value ? [{ title: "QR sticker", value: "qrSticker", sortable: false }] : []),
   { title: "NRIC", value: "nric" },
   { title: "Block", value: "block.name" },
   { title: "Floor", value: "level.name" },
@@ -467,7 +478,7 @@ const headers = [
   // { title: "Type", value: "type" },
   // { title: "Status", value: "status" },
   { title: "", value: "action" },
-]
+])
 
 const plateHeaders = [
   { title: "Plate Number", value: "plateNumber" },
@@ -546,6 +557,12 @@ const { getVehicles, deleteVehicle, formatVehicleStatus, approveVehicle, blockVe
 // Vehicle QR stickers: the site's switch (Settings) decides whether the print
 // and re-issue actions exist; only people who may update vehicles get them.
 const qrEnabled = ref(false);
+const qrStickerFilter = ref("");
+const qrStickerFilterItems = [
+  { title: "All", value: "" },
+  { title: "With sticker", value: "with" },
+  { title: "Without sticker", value: "without" },
+];
 const qrStickersOn = computed(() => qrEnabled.value && props.canUpdateVehicle);
 const qrVehicleIds = ref<string[]>([]);
 const qrReissuePlate = ref<TPlateNumber | null>(null);
@@ -838,6 +855,7 @@ const { data: getVehiclesReq, refresh: getVehiclesRefresh, pending: getVehiclesP
         search: searchInput.value,
         view: activeTab.value,
         site: props.site,
+        qrSticker: qrEnabled.value ? qrStickerFilter.value : "",
       }),
     {
       watch: [page],
@@ -1321,6 +1339,11 @@ watch(searchInput, () => {
   debouncedSearch()
 })
 
+watch(qrStickerFilter, () => {
+  page.value = 1;
+  getVehiclesRefresh();
+})
+
 // A new tab starts from its first page and loads straight away.
 watch(activeTab, () => {
   page.value = 1;

package/composables/useRobots.ts

@@ -400,6 +400,18 @@ export default function useRobots() {
     });
   }
 
+  /**
+   * HERO Fleet Core sign-in pass (web only): `{ url: "<console>/#token=...", expiresAt }`.
+   * `check: true` only asks whether this account may open the console (mints nothing).
+   * 404 where Fleet Core is not set up, 403 for anyone but Super Admin / Property Management.
+   */
+  function getFleetCoreSession({ check = false }: { check?: boolean } = {}) {
+    return useNuxtApp().$api<{ url?: string; expiresAt?: string; available?: boolean }>("/api/robots/fleet-core/session", {
+      method: "GET",
+      query: check ? { check: "1" } : {},
+    });
+  }
+
   /* ------------------------------------------ alerts + activity log */
 
   /**
@@ -566,6 +578,7 @@ export default function useRobots() {
     listBuildingMaps,
     listSiteBuildingMaps,
     getFleetCoreBuilding,
+    getFleetCoreSession,
     getSiteFaults,
     getSiteActivity,
     getNetworkActivity,

package/composables/useVehicle.ts

@@ -9,12 +9,13 @@ export default function useVehicle() {
     site = "",
     status = "",
     view = "",
+    qrSticker = "",
   } = {}) {
     // `view` is the screen's tab: residents, season-passes or block-listed.
     // Every status comes back unless `status` narrows it.
     return await useNuxtApp().$api<Record<string, any>>("/api/vehicles", {
       method: "GET",
-      query: { search, page, limit, order, type, category, site, status, view },
+      query: { search, page, limit, order, type, category, site, status, view, qrSticker },
     });
   }
 

package/package.json

@@ -2,7 +2,7 @@
   "name": "@7365admin1/layer-common",
   "license": "MIT",
   "type": "module",
-  "version": "4.111.0",
+  "version": "4.113.0",
   "author": "7365admin1",
   "main": "./nuxt.config.ts",
   "//files": "What a consumer extending this layer actually loads. Without this npm ships the whole working tree - the changesets, the CI workflows, the render harness in tools/ and any scratch directory that happened to exist at publish time. Nuxt resolves a layer by directory, so every runtime directory below has to stay listed; adding a new top-level runtime directory means adding it here too.",

package/types/people.d.ts

@@ -48,7 +48,7 @@ declare type TOccupancyRoleOption = {
   description: string;
 };
 
-declare type TPlateNumber = { plateNumber: string, recNo?: string, _id?: string, status: TVehicleStatus, type: TVehicleType, anprCameras?: TVehicleAnprCamera[] };
+declare type TPlateNumber = { plateNumber: string, recNo?: string, _id?: string, status: TVehicleStatus, type: TVehicleType, anprCameras?: TVehicleAnprCamera[], hasQrSticker?: boolean };
 
 
 // `""` is the FORM's "nothing picked yet" - it is stripped from the payload

package/utils/robot-fleet-core.ts

@@ -55,3 +55,41 @@ export function fleetLiftItems(map: Record<string, any> | null | undefined, rows
     };
   });
 }
+
+/* ---- "Open HERO Fleet Core" (web only, owner 2026-10-09) ---------------- */
+
+/**
+ * Is this a console URL we may open? https, and the pass in the fragment
+ * (`#token=`) - the only form the console reads, and one no server ever logs.
+ */
+export function isFleetCoreConsoleUrl(url: unknown): url is string {
+  if (typeof url !== "string") return false;
+  try {
+    const u = new URL(url);
+    return u.protocol === "https:" && /^#token=[\w-]+\.[\w-]+\.[\w-]+$/.test(u.hash);
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Open the console in a new tab. The tab is opened BEFORE the pass is fetched
+ * (inside the click), so popup blockers allow it; it is then pointed at the
+ * console, or closed if no pass came back. Returns false when it failed.
+ */
+export async function openFleetCoreConsole(
+  getSession: () => Promise<{ url?: unknown } | null | undefined>,
+  openTab: () => { location: { href: string }; opener: unknown; close: () => void } | null,
+): Promise<boolean> {
+  const tab = openTab();
+  if (tab) tab.opener = null; // the console never gets a handle on this app
+  try {
+    const session = await getSession();
+    if (!tab || !isFleetCoreConsoleUrl(session?.url)) throw new Error("no pass");
+    tab.location.href = session!.url as string;
+    return true;
+  } catch {
+    tab?.close();
+    return false;
+  }
+}

package/utils/vehicle-qr-blank.ts

@@ -52,3 +52,12 @@ export const isBlankCode = (plate: unknown): boolean => /^([0-9A-Z]{4}-){5}[0-9A
 export function plateLines(plate: string): string[] {
   return isBlankCode(plate) ? [plate.slice(0, 14), plate.slice(15)] : [plate];
 }
+
+/** The list's "QR sticker" cell for one row: how many of its plates already hold a sticker. */
+export function qrStickerSummary(plates: Array<{ hasQrSticker?: boolean }>): { label: string; color: string } {
+  const total = plates.length;
+  const linked = plates.filter((p) => p?.hasQrSticker === true).length;
+  if (!total || !linked) return { label: "None", color: "grey" };
+  if (linked === total) return { label: "Linked", color: "success" };
+  return { label: `${linked} of ${total}`, color: "warning" };
+}