@7365admin1/layer-common 4.117.0 → 4.118.0

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @iservice365/layer-common
 
+## 4.118.0
+
+### Minor Changes
+
+- 42930fa: Robot screens: Add robot, Edit, Remove and the building-map editor show only for Seven365 Super Admin. Commands on a HERO Fleet Core robot show only for Seven365 Super Admin; other users see status and position (view only). Matches the server rule that Fleet Core and robot setup are Super Admin only.
+
 ## 4.117.0
 
 ### Minor Changes
@@ -3117,11 +3123,11 @@ Monthly report: a month that had patrols opens the list of that month's patrol r
   `utils/console-tier.ts` + `composables/useConsoleTier.ts` mirror the server's
   own rule from two endpoints the console already calls, unprojected:
 
-                                                                                                                                                                                                                                                                                                                                                                                                      GET /api/members/user/:user/app/admin    the Seven365 staff membership
-                                                                                                                                                                                                                                                                                                                                                                                                      GET /api/roles/id/:role                  that membership's role document
+                                                                                                                                                                                                                                                                                                                                                                                                        GET /api/members/user/:user/app/admin    the Seven365 staff membership
+                                                                                                                                                                                                                                                                                                                                                                                                        GET /api/roles/id/:role                  that membership's role document
 
-                                                                                                                                                                                                                                                                                                                                                                                                      owner  = member.type === "admin" && role.type === "admin" && role.default === true
-                                                                                                                                                                                                                                                                                                                                                                                                      staff  = member.type === "admin" && role.type === "admin"
+                                                                                                                                                                                                                                                                                                                                                                                                        owner  = member.type === "admin" && role.type === "admin" && role.default === true
+                                                                                                                                                                                                                                                                                                                                                                                                        staff  = member.type === "admin" && role.type === "admin"
 
   `role.default` is the marker because it is the only property of a platform
   staff role no API caller can set - `role.controller.ts` validates create and

package/components/Robot/Detail.vue

@@ -138,7 +138,7 @@
       <div v-if="commands.length" class="hero-detail__commands">
         <RobotCommandBar
           :capabilities="caps"
-          :can-command="canCommand"
+          :can-command="cmdOk"
           :online="live?.ok === true && live.online === true"
           :mode="statusMode"
           :type="robotType"
@@ -151,7 +151,7 @@
           {{ commandResult.text }}
         </div>
       </div>
-      <RobotViewOnlyNotice v-if="!canCommand" />
+      <RobotViewOnlyNotice v-if="!cmdOk" />
     </section>
   </div>
 
@@ -369,11 +369,13 @@ const props = withDefaults(
     canEdit?: boolean;
     canCommand?: boolean;
     canDelete?: boolean;
+    /** Seven365 Super Admin: the only one who may command a HERO Fleet Core robot (owner, 12 Oct 2026). */
+    superAdmin?: boolean;
     /** The robot types this app presents - the edit dialog shows Type only with both. */
     types?: Array<"cleaning" | "security">;
     tickMs?: number;
   }>(),
-  { backLabel: "", canEdit: false, canCommand: false, canDelete: false, types: () => [], tickMs: 1200 },
+  { backLabel: "", canEdit: false, canCommand: false, canDelete: false, superAdmin: false, types: () => [], tickMs: 1200 },
 );
 const emit = defineEmits<{
   back: [];
@@ -398,6 +400,7 @@ const {
 } = useRobots();
 
 const record = ref<Record<string, any> | null>(null);
+const cmdOk = computed(() => props.canCommand && (props.superAdmin || record.value?.brand !== "fleet-core"));
 const topEl = ref<HTMLElement | null>(null);
 const brands = ref<Array<Record<string, any>>>([]);
 const error = ref("");
@@ -478,7 +481,7 @@ const makerApp = computed(() => (live.value?.ok ? live.value.profile?.makerApp :
 
 const online = computed(() => live.value?.ok === true && live.value.online === true);
 const commands = computed(() =>
-  visibleCommands({ capabilities: caps.value, canCommand: props.canCommand, online: online.value, mode: statusMode.value, type: robotType.value, resumable: resumable.value }),
+  visibleCommands({ capabilities: caps.value, canCommand: cmdOk.value, online: online.value, mode: statusMode.value, type: robotType.value, resumable: resumable.value }),
 );
 
 /* ---- the plan ---- */
@@ -506,7 +509,7 @@ watch(
 const readout = computed(() => `${positionText(live.value, caps.value, now.value)} · ${speedText(prevPose.value, nextPose.value, statusMode.value)}`);
 
 const spot = ref<Array<{ x: number; y: number }>>([]);
-const spotOn = computed(() => showSpotClean({ canCommand: props.canCommand, capabilities: caps.value, online: online.value, type: robotType.value }));
+const spotOn = computed(() => showSpotClean({ canCommand: cmdOk.value, capabilities: caps.value, online: online.value, type: robotType.value }));
 
 // The route drawn on the plan: the shown map's first route, else the first with placed checkpoints (the rest are listed by name).
 const route = computed<TPatrolRouteView | null>(() =>
@@ -839,9 +842,9 @@ function onPick(p: TSavedPoint) {
 const livePanel = ref<{ show(): void } | null>(null);
 const hasCamera = computed(() => caps.value?.liveVideo === true || canDrive.value);
 const driveOpen = ref(false);
-const canDrive = computed(() => props.canCommand && caps.value?.manualDrive === true && online.value);
+const canDrive = computed(() => cmdOk.value && caps.value?.manualDrive === true && online.value);
 const canResolve = computed(
-  () => props.canCommand && caps.value?.resolveAlerts === true && faultBadge(fault.value) === "ALARM" && typeof fault.value?.code === "string",
+  () => cmdOk.value && caps.value?.resolveAlerts === true && faultBadge(fault.value) === "ALARM" && typeof fault.value?.code === "string",
 );
 const resolving = ref(false);
 async function resolveFault() {

package/components/Robot/SiteScreen.vue

@@ -26,9 +26,10 @@
         :key="robotId"
         :robot-id="robotId"
         :back-label="siteName || names.siteName ? `${siteName || names.siteName} fleet` : ''"
-        :can-edit="canEdit"
+        :can-edit="canEdit && superAdmin"
         :can-command="canCommand"
-        :can-delete="canDelete"
+        :super-admin="superAdmin"
+        :can-delete="canDelete && superAdmin"
         :types="types"
         @back="emit('back')"
         @removed="onRemoved"
@@ -42,7 +43,7 @@
         :site-name="siteName"
         :client-name="clientName"
         :type="type"
-        :can-edit-map="canSetup && canEdit"
+        :can-edit-map="canSetup && canEdit && superAdmin"
         :back-to-network="backToNetwork"
         @open="(id) => emit('open', id)"
         @network="emit('network')"
@@ -57,7 +58,7 @@
         :client-name="clientName"
         :type="type"
         :can-command="canCommand"
-        :can-edit-map="canSetup && canEdit"
+        :can-edit-map="canSetup && canEdit && superAdmin"
         :back-to-network="backToNetwork"
         @open="(id) => emit('open', id)"
         @network="emit('network')"
@@ -90,7 +91,7 @@
         :site-name="siteName"
         :client-name="clientName"
         :type="type"
-        :can-setup="canSetup"
+        :can-setup="canSetup && superAdmin"
         :back-to-network="backToNetwork"
         :reload-key="reloadKey"
         @open="(r) => emit('open', String(r._id))"

package/package.json

@@ -2,7 +2,7 @@
   "name": "@7365admin1/layer-common",
   "license": "MIT",
   "type": "module",
-  "version": "4.117.0",
+  "version": "4.118.0",
   "author": "7365admin1",
   "main": "./nuxt.config.ts",
   "//files": "What a consumer extending this layer actually loads. Without this npm ships the whole working tree - the changesets, the CI workflows, the render harness in tools/ and any scratch directory that happened to exist at publish time. Nuxt resolves a layer by directory, so every runtime directory below has to stay listed; adding a new top-level runtime directory means adding it here too.",