@7365admin1/layer-common 4.41.0 → 4.42.0

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @iservice365/layer-common
 
+## 4.42.0
+
+### Minor Changes
+
+- 5472953: Roles and permissions (owner approval 2026-09-25): Robots offered in the Property Management and Cleaning role editors; the PM editor's camera-wall row reads "CCTV" (label only, `virtual-patrol:*` strings unchanged); PM's CCTV page follows the client's module list (`org-site-cctv` -> `virtual-patrol`, fails open); `NavigationDrawer` takes `sectionLabels` so an app can rename a sidebar heading.
+
 ## 4.41.0
 
 ### Minor Changes
@@ -1471,11 +1477,11 @@
   `utils/console-tier.ts` + `composables/useConsoleTier.ts` mirror the server's
   own rule from two endpoints the console already calls, unprojected:
 
-                                                                                                                                                                                                      GET /api/members/user/:user/app/admin    the Seven365 staff membership
-                                                                                                                                                                                                      GET /api/roles/id/:role                  that membership's role document
+                                                                                                                                                                                                        GET /api/members/user/:user/app/admin    the Seven365 staff membership
+                                                                                                                                                                                                        GET /api/roles/id/:role                  that membership's role document
 
-                                                                                                                                                                                                      owner  = member.type === "admin" && role.type === "admin" && role.default === true
-                                                                                                                                                                                                      staff  = member.type === "admin" && role.type === "admin"
+                                                                                                                                                                                                        owner  = member.type === "admin" && role.type === "admin" && role.default === true
+                                                                                                                                                                                                        staff  = member.type === "admin" && role.type === "admin"
 
   `role.default` is the marker because it is the only property of a platform
   staff role no API caller can set - `role.controller.ts` validates create and

package/components/Layout/NavigationDrawer.vue

@@ -129,6 +129,9 @@ import { withoutDeniedRoutes } from "../../utils/module-routes";
 const props = defineProps({
   navigationItems: { type: Array, required: true },
   title: { type: String, default: "" },
+  // An app's own name for a section heading (`withSections`), e.g.
+  // `{ "SECURITY OPERATIONS": "ESTATE SECURITY" }` in Property Management.
+  sectionLabels: { type: Object, default: () => ({}) },
 });
 
 const emit = defineEmits(["navigate"]);
@@ -196,7 +199,7 @@ const navigationItems = computed(() => {
   return withoutDeniedRoutes(items, userAppModulesDenied.value);
 });
 
-const sectionedItems = computed(() => withSections(navigationItems.value));
+const sectionedItems = computed(() => withSections(navigationItems.value, props.sectionLabels as Record<string, string>));
 
 /**
  * The design's brand tile carries the product's own mark. One icon for eleven

package/components/RolePermissionFormCreate.vue

@@ -139,7 +139,7 @@
                   </template>
                   <v-list-item-title>
                     <span class="text-capitalize role-create__row-title">
-                      {{ formatResourceLabel(String(resourceKey)) }}
+                      {{ formatResourceLabel(String(resourceKey), props.type) }}
                     </span>
                   </v-list-item-title>
                   <template #append>
@@ -279,6 +279,7 @@ const props = defineProps({
   },
 });
 
+
 const emit = defineEmits(["cancel", "success", "success:create-more"]);
 
 const validForm = ref(false);
@@ -537,14 +538,14 @@ const moduleSearch = ref<string | null>("");
 /** `safePermissions`, narrowed to what the search box matches. */
 const visiblePermissions = computed(() => {
   const query = (moduleSearch.value ?? "").trim().toLowerCase();
-  const all = sortResourcesByLabel(safePermissions.value);
+  const all = sortResourcesByLabel(safePermissions.value, props.type);
   if (!query) return all;
 
   const matches: Record<string, any> = {};
   for (const [resource, actions] of Object.entries(all)) {
     const haystack = [
       resource,
-      formatResourceLabel(resource),
+      formatResourceLabel(resource, props.type),
       ...Object.keys(actions ?? {}).flatMap((action) => [
         action,
         formatActionLabel(action),

package/components/RolePermissionFormPreviewUpdate.vue

@@ -102,7 +102,7 @@
                     />
                   </template>
                   <v-list-item-title class="text-capitalize role-perm__row-title">
-                    {{ formatResourceLabel(String(resourceKey)) }}
+                    {{ formatResourceLabel(String(resourceKey), props.type) }}
                   </v-list-item-title>
                   <template #append>
                     <div class="role-perm__cat-actions">
@@ -191,7 +191,7 @@
                   <v-divider v-if="resourceIndex > 0" />
                   <v-list-item density="compact" :ripple="false">
                     <v-list-item-title class="text-capitalize role-perm__row-title">
-                      {{ formatResourceLabel(String(resourceKey)) }}
+                      {{ formatResourceLabel(String(resourceKey), props.type) }}
                     </v-list-item-title>
                     <v-list-item-subtitle class="role-perm__row-sub">
                       {{
@@ -311,8 +311,15 @@ const props = defineProps({
     type: Number,
     default: 0,
   },
+  // The role type the editor was opened for; only changes a module's NAME
+  // where one app calls a key something else (`RESOURCE_LABELS_BY_TYPE`).
+  type: {
+    type: String,
+    default: "",
+  },
 });
 
+
 /** A role holding the wildcard has ONE stored entry and reaches everything. */
 const holdsWildcard = computed(() => (definedModel.value ?? []).includes("*"));
 
@@ -486,14 +493,14 @@ const moduleSearch = ref<string | null>("");
 
 const visiblePermissions = computed(() => {
   const query = (moduleSearch.value ?? "").trim().toLowerCase();
-  const all = sortResourcesByLabel(safePermissions.value);
+  const all = sortResourcesByLabel(safePermissions.value, props.type);
   if (!query) return all;
 
   const matches: Record<string, any> = {};
   for (const [resource, actions] of Object.entries(all)) {
     const haystack = [
       resource,
-      formatResourceLabel(resource),
+      formatResourceLabel(resource, props.type),
       ...Object.keys((actions as Record<string, unknown>) ?? {}).flatMap(
         (action) => [action, formatActionLabel(action)]
       ),
@@ -509,7 +516,7 @@ const visiblePermissions = computed(() => {
 // Same A-Z as the tree above it; a second list in a second order reads as a
 // different kind of thing.
 const sortedNotOffered = computed(() =>
-  sortResourcesByLabel(props.notOfferedPermissions as Record<string, any>)
+  sortResourcesByLabel(props.notOfferedPermissions as Record<string, any>, props.type)
 );
 
 /*

package/components/RolePermissionMain.vue

@@ -120,6 +120,7 @@
         :can-update-role="props.canUpdateRole"
         :catalogue-size="permissionCatalogueSize"
         :module-count="permissionModuleCount"
+        :type="props.type"
       />
     </v-dialog>
 

package/composables/useCleaningPermission.ts

@@ -13,6 +13,7 @@ export default function useCleaningPermission() {
     bulletinBoardPermissions,
  
     inventoryPermissions,
+    robotPermissions,
   } = useCommonPermissions();
   const permissions: TPermissions = {
     inventory: inventoryPermissions,
@@ -291,6 +292,7 @@ export default function useCleaningPermission() {
           "Allows the user to view detailed information for item checkouts.",
       },
     },
+    "robot-mgmt": robotPermissions,
   };
 
   return {

package/composables/useCommonPermission.ts

@@ -331,7 +331,39 @@ export function useCommonPermissions() {
     },
   };
 
+  /*
+   * ROBOTS - owner approval 2026-09-25, item 1: the Property Management and
+   * Cleaning role editors offer Robots, so a narrower role can be given robot
+   * access. Same five strings, spelling and wording as `useSecurityPermission`
+   * and exactly what core `robot-permission.util.ts ROBOT_PERMISSIONS` enforces.
+   * Catalogue-only: offering an entry grants nobody anything until it is ticked.
+   */
+  const robotPermissions = {
+    "add-robot": {
+      check: true,
+      description: "Allows the user to add a new robot to the system.",
+    },
+    "see-all-robots": {
+      check: true,
+      description: "Allows the user to view the list of all robots.",
+    },
+    "see-robot-details": {
+      check: true,
+      description: "Allows the user to view the details of a specific robot.",
+    },
+    "update-robot": {
+      check: true,
+      description: "Allows the user to update robot details.",
+    },
+    "delete-robot": {
+      check: true,
+      description:
+        "Allows the user to remove a robot from the system permanently.",
+    },
+  };
+
   return {
+    robotPermissions,
     inventoryPermissions,
     invitationPermissions,
     memberPermissions,

package/composables/usePropertyPermission.ts

@@ -42,6 +42,7 @@ export default function usePropertyPermission() {
     siteSettingsPermissions,
   
     inventoryPermissions,
+    robotPermissions,
   } = useCommonPermissions();
 
 
@@ -618,6 +619,7 @@ export default function usePropertyPermission() {
           "Allows the user to view the list of all resident transactions on mobile. Checked by the iMA365 mobile app.",
       },
     },
+    "robot-mgmt": robotPermissions,
     "site-settings": siteSettingsPermissions
   };
 

package/package.json

@@ -2,7 +2,7 @@
   "name": "@7365admin1/layer-common",
   "license": "MIT",
   "type": "module",
-  "version": "4.41.0",
+  "version": "4.42.0",
   "author": "7365admin1",
   "main": "./nuxt.config.ts",
   "//files": "What a consumer extending this layer actually loads. Without this npm ships the whole working tree - the changesets, the CI workflows, the render harness in tools/ and any scratch directory that happened to exist at publish time. Nuxt resolves a layer by directory, so every runtime directory below has to stay listed; adding a new top-level runtime directory means adding it here too.",

package/utils/module-routes.ts

@@ -12,7 +12,7 @@
  * (checked against every app's own `useLocalPermission` nav gate, 2026-09-11).
  * Shared or ambiguous pages stay out: calendar, keys (gated on `site-settings`),
  * access-mgmt (`site-settings:manage-entry-pass` also opens it), equipment and
- * inventory, the property CCTV wall, service-providers and support tickets.
+ * inventory, service-providers and support tickets.
  *
  * NEVER MAPPED: the dashboard, settings, members, invitations and roles. A client
  * must always be able to run its own people and roles; the server never denies
@@ -40,6 +40,13 @@ export const MODULE_ROUTES: Readonly<Record<string, string>> = Object.freeze({
   // Includes its CCTV page: security's drawer shows it to whoever can see
   // Virtual Patrol, so it follows the same module.
   "org-site-virtual-patrol": "virtual-patrol",
+  // Property Management's camera wall (owner approval 2026-09-25, item 3). Its
+  // menu, page and the server's wall endpoint all read the four legacy
+  // `virtual-patrol:` strings (`useCameraViewPermission`, core
+  // `CAMERA_VIEW_PERMISSIONS`), and the PM role editor now calls that row
+  // "CCTV". So it follows the same module as Security's own CCTV page above.
+  // Fails open like every entry: a client with no module list keeps it.
+  "org-site-cctv": "virtual-patrol",
   "org-site-robot-management": "robot-mgmt",
   "org-site-attendance": "attendance-mgmt",
   "org-site-my-attendance": "my-attendance",

package/utils/nav-sections.ts

@@ -125,7 +125,13 @@ export const SECTION_ORDER: string[] = [
  * objects; only the order changes.
  */
 export function withSections<T extends { title?: string }>(
-  items: T[]
+  items: T[],
+  /**
+   * An application's own name for a heading, e.g. Property Management prints
+   * SECURITY OPERATIONS as ESTATE SECURITY (owner approval 2026-09-25, item 6).
+   * Changes the printed label only; grouping and order are unchanged.
+   */
+  labels: Readonly<Record<string, string>> = {}
 ): Array<TSectionedNavItem<T>> {
   // An unmapped title inherits the section of the item above it.
   let current = "";
@@ -144,7 +150,7 @@ export function withSections<T extends { title?: string }>(
 
   let printed = "";
   return grouped.map(({ item, section }) => {
-    const label = section === printed ? "" : section;
+    const label = section === printed ? "" : labels[section] ?? section;
     printed = section;
     return { item, section: label };
   });

package/utils/permission-labels.ts

@@ -55,14 +55,31 @@ export const RESOURCE_LABELS: Record<string, string> = {
   roles: "Roles and permissions",
 };
 
+/**
+ * Names that differ BY APPLICATION, keyed by the role `type` the editor is
+ * opened with. Only where one key means a different screen in one app.
+ *
+ * Owner approval 2026-09-25, item 2: in the Property Management editor the
+ * `virtual-patrol` row is the CCTV camera wall (the four legacy strings
+ * `useCameraViewPermission` and core `CAMERA_VIEW_PERMISSIONS` read), not the
+ * Security app's Virtual Patrol. Label only: the key and every stored string
+ * stay `virtual-patrol:*`, so every role that holds them keeps working.
+ */
+export const RESOURCE_LABELS_BY_TYPE: Record<string, Record<string, string>> = {
+  property_management_agency: { "virtual-patrol": "CCTV" },
+  real_estate_developer: { "virtual-patrol": "CCTV" },
+};
+
 /**
  * `work_orders` -> `Work orders`.
  *
  * Sentence case, not Title Case: a list of 47 Title Cased phrases is harder to
  * scan, not easier.
  */
-export function formatResourceLabel(key: string): string {
+export function formatResourceLabel(key: string, type?: string): string {
   if (!key) return "";
+  const byType = type ? RESOURCE_LABELS_BY_TYPE[type]?.[key] : undefined;
+  if (byType) return byType;
   if (RESOURCE_LABELS[key]) return RESOURCE_LABELS[key];
 
   const words = key
@@ -115,11 +132,12 @@ export function formatActionLabel(action: string): string {
  */
 export function sortResourcesByLabel<T>(
   tree: Record<string, T> | null | undefined,
+  type?: string,
 ): Record<string, T> {
   if (!tree || typeof tree !== "object") return {};
   const sorted: Record<string, T> = {};
   for (const key of Object.keys(tree).sort((a, b) =>
-    formatResourceLabel(a).localeCompare(formatResourceLabel(b), undefined, {
+    formatResourceLabel(a, type).localeCompare(formatResourceLabel(b, type), undefined, {
       sensitivity: "base",
       numeric: true,
     }),