@7365admin1/layer-common 4.81.1-staging.467 → 4.81.1

package/components/HidProfileQrCode.vue

@@ -1,332 +0,0 @@
-<!--
-  MY HID QR CODE.
-
-  The signed-in member's own pass for one reader. Every other HID screen acts on
-  somebody else - a resident being enrolled, a visitor being issued a pass. This
-  one has no subject picker at all, because the server takes the caller from the
-  session and there is no user id to send.
-
-  Issuing a code does NOT grant access. A member's door permission comes from the
-  HID permissions screen, and minting an access rule here would let anyone who
-  can press Generate admit themselves. So the screen reports what the permissions
-  screen says (`assigned`) and warns when a code would be refused at the door,
-  rather than handing out something that silently fails.
--->
-<template>
-  <div class="hid-profile-qr">
-    <div class="hid-profile-qr__header">
-      <h2 class="hid-profile-qr__title">HID QR Code</h2>
-      <AppSelect
-        v-if="readerOptions.length"
-        v-model="selectedReaderId"
-        class="reader-select"
-        :items="readerOptions"
-        @update:model-value="loadProfile"
-      />
-    </div>
-
-    <v-card class="screen-modal hid-profile-qr__card">
-      <v-card-text class="screen-modal__body">
-        <div v-if="loading" class="hid-profile-qr__state">Loading...</div>
-
-        <div v-else-if="!readerOptions.length" class="hid-profile-qr__state">
-          No HID reader is set up for this site yet.
-        </div>
-
-        <template v-else>
-          <p class="hid-profile-qr__reader">
-            {{ profile?.readerName || "HID reader" }}
-            <span>{{ profile?.portalName || "Portal not configured" }}</span>
-          </p>
-
-          <!-- A code this reader cannot read is worse than no code, so the
-               capability is checked before anything is offered. -->
-          <v-alert
-            v-if="profile && !profile.qrEnabled"
-            type="warning"
-            variant="tonal"
-            density="compact"
-            class="mb-4"
-          >
-            This reader is not set up to read QR codes.
-          </v-alert>
-
-          <!-- The honest part: a code opens the door only for a member the
-               permissions screen already admits. `assigned` is null when the
-               lookup failed, which is not the same as "no". -->
-          <v-alert
-            v-else-if="profile && profile.assigned === false"
-            type="warning"
-            variant="tonal"
-            density="compact"
-            class="mb-4"
-          >
-            You are not assigned to this reader, so this code will be refused at
-            the door. Ask a property manager to add you on the HID permissions
-            screen.
-          </v-alert>
-
-          <div v-if="qrImage" class="hid-profile-qr__code">
-            <img :src="qrImage" alt="Your HID QR code" width="220" height="220" />
-            <p class="hid-profile-qr__issued">
-              Issued {{ formatIssuedAt(profile?.issuedAt) }}
-            </p>
-          </div>
-          <p v-else class="hid-profile-qr__state">
-            You have no QR code on this reader yet.
-          </p>
-
-          <div class="hid-profile-qr__actions">
-            <AppButton
-              :disabled="working || !profile?.qrEnabled"
-              @click="generate"
-            >
-              {{ profile?.issued ? "Regenerate" : "Generate QR Code" }}
-            </AppButton>
-            <AppButton
-              v-if="qrImage"
-              variant="ghost"
-              icon="mdi-download"
-              @click="downloadQr"
-            >
-              Download
-            </AppButton>
-            <AppButton
-              v-if="profile?.issued"
-              variant="ghost"
-              :disabled="working"
-              @click="remove"
-            >
-              Remove
-            </AppButton>
-          </div>
-
-          <p class="field-hint">
-            Regenerating replaces the previous code. The old one stops working
-            immediately.
-          </p>
-        </template>
-      </v-card-text>
-    </v-card>
-
-    <v-snackbar v-model="snackbar.show" :color="snackbar.color" timeout="4000">
-      {{ snackbar.message }}
-    </v-snackbar>
-  </div>
-</template>
-
-<script setup lang="ts">
-import QRCode from "qrcode";
-import type { HidProfileQr } from "../composables/useHidAmico";
-
-const props = defineProps<{ site: string }>();
-
-const { getReaders, getProfileQr, issueProfileQr, deleteProfileQr } = useHidAmico();
-
-type HidReaderOption = { _id: string; name?: string; portalName?: string };
-
-const readers = ref<HidReaderOption[]>([]);
-const { selectHidReader, resolveForSite } = useHidReaderSelection();
-const selectedReaderId = ref("");
-const profile = ref<HidProfileQr | null>(null);
-const qrImage = ref("");
-const loading = ref(false);
-const working = ref(false);
-const snackbar = reactive({ show: false, color: "success", message: "" });
-
-const readerOptions = computed(() => readers.value.map((reader) => ({
-  title: `${reader.name || reader._id} — ${reader.portalName || "Portal not configured"}`,
-  value: reader._id,
-})));
-
-function showToast(message: string, color: "success" | "error" = "success") {
-  snackbar.message = message;
-  snackbar.color = color;
-  snackbar.show = true;
-}
-
-function toRecord(value: unknown): Record<string, any> {
-  return value && typeof value === "object" ? (value as Record<string, any>) : {};
-}
-
-function errorMessage(error: unknown) {
-  const record = toRecord(error);
-  return String(toRecord(record.data).message || record.message || "Something went wrong.");
-}
-
-function formatIssuedAt(value?: string) {
-  if (!value) return "";
-  const date = new Date(value);
-  return Number.isNaN(date.getTime()) ? "" : date.toLocaleString();
-}
-
-/**
- * The image is drawn here, never fetched. The value is the credential itself,
- * so keeping it on this page and out of any URL is the point.
- */
-async function renderQr(value: string) {
-  if (!value) {
-    qrImage.value = "";
-    return;
-  }
-  try {
-    qrImage.value = await QRCode.toDataURL(value, { width: 440, margin: 1 });
-  } catch (error) {
-    console.error("Unable to render the HID QR code:", error);
-    qrImage.value = "";
-  }
-}
-
-/**
- * Saves the rendered code as a PNG.
- *
- * Straight off the data URL already in the page - no request, so the credential
- * never travels again to be downloaded. Same anchor-click approach `VisitorForm`
- * uses for a visitor pass, and the reader name is in the file name because a
- * member can hold one code per reader.
- */
-function downloadQr() {
-  if (!qrImage.value) return;
-  const slug = String(profile.value?.readerName || "reader")
-    .trim()
-    .replace(/[^a-z0-9]+/gi, "-")
-    .replace(/^-|-$/g, "")
-    .toLowerCase();
-  const link = document.createElement("a");
-  link.href = qrImage.value;
-  link.download = `hid-qr-${slug || "reader"}.png`;
-  link.click();
-}
-
-async function loadReaders() {
-  if (!props.site) return;
-  const response = toRecord(await getReaders({ site: props.site, page: 1, limit: 100 }));
-  const data = toRecord(response.data);
-  const items = response.items ?? data.items ?? data.readers ?? [];
-  readers.value = (Array.isArray(items) ? items : []).filter((reader) => reader?._id);
-  /* Shared with every other HID screen — see `useHidReaderSelection`. The
-     resolver refuses a remembered reader that is not this site's, so a site
-     switch or a deleted reader falls back to the first rather than querying
-     an id the site does not own. */
-  selectedReaderId.value = resolveForSite(props.site, readers.value);
-}
-
-async function loadProfile() {
-  if (!selectedReaderId.value) return;
-  loading.value = true;
-  try {
-    const response = await getProfileQr(selectedReaderId.value);
-    profile.value = response?.data ?? null;
-    await renderQr(profile.value?.qrValue || "");
-  } catch (error: unknown) {
-    profile.value = null;
-    qrImage.value = "";
-    showToast(errorMessage(error), "error");
-  } finally {
-    loading.value = false;
-  }
-}
-
-async function generate() {
-  if (!selectedReaderId.value) return;
-  working.value = true;
-  try {
-    const response = await issueProfileQr(selectedReaderId.value);
-    profile.value = response?.data ?? null;
-    await renderQr(profile.value?.qrValue || "");
-    showToast("QR code generated.");
-  } catch (error: unknown) {
-    showToast(errorMessage(error), "error");
-  } finally {
-    working.value = false;
-  }
-}
-
-async function remove() {
-  if (!selectedReaderId.value) return;
-  if (!window.confirm("Remove your QR code from this reader?")) return;
-  working.value = true;
-  try {
-    const response = await deleteProfileQr(selectedReaderId.value);
-    profile.value = response?.data ?? null;
-    await renderQr("");
-    showToast("QR code removed.");
-  } catch (error: unknown) {
-    showToast(errorMessage(error), "error");
-  } finally {
-    working.value = false;
-  }
-}
-
-watch(
-  () => props.site,
-  async () => {
-    await loadReaders();
-    await loadProfile();
-  },
-  { immediate: true },
-);
-
-/* Publish every change, including the seed above: a screen that had to fall
-   back to the first reader should leave the others agreeing with it. */
-watch(selectedReaderId, (value) => {
-  if (value) selectHidReader(props.site, value);
-});
-</script>
-
-<style scoped>
-.hid-profile-qr__header {
-  display: flex;
-  align-items: center;
-  gap: 12px;
-  flex-wrap: wrap;
-}
-
-.hid-profile-qr__title {
-  margin: 0;
-  font-size: 18px;
-  font-weight: 600;
-}
-
-.hid-profile-qr__card {
-  margin-top: 16px;
-  max-width: 460px;
-}
-
-.hid-profile-qr__reader {
-  margin: 0 0 14px;
-  font-size: 14px;
-  font-weight: 600;
-}
-
-.hid-profile-qr__reader span {
-  display: block;
-  color: var(--muted);
-  font-size: 12px;
-  font-weight: 500;
-}
-
-.hid-profile-qr__code {
-  display: grid;
-  place-items: center;
-  margin-bottom: 14px;
-}
-
-.hid-profile-qr__issued {
-  margin: 8px 0 0;
-  color: var(--muted);
-  font-size: 12px;
-}
-
-.hid-profile-qr__state {
-  color: var(--muted);
-  font-size: 13.5px;
-  padding: 8px 0 14px;
-}
-
-.hid-profile-qr__actions {
-  display: flex;
-  gap: 8px;
-  flex-wrap: wrap;
-}
-</style>

package/composables/useHidReaderSelection.ts

@@ -1,50 +0,0 @@
-import {
-  EMPTY_HID_READER_CHOICE,
-  resolveHidReaderId,
-  type HidReaderChoice,
-} from "../utils/hid-reader-selection";
-
-/**
- * ONE HID READER CHOICE, SHARED BY EVERY HID SCREEN.
- *
- * Declared at MODULE scope on purpose. Each screen held its own `ref("")`, and
- * because the HID screens are separate pages the ref was rebuilt on every
- * navigation — HID Reader Users, HID Cards, Access Logs and HID QR Code each
- * reset to the first reader no matter what had just been picked next door.
- *
- * A module-scoped ref is enough because moving between those pages is a ROUTE
- * change, not a page load: the menu's items carry a `route` and
- * `NavigationItem.vue` renders them through `:to`, so vue-router handles them
- * and this module is never re-evaluated.
- *
- * Deliberately NOT persisted. `localStorage` would carry the choice through a
- * hard refresh as well, which is a real but much smaller benefit than the
- * navigation case, and it is worth adding only once somebody has felt the
- * absence. See `utils/hid-reader-selection.ts` for the staleness rule that
- * would have to hold either way.
- *
- * Intercom keeps its own reader and is not wired to this. Its question is which
- * panel you are calling, not which door you are administering, and joining them
- * would mean switching reader on Access Logs changed who you would dial.
- */
-const choice = ref<HidReaderChoice>({ ...EMPTY_HID_READER_CHOICE });
-
-export default function useHidReaderSelection() {
-  /** Remember a choice. The site travels with it; an id alone means nothing. */
-  function selectHidReader(siteId: string, readerId: string) {
-    choice.value = { siteId: String(siteId ?? ""), readerId: String(readerId ?? "") };
-  }
-
-  /**
-   * The reader this screen should show, given the readers it just loaded.
-   *
-   * Call it after the reader list arrives, and write the answer back with
-   * `selectHidReader` so the screens agree on what "current" means even when
-   * one of them had to fall back to the first reader.
-   */
-  function resolveForSite(siteId: string, readers: readonly { _id?: unknown }[]) {
-    return resolveHidReaderId(siteId, readers, choice.value);
-  }
-
-  return { choice, selectHidReader, resolveForSite };
-}

package/composables/useSiteCategory.ts

@@ -1,45 +0,0 @@
-/**
- * THE CATEGORY OF THE SITE THE USER IS CURRENTLY IN.
- *
- * One shared answer, published once by the application's layout from the site
- * it already loaded for the switcher, and read by anything that has to behave
- * differently on a commercial or industrial site - the business Add Tenant
- * form, the tenant list. Publishing it rather than re-fetching it per
- * component means no two screens can disagree about which site this is.
- *
- * READ FROM THE CUSTOMER-SITE RECORD, NOT THE SITE RECORD. Both carry a
- * `category` and `customer-site.service` keeps them equal (it writes the site
- * on create and on update), but `siteSchema` DEFAULTS the site's own copy to
- * `commercial` - so a site created without an explicit category reads back as
- * commercial there even when it is a residential estate. The customer-site
- * copy has no default: it is either the category somebody chose or nothing.
- *
- * An empty category means "not published yet" or "never set", and every
- * caller must behave as it did before this existed - never assume commercial
- * from silence.
- */
-const BUSINESS_SITE_CATEGORIES: string[] = ["commercial", "industrial"];
-
-export default function useSiteCategory() {
-  const siteCategory = useState<string>("current-site-category", () => "");
-
-  function setSiteCategory(value?: string | null) {
-    siteCategory.value = typeof value === "string" ? value : "";
-  }
-
-  /**
-   * The categories whose units are LET TO A BUSINESS rather than lived in.
-   *
-   * These are the sites where a unit has an owner, an occupier and often a
-   * person in charge who is neither, so they are the sites that ask for a
-   * tenant's standing and print it back (see `OCCUPANCY_ROLE_OPTIONS`).
-   *
-   * The category never changes what the APPLICATION is called: the rail says
-   * Property Management on every site it serves.
-   */
-  const isBusinessSite = computed(() =>
-    BUSINESS_SITE_CATEGORIES.includes(siteCategory.value),
-  );
-
-  return { siteCategory, isBusinessSite, setSiteCategory };
-}

package/pages/[org]/[site]/access-mgmt/hid-qr-code/index.vue

@@ -1,23 +0,0 @@
-<template>
-  <v-container fluid>
-    <HidEnabledGate
-      :site="siteId"
-      :org="orgId"
-      message="Enable HID as a service for this site before generating a QR code."
-    >
-      <HidProfileQrCode :site="siteId" />
-    </HidEnabledGate>
-  </v-container>
-</template>
-
-<script setup lang="ts">
-definePageMeta({
-  layout: "default",
-  middleware: ["01-auth", "02-org"],
-  memberOnly: true,
-});
-
-const route = useRoute();
-const siteId = computed(() => String(route.params.site ?? ""));
-const orgId = computed(() => String(route.params.org ?? ""));
-</script>

package/utils/hid-enrolment-subject.ts

@@ -1,144 +0,0 @@
-/**
- * WHO A HID ENROLMENT IS FOR — the pure decisions behind the subject picker.
- *
- * `HidUserEnrollment.vue` can enrol a resident or a staff member. The write path
- * always carried both (`subjectLink` maps them onto `person` or `member`); what
- * was missing was a way to choose. These are the parts of that choice worth
- * testing on their own, kept here because a `.vue` component has no test harness
- * in this repo.
- */
-
-export type HidEnrolmentSubject = "resident" | "property_management";
-
-/**
- * The dropdown's options, in the order they are drawn.
- *
- * `title`/`value` because `AppSelect` takes that shape. A service-provider
- * option is expected next; adding it here is most of the work, since the write
- * path already maps `service_provider` onto `serviceProvider`.
- */
-export const HID_ENROLMENT_SUBJECTS: ReadonlyArray<{
-  title: string;
-  value: HidEnrolmentSubject;
-}> = [
-  { title: "Resident", value: "resident" },
-  { title: "Member", value: "property_management" },
-];
-
-/**
- * What an EDIT calls the subject it is already attached to.
- *
- * Wider than the dropdown on purpose. An identity's category cannot change after
- * it is created, so an edit states it rather than offering it — and the records
- * in the wild include `service_provider`, which the dropdown does not offer yet
- * but `openEdit` does resolve. Falling back to the first option would label a
- * contractor "Resident", which is worse than saying nothing useful.
- */
-export function subjectCategoryLabel(category: unknown): string {
-  const labels: Record<string, string> = {
-    resident: "Resident",
-    property_management: "Member",
-    service_provider: "Service provider",
-    visitor: "Visitor",
-  };
-  return labels[String(category ?? "")] ?? "Unknown";
-}
-
-/**
- * One page of `GET /api/members`, read defensively.
- *
- * `paginate` puts `{ items, pages }` at the root, but `items` sits under `data`
- * on some of this product's endpoints, so both are read — the same allowance
- * `readCandidatePage` makes. A response that carries neither is an empty page
- * rather than a thrown error: an empty staff picker with a placeholder beats a
- * broken dialog.
- */
-export function readMemberPage(response: unknown): {
-  items: Record<string, unknown>[];
-  pages: number;
-  total: number;
-} {
-  const source = (response && typeof response === "object" ? response : {}) as Record<string, unknown>;
-  const nested = (source.data && typeof source.data === "object" ? source.data : {}) as Record<string, unknown>;
-  const raw = Array.isArray(source.items)
-    ? source.items
-    : Array.isArray(nested.items)
-      ? nested.items
-      : [];
-  const pages = Number(source.pages ?? nested.pages ?? 1);
-  const items = raw.filter((row): row is Record<string, unknown> => Boolean(row) && typeof row === "object");
-  /*
-   * `total` drives "showing 10 of 23" and the Load more button. It falls back to
-   * the page's own length, not to zero, so a response without it simply reads as
-   * "this is everything" — a missing count must never make the button offer a
-   * page that is not there.
-   */
-  const total = Number(source.total ?? nested.total ?? items.length);
-  return {
-    items,
-    pages: Number.isFinite(pages) && pages > 0 ? Math.floor(pages) : 1,
-    total: Number.isFinite(total) && total >= 0 ? Math.floor(total) : items.length,
-  };
-}
-
-/**
- * Can this member actually be enrolled?
- *
- * Reader access is bound by USER id — `resolvePermissionUserBindings` in
- * `iservice365-core` drops every subject without one — so a member with no app
- * account cannot be given access and is not a candidate. The id arrives as a
- * string from JSON but may be an object if a caller passes a raw document, so
- * both are read rather than trusting the shape.
- */
-export function memberHasAccount(row: Record<string, unknown> | null | undefined): boolean {
-  const user = row?.user;
-  if (!user) return false;
-  if (typeof user === "object") {
-    const id = (user as { _id?: unknown; toString?: () => string })._id ?? user;
-    return Boolean(String(id ?? "").trim());
-  }
-  return Boolean(String(user).trim());
-}
-
-/**
- * How a member reads in the picker: their name, and their role beneath it.
- *
- * THE ACCOUNT'S NAME FIRST, then the membership's. The two diverge — a
- * membership is created with whatever name was typed at invite time, and the
- * person may have set their own on the account since — and the account name is
- * the one they are known by. `userName` comes from the members endpoint's own
- * lookup into `users`; a member with no account has none, but such a row is not
- * a candidate anyway (`memberHasAccount`).
- *
- * Every step falls back, because a row with no name at all still has to be
- * selectable rather than blank, or it cannot be told apart from the next one.
- */
-export function memberCandidateOf(row: Record<string, unknown>): {
-  subjectId: string;
-  name: string;
-  subtitle: string;
-} {
-  const text = (value: unknown) => String(value ?? "").trim();
-  return {
-    subjectId: text(row._id),
-    name: text(row.userName) || text(row.name) || text(row.email) || "Member",
-    subtitle: text(row.roleName) || text(row.email) || "",
-  };
-}
-
-/**
- * Why somebody the operator can see elsewhere is not in this list.
- *
- * Left unexplained, an absence reads as a broken screen — the same reason the
- * resident cascade carries `unitResidentNote`. Returns "" when there is nothing
- * to say, so the caller can render it unconditionally.
- */
-export function hiddenSubjectNote(count: number, noun: "resident" | "member"): string {
-  if (!Number.isFinite(count) || count <= 0) return "";
-  const whole = Math.floor(count);
-  const subject = whole === 1 ? `1 ${noun}` : `${whole} ${noun}s`;
-  const verb = whole === 1 ? "is" : "are";
-  const holder = whole === 1 ? "that person has" : "they have";
-  return `${subject} at this site ${verb} not listed:`
-    + ` HID enrollment needs an app account, and ${holder} none yet.`;
-}