@7365admin1/layer-common 4.82.1-staging.476 → 4.84.0

package/components/InventoryMain.vue

@@ -149,9 +149,6 @@ const props = defineProps({
 });
 
 const movedFromEquipment = useRoute().query.moved === "equipment";
-// A notification link (`?storeId=&tab=`, NotificationBell): open that store on that tab, once.
-const linkQuery = useRoute().query;
-const linked = { storeId: String(linkQuery.storeId ?? ""), tab: String(linkQuery.tab ?? "") };
 
 const { getStores, createStore: apiCreateStore, getRequests, getReport } = useInventory();
 const { getSites } = useSite();
@@ -230,10 +227,7 @@ async function loadStores() {
   loadError.value = "";
   try {
     stores.value = (await getStores(props.siteId)) ?? [];
-    const fromLink = stores.value.find((s) => s._id === linked.storeId);
-    linked.storeId = "";
-    if (fromLink) storeId.value = fromLink._id;
-    else if (!stores.value.some((s) => s._id === storeId.value)) {
+    if (!stores.value.some((s) => s._id === storeId.value)) {
       // A service provider working at a property store sees it first.
       storeId.value = stores.value[0]?._id ?? "";
     }
@@ -301,10 +295,7 @@ async function createStore() {
 }
 
 watch(storeId, () => {
-  // The linked tab only when this person has it (tabs are hidden, never greyed).
-  const wanted = linked.tab;
-  linked.tab = "";
-  tab.value = wanted && tabs.value.some((t) => t.value === wanted) ? wanted : "stock";
+  tab.value = "stock";
   refreshCounts();
   probeCompanyUsage();
 });

package/components/InvitationClientForm.vue

@@ -388,27 +388,9 @@ watch(
 const roles = ref<any[]>([])
 const { getRoles } = useRole()
 
-/*
- * `type` is the ROLE type, not the service the client subscribes to, and the
- * only caller (`ClientMain.vue` "Invite Client") passes no `app` prop -- so
- * this sent `type: ""` and the endpoint applied no type filter at all. The
- * dropdown therefore listed every org-less role of every type, which includes
- * the platform's OWN staff roles (`type: "admin"` -- the two rows the console's
- * `/super-admin/role-permissions` screen edits). Offering a Seven365 console
- * staff role on a CLIENT invitation is the defect.
- *
- * A client admin's role is `type: "organization"`, which is what the client
- * roles screen (`org/[organization]/roles-permissions.vue`) already lists. This
- * narrows to exactly that. It is a narrowing of this one picker only: no role
- * changes, no permission changes, and the org-less `organization` roles that
- * were already being picked are all still offered.
- *
- * Keying off the selected service instead would empty the dropdown -- no
- * org-less role carries a service type -- so `props.app` is not the filter.
- */
 const { data: roleData, refresh: refreshRoles } = await useLazyAsyncData(
   "roles",
-  () => getRoles({ org: org.value?._id, type: "organization", limit: 50 }),
+  () => getRoles({ org: org.value?._id, type: props.app, limit: 50 }),
   { watch: [() => props.app] }
 )
 

package/components/MyAttendanceMain.vue

@@ -1,31 +1,5 @@
 <template>
   <v-row no-gutters align="center" justify="center">
-    <!-- Site device mode is ON for this site: this shared phone can check other
-         people in and out (owner request 2026-10-01). -->
-    <v-col v-if="siteDeviceMode && canCheckInOut" cols="12" class="mb-4">
-      <v-alert
-        type="info"
-        variant="tonal"
-        icon="mdi-cellphone-check"
-        data-test="site-device-mode-banner"
-      >
-        <div class="font-weight-medium">Site device mode is on</div>
-        <div class="mb-3">
-          This phone can check staff in and out for them: take their photo, type their
-          name and NRIC. Only the last 4 characters of the NRIC are saved.
-        </div>
-        <v-btn
-          class="text-none screen-btn-primary"
-          size="large"
-          variant="flat"
-          prepend-icon="mdi-account-clock"
-          data-test="attendance-proxy-open-btn"
-          @click="dialogShowProxy = true"
-        >
-          Check in / Check out for someone
-        </v-btn>
-      </v-alert>
-    </v-col>
     <v-col cols="12" lg="12">
       <TableMain
         title="Attendance Records"
@@ -97,14 +71,6 @@
     @close="dialogShowMoreActions = false"
   />
 
-  <AttendanceProxyDialog
-    v-if="siteDeviceMode"
-    v-model="dialogShowProxy"
-    :site="props.site"
-    :service-type="props.serviceType"
-    @saved="onProxySaved"
-  />
-
   <Snackbar v-model="messageSnackbar" :text="message" :color="messageColor" />
 </template>
 
@@ -141,31 +107,7 @@ const headers = [
   { title: "Total Hours", value: "totalHours" },
 ];
 
-const { getMyAttendances, checkIn, checkOut, getAttendanceSettings } = useAttendance();
-
-// Site device mode: read once per site. A failed read means OFF (today's flow).
-const siteDeviceMode = ref(false);
-const dialogShowProxy = ref(false);
-watch(
-  () => [props.site, props.serviceType],
-  async () => {
-    siteDeviceMode.value = false;
-    if (!props.site) return;
-    try {
-      const res: any = await getAttendanceSettings(props.site, props.serviceType);
-      siteDeviceMode.value = res?.siteDeviceMode === true;
-    } catch {
-      siteDeviceMode.value = false;
-    }
-  },
-  { immediate: true }
-);
-
-function onProxySaved(text: string) {
-  message.value = text;
-  messageColor.value = "success";
-  messageSnackbar.value = true;
-}
+const { getMyAttendances, checkIn, checkOut } = useAttendance();
 const { formatDate } = useUtils();
 
 const dialogShowMoreActions = ref(false);
@@ -228,7 +170,7 @@ watchEffect(() => {
     const today = new Date().toISOString().split("T")[0];
     todayAttendance.value =
       getMyAttendancesReq.value.items.find((item: any) => {
-        if (!item.checkInTimestamp || item.isProxy) return false;
+        if (!item.checkInTimestamp) return false;
         const itemDate = new Date(item.checkInTimestamp)
           .toISOString()
           .split("T")[0];

package/components/NotificationBell.vue

@@ -127,13 +127,6 @@
         <v-btn variant="text" class="text-none" @click="viewFromToast">View</v-btn>
       </template>
     </v-snackbar>
-
-    <v-snackbar v-model="nowhere.show" location="top right" :timeout="6000" color="surface">
-      <div class="d-flex align-center ga-3">
-        <v-icon icon="mdi-information-outline" color="primary" />
-        <div class="text-body-2">{{ nowhere.text }}</div>
-      </div>
-    </v-snackbar>
   </div>
 </template>
 
@@ -144,7 +137,7 @@ import {
   timeAgo,
   type TInboxItem,
 } from "../utils/notification-inbox";
-import { appUrlsFrom, chooseNavigation, noTargetMessage, notificationTarget } from "../utils/notification-target";
+import { appUrlsFrom, chooseNavigation, notificationTarget } from "../utils/notification-target";
 
 /**
  * The top-bar notification feed for the web, in every signed-in app.
@@ -187,8 +180,6 @@ const markingAll = ref(false);
 const items = ref<Array<Record<string, any>>>([]);
 const unread = ref(0);
 const toast = reactive({ show: false, title: "", body: "" });
-/** Said when a clicked row has no page to open - a click is never a silent nothing. */
-const nowhere = reactive({ show: false, text: "" });
 
 const userId = computed(() => String(currentUser.value?._id ?? ""));
 const badgeLabel = computed(() => badgeText(unread.value));
@@ -350,10 +341,7 @@ async function goToSubject(item: Record<string, any>) {
     hasPage: hasLocalPage,
     appUrls: appUrls(),
   });
-  if (!nav) {
-    Object.assign(nowhere, { show: true, text: noTargetMessage(item as any) });
-    return;
-  }
+  if (!nav) return;
 
   open.value = false;
   if (nav.type === "href") {

package/components/TableMain.vue

@@ -59,32 +59,17 @@
             >
               {{ createLabel }}
             </v-btn>
-            <!--
-              The design's search field. This was a `v-text-field` with only a
-              `max-width`, so inside the actions row it shrank to its minimum
-              and showed "Se" and a magnifier, at a different height and
-              border from the button beside it. Same `search` model; clearing
-              now sets "" instead of Vuetify's null.
-            -->
-            <AppField
+            <v-text-field
               v-if="canSearch"
               v-model="searchInput"
-              search
+              density="compact"
               placeholder="Search"
-              aria-label="Search"
+              clearable
+              max-width="300"
+              append-inner-icon="mdi-magnify"
+              hide-details
               class="table-card__search"
-            >
-              <template v-if="searchInput" #trailing>
-                <button
-                  type="button"
-                  class="app-field__trailing"
-                  aria-label="Clear search"
-                  @click="searchInput = ''"
-                >
-                  <v-icon icon="mdi-close" size="16" />
-                </button>
-              </template>
-            </AppField>
+            />
             <!-- Ghost/secondary, as the design specifies for Scan QR Code. -->
             <v-btn
               v-if="canScanVisitorQRCode"

package/components/VisitorForm.vue

@@ -910,20 +910,8 @@ const hidQrReaderId = computed(() => (
   hidQrConfiguredReaderId.value || String(hidQrReader.value?._id || "")
 ));
 
-/*
- * Visitor QR passes are hidden at the manager's request (2026-09-23).
- *
- * A flag rather than a deletion: issuing, the preview dialog, printing and the
- * regenerate handler below are all intact and untouched, so bringing the
- * feature back is this one line. Every surface that offers a Visitor QR reads
- * `hidQrCodePassAllowed`, which is why the switch belongs here and not in each
- * of them.
- */
-const HID_VISITOR_QR_ENABLED = false;
-
 const hidQrCodePassAllowed = computed(() => {
   return (
-    HID_VISITOR_QR_ENABLED &&
     hidQrCodePassEnabled.value &&
     ["guest", "contractor", "walk-in"].includes(prop.type)
   );

package/components/VisitorManagement.vue

@@ -749,35 +749,11 @@
                 class="visitor-preview__row"
               >
                 <div class="visitor-preview__label">{{ label }}</div>
-                <div>
-                  <!-- Was a hover tooltip on the value: the full NRIC only
-                       reachable by hovering, which says nothing is there to
-                       reach and cannot be reached at all on a touch screen.
-                       The eye alone, at the 14px the Incident Report screens
-                       draw it, is a 14px target - the floor is 24px. So the
-                       NUMBER is the control and the eye is its affordance:
-                       the whole masked value is pressable, which makes the
-                       target the width of the digits rather than of a glyph,
-                       and being a real `button` it also takes a tab stop,
-                       which a `v-icon` with a click handler never did. -->
-                  <button
-                    type="button"
-                    class="visitor-preview__reveal"
-                    :aria-label="showVisitorNric ? 'Hide NRIC' : 'Show NRIC'"
-                    :aria-pressed="showVisitorNric"
-                    @click="showVisitorNric = !showVisitorNric"
-                  >
-                    <span class="visitor-preview__value">
-                      {{
-                        showVisitorNric
-                          ? selectedVisitorObject[key]
-                          : maskNRIC(selectedVisitorObject[key])
-                      }}
-                    </span>
-                    <v-icon size="16" class="visitor-preview__eye">
-                      {{ showVisitorNric ? "mdi-eye-off-outline" : "mdi-eye-outline" }}
-                    </v-icon>
-                  </button>
+                <div
+                  v-tooltip:top="selectedVisitorObject[key]"
+                  class="visitor-preview__value"
+                >
+                  {{ maskNRIC(selectedVisitorObject[key]) }}
                 </div>
               </div>
 
@@ -827,84 +803,6 @@
                 </div>
               </div>
 
-              <!--
-                THE CONTRACTOR'S PARTY.
-
-                The list row has always said `( +2 members)` beside the name
-                and then had nowhere to send you for the names themselves. The
-                block spans both columns rather than sitting in the 116px
-                value track: a member is a record, not a value, and several of
-                them in a 250px column is unreadable.
-
-                Read off `selectedVisitorDataObject` (the raw row) and not
-                `selectedVisitorObject`, which filters itself down to
-                `typeFieldMap` plus five fixed keys - `members` is on neither
-                list, and widening that computed would change what four other
-                dialogs on this screen see.
-              -->
-              <div
-                v-else-if="key === 'members' && selectedVisitorMembers.length"
-                class="visitor-preview__row visitor-preview__row--block"
-              >
-                <div class="visitor-preview__label">
-                  {{ label }} ({{ selectedVisitorMembers.length }})
-                </div>
-                <div class="visitor-preview__members">
-                  <div
-                    v-for="(member, index) in selectedVisitorMembers"
-                    :key="member?.nric || member?.name || index"
-                    class="visitor-preview__member"
-                  >
-                    <div class="visitor-preview__value">
-                      {{ member?.name || "N/A" }}
-                    </div>
-                    <template v-for="field in memberDetailFields" :key="field.key">
-                      <div
-                        v-if="member?.[field.key]"
-                        class="visitor-preview__member-line"
-                      >
-                        <span class="visitor-preview__member-key">
-                          {{ field.label }}
-                        </span>
-                        <!-- A member's NRIC is the same class of data as the
-                             visitor's, so it gets the same control. Each
-                             member reveals separately - one toggle for the
-                             whole card would show three people's NRICs to
-                             read one. -->
-                        <button
-                          v-if="field.key === 'nric'"
-                          type="button"
-                          class="visitor-preview__reveal"
-                          :aria-label="
-                            isMemberNricShown(index)
-                              ? `Hide NRIC for ${member?.name || 'this member'}`
-                              : `Show NRIC for ${member?.name || 'this member'}`
-                          "
-                          :aria-pressed="isMemberNricShown(index)"
-                          @click="toggleMemberNric(index)"
-                        >
-                          <span>
-                            {{
-                              isMemberNricShown(index)
-                                ? member.nric
-                                : maskNRIC(member.nric)
-                            }}
-                          </span>
-                          <v-icon size="16" class="visitor-preview__eye">
-                            {{
-                              isMemberNricShown(index)
-                                ? "mdi-eye-off-outline"
-                                : "mdi-eye-outline"
-                            }}
-                          </v-icon>
-                        </button>
-                        <span v-else>{{ member[field.key] }}</span>
-                      </div>
-                    </template>
-                  </div>
-                </div>
-              </div>
-
               <!-- The vehicle number, with Block on its right: the Registered
                    tab only, for someone who may add vehicles. It opens the
                    Vehicle Mgmt Block Listed form with the category taken from
@@ -2225,71 +2123,6 @@ const isSelectedVisitorPendingApproval = computed(
   () => selectedVisitorStatus.value === "pending"
 );
 
-/**
- * The members a contractor brought with them. Not gated on the Guests tab: the
- * list row's own `( +N members)` count is not either, and a contractor with a
- * party has one wherever the screen shows it.
- *
- * Blank entries are dropped rather than drawn as an empty card - the payload
- * carries `""` for every detail nobody filled in, so a member with no name and
- * no details would otherwise render as a bare inset box.
- */
-const selectedVisitorMembers = computed<Record<string, any>[]>(() => {
-  const members = selectedVisitorDataObject.value?.members;
-  if (!Array.isArray(members)) return [];
-
-  return members.filter(
-    (member: Record<string, any>) =>
-      member?.name || member?.nric || member?.contact || member?.plateNumber
-  );
-});
-
-/**
- * WHICH NRICs ARE UNCOVERED RIGHT NOW.
- *
- * Per member and not per card, so revealing one person's number does not
- * uncover the rest of the party's. Both are cleared when the dialog closes -
- * a preview must not open on the next visitor with the last one's NRIC
- * already showing, and it is the same `selectedVisitorId` that would carry it
- * across if the same row were reopened.
- */
-const showVisitorNric = ref(false);
-const shownMemberNrics = ref<number[]>([]);
-
-function isMemberNricShown(index: number) {
-  return shownMemberNrics.value.includes(index);
-}
-
-function toggleMemberNric(index: number) {
-  shownMemberNrics.value = isMemberNricShown(index)
-    ? shownMemberNrics.value.filter((x) => x !== index)
-    : [...shownMemberNrics.value, index];
-}
-
-watch(
-  () => dialog.viewVisitor,
-  (open) => {
-    if (open) return;
-    showVisitorNric.value = false;
-    shownMemberNrics.value = [];
-  }
-);
-
-/**
- * What a member row prints under the name, in order. `plateNumber` is in here
- * because the API returns it on `members[]` even though neither
- * `TMemberInfo` (this package) nor `TContractorMembers` (API-core's visitor
- * model, name and nric only) declares it - the two types have drifted from the
- * document and from each other. Reading the key defensively costs nothing and
- * shows the vehicle a member actually arrived in; the types are somebody's to
- * reconcile separately.
- */
-const memberDetailFields = [
-  { key: "nric", label: "NRIC" },
-  { key: "contact", label: "Contact" },
-  { key: "plateNumber", label: "Vehicle" },
-] as const;
-
 const formatType = (item: any) =>
   (item.deliveryType ? item.deliveryType + "-" : "") + item.type;
 
@@ -2303,7 +2136,6 @@ const formattedFields = {
   level: "Level",
   unit: "Unit",
   purpose: "Purpose",
-  members: "Members",
   checkIn: "Check In",
   snapshotEntryImage: "Entry Image",
   checkOut: "Check Out",
@@ -3310,100 +3142,6 @@ watchEffect(async () => {
   word-break: break-word;
 }
 
-/* A row whose value is a set of records rather than a value - it drops the
-   two-column grid and runs the full width of the card body. */
-.visitor-preview__row--block {
-  display: block;
-}
-
-.visitor-preview__members {
-  display: flex;
-  flex-direction: column;
-  gap: 8px;
-  margin-top: 8px;
-}
-
-/*
- * An added member reads as an inset on the card it sits in - `--hover` on
- * `--border` at the inner radius. Those are `Card/MemberInfoSummary`'s three
- * decisions, unchanged, so a member looks the same in the preview as it does
- * in the form that created it. Only the TYPE differs: that card still prints
- * `<strong>Label:</strong> value`, which is the pattern this dialog just moved
- * off, so the lines below are set on the scale rather than inherited.
- */
-.visitor-preview__member {
-  padding: 9px 12px;
-  border: 1px solid var(--border);
-  border-radius: var(--r-inner);
-  background: var(--hover);
-}
-
-.visitor-preview__member-line {
-  display: flex;
-  gap: 8px;
-  margin-top: 3px;
-  font-size: var(--fs-breadcrumb);
-  color: var(--text2);
-  word-break: break-word;
-}
-
-.visitor-preview__member-key {
-  flex: 0 0 52px;
-  color: var(--muted);
-}
-
-/*
- * THE NRIC REVEAL.
- *
- * The pressable thing is the masked number, not the glyph beside it: an eye on
- * its own is a 14-16px target where 24px is the floor, and on a 12.5px member
- * line an `AppButton variant="icon"` - the layer's 32px icon square - would
- * make the NRIC line half again the height of the Contact line under it.
- * Pressing the digits gives a target the width of the value at no cost to the
- * rhythm, and reads the right way round: the number is what changes.
- *
- * It inherits its type rather than setting any, so the visitor's NRIC stays on
- * `--fs-cell` and a member's on the `--fs-breadcrumb` of the line it sits in.
- * The negative margin pays back the padding, so a revealed value starts on the
- * same left edge as every other value in the card.
- */
-.visitor-preview__reveal {
-  display: inline-flex;
-  align-items: center;
-  gap: 6px;
-  margin: -3px -7px;
-  padding: 3px 7px;
-  border: none;
-  border-radius: var(--r-inner-sm);
-  background: transparent;
-  font: inherit;
-  color: inherit;
-  text-align: left;
-  cursor: pointer;
-  transition: background var(--motion) ease;
-}
-
-.visitor-preview__reveal:hover {
-  background: var(--hover);
-}
-
-.visitor-preview__reveal:focus-visible {
-  outline: 2px solid var(--accent);
-  outline-offset: 1px;
-}
-
-/* The design's interactive ink - not Vuetify's fixed blue, which is one colour
-   on both themes. `affectedEntities` gives its NRIC eye the same value. */
-.visitor-preview__eye {
-  color: var(--accent-text);
-}
-
-@media (prefers-reduced-motion: reduce) {
-  .visitor-preview__reveal {
-    transition: none;
-  }
-}
-
 /* The width the type filter carried as `max-width="200"` on the v-select. */
 .visitor-type-filter {
   max-width: 200px;

package/composables/useAttendance.ts

@@ -81,60 +81,7 @@ export default function useAttendance() {
     );
   }
 
-  // ---- Site device mode (check in/out for someone on a shared site phone) ----
-
-  function setSiteDeviceMode(site: string, enabled: boolean, serviceType: string = "") {
-    return useNuxtApp().$api<{ message: string; siteDeviceMode: boolean }>(
-      `/api/attendance-settings/site/${site}/device-mode`,
-      { method: "PUT", body: { serviceType, enabled } }
-    );
-  }
-
-  /** The person's photo, stored PRIVATELY by the server (never a public URL). */
-  function uploadAttendancePhoto(site: string, file: File, serviceType: string = "") {
-    const form = new FormData();
-    form.append("file", file);
-    return useNuxtApp().$api<{ id: string }>(`/api/attendances/site/${site}/photo`, {
-      method: "POST",
-      query: { serviceType },
-      body: form,
-    });
-  }
-
-  function proxyCheckOut(site: string, body: Record<string, any>, serviceType: string = "") {
-    return useNuxtApp().$api<{ message: string; id: string }>(
-      `/api/attendances/site/${site}/proxy-check-out`,
-      { method: "POST", body: { ...body, serviceType } }
-    );
-  }
-
-  function getOpenProxyCheckIns(site: string, serviceType: string = "") {
-    return useNuxtApp().$api<{ items: Array<Record<string, any>> }>(
-      `/api/attendances/site/${site}/proxy-open`,
-      { method: "GET", query: { serviceType } }
-    );
-  }
-
-  /** Path of the private photo; read through $api (session), never a public link. */
-  function attendancePhotoPath(id: string, which: "checkIn" | "checkOut") {
-    return `/api/attendances/id/${id}/photo/${which}`;
-  }
-
-  async function getAttendancePhotoUrl(id: string, which: "checkIn" | "checkOut") {
-    const blob = await useNuxtApp().$api<Blob>(attendancePhotoPath(id, which), {
-      method: "GET",
-      responseType: "blob",
-    });
-    return URL.createObjectURL(blob);
-  }
-
   return {
-    setSiteDeviceMode,
-    uploadAttendancePhoto,
-    proxyCheckOut,
-    getOpenProxyCheckIns,
-    attendancePhotoPath,
-    getAttendancePhotoUrl,
     getAttendances,
     getMyAttendances,
     getMyAttendanceById,

package/composables/useAttendancePermission.ts

@@ -57,30 +57,6 @@ export function useAttendancePermission() {
     );
   });
 
-  // Site device mode switch. Widened, never swapped: the new key OR the existing
-  // settings key OR `*` - the same three the server accepts (core
-  // `SITE_DEVICE_MODE_PERMISSIONS`), so an admin who manages attendance
-  // settings today can use it without a role change.
-  const canManageSiteDeviceMode = computed(() => {
-    if (!userAppRole.value) return false;
-    if (moduleDenied("attendance-mgmt")) return false;
-    if (userAppRole.value.permissions.includes("*")) return true;
-    return (
-      hasPermission(
-        userAppRole.value,
-        permissions,
-        "attendance-mgmt",
-        "manage-site-device-mode"
-      ) ||
-      hasPermission(
-        userAppRole.value,
-        permissions,
-        "attendance-mgmt",
-        "manage-attendance-settings"
-      )
-    );
-  });
-
   const canViewOwnAttendance = computed(() => {
     if (!userAppRole.value) return false;
     if (moduleDenied("my-attendance")) return false;
@@ -109,7 +85,6 @@ export function useAttendancePermission() {
     canViewAllAttendance,
     canViewAttendanceDetails,
     canManageAttendanceSettings,
-    canManageSiteDeviceMode,
     canViewOwnAttendance,
     canCheckInOut,
   };

package/composables/useCleaningPermission.ts

@@ -221,11 +221,6 @@ export default function useCleaningPermission() {
         description:
           "Allows the user to configure and manage attendance settings.",
       },
-      "manage-site-device-mode": {
-        check: true,
-        description:
-          "Allows the user to turn Site device mode on or off: one shared phone at the site checks staff in and out with a photo, their name and the last 4 characters of their NRIC.",
-      },
     },
     // my attendance permissions
     "my-attendance": {