@7365admin1/layer-common 4.97.1-staging.600 → 4.97.1-staging.602

package/components/VisitorForm.vue

@@ -2845,9 +2845,6 @@ const CLEARABLE_ON_UPDATE = [
   "attachments",
 ];
 const OBJECT_ID = /^[a-f0-9]{24}$/i;
-// Users who record a visit they are not witnessing: their visit opens with no
-// check-in / check-out (isecure365 `backOffice`).
-const BACK_OFFICE_USER_TYPES = /^(service-provider|service-provider-member|site)$/i;
 
 // The site's delivery company list (and the typed name snapped to the
 // listed spelling, "grabfood" -> "GrabFood").
@@ -3033,16 +3030,10 @@ function buildPayload(isUpdate: boolean): Record<string, unknown> {
 
   payload.org = prop.org;
   if (userId) payload.createdBy = userId;
-  // Registering a visitor at the guardhouse IS their arrival: checked in as it
-  // is created. A back-office user's visit opens with no times at all.
-  const userType = currentUser.value?.type ?? "";
-  if (BACK_OFFICE_USER_TYPES.test(userType)) {
-    payload.clientUserType = userType;
-    payload.checkIn = null;
-    payload.checkOut = null;
-  } else {
-    payload.checkIn = new Date().toISOString();
-  }
+  // Adding a visitor IS their check-in, whoever adds them - a guard or a
+  // property management user (owner, 2026-10-26). No user type is sent: core
+  // does not take one and refuses it ("clientUserType" is not allowed).
+  payload.checkIn = new Date().toISOString();
   return payload;
 }
 

package/composables/useSecurityPermission.ts

@@ -327,6 +327,38 @@ export default function useSecurityPermission() {
       },
     },
 
+    // People Mgmt in the Security app (owner, 2026-10-27): the same six
+    // actions, spelling and wording as `usePropertyPermission`, because both
+    // apps open the same `/api/people` records.
+    "people-mgmt": {
+      "add-people": {
+        check: true,
+        description: "Allows the user to add a new person to the system.",
+      },
+      "see-all-people": {
+        check: true,
+        description: "Allows the user to view the list of all people.",
+      },
+      "see-people-details": {
+        check: true,
+        description:
+          "Allows the user to view the details of a specific person.",
+      },
+      "update-people": {
+        check: true,
+        description: "Allows the user to update person details.",
+      },
+      "delete-people": {
+        check: true,
+        description:
+          "Allows the user to remove a person from the system permanently.",
+      },
+      "see-people-nric": {
+        check: true,
+        description: "Allows the user to see a person nric from the system.",
+      },
+    },
+
     // "guest-mgmt": {
     //   "add-guest": {
     //     check: true,

package/package.json

@@ -2,7 +2,7 @@
   "name": "@7365admin1/layer-common",
   "license": "MIT",
   "type": "module",
-  "version": "4.97.1-staging.600",
+  "version": "4.97.1-staging.602",
   "author": "7365admin1",
   "main": "./nuxt.config.ts",
   "//files": "What a consumer extending this layer actually loads. Without this npm ships the whole working tree - the changesets, the CI workflows, the render harness in tools/ and any scratch directory that happened to exist at publish time. Nuxt resolves a layer by directory, so every runtime directory below has to stay listed; adding a new top-level runtime directory means adding it here too.",