@feedmepos/mf-hrm-portal 2.2.2-dev → 2.2.2

package/dist/{rule-TR3MVo-b.js → rule-raGIIqlH.js}

@@ -1,7 +1,7 @@
-import { s as W, c as Z, e as h } from "./iteration-BTZViJtd.js";
-import { h as O, P as V, e as _, b as F, n as j, d as q } from "./app-Bbf6hEPt.js";
+import { s as W, c as Z, e as h } from "./iteration-CMXHdaKL.js";
+import { h as O, P as V, e as _, b as F, n as j, d as q } from "./app-BJKd6Faz.js";
 import { s as ee } from "./utils-BZkjJbju.js";
-import { g as b, b as v, q as x, u as te } from "./restaurant-BTpBmfBV.js";
+import { g as b, b as v, q as x, u as te } from "./restaurant-DiYb0pCm.js";
 import { defineStore as z, storeToRefs as K } from "pinia";
 import { ref as S, computed as U } from "vue";
 import { useCoreStore as X } from "@feedmepos/mf-common";
@@ -31,7 +31,11 @@ const L = [
     label: "",
     subject: "order",
     actions: ["update"],
-    conditions: { operation: "void" },
+    // 'void_' (not 'void') — POS saves role/ability data straight to CouchDB, and
+    // 'void' is a reserved word in the POS Flutter/Dart client, so the identifier
+    // POS actually evaluates against (and sends to the approval-code validate
+    // endpoint) is already 'void_'. Keep in sync with approval-code-rules.ts.
+    conditions: { operation: "void_" },
     inverted: !1,
     reason: null
   },
@@ -327,7 +331,10 @@ const L = [
     label: "",
     subject: "report",
     actions: ["read"],
-    conditions: { name: "void" },
+    // 'void_' (not 'void') to match the report-query service's permissionKey and the
+    // value already persisted in CouchDB — 'void' is a reserved word in the POS
+    // Flutter/Dart client. See pos-role.service.ts / pos-role.helpers.ts.
+    conditions: { name: "void_" },
     inverted: !1,
     reason: ""
   },
@@ -354,14 +361,14 @@ const L = [
   async create(e) {
     return b(await v().post(E, e));
   },
-  async update(e, s) {
-    return b(await v().put(`${E}/${e}`, s));
+  async update(e, t) {
+    return b(await v().put(`${E}/${e}`, t));
   },
   async delete(e) {
     return b(await v().delete(`${E}/${e}`));
   }
 }, se = z("permissionSet", () => {
-  const { currentBusiness: e } = X(), s = S([]), o = S(!1), n = S(null);
+  const { currentBusiness: e } = X(), t = S([]), o = S(!1), n = S(null);
   async function r() {
     var l;
     const c = ((l = e.value) == null ? void 0 : l._id) ?? null;
@@ -369,32 +376,32 @@ const L = [
       try {
         o.value = !0;
         const d = await N.read();
-        s.value = u(d), n.value = c;
+        t.value = u(d), n.value = c;
       } finally {
         o.value = !1;
       }
   }
-  async function t(c) {
+  async function s(c) {
     const l = await N.create(c);
-    s.value = u([...s.value, l]);
+    t.value = u([...t.value, l]);
   }
-  async function i(c, l) {
+  async function a(c, l) {
     const d = await N.update(c, l);
-    s.value = u(s.value.map((f) => f.id === c ? d : f));
+    t.value = u(t.value.map((m) => m.id === c ? d : m));
   }
-  async function a(c) {
-    await N.delete(c), s.value = u(s.value.filter((l) => l.id !== c));
+  async function i(c) {
+    await N.delete(c), t.value = u(t.value.filter((l) => l.id !== c));
   }
   function u(c) {
     return c.sort((l, d) => l.name.localeCompare(d.name));
   }
   return {
-    permissionSets: s,
+    permissionSets: t,
     isLoading: o,
     readPermissionSets: r,
-    createPermissionSet: t,
-    updatePermissionSet: i,
-    deletePermissionSet: a
+    createPermissionSet: s,
+    updatePermissionSet: a,
+    deletePermissionSet: i
   };
 }), ne = () => {
   const e = se();
@@ -419,60 +426,60 @@ function k(e) {
 }
 function y(e) {
   return e ? Object.values(e).every(
-    (s) => s !== null && typeof s == "object" && !Array.isArray(s) && Object.keys(s).length === 1 && Array.isArray(s.$in)
+    (t) => t !== null && typeof t == "object" && !Array.isArray(t) && Object.keys(t).length === 1 && Array.isArray(t.$in)
   ) : !0;
 }
 function Q(e) {
-  const s = /* @__PURE__ */ new Map(), o = /* @__PURE__ */ new Map(), n = (r, t, i) => {
-    var a, u;
-    const c = k(t.conditions);
-    let l = `${t.subject}::${JSON.stringify([...t.actions].sort())}`;
+  const t = /* @__PURE__ */ new Map(), o = /* @__PURE__ */ new Map(), n = (r, s, a) => {
+    var i, u;
+    const c = k(s.conditions);
+    let l = `${s.subject}::${JSON.stringify([...s.actions].sort())}`;
     y(c) || (l += `::${JSON.stringify(c)}`);
     const d = r.get(l);
     if (!d) {
-      r.set(l, { ...t, setNames: [i.name], setId: i._id });
+      r.set(l, { ...s, setNames: [a.name], setId: a._id });
       return;
     }
-    d.setNames.push(i.name);
-    const f = k(d.conditions);
-    if (!f || !c) {
+    d.setNames.push(a.name);
+    const m = k(d.conditions);
+    if (!m || !c) {
       d.conditions = void 0;
       return;
     }
-    for (const m in c)
-      (a = f[m]) != null && a.$in && (u = c[m]) != null && u.$in ? f[m].$in = Array.from(
-        /* @__PURE__ */ new Set([...f[m].$in, ...c[m].$in])
-      ) : f[m] || (f[m] = c[m]);
-    d.conditions = JSON.stringify(f);
+    for (const f in c)
+      (i = m[f]) != null && i.$in && (u = c[f]) != null && u.$in ? m[f].$in = Array.from(
+        /* @__PURE__ */ new Set([...m[f].$in, ...c[f].$in])
+      ) : m[f] || (m[f] = c[f]);
+    d.conditions = JSON.stringify(m);
   };
   for (const r of e)
-    for (const t of r.permissions)
-      n(t.inverted ? o : s, t, r);
-  return [...Array.from(s.values()), ...Array.from(o.values())];
+    for (const s of r.permissions)
+      n(s.inverted ? o : t, s, r);
+  return [...Array.from(t.values()), ...Array.from(o.values())];
 }
-function B(e, s) {
-  return `${e}::${[...s].sort().join(",")}`;
+function B(e, t) {
+  return `${e}::${[...t].sort().join(",")}`;
 }
-function G(e, s) {
-  const o = [...e], n = /* @__PURE__ */ new Set(), r = /* @__PURE__ */ new Set(), t = /* @__PURE__ */ new Set();
-  for (const a of e) {
-    const u = O(a.subject);
-    n.add(B(u, a.actions)), a.inverted && a.actions.includes("manage") && r.add(`set_${u}`), !a.inverted && a.actions.includes("manage") && t.add(u);
+function G(e, t) {
+  const o = [...e], n = /* @__PURE__ */ new Set(), r = /* @__PURE__ */ new Set(), s = /* @__PURE__ */ new Set();
+  for (const i of e) {
+    const u = O(i.subject);
+    n.add(B(u, i.actions)), i.inverted && i.actions.includes("manage") && r.add(`set_${u}`), !i.inverted && i.actions.includes("manage") && s.add(u);
   }
-  const i = [...e];
-  for (; i.length > 0; ) {
-    const a = i.shift(), u = `set_${O(a.subject)}`, c = s[u];
-    if (!c || r.has(u) || !a.actions.includes("manage") || a.inverted) continue;
+  const a = [...e];
+  for (; a.length > 0; ) {
+    const i = a.shift(), u = `set_${O(i.subject)}`, c = t[u];
+    if (!c || r.has(u) || !i.actions.includes("manage") || i.inverted) continue;
     r.add(u);
-    const l = oe(a);
-    a.source && !a.source.trace && (a.source = { ...a.source, trace: l });
+    const l = oe(i);
+    i.source && !i.source.trace && (i.source = { ...i.source, trace: l });
     const d = [...l, `${c.name} (system)`];
-    for (const f of c.permissions ?? []) {
-      const m = O(f.subject), p = B(m, f.actions);
-      n.has(p) || t.has(m) || (n.add(p), o.push({
-        ...f,
+    for (const m of c.permissions ?? []) {
+      const f = O(m.subject), p = B(f, m.actions);
+      n.has(p) || s.has(f) || (n.add(p), o.push({
+        ...m,
         // FdoPermissionRule.fields is string[] | null; RawRule expects string[] | undefined
-        fields: f.fields ?? void 0,
+        fields: m.fields ?? void 0,
         source: {
           type: "systemPermissionSet",
           permissionSetId: c.key,
@@ -481,9 +488,9 @@ function G(e, s) {
         }
       }));
     }
-    for (const f of c.permissionSets ?? []) {
-      const m = O(f), p = B(m, ["manage"]), g = {
-        subject: m,
+    for (const m of c.permissionSets ?? []) {
+      const f = O(m), p = B(f, ["manage"]), g = {
+        subject: f,
         actions: ["manage"],
         source: {
           type: "systemPermissionSet",
@@ -492,16 +499,16 @@ function G(e, s) {
           trace: d
         }
       };
-      n.has(p) || (n.add(p), o.push(g)), i.push(g);
+      n.has(p) || (n.add(p), o.push(g)), a.push(g);
     }
   }
-  return [...o.filter((a) => !a.inverted), ...o.filter((a) => a.inverted)];
+  return [...o.filter((i) => !i.inverted), ...o.filter((i) => i.inverted)];
 }
 function oe(e) {
   if (!e.source) return [];
-  const { type: s, trace: o, permissionSetName: n } = e.source;
+  const { type: t, trace: o, permissionSetName: n } = e.source;
   if (o && o.length > 0) return o;
-  switch (s) {
+  switch (t) {
     case "permissionSet":
       return n ? [n] : [];
     case "custom":
@@ -510,43 +517,43 @@ function oe(e) {
       return [];
   }
 }
-function H(e, s, o = /* @__PURE__ */ new Set()) {
+function H(e, t, o = /* @__PURE__ */ new Set()) {
   var r;
   const n = [];
-  for (const t of e) {
-    if (o.has(t)) continue;
-    o.add(t);
-    const i = s.find((a) => a.id === t);
-    i && (n.push(i), (r = i.permissionSetIds) != null && r.length && n.push(...H(i.permissionSetIds, s, o)));
+  for (const s of e) {
+    if (o.has(s)) continue;
+    o.add(s);
+    const a = t.find((i) => i.id === s);
+    a && (n.push(a), (r = a.permissionSetIds) != null && r.length && n.push(...H(a.permissionSetIds, t, o)));
   }
   return n;
 }
 function Ie(e) {
-  const s = Q(e).map(
-    ({ setNames: r, setId: t, ...i }) => i
-  ), o = s.filter((r) => !r.inverted), n = s.filter((r) => r.inverted);
+  const t = Q(e).map(
+    ({ setNames: r, setId: s, ...a }) => a
+  ), o = t.filter((r) => !r.inverted), n = t.filter((r) => r.inverted);
   return M(o, n);
 }
-function Ae(e, s, o) {
+function Ae(e, t, o) {
   const n = /* @__PURE__ */ new Map();
   return e.forEach(
-    ({ name: r, permissions: t }) => t.forEach(({ conditions: i, actions: a }) => {
+    ({ name: r, permissions: s }) => s.forEach(({ conditions: a, actions: i }) => {
       var c, l;
-      const u = JSON.parse(i || "{}");
-      (c = u[s]) != null && c.$in ? (l = u[s]) == null || l.$in.forEach(
+      const u = JSON.parse(a || "{}");
+      (c = u[t]) != null && c.$in ? (l = u[t]) == null || l.$in.forEach(
         (d) => (n.get(d) ?? n.set(d, /* @__PURE__ */ new Set()).get(d)).add(r)
-      ) : a[0] === "manage" && o.forEach((d) => {
+      ) : i[0] === "manage" && o.forEach((d) => {
         (n.get(d) ?? n.set(d, /* @__PURE__ */ new Set()).get(d)).add(r);
       });
     })
-  ), [...n].map(([r, t]) => ({
+  ), [...n].map(([r, s]) => ({
     id: r,
-    setNames: [...t]
+    setNames: [...s]
   }));
 }
-function Oe(e, s) {
-  const o = (a, u) => {
-    const c = { ...a }, l = JSON.parse(c.conditions || "{}");
+function Oe(e, t) {
+  const o = (i, u) => {
+    const c = { ...i }, l = JSON.parse(c.conditions || "{}");
     if (u)
       if (u.length > 0) {
         const d = Object.keys(l)[0];
@@ -558,45 +565,45 @@ function Oe(e, s) {
       inverted: !0,
       ...c.conditions && { conditions: JSON.stringify(l) }
     };
-  }, n = new Map(e.map((a) => [a.subject, a])), r = new Map(s.map((a) => [a.subject, a])), t = [], i = /* @__PURE__ */ new Set([...n.keys(), ...r.keys()]);
-  for (const a of i) {
-    const u = n.get(a), c = r.get(a);
+  }, n = new Map(e.map((i) => [i.subject, i])), r = new Map(t.map((i) => [i.subject, i])), s = [], a = /* @__PURE__ */ new Set([...n.keys(), ...r.keys()]);
+  for (const i of a) {
+    const u = n.get(i), c = r.get(i);
     if (u && c) {
       if (u.conditions && c.conditions) {
         const l = JSON.parse(u.conditions), d = JSON.parse(c.conditions);
         if (!y(l) || !y(d)) {
-          JSON.stringify(l) !== JSON.stringify(d) && t.push(c);
+          JSON.stringify(l) !== JSON.stringify(d) && s.push(c);
           continue;
         }
-        const f = Object.keys(l)[0], m = l[f].$in.filter(
-          (g) => !d[f].$in.includes(g)
+        const m = Object.keys(l)[0], f = l[m].$in.filter(
+          (g) => !d[m].$in.includes(g)
         );
-        m.length > 0 && t.push(o(u, m)), d[f].$in.filter(
-          (g) => !l[f].$in.includes(g)
-        ).length > 0 && t.push(c);
+        f.length > 0 && s.push(o(u, f)), d[m].$in.filter(
+          (g) => !l[m].$in.includes(g)
+        ).length > 0 && s.push(c);
       } else if (!u.conditions && c.conditions)
-        t.push(c);
+        s.push(c);
       else if (u.conditions && !c.conditions)
-        y(JSON.parse(u.conditions)) || t.push(c);
+        y(JSON.parse(u.conditions)) || s.push(c);
       else if (!u.conditions && !c.conditions) {
-        const l = new Set(u.actions), d = new Set(c.actions), f = c.actions.some((p) => !l.has(p)), m = u.actions.filter((p) => !d.has(p));
-        if (f) {
+        const l = new Set(u.actions), d = new Set(c.actions), m = c.actions.some((p) => !l.has(p)), f = u.actions.filter((p) => !d.has(p));
+        if (m) {
           const p = c.actions.filter((g) => !l.has(g));
-          t.push({
+          s.push({
             ...c,
             actions: p
           });
         }
-        m.length > 0 && t.push({
+        f.length > 0 && s.push({
           ...u,
-          actions: m,
+          actions: f,
           inverted: !0
         });
       }
       continue;
     }
     if (u) {
-      t.push(
+      s.push(
         o(
           u,
           // If base has conditions, set diffIds to empty array, disallow all access to collection
@@ -606,122 +613,122 @@ function Oe(e, s) {
       );
       continue;
     }
-    c && t.push(c);
+    c && s.push(c);
   }
-  return t;
+  return s;
 }
 function _e(e) {
-  const s = G(
+  const t = G(
     e,
     V
   ), o = new Set(
-    s.filter((r) => {
-      var t;
-      return ((t = r.source) == null ? void 0 : t.type) === "systemPermissionSet" && !r.inverted;
+    t.filter((r) => {
+      var s;
+      return ((s = r.source) == null ? void 0 : s.type) === "systemPermissionSet" && !r.inverted;
     }).map((r) => r.subject)
   ), n = new Set(
-    s.filter(
+    t.filter(
       (r) => {
-        var t;
-        return ((t = r.source) == null ? void 0 : t.type) === "systemPermissionSet" && !r.inverted && r.actions.includes("manage");
+        var s;
+        return ((s = r.source) == null ? void 0 : s.type) === "systemPermissionSet" && !r.inverted && r.actions.includes("manage");
       }
     ).map((r) => r.subject)
   );
   return e.filter((r) => r.inverted ? !(o.has(r.subject) && !n.has(r.subject)) : !o.has(r.subject));
 }
 const re = "business::report::";
-function Ee(e, s) {
+function Ee(e, t) {
   const o = [], n = e.filter((r) => {
-    const t = r.subject;
-    return !t.startsWith(re) || s.has(t) ? !0 : (o.push(t), !1);
+    const s = r.subject;
+    return !s.startsWith(re) || t.has(s) ? !0 : (o.push(s), !1);
   });
   return o.length > 0 && console.warn("[filterStalePermissions] dropped stale report permissions:", o), n;
 }
 const ie = "business::report::reports::", ae = _.Subject.Business.report_reports_allDefaultReports, ce = _.Subject.Business.report_reports_allCustomReports;
-function ue(e, s) {
-  return e.conditions ? !!s.conditions && e.conditions === s.conditions : !s.conditions;
+function ue(e, t) {
+  return e.conditions ? !!t.conditions && e.conditions === t.conditions : !t.conditions;
 }
-function Ne(e, s) {
+function Ne(e, t) {
   const o = e.find(
-    (i) => !i.inverted && i.subject === ae
+    (a) => !a.inverted && a.subject === ae
   ), n = e.find(
-    (i) => !i.inverted && i.subject === ce
+    (a) => !a.inverted && a.subject === ce
   );
   if (!o && !n) return e;
-  const r = o ? new Set(o.actions) : null, t = n ? new Set(n.actions) : null;
-  return e.reduce((i, a) => {
-    if (a.inverted)
-      return i.push(a), i;
-    const u = a.subject;
+  const r = o ? new Set(o.actions) : null, s = n ? new Set(n.actions) : null;
+  return e.reduce((a, i) => {
+    if (i.inverted)
+      return a.push(i), a;
+    const u = i.subject;
     if (!u.startsWith(ie))
-      return i.push(a), i;
-    const c = s.has(u), l = c ? r : t, d = c ? o : n;
-    if (!l || !d || !ue(d, a))
-      return i.push(a), i;
-    if (l.has("manage")) return i;
-    const f = a.actions;
-    if (f.includes("manage"))
-      return i.push(a), i;
-    const m = new Set(f);
+      return a.push(i), a;
+    const c = t.has(u), l = c ? r : s, d = c ? o : n;
+    if (!l || !d || !ue(d, i))
+      return a.push(i), a;
+    if (l.has("manage")) return a;
+    const m = i.actions;
+    if (m.includes("manage"))
+      return a.push(i), a;
+    const f = new Set(m);
     for (const p of l)
-      m.delete(p);
-    return m.size === 0 || i.push({ ...a, actions: Array.from(m) }), i;
+      f.delete(p);
+    return f.size === 0 || a.push({ ...i, actions: Array.from(f) }), a;
   }, []);
 }
-function M(e, s) {
+function M(e, t) {
   var n, r;
-  const o = new Map(e.map((t) => [t.subject, t]));
-  for (const t of s) {
-    if (t.inverted) {
-      const a = o.get(t.subject);
-      if (t.conditions) {
-        if (a != null && a.conditions) {
-          const u = JSON.parse(a.conditions), c = JSON.parse(t.conditions);
+  const o = new Map(e.map((s) => [s.subject, s]));
+  for (const s of t) {
+    if (s.inverted) {
+      const i = o.get(s.subject);
+      if (s.conditions) {
+        if (i != null && i.conditions) {
+          const u = JSON.parse(i.conditions), c = JSON.parse(s.conditions);
           if (!y(u) || !y(c)) {
-            o.delete(t.subject);
+            o.delete(s.subject);
             continue;
           }
-          const l = Object.keys(c)[0], d = ((n = c[l]) == null ? void 0 : n.$in) ?? [], m = (((r = u[l]) == null ? void 0 : r.$in) ?? []).filter((p) => !d.includes(p));
-          m.length > 0 ? o.set(t.subject, {
-            ...a,
-            conditions: JSON.stringify({ [l]: { $in: m } })
-          }) : o.delete(t.subject);
+          const l = Object.keys(c)[0], d = ((n = c[l]) == null ? void 0 : n.$in) ?? [], f = (((r = u[l]) == null ? void 0 : r.$in) ?? []).filter((p) => !d.includes(p));
+          f.length > 0 ? o.set(s.subject, {
+            ...i,
+            conditions: JSON.stringify({ [l]: { $in: f } })
+          }) : o.delete(s.subject);
         } else
-          o.delete(t.subject);
+          o.delete(s.subject);
         continue;
       }
-      if (a) {
-        const u = new Set(t.actions), c = a.actions.filter((l) => !u.has(l));
-        c.length > 0 ? o.set(t.subject, { ...a, actions: c }) : o.delete(t.subject);
+      if (i) {
+        const u = new Set(s.actions), c = i.actions.filter((l) => !u.has(l));
+        c.length > 0 ? o.set(s.subject, { ...i, actions: c }) : o.delete(s.subject);
         continue;
       }
       continue;
     }
-    if (t.conditions) {
-      o.set(t.subject, t);
+    if (s.conditions) {
+      o.set(s.subject, s);
       continue;
     }
-    const i = o.get(t.subject);
-    if (i != null && i.conditions && !y(JSON.parse(i.conditions))) {
-      o.set(t.subject, t);
+    const a = o.get(s.subject);
+    if (a != null && a.conditions && !y(JSON.parse(a.conditions))) {
+      o.set(s.subject, s);
       continue;
     }
-    if (i) {
-      const a = [
+    if (a) {
+      const i = [
         .../* @__PURE__ */ new Set([
-          ...i.actions,
-          ...t.actions
+          ...a.actions,
+          ...s.actions
         ])
       ];
-      o.set(t.subject, { ...i, actions: a });
+      o.set(s.subject, { ...a, actions: i });
     } else
-      o.set(t.subject, t);
+      o.set(s.subject, s);
   }
   return Array.from(o.values());
 }
-function le(e, s) {
-  const o = M(e, s), n = new Set(e.map((t) => t.subject)), r = s.filter(
-    (t) => t.inverted && !n.has(t.subject)
+function le(e, t) {
+  const o = M(e, t), n = new Set(e.map((s) => s.subject)), r = t.filter(
+    (s) => s.inverted && !n.has(s.subject)
   );
   return [...o, ...r];
 }
@@ -738,64 +745,64 @@ const P = "/permission-assignments", R = {
   async create(e) {
     return b(await v().post(P, e));
   },
-  async update(e, s) {
-    return b(await v().put(`${P}/${e}`, s));
+  async update(e, t) {
+    return b(await v().put(`${P}/${e}`, t));
   },
   async delete(e) {
     return b(await v().delete(`${P}/${e}`));
   },
-  async addReportManagePermission(e, s) {
+  async addReportManagePermission(e, t) {
     return b(
-      await v().post("/my-permissions/report-manage", { permissionKey: e, label: s })
+      await v().post("/my-permissions/report-manage", { permissionKey: e, label: t })
     );
   }
 }, de = z("permissionAssignment", () => {
   const e = S([]);
-  async function s() {
-    const a = await R.readAll();
-    e.value = a;
+  async function t() {
+    const i = await R.readAll();
+    e.value = i;
   }
-  async function o(a) {
-    return await R.readByUserId(a);
+  async function o(i) {
+    return await R.readByUserId(i);
   }
-  async function n(a) {
-    const u = await R.create(a);
+  async function n(i) {
+    const u = await R.create(i);
     e.value = [...e.value, u];
   }
-  async function r(a, u) {
-    const c = await R.update(a, u);
-    e.value = e.value.map((l) => l.id === a ? c : l);
+  async function r(i, u) {
+    const c = await R.update(i, u);
+    e.value = e.value.map((l) => l.id === i ? c : l);
   }
-  async function t(a) {
-    await R.delete(a), e.value = e.value.filter((u) => u.id !== a);
+  async function s(i) {
+    await R.delete(i), e.value = e.value.filter((u) => u.id !== i);
   }
-  function i(a) {
-    return e.value.find((u) => u.userId === a);
+  function a(i) {
+    return e.value.find((u) => u.userId === i);
   }
   return {
     permissionAssignments: e,
-    readPermissionAssignments: s,
+    readPermissionAssignments: t,
     readPermissionAssignmentByUserId: o,
     createPermissionAssignment: n,
     updatePermissionAssignment: r,
-    deletePermissionAssignment: t,
-    getPermissionAssignmentByUserId: i
+    deletePermissionAssignment: s,
+    getPermissionAssignmentByUserId: a
   };
-}), fe = () => {
+}), me = () => {
   const e = de();
   return {
     ...e,
     ...K(e)
   };
-}, me = {
-  async fetchReportPermissions(e, s) {
-    const o = s ? { lang: s } : {};
+}, fe = {
+  async fetchReportPermissions(e, t) {
+    const o = t ? { lang: t } : {};
     return b(
       await x().get(`/report-query/hrm/${e}/reports`, { params: o })
     );
   },
-  async fetchReportPermissionsForPortal(e, s) {
-    const o = s ? { isSupportPos: !1, lang: s } : { isSupportPos: !1 };
+  async fetchReportPermissionsForPortal(e, t) {
+    const o = t ? { isSupportPos: !1, lang: t } : { isSupportPos: !1 };
     return b(
       await x().get(`/report-query/hrm/${e}/reports`, { params: o })
     );
@@ -803,9 +810,9 @@ const P = "/permission-assignments", R = {
 }, C = S([]), T = S(!1), $ = S(!1), I = S(null), D = S(null), J = S(!1);
 function pe() {
   const e = X();
-  async function s() {
-    var t;
-    const n = (t = e.currentBusiness.value) == null ? void 0 : t.id;
+  async function t() {
+    var s;
+    const n = (s = e.currentBusiness.value) == null ? void 0 : s.id;
     if (!n) return;
     const r = localStorage.getItem("locale");
     if (I.value !== n && (C.value = [], T.value = !1, $.value = !1, I.value = n, J.value = !1), !(T.value && D.value === r)) {
@@ -815,14 +822,14 @@ function pe() {
       }
       $.value = !0;
       try {
-        const i = await me.fetchReportPermissionsForPortal(n, r);
+        const a = await fe.fetchReportPermissionsForPortal(n, r);
         if (I.value !== n) return;
-        C.value = i, T.value = !0, D.value = r;
-      } catch (i) {
+        C.value = a, T.value = !0, D.value = r;
+      } catch (a) {
         if (I.value !== n) return;
-        console.warn("Failed to fetch custom report permissions:", i), C.value = [];
+        console.warn("Failed to fetch custom report permissions:", a), C.value = [];
       } finally {
-        I.value === n && ($.value = !1, J.value && (J.value = !1, await s()));
+        I.value === n && ($.value = !1, J.value && (J.value = !1, await t()));
       }
     }
   }
@@ -846,25 +853,25 @@ function pe() {
     }
   ));
   return {
-    fetchCustomReportPermissions: s,
+    fetchCustomReportPermissions: t,
     customReportPermissions: o,
     isLoading: U(() => $.value),
     isLoaded: U(() => T.value)
   };
 }
 function A(e) {
-  const s = ne(), o = fe(), n = te().restaurants, { customReportPermissions: r } = pe(), t = o.getPermissionAssignmentByUserId(e.id), i = H(
-    (t == null ? void 0 : t.permissionSetIds) ?? [],
-    s.permissionSets.value
-  ), a = Q(i).map(
+  const t = ne(), o = me(), n = te().restaurants, { customReportPermissions: r } = pe(), s = o.getPermissionAssignmentByUserId(e.id), a = H(
+    (s == null ? void 0 : s.permissionSetIds) ?? [],
+    t.permissionSets.value
+  ), i = Q(a).map(
     ({ setNames: p, ...g }) => g
-  ), u = t == null ? void 0 : t.customPermissions, c = u ?? e.permissions.map((p) => ({
+  ), u = s == null ? void 0 : s.customPermissions, c = u ?? e.permissions.map((p) => ({
     ...p,
     subject: O(p.subject)
-  })), l = M(a, c), d = G(
-    le(a, c),
+  })), l = M(i, c), d = G(
+    le(i, c),
     V
-  ).filter((p) => !p.inverted), f = ve(d), m = f ?? n.value.map((p) => p._id);
+  ).filter((p) => !p.inverted), m = ve(d), f = m ?? n.value.map((p) => p._id);
   return {
     doc: e,
     id: e.id,
@@ -872,12 +879,12 @@ function A(e) {
     phoneNumber: e.phoneNumber,
     email: e.email,
     restaurants: W(
-      m.map((p) => {
+      f.map((p) => {
         var g;
         return ((g = n.value.find((Y) => Y._id === p)) == null ? void 0 : g.profile.name) ?? "";
       })
     ),
-    managableRestaurantIds: f,
+    managableRestaurantIds: m,
     permissionLabels: Se(d, r.value),
     permissions: l
   };
@@ -892,7 +899,7 @@ const be = Object.freeze(
   },
   async readTeamMembersPage(e) {
     var o, n, r;
-    const s = b(
+    const t = b(
       await v().get("/portal-users/paged", {
         params: {
           limit: e.limit,
@@ -905,8 +912,8 @@ const be = Object.freeze(
       })
     );
     return {
-      items: s.items.map(A),
-      total: s.total
+      items: t.items.map(A),
+      total: t.total
     };
   },
   async readTeamMember(e) {
@@ -919,33 +926,33 @@ const be = Object.freeze(
       b(await v().post("/portal-users", e))
     );
   },
-  async updateTeamMember(e, s) {
+  async updateTeamMember(e, t) {
     return A(
-      b(await v().put(`/portal-users/${e}`, s))
+      b(await v().put(`/portal-users/${e}`, t))
     );
   },
   async deleteTeamMember(e) {
     return b(await v().delete(`/portal-users/${e}`));
   },
   async readTeamMemberPosUserIds() {
-    return b(await v().get("/portal-users")).map((s) => s.posUserId);
+    return b(await v().get("/portal-users")).map((t) => t.posUserId);
   }
 };
-function Te(e, s, o) {
-  if (e.some((i) => i.subject === "all")) return "All";
+function Te(e, t, o) {
+  if (e.some((a) => a.subject === "all")) return "All";
   const n = (o ?? L).filter(
-    (i) => i.subject === s
-  ), r = new Set(n.map((i) => w(i).value)), t = e.filter((i) => i.subject === s).filter((i) => r.has(w(i).value));
-  return t.length === n.length ? "All" : t.length === 0 ? "-" : `${t.length} permission allow`;
+    (a) => a.subject === t
+  ), r = new Set(n.map((a) => w(a).value)), s = e.filter((a) => a.subject === t).filter((a) => r.has(w(a).value));
+  return s.length === n.length ? "All" : s.length === 0 ? "-" : `${s.length} permission allow`;
 }
 function w(e) {
-  const s = Z(e), o = s.subject;
+  const t = Z(e), o = t.subject;
   return {
-    ...s,
+    ...t,
     get conditions() {
-      if (typeof s.conditions != "string") return s.conditions;
+      if (typeof t.conditions != "string") return t.conditions;
       try {
-        return JSON.parse(s.conditions);
+        return JSON.parse(t.conditions);
       } catch {
         return;
       }
@@ -960,72 +967,92 @@ function w(e) {
     get isReportPermission() {
       return o === h.F_RULE_SUBJECT.enum.report;
     },
+    /**
+     * Order and report rules are only meaningful together with the condition
+     * that names them. A rule missing it cannot be rendered or matched against
+     * the available permission list, so callers must preserve it verbatim —
+     * see `splitRoleFormPermissions`, which routes it to `passthrough`, not
+     * `dropped`. Dropping it would silently revoke a grant the portal cannot
+     * display (HRM-0027).
+     */
+    get isResolvable() {
+      return this.discriminator !== void 0;
+    },
+    /**
+     * The condition value that identifies this rule, if the subject needs one.
+     * An empty condition counts as missing: `{ name: '' }` is a known corrupted
+     * shape that used to resolve to the first hardcoded report permission on
+     * save (HRM-0027), so it must not look resolvable here either.
+     */
+    get discriminator() {
+      var n, r;
+      return this.isOrderOperation ? ((n = this.conditions) == null ? void 0 : n.operation) || void 0 : this.isReportPermission ? ((r = this.conditions) == null ? void 0 : r.name) || void 0 : o.toString();
+    },
     get formatted() {
-      var r, t;
-      const n = (i) => i.endsWith("_") ? i.slice(0, i.length - 1) : i;
-      return this.isOrderOperation ? n(((r = this.conditions) == null ? void 0 : r.operation) ?? "") : this.isReportPermission ? n(((t = this.conditions) == null ? void 0 : t.name) ?? "") : o.toString();
+      const n = this.discriminator;
+      return n === void 0 ? o.toString() : n.endsWith("_") ? n.slice(0, n.length - 1) : n;
     },
     get label() {
-      return s.label || ee(this.formatted);
+      return t.label || ee(this.formatted);
     },
     get value() {
-      var n, r;
-      return this.isOrderOperation ? `${o}:${(n = this.conditions) == null ? void 0 : n.operation}` : this.isReportPermission ? `${o}:${(r = this.conditions) == null ? void 0 : r.name}` : o.toString();
+      const n = this.discriminator;
+      return this.isOrderOperation || this.isReportPermission ? n === void 0 ? o.toString() : `${o}:${n}` : o.toString();
     }
   };
 }
 function Je(e) {
   var n, r;
-  const s = e.map((t) => w(t)).find((t) => t.isDiscountOperation);
-  if (!s) return 100;
-  const o = Number((r = (n = s.conditions) == null ? void 0 : n.adjustment) == null ? void 0 : r.$lte);
+  const t = e.map((s) => w(s)).find((s) => s.isDiscountOperation);
+  if (!t) return 100;
+  const o = Number((r = (n = t.conditions) == null ? void 0 : n.adjustment) == null ? void 0 : r.$lte);
   return Number.isFinite(o) ? parseInt((o * 100).toFixed(0)) : 0;
 }
 function ve(e) {
-  const s = e.find(
+  const t = e.find(
     (o) => o.subject === _.Subject.Restaurant.restaurant
   );
-  return s ? s.conditions ? JSON.parse(s.conditions).restaurantId.$in : null : [];
+  return t ? t.conditions ? JSON.parse(t.conditions).restaurantId.$in : null : [];
 }
 function Ue(e) {
-  return (e == null ? void 0 : e.some((s) => s.subject === "all")) ?? !1;
+  return (e == null ? void 0 : e.some((t) => t.subject === "all")) ?? !1;
 }
 function Be(e) {
-  const s = e.find((o) => o.subject === _.Subject.Business.role);
-  return s ? s.conditions ? JSON.parse(s.conditions).roleId.$in : null : [];
+  const t = e.find((o) => o.subject === _.Subject.Business.role);
+  return t ? t.conditions ? JSON.parse(t.conditions).roleId.$in : null : [];
 }
 function Le(e) {
-  const s = w(e);
-  if (!s.isReportPermission) return;
-  const { name: o, ...n } = s.conditions ?? {};
+  const t = w(e);
+  if (!t.isReportPermission) return;
+  const { name: o, ...n } = t.conditions ?? {};
   return Object.keys(n).length > 0 ? n : void 0;
 }
-function Me(e, s, o) {
+function Me(e, t, o) {
   return e.flatMap((n) => {
     const r = ge(n);
     if (!r) return [];
-    const t = r.isReportPermission ? o == null ? void 0 : o.get(n) : void 0;
+    const s = r.isReportPermission ? o == null ? void 0 : o.get(n) : void 0;
     return [
       {
         subject: r.subject,
         actions: r.actions,
         conditions: {
           ...r.conditions,
-          ...t ?? {},
-          adjustment: r.isDiscountOperation ? { $lte: parseFloat((s / 100).toFixed(2)) } : void 0
+          ...s ?? {},
+          adjustment: r.isDiscountOperation ? { $lte: parseFloat((t / 100).toFixed(2)) } : void 0
         }
       }
     ];
   });
 }
 function ge(e) {
-  const s = e.indexOf(":"), o = s === -1 ? e : e.slice(0, s), n = s === -1 ? void 0 : e.slice(s + 1);
-  if (s !== -1 && !n) return;
+  const t = e.indexOf(":"), o = t === -1 ? e : e.slice(0, t), n = t === -1 ? void 0 : e.slice(t + 1);
+  if (t !== -1 && !n) return;
   let r;
-  return n ? (r = L.find((t) => {
-    if (t.subject !== o) return !1;
-    const i = typeof t.conditions == "string" ? JSON.parse(t.conditions) : t.conditions;
-    return [i == null ? void 0 : i.operation, i == null ? void 0 : i.name].includes(n);
+  return n ? (r = L.find((s) => {
+    if (s.subject !== o) return !1;
+    const a = typeof s.conditions == "string" ? JSON.parse(s.conditions) : s.conditions;
+    return [a == null ? void 0 : a.operation, a == null ? void 0 : a.name].includes(n);
   }), !r && o === h.F_RULE_SUBJECT.enum.report && (r = {
     label: "",
     subject: h.F_RULE_SUBJECT.enum.report,
@@ -1033,9 +1060,9 @@ function ge(e) {
     conditions: { name: n },
     inverted: !1,
     reason: ""
-  })) : r = L.find((t) => t.subject === o), r ? w(r) : void 0;
+  })) : r = L.find((s) => s.subject === o), r ? w(r) : void 0;
 }
-function Fe(e, s) {
+function Fe(e, t) {
   const o = { values: [], passthrough: [], dropped: [] };
   for (const n of e) {
     const r = n == null ? void 0 : n.actions;
@@ -1043,20 +1070,20 @@ function Fe(e, s) {
       o.dropped.push(n);
       continue;
     }
-    const t = w(n).value, i = `${h.F_RULE_SUBJECT.enum.report}:`, a = t.startsWith(i) ? t.slice(i.length) : "";
-    s.has(t) || a && a !== "undefined" ? o.values.push(t) : o.passthrough.push(n);
+    const s = w(n).value, a = `${h.F_RULE_SUBJECT.enum.report}:`, i = s.startsWith(a) ? s.slice(a.length) : "";
+    t.has(s) || i && i !== "undefined" ? o.values.push(s) : o.passthrough.push(n);
   }
   return o;
 }
-function Se(e, s = []) {
+function Se(e, t = []) {
   return W(
     e.reduce((o, n) => {
       const r = be.find(
-        (t) => t.subject === n.subject && n.actions.includes("manage")
-      ) || s.find((t) => t.subject === n.subject);
+        (s) => s.subject === n.subject && n.actions.includes("manage")
+      ) || t.find((s) => s.subject === n.subject);
       if (r) {
-        const t = r.subject === _.Subject.Business.inventory_stock ? "Warehouse Management" : r.label;
-        o.push(t);
+        const s = r.subject === _.Subject.Business.inventory_stock ? "Warehouse Management" : r.label;
+        o.push(s);
       }
       return o;
     }, [])
@@ -1065,7 +1092,7 @@ function Se(e, s = []) {
 export {
   G as N,
   Q as P,
-  me as R,
+  fe as R,
   Le as a,
   Te as b,
   H as c,
@@ -1088,7 +1115,7 @@ export {
   Ce as t,
   ne as u,
   Ne as v,
-  fe as w,
+  me as w,
   Se as x,
   Ae as y
 };