@feedmepos/mf-hrm-portal 2.3.2-dev.3 → 2.3.2-dev.5

package/dist/{rule-DPtqlnz-.js → rule-B5YNhGJ4.js}

@@ -1,10 +1,10 @@
-import { s as W, c as q, e as y } from "./iteration-ogxW2-Tv.js";
-import { h as O, c as V, d as _, v as F, n as h, O as ee, D as M } from "./app-D-MUq9Ab.js";
+import { s as W, c as q, e as y } from "./iteration-CPLGGFBb.js";
+import { g, b as v, y as O, n as z, m as _, z as F, v as x, C as S, O as ee, D as B } from "./app-CDCO87ji.js";
 import { s as se } from "./utils-BZkjJbju.js";
-import { g, b as v, q as x, u as te } from "./restaurant-D2mfKHaH.js";
-import { defineStore as z, storeToRefs as K } from "pinia";
-import { ref as S, computed as T } from "vue";
+import { defineStore as V, storeToRefs as K } from "pinia";
+import { ref as h, computed as J } from "vue";
 import { useCoreStore as X } from "@feedmepos/mf-common";
+import { u as te } from "./restaurant-BMlLIUqe.js";
 const E = "/permission-sets", N = {
   async read() {
     return g(await v().get(E));
@@ -18,8 +18,8 @@ const E = "/permission-sets", N = {
   async delete(e) {
     return g(await v().delete(`${E}/${e}`));
   }
-}, ne = z("permissionSet", () => {
-  const { currentBusiness: e } = X(), s = S([]), r = S(!1), n = S(null);
+}, ne = V("permissionSet", () => {
+  const { currentBusiness: e } = X(), s = h([]), r = h(!1), n = h(null);
   async function i() {
     var l;
     const c = ((l = e.value) == null ? void 0 : l._id) ?? null;
@@ -38,7 +38,7 @@ const E = "/permission-sets", N = {
   }
   async function a(c, l) {
     const d = await N.update(c, l);
-    s.value = u(s.value.map((f) => f.id === c ? d : f));
+    s.value = u(s.value.map((m) => m.id === c ? d : m));
   }
   async function o(c) {
     await N.delete(c), s.value = u(s.value.filter((l) => l.id !== c));
@@ -92,30 +92,30 @@ function Q(e) {
       return;
     }
     d.setNames.push(a.name);
-    const f = D(d.conditions);
-    if (!f || !c) {
+    const m = D(d.conditions);
+    if (!m || !c) {
       d.conditions = void 0;
       return;
     }
-    for (const m in c)
-      (o = f[m]) != null && o.$in && (u = c[m]) != null && u.$in ? f[m].$in = Array.from(
-        /* @__PURE__ */ new Set([...f[m].$in, ...c[m].$in])
-      ) : f[m] || (f[m] = c[m]);
-    d.conditions = JSON.stringify(f);
+    for (const f in c)
+      (o = m[f]) != null && o.$in && (u = c[f]) != null && u.$in ? m[f].$in = Array.from(
+        /* @__PURE__ */ new Set([...m[f].$in, ...c[f].$in])
+      ) : m[f] || (m[f] = c[f]);
+    d.conditions = JSON.stringify(m);
   };
   for (const i of e)
     for (const t of i.permissions)
       n(t.inverted ? r : s, t, i);
   return [...Array.from(s.values()), ...Array.from(r.values())];
 }
-function B(e, s) {
+function T(e, s) {
   return `${e}::${[...s].sort().join(",")}`;
 }
 function G(e, s) {
   const r = [...e], n = /* @__PURE__ */ new Set(), i = /* @__PURE__ */ new Set(), t = /* @__PURE__ */ new Set();
   for (const o of e) {
     const u = O(o.subject);
-    n.add(B(u, o.actions)), o.inverted && o.actions.includes("manage") && i.add(`set_${u}`), !o.inverted && o.actions.includes("manage") && t.add(u);
+    n.add(T(u, o.actions)), o.inverted && o.actions.includes("manage") && i.add(`set_${u}`), !o.inverted && o.actions.includes("manage") && t.add(u);
   }
   const a = [...e];
   for (; a.length > 0; ) {
@@ -125,12 +125,12 @@ function G(e, s) {
     const l = ie(o);
     o.source && !o.source.trace && (o.source = { ...o.source, trace: l });
     const d = [...l, `${c.name} (system)`];
-    for (const f of c.permissions ?? []) {
-      const m = O(f.subject), p = B(m, f.actions);
-      n.has(p) || t.has(m) || (n.add(p), r.push({
-        ...f,
+    for (const m of c.permissions ?? []) {
+      const f = O(m.subject), p = T(f, m.actions);
+      n.has(p) || t.has(f) || (n.add(p), r.push({
+        ...m,
         // FdoPermissionRule.fields is string[] | null; RawRule expects string[] | undefined
-        fields: f.fields ?? void 0,
+        fields: m.fields ?? void 0,
         source: {
           type: "systemPermissionSet",
           permissionSetId: c.key,
@@ -139,9 +139,9 @@ function G(e, s) {
         }
       }));
     }
-    for (const f of c.permissionSets ?? []) {
-      const m = O(f), p = B(m, ["manage"]), b = {
-        subject: m,
+    for (const m of c.permissionSets ?? []) {
+      const f = O(m), p = T(f, ["manage"]), b = {
+        subject: f,
         actions: ["manage"],
         source: {
           type: "systemPermissionSet",
@@ -226,28 +226,28 @@ function _e(e, s) {
           JSON.stringify(l) !== JSON.stringify(d) && t.push(c);
           continue;
         }
-        const f = Object.keys(l)[0], m = l[f].$in.filter(
-          (b) => !d[f].$in.includes(b)
+        const m = Object.keys(l)[0], f = l[m].$in.filter(
+          (b) => !d[m].$in.includes(b)
         );
-        m.length > 0 && t.push(r(u, m)), d[f].$in.filter(
-          (b) => !l[f].$in.includes(b)
+        f.length > 0 && t.push(r(u, f)), d[m].$in.filter(
+          (b) => !l[m].$in.includes(b)
         ).length > 0 && t.push(c);
       } else if (!u.conditions && c.conditions)
         t.push(c);
       else if (u.conditions && !c.conditions)
         j(JSON.parse(u.conditions)) || t.push(c);
       else if (!u.conditions && !c.conditions) {
-        const l = new Set(u.actions), d = new Set(c.actions), f = c.actions.some((p) => !l.has(p)), m = u.actions.filter((p) => !d.has(p));
-        if (f) {
+        const l = new Set(u.actions), d = new Set(c.actions), m = c.actions.some((p) => !l.has(p)), f = u.actions.filter((p) => !d.has(p));
+        if (m) {
           const p = c.actions.filter((b) => !l.has(b));
           t.push({
             ...c,
             actions: p
           });
         }
-        m.length > 0 && t.push({
+        f.length > 0 && t.push({
           ...u,
-          actions: m,
+          actions: f,
           inverted: !0
         });
       }
@@ -271,7 +271,7 @@ function _e(e, s) {
 function Ee(e) {
   const s = G(
     e,
-    V
+    z
   ), r = new Set(
     s.filter((i) => {
       var t;
@@ -317,13 +317,13 @@ function Ue(e, s) {
     if (!l || !d || !le(d, o))
       return a.push(o), a;
     if (l.has("manage")) return a;
-    const f = o.actions;
-    if (f.includes("manage"))
+    const m = o.actions;
+    if (m.includes("manage"))
       return a.push(o), a;
-    const m = new Set(f);
+    const f = new Set(m);
     for (const p of l)
-      m.delete(p);
-    return m.size === 0 || a.push({ ...o, actions: Array.from(m) }), a;
+      f.delete(p);
+    return f.size === 0 || a.push({ ...o, actions: Array.from(f) }), a;
   }, []);
 }
 function L(e, s) {
@@ -339,10 +339,10 @@ function L(e, s) {
             r.delete(t.subject);
             continue;
           }
-          const l = Object.keys(c)[0], d = ((n = c[l]) == null ? void 0 : n.$in) ?? [], m = (((i = u[l]) == null ? void 0 : i.$in) ?? []).filter((p) => !d.includes(p));
-          m.length > 0 ? r.set(t.subject, {
+          const l = Object.keys(c)[0], d = ((n = c[l]) == null ? void 0 : n.$in) ?? [], f = (((i = u[l]) == null ? void 0 : i.$in) ?? []).filter((p) => !d.includes(p));
+          f.length > 0 ? r.set(t.subject, {
             ...o,
-            conditions: JSON.stringify({ [l]: { $in: m } })
+            conditions: JSON.stringify({ [l]: { $in: f } })
           }) : r.delete(t.subject);
         } else
           r.delete(t.subject);
@@ -407,8 +407,8 @@ const P = "/permission-assignments", I = {
       await v().post("/my-permissions/report-manage", { permissionKey: e, label: s })
     );
   }
-}, fe = z("permissionAssignment", () => {
-  const e = S([]);
+}, me = V("permissionAssignment", () => {
+  const e = h([]);
   async function s() {
     const o = await I.readAll();
     e.value = o;
@@ -439,8 +439,8 @@ const P = "/permission-assignments", I = {
     deletePermissionAssignment: t,
     getPermissionAssignmentByUserId: a
   };
-}), me = () => {
-  const e = fe();
+}), fe = () => {
+  const e = me();
   return {
     ...e,
     ...K(e)
@@ -449,16 +449,16 @@ const P = "/permission-assignments", I = {
   async fetchReportPermissions(e, s) {
     const r = s ? { lang: s } : {};
     return g(
-      await x().get(`/report-query/hrm/${e}/reports`, { params: r })
+      await F().get(`/report-query/hrm/${e}/reports`, { params: r })
     );
   },
   async fetchReportPermissionsForPortal(e, s) {
     const r = s ? { isSupportPos: !1, lang: s } : { isSupportPos: !1 };
     return g(
-      await x().get(`/report-query/hrm/${e}/reports`, { params: r })
+      await F().get(`/report-query/hrm/${e}/reports`, { params: r })
     );
   }
-}, U = S([]), C = S(!1), R = S(!1), $ = S(null), k = S(null), J = S(!1);
+}, U = h([]), C = h(!1), R = h(!1), $ = h(null), k = h(null), M = h(!1);
 function ge() {
   const e = X();
   async function s() {
@@ -466,9 +466,9 @@ function ge() {
     const n = (t = e.currentBusiness.value) == null ? void 0 : t.id;
     if (!n) return;
     const i = localStorage.getItem("locale");
-    if ($.value !== n && (U.value = [], C.value = !1, R.value = !1, $.value = n, J.value = !1), !(C.value && k.value === i)) {
+    if ($.value !== n && (U.value = [], C.value = !1, R.value = !1, $.value = n, M.value = !1), !(C.value && k.value === i)) {
       if (R.value) {
-        J.value = !0;
+        M.value = !0;
         return;
       }
       R.value = !0;
@@ -480,39 +480,39 @@ function ge() {
         if ($.value !== n) return;
         console.warn("Failed to fetch custom report permissions:", a), U.value = [];
       } finally {
-        $.value === n && (R.value = !1, J.value && (J.value = !1, await s()));
+        $.value === n && (R.value = !1, M.value && (M.value = !1, await s()));
       }
     }
   }
-  const r = T(() => U.value.map(
+  const r = J(() => U.value.map(
     (n) => n.isDefault ? {
       label: n.name,
       subject: `business::report::reports::${n.permissionKey}`,
-      actions: [h.manage, h.read, h.create],
-      category: F.reports
+      actions: [S.manage, S.read, S.create],
+      category: x.reports
     } : {
       label: n.name,
       subject: `business::report::reports::${n.permissionKey}`,
       actions: [
-        h.manage,
-        h.read,
-        h.create,
-        h.update,
-        h.delete
+        S.manage,
+        S.read,
+        S.create,
+        S.update,
+        S.delete
       ],
-      category: F.customReports
+      category: x.customReports
     }
   ));
   return {
     fetchCustomReportPermissions: s,
     customReportPermissions: r,
-    isLoading: T(() => R.value),
-    isLoaded: T(() => C.value)
+    isLoading: J(() => R.value),
+    isLoaded: J(() => C.value)
   };
 }
 function A(e) {
-  const s = re(), r = me(), n = te().restaurants, { customReportPermissions: i } = ge(), t = r.getPermissionAssignmentByUserId(e.id), a = H(
-    (t == null ? void 0 : t.permissionSetIds) ?? [],
+  const s = re(), r = fe(), n = te().restaurants, { customReportPermissions: i } = ge(), t = r.getPermissionAssignmentByUserId(e.id), a = H(
+    (t == null ? void 0 : t.permissionSetIds) ?? e.permissionSetIds ?? [],
     s.permissionSets.value
   ), o = Q(a).map(
     ({ setNames: p, ...b }) => b
@@ -521,23 +521,26 @@ function A(e) {
     subject: O(p.subject)
   })), l = L(o, c), d = G(
     de(o, c),
-    V
-  ).filter((p) => !p.inverted), f = Y(d), m = f ?? n.value.map((p) => p._id);
+    z
+  ).filter((p) => !p.inverted), m = Y(d), f = m ?? n.value.map((p) => p._id);
   return {
     doc: e,
     id: e.id,
-    name: e.name && e.name !== e.email && e.name !== e.phoneNumber ? e.name : "-",
+    // An invite's name is the admin's, or its sign-in key when it has none.
+    name: e.status === "invited" ? e.name || "-" : e.name && e.name !== e.email && e.name !== e.phoneNumber ? e.name : "-",
     phoneNumber: e.phoneNumber,
     email: e.email,
     restaurants: W(
-      m.map((p) => {
+      f.map((p) => {
         var b;
         return ((b = n.value.find((Z) => Z._id === p)) == null ? void 0 : b.profile.name) ?? "";
       })
     ),
-    managableRestaurantIds: f,
-    permissionLabels: he(d, i.value),
-    permissions: l
+    managableRestaurantIds: m,
+    permissionLabels: Se(d, i.value),
+    permissions: l,
+    status: e.status ?? "active",
+    loginMethod: e.loginMethod ?? "feedme"
   };
 }
 const ve = Object.freeze(
@@ -549,7 +552,7 @@ const ve = Object.freeze(
     ).map(A);
   },
   async readTeamMembersPage(e) {
-    var r, n, i;
+    var r, n, i, t, a;
     const s = g(
       await v().get("/portal-users/paged", {
         params: {
@@ -558,7 +561,9 @@ const ve = Object.freeze(
           search: e.search,
           restaurantIds: (r = e.restaurantIds) != null && r.length ? e.restaurantIds : void 0,
           permissionSubjects: (n = e.permissionSubjects) != null && n.length ? e.permissionSubjects : void 0,
-          permissionSetIds: (i = e.permissionSetIds) != null && i.length ? e.permissionSetIds : void 0
+          permissionSetIds: (i = e.permissionSetIds) != null && i.length ? e.permissionSetIds : void 0,
+          statuses: (t = e.statuses) != null && t.length ? e.statuses : void 0,
+          loginMethods: (a = e.loginMethods) != null && a.length ? e.loginMethods : void 0
         }
       })
     );
@@ -597,9 +602,9 @@ const ve = Object.freeze(
     )}`;
   }
 };
-function Je(e, s, r) {
+function Me(e, s, r) {
   if (e.some((a) => a.subject === "all")) return "All";
-  const n = (r ?? M).filter(
+  const n = (r ?? B).filter(
     (a) => a.subject === s
   ), i = new Set(n.map((a) => w(a).value)), t = e.filter((a) => a.subject === s).filter((a) => i.has(w(a).value));
   return t.length === n.length ? "All" : t.length === 0 ? "-" : `${t.length} permission allow`;
@@ -660,7 +665,7 @@ function w(e) {
     }
   };
 }
-function Te(e) {
+function Je(e) {
   var n, i;
   const s = e.map((t) => w(t)).find((t) => t.isDiscountOperation);
   if (!s) return 100;
@@ -673,10 +678,10 @@ function Y(e) {
   );
   return s ? s.conditions ? JSON.parse(s.conditions).restaurantId.$in : null : [];
 }
-function Be(e, s) {
+function Te(e, s) {
   return s.isOwner ? { restaurantIds: null, roleIds: null } : { restaurantIds: Y(e), roleIds: be(e) };
 }
-function Me(e) {
+function Be(e) {
   return (e == null ? void 0 : e.some((s) => s.subject === "all")) ?? !1;
 }
 function be(e) {
@@ -691,7 +696,7 @@ function Le(e) {
 }
 function Fe(e, s, r) {
   return e.flatMap((n) => {
-    const i = Se(n);
+    const i = he(n);
     if (!i) return [];
     const t = i.isReportPermission ? r == null ? void 0 : r.get(n) : void 0;
     return [
@@ -707,11 +712,11 @@ function Fe(e, s, r) {
     ];
   });
 }
-function Se(e) {
+function he(e) {
   const s = e.indexOf(":"), r = s === -1 ? e : e.slice(0, s), n = s === -1 ? void 0 : e.slice(s + 1);
   if (s !== -1 && !n) return;
   let i;
-  return n ? (i = M.find((t) => {
+  return n ? (i = B.find((t) => {
     if (t.subject !== r) return !1;
     const a = typeof t.conditions == "string" ? JSON.parse(t.conditions) : t.conditions;
     return [a == null ? void 0 : a.operation, a == null ? void 0 : a.name].includes(n);
@@ -722,7 +727,7 @@ function Se(e) {
     conditions: { name: n },
     inverted: !1,
     reason: ""
-  })) : i = M.find((t) => t.subject === r), i ? w(i) : void 0;
+  })) : i = B.find((t) => t.subject === r), i ? w(i) : void 0;
 }
 function xe(e, s) {
   const r = { values: [], passthrough: [], dropped: [] };
@@ -737,7 +742,7 @@ function xe(e, s) {
   }
   return r;
 }
-function he(e, s = []) {
+function Se(e, s = []) {
   return W(
     e.reduce((r, n) => {
       const i = ve.find(
@@ -754,29 +759,29 @@ function he(e, s = []) {
 export {
   G as N,
   Q as P,
-  pe as R,
-  Je as a,
-  de as b,
+  oe as R,
+  ge as a,
+  Te as b,
   H as c,
-  ge as d,
-  Le as e,
-  Fe as f,
-  Te as g,
-  Me as h,
-  oe as i,
-  Be as j,
-  Ee as k,
-  _e as l,
+  fe as d,
+  Fe as e,
+  Me as f,
+  de as g,
+  Be as h,
+  Je as i,
+  Le as j,
+  pe as k,
+  Ne as l,
   Ae as m,
-  Ne as n,
-  Ue as o,
+  Ue as n,
+  Ee as o,
   ve as p,
-  me as q,
+  _e as q,
   w as r,
   xe as s,
   Ce as t,
   re as u,
-  he as v,
+  Se as v,
   Oe as w,
   Y as x,
   be as y

package/dist/src/api/my-pos-profile/index.d.ts

@@ -0,0 +1,3 @@
+import type { FdtoMyPosProfile, FdtoRegenerateMyPosPasscodeRes } from '@/types/my-pos-profile';
+export declare const readMyPosProfile: () => Promise<FdtoMyPosProfile>;
+export declare const regenerateMyPosPasscode: () => Promise<FdtoRegenerateMyPosPasscodeRes>;

package/dist/src/api/sso-provider/index.d.ts

@@ -0,0 +1,5 @@
+import type { IFdtoSsoProvider } from '@/types/sso-provider';
+declare const SsoProviderAPI: {
+    readProviders(): Promise<IFdtoSsoProvider[]>;
+};
+export default SsoProviderAPI;

package/dist/src/api/staff-invite/index.d.ts

@@ -0,0 +1,16 @@
+import type { IFdtoCreateStaffInviteReq, IFdtoCreateStaffInviteRes, IFdtoResendStaffInviteRes, IFdtoStaffInvite, IFdtoStaffInviteLookup, IFdtoUpdateStaffInviteReq } from '@/types/staff-invite';
+declare const StaffInviteAPI: {
+    readInvites(status?: IFdtoStaffInvite["status"]): Promise<IFdtoStaffInvite[]>;
+    lookup(key: {
+        mobile: string;
+    } | {
+        email: string;
+    }, provider?: string): Promise<IFdtoStaffInviteLookup | null>;
+    createInvite(req: IFdtoCreateStaffInviteReq): Promise<IFdtoCreateStaffInviteRes>;
+    updateInvite(id: string, req: IFdtoUpdateStaffInviteReq): Promise<IFdtoStaffInvite>;
+    revokeInvite(id: string): Promise<{
+        ok: true;
+    }>;
+    resendInvite(id: string): Promise<IFdtoResendStaffInviteRes>;
+};
+export default StaffInviteAPI;

package/dist/src/components/CollapsibleWrapper.vue.d.ts

@@ -2,17 +2,25 @@ interface Props {
     title?: string;
     subtitle?: string;
     initiallyCollapsed?: boolean;
+    /**
+     * 'trailing': toggle on the right, subtitle beside the title while collapsed.
+     * 'leading': chevron before the title, subtitle always under it (member sheet cards).
+     */
+    layout?: 'trailing' | 'leading';
 }
-declare var __VLS_1: {}, __VLS_7: {};
+declare var __VLS_5: {}, __VLS_7: {}, __VLS_13: {};
 type __VLS_Slots = {} & {
-    title?: (props: typeof __VLS_1) => any;
+    title?: (props: typeof __VLS_5) => any;
 } & {
-    default?: (props: typeof __VLS_7) => any;
+    title?: (props: typeof __VLS_7) => any;
+} & {
+    default?: (props: typeof __VLS_13) => any;
 };
 declare const __VLS_component: import("vue").DefineComponent<Props, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {}, string, import("vue").PublicProps, Readonly<Props> & Readonly<{}>, {
     title: string;
     subtitle: string;
     initiallyCollapsed: boolean;
+    layout: "trailing" | "leading";
 }, {}, {}, {}, string, import("vue").ComponentProvideOptions, false, {}, any>;
 declare const _default: __VLS_WithSlots<typeof __VLS_component, __VLS_Slots>;
 export default _default;

package/dist/src/components/form/SegmentedTabs.vue.d.ts

@@ -0,0 +1,23 @@
+declare const _default: <T extends string>(__VLS_props: NonNullable<Awaited<typeof __VLS_setup>>["props"], __VLS_ctx?: __VLS_PrettifyLocal<Pick<NonNullable<Awaited<typeof __VLS_setup>>, "attrs" | "emit" | "slots">>, __VLS_expose?: NonNullable<Awaited<typeof __VLS_setup>>["expose"], __VLS_setup?: Promise<{
+    props: __VLS_PrettifyLocal<Pick<Partial<{}> & Omit<{
+        readonly "onUpdate:modelValue"?: ((value: T) => any) | undefined;
+    } & import("vue").VNodeProps & import("vue").AllowedComponentProps & import("vue").ComponentCustomProps, never>, "onUpdate:modelValue"> & ({
+        items: {
+            label: string;
+            value: T;
+        }[];
+        disabled?: boolean;
+    } & {
+        modelValue: T;
+    }) & Partial<{}>> & import("vue").PublicProps;
+    expose(exposed: import("vue").ShallowUnwrapRef<{}>): void;
+    attrs: any;
+    slots: {};
+    emit: (evt: "update:modelValue", value: T) => void;
+}>) => import("vue").VNode & {
+    __ctx?: Awaited<typeof __VLS_setup>;
+};
+export default _default;
+type __VLS_PrettifyLocal<T> = {
+    [K in keyof T]: T[K];
+} & {};

package/dist/src/composables/useMenuAccess.d.ts

@@ -0,0 +1,56 @@
+import { type ComputedRef } from 'vue';
+import { type LocationQuery, type RouteLocationMatched } from 'vue-router';
+import { RouteName } from '@/router/shared';
+/**
+ * One HRM side-menu entry. `to` is the route the item opens; its accessibility is the
+ * accessibility of that route, so the menu and the route guards can never disagree.
+ */
+export interface MenuItemDef {
+    /** FmCollapsibleTabs value; kept identical to the values the Navigator always used. */
+    value: string;
+    labelKey: string;
+    to: RouteName;
+    /** Carry the current query (business query state) along when navigating. */
+    keepQuery: boolean;
+    /** Route names that highlight this item. */
+    activeRoutes: RouteName[];
+}
+export interface MenuAccessItem extends MenuItemDef {
+    accessible: boolean;
+    /** Access is not known yet (only My POS Profile, while its lookup runs). */
+    loading: boolean;
+}
+/**
+ * Menu order: existing items first, My POS Profile last. Built lazily because
+ * `@/router/shared` imports this module (through the route guard), so `RouteName` is not
+ * initialised yet while this module is first evaluated.
+ */
+export declare function menuItemDefs(): MenuItemDef[];
+type SessionUser = {
+    _role?: string;
+    permissions: unknown[];
+} | null | undefined;
+/**
+ * Same rule `withPermission` applies (hrm-permission `validateRoute` → `validate`): every
+ * matched record's `meta.validationManifest` must pass its role list and its CASL
+ * requirements, checked with the package's own `checkAccess`. `validateRoute` itself is not
+ * exported, so this walks the manifests and delegates the rule to `checkAccess`.
+ * No route here uses `customValidationFunction`; a manifest that has one is left to
+ * `withPermission` (treated as passing here).
+ */
+export declare function passesRouteManifests(matched: readonly Pick<RouteLocationMatched, 'meta'>[], sessionUser: SessionUser): boolean;
+/** Test hook: forget every cached lookup. */
+export declare function resetMenuAccessCache(): void;
+export declare function useMenuAccess(): {
+    items: ComputedRef<MenuAccessItem[]>;
+    visibleItems: ComputedRef<MenuAccessItem[]>;
+    firstAccessible: ComputedRef<MenuAccessItem | undefined>;
+    hasPosUser: ComputedRef<boolean | undefined>;
+    isLoading: ComputedRef<boolean>;
+    canOpenMatched: (matched: readonly RouteLocationMatched[]) => boolean | undefined;
+    locationFor: (item: MenuItemDef, query?: LocationQuery) => {
+        query?: LocationQuery | undefined;
+        name: RouteName;
+    };
+};
+export {};

package/dist/src/composables/useSsoProviders.d.ts

@@ -0,0 +1,19 @@
+import type { IFdtoSsoProvider } from '@/types/sso-provider';
+export declare function useSsoProviders(): {
+    providers: import("vue").Ref<{
+        slug: string;
+        label: string;
+        type: string;
+        enabled: boolean;
+        inviteMatch: import("../types/staff-invite").StaffInviteMatch | "none";
+    }[], IFdtoSsoProvider[] | {
+        slug: string;
+        label: string;
+        type: string;
+        enabled: boolean;
+        inviteMatch: import("../types/staff-invite").StaffInviteMatch | "none";
+    }[]>;
+    isLoaded: import("vue").ComputedRef<boolean>;
+    loadProviders: () => Promise<void>;
+    providerLabel: (slug: string) => string;
+};

package/dist/src/composables/useStaffInviteProviders.d.ts

@@ -0,0 +1,8 @@
+export declare function useStaffInviteProviders(): {
+    providers: import("vue").ComputedRef<import("../types/staff-invite").IFdtoStaffInviteProvider[]>;
+    isLoaded: import("vue").ComputedRef<boolean>;
+    hasProviders: import("vue").ComputedRef<boolean>;
+    canInvite: import("vue").ComputedRef<boolean>;
+    loadProviders: () => Promise<void>;
+    providerLabel: (slug: string) => string;
+};

package/dist/src/helpers/member-grant.d.ts

@@ -0,0 +1,36 @@
+import type { FdoPermissionRule } from '@feedmepos/core/entity';
+import type { IFdtoPermissionSet } from '@/types/permission-set';
+import type { IFdtoCreatePortalUserReq, IFdtoPermissionPosUser, IFdtoUpdatePortalUserReq } from '@/types/team';
+/** The grant half of a portal user request: roles, custom permissions and POS master user. */
+export type MemberGrantPayload = Required<Pick<IFdtoCreatePortalUserReq, 'customPermissions' | 'permissions' | 'permissionSetIds'>> & Pick<IFdtoCreatePortalUserReq, 'posUser'>;
+export interface MemberGrantState {
+    userPermissions: FdoPermissionRule[];
+    /** Permission sets collected from the selected roles. */
+    inheritedPermissions: IFdtoPermissionSet[];
+    permissionSetIds: string[];
+    posUser: IFdtoPermissionPosUser | null | undefined;
+    /** Report subjects still known; report rules outside it are stale. */
+    reportSubjects: Set<string>;
+    defaultReportSubjects: Set<string>;
+    /** Saved POS user, used when the form leaves name or code empty. */
+    savedPosUser?: IFdtoPermissionPosUser;
+    fallbackName: string;
+}
+/**
+ * Rules that scope where a member works (outlets, warehouses, usable POS roles) rather
+ * than which portal pages they open. "Where they work" edits these; "Portal access" the rest.
+ */
+export declare const WORKPLACE_SUBJECTS: readonly string[];
+/** Whether a grant opens any portal page: a role, or a granted rule beyond the workplace ones. */
+export declare function hasPortalAccess(rules: FdoPermissionRule[], permissionSetIds: string[]): boolean;
+/** Portal access off: keep only where they work, so they get My POS Profile and nothing else. */
+export declare function withoutPortalAccess(rules: FdoPermissionRule[]): FdoPermissionRule[];
+/** What an untouched grant section submits. */
+export declare const EMPTY_MEMBER_GRANT: MemberGrantPayload;
+export declare function buildMemberGrantPayload(state: MemberGrantState): MemberGrantPayload;
+/**
+ * Member edit request: the passcode goes out only when the admin changed it. The form
+ * holds the passcode loaded when it opened; sending that back would overwrite a newer one
+ * the member set in My POS Profile (KDI-5225 review #2). Add member sends it as is.
+ */
+export declare function toMemberUpdateReq(req: IFdtoCreatePortalUserReq, saved: IFdtoPermissionPosUser | undefined): IFdtoUpdatePortalUserReq;