@fui-org/fui-cli 1.3.1 → 2.0.0

package/skills/fui-skill-cli/references/project-provisioning.md

@@ -1,278 +0,0 @@
-# Provisioning a New FUI Project
-
-> Owns: **new-project infrastructure — SQL Server database, two SQL accounts (execute-only app vs db_owner dev), `acc` alias, FUI project, project admin rights**. Connection/schema/SP: [db-workflow.md](db-workflow.md); multi-module design: [system-design.md](system-design.md); table naming: [db-table-design.md](db-table-design.md); end-user rights: [permission-system.md](permission-system.md). Flags: `fui <command> --help`.
-
-Use for **"new project"** / **"new DB + FUI project"**, or [system-design.md](system-design.md) Step 0 → _"build from scratch"_. Comes **before** all of `system-design.md`.
-
-**Do Step 0, then Steps 1–6 in order, skipping none** unless the user says otherwise. Two permission gates in two systems must both pass before anything is created.
-
----
-
-## 🛑 Step 0 — Check BOTH gates first
-
-| Gate                     | Needs                             | Check with                 |
-| ------------------------ | --------------------------------- | -------------------------- |
-| **A. FUI platform**      | `SystemRight >= 3` on system `fp` | `fui project new` (Step 1) |
-| **B. Target SQL Server** | create database + create login    | read-only `SELECT` below   |
-
-**Check B BEFORE A.** B has no side effects; A only answers by actually creating the project. Reverse order ⇒ orphan FUI project if the DB can't be created. Late discovery leaves garbage fui can't clean up.
-
-### Gate B — target SQL Server
-
-`CREATE DATABASE`/`CREATE LOGIN` are server-level; a normal dev account (`db_owner` on some DBs) can't. Run with `fui query` on a connection **to the exact target server** (`fui db alias list` shows alias → server):
-
-```sql
-SELECT SUSER_NAME()                                        AS LoginHienTai,
-       IS_SRVROLEMEMBER('sysadmin')                        AS sysadmin,
-       IS_SRVROLEMEMBER('dbcreator')                       AS dbcreator,
-       IS_SRVROLEMEMBER('securityadmin')                   AS securityadmin,
-       HAS_PERMS_BY_NAME(NULL, NULL, 'CREATE ANY DATABASE') AS taoDuocDB,
-       HAS_PERMS_BY_NAME(NULL, NULL, 'ALTER ANY LOGIN')     AS taoDuocLogin;
-```
-
-Pass: `sysadmin = 1`, **or** `taoDuocDB = 1` **and** `taoDuocLogin = 1`.
-
-- `sa` not required — `dbcreator` + `securityadmin` also pass. Don't block a valid setup with "needs `sa`".
-- Need BOTH: `dbcreator` alone creates the DB but not the Step 3 login ⇒ fails midway.
-- `IS_SRVROLEMEMBER` returns `NULL` (not `0`) for a bad role name/invalid login ⇒ **unknown**, ask the user.
-- A connection borrowed from a sibling project may point at another server ⇒ green for the wrong server.
-- ⚠️ `HAS_PERMS_BY_NAME` answers only for the _connected principal_ — correct here. Never use it for another principal (e.g. `[public]` `EXECUTE`): always green for `db_owner`. Read `sys.database_permissions` instead.
-
-Fails ⇒ **stop; user must request rights on that server**. Never run `CREATE DATABASE` to probe; never grant `db_datareader` to the app account to avoid creating a login.
-
-### Gate A — FUI platform
-
-Creating a project needs **`SystemRight >= 3`** on `fp`, enforced server-side in `spAPI_FUI_Dev_ProjectEdit` (direct API calls can't bypass):
-
-```sql
-if @jID is null                 -- không có id ⇒ đang TẠO MỚI
-Begin
-    if @sys_SystemRight < 3
-        RAISERROR(N'Bạn không có quyền tạo dự án', 16, 1)
-```
-
-**No right ⇒ STOP, report, do nothing else.** Project goes before the DB because `INSERT INTO tblA_Project` needs only `ProjectID`/`ProjectName`/`GroupName`/`Framework`/`pDomain`/`Router` — no database. DB-first then rejection leaves a real DB, two SQL logins and an orphan `acc` record; fui hard-blocks `DROP DATABASE`, so cleanup is manual. `fui project new` _is_ the gate A check (no extra call); rejected ⇒ nothing created (if B was checked first).
-
-| Operation                                             | SP                                                        | Condition                                  |
-| ----------------------------------------------------- | --------------------------------------------------------- | ------------------------------------------ |
-| **Create** project (`fui project new`)                | `spAPI_FUI_Dev_ProjectEdit` (empty `id`)                  | `SystemRight >= 3`                         |
-| **Edit** project (`fui project update`)               | `spAPI_FUI_Dev_ProjectEdit` (with `id`)                   | `SystemRight >= 2` **and** `UserRight > 2` |
-| Publish `project.json` (`fui project publish-config`) | `spAPI_FUI_Dev_EditorUpdate` (`Mode = 'project'`)         | `SystemRight >= 2` **and** `UserRight > 2` |
-| Create/edit/publish **module**                        | `spAPI_FUI_Dev_ModuleEdit` · `spAPI_FUI_Dev_EditorUpdate` | `SystemRight >= 2` **and** `UserRight > 1` |
-
-`SystemRight` (whole `fp`) is necessary, `UserRight` (that project) sufficient — ANDed. Only _create_ skips `UserRight` (no `tblA_UserProject` row yet).
-
-> ⚠️ `pDomain` is checked **before** the permission gate (`CheckDomain`): a duplicate domain gives a domain error, not a permission error. Don't go request rights over it.
-
----
-
-## Index — phases of a new project
-
-This file owns **phase 1 only**.
-
-| #     | Phase                     | Owner                                                                                        | Do                                                                                  |
-| ----- | ------------------------- | -------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------- |
-| 0     | Clarify scope             | [system-design.md](system-design.md) §Step 0                                                 | Users, process, main entities                                                       |
-| **1** | **Infrastructure ← HERE** | **this file**                                                                                | 2 gates → `fui project new` → DB + 2 SQL accounts + `acc` alias → admin rights      |
-| 2     | Split into modules        | [system-design.md](system-design.md) §Step 1                                                 | Module list, access roles                                                           |
-| 3     | Schema                    | [db-table-design.md](db-table-design.md)                                                     | Naming, PK/FK, audit columns. `CREATE TABLE` **run by the developer**               |
-| 4     | **End-user** rights       | [permission-system.md](permission-system.md) + [system-design.md](system-design.md) §Step 4b | `fui right system new` / `fui right function new` — BEFORE any module gates on them |
-| 5     | Runtime config            | [project-config.md](project-config.md)                                                       | `project.json`: menu, menuLeft, navigation, domainSetting                           |
-| 6     | First module              | `fui module new` → [fullstack-workflow.md](fullstack-workflow.md)                            | 6-step UI-first flow                                                                |
-
-Not in this file (don't look or copy here): table naming · menus · end-user rights · SP writing ([tapi-reference.md](tapi-reference.md)) · daily connection/schema/SP ([db-workflow.md](db-workflow.md)).
-
----
-
-## 🔴 Two permission planes — don't mix
-
-|           | `SystemRight` (system `acc`)                                       | `UserRight` (`tblA_UserProject`)        |
-| --------- | ------------------------------------------------------------------ | --------------------------------------- |
-| Scope     | **System-wide** — one number per user per app                      | **Per project**                         |
-| Answers   | "What can this user do in app X?"                                  | "What can this user do with project Y?" |
-| Stored in | `acc.tblSysRight` + `acc` assignment tables                        | `tblA_UserProject` (FUI platform DB)    |
-| Commands  | `fui right ...` (8) → [permission-system.md](permission-system.md) | `fui user ...` (5) → Step 6             |
-
-Mixing them = granting in the wrong place, then "granted but no effect". The FUI IDE _is itself a FUI app_ (project `fp`), so `SystemRight` on `fp` = developer rights in the IDE:
-
-- `SystemRight` on `fp` = **may create projects** (≥ 3); necessary for every edit.
-- `UserRight` on project Y = **may touch Y**; sufficient.
-- ANDed: `UserRight = 3` with `SystemRight = 1` can't edit anything.
-
-`SystemRight`/`FunctionRight` on **your business project** (not `fp`) are end-user rights — later, per [system-design.md](system-design.md) Step 4b.
-
----
-
-## Step 1 — Create the FUI project (gate A, before the DB)
-
-```
-fui project new --data '{
-  "ProjectID": "...", "ProjectName": "...", "GroupName": "...", "Framework": "V3",
-  "pDomain": "...",
-  "Router": ""
-}'
-```
-
-`pDomain` optional (project's own domain); `Router` optional, default `""`.
-
-- **Only these SIX fields are read** from `@jsonObj`.
-- 🔴 **`title`/`login`/`apiDomain`/`fileDomain`/`userInfo`/`menu` are silently IGNORED.** The SP writes `projectData` from a hardcoded constant:
-  ```sql
-  declare @jProjectdata nvarchar(1000) = '{"title":"","apiDomain":"","login":"","menu":[]}'
-  ```
-  API still returns ✅, project created, config lost — silent failure.
-- Runtime config: edit `{projectId}/project.json` then `fui project publish-config` ([project-config.md](project-config.md)) — the **only** way `menu`/`apiDomain`/`login` get in.
-- `projectData` must be **FLAT** — not wrapped in `"data"`.
-- **`Framework`: `V3` for new projects** unless the user has a reason (usually matching older projects in the group). Expensive to change: decides import layer, component vocabulary, grid syntax — V2 = Vuetify 1.5 (`v-container/v-layout/v-flex`), V3 = Vuetify 3 (`v-container/v-row/v-col`), and `w` px thresholds differ. Most skill module.json examples are **V2**; for V3 cross-check [controls-patterns.md](controls-patterns.md) §6 (V2/V3 diff owner). State the choice to the user; never implicit.
-
-**Only the caller gets `UserRight = 3` on the new project** (SP `INSERT INTO tblA_UserProject ... 3`) — hence Step 6.
-
-Rejected with `Bạn không có quyền tạo dự án` ⇒ **stop; user must request `SystemRight >= 3` on `fp`**. Nothing created yet — keep it so.
-
----
-
-## Step 2 — Create the database
-
-> Prerequisite: gate B green. Never run `CREATE DATABASE` to probe.
-
-**Query where the server keeps other DB files; never hardcode paths** (wrong guess = misplaced files, unnoticed until backup):
-
-```sql
-SELECT DISTINCT LEFT(physical_name, LEN(physical_name) - CHARINDEX('\', REVERSE(physical_name)))
-FROM sys.master_files WHERE database_id > 4;
-```
-
-`database_id > 4` skips `master`/`model`/`msdb`/`tempdb` (install dir). Typical: `C:\Application\Database\`. Follow it:
-
-```sql
-CREATE DATABASE [TenDB]
-ON PRIMARY (NAME = N'TenDB',     FILENAME = N'C:\Application\Database\TenDB.mdf')
-LOG ON      (NAME = N'TenDB_log', FILENAME = N'C:\Application\Database\TenDB_log.ldf');
-```
-
-Chicken-and-egg: the new DB has no connection — borrow an **existing connection on the same server** (`fui db alias list`, then `fui db add-by-name <apiName>`) and run `fui exec "<sql>" --confirm-write`.
-
----
-
-## Step 3 — APP account (execute-only)
-
-Login **named after the DB**, strong random password:
-
-```bash
-openssl rand -base64 12
-```
-
-```sql
-CREATE LOGIN [TenDB] WITH PASSWORD = N'<mật khẩu vừa sinh>',
-    DEFAULT_DATABASE = [TenDB], CHECK_POLICY = ON;
-USE [TenDB];
-CREATE USER [TenDB] FOR LOGIN [TenDB];
-GRANT EXECUTE ON SCHEMA::dbo TO [TenDB];
-```
-
-**Only `public` + `GRANT EXECUTE ON SCHEMA::dbo`. NO `db_datareader`, NO `db_datawriter`, NO table grants.** tAPI only runs SPs; new SPs fall under `SCHEMA::dbo` automatically. Table rights don't help the app — they only open direct table access to an abused call.
-
-The **only** account loaded into `acc` (Step 5).
-
----
-
-## Step 4 — DEV account (db_owner)
-
-**Default: reuse the existing shared dev login** (e.g. `xTuan`) — just add it to the new DB:
-
-```sql
-USE [TenDB];
-CREATE USER [xTuan] FOR LOGIN [xTuan];
-ALTER ROLE db_owner ADD MEMBER [xTuan];
-```
-
-**NO new `CREATE LOGIN`** unless the user asks for a project-specific dev account — each extra login is another password, while the shared one exists in every sibling DB and is the credential `fui db add-by-name` borrows.
-
----
-
-## Step 5 — Register the DB as a tAPI alias
-
-```
-fui db alias new tenalias \
-  --module-name "Tên hệ thống" \
-  --sql-server "..." \
-  --database TenDB \
-  --username TenDB \
-  --password-env TENDB_PASSWORD
-```
-
-`tenalias` → module.json calls `"/tenalias/TenAPI"`. Password only via `--password -` (stdin) or `--password-env VAR`.
-
-fui calls `SM_Modules_Update` **twice**: `UpdateConnection=0` creates the record, `UpdateConnection=1` sets the connection (record must exist first).
-
-- 🔴 **Credentials = Step 3 APP account, NEVER the dev account.** Dev account ⇒ every app API call runs as `db_owner`, with no visible error.
-- New `ModuleID` = `MAX(ModuleID)+1` over **all** `acc.tblModules` ⇒ needs an `acc` connection (`fui db add-by-name acc`). Can't use `fui db alias list`: it lists only modules **you** manage; MAX over a subset may collide.
-- Existing alias ⇒ hard error, no overwrite.
-
-Then `fui db add-by-name tenalias` works — [db-workflow.md](db-workflow.md) §2b.
-
----
-
-## Step 6 — Grant project admin to others
-
-Order is **mandatory**:
-
-```
-1. fui user list                     → who has rights now
-2. fui user search "tên/username"    → get the real UserID
-3. fui user add DEV001 --right 3
-```
-
-**`fui user add`/`set`/`remove` take only the exact `UserID`** — a structural identity gate: you must run `fui user search` and see `UserID | Username | Họ tên`. **Show that table and let the user pick before granting** — duplicate names are common; a wrong Admin grant can't be undone in one call.
-
-| Level | Meaning                                                                                |
-| ----- | -------------------------------------------------------------------------------------- |
-| 1     | View only                                                                              |
-| 2     | Develop                                                                                |
-| 3     | **Admin** — needed to manage the project (`fui project publish-config` requires `> 2`) |
-
-- Create and edit are separate: `fui user add` hard-errors if rights exist (use `set`), and vice versa. No silent upsert.
-- Revoke = `fui user remove` — 🔴 summarize the consequence, wait for confirmation.
-- **Rights are ALWAYS project-level.** The SP has `@MID` and IDE module `fp/permission` passes it, but the body never reads it — all filtering is by `ProjectID`. Don't infer a module scope.
-
-**For YOU to grant** (`spAPI_FUI_Dev_UserRight_Update`): `SystemRight >= 2` **and** (`UserRight > 2` on the project **or** `SystemRight >= 4`) — `SystemRight >= 4` grants on any project. _Listing_ (`fui user list`): `SystemRight >= 2` and (`UserRight > 1` or `SystemRight >= 3`).
-
----
-
-## After infrastructure
-
-Step 6 ends **phase 1 only**: the project is empty, runtime config still SP-seeded empty strings, no tables/modules/right codes. Don't report "done"; don't jump into module.json.
-
-1. `fui project sync` + `fui use <projectId>` — pull into workspace, set as target.
-2. **Runtime config (mandatory)**: edit `{projectId}/project.json` (`apiDomain` → new alias, `title`, `login`, `menu`), then `fui project publish-config` — [project-config.md](project-config.md). Skipped ⇒ the project can't call any API.
-3. `fui db add-by-name <apiName>` ([db-workflow.md](db-workflow.md) §2c) — also **proves** Steps 3 and 5 (app account + `acc` record OK).
-4. Resume [system-design.md](system-design.md) at **Step 1**, following the index.
-
-Only **one** simple module ⇒ skip `system-design.md`: `fui module new` → [fullstack-workflow.md](fullstack-workflow.md).
-
----
-
-## Checklist
-
-- [ ] Gate B: read-only `SELECT` on the **target server** — `sysadmin = 1`, or `CREATE ANY DATABASE` **and** `ALTER ANY LOGIN` = 1
-- [ ] Gate A: `fui project new` ran BEFORE the DB and succeeded — else stop, no DB
-- [ ] `projectData` FLAT, **only 6 fields**; `Framework` agreed with user
-- [ ] Physical folder from `sys.master_files`, not hardcoded; `CREATE DATABASE` `FILENAME` follows it
-- [ ] App account: login = DB name, random password, **only** `GRANT EXECUTE ON SCHEMA::dbo`
-- [ ] Dev account: **shared login reused**, only `CREATE USER` + `db_owner`
-- [ ] `fui db alias new` loaded the **app account**
-- [ ] `fui db add-by-name <apiName>` works
-- [ ] `fui user list` shows exactly the right people
-- [ ] `fui project sync` + `fui use` + **`fui project publish-config`** done
-- [ ] Told the user **what phase 2 is**
-- [ ] **Security check**: as the app account, `SELECT TOP 1 * FROM <any table>` is **denied** and `EXEC` of an SP works — otherwise the `GRANT` is unverified
-
----
-
-## Three common misreadings
-
-**Server-level DDL ≠ business-schema DDL.** `CREATE DATABASE` / `CREATE LOGIN` / `GRANT` run via `fui exec "<sql>" --confirm-write`. The _"`CREATE TABLE`/`ALTER TABLE` run by the developer"_ rule ([system-design.md](system-design.md) Step 2) still stands for the **business schema** only — no conflict.
-
-**The app password is in the transcript verbatim** (Step 3 `CREATE LOGIN` goes through the fui command) — treat the provisioning transcript as sensitive. From Step 5 on nothing prints it (`fui db alias new`/`fui db alias list` omit `Password`).
-
-**Step 6 `UserRight` ≠ `SystemRight` on the business project.** `UserRight=3` grants **nothing** in the running app, and vice versa.

package/skills/fui-skill-cli/references/script-map.md

@@ -1,262 +0,0 @@
-# FUI Script Map
-
-> Owns: **bundled libraries (§0) and the FUI script source map — which function lives in which file/line**. Function usage: [default-function.md](default-function.md). Read framework sources with `fui library <name>`.
-
-> **File by framework** — check `_moduleInfo.json.Framework` (`"V2"` or `"V3"`):
->
-> | Content                                       | V2 file                          | V3 file                          |
-> | --------------------------------------------- | -------------------------------- | -------------------------------- |
-> | Core engine (action, API, layout)             | `scripts/fastproject.js`         | `scripts/fastproject-3.0.js`     |
-> | Utilities (router, export, auth, WS)          | `scripts/defaultfunction.js`     | `scripts/defaultfunction-3.0.js` |
-> | Component registry (`f-*`, dialog, editor...) | `scripts/component.js`           | `scripts/component-3.0.js`       |
-> | Table system (`f-table`, `t-*`)               | `scripts/componentTable.js`      | `scripts/componentTable-3.0.js`  |
-> | Chart (`f-echart`)                            | `scripts/fechart.js`             | `scripts/fechart.js`             |
-> | Input sheet (`f-sheet`)                       | `scripts/fsheet.js` (shared, §5) | `scripts/fsheet.js` (shared, §5) |
-
-FUI conventions:
-
-- Metadata is `module.json` (not `controls.json`).
-- Call action logic via `CALL(vueData.actionName)` or the Action Protocol.
-- `controls` layout is always `container > rows > cols`.
-- JSON events use `v-on:...` (not `@...`).
-- Literal forcing (`` ` `` or `'...'`) is for Action `IN` mapping, not normal static component props.
-
-## 0) Bundled libraries (FUI V2)
-
-Auto-loaded into **every** module — no import needed; use them instead of equivalents. **Never add a CDN** for any of them — re-adding causes conflicts.
-
-> ⛔ **Applies ONLY to `HTMLOnly=false`.** `HTMLOnly: true` modules get nothing preloaded (no Vue, Vuetify, jQuery, lodash, MDI, `projectdefaultstyle.css`); there CDNs are **required**: see [module-structure.md §HTMLOnly=true: KHÔNG có thư viện nào được nhúng sẵn](module-structure.md).
-
-CSS: Roboto · Material Design Icons (`mdi-*`) · Vuetify · vue-toast-notification · jquery-confirm · FUI projectdefaultstyle.css
-
-| Global                       | Library                | Use                                          |
-| ---------------------------- | ---------------------- | -------------------------------------------- |
-| `$`, `jQuery`                | jQuery 3.6.0           | DOM, AJAX                                    |
-| `$.confirm()` / `$.dialog()` | jquery-confirm         | Styled dialogs (instead of `window.confirm`) |
-| `_`                          | Lodash 4.17            | Array/object utils                           |
-| `moment`                     | Moment.js (vi)         | Dates, Vietnamese locale preset              |
-| `numeral`                    | Numeral.js             | Number/currency format                       |
-| `Vue.$toast`                 | vue-toast-notification | Toasts                                       |
-
-FUI JS (loaded after the above): `defaultfunction.js` (`jsonToExcel`, `pushRouter`, `openWindow`, `CALL`, `confirm`, `showMessage`, ...) · `component.js` (all `f-*`: `f-table`, `f-form`, `f-echart`, ...) · `componentTable.js` (table helpers) · `fastproject.js` (bootstrapper).
-
-```js
-// Toast thông báo
-Vue.$toast.success("Lưu thành công", { position: "top" });
-Vue.$toast.error("Có lỗi xảy ra", { position: "top" });
-
-// Dialog xác nhận (FUI wrapper — dùng hàm confirm() từ defaultfunction.js)
-confirm({
-  title: "Xác nhận xóa",
-  message: "Bạn có chắc muốn xóa không?",
-  action: function () {
-    /* xử lý khi OK */
-  },
-});
-
-// Dialog thông báo (FUI wrapper)
-showMessage({ title: "Thông báo", message: "Đã lưu thành công" });
-
-// Lodash — dùng trong script.js / vueData
-_.find(vueData.list, { id: 5 });
-_.groupBy(vueData.data, "loai");
-_.sumBy(items, "soLuong");
-_.cloneDeep(vueData.formData);
-_.debounce(fn, 300);
-
-// Moment — format ngày
-moment(val).format("DD/MM/YYYY");
-moment(val).format("DD/MM/YYYY HH:mm");
-moment().subtract(7, "days").format("YYYY-MM-DD");
-
-// Numeral — format số
-numeral(value).format("0,0"); // 1,234,567
-numeral(value).format("0,0.0"); // 1,234,567.8
-numeral(_.sumBy(items, key)).format("0,0"); // tổng cột trong bảng
-```
-
-> `f-*` needing extra JS/CSS: [component-quickref.md](component-quickref.md) §Components needing JS/CSS imports.
-
-## 1) scripts/fastproject.js — V3: fastproject-3.0.js
-
-Core engine: init module, build DOM from `module.json.controls`, run actions, map data, call APIs.
-
-Init: `$(document).ready` → `loadModuleInfo()` (merge config, read URL/user info) → `createModuleDom()` (`runAction($moduleUI.data)` + render controls) → `createWatch()` (watchers from `$moduleUI.watch`) → Vue mounts.
-
-| Line | Function                                       | Purpose                                                                                                                                        |
-| ---: | ---------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------- |
-|   65 | `buildParamURL()`                              | Query string → `vueData`                                                                                                                       |
-|   77 | `loadModuleInfo()`                             | Load project/module config, user info                                                                                                          |
-|  122 | `createModuleDom()`                            | Main layout, render controls, init watch                                                                                                       |
-|  210 | `buildModuleUI(controlsList, target)`          | Recursive UI from JSON controls                                                                                                                |
-|  233 | `buildControl(controlsList, flex, target)`     | One control: attr/event/import                                                                                                                 |
-|  299 | `addImport(importArr)`                         | Load control script/css deps                                                                                                                   |
-|  310 | `createWatch_Data(obj)`                        | Init watch data                                                                                                                                |
-|  320 | `createWatch(obj)`                             | Attach watchers from `watch`                                                                                                                   |
-|  345 | `buildVisualValForObj(controlAttr, target)`    | Bind dynamic values into attrs                                                                                                                 |
-|  373 | `runAction(obj, includeData)`                  | Action engine (object/array)                                                                                                                   |
-|  407 | `vueAction(objAction, includeData, callBack)`  | One action (IF/API/CALL/EXE/...)                                                                                                               |
-|  485 | `mapData(map, target, src, includeData)`       | Map data between objects                                                                                                                       |
-|  527 | `defProp(obj)`                                 | Normalize object props for context                                                                                                             |
-|  537 | `bindData(obj)`                                | Resolve dynamic string/object                                                                                                                  |
-|  542 | `getVueData(key, src)`                         | Value by path (`vueData.x.y`, `item.x`, template...). Literal forcing is for `IN` mapping; static props without `:` are already plain strings. |
-|  578 | `setValue(target, key, value, srcData, index)` | Set by path on object/window                                                                                                                   |
-|  612 | `bindDataToString(str, data)`                  | Resolve template string                                                                                                                        |
-|  619 | `templateCompiled(str, data)`                  | Compile lodash-style template                                                                                                                  |
-|  624 | `getWindowData(value)`                         | Read window/iframe context                                                                                                                     |
-|  638 | `setWindowData(key, value)`                    | Write window/iframe context                                                                                                                    |
-|  657 | `runFunction(obj, callback)`                   | Call declared JS function                                                                                                                      |
-|  665 | `tableActionEvent(ctrl)`                       | Table/control action events                                                                                                                    |
-|  687 | `callAPI(objApi, callBack, includeData)`       | API call (`IN/OUT/CALLBACK`)                                                                                                                   |
-|  743 | `loginFUN()`                                   | Login/redirect                                                                                                                                 |
-|  761 | `errorMess(code, message)`                     | Standard error display                                                                                                                         |
-
-## 2) scripts/defaultfunction.js — V3: defaultfunction-3.0.js
-
-Shared utilities (router, messaging, transform, AJAX, export, auth, websocket).
-
-| Line | Function                                               | Purpose                               |
-| ---: | ------------------------------------------------------ | ------------------------------------- |
-|   35 | `extractHostname(url)`                                 | Hostname                              |
-|   53 | `getDomainWithoutSubdomain(url)`                       | Root domain                           |
-|   62 | `loadScripts(scriptsArray, callbackFunc)`              | Load scripts, then callback           |
-|   75 | `pushRouter(router)`                                   | Push browser history                  |
-|   82 | `CALL(obj, includeData)`                               | Alias of `runAction(...)`             |
-|   86 | `windowSendMessage(window, cmd, data)`                 | `postMessage` to parent/window/iframe |
-|  100 | `appCommand(cmdData)`                                  | Command to native wrapper (RN/WebKit) |
-|  106 | `buildHeader(obj, mapCol)`                             | Table headers from data/column map    |
-|  130 | `fillData(obj)`                                        | Map source → destination              |
-|  162 | `groupBy(arrayObj, groupField, sumArr)`                | Group + sum columns                   |
-|  188 | `chartDataBuild(obj)`                                  | Generic chart data                    |
-|  219 | `chartQABuild(obj)`                                    | QA/report chart data                  |
-|  239 | `confirm(obj)`                                         | Confirm dialog                        |
-|  259 | `showMessage(obj)`                                     | Message dialog/toast                  |
-|  283 | `rightTest(rightObject)`                               | Check user rights                     |
-|  301 | `openWindow(obj)`                                      | FUI popup/dialog window               |
-|  326 | `redirect(obj, query)`                                 | Navigate by URL/config                |
-|  339 | `reload()`                                             | Reload page                           |
-|  343 | `findInArray(obj)`                                     | Find by value condition               |
-|  348 | `fixURL(url)`                                          | Normalize URL (prepend API domain)    |
-|  354 | `stringAttrToJson(str, removeVueEvent)`                | HTML attr string → JSON               |
-|  371 | `json_data_parse(obj, level)`                          | Parse `json_data:` fields recursively |
-|  407 | `ajaxCALL(URL, DATA, callBack, errorCallBack, header)` | AJAX POST                             |
-|  449 | `capacityText(numb)`                                   | Bytes → KB/MB                         |
-|  454 | `generateID()`                                         | Random ID                             |
-|  467 | `printPDF(obj)`                                        | PDF via `pdfMake`                     |
-|  499 | `colorLib(color)`                                      | Color utils                           |
-|  645 | `transparentize(value, opacity)`                       | Alpha color                           |
-|  650 | `jsonToExcel(Obj)`                                     | JSON → Excel                          |
-|  746 | `copyToClipboard(textToCopy)`                          | Clipboard                             |
-|  770 | `fileNameClear(fname)`                                 | Sanitize file name                    |
-|  775 | `hashCode(s)`                                          | String hash                           |
-|  785 | `getCookie(cname)`                                     | Read cookie                           |
-|  800 | `setCookie(name, value, days, domain)`                 | Set cookie                            |
-|  814 | `logout(cookiesName, domain, url)`                     | Clear cookies, logout/redirect        |
-|  827 | `webSocketJoinGroup(groupObj, timeout, callBackFunc)`  | Join WS group                         |
-|  851 | `webSocketConnection(wsURL, WS, wsState)`              | Create/keep WS connection             |
-|  892 | `webSocket_Send(obj)`                                  | Send over WS                          |
-
-> **Real-time (SignalR)** — required imports, `data[]` group declaration, send/receive, full `module.json`: [websocket-realtime.md](websocket-realtime.md).
-
-## 3) scripts/component.js — V3: component-3.0.js
-
-Base `f-*` and business components. Also holds `defaultControlAttr` (default attrs per `el`). Many need external imports (CKEditor, pdfMake, cropper, chart, ...).
-
-| Line | Component         | Purpose                                                                                                                                |
-| ---: | ----------------- | -------------------------------------------------------------------------------------------------------------------------------------- |
-|  304 | `f-label`         | Formatted label/text                                                                                                                   |
-|  319 | `f-box`           | Simple box/card                                                                                                                        |
-|  377 | `f-header`        | Light section header                                                                                                                   |
-|  386 | `f-title`         | Title                                                                                                                                  |
-|  395 | `f-radiobox`      | Radio group                                                                                                                            |
-|  425 | `f-menu`          | Menu/navigation                                                                                                                        |
-|  472 | `f-search`        | Search input                                                                                                                           |
-|  536 | `f-button`        | Button                                                                                                                                 |
-|  607 | `f-slider`        | Slider                                                                                                                                 |
-|  618 | `f-file-upload`   | File upload                                                                                                                            |
-|  768 | `f-qrcode`        | QR render                                                                                                                              |
-|  843 | `f-qrcode-reader` | QR scan                                                                                                                                |
-|  914 | `f-image-update`  | Crop/rotate/upload image dialog                                                                                                        |
-| 1161 | `f-date`          | Date picker                                                                                                                            |
-| 1434 | `f-time`          | Time picker                                                                                                                            |
-| 1639 | `f-time-counter`  | Counter/countdown/clock                                                                                                                |
-| 1775 | `fp-profile`      | Header profile menu                                                                                                                    |
-| 2020 | `header-bar`      | Main header bar                                                                                                                        |
-| 2277 | `f-chart`         | Legacy Chart.js (props `data`/`type`/`options`). Use `f-echart` — [components-echart.md](components-echart.md)                         |
-| 2389 | `f-window`        | Dynamic window/dialog host                                                                                                             |
-| 2453 | `f-editor`        | WYSIWYG (CKEditor)                                                                                                                     |
-| 2591 | `f-editor-dialog` | Fullscreen editor dialog                                                                                                               |
-| 2687 | `f-dialog`        | Dialog built from `controls`                                                                                                           |
-| 2899 | `f-pdfmake`       | PDF viewer via `printPDF`                                                                                                              |
-| 2934 | `f-excel-reader`  | Excel/CSV → object array: sheet pick, skip N rows, key names, size limit; XLSX lazy-loaded. [components-input.md](components-input.md) |
-
-## 4) scripts/componentTable.js — V3: componentTable-3.0.js (§4b)
-
-| Line | Component    | Purpose                                                                                                                                                                                           |
-| ---: | ------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-|    1 | `f-table`    | The only data table (CRUD and readonly): search, select, CRUD (`update-api`, `update-form`), export, auto headers when `headers` omitted, sum row/line via `sumFormat` (object/string), `:height` |
-|  416 | `t-html`     | HTML cell                                                                                                                                                                                         |
-|  420 | `t-label`    | Text cell                                                                                                                                                                                         |
-|  424 | `t-num`      | Number cell                                                                                                                                                                                       |
-|  442 | `t-time`     | Time cell                                                                                                                                                                                         |
-|  452 | `t-boolean`  | Bool icon/color                                                                                                                                                                                   |
-|  473 | `t-check`    | Checkbox cell                                                                                                                                                                                     |
-|  501 | `t-text`     | Inline text input                                                                                                                                                                                 |
-|  523 | `t-select`   | Inline select                                                                                                                                                                                     |
-|  544 | `t-combobox` | Inline combobox                                                                                                                                                                                   |
-|  616 | `t-menu`     | Action menu cell                                                                                                                                                                                  |
-|  654 | `t-link`     | Link / open-dialog cell                                                                                                                                                                           |
-|  678 | `t-button`   | Action button cell                                                                                                                                                                                |
-
-**`f-table` `:height`** — computed `heightNum`/`tableHeight` + `updateFillHeight()`: empty = grows with rows; `<=0` = measures real `getBoundingClientRect()`, fills to screen bottom leaving `abs(n)` px (`window.resize` listener); `>0` = fixed px.
-
-## 4b) scripts/componentTable-3.0.js
-
-**V3** (Vue 3 + Vuetify 3) of the same components, PascalCase names (`FTable`, `THtml`, `TNum`, ...). Module framework (`_moduleInfo.json`) picks the file.
-
-When editing **both** files:
-
-- Lifecycle: V3 `beforeUnmount` (components declare both to run on V2 and V3).
-- Classes: V3 `text-primary` / `text-subtitle-1` / `text-caption` vs V2 `primary--text` / `subtitle-1` / `caption`; `v-btn outlined` (V2) → `variant="outlined"` (V3).
-- `v-data-table` scroll wrapper: V2 `.v-data-table__wrapper`, V3 `.v-table__wrapper`.
-- Names bound directly in a V3 template **must not start with `_`** (proxy `has` trap) — use a suffix, e.g. `hideDefaultFooter_cacl`.
-- `f-table` `headers`: V2 `{ text, value }`, V3 `{ title, key }`; slot `body.append` gets `{ headers }` (V2) / `{ columns }` (V3).
-
-Verify V3: `node test/v3-table-harness.mjs [sum|fill|auto]` — real V3 framework from `https://fui.vn` in headless chromium with **local `componentTable-3.0.js` swapped in**; APIs blocked + mocked. Prints JS errors/`[Vue warn]`, real height, sum row, AG Grid cells; screenshots `test/v3-{mode}.png`.
-
-## 5) scripts/fsheet.js — shared V2 + V3
-
-Whole `f-sheet` in **one file** for V2 and V3 (declares both `beforeDestroy` and `beforeUnmount`); not split by framework.
-
-Required imports (from `component.js` `defaultControlAttr["f-sheet"].import`), **in this order**:
-
-```
-/include/ag-grid/ag-grid-community.min.js
-/include/ag-grid/fsheet.js
-```
-
-| Content                                                                                                  | Notes                                                                                                                                                                 |
-| -------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `Vue.component('FSheet', {...})`                                                                         | Main component — props/columns/API: [fsheet.md](fsheet.md)                                                                                                            |
-| 4 cell renderers (`fsHtmlCellRenderer`/`fsLinkCellRenderer`/`fsButtonCellRenderer`/`fsMenuCellRenderer`) | = `f-table`'s `t-html`/`t-link`/`t-button`/`t-menu` — [fsheet.md](fsheet.md)                                                                                          |
-| Custom range selection + fill handle + TSV clipboard                                                     | AG Grid Community lacks Cell Selection (Enterprise), so f-sheet drives it and applies AG Grid classes (`.ag-cell-range-*`, `.ag-selection-fill-*`, `.ag-fill-handle`) |
-
-`:height` has the same 3 modes (auto-grow / fill to bottom / fixed px) — [fsheet.md](fsheet.md) §`:height`.
-
-Verify `fsheet.js`: `fui component preview` (isolated `f-sheet` with sample data, no push) or `fui module simulate --render` (in a real module) — both real browser, no extra harness.
-
-## 6) Lookup by task
-
-> Files listed are V2; for **V3** use the matching `-3.0` file.
-
-| Task                                        | Open first                              | Look at                                                                                   |
-| ------------------------------------------- | --------------------------------------- | ----------------------------------------------------------------------------------------- |
-| Layout renders wrong                        | `fastproject.js`                        | `buildModuleUI`, `buildControl`, `bindData`                                               |
-| Action not running / wrong branch           | `fastproject.js`                        | `runAction`, `vueAction`, `mapData`, `getVueData`                                         |
-| API returns no `OUT`                        | `fastproject.js` + `defaultfunction.js` | `callAPI`, `fixURL`, `ajaxCALL`                                                           |
-| Table Add/Edit/Delete fails                 | `componentTable.js`                     | `f-table` + `update-api`, `update-form`                                                   |
-| Dynamic dialog not binding                  | `component.js`                          | `f-dialog`, `buildModuleUI` (fastproject)                                                 |
-| Image upload/crop/save                      | `component.js`                          | `f-image-update`                                                                          |
-| Excel/PDF export                            | `defaultfunction.js` + `component.js`   | `jsonToExcel`, `printPDF`, `f-pdfmake`, `f-excel-reader`                                  |
-| Login/rights/menu                           | `fastproject.js` + `defaultfunction.js` | `loadModuleInfo`, `loginFUN`, `rightTest`                                                 |
-| `f-sheet` missing / "FSheet is not defined" | `fsheet.js` (shared V2+V3)              | Missing import — [component-quickref.md](component-quickref.md) or [fsheet.md](fsheet.md) |