4 commits

Author	SHA1	Message	Date
jtricerolph	be670f724d	Enforce granular capabilities across cashup ... Backend (server-side enforcement, not just UI): - auth.js: read caps from JWT; hasCap() + requireCap() helpers; legacy-token fallback (full access minus settings) so existing sessions keep working until re-login - finalise: submit final, delete draft, bulk-finalise, attachments - reports: multiday report, cash summary, debtors - floats: float management + safe count - settings: settings mutations (was is_admin) - count: draft save, newbook fetch Frontend: - can(user, cap) helper; User.caps from /verify - Nav items, routes and actions (Submit Final, delete, bulk-finalise) gated on capabilities; non-finalisers see a draft-only hint Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-02 14:19:30 +00:00
jtricerolph	4ea5238e62	Fix cash summary quantity bug; add Safe Count as own nav item ... - Cash summary: derive total_quantity from total_amount/denomination_value so value_entered rows are counted (previously SUM(quantity) returned NULL for those rows) - Safe Count: moved safe_cash out of Float Management tabs into its own /safe/* route with a dedicated sidebar entry (Vault icon) - FloatManagement now only shows Petty Cash and Change Tin tabs Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-07-01 21:36:19 +00:00
jtricerolph	577e98e6b1	Fix TypeScript compile errors blocking Docker build ... - Add vite-env.d.ts for import.meta.env type support - Remove unused imports: ChevronRight, useCallback (x2), today - Silence unused attachments state read (keep setter for future use) - Fix FloatManagement changeTinTargets reducer: drop unused k, fix v type Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-07-01 20:11:01 +00:00
jtricerolph	63a5a72fa3	Wire Newbook credentials to settings service	2026-07-01 19:33:16 +00:00